Email: 238 Autolearn: 0 AvgScore: -3.31 AvgScanTime: 5.10 sec Spam: 39 Autolearn: 0 AvgScore: 15.10 AvgScanTime: 5.42 sec Ham: 199 Autolearn: 0 AvgScore: -6.92 AvgScanTime: 5.04 sec Time Spent Running SA: 0.34 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 32 81.51 82.05 81.41 2 HTML_MESSAGE 31 73.11 79.49 71.86 3 XM_B_SpammyWords 29 38.24 74.36 31.16 4 XM_B_Unicode 29 50.42 74.36 45.73 5 RELAYCOUNTRY_US 29 82.35 74.36 83.92 6 XM_DK_Pass 27 72.69 69.23 73.37 7 DKIM_SIGNED 27 73.95 69.23 74.87 8 DKIM_VALID 27 71.01 69.23 71.36 9 DCC_CHECK_NEGATIVE 26 82.77 66.67 85.93 10 DKIM_VALID_AU 22 63.03 56.41 64.32 11 XM_B_Unicode3 19 26.47 48.72 22.11 12 BAYES_50 19 60.08 48.72 62.31 13 RCVD_IN_MSPIKE_H2 18 25.63 46.15 21.61 14 XMListUnsubscribeExists 15 39.50 38.46 39.70 15 XM_B_SpammyWords2 15 21.43 38.46 18.09 16 DKIM_VALID_EF 15 44.96 38.46 46.23 17 MIME_HTML_ONLY 14 27.73 35.90 26.13 18 XMSubLong 13 32.35 33.33 32.16 19 LOTS_OF_MONEY 13 7.56 33.33 2.51 20 DCC_CHECK 13 17.23 33.33 14.07 21 LOC_TINY_FONT_1 12 22.69 30.77 21.11 22 XM_DK_Undo_02 11 11.34 28.21 8.04 23 BAYES_99 11 8.40 28.21 4.52 24 TR_XM_SpammyWords4 11 5.46 28.21 1.01 25 HTML_FONT_LOW_CONTRAST 10 21.85 25.64 21.11 26 TR_XM_BayesUnsub 10 5.88 25.64 2.01 27 XM_B_Unsub 10 8.82 25.64 5.53 28 TR_XM_DKIM_Undo 10 5.46 25.64 1.51 29 RELAYCOUNTRY_META 9 5.88 23.08 2.51 30 FVGT_m_MULTI_ODD 9 16.39 23.08 15.08 31 T_TM2_M_HEADER_IN_MSG 8 23.95 20.51 24.62 32 UNTRUSTED_Relay 8 5.46 20.51 2.51 33 BAYES_80 7 5.46 17.95 3.02 34 XMStrtUSub 7 9.66 17.95 8.04 35 T_KAM_HTML_FONT_INVALID 7 22.69 17.95 23.62 36 XM_Body_Dirty_Words 7 14.29 17.95 13.57 37 TR_XM_SpammyRelay 7 3.36 17.95 0.50 38 XM_H_Long_From01 6 13.45 15.38 13.07 39 XM_Multi_Part_URI 6 10.08 15.38 9.05 40 XM_UB50 6 4.20 15.38 2.01 41 TR_XM_DK_Unsub 6 22.69 15.38 24.12 42 HTML_MIME_NO_HTML_TAG 6 4.62 15.38 2.51 43 UNPARSEABLE_RELAY 6 14.71 15.38 14.57 44 BAYES_999 6 5.46 15.38 3.52 45 XM_SendGrid 5 12.18 12.82 12.06 46 XM_B_Phish_Phrases 5 2.10 12.82 0.00 47 HTML_IMAGE_ONLY_32 5 2.52 12.82 0.50 48 XM_B_SpammyTLD 5 5.88 12.82 4.52 49 BOTNET 5 5.46 12.82 4.02 50 XM_B_SpammyWords3 5 5.46 12.82 4.02 51 TR_XM_SpammyWords2 5 2.10 12.82 0.00 52 TR_XM_SpammyWords5 5 4.62 12.82 3.02 53 XM_UncommonTLD01 5 5.88 12.82 4.52 54 XM_H_PHPMailer 5 3.36 12.82 1.51 55 XM_B_Investor 5 3.78 12.82 2.01 56 XM_Evil_Numbers_Gen 4 5.46 10.26 4.52 57 XM_SPF_SoftFail 4 4.20 10.26 3.02 58 HTML_IMAGE_RATIO_02 4 3.78 10.26 2.51 59 XMSubMetaSx_00 4 3.36 10.26 2.01 60 TR_Mismatch_TLD_02 4 2.10 10.26 0.50 61 XMNumbers 4 5.04 10.26 4.02 62 FSL_BULK_SIG 4 6.30 10.26 5.53 63 TM2_M_URI_OPT_OUT 4 8.40 10.26 8.04 64 BOTNET_IPINHOSTNAME 4 6.72 10.26 6.03 65 RELAYCOUNTRY_JP 3 1.26 7.69 0.00 66 TR_XM_InvalidRelay 3 1.26 7.69 0.00 67 ADVANCE_FEE_5_NEW_MONEY 3 1.26 7.69 0.00 68 SpammyFromTLD_01 3 1.68 7.69 0.50 69 XMStockSpam_06 3 1.26 7.69 0.00 70 XMSexyCombo_05 3 5.88 7.69 5.53 71 XM_H_Undi_Recip 3 1.26 7.69 0.00 72 T_XMDrugObfuBody_14 3 2.52 7.69 1.51 73 RCVD_IN_VALIDITY_RPBL 3 1.26 7.69 0.00 74 TR_XM_DK_SendGrid 3 10.50 7.69 11.06 75 HTML_IMAGE_RATIO_06 2 2.10 5.13 1.51 76 TR_DCC_Bayes_99 2 0.84 5.13 0.00 77 RELAYCOUNTRY_DE 2 0.84 5.13 0.00 78 XM_B_SpammyWords5 2 1.26 5.13 0.50 79 MIME_QP_LONG_LINE 2 1.26 5.13 0.50 80 SpammyFromTLD_02 2 0.84 5.13 0.00 81 URIBL_DBL_SPAM 2 1.68 5.13 1.01 82 TM2_M_OBFU_COMMENT 2 0.84 5.13 0.00 83 XM_B_DNDMA 2 1.26 5.13 0.50 84 TR_XM_Undi_Recip5 2 0.84 5.13 0.00 85 XM_Nigeria_01 2 0.84 5.13 0.00 86 XM_S_SpammyWords 2 0.84 5.13 0.00 87 KHOP_HELO_FCRDNS 2 4.62 5.13 4.52 88 UNDISC_MONEY 2 0.84 5.13 0.00 89 RDNS_DYNAMIC 2 0.84 5.13 0.00 90 TR_XM_Spammywords 2 0.84 5.13 0.00 91 HK_SCAM 2 0.84 5.13 0.00 92 XM_OfRef6 2 1.26 5.13 0.50 93 XM_H_DatedCube 2 0.84 5.13 0.00 94 XM_URI_RBL 2 0.84 5.13 0.00 95 BOUNCE_MESSAGE 2 3.78 5.13 3.52 96 XM_B_SpammyWords4 2 1.26 5.13 0.50 97 TooManyTo_001 2 5.88 5.13 6.03 98 LotsOfNums_01 2 3.78 5.13 3.52 99 BOTNET_NORDNS 2 1.26 5.13 0.50 100 MONEY_FORM_SHORT 2 0.84 5.13 0.00 101 UNCLAIMED_MONEY 2 0.84 5.13 0.00 102 TR_XM_NoHeaderRelay 2 0.84 5.13 0.00 103 TR_XM_Undi_Recip15 2 0.84 5.13 0.00 104 TO_NO_BRKTS_HTML_ONLY 2 0.84 5.13 0.00 105 TR_Symld_Words 2 1.68 5.13 1.01 106 USER_IN_DEF_DKIM_WL 2 5.88 5.13 6.03 107 ANY_BOUNCE_MESSAGE 2 3.78 5.13 3.52 108 TR_XM_UnparsRelay 2 1.68 5.13 1.01 109 PDS_RDNS_DYNAMIC_FP 2 0.84 5.13 0.00 110 T_XMDrugObfuBody_08 2 1.26 5.13 0.50 111 RCVD_IN_MSPIKE_WL 2 28.15 5.13 32.66 112 T_FILL_THIS_FORM_SHORT 2 0.84 5.13 0.00 113 FORGED_MUA_OUTLOOK 1 0.42 2.56 0.00 114 NORDNS_LOW_CONTRAST 1 0.42 2.56 0.00 115 FVGT_m_MULTI_ODD_EMAIL 1 0.42 2.56 0.00 116 TR_XM_RelayPhish 1 0.42 2.56 0.00 117 FROM_MISSP_USER 1 0.42 2.56 0.00 118 XMNoVowels 1 1.26 2.56 1.01 119 MSOE_MID_WRONG_CASE 1 0.42 2.56 0.00 120 TR_XM_SpammyWords3 1 0.42 2.56 0.00 121 BAYES_20 1 2.10 2.56 2.01 122 FROM_MISSPACED 1 0.42 2.56 0.00 123 URIBL_SBL_A 1 0.42 2.56 0.00 124 T_XMDrugObfuBody_00 1 0.42 2.56 0.00 125 TR_XM_Undi_Recip6 1 0.42 2.56 0.00 126 XM_B_SEO 1 0.42 2.56 0.00 127 FROM_SUSPICIOUS_NTLD_FP 1 0.42 2.56 0.00 128 LongTLD 1 0.42 2.56 0.00 129 RCVD_IN_MSPIKE_H4 1 2.94 2.56 3.02 130 XPRIO 1 0.42 2.56 0.00 131 DRUGS_ANXIETY 1 0.42 2.56 0.00 132 RCVD_IN_MSPIKE_BL 1 0.42 2.56 0.00 133 XMBrknScrpt_02 1 0.42 2.56 0.00 134 TM2_M_VERY_LONG_WORD 1 1.68 2.56 1.51 135 RCVD_IN_MSPIKE_L3 1 0.42 2.56 0.00 136 TR_XM_MSPIKECOMBO 1 0.42 2.56 0.00 137 FSL_NEW_HELO_USER 1 0.42 2.56 0.00 138 TR_XM_MaxWHORU 1 0.42 2.56 0.00 139 RCVD_IN_IADB_SENDERID 1 1.68 2.56 1.51 140 T_XMHurry_00 1 0.84 2.56 0.50 141 RCVD_IN_IADB_LISTED 1 1.68 2.56 1.51 142 TR_Mismatch_TLD_01 1 0.42 2.56 0.00 143 RELAYCOUNTRY_CN 1 0.42 2.56 0.00 144 RCVD_IN_RP_RNBL 1 0.42 2.56 0.00 145 XM_UB999 1 0.42 2.56 0.00 146 RCVD_IN_IADB_DK 1 1.68 2.56 1.51 147 SCC_BODY_URI_ONLY 1 1.26 2.56 1.01 148 FORGED_OUTLOOK_HTML 1 0.42 2.56 0.00 149 XM_UB99 1 0.42 2.56 0.00 150 LOADSA_MONEY_COMBO 1 0.42 2.56 0.00 151 XM_Body_Obfu01 1 0.42 2.56 0.00 152 XM_ProductURIs 1 1.26 2.56 1.01 153 MISSING_HEADERS 1 5.04 2.56 5.53 154 MILLION_USD 1 0.42 2.56 0.00 155 RCVD_IN_BL_SPAMCOP_NET 1 0.42 2.56 0.00 156 TR_LOTS_OF_MONEY1 1 0.42 2.56 0.00 157 INVALID_MSGID 1 3.36 2.56 3.52 158 XM_HighProb1 1 0.42 2.56 0.00 159 TR_XM_Undi_Recip2 1 0.42 2.56 0.00 160 TR_XM_SPAMCOP 1 0.42 2.56 0.00 161 RCVD_IN_PSBL 1 0.42 2.56 0.00 162 TR_LOTS_OF_MONEY3 1 0.42 2.56 0.00 163 MONEY_FROM_MISSP 1 0.42 2.56 0.00 164 XMLngstWrd_04 1 0.84 2.56 0.50 165 FROM_SUSPICIOUS_NTLD 1 0.42 2.56 0.00 166 XFER_LOTSA_MONEY 1 0.42 2.56 0.00 167 RCVD_IN_MSPIKE_H3 1 12.18 2.56 14.07 168 NSL_RCVD_FROM_USER 1 0.42 2.56 0.00 169 URI_NOVOWEL 1 0.84 2.56 0.50 170 YOU_INHERIT 1 0.42 2.56 0.00 171 RCVD_IN_IADB_SPF 1 1.68 2.56 1.51 172 NO_DNS_FOR_FROM 1 0.84 2.56 0.50 173 T_REMOTE_IMAGE 1 5.46 2.56 6.03 174 ALL_TRUSTED 1 11.76 2.56 13.57 175 RELAYCOUNTRY_UA 1 0.42 2.56 0.00 176 FORM_FRAUD_5 1 0.42 2.56 0.00 177 RELAYCOUNTRY_MY 1 0.42 2.56 0.00 178 FORM_FRAUD 1 0.42 2.56 0.00 179 TooManyTo_004 1 1.26 2.56 1.01 180 XMLngstWrd_01 1 0.84 2.56 0.50 181 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.42 2.56 0.00 182 XM_DIRTYINTL 1 0.42 2.56 0.00 183 SUBJ_ALL_CAPS 1 2.52 2.56 2.51 184 HTTPS_HTTP_MISMATCH 1 0.42 2.56 0.00 185 XMLngstWrd_00 1 1.26 2.56 1.01 186 XMSubMetaSxObfu_03 1 0.84 2.56 0.50 187 FAKE_REPLY_C 1 0.42 2.56 0.00 188 OBFU_TEXT_ATTACH 1 0.42 2.56 0.00 189 TR_XM_COVIDMETA4 1 0.42 2.56 0.00 190 XMLngstWrd_02 1 0.84 2.56 0.50 191 RELAYCOUNTRY_AU 1 0.42 2.56 0.00 192 TO_NO_BRKTS_FROM_MSSP 1 0.42 2.56 0.00 193 TooManyTo_003 1 1.26 2.56 1.01 194 FROM_MISSP_MSFT 1 0.42 2.56 0.00 195 XM_OfRef7 1 0.42 2.56 0.00 196 HTML_IMAGE_RATIO_08 1 2.10 2.56 2.01 197 FORGED_OUTLOOK_TAGS 1 0.42 2.56 0.00 198 FSL_CTYPE_WIN1251 1 0.42 2.56 0.00 199 XMLngstWrd_03 1 0.84 2.56 0.50 200 MONEY_NOHTML 1 0.42 2.56 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 171 82.77 66.67 85.93 2 RELAYCOUNTRY_US 167 82.35 74.36 83.92 3 T_SCC_BODY_TEXT_LINE 162 81.51 82.05 81.41 4 DKIM_SIGNED 149 73.95 69.23 74.87 5 XM_DK_Pass 146 72.69 69.23 73.37 6 HTML_MESSAGE 143 73.11 79.49 71.86 7 DKIM_VALID 142 71.01 69.23 71.36 8 DKIM_VALID_AU 128 63.03 56.41 64.32 9 BAYES_50 124 60.08 48.72 62.31 10 DKIM_VALID_EF 92 44.96 38.46 46.23 11 XM_B_Unicode 91 50.42 74.36 45.73 12 XMListUnsubscribeExists 79 39.50 38.46 39.70 13 RCVD_IN_MSPIKE_WL 65 28.15 5.13 32.66 14 XMSubLong 64 32.35 33.33 32.16 15 XM_B_SpammyWords 62 38.24 74.36 31.16 16 MIME_HTML_ONLY 52 27.73 35.90 26.13 17 T_TM2_M_HEADER_IN_MSG 49 23.95 20.51 24.62 18 TR_XM_DK_Unsub 48 22.69 15.38 24.12 19 T_KAM_HTML_FONT_INVALID 47 22.69 17.95 23.62 20 XM_B_Unicode3 44 26.47 48.72 22.11 21 RCVD_IN_MSPIKE_H2 43 25.63 46.15 21.61 22 HTML_FONT_LOW_CONTRAST 42 21.85 25.64 21.11 23 LOC_TINY_FONT_1 42 22.69 30.77 21.11 24 XM_B_SpammyWords2 36 21.43 38.46 18.09 25 RCVD_IN_MSPIKE_H5 31 13.03 0.00 15.58 26 FVGT_m_MULTI_ODD 30 16.39 23.08 15.08 27 T_TooManySym_01 30 12.61 0.00 15.08 28 UNPARSEABLE_RELAY 29 14.71 15.38 14.57 29 RCVD_IN_MSPIKE_H3 28 12.18 2.56 14.07 30 DCC_CHECK 28 17.23 33.33 14.07 31 XM_Body_Dirty_Words 27 14.29 17.95 13.57 32 ALL_TRUSTED 27 11.76 2.56 13.57 33 BAYES_00 27 11.34 0.00 13.57 34 XM_H_Long_From01 26 13.45 15.38 13.07 35 XM_SendGrid 24 12.18 12.82 12.06 36 TR_XM_DK_SendGrid 22 10.50 7.69 11.06 37 TR_XM_DK_Bayes 20 8.40 0.00 10.05 38 TR_XM_DK_Bayes1 20 8.40 0.00 10.05 39 XM_CamelCaseFrm001 20 8.40 0.00 10.05 40 TR_XM_DK_Bayes2 20 8.40 0.00 10.05 41 XM_DKIMWhitelistDomains 18 7.56 0.00 9.05 42 XM_Multi_Part_URI 18 10.08 15.38 9.05 43 T_TooManySym_02 17 7.14 0.00 8.54 44 TM2_M_URI_OPT_OUT 16 8.40 10.26 8.04 45 XM_DK_Undo_02 16 11.34 28.21 8.04 46 XMStrtUSub 16 9.66 17.95 8.04 47 PLING_QUERY 14 5.88 0.00 7.04 48 XM_Lotto 13 5.46 0.00 6.53 49 TooManyTo_001 12 5.88 5.13 6.03 50 T_REMOTE_IMAGE 12 5.46 2.56 6.03 51 USER_IN_DEF_DKIM_WL 12 5.88 5.13 6.03 52 BAYES_40 12 5.04 0.00 6.03 53 BAYES_60 12 5.46 2.56 6.03 54 BOTNET_IPINHOSTNAME 12 6.72 10.26 6.03 55 XMSexyCombo_05 11 5.88 7.69 5.53 56 TR_XM_PhishingBody 11 4.62 0.00 5.53 57 FSL_BULK_SIG 11 6.30 10.26 5.53 58 REPLYTO_WITHOUT_TO_CC 11 5.04 2.56 5.53 59 IN_ZIMBRA_NJ_WHITELIST 11 4.62 0.00 5.53 60 MISSING_HEADERS 11 5.04 2.56 5.53 61 XM_B_Unsub 11 8.82 25.64 5.53 62 XM_PDF 10 4.20 0.00 5.03 63 XMGappySubj_01 10 4.20 0.00 5.03 64 XM_UncommonTLD01 9 5.88 12.82 4.52 65 BAYES_99 9 8.40 28.21 4.52 66 XM_Evil_Numbers_Gen 9 5.46 10.26 4.52 67 XM_B_SpammyTLD 9 5.88 12.82 4.52 68 KHOP_HELO_FCRDNS 9 4.62 5.13 4.52 69 TO_MALFORMED 9 3.78 0.00 4.52 70 XM_B_Phish66 8 3.36 0.00 4.02 71 XMNumbers 8 5.04 10.26 4.02 72 BOTNET 8 5.46 12.82 4.02 73 XM_B_SpammyWords3 8 5.46 12.82 4.02 74 USER_IN_WELCOMELIST 8 3.36 0.00 4.02 75 USER_IN_WHITELIST 8 3.36 0.00 4.02 76 LotsOfNums_01 7 3.78 5.13 3.52 77 ANY_BOUNCE_MESSAGE 7 3.78 5.13 3.52 78 FROM_GOV_DKIM_AU 7 2.94 0.00 3.52 79 BAYES_999 7 5.46 15.38 3.52 80 BOUNCE_MESSAGE 7 3.78 5.13 3.52 81 DKIM_INVALID 7 2.94 0.00 3.52 82 INVALID_MSGID 7 3.36 2.56 3.52 83 NUMERIC_HTTP_ADDR 6 2.52 0.00 3.02 84 HTML_IMAGE_RATIO_04 6 2.94 2.56 3.02 85 TVD_RCVD_IP 6 2.94 2.56 3.02 86 XM_SPF_SoftFail 6 4.20 10.26 3.02 87 RCVD_IN_MSPIKE_H4 6 2.94 2.56 3.02 88 TR_XM_SpammyWords5 6 4.62 12.82 3.02 89 BAYES_80 6 5.46 17.95 3.02 90 RCVD_IN_VALIDITY_CERTIFIED 5 2.10 0.00 2.51 91 UNTRUSTED_Relay 5 5.46 20.51 2.51 92 LOTS_OF_MONEY 5 7.56 33.33 2.51 93 HTML_MIME_NO_HTML_TAG 5 4.62 15.38 2.51 94 SUBJ_ALL_CAPS 5 2.52 2.56 2.51 95 XMGappySubj_02 5 2.10 0.00 2.51 96 RCVD_IN_VALIDITY_SAFE 5 2.10 0.00 2.51 97 XM_B_SpammyTLD2 5 2.10 0.00 2.51 98 XM_shorewaves_Whitelist 5 2.10 0.00 2.51 99 HTML_IMAGE_RATIO_02 5 3.78 10.26 2.51 100 RELAYCOUNTRY_META 5 5.88 23.08 2.51 101 BAYES_05 5 2.10 0.00 2.51 102 HTML_IMAGE_ONLY_28 4 1.68 0.00 2.01 103 FROM_EXCESS_BASE64 4 1.68 0.00 2.01 104 XM_UB50 4 4.20 15.38 2.01 105 TooManyTo_002 4 2.10 2.56 2.01 106 HTML_IMAGE_RATIO_08 4 2.10 2.56 2.01 107 XM_B_Investor 4 3.78 12.82 2.01 108 XM_Dr_From 4 1.68 0.00 2.01 109 MAILING_LIST_MULTI 4 1.68 0.00 2.01 110 BAYES_20 4 2.10 2.56 2.01 111 MSGID_NOFQDN1 4 1.68 0.00 2.01 112 XMSubMetaSx_00 4 3.36 10.26 2.01 113 TR_XM_BayesUnsub 4 5.88 25.64 2.01 114 XM_ZIP 4 1.68 0.00 2.01 115 FROM_GOV_SPOOF 4 1.68 0.00 2.01 116 URI_HEX 4 1.68 0.00 2.01 117 TVD_SPACE_RATIO 3 1.26 0.00 1.51 118 XM_Body_Dirty_Words_01 3 1.26 0.00 1.51 119 XM_H_PHPMailer 3 3.36 12.82 1.51 120 TR_XM_DKIM_Undo 3 5.46 25.64 1.51 121 DKIM_ADSP_CUSTOM_MED 3 1.26 0.00 1.51 122 RCVD_IN_IADB_SPF 3 1.68 2.56 1.51 123 XM_GoogleGroups 3 1.26 0.00 1.51 124 T_XMDrugObfuBody_14 3 2.52 7.69 1.51 125 NML_ADSP_CUSTOM_MED 3 1.26 0.00 1.51 126 HTML_IMAGE_RATIO_06 3 2.10 5.13 1.51 127 XMSolicitRefs_0 3 1.26 0.00 1.51 128 TM2_M_VERY_LONG_WORD 3 1.68 2.56 1.51 129 RCVD_IN_IADB_DK 3 1.68 2.56 1.51 130 IN_HORDE_ADDRESS_BOOK 3 1.26 0.00 1.51 131 RCVD_IN_IADB_LISTED 3 1.68 2.56 1.51 132 RCVD_IN_IADB_SENDERID 3 1.68 2.56 1.51 133 MIME_HTML_MOSTLY 3 1.26 0.00 1.51 134 FROM_STARTS_WITH_NUMS 2 0.84 0.00 1.01 135 RCVD_IN_IADB_OPTIN_GT50 2 0.84 0.00 1.01 136 XM_H_PHPOS 2 0.84 0.00 1.01 137 RCVD_IN_IADB_VOUCHED 2 0.84 0.00 1.01 138 RCVD_IN_IADB_OPTIN 2 0.84 0.00 1.01 139 TR_XM_PHPDW 2 0.84 0.00 1.01 140 XMCapTrack2 2 0.84 0.00 1.01 141 TR_XM_Base64_M1 2 0.84 0.00 1.01 142 TooManyTo_004 2 1.26 2.56 1.01 143 T_TooManySym_03 2 0.84 0.00 1.01 144 XMPhish30 2 0.84 0.00 1.01 145 HDRS_MISSP 2 0.84 0.00 1.01 146 TR_XM_SpoofStaff 2 0.84 0.00 1.01 147 FROM_LOCAL_HEX 2 0.84 0.00 1.01 148 XMLngstWrd_00 2 1.26 2.56 1.01 149 TR_Symld_Words 2 1.68 5.13 1.01 150 TR_XM_SpoofPhishAttach 2 0.84 0.00 1.01 151 TooManyTo_003 2 1.26 2.56 1.01 152 TR_XM_UnparsRelay 2 1.68 5.13 1.01 153 RELAYCOUNTRY_NL 2 0.84 0.00 1.01 154 TR_XM_PSC1 2 0.84 0.00 1.01 155 XMSubNoVowel 2 0.84 0.00 1.01 156 TooManyTo_005 2 0.84 0.00 1.01 157 XM_H_PHPOS_M 2 0.84 0.00 1.01 158 MIME_CHARSET_FARAWAY 2 0.84 0.00 1.01 159 TR_XM_SpammyWords4 2 5.46 28.21 1.01 160 XMNoVowels 2 1.26 2.56 1.01 161 XM_ZohoDesk1 2 0.84 0.00 1.01 162 CHARSET_FARAWAY_HEADER 2 0.84 0.00 1.01 163 URIBL_DBL_SPAM 2 1.68 5.13 1.01 164 XMSpoofStaff2 2 0.84 0.00 1.01 165 MPART_ALT_DIFF 2 0.84 0.00 1.01 166 XM_H_SpoofStaff4 2 0.84 0.00 1.01 167 TR_XM_FormFill2 2 0.84 0.00 1.01 168 XM_DK_Undo_01 2 0.84 0.00 1.01 169 SCC_BODY_URI_ONLY 2 1.26 2.56 1.01 170 TR_XM_INV_DKIM 2 0.84 0.00 1.01 171 XMDiploma_00 2 0.84 0.00 1.01 172 TM2_M_HAS_BSLASH_URI 2 0.84 0.00 1.01 173 XM_ProductURIs 2 1.26 2.56 1.01 174 TR_XM_PHPForged 2 0.84 0.00 1.01 175 BOTNET_NORDNS 1 1.26 5.13 0.50 176 FROM_LOCAL_DIGITS 1 0.42 0.00 0.50 177 HTML_IMAGE_ONLY_24 1 0.42 0.00 0.50 178 XM_B_SpammyWords4 1 1.26 5.13 0.50 179 XMLngstWrd_04 1 0.84 2.56 0.50 180 URI_NOVOWEL 1 0.84 2.56 0.50 181 TR_XM_SpammyRelay 1 3.36 17.95 0.50 182 XMBody_95 1 0.42 0.00 0.50 183 XMSexyCombo_01 1 0.42 0.00 0.50 184 NO_DNS_FOR_FROM 1 0.84 2.56 0.50 185 MIXED_FONT_CASE 1 0.42 0.00 0.50 186 SHORTENED_URL_HREF 1 0.42 0.00 0.50 187 XMBSHREFv2 1 0.42 0.00 0.50 188 XMLngstWrd_01 1 0.84 2.56 0.50 189 RELAYCOUNTRY_PL 1 0.42 0.00 0.50 190 XMNewegg 1 0.42 0.00 0.50 191 CTE_8BIT_MISMATCH 1 0.42 0.00 0.50 192 HTML_IMAGE_ONLY_12 1 0.42 0.00 0.50 193 XMSubMetaSxObfu_03 1 0.84 2.56 0.50 194 MSGID_MULTIPLE_AT 1 0.42 0.00 0.50 195 XMSubMetaSxObfu_00 1 0.42 0.00 0.50 196 WEIRD_PORT 1 0.42 0.00 0.50 197 T_OBFU_PDF_ATTACH 1 0.42 0.00 0.50 198 PDS_OTHER_BAD_TLD 1 0.42 0.00 0.50 199 XMLngstWrd_02 1 0.84 2.56 0.50 200 HTML_TAG_BALANCE_BODY 1 0.42 0.00 0.50 ----------------------------------------------------------------------