Email: 188 Autolearn: 0 AvgScore: 4.08 AvgScanTime: 2.88 sec Spam: 53 Autolearn: 0 AvgScore: 14.09 AvgScanTime: 3.02 sec Ham: 135 Autolearn: 0 AvgScore: 0.15 AvgScanTime: 2.83 sec Time Spent Running SA: 0.15 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 47 82.98 88.68 80.74 2 T_SCC_BODY_TEXT_LINE 46 81.38 86.79 79.26 3 DKIM_SIGNED 45 79.79 84.91 77.78 4 DKIM_VALID 38 68.09 71.70 66.67 5 XM_DK_Pass 38 68.09 71.70 66.67 6 XM_B_Unicode 35 62.77 66.04 61.48 7 RELAYCOUNTRY_US 34 73.40 64.15 77.04 8 XM_B_SpammyWords 34 46.81 64.15 40.00 9 DCC_CHECK_NEGATIVE 31 77.13 58.49 84.44 10 DKIM_VALID_AU 30 53.72 56.60 52.59 11 XMListUnsubscribeExists 26 39.89 49.06 36.30 12 BAYES_50 22 53.72 41.51 58.52 13 RELAYCOUNTRY_META 22 17.55 41.51 8.15 14 DCC_CHECK 22 22.87 41.51 15.56 15 XM_B_Unicode3 19 30.85 35.85 28.89 16 LOC_TINY_FONT_1 18 25.53 33.96 22.22 17 UNTRUSTED_Relay 17 13.30 32.08 5.93 18 BAYES_99 16 11.17 30.19 3.70 19 MIME_HTML_ONLY 16 22.87 30.19 20.00 20 DKIM_VALID_EF 16 42.02 30.19 46.67 21 TR_XM_SpammyRelay 14 8.51 26.42 1.48 22 RCVD_IN_MSPIKE_H2 14 26.60 26.42 26.67 23 XM_B_SpammyWords2 14 18.62 26.42 15.56 24 XMSubLong 14 28.72 26.42 29.63 25 BAYES_999 13 9.04 24.53 2.96 26 XM_B_Unsub 13 17.02 24.53 14.07 27 XM_Body_Dirty_Words 13 9.57 24.53 3.70 28 TR_XM_BayesUnsub 13 15.96 24.53 12.59 29 XM_DK_Undo_02 13 9.57 24.53 3.70 30 HTML_FONT_LOW_CONTRAST 12 30.85 22.64 34.07 31 FVGT_m_MULTI_ODD 12 22.34 22.64 22.22 32 T_TM2_M_HEADER_IN_MSG 10 18.62 18.87 18.52 33 XM_Multi_Part_URI 9 15.96 16.98 15.56 34 TR_XM_DK_Unsub 9 20.21 16.98 21.48 35 TR_XM_DKIM_Undo 9 4.79 16.98 0.00 36 TR_XM_SpammyWords5 9 4.79 16.98 0.00 37 MIME_HTML_MOSTLY 8 8.51 15.09 5.93 38 XM_UB50 7 6.91 13.21 4.44 39 DKIM_INVALID 7 11.70 13.21 11.11 40 XMNumbers 7 8.51 13.21 6.67 41 XM_B_SpammyWords3 7 6.91 13.21 4.44 42 RCVD_IN_MSPIKE_WL 7 25.53 13.21 30.37 43 MPART_ALT_DIFF 7 6.91 13.21 4.44 44 UNPARSEABLE_RELAY 7 21.28 13.21 24.44 45 URI_NOVOWEL 6 4.26 11.32 1.48 46 XMSexyCombo_05 6 3.72 11.32 0.74 47 TR_XM_INV_DKIM 6 3.19 11.32 0.00 48 XM_DIRTYINTL 6 3.72 11.32 0.74 49 XM_UncommonTLD01 6 12.23 11.32 12.59 50 HTML_IMAGE_RATIO_06 6 4.79 11.32 2.22 51 RELAYCOUNTRY_IN 6 3.19 11.32 0.00 52 BAYES_80 6 6.91 11.32 5.19 53 SpammyFromTLD_01 6 7.45 11.32 5.93 54 T_KAM_HTML_FONT_INVALID 5 12.23 9.43 13.33 55 TR_DCC_Bayes_99 5 2.66 9.43 0.00 56 XM_B_SpammyTLD 5 3.19 9.43 0.74 57 BOTNET_IPINHOSTNAME 5 5.85 9.43 4.44 58 BOTNET 5 3.19 9.43 0.74 59 XM_B_Investor 5 2.66 9.43 0.00 60 TR_XM_NoHeaderRelay 4 3.19 7.55 1.48 61 SCC_BODY_URI_ONLY 4 4.79 7.55 3.70 62 SpammyFromTLD_02 4 3.19 7.55 1.48 63 RCVD_IN_PSBL 4 2.66 7.55 0.74 64 XM_B_SpammyWords4 4 2.13 7.55 0.00 65 RCVD_IN_MSPIKE_BL 4 2.13 7.55 0.00 66 XMSubMetaSx_00 4 3.19 7.55 1.48 67 RCVD_IN_MSPIKE_H5 4 13.30 7.55 15.56 68 SUBJ_ALL_CAPS 4 2.66 7.55 0.74 69 LOTS_OF_MONEY 4 4.26 7.55 2.96 70 TR_XM_MSPIKECOMBO 4 2.13 7.55 0.00 71 LotsOfNums_01 4 4.79 7.55 3.70 72 TM2_M_URI_OPT_OUT 4 2.13 7.55 0.00 73 FSL_BULK_SIG 4 8.51 7.55 8.89 74 BAYES_60 4 13.83 7.55 16.30 75 XMBody_17 3 1.60 5.66 0.00 76 RCVD_IN_VALIDITY_RPBL 3 1.60 5.66 0.00 77 XM_H_PHPOS 3 1.60 5.66 0.00 78 TR_XM_FormFill2 3 1.60 5.66 0.00 79 TR_XM_PHPForged 3 1.60 5.66 0.00 80 XM_Evil_Numbers_Gen 3 8.51 5.66 9.63 81 XM_SPF_SoftFail 3 4.79 5.66 4.44 82 RELAYCOUNTRY_FR 3 2.13 5.66 0.74 83 XM_UB60 3 2.13 5.66 0.74 84 XMSubMetaSSxObfu_00 3 1.60 5.66 0.00 85 TR_Mismatch_TLD_02 3 1.60 5.66 0.00 86 DATE_IN_PAST_06_12 3 1.60 5.66 0.00 87 HTML_IMAGE_RATIO_04 3 5.85 5.66 5.93 88 TR_XM_PhishingBody 3 3.19 5.66 2.22 89 HTTPS_HTTP_MISMATCH 3 2.13 5.66 0.74 90 TooManyTo_001 3 9.04 5.66 10.37 91 XM_SendGrid 3 7.98 5.66 8.89 92 TR_XM_SpammyWords4 3 2.66 5.66 1.48 93 XM_UB99 3 1.60 5.66 0.00 94 TR_XM_PHPDW 3 1.60 5.66 0.00 95 XM_B_SEO 3 1.60 5.66 0.00 96 HTML_MIME_NO_HTML_TAG 2 3.72 3.77 3.70 97 DATE_IN_FUTURE_03_06 2 1.06 3.77 0.00 98 XM_S_SpammyWords 2 1.06 3.77 0.00 99 TooManyTo_002 2 6.91 3.77 8.15 100 TR_XM_UnparsRelay 2 4.79 3.77 5.19 101 TooManyTo_004 2 3.19 3.77 2.96 102 RELAYCOUNTRY_IT 2 1.60 3.77 0.74 103 TR_XM_Spammywords 2 1.06 3.77 0.00 104 XM_UB80 2 1.06 3.77 0.00 105 LONG_JUNK_URI 2 2.13 3.77 1.48 106 BOTNET_NORDNS 2 1.06 3.77 0.00 107 PHP_ORIG_SCRIPT 2 1.06 3.77 0.00 108 XM_URI_RBL 2 1.06 3.77 0.00 109 TooManyTo_003 2 5.85 3.77 6.67 110 TR_XM_FormFill 2 1.06 3.77 0.00 111 BAYES_95 2 2.66 3.77 2.22 112 RDNS_DYNAMIC 2 1.60 3.77 0.74 113 T_REMOTE_IMAGE 2 6.38 3.77 7.41 114 XMSexyCombo_01 2 1.06 3.77 0.00 115 T_FILL_THIS_FORM_SHORT 2 2.13 3.77 1.48 116 RELAYCOUNTRY_GB 2 1.60 3.77 0.74 117 RCVD_IN_MSPIKE_L4 2 1.06 3.77 0.00 118 DATE_IN_FUTURE_12_24 2 1.06 3.77 0.00 119 XM_UB999 2 1.06 3.77 0.00 120 MIME_QP_LONG_LINE 2 3.19 3.77 2.96 121 RCVD_IN_MSPIKE_H3 2 9.04 3.77 11.11 122 XMPhish08 2 1.06 3.77 0.00 123 IMPOTENCE 2 1.06 3.77 0.00 124 XM_OfRef6 2 1.06 3.77 0.00 125 TR_XM_InvalidRelay 2 1.06 3.77 0.00 126 TR_XM_SpammyWords3 1 0.53 1.89 0.00 127 XMSexyCombo_04 1 0.53 1.89 0.00 128 NUMERIC_HTTP_ADDR 1 0.53 1.89 0.00 129 BAYES_40 1 1.06 1.89 0.74 130 XM_DK_Undo_01 1 1.06 1.89 0.74 131 XM_B_Phish66 1 1.60 1.89 1.48 132 TR_MetaPhish_Combo_01 1 1.60 1.89 1.48 133 RCVD_IN_IADB_LISTED 1 3.72 1.89 4.44 134 XMSubPhish11 1 0.53 1.89 0.00 135 XM_Body_Dirty_Words_01 1 0.53 1.89 0.00 136 XM_PDF 1 3.72 1.89 4.44 137 NOT_SPAM 1 0.53 1.89 0.00 138 XMBody_80 1 0.53 1.89 0.00 139 XM_Nigeria_01 1 0.53 1.89 0.00 140 KHOP_HELO_FCRDNS 1 1.06 1.89 0.74 141 HDRS_MISSP 1 0.53 1.89 0.00 142 HTML_IMAGE_ONLY_04 1 0.53 1.89 0.00 143 RELAYCOUNTRY_DE 1 1.06 1.89 0.74 144 FSL_HELO_NON_FQDN_1 1 0.53 1.89 0.00 145 XM_H_PHPMailer 1 1.60 1.89 1.48 146 XMSubMetaSSx_00 1 0.53 1.89 0.00 147 XMBody_82 1 0.53 1.89 0.00 148 MONEY_BACK 1 0.53 1.89 0.00 149 XM_B_Unsub2 1 1.60 1.89 1.48 150 TR_XM_SEO4 1 0.53 1.89 0.00 151 HELO_NODOT 1 0.53 1.89 0.00 152 RCVD_IN_MSPIKE_L5 1 0.53 1.89 0.00 153 XMSubject_70 1 0.53 1.89 0.00 154 RAND_HEADER_MANY 1 0.53 1.89 0.00 155 RCVD_IN_RP_RNBL 1 0.53 1.89 0.00 156 TR_XM_SB_Phish 1 0.53 1.89 0.00 157 XMSubject_32 1 0.53 1.89 0.00 158 XMFrmHeader_28 1 0.53 1.89 0.00 159 TR_XM_DK_SendGrid 1 3.19 1.89 3.70 160 TR_XM_Undi_Recip11 1 1.06 1.89 0.74 161 HTML_TITLE_SUBJ_DIFF 1 0.53 1.89 0.00 162 XM_Sft_Brands_C01 1 0.53 1.89 0.00 163 RCVD_IN_IADB_SPF 1 3.72 1.89 4.44 164 DYN_RDNS_AND_INLINE_IMAGE 1 0.53 1.89 0.00 165 DATE_IN_FUTURE_06_12 1 0.53 1.89 0.00 166 XMSubMetaSSx_01 1 0.53 1.89 0.00 167 XM_H_PHPOS_M 1 0.53 1.89 0.00 168 RELAYCOUNTRY_AR 1 0.53 1.89 0.00 169 RELAYCOUNTRY_TR 1 0.53 1.89 0.00 170 RCVD_IN_IADB_SENDERID 1 3.72 1.89 4.44 171 MIME_CHARSET_FARAWAY 1 1.06 1.89 0.74 172 URIBL_DBL_ABUSE_SPAM 1 0.53 1.89 0.00 173 XM_B_Crypto 1 0.53 1.89 0.00 174 HELO_NO_DOMAIN 1 0.53 1.89 0.00 175 RCVD_IN_BL_SPAMCOP_NET 1 0.53 1.89 0.00 176 XMStockSpam_06 1 0.53 1.89 0.00 177 RELAYCOUNTRY_RU 1 0.53 1.89 0.00 178 OBFU_TEXT_ATTACH 1 0.53 1.89 0.00 179 XMSubject_78 1 0.53 1.89 0.00 180 TR_XM_SpammyWords2 1 0.53 1.89 0.00 181 PDS_OTHER_BAD_TLD 1 0.53 1.89 0.00 182 RELAYCOUNTRY_AT 1 1.06 1.89 0.74 183 BAYES_20 1 2.13 1.89 2.22 184 DIET_1 1 0.53 1.89 0.00 185 RCVD_IN_VALIDITY_SAFE 1 4.26 1.89 5.19 186 RELAYCOUNTRY_FI 1 0.53 1.89 0.00 187 TR_Caps_n_Bayes_99 1 0.53 1.89 0.00 188 FROM_EXCESS_BASE64 1 0.53 1.89 0.00 189 CHARSET_FARAWAY_HEADER 1 1.06 1.89 0.74 190 XMBody_90 1 0.53 1.89 0.00 191 NORMAL_HTTP_TO_IP 1 0.53 1.89 0.00 192 RELAYCOUNTRY_IR 1 0.53 1.89 0.00 193 HTML_IMAGE_RATIO_08 1 1.06 1.89 0.74 194 BAYES_05 1 2.66 1.89 2.96 195 XMCapTrack 1 1.06 1.89 0.74 196 HTML_IMAGE_RATIO_02 1 2.13 1.89 2.22 197 XM_Dr_From 1 0.53 1.89 0.00 198 MONEY_FRAUD_5 1 0.53 1.89 0.00 199 XM_HighProb1 1 0.53 1.89 0.00 200 ADVANCE_FEE_3_NEW_MONEY 1 0.53 1.89 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 114 77.13 58.49 84.44 2 HTML_MESSAGE 109 82.98 88.68 80.74 3 T_SCC_BODY_TEXT_LINE 107 81.38 86.79 79.26 4 DKIM_SIGNED 105 79.79 84.91 77.78 5 RELAYCOUNTRY_US 104 73.40 64.15 77.04 6 DKIM_VALID 90 68.09 71.70 66.67 7 XM_DK_Pass 90 68.09 71.70 66.67 8 XM_B_Unicode 83 62.77 66.04 61.48 9 BAYES_50 79 53.72 41.51 58.52 10 DKIM_VALID_AU 71 53.72 56.60 52.59 11 DKIM_VALID_EF 63 42.02 30.19 46.67 12 XM_B_SpammyWords 54 46.81 64.15 40.00 13 XMListUnsubscribeExists 49 39.89 49.06 36.30 14 HTML_FONT_LOW_CONTRAST 46 30.85 22.64 34.07 15 RCVD_IN_MSPIKE_WL 41 25.53 13.21 30.37 16 XMSubLong 40 28.72 26.42 29.63 17 XM_B_Unicode3 39 30.85 35.85 28.89 18 RCVD_IN_MSPIKE_H2 36 26.60 26.42 26.67 19 UNPARSEABLE_RELAY 33 21.28 13.21 24.44 20 FVGT_m_MULTI_ODD 30 22.34 22.64 22.22 21 LOC_TINY_FONT_1 30 25.53 33.96 22.22 22 TR_XM_DK_Unsub 29 20.21 16.98 21.48 23 MIME_HTML_ONLY 27 22.87 30.19 20.00 24 T_TM2_M_HEADER_IN_MSG 25 18.62 18.87 18.52 25 BAYES_60 22 13.83 7.55 16.30 26 RCVD_IN_MSPIKE_H5 21 13.30 7.55 15.56 27 XM_Multi_Part_URI 21 15.96 16.98 15.56 28 ALL_TRUSTED 21 11.17 0.00 15.56 29 XM_B_SpammyWords2 21 18.62 26.42 15.56 30 DCC_CHECK 21 22.87 41.51 15.56 31 XM_B_Unsub 19 17.02 24.53 14.07 32 T_KAM_HTML_FONT_INVALID 18 12.23 9.43 13.33 33 TR_XM_BayesUnsub 17 15.96 24.53 12.59 34 XM_UncommonTLD01 17 12.23 11.32 12.59 35 DKIM_INVALID 15 11.70 13.21 11.11 36 RCVD_IN_MSPIKE_H3 15 9.04 3.77 11.11 37 T_TooManySym_01 14 7.98 1.89 10.37 38 TooManyTo_001 14 9.04 5.66 10.37 39 XM_Evil_Numbers_Gen 13 8.51 5.66 9.63 40 T_TooManySym_02 13 6.91 0.00 9.63 41 FSL_BULK_SIG 12 8.51 7.55 8.89 42 XM_SendGrid 12 7.98 5.66 8.89 43 RELAYCOUNTRY_META 11 17.55 41.51 8.15 44 TooManyTo_002 11 6.91 3.77 8.15 45 BAYES_00 11 5.85 0.00 8.15 46 XM_DKIMWhitelistDomains 11 5.85 0.00 8.15 47 T_REMOTE_IMAGE 10 6.38 3.77 7.41 48 XMNumbers 9 8.51 13.21 6.67 49 IN_ZIMBRA_NJ_WHITELIST 9 4.79 0.00 6.67 50 TooManyTo_003 9 5.85 3.77 6.67 51 TR_XM_DK_Bayes1 8 4.26 0.00 5.93 52 MIME_HTML_MOSTLY 8 8.51 15.09 5.93 53 TR_XM_DK_Bayes2 8 4.26 0.00 5.93 54 UNTRUSTED_Relay 8 13.30 32.08 5.93 55 SpammyFromTLD_01 8 7.45 11.32 5.93 56 HTML_IMAGE_RATIO_04 8 5.85 5.66 5.93 57 TR_XM_DK_Bayes 8 4.26 0.00 5.93 58 HTML_IMAGE_ONLY_28 7 3.72 0.00 5.19 59 TR_XM_UnparsRelay 7 4.79 3.77 5.19 60 XM_H_Long_From01 7 4.26 1.89 5.19 61 BAYES_80 7 6.91 11.32 5.19 62 RCVD_IN_VALIDITY_CERTIFIED 7 4.26 1.89 5.19 63 RCVD_IN_VALIDITY_SAFE 7 4.26 1.89 5.19 64 HTML_IMAGE_ONLY_32 7 4.26 1.89 5.19 65 RCVD_IN_IADB_SPF 6 3.72 1.89 4.44 66 RCVD_IN_IADB_SENDERID 6 3.72 1.89 4.44 67 XM_SPF_SoftFail 6 4.79 5.66 4.44 68 XM_B_SpammyWords3 6 6.91 13.21 4.44 69 RCVD_IN_IADB_LISTED 6 3.72 1.89 4.44 70 XM_PDF 6 3.72 1.89 4.44 71 INVALID_MSGID 6 3.19 0.00 4.44 72 TVD_SPACE_RATIO 6 3.19 0.00 4.44 73 XM_UB50 6 6.91 13.21 4.44 74 MSGID_NOFQDN1 6 3.19 0.00 4.44 75 RCVD_IN_IADB_DK 6 3.72 1.89 4.44 76 TO_MALFORMED 6 3.72 1.89 4.44 77 T_TooManySym_03 6 3.19 0.00 4.44 78 BOTNET_IPINHOSTNAME 6 5.85 9.43 4.44 79 MPART_ALT_DIFF 6 6.91 13.21 4.44 80 TR_XM_DK_SendGrid 5 3.19 1.89 3.70 81 HTML_MIME_NO_HTML_TAG 5 3.72 3.77 3.70 82 SCC_BODY_URI_ONLY 5 4.79 7.55 3.70 83 BAYES_99 5 11.17 30.19 3.70 84 XM_Body_Dirty_Words 5 9.57 24.53 3.70 85 RCVD_IN_MSPIKE_H4 5 3.19 1.89 3.70 86 XM_CamelCaseFrm001 5 2.66 0.00 3.70 87 XM_DK_Undo_02 5 9.57 24.53 3.70 88 LotsOfNums_01 5 4.79 7.55 3.70 89 USER_IN_DEF_DKIM_WL 4 2.13 0.00 2.96 90 ANY_BOUNCE_MESSAGE 4 2.13 0.00 2.96 91 FVGT_m_MULTI_ODD_EMAIL 4 2.13 0.00 2.96 92 BAYES_999 4 9.04 24.53 2.96 93 TooManyTo_004 4 3.19 3.77 2.96 94 MIME_QP_LONG_LINE 4 3.19 3.77 2.96 95 MAILING_LIST_MULTI 4 2.13 0.00 2.96 96 LOTS_OF_MONEY 4 4.26 7.55 2.96 97 T_Symld_Words_02 4 2.13 0.00 2.96 98 BAYES_05 4 2.66 1.89 2.96 99 BOUNCE_MESSAGE 4 2.13 0.00 2.96 100 RCVD_IN_IADB_VOUCHED 4 2.13 0.00 2.96 101 TooManyTo_005 3 1.60 0.00 2.22 102 RCVD_IN_IADB_OPTIN_GT50 3 1.60 0.00 2.22 103 XMSubMetaD_00 3 1.60 0.00 2.22 104 HTML_IMAGE_RATIO_06 3 4.79 11.32 2.22 105 BAYES_95 3 2.66 3.77 2.22 106 TR_XM_PhishingBody 3 3.19 5.66 2.22 107 BAYES_20 3 2.13 1.89 2.22 108 HTML_IMAGE_RATIO_02 3 2.13 1.89 2.22 109 RCVD_IN_IADB_OPTIN 3 1.60 0.00 2.22 110 XMHTML_After_End 3 1.60 0.00 2.22 111 TR_XM_SpammyRelay 2 8.51 26.42 1.48 112 HTML_FONT_FACE_BAD 2 1.06 0.00 1.48 113 HTML_IMAGE_ONLY_24 2 1.06 0.00 1.48 114 XMBSHREFv2 2 1.06 0.00 1.48 115 XM_B_Unsub2 2 1.60 1.89 1.48 116 XMBody_95 2 1.06 0.00 1.48 117 XMSubMetaSx_00 2 3.19 7.55 1.48 118 LONG_JUNK_URI 2 2.13 3.77 1.48 119 XMBrknScrpt_02 2 1.06 0.00 1.48 120 XMDiploma_00 2 1.06 0.00 1.48 121 TR_MetaPhish_Combo_01 2 1.60 1.89 1.48 122 TR_XM_NoHeaderRelay 2 3.19 7.55 1.48 123 XMGappySubj_01 2 1.06 0.00 1.48 124 FROM_GOV_SPOOF 2 1.06 0.00 1.48 125 IN_HORDE_ADDRESS_BOOK 2 1.06 0.00 1.48 126 XM_ZIP 2 1.06 0.00 1.48 127 XM_B_Phish66 2 1.60 1.89 1.48 128 URI_NOVOWEL 2 4.26 11.32 1.48 129 XM_H_PHPMailer 2 1.60 1.89 1.48 130 SpammyFromTLD_02 2 3.19 7.55 1.48 131 TVD_RCVD_IP 2 1.06 0.00 1.48 132 RELAYCOUNTRY_BG 2 1.06 0.00 1.48 133 T_FILL_THIS_FORM_SHORT 2 2.13 3.77 1.48 134 TR_XM_SpammyWords4 2 2.66 5.66 1.48 135 IMG_ONLY_FM_DOM_INFO 2 1.06 0.00 1.48 136 XMSubMetaI_00 2 1.06 0.00 1.48 137 NO_DNS_FOR_FROM 2 1.06 0.00 1.48 138 TR_Symld_Words 2 1.06 0.00 1.48 139 RELAYCOUNTRY_IT 1 1.60 3.77 0.74 140 DRUGS_ERECTILE 1 0.53 0.00 0.74 141 XMSexyCombo_05 1 3.72 11.32 0.74 142 GMD_PDF_HORIZ 1 0.53 0.00 0.74 143 FORGED_GMAIL_RCVD 1 0.53 0.00 0.74 144 TR_XM_Undi_Recip11 1 1.06 1.89 0.74 145 CTE_8BIT_MISMATCH 1 0.53 0.00 0.74 146 HTML_TEXT_INVISIBLE_STYLE 1 0.53 0.00 0.74 147 RCVD_IN_PSBL 1 2.66 7.55 0.74 148 XMBdyGiftCard01 1 0.53 0.00 0.74 149 DKIM_ADSP_CUSTOM_MED 1 0.53 0.00 0.74 150 TR_Mismatch_TLD_01 1 0.53 0.00 0.74 151 XMPhish14 1 0.53 0.00 0.74 152 T_OBFU_PDF_ATTACH 1 0.53 0.00 0.74 153 SUBJ_ALL_CAPS 1 2.66 7.55 0.74 154 MIME_CHARSET_FARAWAY 1 1.06 1.89 0.74 155 XM_B_SpammyTLD 1 3.19 9.43 0.74 156 T_XMDrugObfuBody_00 1 0.53 0.00 0.74 157 XM_UB60 1 2.13 5.66 0.74 158 XM_DIRTYINTL 1 3.72 11.32 0.74 159 RELAYCOUNTRY_FR 1 2.13 5.66 0.74 160 XM_TLDProd2 1 0.53 0.00 0.74 161 XM_GoogleGroups 1 0.53 0.00 0.74 162 XMGppyBdWords 1 0.53 0.00 0.74 163 XM_ShortIntro_01 1 0.53 0.00 0.74 164 HK_RANDOM_ENVFROM 1 0.53 0.00 0.74 165 XM_H_Long_From02 1 0.53 0.00 0.74 166 BAYES_40 1 1.06 1.89 0.74 167 XM_DK_Undo_01 1 1.06 1.89 0.74 168 GMD_PDF_SQUARE 1 0.53 0.00 0.74 169 HTML_IMAGE_ONLY_08 1 0.53 0.00 0.74 170 XM_H_Trusted_IP 1 0.53 0.00 0.74 171 KHOP_HELO_FCRDNS 1 1.06 1.89 0.74 172 TM2_M_VERY_LONG_WORD 1 0.53 0.00 0.74 173 WEIRD_PORT 1 0.53 0.00 0.74 174 RELAYCOUNTRY_DE 1 1.06 1.89 0.74 175 TR_XM_COVIDMETA4 1 0.53 0.00 0.74 176 XM_B_COPY_HTML 1 0.53 0.00 0.74 177 TO_EQ_FM_DOM_HTML_ONLY 1 0.53 0.00 0.74 178 MIME_BOUND_DIGITS_15 1 0.53 0.00 0.74 179 RELAYCOUNTRY_AU 1 1.06 1.89 0.74 180 STATIC_XPRIO_OLE 1 0.53 0.00 0.74 181 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.53 0.00 0.74 182 RELAYCOUNTRY_GB 1 1.60 3.77 0.74 183 RELAYCOUNTRY_NL 1 0.53 0.00 0.74 184 FROM_LOCAL_HEX 1 0.53 0.00 0.74 185 XM_ProductURIs 1 1.06 1.89 0.74 186 RELAYCOUNTRY_TW 1 0.53 0.00 0.74 187 XMStrtUSub 1 1.06 1.89 0.74 188 RELAYCOUNTRY_SG 1 0.53 0.00 0.74 189 XM_H_Undi_Recip 1 1.06 1.89 0.74 190 BOTNET 1 3.19 9.43 0.74 191 XM_S_SubURI 1 0.53 0.00 0.74 192 MSGID_FROM_MTA_HEADER 1 1.06 1.89 0.74 193 RDNS_DYNAMIC 1 1.60 3.77 0.74 194 HTML_TAG_BALANCE_BODY 1 0.53 0.00 0.74 195 NML_ADSP_CUSTOM_MED 1 0.53 0.00 0.74 196 RELAYCOUNTRY_AT 1 1.06 1.89 0.74 197 TR_XM_MaxWHORU 1 0.53 0.00 0.74 198 HTML_IMAGE_RATIO_08 1 1.06 1.89 0.74 199 XMCapTrack 1 1.06 1.89 0.74 200 XM_H_WindowsLiveMail 1 0.53 0.00 0.74 ----------------------------------------------------------------------