Email: 327 Autolearn: 0 AvgScore: -0.13 AvgScanTime: 4.81 sec Spam: 42 Autolearn: 0 AvgScore: 14.10 AvgScanTime: 4.82 sec Ham: 285 Autolearn: 0 AvgScore: -2.23 AvgScanTime: 4.80 sec Time Spent Running SA: 0.44 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.38 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 36 61.16 85.71 57.54 2 T_SCC_BODY_TEXT_LINE 35 82.87 83.33 82.81 3 DKIM_SIGNED 33 58.10 78.57 55.09 4 RELAYCOUNTRY_US 33 59.02 78.57 56.14 5 DKIM_VALID 33 55.96 78.57 52.63 6 XM_DK_Pass 33 55.96 78.57 52.63 7 XM_B_SpammyWords 27 26.30 64.29 20.70 8 XM_B_Unicode 27 43.73 64.29 40.70 9 DCC_CHECK_NEGATIVE 24 87.46 57.14 91.93 10 BAYES_50 24 65.14 57.14 66.32 11 XMListUnsubscribeExists 22 36.70 52.38 34.39 12 LOC_TINY_FONT_1 19 20.80 45.24 17.19 13 DCC_CHECK 18 12.54 42.86 8.07 14 DKIM_VALID_AU 17 41.90 40.48 42.11 15 MIME_HTML_ONLY 16 11.01 38.10 7.02 16 RCVD_IN_MSPIKE_H2 15 13.46 35.71 10.18 17 XM_Multi_Part_URI 15 15.90 35.71 12.98 18 DKIM_VALID_EF 15 23.85 35.71 22.11 19 HTML_FONT_LOW_CONTRAST 15 22.94 35.71 21.05 20 XM_B_Unicode3 15 26.91 35.71 25.61 21 UNPARSEABLE_RELAY 14 12.84 33.33 9.82 22 XM_Body_Dirty_Words 14 9.79 33.33 6.32 23 XM_B_SpammyWords2 13 14.68 30.95 12.28 24 T_KAM_HTML_FONT_INVALID 11 14.98 26.19 13.33 25 RELAYCOUNTRY_META 11 8.87 26.19 6.32 26 XM_DK_Undo_02 10 5.20 23.81 2.46 27 TR_XM_DK_Unsub 9 14.98 21.43 14.04 28 BAYES_99 9 3.98 21.43 1.40 29 TooManyTo_001 9 6.12 21.43 3.86 30 FVGT_m_MULTI_ODD 9 19.88 21.43 19.65 31 XM_B_Unsub 9 4.89 21.43 2.46 32 TR_XM_BayesUnsub 9 4.89 21.43 2.46 33 UNTRUSTED_Relay 8 6.12 19.05 4.21 34 T_TM2_M_HEADER_IN_MSG 8 18.96 19.05 18.95 35 RCVD_IN_MSPIKE_WL 7 25.69 16.67 27.02 36 XMSubLong 7 15.90 16.67 15.79 37 XMSexyCombo_05 7 3.67 16.67 1.75 38 XM_UncommonTLD01 7 6.12 16.67 4.56 39 TR_XM_DKIM_Undo 7 2.45 16.67 0.35 40 TR_XM_UnparsRelay 7 2.75 16.67 0.70 41 BAYES_999 6 2.75 14.29 1.05 42 BOTNET 6 2.45 14.29 0.70 43 BAYES_80 6 5.81 14.29 4.56 44 XMDiploma_00 5 2.45 11.90 1.05 45 TooManyTo_004 5 2.14 11.90 0.70 46 MPART_ALT_DIFF 5 2.14 11.90 0.70 47 TooManyTo_003 5 2.75 11.90 1.40 48 XMStockSpam_06 5 1.83 11.90 0.35 49 RELAYCOUNTRY_IN 5 1.83 11.90 0.35 50 TooManyTo_002 5 2.75 11.90 1.40 51 XMStrtUSub 5 6.12 11.90 5.26 52 HTML_MIME_NO_HTML_TAG 4 2.45 9.52 1.40 53 TooManyTo_005 4 1.53 9.52 0.35 54 FSL_BULK_SIG 4 2.14 9.52 1.05 55 TR_XM_SpammyRelay 4 2.75 9.52 1.75 56 BOTNET_IPINHOSTNAME 4 3.36 9.52 2.46 57 XM_B_SpammyTLD 4 3.36 9.52 2.46 58 XMGappySubj_01 4 4.89 9.52 4.21 59 XM_Evil_Numbers_Gen 4 2.14 9.52 1.05 60 XMCapTrack 4 1.53 9.52 0.35 61 XM_UB80 4 1.22 9.52 0.00 62 RCVD_IN_MSPIKE_H5 4 8.87 9.52 8.77 63 XMDateMe_00 3 1.22 7.14 0.35 64 XM_SendGrid 3 3.36 7.14 2.81 65 RCVD_IN_VALIDITY_RPBL 3 0.92 7.14 0.00 66 XM_H_Long_From01 3 3.36 7.14 2.81 67 TR_XM_NoHeaderRelay 3 0.92 7.14 0.00 68 RCVD_IN_MSPIKE_H3 3 13.76 7.14 14.74 69 PDS_OTHER_BAD_TLD 3 0.92 7.14 0.00 70 HTML_IMAGE_RATIO_04 3 6.73 7.14 6.67 71 TM2_M_OBFU_COMMENT 3 1.22 7.14 0.35 72 MIME_QP_LONG_LINE 3 6.42 7.14 6.32 73 XM_B_SpammyWords3 3 1.83 7.14 1.05 74 TR_XM_PhishingBody 2 1.22 4.76 0.70 75 SHOPIFY_IMG_NOT_RCVD_SFY 2 0.92 4.76 0.35 76 RELAYCOUNTRY_JP 2 0.61 4.76 0.00 77 TR_XM_SpammyWords5 2 2.14 4.76 1.75 78 HELO_NODOT 2 0.61 4.76 0.00 79 FROM_SUSPICIOUS_NTLD 2 0.61 4.76 0.00 80 LotsOfNums_01 2 6.12 4.76 6.32 81 FROM_SUSPICIOUS_NTLD_FP 2 0.61 4.76 0.00 82 TR_Mismatch_TLD_02 2 0.61 4.76 0.00 83 MIME_HTML_MOSTLY 2 3.06 4.76 2.81 84 FORGED_GMAIL_RCVD 2 0.61 4.76 0.00 85 XMHTML_After_End 2 0.92 4.76 0.35 86 TR_DCC_Bayes_99 2 0.61 4.76 0.00 87 SpammyFromTLD_01 2 1.83 4.76 1.40 88 T_XMDrugObfuBody_08 2 0.92 4.76 0.35 89 HELO_NO_DOMAIN 2 0.61 4.76 0.00 90 T_FILL_THIS_FORM_SHORT 2 0.92 4.76 0.35 91 BOTNET_NORDNS 2 0.61 4.76 0.00 92 SpammyFromTLD_02 2 0.61 4.76 0.00 93 XM_B_Phish_Phrases 2 1.83 4.76 1.40 94 TR_XM_SB_Phish 2 0.61 4.76 0.00 95 XMGenDplmaNmb 2 1.22 4.76 0.70 96 HTML_IMAGE_RATIO_06 2 1.83 4.76 1.40 97 SUBJ_ALL_CAPS 2 1.22 4.76 0.70 98 XM_Body_Dirty_Words_01 2 0.92 4.76 0.35 99 XM_B_Phish66 2 1.22 4.76 0.70 100 XM_UB50 2 2.14 4.76 1.75 101 FSL_HELO_NON_FQDN_1 2 0.61 4.76 0.00 102 XM_SPF_SoftFail 2 0.61 4.76 0.00 103 URI_NOVOWEL 2 0.92 4.76 0.35 104 XM_OfRef6 2 0.61 4.76 0.00 105 DKIM_ADSP_CUSTOM_MED 2 0.92 4.76 0.35 106 RCVD_IN_BL_SPAMCOP_NET 1 0.31 2.38 0.00 107 LOTS_OF_MONEY 1 1.22 2.38 1.05 108 BAYES_60 1 11.62 2.38 12.98 109 HTML_FONT_TINY_NORDNS 1 0.92 2.38 0.70 110 TR_XM_FormFill2 1 0.31 2.38 0.00 111 RCVD_IN_IADB_DK 1 0.61 2.38 0.35 112 UNCLAIMED_MONEY 1 0.31 2.38 0.00 113 XMOemUri 1 0.31 2.38 0.00 114 LOADSA_MONEY_COMBO 1 0.31 2.38 0.00 115 TR_XM_SpammyWords4 1 0.92 2.38 0.70 116 FORM_FRAUD_5 1 0.31 2.38 0.00 117 TVD_PH_BODY_META 1 0.31 2.38 0.00 118 XM_UB99 1 0.31 2.38 0.00 119 MONEY_FRAUD_8 1 0.31 2.38 0.00 120 BAYES_95 1 3.98 2.38 4.21 121 TR_XM_InvalidRelay 1 0.31 2.38 0.00 122 RCVD_IN_PSBL 1 0.92 2.38 0.70 123 XM_B_Unsub2 1 0.61 2.38 0.35 124 DOS_OE_TO_MX_IMAGE 1 0.31 2.38 0.00 125 RELAYCOUNTRY_DE 1 0.61 2.38 0.35 126 MIME_HTML_ONLY_MULTI 1 0.92 2.38 0.70 127 UPPERCASE_50_75 1 0.31 2.38 0.00 128 TR_XM_PHPForged 1 0.31 2.38 0.00 129 XM_E_Weebly 1 0.31 2.38 0.00 130 UNDISC_MONEY 1 0.31 2.38 0.00 131 TO_NO_BRKTS_FROM_MSSP 1 0.31 2.38 0.00 132 URIBL_DBL_SPAM 1 0.31 2.38 0.00 133 XMGppyBdWords 1 0.31 2.38 0.00 134 XMReplyNow 1 0.31 2.38 0.00 135 XM_Nigeria_02 1 0.31 2.38 0.00 136 XM_ShortIntro_01 1 1.22 2.38 1.05 137 TR_XM_SPAMCOP 1 0.31 2.38 0.00 138 XM_Body_Dirty_Words_02 1 0.31 2.38 0.00 139 SHORT_URI_3 1 0.31 2.38 0.00 140 TR_XM_DK_SendGrid 1 1.53 2.38 1.40 141 FROM_MISSP_EH_MATCH 1 0.31 2.38 0.00 142 RELAYCOUNTRY_AU 1 1.83 2.38 1.75 143 XM_OfRef7 1 0.31 2.38 0.00 144 RCVD_IN_IADB_SENDERID 1 0.61 2.38 0.35 145 XMacai 1 0.31 2.38 0.00 146 XM_UB999 1 0.31 2.38 0.00 147 XM_BadFromFormat 1 0.31 2.38 0.00 148 XM_RXBody 1 0.31 2.38 0.00 149 T_XMDrugObfuBody_14 1 0.61 2.38 0.35 150 RCVD_IN_IADB_LISTED 1 0.61 2.38 0.35 151 BAYES_40 1 1.22 2.38 1.05 152 NML_ADSP_CUSTOM_MED 1 0.61 2.38 0.35 153 TR_Sbj_FN_Bdy 1 0.92 2.38 0.70 154 XM_ProductURIs 1 0.31 2.38 0.00 155 RCVD_IN_IADB_SPF 1 0.61 2.38 0.35 156 XM_DIRTYINTL 1 1.22 2.38 1.05 157 XM_Nigeria_01 1 0.31 2.38 0.00 158 TR_XM_PHPDW 1 0.31 2.38 0.00 159 HK_RANDOM_REPLYTO 1 0.31 2.38 0.00 160 XM_B_SpammyWords4 1 0.31 2.38 0.00 161 PLING_QUERY 1 0.31 2.38 0.00 162 TR_Caps_n_Bayes_99 1 0.61 2.38 0.35 163 TR_XM_SEO4 1 0.31 2.38 0.00 164 XMEmptySub 1 0.31 2.38 0.00 165 SHORT_HELO_AND_INLINE_IMAGE 1 0.31 2.38 0.00 166 XM_H_PHPOS_M 1 0.31 2.38 0.00 167 MPART_ALT_DIFF_COUNT 1 0.31 2.38 0.00 168 XMNumbers 1 4.89 2.38 5.26 169 FORGED_MUA_OUTLOOK 1 0.31 2.38 0.00 170 MILLION_HUNDRED 1 0.31 2.38 0.00 171 TR_Caps_n_Bayes_80 1 0.31 2.38 0.00 172 T_REMOTE_IMAGE 1 2.14 2.38 2.11 173 DEAR_SOMETHING 1 0.31 2.38 0.00 174 TR_XM_Undi_Recip5 1 0.31 2.38 0.00 175 RELAYCOUNTRY_RU 1 0.31 2.38 0.00 176 XMSubMetaSx_00 1 2.14 2.38 2.11 177 XM_H_PHPOS 1 0.31 2.38 0.00 178 URI_TRUNCATED 1 0.31 2.38 0.00 179 MILLION_USD 1 0.61 2.38 0.35 180 HTML_TITLE_SUBJ_DIFF 1 0.31 2.38 0.00 181 XM_B_SexDrugs1 1 0.31 2.38 0.00 182 TM2_M_URI_OPT_OUT 1 1.22 2.38 1.05 183 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.31 2.38 0.00 184 XMCmmnCold 1 0.31 2.38 0.00 185 T_TooManySym_01 1 4.59 2.38 4.91 186 IMPOTENCE 1 0.31 2.38 0.00 187 XM_B_Investor 1 0.92 2.38 0.70 188 XM_H_PHPMailer 1 0.31 2.38 0.00 189 ADVANCE_FEE_5_NEW_MONEY 1 0.31 2.38 0.00 190 RELAYCOUNTRY_FR 1 0.31 2.38 0.00 191 MISSING_HEADERS 1 0.92 2.38 0.70 192 NORDNS_LOW_CONTRAST 1 0.31 2.38 0.00 193 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.31 2.38 0.00 194 XM_B_SEO 1 0.31 2.38 0.00 195 HK_SCAM 1 0.31 2.38 0.00 196 LongTLD 1 0.31 2.38 0.00 197 XMNoVowels 1 5.50 2.38 5.96 198 T_XMDrugObfuBody_00 1 0.61 2.38 0.35 199 XMSubNoVowel 1 1.22 2.38 1.05 200 MONEY_FORM_SHORT 1 0.31 2.38 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 262 87.46 57.14 91.93 2 T_SCC_BODY_TEXT_LINE 236 82.87 83.33 82.81 3 BAYES_50 189 65.14 57.14 66.32 4 HTML_MESSAGE 164 61.16 85.71 57.54 5 RELAYCOUNTRY_US 160 59.02 78.57 56.14 6 DKIM_SIGNED 157 58.10 78.57 55.09 7 XM_DK_Pass 150 55.96 78.57 52.63 8 DKIM_VALID 150 55.96 78.57 52.63 9 DKIM_VALID_AU 120 41.90 40.48 42.11 10 XM_B_Unicode 116 43.73 64.29 40.70 11 BOUNCE_MESSAGE 112 34.25 0.00 39.30 12 ANY_BOUNCE_MESSAGE 112 34.25 0.00 39.30 13 ALL_TRUSTED 107 32.72 0.00 37.54 14 XMListUnsubscribeExists 98 36.70 52.38 34.39 15 RCVD_IN_MSPIKE_WL 77 25.69 16.67 27.02 16 SCC_BODY_URI_ONLY 75 22.94 0.00 26.32 17 XM_B_Unicode3 73 26.91 35.71 25.61 18 DKIM_VALID_EF 63 23.85 35.71 22.11 19 HTML_FONT_LOW_CONTRAST 60 22.94 35.71 21.05 20 XM_B_SpammyWords 59 26.30 64.29 20.70 21 FVGT_m_MULTI_ODD 56 19.88 21.43 19.65 22 T_TM2_M_HEADER_IN_MSG 54 18.96 19.05 18.95 23 LOC_TINY_FONT_1 49 20.80 45.24 17.19 24 XMSubLong 45 15.90 16.67 15.79 25 RCVD_IN_MSPIKE_H3 42 13.76 7.14 14.74 26 TR_XM_DK_Unsub 40 14.98 21.43 14.04 27 T_KAM_HTML_FONT_INVALID 38 14.98 26.19 13.33 28 XM_Multi_Part_URI 37 15.90 35.71 12.98 29 BAYES_60 37 11.62 2.38 12.98 30 XM_B_SpammyWords2 35 14.68 30.95 12.28 31 XM_DK_Undo_01 33 10.09 0.00 11.58 32 RCVD_IN_MSPIKE_H2 29 13.46 35.71 10.18 33 UNPARSEABLE_RELAY 28 12.84 33.33 9.82 34 MIME_HEADER_CTYPE_ONLY 27 8.26 0.00 9.47 35 HTML_IMAGE_ONLY_20 27 8.26 0.00 9.47 36 RCVD_IN_MSPIKE_H5 25 8.87 9.52 8.77 37 DCC_CHECK 23 12.54 42.86 8.07 38 BAYES_00 21 6.42 0.00 7.37 39 MIME_HTML_ONLY 20 11.01 38.10 7.02 40 XM_DKIMWhitelistDomains 19 5.81 0.00 6.67 41 HTML_IMAGE_RATIO_04 19 6.73 7.14 6.67 42 RELAYCOUNTRY_META 18 8.87 26.19 6.32 43 MIME_QP_LONG_LINE 18 6.42 7.14 6.32 44 XM_Body_Dirty_Words 18 9.79 33.33 6.32 45 LotsOfNums_01 18 6.12 4.76 6.32 46 XMNoVowels 17 5.50 2.38 5.96 47 TVD_SPACE_RATIO 17 5.20 0.00 5.96 48 XMLngstWrd_00 16 4.89 0.00 5.61 49 XMStrtUSub 15 6.12 11.90 5.26 50 XMNumbers 15 4.89 2.38 5.26 51 T_TooManySym_01 14 4.59 2.38 4.91 52 BAYES_80 13 5.81 14.29 4.56 53 XM_UncommonTLD01 13 6.12 16.67 4.56 54 TR_XM_DK_Bayes1 13 3.98 0.00 4.56 55 TR_XM_DK_Bayes 13 3.98 0.00 4.56 56 INVALID_MSGID 12 3.67 0.00 4.21 57 TR_XM_DK_Bayes2 12 3.67 0.00 4.21 58 UNTRUSTED_Relay 12 6.12 19.05 4.21 59 XMGappySubj_01 12 4.89 9.52 4.21 60 BAYES_95 12 3.98 2.38 4.21 61 TooManyTo_001 11 6.12 21.43 3.86 62 USER_IN_DEF_DKIM_WL 10 3.06 0.00 3.51 63 RCVD_IN_MSPIKE_H4 10 3.06 0.00 3.51 64 TO_MALFORMED 9 2.75 0.00 3.16 65 T_TooManySym_02 9 2.75 0.00 3.16 66 IN_ZIMBRA_NJ_WHITELIST 9 2.75 0.00 3.16 67 MAILING_LIST_MULTI 8 2.45 0.00 2.81 68 MIME_HTML_MOSTLY 8 3.06 4.76 2.81 69 XM_SendGrid 8 3.36 7.14 2.81 70 XM_H_Long_From01 8 3.36 7.14 2.81 71 XM_DK_Undo_02 7 5.20 23.81 2.46 72 TR_XM_BayesUnsub 7 4.89 21.43 2.46 73 HTML_IMAGE_RATIO_02 7 2.45 2.38 2.46 74 DKIM_INVALID 7 2.14 0.00 2.46 75 XM_B_Unsub 7 4.89 21.43 2.46 76 BOTNET_IPINHOSTNAME 7 3.36 9.52 2.46 77 XM_B_SpammyTLD 7 3.36 9.52 2.46 78 HTML_IMAGE_RATIO_08 6 1.83 0.00 2.11 79 RELAYCOUNTRY_AT 6 1.83 0.00 2.11 80 USER_IN_WHITELIST 6 1.83 0.00 2.11 81 XMSubMetaSx_00 6 2.14 2.38 2.11 82 T_REMOTE_IMAGE 6 2.14 2.38 2.11 83 USER_IN_WELCOMELIST 6 1.83 0.00 2.11 84 RCVD_IN_VALIDITY_SAFE 5 1.53 0.00 1.75 85 XM_UB50 5 2.14 4.76 1.75 86 MONEY_BACK 5 1.53 0.00 1.75 87 RELAYCOUNTRY_AU 5 1.83 2.38 1.75 88 XMGappySubj_02 5 1.53 0.00 1.75 89 TR_XM_SpammyRelay 5 2.75 9.52 1.75 90 TR_XM_SpammyWords5 5 2.14 4.76 1.75 91 XMSexyCombo_05 5 3.67 16.67 1.75 92 TooManyTo_002 4 2.75 11.90 1.40 93 HK_RANDOM_FROM 4 1.22 0.00 1.40 94 XM_B_Phish_Phrases 4 1.83 4.76 1.40 95 TooManyTo_003 4 2.75 11.90 1.40 96 HTML_IMAGE_RATIO_06 4 1.83 4.76 1.40 97 TR_XM_DK_SendGrid 4 1.53 2.38 1.40 98 SpammyFromTLD_01 4 1.83 4.76 1.40 99 BAYES_99 4 3.98 21.43 1.40 100 HTML_MIME_NO_HTML_TAG 4 2.45 9.52 1.40 101 BAYES_05 4 1.22 0.00 1.40 102 XM_GoogleGroups 4 1.22 0.00 1.40 103 XM_B_SpammyWords3 3 1.83 7.14 1.05 104 XMSubNoVowel 3 1.22 2.38 1.05 105 TVD_RCVD_IP 3 0.92 0.00 1.05 106 TM2_M_URI_OPT_OUT 3 1.22 2.38 1.05 107 XM_Evil_Numbers_Gen 3 2.14 9.52 1.05 108 XMBSHREFv2 3 0.92 0.00 1.05 109 FSL_BULK_SIG 3 2.14 9.52 1.05 110 XM_PDF 3 0.92 0.00 1.05 111 XMSubject_78 3 0.92 0.00 1.05 112 XM_ShortIntro_01 3 1.22 2.38 1.05 113 RCVD_IN_VALIDITY_CERTIFIED 3 0.92 0.00 1.05 114 XM_DIRTYINTL 3 1.22 2.38 1.05 115 HTML_FONT_FACE_BAD 3 0.92 0.00 1.05 116 BAYES_40 3 1.22 2.38 1.05 117 LOTS_OF_MONEY 3 1.22 2.38 1.05 118 HK_RANDOM_ENVFROM 3 0.92 0.00 1.05 119 BAYES_999 3 2.75 14.29 1.05 120 XMDiploma_00 3 2.45 11.90 1.05 121 MISSING_HEADERS 2 0.92 2.38 0.70 122 XM_Body_Obfu01 2 0.61 0.00 0.70 123 XM_B_Investor 2 0.92 2.38 0.70 124 XM_Ancestry_Forge 2 0.61 0.00 0.70 125 BASE64_LENGTH_79_INF 2 0.61 0.00 0.70 126 XM_B_Phish66 2 1.22 4.76 0.70 127 XM_ZIP 2 0.61 0.00 0.70 128 TR_XM_UnparsRelay 2 2.75 16.67 0.70 129 BAYES_20 2 0.61 0.00 0.70 130 MSGID_NOFQDN1 2 0.61 0.00 0.70 131 TM2_M_VERY_LONG_WORD 2 0.61 0.00 0.70 132 MPART_ALT_DIFF 2 2.14 11.90 0.70 133 RELAYCOUNTRY_NL 2 0.61 0.00 0.70 134 SUBJ_ALL_CAPS 2 1.22 4.76 0.70 135 XMGenDplmaNmb 2 1.22 4.76 0.70 136 XM_Dr_From 2 0.61 0.00 0.70 137 TR_XM_SpoofStaff 2 0.61 0.00 0.70 138 BOTNET 2 2.45 14.29 0.70 139 TooManyTo_004 2 2.14 11.90 0.70 140 KHOP_HELO_FCRDNS 2 0.61 0.00 0.70 141 XM_H_SpoofStaff4 2 0.61 0.00 0.70 142 TR_Sbj_FN_Bdy 2 0.92 2.38 0.70 143 TR_XM_SpoofPhishAttach 2 0.61 0.00 0.70 144 IN_HORDE_ADDRESS_BOOK 2 0.61 0.00 0.70 145 T_TooManySym_03 2 0.61 0.00 0.70 146 TR_XM_PSC1 2 0.61 0.00 0.70 147 XMSpoofStaff2 2 0.61 0.00 0.70 148 HTML_FONT_TINY_NORDNS 2 0.92 2.38 0.70 149 TR_XM_PhishingBody 2 1.22 4.76 0.70 150 TR_XM_SpammyWords4 2 0.92 2.38 0.70 151 XM_ZohoDesk1 2 0.61 0.00 0.70 152 FROM_GOV_SPOOF 2 0.61 0.00 0.70 153 MIME_HTML_ONLY_MULTI 2 0.92 2.38 0.70 154 RCVD_IN_PSBL 2 0.92 2.38 0.70 155 TR_XM_DKIM_Undo 1 2.45 16.67 0.35 156 HTML_IMAGE_ONLY_16 1 0.31 0.00 0.35 157 XMSolicitRefs_0 1 0.31 0.00 0.35 158 T_TooManySym_04 1 0.31 0.00 0.35 159 XMSubMetaSxObfu_03 1 0.31 0.00 0.35 160 RELAYCOUNTRY_CN 1 0.31 0.00 0.35 161 URI_NOVOWEL 1 0.92 4.76 0.35 162 RCVD_IN_IADB_OPTIN 1 0.31 0.00 0.35 163 DKIM_ADSP_CUSTOM_MED 1 0.92 4.76 0.35 164 XMBrknScrpt_02 1 0.61 2.38 0.35 165 HTTPS_HTTP_MISMATCH 1 0.31 0.00 0.35 166 RELAYCOUNTRY_GR 1 0.31 0.00 0.35 167 RELAYCOUNTRY_TW 1 0.31 0.00 0.35 168 T_XMDrugObfuBody_00 1 0.61 2.38 0.35 169 SUBJ_DOLLARS 1 0.61 2.38 0.35 170 XM_H_MailChimp 1 0.31 0.00 0.35 171 XM_CamelCaseFrm001 1 0.31 0.00 0.35 172 XMLngstWrd_04 1 0.31 0.00 0.35 173 AC_FROM_MANY_DOTS 1 0.31 0.00 0.35 174 XMStockSpam_06 1 1.83 11.90 0.35 175 MY_SERVERS_FOUND 1 0.31 0.00 0.35 176 URIBL_BLACK 1 0.31 0.00 0.35 177 TR_UG_Sexy_Spam 1 0.31 0.00 0.35 178 TR_Caps_n_Bayes_99 1 0.61 2.38 0.35 179 XM_Sft_Co_L33T 1 0.31 0.00 0.35 180 MILLION_USD 1 0.61 2.38 0.35 181 TM2_M_OBFU_COMMENT 1 1.22 7.14 0.35 182 RCVD_IN_IADB_VOUCHED 1 0.31 0.00 0.35 183 RELAYCOUNTRY_IN 1 1.83 11.90 0.35 184 XM_B_COPY_HTML 1 0.31 0.00 0.35 185 XM_Body_Dirty_Words_01 1 0.92 4.76 0.35 186 XMBody_95 1 0.31 0.00 0.35 187 XMCapTrack 1 1.53 9.52 0.35 188 HTML_TAG_BALANCE_BODY 1 0.31 0.00 0.35 189 TR_Symld_Words 1 0.31 0.00 0.35 190 XMSexyCombo_01 1 0.31 0.00 0.35 191 RCVD_IN_IADB_SENDERID 1 0.61 2.38 0.35 192 XMLngstWrd_01 1 0.31 0.00 0.35 193 RDNS_DYNAMIC 1 0.31 0.00 0.35 194 XM_S_SpammyWords 1 0.31 0.00 0.35 195 TR_MetaPhish_Combo_01 1 0.31 0.00 0.35 196 XMLngstWrd_03 1 0.31 0.00 0.35 197 TR_BOTNET_NEGATE 1 0.31 0.00 0.35 198 XMHTML_After_End 1 0.92 4.76 0.35 199 HDRS_MISSP 1 0.31 0.00 0.35 200 RCVD_IN_IADB_LISTED 1 0.61 2.38 0.35 ----------------------------------------------------------------------