Email: 385 Autolearn: 0 AvgScore: 3.63 AvgScanTime: 4.01 sec Spam: 62 Autolearn: 0 AvgScore: 13.56 AvgScanTime: 4.15 sec Ham: 323 Autolearn: 0 AvgScore: 1.73 AvgScanTime: 3.99 sec Time Spent Running SA: 0.43 hours Time Spent Processing Spam: 0.07 hours Time Spent Processing Ham: 0.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 52 58.18 83.87 53.25 2 DCC_CHECK_NEGATIVE 52 92.21 83.87 93.81 3 RELAYCOUNTRY_US 50 53.77 80.65 48.61 4 T_SCC_BODY_TEXT_LINE 50 81.30 80.65 81.42 5 XM_B_SpammyWords 49 38.96 79.03 31.27 6 DKIM_SIGNED 47 51.17 75.81 46.44 7 DKIM_VALID 46 49.09 74.19 44.27 8 XM_DK_Pass 46 49.09 74.19 44.27 9 XM_B_Unicode 43 34.81 69.35 28.17 10 DKIM_VALID_AU 38 41.82 61.29 38.08 11 BAYES_50 32 57.66 51.61 58.82 12 MIME_HTML_ONLY 27 32.47 43.55 30.34 13 XMListUnsubscribeExists 26 21.82 41.94 17.96 14 XMSubLong 26 30.91 41.94 28.79 15 XM_B_SpammyWords2 25 14.29 40.32 9.29 16 DKIM_VALID_EF 24 32.73 38.71 31.58 17 XM_B_Unicode3 22 18.70 35.48 15.48 18 XM_Body_Dirty_Words 20 12.73 32.26 8.98 19 FVGT_m_MULTI_ODD 18 16.10 29.03 13.62 20 LOC_TINY_FONT_1 18 14.55 29.03 11.76 21 RCVD_IN_MSPIKE_H2 18 11.69 29.03 8.36 22 HTML_FONT_LOW_CONTRAST 16 16.62 25.81 14.86 23 T_TM2_M_HEADER_IN_MSG 16 12.47 25.81 9.91 24 XM_B_Phish_Phrases 15 13.77 24.19 11.76 25 T_KAM_HTML_FONT_INVALID 13 9.09 20.97 6.81 26 RELAYCOUNTRY_META 12 4.68 19.35 1.86 27 XM_B_Investor 12 5.45 19.35 2.79 28 XMSexyCombo_05 12 6.23 19.35 3.72 29 TR_Mismatch_TLD_01 12 17.14 19.35 16.72 30 BAYES_99 12 3.64 19.35 0.62 31 XM_DK_Undo_02 11 3.90 17.74 1.24 32 TR_XM_SpammyWords4 10 4.42 16.13 2.17 33 LOTS_OF_MONEY 10 5.71 16.13 3.72 34 DCC_CHECK 10 7.79 16.13 6.19 35 BAYES_80 9 3.64 14.52 1.55 36 TR_XM_DKIM_Undo 9 2.86 14.52 0.62 37 TR_XM_SpammyRelay 9 3.12 14.52 0.93 38 UNTRUSTED_Relay 9 2.86 14.52 0.62 39 TR_XM_BayesUnsub 8 3.90 12.90 2.17 40 BAYES_999 8 2.60 12.90 0.62 41 BOTNET 8 2.34 12.90 0.31 42 XM_B_Unsub 8 4.68 12.90 3.10 43 TR_XM_PHPForged 7 1.82 11.29 0.00 44 XM_B_SpammyWords3 7 3.90 11.29 2.48 45 RCVD_IN_MSPIKE_WL 7 12.47 11.29 12.69 46 XM_H_PHPOS 7 1.82 11.29 0.00 47 TR_XM_PHPDW 7 1.82 11.29 0.00 48 UNPARSEABLE_RELAY 7 8.57 11.29 8.05 49 XM_UncommonTLD01 7 3.90 11.29 2.48 50 TR_XM_FormFill2 7 1.82 11.29 0.00 51 TooManyTo_001 7 4.94 11.29 3.72 52 TR_XM_DK_Unsub 6 7.79 9.68 7.43 53 TR_XM_SpammyWords2 6 1.56 9.68 0.00 54 HTTPS_HTTP_MISMATCH 5 1.30 8.06 0.00 55 URIBL_DBL_SPAM 5 2.08 8.06 0.93 56 TR_XM_NoHeaderRelay 5 1.56 8.06 0.31 57 XMBody_78 5 2.08 8.06 0.93 58 TR_DCC_Bayes_99 5 1.30 8.06 0.00 59 RCVD_IN_MSPIKE_H4 5 1.82 8.06 0.62 60 BAYES_60 5 5.97 8.06 5.57 61 BOTNET_NORDNS 5 1.30 8.06 0.00 62 TooManyTo_004 4 1.04 6.45 0.00 63 RCVD_IN_MSPIKE_BL 4 1.04 6.45 0.00 64 XM_B_SpammyWords4 4 1.56 6.45 0.62 65 XM_Multi_Part_URI 4 30.91 6.45 35.60 66 RCVD_IN_VALIDITY_RPBL 4 1.04 6.45 0.00 67 TooManyTo_002 4 2.08 6.45 1.24 68 XM_B_SpammyTLD 4 2.60 6.45 1.86 69 XM_H_PHPOS_M 4 1.04 6.45 0.00 70 XM_B_SEO 4 1.04 6.45 0.00 71 BOTNET_IPINHOSTNAME 4 3.38 6.45 2.79 72 XM_SendGrid 4 4.42 6.45 4.02 73 TVD_PH_BODY_ACCOUNTS_PRE 4 1.30 6.45 0.31 74 URI_PHISH 4 1.04 6.45 0.00 75 RCVD_IN_PSBL 4 1.30 6.45 0.31 76 TR_XM_SEO4 4 1.04 6.45 0.00 77 TooManyTo_003 4 1.04 6.45 0.00 78 XMSolicitRefs_0 4 1.56 6.45 0.62 79 XM_UB50 4 1.56 6.45 0.62 80 TR_XM_MSPIKECOMBO 4 1.04 6.45 0.00 81 TR_XM_UnparsRelay 4 2.08 6.45 1.24 82 MAILING_LIST_MULTI 4 1.56 6.45 0.62 83 T_OBFU_DOC_ATTACH 4 3.12 6.45 2.48 84 XMDiploma_00 3 1.82 4.84 1.24 85 RELAYCOUNTRY_DE 3 0.78 4.84 0.00 86 HTML_IMAGE_RATIO_04 3 2.08 4.84 1.55 87 RCVD_IN_BL_SPAMCOP_NET 3 1.04 4.84 0.31 88 TR_XM_SpammyWords3 3 0.78 4.84 0.00 89 XM_OfRef6 3 1.30 4.84 0.62 90 TooManyTo_005 3 0.78 4.84 0.00 91 TR_XM_Undi_Recip11 3 0.78 4.84 0.00 92 XM_H_Undi_Recip 3 0.78 4.84 0.00 93 HTML_IMAGE_RATIO_02 3 1.30 4.84 0.62 94 XM_Lotto 3 0.78 4.84 0.00 95 TR_XM_DK_SendGrid 3 2.60 4.84 2.17 96 T_XMDrugObfuBody_08 3 1.30 4.84 0.62 97 NO_DNS_FOR_FROM 3 1.04 4.84 0.31 98 KHOP_HELO_FCRDNS 3 0.78 4.84 0.00 99 XM_H_Long_From01 3 3.64 4.84 3.41 100 MONEY_FRAUD_5 3 0.78 4.84 0.00 101 XM_CamelCaseFrm001 3 2.08 4.84 1.55 102 SpammyFromTLD_02 3 0.78 4.84 0.00 103 XM_H_PHPMailer 3 0.78 4.84 0.00 104 TR_XM_MaxWHORU 3 1.04 4.84 0.31 105 TM2_M_URI_OPT_OUT 3 32.73 4.84 38.08 106 RELAYCOUNTRY_FR 3 0.78 4.84 0.00 107 FROM_MISSP_MSFT 2 0.52 3.23 0.00 108 DKIM_ADSP_NXDOMAIN 2 0.52 3.23 0.00 109 XM_DIRTYINTL 2 1.04 3.23 0.62 110 MIME_HTML_MOSTLY 2 1.30 3.23 0.93 111 SpammyFromTLD_01 2 0.52 3.23 0.00 112 T_Symld_Words_02 2 0.52 3.23 0.00 113 MPART_ALT_DIFF 2 1.30 3.23 0.93 114 FSL_NEW_HELO_USER 2 0.52 3.23 0.00 115 HELO_NODOT 2 0.52 3.23 0.00 116 FIN_FREE 2 0.52 3.23 0.00 117 HTML_OBFUSCATE_05_10 2 0.52 3.23 0.00 118 TR_XM_PhishingBody 2 1.30 3.23 0.93 119 TR_XM_Undi_Recip5 2 0.52 3.23 0.00 120 RCVD_IN_MSPIKE_L5 2 0.52 3.23 0.00 121 XMDateMe_00 2 0.52 3.23 0.00 122 URI_TRUNCATED 2 0.52 3.23 0.00 123 HTML_IMAGE_RATIO_06 2 1.82 3.23 1.55 124 T_MONEY_PERCENT 2 0.52 3.23 0.00 125 FROM_MISSP_USER 2 0.52 3.23 0.00 126 MISSING_HEADERS 2 0.78 3.23 0.31 127 XMSubPhish11 2 0.52 3.23 0.00 128 FSL_HELO_NON_FQDN_1 2 0.52 3.23 0.00 129 RCVD_IN_RP_RNBL 2 0.52 3.23 0.00 130 XM_UB60 2 0.52 3.23 0.00 131 TO_NO_BRKTS_FROM_MSSP 2 0.52 3.23 0.00 132 BAYES_20 2 3.12 3.23 3.10 133 FROM_MISSP_EH_MATCH 2 0.52 3.23 0.00 134 REPLYTO_WITHOUT_TO_CC 2 0.52 3.23 0.00 135 T_XMDrugObfuBody_00 2 1.04 3.23 0.62 136 AXB_XMAILER_MIMEOLE_OL_024C2 2 0.52 3.23 0.00 137 NSL_RCVD_FROM_USER 2 0.52 3.23 0.00 138 HTML_FONT_FACE_BAD 2 0.52 3.23 0.00 139 TR_XM_SpammyWords5 2 1.30 3.23 0.93 140 XM_B_Phish66 2 1.04 3.23 0.62 141 FORGED_MUA_OUTLOOK 2 0.52 3.23 0.00 142 XMSubject_09 2 0.52 3.23 0.00 143 ALL_TRUSTED 2 42.86 3.23 50.46 144 RCVD_IN_MSPIKE_H3 2 4.68 3.23 4.95 145 TR_XM_Undi_RecipCombo2 2 0.52 3.23 0.00 146 FROM_MISSPACED 2 0.52 3.23 0.00 147 XM_B_DNDMA 2 1.04 3.23 0.62 148 UNDISC_MONEY 2 0.52 3.23 0.00 149 TR_LOTS_OF_MONEY2 2 0.52 3.23 0.00 150 BAYES_95 2 1.30 3.23 0.93 151 XPRIO 2 0.52 3.23 0.00 152 XMNumbers 2 3.64 3.23 3.72 153 XMStrtUSub 2 2.34 3.23 2.17 154 XM_PDF 2 7.01 3.23 7.74 155 TR_XM_Undi_Recip4 2 0.52 3.23 0.00 156 TR_XM_SB_Phish 2 0.52 3.23 0.00 157 XM_UB99 2 0.52 3.23 0.00 158 DRUGS_MUSCLE 2 0.52 3.23 0.00 159 ADVANCE_FEE_2_NEW_MONEY 2 0.52 3.23 0.00 160 FORGED_GMAIL_RCVD 1 0.26 1.61 0.00 161 DATE_IN_FUTURE_06_12 1 0.26 1.61 0.00 162 XMBrknScrpt_02 1 0.26 1.61 0.00 163 MIME_HTML_ONLY_MULTI 1 0.78 1.61 0.62 164 XMhairloss01 1 0.26 1.61 0.00 165 TR_XM_BayesRelay 1 0.26 1.61 0.00 166 URIBL_DBL_ABUSE_SPAM 1 0.26 1.61 0.00 167 PDS_RDNS_DYNAMIC_FP 1 0.26 1.61 0.00 168 T_REMOTE_IMAGE 1 1.56 1.61 1.55 169 TR_Symld_Words 1 0.78 1.61 0.62 170 HELO_NO_DOMAIN 1 0.26 1.61 0.00 171 XMGppyBdWords 1 0.26 1.61 0.00 172 XM_ShortIntro_01 1 0.52 1.61 0.31 173 MPART_ALT_DIFF_COUNT 1 0.52 1.61 0.31 174 DEAR_BENEFICIARY 1 0.26 1.61 0.00 175 XM_TLDProd2 1 0.26 1.61 0.00 176 T_XMHurry_00 1 0.52 1.61 0.31 177 DATE_IN_PAST_06_12 1 0.26 1.61 0.00 178 MIXED_CENTER_CASE 1 0.26 1.61 0.00 179 RELAYCOUNTRY_NL 1 0.26 1.61 0.00 180 RDNS_DYNAMIC 1 0.26 1.61 0.00 181 T_XMDrugObfuBody_12 1 0.26 1.61 0.00 182 TR_XM_COVIDMETA1 1 0.26 1.61 0.00 183 TR_XM_COVIDMETA4 1 0.26 1.61 0.00 184 HTML_IMAGE_ONLY_32 1 5.45 1.61 6.19 185 TO_NO_BRKTS_HTML_ONLY 1 5.19 1.61 5.88 186 NUMERIC_HTTP_ADDR 1 0.26 1.61 0.00 187 HTML_MIME_NO_HTML_TAG 1 7.01 1.61 8.05 188 MSOE_MID_WRONG_CASE 1 0.26 1.61 0.00 189 DKIM_INVALID 1 2.08 1.61 2.17 190 URI_GOOGLE_PROXY 1 0.26 1.61 0.00 191 XMHTML_After_End 1 0.26 1.61 0.00 192 XM_Combo_Sbj 1 0.26 1.61 0.00 193 XM_Body_Obfu01 1 0.52 1.61 0.31 194 DKIM_ADSP_CUSTOM_MED 1 0.52 1.61 0.31 195 XM_Evil_Numbers_Gen 1 2.86 1.61 3.10 196 RELAYCOUNTRY_PL 1 0.26 1.61 0.00 197 T_XMDrugObfuBody_14 1 1.04 1.61 0.93 198 XFER_LOTSA_MONEY 1 0.26 1.61 0.00 199 XMBody_03 1 0.26 1.61 0.00 200 TR_XM_SpoofPhishAttach 1 0.78 1.61 0.62 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 303 92.21 83.87 93.81 2 T_SCC_BODY_TEXT_LINE 263 81.30 80.65 81.42 3 BAYES_50 190 57.66 51.61 58.82 4 HTML_MESSAGE 172 58.18 83.87 53.25 5 ALL_TRUSTED 163 42.86 3.23 50.46 6 RELAYCOUNTRY_US 157 53.77 80.65 48.61 7 DKIM_SIGNED 150 51.17 75.81 46.44 8 DKIM_VALID 143 49.09 74.19 44.27 9 XM_DK_Pass 143 49.09 74.19 44.27 10 BOUNCE_MESSAGE 123 32.21 1.61 38.08 11 TM2_M_URI_OPT_OUT 123 32.73 4.84 38.08 12 DKIM_VALID_AU 123 41.82 61.29 38.08 13 ANY_BOUNCE_MESSAGE 123 32.21 1.61 38.08 14 XM_Multi_Part_URI 115 30.91 6.45 35.60 15 DKIM_VALID_EF 102 32.73 38.71 31.58 16 XM_B_SpammyWords 101 38.96 79.03 31.27 17 MIME_HTML_ONLY 98 32.47 43.55 30.34 18 XMSubLong 93 30.91 41.94 28.79 19 XM_B_Unicode 91 34.81 69.35 28.17 20 BAYES_05 60 15.58 0.00 18.58 21 XMListUnsubscribeExists 58 21.82 41.94 17.96 22 TR_Mismatch_TLD_01 54 17.14 19.35 16.72 23 XM_B_Unicode3 50 18.70 35.48 15.48 24 HTML_FONT_LOW_CONTRAST 48 16.62 25.81 14.86 25 FVGT_m_MULTI_ODD 44 16.10 29.03 13.62 26 RCVD_IN_MSPIKE_WL 41 12.47 11.29 12.69 27 LOC_TINY_FONT_1 38 14.55 29.03 11.76 28 XM_B_Phish_Phrases 38 13.77 24.19 11.76 29 T_TM2_M_HEADER_IN_MSG 32 12.47 25.81 9.91 30 XM_B_SpammyWords2 30 14.29 40.32 9.29 31 XM_Body_Dirty_Words 29 12.73 32.26 8.98 32 RCVD_IN_MSPIKE_H2 27 11.69 29.03 8.36 33 HTML_MIME_NO_HTML_TAG 26 7.01 1.61 8.05 34 UNPARSEABLE_RELAY 26 8.57 11.29 8.05 35 XM_PDF 25 7.01 3.23 7.74 36 TR_XM_DK_Unsub 24 7.79 9.68 7.43 37 RCVD_IN_MSPIKE_H5 23 5.97 0.00 7.12 38 T_OBFU_PDF_ATTACH 23 5.97 0.00 7.12 39 T_KAM_HTML_FONT_INVALID 22 9.09 20.97 6.81 40 BAYES_40 21 5.45 0.00 6.50 41 XM_ProductURIs 21 5.71 1.61 6.50 42 HTML_IMAGE_ONLY_32 20 5.45 1.61 6.19 43 DCC_CHECK 20 7.79 16.13 6.19 44 TO_NO_BRKTS_HTML_ONLY 19 5.19 1.61 5.88 45 BAYES_60 18 5.97 8.06 5.57 46 T_TooManySym_01 17 4.42 0.00 5.26 47 FSL_BULK_SIG 16 4.42 1.61 4.95 48 RCVD_IN_MSPIKE_H3 16 4.68 3.23 4.95 49 BAYES_00 14 3.64 0.00 4.33 50 XM_SendGrid 13 4.42 6.45 4.02 51 TR_XM_DK_Bayes 12 3.12 0.00 3.72 52 TR_XM_DK_Bayes2 12 3.12 0.00 3.72 53 TooManyTo_001 12 4.94 11.29 3.72 54 T_TooManySym_02 12 3.12 0.00 3.72 55 XMNumbers 12 3.64 3.23 3.72 56 LOTS_OF_MONEY 12 5.71 16.13 3.72 57 XMSexyCombo_05 12 6.23 19.35 3.72 58 TR_XM_DK_Bayes1 12 3.12 0.00 3.72 59 LotsOfNums_01 11 2.86 0.00 3.41 60 XM_H_Long_From01 11 3.64 4.84 3.41 61 XM_Evil_Numbers_Gen 10 2.86 1.61 3.10 62 SCC_BODY_URI_ONLY 10 2.60 0.00 3.10 63 XM_B_Unsub 10 4.68 12.90 3.10 64 BAYES_20 10 3.12 3.23 3.10 65 XM_B_Investor 9 5.45 19.35 2.79 66 BOTNET_IPINHOSTNAME 9 3.38 6.45 2.79 67 XM_DKIMWhitelistDomains 9 2.34 0.00 2.79 68 XM_B_SpammyWords3 8 3.90 11.29 2.48 69 T_OBFU_DOC_ATTACH 8 3.12 6.45 2.48 70 IN_ZIMBRA_NJ_WHITELIST 8 2.08 0.00 2.48 71 XM_UncommonTLD01 8 3.90 11.29 2.48 72 TR_XM_DK_SendGrid 7 2.60 4.84 2.17 73 TO_MALFORMED 7 1.82 0.00 2.17 74 INVALID_MSGID 7 1.82 0.00 2.17 75 DKIM_INVALID 7 2.08 1.61 2.17 76 USER_IN_DEF_DKIM_WL 7 1.82 0.00 2.17 77 TR_XM_SpammyWords4 7 4.42 16.13 2.17 78 XMStrtUSub 7 2.34 3.23 2.17 79 TR_XM_BayesUnsub 7 3.90 12.90 2.17 80 XM_B_SpammyTLD 6 2.60 6.45 1.86 81 RELAYCOUNTRY_META 6 4.68 19.35 1.86 82 TVD_SPACE_RATIO 6 1.56 0.00 1.86 83 HTML_IMAGE_RATIO_06 5 1.82 3.23 1.55 84 XMSubMetaSx_00 5 1.56 1.61 1.55 85 T_TooManySym_03 5 1.30 0.00 1.55 86 BAYES_80 5 3.64 14.52 1.55 87 T_REMOTE_IMAGE 5 1.56 1.61 1.55 88 HTML_IMAGE_RATIO_04 5 2.08 4.84 1.55 89 XM_CamelCaseFrm001 5 2.08 4.84 1.55 90 XM_DK_Undo_01 4 1.04 0.00 1.24 91 RCVD_IN_VALIDITY_SAFE 4 1.04 0.00 1.24 92 TooManyTo_002 4 2.08 6.45 1.24 93 XMDiploma_00 4 1.82 4.84 1.24 94 TR_XM_UnparsRelay 4 2.08 6.45 1.24 95 XM_ZIP 4 1.04 0.00 1.24 96 XM_DK_Undo_02 4 3.90 17.74 1.24 97 HTML_IMAGE_RATIO_08 4 1.04 0.00 1.24 98 FVGT_m_MULTI_ODD_EMAIL 4 1.04 0.00 1.24 99 XMBody_78 3 2.08 8.06 0.93 100 XMBSHREFv2 3 0.78 0.00 0.93 101 TR_XM_SpammyRelay 3 3.12 14.52 0.93 102 T_XMDrugObfuBody_14 3 1.04 1.61 0.93 103 URIBL_DBL_SPAM 3 2.08 8.06 0.93 104 MPART_ALT_DIFF 3 1.30 3.23 0.93 105 TR_XM_PhishingBody 3 1.30 3.23 0.93 106 MIME_HTML_MOSTLY 3 1.30 3.23 0.93 107 TM2_M_VERY_LONG_WORD 3 1.04 1.61 0.93 108 XMGenDplmaNmb 3 1.04 1.61 0.93 109 BAYES_95 3 1.30 3.23 0.93 110 TR_XM_SpammyWords5 3 1.30 3.23 0.93 111 XMSubNoVowel 3 1.04 1.61 0.93 112 IN_HORDE_ADDRESS_BOOK 3 0.78 0.00 0.93 113 TVD_RCVD_IP 3 0.78 0.00 0.93 114 MIME_QP_LONG_LINE 3 0.78 0.00 0.93 115 TR_XM_NOT_AMZN 2 0.52 0.00 0.62 116 XMSubEmpty 2 0.52 0.00 0.62 117 HTML_IMAGE_RATIO_02 2 1.30 4.84 0.62 118 XMLngstWrd_00 2 0.52 0.00 0.62 119 TR_XM_SpoofPhishAttach 2 0.78 1.61 0.62 120 T_XMDrugObfuBody_08 2 1.30 4.84 0.62 121 XMSpoofStaff2 2 0.52 0.00 0.62 122 TR_XM_DKIM_Undo 2 2.86 14.52 0.62 123 XMGappySubj_01 2 0.52 0.00 0.62 124 TR_XM_PSC1 2 0.52 0.00 0.62 125 TM2_M_BODY_EMPTY 2 0.52 0.00 0.62 126 MSGID_FROM_MTA_HEADER 2 0.52 0.00 0.62 127 XM_OfRef6 2 1.30 4.84 0.62 128 XM_B_SpammyWords4 2 1.56 6.45 0.62 129 MIME_HTML_ONLY_MULTI 2 0.78 1.61 0.62 130 TR_Symld_Words 2 0.78 1.61 0.62 131 XM_DIRTYINTL 2 1.04 3.23 0.62 132 BAYES_99 2 3.64 19.35 0.62 133 XMSexyCombo_01 2 0.78 1.61 0.62 134 MIME_BASE64_TEXT 2 0.52 0.00 0.62 135 AMAZON_IMG_NOT_RCVD_AMZN 2 0.52 0.00 0.62 136 MAILING_LIST_MULTI 2 1.56 6.45 0.62 137 RELAYCOUNTRY_CA 2 0.78 1.61 0.62 138 MSGID_NOFQDN1 2 0.52 0.00 0.62 139 XM_UB50 2 1.56 6.45 0.62 140 TR_Sbj_FN_Bdy 2 0.52 0.00 0.62 141 BAYES_999 2 2.60 12.90 0.62 142 XM_B_FormFill 2 0.52 0.00 0.62 143 FROM_GOV_SPOOF 2 0.52 0.00 0.62 144 RCVD_IN_VALIDITY_CERTIFIED 2 0.52 0.00 0.62 145 XMSolicitRefs_0 2 1.56 6.45 0.62 146 XM_B_Phish66 2 1.04 3.23 0.62 147 RCVD_IN_MSPIKE_H4 2 1.82 8.06 0.62 148 TR_XM_SpoofStaff 2 0.52 0.00 0.62 149 XM_B_DNDMA 2 1.04 3.23 0.62 150 GMD_PDF_EMPTY_BODY 2 0.52 0.00 0.62 151 XM_B_Unsub2 2 0.78 1.61 0.62 152 XM_ZohoDesk1 2 0.52 0.00 0.62 153 UNTRUSTED_Relay 2 2.86 14.52 0.62 154 XM_H_SpoofStaff4 2 0.52 0.00 0.62 155 T_XMDrugObfuBody_00 2 1.04 3.23 0.62 156 HTML_IMAGE_ONLY_28 2 0.52 0.00 0.62 157 XMSubGiftCard2 1 0.26 0.00 0.31 158 MISSING_HEADERS 1 0.78 3.23 0.31 159 XM_S_SketchInvoice 1 0.26 0.00 0.31 160 DATE_IN_PAST_03_06 1 0.26 0.00 0.31 161 HTML_TAG_BALANCE_BODY 1 0.52 1.61 0.31 162 XMSubMetaSxObfu_03 1 0.26 0.00 0.31 163 XM_B_Phish64b 1 0.26 0.00 0.31 164 RCVD_IN_IADB_SENDERID 1 0.26 0.00 0.31 165 TVD_PH_BODY_ACCOUNTS_PRE 1 1.30 6.45 0.31 166 XMLngstWrd_01 1 0.26 0.00 0.31 167 XM_Body_Obfu01 1 0.52 1.61 0.31 168 DKIM_ADSP_CUSTOM_MED 1 0.52 1.61 0.31 169 TR_XM_NoHeaderRelay 1 1.56 8.06 0.31 170 XMHTML_ManyTags3 1 0.26 0.00 0.31 171 XMLngstWrd_03 1 0.26 0.00 0.31 172 NICE_REPLY_A 1 0.26 0.00 0.31 173 MILLION_USD 1 0.26 0.00 0.31 174 HDRS_MISSP 1 0.26 0.00 0.31 175 T_XMHurry_00 1 0.52 1.61 0.31 176 XMHTML_ManyTags4 1 0.26 0.00 0.31 177 RCVD_IN_IADB_SPF 1 0.26 0.00 0.31 178 XMHTML_ManyTags1 1 0.26 0.00 0.31 179 MPART_ALT_DIFF_COUNT 1 0.52 1.61 0.31 180 NO_RDNS_DOTCOM_HELO 1 0.26 0.00 0.31 181 XM_SPF_SoftFail 1 0.26 0.00 0.31 182 XMPhish04 1 0.26 0.00 0.31 183 RELAYCOUNTRY_IE 1 0.26 0.00 0.31 184 TR_XM_SpammyWords7 1 0.26 0.00 0.31 185 TR_MetaPhish_Gmail 1 0.26 0.00 0.31 186 NORDNS_LOW_CONTRAST 1 0.26 0.00 0.31 187 RCVD_IN_IADB_DK 1 0.26 0.00 0.31 188 XM_ShortIntro_01 1 0.52 1.61 0.31 189 RCVD_IN_BL_SPAMCOP_NET 1 1.04 4.84 0.31 190 RCVD_IN_IADB_LISTED 1 0.26 0.00 0.31 191 XM_B_COVIDMETA 1 0.26 0.00 0.31 192 XMSubGiftCard1 1 0.26 0.00 0.31 193 LONG_HEX_URI 1 0.26 0.00 0.31 194 TR_XM_MaxWHORU 1 1.04 4.84 0.31 195 RCVD_IN_IADB_OPTIN 1 0.26 0.00 0.31 196 XMStockSpam_06 1 0.52 1.61 0.31 197 DIET_1 1 0.26 0.00 0.31 198 DRUGS_DIET 1 0.26 0.00 0.31 199 FORGED_YAHOO_RCVD 1 0.26 0.00 0.31 200 BOTNET 1 2.34 12.90 0.31 ----------------------------------------------------------------------