Email: 176 Autolearn: 0 AvgScore: 1.14 AvgScanTime: 1.79 sec Spam: 37 Autolearn: 0 AvgScore: 11.89 AvgScanTime: 1.75 sec Ham: 139 Autolearn: 0 AvgScore: -1.72 AvgScanTime: 1.80 sec Time Spent Running SA: 0.09 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 33 81.25 89.19 79.14 2 T_SCC_BODY_TEXT_LINE 31 86.93 83.78 87.77 3 DKIM_SIGNED 29 75.57 78.38 74.82 4 XM_DK_Pass 27 72.73 72.97 72.66 5 XM_B_Unicode 27 65.91 72.97 64.03 6 DKIM_VALID 27 72.73 72.97 72.66 7 RELAYCOUNTRY_US 27 76.70 72.97 77.70 8 DCC_CHECK_NEGATIVE 26 72.16 70.27 72.66 9 XM_B_SpammyWords 25 37.50 67.57 29.50 10 DKIM_VALID_AU 21 57.39 56.76 57.55 11 XMListUnsubscribeExists 20 43.18 54.05 40.29 12 LOC_TINY_FONT_1 16 30.68 43.24 27.34 13 HTML_FONT_LOW_CONTRAST 15 30.68 40.54 28.06 14 BAYES_50 14 49.43 37.84 52.52 15 XM_DK_Undo_02 14 17.05 37.84 11.51 16 XM_B_Unicode3 14 39.20 37.84 39.57 17 XM_B_SpammyWords2 14 14.20 37.84 7.91 18 TR_XM_DKIM_Undo 12 8.52 32.43 2.16 19 DCC_CHECK 11 27.84 29.73 27.34 20 BAYES_99 11 10.23 29.73 5.04 21 RELAYCOUNTRY_META 10 13.07 27.03 9.35 22 RCVD_IN_MSPIKE_H2 10 24.43 27.03 23.74 23 DKIM_VALID_EF 10 35.80 27.03 38.13 24 FVGT_m_MULTI_ODD 9 26.70 24.32 27.34 25 XMSubLong 9 28.98 24.32 30.22 26 T_KAM_HTML_FONT_INVALID 8 11.93 21.62 9.35 27 BAYES_999 8 7.95 21.62 4.32 28 UNPARSEABLE_RELAY 8 17.61 21.62 16.55 29 RCVD_IN_MSPIKE_WL 8 32.39 21.62 35.25 30 XM_B_Unsub 7 16.48 18.92 15.83 31 HTML_IMAGE_RATIO_06 7 6.82 18.92 3.60 32 XM_Body_Dirty_Words 7 9.09 18.92 6.47 33 MIME_HTML_ONLY 7 19.89 18.92 20.14 34 UNTRUSTED_Relay 7 8.52 18.92 5.76 35 BOTNET 6 8.52 16.22 6.47 36 TR_XM_BayesUnsub 6 10.23 16.22 8.63 37 XM_Multi_Part_URI 6 16.48 16.22 16.55 38 BOTNET_IPINHOSTNAME 6 10.80 16.22 9.35 39 BAYES_60 6 11.93 16.22 10.79 40 RCVD_IN_MSPIKE_H3 5 10.80 13.51 10.07 41 XMStrtUSub 5 12.50 13.51 12.23 42 TR_XM_UnparsRelay 5 6.25 13.51 4.32 43 XM_UncommonTLD01 5 10.80 13.51 10.07 44 NORDNS_LOW_CONTRAST 5 3.41 13.51 0.72 45 XMSubMetaSx_00 5 5.11 13.51 2.88 46 XM_H_Long_From01 5 6.25 13.51 4.32 47 T_TM2_M_HEADER_IN_MSG 4 15.91 10.81 17.27 48 TR_XM_DK_SendGrid 4 5.68 10.81 4.32 49 TM2_M_URI_OPT_OUT 4 5.11 10.81 3.60 50 TR_XM_SpammyRelay 4 4.55 10.81 2.88 51 TR_XM_SpammyWords2 4 2.84 10.81 0.72 52 TR_XM_DK_Unsub 4 16.48 10.81 17.99 53 XM_SendGrid 4 9.09 10.81 8.63 54 XM_B_Investor 4 2.84 10.81 0.72 55 XMSexyCombo_05 4 3.41 10.81 1.44 56 TR_XM_PHPForged 3 3.41 8.11 2.16 57 TM2_M_VERY_LONG_WORD 3 2.27 8.11 0.72 58 TR_XM_NoHeaderRelay 3 2.84 8.11 1.44 59 XMNoVowels 3 1.70 8.11 0.00 60 XM_B_Phish_Phrases 3 4.55 8.11 3.60 61 XM_UB60 3 1.70 8.11 0.00 62 XM_SPF_SoftFail 3 1.70 8.11 0.00 63 BOTNET_NORDNS 3 1.70 8.11 0.00 64 HTML_IMAGE_RATIO_02 3 3.98 8.11 2.88 65 MIME_HTML_MOSTLY 3 5.11 8.11 4.32 66 XM_B_SpammyWords3 3 3.98 8.11 2.88 67 RELAYCOUNTRY_ES 3 1.70 8.11 0.00 68 TooManyTo_001 3 7.95 8.11 7.91 69 ALL_TRUSTED 3 14.77 8.11 16.55 70 RCVD_IN_IADB_SPF 2 2.84 5.41 2.16 71 RCVD_IN_IADB_SENDERID 2 2.84 5.41 2.16 72 RCVD_IN_IADB_LISTED 2 2.84 5.41 2.16 73 RELAYCOUNTRY_TR 2 1.14 5.41 0.00 74 TR_XM_PHPDW 2 2.84 5.41 2.16 75 TR_XM_InvalidRelay 2 1.14 5.41 0.00 76 XM_Evil_Numbers_Gen 2 7.39 5.41 7.91 77 TR_XM_PhishingBody 2 6.82 5.41 7.19 78 RELAYCOUNTRY_RU 2 1.14 5.41 0.00 79 XM_H_PHPMailer 2 1.70 5.41 0.72 80 TR_XM_FormFill2 2 2.84 5.41 2.16 81 TR_XM_RelayPhish 2 2.27 5.41 1.44 82 XM_DIRTYINTL 2 1.14 5.41 0.00 83 SCC_BODY_URI_ONLY 2 5.68 5.41 5.76 84 HELO_DYNAMIC_SPLIT_IP 2 1.14 5.41 0.00 85 RCVD_IN_IADB_DK 2 2.84 5.41 2.16 86 MISSING_HEADERS 2 2.27 5.41 1.44 87 XMBody_78 2 1.14 5.41 0.00 88 URI_PHISH 2 1.14 5.41 0.00 89 TR_XM_SpammyWords4 2 2.27 5.41 1.44 90 BAYES_80 2 3.41 5.41 2.88 91 SpammyFromTLD_01 2 2.84 5.41 2.16 92 BAYES_95 2 4.55 5.41 4.32 93 XM_UB99 2 1.14 5.41 0.00 94 RCVD_IN_IADB_OPTIN 2 2.27 5.41 1.44 95 HTTPS_HTTP_MISMATCH 2 1.14 5.41 0.00 96 XM_H_PHPOS 2 2.84 5.41 2.16 97 MIME_QP_LONG_LINE 2 2.27 5.41 1.44 98 HTML_MIME_NO_HTML_TAG 2 3.98 5.41 3.60 99 RCVD_IN_MSPIKE_H5 2 19.32 5.41 23.02 100 XM_ShortIntro_01 2 2.27 5.41 1.44 101 RCVD_IN_BL_SPAMCOP_NET 2 1.14 5.41 0.00 102 REPLYTO_WITHOUT_TO_CC 2 1.14 5.41 0.00 103 MAILING_LIST_MULTI 2 3.41 5.41 2.88 104 DKIM_INVALID 2 2.84 5.41 2.16 105 RCVD_IN_IADB_VOUCHED 2 2.27 5.41 1.44 106 LOTS_OF_MONEY 2 3.41 5.41 2.88 107 DIET_1 2 1.14 5.41 0.00 108 XMLngstWrd_00 2 2.27 5.41 1.44 109 TR_DCC_Bayes_99 2 1.14 5.41 0.00 110 TVD_PH_BODY_ACCOUNTS_PRE 2 1.14 5.41 0.00 111 HTML_FONT_TINY_NORDNS 2 1.70 5.41 0.72 112 XMEmptyBody_01 1 0.57 2.70 0.00 113 TR_XM_Base64_M1 1 1.14 2.70 0.72 114 XMDiploma_00 1 1.14 2.70 0.72 115 RDNS_DYNAMIC 1 0.57 2.70 0.00 116 XM_B_FormFill 1 0.57 2.70 0.00 117 RELAYCOUNTRY_CN 1 1.14 2.70 0.72 118 FSL_BULK_SIG 1 6.82 2.70 7.91 119 FORGED_YAHOO_RCVD 1 0.57 2.70 0.00 120 TR_XM_SpammyWords5 1 0.57 2.70 0.00 121 XMLngstWrd_02 1 1.14 2.70 0.72 122 XM_B_Phish66 1 5.68 2.70 6.47 123 RELAYCOUNTRY_PL 1 1.14 2.70 0.72 124 TR_XM_Undi_Recip2 1 0.57 2.70 0.00 125 LOW_PRICE 1 1.14 2.70 0.72 126 RCVD_IN_MSPIKE_H4 1 2.27 2.70 2.16 127 XM_OfRef6 1 0.57 2.70 0.00 128 TR_XM_SB_Phish 1 1.14 2.70 0.72 129 URIBL_BLACK 1 0.57 2.70 0.00 130 XMLngstWrd_03 1 1.14 2.70 0.72 131 BAYES_05 1 0.57 2.70 0.00 132 RELAYCOUNTRY_NL 1 0.57 2.70 0.00 133 BAYES_00 1 13.07 2.70 15.83 134 HELO_NO_DOMAIN 1 0.57 2.70 0.00 135 DKIM_ADSP_CUSTOM_MED 1 0.57 2.70 0.00 136 XM_H_Undi_Recip 1 0.57 2.70 0.00 137 NML_ADSP_CUSTOM_MED 1 0.57 2.70 0.00 138 TR_XM_BayesRelay 1 0.57 2.70 0.00 139 IMG_ONLY_FM_DOM_INFO 1 1.14 2.70 0.72 140 XM_B_SpammyTLD 1 3.41 2.70 3.60 141 TR_XM_Base64_M2 1 0.57 2.70 0.00 142 XM_H_PHPOS_M 1 0.57 2.70 0.00 143 HELO_NODOT 1 0.57 2.70 0.00 144 XMPhish08 1 0.57 2.70 0.00 145 XMCmmnCold 1 0.57 2.70 0.00 146 XM_UB50 1 3.41 2.70 3.60 147 T_XMDrugObfuBody_14 1 1.70 2.70 1.44 148 XMSexyCombo_01 1 0.57 2.70 0.00 149 TVD_SPACE_RATIO 1 2.84 2.70 2.88 150 NOT_SPAM 1 0.57 2.70 0.00 151 URI_HEX 1 0.57 2.70 0.00 152 TR_Mismatch_TLD_02 1 1.14 2.70 0.72 153 TR_XM_MaxWHORU 1 2.27 2.70 2.16 154 INVALID_MSGID 1 3.41 2.70 3.60 155 XMLngstWrd_01 1 1.14 2.70 0.72 156 TR_XM_Undi_Recip6 1 0.57 2.70 0.00 157 RCVD_IN_IADB_OPTIN_GT50 1 1.14 2.70 0.72 158 MONEY_BACK 1 0.57 2.70 0.00 159 RELAYCOUNTRY_IN 1 0.57 2.70 0.00 160 XMNumbers 1 5.11 2.70 5.76 161 BASE64_LENGTH_79_INF 1 1.14 2.70 0.72 162 TM2_M_BODY_EMPTY 1 0.57 2.70 0.00 163 T_MONEY_PERCENT 1 0.57 2.70 0.00 164 TR_LOTS_OF_MONEY2 1 0.57 2.70 0.00 165 MONEY_NOHTML 1 0.57 2.70 0.00 166 XMSubMetaSxObfu_02 1 1.14 2.70 0.72 167 FSL_HELO_NON_FQDN_1 1 0.57 2.70 0.00 168 RELAYCOUNTRY_FI 1 0.57 2.70 0.00 169 XM_OfRef7 1 0.57 2.70 0.00 170 ANY_BOUNCE_MESSAGE 1 3.41 2.70 3.60 171 NO_DNS_FOR_FROM 1 2.84 2.70 2.88 172 XMLngstWrd_04 1 1.14 2.70 0.72 173 BOUNCE_MESSAGE 1 3.41 2.70 3.60 174 URI_NOVOWEL 1 0.57 2.70 0.00 175 TR_XM_COVIDMETA4 1 0.57 2.70 0.00 176 TR_Mismatch_TLD_01 1 0.57 2.70 0.00 177 HTML_IMAGE_ONLY_24 1 2.27 2.70 2.16 178 XMSubPhish11 1 1.14 2.70 0.72 179 DKIM_ADSP_NXDOMAIN 1 2.84 2.70 2.88 180 XM_UB999 1 0.57 2.70 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 122 86.93 83.78 87.77 2 HTML_MESSAGE 110 81.25 89.19 79.14 3 RELAYCOUNTRY_US 108 76.70 72.97 77.70 4 DKIM_SIGNED 104 75.57 78.38 74.82 5 DCC_CHECK_NEGATIVE 101 72.16 70.27 72.66 6 XM_DK_Pass 101 72.73 72.97 72.66 7 DKIM_VALID 101 72.73 72.97 72.66 8 XM_B_Unicode 89 65.91 72.97 64.03 9 DKIM_VALID_AU 80 57.39 56.76 57.55 10 BAYES_50 73 49.43 37.84 52.52 11 XMListUnsubscribeExists 56 43.18 54.05 40.29 12 XM_B_Unicode3 55 39.20 37.84 39.57 13 DKIM_VALID_EF 53 35.80 27.03 38.13 14 RCVD_IN_MSPIKE_WL 49 32.39 21.62 35.25 15 XMSubLong 42 28.98 24.32 30.22 16 XM_B_SpammyWords 41 37.50 67.57 29.50 17 HTML_FONT_LOW_CONTRAST 39 30.68 40.54 28.06 18 DCC_CHECK 38 27.84 29.73 27.34 19 FVGT_m_MULTI_ODD 38 26.70 24.32 27.34 20 LOC_TINY_FONT_1 38 30.68 43.24 27.34 21 RCVD_IN_MSPIKE_H2 33 24.43 27.03 23.74 22 RCVD_IN_MSPIKE_H5 32 19.32 5.41 23.02 23 MIME_HTML_ONLY 28 19.89 18.92 20.14 24 TR_XM_DK_Unsub 25 16.48 10.81 17.99 25 T_TM2_M_HEADER_IN_MSG 24 15.91 10.81 17.27 26 XM_Multi_Part_URI 23 16.48 16.22 16.55 27 UNPARSEABLE_RELAY 23 17.61 21.62 16.55 28 ALL_TRUSTED 23 14.77 8.11 16.55 29 XM_B_Unsub 22 16.48 18.92 15.83 30 BAYES_00 22 13.07 2.70 15.83 31 USER_IN_DEF_DKIM_WL 21 11.93 0.00 15.11 32 XMStrtUSub 17 12.50 13.51 12.23 33 TR_XM_DK_Bayes2 17 9.66 0.00 12.23 34 TR_XM_DK_Bayes1 17 9.66 0.00 12.23 35 TR_XM_DK_Bayes 17 9.66 0.00 12.23 36 XM_DK_Undo_02 16 17.05 37.84 11.51 37 BAYES_60 15 11.93 16.22 10.79 38 RCVD_IN_MSPIKE_H3 14 10.80 13.51 10.07 39 XM_UncommonTLD01 14 10.80 13.51 10.07 40 T_TooManySym_01 14 7.95 0.00 10.07 41 IN_ZIMBRA_NJ_WHITELIST 13 7.39 0.00 9.35 42 T_KAM_HTML_FONT_INVALID 13 11.93 21.62 9.35 43 RELAYCOUNTRY_META 13 13.07 27.03 9.35 44 BOTNET_IPINHOSTNAME 13 10.80 16.22 9.35 45 XM_DKIMWhitelistDomains 13 7.39 0.00 9.35 46 TR_XM_BayesUnsub 12 10.23 16.22 8.63 47 LotsOfNums_01 12 6.82 0.00 8.63 48 T_TooManySym_02 12 6.82 0.00 8.63 49 XM_SendGrid 12 9.09 10.81 8.63 50 FSL_BULK_SIG 11 6.82 2.70 7.91 51 XM_Evil_Numbers_Gen 11 7.39 5.41 7.91 52 XM_B_SpammyWords2 11 14.20 37.84 7.91 53 TooManyTo_001 11 7.95 8.11 7.91 54 TR_XM_PhishingBody 10 6.82 5.41 7.19 55 XM_PDF 10 5.68 0.00 7.19 56 BOTNET 9 8.52 16.22 6.47 57 XM_B_Phish66 9 5.68 2.70 6.47 58 XM_Body_Dirty_Words 9 9.09 18.92 6.47 59 BAYES_40 9 5.11 0.00 6.47 60 SCC_BODY_URI_ONLY 8 5.68 5.41 5.76 61 T_REMOTE_IMAGE 8 4.55 0.00 5.76 62 FROM_GOV_DKIM_AU 8 4.55 0.00 5.76 63 XMNumbers 8 5.11 2.70 5.76 64 UNTRUSTED_Relay 8 8.52 18.92 5.76 65 BAYES_99 7 10.23 29.73 5.04 66 TR_XM_DK_SendGrid 6 5.68 10.81 4.32 67 TO_MALFORMED 6 3.41 0.00 4.32 68 TR_XM_UnparsRelay 6 6.25 13.51 4.32 69 BAYES_95 6 4.55 5.41 4.32 70 BAYES_999 6 7.95 21.62 4.32 71 MPART_ALT_DIFF 6 3.41 0.00 4.32 72 MIME_HTML_MOSTLY 6 5.11 8.11 4.32 73 XM_H_Long_From01 6 6.25 13.51 4.32 74 HTML_IMAGE_RATIO_04 6 3.41 0.00 4.32 75 HTML_IMAGE_RATIO_06 5 6.82 18.92 3.60 76 TM2_M_URI_OPT_OUT 5 5.11 10.81 3.60 77 XM_B_SpammyTLD 5 3.41 2.70 3.60 78 XM_UB50 5 3.41 2.70 3.60 79 HTML_MIME_NO_HTML_TAG 5 3.98 5.41 3.60 80 XM_B_Phish_Phrases 5 4.55 8.11 3.60 81 T_TooManySym_03 5 2.84 0.00 3.60 82 INVALID_MSGID 5 3.41 2.70 3.60 83 ANY_BOUNCE_MESSAGE 5 3.41 2.70 3.60 84 BOUNCE_MESSAGE 5 3.41 2.70 3.60 85 BAYES_80 4 3.41 5.41 2.88 86 XM_B_Unsub2 4 2.27 0.00 2.88 87 TR_XM_SpammyRelay 4 4.55 10.81 2.88 88 TVD_SPACE_RATIO 4 2.84 2.70 2.88 89 THIS_AD 4 2.27 0.00 2.88 90 NO_DNS_FOR_FROM 4 2.84 2.70 2.88 91 HTML_IMAGE_RATIO_02 4 3.98 8.11 2.88 92 T_OBFU_PDF_ATTACH 4 2.27 0.00 2.88 93 LOTS_OF_MONEY 4 3.41 5.41 2.88 94 XMSubMetaSx_00 4 5.11 13.51 2.88 95 XMCapTrack 4 2.27 0.00 2.88 96 MAILING_LIST_MULTI 4 3.41 5.41 2.88 97 DKIM_ADSP_NXDOMAIN 4 2.84 2.70 2.88 98 XM_ZIP 4 2.27 0.00 2.88 99 XM_B_SpammyWords3 4 3.98 8.11 2.88 100 URI_TRY_3LD 3 1.70 0.00 2.16 101 TR_XM_PHPDW 3 2.84 5.41 2.16 102 TR_XM_PHPForged 3 3.41 8.11 2.16 103 BAYES_20 3 1.70 0.00 2.16 104 RCVD_IN_IADB_SPF 3 2.84 5.41 2.16 105 RCVD_IN_IADB_SENDERID 3 2.84 5.41 2.16 106 RCVD_IN_IADB_LISTED 3 2.84 5.41 2.16 107 TR_XM_FormFill2 3 2.84 5.41 2.16 108 RCVD_IN_MSPIKE_H4 3 2.27 2.70 2.16 109 RCVD_IN_VALIDITY_SAFE 3 1.70 0.00 2.16 110 MIME_HTML_ONLY_MULTI 3 1.70 0.00 2.16 111 RCVD_IN_IADB_DK 3 2.84 5.41 2.16 112 IN_HORDE_ADDRESS_BOOK 3 1.70 0.00 2.16 113 TR_Symld_Words 3 1.70 0.00 2.16 114 TooManyTo_002 3 1.70 0.00 2.16 115 SpammyFromTLD_01 3 2.84 5.41 2.16 116 XM_H_PHPOS 3 2.84 5.41 2.16 117 TR_XM_DKIM_Undo 3 8.52 32.43 2.16 118 FROM_EXCESS_BASE64 3 1.70 0.00 2.16 119 TR_XM_MaxWHORU 3 2.27 2.70 2.16 120 XMGappySubj_01 3 1.70 0.00 2.16 121 XM_B_COPY_HTML 3 1.70 0.00 2.16 122 DKIM_INVALID 3 2.84 5.41 2.16 123 RCVD_IN_VALIDITY_CERTIFIED 3 1.70 0.00 2.16 124 RELAYCOUNTRY_CA 3 1.70 0.00 2.16 125 HTML_IMAGE_ONLY_24 3 2.27 2.70 2.16 126 FROM_GOV_SPOOF 3 1.70 0.00 2.16 127 HTML_IMAGE_ONLY_28 2 1.14 0.00 1.44 128 INVALID_DATE 2 1.14 0.00 1.44 129 TR_XM_PSC1 2 1.14 0.00 1.44 130 XM_TLDProd2 2 1.14 0.00 1.44 131 XMSubMetaSxObfu_00 2 1.14 0.00 1.44 132 XM_CamelCaseFrm001 2 1.14 0.00 1.44 133 TR_XM_RelayPhish 2 2.27 5.41 1.44 134 HTML_IMAGE_ONLY_32 2 1.14 0.00 1.44 135 SHOPIFY_IMG_NOT_RCVD_SFY 2 1.14 0.00 1.44 136 TR_XM_SpammyWords4 2 2.27 5.41 1.44 137 XM_ZohoDesk1 2 1.14 0.00 1.44 138 TR_XM_NoHeaderRelay 2 2.84 8.11 1.44 139 HDRS_MISSP 2 1.14 0.00 1.44 140 NUMERIC_HTTP_ADDR 2 1.14 0.00 1.44 141 MISSING_HEADERS 2 2.27 5.41 1.44 142 MIME_CHARSET_FARAWAY 2 1.14 0.00 1.44 143 TR_XM_SpoofStaff 2 1.14 0.00 1.44 144 MIME_QP_LONG_LINE 2 2.27 5.41 1.44 145 T_XMDrugObfuBody_14 2 1.70 2.70 1.44 146 TR_XM_SpoofPhishAttach 2 1.14 0.00 1.44 147 RCVD_IN_IADB_OPTIN 2 2.27 5.41 1.44 148 XMSpoofStaff2 2 1.14 0.00 1.44 149 XM_ShortIntro_01 2 2.27 5.41 1.44 150 RELAYCOUNTRY_DE 2 1.14 0.00 1.44 151 RELAYCOUNTRY_ZA 2 1.14 0.00 1.44 152 XM_H_SpoofStaff4 2 1.14 0.00 1.44 153 RCVD_IN_IADB_VOUCHED 2 2.27 5.41 1.44 154 XMLngstWrd_00 2 2.27 5.41 1.44 155 FVGT_m_MULTI_ODD_EMAIL 2 1.14 0.00 1.44 156 XMSexyCombo_05 2 3.41 10.81 1.44 157 RELAYCOUNTRY_CN 1 1.14 2.70 0.72 158 RCVD_IN_MSPIKE_ZBI 1 0.57 0.00 0.72 159 HK_RANDOM_ENVFROM 1 0.57 0.00 0.72 160 TM2_M_VERY_LONG_WORD 1 2.27 8.11 0.72 161 XM_H_Long_From02 1 0.57 0.00 0.72 162 TR_XM_Base64_M1 1 1.14 2.70 0.72 163 RELAYCOUNTRY_IE 1 0.57 0.00 0.72 164 T_TooManySym_04 1 0.57 0.00 0.72 165 XMDiploma_00 1 1.14 2.70 0.72 166 CTE_8BIT_MISMATCH 1 0.57 0.00 0.72 167 RELAYCOUNTRY_PL 1 1.14 2.70 0.72 168 RELAYCOUNTRY_EC 1 0.57 0.00 0.72 169 XMBody_95 1 0.57 0.00 0.72 170 LOW_PRICE 1 1.14 2.70 0.72 171 XM_H_PHPMailer 1 1.70 5.41 0.72 172 XMLngstWrd_03 1 1.14 2.70 0.72 173 USER_IN_WHITELIST 1 0.57 0.00 0.72 174 TR_XM_SB_Phish 1 1.14 2.70 0.72 175 T_STY_INVIS_DIRECT 1 0.57 0.00 0.72 176 FROM_STARTS_WITH_NUMS 1 0.57 0.00 0.72 177 XMLngstWrd_02 1 1.14 2.70 0.72 178 KHOP_HELO_FCRDNS 1 0.57 0.00 0.72 179 T_XMDrugObfuBody_08 1 0.57 0.00 0.72 180 XM_GoogleGroups 1 0.57 0.00 0.72 181 LONG_JUNK_URI2 1 0.57 0.00 0.72 182 XM_H_AmazonPhish 1 0.57 0.00 0.72 183 RELAYCOUNTRY_BE 1 0.57 0.00 0.72 184 T_Symld_Words_02 1 0.57 0.00 0.72 185 RCVD_IN_MSPIKE_BL 1 0.57 0.00 0.72 186 IMG_ONLY_FM_DOM_INFO 1 1.14 2.70 0.72 187 FROM_LOCAL_HEX 1 0.57 0.00 0.72 188 SpammyFromTLD_02 1 0.57 0.00 0.72 189 SUBJ_ALL_CAPS 1 0.57 0.00 0.72 190 LONG_JUNK_URI 1 0.57 0.00 0.72 191 HTML_IMAGE_ONLY_16 1 0.57 0.00 0.72 192 XM_S_SEO 1 0.57 0.00 0.72 193 XMLngstWrd_01 1 1.14 2.70 0.72 194 SUBJ_DOLLARS 1 0.57 0.00 0.72 195 RCVD_IN_IADB_OPTIN_GT50 1 1.14 2.70 0.72 196 PLING_QUERY 1 0.57 0.00 0.72 197 XMStockSpam_01 1 0.57 0.00 0.72 198 BASE64_LENGTH_79_INF 1 1.14 2.70 0.72 199 XM_H_Trusted_IP 1 0.57 0.00 0.72 200 NORDNS_LOW_CONTRAST 1 3.41 13.51 0.72 ----------------------------------------------------------------------