Email: 326 Autolearn: 0 AvgScore: 1.33 AvgScanTime: 3.35 sec Spam: 85 Autolearn: 0 AvgScore: 12.59 AvgScanTime: 3.50 sec Ham: 241 Autolearn: 0 AvgScore: -2.63 AvgScanTime: 3.30 sec Time Spent Running SA: 0.30 hours Time Spent Processing Spam: 0.08 hours Time Spent Processing Ham: 0.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 75 80.37 88.24 77.59 2 DKIM_SIGNED 71 76.69 83.53 74.27 3 T_SCC_BODY_TEXT_LINE 71 85.58 83.53 86.31 4 RELAYCOUNTRY_US 68 74.85 80.00 73.03 5 XM_DK_Pass 67 73.01 78.82 70.95 6 DKIM_VALID 64 71.17 75.29 69.71 7 XM_B_Unicode 56 57.67 65.88 54.77 8 DCC_CHECK_NEGATIVE 54 74.54 63.53 78.42 9 DKIM_VALID_AU 52 58.28 61.18 57.26 10 RCVD_IN_MSPIKE_H2 49 29.75 57.65 19.92 11 XMListUnsubscribeExists 45 45.40 52.94 42.74 12 XM_B_SpammyWords 41 41.72 48.24 39.42 13 BAYES_50 41 55.52 48.24 58.09 14 DKIM_VALID_EF 38 39.88 44.71 38.17 15 LOC_TINY_FONT_1 38 32.21 44.71 27.80 16 DCC_CHECK 31 25.46 36.47 21.58 17 HTML_FONT_LOW_CONTRAST 30 34.97 35.29 34.85 18 XM_B_SpammyWords2 30 18.40 35.29 12.45 19 T_KAM_HTML_FONT_INVALID 28 23.31 32.94 19.92 20 XM_B_Unicode3 27 32.82 31.76 33.20 21 UNPARSEABLE_RELAY 27 20.86 31.76 17.01 22 MIME_HTML_ONLY 26 22.70 30.59 19.92 23 XM_DK_Undo_02 24 11.66 28.24 5.81 24 FVGT_m_MULTI_ODD 23 28.83 27.06 29.46 25 TR_XM_DK_Unsub 21 20.25 24.71 18.67 26 RELAYCOUNTRY_META 20 13.50 23.53 9.96 27 BAYES_99 19 7.67 22.35 2.49 28 XMSubLong 17 22.39 20.00 23.24 29 URIBL_DBL_SPAM 16 7.36 18.82 3.32 30 TM2_M_URI_OPT_OUT 15 4.91 17.65 0.41 31 XM_SendGrid 15 11.96 17.65 9.96 32 BAYES_999 14 6.13 16.47 2.49 33 TR_XM_DK_SendGrid 14 9.51 16.47 7.05 34 XM_B_Unsub 12 8.90 14.12 7.05 35 TR_XM_BayesUnsub 12 8.59 14.12 6.64 36 XM_Multi_Part_URI 12 17.79 14.12 19.09 37 T_TM2_M_HEADER_IN_MSG 12 22.09 14.12 24.90 38 TR_XM_DKIM_Undo 11 6.44 12.94 4.15 39 UNTRUSTED_Relay 11 10.12 12.94 9.13 40 FSL_BULK_SIG 10 8.90 11.76 7.88 41 TR_XM_UnparsRelay 10 5.21 11.76 2.90 42 BOTNET 10 5.21 11.76 2.90 43 XM_UncommonTLD01 9 7.06 10.59 5.81 44 TR_DCC_Bayes_99 8 3.07 9.41 0.83 45 BAYES_95 8 4.91 9.41 3.32 46 BOTNET_IPINHOSTNAME 8 6.13 9.41 4.98 47 BAYES_80 8 5.21 9.41 3.73 48 NML_ADSP_CUSTOM_MED 7 2.76 8.24 0.83 49 XM_B_SpammyWords3 7 4.29 8.24 2.90 50 BAYES_60 7 9.51 8.24 9.96 51 DKIM_ADSP_CUSTOM_MED 7 2.76 8.24 0.83 52 DKIM_INVALID 7 5.52 8.24 4.56 53 RCVD_IN_MSPIKE_BL 6 2.15 7.06 0.41 54 LOTS_OF_MONEY 6 6.13 7.06 5.81 55 SCC_BODY_URI_ONLY 6 5.21 7.06 4.56 56 TR_Symld_Words 6 1.84 7.06 0.00 57 XM_Evil_Numbers_Gen 6 10.43 7.06 11.62 58 TR_XM_SpammyRelay 6 7.36 7.06 7.47 59 TR_XM_MSPIKECOMBO 6 2.15 7.06 0.41 60 TR_XM_SpammyWords2 5 1.53 5.88 0.00 61 HTML_IMAGE_RATIO_06 5 3.37 5.88 2.49 62 XM_H_Long_From02 5 1.84 5.88 0.41 63 XMNoVowels 5 2.76 5.88 1.66 64 FORGED_GMAIL_RCVD 5 1.84 5.88 0.41 65 XM_UB50 4 4.60 4.71 4.56 66 RCVD_IN_VALIDITY_RPBL 4 1.53 4.71 0.41 67 TR_XM_InvalidRelay 4 1.23 4.71 0.00 68 TR_XM_SpammyWords4 4 1.84 4.71 0.83 69 LotsOfNums_01 4 5.52 4.71 5.81 70 RCVD_IN_MSPIKE_WL 4 25.77 4.71 33.20 71 SHOPIFY_IMG_NOT_RCVD_SFY 4 2.15 4.71 1.24 72 RCVD_IN_PSBL 4 1.23 4.71 0.00 73 TR_Sbj_FN_Bdy 4 1.23 4.71 0.00 74 HTML_FONT_TINY_NORDNS 4 1.53 4.71 0.41 75 TooManyTo_001 4 3.99 4.71 3.73 76 TM2_M_BODY_EMPTY 3 0.92 3.53 0.00 77 MIME_QP_LONG_LINE 3 2.45 3.53 2.07 78 MAILING_LIST_MULTI 3 2.15 3.53 1.66 79 RELAYCOUNTRY_PL 3 0.92 3.53 0.00 80 TR_XM_SEO4 3 0.92 3.53 0.00 81 XM_UB99 3 0.92 3.53 0.00 82 RELAYCOUNTRY_GB 3 1.23 3.53 0.41 83 RCVD_IN_BL_SPAMCOP_NET 3 1.23 3.53 0.41 84 T_XMDrugObfuBody_08 3 1.84 3.53 1.24 85 XM_H_Long_From01 3 3.37 3.53 3.32 86 XM_SPF_SoftFail 3 1.53 3.53 0.83 87 RELAYCOUNTRY_JP 3 0.92 3.53 0.00 88 TR_Mismatch_TLD_02 3 0.92 3.53 0.00 89 XMGppyBdWords 3 0.92 3.53 0.00 90 XM_B_Phish_Phrases 3 2.76 3.53 2.49 91 HTML_IMAGE_RATIO_02 3 1.84 3.53 1.24 92 T_TooManySym_01 3 7.67 3.53 9.13 93 SHORT_URI 3 0.92 3.53 0.00 94 XMSubNoVowel 3 1.23 3.53 0.41 95 HTML_IMAGE_RATIO_08 3 2.45 3.53 2.07 96 RCVD_IN_MSPIKE_L4 3 0.92 3.53 0.00 97 XM_CamelCaseFrm001 3 1.84 3.53 1.24 98 XM_UB999 3 0.92 3.53 0.00 99 XM_B_SEO 3 0.92 3.53 0.00 100 XMEmptyBody_01 3 0.92 3.53 0.00 101 RELAYCOUNTRY_AR 2 0.61 2.35 0.00 102 T_TooManySym_02 2 5.21 2.35 6.22 103 FROM_MULTI_NORDNS 2 0.61 2.35 0.00 104 XM_UB80 2 0.61 2.35 0.00 105 DOS_OE_TO_MX 2 0.61 2.35 0.00 106 PDS_OTHER_BAD_TLD 2 0.61 2.35 0.00 107 LONG_JUNK_URI2 2 0.61 2.35 0.00 108 PDS_TO_EQ_FROM_NAME 2 0.61 2.35 0.00 109 KHOP_HELO_FCRDNS 2 2.45 2.35 2.49 110 XMSubMetaSx_00 2 2.15 2.35 2.07 111 URIBL_SBL_A 2 0.61 2.35 0.00 112 RCVD_IN_MSPIKE_L3 2 0.92 2.35 0.41 113 MIMEOLE_DIRECT_TO_MX 2 0.61 2.35 0.00 114 ALL_TRUSTED 2 12.27 2.35 15.77 115 XMSubject_38 2 0.61 2.35 0.00 116 TooManyTo_002 2 1.23 2.35 0.83 117 TooManyTo_004 2 0.61 2.35 0.00 118 NORDNS_LOW_CONTRAST 2 0.92 2.35 0.41 119 SUBJ_ALL_CAPS 2 0.61 2.35 0.00 120 TR_XM_PhishingBody 2 3.37 2.35 3.73 121 NO_DNS_FOR_FROM 2 0.61 2.35 0.00 122 XM_H_Undi_Recip 2 0.61 2.35 0.00 123 XM_Combo_Sbj 2 0.61 2.35 0.00 124 MIME_HTML_MOSTLY 2 2.15 2.35 2.07 125 URI_HEX 2 2.15 2.35 2.07 126 HELO_DYNAMIC_SPLIT_IP 2 0.61 2.35 0.00 127 T_FILL_THIS_FORM_SHORT 2 1.84 2.35 1.66 128 XM_B_SpammyTLD 2 4.60 2.35 5.39 129 XMSlimDrugH 2 0.92 2.35 0.41 130 NAME_EMAIL_DIFF 2 0.61 2.35 0.00 131 TVD_SPACE_RATIO 2 3.68 2.35 4.15 132 TooManyTo_003 2 0.92 2.35 0.41 133 UNDISC_MONEY 2 0.61 2.35 0.00 134 NO_FM_NAME_IP_HOSTN 2 0.92 2.35 0.41 135 WEIRD_QUOTING 2 0.61 2.35 0.00 136 RCVD_IN_MSPIKE_H5 2 16.56 2.35 21.58 137 FAKE_REPLY_C 2 0.61 2.35 0.00 138 RELAYCOUNTRY_AU 2 1.84 2.35 1.66 139 XM_UB60 2 0.92 2.35 0.41 140 TR_XM_MaxWHORU 2 0.61 2.35 0.00 141 URI_ONLY_MSGID_MALF 2 0.61 2.35 0.00 142 SHORT_SHORTNER 2 0.61 2.35 0.00 143 RELAYCOUNTRY_NP 2 0.61 2.35 0.00 144 LONG_JUNK_URI 2 0.61 2.35 0.00 145 RCVD_IN_RP_RNBL 2 0.61 2.35 0.00 146 DATE_IN_PAST_03_06 2 0.61 2.35 0.00 147 XM_Body_Dirty_Words 2 4.60 2.35 5.39 148 FROM_2_EMAILS_SHORT 2 0.61 2.35 0.00 149 XM_ProductURIs 2 1.23 2.35 0.83 150 BAYES_40 2 3.99 2.35 4.56 151 XMStockSpam_06 2 1.53 2.35 1.24 152 PLING_QUERY 1 0.31 1.18 0.00 153 TR_XM_RelayPhish 1 0.31 1.18 0.00 154 HK_RANDOM_FROM 1 1.53 1.18 1.66 155 MONEY_FRAUD_8 1 0.31 1.18 0.00 156 TR_XM_FormFill2 1 0.31 1.18 0.00 157 XM_H_PHPOS 1 0.31 1.18 0.00 158 MONEY_BACK 1 0.31 1.18 0.00 159 XM_H_PHPOS_M 1 0.31 1.18 0.00 160 XM_B_Investor 1 0.92 1.18 0.83 161 HTML_IMAGE_RATIO_04 1 3.37 1.18 4.15 162 RELAYCOUNTRY_ID 1 0.31 1.18 0.00 163 XM_Nigeria_01 1 0.31 1.18 0.00 164 PDS_RDNS_DYNAMIC_FP 1 0.31 1.18 0.00 165 XM_URI_RBL 1 0.31 1.18 0.00 166 ADVANCE_FEE_5_NEW_MONEY 1 0.31 1.18 0.00 167 XPRIO 1 0.31 1.18 0.00 168 TooManyTo_005 1 0.31 1.18 0.00 169 RELAYCOUNTRY_IN 1 0.31 1.18 0.00 170 TR_XM_Spammywords 1 0.31 1.18 0.00 171 NUMERIC_HTTP_ADDR 1 0.31 1.18 0.00 172 TM2_M_OBFU_COMMENT 1 0.31 1.18 0.00 173 MSGID_DOLLARS_URI_IMG 1 0.31 1.18 0.00 174 RDNS_DYNAMIC 1 0.61 1.18 0.41 175 XMPhish08 1 0.31 1.18 0.00 176 HELO_NO_DOMAIN 1 0.61 1.18 0.41 177 URI_NOVOWEL 1 0.31 1.18 0.00 178 RELAYCOUNTRY_FR 1 0.92 1.18 0.83 179 OBFU_TEXT_ATTACH 1 0.31 1.18 0.00 180 RELAYCOUNTRY_NG 1 0.31 1.18 0.00 181 TR_XM_PHPDW 1 0.31 1.18 0.00 182 RELAYCOUNTRY_MY 1 0.31 1.18 0.00 183 TR_XM_SpammyWords5 1 0.61 1.18 0.41 184 HDR_ORDER_FTSDMCXX_DIRECT 1 0.31 1.18 0.00 185 RCVD_IN_MSPIKE_H3 1 4.91 1.18 6.22 186 LongTLD 1 0.31 1.18 0.00 187 DKIM_ADSP_NXDOMAIN 1 0.31 1.18 0.00 188 TR_XM_NoHeaderRelay 1 0.92 1.18 0.83 189 NORMAL_HTTP_TO_IP 1 0.31 1.18 0.00 190 FSL_HELO_NON_FQDN_1 1 0.31 1.18 0.00 191 TR_XM_Undi_Recip11 1 0.31 1.18 0.00 192 SpammyFromTLD_02 1 0.31 1.18 0.00 193 TVD_SPACE_RATIO_MINFP 1 0.31 1.18 0.00 194 XM_H_PHPMailer 1 1.84 1.18 2.07 195 PDS_FROM_2_EMAILS 1 0.31 1.18 0.00 196 FROM_GOV_SPOOF 1 1.23 1.18 1.24 197 DIET_1 1 0.61 1.18 0.41 198 MISSING_HEADERS 1 0.92 1.18 0.83 199 T_REMOTE_IMAGE 1 3.37 1.18 4.15 200 T_XMDrugObfuBody_14 1 1.84 1.18 2.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 208 85.58 83.53 86.31 2 DCC_CHECK_NEGATIVE 189 74.54 63.53 78.42 3 HTML_MESSAGE 187 80.37 88.24 77.59 4 DKIM_SIGNED 179 76.69 83.53 74.27 5 RELAYCOUNTRY_US 176 74.85 80.00 73.03 6 XM_DK_Pass 171 73.01 78.82 70.95 7 DKIM_VALID 168 71.17 75.29 69.71 8 BAYES_50 140 55.52 48.24 58.09 9 DKIM_VALID_AU 138 58.28 61.18 57.26 10 XM_B_Unicode 132 57.67 65.88 54.77 11 XMListUnsubscribeExists 103 45.40 52.94 42.74 12 XM_B_SpammyWords 95 41.72 48.24 39.42 13 DKIM_VALID_EF 92 39.88 44.71 38.17 14 HTML_FONT_LOW_CONTRAST 84 34.97 35.29 34.85 15 XM_B_Unicode3 80 32.82 31.76 33.20 16 RCVD_IN_MSPIKE_WL 80 25.77 4.71 33.20 17 FVGT_m_MULTI_ODD 71 28.83 27.06 29.46 18 LOC_TINY_FONT_1 67 32.21 44.71 27.80 19 T_TM2_M_HEADER_IN_MSG 60 22.09 14.12 24.90 20 XMSubLong 56 22.39 20.00 23.24 21 DCC_CHECK 52 25.46 36.47 21.58 22 RCVD_IN_MSPIKE_H5 52 16.56 2.35 21.58 23 RCVD_IN_MSPIKE_H2 48 29.75 57.65 19.92 24 MIME_HTML_ONLY 48 22.70 30.59 19.92 25 T_KAM_HTML_FONT_INVALID 48 23.31 32.94 19.92 26 XM_Multi_Part_URI 46 17.79 14.12 19.09 27 TR_XM_DK_Unsub 45 20.25 24.71 18.67 28 UNPARSEABLE_RELAY 41 20.86 31.76 17.01 29 ALL_TRUSTED 38 12.27 2.35 15.77 30 XM_B_SpammyWords2 30 18.40 35.29 12.45 31 BAYES_00 29 8.90 0.00 12.03 32 XM_Evil_Numbers_Gen 28 10.43 7.06 11.62 33 RELAYCOUNTRY_META 24 13.50 23.53 9.96 34 XMNumbers 24 7.67 1.18 9.96 35 XM_SendGrid 24 11.96 17.65 9.96 36 BAYES_60 24 9.51 8.24 9.96 37 T_TooManySym_01 22 7.67 3.53 9.13 38 UNTRUSTED_Relay 22 10.12 12.94 9.13 39 FSL_BULK_SIG 19 8.90 11.76 7.88 40 XM_DKIMWhitelistDomains 18 5.52 0.00 7.47 41 TR_XM_DK_Bayes 18 5.52 0.00 7.47 42 TR_XM_DK_Bayes1 18 5.52 0.00 7.47 43 TR_XM_SpammyRelay 18 7.36 7.06 7.47 44 IN_ZIMBRA_NJ_WHITELIST 17 5.21 0.00 7.05 45 TR_XM_DK_SendGrid 17 9.51 16.47 7.05 46 XM_B_Unsub 17 8.90 14.12 7.05 47 TR_XM_BayesUnsub 16 8.59 14.12 6.64 48 TR_XM_DK_Bayes2 16 4.91 0.00 6.64 49 T_TooManySym_02 15 5.21 2.35 6.22 50 RCVD_IN_MSPIKE_H3 15 4.91 1.18 6.22 51 XMStrtUSub 15 4.91 1.18 6.22 52 XM_UncommonTLD01 14 7.06 10.59 5.81 53 LotsOfNums_01 14 5.52 4.71 5.81 54 XM_DK_Undo_02 14 11.66 28.24 5.81 55 LOTS_OF_MONEY 14 6.13 7.06 5.81 56 RCVD_IN_MSPIKE_H4 13 4.29 1.18 5.39 57 XM_B_SpammyTLD 13 4.60 2.35 5.39 58 XM_Body_Dirty_Words 13 4.60 2.35 5.39 59 RCVD_IN_VALIDITY_SAFE 12 3.68 0.00 4.98 60 BOTNET_IPINHOSTNAME 12 6.13 9.41 4.98 61 XM_UB50 11 4.60 4.71 4.56 62 SCC_BODY_URI_ONLY 11 5.21 7.06 4.56 63 BAYES_40 11 3.99 2.35 4.56 64 DKIM_INVALID 11 5.52 8.24 4.56 65 HTML_IMAGE_RATIO_04 10 3.37 1.18 4.15 66 TR_XM_DKIM_Undo 10 6.44 12.94 4.15 67 RCVD_IN_VALIDITY_CERTIFIED 10 3.07 0.00 4.15 68 USER_IN_DEF_DKIM_WL 10 3.37 1.18 4.15 69 TVD_SPACE_RATIO 10 3.68 2.35 4.15 70 T_REMOTE_IMAGE 10 3.37 1.18 4.15 71 BAYES_80 9 5.21 9.41 3.73 72 TR_XM_PhishingBody 9 3.37 2.35 3.73 73 BOUNCE_MESSAGE 9 2.76 0.00 3.73 74 TO_MALFORMED 9 2.76 0.00 3.73 75 ANY_BOUNCE_MESSAGE 9 2.76 0.00 3.73 76 TooManyTo_001 9 3.99 4.71 3.73 77 INVALID_MSGID 9 3.07 1.18 3.73 78 BAYES_95 8 4.91 9.41 3.32 79 XM_H_Long_From01 8 3.37 3.53 3.32 80 URIBL_DBL_SPAM 8 7.36 18.82 3.32 81 T_TooManySym_03 7 2.15 0.00 2.90 82 XMSubPhish11 7 2.15 0.00 2.90 83 XM_B_SpammyWords3 7 4.29 8.24 2.90 84 TR_XM_SB_Phish 7 2.15 0.00 2.90 85 BAYES_05 7 2.15 0.00 2.90 86 TR_XM_UnparsRelay 7 5.21 11.76 2.90 87 RELAYCOUNTRY_AT 7 2.15 0.00 2.90 88 BAYES_20 7 2.15 0.00 2.90 89 BOTNET 7 5.21 11.76 2.90 90 KHOP_HELO_FCRDNS 6 2.45 2.35 2.49 91 USER_IN_WHITELIST 6 1.84 0.00 2.49 92 BAYES_999 6 6.13 16.47 2.49 93 BAYES_99 6 7.67 22.35 2.49 94 XM_B_Phish_Phrases 6 2.76 3.53 2.49 95 FVGT_m_MULTI_ODD_EMAIL 6 2.15 1.18 2.49 96 HTML_IMAGE_RATIO_06 6 3.37 5.88 2.49 97 USER_IN_WELCOMELIST 6 1.84 0.00 2.49 98 XMSubMetaSx_00 5 2.15 2.35 2.07 99 MIME_QP_LONG_LINE 5 2.45 3.53 2.07 100 IN_HORDE_ADDRESS_BOOK 5 1.53 0.00 2.07 101 XM_H_PHPMailer 5 1.84 1.18 2.07 102 MIME_HTML_MOSTLY 5 2.15 2.35 2.07 103 RCVD_IN_IADB_SENDERID 5 1.53 0.00 2.07 104 MPART_ALT_DIFF 5 1.84 1.18 2.07 105 RCVD_IN_IADB_LISTED 5 1.53 0.00 2.07 106 T_XMDrugObfuBody_14 5 1.84 1.18 2.07 107 URI_HEX 5 2.15 2.35 2.07 108 RCVD_IN_IADB_SPF 5 1.53 0.00 2.07 109 HTML_MIME_NO_HTML_TAG 5 1.84 1.18 2.07 110 HTML_IMAGE_RATIO_08 5 2.45 3.53 2.07 111 HK_RANDOM_ENVFROM 4 1.23 0.00 1.66 112 MAILING_LIST_MULTI 4 2.15 3.53 1.66 113 HK_RANDOM_FROM 4 1.53 1.18 1.66 114 TR_XM_PSC1 4 1.23 0.00 1.66 115 XM_H_SpoofStaff4 4 1.23 0.00 1.66 116 XMSpoofStaff2 4 1.23 0.00 1.66 117 TR_XM_SpoofStaff 4 1.23 0.00 1.66 118 FROM_EXCESS_BASE64 4 1.23 0.00 1.66 119 XM_OfRef6 4 1.53 1.18 1.66 120 XM_B_Unsub2 4 1.23 0.00 1.66 121 TM2_M_VERY_LONG_WORD 4 1.23 0.00 1.66 122 T_FILL_THIS_FORM_SHORT 4 1.84 2.35 1.66 123 XM_ZIP 4 1.23 0.00 1.66 124 RCVD_IN_IADB_VOUCHED 4 1.23 0.00 1.66 125 RELAYCOUNTRY_CN 4 1.23 0.00 1.66 126 XMNoVowels 4 2.76 5.88 1.66 127 XM_B_Phish66 4 1.53 1.18 1.66 128 RELAYCOUNTRY_AU 4 1.84 2.35 1.66 129 XMPhish30 3 0.92 0.00 1.24 130 FROM_GOV_SPOOF 3 1.23 1.18 1.24 131 TR_Mismatch_TLD_01 3 0.92 0.00 1.24 132 T_XMDrugObfuBody_08 3 1.84 3.53 1.24 133 XMGappySubj_01 3 0.92 0.00 1.24 134 HTML_IMAGE_RATIO_02 3 1.84 3.53 1.24 135 XM_DK_Undo_01 3 0.92 0.00 1.24 136 RELAYCOUNTRY_CA 3 1.23 1.18 1.24 137 SHOPIFY_IMG_NOT_RCVD_SFY 3 2.15 4.71 1.24 138 XMStockSpam_06 3 1.53 2.35 1.24 139 RCVD_IN_IADB_OPTIN 3 0.92 0.00 1.24 140 XM_CamelCaseFrm001 3 1.84 3.53 1.24 141 XM_DIRTYINTL 3 0.92 0.00 1.24 142 RCVD_IN_IADB_DK 3 0.92 0.00 1.24 143 NML_ADSP_CUSTOM_MED 2 2.76 8.24 0.83 144 TR_DCC_Bayes_99 2 3.07 9.41 0.83 145 TR_XM_SpammyWords4 2 1.84 4.71 0.83 146 XMBody_95 2 0.61 0.00 0.83 147 CHARSET_FARAWAY_HEADER 2 0.61 0.00 0.83 148 XM_Body_Obfu01 2 0.61 0.00 0.83 149 MIME_HTML_ONLY_MULTI 2 0.61 0.00 0.83 150 XM_B_Investor 2 0.92 1.18 0.83 151 HTML_FONT_FACE_BAD 2 0.61 0.00 0.83 152 TR_XM_NoHeaderRelay 2 0.92 1.18 0.83 153 HTML_SHORT_LINK_IMG_3 2 0.61 0.00 0.83 154 TR_XM_SpoofStaff3 2 0.61 0.00 0.83 155 XM_SPF_SoftFail 2 1.53 3.53 0.83 156 TooManyTo_002 2 1.23 2.35 0.83 157 TR_XM_SpoofPhishAttach 2 0.61 0.00 0.83 158 XM_ZohoDesk1 2 0.61 0.00 0.83 159 XM_ZohoHelp 2 0.61 0.00 0.83 160 RELAYCOUNTRY_FR 2 0.92 1.18 0.83 161 XMLngstWrd_00 2 0.61 0.00 0.83 162 NICE_REPLY_A 2 0.61 0.00 0.83 163 XMSolicitRefs_0 2 0.92 1.18 0.83 164 XMBody_17 2 0.61 0.00 0.83 165 HTML_IMAGE_ONLY_16 2 0.61 0.00 0.83 166 MISSING_HEADERS 2 0.92 1.18 0.83 167 MIME_HEADER_CTYPE_ONLY 2 0.61 0.00 0.83 168 XMSubMetaSxObfu_03 2 0.61 0.00 0.83 169 MSGID_NOFQDN1 2 0.61 0.00 0.83 170 XM_ProductURIs 2 1.23 2.35 0.83 171 TR_XM_Base64_M1 2 0.92 1.18 0.83 172 XMDiploma_00 2 0.92 1.18 0.83 173 SpammyFromTLD_01 2 0.92 1.18 0.83 174 XM_Dr_From 2 0.61 0.00 0.83 175 XMSpoofStaff 2 0.61 0.00 0.83 176 TR_MetaPhish_Combo_01 2 0.61 0.00 0.83 177 DKIM_ADSP_CUSTOM_MED 2 2.76 8.24 0.83 178 XM_ZohoDesk 2 0.61 0.00 0.83 179 MIME_CHARSET_FARAWAY 2 0.61 0.00 0.83 180 SHORT_HELO_AND_INLINE_IMAGE 1 0.31 0.00 0.41 181 RCVD_IN_MSPIKE_L3 1 0.92 2.35 0.41 182 RELAYCOUNTRY_NL 1 0.31 0.00 0.41 183 RCVD_IN_BL_SPAMCOP_NET 1 1.23 3.53 0.41 184 RDNS_DYNAMIC 1 0.61 1.18 0.41 185 HTTPS_HTTP_MISMATCH 1 0.31 0.00 0.41 186 T_FILL_THIS_FORM_LOAN 1 0.31 0.00 0.41 187 FROM_LOCAL_DIGITS 1 0.31 0.00 0.41 188 RELAYCOUNTRY_GB 1 1.23 3.53 0.41 189 HTML_IMAGE_ONLY_32 1 0.31 0.00 0.41 190 T_TVD_MIME_EPI 1 0.31 0.00 0.41 191 MIXED_FONT_CASE 1 0.31 0.00 0.41 192 HTML_IMAGE_ONLY_20 1 0.31 0.00 0.41 193 XMBSHREFv2 1 0.31 0.00 0.41 194 TR_MetaPhish_Combo_01b 1 0.31 0.00 0.41 195 RCVD_IN_VALIDITY_RPBL 1 1.53 4.71 0.41 196 RCVD_IN_MSPIKE_BL 1 2.15 7.06 0.41 197 TO_NO_BRKTS_HTML_ONLY 1 0.31 0.00 0.41 198 XMLngstWrd_02 1 0.31 0.00 0.41 199 XM_B_SpammyTLD2 1 0.31 0.00 0.41 200 XM_S_SubURI 1 0.31 0.00 0.41 ----------------------------------------------------------------------