Email: 317 Autolearn: 0 AvgScore: 2.56 AvgScanTime: 3.64 sec Spam: 66 Autolearn: 0 AvgScore: 14.47 AvgScanTime: 3.89 sec Ham: 251 Autolearn: 0 AvgScore: -0.57 AvgScanTime: 3.57 sec Time Spent Running SA: 0.32 hours Time Spent Processing Spam: 0.07 hours Time Spent Processing Ham: 0.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 60 58.36 90.91 49.80 2 T_SCC_BODY_TEXT_LINE 54 83.91 81.82 84.46 3 DKIM_SIGNED 53 56.47 80.30 50.20 4 RELAYCOUNTRY_US 52 58.04 78.79 52.59 5 XM_DK_Pass 49 52.05 74.24 46.22 6 DKIM_VALID 49 51.42 74.24 45.42 7 XM_B_Unicode 48 39.43 72.73 30.68 8 XM_B_SpammyWords 45 29.34 68.18 19.12 9 DKIM_VALID_AU 42 43.22 63.64 37.85 10 DCC_CHECK_NEGATIVE 37 75.08 56.06 80.08 11 XMListUnsubscribeExists 32 29.34 48.48 24.30 12 DCC_CHECK 29 24.92 43.94 19.92 13 BAYES_50 28 58.36 42.42 62.55 14 MIME_HTML_ONLY 28 15.14 42.42 7.97 15 XM_B_Unicode3 27 25.24 40.91 21.12 16 XM_DK_Undo_02 26 12.30 39.39 5.18 17 LOC_TINY_FONT_1 26 18.61 39.39 13.15 18 BAYES_99 25 8.20 37.88 0.40 19 XM_B_SpammyWords2 21 12.62 31.82 7.57 20 T_TM2_M_HEADER_IN_MSG 20 18.93 30.30 15.94 21 DKIM_VALID_EF 19 25.55 28.79 24.70 22 BAYES_999 19 6.31 28.79 0.40 23 XM_Body_Dirty_Words 19 12.93 28.79 8.76 24 TR_XM_DKIM_Undo 19 9.78 28.79 4.78 25 XMSubLong 16 17.03 24.24 15.14 26 HTML_FONT_LOW_CONTRAST 16 17.98 24.24 16.33 27 RCVD_IN_MSPIKE_H2 16 15.14 24.24 12.75 28 RELAYCOUNTRY_META 15 7.57 22.73 3.59 29 UNPARSEABLE_RELAY 15 11.67 22.73 8.76 30 BOTNET 14 5.68 21.21 1.59 31 XM_B_Unsub 14 10.73 21.21 7.97 32 FVGT_m_MULTI_ODD 13 13.88 19.70 12.35 33 XM_Multi_Part_URI 13 27.44 19.70 29.48 34 TR_XM_BayesUnsub 13 10.09 19.70 7.57 35 TR_XM_DK_Unsub 12 10.73 18.18 8.76 36 TR_XM_SpammyRelay 11 4.10 16.67 0.80 37 RCVD_IN_MSPIKE_WL 11 25.55 16.67 27.89 38 T_KAM_HTML_FONT_INVALID 11 10.41 16.67 8.76 39 XMSexyCombo_05 10 4.10 15.15 1.20 40 TR_DCC_Bayes_99 10 3.15 15.15 0.00 41 TR_XM_UnparsRelay 10 4.10 15.15 1.20 42 UNTRUSTED_Relay 9 4.73 13.64 2.39 43 XMStrtUSub 8 5.99 12.12 4.38 44 XM_UncommonTLD01 8 6.62 12.12 5.18 45 TR_XM_SpammyWords2 8 2.52 12.12 0.00 46 BOTNET_IPINHOSTNAME 8 11.36 12.12 11.16 47 TR_XM_MSPIKECOMBO 7 2.21 10.61 0.00 48 XMSubMetaSx_00 7 3.79 10.61 1.99 49 TR_XM_SpammyWords5 7 2.84 10.61 0.80 50 FSL_BULK_SIG 7 14.20 10.61 15.14 51 XM_B_Phish_Phrases 7 3.79 10.61 1.99 52 RCVD_IN_VALIDITY_RPBL 7 2.21 10.61 0.00 53 XM_B_SpammyWords3 7 3.79 10.61 1.99 54 XMDateMe_00 7 2.52 10.61 0.40 55 RCVD_IN_MSPIKE_BL 7 2.21 10.61 0.00 56 RCVD_IN_MSPIKE_H4 6 4.10 9.09 2.79 57 XMNumbers 6 5.36 9.09 4.38 58 MIME_HTML_MOSTLY 6 3.79 9.09 2.39 59 LOTS_OF_MONEY 6 3.79 9.09 2.39 60 RCVD_IN_BL_SPAMCOP_NET 6 4.42 9.09 3.19 61 TooManyTo_001 6 4.42 9.09 3.19 62 XM_B_SpammyTLD 6 2.52 9.09 0.80 63 XM_UB50 6 3.15 9.09 1.59 64 XM_Evil_Numbers_Gen 5 3.15 7.58 1.99 65 XMSexyCombo_01 5 1.89 7.58 0.40 66 BOTNET_NORDNS 5 1.58 7.58 0.00 67 TR_XM_INV_DKIM 4 1.26 6.06 0.00 68 MPART_ALT_DIFF 4 2.84 6.06 1.99 69 RCVD_IN_PSBL 4 1.26 6.06 0.00 70 DKIM_INVALID 4 5.05 6.06 4.78 71 ANY_BOUNCE_MESSAGE 4 32.18 6.06 39.04 72 T_XMDrugObfuBody_14 4 2.21 6.06 1.20 73 BAYES_95 4 2.84 6.06 1.99 74 XM_DIRTYINTL 4 1.58 6.06 0.40 75 XM_SendGrid 4 2.84 6.06 1.99 76 XM_B_Investor 4 2.21 6.06 1.20 77 BOUNCE_MESSAGE 4 32.18 6.06 39.04 78 TO_NO_BRKTS_MSFT 4 1.26 6.06 0.00 79 TR_XM_SpammyWords4 3 1.26 4.55 0.40 80 SpammyFromTLD_02 3 1.26 4.55 0.40 81 FROM_MISSPACED 3 0.95 4.55 0.00 82 TR_XM_DK_SendGrid 3 2.21 4.55 1.59 83 FILL_THIS_FORM 3 0.95 4.55 0.00 84 MPART_ALT_DIFF_COUNT 3 0.95 4.55 0.00 85 T_REMOTE_IMAGE 3 2.21 4.55 1.59 86 TR_XM_NoHeaderRelay 3 1.26 4.55 0.40 87 RCVD_IN_MSPIKE_H5 3 16.40 4.55 19.52 88 HTML_IMAGE_RATIO_06 3 3.15 4.55 2.79 89 FILL_THIS_FORM_LONG 3 0.95 4.55 0.00 90 FORGED_MUA_OUTLOOK 3 0.95 4.55 0.00 91 XM_OfRef6 3 0.95 4.55 0.00 92 XM_B_COVIDMETA 3 1.89 4.55 1.20 93 XMBounce_01 3 0.95 4.55 0.00 94 XM_OfRef7 3 0.95 4.55 0.00 95 FROM_MISSP_XPRIO 3 0.95 4.55 0.00 96 RELAYCOUNTRY_KR 3 0.95 4.55 0.00 97 XM_B_DNDMA 3 1.89 4.55 1.20 98 XM_UB999 3 0.95 4.55 0.00 99 TR_XM_SB_Phish 3 1.89 4.55 1.20 100 NSL_RCVD_HELO_USER 3 0.95 4.55 0.00 101 RELAYCOUNTRY_IN 3 1.26 4.55 0.40 102 BAYES_00 3 4.42 4.55 4.38 103 XMSubPhish11 3 1.89 4.55 1.20 104 TR_Mismatch_TLD_02 3 1.26 4.55 0.40 105 XMBody_106 3 0.95 4.55 0.00 106 XMHTML_After_End 3 1.26 4.55 0.40 107 TR_XM_DK_Bayes2 3 3.79 4.55 3.59 108 TR_XM_MSPIKECOMBO2 3 0.95 4.55 0.00 109 MONEY_FROM_MISSP 3 0.95 4.55 0.00 110 RELAYCOUNTRY_NL 3 1.26 4.55 0.40 111 TR_XM_DK_Bayes1 3 3.79 4.55 3.59 112 FSL_NEW_HELO_USER 3 0.95 4.55 0.00 113 BAYES_80 3 1.89 4.55 1.20 114 FSL_CTYPE_WIN1251 3 0.95 4.55 0.00 115 TR_XM_MaxSPIKE 3 0.95 4.55 0.00 116 T_XMDrugObfuBody_08 3 1.89 4.55 1.20 117 FROM_NO_USER 3 0.95 4.55 0.00 118 RCVD_IN_MSPIKE_L3 3 0.95 4.55 0.00 119 XM_B_SpammyWords4 3 1.89 4.55 1.20 120 TR_XM_DK_Bayes 3 3.79 4.55 3.59 121 XM_UB99 3 0.95 4.55 0.00 122 RELAYCOUNTRY_AU 3 0.95 4.55 0.00 123 AXB_XMAILER_MIMEOLE_OL_024C2 3 0.95 4.55 0.00 124 HDR_ORDER_FTSDMCXX_NORDNS 3 0.95 4.55 0.00 125 FORM_FRAUD 3 0.95 4.55 0.00 126 USER_IN_DEF_DKIM_WL 3 3.47 4.55 3.19 127 TM2_M_URI_OPT_OUT 2 30.91 3.03 38.25 128 TR_XM_MaxWHORU 2 0.63 3.03 0.00 129 XM_H_Long_From01 2 3.15 3.03 3.19 130 XMSubMetaSSxObfu_00 2 0.63 3.03 0.00 131 TR_XM_SpammyWords3 2 0.63 3.03 0.00 132 BAYES_60 2 5.99 3.03 6.77 133 URI_NOVOWEL 2 1.26 3.03 0.80 134 DATE_IN_FUTURE_06_12 2 0.63 3.03 0.00 135 XM_H_USPS_Spoof 2 0.63 3.03 0.00 136 TR_XM_PhishingBody 2 1.89 3.03 1.59 137 RCVD_IN_VALIDITY_SAFE 2 1.26 3.03 0.80 138 XMSubLongNoVowel 2 0.63 3.03 0.00 139 XM_Body_Obfu01 2 0.63 3.03 0.00 140 RCVD_IN_MSPIKE_H3 2 5.05 3.03 5.58 141 HTTPS_HTTP_MISMATCH 2 0.63 3.03 0.00 142 RELAYCOUNTRY_CA 2 0.63 3.03 0.00 143 RCVD_IN_RP_RNBL 2 0.63 3.03 0.00 144 RCVD_IN_MSPIKE_L5 2 0.63 3.03 0.00 145 XMSubMetaSxObfu_03 2 0.95 3.03 0.40 146 TM2_M_OBFU_COMMENT 2 0.63 3.03 0.00 147 MIME_QP_LONG_LINE 2 1.89 3.03 1.59 148 TR_Symld_Words 2 1.26 3.03 0.80 149 DKIM_ADSP_NXDOMAIN 2 0.63 3.03 0.00 150 RCVD_IN_MSPIKE_L4 2 0.63 3.03 0.00 151 NUMERIC_HTTP_ADDR 2 0.95 3.03 0.40 152 RCVD_IN_VALIDITY_CERTIFIED 2 1.26 3.03 0.80 153 HTML_IMAGE_RATIO_04 2 3.47 3.03 3.59 154 NORMAL_HTTP_TO_IP 2 0.63 3.03 0.00 155 XM_Body_Dirty_Words_01 2 0.95 3.03 0.40 156 RELAYCOUNTRY_CN 2 0.63 3.03 0.00 157 XMBody_95 2 0.95 3.03 0.40 158 XM_URI_RBL 2 0.63 3.03 0.00 159 NO_DNS_FOR_FROM 2 0.63 3.03 0.00 160 SpammyFromTLD_01 2 1.89 3.03 1.59 161 XMSubGarbage 2 0.63 3.03 0.00 162 XMSubNoVowel 2 0.95 3.03 0.40 163 HTML_IMAGE_RATIO_02 2 1.89 3.03 1.59 164 FROM_GOV_DKIM_AU 2 0.95 3.03 0.40 165 RELAYCOUNTRY_VN 1 0.32 1.52 0.00 166 T_TooManySym_04 1 0.32 1.52 0.00 167 XMSubMetaD_00 1 0.32 1.52 0.00 168 XM_B_Unsub2 1 4.73 1.52 5.58 169 T_TooManySym_03 1 1.89 1.52 1.99 170 PDS_RDNS_DYNAMIC_FP 1 0.32 1.52 0.00 171 XM_B_Crypto 1 0.32 1.52 0.00 172 XMObfuSubjects 1 0.32 1.52 0.00 173 URIBL_MW_SURBL 1 0.32 1.52 0.00 174 XM_B_REG_HTML 1 0.32 1.52 0.00 175 KHOP_HELO_FCRDNS 1 2.52 1.52 2.79 176 XMNoVowels 1 0.63 1.52 0.40 177 CHARSET_FARAWAY_HEADER 1 0.63 1.52 0.40 178 FROM_LOCAL_NOVOWEL 1 0.32 1.52 0.00 179 FROM_SUSPICIOUS_NTLD 1 0.32 1.52 0.00 180 GOOG_STO_NOIMG_HTML 1 0.32 1.52 0.00 181 BITCOIN_OBFU_SUBJ 1 0.32 1.52 0.00 182 NOT_SPAM 1 0.32 1.52 0.00 183 TR_XM_Crypto2 1 0.32 1.52 0.00 184 XMWhlSbjSex 1 0.32 1.52 0.00 185 DATE_IN_PAST_03_06 1 0.32 1.52 0.00 186 MIXED_CENTER_CASE 1 0.32 1.52 0.00 187 T_TooManySym_02 1 3.79 1.52 4.38 188 HTML_IMAGE_ONLY_28 1 0.95 1.52 0.80 189 T_XMDrugObfuBody_00 1 0.32 1.52 0.00 190 OBFU_TEXT_ATTACH 1 0.32 1.52 0.00 191 HK_RANDOM_FROM 1 0.32 1.52 0.00 192 XM_SPF_SoftFail 1 0.63 1.52 0.40 193 DIET_1 1 0.32 1.52 0.00 194 TooManyTo_004 1 0.63 1.52 0.40 195 T_TooManySym_01 1 4.10 1.52 4.78 196 XMStockSpam_06 1 0.32 1.52 0.00 197 RELAYCOUNTRY_AR 1 0.32 1.52 0.00 198 RCVD_DOTEDU_SUSP_URI 1 0.32 1.52 0.00 199 XM_CamelCaseFrm001 1 0.63 1.52 0.40 200 HELO_LOCALHOST 1 0.32 1.52 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 212 83.91 81.82 84.46 2 DCC_CHECK_NEGATIVE 201 75.08 56.06 80.08 3 BAYES_50 157 58.36 42.42 62.55 4 RELAYCOUNTRY_US 132 58.04 78.79 52.59 5 DKIM_SIGNED 126 56.47 80.30 50.20 6 HTML_MESSAGE 125 58.36 90.91 49.80 7 XM_DK_Pass 116 52.05 74.24 46.22 8 DKIM_VALID 114 51.42 74.24 45.42 9 ALL_TRUSTED 112 35.33 0.00 44.62 10 ANY_BOUNCE_MESSAGE 98 32.18 6.06 39.04 11 BOUNCE_MESSAGE 98 32.18 6.06 39.04 12 TM2_M_URI_OPT_OUT 96 30.91 3.03 38.25 13 DKIM_VALID_AU 95 43.22 63.64 37.85 14 XM_B_Unicode 77 39.43 72.73 30.68 15 XM_Multi_Part_URI 74 27.44 19.70 29.48 16 RCVD_IN_MSPIKE_WL 70 25.55 16.67 27.89 17 DKIM_VALID_EF 62 25.55 28.79 24.70 18 XMListUnsubscribeExists 61 29.34 48.48 24.30 19 XM_B_Unicode3 53 25.24 40.91 21.12 20 DCC_CHECK 50 24.92 43.94 19.92 21 RCVD_IN_MSPIKE_H5 49 16.40 4.55 19.52 22 XM_B_SpammyWords 48 29.34 68.18 19.12 23 BAYES_05 45 14.20 0.00 17.93 24 HTML_FONT_LOW_CONTRAST 41 17.98 24.24 16.33 25 T_TM2_M_HEADER_IN_MSG 40 18.93 30.30 15.94 26 XMSubLong 38 17.03 24.24 15.14 27 FSL_BULK_SIG 38 14.20 10.61 15.14 28 LOC_TINY_FONT_1 33 18.61 39.39 13.15 29 RCVD_IN_MSPIKE_H2 32 15.14 24.24 12.75 30 FVGT_m_MULTI_ODD 31 13.88 19.70 12.35 31 XM_DKIMWhitelistDomains 29 9.15 0.00 11.55 32 BOTNET_IPINHOSTNAME 28 11.36 12.12 11.16 33 TR_XM_DK_Unsub 22 10.73 18.18 8.76 34 UNPARSEABLE_RELAY 22 11.67 22.73 8.76 35 T_KAM_HTML_FONT_INVALID 22 10.41 16.67 8.76 36 XM_Body_Dirty_Words 22 12.93 28.79 8.76 37 XM_B_Unsub 20 10.73 21.21 7.97 38 MIME_HTML_ONLY 20 15.14 42.42 7.97 39 TR_XM_BayesUnsub 19 10.09 19.70 7.57 40 XM_B_SpammyWords2 19 12.62 31.82 7.57 41 BAYES_60 17 5.99 3.03 6.77 42 IN_ZIMBRA_NJ_WHITELIST 15 4.73 0.00 5.98 43 RCVD_IN_MSPIKE_H3 14 5.05 3.03 5.58 44 XM_B_Unsub2 14 4.73 1.52 5.58 45 XM_UncommonTLD01 13 6.62 12.12 5.18 46 XM_DK_Undo_02 13 12.30 39.39 5.18 47 T_TooManySym_01 12 4.10 1.52 4.78 48 DKIM_INVALID 12 5.05 6.06 4.78 49 TR_XM_DKIM_Undo 12 9.78 28.79 4.78 50 XMStrtUSub 11 5.99 12.12 4.38 51 XMNumbers 11 5.36 9.09 4.38 52 T_TooManySym_02 11 3.79 1.52 4.38 53 BAYES_00 11 4.42 4.55 4.38 54 HTML_IMAGE_RATIO_04 9 3.47 3.03 3.59 55 RELAYCOUNTRY_META 9 7.57 22.73 3.59 56 TR_XM_DK_Bayes 9 3.79 4.55 3.59 57 TR_XM_DK_Bayes2 9 3.79 4.55 3.59 58 TR_XM_DK_Bayes1 9 3.79 4.55 3.59 59 RCVD_IN_BL_SPAMCOP_NET 8 4.42 9.09 3.19 60 SCC_BODY_URI_ONLY 8 2.52 0.00 3.19 61 XM_H_Long_From01 8 3.15 3.03 3.19 62 XM_PDF 8 2.52 0.00 3.19 63 BAYES_40 8 2.84 1.52 3.19 64 USER_IN_DEF_DKIM_WL 8 3.47 4.55 3.19 65 XM_ZIP 8 2.52 0.00 3.19 66 TooManyTo_001 8 4.42 9.09 3.19 67 HTML_IMAGE_RATIO_06 7 3.15 4.55 2.79 68 RCVD_IN_MSPIKE_H4 7 4.10 9.09 2.79 69 KHOP_HELO_FCRDNS 7 2.52 1.52 2.79 70 LotsOfNums_01 7 2.21 0.00 2.79 71 MIME_HTML_MOSTLY 6 3.79 9.09 2.39 72 LOTS_OF_MONEY 6 3.79 9.09 2.39 73 TVD_SPACE_RATIO 6 1.89 0.00 2.39 74 HTML_MIME_NO_HTML_TAG 6 1.89 0.00 2.39 75 UNTRUSTED_Relay 6 4.73 13.64 2.39 76 INVALID_MSGID 5 1.58 0.00 1.99 77 MSGID_NOFQDN1 5 1.58 0.00 1.99 78 BAYES_95 5 2.84 6.06 1.99 79 T_TooManySym_03 5 1.89 1.52 1.99 80 XMSubMetaSx_00 5 3.79 10.61 1.99 81 MPART_ALT_DIFF 5 2.84 6.06 1.99 82 TO_MALFORMED 5 1.58 0.00 1.99 83 XM_B_Phish_Phrases 5 3.79 10.61 1.99 84 XM_Evil_Numbers_Gen 5 3.15 7.58 1.99 85 XM_B_SpammyWords3 5 3.79 10.61 1.99 86 XM_SendGrid 5 2.84 6.06 1.99 87 XM_ZohoDesk1 4 1.26 0.00 1.59 88 TR_XM_PhishingBody 4 1.89 3.03 1.59 89 PLING_QUERY 4 1.26 0.00 1.59 90 TR_XM_DK_SendGrid 4 2.21 4.55 1.59 91 T_REMOTE_IMAGE 4 2.21 4.55 1.59 92 TR_XM_SpoofPhishAttach 4 1.26 0.00 1.59 93 TR_XM_PSC1 4 1.26 0.00 1.59 94 BOTNET 4 5.68 21.21 1.59 95 BAYES_20 4 1.26 0.00 1.59 96 XM_UB50 4 3.15 9.09 1.59 97 XMSpoofStaff2 4 1.26 0.00 1.59 98 URIBL_DBL_SPAM 4 1.58 1.52 1.59 99 HTML_IMAGE_RATIO_08 4 1.58 1.52 1.59 100 SpammyFromTLD_01 4 1.89 3.03 1.59 101 HTML_IMAGE_RATIO_02 4 1.89 3.03 1.59 102 TR_XM_SpoofStaff 4 1.26 0.00 1.59 103 XMGappySubj_01 4 1.26 0.00 1.59 104 XM_H_SpoofStaff4 4 1.26 0.00 1.59 105 FVGT_m_MULTI_ODD_EMAIL 4 1.26 0.00 1.59 106 MIME_QP_LONG_LINE 4 1.89 3.03 1.59 107 T_XMDrugObfuBody_14 3 2.21 6.06 1.20 108 MSGID_FROM_MTA_HEADER 3 0.95 0.00 1.20 109 XM_B_COVIDMETA 3 1.89 4.55 1.20 110 XM_B_DNDMA 3 1.89 4.55 1.20 111 TR_XM_SB_Phish 3 1.89 4.55 1.20 112 HTML_IMAGE_ONLY_16 3 0.95 0.00 1.20 113 XMSubPhish11 3 1.89 4.55 1.20 114 UPPERCASE_50_75 3 0.95 0.00 1.20 115 HTML_IMAGE_ONLY_20 3 0.95 0.00 1.20 116 T_XMDrugObfuBody_08 3 1.89 4.55 1.20 117 HTML_IMAGE_ONLY_08 3 0.95 0.00 1.20 118 XM_B_Investor 3 2.21 6.06 1.20 119 XM_B_SpammyWords4 3 1.89 4.55 1.20 120 TR_XM_UnparsRelay 3 4.10 15.15 1.20 121 XMSexyCombo_05 3 4.10 15.15 1.20 122 URI_HEX 3 0.95 0.00 1.20 123 BAYES_80 3 1.89 4.55 1.20 124 TR_XM_SpoofStaff3 2 0.63 0.00 0.80 125 RCVD_IN_VALIDITY_SAFE 2 1.26 3.03 0.80 126 HTML_IMAGE_ONLY_28 2 0.95 1.52 0.80 127 XM_H_CodeIgniter 2 0.63 0.00 0.80 128 HTML_SHORT_LINK_IMG_3 2 0.63 0.00 0.80 129 TR_XM_SpammyWords5 2 2.84 10.61 0.80 130 XMGappySubj_02 2 0.63 0.00 0.80 131 T_Symld_Words_02 2 0.63 0.00 0.80 132 TR_XM_SpammyRelay 2 4.10 16.67 0.80 133 URI_NOVOWEL 2 1.26 3.03 0.80 134 RCVD_IN_VALIDITY_CERTIFIED 2 1.26 3.03 0.80 135 XM_UB60 2 0.63 0.00 0.80 136 FROM_GOV_SPOOF 2 0.63 0.00 0.80 137 XMSubMetaD_03 2 0.63 0.00 0.80 138 HDRS_MISSP 2 0.63 0.00 0.80 139 XM_H_Long_From02 2 0.63 0.00 0.80 140 TooManyTo_002 2 0.95 1.52 0.80 141 XM_B_SpammyTLD 2 2.52 9.09 0.80 142 T_OBFU_PDF_ATTACH 2 0.63 0.00 0.80 143 DC_PNG_UNO_LARGO 2 0.63 0.00 0.80 144 MAILING_LIST_MULTI 2 0.95 1.52 0.80 145 XMPhish30 2 0.63 0.00 0.80 146 TR_Symld_Words 2 1.26 3.03 0.80 147 IN_HORDE_ADDRESS_BOOK 2 0.63 0.00 0.80 148 RELAYCOUNTRY_PH 2 0.63 0.00 0.80 149 RCVD_IN_IADB_SENDERID 1 0.32 0.00 0.40 150 XM_ShortIntro_01 1 0.32 0.00 0.40 151 XM_SPF_SoftFail 1 0.63 1.52 0.40 152 RELAYCOUNTRY_IN 1 1.26 4.55 0.40 153 TM2_M_VERY_LONG_WORD 1 0.32 0.00 0.40 154 TooManyTo_004 1 0.63 1.52 0.40 155 TR_Mismatch_TLD_02 1 1.26 4.55 0.40 156 GMD_PDF_HORIZ 1 0.32 0.00 0.40 157 SCC_BODY_SINGLE_WORD 1 0.32 0.00 0.40 158 RCVD_IN_IADB_LISTED 1 0.32 0.00 0.40 159 URI_TRY_3LD 1 0.32 0.00 0.40 160 TR_XM_SpammyWords4 1 1.26 4.55 0.40 161 XM_Dr_From 1 0.32 0.00 0.40 162 SpammyFromTLD_02 1 1.26 4.55 0.40 163 XM_H_Trusted_IP 1 0.32 0.00 0.40 164 XMBSHREFv2 1 0.32 0.00 0.40 165 BAYES_999 1 6.31 28.79 0.40 166 XM_Combo_Sbj 1 0.32 0.00 0.40 167 SUBJ_ALL_CAPS 1 0.32 0.00 0.40 168 XMNoVowels 1 0.63 1.52 0.40 169 CHARSET_FARAWAY_HEADER 1 0.63 1.52 0.40 170 XMBody_17 1 0.32 0.00 0.40 171 XM_B_SEO 1 0.32 0.00 0.40 172 HTML_FONT_TINY_NORDNS 1 0.32 0.00 0.40 173 DKIM_ADSP_CUSTOM_MED 1 0.32 0.00 0.40 174 XMCapTrack 1 0.32 0.00 0.40 175 RELAYCOUNTRY_AT 1 0.32 0.00 0.40 176 TR_XM_NoHeaderRelay 1 1.26 4.55 0.40 177 FORGED_GMAIL_RCVD 1 0.32 0.00 0.40 178 XM_S_SubURI 1 0.32 0.00 0.40 179 XMHTMLBadTable_001 1 0.32 0.00 0.40 180 RELAYCOUNTRY_BG 1 0.32 0.00 0.40 181 LONG_JUNK_URI3 1 0.32 0.00 0.40 182 XM_Body_Dirty_Words_01 1 0.95 3.03 0.40 183 TR_MetaPhish_Combo_01 1 0.32 0.00 0.40 184 XMBody_95 1 0.95 3.03 0.40 185 BAYES_99 1 8.20 37.88 0.40 186 NORDNS_LOW_CONTRAST 1 0.32 0.00 0.40 187 XMDateMe_00 1 2.52 10.61 0.40 188 TO_NO_BRKTS_HTML_ONLY 1 0.32 0.00 0.40 189 RELAYCOUNTRY_RU 1 0.32 0.00 0.40 190 XMPhish11 1 0.32 0.00 0.40 191 XMSubNoVowel 1 0.95 3.03 0.40 192 NML_ADSP_CUSTOM_MED 1 0.32 0.00 0.40 193 FROM_GOV_DKIM_AU 1 0.95 3.03 0.40 194 LONG_JUNK_URI 1 0.32 0.00 0.40 195 XM_CamelCaseFrm001 1 0.63 1.52 0.40 196 XMHTML_After_End 1 1.26 4.55 0.40 197 XM_H_PHPMailer 1 0.32 0.00 0.40 198 TVD_RCVD_IP 1 0.32 0.00 0.40 199 RELAYCOUNTRY_DE 1 0.32 0.00 0.40 200 XMSlimDrugH 1 0.32 0.00 0.40 ----------------------------------------------------------------------