Email: 440 Autolearn: 0 AvgScore: 0.52 AvgScanTime: 4.33 sec Spam: 75 Autolearn: 0 AvgScore: 12.60 AvgScanTime: 4.54 sec Ham: 365 Autolearn: 0 AvgScore: -1.96 AvgScanTime: 4.29 sec Time Spent Running SA: 0.53 hours Time Spent Processing Spam: 0.09 hours Time Spent Processing Ham: 0.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 64 83.64 85.33 83.29 2 HTML_MESSAGE 62 71.14 82.67 68.77 3 XM_B_Unicode 56 55.00 74.67 50.96 4 DKIM_SIGNED 56 67.50 74.67 66.03 5 RELAYCOUNTRY_US 55 69.32 73.33 68.49 6 XM_DK_Pass 51 64.32 68.00 63.56 7 DKIM_VALID 47 62.95 62.67 63.01 8 XMListUnsubscribeExists 43 43.86 57.33 41.10 9 XM_B_SpammyWords 41 32.05 54.67 27.40 10 DCC_CHECK_NEGATIVE 38 83.41 50.67 90.14 11 DCC_CHECK 37 16.59 49.33 9.86 12 DKIM_VALID_AU 36 50.23 48.00 50.68 13 LOC_TINY_FONT_1 34 22.27 45.33 17.53 14 FVGT_m_MULTI_ODD 33 19.55 44.00 14.52 15 XM_B_Unicode3 31 31.36 41.33 29.32 16 BAYES_50 30 55.00 40.00 58.08 17 RELAYCOUNTRY_META 27 9.55 36.00 4.11 18 XM_B_SpammyWords2 26 15.23 34.67 11.23 19 HTML_FONT_LOW_CONTRAST 24 28.18 32.00 27.40 20 T_TM2_M_HEADER_IN_MSG 22 18.86 29.33 16.71 21 XM_DK_Undo_02 19 5.91 25.33 1.92 22 BAYES_99 18 5.23 24.00 1.37 23 RCVD_IN_MSPIKE_H2 17 17.05 22.67 15.89 24 UNTRUSTED_Relay 16 4.32 21.33 0.82 25 T_KAM_HTML_FONT_INVALID 16 13.18 21.33 11.51 26 XMSubLong 16 18.86 21.33 18.36 27 TR_XM_DKIM_Undo 15 4.09 20.00 0.82 28 MIME_HTML_ONLY 14 11.36 18.67 9.86 29 XM_Multi_Part_URI 14 14.09 18.67 13.15 30 BAYES_60 14 15.23 18.67 14.52 31 DKIM_VALID_EF 14 26.82 18.67 28.49 32 BOTNET 12 3.18 16.00 0.55 33 UNPARSEABLE_RELAY 12 11.14 16.00 10.14 34 BAYES_999 11 3.18 14.67 0.82 35 XM_UncommonTLD01 11 5.91 14.67 4.11 36 XMStrtUSub 11 5.45 14.67 3.56 37 FSL_BULK_SIG 11 3.64 14.67 1.37 38 LOTS_OF_MONEY 10 4.77 13.33 3.01 39 BAYES_80 10 6.59 13.33 5.21 40 TR_XM_BayesUnsub 10 4.77 13.33 3.01 41 XM_B_Unsub 10 5.45 13.33 3.84 42 DKIM_INVALID 9 4.55 12.00 3.01 43 RCVD_IN_MSPIKE_WL 9 29.09 12.00 32.60 44 XM_UB50 9 2.73 12.00 0.82 45 TR_XM_SpammyWords4 9 4.32 12.00 2.74 46 XM_B_SpammyWords3 9 5.23 12.00 3.84 47 TR_XM_SpammyWords2 9 2.05 12.00 0.00 48 TR_XM_DK_Unsub 9 16.59 12.00 17.53 49 XM_Evil_Numbers_Gen 8 4.09 10.67 2.74 50 BOTNET_IPINHOSTNAME 8 4.55 10.67 3.29 51 TR_XM_InvalidRelay 8 1.82 10.67 0.00 52 TR_XM_SpammyRelay 8 2.95 10.67 1.37 53 XM_Body_Dirty_Words 8 12.73 10.67 13.15 54 TR_XM_UnparsRelay 8 2.73 10.67 1.10 55 XM_SPF_SoftFail 7 2.05 9.33 0.55 56 TooManyTo_001 7 6.59 9.33 6.03 57 TR_XM_SpammyWords5 7 2.27 9.33 0.82 58 TR_DCC_Bayes_99 7 2.05 9.33 0.55 59 XMNumbers 6 3.86 8.00 3.01 60 XMSubMetaSx_00 6 3.64 8.00 2.74 61 XM_B_Crypto 6 1.36 8.00 0.00 62 PDS_BTC_ID 6 1.36 8.00 0.00 63 RELAYCOUNTRY_VN 6 1.36 8.00 0.00 64 BITCOIN_SPAM_07 6 1.36 8.00 0.00 65 TR_XM_Crypto2 6 1.36 8.00 0.00 66 KHOP_HELO_FCRDNS 5 1.82 6.67 0.82 67 XM_B_Investor 5 2.95 6.67 2.19 68 T_XMDrugObfuBody_14 5 2.50 6.67 1.64 69 RCVD_IN_VALIDITY_SAFE 5 3.41 6.67 2.74 70 TM2_M_URI_OPT_OUT 5 2.50 6.67 1.64 71 RCVD_IN_VALIDITY_RPBL 5 1.14 6.67 0.00 72 HTML_FONT_TINY_NORDNS 5 1.14 6.67 0.00 73 LotsOfNums_01 4 4.77 5.33 4.66 74 HTML_IMAGE_RATIO_06 4 2.73 5.33 2.19 75 HTML_IMAGE_RATIO_08 4 3.18 5.33 2.74 76 MIME_QP_LONG_LINE 4 4.32 5.33 4.11 77 XMSexyCombo_05 4 1.82 5.33 1.10 78 HTML_TITLE_SUBJ_DIFF 4 1.14 5.33 0.27 79 SpammyFromTLD_02 4 1.59 5.33 0.82 80 RCVD_IN_MSPIKE_H3 4 15.91 5.33 18.08 81 RELAYCOUNTRY_CA 4 1.14 5.33 0.27 82 HTML_IMAGE_RATIO_02 4 1.59 5.33 0.82 83 RCVD_IN_VALIDITY_CERTIFIED 4 2.50 5.33 1.92 84 MIME_HTML_MOSTLY 4 2.73 5.33 2.19 85 TR_XM_PhishingBody 4 2.27 5.33 1.64 86 MPART_ALT_DIFF 3 2.05 4.00 1.64 87 SUBJ_ALL_CAPS 3 1.14 4.00 0.55 88 XM_B_SpammyTLD 3 5.00 4.00 5.21 89 XM_UB99 3 0.68 4.00 0.00 90 BOTNET_NORDNS 3 0.68 4.00 0.00 91 XM_H_PHPMailer 3 1.36 4.00 0.82 92 XM_DIRTYINTL 3 1.36 4.00 0.82 93 RELAYCOUNTRY_IT 3 0.68 4.00 0.00 94 BAYES_95 3 2.95 4.00 2.74 95 TR_Mismatch_TLD_02 3 0.68 4.00 0.00 96 RCVD_IN_MSPIKE_H4 3 6.59 4.00 7.12 97 XM_B_Phish66 3 2.05 4.00 1.64 98 XM_GoogleGroups 3 2.05 4.00 1.64 99 XM_H_Long_From01 3 5.45 4.00 5.75 100 DIET_1 3 0.68 4.00 0.00 101 TR_XM_NoHeaderRelay 3 0.68 4.00 0.00 102 T_Symld_Words_02 3 0.68 4.00 0.00 103 TR_XM_PHPDW 3 0.68 4.00 0.00 104 RELAYCOUNTRY_PL 3 0.68 4.00 0.00 105 RELAYCOUNTRY_AT 3 1.14 4.00 0.55 106 RCVD_IN_RP_RNBL 3 0.68 4.00 0.00 107 XM_SendGrid 2 1.59 2.67 1.37 108 XMReplyNow 2 0.45 2.67 0.00 109 MIME_HTML_ONLY_MULTI 2 0.68 2.67 0.27 110 URI_NOVOWEL 2 1.14 2.67 0.82 111 SpammyFromTLD_01 2 0.45 2.67 0.00 112 MAILING_LIST_MULTI 2 4.77 2.67 5.21 113 TR_XM_BayesRelay 2 0.45 2.67 0.00 114 XMCapTrack 2 1.36 2.67 1.10 115 XMHTML_After_End 2 0.91 2.67 0.55 116 TR_XM_PHPForged 2 0.45 2.67 0.00 117 RCVD_IN_BL_SPAMCOP_NET 2 0.45 2.67 0.00 118 XM_H_PHPOS_M 2 0.45 2.67 0.00 119 LONG_JUNK_URI2 2 0.45 2.67 0.00 120 FROM_LOCAL_DIGITS 2 0.45 2.67 0.00 121 TR_BOTNET_NEGATE 2 0.68 2.67 0.27 122 RELAYCOUNTRY_IN 2 0.45 2.67 0.00 123 FROM_STARTS_WITH_NUMS 2 0.45 2.67 0.00 124 XM_UB80 2 0.45 2.67 0.00 125 FROM_LOCAL_HEX 2 0.45 2.67 0.00 126 XMSubMetaSSx_00 2 0.45 2.67 0.00 127 XM_UB60 2 0.45 2.67 0.00 128 XM_H_Undi_Recip 2 2.05 2.67 1.92 129 XM_B_Phish_Phrases 2 1.14 2.67 0.82 130 SCC_BODY_URI_ONLY 2 10.00 2.67 11.51 131 TR_XM_FormFill2 2 0.68 2.67 0.27 132 XMBody_03 2 0.45 2.67 0.00 133 TR_XM_SPAMCOP 2 0.45 2.67 0.00 134 MILLION_USD 2 0.45 2.67 0.00 135 XM_H_PHPOS 2 0.45 2.67 0.00 136 TR_XM_MSPIKECOMBO 2 0.45 2.67 0.00 137 RDNS_DYNAMIC 2 0.45 2.67 0.00 138 MONEY_BACK 2 0.45 2.67 0.00 139 LONG_JUNK_URI 2 0.91 2.67 0.55 140 MPART_ALT_DIFF_COUNT 2 0.91 2.67 0.55 141 RCVD_IN_MSPIKE_H5 2 6.59 2.67 7.40 142 XMNoVowels 2 1.36 2.67 1.10 143 HTML_MIME_NO_HTML_TAG 2 1.59 2.67 1.37 144 HTTPS_HTTP_MISMATCH 2 1.82 2.67 1.64 145 XM_OfRef6 2 1.36 2.67 1.10 146 XMStockSpam_06 2 0.91 2.67 0.55 147 RCVD_IN_MSPIKE_BL 2 0.45 2.67 0.00 148 XMSolicitRefs_0 2 2.05 2.67 1.92 149 RCVD_IN_MSPIKE_L4 1 0.23 1.33 0.00 150 XM_H_DatedCube 1 0.23 1.33 0.00 151 MONEY_FRAUD_8 1 0.23 1.33 0.00 152 NORDNS_LOW_CONTRAST 1 0.23 1.33 0.00 153 HTML_IMAGE_RATIO_04 1 3.41 1.33 3.84 154 XM_PDF 1 2.73 1.33 3.01 155 RCVD_IN_MSPIKE_L3 1 0.23 1.33 0.00 156 ADVANCE_FEE_5_NEW_MONEY 1 0.23 1.33 0.00 157 TR_XM_SB_Phish 1 0.68 1.33 0.55 158 TR_XM_COVIDMETA3 1 0.23 1.33 0.00 159 HK_RANDOM_REPLYTO 1 0.23 1.33 0.00 160 T_TVD_MIME_NO_HEADERS 1 0.23 1.33 0.00 161 OBFU_TEXT_ATTACH 1 0.23 1.33 0.00 162 XM_B_Unsub2 1 0.68 1.33 0.55 163 XMSubMetaI_00 1 4.09 1.33 4.66 164 XM_E_Blogspot 1 0.68 1.33 0.55 165 NOT_SPAM 1 0.23 1.33 0.00 166 XMNoSubject 1 0.23 1.33 0.00 167 TR_XM_COVIDMETA4 1 0.23 1.33 0.00 168 BOUNCE_MESSAGE 1 23.64 1.33 28.22 169 BODY_EMPTY 1 0.23 1.33 0.00 170 TR_LOTS_OF_MONEY2 1 0.23 1.33 0.00 171 T_REMOTE_IMAGE 1 2.05 1.33 2.19 172 TR_XM_FormFill 1 0.23 1.33 0.00 173 RELAYCOUNTRY_PH 1 0.23 1.33 0.00 174 FSL_HELO_NON_FQDN_1 1 0.23 1.33 0.00 175 MONEY_BARRISTER 1 0.23 1.33 0.00 176 TooManyTo_004 1 0.68 1.33 0.55 177 RELAYCOUNTRY_AU 1 1.59 1.33 1.64 178 FROM_EXCESS_BASE64 1 0.68 1.33 0.55 179 XMSubEmpty 1 0.23 1.33 0.00 180 RELAYCOUNTRY_BE 1 0.23 1.33 0.00 181 RELAYCOUNTRY_ES 1 0.23 1.33 0.00 182 TR_XM_Base64_M1 1 0.23 1.33 0.00 183 NAME_EMAIL_DIFF 1 0.23 1.33 0.00 184 XMLngstWrd_00 1 0.68 1.33 0.55 185 XMSubPhish11 1 0.68 1.33 0.55 186 RELAYCOUNTRY_ID 1 0.23 1.33 0.00 187 RELAYCOUNTRY_NL 1 0.45 1.33 0.27 188 TM2_M_OBFU_COMMENT 1 0.23 1.33 0.00 189 HK_RANDOM_ENVFROM 1 1.14 1.33 1.10 190 RELAYCOUNTRY_NZ 1 0.23 1.33 0.00 191 UPPERCASE_50_75 1 0.45 1.33 0.27 192 TR_Caps_n_Bayes_99 1 0.23 1.33 0.00 193 RELAYCOUNTRY_RO 1 0.23 1.33 0.00 194 URG_BIZ 1 0.23 1.33 0.00 195 XMLngstWrd_01 1 0.23 1.33 0.00 196 MISSING_SUBJECT 1 0.23 1.33 0.00 197 XM_B_SEO 1 0.23 1.33 0.00 198 TR_XM_SEO4 1 0.23 1.33 0.00 199 SHORT_URI_5 1 0.23 1.33 0.00 200 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.91 1.33 0.82 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 329 83.41 50.67 90.14 2 T_SCC_BODY_TEXT_LINE 304 83.64 85.33 83.29 3 HTML_MESSAGE 251 71.14 82.67 68.77 4 RELAYCOUNTRY_US 250 69.32 73.33 68.49 5 DKIM_SIGNED 241 67.50 74.67 66.03 6 XM_DK_Pass 232 64.32 68.00 63.56 7 DKIM_VALID 230 62.95 62.67 63.01 8 BAYES_50 212 55.00 40.00 58.08 9 XM_B_Unicode 186 55.00 74.67 50.96 10 DKIM_VALID_AU 185 50.23 48.00 50.68 11 XMListUnsubscribeExists 150 43.86 57.33 41.10 12 RCVD_IN_MSPIKE_WL 119 29.09 12.00 32.60 13 XM_B_Unicode3 107 31.36 41.33 29.32 14 DKIM_VALID_EF 104 26.82 18.67 28.49 15 ANY_BOUNCE_MESSAGE 103 23.64 1.33 28.22 16 ALL_TRUSTED 103 23.41 0.00 28.22 17 BOUNCE_MESSAGE 103 23.64 1.33 28.22 18 HTML_FONT_LOW_CONTRAST 100 28.18 32.00 27.40 19 XM_B_SpammyWords 100 32.05 54.67 27.40 20 XMSubLong 67 18.86 21.33 18.36 21 RCVD_IN_MSPIKE_H3 66 15.91 5.33 18.08 22 TR_XM_DK_Unsub 64 16.59 12.00 17.53 23 LOC_TINY_FONT_1 64 22.27 45.33 17.53 24 T_TM2_M_HEADER_IN_MSG 61 18.86 29.33 16.71 25 T_XMDrugObfuBody_08 59 13.41 0.00 16.16 26 RCVD_IN_MSPIKE_H2 58 17.05 22.67 15.89 27 BAYES_60 53 15.23 18.67 14.52 28 FVGT_m_MULTI_ODD 53 19.55 44.00 14.52 29 XM_Body_Dirty_Words 48 12.73 10.67 13.15 30 XM_Multi_Part_URI 48 14.09 18.67 13.15 31 SCC_BODY_URI_ONLY 42 10.00 2.67 11.51 32 T_KAM_HTML_FONT_INVALID 42 13.18 21.33 11.51 33 XM_B_SpammyWords2 41 15.23 34.67 11.23 34 UNPARSEABLE_RELAY 37 11.14 16.00 10.14 35 DCC_CHECK 36 16.59 49.33 9.86 36 MIME_HTML_ONLY 36 11.36 18.67 9.86 37 BAYES_20 33 7.50 0.00 9.04 38 HTML_IMAGE_ONLY_20 31 7.05 0.00 8.49 39 XM_DKIMWhitelistDomains 30 6.82 0.00 8.22 40 XM_DK_Undo_01 29 6.82 1.33 7.95 41 RCVD_IN_MSPIKE_H5 27 6.59 2.67 7.40 42 MIME_HEADER_CTYPE_ONLY 27 6.14 0.00 7.40 43 RCVD_IN_MSPIKE_H4 26 6.59 4.00 7.12 44 IN_ZIMBRA_NJ_WHITELIST 22 5.00 0.00 6.03 45 TooManyTo_001 22 6.59 9.33 6.03 46 XM_H_Long_From01 21 5.45 4.00 5.75 47 BAYES_00 20 4.55 0.00 5.48 48 USER_IN_DEF_DKIM_WL 19 4.32 0.00 5.21 49 XM_B_SpammyTLD 19 5.00 4.00 5.21 50 MAILING_LIST_MULTI 19 4.77 2.67 5.21 51 BAYES_80 19 6.59 13.33 5.21 52 TVD_SPACE_RATIO 18 4.09 0.00 4.93 53 XMSubMetaI_00 17 4.09 1.33 4.66 54 LotsOfNums_01 17 4.77 5.33 4.66 55 T_TooManySym_01 16 3.64 0.00 4.38 56 XM_UncommonTLD01 15 5.91 14.67 4.11 57 MIME_QP_LONG_LINE 15 4.32 5.33 4.11 58 RELAYCOUNTRY_META 15 9.55 36.00 4.11 59 XM_B_SpammyWords3 14 5.23 12.00 3.84 60 XM_B_Unsub 14 5.45 13.33 3.84 61 HTML_IMAGE_RATIO_04 14 3.41 1.33 3.84 62 XMStrtUSub 13 5.45 14.67 3.56 63 BAYES_40 12 2.73 0.00 3.29 64 TR_XM_DK_Bayes 12 2.73 0.00 3.29 65 BOTNET_IPINHOSTNAME 12 4.55 10.67 3.29 66 TR_XM_BayesUnsub 11 4.77 13.33 3.01 67 TR_XM_DK_Bayes1 11 2.50 0.00 3.01 68 DKIM_INVALID 11 4.55 12.00 3.01 69 TR_XM_DK_Bayes2 11 2.50 0.00 3.01 70 XM_PDF 11 2.73 1.33 3.01 71 XMNumbers 11 3.86 8.00 3.01 72 LOTS_OF_MONEY 11 4.77 13.33 3.01 73 XMSubMetaSx_00 10 3.64 8.00 2.74 74 RCVD_IN_VALIDITY_SAFE 10 3.41 6.67 2.74 75 XM_Evil_Numbers_Gen 10 4.09 10.67 2.74 76 HTML_IMAGE_RATIO_08 10 3.18 5.33 2.74 77 TR_XM_SpammyWords4 10 4.32 12.00 2.74 78 INVALID_MSGID 10 2.27 0.00 2.74 79 BAYES_95 10 2.95 4.00 2.74 80 URI_TRY_3LD 9 2.05 0.00 2.47 81 TO_MALFORMED 9 2.05 0.00 2.47 82 T_TooManySym_02 9 2.05 0.00 2.47 83 IN_HORDE_ADDRESS_BOOK 8 1.82 0.00 2.19 84 MIME_HTML_MOSTLY 8 2.73 5.33 2.19 85 XM_B_Investor 8 2.95 6.67 2.19 86 T_REMOTE_IMAGE 8 2.05 1.33 2.19 87 HTML_IMAGE_RATIO_06 8 2.73 5.33 2.19 88 XM_H_Undi_Recip 7 2.05 2.67 1.92 89 RCVD_IN_VALIDITY_CERTIFIED 7 2.50 5.33 1.92 90 XMSolicitRefs_0 7 2.05 2.67 1.92 91 XM_CamelCaseFrm001 7 1.59 0.00 1.92 92 XM_ShortIntro_01 7 1.59 0.00 1.92 93 XMHTMLBadTable_001 7 1.59 0.00 1.92 94 XM_DK_Undo_02 7 5.91 25.33 1.92 95 XM_Dr_From 7 1.59 0.00 1.92 96 HTTPS_HTTP_MISMATCH 6 1.82 2.67 1.64 97 TR_XM_PhishingBody 6 2.27 5.33 1.64 98 T_XMDrugObfuBody_14 6 2.50 6.67 1.64 99 MPART_ALT_DIFF 6 2.05 4.00 1.64 100 XM_B_Phish66 6 2.05 4.00 1.64 101 HTML_IMAGE_ONLY_32 6 1.36 0.00 1.64 102 XM_GoogleGroups 6 2.05 4.00 1.64 103 TM2_M_URI_OPT_OUT 6 2.50 6.67 1.64 104 RELAYCOUNTRY_AU 6 1.59 1.33 1.64 105 USER_IN_WHITELIST 5 1.14 0.00 1.37 106 XM_Lotto 5 1.14 0.00 1.37 107 USER_IN_WELCOMELIST 5 1.14 0.00 1.37 108 FSL_BULK_SIG 5 3.64 14.67 1.37 109 SHORT_URI_2 5 1.36 1.33 1.37 110 HTML_MIME_NO_HTML_TAG 5 1.59 2.67 1.37 111 BAYES_99 5 5.23 24.00 1.37 112 XM_SendGrid 5 1.59 2.67 1.37 113 TR_Symld_Words 5 1.14 0.00 1.37 114 XM_Ancestry_Forge 5 1.14 0.00 1.37 115 HTML_OBFUSCATE_05_10 5 1.14 0.00 1.37 116 TR_XM_SpammyRelay 5 2.95 10.67 1.37 117 TR_XM_Undi_Recip11 5 1.14 0.00 1.37 118 RCVD_IN_IADB_DK 4 0.91 0.00 1.10 119 TR_XM_UnparsRelay 4 2.73 10.67 1.10 120 RCVD_IN_IADB_SPF 4 0.91 0.00 1.10 121 RCVD_IN_IADB_LISTED 4 0.91 0.00 1.10 122 XMBody_29 4 0.91 0.00 1.10 123 T_FILL_THIS_FORM_SHORT 4 1.14 1.33 1.10 124 XM_OfRef6 4 1.36 2.67 1.10 125 HK_RANDOM_FROM 4 1.14 1.33 1.10 126 RELAYCOUNTRY_IE 4 0.91 0.00 1.10 127 BODY_URI_ONLY 4 0.91 0.00 1.10 128 RCVD_IN_IADB_SENDERID 4 0.91 0.00 1.10 129 XMNoVowels 4 1.36 2.67 1.10 130 TooManyTo_002 4 1.14 1.33 1.10 131 XMSexyCombo_05 4 1.82 5.33 1.10 132 DC_PNG_UNO_LARGO 4 0.91 0.00 1.10 133 XMCapTrack 4 1.36 2.67 1.10 134 HK_RANDOM_ENVFROM 4 1.14 1.33 1.10 135 XM_B_Phish_Phrases 3 1.14 2.67 0.82 136 TooManyTo_003 3 0.91 1.33 0.82 137 MISSING_HEADERS 3 0.68 0.00 0.82 138 SHOPIFY_IMG_NOT_RCVD_SFY 3 0.91 1.33 0.82 139 PLING_QUERY 3 0.68 0.00 0.82 140 BASE64_LENGTH_79_INF 3 0.68 0.00 0.82 141 T_OBFU_PDF_ATTACH 3 0.68 0.00 0.82 142 HTML_IMAGE_RATIO_02 3 1.59 5.33 0.82 143 TR_MetaPhish_Combo_01 3 0.68 0.00 0.82 144 XM_H_PHPMailer 3 1.36 4.00 0.82 145 XM_DIRTYINTL 3 1.36 4.00 0.82 146 BAYES_999 3 3.18 14.67 0.82 147 TR_XM_DKIM_Undo 3 4.09 20.00 0.82 148 MIME_BASE64_TEXT 3 0.68 0.00 0.82 149 UNTRUSTED_Relay 3 4.32 21.33 0.82 150 T_TooManySym_03 3 0.68 0.00 0.82 151 KHOP_HELO_FCRDNS 3 1.82 6.67 0.82 152 XMDiploma_00 3 0.68 0.00 0.82 153 URI_NOVOWEL 3 1.14 2.67 0.82 154 TR_XM_SpammyWords5 3 2.27 9.33 0.82 155 SpammyFromTLD_02 3 1.59 5.33 0.82 156 MSGID_NOFQDN1 3 0.68 0.00 0.82 157 XMSexyCombo_01 3 0.68 0.00 0.82 158 XM_UB50 3 2.73 12.00 0.82 159 TR_DCC_Bayes_99 2 2.05 9.33 0.55 160 XM_H_Trusted_IP 2 0.45 0.00 0.55 161 FROM_GOV_SPOOF 2 0.45 0.00 0.55 162 DKIM_ADSP_CUSTOM_MED 2 0.45 0.00 0.55 163 XM_TLDProd2 2 0.45 0.00 0.55 164 DATE_IN_PAST_03_06 2 0.45 0.00 0.55 165 NML_ADSP_CUSTOM_MED 2 0.45 0.00 0.55 166 CTE_8BIT_MISMATCH 2 0.45 0.00 0.55 167 XMStockSpam_06 2 0.91 2.67 0.55 168 XM_OfRef8 2 0.45 0.00 0.55 169 HTML_IMAGE_ONLY_28 2 0.45 0.00 0.55 170 TVD_RCVD_IP 2 0.68 1.33 0.55 171 XM_H_Long_From02 2 0.45 0.00 0.55 172 LONG_JUNK_URI 2 0.91 2.67 0.55 173 RELAYCOUNTRY_AT 2 1.14 4.00 0.55 174 HELO_NO_DOMAIN 2 0.68 1.33 0.55 175 BOTNET 2 3.18 16.00 0.55 176 HELO_NODOT 2 0.68 1.33 0.55 177 MPART_ALT_DIFF_COUNT 2 0.91 2.67 0.55 178 FONT_INVIS_LONG_LINE 2 0.45 0.00 0.55 179 XM_OfRef7 2 0.45 0.00 0.55 180 XM_B_Unsub2 2 0.68 1.33 0.55 181 XM_E_Blogspot 2 0.68 1.33 0.55 182 SUBJ_ALL_CAPS 2 1.14 4.00 0.55 183 XM_B_DNDMA 2 0.45 0.00 0.55 184 FIN_FREE 2 0.45 0.00 0.55 185 XMBody_78 2 0.45 0.00 0.55 186 XMHTML_After_End 2 0.91 2.67 0.55 187 XMGappySubj_01 2 0.45 0.00 0.55 188 HTML_IMAGE_ONLY_16 2 0.45 0.00 0.55 189 XMBSHREFv2 2 0.45 0.00 0.55 190 XMGenDplmaNmb 2 0.45 0.00 0.55 191 TR_XM_SB_Phish 2 0.68 1.33 0.55 192 XM_SPF_SoftFail 2 2.05 9.33 0.55 193 XM_Body_Obfu01 2 0.45 0.00 0.55 194 HTML_IMAGE_ONLY_12 2 0.45 0.00 0.55 195 FROM_EXCESS_BASE64 2 0.68 1.33 0.55 196 TooManyTo_004 2 0.68 1.33 0.55 197 XMLngstWrd_00 2 0.68 1.33 0.55 198 HELO_STATIC_HOST 2 0.45 0.00 0.55 199 XMSubMetaSxObfu_02 2 0.45 0.00 0.55 200 XMSubPhish11 2 0.68 1.33 0.55 ----------------------------------------------------------------------