Email: 384 Autolearn: 0 AvgScore: -0.35 AvgScanTime: 2.28 sec Spam: 68 Autolearn: 0 AvgScore: 12.43 AvgScanTime: 2.74 sec Ham: 316 Autolearn: 0 AvgScore: -3.10 AvgScanTime: 2.18 sec Time Spent Running SA: 0.24 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.19 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 62 68.75 91.18 63.92 2 T_SCC_BODY_TEXT_LINE 61 84.11 89.71 82.91 3 DCC_CHECK_NEGATIVE 53 91.67 77.94 94.62 4 XM_B_Unicode 50 52.08 73.53 47.47 5 DKIM_SIGNED 50 64.06 73.53 62.03 6 RELAYCOUNTRY_US 48 63.28 70.59 61.71 7 XM_DK_Pass 45 62.24 66.18 61.39 8 DKIM_VALID 44 61.72 64.71 61.08 9 BAYES_50 37 55.21 54.41 55.38 10 XM_B_SpammyWords 35 28.91 51.47 24.05 11 XMListUnsubscribeExists 32 34.90 47.06 32.28 12 DKIM_VALID_AU 28 49.22 41.18 50.95 13 HTML_FONT_LOW_CONTRAST 27 19.79 39.71 15.51 14 RELAYCOUNTRY_META 26 11.98 38.24 6.33 15 MIME_HTML_ONLY 25 14.58 36.76 9.81 16 XM_B_Unicode3 24 22.40 35.29 19.62 17 LOC_TINY_FONT_1 23 24.48 33.82 22.47 18 XMSubLong 21 16.93 30.88 13.92 19 XM_Multi_Part_URI 19 10.68 27.94 6.96 20 UNTRUSTED_Relay 18 7.03 26.47 2.85 21 XM_B_SpammyWords2 18 10.16 26.47 6.65 22 FVGT_m_MULTI_ODD 18 17.45 26.47 15.51 23 RCVD_IN_MSPIKE_H2 17 17.45 25.00 15.82 24 T_TM2_M_HEADER_IN_MSG 16 17.45 23.53 16.14 25 DCC_CHECK 15 8.33 22.06 5.38 26 BOTNET 13 6.51 19.12 3.80 27 BAYES_99 13 5.47 19.12 2.53 28 XM_Body_Dirty_Words 13 8.59 19.12 6.33 29 XM_DK_Undo_02 12 7.81 17.65 5.70 30 XMSubMetaSx_00 12 5.73 17.65 3.16 31 UNPARSEABLE_RELAY 11 8.07 16.18 6.33 32 XM_B_Unsub 11 9.64 16.18 8.23 33 XM_UB50 11 4.43 16.18 1.90 34 TR_XM_BayesUnsub 11 6.51 16.18 4.43 35 T_KAM_HTML_FONT_INVALID 10 16.15 14.71 16.46 36 TooManyTo_001 10 7.03 14.71 5.38 37 BAYES_999 10 3.91 14.71 1.58 38 XM_UncommonTLD01 10 8.07 14.71 6.65 39 BOTNET_IPINHOSTNAME 9 6.25 13.24 4.75 40 LOTS_OF_MONEY 9 4.43 13.24 2.53 41 TR_XM_SpammyRelay 9 4.69 13.24 2.85 42 TooManyTo_002 8 3.91 11.76 2.22 43 DKIM_VALID_EF 8 23.70 11.76 26.27 44 RELAYCOUNTRY_IN 8 2.86 11.76 0.95 45 TooManyTo_003 8 3.65 11.76 1.90 46 HTML_IMAGE_RATIO_06 8 4.95 11.76 3.48 47 TooManyTo_004 8 3.39 11.76 1.58 48 XM_B_Investor 8 3.39 11.76 1.58 49 XMSexyCombo_05 8 3.39 11.76 1.58 50 HTML_MIME_NO_HTML_TAG 7 3.91 10.29 2.53 51 TooManyTo_005 7 3.12 10.29 1.58 52 TR_XM_UnparsRelay 7 2.60 10.29 0.95 53 TR_XM_DKIM_Undo 7 2.60 10.29 0.95 54 XM_Evil_Numbers_Gen 7 5.21 10.29 4.11 55 XMCapTrack 7 2.60 10.29 0.95 56 XMGappySubj_01 7 3.91 10.29 2.53 57 RCVD_IN_VALIDITY_RPBL 6 1.82 8.82 0.32 58 DKIM_INVALID 6 2.34 8.82 0.95 59 XM_B_Phish_Phrases 6 3.65 8.82 2.53 60 TR_XM_SpammyWords4 6 3.39 8.82 2.22 61 TR_XM_PhishingBody 5 5.47 7.35 5.06 62 HTML_IMAGE_RATIO_08 5 2.34 7.35 1.27 63 RCVD_IN_MSPIKE_WL 5 22.14 7.35 25.32 64 BAYES_80 5 7.03 7.35 6.96 65 SpammyFromTLD_01 5 1.82 7.35 0.63 66 TR_Symld_Words 5 1.56 7.35 0.32 67 RELAYCOUNTRY_CN 5 1.30 7.35 0.00 68 TR_XM_DK_Unsub 4 11.98 5.88 13.29 69 TM2_M_URI_OPT_OUT 4 1.04 5.88 0.00 70 HTML_IMAGE_RATIO_04 4 4.95 5.88 4.75 71 TR_XM_InvalidRelay 4 1.04 5.88 0.00 72 XM_B_SpammyTLD 4 5.21 5.88 5.06 73 BAYES_60 4 13.02 5.88 14.56 74 RELAYCOUNTRY_AT 4 2.08 5.88 1.27 75 DEAR_FRIEND 4 1.04 5.88 0.00 76 HTML_IMAGE_RATIO_02 4 8.85 5.88 9.49 77 BOTNET_NORDNS 4 1.04 5.88 0.00 78 XM_B_SpammyWords3 4 1.82 5.88 0.95 79 XMSexyCombo_01 4 2.08 5.88 1.27 80 XMNumbers 4 3.91 5.88 3.48 81 XM_SPF_SoftFail 4 1.30 5.88 0.32 82 TR_MetaPhish_Combo_01 4 1.04 5.88 0.00 83 T_TooManySym_01 4 3.39 5.88 2.85 84 XM_DIRTYINTL 4 1.82 5.88 0.95 85 NORDNS_LOW_CONTRAST 3 0.78 4.41 0.00 86 TM2_M_VERY_LONG_WORD 3 1.82 4.41 1.27 87 TR_DCC_Bayes_99 3 0.78 4.41 0.00 88 XMPhish14 3 1.04 4.41 0.32 89 MIME_HTML_MOSTLY 3 1.82 4.41 1.27 90 MPART_ALT_DIFF 3 0.78 4.41 0.00 91 HTML_FONT_TINY_NORDNS 3 0.78 4.41 0.00 92 T_XMDrugObfuBody_14 3 1.30 4.41 0.63 93 TR_XM_RelayPhish 3 0.78 4.41 0.00 94 TR_XM_INV_DKIM 3 0.78 4.41 0.00 95 SpammyFromTLD_02 3 1.56 4.41 0.95 96 RCVD_IN_MSPIKE_H4 3 4.69 4.41 4.75 97 MIME_CHARSET_FARAWAY 3 0.78 4.41 0.00 98 EXCLAMACION_ES 3 1.30 4.41 0.63 99 BAYES_95 3 1.04 4.41 0.32 100 XM_H_PHPMailer 3 1.30 4.41 0.63 101 CN_B2B_SPAMMER 3 0.78 4.41 0.00 102 XM_Combo_Sbj 3 1.04 4.41 0.32 103 BAYES_40 3 3.12 4.41 2.85 104 RCVD_IN_VALIDITY_SAFE 2 1.56 2.94 1.27 105 XM_SendGrid 2 1.56 2.94 1.27 106 PDS_FROM_NAME_TO_DOMAIN 2 0.52 2.94 0.00 107 XM_GoogleGroups2 2 0.52 2.94 0.00 108 KHOP_HELO_FCRDNS 2 1.04 2.94 0.63 109 TR_MetaPhish_Combo_02 2 0.52 2.94 0.00 110 TR_XM_MaxWHORU 2 0.52 2.94 0.00 111 TR_XM_SpammyWords2 2 0.78 2.94 0.32 112 TR_MetaPhish_Combo_03 2 0.52 2.94 0.00 113 T_Symld_Words_02 2 0.52 2.94 0.00 114 RCVD_IN_MSPIKE_H5 2 7.55 2.94 8.54 115 XM_GoogleGroups 2 0.78 2.94 0.32 116 TR_XM_PHPDW 2 0.52 2.94 0.00 117 XM_UB60 2 0.52 2.94 0.00 118 XMWhlSbjSex 2 0.52 2.94 0.00 119 NO_DNS_FOR_FROM 2 0.52 2.94 0.00 120 TR_XM_SpammyWords5 2 1.82 2.94 1.58 121 RELAYCOUNTRY_FR 2 0.78 2.94 0.32 122 MONEY_BACK 2 0.52 2.94 0.00 123 XMStockSpam_06 2 0.78 2.94 0.32 124 TR_XM_DK_SendGrid 2 0.78 2.94 0.32 125 TR_MetaPhish_Sub_02 2 0.52 2.94 0.00 126 ALL_TRUSTED 2 27.08 2.94 32.28 127 RCVD_IN_MSPIKE_BL 2 1.56 2.94 1.27 128 TR_XM_MSPIKECOMBO 2 1.56 2.94 1.27 129 TR_MetaPhish_Sub_03 2 0.52 2.94 0.00 130 DATE_IN_FUTURE_06_12 2 0.52 2.94 0.00 131 T_TooManySym_02 2 2.08 2.94 1.90 132 URI_NOVOWEL 2 1.30 2.94 0.95 133 XM_H_Long_From01 2 8.33 2.94 9.49 134 LOCALPART_IN_SUBJECT 2 1.04 2.94 0.63 135 PDS_FRNOM_TODOM_NAKED_TO 2 0.52 2.94 0.00 136 LotsOfNums_01 2 3.39 2.94 3.48 137 TR_Mismatch_TLD_02 2 0.78 2.94 0.32 138 RELAYCOUNTRY_NL 2 0.52 2.94 0.00 139 RCVD_IN_MSPIKE_L4 2 1.30 2.94 0.95 140 XM_B_Phish66 2 4.17 2.94 4.43 141 XMSubMetaSxObfu_04 2 1.04 2.94 0.63 142 FILL_THIS_FORM 1 0.78 1.47 0.63 143 RELAYCOUNTRY_LV 1 0.26 1.47 0.00 144 ACT_NOW_CAPS 1 0.26 1.47 0.00 145 TR_XM_DK_Bayes1 1 5.73 1.47 6.65 146 BAYES_00 1 6.51 1.47 7.59 147 TR_MetaPhish_Combo_01a 1 0.26 1.47 0.00 148 BAYES_20 1 7.81 1.47 9.18 149 URIBL_BLACK 1 0.26 1.47 0.00 150 TR_XM_PHPForged 1 0.26 1.47 0.00 151 LONGLN_LOW_CONTRAST 1 0.26 1.47 0.00 152 RELAYCOUNTRY_VN 1 0.26 1.47 0.00 153 XMSubMetaSxObfu_03 1 0.26 1.47 0.00 154 XM_B_SpammyWords4 1 0.26 1.47 0.00 155 FROM_SUSPICIOUS_NTLD 1 0.26 1.47 0.00 156 NUMERIC_HTTP_ADDR 1 0.26 1.47 0.00 157 TR_LOTS_OF_MONEY3 1 0.26 1.47 0.00 158 LOTTO_DEPT 1 0.26 1.47 0.00 159 MONEY_FRAUD_8 1 0.26 1.47 0.00 160 LONG_IMG_URI 1 0.26 1.47 0.00 161 HTML_FONT_SIZE_LARGE 1 0.26 1.47 0.00 162 MPART_ALT_DIFF_COUNT 1 0.52 1.47 0.32 163 XMSubPhish11 1 1.30 1.47 1.27 164 XM_Lotto 1 0.26 1.47 0.00 165 TR_XM_DK_Bayes2 1 5.21 1.47 6.01 166 XMSubject_70 1 0.26 1.47 0.00 167 MONEY_FORM 1 0.26 1.47 0.00 168 XM_Dr_From 1 0.52 1.47 0.32 169 FILL_THIS_FORM_LONG 1 0.26 1.47 0.00 170 TR_XM_SB_Phish 1 1.30 1.47 1.27 171 XM_UB95 1 0.26 1.47 0.00 172 RCVD_IN_BL_SPAMCOP_NET 1 0.26 1.47 0.00 173 XMReplyNow 1 0.52 1.47 0.32 174 RELAYCOUNTRY_BE 1 0.26 1.47 0.00 175 XMBody_78 1 0.26 1.47 0.00 176 XM_Body_Obfu01 1 0.78 1.47 0.63 177 MIME_HTML_ONLY_MULTI 1 0.26 1.47 0.00 178 FROM_LOCAL_HEX 1 0.26 1.47 0.00 179 HELO_NO_DOMAIN 1 0.78 1.47 0.63 180 RCVD_IN_VALIDITY_CERTIFIED 1 0.52 1.47 0.32 181 XMNoVowels 1 3.12 1.47 3.48 182 URI_GOOG_STO_SPAMMY 1 0.26 1.47 0.00 183 XMStrtUSub 1 5.21 1.47 6.01 184 BAYES_05 1 0.78 1.47 0.63 185 CK_HELO_GENERIC 1 0.26 1.47 0.00 186 FSL_HELO_NON_FQDN_1 1 0.26 1.47 0.00 187 URIBL_SBL_A 1 0.26 1.47 0.00 188 TR_XM_FormFill2 1 0.26 1.47 0.00 189 XMPhish08 1 0.26 1.47 0.00 190 XM_H_PHPOS 1 0.26 1.47 0.00 191 FSL_BULK_SIG 1 1.04 1.47 0.95 192 CONTENT_AFTER_HTML_WEAK 1 0.26 1.47 0.00 193 TR_XM_DK_Bayes 1 5.73 1.47 6.65 194 TM2_M_OBFU_COMMENT 1 0.26 1.47 0.00 195 TO_EQ_FM_DOM_HTML_ONLY 1 0.26 1.47 0.00 196 OBFU_TEXT_ATTACH 1 0.26 1.47 0.00 197 XM_H_Long_From02 1 0.26 1.47 0.00 198 ADVANCE_FEE_5_NEW_FRM_MNY 1 0.26 1.47 0.00 199 RELAYCOUNTRY_AU 1 2.08 1.47 2.22 200 XMSubMetaSx_01 1 0.26 1.47 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 299 91.67 77.94 94.62 2 T_SCC_BODY_TEXT_LINE 262 84.11 89.71 82.91 3 HTML_MESSAGE 202 68.75 91.18 63.92 4 DKIM_SIGNED 196 64.06 73.53 62.03 5 RELAYCOUNTRY_US 195 63.28 70.59 61.71 6 XM_DK_Pass 194 62.24 66.18 61.39 7 DKIM_VALID 193 61.72 64.71 61.08 8 BAYES_50 175 55.21 54.41 55.38 9 DKIM_VALID_AU 161 49.22 41.18 50.95 10 XM_B_Unicode 150 52.08 73.53 47.47 11 BOUNCE_MESSAGE 103 26.82 0.00 32.59 12 ANY_BOUNCE_MESSAGE 103 26.82 0.00 32.59 13 ALL_TRUSTED 102 27.08 2.94 32.28 14 XMListUnsubscribeExists 102 34.90 47.06 32.28 15 DKIM_VALID_EF 83 23.70 11.76 26.27 16 RCVD_IN_MSPIKE_WL 80 22.14 7.35 25.32 17 XM_B_SpammyWords 76 28.91 51.47 24.05 18 LOC_TINY_FONT_1 71 24.48 33.82 22.47 19 XM_B_Unicode3 62 22.40 35.29 19.62 20 T_XMDrugObfuBody_08 56 14.58 0.00 17.72 21 T_KAM_HTML_FONT_INVALID 52 16.15 14.71 16.46 22 T_TM2_M_HEADER_IN_MSG 51 17.45 23.53 16.14 23 RCVD_IN_MSPIKE_H2 50 17.45 25.00 15.82 24 FVGT_m_MULTI_ODD 49 17.45 26.47 15.51 25 HTML_FONT_LOW_CONTRAST 49 19.79 39.71 15.51 26 BAYES_60 46 13.02 5.88 14.56 27 XMSubLong 44 16.93 30.88 13.92 28 TR_XM_DK_Unsub 42 11.98 5.88 13.29 29 SCC_BODY_URI_ONLY 40 10.42 0.00 12.66 30 RCVD_IN_MSPIKE_H3 38 9.90 0.00 12.03 31 HTML_IMAGE_ONLY_20 31 8.07 0.00 9.81 32 MIME_HTML_ONLY 31 14.58 36.76 9.81 33 XM_DK_Undo_01 31 8.07 0.00 9.81 34 HTML_IMAGE_RATIO_02 30 8.85 5.88 9.49 35 XM_H_Long_From01 30 8.33 2.94 9.49 36 XM_DKIMWhitelistDomains 29 7.55 0.00 9.18 37 BAYES_20 29 7.81 1.47 9.18 38 MIME_HEADER_CTYPE_ONLY 28 7.29 0.00 8.86 39 RCVD_IN_MSPIKE_H5 27 7.55 2.94 8.54 40 XM_B_Unsub 26 9.64 16.18 8.23 41 BAYES_00 24 6.51 1.47 7.59 42 BAYES_80 22 7.03 7.35 6.96 43 XM_Multi_Part_URI 22 10.68 27.94 6.96 44 USER_IN_DEF_DKIM_WL 21 5.47 0.00 6.65 45 XM_UncommonTLD01 21 8.07 14.71 6.65 46 IN_ZIMBRA_NJ_WHITELIST 21 5.47 0.00 6.65 47 XM_B_SpammyWords2 21 10.16 26.47 6.65 48 TR_XM_DK_Bayes 21 5.73 1.47 6.65 49 TR_XM_DK_Bayes1 21 5.73 1.47 6.65 50 XM_Body_Dirty_Words 20 8.59 19.12 6.33 51 RELAYCOUNTRY_META 20 11.98 38.24 6.33 52 UNPARSEABLE_RELAY 20 8.07 16.18 6.33 53 TR_XM_DK_Bayes2 19 5.21 1.47 6.01 54 XMStrtUSub 19 5.21 1.47 6.01 55 XM_DK_Undo_02 18 7.81 17.65 5.70 56 TVD_SPACE_RATIO 18 4.69 0.00 5.70 57 DCC_CHECK 17 8.33 22.06 5.38 58 TooManyTo_001 17 7.03 14.71 5.38 59 TR_XM_PhishingBody 16 5.47 7.35 5.06 60 XM_B_SpammyTLD 16 5.21 5.88 5.06 61 RCVD_IN_MSPIKE_H4 15 4.69 4.41 4.75 62 HTML_IMAGE_RATIO_04 15 4.95 5.88 4.75 63 BOTNET_IPINHOSTNAME 15 6.25 13.24 4.75 64 XM_B_Phish66 14 4.17 2.94 4.43 65 TR_XM_BayesUnsub 14 6.51 16.18 4.43 66 XM_Evil_Numbers_Gen 13 5.21 10.29 4.11 67 TO_MALFORMED 12 3.12 0.00 3.80 68 BOTNET 12 6.51 19.12 3.80 69 LotsOfNums_01 11 3.39 2.94 3.48 70 FROM_GOV_DKIM_AU 11 2.86 0.00 3.48 71 INVALID_MSGID 11 2.86 0.00 3.48 72 XMNumbers 11 3.91 5.88 3.48 73 HTML_IMAGE_RATIO_06 11 4.95 11.76 3.48 74 XMNoVowels 11 3.12 1.47 3.48 75 XMSubMetaSx_00 10 5.73 17.65 3.16 76 MIME_QP_LONG_LINE 10 2.60 0.00 3.16 77 T_TooManySym_01 9 3.39 5.88 2.85 78 TR_XM_SpammyRelay 9 4.69 13.24 2.85 79 BAYES_40 9 3.12 4.41 2.85 80 XM_PDF 9 2.34 0.00 2.85 81 UNTRUSTED_Relay 9 7.03 26.47 2.85 82 XMGappySubj_01 8 3.91 10.29 2.53 83 BAYES_99 8 5.47 19.12 2.53 84 XM_B_Phish_Phrases 8 3.65 8.82 2.53 85 HTML_MIME_NO_HTML_TAG 8 3.91 10.29 2.53 86 LOTS_OF_MONEY 8 4.43 13.24 2.53 87 RELAYCOUNTRY_AU 7 2.08 1.47 2.22 88 T_REMOTE_IMAGE 7 1.82 0.00 2.22 89 TR_XM_SpammyWords4 7 3.39 8.82 2.22 90 USER_IN_WHITELIST 7 1.82 0.00 2.22 91 USER_IN_WELCOMELIST 7 1.82 0.00 2.22 92 TooManyTo_002 7 3.91 11.76 2.22 93 XM_UB50 6 4.43 16.18 1.90 94 MSGID_NOFQDN1 6 1.56 0.00 1.90 95 T_TooManySym_02 6 2.08 2.94 1.90 96 TooManyTo_003 6 3.65 11.76 1.90 97 BAYES_999 5 3.91 14.71 1.58 98 TooManyTo_004 5 3.39 11.76 1.58 99 XM_B_Investor 5 3.39 11.76 1.58 100 XMSexyCombo_05 5 3.39 11.76 1.58 101 TR_XM_SpammyWords5 5 1.82 2.94 1.58 102 XMLngstWrd_00 5 1.30 0.00 1.58 103 TooManyTo_005 5 3.12 10.29 1.58 104 RCVD_IN_IADB_SPF 4 1.04 0.00 1.27 105 RCVD_IN_IADB_SENDERID 4 1.04 0.00 1.27 106 RCVD_IN_MSPIKE_BL 4 1.56 2.94 1.27 107 TR_XM_MSPIKECOMBO 4 1.56 2.94 1.27 108 XM_ZIP 4 1.04 0.00 1.27 109 XMSexyCombo_01 4 2.08 5.88 1.27 110 RELAYCOUNTRY_AT 4 2.08 5.88 1.27 111 XMSubPhish11 4 1.30 1.47 1.27 112 TR_XM_SB_Phish 4 1.30 1.47 1.27 113 HTML_IMAGE_RATIO_08 4 2.34 7.35 1.27 114 RCVD_IN_IADB_LISTED 4 1.04 0.00 1.27 115 HK_RANDOM_ENVFROM 4 1.04 0.00 1.27 116 RCVD_IN_VALIDITY_SAFE 4 1.56 2.94 1.27 117 XM_SendGrid 4 1.56 2.94 1.27 118 TM2_M_VERY_LONG_WORD 4 1.82 4.41 1.27 119 MIME_HTML_MOSTLY 4 1.82 4.41 1.27 120 MAILING_LIST_MULTI 3 0.78 0.00 0.95 121 RCVD_IN_MSPIKE_L4 3 1.30 2.94 0.95 122 XM_DIRTYINTL 3 1.82 5.88 0.95 123 HK_RANDOM_FROM 3 0.78 0.00 0.95 124 XMCapTrack 3 2.60 10.29 0.95 125 FSL_BULK_SIG 3 1.04 1.47 0.95 126 RCVD_IN_RP_SAFE 3 0.78 0.00 0.95 127 SpammyFromTLD_02 3 1.56 4.41 0.95 128 XMBody_95 3 0.78 0.00 0.95 129 XM_B_Unsub2 3 0.78 0.00 0.95 130 DKIM_INVALID 3 2.34 8.82 0.95 131 XM_B_SpammyWords3 3 1.82 5.88 0.95 132 URI_NOVOWEL 3 1.30 2.94 0.95 133 RELAYCOUNTRY_IN 3 2.86 11.76 0.95 134 TR_XM_DKIM_Undo 3 2.60 10.29 0.95 135 RCVD_IN_IADB_OPTIN 3 0.78 0.00 0.95 136 RCVD_IN_IADB_DK 3 0.78 0.00 0.95 137 TR_XM_UnparsRelay 3 2.60 10.29 0.95 138 RCVD_IN_IADB_VOUCHED 3 0.78 0.00 0.95 139 TR_XM_SpammyWords3 3 0.78 0.00 0.95 140 RELAYCOUNTRY_GB 3 0.78 0.00 0.95 141 MISSING_HEADERS 3 0.78 0.00 0.95 142 LOCALPART_IN_SUBJECT 2 1.04 2.94 0.63 143 EXCLAMACION_ES 2 1.30 4.41 0.63 144 XM_H_SpoofStaff4 2 0.52 0.00 0.63 145 XMSubNoVowel 2 0.52 0.00 0.63 146 RCVD_IN_SORBS_DUL 2 0.52 0.00 0.63 147 FROM_GOV_SPOOF 2 0.78 1.47 0.63 148 XMPhish11 2 0.52 0.00 0.63 149 HELO_NODOT 2 0.78 1.47 0.63 150 XM_H_PHPMailer 2 1.30 4.41 0.63 151 TR_XM_SpoofPhishAttach 2 0.52 0.00 0.63 152 XMSubMetaSxObfu_04 2 1.04 2.94 0.63 153 XM_ZohoDesk1 2 0.52 0.00 0.63 154 TR_MSPIKEBAYES00 2 0.52 0.00 0.63 155 BAYES_05 2 0.78 1.47 0.63 156 HTTPS_HTTP_MISMATCH 2 0.52 0.00 0.63 157 SUBJ_ALL_CAPS 2 0.52 0.00 0.63 158 RCVD_IN_RP_CERTIFIED 2 0.52 0.00 0.63 159 SpammyFromTLD_01 2 1.82 7.35 0.63 160 GMD_PDF_SQUARE 2 0.52 0.00 0.63 161 T_OBFU_PDF_ATTACH 2 0.52 0.00 0.63 162 URI_TRY_3LD 2 0.52 0.00 0.63 163 TR_XM_SpoofStaff 2 0.52 0.00 0.63 164 XMSpoofStaff2 2 0.52 0.00 0.63 165 XMHTML_After_End 2 0.52 0.00 0.63 166 TR_XM_PSC1 2 0.52 0.00 0.63 167 XM_Body_Obfu01 2 0.78 1.47 0.63 168 T_XMDrugObfuBody_14 2 1.30 4.41 0.63 169 XMBSHREFv2 2 0.52 0.00 0.63 170 HTML_FONT_FACE_BAD 2 0.52 0.00 0.63 171 HELO_NO_DOMAIN 2 0.78 1.47 0.63 172 IN_HORDE_ADDRESS_BOOK 2 0.52 0.00 0.63 173 FILL_THIS_FORM 2 0.78 1.47 0.63 174 XM_H_Trusted_IP 2 0.52 0.00 0.63 175 XMBody_17 2 0.52 0.00 0.63 176 HTML_IMAGE_ONLY_28 2 0.52 0.00 0.63 177 KHOP_HELO_FCRDNS 2 1.04 2.94 0.63 178 SHOPIFY_IMG_NOT_RCVD_SFY 2 0.52 0.00 0.63 179 TR_Symld_Words 1 1.56 7.35 0.32 180 XM_SPF_SoftFail 1 1.30 5.88 0.32 181 XMBounce_01 1 0.26 0.00 0.32 182 XMCmmnCold 1 0.26 0.00 0.32 183 T_TooManySym_03 1 0.26 0.00 0.32 184 LongTLD 1 0.26 0.00 0.32 185 XMPhishDuo 1 0.52 1.47 0.32 186 XMLngstWrd_03 1 0.26 0.00 0.32 187 XM_H_NotFromAmazon 1 0.26 0.00 0.32 188 XMLngstWrd_01 1 0.26 0.00 0.32 189 TR_NonUS_Offer 1 0.26 0.00 0.32 190 TR_XM_SpoofStaff3 1 0.26 0.00 0.32 191 LOW_PRICE 1 0.26 0.00 0.32 192 TR_Mismatch_TLD_02 1 0.78 2.94 0.32 193 RELAYCOUNTRY_PL 1 0.52 1.47 0.32 194 XMSlimDrugH 1 0.26 0.00 0.32 195 BAYES_95 1 1.04 4.41 0.32 196 XM_Ancestry_Forge 1 0.26 0.00 0.32 197 XMHTMLBadTable_001 1 0.26 0.00 0.32 198 XM_S_SketchInvoice 1 0.26 0.00 0.32 199 RELAYCOUNTRY_DE 1 0.26 0.00 0.32 200 DC_PNG_UNO_LARGO 1 0.26 0.00 0.32 ----------------------------------------------------------------------