Email: 265 Autolearn: 0 AvgScore: 0.56 AvgScanTime: 2.18 sec Spam: 57 Autolearn: 0 AvgScore: 12.35 AvgScanTime: 2.79 sec Ham: 208 Autolearn: 0 AvgScore: -2.67 AvgScanTime: 2.01 sec Time Spent Running SA: 0.16 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 50 70.19 87.72 65.38 2 HTML_MESSAGE 50 70.19 87.72 65.38 3 T_SCC_BODY_TEXT_LINE 49 82.26 85.96 81.25 4 XM_DK_Pass 48 68.68 84.21 64.42 5 RELAYCOUNTRY_US 48 67.55 84.21 62.98 6 DKIM_VALID 44 66.04 77.19 62.98 7 XM_B_Unicode 42 54.34 73.68 49.04 8 DCC_CHECK_NEGATIVE 36 83.02 63.16 88.46 9 XM_B_SpammyWords 33 41.13 57.89 36.54 10 DKIM_VALID_AU 30 52.45 52.63 52.40 11 BAYES_50 29 52.83 50.88 53.37 12 XMListUnsubscribeExists 29 39.25 50.88 36.06 13 XM_B_Unicode3 23 31.32 40.35 28.85 14 FVGT_m_MULTI_ODD 21 24.53 36.84 21.15 15 DCC_CHECK 21 16.98 36.84 11.54 16 DKIM_VALID_EF 20 31.32 35.09 30.29 17 LOC_TINY_FONT_1 19 26.79 33.33 25.00 18 XM_DK_Undo_02 18 10.19 31.58 4.33 19 T_KAM_HTML_FONT_INVALID 18 19.25 31.58 15.87 20 MIME_HTML_ONLY 15 15.09 26.32 12.02 21 XM_B_Unsub 15 13.96 26.32 10.58 22 RELAYCOUNTRY_META 14 10.19 24.56 6.25 23 HTML_FONT_LOW_CONTRAST 14 24.53 24.56 24.52 24 TR_XM_BayesUnsub 14 10.94 24.56 7.21 25 RCVD_IN_MSPIKE_H2 13 13.58 22.81 11.06 26 XMSubLong 13 26.42 22.81 27.40 27 TR_XM_DK_Unsub 13 14.72 22.81 12.50 28 XM_B_SpammyWords2 12 12.08 21.05 9.62 29 RCVD_IN_MSPIKE_WL 11 27.92 19.30 30.29 30 LOTS_OF_MONEY 11 8.68 19.30 5.77 31 BAYES_99 11 7.17 19.30 3.85 32 XM_Multi_Part_URI 11 12.45 19.30 10.58 33 UNPARSEABLE_RELAY 9 8.68 15.79 6.73 34 T_TM2_M_HEADER_IN_MSG 9 16.98 15.79 17.31 35 FSL_BULK_SIG 9 3.77 15.79 0.48 36 TR_XM_DKIM_Undo 9 4.15 15.79 0.96 37 RCVD_IN_BL_SPAMCOP_NET 9 4.15 15.79 0.96 38 TR_XM_UnparsRelay 9 4.15 15.79 0.96 39 TR_XM_SpammyRelay 8 5.28 14.04 2.88 40 XM_Evil_Numbers_Gen 7 8.68 12.28 7.69 41 XM_B_SpammyWords3 7 6.79 12.28 5.29 42 XMNumbers 7 21.13 12.28 23.56 43 SpammyFromTLD_01 7 2.64 12.28 0.00 44 XM_UncommonTLD01 7 7.55 12.28 6.25 45 TR_XM_SpammyWords4 6 4.91 10.53 3.37 46 DKIM_INVALID 6 4.15 10.53 2.40 47 XM_Body_Dirty_Words 6 10.57 10.53 10.58 48 UNTRUSTED_Relay 6 3.77 10.53 1.92 49 TR_XM_NoHeaderRelay 6 3.02 10.53 0.96 50 BAYES_60 6 10.19 10.53 10.10 51 RCVD_IN_MSPIKE_H3 6 11.70 10.53 12.02 52 TR_XM_SPAMCOP 6 3.02 10.53 0.96 53 TR_XM_PHPDW 5 1.89 8.77 0.00 54 XMStrtUSub 5 6.04 8.77 5.29 55 BOTNET 5 1.89 8.77 0.00 56 BAYES_999 5 4.15 8.77 2.88 57 XM_H_PHPOS 5 1.89 8.77 0.00 58 T_XMDrugObfuBody_14 5 3.02 8.77 1.44 59 XM_SPF_SoftFail 5 2.26 8.77 0.48 60 XM_OfRef6 5 2.64 8.77 0.96 61 XMSubMetaSx_00 5 3.02 8.77 1.44 62 TR_XM_PHPForged 5 1.89 8.77 0.00 63 MIME_HTML_MOSTLY 5 2.64 8.77 0.96 64 XM_H_Long_From01 5 5.66 8.77 4.81 65 BOTNET_IPINHOSTNAME 5 3.40 8.77 1.92 66 TR_XM_FormFill2 5 1.89 8.77 0.00 67 URIBL_DBL_SPAM 4 1.51 7.02 0.00 68 TM2_M_BODY_EMPTY 4 1.89 7.02 0.48 69 SCC_BODY_URI_ONLY 4 13.58 7.02 15.38 70 XM_UB50 4 1.89 7.02 0.48 71 BAYES_80 4 3.40 7.02 2.40 72 BODY_EMPTY 4 1.51 7.02 0.00 73 BAYES_95 4 2.26 7.02 0.96 74 HTML_IMAGE_RATIO_06 4 3.02 7.02 1.92 75 URI_NOVOWEL 4 2.64 7.02 1.44 76 XMEmptyBody_01 4 1.51 7.02 0.00 77 TR_XM_PhishingBody 4 2.64 7.02 1.44 78 XM_OfRef7 3 1.51 5.26 0.48 79 MISSING_HEADERS 3 1.89 5.26 0.96 80 T_Symld_Words_02 3 1.13 5.26 0.00 81 XMSexyCombo_05 3 3.02 5.26 2.40 82 TR_XM_SpammyWords5 3 1.89 5.26 0.96 83 T_XMHurry_00 3 1.13 5.26 0.00 84 XM_B_Phish66 3 2.26 5.26 1.44 85 TR_XM_PhishingBody2 3 1.13 5.26 0.00 86 TooManyTo_001 3 5.28 5.26 5.29 87 MPART_ALT_DIFF 3 1.89 5.26 0.96 88 TR_Symld_Words 3 1.89 5.26 0.96 89 LotsOfNums_01 3 6.79 5.26 7.21 90 RELAYCOUNTRY_GB 3 1.51 5.26 0.48 91 DKIM_ADSP_CUSTOM_MED 3 2.26 5.26 1.44 92 RELAYCOUNTRY_CA 3 1.89 5.26 0.96 93 RCVD_IN_MSPIKE_H4 3 7.17 5.26 7.69 94 XM_B_Phish_Phrases 3 3.40 5.26 2.88 95 TR_XM_MSPIKECOMBO 2 0.75 3.51 0.00 96 XMBSHREFv2 2 1.13 3.51 0.48 97 RCVD_HELO_IP_MISMATCH 2 0.75 3.51 0.00 98 T_FILL_THIS_FORM_SHORT 2 1.13 3.51 0.48 99 XMGenDplmaNmb 2 1.13 3.51 0.48 100 T_XMDrugObfuBody_08 2 1.89 3.51 1.44 101 XM_Body_Obfu01 2 1.13 3.51 0.48 102 XM_B_Investor 2 1.13 3.51 0.48 103 FORGED_GMAIL_RCVD 2 0.75 3.51 0.00 104 RCVD_IN_PSBL 2 1.13 3.51 0.48 105 TVD_PH_BODY_ACCOUNTS_PRE 2 0.75 3.51 0.00 106 TR_XM_DK_Bayes1 2 2.64 3.51 2.40 107 FROM_EXCESS_BASE64 2 1.51 3.51 0.96 108 XM_B_SEO 2 1.13 3.51 0.48 109 RCVD_IN_VALIDITY_RPBL 2 0.75 3.51 0.00 110 RCVD_IN_VALIDITY_SAFE 2 3.40 3.51 3.37 111 HTML_FONT_TINY_NORDNS 2 1.13 3.51 0.48 112 TR_XM_DK_Bayes2 2 2.26 3.51 1.92 113 TR_XM_SEO4 2 1.13 3.51 0.48 114 XMStockSpam_06 2 1.89 3.51 1.44 115 TR_LOTS_OF_MONEY3 2 1.51 3.51 0.96 116 TR_XM_SpammyWords2 2 1.13 3.51 0.48 117 TM2_M_URI_OPT_OUT 2 2.64 3.51 2.40 118 RELAYCOUNTRY_IN 2 0.75 3.51 0.00 119 HTTPS_HTTP_MISMATCH 2 1.13 3.51 0.48 120 TR_XM_Base64_L1 2 0.75 3.51 0.00 121 XM_B_SpammyTLD 2 4.15 3.51 4.33 122 XM_URI_RBL 2 1.13 3.51 0.48 123 RELAYCOUNTRY_ZA 2 0.75 3.51 0.00 124 TR_XM_Base64_C 2 0.75 3.51 0.00 125 ANY_BOUNCE_MESSAGE 2 16.23 3.51 19.71 126 BOUNCE_MESSAGE 2 16.23 3.51 19.71 127 NORDNS_LOW_CONTRAST 2 1.13 3.51 0.48 128 BAYES_00 2 16.23 3.51 19.71 129 TR_XM_SpammyWords3 2 0.75 3.51 0.00 130 TR_XM_Base64_M1 2 1.13 3.51 0.48 131 TR_XM_DK_Bayes 2 2.64 3.51 2.40 132 TM2_M_OBFU_COMMENT 2 1.51 3.51 0.96 133 TR_XM_Base64_M2 2 0.75 3.51 0.00 134 HTML_IMAGE_RATIO_02 2 1.89 3.51 1.44 135 TR_XM_Base64_M3 2 0.75 3.51 0.00 136 T_TooManySym_01 2 5.66 3.51 6.25 137 XMDiploma_00 2 1.13 3.51 0.48 138 XM_B_DNDMA 2 0.75 3.51 0.00 139 T_REMOTE_IMAGE 2 2.26 3.51 1.92 140 FROM_OFFERS 2 1.13 3.51 0.48 141 RCVD_IN_MSPIKE_BL 2 0.75 3.51 0.00 142 RCVD_IN_MSPIKE_H5 2 9.06 3.51 10.58 143 XM_UB99 1 0.38 1.75 0.00 144 TooManyTo_002 1 0.75 1.75 0.48 145 OBFU_TEXT_ATTACH 1 0.38 1.75 0.00 146 XM_HighProb1 1 0.38 1.75 0.00 147 UNSUB_GOOG_FORM 1 0.38 1.75 0.00 148 RCVD_IN_MSPIKE_L4 1 0.38 1.75 0.00 149 URI_TRUNCATED 1 0.38 1.75 0.00 150 PHP_SCRIPT 1 0.38 1.75 0.00 151 XM_H_PHPMailer 1 0.38 1.75 0.00 152 HK_RANDOM_ENVFROM 1 1.51 1.75 1.44 153 MIME_QP_LONG_LINE 1 2.64 1.75 2.88 154 XMSubject_70 1 0.38 1.75 0.00 155 XMWinner 1 0.38 1.75 0.00 156 FORGED_YAHOO_RCVD 1 0.38 1.75 0.00 157 XMBody_17 1 0.38 1.75 0.00 158 RELAYCOUNTRY_FR 1 0.75 1.75 0.48 159 XMLngstWrd_04 1 0.75 1.75 0.48 160 XM_B_SpammyWords4 1 0.38 1.75 0.00 161 RELAYCOUNTRY_BE 1 0.38 1.75 0.00 162 EXCLAMACION_ES 1 0.38 1.75 0.00 163 XMGppyBdWords 1 0.75 1.75 0.48 164 XM_DK_Undo_01 1 2.26 1.75 2.40 165 SpammyFromTLD_02 1 2.26 1.75 2.40 166 RELAYCOUNTRY_SE 1 0.38 1.75 0.00 167 XM_H_Long_From02 1 0.75 1.75 0.48 168 NUMERIC_HTTP_ADDR 1 0.75 1.75 0.48 169 XM_SendGrid 1 0.75 1.75 0.48 170 TR_MetaPhish_Combo_01 1 1.51 1.75 1.44 171 XM_ProductURIs 1 0.75 1.75 0.48 172 HTML_IMAGE_ONLY_12 1 0.38 1.75 0.00 173 RELAYCOUNTRY_IT 1 0.75 1.75 0.48 174 RDNS_DYNAMIC 1 0.38 1.75 0.00 175 FVGT_m_MULTI_ODD_EMAIL 1 0.38 1.75 0.00 176 TooManyTo_003 1 0.38 1.75 0.00 177 RCVD_IN_MSPIKE_L3 1 0.38 1.75 0.00 178 PDS_RDNS_DYNAMIC_FP 1 0.38 1.75 0.00 179 XM_H_Undi_Recip 1 0.75 1.75 0.48 180 DEAR_FRIEND 1 0.38 1.75 0.00 181 TR_XM_Undi_Recip11 1 0.38 1.75 0.00 182 LONG_JUNK_URI3 1 0.38 1.75 0.00 183 T_TooManySym_02 1 3.40 1.75 3.85 184 TooManyTo_004 1 0.38 1.75 0.00 185 T_XMDrugObfuBody_00 1 0.38 1.75 0.00 186 RCVD_IN_IADB_SPF 1 0.75 1.75 0.48 187 MAILING_LIST_MULTI 1 1.89 1.75 1.92 188 XM_Dr_From 1 1.89 1.75 1.92 189 XMLngstWrd_02 1 1.13 1.75 0.96 190 TR_DCC_Bayes_99 1 0.38 1.75 0.00 191 UPPERCASE_50_75 1 0.38 1.75 0.00 192 PDS_OTHER_BAD_TLD 1 0.38 1.75 0.00 193 HTML_MIME_NO_HTML_TAG 1 1.89 1.75 1.92 194 XMLngstWrd_00 1 1.13 1.75 0.96 195 RCVD_IN_IADB_LISTED 1 0.75 1.75 0.48 196 SUBJ_YOUR_FAMILY 1 0.38 1.75 0.00 197 HTML_COMMENT_SAVED_URL 1 0.38 1.75 0.00 198 KHOP_HELO_FCRDNS 1 1.13 1.75 0.96 199 XMPhish08 1 0.38 1.75 0.00 200 NA_DOLLARS 1 0.38 1.75 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 184 83.02 63.16 88.46 2 T_SCC_BODY_TEXT_LINE 169 82.26 85.96 81.25 3 DKIM_SIGNED 136 70.19 87.72 65.38 4 HTML_MESSAGE 136 70.19 87.72 65.38 5 XM_DK_Pass 134 68.68 84.21 64.42 6 RELAYCOUNTRY_US 131 67.55 84.21 62.98 7 DKIM_VALID 131 66.04 77.19 62.98 8 BAYES_50 111 52.83 50.88 53.37 9 DKIM_VALID_AU 109 52.45 52.63 52.40 10 XM_B_Unicode 102 54.34 73.68 49.04 11 XM_B_SpammyWords 76 41.13 57.89 36.54 12 XMListUnsubscribeExists 75 39.25 50.88 36.06 13 ALL_TRUSTED 66 24.91 0.00 31.73 14 DKIM_VALID_EF 63 31.32 35.09 30.29 15 RCVD_IN_MSPIKE_WL 63 27.92 19.30 30.29 16 XM_B_Unicode3 60 31.32 40.35 28.85 17 XMSubLong 57 26.42 22.81 27.40 18 LOC_TINY_FONT_1 52 26.79 33.33 25.00 19 HTML_FONT_LOW_CONTRAST 51 24.53 24.56 24.52 20 XMNumbers 49 21.13 12.28 23.56 21 FVGT_m_MULTI_ODD 44 24.53 36.84 21.15 22 ANY_BOUNCE_MESSAGE 41 16.23 3.51 19.71 23 BOUNCE_MESSAGE 41 16.23 3.51 19.71 24 BAYES_00 41 16.23 3.51 19.71 25 T_TM2_M_HEADER_IN_MSG 36 16.98 15.79 17.31 26 T_KAM_HTML_FONT_INVALID 33 19.25 31.58 15.87 27 SCC_BODY_URI_ONLY 32 13.58 7.02 15.38 28 TR_XM_DK_Unsub 26 14.72 22.81 12.50 29 RCVD_IN_MSPIKE_H3 25 11.70 10.53 12.02 30 MIME_HTML_ONLY 25 15.09 26.32 12.02 31 DCC_CHECK 24 16.98 36.84 11.54 32 RCVD_IN_MSPIKE_H2 23 13.58 22.81 11.06 33 XM_Multi_Part_URI 22 12.45 19.30 10.58 34 XM_B_Unsub 22 13.96 26.32 10.58 35 RCVD_IN_MSPIKE_H5 22 9.06 3.51 10.58 36 XM_Body_Dirty_Words 22 10.57 10.53 10.58 37 BAYES_60 21 10.19 10.53 10.10 38 XM_B_SpammyWords2 20 12.08 21.05 9.62 39 XM_DKIMWhitelistDomains 19 7.17 0.00 9.13 40 RCVD_IN_MSPIKE_H4 16 7.17 5.26 7.69 41 XM_Evil_Numbers_Gen 16 8.68 12.28 7.69 42 LotsOfNums_01 15 6.79 5.26 7.21 43 TR_XM_BayesUnsub 15 10.94 24.56 7.21 44 UNPARSEABLE_RELAY 14 8.68 15.79 6.73 45 IN_ZIMBRA_NJ_WHITELIST 13 4.91 0.00 6.25 46 XM_UncommonTLD01 13 7.55 12.28 6.25 47 T_TooManySym_01 13 5.66 3.51 6.25 48 RELAYCOUNTRY_META 13 10.19 24.56 6.25 49 LOTS_OF_MONEY 12 8.68 19.30 5.77 50 XMStrtUSub 11 6.04 8.77 5.29 51 TooManyTo_001 11 5.28 5.26 5.29 52 XM_B_SpammyWords3 11 6.79 12.28 5.29 53 XM_H_Long_From01 10 5.66 8.77 4.81 54 XM_B_SpammyTLD 9 4.15 3.51 4.33 55 XM_DK_Undo_02 9 10.19 31.58 4.33 56 T_TooManySym_02 8 3.40 1.75 3.85 57 BAYES_99 8 7.17 19.30 3.85 58 TO_MALFORMED 8 3.02 0.00 3.85 59 XMBody_78 8 3.02 0.00 3.85 60 INVALID_MSGID 7 2.64 0.00 3.37 61 BAYES_20 7 3.02 1.75 3.37 62 BAYES_40 7 2.64 0.00 3.37 63 TR_XM_SpammyWords4 7 4.91 10.53 3.37 64 HTML_IMAGE_RATIO_04 7 2.64 0.00 3.37 65 RCVD_IN_VALIDITY_SAFE 7 3.40 3.51 3.37 66 BAYES_05 6 2.26 0.00 2.88 67 USER_IN_DEF_DKIM_WL 6 2.26 0.00 2.88 68 XM_B_Unsub2 6 2.26 0.00 2.88 69 TR_XM_SpammyRelay 6 5.28 14.04 2.88 70 XM_B_Phish_Phrases 6 3.40 5.26 2.88 71 BAYES_999 6 4.15 8.77 2.88 72 XMNoVowels 6 2.26 0.00 2.88 73 MIME_QP_LONG_LINE 6 2.64 1.75 2.88 74 TR_XM_DK_Bayes 5 2.64 3.51 2.40 75 TR_XM_DK_Bayes1 5 2.64 3.51 2.40 76 XMSexyCombo_05 5 3.02 5.26 2.40 77 BAYES_80 5 3.40 7.02 2.40 78 USER_IN_WHITELIST 5 1.89 0.00 2.40 79 RELAYCOUNTRY_AU 5 1.89 0.00 2.40 80 DKIM_INVALID 5 4.15 10.53 2.40 81 USER_IN_WELCOMELIST 5 1.89 0.00 2.40 82 TM2_M_URI_OPT_OUT 5 2.64 3.51 2.40 83 XM_DK_Undo_01 5 2.26 1.75 2.40 84 SpammyFromTLD_02 5 2.26 1.75 2.40 85 XM_Dr_From 4 1.89 1.75 1.92 86 HTML_MIME_NO_HTML_TAG 4 1.89 1.75 1.92 87 UNTRUSTED_Relay 4 3.77 10.53 1.92 88 RCVD_IN_VALIDITY_CERTIFIED 4 1.51 0.00 1.92 89 HTML_IMAGE_RATIO_08 4 1.51 0.00 1.92 90 MAILING_LIST_MULTI 4 1.89 1.75 1.92 91 HTML_IMAGE_RATIO_06 4 3.02 7.02 1.92 92 BOTNET_IPINHOSTNAME 4 3.40 8.77 1.92 93 T_REMOTE_IMAGE 4 2.26 3.51 1.92 94 TVD_SPACE_RATIO 4 1.51 0.00 1.92 95 TR_XM_DK_Bayes2 4 2.26 3.51 1.92 96 TM2_M_VERY_LONG_WORD 4 1.51 0.00 1.92 97 URI_NOVOWEL 3 2.64 7.02 1.44 98 HK_RANDOM_FROM 3 1.13 0.00 1.44 99 DKIM_ADSP_CUSTOM_MED 3 2.26 5.26 1.44 100 XMSubMetaSx_00 3 3.02 8.77 1.44 101 TR_XM_PhishingBody 3 2.64 7.02 1.44 102 NML_ADSP_CUSTOM_MED 3 1.51 1.75 1.44 103 HTML_IMAGE_RATIO_02 3 1.89 3.51 1.44 104 XM_B_Phish66 3 2.26 5.26 1.44 105 T_XMDrugObfuBody_14 3 3.02 8.77 1.44 106 T_XMDrugObfuBody_08 3 1.89 3.51 1.44 107 HK_RANDOM_ENVFROM 3 1.51 1.75 1.44 108 XMStockSpam_06 3 1.89 3.51 1.44 109 BASE64_LENGTH_79_INF 3 1.13 0.00 1.44 110 XMBody_95 3 1.13 0.00 1.44 111 TR_MetaPhish_Combo_01 3 1.51 1.75 1.44 112 FROM_GOV_SPOOF 3 1.13 0.00 1.44 113 XMLngstWrd_02 2 1.13 1.75 0.96 114 XM_GoogleGroups 2 0.75 0.00 0.96 115 TR_XM_DKIM_Undo 2 4.15 15.79 0.96 116 XMLngstWrd_00 2 1.13 1.75 0.96 117 TR_MetaPhish_Combo_01b 2 0.75 0.00 0.96 118 RELAYCOUNTRY_CA 2 1.89 5.26 0.96 119 KHOP_HELO_FCRDNS 2 1.13 1.75 0.96 120 T_TooManySym_03 2 0.75 0.00 0.96 121 RCVD_IN_BL_SPAMCOP_NET 2 4.15 15.79 0.96 122 XM_ZIP 2 0.75 0.00 0.96 123 MSGID_NOFQDN1 2 0.75 0.00 0.96 124 TR_XM_NoHeaderRelay 2 3.02 10.53 0.96 125 XMSubPhish11 2 0.75 0.00 0.96 126 XMLngstWrd_01 2 1.13 1.75 0.96 127 TR_XM_SPAMCOP 2 3.02 10.53 0.96 128 MIME_HTML_MOSTLY 2 2.64 8.77 0.96 129 TR_XM_UnparsRelay 2 4.15 15.79 0.96 130 XM_ShortIntro_01 2 1.13 1.75 0.96 131 TM2_M_OBFU_COMMENT 2 1.51 3.51 0.96 132 HDRS_MISSP 2 1.13 1.75 0.96 133 XMLngstWrd_03 2 1.13 1.75 0.96 134 FROM_EXCESS_BASE64 2 1.51 3.51 0.96 135 TR_XM_SpammyWords5 2 1.89 5.26 0.96 136 XMSubMetaSxObfu_00 2 0.75 0.00 0.96 137 FROM_GOV_DKIM_AU 2 0.75 0.00 0.96 138 XM_CamelCaseFrm001 2 0.75 0.00 0.96 139 MISSING_HEADERS 2 1.89 5.26 0.96 140 TR_Symld_Words 2 1.89 5.26 0.96 141 TR_MetaPhish_Combo_01a 2 0.75 0.00 0.96 142 TR_LOTS_OF_MONEY3 2 1.51 3.51 0.96 143 BAYES_95 2 2.26 7.02 0.96 144 XMGappySubj_01 2 0.75 0.00 0.96 145 XM_OfRef6 2 2.64 8.77 0.96 146 TR_XM_SB_Phish 2 0.75 0.00 0.96 147 MSGID_FROM_MTA_HEADER 2 0.75 0.00 0.96 148 XM_PDF 2 0.75 0.00 0.96 149 MPART_ALT_DIFF 2 1.89 5.26 0.96 150 XMCapTrack 2 0.75 0.00 0.96 151 TVD_RCVD_IP 2 0.75 0.00 0.96 152 LONG_JUNK_URI 1 0.38 0.00 0.48 153 XM_URI_RBL 1 1.13 3.51 0.48 154 CTE_8BIT_MISMATCH 1 0.38 0.00 0.48 155 MIME_HEADER_CTYPE_ONLY 1 0.38 0.00 0.48 156 HK_RANDOM_REPLYTO 1 0.38 0.00 0.48 157 NORDNS_LOW_CONTRAST 1 1.13 3.51 0.48 158 RCVD_IN_IADB_LISTED 1 0.75 1.75 0.48 159 XMSubGiftCard1 1 0.38 0.00 0.48 160 TR_XM_Base64_M1 1 1.13 3.51 0.48 161 XM_H_Undi_Recip 1 0.75 1.75 0.48 162 RELAYCOUNTRY_KR 1 0.38 0.00 0.48 163 XM_BadFromFormat 1 0.38 0.00 0.48 164 XMUrgent 1 0.38 0.00 0.48 165 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.38 0.00 0.48 166 HELO_NODOT 1 0.38 0.00 0.48 167 RELAYCOUNTRY_GB 1 1.51 5.26 0.48 168 RCVD_IN_IADB_SPF 1 0.75 1.75 0.48 169 XM_UB60 1 0.38 0.00 0.48 170 WEIRD_PORT 1 0.38 0.00 0.48 171 XMDateMe_00 1 0.38 0.00 0.48 172 RCVD_IN_IADB_VOUCHED 1 0.38 0.00 0.48 173 RCVD_IN_IADB_DK 1 0.75 1.75 0.48 174 XMDiploma_00 1 1.13 3.51 0.48 175 FILL_THIS_FORM_LONG 1 0.38 0.00 0.48 176 FROM_OFFERS 1 1.13 3.51 0.48 177 RCVD_IN_IADB_SENDERID 1 0.75 1.75 0.48 178 IN_HORDE_ADDRESS_BOOK 1 0.38 0.00 0.48 179 XMLongAddy 1 0.38 0.00 0.48 180 XMBounce_02 1 0.38 0.00 0.48 181 XMSexyCombo_01 1 0.38 0.00 0.48 182 XMBdyGiftCard01 1 0.38 0.00 0.48 183 MIME_HTML_ONLY_MULTI 1 0.38 0.00 0.48 184 TR_XM_DK_SendGrid 1 0.38 0.00 0.48 185 TR_XM_Undi_Recip9 1 0.38 0.00 0.48 186 XMBounce_01 1 0.38 0.00 0.48 187 XM_B_DynamicLink 1 0.38 0.00 0.48 188 XMBody_03 1 0.38 0.00 0.48 189 PLING_QUERY 1 0.38 0.00 0.48 190 RELAYCOUNTRY_IE 1 0.38 0.00 0.48 191 RELAYCOUNTRY_PL 1 0.38 0.00 0.48 192 XM_UB50 1 1.89 7.02 0.48 193 HELO_NO_DOMAIN 1 0.38 0.00 0.48 194 XM_Sft_Ad_L33t 1 0.38 0.00 0.48 195 XM_H_CodeIgniter 1 0.38 0.00 0.48 196 URIBL_SBL_A 1 0.38 0.00 0.48 197 RELAYCOUNTRY_FR 1 0.75 1.75 0.48 198 XMLngstWrd_04 1 0.75 1.75 0.48 199 XM_B_SEO 1 1.13 3.51 0.48 200 XMGppyBdWords 1 0.75 1.75 0.48 ----------------------------------------------------------------------