Email: 180 Autolearn: 0 AvgScore: -0.98 AvgScanTime: 4.46 sec Spam: 34 Autolearn: 0 AvgScore: 14.76 AvgScanTime: 4.94 sec Ham: 146 Autolearn: 0 AvgScore: -4.64 AvgScanTime: 4.36 sec Time Spent Running SA: 0.22 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 28 68.89 82.35 65.75 2 DKIM_SIGNED 26 65.56 76.47 63.01 3 DKIM_VALID 25 56.67 73.53 52.74 4 XM_DK_Pass 25 61.67 73.53 58.90 5 T_SCC_BODY_TEXT_LINE 24 78.89 70.59 80.82 6 XM_B_Unicode 24 56.67 70.59 53.42 7 DCC_CHECK_NEGATIVE 22 77.22 64.71 80.14 8 RELAYCOUNTRY_US 22 66.67 64.71 67.12 9 XM_B_SpammyWords 22 42.78 64.71 37.67 10 DKIM_VALID_AU 19 43.33 55.88 40.41 11 XMListUnsubscribeExists 15 32.78 44.12 30.14 12 LOC_TINY_FONT_1 13 22.22 38.24 18.49 13 BAYES_50 13 54.44 38.24 58.22 14 XM_B_Unicode3 13 32.78 38.24 31.51 15 DCC_CHECK 12 22.78 35.29 19.86 16 DKIM_VALID_EF 12 26.11 35.29 23.97 17 XMSubLong 11 27.78 32.35 26.71 18 RCVD_IN_MSPIKE_H2 11 17.22 32.35 13.70 19 HTML_FONT_LOW_CONTRAST 11 26.11 32.35 24.66 20 XM_B_SpammyWords2 10 12.22 29.41 8.22 21 BAYES_99 10 7.78 29.41 2.74 22 MIME_HTML_ONLY 10 17.78 29.41 15.07 23 XM_Body_Dirty_Words 10 21.11 29.41 19.18 24 RELAYCOUNTRY_META 10 10.00 29.41 5.48 25 FVGT_m_MULTI_ODD 9 18.33 26.47 16.44 26 XM_B_Unsub 8 10.56 23.53 7.53 27 XM_UncommonTLD01 8 12.22 23.53 9.59 28 TR_XM_BayesUnsub 8 9.44 23.53 6.16 29 XM_DK_Undo_02 8 6.67 23.53 2.74 30 UNPARSEABLE_RELAY 8 10.00 23.53 6.85 31 T_KAM_HTML_FONT_INVALID 7 12.22 20.59 10.27 32 UNTRUSTED_Relay 7 5.56 20.59 2.05 33 T_TM2_M_HEADER_IN_MSG 7 18.89 20.59 18.49 34 TooManyTo_001 6 17.22 17.65 17.12 35 XM_Multi_Part_URI 6 16.67 17.65 16.44 36 LOTS_OF_MONEY 6 3.89 17.65 0.68 37 XM_B_SpammyWords3 6 5.56 17.65 2.74 38 TR_XM_SpammyRelay 5 4.44 14.71 2.05 39 BAYES_999 5 5.00 14.71 2.74 40 FSL_BULK_SIG 5 7.78 14.71 6.16 41 BOTNET_IPINHOSTNAME 5 5.56 14.71 3.42 42 BAYES_80 5 6.11 14.71 4.11 43 BAYES_60 4 12.78 11.76 13.01 44 HTML_IMAGE_RATIO_02 4 4.44 11.76 2.74 45 XM_B_SpammyTLD 4 8.89 11.76 8.22 46 XM_OfRef6 4 5.56 11.76 4.11 47 TR_XM_SpammyWords4 4 2.78 11.76 0.68 48 TR_Mismatch_TLD_02 4 2.22 11.76 0.00 49 TR_XM_UnparsRelay 4 3.89 11.76 2.05 50 RCVD_IN_MSPIKE_WL 4 26.11 11.76 29.45 51 SpammyFromTLD_02 3 6.11 8.82 5.48 52 XM_B_Phish_Phrases 3 3.33 8.82 2.05 53 XM_DIRTYINTL 3 2.78 8.82 1.37 54 XMSubMetaSx_00 3 3.33 8.82 2.05 55 TR_XM_DK_Unsub 3 11.11 8.82 11.64 56 XMSexyCombo_05 3 3.33 8.82 2.05 57 XM_B_Investor 3 2.22 8.82 0.68 58 TR_XM_NoHeaderRelay 3 2.78 8.82 1.37 59 XMSexyCombo_01 3 2.22 8.82 0.68 60 HTML_IMAGE_RATIO_04 3 6.11 8.82 5.48 61 XM_Evil_Numbers_Gen 3 5.56 8.82 4.79 62 TR_XM_DKIM_Undo 3 2.78 8.82 1.37 63 XM_B_SEO 3 1.67 8.82 0.00 64 URI_NOVOWEL 2 2.22 5.88 1.37 65 MIME_HTML_MOSTLY 2 3.89 5.88 3.42 66 RELAYCOUNTRY_DE 2 1.11 5.88 0.00 67 T_XMDrugObfuBody_00 2 2.22 5.88 1.37 68 XM_UB60 2 1.67 5.88 0.68 69 XMNumbers 2 6.11 5.88 6.16 70 XM_Body_Dirty_Words_01 2 1.11 5.88 0.00 71 SCC_BODY_URI_ONLY 2 6.11 5.88 6.16 72 XMSubPhish11 2 1.11 5.88 0.00 73 TR_XM_PhishingBody 2 1.11 5.88 0.00 74 RCVD_IN_MSPIKE_H3 2 7.22 5.88 7.53 75 XM_UB99 2 1.11 5.88 0.00 76 PDS_OTHER_BAD_TLD 2 1.11 5.88 0.00 77 T_XMDrugObfuBody_14 2 1.67 5.88 0.68 78 XMSubMetaSx_01 2 1.67 5.88 0.68 79 SpammyFromTLD_01 2 1.67 5.88 0.68 80 TR_XM_MSPIKECOMBO 2 1.11 5.88 0.00 81 TR_XM_SpammyWords5 2 1.67 5.88 0.68 82 RCVD_IN_MSPIKE_BL 2 1.11 5.88 0.00 83 XM_UB50 2 1.67 5.88 0.68 84 XMSexyCombo_02 2 1.67 5.88 0.68 85 XM_H_Undi_Recip 2 1.11 5.88 0.00 86 TR_XM_PHPDW 2 2.22 5.88 1.37 87 MPART_ALT_DIFF 2 2.78 5.88 2.05 88 RCVD_IN_PSBL 2 1.11 5.88 0.00 89 RCVD_IN_VALIDITY_RPBL 2 1.11 5.88 0.00 90 TR_XM_SB_Phish 2 1.11 5.88 0.00 91 ALL_TRUSTED 2 25.56 5.88 30.14 92 XM_ShortIntro_01 2 1.11 5.88 0.00 93 XM_CamelCaseFrm001 2 4.44 5.88 4.11 94 XMStockSpam_06 2 1.11 5.88 0.00 95 XM_H_PHPOS 2 2.22 5.88 1.37 96 RELAYCOUNTRY_CA 2 1.67 5.88 0.68 97 TR_XM_PHPForged 2 2.22 5.88 1.37 98 TR_XM_FormFill2 2 2.22 5.88 1.37 99 TR_XM_SEO4 2 1.11 5.88 0.00 100 PDS_RDNS_DYNAMIC_FP 2 1.11 5.88 0.00 101 RDNS_DYNAMIC 2 1.11 5.88 0.00 102 TR_Sbj_FN_Bdy 1 0.56 2.94 0.00 103 FROM_MISSP_USER 1 0.56 2.94 0.00 104 RELAYCOUNTRY_AU 1 0.56 2.94 0.00 105 RELAYCOUNTRY_IT 1 0.56 2.94 0.00 106 BAYES_40 1 5.00 2.94 5.48 107 T_FILL_THIS_FORM_SHORT 1 1.11 2.94 0.68 108 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.56 2.94 0.00 109 FORM_FRAUD_5 1 0.56 2.94 0.00 110 XM_OfRef8 1 0.56 2.94 0.00 111 PHP_ORIG_SCRIPT 1 0.56 2.94 0.00 112 LOTTO_DEPT 1 0.56 2.94 0.00 113 SHORT_URI_3 1 7.78 2.94 8.90 114 FSL_CTYPE_WIN1251 1 0.56 2.94 0.00 115 SUBJ_ALL_CAPS 1 1.11 2.94 0.68 116 T_TooManySym_02 1 9.44 2.94 10.96 117 MSGID_FROM_MTA_HEADER 1 0.56 2.94 0.00 118 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.56 2.94 0.00 119 TooManyTo_002 1 1.67 2.94 1.37 120 TR_XM_Base64_M1 1 0.56 2.94 0.00 121 XM_Combo_Sbj 1 0.56 2.94 0.00 122 XMLngstWrd_00 1 1.11 2.94 0.68 123 TR_XM_Undi_Recip9 1 0.56 2.94 0.00 124 FIN_FREE 1 0.56 2.94 0.00 125 MIME_HTML_ONLY_MULTI 1 1.11 2.94 0.68 126 FILL_THIS_FORM 1 2.22 2.94 2.05 127 XFER_LOTSA_MONEY 1 0.56 2.94 0.00 128 REPLYTO_WITHOUT_TO_CC 1 0.56 2.94 0.00 129 XM_SPF_SoftFail 1 0.56 2.94 0.00 130 TVD_VISIT_PHARMA 1 0.56 2.94 0.00 131 FROM_SUSPICIOUS_NTLD_FP 1 0.56 2.94 0.00 132 LONG_JUNK_URI2 1 0.56 2.94 0.00 133 TO_MALFORMED 1 5.56 2.94 6.16 134 ONLINE_PHARMACY 1 0.56 2.94 0.00 135 MONEY_NOHTML 1 0.56 2.94 0.00 136 XMSolicitRefs_0 1 0.56 2.94 0.00 137 TR_XM_Base64_L1 1 0.56 2.94 0.00 138 T_XMDrugObfuBody_03 1 0.56 2.94 0.00 139 XM_B_SpammyWords4 1 0.56 2.94 0.00 140 TR_MetaPhish_Combo_01 1 1.11 2.94 0.68 141 XM_B_DNDMA 1 1.11 2.94 0.68 142 XMCapTrack 1 1.67 2.94 1.37 143 RELAYCOUNTRY_NG 1 0.56 2.94 0.00 144 TR_XM_Undi_Recip2 1 0.56 2.94 0.00 145 XM_UB999 1 0.56 2.94 0.00 146 BODY_URI_ONLY 1 0.56 2.94 0.00 147 XMSlimDrugH 1 1.67 2.94 1.37 148 XM_SendGrid 1 3.33 2.94 3.42 149 T_Symld_Words_02 1 0.56 2.94 0.00 150 TR_XM_InvalidRelay 1 0.56 2.94 0.00 151 TR_XM_DK_SendGrid 1 1.67 2.94 1.37 152 FORGED_MUA_OUTLOOK 1 0.56 2.94 0.00 153 TR_LOTS_OF_MONEY3 1 1.11 2.94 0.68 154 FROM_MISSP_MSFT 1 0.56 2.94 0.00 155 RCVD_IN_MSPIKE_L4 1 0.56 2.94 0.00 156 RELAYCOUNTRY_NL 1 0.56 2.94 0.00 157 OBFU_TEXT_ATTACH 1 0.56 2.94 0.00 158 T_PDS_PRO_TLD 1 1.11 2.94 0.68 159 XM_B_Phish66 1 0.56 2.94 0.00 160 NSL_RCVD_FROM_USER 1 0.56 2.94 0.00 161 TR_XM_Undi_Recip5 1 0.56 2.94 0.00 162 XMSubMetaSSx_00 1 0.56 2.94 0.00 163 BAYES_95 1 1.11 2.94 0.68 164 DKIM_INVALID 1 8.89 2.94 10.27 165 KHOP_HELO_FCRDNS 1 1.11 2.94 0.68 166 TR_XM_SpammyWords2 1 0.56 2.94 0.00 167 XM_H_Long_From01 1 8.89 2.94 10.27 168 FROM_SUSPICIOUS_NTLD 1 0.56 2.94 0.00 169 TR_XM_MaxWHORU 1 1.11 2.94 0.68 170 TR_XM_Base64_C 1 0.56 2.94 0.00 171 XMLngstWrd_01 1 0.56 2.94 0.00 172 RELAYCOUNTRY_FI 1 0.56 2.94 0.00 173 TR_XM_Base64_L3 1 0.56 2.94 0.00 174 XMSexyCombo_04 1 0.56 2.94 0.00 175 TR_DCC_Bayes_99 1 1.67 2.94 1.37 176 XM_H_PHPMailer 1 1.67 2.94 1.37 177 MISSING_HEADERS 1 0.56 2.94 0.00 178 TR_XM_SpammyWords3 1 0.56 2.94 0.00 179 TR_XM_Undi_Recip11 1 0.56 2.94 0.00 180 LOADSA_MONEY_COMBO 1 0.56 2.94 0.00 181 RCVD_IN_MSPIKE_H5 1 15.00 2.94 17.81 182 RELAYCOUNTRY_ZA 1 0.56 2.94 0.00 183 TR_XM_Base64_L2 1 0.56 2.94 0.00 184 TooManyTo_004 1 0.56 2.94 0.00 185 MISSING_MIME_HB_SEP 1 0.56 2.94 0.00 186 T_REMOTE_IMAGE 1 2.78 2.94 2.74 187 XM_DK_Undo_01 1 0.56 2.94 0.00 188 HTML_IMAGE_RATIO_08 1 0.56 2.94 0.00 189 XPRIO 1 0.56 2.94 0.00 190 XM_B_Unsub2 1 1.11 2.94 0.68 191 RELAYCOUNTRY_RU 1 0.56 2.94 0.00 192 TO_NO_BRKTS_FROM_MSSP 1 1.11 2.94 0.68 193 OBFU_UNSUB_UL 1 0.56 2.94 0.00 194 FROM_MISSPACED 1 0.56 2.94 0.00 195 ADVANCE_FEE_2_NEW_FRM_MNY 1 0.56 2.94 0.00 196 FROM_MISSP_EH_MATCH 1 0.56 2.94 0.00 197 XM_Body_Obfu01 1 0.56 2.94 0.00 198 NO_DNS_FOR_FROM 1 1.67 2.94 1.37 199 NOT_SPAM 1 0.56 2.94 0.00 200 T_TooManySym_01 1 10.56 2.94 12.33 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 118 78.89 70.59 80.82 2 DCC_CHECK_NEGATIVE 117 77.22 64.71 80.14 3 RELAYCOUNTRY_US 98 66.67 64.71 67.12 4 HTML_MESSAGE 96 68.89 82.35 65.75 5 DKIM_SIGNED 92 65.56 76.47 63.01 6 XM_DK_Pass 86 61.67 73.53 58.90 7 BAYES_50 85 54.44 38.24 58.22 8 XM_B_Unicode 78 56.67 70.59 53.42 9 DKIM_VALID 77 56.67 73.53 52.74 10 DKIM_VALID_AU 59 43.33 55.88 40.41 11 XM_B_SpammyWords 55 42.78 64.71 37.67 12 XM_B_Unicode3 46 32.78 38.24 31.51 13 XMListUnsubscribeExists 44 32.78 44.12 30.14 14 ALL_TRUSTED 44 25.56 5.88 30.14 15 RCVD_IN_MSPIKE_WL 43 26.11 11.76 29.45 16 XMSubLong 39 27.78 32.35 26.71 17 HTML_FONT_LOW_CONTRAST 36 26.11 32.35 24.66 18 DKIM_VALID_EF 35 26.11 35.29 23.97 19 DCC_CHECK 29 22.78 35.29 19.86 20 XM_Body_Dirty_Words 28 21.11 29.41 19.18 21 LOC_TINY_FONT_1 27 22.22 38.24 18.49 22 T_TM2_M_HEADER_IN_MSG 27 18.89 20.59 18.49 23 RCVD_IN_MSPIKE_H5 26 15.00 2.94 17.81 24 TooManyTo_001 25 17.22 17.65 17.12 25 FVGT_m_MULTI_ODD 24 18.33 26.47 16.44 26 XM_Multi_Part_URI 24 16.67 17.65 16.44 27 MIME_HTML_ONLY 22 17.78 29.41 15.07 28 XM_DKIMWhitelistDomains 21 11.67 0.00 14.38 29 RCVD_IN_MSPIKE_H2 20 17.22 32.35 13.70 30 BAYES_60 19 12.78 11.76 13.01 31 T_TooManySym_01 18 10.56 2.94 12.33 32 TR_XM_DK_Unsub 17 11.11 8.82 11.64 33 T_TooManySym_02 16 9.44 2.94 10.96 34 IN_ZIMBRA_NJ_WHITELIST 16 8.89 0.00 10.96 35 BAYES_00 16 8.89 0.00 10.96 36 DKIM_INVALID 15 8.89 2.94 10.27 37 XM_H_Long_From01 15 8.89 2.94 10.27 38 T_KAM_HTML_FONT_INVALID 15 12.22 20.59 10.27 39 XM_UncommonTLD01 14 12.22 23.53 9.59 40 LotsOfNums_01 14 7.78 0.00 9.59 41 TR_XM_DK_Bayes 13 7.22 0.00 8.90 42 SHORT_URI_3 13 7.78 2.94 8.90 43 XMGappySubj_01 12 6.67 0.00 8.22 44 XM_B_SpammyWords2 12 12.22 29.41 8.22 45 XM_B_SpammyTLD 12 8.89 11.76 8.22 46 RCVD_IN_MSPIKE_H3 11 7.22 5.88 7.53 47 XM_B_Unsub 11 10.56 23.53 7.53 48 INVALID_MSGID 11 6.11 0.00 7.53 49 USER_IN_DEF_DKIM_WL 11 6.11 0.00 7.53 50 UNPARSEABLE_RELAY 10 10.00 23.53 6.85 51 SCC_BODY_URI_ONLY 9 6.11 5.88 6.16 52 XMNumbers 9 6.11 5.88 6.16 53 TVD_SPACE_RATIO 9 5.00 0.00 6.16 54 TR_XM_BayesUnsub 9 9.44 23.53 6.16 55 TO_MALFORMED 9 5.56 2.94 6.16 56 FSL_BULK_SIG 9 7.78 14.71 6.16 57 BAYES_40 8 5.00 2.94 5.48 58 SpammyFromTLD_02 8 6.11 8.82 5.48 59 HTML_IMAGE_RATIO_04 8 6.11 8.82 5.48 60 FROM_GOV_DKIM_AU 8 4.44 0.00 5.48 61 RELAYCOUNTRY_META 8 10.00 29.41 5.48 62 XM_Evil_Numbers_Gen 7 5.56 8.82 4.79 63 BOUNCE_MESSAGE 6 3.33 0.00 4.11 64 TR_XM_DK_Bayes2 6 3.33 0.00 4.11 65 BAYES_20 6 3.33 0.00 4.11 66 BAYES_80 6 6.11 14.71 4.11 67 XM_ZIP 6 3.33 0.00 4.11 68 XM_CamelCaseFrm001 6 4.44 5.88 4.11 69 RCVD_IN_MSPIKE_H4 6 3.89 2.94 4.11 70 ANY_BOUNCE_MESSAGE 6 3.33 0.00 4.11 71 TR_XM_DK_Bayes1 6 3.33 0.00 4.11 72 XM_OfRef6 6 5.56 11.76 4.11 73 XM_SendGrid 5 3.33 2.94 3.42 74 MIME_HTML_MOSTLY 5 3.89 5.88 3.42 75 HTML_MIME_NO_HTML_TAG 5 3.33 2.94 3.42 76 T_TooManySym_03 5 2.78 0.00 3.42 77 XMStrtUSub 5 2.78 0.00 3.42 78 BOTNET_IPINHOSTNAME 5 5.56 14.71 3.42 79 HTML_IMAGE_RATIO_02 4 4.44 11.76 2.74 80 BAYES_99 4 7.78 29.41 2.74 81 BAYES_999 4 5.00 14.71 2.74 82 XM_B_SpammyWords3 4 5.56 17.65 2.74 83 USER_IN_WHITELIST 4 2.22 0.00 2.74 84 XM_B_REG_HTML 4 2.22 0.00 2.74 85 SHORTENED_URL_HREF 4 2.22 0.00 2.74 86 USER_IN_WELCOMELIST 4 2.22 0.00 2.74 87 XM_DK_Undo_02 4 6.67 23.53 2.74 88 FVGT_m_MULTI_ODD_EMAIL 4 2.22 0.00 2.74 89 T_REMOTE_IMAGE 4 2.78 2.94 2.74 90 XMSexyCombo_05 3 3.33 8.82 2.05 91 XMSubMetaSx_00 3 3.33 8.82 2.05 92 UNTRUSTED_Relay 3 5.56 20.59 2.05 93 PLING_QUERY 3 1.67 0.00 2.05 94 XM_B_Phish_Phrases 3 3.33 8.82 2.05 95 TR_XM_SpammyRelay 3 4.44 14.71 2.05 96 XMGappySubj_02 3 1.67 0.00 2.05 97 XM_PDF 3 1.67 0.00 2.05 98 FILL_THIS_FORM 3 2.22 2.94 2.05 99 FROM_GOV_SPOOF 3 1.67 0.00 2.05 100 FILL_THIS_FORM_LONG 3 2.22 2.94 2.05 101 RCVD_IN_VALIDITY_SAFE 3 1.67 0.00 2.05 102 TR_XM_UnparsRelay 3 3.89 11.76 2.05 103 RCVD_IN_VALIDITY_CERTIFIED 3 1.67 0.00 2.05 104 T_FILL_THIS_FORM_LOAN 3 1.67 0.00 2.05 105 MPART_ALT_DIFF 3 2.78 5.88 2.05 106 XMContactSale 2 1.11 0.00 1.37 107 TR_Symld_Words 2 1.11 0.00 1.37 108 TR_XM_SpoofStaff 2 1.11 0.00 1.37 109 TR_XM_PSC1 2 1.11 0.00 1.37 110 TR_XM_DK_SendGrid 2 1.67 2.94 1.37 111 XMSlimDrugH 2 1.67 2.94 1.37 112 RELAYCOUNTRY_IE 2 1.11 0.00 1.37 113 XMCapTrack 2 1.67 2.94 1.37 114 MIME_QP_LONG_LINE 2 1.11 0.00 1.37 115 XMSpoofStaff2 2 1.11 0.00 1.37 116 XM_H_SpoofStaff4 2 1.11 0.00 1.37 117 HTML_IMAGE_RATIO_06 2 1.11 0.00 1.37 118 URI_NOVOWEL 2 2.22 5.88 1.37 119 APOSTROPHE_FROM 2 1.11 0.00 1.37 120 T_XMDrugObfuBody_08 2 1.11 0.00 1.37 121 XM_WL_UtahGOV 2 1.11 0.00 1.37 122 TooManyTo_002 2 1.67 2.94 1.37 123 RELAYCOUNTRY_IN 2 1.11 0.00 1.37 124 XM_DIRTYINTL 2 2.78 8.82 1.37 125 T_XMDrugObfuBody_00 2 2.22 5.88 1.37 126 XM_H_PHPOS_M 2 1.11 0.00 1.37 127 TM2_M_VERY_LONG_WORD 2 1.67 2.94 1.37 128 TR_XM_PHPForged 2 2.22 5.88 1.37 129 XM_H_PHPOS 2 2.22 5.88 1.37 130 TR_XM_DKIM_Undo 2 2.78 8.82 1.37 131 NO_DNS_FOR_FROM 2 1.67 2.94 1.37 132 TVD_PH_BODY_ACCOUNTS_PRE 2 1.11 0.00 1.37 133 XM_ZohoDesk1 2 1.11 0.00 1.37 134 TR_XM_FormFill2 2 2.22 5.88 1.37 135 MSGID_NOFQDN1 2 1.11 0.00 1.37 136 TR_XM_SpoofPhishAttach 2 1.11 0.00 1.37 137 TR_DCC_Bayes_99 2 1.67 2.94 1.37 138 XM_H_PHPMailer 2 1.67 2.94 1.37 139 RELAYCOUNTRY_CN 2 1.11 0.00 1.37 140 TR_XM_PHPDW 2 2.22 5.88 1.37 141 TR_XM_NoHeaderRelay 2 2.78 8.82 1.37 142 TR_LOTS_OF_MONEY3 1 1.11 2.94 0.68 143 REMOVE_BEFORE_LINK 1 0.56 0.00 0.68 144 TVD_RCVD_IP 1 0.56 0.00 0.68 145 XMSubNoVowel 1 0.56 0.00 0.68 146 TR_XM_SpoofStaff3 1 0.56 0.00 0.68 147 XM_B_DNDMA 1 1.11 2.94 0.68 148 TR_MetaPhish_Combo_01 1 1.11 2.94 0.68 149 NUMERIC_HTTP_ADDR 1 0.56 0.00 0.68 150 XMDateMe_00 1 0.56 0.00 0.68 151 XMSubject_78 1 0.56 0.00 0.68 152 TR_XM_SpammyWords5 1 1.67 5.88 0.68 153 KHOP_HELO_FCRDNS 1 1.11 2.94 0.68 154 FROM_EXCESS_BASE64 1 0.56 0.00 0.68 155 BAYES_95 1 1.11 2.94 0.68 156 PP_MIME_FAKE_ASCII_TEXT 1 0.56 0.00 0.68 157 SpammyFromTLD_01 1 1.67 5.88 0.68 158 TR_XM_MaxWHORU 1 1.11 2.94 0.68 159 XMBody_78 1 0.56 0.00 0.68 160 XMSubMetaSx_01 1 1.67 5.88 0.68 161 T_XMDrugObfuBody_14 1 1.67 5.88 0.68 162 XM_BadFromFormat 1 0.56 0.00 0.68 163 T_PDS_PRO_TLD 1 1.11 2.94 0.68 164 SUBJ_ALL_CAPS 1 1.11 2.94 0.68 165 T_XMHurry_00 1 0.56 0.00 0.68 166 XM_B_COVIDMETA 1 0.56 0.00 0.68 167 T_FILL_THIS_FORM_SHORT 1 1.11 2.94 0.68 168 XM_H_Long_From02 1 0.56 0.00 0.68 169 WEIRD_PORT 1 0.56 0.00 0.68 170 RELAYCOUNTRY_FR 1 0.56 0.00 0.68 171 RCVD_IN_IADB_LISTED 1 0.56 0.00 0.68 172 MIME_HTML_ONLY_MULTI 1 1.11 2.94 0.68 173 XM_UB60 1 1.67 5.88 0.68 174 XMBody_95 1 0.56 0.00 0.68 175 XMBrknScrpt_02 1 0.56 0.00 0.68 176 UPGRADE_MAILBOX 1 0.56 0.00 0.68 177 XMLngstWrd_00 1 1.11 2.94 0.68 178 SHOPIFY_IMG_NOT_RCVD_SFY 1 1.11 2.94 0.68 179 LOTS_OF_MONEY 1 3.89 17.65 0.68 180 RELAYCOUNTRY_CA 1 1.67 5.88 0.68 181 HTML_IMAGE_ONLY_24 1 0.56 0.00 0.68 182 RCVD_IN_IADB_DK 1 0.56 0.00 0.68 183 RCVD_IN_IADB_VOUCHED 1 0.56 0.00 0.68 184 XM_B_ShadyURI 1 0.56 0.00 0.68 185 RCVD_IN_BL_SPAMCOP_NET 1 0.56 0.00 0.68 186 IN_HORDE_ADDRESS_BOOK 1 0.56 0.00 0.68 187 XM_H_FedEx_Spoof 1 0.56 0.00 0.68 188 TooManyTo_003 1 1.11 2.94 0.68 189 XM_S_SubURI 1 0.56 0.00 0.68 190 RCVD_IN_IADB_SENDERID 1 0.56 0.00 0.68 191 DATE_IN_PAST_03_06 1 0.56 0.00 0.68 192 T_XMDrugObfuBody_12 1 0.56 0.00 0.68 193 HDRS_MISSP 1 1.11 2.94 0.68 194 TM2_M_HAS_BSLASH_URI 1 0.56 0.00 0.68 195 TR_XM_SpammyWords4 1 2.78 11.76 0.68 196 FORGED_GMAIL_RCVD 1 0.56 0.00 0.68 197 XMOemUri 1 0.56 0.00 0.68 198 XMSubMetaSxObfu_03 1 0.56 0.00 0.68 199 XM_UB50 1 1.67 5.88 0.68 200 XMSexyCombo_02 1 1.67 5.88 0.68 ----------------------------------------------------------------------