Email: 421 Autolearn: 0 AvgScore: 0.79 AvgScanTime: 1.05 sec Spam: 54 Autolearn: 0 AvgScore: 14.69 AvgScanTime: 1.64 sec Ham: 367 Autolearn: 0 AvgScore: -1.25 AvgScanTime: 0.96 sec Time Spent Running SA: 0.12 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 52 44.66 96.30 37.06 2 DKIM_SIGNED 46 42.99 85.19 36.78 3 DKIM_VALID 43 41.33 79.63 35.69 4 XM_DK_Pass 43 41.81 79.63 36.24 5 DKIM_VALID_AU 41 34.44 75.93 28.34 6 T_SCC_BODY_TEXT_LINE 40 83.61 74.07 85.01 7 RELAYCOUNTRY_US 39 40.38 72.22 35.69 8 XM_B_Unicode 36 30.17 66.67 24.80 9 XMListUnsubscribeExists 32 19.48 59.26 13.62 10 DCC_CHECK 30 28.98 55.56 25.07 11 DKIM_VALID_EF 29 23.75 53.70 19.35 12 LOC_TINY_FONT_1 26 11.64 48.15 6.27 13 DCC_CHECK_NEGATIVE 24 71.02 44.44 74.93 14 XM_B_SpammyWords 24 17.58 44.44 13.62 15 RELAYCOUNTRY_META 21 9.74 38.89 5.45 16 XM_B_Unicode3 20 16.86 37.04 13.90 17 RCVD_IN_MSPIKE_H2 20 12.83 37.04 9.26 18 HTML_FONT_LOW_CONTRAST 19 14.01 35.19 10.90 19 XM_DK_Undo_02 19 6.65 35.19 2.45 20 XMSubLong 18 14.96 33.33 12.26 21 TR_XM_DK_Unsub 17 11.16 31.48 8.17 22 BAYES_99 17 5.46 31.48 1.63 23 BAYES_50 17 50.83 31.48 53.68 24 FVGT_m_MULTI_ODD 16 11.16 29.63 8.45 25 MIME_HTML_MOSTLY 14 5.23 25.93 2.18 26 UNTRUSTED_Relay 14 5.23 25.93 2.18 27 TR_XM_BayesUnsub 13 5.70 24.07 3.00 28 XM_B_SpammyWords2 13 6.89 24.07 4.36 29 XM_B_Unsub 13 6.65 24.07 4.09 30 MIME_HTML_ONLY 10 9.26 18.52 7.90 31 TR_XM_SpammyRelay 10 4.04 18.52 1.91 32 BAYES_999 10 3.09 18.52 0.82 33 BAYES_60 9 8.79 16.67 7.63 34 URI_NOVOWEL 9 2.14 16.67 0.00 35 XM_Multi_Part_URI 9 5.46 16.67 3.81 36 SpammyFromTLD_01 9 2.61 16.67 0.54 37 TR_XM_SpammyWords4 8 2.85 14.81 1.09 38 HTML_IMAGE_RATIO_06 8 2.61 14.81 0.82 39 LOTS_OF_MONEY 8 3.09 14.81 1.36 40 XM_DK_Undo_01 8 8.31 14.81 7.36 41 XM_Body_Dirty_Words 7 3.56 12.96 2.18 42 MPART_ALT_DIFF 7 2.61 12.96 1.09 43 TR_DCC_Bayes_99 7 1.90 12.96 0.27 44 RCVD_IN_MSPIKE_WL 7 18.53 12.96 19.35 45 XM_B_Investor 7 1.90 12.96 0.27 46 XM_H_Long_From01 7 2.61 12.96 1.09 47 HTML_IMAGE_RATIO_02 7 3.56 12.96 2.18 48 UNPARSEABLE_RELAY 7 5.94 12.96 4.90 49 MAILING_LIST_MULTI 6 3.33 11.11 2.18 50 T_KAM_HTML_FONT_INVALID 6 5.70 11.11 4.90 51 BOTNET_IPINHOSTNAME 6 2.38 11.11 1.09 52 XM_SPF_SoftFail 6 1.90 11.11 0.54 53 XM_UB50 6 2.38 11.11 1.09 54 XM_UncommonTLD01 6 5.70 11.11 4.90 55 BOTNET 6 1.90 11.11 0.54 56 T_XMDrugObfuBody_14 6 1.90 11.11 0.54 57 RELAYCOUNTRY_IN 6 1.43 11.11 0.00 58 XM_GoogleGroups 6 2.61 11.11 1.36 59 TM2_M_URI_OPT_OUT 6 1.66 11.11 0.27 60 RELAYCOUNTRY_IE 6 2.38 11.11 1.09 61 BAYES_95 5 1.90 9.26 0.82 62 RCVD_IN_BL_SPAMCOP_NET 5 1.19 9.26 0.00 63 XM_Body_Dirty_Words_01 5 1.19 9.26 0.00 64 BAYES_80 5 4.04 9.26 3.27 65 FSL_BULK_SIG 5 17.81 9.26 19.07 66 TR_XM_DKIM_Undo 5 1.43 9.26 0.27 67 TR_XM_UnparsRelay 5 1.90 9.26 0.82 68 T_TM2_M_HEADER_IN_MSG 4 7.84 7.41 7.90 69 XM_B_SpammyWords3 4 1.19 7.41 0.27 70 RCVD_IN_MSPIKE_H5 4 6.65 7.41 6.54 71 RELAYCOUNTRY_PK 4 1.90 7.41 1.09 72 URIBL_DBL_SPAM 4 0.95 7.41 0.00 73 TR_XM_SPAMCOP 4 0.95 7.41 0.00 74 XMHTML_After_End 4 1.43 7.41 0.54 75 RELAYCOUNTRY_FR 4 1.43 7.41 0.54 76 XMSexyCombo_05 4 1.19 7.41 0.27 77 XM_DIRTYINTL 3 1.19 5.56 0.54 78 TR_XM_SpammyWords5 3 0.71 5.56 0.00 79 XM_UB99 3 0.71 5.56 0.00 80 XM_B_Phish_Phrases 3 1.19 5.56 0.54 81 TooManyTo_001 3 2.61 5.56 2.18 82 HTML_IMAGE_RATIO_04 3 2.85 5.56 2.45 83 XMSubNoVowel 3 0.95 5.56 0.27 84 XMStrtUSub 3 3.56 5.56 3.27 85 NO_DNS_FOR_FROM 3 0.71 5.56 0.00 86 XM_B_Unsub2 3 0.71 5.56 0.00 87 XM_H_Undi_Recip 3 1.19 5.56 0.54 88 XM_ProductURIs 3 1.19 5.56 0.54 89 XM_UB60 3 0.71 5.56 0.00 90 DKIM_INVALID 3 1.66 5.56 1.09 91 T_REMOTE_IMAGE 3 3.33 5.56 3.00 92 TR_XM_MaxWHORU 3 0.71 5.56 0.00 93 XMSubLongNoVowel 2 0.48 3.70 0.00 94 XM_S_SpammyWords 2 0.48 3.70 0.00 95 XMSubMetaSx_00 2 1.90 3.70 1.63 96 RELAYCOUNTRY_UA 2 0.48 3.70 0.00 97 XMRcvdHeader_05 2 0.48 3.70 0.00 98 XM_CamelCaseFrm001 2 1.19 3.70 0.82 99 URI_PHP_REDIR 2 0.48 3.70 0.00 100 RDNS_DYNAMIC 2 0.95 3.70 0.54 101 FROM_GOV_SPOOF 2 0.71 3.70 0.27 102 XM_B_SexDrugs1 2 0.48 3.70 0.00 103 XMPhish11 2 0.48 3.70 0.00 104 TR_XM_Undi_Recip6 2 0.48 3.70 0.00 105 RELAYCOUNTRY_BG 2 0.48 3.70 0.00 106 HTTP_EXCESSIVE_ESCAPES 2 0.48 3.70 0.00 107 LONG_JUNK_URI 2 0.48 3.70 0.00 108 XM_Body_Dirty_Words_02 2 0.48 3.70 0.00 109 NORDNS_LOW_CONTRAST 2 0.48 3.70 0.00 110 TR_Mismatch_TLD_02 2 0.48 3.70 0.00 111 XMMoneyMeta_00 2 0.48 3.70 0.00 112 TR_XM_Spammywords 2 0.48 3.70 0.00 113 XM_UB999 2 0.48 3.70 0.00 114 DEAR_SOMETHING 2 0.48 3.70 0.00 115 RCVD_IN_PSBL 2 0.48 3.70 0.00 116 RCVD_IN_MSPIKE_H3 2 8.08 3.70 8.72 117 XMNoVowels 2 1.19 3.70 0.82 118 TR_Sbj_FN_Bdy 2 0.48 3.70 0.00 119 XMStockSpam_06 2 0.71 3.70 0.27 120 XM_Combo_Fr 2 0.48 3.70 0.00 121 XMBrknScrpt_02 2 0.71 3.70 0.27 122 SpammyFromTLD_02 2 0.95 3.70 0.54 123 XMSubject_48 2 0.48 3.70 0.00 124 TR_XM_PhishingBody 2 1.90 3.70 1.63 125 SCC_BODY_URI_ONLY 2 22.09 3.70 24.80 126 TVD_RCVD_SPACE_BRACKET 2 0.48 3.70 0.00 127 TR_Symld_Words 2 0.71 3.70 0.27 128 TR_MRelay_UG 2 0.48 3.70 0.00 129 DKIM_ADSP_NXDOMAIN 2 0.48 3.70 0.00 130 XM_H_Long_From02 2 0.71 3.70 0.27 131 HTML_IMAGE_ONLY_24 2 0.71 3.70 0.27 132 PDS_OTHER_BAD_TLD 2 0.71 3.70 0.27 133 XMNumbers 1 2.61 1.85 2.72 134 XMSpoofStaff2 1 0.71 1.85 0.54 135 T_XMDrugObfuBody_08 1 11.64 1.85 13.08 136 RELAYCOUNTRY_PL 1 0.24 1.85 0.00 137 XMGenDplmaNmb 1 0.48 1.85 0.27 138 TR_UG_Sexy_Spam 1 0.24 1.85 0.00 139 PDS_TO_EQ_FROM_NAME 1 0.24 1.85 0.00 140 HTML_COMMENT_SAVED_URL 1 0.24 1.85 0.00 141 XM_UB95 1 0.24 1.85 0.00 142 DOS_OE_TO_MX 1 0.24 1.85 0.00 143 PDS_FROM_2_EMAILS 1 0.24 1.85 0.00 144 FROM_EXCESS_BASE64 1 0.24 1.85 0.00 145 T_TooManySym_02 1 2.61 1.85 2.72 146 RCVD_IN_MSPIKE_H4 1 3.80 1.85 4.09 147 TO_EQ_FM_DOM_HTML_ONLY 1 0.24 1.85 0.00 148 LONG_JUNK_URI2 1 0.24 1.85 0.00 149 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.48 1.85 0.27 150 MIMEOLE_DIRECT_TO_MX 1 0.24 1.85 0.00 151 XM_Combo_Sbj 1 0.48 1.85 0.27 152 TVD_RCVD_IP 1 0.71 1.85 0.54 153 HDRS_MISSP 1 0.24 1.85 0.00 154 HDR_ORDER_FTSDMCXX_NORDNS 1 0.24 1.85 0.00 155 T_TooManySym_01 1 3.33 1.85 3.54 156 XM_UB80 1 0.24 1.85 0.00 157 TM2_M_VERY_LONG_WORD 1 1.66 1.85 1.63 158 TVD_SPACE_RATIO 1 3.56 1.85 3.81 159 TooManyTo_002 1 0.95 1.85 0.82 160 XMSubEmpty 1 0.24 1.85 0.00 161 TR_XM_SEO4 1 0.24 1.85 0.00 162 TR_XM_SpammyWords2 1 0.48 1.85 0.27 163 XM_B_SEO 1 0.24 1.85 0.00 164 XM_DKIMWhitelistDomains 1 6.18 1.85 6.81 165 XMSubMetaSxObfu_02 1 0.48 1.85 0.27 166 HTML_IMAGE_RATIO_08 1 0.71 1.85 0.54 167 FROM_2_EMAILS_SHORT 1 0.24 1.85 0.00 168 KHOP_HELO_FCRDNS 1 1.43 1.85 1.36 169 TR_XM_PSC1 1 0.71 1.85 0.54 170 TR_XM_SpoofStaff 1 0.71 1.85 0.54 171 RELAYCOUNTRY_NL 1 0.48 1.85 0.27 172 XM_B_SpammyWords4 1 0.24 1.85 0.00 173 T_XMHurry_00 1 0.24 1.85 0.00 174 XMDiploma_00 1 0.48 1.85 0.27 175 BAYES_00 1 4.04 1.85 4.36 176 DATE_IN_FUTURE_03_06 1 0.24 1.85 0.00 177 XPRIO 1 0.24 1.85 0.00 178 FAKE_REPLY_C 1 0.24 1.85 0.00 179 TM2_M_OBFU_COMMENT 1 0.24 1.85 0.00 180 XMSubPhish11 1 1.90 1.85 1.91 181 GOOG_STO_NOIMG_HTML 1 0.24 1.85 0.00 182 T_FILL_THIS_FORM_SHORT 1 0.24 1.85 0.00 183 TR_XM_DK_Bayes 1 3.33 1.85 3.54 184 XMBSHREFv2 1 0.71 1.85 0.54 185 TR_XM_DK_Bayes2 1 2.61 1.85 2.72 186 XM_H_SpoofStaff4 1 0.71 1.85 0.54 187 FROM_MULTI_NORDNS 1 0.24 1.85 0.00 188 TR_XM_Undi_Recip14 1 0.48 1.85 0.27 189 XM_B_SpammyTLD 1 1.19 1.85 1.09 190 BODY_URI_ONLY 1 0.24 1.85 0.00 191 XM_H_NotFromAmazon 1 0.24 1.85 0.00 192 XM_E_Blogspot 1 0.24 1.85 0.00 193 PLING_QUERY 1 0.24 1.85 0.00 194 TR_XM_DK_Bayes1 1 3.33 1.85 3.54 195 RELAYCOUNTRY_AU 1 1.19 1.85 1.09 196 TooManyTo_004 1 0.24 1.85 0.00 197 XMBody_78 1 0.24 1.85 0.00 198 LONGLN_LOW_CONTRAST 1 0.24 1.85 0.00 199 URI_ONLY_MSGID_MALF 1 0.24 1.85 0.00 200 RCVD_IN_VALIDITY_RPBL 1 0.24 1.85 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 312 83.61 74.07 85.01 2 DCC_CHECK_NEGATIVE 275 71.02 44.44 74.93 3 ANY_BOUNCE_MESSAGE 224 53.21 0.00 61.04 4 BOUNCE_MESSAGE 224 53.21 0.00 61.04 5 ALL_TRUSTED 224 53.21 0.00 61.04 6 BAYES_50 197 50.83 31.48 53.68 7 HTML_MESSAGE 136 44.66 96.30 37.06 8 DKIM_SIGNED 135 42.99 85.19 36.78 9 XM_DK_Pass 133 41.81 79.63 36.24 10 RELAYCOUNTRY_US 131 40.38 72.22 35.69 11 DKIM_VALID 131 41.33 79.63 35.69 12 DKIM_VALID_AU 104 34.44 75.93 28.34 13 DCC_CHECK 92 28.98 55.56 25.07 14 SCC_BODY_URI_ONLY 91 22.09 3.70 24.80 15 XM_B_Unicode 91 30.17 66.67 24.80 16 RCVD_IN_MSPIKE_WL 71 18.53 12.96 19.35 17 DKIM_VALID_EF 71 23.75 53.70 19.35 18 FSL_BULK_SIG 70 17.81 9.26 19.07 19 BAYES_05 60 14.25 0.00 16.35 20 XM_B_Unicode3 51 16.86 37.04 13.90 21 XM_B_SpammyWords 50 17.58 44.44 13.62 22 XMListUnsubscribeExists 50 19.48 59.26 13.62 23 T_XMDrugObfuBody_08 48 11.64 1.85 13.08 24 XMSubLong 45 14.96 33.33 12.26 25 BAYES_20 41 9.74 0.00 11.17 26 HTML_FONT_LOW_CONTRAST 40 14.01 35.19 10.90 27 RCVD_IN_MSPIKE_H2 34 12.83 37.04 9.26 28 RCVD_IN_MSPIKE_H3 32 8.08 3.70 8.72 29 FVGT_m_MULTI_ODD 31 11.16 29.63 8.45 30 TR_XM_DK_Unsub 30 11.16 31.48 8.17 31 MIME_HTML_ONLY 29 9.26 18.52 7.90 32 T_TM2_M_HEADER_IN_MSG 29 7.84 7.41 7.90 33 BAYES_60 28 8.79 16.67 7.63 34 XM_DK_Undo_01 27 8.31 14.81 7.36 35 XM_DKIMWhitelistDomains 25 6.18 1.85 6.81 36 RCVD_IN_MSPIKE_H5 24 6.65 7.41 6.54 37 LOC_TINY_FONT_1 23 11.64 48.15 6.27 38 HTML_IMAGE_ONLY_20 22 5.23 0.00 5.99 39 XMLngstWrd_00 21 4.99 0.00 5.72 40 MIME_HEADER_CTYPE_ONLY 21 4.99 0.00 5.72 41 RELAYCOUNTRY_META 20 9.74 38.89 5.45 42 UNPARSEABLE_RELAY 18 5.94 12.96 4.90 43 T_KAM_HTML_FONT_INVALID 18 5.70 11.11 4.90 44 XM_UncommonTLD01 18 5.70 11.11 4.90 45 BAYES_00 16 4.04 1.85 4.36 46 XM_B_SpammyWords2 16 6.89 24.07 4.36 47 XM_B_Unsub 15 6.65 24.07 4.09 48 RCVD_IN_MSPIKE_H4 15 3.80 1.85 4.09 49 XM_Multi_Part_URI 14 5.46 16.67 3.81 50 TVD_SPACE_RATIO 14 3.56 1.85 3.81 51 TR_XM_DK_Bayes 13 3.33 1.85 3.54 52 TR_XM_DK_Bayes1 13 3.33 1.85 3.54 53 T_TooManySym_01 13 3.33 1.85 3.54 54 BAYES_80 12 4.04 9.26 3.27 55 IN_ZIMBRA_NJ_WHITELIST 12 2.85 0.00 3.27 56 XMStrtUSub 12 3.56 5.56 3.27 57 T_REMOTE_IMAGE 11 3.33 5.56 3.00 58 TR_XM_BayesUnsub 11 5.70 24.07 3.00 59 TR_XM_DK_Bayes2 10 2.61 1.85 2.72 60 XMNumbers 10 2.61 1.85 2.72 61 T_TooManySym_02 10 2.61 1.85 2.72 62 USER_IN_DEF_DKIM_WL 9 2.14 0.00 2.45 63 TO_MALFORMED 9 2.14 0.00 2.45 64 XM_DK_Undo_02 9 6.65 35.19 2.45 65 HTML_IMAGE_RATIO_04 9 2.85 5.56 2.45 66 HTML_IMAGE_RATIO_02 8 3.56 12.96 2.18 67 XM_Evil_Numbers_Gen 8 1.90 0.00 2.18 68 MAILING_LIST_MULTI 8 3.33 11.11 2.18 69 XM_Body_Dirty_Words 8 3.56 12.96 2.18 70 MIME_HTML_MOSTLY 8 5.23 25.93 2.18 71 TooManyTo_001 8 2.61 5.56 2.18 72 UNTRUSTED_Relay 8 5.23 25.93 2.18 73 XMSubPhish11 7 1.90 1.85 1.91 74 TR_XM_SB_Phish 7 1.90 1.85 1.91 75 TR_XM_SpammyRelay 7 4.04 18.52 1.91 76 INVALID_MSGID 7 1.66 0.00 1.91 77 TR_XM_PhishingBody 6 1.90 3.70 1.63 78 BAYES_99 6 5.46 31.48 1.63 79 MIME_QP_LONG_LINE 6 1.66 1.85 1.63 80 HTML_MIME_NO_HTML_TAG 6 1.43 0.00 1.63 81 XMSubMetaSx_00 6 1.90 3.70 1.63 82 TM2_M_VERY_LONG_WORD 6 1.66 1.85 1.63 83 XM_SendGrid 5 1.19 0.00 1.36 84 LotsOfNums_01 5 1.19 0.00 1.36 85 LOTS_OF_MONEY 5 3.09 14.81 1.36 86 XM_GoogleGroups 5 2.61 11.11 1.36 87 XM_B_Phish66 5 1.19 0.00 1.36 88 XM_ZIP 5 1.19 0.00 1.36 89 HTML_TAG_BALANCE_BODY 5 1.19 0.00 1.36 90 RCVD_IN_VALIDITY_SAFE 5 1.19 0.00 1.36 91 KHOP_HELO_FCRDNS 5 1.43 1.85 1.36 92 XM_H_Long_From01 4 2.61 12.96 1.09 93 XM_PDF 4 0.95 0.00 1.09 94 XM_B_SpammyTLD 4 1.19 1.85 1.09 95 RELAYCOUNTRY_AU 4 1.19 1.85 1.09 96 DKIM_INVALID 4 1.66 5.56 1.09 97 RELAYCOUNTRY_IE 4 2.38 11.11 1.09 98 BAYES_40 4 0.95 0.00 1.09 99 BOTNET_IPINHOSTNAME 4 2.38 11.11 1.09 100 RELAYCOUNTRY_AT 4 0.95 0.00 1.09 101 MPART_ALT_DIFF 4 2.61 12.96 1.09 102 USER_IN_WHITELIST 4 0.95 0.00 1.09 103 XM_UB50 4 2.38 11.11 1.09 104 TR_XM_SpammyWords4 4 2.85 14.81 1.09 105 USER_IN_WELCOMELIST 4 0.95 0.00 1.09 106 XM_H_PHPMailer 4 0.95 0.00 1.09 107 RELAYCOUNTRY_PK 4 1.90 7.41 1.09 108 XMGappySubj_01 4 0.95 0.00 1.09 109 HTML_IMAGE_ONLY_12 3 0.71 0.00 0.82 110 RCVD_IN_IADB_LISTED 3 0.71 0.00 0.82 111 XMNoVowels 3 1.19 3.70 0.82 112 HTML_IMAGE_RATIO_06 3 2.61 14.81 0.82 113 RCVD_IN_IADB_VOUCHED 3 0.71 0.00 0.82 114 TR_LOTS_OF_MONEY2 3 0.71 0.00 0.82 115 MSGID_FROM_MTA_HEADER 3 0.71 0.00 0.82 116 TR_XM_UnparsRelay 3 1.90 9.26 0.82 117 BAYES_999 3 3.09 18.52 0.82 118 XM_CamelCaseFrm001 3 1.19 3.70 0.82 119 BAYES_95 3 1.90 9.26 0.82 120 MSGID_NOFQDN1 3 0.71 0.00 0.82 121 RCVD_IN_IADB_SPF 3 0.71 0.00 0.82 122 TooManyTo_002 3 0.95 1.85 0.82 123 RCVD_IN_VALIDITY_CERTIFIED 3 0.71 0.00 0.82 124 T_MONEY_PERCENT 3 0.71 0.00 0.82 125 TM2_M_A_HREF_HREF 3 0.71 0.00 0.82 126 BOTNET 2 1.90 11.11 0.54 127 TR_XM_PSC1 2 0.71 1.85 0.54 128 TR_XM_SpoofStaff 2 0.71 1.85 0.54 129 T_XMDrugObfuBody_14 2 1.90 11.11 0.54 130 XM_H_AmazonPhish 2 0.48 0.00 0.54 131 XM_ProductURIs 2 1.19 5.56 0.54 132 SpammyFromTLD_02 2 0.95 3.70 0.54 133 XM_H_Undi_Recip 2 1.19 5.56 0.54 134 XMBSHREFv2 2 0.71 1.85 0.54 135 TR_MetaPhish_Combo_01b 2 0.48 0.00 0.54 136 XM_H_SpoofStaff4 2 0.71 1.85 0.54 137 RCVD_IN_IADB_SENDERID 2 0.48 0.00 0.54 138 RELAYCOUNTRY_DE 2 0.48 0.00 0.54 139 XM_Ancestry_Forge 2 0.48 0.00 0.54 140 HTML_FONT_SIZE_HUGE 2 0.48 0.00 0.54 141 RCVD_IN_MSPIKE_L3 2 0.48 0.00 0.54 142 SpammyFromTLD_01 2 2.61 16.67 0.54 143 TR_XM_DK_SendGrid 2 0.48 0.00 0.54 144 XM_ZohoDesk1 2 0.48 0.00 0.54 145 XMHTML_After_End 2 1.43 7.41 0.54 146 RELAYCOUNTRY_CA 2 0.48 0.00 0.54 147 RCVD_IN_IADB_OPTIN 2 0.48 0.00 0.54 148 TR_Mismatch_TLD_01 2 0.48 0.00 0.54 149 RELAYCOUNTRY_FR 2 1.43 7.41 0.54 150 IN_HORDE_ADDRESS_BOOK 2 0.48 0.00 0.54 151 XM_DIRTYINTL 2 1.19 5.56 0.54 152 XMSpoofStaff2 2 0.71 1.85 0.54 153 RCVD_IN_IADB_DK 2 0.48 0.00 0.54 154 XM_B_Phish_Phrases 2 1.19 5.56 0.54 155 XM_Body_Obfu01 2 0.48 0.00 0.54 156 RDNS_DYNAMIC 2 0.95 3.70 0.54 157 XM_ShortIntro_01 2 0.48 0.00 0.54 158 RCVD_IN_MSPIKE_BL 2 0.48 0.00 0.54 159 XMSubMetaSxObfu_03 2 0.48 0.00 0.54 160 TVD_RCVD_IP 2 0.71 1.85 0.54 161 T_XMDrugObfuBody_00 2 0.48 0.00 0.54 162 XM_SPF_SoftFail 2 1.90 11.11 0.54 163 TR_XM_MSPIKECOMBO 2 0.48 0.00 0.54 164 HTML_IMAGE_RATIO_08 2 0.71 1.85 0.54 165 TR_XM_SpoofPhishAttach 2 0.48 0.00 0.54 166 XM_B_Investor 1 1.90 12.96 0.27 167 XMGappySubj_02 1 0.24 0.00 0.27 168 RELAYCOUNTRY_NL 1 0.48 1.85 0.27 169 URIBL_BLACK 1 0.24 0.00 0.27 170 RELAYCOUNTRY_LT 1 0.24 0.00 0.27 171 MIME_BASE64_TEXT 1 0.24 0.00 0.27 172 FROM_GOV_DKIM_AU 1 0.24 0.00 0.27 173 XMDiploma_00 1 0.48 1.85 0.27 174 XMBrknScrpt_02 1 0.71 3.70 0.27 175 SUBJ_ALL_CAPS 1 0.24 0.00 0.27 176 T_TooManySym_03 1 0.24 0.00 0.27 177 TR_XM_DKIM_Undo 1 1.43 9.26 0.27 178 XMStockSpam_06 1 0.71 3.70 0.27 179 XMDateMe_00 1 0.24 0.00 0.27 180 TR_XM_Undi_Recip14 1 0.48 1.85 0.27 181 TR_Symld_Words 1 0.71 3.70 0.27 182 INVALID_DATE 1 0.24 0.00 0.27 183 XMSubMetaSSxObfu_00 1 0.24 0.00 0.27 184 CTE_8BIT_MISMATCH 1 0.24 0.00 0.27 185 URI_TRY_3LD 1 0.24 0.00 0.27 186 TM2_M_URI_OPT_OUT 1 1.66 11.11 0.27 187 NAME_EMAIL_DIFF 1 0.48 1.85 0.27 188 NML_ADSP_CUSTOM_MED 1 0.24 0.00 0.27 189 UPPERCASE_75_100 1 0.24 0.00 0.27 190 BASE64_LENGTH_79_INF 1 0.24 0.00 0.27 191 XM_H_Long_From02 1 0.71 3.70 0.27 192 HTML_IMAGE_ONLY_24 1 0.71 3.70 0.27 193 XMLngstWrd_03 1 0.24 0.00 0.27 194 XMPhish30 1 0.24 0.00 0.27 195 XMBody_95 1 0.24 0.00 0.27 196 TR_XM_InvalidRelay 1 0.48 1.85 0.27 197 XMLngstWrd_04 1 0.24 0.00 0.27 198 XMSexyCombo_05 1 1.19 7.41 0.27 199 RCVD_IN_IADB_OPTIN_GT50 1 0.24 0.00 0.27 200 PDS_OTHER_BAD_TLD 1 0.71 3.70 0.27 ----------------------------------------------------------------------