Email: 431 Autolearn: 0 AvgScore: 0.13 AvgScanTime: 3.11 sec Spam: 64 Autolearn: 0 AvgScore: 14.89 AvgScanTime: 3.27 sec Ham: 367 Autolearn: 0 AvgScore: -2.44 AvgScanTime: 3.09 sec Time Spent Running SA: 0.37 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.31 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 60 50.35 93.75 42.78 2 DKIM_SIGNED 54 47.10 84.38 40.60 3 XM_DK_Pass 52 46.17 81.25 40.05 4 T_SCC_BODY_TEXT_LINE 52 81.90 81.25 82.02 5 DKIM_VALID 51 44.78 79.69 38.69 6 XM_B_Unicode 49 34.57 76.56 27.25 7 RELAYCOUNTRY_US 47 45.48 73.44 40.60 8 DCC_CHECK 41 16.01 64.06 7.63 9 XMListUnsubscribeExists 40 27.61 62.50 21.53 10 DKIM_VALID_AU 35 36.19 54.69 32.97 11 XM_B_SpammyWords 32 18.56 50.00 13.08 12 XM_B_Unicode3 31 23.90 48.44 19.62 13 DKIM_VALID_EF 31 23.67 48.44 19.35 14 XM_DK_Undo_02 27 8.58 42.19 2.72 15 XMSubLong 25 13.69 39.06 9.26 16 BAYES_99 23 7.42 35.94 2.45 17 DCC_CHECK_NEGATIVE 23 83.99 35.94 92.37 18 LOC_TINY_FONT_1 22 15.78 34.38 12.53 19 RCVD_IN_MSPIKE_H2 20 10.90 31.25 7.36 20 FVGT_m_MULTI_ODD 20 15.08 31.25 12.26 21 TR_XM_DK_Unsub 20 12.99 31.25 9.81 22 BAYES_999 18 6.03 28.12 2.18 23 BAYES_50 17 64.73 26.56 71.39 24 MIME_HTML_ONLY 17 6.96 26.56 3.54 25 HTML_FONT_LOW_CONTRAST 17 17.17 26.56 15.53 26 UNTRUSTED_Relay 15 4.64 23.44 1.36 27 XM_B_SpammyWords2 15 6.96 23.44 4.09 28 UNPARSEABLE_RELAY 15 7.89 23.44 5.18 29 TR_XM_DKIM_Undo 15 3.71 23.44 0.27 30 BOTNET 15 3.48 23.44 0.00 31 T_KAM_HTML_FONT_INVALID 15 10.90 23.44 8.72 32 XM_Multi_Part_URI 14 9.51 21.88 7.36 33 FSL_BULK_SIG 14 4.41 21.88 1.36 34 XM_B_Unsub 13 4.87 20.31 2.18 35 RELAYCOUNTRY_META 12 4.87 18.75 2.45 36 RCVD_IN_MSPIKE_WL 12 20.42 18.75 20.71 37 TR_DCC_Bayes_99 12 2.78 18.75 0.00 38 TR_XM_BayesUnsub 11 4.18 17.19 1.91 39 TR_XM_UnparsRelay 11 3.48 17.19 1.09 40 BAYES_80 11 4.41 17.19 2.18 41 BOTNET_IPINHOSTNAME 10 3.94 15.62 1.91 42 RCVD_IN_MSPIKE_BL 8 2.09 12.50 0.27 43 SpammyFromTLD_01 8 2.32 12.50 0.54 44 TR_MRelay_UG 8 2.32 12.50 0.54 45 RCVD_IN_MSPIKE_H3 8 11.60 12.50 11.44 46 TR_XM_MSPIKECOMBO 8 2.09 12.50 0.27 47 XM_DK_Undo_01 8 8.12 12.50 7.36 48 XMNumbers 7 4.18 10.94 3.00 49 MAILING_LIST_MULTI 7 1.62 10.94 0.00 50 XM_H_Undi_Recip 7 1.62 10.94 0.00 51 TR_XM_SpammyWords2 7 1.62 10.94 0.00 52 HTML_IMAGE_RATIO_06 7 2.32 10.94 0.82 53 TR_XM_Undi_Recip6 7 1.62 10.94 0.00 54 XM_Body_Dirty_Words 7 5.10 10.94 4.09 55 TR_Sbj_FN_Bdy 6 1.39 9.38 0.00 56 XM_SPF_SoftFail 6 1.62 9.38 0.27 57 MIME_HTML_MOSTLY 6 2.32 9.38 1.09 58 BAYES_60 6 7.66 9.38 7.36 59 BOTNET_NORDNS 6 1.39 9.38 0.00 60 XM_UB50 6 2.32 9.38 1.09 61 MPART_ALT_DIFF 6 2.32 9.38 1.09 62 XM_GoogleGroups 6 1.62 9.38 0.27 63 TR_Symld_Words 5 1.39 7.81 0.27 64 XM_B_Investor 5 1.39 7.81 0.27 65 URI_NOVOWEL 5 1.39 7.81 0.27 66 RCVD_IN_VALIDITY_RPBL 5 1.16 7.81 0.00 67 RCVD_IN_PSBL 4 0.93 6.25 0.00 68 HTML_IMAGE_RATIO_02 4 1.62 6.25 0.82 69 XM_B_SpammyTLD 4 3.02 6.25 2.45 70 TooManyTo_001 4 3.94 6.25 3.54 71 T_TM2_M_HEADER_IN_MSG 4 10.67 6.25 11.44 72 XM_UncommonTLD01 4 3.94 6.25 3.54 73 XM_B_Phish_Phrases 4 1.86 6.25 1.09 74 RCVD_IN_BL_SPAMCOP_NET 4 1.39 6.25 0.54 75 HTML_IMAGE_ONLY_24 4 2.09 6.25 1.36 76 ADVANCE_FEE_3_NEW 3 0.70 4.69 0.00 77 BAYES_95 3 1.86 4.69 1.36 78 TR_XM_Spammywords 3 0.93 4.69 0.27 79 XM_S_SpammyWords 3 0.93 4.69 0.27 80 HTML_IMAGE_RATIO_04 3 3.48 4.69 3.27 81 RCVD_IN_MSPIKE_L5 3 0.70 4.69 0.00 82 XM_UB99 3 0.70 4.69 0.00 83 LOTS_OF_MONEY 3 1.62 4.69 1.09 84 DKIM_INVALID 3 2.32 4.69 1.91 85 XM_B_SpammyWords3 3 1.39 4.69 0.82 86 TR_XM_SpammyRelay 3 1.62 4.69 1.09 87 XMSexyCombo_05 3 0.93 4.69 0.27 88 RCVD_IN_MSPIKE_L4 3 0.93 4.69 0.27 89 TR_XM_DK_Bayes1 3 2.09 4.69 1.63 90 TR_XM_DK_Bayes 3 2.78 4.69 2.45 91 PDS_BTC_ID 3 0.70 4.69 0.00 92 BAYES_00 3 3.94 4.69 3.81 93 XMStockSpam_06 3 0.70 4.69 0.00 94 XM_Combo_Sbj 2 0.93 3.12 0.54 95 TR_XM_DK_SendGrid 2 1.16 3.12 0.82 96 RCVD_IN_MSPIKE_H5 2 5.80 3.12 6.27 97 RCVD_IN_RP_RNBL 2 0.46 3.12 0.00 98 XMBody_17 2 0.46 3.12 0.00 99 TR_XM_MSPIKECOMBO2 2 0.46 3.12 0.00 100 RCVD_IN_IADB_SPF 2 1.16 3.12 0.82 101 XM_ProductURIs 2 0.70 3.12 0.27 102 TR_XM_PhishingBody 2 1.39 3.12 1.09 103 XM_Evil_Numbers_Gen 2 2.32 3.12 2.18 104 RCVD_IN_IADB_OPTIN_GT50 2 1.16 3.12 0.82 105 TR_XM_MaxSPIKE 2 0.46 3.12 0.00 106 RCVD_IN_IADB_DK 2 1.16 3.12 0.82 107 XM_UB80 2 0.46 3.12 0.00 108 XM_SendGrid 2 1.16 3.12 0.82 109 XMSubMetaSx_00 2 1.39 3.12 1.09 110 TR_XM_SpammyWords4 2 0.70 3.12 0.27 111 IMG_ONLY_FM_DOM_INFO 2 0.46 3.12 0.00 112 RELAYCOUNTRY_CN 2 0.70 3.12 0.27 113 XMWinner 2 0.46 3.12 0.00 114 SHOPIFY_IMG_NOT_RCVD_SFY 2 1.39 3.12 1.09 115 RELAYCOUNTRY_FR 2 0.70 3.12 0.27 116 ANY_BOUNCE_MESSAGE 2 48.96 3.12 56.95 117 RCVD_IN_IADB_OPTIN 2 1.16 3.12 0.82 118 RCVD_IN_IADB_VOUCHED 2 1.16 3.12 0.82 119 TR_MetaPhish_Combo_01 2 0.46 3.12 0.00 120 XMBrknScrpt_02 2 0.46 3.12 0.00 121 INVALID_DATE 2 0.46 3.12 0.00 122 RELAYCOUNTRY_AT 2 0.46 3.12 0.00 123 TR_Mismatch_TLD_01 2 0.46 3.12 0.00 124 XMDiploma_00 2 0.46 3.12 0.00 125 XM_UB95 2 0.46 3.12 0.00 126 RCVD_IN_IADB_LISTED 2 1.16 3.12 0.82 127 HDRS_MISSP 2 0.46 3.12 0.00 128 RCVD_IN_IADB_SENDERID 2 1.16 3.12 0.82 129 TR_XM_SpammyWords3 2 0.46 3.12 0.00 130 RCVD_IN_MSPIKE_H4 2 3.02 3.12 3.00 131 HTML_MIME_NO_HTML_TAG 2 0.46 3.12 0.00 132 XMStrtUSub 2 2.55 3.12 2.45 133 RCVD_IN_MSPIKE_L3 2 0.46 3.12 0.00 134 BOUNCE_MESSAGE 2 48.96 3.12 56.95 135 NORDNS_LOW_CONTRAST 2 0.46 3.12 0.00 136 XM_H_Long_From01 2 4.18 3.12 4.36 137 HTML_IMAGE_RATIO_08 2 2.55 3.12 2.45 138 TR_XM_NoHeaderRelay 2 0.46 3.12 0.00 139 EXCUSE_4 2 0.46 3.12 0.00 140 T_XMHurry_00 2 0.70 3.12 0.27 141 FSL_CTYPE_WIN1251 1 0.23 1.56 0.00 142 BAYES_20 1 7.42 1.56 8.45 143 XM_Dr_From 1 0.70 1.56 0.54 144 XMNoVowels 1 1.62 1.56 1.63 145 TR_XM_MaxWHORU 1 0.23 1.56 0.00 146 TM2_M_OBFU_COMMENT 1 0.23 1.56 0.00 147 RELAYCOUNTRY_CA 1 0.23 1.56 0.00 148 FROM_MISSPACED 1 0.23 1.56 0.00 149 KHOP_HELO_FCRDNS 1 0.70 1.56 0.54 150 RELAYCOUNTRY_IN 1 0.23 1.56 0.00 151 TVD_SPACE_RATIO 1 3.48 1.56 3.81 152 T_FILL_THIS_FORM_SHORT 1 0.23 1.56 0.00 153 TR_XM_Undi_Recip14 1 0.23 1.56 0.00 154 TR_XM_Undi_Recip11 1 0.23 1.56 0.00 155 RELAYCOUNTRY_HK 1 0.23 1.56 0.00 156 ADVANCE_FEE_4_NEW_MONEY 1 0.23 1.56 0.00 157 TVD_SPACE_RATIO_MINFP 1 0.23 1.56 0.00 158 RELAYCOUNTRY_HU 1 0.23 1.56 0.00 159 BODY_URI_ONLY 1 0.23 1.56 0.00 160 FORGED_MUA_OUTLOOK 1 0.23 1.56 0.00 161 T_HTML_ATTACH 1 0.23 1.56 0.00 162 TR_LOTS_OF_MONEY1 1 0.23 1.56 0.00 163 XMBdyGiftCard01 1 0.23 1.56 0.00 164 SpammyFromTLD_02 1 0.23 1.56 0.00 165 TR_XM_SpoofStaff2 1 0.23 1.56 0.00 166 GOOG_STO_NOIMG_HTML 1 0.23 1.56 0.00 167 PDS_RDNS_DYNAMIC_FP 1 0.23 1.56 0.00 168 TR_XM_Base64_M1 1 0.93 1.56 0.82 169 XMSpoofStaff2 1 0.70 1.56 0.54 170 NAME_EMAIL_DIFF 1 0.23 1.56 0.00 171 TooManyTo_004 1 0.23 1.56 0.00 172 LONG_JUNK_URI 1 0.23 1.56 0.00 173 FROM_OFFERS 1 0.46 1.56 0.27 174 DOS_OE_TO_MX 1 0.23 1.56 0.00 175 RDNS_DYNAMIC 1 0.46 1.56 0.27 176 XM_B_Phish66 1 1.16 1.56 1.09 177 TVD_PH_BODY_META 1 0.23 1.56 0.00 178 HTML_FONT_SIZE_HUGE 1 0.23 1.56 0.00 179 LONG_JUNK_URI2 1 0.23 1.56 0.00 180 MISSING_HEADERS 1 0.93 1.56 0.82 181 FROM_MISSP_EH_MATCH 1 0.23 1.56 0.00 182 TR_XM_DK_Bayes2 1 1.39 1.56 1.36 183 FORM_FRAUD 1 0.23 1.56 0.00 184 T_REMOTE_IMAGE 1 1.62 1.56 1.63 185 HTML_FONT_FACE_BAD 1 0.23 1.56 0.00 186 XM_Body_Dirty_Words_01 1 0.46 1.56 0.27 187 FROM_EXCESS_BASE64 1 0.93 1.56 0.82 188 SCC_BODY_URI_ONLY 1 29.70 1.56 34.60 189 NSL_RCVD_HELO_USER 1 0.23 1.56 0.00 190 TR_XM_SPAMCOP 1 0.23 1.56 0.00 191 XMSubNoVowel 1 0.23 1.56 0.00 192 TR_Mismatch_TLD_02 1 0.23 1.56 0.00 193 TR_XM_PSC1 1 0.70 1.56 0.54 194 NO_DNS_FOR_FROM 1 0.23 1.56 0.00 195 RELAYCOUNTRY_AU 1 1.62 1.56 1.63 196 HTML_TAG_BALANCE_BODY 1 0.46 1.56 0.27 197 MONEY_FORM 1 0.23 1.56 0.00 198 ALL_TRUSTED 1 48.26 1.56 56.40 199 FAKE_REPLY_A1 1 0.23 1.56 0.00 200 XMReplyNow 1 0.46 1.56 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 339 83.99 35.94 92.37 2 T_SCC_BODY_TEXT_LINE 301 81.90 81.25 82.02 3 BAYES_50 262 64.73 26.56 71.39 4 ANY_BOUNCE_MESSAGE 209 48.96 3.12 56.95 5 BOUNCE_MESSAGE 209 48.96 3.12 56.95 6 ALL_TRUSTED 207 48.26 1.56 56.40 7 HTML_MESSAGE 157 50.35 93.75 42.78 8 RELAYCOUNTRY_US 149 45.48 73.44 40.60 9 DKIM_SIGNED 149 47.10 84.38 40.60 10 XM_DK_Pass 147 46.17 81.25 40.05 11 DKIM_VALID 142 44.78 79.69 38.69 12 SCC_BODY_URI_ONLY 127 29.70 1.56 34.60 13 DKIM_VALID_AU 121 36.19 54.69 32.97 14 XM_B_Unicode 100 34.57 76.56 27.25 15 XMListUnsubscribeExists 79 27.61 62.50 21.53 16 RCVD_IN_MSPIKE_WL 76 20.42 18.75 20.71 17 XM_B_Unicode3 72 23.90 48.44 19.62 18 DKIM_VALID_EF 71 23.67 48.44 19.35 19 HTML_FONT_LOW_CONTRAST 57 17.17 26.56 15.53 20 T_XMDrugObfuBody_08 56 12.99 0.00 15.26 21 XM_B_SpammyWords 48 18.56 50.00 13.08 22 LOC_TINY_FONT_1 46 15.78 34.38 12.53 23 FVGT_m_MULTI_ODD 45 15.08 31.25 12.26 24 RCVD_IN_MSPIKE_H3 42 11.60 12.50 11.44 25 T_TM2_M_HEADER_IN_MSG 42 10.67 6.25 11.44 26 TR_XM_DK_Unsub 36 12.99 31.25 9.81 27 XMSubLong 34 13.69 39.06 9.26 28 T_KAM_HTML_FONT_INVALID 32 10.90 23.44 8.72 29 BAYES_20 31 7.42 1.56 8.45 30 DCC_CHECK 28 16.01 64.06 7.63 31 XM_DK_Undo_01 27 8.12 12.50 7.36 32 XM_Multi_Part_URI 27 9.51 21.88 7.36 33 BAYES_60 27 7.66 9.38 7.36 34 RCVD_IN_MSPIKE_H2 27 10.90 31.25 7.36 35 HTML_IMAGE_ONLY_20 26 6.03 0.00 7.08 36 XM_DKIMWhitelistDomains 25 5.80 0.00 6.81 37 RCVD_IN_MSPIKE_H5 23 5.80 3.12 6.27 38 MIME_HEADER_CTYPE_ONLY 22 5.34 1.56 5.99 39 UNPARSEABLE_RELAY 19 7.89 23.44 5.18 40 XM_H_Long_From01 16 4.18 3.12 4.36 41 RCVD_IN_VALIDITY_SAFE 15 3.71 1.56 4.09 42 XM_Body_Dirty_Words 15 5.10 10.94 4.09 43 XM_B_SpammyWords2 15 6.96 23.44 4.09 44 BAYES_00 14 3.94 4.69 3.81 45 TVD_SPACE_RATIO 14 3.48 1.56 3.81 46 LotsOfNums_01 13 3.25 1.56 3.54 47 TooManyTo_001 13 3.94 6.25 3.54 48 XM_UncommonTLD01 13 3.94 6.25 3.54 49 MIME_HTML_ONLY 13 6.96 26.56 3.54 50 USER_IN_DEF_DKIM_WL 12 2.78 0.00 3.27 51 HTML_IMAGE_RATIO_04 12 3.48 4.69 3.27 52 RCVD_IN_MSPIKE_H4 11 3.02 3.12 3.00 53 T_TooManySym_01 11 2.78 1.56 3.00 54 XMNumbers 11 4.18 10.94 3.00 55 IN_ZIMBRA_NJ_WHITELIST 11 2.55 0.00 3.00 56 XM_DK_Undo_02 10 8.58 42.19 2.72 57 RCVD_IN_VALIDITY_CERTIFIED 10 2.32 0.00 2.72 58 INVALID_MSGID 10 2.32 0.00 2.72 59 BAYES_40 9 2.09 0.00 2.45 60 TR_XM_DK_Bayes 9 2.78 4.69 2.45 61 XMStrtUSub 9 2.55 3.12 2.45 62 HTML_IMAGE_RATIO_08 9 2.55 3.12 2.45 63 RELAYCOUNTRY_META 9 4.87 18.75 2.45 64 BAYES_99 9 7.42 35.94 2.45 65 XM_B_SpammyTLD 9 3.02 6.25 2.45 66 BAYES_80 8 4.41 17.19 2.18 67 TO_MALFORMED 8 1.86 0.00 2.18 68 XM_B_Unsub 8 4.87 20.31 2.18 69 BAYES_999 8 6.03 28.12 2.18 70 XM_Evil_Numbers_Gen 8 2.32 3.12 2.18 71 BOTNET_IPINHOSTNAME 7 3.94 15.62 1.91 72 DKIM_INVALID 7 2.32 4.69 1.91 73 TooManyTo_002 7 1.86 1.56 1.91 74 TR_XM_BayesUnsub 7 4.18 17.19 1.91 75 FROM_GOV_DKIM_AU 7 1.62 0.00 1.91 76 TR_XM_DK_Bayes1 6 2.09 4.69 1.63 77 XMNoVowels 6 1.62 1.56 1.63 78 XM_WL_UtahGOV 6 1.39 0.00 1.63 79 T_TooManySym_02 6 1.39 0.00 1.63 80 RELAYCOUNTRY_AU 6 1.62 1.56 1.63 81 T_REMOTE_IMAGE 6 1.62 1.56 1.63 82 USER_IN_WELCOMELIST 5 1.16 0.00 1.36 83 USER_IN_WHITELIST 5 1.16 0.00 1.36 84 TooManyTo_003 5 1.39 1.56 1.36 85 HTML_IMAGE_ONLY_24 5 2.09 6.25 1.36 86 MSGID_NOFQDN1 5 1.16 0.00 1.36 87 MIME_QP_LONG_LINE 5 1.16 0.00 1.36 88 BAYES_95 5 1.86 4.69 1.36 89 UNTRUSTED_Relay 5 4.64 23.44 1.36 90 FSL_BULK_SIG 5 4.41 21.88 1.36 91 IN_HORDE_ADDRESS_BOOK 5 1.16 0.00 1.36 92 XM_Ancestry_Forge 5 1.16 0.00 1.36 93 TR_XM_DK_Bayes2 5 1.39 1.56 1.36 94 XMSubMetaSx_00 4 1.39 3.12 1.09 95 LOTS_OF_MONEY 4 1.62 4.69 1.09 96 SHOPIFY_IMG_NOT_RCVD_SFY 4 1.39 3.12 1.09 97 XM_B_Phish_Phrases 4 1.86 6.25 1.09 98 TR_XM_SpammyRelay 4 1.62 4.69 1.09 99 TR_XM_UnparsRelay 4 3.48 17.19 1.09 100 XM_UB50 4 2.32 9.38 1.09 101 XM_ZIP 4 0.93 0.00 1.09 102 MPART_ALT_DIFF 4 2.32 9.38 1.09 103 XM_PDF 4 0.93 0.00 1.09 104 XMSubMetaI_00 4 0.93 0.00 1.09 105 XM_B_Phish66 4 1.16 1.56 1.09 106 TR_XM_PhishingBody 4 1.39 3.12 1.09 107 XM_B_REG_HTML 4 0.93 0.00 1.09 108 MIME_HTML_MOSTLY 4 2.32 9.38 1.09 109 XMLngstWrd_00 3 0.70 0.00 0.82 110 XMGappySubj_01 3 0.70 0.00 0.82 111 TM2_M_URI_OPT_OUT 3 0.70 0.00 0.82 112 RCVD_IN_RP_SAFE 3 0.70 0.00 0.82 113 XMSolicitRefs_0 3 0.70 0.00 0.82 114 RCVD_IN_IADB_LISTED 3 1.16 3.12 0.82 115 XM_B_SpammyWords3 3 1.39 4.69 0.82 116 RCVD_IN_IADB_OPTIN 3 1.16 3.12 0.82 117 RCVD_IN_IADB_VOUCHED 3 1.16 3.12 0.82 118 XM_CamelCaseFrm001 3 0.70 0.00 0.82 119 RCVD_IN_RP_CERTIFIED 3 0.70 0.00 0.82 120 RCVD_IN_IADB_SENDERID 3 1.16 3.12 0.82 121 HK_RANDOM_FROM 3 0.70 0.00 0.82 122 TR_XM_Base64_M1 3 0.93 1.56 0.82 123 TR_XM_DK_SendGrid 3 1.16 3.12 0.82 124 RCVD_IN_IADB_SPF 3 1.16 3.12 0.82 125 MISSING_HEADERS 3 0.93 1.56 0.82 126 HK_RANDOM_ENVFROM 3 0.70 0.00 0.82 127 FROM_EXCESS_BASE64 3 0.93 1.56 0.82 128 HTML_IMAGE_RATIO_02 3 1.62 6.25 0.82 129 RCVD_IN_IADB_DK 3 1.16 3.12 0.82 130 XM_SendGrid 3 1.16 3.12 0.82 131 RCVD_IN_IADB_OPTIN_GT50 3 1.16 3.12 0.82 132 HTML_IMAGE_RATIO_06 3 2.32 10.94 0.82 133 HELO_NO_DOMAIN 2 0.46 0.00 0.54 134 XM_ZohoDesk1 2 0.46 0.00 0.54 135 UPGRADE_MAILBOX 2 0.46 0.00 0.54 136 TR_XM_SpoofStaff 2 0.70 1.56 0.54 137 HELO_NODOT 2 0.46 0.00 0.54 138 XM_Body_Obfu01 2 0.46 0.00 0.54 139 TM2_M_VERY_LONG_WORD 2 0.70 1.56 0.54 140 TR_XM_Base64_L1 2 0.46 0.00 0.54 141 XMBody_95 2 0.46 0.00 0.54 142 WEIRD_PORT 2 0.46 0.00 0.54 143 RCVD_IN_BL_SPAMCOP_NET 2 1.39 6.25 0.54 144 XM_DIRTYINTL 2 0.46 0.00 0.54 145 TR_XM_Base64_C 2 0.46 0.00 0.54 146 XM_H_SpoofStaff4 2 0.70 1.56 0.54 147 SHORT_HELO_AND_INLINE_IMAGE 2 0.46 0.00 0.54 148 TR_XM_RelayPhish 2 0.70 1.56 0.54 149 XMSubPhish11 2 0.46 0.00 0.54 150 TR_XM_SpoofPhishAttach 2 0.46 0.00 0.54 151 XM_Combo_Sbj 2 0.93 3.12 0.54 152 SpammyFromTLD_01 2 2.32 12.50 0.54 153 BAYES_05 2 0.46 0.00 0.54 154 XM_Dr_From 2 0.70 1.56 0.54 155 MSGID_FROM_MTA_HEADER 2 0.46 0.00 0.54 156 KHOP_HELO_FCRDNS 2 0.70 1.56 0.54 157 SUBJ_ALL_CAPS 2 0.46 0.00 0.54 158 TR_MRelay_UG 2 2.32 12.50 0.54 159 XMSpoofStaff2 2 0.70 1.56 0.54 160 TR_XM_SB_Phish 2 0.46 0.00 0.54 161 TR_XM_PSC1 2 0.70 1.56 0.54 162 FROM_LOCAL_HEX 2 0.46 0.00 0.54 163 RELAYCOUNTRY_FR 1 0.70 3.12 0.27 164 NUMERIC_HTTP_ADDR 1 0.46 1.56 0.27 165 XM_H_CodeIgniter 1 0.23 0.00 0.27 166 T_TooManySym_03 1 0.23 0.00 0.27 167 XM_B_SEO 1 0.23 0.00 0.27 168 RELAYCOUNTRY_DE 1 0.23 0.00 0.27 169 MIME_BASE64_TEXT 1 0.23 0.00 0.27 170 HTML_TAG_BALANCE_BODY 1 0.46 1.56 0.27 171 URI_TRY_3LD 1 0.23 0.00 0.27 172 SUBJ_YOUR_FAMILY 1 0.23 0.00 0.27 173 XMReplyNow 1 0.46 1.56 0.27 174 TR_XM_SpammyWords4 1 0.70 3.12 0.27 175 TR_XM_MSPIKECOMBO 1 2.09 12.50 0.27 176 RELAYCOUNTRY_CN 1 0.70 3.12 0.27 177 RCVD_IN_MSPIKE_L4 1 0.93 4.69 0.27 178 T_DOS_OUTLOOK_TO_MX_IMAGE 1 0.23 0.00 0.27 179 XMSexyCombo_05 1 0.93 4.69 0.27 180 XMSubject_78 1 0.23 0.00 0.27 181 OOOBOUNCE_MESSAGE 1 0.23 0.00 0.27 182 URI_NOVOWEL 1 1.39 7.81 0.27 183 MIXED_ES 1 0.23 0.00 0.27 184 RELAYCOUNTRY_PL 1 0.46 1.56 0.27 185 XMGappySubj_02 1 0.23 0.00 0.27 186 TR_XM_SpammyWords5 1 0.23 0.00 0.27 187 DRUGS_ERECTILE 1 0.23 0.00 0.27 188 XMDateMe_00 1 0.23 0.00 0.27 189 XMLngstWrd_04 1 0.23 0.00 0.27 190 XMCapTrack 1 0.46 1.56 0.27 191 XM_H_Long_From02 1 0.23 0.00 0.27 192 AC_HTML_NONSENSE_TAGS 1 0.23 0.00 0.27 193 HTML_IMAGE_ONLY_08 1 0.23 0.00 0.27 194 T_XMHurry_00 1 0.70 3.12 0.27 195 XM_B_Unsub2 1 0.23 0.00 0.27 196 XM_GoogleGroups 1 1.62 9.38 0.27 197 TVD_PH_BODY_ACCOUNTS_PRE 1 0.23 0.00 0.27 198 XMLngstWrd_03 1 0.23 0.00 0.27 199 HTML_EXTRA_CLOSE 1 0.23 0.00 0.27 200 FROM_STARTS_WITH_NUMS 1 0.23 0.00 0.27 ----------------------------------------------------------------------