Email: 286 Autolearn: 0 AvgScore: 2.37 AvgScanTime: 3.45 sec Spam: 70 Autolearn: 0 AvgScore: 14.93 AvgScanTime: 3.39 sec Ham: 216 Autolearn: 0 AvgScore: -1.70 AvgScanTime: 3.48 sec Time Spent Running SA: 0.27 hours Time Spent Processing Spam: 0.07 hours Time Spent Processing Ham: 0.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 66 84.62 94.29 81.48 2 T_SCC_BODY_TEXT_LINE 55 80.77 78.57 81.48 3 RELAYCOUNTRY_US 49 75.17 70.00 76.85 4 DKIM_SIGNED 48 72.73 68.57 74.07 5 DKIM_VALID 45 67.13 64.29 68.06 6 XM_DK_Pass 45 69.58 64.29 71.30 7 XM_B_Unicode 45 48.25 64.29 43.06 8 XM_B_SpammyWords 43 45.80 61.43 40.74 9 DCC_CHECK_NEGATIVE 40 80.77 57.14 88.43 10 XMListUnsubscribeExists 39 45.10 55.71 41.67 11 DKIM_VALID_EF 36 52.10 51.43 52.31 12 LOC_TINY_FONT_1 31 33.92 44.29 30.56 13 DCC_CHECK 30 19.23 42.86 11.57 14 HTML_FONT_LOW_CONTRAST 30 36.71 42.86 34.72 15 RCVD_IN_MSPIKE_H2 29 29.72 41.43 25.93 16 MIME_HTML_ONLY 29 32.17 41.43 29.17 17 TR_XM_DK_Unsub 29 30.42 41.43 26.85 18 XM_B_Unicode3 29 29.37 41.43 25.46 19 T_TM2_M_HEADER_IN_MSG 28 35.66 40.00 34.26 20 BAYES_99 26 10.84 37.14 2.31 21 BAYES_999 25 10.14 35.71 1.85 22 BAYES_50 24 56.99 34.29 64.35 23 RELAYCOUNTRY_META 22 14.34 31.43 8.80 24 DKIM_VALID_AU 21 40.56 30.00 43.98 25 UNTRUSTED_Relay 21 10.84 30.00 4.63 26 XM_UB99 19 6.64 27.14 0.00 27 XM_UB999 19 6.64 27.14 0.00 28 BOTNET_IPINHOSTNAME 18 22.03 25.71 20.83 29 RELAYCOUNTRY_CN 17 6.64 24.29 0.93 30 XM_B_SpammyWords2 17 13.64 24.29 10.19 31 MPART_ALT_DIFF 17 6.29 24.29 0.46 32 XMSubNoVowel 17 6.99 24.29 1.39 33 TM2_M_URI_OPT_OUT 16 18.18 22.86 16.67 34 T_XMHurry_00 16 16.78 22.86 14.81 35 CHARSET_FARAWAY_HEADER 16 6.99 22.86 1.85 36 MIME_CHARSET_FARAWAY 16 6.99 22.86 1.85 37 BITCOIN_SPAM_03 15 5.24 21.43 0.00 38 HTML_EXTRA_CLOSE 15 5.24 21.43 0.00 39 BITCOIN_MALF_HTML 15 5.24 21.43 0.00 40 FSL_BULK_SIG 14 9.44 20.00 6.02 41 RCVD_IN_MSPIKE_WL 14 29.72 20.00 32.87 42 T_KAM_HTML_FONT_INVALID 12 15.38 17.14 14.81 43 FVGT_m_MULTI_ODD 12 17.13 17.14 17.13 44 XM_Body_Dirty_Words 12 10.84 17.14 8.80 45 BAYES_60 11 12.59 15.71 11.57 46 TR_DCC_Bayes_99 11 3.85 15.71 0.00 47 TR_XM_SpammyWords4 11 4.90 15.71 1.39 48 LOTS_OF_MONEY 11 5.94 15.71 2.78 49 XMSubLong 10 19.93 14.29 21.76 50 XM_Multi_Part_URI 9 10.84 12.86 10.19 51 UNPARSEABLE_RELAY 9 9.44 12.86 8.33 52 XM_DK_Undo_02 8 4.55 11.43 2.31 53 XM_B_Investor 7 3.15 10.00 0.93 54 TR_XM_BayesRelay 7 2.45 10.00 0.00 55 BOTNET 6 2.10 8.57 0.00 56 TR_XM_DKIM_Undo 6 2.80 8.57 0.93 57 RCVD_IN_MSPIKE_H3 6 6.99 8.57 6.48 58 XM_B_SpammyTLD 6 3.85 8.57 2.31 59 XMBrknScrpt_02 5 2.45 7.14 0.93 60 TR_LOTS_OF_MONEY3 5 1.75 7.14 0.00 61 BOTNET_NORDNS 5 1.75 7.14 0.00 62 XM_B_SEO 5 2.45 7.14 0.93 63 XMSexyCombo_05 5 1.75 7.14 0.00 64 TR_XM_MSPIKECOMBO 5 1.75 7.14 0.00 65 RCVD_IN_MSPIKE_BL 5 1.75 7.14 0.00 66 RCVD_IN_MSPIKE_H5 5 16.78 7.14 19.91 67 BAYES_80 5 3.50 7.14 2.31 68 TR_XM_UnparsRelay 5 2.80 7.14 1.39 69 T_MONEY_PERCENT 4 2.10 5.71 0.93 70 XMBody_95 4 1.40 5.71 0.00 71 TR_XM_SEO4 4 1.40 5.71 0.00 72 XM_B_Crypto 4 1.40 5.71 0.00 73 XM_DK_Undo_01 4 1.40 5.71 0.00 74 PDS_OTHER_BAD_TLD 4 1.40 5.71 0.00 75 TR_XM_MSPIKECOMBO2 4 1.40 5.71 0.00 76 TR_LOTS_OF_MONEY2 4 2.10 5.71 0.93 77 XM_SendGrid 4 3.50 5.71 2.78 78 TooManyTo_001 4 6.99 5.71 7.41 79 XM_B_SpammyWords3 4 5.24 5.71 5.09 80 XM_DIRTYINTL 4 3.85 5.71 3.24 81 XMClaimOffer 4 1.40 5.71 0.00 82 T_TooManySym_01 4 10.84 5.71 12.50 83 TR_XM_PhishingBody 4 3.50 5.71 2.78 84 LONG_HEX_URI 4 1.40 5.71 0.00 85 XMNumbers 4 4.55 5.71 4.17 86 TR_XM_SpammyRelay 4 4.55 5.71 4.17 87 RCVD_IN_MSPIKE_H4 3 5.94 4.29 6.48 88 TR_XM_InvalidRelay 3 1.05 4.29 0.00 89 TR_XM_MaxWHORU 3 1.05 4.29 0.00 90 URIBL_DBL_SPAM 3 1.40 4.29 0.46 91 TR_Symld_Words 3 1.75 4.29 0.93 92 DKIM_INVALID 3 5.59 4.29 6.02 93 XM_B_Phish_Phrases 3 2.80 4.29 2.31 94 NO_DNS_FOR_FROM 3 1.40 4.29 0.46 95 XMBdyGiftCard01 3 1.75 4.29 0.93 96 KHOP_HELO_FCRDNS 3 2.10 4.29 1.39 97 XMNoVowels 3 4.20 4.29 4.17 98 RELAYCOUNTRY_IN 2 0.70 2.86 0.00 99 TR_XM_FormFill2 2 0.70 2.86 0.00 100 TooManyTo_002 2 2.45 2.86 2.31 101 RCVD_IN_MSPIKE_L4 2 0.70 2.86 0.00 102 LONG_JUNK_URI 2 1.05 2.86 0.46 103 HTML_IMAGE_RATIO_06 2 2.80 2.86 2.78 104 TR_XM_SPAMCOP 2 0.70 2.86 0.00 105 XM_ShortIntro_01 2 1.40 2.86 0.93 106 TooManyTo_003 2 0.70 2.86 0.00 107 TR_XM_SpammyWords5 2 0.70 2.86 0.00 108 TR_Mismatch_TLD_01 2 0.70 2.86 0.00 109 RCVD_IN_VALIDITY_RPBL 2 0.70 2.86 0.00 110 SpammyFromTLD_01 2 1.05 2.86 0.46 111 FROM_SUSPICIOUS_NTLD_FP 2 0.70 2.86 0.00 112 NORMAL_HTTP_TO_IP 2 0.70 2.86 0.00 113 RCVD_IN_BL_SPAMCOP_NET 2 0.70 2.86 0.00 114 FSL_HELO_NON_FQDN_1 2 0.70 2.86 0.00 115 XM_H_PHPOS_M 2 0.70 2.86 0.00 116 XM_H_PHPOS 2 0.70 2.86 0.00 117 DIET_1 2 0.70 2.86 0.00 118 XM_H_PHPMailer 2 2.45 2.86 2.31 119 XMPhish30 2 0.70 2.86 0.00 120 FROM_SUSPICIOUS_NTLD 2 0.70 2.86 0.00 121 HELO_NO_DOMAIN 2 1.05 2.86 0.46 122 MIME_HTML_MOSTLY 2 3.50 2.86 3.70 123 RCVD_IN_MSPIKE_L5 2 0.70 2.86 0.00 124 URI_NOVOWEL 2 1.75 2.86 1.39 125 TR_XM_PHPDW 2 1.05 2.86 0.46 126 TR_XM_INV_DKIM 2 0.70 2.86 0.00 127 NUMERIC_HTTP_ADDR 2 1.05 2.86 0.46 128 HTML_IMAGE_RATIO_08 2 1.40 2.86 0.93 129 MISSING_HEADERS 2 1.40 2.86 0.93 130 XM_UncommonTLD01 2 4.55 2.86 5.09 131 TR_XM_PHPForged 2 0.70 2.86 0.00 132 BAYES_95 2 1.05 2.86 0.46 133 TooManyTo_004 2 0.70 2.86 0.00 134 DRUGS_ERECTILE 2 0.70 2.86 0.00 135 HELO_NODOT 2 1.05 2.86 0.46 136 XMCmmnCold 2 0.70 2.86 0.00 137 XM_Evil_Numbers_Gen 1 3.85 1.43 4.63 138 SUBJ_ALL_CAPS 1 0.35 1.43 0.00 139 RDNS_DYNAMIC 1 0.70 1.43 0.46 140 TR_Sbj_FN_Bdy 1 1.40 1.43 1.39 141 TR_Mismatch_TLD_02 1 0.70 1.43 0.46 142 XM_OfRef7 1 0.35 1.43 0.00 143 LONG_JUNK_URI3 1 0.35 1.43 0.00 144 T_FILL_THIS_FORM_SHORT 1 0.35 1.43 0.00 145 RELAYCOUNTRY_JP 1 1.05 1.43 0.93 146 RELAYCOUNTRY_TW 1 0.35 1.43 0.00 147 XM_BadFromFormat 1 0.70 1.43 0.46 148 PDS_RDNS_DYNAMIC_FP 1 0.35 1.43 0.00 149 XMPhish08 1 1.05 1.43 0.93 150 HDR_ORDER_FTSDMCXX_NORDNS 1 0.35 1.43 0.00 151 FROM_GOV_SPOOF 1 1.40 1.43 1.39 152 XM_PDF 1 1.75 1.43 1.85 153 TR_XM_SpoofPhishAttach 1 2.10 1.43 2.31 154 XMReplyNow 1 0.35 1.43 0.00 155 URI_TRY_3LD 1 0.35 1.43 0.00 156 T_XMDrugObfuBody_14 1 1.75 1.43 1.85 157 TR_XM_Undi_Recip5 1 0.35 1.43 0.00 158 XMSpoofStaff2 1 1.75 1.43 1.85 159 MAILING_LIST_MULTI 1 1.75 1.43 1.85 160 XM_B_Unsub 1 12.24 1.43 15.74 161 XM_Body_Dirty_Words_01 1 0.35 1.43 0.00 162 XM_UB50 1 2.45 1.43 2.78 163 XM_OfRef6 1 0.35 1.43 0.00 164 FORM_FRAUD_5 1 0.35 1.43 0.00 165 REPLYTO_EMPTY 1 0.35 1.43 0.00 166 TR_XM_Undi_Recip12 1 0.35 1.43 0.00 167 FROM_EXCESS_BASE64 1 0.35 1.43 0.00 168 TooManyTo_005 1 0.35 1.43 0.00 169 TVD_SPACE_RATIO_MINFP 1 0.35 1.43 0.00 170 MONEY_FRAUD_5 1 0.35 1.43 0.00 171 BAYES_20 1 2.10 1.43 2.31 172 TR_XM_SpammyWords3 1 0.35 1.43 0.00 173 HTML_IMAGE_RATIO_02 1 3.50 1.43 4.17 174 TR_XM_BayesUnsub 1 8.39 1.43 10.65 175 BAYES_00 1 8.74 1.43 11.11 176 HTTPS_HTTP_MISMATCH 1 0.35 1.43 0.00 177 HDR_ORDER_FTSDMCXX_DIRECT 1 0.35 1.43 0.00 178 XM_Lotto 1 0.35 1.43 0.00 179 RCVD_IN_MSPIKE_L3 1 0.35 1.43 0.00 180 MONEY_FORM_SHORT 1 0.35 1.43 0.00 181 TR_XM_Undi_Recip11 1 0.35 1.43 0.00 182 T_TooManySym_02 1 6.64 1.43 8.33 183 HTML_MIME_NO_HTML_TAG 1 2.80 1.43 3.24 184 RELAYCOUNTRY_KR 1 0.35 1.43 0.00 185 IMPOTENCE 1 0.35 1.43 0.00 186 XM_SPF_SoftFail 1 1.05 1.43 0.93 187 XMDiploma_00 1 0.70 1.43 0.46 188 UNDISC_MONEY 1 0.35 1.43 0.00 189 RCVD_MAIL_COM 1 0.35 1.43 0.00 190 T_XMDrugObfuBody_00 1 0.70 1.43 0.46 191 XMStockSpam_06 1 1.05 1.43 0.93 192 T_REMOTE_IMAGE 1 3.15 1.43 3.70 193 SpammyFromTLD_02 1 0.70 1.43 0.46 194 DATE_IN_PAST_06_12 1 0.35 1.43 0.00 195 TR_XM_Base64_M1 1 0.35 1.43 0.00 196 TR_XM_PhishingBody2 1 0.35 1.43 0.00 197 OBFU_TEXT_ATTACH 1 0.35 1.43 0.00 198 HTML_OBFUSCATE_05_10 1 0.35 1.43 0.00 199 XM_H_Undi_Recip 1 0.35 1.43 0.00 200 MILLION_HUNDRED 1 0.35 1.43 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 191 80.77 57.14 88.43 2 HTML_MESSAGE 176 84.62 94.29 81.48 3 T_SCC_BODY_TEXT_LINE 176 80.77 78.57 81.48 4 RELAYCOUNTRY_US 166 75.17 70.00 76.85 5 DKIM_SIGNED 160 72.73 68.57 74.07 6 XM_DK_Pass 154 69.58 64.29 71.30 7 DKIM_VALID 147 67.13 64.29 68.06 8 BAYES_50 139 56.99 34.29 64.35 9 DKIM_VALID_EF 113 52.10 51.43 52.31 10 DKIM_VALID_AU 95 40.56 30.00 43.98 11 XM_B_Unicode 93 48.25 64.29 43.06 12 XMListUnsubscribeExists 90 45.10 55.71 41.67 13 XM_B_SpammyWords 88 45.80 61.43 40.74 14 HTML_FONT_LOW_CONTRAST 75 36.71 42.86 34.72 15 T_TM2_M_HEADER_IN_MSG 74 35.66 40.00 34.26 16 RCVD_IN_MSPIKE_WL 71 29.72 20.00 32.87 17 LOC_TINY_FONT_1 66 33.92 44.29 30.56 18 MIME_HTML_ONLY 63 32.17 41.43 29.17 19 TR_XM_DK_Unsub 58 30.42 41.43 26.85 20 RCVD_IN_MSPIKE_H2 56 29.72 41.43 25.93 21 XM_B_Unicode3 55 29.37 41.43 25.46 22 XMSubLong 47 19.93 14.29 21.76 23 BOTNET_IPINHOSTNAME 45 22.03 25.71 20.83 24 RCVD_IN_MSPIKE_H5 43 16.78 7.14 19.91 25 FVGT_m_MULTI_ODD 37 17.13 17.14 17.13 26 TM2_M_URI_OPT_OUT 36 18.18 22.86 16.67 27 XM_B_Unsub 34 12.24 1.43 15.74 28 T_XMHurry_00 32 16.78 22.86 14.81 29 ALL_TRUSTED 32 11.19 0.00 14.81 30 T_KAM_HTML_FONT_INVALID 32 15.38 17.14 14.81 31 T_TooManySym_01 27 10.84 5.71 12.50 32 XM_DKIMWhitelistDomains 26 9.09 0.00 12.04 33 BAYES_60 25 12.59 15.71 11.57 34 DCC_CHECK 25 19.23 42.86 11.57 35 BAYES_00 24 8.74 1.43 11.11 36 TR_XM_BayesUnsub 23 8.39 1.43 10.65 37 XM_B_SpammyWords2 22 13.64 24.29 10.19 38 XM_Multi_Part_URI 22 10.84 12.86 10.19 39 XM_Body_Dirty_Words 19 10.84 17.14 8.80 40 RELAYCOUNTRY_META 19 14.34 31.43 8.80 41 UNPARSEABLE_RELAY 18 9.44 12.86 8.33 42 T_TooManySym_02 18 6.64 1.43 8.33 43 XM_B_Unsub2 17 5.94 0.00 7.87 44 TooManyTo_001 16 6.99 5.71 7.41 45 TR_XM_DK_Bayes2 14 4.90 0.00 6.48 46 TR_XM_DK_Bayes 14 4.90 0.00 6.48 47 RCVD_IN_MSPIKE_H3 14 6.99 8.57 6.48 48 IN_ZIMBRA_NJ_WHITELIST 14 4.90 0.00 6.48 49 RCVD_IN_MSPIKE_H4 14 5.94 4.29 6.48 50 TR_XM_DK_Bayes1 14 4.90 0.00 6.48 51 FSL_BULK_SIG 13 9.44 20.00 6.02 52 DKIM_INVALID 13 5.59 4.29 6.02 53 BAYES_40 11 3.85 0.00 5.09 54 INVALID_MSGID 11 4.20 1.43 5.09 55 T_TooManySym_03 11 3.85 0.00 5.09 56 XM_UncommonTLD01 11 4.55 2.86 5.09 57 XM_B_SpammyWords3 11 5.24 5.71 5.09 58 LotsOfNums_01 11 3.85 0.00 5.09 59 UNTRUSTED_Relay 10 10.84 30.00 4.63 60 HTML_IMAGE_RATIO_04 10 3.50 0.00 4.63 61 XM_Evil_Numbers_Gen 10 3.85 1.43 4.63 62 SCC_BODY_URI_ONLY 9 3.50 1.43 4.17 63 XMNoVowels 9 4.20 4.29 4.17 64 TR_XM_SpammyRelay 9 4.55 5.71 4.17 65 XMNumbers 9 4.55 5.71 4.17 66 HTML_IMAGE_RATIO_02 9 3.50 1.43 4.17 67 ANY_BOUNCE_MESSAGE 9 3.15 0.00 4.17 68 BOUNCE_MESSAGE 9 3.15 0.00 4.17 69 TVD_SPACE_RATIO 8 2.80 0.00 3.70 70 XM_H_Long_From01 8 3.15 1.43 3.70 71 MIME_HTML_MOSTLY 8 3.50 2.86 3.70 72 T_REMOTE_IMAGE 8 3.15 1.43 3.70 73 MIME_QP_LONG_LINE 8 2.80 0.00 3.70 74 TO_MALFORMED 7 2.45 0.00 3.24 75 HTML_MIME_NO_HTML_TAG 7 2.80 1.43 3.24 76 XM_DIRTYINTL 7 3.85 5.71 3.24 77 XM_ZIP 6 2.10 0.00 2.78 78 TR_XM_PhishingBody 6 3.50 5.71 2.78 79 LOTS_OF_MONEY 6 5.94 15.71 2.78 80 TO_NO_BRKTS_HTML_ONLY 6 2.10 0.00 2.78 81 XM_ProductURIs 6 2.10 0.00 2.78 82 XM_SendGrid 6 3.50 5.71 2.78 83 XM_UB50 6 2.45 1.43 2.78 84 RELAYCOUNTRY_CA 6 2.10 0.00 2.78 85 HTML_IMAGE_RATIO_06 6 2.80 2.86 2.78 86 XM_B_SpammyTLD 5 3.85 8.57 2.31 87 XM_B_Phish_Phrases 5 2.80 4.29 2.31 88 BAYES_80 5 3.50 7.14 2.31 89 TR_XM_SB_Phish 5 1.75 0.00 2.31 90 BAYES_20 5 2.10 1.43 2.31 91 BAYES_99 5 10.84 37.14 2.31 92 XM_H_PHPMailer 5 2.45 2.86 2.31 93 XM_DK_Undo_02 5 4.55 11.43 2.31 94 XMSubPhish11 5 1.75 0.00 2.31 95 TR_XM_SpoofPhishAttach 5 2.10 1.43 2.31 96 TooManyTo_002 5 2.45 2.86 2.31 97 MSGID_NOFQDN1 4 1.40 0.00 1.85 98 TR_XM_SpoofStaff 4 1.75 1.43 1.85 99 MIME_CHARSET_FARAWAY 4 6.99 22.86 1.85 100 RCVD_IN_IADB_SPF 4 1.40 0.00 1.85 101 RCVD_IN_IADB_DK 4 1.40 0.00 1.85 102 XM_B_Phish66 4 1.75 1.43 1.85 103 IN_HORDE_ADDRESS_BOOK 4 1.40 0.00 1.85 104 TR_XM_DK_SendGrid 4 1.75 1.43 1.85 105 XMStrtUSub 4 1.75 1.43 1.85 106 FVGT_m_MULTI_ODD_EMAIL 4 1.40 0.00 1.85 107 XM_ZohoDesk1 4 1.40 0.00 1.85 108 CHARSET_FARAWAY_HEADER 4 6.99 22.86 1.85 109 RELAYCOUNTRY_DE 4 1.40 0.00 1.85 110 RCVD_IN_IADB_LISTED 4 1.40 0.00 1.85 111 BAYES_999 4 10.14 35.71 1.85 112 USER_IN_DEF_DKIM_WL 4 1.40 0.00 1.85 113 XM_H_SpoofStaff4 4 1.40 0.00 1.85 114 RCVD_IN_IADB_SENDERID 4 1.40 0.00 1.85 115 MAILING_LIST_MULTI 4 1.75 1.43 1.85 116 XMSpoofStaff2 4 1.75 1.43 1.85 117 TR_XM_PSC1 4 1.40 0.00 1.85 118 XM_PDF 4 1.75 1.43 1.85 119 T_XMDrugObfuBody_14 4 1.75 1.43 1.85 120 KHOP_HELO_FCRDNS 3 2.10 4.29 1.39 121 XMLngstWrd_00 3 1.05 0.00 1.39 122 TR_XM_SpammyWords4 3 4.90 15.71 1.39 123 TR_XM_UnparsRelay 3 2.80 7.14 1.39 124 XMSubNoVowel 3 6.99 24.29 1.39 125 URI_NOVOWEL 3 1.75 2.86 1.39 126 RCVD_IN_IADB_VOUCHED 3 1.05 0.00 1.39 127 NML_ADSP_CUSTOM_MED 3 1.05 0.00 1.39 128 USER_IN_WHITELIST 3 1.05 0.00 1.39 129 DKIM_ADSP_CUSTOM_MED 3 1.05 0.00 1.39 130 TR_Sbj_FN_Bdy 3 1.40 1.43 1.39 131 USER_IN_WELCOMELIST 3 1.05 0.00 1.39 132 FROM_GOV_SPOOF 3 1.40 1.43 1.39 133 XMSubMetaSx_00 2 0.70 0.00 0.93 134 XMGappySubj_01 2 0.70 0.00 0.93 135 TR_XM_NoHeaderRelay 2 1.05 1.43 0.93 136 HTML_IMAGE_RATIO_08 2 1.40 2.86 0.93 137 T_XMDrugObfuBody_08 2 0.70 0.00 0.93 138 MISSING_HEADERS 2 1.40 2.86 0.93 139 XMWghtMeta_00 2 0.70 0.00 0.93 140 XMSlimDrugH 2 0.70 0.00 0.93 141 RCVD_IN_IADB_OPTIN 2 0.70 0.00 0.93 142 RELAYCOUNTRY_BR 2 0.70 0.00 0.93 143 XMLngstWrd_01 2 0.70 0.00 0.93 144 XM_Body_Obfu01 2 1.05 1.43 0.93 145 TR_Symld_Words 2 1.75 4.29 0.93 146 XM_SPF_SoftFail 2 1.05 1.43 0.93 147 XMLngstWrd_03 2 0.70 0.00 0.93 148 XMBdyGiftCard01 2 1.75 4.29 0.93 149 XMStockSpam_06 2 1.05 1.43 0.93 150 XMLngstWrd_02 2 0.70 0.00 0.93 151 XMCapTrack2 2 0.70 0.00 0.93 152 XM_B_SEO 2 2.45 7.14 0.93 153 RELAYCOUNTRY_CN 2 6.64 24.29 0.93 154 TR_LOTS_OF_MONEY2 2 2.10 5.71 0.93 155 TM2_M_VERY_LONG_WORD 2 0.70 0.00 0.93 156 XM_H_Trusted_IP 2 0.70 0.00 0.93 157 URI_HEX 2 0.70 0.00 0.93 158 XM_B_Investor 2 3.15 10.00 0.93 159 TR_XM_DKIM_Undo 2 2.80 8.57 0.93 160 RELAYCOUNTRY_JP 2 1.05 1.43 0.93 161 T_MONEY_PERCENT 2 2.10 5.71 0.93 162 XMPhish08 2 1.05 1.43 0.93 163 XMSubEmpty 2 0.70 0.00 0.93 164 XMSubject_78 2 0.70 0.00 0.93 165 SHORTENED_URL_SRC 2 0.70 0.00 0.93 166 XM_ShortIntro_01 2 1.40 2.86 0.93 167 HDRS_MISSP 2 0.70 0.00 0.93 168 RELAYCOUNTRY_AU 2 0.70 0.00 0.93 169 XMBrknScrpt_02 2 2.45 7.14 0.93 170 RELAYCOUNTRY_GB 1 0.35 0.00 0.46 171 THIS_AD 1 0.35 0.00 0.46 172 HTML_TAG_BALANCE_BODY 1 0.35 0.00 0.46 173 SHORT_URI_3 1 0.35 0.00 0.46 174 HELO_NODOT 1 1.05 2.86 0.46 175 DATE_IN_PAST_03_06 1 0.35 0.00 0.46 176 XM_GoogleGroups2 1 0.35 0.00 0.46 177 RCVD_IN_VALIDITY_CERTIFIED 1 0.35 0.00 0.46 178 RELAYCOUNTRY_FR 1 0.35 0.00 0.46 179 MPART_ALT_DIFF 1 6.29 24.29 0.46 180 HK_RANDOM_ENVFROM 1 0.35 0.00 0.46 181 BAYES_95 1 1.05 2.86 0.46 182 XMBounce_01 1 0.35 0.00 0.46 183 XMDiploma_00 1 0.70 1.43 0.46 184 RCVD_IN_IADB_OPTIN_GT50 1 0.35 0.00 0.46 185 RELAYCOUNTRY_BG 1 0.35 0.00 0.46 186 RCVD_IN_RP_SAFE 1 0.35 0.00 0.46 187 TM2_M_OBFU_COMMENT 1 0.35 0.00 0.46 188 HELO_NO_DOMAIN 1 1.05 2.86 0.46 189 HTML_IMAGE_ONLY_16 1 0.35 0.00 0.46 190 SUBJ_DOLLARS 1 0.35 0.00 0.46 191 NUMERIC_HTTP_ADDR 1 1.05 2.86 0.46 192 XM_UCStrings02 1 0.35 0.00 0.46 193 SpammyFromTLD_02 1 0.70 1.43 0.46 194 XMHTMLBadTable_001 1 0.35 0.00 0.46 195 DKIM_ADSP_NXDOMAIN 1 0.35 0.00 0.46 196 VFY_ACCT_NORDNS 1 0.35 0.00 0.46 197 MIXED_FONT_CASE 1 0.35 0.00 0.46 198 Ebola_Prevention_Initiative_Frm02 1 0.35 0.00 0.46 199 XM_UB60 1 0.35 0.00 0.46 200 T_XMDrugObfuBody_00 1 0.70 1.43 0.46 ----------------------------------------------------------------------