Email: 325 Autolearn: 0 AvgScore: 1.38 AvgScanTime: 3.22 sec Spam: 51 Autolearn: 0 AvgScore: 16.00 AvgScanTime: 3.64 sec Ham: 274 Autolearn: 0 AvgScore: -1.34 AvgScanTime: 3.14 sec Time Spent Running SA: 0.29 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 47 84.31 92.16 82.85 2 HTML_MESSAGE 44 74.15 86.27 71.90 3 DKIM_SIGNED 42 71.38 82.35 69.34 4 XM_DK_Pass 40 69.85 78.43 68.25 5 DKIM_VALID 39 69.23 76.47 67.88 6 RELAYCOUNTRY_US 39 70.77 76.47 69.71 7 DKIM_VALID_AU 35 56.62 68.63 54.38 8 XM_B_Unicode 32 51.08 62.75 48.91 9 XM_B_SpammyWords 29 34.15 56.86 29.93 10 DKIM_VALID_EF 28 31.69 54.90 27.37 11 XMListUnsubscribeExists 27 31.69 52.94 27.74 12 XM_B_Unicode3 27 30.46 52.94 26.28 13 DCC_CHECK 26 14.77 50.98 8.03 14 DCC_CHECK_NEGATIVE 25 85.23 49.02 91.97 15 LOC_TINY_FONT_1 20 14.15 39.22 9.49 16 BAYES_50 20 52.31 39.22 54.74 17 XMSubLong 18 19.38 35.29 16.42 18 HTML_FONT_LOW_CONTRAST 18 21.23 35.29 18.61 19 RCVD_IN_MSPIKE_H2 17 15.38 33.33 12.04 20 TR_XM_DK_Unsub 17 14.77 33.33 11.31 21 XM_B_SpammyWords2 17 12.00 33.33 8.03 22 MIME_HTML_ONLY 16 12.92 31.37 9.49 23 RELAYCOUNTRY_META 16 9.54 31.37 5.47 24 BAYES_99 15 8.31 29.41 4.38 25 XM_DK_Undo_02 15 12.92 29.41 9.85 26 LOTS_OF_MONEY 14 8.31 27.45 4.74 27 XM_Multi_Part_URI 14 11.38 27.45 8.39 28 BAYES_999 12 7.08 23.53 4.01 29 FVGT_m_MULTI_ODD 12 17.23 23.53 16.06 30 RCVD_IN_MSPIKE_WL 11 41.85 21.57 45.62 31 XM_Body_Dirty_Words 11 8.31 21.57 5.84 32 MPART_ALT_DIFF 11 6.77 21.57 4.01 33 UNTRUSTED_Relay 11 6.77 21.57 4.01 34 TR_XM_SpammyWords4 11 4.62 21.57 1.46 35 MIME_HTML_MOSTLY 10 5.85 19.61 3.28 36 BAYES_80 9 7.69 17.65 5.84 37 XM_B_Unsub 8 17.85 15.69 18.25 38 XM_Evil_Numbers_Gen 8 6.77 15.69 5.11 39 XM_H_Undi_Recip 8 2.46 15.69 0.00 40 TR_XM_BayesUnsub 8 12.00 15.69 11.31 41 FSL_BULK_SIG 8 3.08 15.69 0.73 42 MAILING_LIST_MULTI 8 3.69 15.69 1.46 43 TR_DCC_Bayes_99 8 2.77 15.69 0.36 44 XMSexyCombo_05 7 3.08 13.73 1.09 45 TR_XM_Undi_Recip6 7 2.15 13.73 0.00 46 XM_H_Long_From01 7 8.31 13.73 7.30 47 RCVD_IN_MSPIKE_H3 7 21.23 13.73 22.63 48 KHOP_HELO_FCRDNS 7 3.08 13.73 1.09 49 XM_GoogleGroups 7 3.08 13.73 1.09 50 XM_DK_Undo_01 7 14.77 13.73 14.96 51 SpammyFromTLD_01 6 2.15 11.76 0.36 52 T_KAM_HTML_FONT_INVALID 6 13.23 11.76 13.50 53 TR_MRelay_UG 6 2.46 11.76 0.73 54 T_TM2_M_HEADER_IN_MSG 6 16.31 11.76 17.15 55 XM_B_SpammyWords3 6 3.69 11.76 2.19 56 XM_SPF_SoftFail 6 2.46 11.76 0.73 57 BOTNET_IPINHOSTNAME 6 6.77 11.76 5.84 58 XM_B_Investor 5 2.77 9.80 1.46 59 T_MONEY_PERCENT 5 2.15 9.80 0.73 60 TR_LOTS_OF_MONEY2 5 2.15 9.80 0.73 61 TR_XM_SpammyRelay 5 4.62 9.80 3.65 62 URI_NOVOWEL 5 1.85 9.80 0.36 63 TR_XM_DKIM_Undo 5 4.00 9.80 2.92 64 BOTNET 5 5.54 9.80 4.74 65 XMNumbers 5 5.85 9.80 5.11 66 RELAYCOUNTRY_IN 5 1.85 9.80 0.36 67 XM_UncommonTLD01 5 6.15 9.80 5.47 68 FROM_MISSPACED 4 1.23 7.84 0.00 69 FSL_CTYPE_WIN1251 4 1.23 7.84 0.00 70 NSL_RCVD_FROM_USER 4 1.23 7.84 0.00 71 FROM_MISSP_MSFT 4 1.23 7.84 0.00 72 FORGED_MUA_OUTLOOK 4 1.23 7.84 0.00 73 URI_TRY_3LD 4 1.85 7.84 0.73 74 T_XMDrugObfuBody_08 4 6.15 7.84 5.84 75 FSL_NEW_HELO_USER 4 1.23 7.84 0.00 76 TR_Caps_n_Bayes_80 4 1.23 7.84 0.00 77 BAYES_60 4 13.85 7.84 14.96 78 T_XMHurry_00 4 1.85 7.84 0.73 79 SUBJ_ALL_CAPS 4 1.54 7.84 0.36 80 XM_UB80 4 1.23 7.84 0.00 81 TO_NO_BRKTS_FROM_MSSP 4 1.23 7.84 0.00 82 AXB_XMAILER_MIMEOLE_OL_024C2 4 1.23 7.84 0.00 83 FROM_MISSP_USER 4 1.23 7.84 0.00 84 UNPARSEABLE_RELAY 4 12.00 7.84 12.77 85 MIME_HTML_ONLY_MULTI 4 2.46 7.84 1.46 86 FROM_MISSP_EH_MATCH 4 1.23 7.84 0.00 87 XMSolicitRefs_0 3 1.23 5.88 0.36 88 ADVANCE_FEE_5_NEW_MONEY 3 0.92 5.88 0.00 89 XM_Body_Dirty_Words_01 3 1.54 5.88 0.73 90 RELAYCOUNTRY_TW 3 0.92 5.88 0.00 91 XM_OfRef6 3 1.54 5.88 0.73 92 TooManyTo_001 3 9.85 5.88 10.58 93 RCVD_IN_VALIDITY_RPBL 3 0.92 5.88 0.00 94 T_XMDrugObfuBody_14 3 1.54 5.88 0.73 95 RDNS_DYNAMIC 3 0.92 5.88 0.00 96 XMStrtUSub 3 5.54 5.88 5.47 97 RCVD_IN_MSPIKE_BL 3 0.92 5.88 0.00 98 XM_UB99 3 0.92 5.88 0.00 99 TR_XM_InvalidRelay 3 0.92 5.88 0.00 100 TR_XM_MSPIKECOMBO 3 0.92 5.88 0.00 101 LOADSA_MONEY_COMBO 3 0.92 5.88 0.00 102 STATIC_XPRIO_OLE 3 0.92 5.88 0.00 103 XM_DIRTYINTL 3 1.85 5.88 1.09 104 DKIM_INVALID 3 2.15 5.88 1.46 105 REPLYTO_WITHOUT_TO_CC 3 3.69 5.88 3.28 106 TR_XM_SpammyWords5 3 1.85 5.88 1.09 107 TM2_M_OBFU_COMMENT 3 1.23 5.88 0.36 108 XFER_LOTSA_MONEY 3 0.92 5.88 0.00 109 RCVD_IN_MSPIKE_H4 3 9.23 5.88 9.85 110 MONEY_FROM_MISSP 3 0.92 5.88 0.00 111 TR_LOTS_OF_MONEY1 3 0.92 5.88 0.00 112 MISSING_HEADERS 3 4.31 5.88 4.01 113 T_REMOTE_IMAGE 3 1.85 5.88 1.09 114 TR_XM_NoHeaderRelay 3 0.92 5.88 0.00 115 TR_Mismatch_TLD_01 3 0.92 5.88 0.00 116 HTML_IMAGE_RATIO_06 3 3.08 5.88 2.55 117 TR_XM_UnparsRelay 2 0.92 3.92 0.36 118 TR_XM_Undi_Recip5 2 0.62 3.92 0.00 119 LONG_JUNK_URI3 2 0.62 3.92 0.00 120 FORGED_GMAIL_RCVD 2 0.62 3.92 0.00 121 TVD_RCVD_IP 2 0.62 3.92 0.00 122 XMSubNoVowel 2 2.15 3.92 1.82 123 HTML_IMAGE_RATIO_02 2 3.38 3.92 3.28 124 XM_UB60 2 0.62 3.92 0.00 125 RELAYCOUNTRY_NL 2 0.62 3.92 0.00 126 XMStockSpam_06 2 1.54 3.92 1.09 127 FROM_SUSPICIOUS_NTLD 2 0.62 3.92 0.00 128 XM_UB50 2 2.46 3.92 2.19 129 MONEY_BARRISTER 2 0.62 3.92 0.00 130 TR_XM_Undi_Recip14 2 0.62 3.92 0.00 131 TR_LOTS_OF_MONEY3 2 0.92 3.92 0.36 132 TM2_M_URI_OPT_OUT 2 1.23 3.92 0.73 133 HK_RANDOM_FROM 2 1.54 3.92 1.09 134 BOTNET_NORDNS 2 0.92 3.92 0.36 135 TR_XM_Undi_Recip2 2 0.62 3.92 0.00 136 RCVD_IN_MSPIKE_L4 2 0.62 3.92 0.00 137 XMSubject_48 2 0.62 3.92 0.00 138 FROM_SUSPICIOUS_NTLD_FP 2 0.62 3.92 0.00 139 XPRIO 2 0.62 3.92 0.00 140 UNDISC_MONEY 2 0.62 3.92 0.00 141 XMDateMe_00 2 0.62 3.92 0.00 142 PDS_OTHER_BAD_TLD 2 0.62 3.92 0.00 143 RCVD_IN_PSBL 2 0.62 3.92 0.00 144 BAYES_05 2 1.54 3.92 1.09 145 MIME_QP_LONG_LINE 2 3.38 3.92 3.28 146 TR_XM_Undi_RecipCombo2 2 0.62 3.92 0.00 147 DKIM_ADSP_CUSTOM_MED 2 0.62 3.92 0.00 148 SpammyFromTLD_02 2 0.62 3.92 0.00 149 TR_XM_Undi_Recip11 2 0.62 3.92 0.00 150 TR_Mismatch_TLD_02 2 0.92 3.92 0.36 151 RELAYCOUNTRY_AU 2 2.15 3.92 1.82 152 XM_B_SpammyTLD 2 1.85 3.92 1.46 153 LotsOfNums_01 2 4.00 3.92 4.01 154 LONGLN_LOW_CONTRAST 1 0.92 1.96 0.73 155 SCC_BODY_URI_ONLY 1 8.62 1.96 9.85 156 HTML_IMAGE_RATIO_04 1 4.00 1.96 4.38 157 T_TooManySym_01 1 4.31 1.96 4.74 158 FROM_MISSP_REPLYTO 1 0.31 1.96 0.00 159 MONEY_NOHTML 1 0.31 1.96 0.00 160 DKIM_ADSP_NXDOMAIN 1 0.31 1.96 0.00 161 XM_B_SpammyWords4 1 0.31 1.96 0.00 162 XM_Sft_Brands_C01 1 1.54 1.96 1.46 163 FORGED_OUTLOOK_TAGS 1 0.31 1.96 0.00 164 URIBL_DBL_SPAM 1 0.31 1.96 0.00 165 TO_NO_BRKTS_MSFT 1 0.31 1.96 0.00 166 SUBJ_ATTENTION 1 0.31 1.96 0.00 167 XMSubLongNoVowel 1 1.54 1.96 1.46 168 XM_B_Phish66 1 3.08 1.96 3.28 169 FILL_THIS_FORM_LONG 1 0.31 1.96 0.00 170 DIET_1 1 0.31 1.96 0.00 171 FROM_MISSP_DYNIP 1 0.31 1.96 0.00 172 HTML_IMAGE_RATIO_08 1 0.31 1.96 0.00 173 TooManyTo_002 1 0.92 1.96 0.73 174 XMBody_29 1 0.31 1.96 0.00 175 XM_B_COVIDMETA 1 0.31 1.96 0.00 176 OBFU_TEXT_ATTACH 1 0.31 1.96 0.00 177 HTML_OBFUSCATE_05_10 1 0.31 1.96 0.00 178 HTML_FONT_TINY_NORDNS 1 0.31 1.96 0.00 179 NORMAL_HTTP_TO_IP 1 0.31 1.96 0.00 180 ADVANCE_FEE_5_NEW_FORM 1 0.31 1.96 0.00 181 T_TooManySym_02 1 3.08 1.96 3.28 182 TooManyTo_004 1 0.62 1.96 0.36 183 XMSolicitRefs_4 1 0.31 1.96 0.00 184 MIMEOLE_DIRECT_TO_MX 1 0.31 1.96 0.00 185 TR_XM_SEO4 1 0.31 1.96 0.00 186 HDRS_MISSP 1 0.31 1.96 0.00 187 HTML_SHORT_LINK_IMG_3 1 0.62 1.96 0.36 188 RCVD_IN_MSPIKE_L3 1 0.31 1.96 0.00 189 FORGED_OUTLOOK_HTML 1 0.31 1.96 0.00 190 RELAYCOUNTRY_RU 1 0.31 1.96 0.00 191 FILL_THIS_FORM_LOAN 1 0.31 1.96 0.00 192 XM_ProductURIs 1 0.31 1.96 0.00 193 XM_H_PHPOS_M 1 0.31 1.96 0.00 194 DOS_OE_TO_MX 1 0.31 1.96 0.00 195 XMOffer 1 0.31 1.96 0.00 196 TR_XM_FormFill2 1 0.31 1.96 0.00 197 RELAYCOUNTRY_JP 1 0.92 1.96 0.73 198 URI_DQ_UNSUB 1 0.31 1.96 0.00 199 XM_B_SEO 1 0.31 1.96 0.00 200 FROM_DOMAIN_NOVOWEL 1 0.31 1.96 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 252 85.23 49.02 91.97 2 T_SCC_BODY_TEXT_LINE 227 84.31 92.16 82.85 3 HTML_MESSAGE 197 74.15 86.27 71.90 4 RELAYCOUNTRY_US 191 70.77 76.47 69.71 5 DKIM_SIGNED 190 71.38 82.35 69.34 6 XM_DK_Pass 187 69.85 78.43 68.25 7 DKIM_VALID 186 69.23 76.47 67.88 8 BAYES_50 150 52.31 39.22 54.74 9 DKIM_VALID_AU 149 56.62 68.63 54.38 10 XM_B_Unicode 134 51.08 62.75 48.91 11 RCVD_IN_MSPIKE_WL 125 41.85 21.57 45.62 12 XM_B_SpammyWords 82 34.15 56.86 29.93 13 XMListUnsubscribeExists 76 31.69 52.94 27.74 14 DKIM_VALID_EF 75 31.69 54.90 27.37 15 BOUNCE_MESSAGE 75 23.08 0.00 27.37 16 ANY_BOUNCE_MESSAGE 75 23.08 0.00 27.37 17 XM_B_Unicode3 72 30.46 52.94 26.28 18 ALL_TRUSTED 64 19.69 0.00 23.36 19 RCVD_IN_MSPIKE_H3 62 21.23 13.73 22.63 20 HTML_FONT_LOW_CONTRAST 51 21.23 35.29 18.61 21 XM_B_Unsub 50 17.85 15.69 18.25 22 T_TM2_M_HEADER_IN_MSG 47 16.31 11.76 17.15 23 XMSubLong 45 19.38 35.29 16.42 24 FVGT_m_MULTI_ODD 44 17.23 23.53 16.06 25 XM_DK_Undo_01 41 14.77 13.73 14.96 26 BAYES_60 41 13.85 7.84 14.96 27 HTML_IMAGE_ONLY_20 37 11.69 1.96 13.50 28 T_KAM_HTML_FONT_INVALID 37 13.23 11.76 13.50 29 RCVD_IN_MSPIKE_H5 36 11.38 1.96 13.14 30 MIME_HEADER_CTYPE_ONLY 36 11.08 0.00 13.14 31 UNPARSEABLE_RELAY 35 12.00 7.84 12.77 32 RCVD_IN_MSPIKE_H2 33 15.38 33.33 12.04 33 TR_XM_BayesUnsub 31 12.00 15.69 11.31 34 TR_XM_DK_Unsub 31 14.77 33.33 11.31 35 TooManyTo_001 29 9.85 5.88 10.58 36 XM_DK_Undo_02 27 12.92 29.41 9.85 37 RCVD_IN_MSPIKE_H4 27 9.23 5.88 9.85 38 SCC_BODY_URI_ONLY 27 8.62 1.96 9.85 39 LOC_TINY_FONT_1 26 14.15 39.22 9.49 40 MIME_HTML_ONLY 26 12.92 31.37 9.49 41 XM_Multi_Part_URI 23 11.38 27.45 8.39 42 XM_B_SpammyWords2 22 12.00 33.33 8.03 43 XM_H_PHPMailer 22 6.77 0.00 8.03 44 DCC_CHECK 22 14.77 50.98 8.03 45 XMSubMetaSx_00 22 6.77 0.00 8.03 46 BAYES_00 21 6.46 0.00 7.66 47 TVD_SPACE_RATIO 21 6.46 0.00 7.66 48 XMLngstWrd_00 21 6.46 0.00 7.66 49 XM_H_Long_From01 20 8.31 13.73 7.30 50 XM_DKIMWhitelistDomains 18 5.54 0.00 6.57 51 BAYES_20 17 5.23 0.00 6.20 52 BAYES_80 16 7.69 17.65 5.84 53 BOTNET_IPINHOSTNAME 16 6.77 11.76 5.84 54 T_XMDrugObfuBody_08 16 6.15 7.84 5.84 55 XM_Body_Dirty_Words 16 8.31 21.57 5.84 56 XM_UncommonTLD01 15 6.15 9.80 5.47 57 RELAYCOUNTRY_META 15 9.54 31.37 5.47 58 XMStrtUSub 15 5.54 5.88 5.47 59 TR_XM_DK_Bayes 14 4.31 0.00 5.11 60 USER_IN_DEF_DKIM_WL 14 4.31 0.00 5.11 61 XMNumbers 14 5.85 9.80 5.11 62 XM_Evil_Numbers_Gen 14 6.77 15.69 5.11 63 TR_XM_DK_Bayes1 14 4.31 0.00 5.11 64 LOTS_OF_MONEY 13 8.31 27.45 4.74 65 BOTNET 13 5.54 9.80 4.74 66 TR_XM_DK_Bayes2 13 4.00 0.00 4.74 67 T_TooManySym_01 13 4.31 1.96 4.74 68 INVALID_MSGID 12 3.69 0.00 4.38 69 BAYES_99 12 8.31 29.41 4.38 70 TR_XM_PhishingBody 12 4.00 1.96 4.38 71 HTML_IMAGE_RATIO_04 12 4.00 1.96 4.38 72 MISSING_HEADERS 11 4.31 5.88 4.01 73 LotsOfNums_01 11 4.00 3.92 4.01 74 UNTRUSTED_Relay 11 6.77 21.57 4.01 75 MPART_ALT_DIFF 11 6.77 21.57 4.01 76 FROM_GOV_DKIM_AU 11 3.38 0.00 4.01 77 BAYES_999 11 7.08 23.53 4.01 78 TR_XM_SpammyRelay 10 4.62 9.80 3.65 79 TO_MALFORMED 10 3.08 0.00 3.65 80 MIME_HTML_MOSTLY 9 5.85 19.61 3.28 81 REPLYTO_WITHOUT_TO_CC 9 3.69 5.88 3.28 82 MIME_QP_LONG_LINE 9 3.38 3.92 3.28 83 T_TooManySym_02 9 3.08 1.96 3.28 84 XM_CamelCaseFrm001 9 2.77 0.00 3.28 85 BAYES_40 9 2.77 0.00 3.28 86 XM_B_Phish66 9 3.08 1.96 3.28 87 HTML_IMAGE_RATIO_02 9 3.38 3.92 3.28 88 XMNoVowels 8 2.77 1.96 2.92 89 TR_XM_DKIM_Undo 8 4.00 9.80 2.92 90 HTML_IMAGE_RATIO_06 7 3.08 5.88 2.55 91 XM_B_Phish_Phrases 7 2.46 1.96 2.55 92 IN_ZIMBRA_NJ_WHITELIST 7 2.15 0.00 2.55 93 XM_B_SpammyWords3 6 3.69 11.76 2.19 94 XM_UB50 6 2.46 3.92 2.19 95 RELAYCOUNTRY_AU 5 2.15 3.92 1.82 96 RCVD_IN_VALIDITY_CERTIFIED 5 1.54 0.00 1.82 97 BAYES_95 5 1.85 1.96 1.82 98 HTTPS_HTTP_MISMATCH 5 1.54 0.00 1.82 99 RCVD_IN_VALIDITY_SAFE 5 1.54 0.00 1.82 100 MPART_ALT_DIFF_COUNT 5 1.54 0.00 1.82 101 XMSubNoVowel 5 2.15 3.92 1.82 102 USER_IN_WHITELIST 4 1.23 0.00 1.46 103 USER_IN_WELCOMELIST 4 1.23 0.00 1.46 104 MAILING_LIST_MULTI 4 3.69 15.69 1.46 105 XM_B_SpammyTLD 4 1.85 3.92 1.46 106 TR_XM_SpammyWords4 4 4.62 21.57 1.46 107 MIME_HTML_ONLY_MULTI 4 2.46 7.84 1.46 108 RCVD_IN_IADB_LISTED 4 1.23 0.00 1.46 109 RCVD_IN_BL_SPAMCOP_NET 4 1.23 0.00 1.46 110 DKIM_INVALID 4 2.15 5.88 1.46 111 XM_B_Unsub2 4 1.23 0.00 1.46 112 XMSubLongNoVowel 4 1.54 1.96 1.46 113 XM_B_Investor 4 2.77 9.80 1.46 114 XM_Sft_Brands_C01 4 1.54 1.96 1.46 115 T_REMOTE_IMAGE 3 1.85 5.88 1.09 116 XM_Dr_From 3 0.92 0.00 1.09 117 RCVD_IN_IADB_VOUCHED 3 0.92 0.00 1.09 118 TM2_M_VERY_LONG_WORD 3 0.92 0.00 1.09 119 HK_RANDOM_ENVFROM 3 0.92 0.00 1.09 120 XM_GoogleGroups 3 3.08 13.73 1.09 121 HK_RANDOM_FROM 3 1.54 3.92 1.09 122 XM_SendGrid 3 0.92 0.00 1.09 123 XM_DIRTYINTL 3 1.85 5.88 1.09 124 KHOP_HELO_FCRDNS 3 3.08 13.73 1.09 125 TR_XM_Base64_M1 3 0.92 0.00 1.09 126 BAYES_05 3 1.54 3.92 1.09 127 HTML_MIME_NO_HTML_TAG 3 0.92 0.00 1.09 128 TR_XM_SpammyWords5 3 1.85 5.88 1.09 129 XM_PDF 3 0.92 0.00 1.09 130 RCVD_IN_IADB_SPF 3 0.92 0.00 1.09 131 RCVD_IN_IADB_SENDERID 3 0.92 0.00 1.09 132 XMDiploma_00 3 0.92 0.00 1.09 133 XMStockSpam_06 3 1.54 3.92 1.09 134 MSGID_NOFQDN1 3 0.92 0.00 1.09 135 RCVD_IN_IADB_DK 3 0.92 0.00 1.09 136 RELAYCOUNTRY_AT 3 0.92 0.00 1.09 137 IN_HORDE_ADDRESS_BOOK 3 0.92 0.00 1.09 138 TR_Symld_Words 3 0.92 0.00 1.09 139 XMSexyCombo_05 3 3.08 13.73 1.09 140 GMD_PDF_SQUARE 2 0.62 0.00 0.73 141 XM_SPF_SoftFail 2 2.46 11.76 0.73 142 TR_XM_SPAMCOP 2 0.62 0.00 0.73 143 XMSubPhish11 2 0.62 0.00 0.73 144 FROM_GOV_SPOOF 2 0.62 0.00 0.73 145 XMPhish30 2 0.62 0.00 0.73 146 RCVD_IN_IADB_OPTIN 2 0.62 0.00 0.73 147 HTML_IMAGE_ONLY_08 2 0.62 0.00 0.73 148 RELAYCOUNTRY_CA 2 0.62 0.00 0.73 149 TR_XM_Base64_L1 2 0.62 0.00 0.73 150 TM2_M_URI_OPT_OUT 2 1.23 3.92 0.73 151 RELAYCOUNTRY_JP 2 0.92 1.96 0.73 152 T_XMHurry_00 2 1.85 7.84 0.73 153 T_Symld_Words_02 2 0.62 0.00 0.73 154 TooManyTo_003 2 0.92 1.96 0.73 155 T_TooManySym_03 2 0.62 0.00 0.73 156 FSL_BULK_SIG 2 3.08 15.69 0.73 157 XMMoneyMeta_00 2 0.62 0.00 0.73 158 XM_Body_Obfu01 2 0.62 0.00 0.73 159 FROM_EXCESS_BASE64 2 0.62 0.00 0.73 160 URI_TRY_3LD 2 1.85 7.84 0.73 161 T_XMDrugObfuBody_14 2 1.54 5.88 0.73 162 TooManyTo_002 2 0.92 1.96 0.73 163 XMGappySubj_01 2 0.62 0.00 0.73 164 XMSubject_40 2 0.62 0.00 0.73 165 TR_LOTS_OF_MONEY2 2 2.15 9.80 0.73 166 XM_ZIP 2 0.62 0.00 0.73 167 TR_MRelay_UG 2 2.46 11.76 0.73 168 T_XMDrugObfuBody_12 2 0.62 0.00 0.73 169 XM_H_Trusted_IP 2 0.62 0.00 0.73 170 XM_OfRef6 2 1.54 5.88 0.73 171 TR_XM_Base64_C 2 0.62 0.00 0.73 172 HTML_IMAGE_ONLY_16 2 0.62 0.00 0.73 173 MIME_CHARSET_FARAWAY 2 0.62 0.00 0.73 174 LONGLN_LOW_CONTRAST 2 0.92 1.96 0.73 175 T_XMDrugObfuBody_00 2 0.62 0.00 0.73 176 XM_Body_Dirty_Words_01 2 1.54 5.88 0.73 177 T_MONEY_PERCENT 2 2.15 9.80 0.73 178 TR_XM_SB_Phish 2 0.62 0.00 0.73 179 XMWinner 1 0.31 0.00 0.36 180 RELAYCOUNTRY_FR 1 0.62 1.96 0.36 181 WEIRD_PORT 1 0.31 0.00 0.36 182 XMBody_95 1 0.31 0.00 0.36 183 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.31 0.00 0.36 184 NICE_REPLY_A 1 0.31 0.00 0.36 185 CHARSET_FARAWAY_HEADER 1 0.31 0.00 0.36 186 TooManyTo_005 1 0.31 0.00 0.36 187 RELAYCOUNTRY_IN 1 1.85 9.80 0.36 188 HELO_NODOT 1 0.31 0.00 0.36 189 TR_DCC_Bayes_99 1 2.77 15.69 0.36 190 TR_XM_Base64_M2 1 0.31 0.00 0.36 191 TR_Mismatch_TLD_02 1 0.92 3.92 0.36 192 XMHTMLBadTable_001 1 0.31 0.00 0.36 193 SUBJ_ALL_CAPS 1 1.54 7.84 0.36 194 FROM_LOCAL_HEX 1 0.31 0.00 0.36 195 BOTNET_NORDNS 1 0.92 3.92 0.36 196 XM_B_DNDMA 1 0.31 0.00 0.36 197 URI_NOVOWEL 1 1.85 9.80 0.36 198 DC_PNG_UNO_LARGO 1 0.31 0.00 0.36 199 URI_PHISH 1 0.31 0.00 0.36 200 TR_UG_Sexy_Spam 1 0.31 0.00 0.36 ----------------------------------------------------------------------