Email: 180 Autolearn: 0 AvgScore: -1.39 AvgScanTime: 2.19 sec Spam: 32 Autolearn: 0 AvgScore: 12.41 AvgScanTime: 2.24 sec Ham: 148 Autolearn: 0 AvgScore: -4.37 AvgScanTime: 2.18 sec Time Spent Running SA: 0.11 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.09 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 29 70.00 90.62 65.54 2 DKIM_VALID 29 70.00 90.62 65.54 3 XM_DK_Pass 29 70.56 90.62 66.22 4 DKIM_SIGNED 29 71.11 90.62 66.89 5 HTML_MESSAGE 28 72.22 87.50 68.92 6 XM_B_Unicode 24 47.78 75.00 41.89 7 DKIM_VALID_AU 24 53.33 75.00 48.65 8 T_SCC_BODY_TEXT_LINE 24 78.89 75.00 79.73 9 XMListUnsubscribeExists 23 33.89 71.88 25.68 10 DCC_CHECK_NEGATIVE 23 87.22 71.88 90.54 11 DKIM_VALID_EF 20 43.33 62.50 39.19 12 FVGT_m_MULTI_ODD 20 27.22 62.50 19.59 13 XM_B_Unicode3 18 30.00 56.25 24.32 14 XM_DK_Undo_02 17 12.78 53.12 4.05 15 TR_XM_DK_Unsub 16 23.33 50.00 17.57 16 XMSubLong 15 20.00 46.88 14.19 17 BAYES_50 13 52.78 40.62 55.41 18 XM_B_SpammyWords 13 21.67 40.62 17.57 19 BAYES_99 13 10.00 40.62 3.38 20 RCVD_IN_MSPIKE_H2 12 15.00 37.50 10.14 21 BAYES_999 11 8.33 34.38 2.70 22 XM_DK_Undo_01 10 15.56 31.25 12.16 23 LOC_TINY_FONT_1 10 14.44 31.25 10.81 24 XM_B_SpammyWords2 9 10.56 28.12 6.76 25 DCC_CHECK 9 12.78 28.12 9.46 26 RCVD_IN_MSPIKE_WL 8 34.44 25.00 36.49 27 XM_Multi_Part_URI 8 13.89 25.00 11.49 28 HTML_FONT_LOW_CONTRAST 7 17.22 21.88 16.22 29 XMSubMetaSx_00 7 5.00 21.88 1.35 30 XMSubLongNoVowel 7 3.89 21.88 0.00 31 XMSubNoVowel 7 4.44 21.88 0.68 32 TR_MRelay_UG 7 3.89 21.88 0.00 33 TR_XM_BayesUnsub 7 10.56 21.88 8.11 34 XM_B_Unsub 7 11.11 21.88 8.78 35 TR_XM_Undi_Recip6 6 3.33 18.75 0.00 36 MAILING_LIST_MULTI 6 3.89 18.75 0.68 37 LOTS_OF_MONEY 6 5.00 18.75 2.03 38 XM_H_Undi_Recip 6 3.33 18.75 0.00 39 TR_Sbj_FN_Bdy 6 3.33 18.75 0.00 40 TR_XM_SpammyWords4 6 4.44 18.75 1.35 41 XM_GoogleGroups 6 3.89 18.75 0.68 42 XM_Body_Dirty_Words 5 8.33 15.62 6.76 43 XMSubMetaSxObfu_03 5 3.33 15.62 0.68 44 MIME_HTML_ONLY 5 11.11 15.62 10.14 45 XMSexyCombo_01 5 2.78 15.62 0.00 46 TR_XM_DKIM_Undo 5 4.44 15.62 2.03 47 T_TM2_M_HEADER_IN_MSG 5 16.67 15.62 16.89 48 XM_UncommonTLD01 5 9.44 15.62 8.11 49 BOTNET_IPINHOSTNAME 5 6.67 15.62 4.73 50 XMGppyBdWords 5 2.78 15.62 0.00 51 SpammyFromTLD_01 5 4.44 15.62 2.03 52 UNPARSEABLE_RELAY 5 10.00 15.62 8.78 53 HTML_IMAGE_RATIO_04 4 11.67 12.50 11.49 54 T_KAM_HTML_FONT_INVALID 4 9.44 12.50 8.78 55 RELAYCOUNTRY_META 4 7.22 12.50 6.08 56 RCVD_IN_BL_SPAMCOP_NET 4 2.22 12.50 0.00 57 XM_H_Long_From01 4 2.22 12.50 0.00 58 XM_SPF_SoftFail 3 2.22 9.38 0.68 59 BOTNET 3 2.22 9.38 0.68 60 RCVD_IN_MSPIKE_H4 3 6.11 9.38 5.41 61 TR_XM_SPAMCOP 3 1.67 9.38 0.00 62 XMNumbers 3 6.67 9.38 6.08 63 T_XMDrugObfuBody_08 3 2.22 9.38 0.68 64 T_TooManySym_01 3 9.44 9.38 9.46 65 TooManyTo_001 3 3.89 9.38 2.70 66 RCVD_IN_MSPIKE_H5 3 10.56 9.38 10.81 67 TR_XM_PHPDW 2 2.22 6.25 1.35 68 T_TooManySym_02 2 6.67 6.25 6.76 69 TR_DCC_Bayes_99 2 2.22 6.25 1.35 70 TR_XM_FormFill2 2 2.22 6.25 1.35 71 BAYES_40 2 5.56 6.25 5.41 72 TR_XM_UnparsRelay 2 3.33 6.25 2.70 73 XM_H_PHPOS 2 2.22 6.25 1.35 74 BAYES_80 2 7.22 6.25 7.43 75 UNTRUSTED_Relay 2 1.67 6.25 0.68 76 TR_XM_SpammyRelay 2 4.44 6.25 4.05 77 TR_XM_PHPForged 2 2.22 6.25 1.35 78 T_XMDrugObfuBody_14 2 3.33 6.25 2.70 79 RCVD_IN_MSPIKE_H3 2 17.78 6.25 20.27 80 HTML_IMAGE_RATIO_02 2 4.44 6.25 4.05 81 SCC_BODY_URI_ONLY 2 10.56 6.25 11.49 82 HTML_IMAGE_ONLY_24 2 2.22 6.25 1.35 83 XMEmptyBody_01 2 2.22 6.25 1.35 84 BODY_EMPTY 2 2.22 6.25 1.35 85 TM2_M_BODY_EMPTY 2 2.22 6.25 1.35 86 XM_UB50 1 1.11 3.12 0.68 87 TR_Symld_Words 1 0.56 3.12 0.00 88 MONEY_BACK 1 0.56 3.12 0.00 89 TR_XM_MaxWHORU 1 0.56 3.12 0.00 90 MPART_ALT_DIFF 1 1.11 3.12 0.68 91 XM_B_SpammyWords3 1 1.67 3.12 1.35 92 URI_NOVOWEL 1 0.56 3.12 0.00 93 MIME_HTML_MOSTLY 1 2.22 3.12 2.03 94 PDS_LITECOIN_ID 1 0.56 3.12 0.00 95 TR_XM_PhishingBody 1 2.22 3.12 2.03 96 RCVD_IN_IADB_SPF 1 1.67 3.12 1.35 97 RCVD_IN_IADB_SENDERID 1 1.67 3.12 1.35 98 BOUNCE_MESSAGE 1 26.11 3.12 31.08 99 BOTNET_NORDNS 1 0.56 3.12 0.00 100 MPART_ALT_DIFF_COUNT 1 2.22 3.12 2.03 101 NORDNS_LOW_CONTRAST 1 0.56 3.12 0.00 102 XM_BadFromFormat 1 0.56 3.12 0.00 103 HTML_COMMENT_SAVED_URL 1 0.56 3.12 0.00 104 IMG_ONLY_FM_DOM_INFO 1 1.11 3.12 0.68 105 RELAYCOUNTRY_SG 1 0.56 3.12 0.00 106 TR_XM_Undi_Recip14 1 0.56 3.12 0.00 107 TooManyTo_003 1 0.56 3.12 0.00 108 XMSexyCombo_05 1 1.11 3.12 0.68 109 HTML_FONT_TINY_NORDNS 1 0.56 3.12 0.00 110 TM2_M_URI_OPT_OUT 1 0.56 3.12 0.00 111 RCVD_IN_IADB_VOUCHED 1 1.11 3.12 0.68 112 BAYES_95 1 1.67 3.12 1.35 113 RCVD_IN_IADB_DK 1 1.67 3.12 1.35 114 TO_EQ_FM_DOM_HTML_ONLY 1 0.56 3.12 0.00 115 OBFU_TEXT_ATTACH 1 0.56 3.12 0.00 116 XMStockSpam_06 1 0.56 3.12 0.00 117 TM2_M_OBFU_COMMENT 1 0.56 3.12 0.00 118 RCVD_IN_IADB_OPTIN_GT50 1 1.11 3.12 0.68 119 XM_Evil_Numbers_Gen 1 1.67 3.12 1.35 120 RCVD_IN_IADB_LISTED 1 1.67 3.12 1.35 121 XM_H_Long_From02 1 2.22 3.12 2.03 122 TR_MetaPhish_Combo_01 1 1.11 3.12 0.68 123 RDNS_DYNAMIC 1 0.56 3.12 0.00 124 CHARSET_FARAWAY_HEADER 1 0.56 3.12 0.00 125 MIME_CHARSET_FARAWAY 1 0.56 3.12 0.00 126 NO_DNS_FOR_FROM 1 0.56 3.12 0.00 127 XMLongAddy 1 0.56 3.12 0.00 128 XM_UB999 1 0.56 3.12 0.00 129 XMBrknScrpt_02 1 0.56 3.12 0.00 130 FROM_EXCESS_BASE64 1 0.56 3.12 0.00 131 BAYES_60 1 17.22 3.12 20.27 132 SpammyFromTLD_02 1 1.11 3.12 0.68 133 XM_UB99 1 0.56 3.12 0.00 134 HTML_OBFUSCATE_05_10 1 0.56 3.12 0.00 135 PDS_BTC_ID 1 0.56 3.12 0.00 136 XMNoVowels 1 2.78 3.12 2.70 137 TooManyTo_004 1 0.56 3.12 0.00 138 RCVD_IN_IADB_OPTIN 1 1.11 3.12 0.68 139 XMDiploma_00 1 1.11 3.12 0.68 140 RELAYCOUNTRY_CA 1 1.67 3.12 1.35 141 HK_RANDOM_REPLYTO 1 1.67 3.12 1.35 142 XMPhish08 1 1.11 3.12 0.68 143 RELAYCOUNTRY_IE 1 0.56 3.12 0.00 144 ANY_BOUNCE_MESSAGE 1 26.11 3.12 31.08 145 KHOP_HELO_FCRDNS 1 1.11 3.12 0.68 146 XM_SendGrid 1 1.11 3.12 0.68 147 XM_B_SpammyTLD 1 2.22 3.12 2.03 148 FROM_GOV_SPOOF 1 1.67 3.12 1.35 149 RELAYCOUNTRY_IN 1 0.56 3.12 0.00 150 TooManyTo_002 1 0.56 3.12 0.00 151 TR_XM_DK_SendGrid 1 1.11 3.12 0.68 152 NUMERIC_HTTP_ADDR 1 0.56 3.12 0.00 153 XMDateMe_00 1 0.56 3.12 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 134 87.22 71.88 90.54 2 T_SCC_BODY_TEXT_LINE 118 78.89 75.00 79.73 3 HTML_MESSAGE 102 72.22 87.50 68.92 4 DKIM_SIGNED 99 71.11 90.62 66.89 5 XM_DK_Pass 98 70.56 90.62 66.22 6 DKIM_VALID 97 70.00 90.62 65.54 7 RELAYCOUNTRY_US 97 70.00 90.62 65.54 8 BAYES_50 82 52.78 40.62 55.41 9 DKIM_VALID_AU 72 53.33 75.00 48.65 10 XM_B_Unicode 62 47.78 75.00 41.89 11 DKIM_VALID_EF 58 43.33 62.50 39.19 12 RCVD_IN_MSPIKE_WL 54 34.44 25.00 36.49 13 BOUNCE_MESSAGE 46 26.11 3.12 31.08 14 ANY_BOUNCE_MESSAGE 46 26.11 3.12 31.08 15 ALL_TRUSTED 43 23.89 0.00 29.05 16 XMListUnsubscribeExists 38 33.89 71.88 25.68 17 XM_B_Unicode3 36 30.00 56.25 24.32 18 RCVD_IN_MSPIKE_H3 30 17.78 6.25 20.27 19 BAYES_60 30 17.22 3.12 20.27 20 FVGT_m_MULTI_ODD 29 27.22 62.50 19.59 21 XM_DKIMWhitelistDomains 29 16.11 0.00 19.59 22 TR_XM_DK_Unsub 26 23.33 50.00 17.57 23 XM_B_SpammyWords 26 21.67 40.62 17.57 24 T_TM2_M_HEADER_IN_MSG 25 16.67 15.62 16.89 25 HTML_FONT_LOW_CONTRAST 24 17.22 21.88 16.22 26 XMSubLong 21 20.00 46.88 14.19 27 HTML_IMAGE_ONLY_20 18 10.00 0.00 12.16 28 XM_DK_Undo_01 18 15.56 31.25 12.16 29 HTML_IMAGE_RATIO_04 17 11.67 12.50 11.49 30 SCC_BODY_URI_ONLY 17 10.56 6.25 11.49 31 XM_Multi_Part_URI 17 13.89 25.00 11.49 32 MIME_HEADER_CTYPE_ONLY 16 8.89 0.00 10.81 33 XMLngstWrd_00 16 8.89 0.00 10.81 34 RCVD_IN_MSPIKE_H5 16 10.56 9.38 10.81 35 LOC_TINY_FONT_1 16 14.44 31.25 10.81 36 RCVD_IN_MSPIKE_H2 15 15.00 37.50 10.14 37 MIME_HTML_ONLY 15 11.11 15.62 10.14 38 T_TooManySym_01 14 9.44 9.38 9.46 39 XM_PDF 14 7.78 0.00 9.46 40 IN_ZIMBRA_NJ_WHITELIST 14 7.78 0.00 9.46 41 DCC_CHECK 14 12.78 28.12 9.46 42 XM_B_Unsub 13 11.11 21.88 8.78 43 T_KAM_HTML_FONT_INVALID 13 9.44 12.50 8.78 44 UNPARSEABLE_RELAY 13 10.00 15.62 8.78 45 XM_UncommonTLD01 12 9.44 15.62 8.11 46 TR_XM_BayesUnsub 12 10.56 21.88 8.11 47 BAYES_80 11 7.22 6.25 7.43 48 TVD_SPACE_RATIO 11 6.11 0.00 7.43 49 USER_IN_DEF_DKIM_WL 11 6.11 0.00 7.43 50 T_REMOTE_IMAGE 10 5.56 0.00 6.76 51 XM_Body_Dirty_Words 10 8.33 15.62 6.76 52 XM_B_SpammyWords2 10 10.56 28.12 6.76 53 T_TooManySym_02 10 6.67 6.25 6.76 54 XMNumbers 9 6.67 9.38 6.08 55 RELAYCOUNTRY_META 9 7.22 12.50 6.08 56 TR_XM_SpoofPhishAttach 9 5.00 0.00 6.08 57 RCVD_IN_MSPIKE_H4 8 6.11 9.38 5.41 58 TO_MALFORMED 8 4.44 0.00 5.41 59 XM_ZohoDesk1 8 4.44 0.00 5.41 60 TR_XM_SpoofStaff 8 4.44 0.00 5.41 61 XMSpoofStaff2 8 4.44 0.00 5.41 62 BAYES_40 8 5.56 6.25 5.41 63 TR_XM_PSC1 8 4.44 0.00 5.41 64 INVALID_MSGID 8 4.44 0.00 5.41 65 XM_H_SpoofStaff4 8 4.44 0.00 5.41 66 BOTNET_IPINHOSTNAME 7 6.67 15.62 4.73 67 MIME_QP_LONG_LINE 6 3.33 0.00 4.05 68 HTML_IMAGE_RATIO_02 6 4.44 6.25 4.05 69 XM_DK_Undo_02 6 12.78 53.12 4.05 70 TR_XM_SpammyRelay 6 4.44 6.25 4.05 71 HTML_IMAGE_RATIO_06 6 3.33 0.00 4.05 72 T_OBFU_PDF_ATTACH 6 3.33 0.00 4.05 73 BAYES_99 5 10.00 40.62 3.38 74 TVD_RCVD_IP 5 2.78 0.00 3.38 75 GMD_PDF_HORIZ 5 2.78 0.00 3.38 76 BAYES_00 5 2.78 0.00 3.38 77 RELAYCOUNTRY_AU 5 2.78 0.00 3.38 78 T_XMDrugObfuBody_14 4 3.33 6.25 2.70 79 TR_XM_UnparsRelay 4 3.33 6.25 2.70 80 BAYES_999 4 8.33 34.38 2.70 81 LotsOfNums_01 4 2.22 0.00 2.70 82 TooManyTo_001 4 3.89 9.38 2.70 83 XMNoVowels 4 2.78 3.12 2.70 84 TM2_M_VERY_LONG_WORD 3 1.67 0.00 2.03 85 MIME_HTML_MOSTLY 3 2.22 3.12 2.03 86 XMGappySubj_01 3 1.67 0.00 2.03 87 TR_XM_DK_Bayes2 3 1.67 0.00 2.03 88 LOTS_OF_MONEY 3 5.00 18.75 2.03 89 SpammyFromTLD_01 3 4.44 15.62 2.03 90 XM_B_Crypto 3 1.67 0.00 2.03 91 XM_ZIP 3 1.67 0.00 2.03 92 TR_XM_DK_Bayes 3 1.67 0.00 2.03 93 TR_XM_PhishingBody 3 2.22 3.12 2.03 94 MPART_ALT_DIFF_COUNT 3 2.22 3.12 2.03 95 XM_B_SpammyTLD 3 2.22 3.12 2.03 96 BAYES_05 3 1.67 0.00 2.03 97 XM_DIRTYINTL 3 1.67 0.00 2.03 98 XM_H_Long_From02 3 2.22 3.12 2.03 99 TR_XM_DKIM_Undo 3 4.44 15.62 2.03 100 TR_XM_DK_Bayes1 3 1.67 0.00 2.03 101 TR_DCC_Bayes_99 2 2.22 6.25 1.35 102 XM_Evil_Numbers_Gen 2 1.67 3.12 1.35 103 RCVD_IN_MSPIKE_L3 2 1.11 0.00 1.35 104 XM_B_SpammyWords3 2 1.67 3.12 1.35 105 HK_RANDOM_REPLYTO 2 1.67 3.12 1.35 106 RCVD_IN_RP_SAFE 2 1.11 0.00 1.35 107 XMEmptyBody_01 2 2.22 6.25 1.35 108 TR_XM_MSPIKECOMBO 2 1.11 0.00 1.35 109 USER_IN_WELCOMELIST 2 1.11 0.00 1.35 110 TM2_M_BODY_EMPTY 2 2.22 6.25 1.35 111 TR_XM_SB_Phish 2 1.11 0.00 1.35 112 RCVD_IN_RP_CERTIFIED 2 1.11 0.00 1.35 113 TR_XM_PHPForged 2 2.22 6.25 1.35 114 BAYES_20 2 1.11 0.00 1.35 115 BAYES_95 2 1.67 3.12 1.35 116 TR_XM_FormFill2 2 2.22 6.25 1.35 117 RCVD_IN_IADB_DK 2 1.67 3.12 1.35 118 RCVD_IN_MSPIKE_BL 2 1.11 0.00 1.35 119 FSL_BULK_SIG 2 1.11 0.00 1.35 120 RCVD_IN_IADB_LISTED 2 1.67 3.12 1.35 121 DKIM_INVALID 2 1.11 0.00 1.35 122 XMSubMetaSx_00 2 5.00 21.88 1.35 123 TR_XM_PHPDW 2 2.22 6.25 1.35 124 XM_B_Phish66 2 1.11 0.00 1.35 125 RCVD_IN_IADB_SPF 2 1.67 3.12 1.35 126 RCVD_IN_IADB_SENDERID 2 1.67 3.12 1.35 127 XMBSHREFv2 2 1.11 0.00 1.35 128 TR_XM_SpoofStaff3 2 1.11 0.00 1.35 129 FROM_GOV_SPOOF 2 1.67 3.12 1.35 130 HTML_IMAGE_ONLY_24 2 2.22 6.25 1.35 131 TR_XM_SpammyWords4 2 4.44 18.75 1.35 132 BODY_EMPTY 2 2.22 6.25 1.35 133 XM_Body_Obfu01 2 1.11 0.00 1.35 134 USER_IN_WHITELIST 2 1.11 0.00 1.35 135 XMSubPhish11 2 1.11 0.00 1.35 136 HTML_MIME_NO_HTML_TAG 2 1.11 0.00 1.35 137 XM_H_PHPOS 2 2.22 6.25 1.35 138 XMStrtUSub 2 1.11 0.00 1.35 139 RELAYCOUNTRY_CA 2 1.67 3.12 1.35 140 XMSubMetaSxObfu_03 1 3.33 15.62 0.68 141 XMSexyCombo_05 1 1.11 3.12 0.68 142 MIME_HTML_ONLY_MULTI 1 0.56 0.00 0.68 143 HTML_IMAGE_RATIO_08 1 0.56 0.00 0.68 144 HTML_IMAGE_ONLY_08 1 0.56 0.00 0.68 145 XM_H_Trusted_IP 1 0.56 0.00 0.68 146 TR_XM_COVIDMETA1 1 0.56 0.00 0.68 147 WEIRD_PORT 1 0.56 0.00 0.68 148 FORGED_GMAIL_RCVD 1 0.56 0.00 0.68 149 XMLngstWrd_03 1 0.56 0.00 0.68 150 DKIM_ADSP_CUSTOM_MED 1 0.56 0.00 0.68 151 XM_Sft_Co_L33T 1 0.56 0.00 0.68 152 XM_B_Investor 1 0.56 0.00 0.68 153 MPART_ALT_DIFF 1 1.11 3.12 0.68 154 HTML_TAG_BALANCE_BODY 1 0.56 0.00 0.68 155 RELAYCOUNTRY_ID 1 0.56 0.00 0.68 156 NICE_REPLY_A 1 0.56 0.00 0.68 157 HELO_NODOT 1 0.56 0.00 0.68 158 RCVD_IN_VALIDITY_CERTIFIED 1 0.56 0.00 0.68 159 KHOP_HELO_FCRDNS 1 1.11 3.12 0.68 160 XM_SendGrid 1 1.11 3.12 0.68 161 XMLngstWrd_01 1 0.56 0.00 0.68 162 XMLngstWrd_04 1 0.56 0.00 0.68 163 TR_BOTNET_NEGATE 1 0.56 0.00 0.68 164 CTE_8BIT_MISMATCH 1 0.56 0.00 0.68 165 XM_GoogleGroups 1 3.89 18.75 0.68 166 T_TooManySym_03 1 0.56 0.00 0.68 167 T_XMDrugObfuBody_08 1 2.22 9.38 0.68 168 XMBody_95 1 0.56 0.00 0.68 169 UNTRUSTED_Relay 1 1.67 6.25 0.68 170 XM_Dr_From 1 0.56 0.00 0.68 171 XMLngstWrd_02 1 0.56 0.00 0.68 172 T_FILL_THIS_FORM_SHORT 1 0.56 0.00 0.68 173 MSGID_NOFQDN1 1 0.56 0.00 0.68 174 RCVD_IN_PSBL 1 0.56 0.00 0.68 175 XM_H_PHPMailer 1 0.56 0.00 0.68 176 RCVD_IN_IADB_VOUCHED 1 1.11 3.12 0.68 177 RCVD_IN_IADB_OPTIN_GT50 1 1.11 3.12 0.68 178 XMSlimDrugH 1 0.56 0.00 0.68 179 XM_UB50 1 1.11 3.12 0.68 180 XM_SPF_SoftFail 1 2.22 9.38 0.68 181 TO_EQ_FM_DIRECT_MX 1 0.56 0.00 0.68 182 BOTNET 1 2.22 9.38 0.68 183 RCVD_IN_VALIDITY_SAFE 1 0.56 0.00 0.68 184 MONEY_NOHTML 1 0.56 0.00 0.68 185 MAILING_LIST_MULTI 1 3.89 18.75 0.68 186 XMSubNoVowel 1 4.44 21.88 0.68 187 IMG_ONLY_FM_DOM_INFO 1 1.11 3.12 0.68 188 HTML_IMAGE_ONLY_32 1 0.56 0.00 0.68 189 DATE_IN_PAST_12_24 1 0.56 0.00 0.68 190 HDRS_LCASE_IMGONLY 1 0.56 0.00 0.68 191 XM_S_SubURI 1 0.56 0.00 0.68 192 XMPhish08 1 1.11 3.12 0.68 193 XMSubMetaSxObfu_02 1 0.56 0.00 0.68 194 TR_XM_SpammyWords2 1 0.56 0.00 0.68 195 XM_B_COPY_HTML 1 0.56 0.00 0.68 196 T_STY_INVIS_DIRECT 1 0.56 0.00 0.68 197 NML_ADSP_CUSTOM_MED 1 0.56 0.00 0.68 198 TR_XM_DK_SendGrid 1 1.11 3.12 0.68 199 TR_MetaPhish_Combo_01 1 1.11 3.12 0.68 200 BANG_GUAR 1 0.56 0.00 0.68 ----------------------------------------------------------------------