Email: 219 Autolearn: 0 AvgScore: 1.58 AvgScanTime: 2.47 sec Spam: 47 Autolearn: 0 AvgScore: 14.68 AvgScanTime: 3.45 sec Ham: 172 Autolearn: 0 AvgScore: -2.01 AvgScanTime: 2.20 sec Time Spent Running SA: 0.15 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 43 85.84 91.49 84.30 2 RELAYCOUNTRY_US 38 66.67 80.85 62.79 3 DKIM_SIGNED 37 65.75 78.72 62.21 4 DKIM_VALID 37 62.56 78.72 58.14 5 XM_B_Unicode 37 60.27 78.72 55.23 6 XM_DK_Pass 37 65.30 78.72 61.63 7 T_SCC_BODY_TEXT_LINE 35 76.26 74.47 76.74 8 XM_B_SpammyWords 34 49.77 72.34 43.60 9 DKIM_VALID_AU 34 54.34 72.34 49.42 10 DCC_CHECK_NEGATIVE 33 73.52 70.21 74.42 11 XMListUnsubscribeExists 30 46.58 63.83 41.86 12 HTML_FONT_LOW_CONTRAST 25 33.79 53.19 28.49 13 BAYES_50 21 47.03 44.68 47.67 14 DKIM_VALID_EF 20 33.33 42.55 30.81 15 LOTS_OF_MONEY 20 15.98 42.55 8.72 16 XM_B_SpammyWords2 20 22.37 42.55 16.86 17 LOC_TINY_FONT_1 18 32.42 38.30 30.81 18 MIME_HTML_ONLY 18 15.07 38.30 8.72 19 XMSubLong 16 25.11 34.04 22.67 20 TR_XM_SpammyWords4 16 10.50 34.04 4.07 21 XM_B_Unicode3 16 26.94 34.04 25.00 22 HTML_IMAGE_RATIO_06 14 6.39 29.79 0.00 23 DCC_CHECK 14 26.48 29.79 25.58 24 TR_XM_DK_Unsub 13 20.55 27.66 18.60 25 XM_B_Investor 13 6.85 27.66 1.16 26 XM_DK_Undo_02 12 7.76 25.53 2.91 27 XM_B_SpammyWords3 12 12.79 25.53 9.30 28 XM_Body_Dirty_Words 11 16.44 23.40 14.53 29 RCVD_IN_MSPIKE_H2 11 15.07 23.40 12.79 30 BAYES_99 11 7.31 23.40 2.91 31 FVGT_m_MULTI_ODD 10 21.46 21.28 21.51 32 TR_LOTS_OF_MONEY2 9 4.57 19.15 0.58 33 T_MONEY_PERCENT 9 4.57 19.15 0.58 34 TR_XM_DKIM_Undo 9 5.02 19.15 1.16 35 XM_URI_RBL 8 3.65 17.02 0.00 36 BAYES_999 8 4.57 17.02 1.16 37 RELAYCOUNTRY_META 7 8.22 14.89 6.40 38 T_KAM_HTML_FONT_INVALID 6 15.98 12.77 16.86 39 XM_Multi_Part_URI 6 16.44 12.77 17.44 40 XM_UncommonTLD01 6 7.31 12.77 5.81 41 T_TM2_M_HEADER_IN_MSG 6 23.74 12.77 26.74 42 TM2_M_URI_OPT_OUT 6 11.87 12.77 11.63 43 XMSexyCombo_05 5 2.74 10.64 0.58 44 UNPARSEABLE_RELAY 5 10.05 10.64 9.88 45 BAYES_95 5 2.74 10.64 0.58 46 TR_XM_SpammyRelay 5 3.65 10.64 1.74 47 XM_H_Long_From01 5 11.42 10.64 11.63 48 XMSubMetaSx_00 5 5.48 10.64 4.07 49 XM_B_Unsub 5 9.13 10.64 8.72 50 BOTNET_IPINHOSTNAME 5 2.74 10.64 0.58 51 BOTNET 5 2.74 10.64 0.58 52 BAYES_80 5 5.94 10.64 4.65 53 TR_XM_BayesUnsub 5 7.76 10.64 6.98 54 XFER_LOTSA_MONEY 4 1.83 8.51 0.00 55 RCVD_IN_MSPIKE_WL 4 23.74 8.51 27.91 56 UNTRUSTED_Relay 4 3.20 8.51 1.74 57 ALL_TRUSTED 4 26.48 8.51 31.40 58 HTML_IMAGE_RATIO_02 4 6.85 8.51 6.40 59 LOADSA_MONEY_COMBO 4 1.83 8.51 0.00 60 TR_DCC_Bayes_99 4 1.83 8.51 0.00 61 TR_XM_SpammyWords5 3 3.65 6.38 2.91 62 TR_XM_UnparsRelay 3 3.20 6.38 2.33 63 UNDISC_MONEY 3 1.37 6.38 0.00 64 TooManyTo_001 3 5.48 6.38 5.23 65 TR_XM_SpammyWords2 3 1.83 6.38 0.58 66 TR_XM_PhishingBody 3 4.11 6.38 3.49 67 XM_UB50 3 2.28 6.38 1.16 68 BAYES_60 3 12.79 6.38 14.53 69 XM_H_Undi_Recip 3 1.37 6.38 0.00 70 TR_XM_Undi_Recip5 3 1.37 6.38 0.00 71 XM_B_SpammyTLD 3 3.65 6.38 2.91 72 XM_SPF_SoftFail 3 2.28 6.38 1.16 73 XMBody_78 2 3.65 4.26 3.49 74 RDNS_DYNAMIC 2 0.91 4.26 0.00 75 RCVD_IN_VALIDITY_RPBL 2 0.91 4.26 0.00 76 TR_XM_DK_SendGrid 2 3.20 4.26 2.91 77 SUBJ_ALL_CAPS 2 2.74 4.26 2.33 78 RELAYCOUNTRY_VN 2 0.91 4.26 0.00 79 PDS_RDNS_DYNAMIC_FP 2 0.91 4.26 0.00 80 XM_H_PHPMailer 2 1.83 4.26 1.16 81 XMNoVowels 2 0.91 4.26 0.00 82 RCVD_IN_MSPIKE_L4 2 0.91 4.26 0.00 83 FILL_THIS_FORM 2 1.37 4.26 0.58 84 FSL_BULK_SIG 2 7.76 4.26 8.72 85 TR_XM_SpammyWords3 2 1.37 4.26 0.58 86 TR_XM_Undi_RecipCombo2 2 0.91 4.26 0.00 87 SHORT_URI_2 2 9.13 4.26 10.47 88 TR_XM_MSPIKECOMBO 2 1.37 4.26 0.58 89 TR_XM_NoHeaderRelay 2 0.91 4.26 0.00 90 XMSubMetaI_00 2 5.02 4.26 5.23 91 MIME_QP_LONG_LINE 2 10.96 4.26 12.79 92 TR_XM_Undi_Recip4 2 0.91 4.26 0.00 93 MIME_HTML_MOSTLY 2 4.57 4.26 4.65 94 ADVANCE_FEE_5_NEW_MONEY 2 0.91 4.26 0.00 95 RELAYCOUNTRY_AU 2 1.83 4.26 1.16 96 URG_BIZ 2 0.91 4.26 0.00 97 DEAR_SOMETHING 2 0.91 4.26 0.00 98 TR_XM_Base64_M1 2 2.28 4.26 1.74 99 XM_SendGrid 2 3.20 4.26 2.91 100 XM_B_Phish66 2 2.74 4.26 2.33 101 XMStockSpam_06 2 0.91 4.26 0.00 102 SpammyFromTLD_02 2 0.91 4.26 0.00 103 XM_B_Phish_Phrases 2 2.28 4.26 1.74 104 XMReplyNow 2 1.37 4.26 0.58 105 XM_B_Crypto 2 1.83 4.26 1.16 106 HTML_IMAGE_RATIO_04 2 2.74 4.26 2.33 107 RCVD_IN_MSPIKE_H5 2 14.16 4.26 16.86 108 RCVD_IN_MSPIKE_BL 2 1.37 4.26 0.58 109 T_XMDrugObfuBody_08 2 1.83 4.26 1.16 110 XM_B_Unsub2 2 2.28 4.26 1.74 111 BAYES_20 2 3.20 4.26 2.91 112 TR_XM_Undi_Recip6 1 0.46 2.13 0.00 113 MISSING_HEADERS 1 0.46 2.13 0.00 114 TR_XM_PhishingBody2 1 0.46 2.13 0.00 115 TooManyTo_004 1 0.46 2.13 0.00 116 TR_PhishLnk_04 1 0.46 2.13 0.00 117 OBFU_TEXT_ATTACH 1 0.46 2.13 0.00 118 XMBody_29 1 0.46 2.13 0.00 119 TR_XM_Undi_Recip7 1 0.46 2.13 0.00 120 XM_DK_Undo_01 1 0.91 2.13 0.58 121 XM_B_SEO 1 0.46 2.13 0.00 122 TR_PhishLnk_02 1 0.46 2.13 0.00 123 T_TooManySym_01 1 6.85 2.13 8.14 124 SHORT_URI 1 0.46 2.13 0.00 125 ADVANCE_FEE_4_NEW_MONEY 1 0.46 2.13 0.00 126 TR_Mismatch_TLD_02 1 0.46 2.13 0.00 127 XM_S_SpammyWords 1 0.46 2.13 0.00 128 BOUNCE_MESSAGE 1 2.28 2.13 2.33 129 TO_NO_BRKTS_HTML_ONLY 1 0.46 2.13 0.00 130 XM_H_PHPOS_M 1 0.91 2.13 0.58 131 JOIN_MILLIONS 1 0.46 2.13 0.00 132 XMSubLongNoVowel 1 0.46 2.13 0.00 133 FORGED_MUA_OUTLOOK 1 0.46 2.13 0.00 134 DATE_IN_PAST_06_12 1 0.46 2.13 0.00 135 TR_XM_Crypto2 1 0.46 2.13 0.00 136 T_STY_INVIS_DIRECT 1 0.46 2.13 0.00 137 TooManyTo_002 1 0.91 2.13 0.58 138 TR_XM_InvalidRelay 1 0.46 2.13 0.00 139 BOTNET_NORDNS 1 0.46 2.13 0.00 140 XM_salutation 1 2.28 2.13 2.33 141 HELO_DYNAMIC_SPLIT_IP 1 0.46 2.13 0.00 142 XMSubGarbage 1 0.46 2.13 0.00 143 DEAR_FRIEND 1 0.46 2.13 0.00 144 XMPhish11 1 0.46 2.13 0.00 145 MPART_ALT_DIFF 1 2.28 2.13 2.33 146 RELAYCOUNTRY_NG 1 0.46 2.13 0.00 147 XMSubNoVowel 1 0.91 2.13 0.58 148 TooManyTo_003 1 0.91 2.13 0.58 149 FROM_MISSP_EH_MATCH 1 0.46 2.13 0.00 150 RELAYCOUNTRY_DE 1 0.91 2.13 0.58 151 TR_XM_PHPForged 1 0.91 2.13 0.58 152 XM_OfRef7 1 0.46 2.13 0.00 153 RCVD_IN_MSPIKE_H3 1 5.48 2.13 6.40 154 TR_LOTS_OF_MONEY1 1 0.46 2.13 0.00 155 LotsOfNums_01 1 4.11 2.13 4.65 156 XM_Combo_Sbj 1 2.74 2.13 2.91 157 TR_XM_Spammywords 1 0.46 2.13 0.00 158 RELAYCOUNTRY_NL 1 0.91 2.13 0.58 159 FROM_EXCESS_BASE64 1 1.37 2.13 1.16 160 RCVD_IN_RP_CERTIFIED 1 2.74 2.13 2.91 161 RCVD_IN_MSPIKE_H4 1 4.11 2.13 4.65 162 MPART_ALT_DIFF_COUNT 1 0.46 2.13 0.00 163 XM_ProductURIs 1 1.37 2.13 1.16 164 RCVD_IN_BL_SPAMCOP_NET 1 0.46 2.13 0.00 165 REPLYTO_WITHOUT_TO_CC 1 0.46 2.13 0.00 166 TR_XM_Undi_Recip11 1 0.46 2.13 0.00 167 XM_Body_Obfu01 1 1.37 2.13 1.16 168 SHORT_URI_3 1 2.28 2.13 2.33 169 XM_Body_Dirty_Words_01 1 0.46 2.13 0.00 170 YOU_INHERIT 1 0.46 2.13 0.00 171 FROM_MISSP_USER 1 0.46 2.13 0.00 172 XM_UB95 1 0.46 2.13 0.00 173 TO_NO_BRKTS_FROM_MSSP 1 0.46 2.13 0.00 174 T_REMOTE_IMAGE 1 2.74 2.13 2.91 175 DEAR_BENEFICIARY 1 0.46 2.13 0.00 176 SUBJ_OBFU_PUNCT_FEW 1 0.46 2.13 0.00 177 XM_ShortIntro_01 1 0.91 2.13 0.58 178 FROM_MISSPACED 1 0.46 2.13 0.00 179 TM2_M_OBFU_COMMENT 1 0.46 2.13 0.00 180 XMSexyCombo_01 1 0.46 2.13 0.00 181 ADVANCE_FEE_5_NEW_FRM_MNY 1 0.46 2.13 0.00 182 TR_XM_Base64_M2 1 0.46 2.13 0.00 183 T_HTML_ATTACH 1 0.46 2.13 0.00 184 XM_CamelCaseFrm001 1 1.83 2.13 1.74 185 HELO_DYNAMIC_IPADDR 1 0.46 2.13 0.00 186 XMStrtUSub 1 1.83 2.13 1.74 187 FROM_OFFERS 1 0.91 2.13 0.58 188 SpammyFromTLD_01 1 0.46 2.13 0.00 189 NSL_RCVD_FROM_USER 1 0.46 2.13 0.00 190 MONEY_FRAUD_8 1 0.46 2.13 0.00 191 TR_XM_PHPDW 1 0.91 2.13 0.58 192 FROM_MISSP_MSFT 1 0.46 2.13 0.00 193 HTML_MIME_NO_HTML_TAG 1 3.20 2.13 3.49 194 MONEY_FROM_MISSP 1 0.46 2.13 0.00 195 XM_OfRef6 1 1.83 2.13 1.74 196 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.46 2.13 0.00 197 MIME_HTML_ONLY_MULTI 1 0.46 2.13 0.00 198 XM_DIRTYINTL 1 1.37 2.13 1.16 199 XM_B_DynamicLink 1 1.37 2.13 1.16 200 XMNumbers 1 3.20 2.13 3.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145 85.84 91.49 84.30 2 T_SCC_BODY_TEXT_LINE 132 76.26 74.47 76.74 3 DCC_CHECK_NEGATIVE 128 73.52 70.21 74.42 4 RELAYCOUNTRY_US 108 66.67 80.85 62.79 5 DKIM_SIGNED 107 65.75 78.72 62.21 6 XM_DK_Pass 106 65.30 78.72 61.63 7 DKIM_VALID 100 62.56 78.72 58.14 8 XM_B_Unicode 95 60.27 78.72 55.23 9 DKIM_VALID_AU 85 54.34 72.34 49.42 10 BAYES_50 82 47.03 44.68 47.67 11 XM_B_SpammyWords 75 49.77 72.34 43.60 12 XMListUnsubscribeExists 72 46.58 63.83 41.86 13 ALL_TRUSTED 54 26.48 8.51 31.40 14 LOC_TINY_FONT_1 53 32.42 38.30 30.81 15 DKIM_VALID_EF 53 33.33 42.55 30.81 16 HTML_FONT_LOW_CONTRAST 49 33.79 53.19 28.49 17 RCVD_IN_MSPIKE_WL 48 23.74 8.51 27.91 18 T_TM2_M_HEADER_IN_MSG 46 23.74 12.77 26.74 19 DCC_CHECK 44 26.48 29.79 25.58 20 XM_B_Unicode3 43 26.94 34.04 25.00 21 XMSubLong 39 25.11 34.04 22.67 22 FVGT_m_MULTI_ODD 37 21.46 21.28 21.51 23 BAYES_00 33 15.07 0.00 19.19 24 TR_XM_DK_Unsub 32 20.55 27.66 18.60 25 XM_Multi_Part_URI 30 16.44 12.77 17.44 26 RCVD_IN_MSPIKE_H5 29 14.16 4.26 16.86 27 XM_B_SpammyWords2 29 22.37 42.55 16.86 28 T_KAM_HTML_FONT_INVALID 29 15.98 12.77 16.86 29 BAYES_60 25 12.79 6.38 14.53 30 XM_Body_Dirty_Words 25 16.44 23.40 14.53 31 MIME_QP_LONG_LINE 22 10.96 4.26 12.79 32 RCVD_IN_MSPIKE_H2 22 15.07 23.40 12.79 33 TM2_M_URI_OPT_OUT 20 11.87 12.77 11.63 34 XM_H_Long_From01 20 11.42 10.64 11.63 35 BASE64_LENGTH_79_INF 18 8.68 2.13 10.47 36 SHORT_URI_2 18 9.13 4.26 10.47 37 UNPARSEABLE_RELAY 17 10.05 10.64 9.88 38 XM_B_SpammyWords3 16 12.79 25.53 9.30 39 XM_B_Unsub 15 9.13 10.64 8.72 40 MIME_HTML_ONLY 15 15.07 38.30 8.72 41 FSL_BULK_SIG 15 7.76 4.26 8.72 42 LOTS_OF_MONEY 15 15.98 42.55 8.72 43 T_TooManySym_01 14 6.85 2.13 8.14 44 TR_XM_BayesUnsub 12 7.76 10.64 6.98 45 XM_DKIMWhitelistDomains 12 5.48 0.00 6.98 46 XM_Evil_Numbers_Gen 11 5.48 2.13 6.40 47 HTML_IMAGE_RATIO_02 11 6.85 8.51 6.40 48 RCVD_IN_MSPIKE_H3 11 5.48 2.13 6.40 49 RELAYCOUNTRY_META 11 8.22 14.89 6.40 50 SHORTENED_URL_HREF 10 4.57 0.00 5.81 51 BAYES_40 10 4.57 0.00 5.81 52 XM_UncommonTLD01 10 7.31 12.77 5.81 53 FORGED_HOTMAIL_RCVD2 9 4.11 0.00 5.23 54 TR_XM_DK_Bayes1 9 4.11 0.00 5.23 55 TR_XM_DK_Bayes 9 4.11 0.00 5.23 56 TooManyTo_001 9 5.48 6.38 5.23 57 XMSubMetaI_00 9 5.02 4.26 5.23 58 T_TooManySym_02 9 4.11 0.00 5.23 59 TR_XM_DK_Bayes2 8 3.65 0.00 4.65 60 MIME_BASE64_TEXT 8 4.11 2.13 4.65 61 TVD_SPACE_RATIO 8 3.65 0.00 4.65 62 BAYES_80 8 5.94 10.64 4.65 63 LotsOfNums_01 8 4.11 2.13 4.65 64 RCVD_IN_MSPIKE_H4 8 4.11 2.13 4.65 65 MIME_HTML_MOSTLY 8 4.57 4.26 4.65 66 TO_MALFORMED 8 3.65 0.00 4.65 67 INVALID_MSGID 7 3.20 0.00 4.07 68 DKIM_INVALID 7 3.20 0.00 4.07 69 TR_XM_SpammyWords4 7 10.50 34.04 4.07 70 XMSubMetaSx_00 7 5.48 10.64 4.07 71 XM_PDF 7 3.20 0.00 4.07 72 XMNumbers 6 3.20 2.13 3.49 73 HTML_MIME_NO_HTML_TAG 6 3.20 2.13 3.49 74 TR_XM_PhishingBody 6 4.11 6.38 3.49 75 XMBody_78 6 3.65 4.26 3.49 76 USER_IN_WELCOMELIST 5 2.28 0.00 2.91 77 BAYES_20 5 3.20 4.26 2.91 78 XM_B_SpammyTLD 5 3.65 6.38 2.91 79 RCVD_IN_RP_SAFE 5 2.74 2.13 2.91 80 XM_SendGrid 5 3.20 4.26 2.91 81 RCVD_IN_VALIDITY_SAFE 5 2.28 0.00 2.91 82 HTTPS_HTTP_MISMATCH 5 2.28 0.00 2.91 83 T_REMOTE_IMAGE 5 2.74 2.13 2.91 84 USER_IN_WHITELIST 5 2.28 0.00 2.91 85 XM_DK_Undo_02 5 7.76 25.53 2.91 86 XM_Combo_Sbj 5 2.74 2.13 2.91 87 RCVD_IN_RP_CERTIFIED 5 2.74 2.13 2.91 88 BAYES_99 5 7.31 23.40 2.91 89 MAILING_LIST_MULTI 5 2.28 0.00 2.91 90 TR_XM_DK_SendGrid 5 3.20 4.26 2.91 91 TR_XM_SpammyWords5 5 3.65 6.38 2.91 92 ANY_BOUNCE_MESSAGE 4 2.28 2.13 2.33 93 HTML_IMAGE_RATIO_04 4 2.74 4.26 2.33 94 PLING_QUERY 4 1.83 0.00 2.33 95 XM_B_Phish66 4 2.74 4.26 2.33 96 RCVD_IN_VALIDITY_CERTIFIED 4 1.83 0.00 2.33 97 XM_salutation 4 2.28 2.13 2.33 98 MPART_ALT_DIFF 4 2.28 2.13 2.33 99 SHORT_URI_3 4 2.28 2.13 2.33 100 SUBJ_ALL_CAPS 4 2.74 4.26 2.33 101 USER_IN_DEF_DKIM_WL 4 1.83 0.00 2.33 102 XMSubMetaSxObfu_03 4 1.83 0.00 2.33 103 TR_XM_UnparsRelay 4 3.20 6.38 2.33 104 BOUNCE_MESSAGE 4 2.28 2.13 2.33 105 XM_B_Phish_Phrases 3 2.28 4.26 1.74 106 KHOP_HELO_FCRDNS 3 1.83 2.13 1.74 107 RCVD_IN_IADB_DK 3 1.37 0.00 1.74 108 DKIM_ADSP_CUSTOM_MED 3 1.37 0.00 1.74 109 T_FILL_THIS_FORM_SHORT 3 1.37 0.00 1.74 110 FROM_GOV_SPOOF 3 1.37 0.00 1.74 111 XM_B_Unsub2 3 2.28 4.26 1.74 112 RCVD_IN_IADB_VOUCHED 3 1.37 0.00 1.74 113 NICE_REPLY_A 3 1.37 0.00 1.74 114 XM_CamelCaseFrm001 3 1.83 2.13 1.74 115 UNTRUSTED_Relay 3 3.20 8.51 1.74 116 T_TONOM_EQ_TOLOC_SHRT_SHRTNER 3 1.37 0.00 1.74 117 XMStrtUSub 3 1.83 2.13 1.74 118 IN_HORDE_ADDRESS_BOOK 3 1.37 0.00 1.74 119 RCVD_IN_IADB_SENDERID 3 1.37 0.00 1.74 120 TR_XM_Base64_M1 3 2.28 4.26 1.74 121 SCC_BODY_URI_ONLY 3 1.83 2.13 1.74 122 MSGID_FROM_MTA_HEADER 3 1.37 0.00 1.74 123 RCVD_IN_IADB_SPF 3 1.37 0.00 1.74 124 RCVD_IN_IADB_LISTED 3 1.37 0.00 1.74 125 XM_OfRef6 3 1.83 2.13 1.74 126 GMD_PDF_SQUARE 3 1.37 0.00 1.74 127 MSGID_NOFQDN1 3 1.37 0.00 1.74 128 XMGappySubj_01 3 1.37 0.00 1.74 129 RELAYCOUNTRY_GB 3 1.37 0.00 1.74 130 TR_XM_SpammyRelay 3 3.65 10.64 1.74 131 NML_ADSP_CUSTOM_MED 3 1.37 0.00 1.74 132 BAYES_05 3 1.37 0.00 1.74 133 IN_ZIMBRA_NJ_WHITELIST 3 1.37 0.00 1.74 134 XM_B_Investor 2 6.85 27.66 1.16 135 XMClaimOffer 2 0.91 0.00 1.16 136 XM_B_Crypto 2 1.83 4.26 1.16 137 XM_UB50 2 2.28 6.38 1.16 138 T_XMDrugObfuBody_12 2 0.91 0.00 1.16 139 T_XMDrugObfuBody_14 2 1.37 2.13 1.16 140 TR_XM_SB_Phish 2 1.37 2.13 1.16 141 XM_SPF_SoftFail 2 2.28 6.38 1.16 142 XMGenDplmaNmb 2 0.91 0.00 1.16 143 RCVD_IN_IADB_OPTIN 2 0.91 0.00 1.16 144 XMDiploma_00 2 0.91 0.00 1.16 145 T_XMDrugObfuBody_08 2 1.83 4.26 1.16 146 TR_XM_DKIM_Undo 2 5.02 19.15 1.16 147 TR_XM_Base64_L1 2 0.91 0.00 1.16 148 XMHTMLBadTable_001 2 0.91 0.00 1.16 149 XM_DIRTYINTL 2 1.37 2.13 1.16 150 BAYES_999 2 4.57 17.02 1.16 151 XM_B_DynamicLink 2 1.37 2.13 1.16 152 XMSubPhish11 2 1.37 2.13 1.16 153 HDRS_MISSP 2 0.91 0.00 1.16 154 RELAYCOUNTRY_CA 2 0.91 0.00 1.16 155 RELAYCOUNTRY_CN 2 0.91 0.00 1.16 156 T_Symld_Words_02 2 0.91 0.00 1.16 157 XM_ProductURIs 2 1.37 2.13 1.16 158 TM2_M_VERY_LONG_WORD 2 0.91 0.00 1.16 159 RELAYCOUNTRY_AU 2 1.83 4.26 1.16 160 XM_Body_Obfu01 2 1.37 2.13 1.16 161 HTML_IMAGE_ONLY_20 2 0.91 0.00 1.16 162 FROM_EXCESS_BASE64 2 1.37 2.13 1.16 163 MIME_CHARSET_FARAWAY 2 0.91 0.00 1.16 164 XMPhish14 2 0.91 0.00 1.16 165 XM_H_PHPMailer 2 1.83 4.26 1.16 166 XMReplyNow 1 1.37 4.26 0.58 167 XM_B_REG_HTML 1 0.91 2.13 0.58 168 RELAYCOUNTRY_AT 1 0.46 0.00 0.58 169 XMLngstWrd_03 1 0.46 0.00 0.58 170 T_DOC_ATTACH_NO_EXT 1 0.46 0.00 0.58 171 XM_H_Trusted_IP 1 0.46 0.00 0.58 172 XMSlimDrugH 1 0.46 0.00 0.58 173 XMLngstWrd_01 1 0.46 0.00 0.58 174 TR_XM_FormFill2 1 0.91 2.13 0.58 175 TR_Symld_Words 1 0.46 0.00 0.58 176 RCVD_IN_MSPIKE_BL 1 1.37 4.26 0.58 177 XM_H_PHPOS 1 0.91 2.13 0.58 178 T_OBFU_PDF_ATTACH 1 0.46 0.00 0.58 179 XM_GoogleGroups 1 0.46 0.00 0.58 180 XMSubject_78 1 0.46 0.00 0.58 181 BOTNET 1 2.74 10.64 0.58 182 FROM_OFFERS 1 0.91 2.13 0.58 183 XM_ShortIntro_01 1 0.91 2.13 0.58 184 BOTNET_IPINHOSTNAME 1 2.74 10.64 0.58 185 T_PDS_TINYSUBJ_URISHRT 1 0.46 0.00 0.58 186 XMLngstWrd_04 1 0.46 0.00 0.58 187 XMLngstWrd_02 1 0.46 0.00 0.58 188 LONG_IMG_URI 1 0.46 0.00 0.58 189 XMHTML_After_End 1 0.46 0.00 0.58 190 T_MONEY_PERCENT 1 4.57 19.15 0.58 191 MIXED_FONT_CASE 1 0.46 0.00 0.58 192 TR_Mismatch_TLD_01 1 0.46 0.00 0.58 193 FORGED_MSGID_YAHOO 1 0.46 0.00 0.58 194 TR_XM_PHPDW 1 0.91 2.13 0.58 195 RCVD_IN_IADB_OPTIN_GT50 1 0.46 0.00 0.58 196 URIBL_DBL_SPAM 1 0.46 0.00 0.58 197 BAYES_95 1 2.74 10.64 0.58 198 TooManyTo_003 1 0.91 2.13 0.58 199 TR_XM_MSPIKECOMBO 1 1.37 4.26 0.58 200 TR_XM_SpammyWords3 1 1.37 4.26 0.58 ----------------------------------------------------------------------