Email: 196 Autolearn: 0 AvgScore: 3.47 AvgScanTime: 5.42 sec Spam: 40 Autolearn: 0 AvgScore: 16.88 AvgScanTime: 5.25 sec Ham: 156 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 5.46 sec Time Spent Running SA: 0.29 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 37 75.51 92.50 71.15 2 T_SCC_BODY_TEXT_LINE 32 84.18 80.00 85.26 3 DCC_CHECK_NEGATIVE 31 79.59 77.50 80.13 4 DKIM_SIGNED 30 70.41 75.00 69.23 5 XM_B_Unicode 30 57.65 75.00 53.21 6 RELAYCOUNTRY_US 29 75.51 72.50 76.28 7 DKIM_VALID 25 63.78 62.50 64.10 8 XM_DK_Pass 25 64.29 62.50 64.74 9 DKIM_VALID_AU 21 53.57 52.50 53.85 10 XM_B_SpammyWords 19 33.16 47.50 29.49 11 XM_B_Unicode3 17 30.10 42.50 26.92 12 MIME_HTML_ONLY 15 28.06 37.50 25.64 13 XM_Body_Dirty_Words 15 12.24 37.50 5.77 14 RCVD_IN_MSPIKE_H2 15 31.63 37.50 30.13 15 BAYES_99 15 9.18 37.50 1.92 16 BAYES_50 15 58.16 37.50 63.46 17 XMListUnsubscribeExists 15 33.16 37.50 32.05 18 RELAYCOUNTRY_META 14 11.73 35.00 5.77 19 XMSubLong 14 28.06 35.00 26.28 20 XM_DK_Undo_02 13 8.16 32.50 1.92 21 DKIM_VALID_EF 13 38.78 32.50 40.38 22 BAYES_999 12 7.65 30.00 1.92 23 UNPARSEABLE_RELAY 11 18.37 27.50 16.03 24 UNTRUSTED_Relay 10 7.14 25.00 2.56 25 LOC_TINY_FONT_1 10 16.84 25.00 14.74 26 XMSexyCombo_05 10 5.61 25.00 0.64 27 TR_XM_BayesUnsub 9 10.20 22.50 7.05 28 HTML_FONT_LOW_CONTRAST 9 21.94 22.50 21.79 29 XM_B_Unsub 9 13.27 22.50 10.90 30 DCC_CHECK 9 20.41 22.50 19.87 31 TR_XM_DKIM_Undo 8 5.10 20.00 1.28 32 FVGT_m_MULTI_ODD 8 17.35 20.00 16.67 33 T_KAM_HTML_FONT_INVALID 8 12.24 20.00 10.26 34 XM_B_SpammyWords2 8 9.69 20.00 7.05 35 XM_SendGrid 6 9.18 15.00 7.69 36 TR_XM_DK_Unsub 6 15.31 15.00 15.38 37 TR_XM_UnparsRelay 6 5.10 15.00 2.56 38 XMSubMetaSx_00 6 7.14 15.00 5.13 39 XM_H_Long_From01 6 8.67 15.00 7.05 40 RCVD_IN_MSPIKE_BL 6 3.06 15.00 0.00 41 XM_B_SpammyWords3 6 5.10 15.00 2.56 42 TR_XM_PhishingBody 6 5.10 15.00 2.56 43 TR_XM_MSPIKECOMBO 6 3.06 15.00 0.00 44 XM_UncommonTLD01 6 8.67 15.00 7.05 45 TR_XM_DK_SendGrid 6 7.14 15.00 5.13 46 XM_B_Phish66 5 3.57 12.50 1.28 47 DKIM_INVALID 5 6.63 12.50 5.13 48 XM_Multi_Part_URI 5 17.86 12.50 19.23 49 XM_B_Investor 5 3.57 12.50 1.28 50 XMNumbers 5 8.16 12.50 7.05 51 FSL_BULK_SIG 5 8.16 12.50 7.05 52 RCVD_IN_PSBL 5 3.06 12.50 0.64 53 XM_DIRTYINTL 5 2.55 12.50 0.00 54 TR_XM_SpammyWords5 5 2.55 12.50 0.00 55 BOTNET 5 2.55 12.50 0.00 56 T_REMOTE_IMAGE 4 8.16 10.00 7.69 57 BOTNET_IPINHOSTNAME 4 5.10 10.00 3.85 58 TR_XM_SpammyRelay 4 4.59 10.00 3.21 59 KHOP_HELO_FCRDNS 4 3.06 10.00 1.28 60 BAYES_80 4 3.06 10.00 1.28 61 XMSexyCombo_01 4 2.55 10.00 0.64 62 RELAYCOUNTRY_CN 4 2.04 10.00 0.00 63 LOTS_OF_MONEY 4 5.10 10.00 3.85 64 XM_UB50 4 3.57 10.00 1.92 65 RCVD_IN_MSPIKE_L4 4 2.04 10.00 0.00 66 TR_XM_NoHeaderRelay 4 3.06 10.00 1.28 67 XMDateMe_00 4 2.04 10.00 0.00 68 PDS_OTHER_BAD_TLD 4 2.04 10.00 0.00 69 RCVD_IN_VALIDITY_RPBL 4 2.04 10.00 0.00 70 RCVD_IN_BL_SPAMCOP_NET 4 2.04 10.00 0.00 71 HTML_IMAGE_RATIO_06 3 2.55 7.50 1.28 72 TooManyTo_001 3 8.67 7.50 8.97 73 MIME_HTML_MOSTLY 3 3.06 7.50 1.92 74 BAYES_60 3 11.73 7.50 12.82 75 T_XMDrugObfuBody_08 3 2.55 7.50 1.28 76 XM_H_Undi_Recip 3 1.53 7.50 0.00 77 BOTNET_NORDNS 3 1.53 7.50 0.00 78 XMSubNoVowel 3 1.53 7.50 0.00 79 TR_XM_INV_DKIM 3 1.53 7.50 0.00 80 XM_URI_RBL 3 1.53 7.50 0.00 81 T_TM2_M_HEADER_IN_MSG 3 20.41 7.50 23.72 82 TR_XM_SpammyWords4 3 2.55 7.50 1.28 83 HELO_NODOT 3 1.53 7.50 0.00 84 XM_HighProb1 3 1.53 7.50 0.00 85 FSL_HELO_NON_FQDN_1 3 1.53 7.50 0.00 86 MPART_ALT_DIFF 3 3.57 7.50 2.56 87 HELO_LOCALHOST 3 1.53 7.50 0.00 88 FROM_SUSPICIOUS_NTLD 2 1.02 5.00 0.00 89 XM_OfRef6 2 1.53 5.00 0.64 90 LOADSA_MONEY_COMBO 2 1.02 5.00 0.00 91 XMSubEmpty 2 1.02 5.00 0.00 92 XM_DK_Undo_01 2 3.06 5.00 2.56 93 XMStockSpam_06 2 1.02 5.00 0.00 94 XM_B_SpammyTLD 2 3.06 5.00 2.56 95 XMNoVowels 2 2.55 5.00 1.92 96 TooManyTo_002 2 5.10 5.00 5.13 97 XM_UB60 2 1.02 5.00 0.00 98 XM_H_USPS_Spoof 2 1.02 5.00 0.00 99 XM_SPF_SoftFail 2 1.02 5.00 0.00 100 TR_Sbj_FN_Bdy 2 1.02 5.00 0.00 101 FROM_SUSPICIOUS_NTLD_FP 2 1.02 5.00 0.00 102 SpammyFromTLD_02 2 1.53 5.00 0.64 103 RCVD_IN_MSPIKE_WL 2 22.45 5.00 26.92 104 XMStrtUSub 2 6.12 5.00 6.41 105 TR_XM_SPAMCOP 2 1.02 5.00 0.00 106 TooManyTo_004 2 3.06 5.00 2.56 107 XMMailDelErr 2 1.02 5.00 0.00 108 URIBL_DBL_ABUSE_SPAM 2 1.02 5.00 0.00 109 RCVD_IN_MSPIKE_H4 2 3.06 5.00 2.56 110 TR_LOTS_OF_MONEY3 2 1.02 5.00 0.00 111 TooManyTo_003 2 3.57 5.00 3.21 112 FORGED_GMAIL_RCVD 2 1.02 5.00 0.00 113 XMSexyCombo_04 2 1.53 5.00 0.64 114 XM_CamelCaseFrm001 2 6.12 5.00 6.41 115 XMOemUri 2 1.02 5.00 0.00 116 HK_RANDOM_FROM 2 1.02 5.00 0.00 117 HK_RANDOM_ENVFROM 2 1.02 5.00 0.00 118 RCVD_IN_MSPIKE_L5 2 1.02 5.00 0.00 119 RELAYCOUNTRY_FR 2 1.02 5.00 0.00 120 TR_DCC_Bayes_99 2 1.02 5.00 0.00 121 TR_XM_SpammyWords2 2 1.02 5.00 0.00 122 NML_ADSP_CUSTOM_MED 2 1.53 5.00 0.64 123 URI_WP_HACKED 2 1.02 5.00 0.00 124 XM_UB99 2 1.02 5.00 0.00 125 XM_ProductURIs 2 1.53 5.00 0.64 126 XM_H_TOP 2 1.02 5.00 0.00 127 XPRIO 2 1.02 5.00 0.00 128 DKIM_ADSP_CUSTOM_MED 2 1.53 5.00 0.64 129 URI_TRY_3LD 1 1.02 2.50 0.64 130 XM_UCStrings02 1 0.51 2.50 0.00 131 HTML_IMAGE_RATIO_04 1 4.08 2.50 4.49 132 XM_GoogleGroups2 1 1.02 2.50 0.64 133 HDRS_MISSP 1 1.53 2.50 1.28 134 XM_B_Unsub2 1 1.53 2.50 1.28 135 UNDISC_MONEY 1 0.51 2.50 0.00 136 TR_XM_Undi_Recip5 1 0.51 2.50 0.00 137 TO_NO_BRKTS_FROM_MSSP 1 0.51 2.50 0.00 138 TR_LOTS_OF_MONEY1 1 0.51 2.50 0.00 139 FSL_NEW_HELO_USER 1 0.51 2.50 0.00 140 SCC_BODY_URI_ONLY 1 4.59 2.50 5.13 141 BAYES_95 1 2.55 2.50 2.56 142 RELAYCOUNTRY_NG 1 0.51 2.50 0.00 143 MAILING_LIST_MULTI 1 3.06 2.50 3.21 144 FSL_CTYPE_WIN1251 1 0.51 2.50 0.00 145 RELAYCOUNTRY_FI 1 0.51 2.50 0.00 146 OBFU_TEXT_ATTACH 1 0.51 2.50 0.00 147 IMPOTENCE 1 0.51 2.50 0.00 148 TO_NO_BRKTS_MSFT 1 0.51 2.50 0.00 149 T_FILL_THIS_FORM_SHORT 1 1.53 2.50 1.28 150 XM_XX_Yahoo 1 0.51 2.50 0.00 151 BAYES_40 1 2.04 2.50 1.92 152 NSL_RCVD_HELO_USER 1 0.51 2.50 0.00 153 MISSING_HEADERS 1 1.02 2.50 0.64 154 BAYES_20 1 3.57 2.50 3.85 155 XMPhish08 1 0.51 2.50 0.00 156 FORM_FRAUD_3 1 0.51 2.50 0.00 157 RELAYCOUNTRY_HR 1 0.51 2.50 0.00 158 XM_H_Long_From02 1 1.53 2.50 1.28 159 RELAYCOUNTRY_PL 1 0.51 2.50 0.00 160 XFER_LOTSA_MONEY 1 0.51 2.50 0.00 161 RELAYCOUNTRY_IN 1 0.51 2.50 0.00 162 DATE_IN_FUTURE_06_12 1 0.51 2.50 0.00 163 MONEY_FROM_MISSP 1 0.51 2.50 0.00 164 REPLYTO_WITHOUT_TO_CC 1 0.51 2.50 0.00 165 XM_Body_Obfu01 1 0.51 2.50 0.00 166 XM_GoogleGroups 1 3.06 2.50 3.21 167 LotsOfNums_01 1 4.59 2.50 5.13 168 ADVANCE_FEE_4_NEW_MONEY 1 0.51 2.50 0.00 169 FROM_MISSP_REPLYTO 1 0.51 2.50 0.00 170 XMFrmHeader_28 1 0.51 2.50 0.00 171 HTML_IMAGE_RATIO_08 1 1.53 2.50 1.28 172 XM_UB80 1 0.51 2.50 0.00 173 XMCapTrack 1 0.51 2.50 0.00 174 FROM_MISSP_EH_MATCH 1 0.51 2.50 0.00 175 TooManyTo_005 1 1.53 2.50 1.28 176 TR_XM_SB_Phish 1 4.59 2.50 5.13 177 TR_XM_InvalidRelay 1 0.51 2.50 0.00 178 NOT_SPAM 1 0.51 2.50 0.00 179 TR_MetaPhish_Combo_01 1 1.02 2.50 0.64 180 TR_XM_Undi_Recip6 1 0.51 2.50 0.00 181 MSGID_FROM_MTA_HEADER 1 0.51 2.50 0.00 182 SUBJ_DOLLARS 1 1.02 2.50 0.64 183 RELAYCOUNTRY_CL 1 0.51 2.50 0.00 184 FROM_MISSP_XPRIO 1 0.51 2.50 0.00 185 FROM_EXCESS_BASE64 1 0.51 2.50 0.00 186 XM_ShortIntro_01 1 0.51 2.50 0.00 187 FROM_MISSP_MSFT 1 0.51 2.50 0.00 188 PDS_RDNS_DYNAMIC_FP 1 0.51 2.50 0.00 189 TM2_M_OBFU_COMMENT 1 0.51 2.50 0.00 190 FORGED_MUA_OUTLOOK 1 0.51 2.50 0.00 191 TO_MALFORMED 1 4.59 2.50 5.13 192 MONEY_FORM_SHORT 1 0.51 2.50 0.00 193 RELAYCOUNTRY_AU 1 0.51 2.50 0.00 194 XMSubPhish11 1 4.59 2.50 5.13 195 TM2_M_HAS_BSLASH_URI 1 2.04 2.50 1.92 196 XM_UB999 1 0.51 2.50 0.00 197 HTML_IMAGE_ONLY_04 1 0.51 2.50 0.00 198 NORDNS_LOW_CONTRAST 1 0.51 2.50 0.00 199 RELAYCOUNTRY_VN 1 0.51 2.50 0.00 200 XMHTML_After_End 1 0.51 2.50 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 133 84.18 80.00 85.26 2 DCC_CHECK_NEGATIVE 125 79.59 77.50 80.13 3 RELAYCOUNTRY_US 119 75.51 72.50 76.28 4 HTML_MESSAGE 111 75.51 92.50 71.15 5 DKIM_SIGNED 108 70.41 75.00 69.23 6 XM_DK_Pass 101 64.29 62.50 64.74 7 DKIM_VALID 100 63.78 62.50 64.10 8 BAYES_50 99 58.16 37.50 63.46 9 DKIM_VALID_AU 84 53.57 52.50 53.85 10 XM_B_Unicode 83 57.65 75.00 53.21 11 DKIM_VALID_EF 63 38.78 32.50 40.38 12 XMListUnsubscribeExists 50 33.16 37.50 32.05 13 RCVD_IN_MSPIKE_H2 47 31.63 37.50 30.13 14 XM_B_SpammyWords 46 33.16 47.50 29.49 15 RCVD_IN_MSPIKE_WL 42 22.45 5.00 26.92 16 XM_B_Unicode3 42 30.10 42.50 26.92 17 XMSubLong 41 28.06 35.00 26.28 18 MIME_HTML_ONLY 40 28.06 37.50 25.64 19 T_TM2_M_HEADER_IN_MSG 37 20.41 7.50 23.72 20 HTML_FONT_LOW_CONTRAST 34 21.94 22.50 21.79 21 DCC_CHECK 31 20.41 22.50 19.87 22 XM_Multi_Part_URI 30 17.86 12.50 19.23 23 ALL_TRUSTED 30 15.31 0.00 19.23 24 FVGT_m_MULTI_ODD 26 17.35 20.00 16.67 25 UNPARSEABLE_RELAY 25 18.37 27.50 16.03 26 RCVD_IN_MSPIKE_H5 25 12.76 0.00 16.03 27 TR_XM_DK_Unsub 24 15.31 15.00 15.38 28 LOC_TINY_FONT_1 23 16.84 25.00 14.74 29 BAYES_60 20 11.73 7.50 12.82 30 T_TooManySym_01 19 9.69 0.00 12.18 31 T_TooManySym_02 18 9.18 0.00 11.54 32 BAYES_00 17 8.67 0.00 10.90 33 XM_B_Unsub 17 13.27 22.50 10.90 34 T_KAM_HTML_FONT_INVALID 16 12.24 20.00 10.26 35 TooManyTo_001 14 8.67 7.50 8.97 36 RCVD_IN_MSPIKE_H3 13 6.63 0.00 8.33 37 TR_XM_DK_Bayes 12 6.12 0.00 7.69 38 TR_XM_DK_Bayes2 12 6.12 0.00 7.69 39 XM_SendGrid 12 9.18 15.00 7.69 40 T_REMOTE_IMAGE 12 8.16 10.00 7.69 41 TR_XM_DK_Bayes1 12 6.12 0.00 7.69 42 TR_XM_BayesUnsub 11 10.20 22.50 7.05 43 XM_DKIMWhitelistDomains 11 5.61 0.00 7.05 44 XM_UncommonTLD01 11 8.67 15.00 7.05 45 XM_B_SpammyWords2 11 9.69 20.00 7.05 46 XM_H_Long_From01 11 8.67 15.00 7.05 47 XMNumbers 11 8.16 12.50 7.05 48 FSL_BULK_SIG 11 8.16 12.50 7.05 49 XMStrtUSub 10 6.12 5.00 6.41 50 XM_Evil_Numbers_Gen 10 5.61 2.50 6.41 51 TM2_M_URI_OPT_OUT 10 5.10 0.00 6.41 52 XM_CamelCaseFrm001 10 6.12 5.00 6.41 53 XM_Body_Dirty_Words 9 12.24 37.50 5.77 54 INVALID_MSGID 9 5.10 2.50 5.77 55 RELAYCOUNTRY_META 9 11.73 35.00 5.77 56 USER_IN_DEF_DKIM_WL 9 4.59 0.00 5.77 57 SCC_BODY_URI_ONLY 8 4.59 2.50 5.13 58 DKIM_INVALID 8 6.63 12.50 5.13 59 TooManyTo_002 8 5.10 5.00 5.13 60 MSGID_NOFQDN1 8 4.08 0.00 5.13 61 TR_XM_DK_SendGrid 8 7.14 15.00 5.13 62 TO_MALFORMED 8 4.59 2.50 5.13 63 XMSubPhish11 8 4.59 2.50 5.13 64 TR_XM_SB_Phish 8 4.59 2.50 5.13 65 XMSubMetaSx_00 8 7.14 15.00 5.13 66 LotsOfNums_01 8 4.59 2.50 5.13 67 IN_ZIMBRA_NJ_WHITELIST 7 3.57 0.00 4.49 68 TVD_SPACE_RATIO 7 3.57 0.00 4.49 69 HTML_IMAGE_RATIO_04 7 4.08 2.50 4.49 70 BAYES_20 6 3.57 2.50 3.85 71 ANY_BOUNCE_MESSAGE 6 3.06 0.00 3.85 72 BOUNCE_MESSAGE 6 3.06 0.00 3.85 73 T_TooManySym_03 6 3.06 0.00 3.85 74 BOTNET_IPINHOSTNAME 6 5.10 10.00 3.85 75 HTML_IMAGE_RATIO_02 6 3.06 0.00 3.85 76 HTML_IMAGE_ONLY_28 6 3.57 2.50 3.85 77 LOTS_OF_MONEY 6 5.10 10.00 3.85 78 MAILING_LIST_MULTI 5 3.06 2.50 3.21 79 TR_XM_SpammyRelay 5 4.59 10.00 3.21 80 HTML_FONT_FACE_BAD 5 2.55 0.00 3.21 81 TooManyTo_003 5 3.57 5.00 3.21 82 XM_GoogleGroups 5 3.06 2.50 3.21 83 TR_XM_UnparsRelay 4 5.10 15.00 2.56 84 XM_B_SpammyTLD 4 3.06 5.00 2.56 85 TVD_RCVD_IP 4 2.04 0.00 2.56 86 UNTRUSTED_Relay 4 7.14 25.00 2.56 87 BAYES_95 4 2.55 2.50 2.56 88 XM_DK_Undo_01 4 3.06 5.00 2.56 89 MPART_ALT_DIFF 4 3.57 7.50 2.56 90 FVGT_m_MULTI_ODD_EMAIL 4 2.04 0.00 2.56 91 XM_B_SpammyWords3 4 5.10 15.00 2.56 92 TR_XM_PhishingBody 4 5.10 15.00 2.56 93 XM_PDF 4 2.04 0.00 2.56 94 TooManyTo_004 4 3.06 5.00 2.56 95 T_XMDrugObfuBody_14 4 2.04 0.00 2.56 96 PLING_QUERY 4 2.04 0.00 2.56 97 RCVD_IN_MSPIKE_H4 4 3.06 5.00 2.56 98 XMSubMetaSxObfu_03 3 1.53 0.00 1.92 99 URIBL_DBL_SPAM 3 1.53 0.00 1.92 100 RELAYCOUNTRY_GB 3 1.53 0.00 1.92 101 BAYES_40 3 2.04 2.50 1.92 102 XM_DK_Undo_02 3 8.16 32.50 1.92 103 HTML_MIME_NO_HTML_TAG 3 1.53 0.00 1.92 104 XMNoVowels 3 2.55 5.00 1.92 105 MIME_HTML_MOSTLY 3 3.06 7.50 1.92 106 XM_H_Trusted_IP 3 1.53 0.00 1.92 107 MIME_QP_LONG_LINE 3 2.04 2.50 1.92 108 XM_B_Phish_Phrases 3 2.04 2.50 1.92 109 BAYES_999 3 7.65 30.00 1.92 110 RCVD_IN_VALIDITY_SAFE 3 1.53 0.00 1.92 111 TM2_M_HAS_BSLASH_URI 3 2.04 2.50 1.92 112 XM_UB50 3 3.57 10.00 1.92 113 SpammyFromTLD_01 3 1.53 0.00 1.92 114 SUBJ_ALL_CAPS 3 1.53 0.00 1.92 115 XMGappySubj_01 3 1.53 0.00 1.92 116 BAYES_99 3 9.18 37.50 1.92 117 XM_B_Investor 2 3.57 12.50 1.28 118 XM_H_Long_From02 2 1.53 2.50 1.28 119 MPART_ALT_DIFF_COUNT 2 1.02 0.00 1.28 120 BAYES_05 2 1.02 0.00 1.28 121 BAYES_80 2 3.06 10.00 1.28 122 NICE_REPLY_A 2 1.02 0.00 1.28 123 T_FILL_THIS_FORM_SHORT 2 1.53 2.50 1.28 124 T_XMDrugObfuBody_08 2 2.55 7.50 1.28 125 RELAYCOUNTRY_BR 2 1.02 0.00 1.28 126 KHOP_HELO_FCRDNS 2 3.06 10.00 1.28 127 SHORTENED_URL_SRC 2 1.02 0.00 1.28 128 HTML_IMAGE_RATIO_06 2 2.55 7.50 1.28 129 XM_B_Phish66 2 3.57 12.50 1.28 130 HDRS_MISSP 2 1.53 2.50 1.28 131 MIME_HTML_ONLY_MULTI 2 1.02 0.00 1.28 132 XM_B_Unsub2 2 1.53 2.50 1.28 133 TR_XM_DKIM_Undo 2 5.10 20.00 1.28 134 RELAYCOUNTRY_DE 2 1.53 2.50 1.28 135 XMSubject_78 2 1.02 0.00 1.28 136 HTTPS_HTTP_MISMATCH 2 1.53 2.50 1.28 137 XM_ZIP 2 1.02 0.00 1.28 138 TR_XM_NoHeaderRelay 2 3.06 10.00 1.28 139 TR_XM_SpammyWords4 2 2.55 7.50 1.28 140 HTML_SHORT_LINK_IMG_3 2 1.02 0.00 1.28 141 HIDE_WIN_STATUS 2 1.02 0.00 1.28 142 HTML_IMAGE_ONLY_16 2 1.02 0.00 1.28 143 XM_Dr_From 2 1.02 0.00 1.28 144 TM2_M_VERY_LONG_WORD 2 1.02 0.00 1.28 145 HTML_IMAGE_ONLY_08 2 1.02 0.00 1.28 146 TooManyTo_005 2 1.53 2.50 1.28 147 FROM_GOV_SPOOF 2 1.02 0.00 1.28 148 T_XMDrugObfuBody_00 2 1.02 0.00 1.28 149 HTML_IMAGE_ONLY_32 2 1.02 0.00 1.28 150 HTML_IMAGE_RATIO_08 2 1.53 2.50 1.28 151 MISSING_HEADERS 1 1.02 2.50 0.64 152 DRUGS_ERECTILE 1 0.51 0.00 0.64 153 FORGED_YAHOO_RCVD 1 0.51 0.00 0.64 154 XMBSHREFv2 1 0.51 0.00 0.64 155 XMGppyBdWords 1 0.51 0.00 0.64 156 SpammyFromTLD_02 1 1.53 5.00 0.64 157 XMSolicitRefs_0 1 0.51 0.00 0.64 158 TR_Symld_Words 1 0.51 0.00 0.64 159 XMSexyCombo_02 1 0.51 0.00 0.64 160 AC_FROM_MANY_DOTS 1 0.51 0.00 0.64 161 XMBdyGiftCard01 1 0.51 0.00 0.64 162 XMBody_78 1 0.51 0.00 0.64 163 RCVD_IN_RP_CERTIFIED 1 0.51 0.00 0.64 164 XM_S_SubURI 1 0.51 0.00 0.64 165 LONG_HEX_URI 1 0.51 0.00 0.64 166 XMLngstWrd_00 1 0.51 0.00 0.64 167 SCC_BODY_SINGLE_WORD 1 0.51 0.00 0.64 168 URG_BIZ 1 0.51 0.00 0.64 169 TVD_SUBJ_ACC_NUM 1 0.51 0.00 0.64 170 RCVD_IN_RP_SAFE 1 0.51 0.00 0.64 171 CTE_8BIT_MISMATCH 1 0.51 0.00 0.64 172 XMGenDplmaNmb 1 0.51 0.00 0.64 173 WEIRD_PORT 1 0.51 0.00 0.64 174 XMHTMLBadTable_001 1 0.51 0.00 0.64 175 URI_TRY_3LD 1 1.02 2.50 0.64 176 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.51 0.00 0.64 177 XMSubMetaI_00 1 0.51 0.00 0.64 178 XM_GoogleGroups2 1 1.02 2.50 0.64 179 RELAYCOUNTRY_IE 1 0.51 0.00 0.64 180 XMSubMetaSx_01 1 0.51 0.00 0.64 181 LONG_JUNK_URI 1 0.51 0.00 0.64 182 XM_OfRef6 1 1.53 5.00 0.64 183 XMDiploma_00 1 0.51 0.00 0.64 184 DKIM_ADSP_CUSTOM_MED 1 1.53 5.00 0.64 185 XMSexyCombo_05 1 5.61 25.00 0.64 186 XM_ProductURIs 1 1.53 5.00 0.64 187 RCVD_IN_VALIDITY_CERTIFIED 1 0.51 0.00 0.64 188 XMBody_95 1 0.51 0.00 0.64 189 XMPhish14 1 0.51 0.00 0.64 190 XM_B_Crypto 1 0.51 0.00 0.64 191 XMPhish04 1 0.51 0.00 0.64 192 NML_ADSP_CUSTOM_MED 1 1.53 5.00 0.64 193 DKIM_ADSP_NXDOMAIN 1 0.51 0.00 0.64 194 TR_Mismatch_TLD_01 1 0.51 0.00 0.64 195 T_MONEY_PERCENT 1 0.51 0.00 0.64 196 DRUG_ED_SILD 1 0.51 0.00 0.64 197 GMD_PDF_SQUARE 1 0.51 0.00 0.64 198 XMSexyCombo_04 1 1.53 5.00 0.64 199 T_OBFU_PDF_ATTACH 1 0.51 0.00 0.64 200 TR_MetaPhish_Combo_01 1 1.02 2.50 0.64 ----------------------------------------------------------------------