Email: 684 Autolearn: 0 AvgScore: 1.94 AvgScanTime: 1.90 sec Spam: 94 Autolearn: 0 AvgScore: 13.61 AvgScanTime: 2.87 sec Ham: 590 Autolearn: 0 AvgScore: 0.08 AvgScanTime: 1.74 sec Time Spent Running SA: 0.36 hours Time Spent Processing Spam: 0.07 hours Time Spent Processing Ham: 0.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 82 48.54 87.23 42.37 2 DKIM_SIGNED 74 44.15 78.72 38.64 3 T_SCC_BODY_TEXT_LINE 71 80.12 75.53 80.85 4 DKIM_VALID 70 42.98 74.47 37.97 5 XM_DK_Pass 70 43.13 74.47 38.14 6 RELAYCOUNTRY_US 66 43.42 70.21 39.15 7 DCC_CHECK_NEGATIVE 62 63.60 65.96 63.22 8 XM_B_Unicode 59 32.02 62.77 27.12 9 XM_B_SpammyWords 54 22.37 57.45 16.78 10 BAYES_50 51 70.91 54.26 73.56 11 DKIM_VALID_AU 49 33.33 52.13 30.34 12 XMListUnsubscribeExists 46 24.42 48.94 20.51 13 XM_B_Unicode3 45 20.32 47.87 15.93 14 DKIM_VALID_EF 38 22.37 40.43 19.49 15 T_KAM_HTML_FONT_INVALID 37 13.30 39.36 9.15 16 XM_DK_Undo_02 36 6.14 38.30 1.02 17 XM_B_SpammyWords2 35 10.38 37.23 6.10 18 XM_Body_Dirty_Words 32 9.80 34.04 5.93 19 DCC_CHECK 32 36.40 34.04 36.78 20 FVGT_m_MULTI_ODD 31 15.06 32.98 12.20 21 UNPARSEABLE_RELAY 31 12.43 32.98 9.15 22 XM_Multi_Part_URI 29 11.55 30.85 8.47 23 T_TM2_M_HEADER_IN_MSG 28 12.13 29.79 9.32 24 RELAYCOUNTRY_META 26 7.02 27.66 3.73 25 TR_XM_DKIM_Undo 25 3.95 26.60 0.34 26 BOTNET_IPINHOSTNAME 24 5.56 25.53 2.37 27 BAYES_99 23 4.24 24.47 1.02 28 LOTS_OF_MONEY 23 5.26 24.47 2.20 29 XMNoVowels 23 5.41 24.47 2.37 30 MIME_HTML_ONLY 22 12.28 23.40 10.51 31 LOC_TINY_FONT_1 20 13.16 21.28 11.86 32 BAYES_999 20 3.51 21.28 0.68 33 TR_XM_PhishingBody 20 3.80 21.28 1.02 34 HTML_FONT_LOW_CONTRAST 20 12.72 21.28 11.36 35 XMSubLong 20 10.67 21.28 8.98 36 UNTRUSTED_Relay 19 4.24 20.21 1.69 37 RCVD_IN_MSPIKE_H2 19 9.06 20.21 7.29 38 TR_XM_SpammyWords4 18 3.95 19.15 1.53 39 BOTNET 18 3.07 19.15 0.51 40 XM_UB50 16 3.36 17.02 1.19 41 TR_XM_BayesUnsub 16 5.85 17.02 4.07 42 XM_B_Unsub 16 7.60 17.02 6.10 43 TR_XM_UnparsRelay 15 3.51 15.96 1.53 44 XM_OfRef6 15 2.49 15.96 0.34 45 RCVD_IN_MSPIKE_WL 14 18.42 14.89 18.98 46 MAILING_LIST_MULTI 14 3.51 14.89 1.69 47 XM_B_Phish66 14 2.92 14.89 1.02 48 XM_B_Investor 13 2.78 13.83 1.02 49 XM_UncommonTLD01 13 4.82 13.83 3.39 50 RDNS_DYNAMIC 12 1.90 12.77 0.17 51 TR_XM_DK_Unsub 12 9.50 12.77 8.98 52 XM_B_SpammyWords3 12 2.49 12.77 0.85 53 RELAYCOUNTRY_CN 12 1.90 12.77 0.17 54 FROM_EXCESS_BASE64 11 1.75 11.70 0.17 55 XM_B_Phish_Phrases 11 2.92 11.70 1.53 56 XM_H_Long_From02 11 1.75 11.70 0.17 57 MIME_CHARSET_FARAWAY 11 1.90 11.70 0.34 58 NO_FM_NAME_IP_HOSTN 10 1.46 10.64 0.00 59 HELO_DYNAMIC_IPADDR 10 1.46 10.64 0.00 60 DYN_RDNS_AND_INLINE_IMAGE 10 1.46 10.64 0.00 61 TR_XM_SpammyRelay 9 2.49 9.57 1.36 62 XM_B_SpammyTLD 9 3.07 9.57 2.03 63 TR_MetaPhish_Combo_01 9 1.61 9.57 0.34 64 XM_DK_Undo_01 8 6.87 8.51 6.61 65 TR_XM_SpammyWords2 7 1.02 7.45 0.00 66 RCVD_IN_MSPIKE_H5 7 4.82 7.45 4.41 67 KHOP_HELO_FCRDNS 7 1.75 7.45 0.85 68 XMSexyCombo_05 7 1.32 7.45 0.34 69 TooManyTo_001 7 2.92 7.45 2.20 70 URIBL_DBL_SPAM 6 0.88 6.38 0.00 71 FSL_BULK_SIG 6 27.34 6.38 30.68 72 ALL_TRUSTED 6 50.44 6.38 57.46 73 TR_XM_NoHeaderRelay 6 0.88 6.38 0.00 74 XMSubPhish11 6 1.02 6.38 0.17 75 TR_XM_SB_Phish 6 1.02 6.38 0.17 76 XMStockSpam_06 5 1.02 5.32 0.34 77 BAYES_95 5 1.17 5.32 0.51 78 XM_B_COVIDMETA 5 0.73 5.32 0.00 79 BAYES_60 5 6.58 5.32 6.78 80 PDS_OTHER_BAD_TLD 5 0.73 5.32 0.00 81 TR_XM_COVIDMETA2 5 0.73 5.32 0.00 82 BAYES_80 5 3.36 5.32 3.05 83 XMDiploma_00 5 0.73 5.32 0.00 84 XMSubMetaSx_00 5 1.32 5.32 0.68 85 TR_XM_InvalidRelay 5 0.73 5.32 0.00 86 TooManyTo_004 4 1.02 4.26 0.51 87 HTML_MIME_NO_HTML_TAG 4 2.92 4.26 2.71 88 DKIM_INVALID 4 1.17 4.26 0.68 89 RELAYCOUNTRY_IN 4 0.88 4.26 0.34 90 BAYES_40 4 2.92 4.26 2.71 91 XM_TLDProd2 4 0.58 4.26 0.00 92 SpammyFromTLD_02 4 1.02 4.26 0.51 93 HTML_IMAGE_RATIO_02 4 1.46 4.26 1.02 94 SpammyFromTLD_01 4 0.88 4.26 0.34 95 RCVD_IN_MSPIKE_H3 4 9.94 4.26 10.85 96 XM_H_PHPMailer 4 1.32 4.26 0.85 97 XMPhish14 4 0.58 4.26 0.00 98 XM_Evil_Numbers_Gen 4 2.05 4.26 1.69 99 TooManyTo_002 4 1.17 4.26 0.68 100 TooManyTo_003 4 1.02 4.26 0.51 101 HTML_IMAGE_RATIO_04 3 1.90 3.19 1.69 102 XMSubNoVowel 3 0.58 3.19 0.17 103 TR_DCC_Bayes_99 3 0.44 3.19 0.00 104 TR_XM_MaxWHORU 3 0.44 3.19 0.00 105 XMCapTrack 3 0.73 3.19 0.34 106 RCVD_IN_MSPIKE_H4 3 3.65 3.19 3.73 107 NO_DNS_FOR_FROM 3 0.44 3.19 0.00 108 XM_Body_Dirty_Words_01 3 0.44 3.19 0.00 109 XMClaimOffer 3 0.44 3.19 0.00 110 RELAYCOUNTRY_PL 3 0.44 3.19 0.00 111 XMGenDplmaNmb 3 0.44 3.19 0.00 112 TR_XM_Undi_Recip6 3 0.44 3.19 0.00 113 HTML_FONT_TINY_NORDNS 3 2.34 3.19 2.20 114 TooManyTo_005 3 0.88 3.19 0.51 115 T_TVD_MIME_EPI 3 0.44 3.19 0.00 116 XM_B_SpammyWords4 3 0.44 3.19 0.00 117 BOTNET_NORDNS 3 0.44 3.19 0.00 118 XMGappySubj_01 3 1.17 3.19 0.85 119 XM_H_Undi_Recip 3 0.58 3.19 0.17 120 T_XMDrugObfuBody_08 3 10.23 3.19 11.36 121 URI_NOVOWEL 3 0.58 3.19 0.17 122 TR_XM_PHPDW 3 0.73 3.19 0.34 123 RCVD_IN_IADB_SPF 2 0.29 2.13 0.00 124 RELAYCOUNTRY_MY 2 0.29 2.13 0.00 125 MIME_HTML_MOSTLY 2 1.17 2.13 1.02 126 XM_Nigeria_01 2 0.29 2.13 0.00 127 XM_E_Blogspot 2 0.29 2.13 0.00 128 TR_XM_RelayPhish 2 0.29 2.13 0.00 129 FROM_SUSPICIOUS_NTLD 2 0.29 2.13 0.00 130 XM_Nigeria_02 2 0.29 2.13 0.00 131 XMBody_78 2 1.32 2.13 1.19 132 RELAYCOUNTRY_AU 2 1.17 2.13 1.02 133 XM_H_Long_From01 2 1.02 2.13 0.85 134 XMBrknScrpt_02 2 1.90 2.13 1.86 135 MPART_ALT_DIFF 2 1.17 2.13 1.02 136 DATE_IN_PAST_03_06 2 0.44 2.13 0.17 137 RCVD_IN_IADB_VOUCHED 2 0.44 2.13 0.17 138 TM2_M_VERY_LONG_WORD 2 1.17 2.13 1.02 139 HTML_IMAGE_RATIO_06 2 0.88 2.13 0.68 140 T_XMDrugObfuBody_14 2 0.73 2.13 0.51 141 FROM_SUSPICIOUS_NTLD_FP 2 0.29 2.13 0.00 142 XM_SPF_SoftFail 2 0.44 2.13 0.17 143 TO_EQ_FM_DOM_HTML_ONLY 2 0.29 2.13 0.00 144 HTML_IMAGE_ONLY_24 2 0.29 2.13 0.00 145 IMG_ONLY_FM_DOM_INFO 2 0.29 2.13 0.00 146 RCVD_IN_IADB_DK 2 0.29 2.13 0.00 147 T_REMOTE_IMAGE 2 1.17 2.13 1.02 148 XM_B_SEO 2 0.44 2.13 0.17 149 XM_SendGrid 2 3.95 2.13 4.24 150 MONEY_FRAUD_3 2 0.29 2.13 0.00 151 RCVD_IN_IADB_SENDERID 2 0.29 2.13 0.00 152 RCVD_IN_IADB_OPTIN 2 0.29 2.13 0.00 153 XMPhish08 2 0.29 2.13 0.00 154 RCVD_IN_IADB_LISTED 2 0.44 2.13 0.17 155 RCVD_IN_IADB_OPTIN_GT50 2 0.29 2.13 0.00 156 XM_B_Crypto 2 0.44 2.13 0.17 157 XM_UB60 2 0.44 2.13 0.17 158 IN_HORDE_ADDRESS_BOOK 2 1.02 2.13 0.85 159 TR_MRelay_UG 2 0.29 2.13 0.00 160 RCVD_IN_PSBL 1 0.15 1.06 0.00 161 XM_DIRTYINTL 1 0.29 1.06 0.17 162 TR_XM_SEO4 1 0.15 1.06 0.00 163 TR_XM_Undi_Recip9 1 0.15 1.06 0.00 164 URIBL_BLACK 1 0.15 1.06 0.00 165 RELAYCOUNTRY_LV 1 0.15 1.06 0.00 166 TR_XM_Undi_Recip11 1 0.15 1.06 0.00 167 INVALID_MSGID 1 1.75 1.06 1.86 168 XMLongAddy 1 0.15 1.06 0.00 169 XMLngstWrd_00 1 4.68 1.06 5.25 170 PDS_FRNOM_TODOM_NAKED_TO 1 0.15 1.06 0.00 171 TR_XM_FormFill2 1 0.29 1.06 0.17 172 OBFU_TEXT_ATTACH 1 0.15 1.06 0.00 173 TR_XM_SpoofStaff 1 0.44 1.06 0.34 174 XM_ShortIntro_01 1 0.15 1.06 0.00 175 LINKEDIN_IMG_NOT_RCVD_LNKN 1 0.29 1.06 0.17 176 ADVANCE_FEE_4_NEW_FRM_MNY 1 0.15 1.06 0.00 177 XM_B_TRADE_HTML 1 0.15 1.06 0.00 178 TR_XM_Base64_M2 1 0.29 1.06 0.17 179 TR_UG_Sexy_Spam 1 0.15 1.06 0.00 180 SHORT_URI_3 1 0.15 1.06 0.00 181 UNDISC_MONEY 1 0.15 1.06 0.00 182 TR_XM_Base64_M1 1 0.44 1.06 0.34 183 XMSpoofStaff2 1 0.44 1.06 0.34 184 TM2_M_HAS_BSLASH_URI 1 0.29 1.06 0.17 185 T_TooManySym_01 1 2.92 1.06 3.22 186 XM_B_Unsub2 1 0.73 1.06 0.68 187 XMSubEmpty 1 0.15 1.06 0.00 188 RCVD_IN_VALIDITY_RPBL 1 0.15 1.06 0.00 189 TR_Symld_Words 1 0.29 1.06 0.17 190 ADVANCE_FEE_2_NEW_MONEY 1 0.15 1.06 0.00 191 XMLngstWrd_04 1 0.44 1.06 0.34 192 XM_H_PHPOS_M 1 0.29 1.06 0.17 193 DIET_1 1 0.15 1.06 0.00 194 T_TooManySym_02 1 1.75 1.06 1.86 195 HTML_COMMENT_SAVED_URL 1 0.15 1.06 0.00 196 RCVD_IN_BL_SPAMCOP_NET 1 0.15 1.06 0.00 197 FILL_THIS_FORM 1 0.29 1.06 0.17 198 XM_GoogleGroups 1 0.58 1.06 0.51 199 NUMERIC_HTTP_ADDR 1 0.44 1.06 0.34 200 XM_ProductURIs 1 0.29 1.06 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 477 80.12 75.53 80.85 2 BAYES_50 434 70.91 54.26 73.56 3 DCC_CHECK_NEGATIVE 373 63.60 65.96 63.22 4 ALL_TRUSTED 339 50.44 6.38 57.46 5 ANY_BOUNCE_MESSAGE 327 47.95 1.06 55.42 6 BOUNCE_MESSAGE 327 47.95 1.06 55.42 7 HTML_MESSAGE 250 48.54 87.23 42.37 8 RELAYCOUNTRY_US 231 43.42 70.21 39.15 9 DKIM_SIGNED 228 44.15 78.72 38.64 10 XM_DK_Pass 225 43.13 74.47 38.14 11 DKIM_VALID 224 42.98 74.47 37.97 12 DCC_CHECK 217 36.40 34.04 36.78 13 SCC_BODY_URI_ONLY 193 28.22 0.00 32.71 14 FSL_BULK_SIG 181 27.34 6.38 30.68 15 DKIM_VALID_AU 179 33.33 52.13 30.34 16 XM_B_Unicode 160 32.02 62.77 27.12 17 XMListUnsubscribeExists 121 24.42 48.94 20.51 18 DKIM_VALID_EF 115 22.37 40.43 19.49 19 RCVD_IN_MSPIKE_WL 112 18.42 14.89 18.98 20 XM_B_SpammyWords 99 22.37 57.45 16.78 21 XM_B_Unicode3 94 20.32 47.87 15.93 22 FVGT_m_MULTI_ODD 72 15.06 32.98 12.20 23 LOC_TINY_FONT_1 70 13.16 21.28 11.86 24 HTML_FONT_LOW_CONTRAST 67 12.72 21.28 11.36 25 T_XMDrugObfuBody_08 67 10.23 3.19 11.36 26 RCVD_IN_MSPIKE_H3 64 9.94 4.26 10.85 27 MIME_HTML_ONLY 62 12.28 23.40 10.51 28 T_TM2_M_HEADER_IN_MSG 55 12.13 29.79 9.32 29 T_KAM_HTML_FONT_INVALID 54 13.30 39.36 9.15 30 UNPARSEABLE_RELAY 54 12.43 32.98 9.15 31 TR_XM_DK_Unsub 53 9.50 12.77 8.98 32 XMSubLong 53 10.67 21.28 8.98 33 XM_Multi_Part_URI 50 11.55 30.85 8.47 34 RCVD_IN_MSPIKE_H2 43 9.06 20.21 7.29 35 BAYES_60 40 6.58 5.32 6.78 36 BAYES_20 40 5.99 1.06 6.78 37 XM_DK_Undo_01 39 6.87 8.51 6.61 38 HTML_IMAGE_ONLY_20 37 5.56 1.06 6.27 39 XM_B_SpammyWords2 36 10.38 37.23 6.10 40 XM_B_Unsub 36 7.60 17.02 6.10 41 XM_Body_Dirty_Words 35 9.80 34.04 5.93 42 XMLngstWrd_00 31 4.68 1.06 5.25 43 XM_DKIMWhitelistDomains 26 3.80 0.00 4.41 44 RCVD_IN_MSPIKE_H5 26 4.82 7.45 4.41 45 MIME_HEADER_CTYPE_ONLY 26 3.80 0.00 4.41 46 XM_SendGrid 25 3.95 2.13 4.24 47 TR_XM_BayesUnsub 24 5.85 17.02 4.07 48 RCVD_IN_MSPIKE_H4 22 3.65 3.19 3.73 49 RELAYCOUNTRY_META 22 7.02 27.66 3.73 50 BAYES_00 21 3.07 0.00 3.56 51 XM_UncommonTLD01 20 4.82 13.83 3.39 52 T_TooManySym_01 19 2.92 1.06 3.22 53 LotsOfNums_01 19 2.78 0.00 3.22 54 TVD_SPACE_RATIO 18 2.63 0.00 3.05 55 IN_ZIMBRA_NJ_WHITELIST 18 2.63 0.00 3.05 56 BAYES_80 18 3.36 5.32 3.05 57 HTML_MIME_NO_HTML_TAG 16 2.92 4.26 2.71 58 BAYES_40 16 2.92 4.26 2.71 59 XMNoVowels 14 5.41 24.47 2.37 60 BOTNET_IPINHOSTNAME 14 5.56 25.53 2.37 61 HTML_FONT_TINY_NORDNS 13 2.34 3.19 2.20 62 LOTS_OF_MONEY 13 5.26 24.47 2.20 63 TO_MALFORMED 13 1.90 0.00 2.20 64 TooManyTo_001 13 2.92 7.45 2.20 65 BAYES_05 12 1.75 0.00 2.03 66 XM_B_SpammyTLD 12 3.07 9.57 2.03 67 MIME_QP_LONG_LINE 12 1.90 1.06 2.03 68 INVALID_MSGID 11 1.75 1.06 1.86 69 XMNumbers 11 1.61 0.00 1.86 70 XMBrknScrpt_02 11 1.90 2.13 1.86 71 T_TooManySym_02 11 1.75 1.06 1.86 72 TR_XM_DK_Bayes 11 1.61 0.00 1.86 73 USER_IN_DEF_DKIM_WL 11 1.61 0.00 1.86 74 HTML_IMAGE_RATIO_04 10 1.90 3.19 1.69 75 MAILING_LIST_MULTI 10 3.51 14.89 1.69 76 XMLngstWrd_01 10 1.61 1.06 1.69 77 XMStrtUSub 10 1.46 0.00 1.69 78 TR_XM_DK_Bayes1 10 1.46 0.00 1.69 79 XMLngstWrd_02 10 1.61 1.06 1.69 80 UNTRUSTED_Relay 10 4.24 20.21 1.69 81 XM_Evil_Numbers_Gen 10 2.05 4.26 1.69 82 TR_XM_SpammyWords4 9 3.95 19.15 1.53 83 XM_B_Phish_Phrases 9 2.92 11.70 1.53 84 TR_XM_UnparsRelay 9 3.51 15.96 1.53 85 TR_XM_SpammyRelay 8 2.49 9.57 1.36 86 RCVD_IN_VALIDITY_SAFE 7 1.02 0.00 1.19 87 XMBody_78 7 1.32 2.13 1.19 88 XM_UB50 7 3.36 17.02 1.19 89 HTML_IMAGE_RATIO_08 7 1.02 0.00 1.19 90 TR_XM_DK_Bayes2 7 1.02 0.00 1.19 91 MIME_HTML_MOSTLY 6 1.17 2.13 1.02 92 XM_B_Investor 6 2.78 13.83 1.02 93 RELAYCOUNTRY_AU 6 1.17 2.13 1.02 94 MPART_ALT_DIFF 6 1.17 2.13 1.02 95 USER_IN_WELCOMELIST 6 0.88 0.00 1.02 96 TM2_M_VERY_LONG_WORD 6 1.17 2.13 1.02 97 BAYES_99 6 4.24 24.47 1.02 98 XM_DK_Undo_02 6 6.14 38.30 1.02 99 T_REMOTE_IMAGE 6 1.17 2.13 1.02 100 TM2_M_URI_OPT_OUT 6 0.88 0.00 1.02 101 TR_XM_PhishingBody 6 3.80 21.28 1.02 102 HTTPS_HTTP_MISMATCH 6 0.88 0.00 1.02 103 XM_B_Phish66 6 2.92 14.89 1.02 104 HTML_IMAGE_RATIO_02 6 1.46 4.26 1.02 105 USER_IN_WHITELIST 6 0.88 0.00 1.02 106 XM_H_Long_From01 5 1.02 2.13 0.85 107 XM_B_SpammyWords3 5 2.49 12.77 0.85 108 KHOP_HELO_FCRDNS 5 1.75 7.45 0.85 109 XMDateMe_00 5 0.73 0.00 0.85 110 TR_XM_DK_SendGrid 5 0.88 1.06 0.85 111 XMLngstWrd_03 5 0.88 1.06 0.85 112 XM_H_PHPMailer 5 1.32 4.26 0.85 113 XMGappySubj_01 5 1.17 3.19 0.85 114 IN_HORDE_ADDRESS_BOOK 5 1.02 2.13 0.85 115 XM_PDF 4 0.58 0.00 0.68 116 MISSING_HEADERS 4 0.58 0.00 0.68 117 DKIM_INVALID 4 1.17 4.26 0.68 118 XM_B_Unsub2 4 0.73 1.06 0.68 119 HTML_IMAGE_RATIO_06 4 0.88 2.13 0.68 120 BAYES_999 4 3.51 21.28 0.68 121 XM_ZIP 4 0.58 0.00 0.68 122 XMHTML_After_End 4 0.58 0.00 0.68 123 RELAYCOUNTRY_GB 4 0.73 1.06 0.68 124 XMSubMetaSx_00 4 1.32 5.32 0.68 125 TooManyTo_002 4 1.17 4.26 0.68 126 DEAR_SOMETHING 3 0.44 0.00 0.51 127 TooManyTo_004 3 1.02 4.26 0.51 128 HK_RANDOM_ENVFROM 3 0.44 0.00 0.51 129 BAYES_95 3 1.17 5.32 0.51 130 T_TooManySym_03 3 0.44 0.00 0.51 131 T_XMDrugObfuBody_14 3 0.73 2.13 0.51 132 XM_GoogleGroups 3 0.58 1.06 0.51 133 TooManyTo_005 3 0.88 3.19 0.51 134 BOTNET 3 3.07 19.15 0.51 135 SpammyFromTLD_02 3 1.02 4.26 0.51 136 URI_HEX 3 0.44 0.00 0.51 137 RCVD_IN_VALIDITY_CERTIFIED 3 0.44 0.00 0.51 138 GAPPY_SUBJECT 3 0.44 0.00 0.51 139 TooManyTo_003 3 1.02 4.26 0.51 140 XMStockSpam_06 2 1.02 5.32 0.34 141 XM_ZohoDesk1 2 0.29 0.00 0.34 142 XMCapTrack 2 0.73 3.19 0.34 143 TR_XM_SpoofStaff 2 0.44 1.06 0.34 144 GMD_PDF_SQUARE 2 0.29 0.00 0.34 145 NML_ADSP_CUSTOM_MED 2 0.29 0.00 0.34 146 REPLYTO_WITHOUT_TO_CC 2 0.29 0.00 0.34 147 XM_S_SubURI 2 0.29 0.00 0.34 148 FORGED_GMAIL_RCVD 2 0.29 0.00 0.34 149 XMSpoofStaff2 2 0.44 1.06 0.34 150 TO_NO_BRKTS_HTML_ONLY 2 0.29 0.00 0.34 151 TR_XM_Base64_M1 2 0.44 1.06 0.34 152 DKIM_ADSP_CUSTOM_MED 2 0.29 0.00 0.34 153 XMLngstWrd_04 2 0.44 1.06 0.34 154 MSGID_NOFQDN1 2 0.29 0.00 0.34 155 NUMERIC_HTTP_ADDR 2 0.44 1.06 0.34 156 RELAYCOUNTRY_IN 2 0.88 4.26 0.34 157 XM_OfRef6 2 2.49 15.96 0.34 158 TR_XM_PHPForged 2 0.44 1.06 0.34 159 SUBJ_YOUR_FAMILY 2 0.29 0.00 0.34 160 XMSexyCombo_05 2 1.32 7.45 0.34 161 DC_PNG_UNO_LARGO 2 0.29 0.00 0.34 162 HK_RANDOM_FROM 2 0.29 0.00 0.34 163 RELAYCOUNTRY_RU 2 0.44 1.06 0.34 164 XM_H_SpoofStaff4 2 0.44 1.06 0.34 165 HTML_IMAGE_ONLY_32 2 0.29 0.00 0.34 166 FROM_GOV_DKIM_AU 2 0.29 0.00 0.34 167 XM_Ancestry_Forge 2 0.29 0.00 0.34 168 FROM_GOV_SPOOF 2 0.44 1.06 0.34 169 SpammyFromTLD_01 2 0.88 4.26 0.34 170 HTML_FONT_FACE_BAD 2 0.29 0.00 0.34 171 TR_XM_DKIM_Undo 2 3.95 26.60 0.34 172 MIME_CHARSET_FARAWAY 2 1.90 11.70 0.34 173 TR_MetaPhish_Combo_01 2 1.61 9.57 0.34 174 HTML_SHORT_LINK_IMG_3 2 0.29 0.00 0.34 175 TR_XM_SpammyWords5 2 0.44 1.06 0.34 176 TR_XM_PSC1 2 0.44 1.06 0.34 177 TR_XM_SpoofPhishAttach 2 0.29 0.00 0.34 178 TVD_RCVD_IP 2 0.29 0.00 0.34 179 RELAYCOUNTRY_DE 2 0.29 0.00 0.34 180 TR_Mismatch_TLD_01 2 0.29 0.00 0.34 181 TR_Mismatch_TLD_02 2 0.44 1.06 0.34 182 TR_XM_PHPDW 2 0.73 3.19 0.34 183 XM_H_AmazonPhish 1 0.15 0.00 0.17 184 XMSubNoVowel 1 0.58 3.19 0.17 185 XMSubMetaI_00 1 0.15 0.00 0.17 186 XM_DIRTYINTL 1 0.29 1.06 0.17 187 FROM_EXCESS_BASE64 1 1.75 11.70 0.17 188 CTE_8BIT_MISMATCH 1 0.15 0.00 0.17 189 XMSubMetaD_00 1 0.15 0.00 0.17 190 MPART_ALT_DIFF_COUNT 1 0.15 0.00 0.17 191 TR_XM_Base64_C 1 0.15 0.00 0.17 192 TR_XM_FormFill2 1 0.29 1.06 0.17 193 RDNS_DYNAMIC 1 1.90 12.77 0.17 194 LINKEDIN_IMG_NOT_RCVD_LNKN 1 0.29 1.06 0.17 195 TR_XM_MSPIKECOMBO 1 0.15 0.00 0.17 196 TR_XM_Base64_M2 1 0.29 1.06 0.17 197 PRESENTAMOS_ES 1 0.15 0.00 0.17 198 TR_XM_SpoofStaff3 1 0.15 0.00 0.17 199 XM_H_Trusted_IP 1 0.15 0.00 0.17 200 DATE_IN_PAST_03_06 1 0.44 2.13 0.17 ----------------------------------------------------------------------