Email: 530 Autolearn: 0 AvgScore: -1.78 AvgScanTime: 3.25 sec Spam: 44 Autolearn: 0 AvgScore: 16.64 AvgScanTime: 4.61 sec Ham: 486 Autolearn: 0 AvgScore: -3.45 AvgScanTime: 3.13 sec Time Spent Running SA: 0.48 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.42 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 38 40.19 86.36 36.01 2 T_SCC_BODY_TEXT_LINE 35 84.34 79.55 84.77 3 DCC_CHECK_NEGATIVE 31 89.81 70.45 91.56 4 XM_B_Unicode 31 27.17 70.45 23.25 5 DKIM_SIGNED 31 38.87 70.45 36.01 6 XM_DK_Pass 30 38.30 68.18 35.60 7 DKIM_VALID 30 34.53 68.18 31.48 8 RELAYCOUNTRY_US 25 37.17 56.82 35.39 9 XM_B_SpammyWords 25 14.15 56.82 10.29 10 DKIM_VALID_AU 23 29.62 52.27 27.57 11 BAYES_50 23 30.75 52.27 28.81 12 XM_B_Unicode3 22 21.13 50.00 18.52 13 XMListUnsubscribeExists 20 20.00 45.45 17.70 14 XM_Body_Dirty_Words 15 4.53 34.09 1.85 15 UNTRUSTED_Relay 15 4.53 34.09 1.85 16 DKIM_VALID_EF 15 18.49 34.09 17.08 17 RELAYCOUNTRY_META 15 5.47 34.09 2.88 18 RCVD_IN_MSPIKE_H2 14 8.11 31.82 5.97 19 XMSubLong 14 13.58 31.82 11.93 20 XM_DK_Undo_02 14 3.96 31.82 1.44 21 HTML_FONT_LOW_CONTRAST 13 16.60 29.55 15.43 22 FVGT_m_MULTI_ODD 13 9.06 29.55 7.20 23 DCC_CHECK 13 10.19 29.55 8.44 24 MIME_HTML_ONLY 13 7.17 29.55 5.14 25 XM_B_SpammyWords2 13 6.23 29.55 4.12 26 XM_B_Unsub 12 3.96 27.27 1.85 27 LOC_TINY_FONT_1 12 13.96 27.27 12.76 28 TR_XM_BayesUnsub 11 3.21 25.00 1.23 29 BAYES_99 10 2.83 22.73 1.03 30 T_KAM_HTML_FONT_INVALID 9 10.38 20.45 9.47 31 BOTNET 9 1.89 20.45 0.21 32 TR_XM_DK_Unsub 8 10.19 18.18 9.47 33 TR_XM_SpammyRelay 8 2.64 18.18 1.23 34 LOTS_OF_MONEY 8 3.58 18.18 2.26 35 HTML_IMAGE_RATIO_06 8 1.89 18.18 0.41 36 XM_UncommonTLD01 8 4.91 18.18 3.70 37 XM_UB50 7 2.26 15.91 1.03 38 XM_Multi_Part_URI 7 7.17 15.91 6.38 39 TR_XM_SpammyWords4 7 2.08 15.91 0.82 40 XMSexyCombo_05 7 1.70 15.91 0.41 41 UNPARSEABLE_RELAY 7 4.34 15.91 3.29 42 RCVD_IN_BL_SPAMCOP_NET 6 1.32 13.64 0.21 43 SpammyFromTLD_01 6 2.45 13.64 1.44 44 RCVD_IN_MSPIKE_WL 6 18.87 13.64 19.34 45 T_TM2_M_HEADER_IN_MSG 6 6.04 13.64 5.35 46 XM_Evil_Numbers_Gen 5 2.45 11.36 1.65 47 BOTNET_IPINHOSTNAME 5 2.83 11.36 2.06 48 BAYES_999 5 1.51 11.36 0.62 49 XM_B_SpammyWords3 5 1.51 11.36 0.62 50 TR_XM_PHPForged 5 1.32 11.36 0.41 51 TR_XM_FormFill2 5 1.32 11.36 0.41 52 BOTNET_NORDNS 5 0.94 11.36 0.00 53 MPART_ALT_DIFF 4 2.26 9.09 1.65 54 XM_H_Long_From01 4 1.89 9.09 1.23 55 HTML_IMAGE_RATIO_04 4 3.77 9.09 3.29 56 XMSubMetaSx_00 4 1.13 9.09 0.41 57 XMNumbers 4 45.85 9.09 49.18 58 URI_NOVOWEL 4 1.51 9.09 0.82 59 MIME_HTML_MOSTLY 4 2.08 9.09 1.44 60 XM_UB99 4 0.75 9.09 0.00 61 TR_XM_PHPDW 4 1.13 9.09 0.41 62 BAYES_05 4 3.02 9.09 2.47 63 TR_XM_SPAMCOP 4 0.94 9.09 0.21 64 XM_H_PHPOS 4 1.13 9.09 0.41 65 URIBL_DBL_SPAM 4 0.75 9.09 0.00 66 TR_XM_NoHeaderRelay 4 0.75 9.09 0.00 67 XM_SPF_SoftFail 3 0.94 6.82 0.41 68 TR_XM_PhishingBody 3 1.51 6.82 1.03 69 XM_H_PHPMailer 3 0.57 6.82 0.00 70 RCVD_IN_MSPIKE_H3 3 11.32 6.82 11.73 71 FSL_BULK_SIG 3 1.32 6.82 0.82 72 NORDNS_LOW_CONTRAST 3 0.57 6.82 0.00 73 BAYES_60 3 10.57 6.82 10.91 74 XM_DIRTYINTL 3 1.13 6.82 0.62 75 KHOP_HELO_FCRDNS 3 0.94 6.82 0.41 76 T_XMDrugObfuBody_08 3 0.75 6.82 0.21 77 RELAYCOUNTRY_IN 3 1.32 6.82 0.82 78 XMNoVowels 3 1.51 6.82 1.03 79 XMStrtUSub 3 2.64 6.82 2.26 80 TR_Symld_Words 3 1.13 6.82 0.62 81 XM_OfRef6 3 0.75 6.82 0.21 82 TR_XM_UnparsRelay 3 1.70 6.82 1.23 83 TR_XM_DKIM_Undo 3 0.94 6.82 0.41 84 TR_XM_SpammyWords2 3 0.57 6.82 0.00 85 BODY_EMPTY 2 0.75 4.55 0.41 86 XMBSHREFv2 2 0.75 4.55 0.41 87 IMPOTENCE 2 0.38 4.55 0.00 88 MAILING_LIST_MULTI 2 0.75 4.55 0.41 89 DKIM_ADSP_CUSTOM_MED 2 0.38 4.55 0.00 90 SpammyFromTLD_02 2 0.57 4.55 0.21 91 DEAR_FRIEND 2 0.38 4.55 0.00 92 MSOE_MID_WRONG_CASE 2 0.38 4.55 0.00 93 TR_XM_MSPIKECOMBO 2 0.38 4.55 0.00 94 FORGED_GMAIL_RCVD 2 0.38 4.55 0.00 95 XMCmmnCold 2 0.38 4.55 0.00 96 BAYES_40 2 1.70 4.55 1.44 97 RELAYCOUNTRY_GB 2 0.38 4.55 0.00 98 XM_B_Investor 2 0.38 4.55 0.00 99 T_XMDrugObfuBody_14 2 0.57 4.55 0.21 100 AXB_XMAILER_MIMEOLE_OL_024C2 2 0.38 4.55 0.00 101 RCVD_IN_MSPIKE_H4 2 2.83 4.55 2.67 102 XM_B_SpammyTLD 2 3.96 4.55 3.91 103 RELAYCOUNTRY_NL 2 0.57 4.55 0.21 104 FROM_MISSP_MSFT 2 0.38 4.55 0.00 105 RELAYCOUNTRY_AT 2 0.38 4.55 0.00 106 TM2_M_URI_OPT_OUT 2 0.94 4.55 0.62 107 RCVD_IN_VALIDITY_RPBL 2 0.38 4.55 0.00 108 XMEmptyBody_01 2 0.75 4.55 0.41 109 T_TooManySym_01 2 2.08 4.55 1.85 110 DATE_IN_PAST_03_06 2 0.38 4.55 0.00 111 T_TooManySym_02 2 1.51 4.55 1.23 112 TR_Mismatch_TLD_02 2 0.38 4.55 0.00 113 TR_DCC_Bayes_99 2 0.38 4.55 0.00 114 RCVD_IN_MSPIKE_BL 2 0.38 4.55 0.00 115 XM_B_DNDMA 2 0.38 4.55 0.00 116 FORGED_MUA_OUTLOOK 2 0.38 4.55 0.00 117 MONEY_FROM_MISSP 2 0.38 4.55 0.00 118 HELO_NODOT 2 0.38 4.55 0.00 119 NML_ADSP_CUSTOM_MED 2 0.38 4.55 0.00 120 TooManyTo_001 2 2.26 4.55 2.06 121 XMSexyCombo_04 2 0.38 4.55 0.00 122 XMSexyCombo_01 2 0.38 4.55 0.00 123 TM2_M_BODY_EMPTY 2 0.75 4.55 0.41 124 URI_WP_DIRINDEX 2 0.38 4.55 0.00 125 RCVD_IN_PSBL 2 0.57 4.55 0.21 126 BAYES_80 2 3.58 4.55 3.50 127 FSL_CTYPE_WIN1251 2 0.38 4.55 0.00 128 TR_XM_InvalidRelay 2 0.38 4.55 0.00 129 HELO_NO_DOMAIN 2 0.38 4.55 0.00 130 FSL_HELO_NON_FQDN_1 2 0.38 4.55 0.00 131 TO_NO_BRKTS_FROM_MSSP 2 0.38 4.55 0.00 132 HTML_FONT_TINY_NORDNS 2 0.38 4.55 0.00 133 T_FILL_THIS_FORM_SHORT 2 0.57 4.55 0.21 134 FSL_NEW_HELO_USER 2 0.38 4.55 0.00 135 XM_H_PHPOS_M 2 0.38 4.55 0.00 136 DATE_IN_PAST_06_12 2 0.38 4.55 0.00 137 HK_SCAM 2 0.38 4.55 0.00 138 HTML_COMMENT_SAVED_URL 2 0.38 4.55 0.00 139 RCVD_IN_MSPIKE_L4 1 0.19 2.27 0.00 140 BOGUS_MSM_HDRS 1 0.19 2.27 0.00 141 RELAYCOUNTRY_TW 1 0.19 2.27 0.00 142 FROM_MISSP_USER 1 0.19 2.27 0.00 143 XM_ProductURIs 1 0.38 2.27 0.21 144 HTML_MIME_NO_HTML_TAG 1 0.57 2.27 0.41 145 SHORTENED_URL_HREF 1 0.19 2.27 0.00 146 XM_H_SpoofStaff4 1 0.57 2.27 0.41 147 XMDiploma_00 1 0.19 2.27 0.00 148 NSL_RCVD_HELO_USER 1 0.19 2.27 0.00 149 SHORT_URI 1 0.19 2.27 0.00 150 TVD_PH_SEC 1 0.19 2.27 0.00 151 GAPPY_SUBJECT 1 0.19 2.27 0.00 152 URIBL_SBL_A 1 0.19 2.27 0.00 153 XMStockSpam_06 1 0.75 2.27 0.62 154 XM_CamelCaseFrm001 1 0.57 2.27 0.41 155 FROM_SUSPICIOUS_NTLD 1 0.19 2.27 0.00 156 J_WEEDS_V 1 0.19 2.27 0.00 157 TR_XM_SpammyWords3 1 0.19 2.27 0.00 158 BITCOIN_XPRIO 1 0.19 2.27 0.00 159 XMSubPhish11 1 0.57 2.27 0.41 160 XM_Body_Dirty_Words_01 1 0.38 2.27 0.21 161 ALL_TRUSTED 1 56.42 2.27 61.32 162 PDS_FRNOM_TODOM_DBL_URL 1 0.19 2.27 0.00 163 MONEY_FRAUD_8 1 0.19 2.27 0.00 164 XM_B_Phish_Phrases 1 0.75 2.27 0.62 165 FROM_SUSPICIOUS_NTLD_FP 1 0.19 2.27 0.00 166 TR_XM_PSC1 1 0.57 2.27 0.41 167 XMPhish08 1 0.19 2.27 0.00 168 TR_XM_SpoofStaff 1 0.57 2.27 0.41 169 XM_B_COVIDMETA 1 0.19 2.27 0.00 170 XMSpoofStaff2 1 0.57 2.27 0.41 171 MIME_QP_LONG_LINE 1 1.70 2.27 1.65 172 XM_B_Unsub2 1 0.57 2.27 0.41 173 XM_PDF 1 1.70 2.27 1.65 174 RDNS_DYNAMIC 1 0.19 2.27 0.00 175 NO_DNS_FOR_FROM 1 0.19 2.27 0.00 176 XMGenDplmaNmb 1 0.19 2.27 0.00 177 RCVD_IN_IADB_LISTED 1 0.19 2.27 0.00 178 INVALID_MSGID 1 2.26 2.27 2.26 179 TR_XM_SpammyWords5 1 0.38 2.27 0.21 180 T_MONEY_PERCENT 1 0.19 2.27 0.00 181 TR_MetaPhish_Combo_01 1 0.38 2.27 0.21 182 RELAYCOUNTRY_HU 1 0.19 2.27 0.00 183 TR_XM_FormFill 1 0.19 2.27 0.00 184 MILLION_HUNDRED 1 0.19 2.27 0.00 185 RCVD_IN_MSPIKE_H5 1 4.72 2.27 4.94 186 FROM_MISSP_EH_MATCH 1 0.19 2.27 0.00 187 TR_MetaPhish_Sub_02 1 0.19 2.27 0.00 188 RCVD_IN_MSPIKE_L3 1 0.19 2.27 0.00 189 RELAYCOUNTRY_NG 1 0.19 2.27 0.00 190 FROM_MISSPACED 1 0.19 2.27 0.00 191 XM_OfRef7 1 0.19 2.27 0.00 192 XMSubMetaSSx_00 1 0.19 2.27 0.00 193 XFER_LOTSA_MONEY 1 0.19 2.27 0.00 194 MONEY_FRAUD_5 1 0.19 2.27 0.00 195 OBFU_TEXT_ATTACH 1 0.19 2.27 0.00 196 GAPPY_LOW_CONTRAST 1 0.19 2.27 0.00 197 XM_UB999 1 0.19 2.27 0.00 198 LOADSA_MONEY_COMBO 1 0.19 2.27 0.00 199 TR_XM_MaxWHORU 1 0.19 2.27 0.00 200 TR_XM_MaxSPIKE 1 0.19 2.27 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 445 89.81 70.45 91.56 2 T_SCC_BODY_TEXT_LINE 412 84.34 79.55 84.77 3 BOUNCE_MESSAGE 309 58.30 0.00 63.58 4 ANY_BOUNCE_MESSAGE 309 58.30 0.00 63.58 5 ALL_TRUSTED 298 56.42 2.27 61.32 6 BAYES_00 247 46.60 0.00 50.82 7 XMNumbers 239 45.85 9.09 49.18 8 SCC_BODY_URI_ONLY 229 43.21 0.00 47.12 9 DKIM_SIGNED 175 38.87 70.45 36.01 10 HTML_MESSAGE 175 40.19 86.36 36.01 11 XM_DK_Pass 173 38.30 68.18 35.60 12 RELAYCOUNTRY_US 172 37.17 56.82 35.39 13 DKIM_VALID 153 34.53 68.18 31.48 14 BAYES_50 140 30.75 52.27 28.81 15 DKIM_VALID_AU 134 29.62 52.27 27.57 16 XM_B_Unicode 113 27.17 70.45 23.25 17 RCVD_IN_MSPIKE_WL 94 18.87 13.64 19.34 18 XM_B_Unicode3 90 21.13 50.00 18.52 19 XMListUnsubscribeExists 86 20.00 45.45 17.70 20 DKIM_VALID_EF 83 18.49 34.09 17.08 21 HTML_FONT_LOW_CONTRAST 75 16.60 29.55 15.43 22 LOC_TINY_FONT_1 62 13.96 27.27 12.76 23 XMSubLong 58 13.58 31.82 11.93 24 RCVD_IN_MSPIKE_H3 57 11.32 6.82 11.73 25 BAYES_60 53 10.57 6.82 10.91 26 XM_B_SpammyWords 50 14.15 56.82 10.29 27 T_KAM_HTML_FONT_INVALID 46 10.38 20.45 9.47 28 TR_XM_DK_Unsub 46 10.19 18.18 9.47 29 HTML_IMAGE_ONLY_20 43 8.11 0.00 8.85 30 DCC_CHECK 41 10.19 29.55 8.44 31 XM_DK_Undo_01 38 7.17 0.00 7.82 32 MIME_HEADER_CTYPE_ONLY 36 6.79 0.00 7.41 33 FVGT_m_MULTI_ODD 35 9.06 29.55 7.20 34 XM_Multi_Part_URI 31 7.17 15.91 6.38 35 TR_XM_DK_Bayes 31 5.85 0.00 6.38 36 RCVD_IN_MSPIKE_H2 29 8.11 31.82 5.97 37 T_TM2_M_HEADER_IN_MSG 26 6.04 13.64 5.35 38 LotsOfNums_01 26 4.91 0.00 5.35 39 MIME_HTML_ONLY 25 7.17 29.55 5.14 40 RCVD_IN_MSPIKE_H5 24 4.72 2.27 4.94 41 XM_DKIMWhitelistDomains 23 4.34 0.00 4.73 42 DKIM_INVALID 22 4.34 2.27 4.53 43 TVD_SPACE_RATIO 22 4.15 0.00 4.53 44 XMLngstWrd_00 21 3.96 0.00 4.32 45 XM_B_SpammyWords2 20 6.23 29.55 4.12 46 XM_B_SpammyTLD 19 3.96 4.55 3.91 47 XM_UncommonTLD01 18 4.91 18.18 3.70 48 BAYES_80 17 3.58 4.55 3.50 49 UNPARSEABLE_RELAY 16 4.34 15.91 3.29 50 HTML_IMAGE_RATIO_04 16 3.77 9.09 3.29 51 RELAYCOUNTRY_META 14 5.47 34.09 2.88 52 USER_IN_DEF_DKIM_WL 14 2.64 0.00 2.88 53 IN_ZIMBRA_NJ_WHITELIST 13 2.45 0.00 2.67 54 RCVD_IN_MSPIKE_H4 13 2.83 4.55 2.67 55 BAYES_05 12 3.02 9.09 2.47 56 TO_MALFORMED 11 2.08 0.00 2.26 57 XMStrtUSub 11 2.64 6.82 2.26 58 XM_B_REG_HTML 11 2.08 0.00 2.26 59 TR_XM_DK_Bayes1 11 2.08 0.00 2.26 60 LOTS_OF_MONEY 11 3.58 18.18 2.26 61 INVALID_MSGID 11 2.26 2.27 2.26 62 USER_IN_WHITELIST 10 1.89 0.00 2.06 63 BOTNET_IPINHOSTNAME 10 2.83 11.36 2.06 64 TooManyTo_001 10 2.26 4.55 2.06 65 TR_XM_DK_Bayes2 10 1.89 0.00 2.06 66 USER_IN_WELCOMELIST 10 1.89 0.00 2.06 67 XM_B_Unsub 9 3.96 27.27 1.85 68 XM_Body_Dirty_Words 9 4.53 34.09 1.85 69 UNTRUSTED_Relay 9 4.53 34.09 1.85 70 T_TooManySym_01 9 2.08 4.55 1.85 71 T_REMOTE_IMAGE 8 1.51 0.00 1.65 72 MIME_QP_LONG_LINE 8 1.70 2.27 1.65 73 MPART_ALT_DIFF 8 2.26 9.09 1.65 74 XM_Evil_Numbers_Gen 8 2.45 11.36 1.65 75 XM_PDF 8 1.70 2.27 1.65 76 XM_DK_Undo_02 7 3.96 31.82 1.44 77 MIME_HTML_MOSTLY 7 2.08 9.09 1.44 78 SpammyFromTLD_01 7 2.45 13.64 1.44 79 RELAYCOUNTRY_AU 7 1.32 0.00 1.44 80 BAYES_40 7 1.70 4.55 1.44 81 TR_XM_BayesUnsub 6 3.21 25.00 1.23 82 T_TooManySym_02 6 1.51 4.55 1.23 83 TR_XM_UnparsRelay 6 1.70 6.82 1.23 84 UPGRADE_MAILBOX 6 1.13 0.00 1.23 85 XM_H_Trusted_IP 6 1.13 0.00 1.23 86 XM_H_Long_From01 6 1.89 9.09 1.23 87 XMSubNoVowel 6 1.13 0.00 1.23 88 TR_XM_SpammyRelay 6 2.64 18.18 1.23 89 XMNoVowels 5 1.51 6.82 1.03 90 HTML_IMAGE_RATIO_02 5 1.13 2.27 1.03 91 XM_UB50 5 2.26 15.91 1.03 92 TR_XM_PhishingBody 5 1.51 6.82 1.03 93 BAYES_99 5 2.83 22.73 1.03 94 RELAYCOUNTRY_IN 4 1.32 6.82 0.82 95 URI_NOVOWEL 4 1.51 9.09 0.82 96 XM_UB60 4 0.94 2.27 0.82 97 HK_RANDOM_FROM 4 0.75 0.00 0.82 98 HK_RANDOM_ENVFROM 4 0.75 0.00 0.82 99 BAYES_20 4 0.75 0.00 0.82 100 XM_ZIP 4 0.75 0.00 0.82 101 TM2_M_VERY_LONG_WORD 4 0.94 2.27 0.82 102 XM_B_Phish66 4 0.94 2.27 0.82 103 IN_HORDE_ADDRESS_BOOK 4 0.75 0.00 0.82 104 FSL_BULK_SIG 4 1.32 6.82 0.82 105 TR_XM_SpammyWords4 4 2.08 15.91 0.82 106 XMCapTrack 3 0.57 0.00 0.62 107 BAYES_999 3 1.51 11.36 0.62 108 XMGappySubj_01 3 0.57 0.00 0.62 109 TooManyTo_002 3 0.75 2.27 0.62 110 XM_B_SpammyWords3 3 1.51 11.36 0.62 111 TR_Symld_Words 3 1.13 6.82 0.62 112 XM_B_Phish_Phrases 3 0.75 2.27 0.62 113 XMBrknScrpt_02 3 0.57 0.00 0.62 114 T_OBFU_PDF_ATTACH 3 0.57 0.00 0.62 115 XMStockSpam_06 3 0.75 2.27 0.62 116 FROM_EXCESS_BASE64 3 0.57 0.00 0.62 117 TM2_M_URI_OPT_OUT 3 0.94 4.55 0.62 118 TVD_RCVD_IP 3 0.57 0.00 0.62 119 RCVD_IN_VALIDITY_SAFE 3 0.57 0.00 0.62 120 HTML_IMAGE_RATIO_08 3 0.75 2.27 0.62 121 XM_DIRTYINTL 3 1.13 6.82 0.62 122 MSGID_NOFQDN1 3 0.57 0.00 0.62 123 HTML_IMAGE_RATIO_06 2 1.89 18.18 0.41 124 TR_XM_PHPDW 2 1.13 9.09 0.41 125 MSGID_FROM_MTA_HEADER 2 0.38 0.00 0.41 126 TM2_M_BODY_EMPTY 2 0.75 4.55 0.41 127 XM_Body_Obfu01 2 0.38 0.00 0.41 128 TooManyTo_004 2 0.57 2.27 0.41 129 KHOP_HELO_FCRDNS 2 0.94 6.82 0.41 130 PDS_OTHER_BAD_TLD 2 0.57 2.27 0.41 131 XMDateMe_00 2 0.57 2.27 0.41 132 TooManyTo_005 2 0.38 0.00 0.41 133 FROM_GOV_SPOOF 2 0.57 2.27 0.41 134 TR_XM_PHPForged 2 1.32 11.36 0.41 135 TR_XM_FormFill2 2 1.32 11.36 0.41 136 TR_XM_DKIM_Undo 2 0.94 6.82 0.41 137 XM_H_PHPOS 2 1.13 9.09 0.41 138 TooManyTo_003 2 0.57 2.27 0.41 139 TR_XM_SB_Phish 2 0.57 2.27 0.41 140 MISSING_HEADERS 2 0.57 2.27 0.41 141 XM_H_Long_From02 2 0.57 2.27 0.41 142 TR_Mismatch_TLD_01 2 0.57 2.27 0.41 143 TR_XM_PSC1 2 0.57 2.27 0.41 144 XMLngstWrd_02 2 0.38 0.00 0.41 145 XMSubPhish11 2 0.57 2.27 0.41 146 TR_XM_SpoofStaff 2 0.57 2.27 0.41 147 XMSpoofStaff2 2 0.57 2.27 0.41 148 XM_GoogleGroups 2 0.38 0.00 0.41 149 XMLngstWrd_03 2 0.38 0.00 0.41 150 WEIRD_PORT 2 0.38 0.00 0.41 151 FROM_GOV_DKIM_AU 2 0.38 0.00 0.41 152 XM_CamelCaseFrm001 2 0.57 2.27 0.41 153 SUBJ_ALL_CAPS 2 0.38 0.00 0.41 154 MAILING_LIST_MULTI 2 0.75 4.55 0.41 155 HTML_MIME_NO_HTML_TAG 2 0.57 2.27 0.41 156 XM_H_SpoofStaff4 2 0.57 2.27 0.41 157 FROM_LOCAL_HEX 2 0.38 0.00 0.41 158 TR_XM_SpoofPhishAttach 2 0.38 0.00 0.41 159 BODY_EMPTY 2 0.75 4.55 0.41 160 XM_SPF_SoftFail 2 0.94 6.82 0.41 161 XMBSHREFv2 2 0.75 4.55 0.41 162 HTML_IMAGE_ONLY_08 2 0.38 0.00 0.41 163 XMSexyCombo_05 2 1.70 15.91 0.41 164 XMEmptyBody_01 2 0.75 4.55 0.41 165 XM_ZohoDesk1 2 0.38 0.00 0.41 166 XMLngstWrd_01 2 0.38 0.00 0.41 167 XMSubMetaSx_00 2 1.13 9.09 0.41 168 XM_B_Unsub2 2 0.57 2.27 0.41 169 RCVD_IN_PSBL 1 0.57 4.55 0.21 170 XMLongAddy 1 0.19 0.00 0.21 171 TR_XM_SPAMCOP 1 0.94 9.09 0.21 172 TR_XM_Base64_C 1 0.19 0.00 0.21 173 FROM_LOCAL_DIGITS 1 0.19 0.00 0.21 174 URI_TRY_3LD 1 0.19 0.00 0.21 175 T_XMDrugObfuBody_08 1 0.75 6.82 0.21 176 XM_SendGrid 1 0.19 0.00 0.21 177 RCVD_IN_VALIDITY_CERTIFIED 1 0.19 0.00 0.21 178 TR_XM_Base64_M1 1 0.19 0.00 0.21 179 FILL_THIS_FORM 1 0.19 0.00 0.21 180 TR_XM_DK_SendGrid 1 0.19 0.00 0.21 181 TR_UG_Sexy_Spam 1 0.19 0.00 0.21 182 XMPhish11 1 0.19 0.00 0.21 183 RELAYCOUNTRY_PL 1 0.38 2.27 0.21 184 BAYES_95 1 0.19 0.00 0.21 185 T_TooManySym_03 1 0.38 2.27 0.21 186 XM_URI_RBL 1 0.19 0.00 0.21 187 XM_Attn_01 1 0.38 2.27 0.21 188 XM_OfRef6 1 0.75 6.82 0.21 189 XMSlimDrugH 1 0.19 0.00 0.21 190 HDRS_MISSP 1 0.19 0.00 0.21 191 T_FILL_THIS_FORM_SHORT 1 0.57 4.55 0.21 192 T_Symld_Words_02 1 0.38 2.27 0.21 193 NUMERIC_HTTP_ADDR 1 0.38 2.27 0.21 194 ACT_NOW_CAPS 1 0.19 0.00 0.21 195 TR_MSPIKEBAYES00 1 0.19 0.00 0.21 196 HTML_FONT_SIZE_LARGE 1 0.19 0.00 0.21 197 MIME_HTML_ONLY_MULTI 1 0.19 0.00 0.21 198 XM_Body_Dirty_Words_01 1 0.38 2.27 0.21 199 BOTNET 1 1.89 20.45 0.21 200 XM_BadFromFormat 1 0.19 0.00 0.21 ----------------------------------------------------------------------