Email: 323 Autolearn: 0 AvgScore: 1.78 AvgScanTime: 1.71 sec Spam: 59 Autolearn: 0 AvgScore: 15.56 AvgScanTime: 2.57 sec Ham: 264 Autolearn: 0 AvgScore: -1.30 AvgScanTime: 1.52 sec Time Spent Running SA: 0.15 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 58 61.92 98.31 53.79 2 DKIM_SIGNED 57 60.99 96.61 53.03 3 XM_DK_Pass 56 60.06 94.92 52.27 4 DKIM_VALID 56 59.75 94.92 51.89 5 T_SCC_BODY_TEXT_LINE 49 83.90 83.05 84.09 6 XM_B_Unicode 47 38.39 79.66 29.17 7 XM_B_SpammyWords 46 28.17 77.97 17.05 8 RELAYCOUNTRY_US 45 54.80 76.27 50.00 9 XMListUnsubscribeExists 41 29.41 69.49 20.45 10 XM_B_Unicode3 39 25.70 66.10 16.67 11 DCC_CHECK_NEGATIVE 38 87.31 64.41 92.42 12 XM_DK_Undo_02 35 13.62 59.32 3.41 13 DKIM_VALID_AU 33 47.68 55.93 45.83 14 BAYES_50 33 69.04 55.93 71.97 15 TR_XM_DKIM_Undo 31 9.91 52.54 0.38 16 T_KAM_HTML_FONT_INVALID 30 16.72 50.85 9.09 17 XM_Multi_Part_URI 29 14.86 49.15 7.20 18 UNPARSEABLE_RELAY 28 15.79 47.46 8.71 19 FVGT_m_MULTI_ODD 27 16.10 45.76 9.47 20 XM_Body_Dirty_Words 24 12.38 40.68 6.06 21 BOTNET 22 6.81 37.29 0.00 22 DKIM_VALID_EF 22 30.03 37.29 28.41 23 BOTNET_IPINHOSTNAME 21 11.46 35.59 6.06 24 DCC_CHECK 21 12.69 35.59 7.58 25 XM_B_SpammyTLD 19 8.36 32.20 3.03 26 LOC_TINY_FONT_1 18 17.34 30.51 14.39 27 MAILING_LIST_MULTI 18 8.67 30.51 3.79 28 XMNoVowels 17 8.36 28.81 3.79 29 HTML_FONT_LOW_CONTRAST 17 21.05 28.81 19.32 30 RCVD_IN_MSPIKE_H2 16 13.31 27.12 10.23 31 XM_H_Long_From02 16 6.19 27.12 1.52 32 MIME_CHARSET_FARAWAY 16 6.19 27.12 1.52 33 XM_Body_Dirty_Words_01 16 6.19 27.12 1.52 34 RCVD_IN_MSPIKE_WL 16 29.10 27.12 29.55 35 XMSubLong 15 13.93 25.42 11.36 36 RELAYCOUNTRY_META 14 7.74 23.73 4.17 37 XM_B_SpammyWords2 13 8.36 22.03 5.30 38 BAYES_99 13 6.19 22.03 2.65 39 UNTRUSTED_Relay 13 5.88 22.03 2.27 40 TR_XM_BayesUnsub 12 10.53 20.34 8.33 41 MIME_HTML_ONLY 12 13.00 20.34 11.36 42 XM_B_Unsub 12 11.46 20.34 9.47 43 TR_XM_DK_Unsub 11 11.76 18.64 10.23 44 RCVD_IN_MSPIKE_H3 11 17.96 18.64 17.80 45 TR_DCC_Bayes_99 10 3.72 16.95 0.76 46 BAYES_999 10 4.64 16.95 1.89 47 TR_XM_SpammyRelay 10 4.64 16.95 1.89 48 TR_XM_UnparsRelay 9 4.33 15.25 1.89 49 XMSexyCombo_05 7 3.41 11.86 1.52 50 FSL_BULK_SIG 7 3.72 11.86 1.89 51 T_TM2_M_HEADER_IN_MSG 7 11.76 11.86 11.74 52 MPART_ALT_DIFF 6 2.79 10.17 1.14 53 TR_BOTNET_NEGATE 6 1.86 10.17 0.00 54 XM_Evil_Numbers_Gen 6 4.64 10.17 3.41 55 RCVD_IN_BL_SPAMCOP_NET 6 2.48 10.17 0.76 56 T_XMDrugObfuBody_14 6 2.17 10.17 0.38 57 XM_UB99 6 1.86 10.17 0.00 58 TR_XM_SPAMCOP 5 2.17 8.47 0.76 59 XM_UncommonTLD01 5 4.02 8.47 3.03 60 SpammyFromTLD_01 5 1.55 8.47 0.00 61 T_XMDrugObfuBody_08 5 3.10 8.47 1.89 62 XM_H_Long_From01 5 3.41 8.47 2.27 63 BAYES_80 5 5.57 8.47 4.92 64 URI_NOVOWEL 4 1.55 6.78 0.38 65 XM_DK_Undo_01 4 10.84 6.78 11.74 66 LOTS_OF_MONEY 4 2.79 6.78 1.89 67 RELAYCOUNTRY_IN 4 1.24 6.78 0.00 68 MIME_HTML_MOSTLY 4 2.17 6.78 1.14 69 XM_B_Phish_Phrases 4 2.48 6.78 1.52 70 LotsOfNums_01 4 3.41 6.78 2.65 71 RELAYCOUNTRY_FR 3 1.24 5.08 0.38 72 TM2_M_OBFU_COMMENT 3 1.24 5.08 0.38 73 XM_B_Phish66 3 1.86 5.08 1.14 74 XM_Nigeria_01 3 1.24 5.08 0.38 75 TR_XM_SpammyWords4 3 1.86 5.08 1.14 76 TR_XM_PhishingBody 3 1.86 5.08 1.14 77 HTML_IMAGE_RATIO_02 3 2.17 5.08 1.52 78 XM_E_Blogspot 3 1.24 5.08 0.38 79 XM_H_Undi_Recip 3 1.24 5.08 0.38 80 XM_UB999 3 0.93 5.08 0.00 81 XMStrtUSub 3 3.10 5.08 2.65 82 HTTPS_HTTP_MISMATCH 3 0.93 5.08 0.00 83 XM_B_DNDMA 3 1.55 5.08 0.76 84 HTML_IMAGE_RATIO_04 3 3.72 5.08 3.41 85 TR_Mismatch_TLD_01 3 1.55 5.08 0.76 86 XM_B_SpammyWords3 3 2.79 5.08 2.27 87 TR_XM_Undi_Recip6 3 0.93 5.08 0.00 88 XM_UB50 3 1.86 5.08 1.14 89 RCVD_IN_MSPIKE_H5 3 8.98 5.08 9.85 90 T_REMOTE_IMAGE 3 3.72 5.08 3.41 91 LONGLN_LOW_CONTRAST 3 0.93 5.08 0.00 92 HTML_FONT_FACE_BAD 3 1.55 5.08 0.76 93 TR_MRelay_UG 3 0.93 5.08 0.00 94 BAYES_40 3 3.10 5.08 2.65 95 CK_HELO_GENERIC 3 0.93 5.08 0.00 96 TM2_M_VERY_LONG_WORD 3 1.55 5.08 0.76 97 TR_XM_DK_Bayes 2 2.48 3.39 2.27 98 TR_XM_DK_SendGrid 2 1.55 3.39 1.14 99 TR_XM_Spammywords 2 0.62 3.39 0.00 100 TR_XM_InvalidRelay 2 0.62 3.39 0.00 101 XMStockSpam_06 2 0.93 3.39 0.38 102 TR_XM_SpammyWords5 2 2.17 3.39 1.89 103 XM_S_SpammyWords 2 0.62 3.39 0.00 104 XM_SendGrid 2 2.48 3.39 2.27 105 XM_SPF_SoftFail 2 1.24 3.39 0.76 106 BAYES_95 2 1.55 3.39 1.14 107 PDS_OTHER_BAD_TLD 2 0.62 3.39 0.00 108 TR_XM_DK_Bayes1 2 2.48 3.39 2.27 109 XMNumbers 2 4.02 3.39 4.17 110 RCVD_IN_MSPIKE_H4 2 2.17 3.39 1.89 111 FROM_SUSPICIOUS_NTLD 2 0.62 3.39 0.00 112 RCVD_IN_MSPIKE_L3 2 0.62 3.39 0.00 113 SpammyFromTLD_02 2 0.62 3.39 0.00 114 TR_XM_DK_Bayes2 2 2.48 3.39 2.27 115 XM_ProductURIs 2 0.93 3.39 0.38 116 HTML_IMAGE_RATIO_06 2 2.48 3.39 2.27 117 TR_XM_RelayPhish 2 0.62 3.39 0.00 118 PRICES_ARE_AFFORDABLE 2 0.62 3.39 0.00 119 RCVD_IN_PSBL 2 1.24 3.39 0.76 120 TR_XM_MSPIKECOMBO 2 0.62 3.39 0.00 121 TR_XM_COVIDMETA1 2 0.93 3.39 0.38 122 XMSubMetaSx_00 2 2.17 3.39 1.89 123 XM_DIRTYINTL 2 1.24 3.39 0.76 124 DEAR_FRIEND 2 0.62 3.39 0.00 125 FROM_SUSPICIOUS_NTLD_FP 2 0.62 3.39 0.00 126 XMSubPhish11 2 1.24 3.39 0.76 127 URIBL_DBL_SPAM 2 0.62 3.39 0.00 128 RCVD_IN_MSPIKE_BL 2 0.62 3.39 0.00 129 TR_XM_SB_Phish 2 1.24 3.39 0.76 130 RELAYCOUNTRY_AT 2 0.62 3.39 0.00 131 TR_XM_NoHeaderRelay 2 0.93 3.39 0.38 132 HTML_IMAGE_ONLY_16 2 0.62 3.39 0.00 133 BAYES_00 2 3.10 3.39 3.03 134 XM_B_Investor 2 0.93 3.39 0.38 135 RDNS_DYNAMIC 2 0.62 3.39 0.00 136 XM_UB80 2 0.93 3.39 0.38 137 RCVD_IN_VALIDITY_RPBL 2 0.62 3.39 0.00 138 USER_IN_DEF_DKIM_WL 1 4.02 1.69 4.55 139 SUBJ_DOLLARS 1 0.31 1.69 0.00 140 FROM_MISSP_EH_MATCH 1 0.31 1.69 0.00 141 TR_XM_COVIDMETA2 1 0.31 1.69 0.00 142 TR_XM_MSPIKECOMBO2 1 0.31 1.69 0.00 143 FORGED_GMAIL_RCVD 1 0.62 1.69 0.38 144 FILL_THIS_FORM_LONG 1 0.31 1.69 0.00 145 MONEY_FORM 1 0.31 1.69 0.00 146 MONEY_FROM_MISSP 1 0.31 1.69 0.00 147 URI_TRY_3LD 1 0.62 1.69 0.38 148 FROM_MISSPACED 1 0.31 1.69 0.00 149 BAYES_60 1 9.91 1.69 11.74 150 FILL_THIS_FORM 1 0.31 1.69 0.00 151 XM_OfRef7 1 0.62 1.69 0.38 152 XM_GoogleGroups 1 0.93 1.69 0.76 153 T_PDS_SHORT_SPOOFED_URL 1 0.31 1.69 0.00 154 IMG_ONLY_FM_DOM_INFO 1 0.31 1.69 0.00 155 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.31 1.69 0.00 156 XM_OfRef6 1 0.93 1.69 0.76 157 DKIM_ADSP_CUSTOM_MED 1 0.62 1.69 0.38 158 RELAYCOUNTRY_BR 1 0.31 1.69 0.00 159 T_TooManySym_01 1 4.64 1.69 5.30 160 FSL_CTYPE_WIN1251 1 0.31 1.69 0.00 161 HTML_FONT_TINY_NORDNS 1 1.24 1.69 1.14 162 XM_B_SpammyWords5 1 0.31 1.69 0.00 163 MIME_HTML_ONLY_MULTI 1 0.93 1.69 0.76 164 RELAYCOUNTRY_NL 1 0.31 1.69 0.00 165 RELAYCOUNTRY_CN 1 0.31 1.69 0.00 166 XMSolicitRefs_0 1 0.93 1.69 0.76 167 HTML_MIME_NO_HTML_TAG 1 0.31 1.69 0.00 168 DATE_IN_PAST_06_12 1 0.31 1.69 0.00 169 TO_NO_BRKTS_FROM_MSSP 1 0.31 1.69 0.00 170 XM_RECPTID 1 0.31 1.69 0.00 171 FROM_MISSP_MSFT 1 0.31 1.69 0.00 172 URI_NO_WWW_INFO_CGI 1 0.31 1.69 0.00 173 XM_B_SpammyWords4 1 0.93 1.69 0.76 174 XM_RXBody 1 0.31 1.69 0.00 175 NUMERIC_HTTP_ADDR 1 0.31 1.69 0.00 176 PDS_BTC_ID 1 0.62 1.69 0.38 177 SUBJ_ALL_CAPS 1 0.31 1.69 0.00 178 XM_CamelCaseFrm001 1 0.62 1.69 0.38 179 HDR_ORDER_FTSDMCXX_NORDNS 1 0.31 1.69 0.00 180 DATE_IN_PAST_03_06 1 0.31 1.69 0.00 181 TR_XM_MaxSPIKE 1 0.31 1.69 0.00 182 HDR_ORDER_FTSDMCXX_DIRECT 1 0.31 1.69 0.00 183 HTML_SHORT_LINK_IMG_2 1 0.31 1.69 0.00 184 XMBody_78 1 0.62 1.69 0.38 185 TR_XM_SpammyWords3 1 0.31 1.69 0.00 186 XM_Body_Dirty_Words_02 1 0.31 1.69 0.00 187 XM_B_SexDrugs1 1 0.31 1.69 0.00 188 URIBL_BLACK 1 0.31 1.69 0.00 189 RELAYCOUNTRY_PL 1 0.31 1.69 0.00 190 FORGED_MUA_OUTLOOK 1 0.31 1.69 0.00 191 DKIM_INVALID 1 1.24 1.69 1.14 192 XMHTML_After_End 1 0.31 1.69 0.00 193 XMBody_106 1 0.31 1.69 0.00 194 XMSubMetaSxObfu_01 1 0.62 1.69 0.38 195 BOTNET_NORDNS 1 0.31 1.69 0.00 196 TR_MetaPhish_Combo_01 1 0.31 1.69 0.00 197 XM_B_Unsub2 1 4.02 1.69 4.55 198 RELAYCOUNTRY_CA 1 0.31 1.69 0.00 199 HTML_COMMENT_SAVED_URL 1 0.31 1.69 0.00 200 LONG_JUNK_URI 1 0.31 1.69 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 244 87.31 64.41 92.42 2 T_SCC_BODY_TEXT_LINE 222 83.90 83.05 84.09 3 BAYES_50 190 69.04 55.93 71.97 4 HTML_MESSAGE 142 61.92 98.31 53.79 5 DKIM_SIGNED 140 60.99 96.61 53.03 6 XM_DK_Pass 138 60.06 94.92 52.27 7 DKIM_VALID 137 59.75 94.92 51.89 8 ANY_BOUNCE_MESSAGE 133 41.18 0.00 50.38 9 BOUNCE_MESSAGE 133 41.18 0.00 50.38 10 RELAYCOUNTRY_US 132 54.80 76.27 50.00 11 DKIM_VALID_AU 121 47.68 55.93 45.83 12 ALL_TRUSTED 119 36.84 0.00 45.08 13 SCC_BODY_URI_ONLY 89 27.55 0.00 33.71 14 RCVD_IN_MSPIKE_WL 78 29.10 27.12 29.55 15 XM_B_Unicode 77 38.39 79.66 29.17 16 DKIM_VALID_EF 75 30.03 37.29 28.41 17 XMListUnsubscribeExists 54 29.41 69.49 20.45 18 HTML_FONT_LOW_CONTRAST 51 21.05 28.81 19.32 19 RCVD_IN_MSPIKE_H3 47 17.96 18.64 17.80 20 XM_B_SpammyWords 45 28.17 77.97 17.05 21 XM_B_Unicode3 44 25.70 66.10 16.67 22 LOC_TINY_FONT_1 38 17.34 30.51 14.39 23 T_TM2_M_HEADER_IN_MSG 31 11.76 11.86 11.74 24 XM_DK_Undo_01 31 10.84 6.78 11.74 25 BAYES_60 31 9.91 1.69 11.74 26 HTML_IMAGE_ONLY_20 30 9.29 0.00 11.36 27 MIME_HTML_ONLY 30 13.00 20.34 11.36 28 XMSubLong 30 13.93 25.42 11.36 29 MIME_HEADER_CTYPE_ONLY 29 8.98 0.00 10.98 30 XM_DKIMWhitelistDomains 29 8.98 0.00 10.98 31 RCVD_IN_MSPIKE_H2 27 13.31 27.12 10.23 32 TR_XM_DK_Unsub 27 11.76 18.64 10.23 33 RCVD_IN_MSPIKE_H5 26 8.98 5.08 9.85 34 XM_B_Unsub 25 11.46 20.34 9.47 35 FVGT_m_MULTI_ODD 25 16.10 45.76 9.47 36 T_KAM_HTML_FONT_INVALID 24 16.72 50.85 9.09 37 UNPARSEABLE_RELAY 23 15.79 47.46 8.71 38 TR_XM_BayesUnsub 22 10.53 20.34 8.33 39 DCC_CHECK 20 12.69 35.59 7.58 40 XM_Multi_Part_URI 19 14.86 49.15 7.20 41 BOTNET_IPINHOSTNAME 16 11.46 35.59 6.06 42 TVD_SPACE_RATIO 16 4.95 0.00 6.06 43 XM_Body_Dirty_Words 16 12.38 40.68 6.06 44 XM_B_SpammyWords2 14 8.36 22.03 5.30 45 T_TooManySym_01 14 4.64 1.69 5.30 46 IN_ZIMBRA_NJ_WHITELIST 14 4.33 0.00 5.30 47 BAYES_80 13 5.57 8.47 4.92 48 XM_B_Unsub2 12 4.02 1.69 4.55 49 USER_IN_DEF_DKIM_WL 12 4.02 1.69 4.55 50 RELAYCOUNTRY_META 11 7.74 23.73 4.17 51 XMNumbers 11 4.02 3.39 4.17 52 MAILING_LIST_MULTI 10 8.67 30.51 3.79 53 XMNoVowels 10 8.36 28.81 3.79 54 XM_DK_Undo_02 9 13.62 59.32 3.41 55 HTML_IMAGE_RATIO_04 9 3.72 5.08 3.41 56 T_REMOTE_IMAGE 9 3.72 5.08 3.41 57 XM_Evil_Numbers_Gen 9 4.64 10.17 3.41 58 TO_MALFORMED 9 2.79 0.00 3.41 59 BAYES_00 8 3.10 3.39 3.03 60 MIME_QP_LONG_LINE 8 2.48 0.00 3.03 61 XM_B_SpammyTLD 8 8.36 32.20 3.03 62 XM_UncommonTLD01 8 4.02 8.47 3.03 63 LotsOfNums_01 7 3.41 6.78 2.65 64 BAYES_40 7 3.10 5.08 2.65 65 BAYES_99 7 6.19 22.03 2.65 66 T_TooManySym_02 7 2.17 0.00 2.65 67 XMStrtUSub 7 3.10 5.08 2.65 68 TooManyTo_001 6 1.86 0.00 2.27 69 UNTRUSTED_Relay 6 5.88 22.03 2.27 70 XM_B_SpammyWords3 6 2.79 5.08 2.27 71 TR_XM_DK_Bayes2 6 2.48 3.39 2.27 72 XM_H_Long_From01 6 3.41 8.47 2.27 73 HTML_IMAGE_RATIO_06 6 2.48 3.39 2.27 74 TR_XM_DK_Bayes1 6 2.48 3.39 2.27 75 TVD_RCVD_IP 6 1.86 0.00 2.27 76 INVALID_MSGID 6 1.86 0.00 2.27 77 TR_Symld_Words 6 1.86 0.00 2.27 78 TR_XM_DK_Bayes 6 2.48 3.39 2.27 79 RELAYCOUNTRY_AU 6 1.86 0.00 2.27 80 XM_SendGrid 6 2.48 3.39 2.27 81 TR_XM_SpammyRelay 5 4.64 16.95 1.89 82 BAYES_999 5 4.64 16.95 1.89 83 XMSubMetaSx_00 5 2.17 3.39 1.89 84 TR_XM_UnparsRelay 5 4.33 15.25 1.89 85 RCVD_IN_MSPIKE_H4 5 2.17 3.39 1.89 86 T_XMDrugObfuBody_08 5 3.10 8.47 1.89 87 LOTS_OF_MONEY 5 2.79 6.78 1.89 88 XMBSHREFv2 5 1.55 0.00 1.89 89 FSL_BULK_SIG 5 3.72 11.86 1.89 90 TR_XM_SpammyWords5 5 2.17 3.39 1.89 91 XM_B_Phish_Phrases 4 2.48 6.78 1.52 92 BAYES_20 4 1.24 0.00 1.52 93 XM_Body_Dirty_Words_01 4 6.19 27.12 1.52 94 MIME_CHARSET_FARAWAY 4 6.19 27.12 1.52 95 XMSexyCombo_05 4 3.41 11.86 1.52 96 XM_H_Long_From02 4 6.19 27.12 1.52 97 HTML_IMAGE_RATIO_02 4 2.17 5.08 1.52 98 DKIM_INVALID 3 1.24 1.69 1.14 99 XMHTMLBadTable_001 3 0.93 0.00 1.14 100 XM_ZIP 3 0.93 0.00 1.14 101 XM_UB50 3 1.86 5.08 1.14 102 RCVD_IN_VALIDITY_CERTIFIED 3 0.93 0.00 1.14 103 MIME_HTML_MOSTLY 3 2.17 6.78 1.14 104 RCVD_IN_VALIDITY_SAFE 3 0.93 0.00 1.14 105 HTML_FONT_TINY_NORDNS 3 1.24 1.69 1.14 106 HTML_IMAGE_RATIO_08 3 0.93 0.00 1.14 107 TR_XM_DK_SendGrid 3 1.55 3.39 1.14 108 MPART_ALT_DIFF 3 2.79 10.17 1.14 109 TR_XM_SpammyWords4 3 1.86 5.08 1.14 110 BAYES_95 3 1.55 3.39 1.14 111 TR_XM_PhishingBody 3 1.86 5.08 1.14 112 XM_B_Phish66 3 1.86 5.08 1.14 113 XMSubPhish11 2 1.24 3.39 0.76 114 HTML_FONT_FACE_BAD 2 1.55 5.08 0.76 115 TR_XM_SB_Phish 2 1.24 3.39 0.76 116 XM_DIRTYINTL 2 1.24 3.39 0.76 117 XMLngstWrd_01 2 0.62 0.00 0.76 118 XM_PDF 2 0.62 0.00 0.76 119 TM2_M_VERY_LONG_WORD 2 1.55 5.08 0.76 120 XMGappySubj_01 2 0.62 0.00 0.76 121 XM_Dr_From 2 0.62 0.00 0.76 122 TR_XM_SpoofPhishAttach 2 0.62 0.00 0.76 123 XMSubNoVowel 2 0.62 0.00 0.76 124 IN_HORDE_ADDRESS_BOOK 2 0.62 0.00 0.76 125 XMDateMe_00 2 0.62 0.00 0.76 126 XMSubMetaSxObfu_02 2 0.62 0.00 0.76 127 TR_Mismatch_TLD_01 2 1.55 5.08 0.76 128 XM_B_SpammyWords4 2 0.93 1.69 0.76 129 XM_ZohoDesk1 2 0.62 0.00 0.76 130 MSGID_NOFQDN1 2 0.62 0.00 0.76 131 TR_XM_PSC1 2 0.62 0.00 0.76 132 XMLngstWrd_03 2 0.62 0.00 0.76 133 T_FILL_THIS_FORM_SHORT 2 0.62 0.00 0.76 134 RCVD_IN_PSBL 2 1.24 3.39 0.76 135 FROM_GOV_SPOOF 2 0.62 0.00 0.76 136 XMSpoofStaff2 2 0.62 0.00 0.76 137 XMSolicitRefs_0 2 0.93 1.69 0.76 138 MIME_HTML_ONLY_MULTI 2 0.93 1.69 0.76 139 RCVD_IN_BL_SPAMCOP_NET 2 2.48 10.17 0.76 140 TR_XM_Base64_L1 2 0.62 0.00 0.76 141 XMLngstWrd_04 2 0.62 0.00 0.76 142 XMLngstWrd_00 2 0.62 0.00 0.76 143 TR_DCC_Bayes_99 2 3.72 16.95 0.76 144 XM_B_DNDMA 2 1.55 5.08 0.76 145 XM_Body_Obfu01 2 0.62 0.00 0.76 146 XMLngstWrd_02 2 0.62 0.00 0.76 147 TR_XM_SpoofStaff 2 0.62 0.00 0.76 148 XM_GoogleGroups 2 0.93 1.69 0.76 149 XM_SPF_SoftFail 2 1.24 3.39 0.76 150 XM_OfRef6 2 0.93 1.69 0.76 151 TR_XM_SPAMCOP 2 2.17 8.47 0.76 152 XM_H_SpoofStaff4 2 0.62 0.00 0.76 153 XMGenDplmaNmb 1 0.31 0.00 0.38 154 RCVD_IN_IADB_LISTED 1 0.31 0.00 0.38 155 NO_DNS_FOR_FROM 1 0.31 0.00 0.38 156 HK_RANDOM_FROM 1 0.31 0.00 0.38 157 HELO_NO_DOMAIN 1 0.31 0.00 0.38 158 TR_XM_NoHeaderRelay 1 0.93 3.39 0.38 159 XM_TLDProd2 1 0.31 0.00 0.38 160 XMBody_78 1 0.62 1.69 0.38 161 HELO_NODOT 1 0.31 0.00 0.38 162 MPART_ALT_DIFF_COUNT 1 0.31 0.00 0.38 163 TR_XM_Base64_C 1 0.31 0.00 0.38 164 XM_B_SpammyTLD2 1 0.31 0.00 0.38 165 XM_UB80 1 0.93 3.39 0.38 166 TO_EQ_FM_DOM_HTML_ONLY 1 0.31 0.00 0.38 167 RELAYCOUNTRY_IT 1 0.31 0.00 0.38 168 RELAYCOUNTRY_GB 1 0.31 0.00 0.38 169 TooManyTo_005 1 0.31 0.00 0.38 170 PDS_LITECOIN_ID 1 0.31 0.00 0.38 171 TR_XM_Undi_Recip2 1 0.31 0.00 0.38 172 XM_S_SubURI 1 0.31 0.00 0.38 173 THIS_AD 1 0.31 0.00 0.38 174 XMSubMetaSSxObfu_01 1 0.31 0.00 0.38 175 HK_RANDOM_ENVFROM 1 0.31 0.00 0.38 176 RCVD_IN_IADB_SENDERID 1 0.31 0.00 0.38 177 TRACKER_ID 1 0.31 0.00 0.38 178 XM_B_Investor 1 0.93 3.39 0.38 179 USER_IN_WELCOMELIST 1 0.31 0.00 0.38 180 XMSubMetaSxObfu_01 1 0.62 1.69 0.38 181 TR_XM_DKIM_Undo 1 9.91 52.54 0.38 182 PDS_BTC_ID 1 0.62 1.69 0.38 183 XM_CamelCaseFrm001 1 0.62 1.69 0.38 184 XM_H_Trusted_IP 1 0.31 0.00 0.38 185 TooManyTo_003 1 0.31 0.00 0.38 186 T_XMDrugObfuBody_14 1 2.17 10.17 0.38 187 XMGppyBdWords 1 0.31 0.00 0.38 188 CTE_8BIT_MISMATCH 1 0.31 0.00 0.38 189 SHORT_HELO_AND_INLINE_IMAGE 1 0.31 0.00 0.38 190 TR_XM_COVIDMETA1 1 0.93 3.39 0.38 191 XMSubEmpty 1 0.31 0.00 0.38 192 RCVD_IN_RP_SAFE 1 0.31 0.00 0.38 193 BAYES_05 1 0.31 0.00 0.38 194 KHOP_HELO_FCRDNS 1 0.31 0.00 0.38 195 TR_XM_SpoofStaff3 1 0.31 0.00 0.38 196 XM_ProductURIs 1 0.93 3.39 0.38 197 RCVD_IN_IADB_VOUCHED 1 0.31 0.00 0.38 198 XMDiploma_00 1 0.31 0.00 0.38 199 TooManyTo_004 1 0.31 0.00 0.38 200 XMSolicitRefs_4 1 0.31 0.00 0.38 ----------------------------------------------------------------------