Email: 722 Autolearn: 0 AvgScore: -0.10 AvgScanTime: 1.53 sec Spam: 65 Autolearn: 0 AvgScore: 15.34 AvgScanTime: 2.64 sec Ham: 657 Autolearn: 0 AvgScore: -1.63 AvgScanTime: 1.42 sec Time Spent Running SA: 0.31 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 59 38.78 90.77 33.64 2 T_SCC_BODY_TEXT_LINE 53 82.55 81.54 82.65 3 XM_B_Unicode 52 31.58 80.00 26.79 4 DKIM_SIGNED 50 53.88 76.92 51.60 5 DKIM_VALID 46 53.05 70.77 51.29 6 XM_DK_Pass 46 53.19 70.77 51.45 7 RELAYCOUNTRY_US 41 51.66 63.08 50.53 8 XMListUnsubscribeExists 39 26.18 60.00 22.83 9 XM_B_SpammyWords 37 30.61 56.92 28.01 10 XM_B_Unicode3 37 13.99 56.92 9.74 11 DKIM_VALID_AU 34 47.51 52.31 47.03 12 BAYES_50 34 80.06 52.31 82.80 13 DCC_CHECK 33 32.69 50.77 30.90 14 DCC_CHECK_NEGATIVE 32 67.31 49.23 69.10 15 LOC_TINY_FONT_1 31 21.33 47.69 18.72 16 T_TM2_M_HEADER_IN_MSG 28 10.53 43.08 7.31 17 XM_Multi_Part_URI 25 17.04 38.46 14.92 18 HTML_FONT_LOW_CONTRAST 24 19.94 36.92 18.26 19 RELAYCOUNTRY_META 23 5.40 35.38 2.44 20 T_KAM_HTML_FONT_INVALID 23 7.20 35.38 4.41 21 FVGT_m_MULTI_ODD 23 16.34 35.38 14.46 22 XMSubLong 22 26.04 33.85 25.27 23 XM_B_SpammyWords2 20 4.43 30.77 1.83 24 UNPARSEABLE_RELAY 18 17.73 27.69 16.74 25 DKIM_VALID_EF 18 22.30 27.69 21.77 26 XM_DK_Undo_02 18 3.19 27.69 0.76 27 RCVD_IN_MSPIKE_H2 17 34.21 26.15 35.01 28 BAYES_99 15 2.63 23.08 0.61 29 RCVD_IN_MSPIKE_WL 14 10.80 21.54 9.74 30 MIME_HTML_ONLY 14 6.23 21.54 4.72 31 BAYES_999 14 2.35 21.54 0.46 32 TR_XM_BayesUnsub 13 3.74 20.00 2.13 33 XM_B_SpammyTLD 13 19.53 20.00 19.48 34 UNTRUSTED_Relay 13 2.49 20.00 0.76 35 XM_Body_Dirty_Words 13 5.54 20.00 4.11 36 XM_B_Unsub 13 3.74 20.00 2.13 37 XM_B_SpammyWords3 13 2.22 20.00 0.46 38 BOTNET 10 1.80 15.38 0.46 39 RCVD_IN_MSPIKE_H3 10 6.09 15.38 5.18 40 XM_UncommonTLD01 9 2.63 13.85 1.52 41 TR_DCC_Bayes_99 9 1.25 13.85 0.00 42 XM_UB50 9 1.39 13.85 0.15 43 HTML_IMAGE_RATIO_02 9 12.33 13.85 12.18 44 TR_XM_SpammyRelay 9 2.08 13.85 0.91 45 RCVD_IN_MSPIKE_BL 8 1.11 12.31 0.00 46 TR_XM_MSPIKECOMBO 8 1.11 12.31 0.00 47 LOTS_OF_MONEY 8 2.08 12.31 1.07 48 TR_XM_DK_Unsub 8 16.48 12.31 16.89 49 TR_XM_UnparsRelay 7 1.39 10.77 0.46 50 XM_B_Phish_Phrases 7 1.66 10.77 0.76 51 XMGetyour 7 0.97 10.77 0.00 52 XMSubPhish11 7 1.39 10.77 0.46 53 XM_DIRTYINTL 7 1.52 10.77 0.61 54 TR_XM_SpammyWords4 7 1.25 10.77 0.30 55 FSL_BULK_SIG 7 25.90 10.77 27.40 56 XM_B_Unsub2 7 1.39 10.77 0.46 57 XMNumbers 7 3.05 10.77 2.28 58 TR_XM_SB_Phish 7 1.39 10.77 0.46 59 TR_XM_DKIM_Undo 6 0.97 9.23 0.15 60 TooManyTo_001 6 2.08 9.23 1.37 61 PDS_OTHER_BAD_TLD 6 0.83 9.23 0.00 62 BAYES_80 6 1.80 9.23 1.07 63 BOTNET_IPINHOSTNAME 6 1.66 9.23 0.91 64 TM2_M_VERY_LONG_WORD 5 1.11 7.69 0.46 65 ANY_BOUNCE_MESSAGE 5 41.41 7.69 44.75 66 BOUNCE_MESSAGE 5 41.41 7.69 44.75 67 MAILING_LIST_MULTI 5 0.83 7.69 0.15 68 XM_Body_Dirty_Words_01 5 0.83 7.69 0.15 69 T_XMDrugObfuBody_08 5 9.83 7.69 10.05 70 XM_CamelCaseFrm001 5 1.52 7.69 0.91 71 XMSexyCombo_05 5 1.66 7.69 1.07 72 XM_RXBody 5 0.97 7.69 0.30 73 BAYES_60 5 4.02 7.69 3.65 74 TR_Mismatch_TLD_02 5 0.69 7.69 0.00 75 MIME_QP_LONG_LINE 4 1.25 6.15 0.76 76 XMStockSpam_06 4 1.94 6.15 1.52 77 BOTNET_NORDNS 4 0.55 6.15 0.00 78 XM_Evil_Numbers_Gen 4 2.22 6.15 1.83 79 TR_XM_SpammyWords5 4 1.11 6.15 0.61 80 RCVD_IN_MSPIKE_L3 4 0.55 6.15 0.00 81 XMDiploma_00 4 0.97 6.15 0.46 82 XM_B_Investor 4 0.83 6.15 0.30 83 XM_OfRef6 4 0.83 6.15 0.30 84 TR_XM_SpammyWords2 4 0.55 6.15 0.00 85 DKIM_INVALID 4 0.83 6.15 0.30 86 T_XMDrugObfuBody_14 4 1.39 6.15 0.91 87 LotsOfNums_01 4 2.08 6.15 1.67 88 ALL_TRUSTED 4 43.63 6.15 47.34 89 TR_XM_NoHeaderRelay 4 0.83 6.15 0.30 90 HTML_IMAGE_RATIO_06 4 0.97 6.15 0.46 91 TR_XM_PhishingBody 4 0.83 6.15 0.30 92 SpammyFromTLD_02 4 18.14 6.15 19.33 93 TR_XM_BayesRelay 4 0.55 6.15 0.00 94 RELAYCOUNTRY_AU 4 1.52 6.15 1.07 95 HDRS_MISSP 3 0.55 4.62 0.15 96 XM_UB99 3 0.42 4.62 0.00 97 XM_SendGrid 3 5.96 4.62 6.09 98 XM_SPF_SoftFail 3 0.69 4.62 0.30 99 RELAYCOUNTRY_GB 3 0.55 4.62 0.15 100 RCVD_IN_MSPIKE_H4 3 2.08 4.62 1.83 101 XMBody_03 3 0.42 4.62 0.00 102 TO_MALFORMED 3 1.52 4.62 1.22 103 RCVD_IN_PSBL 3 0.69 4.62 0.30 104 RCVD_IN_MSPIKE_L4 3 0.42 4.62 0.00 105 RELAYCOUNTRY_CN 3 0.42 4.62 0.00 106 HTML_OBFUSCATE_05_10 3 0.42 4.62 0.00 107 TR_XM_MSPIKECOMBO2 3 0.42 4.62 0.00 108 DOS_OE_TO_MX 3 0.42 4.62 0.00 109 LongTLD 3 0.42 4.62 0.00 110 MPART_ALT_DIFF 3 0.55 4.62 0.15 111 LOW_PRICE 3 0.42 4.62 0.00 112 XM_H_Long_From01 3 18.70 4.62 20.09 113 XM_B_COVIDMETA 3 0.55 4.62 0.15 114 XM_B_SexDrugs1 3 0.42 4.62 0.00 115 XM_H_PHPMailer 3 0.69 4.62 0.30 116 XM_B_SpammyWords4 3 0.55 4.62 0.15 117 MIMEOLE_DIRECT_TO_MX 3 0.42 4.62 0.00 118 HTML_IMAGE_RATIO_04 3 1.39 4.62 1.07 119 TR_Mismatch_TLD_01 3 0.42 4.62 0.00 120 SHOPIFY_IMG_NOT_RCVD_SFY 3 6.93 4.62 7.15 121 XMDateMe_00 3 0.55 4.62 0.15 122 XMSubMetaSx_00 3 12.60 4.62 13.39 123 XMBody_17 3 0.55 4.62 0.15 124 XM_Body_Dirty_Words_02 3 0.42 4.62 0.00 125 XMGenDplmaNmb 3 0.42 4.62 0.00 126 XMSolicitRefs_0 3 0.83 4.62 0.46 127 XMStrtUSub 3 1.11 4.62 0.76 128 RELAYCOUNTRY_FR 2 0.28 3.08 0.00 129 FROM_SUSPICIOUS_NTLD_FP 2 0.28 3.08 0.00 130 HTML_MIME_NO_HTML_TAG 2 1.39 3.08 1.22 131 XM_Nigeria_01 2 0.28 3.08 0.00 132 XMSubNoVowel 2 0.28 3.08 0.00 133 XFER_LOTSA_MONEY 2 0.28 3.08 0.00 134 TR_XM_FormFill2 2 0.42 3.08 0.15 135 LOADSA_MONEY_COMBO 2 0.28 3.08 0.00 136 BAYES_95 2 0.55 3.08 0.30 137 RELAYCOUNTRY_PL 2 0.28 3.08 0.00 138 RELAYCOUNTRY_DE 2 0.28 3.08 0.00 139 RELAYCOUNTRY_NL 2 0.28 3.08 0.00 140 HDR_ORDER_FTSDMCXX_NORDNS 2 0.28 3.08 0.00 141 MONEY_BACK 2 0.28 3.08 0.00 142 HDR_ORDER_FTSDMCXX_DIRECT 2 0.28 3.08 0.00 143 TR_XM_PHPDW 2 0.55 3.08 0.30 144 FSL_HELO_NON_FQDN_1 2 0.28 3.08 0.00 145 HELO_NO_DOMAIN 2 0.55 3.08 0.30 146 HELO_NODOT 2 0.55 3.08 0.30 147 XMLngstWrd_01 2 0.42 3.08 0.15 148 XM_UB999 2 0.28 3.08 0.00 149 SpammyFromTLD_01 2 0.42 3.08 0.15 150 TR_XM_PhishingBody2 2 0.28 3.08 0.00 151 TR_XM_Undi_Recip11 2 0.28 3.08 0.00 152 XM_H_Undi_Recip 2 0.42 3.08 0.15 153 XMLngstWrd_00 2 0.69 3.08 0.46 154 XMPhish14 2 0.28 3.08 0.00 155 XM_DK_Undo_01 2 2.49 3.08 2.44 156 T_XMHurry_00 2 0.28 3.08 0.00 157 TR_XM_InvalidRelay 2 0.28 3.08 0.00 158 HTML_FONT_TINY_NORDNS 2 0.28 3.08 0.00 159 XM_H_PHPOS_M 2 0.42 3.08 0.15 160 XMSubLongNoVowel 2 0.28 3.08 0.00 161 T_Symld_Words_02 2 0.28 3.08 0.00 162 XM_TLDProd2 2 0.28 3.08 0.00 163 TR_XM_PHPForged 2 0.42 3.08 0.15 164 FROM_SUSPICIOUS_NTLD 2 0.28 3.08 0.00 165 TR_XM_SpammyWords3 2 0.28 3.08 0.00 166 URI_HEX 2 0.28 3.08 0.00 167 XM_H_PHPOS 2 0.42 3.08 0.15 168 HTML_COMMENT_SAVED_URL 1 0.14 1.54 0.00 169 XMPhish11 1 0.14 1.54 0.00 170 NSL_RCVD_FROM_USER 1 0.14 1.54 0.00 171 AXB_XMAILER_MIMEOLE_OL_024C2 1 0.14 1.54 0.00 172 URIBL_BLACK 1 0.14 1.54 0.00 173 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.14 1.54 0.00 174 FSL_NEW_HELO_USER 1 0.14 1.54 0.00 175 RELAYCOUNTRY_CA 1 0.55 1.54 0.46 176 TR_XM_DK_Bayes 1 2.63 1.54 2.74 177 DC_PNG_UNO_LARGO 1 0.14 1.54 0.00 178 NUMERIC_HTTP_ADDR 1 0.28 1.54 0.15 179 ADVANCE_FEE_4_NEW_MONEY 1 0.14 1.54 0.00 180 TM2_M_OBFU_COMMENT 1 0.14 1.54 0.00 181 XMhairloss01 1 0.14 1.54 0.00 182 MONEY_FROM_MISSP 1 0.14 1.54 0.00 183 TO_NO_BRKTS_FROM_MSSP 1 0.14 1.54 0.00 184 TR_LOTS_OF_MONEY2 1 0.14 1.54 0.00 185 TR_XM_SpoofPhishAttach 1 0.42 1.54 0.30 186 NML_ADSP_CUSTOM_MED 1 0.14 1.54 0.00 187 ADVANCE_FEE_4_NEW_FRM_MNY 1 0.14 1.54 0.00 188 HTML_FONT_SIZE_HUGE 1 0.14 1.54 0.00 189 RCVD_IN_RP_RNBL 1 0.14 1.54 0.00 190 TR_XM_PhishingBody3 1 0.14 1.54 0.00 191 XM_ShortIntro_01 1 0.42 1.54 0.30 192 HTTPS_HTTP_MISMATCH 1 0.14 1.54 0.00 193 HK_SCAM 1 0.14 1.54 0.00 194 XM_Body_Dirty_Words_03 1 0.14 1.54 0.00 195 XM_B_Phish66 1 0.42 1.54 0.30 196 XM_B_Crypto 1 0.42 1.54 0.30 197 XMHTML_After_End 1 0.14 1.54 0.00 198 T_REMOTE_IMAGE 1 2.63 1.54 2.74 199 DOS_RCVD_IP_TWICE_B 1 0.14 1.54 0.00 200 TR_XM_Undi_RecipCombo2 1 0.14 1.54 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 BAYES_50 544 80.06 52.31 82.80 2 T_SCC_BODY_TEXT_LINE 543 82.55 81.54 82.65 3 DCC_CHECK_NEGATIVE 454 67.31 49.23 69.10 4 DKIM_SIGNED 339 53.88 76.92 51.60 5 XM_DK_Pass 338 53.19 70.77 51.45 6 DKIM_VALID 337 53.05 70.77 51.29 7 RELAYCOUNTRY_US 332 51.66 63.08 50.53 8 ALL_TRUSTED 311 43.63 6.15 47.34 9 DKIM_VALID_AU 309 47.51 52.31 47.03 10 ANY_BOUNCE_MESSAGE 294 41.41 7.69 44.75 11 BOUNCE_MESSAGE 294 41.41 7.69 44.75 12 RCVD_IN_MSPIKE_H2 230 34.21 26.15 35.01 13 HTML_MESSAGE 221 38.78 90.77 33.64 14 SCC_BODY_URI_ONLY 210 29.22 1.54 31.96 15 DCC_CHECK 203 32.69 50.77 30.90 16 XM_B_SpammyWords 184 30.61 56.92 28.01 17 FSL_BULK_SIG 180 25.90 10.77 27.40 18 XM_B_Unicode 176 31.58 80.00 26.79 19 XMSubLong 166 26.04 33.85 25.27 20 XMListUnsubscribeExists 150 26.18 60.00 22.83 21 DKIM_VALID_EF 143 22.30 27.69 21.77 22 XM_H_Long_From01 132 18.70 4.62 20.09 23 FROM_GOV_DKIM_AU 131 18.14 0.00 19.94 24 XM_B_SpammyTLD 128 19.53 20.00 19.48 25 XMGappySubj_01 128 17.73 0.00 19.48 26 SpammyFromTLD_02 127 18.14 6.15 19.33 27 LOC_TINY_FONT_1 123 21.33 47.69 18.72 28 HTML_FONT_LOW_CONTRAST 120 19.94 36.92 18.26 29 USER_IN_DEF_DKIM_WL 115 16.07 1.54 17.50 30 TR_XM_DK_Unsub 111 16.48 12.31 16.89 31 UNPARSEABLE_RELAY 110 17.73 27.69 16.74 32 IN_ZIMBRA_NJ_WHITELIST 103 14.27 0.00 15.68 33 XM_Multi_Part_URI 98 17.04 38.46 14.92 34 FVGT_m_MULTI_ODD 95 16.34 35.38 14.46 35 XMSubMetaSx_00 88 12.60 4.62 13.39 36 HTML_IMAGE_RATIO_02 80 12.33 13.85 12.18 37 T_XMDrugObfuBody_08 66 9.83 7.69 10.05 38 XM_B_Unicode3 64 13.99 56.92 9.74 39 RCVD_IN_MSPIKE_WL 64 10.80 21.54 9.74 40 T_TM2_M_HEADER_IN_MSG 48 10.53 43.08 7.31 41 SHOPIFY_IMG_NOT_RCVD_SFY 47 6.93 4.62 7.15 42 XM_SendGrid 40 5.96 4.62 6.09 43 BAYES_20 39 5.54 1.54 5.94 44 TR_XM_DK_SendGrid 38 5.26 0.00 5.78 45 RCVD_IN_MSPIKE_H3 34 6.09 15.38 5.18 46 MIME_HTML_ONLY 31 6.23 21.54 4.72 47 T_KAM_HTML_FONT_INVALID 29 7.20 35.38 4.41 48 XM_Body_Dirty_Words 27 5.54 20.00 4.11 49 XM_DKIMWhitelistDomains 26 3.60 0.00 3.96 50 BAYES_60 24 4.02 7.69 3.65 51 BAYES_00 20 2.91 1.54 3.04 52 RCVD_IN_MSPIKE_H5 18 2.63 1.54 2.74 53 TR_XM_DK_Bayes 18 2.63 1.54 2.74 54 T_REMOTE_IMAGE 18 2.63 1.54 2.74 55 TR_XM_DK_Bayes1 17 2.49 1.54 2.59 56 XM_DK_Undo_01 16 2.49 3.08 2.44 57 T_TooManySym_01 16 2.35 1.54 2.44 58 RELAYCOUNTRY_META 16 5.40 35.38 2.44 59 XMNumbers 15 3.05 10.77 2.28 60 BAYES_40 14 2.08 1.54 2.13 61 HTML_IMAGE_ONLY_20 14 2.08 1.54 2.13 62 TR_XM_BayesUnsub 14 3.74 20.00 2.13 63 XM_B_Unsub 14 3.74 20.00 2.13 64 MIME_HEADER_CTYPE_ONLY 13 1.80 0.00 1.98 65 TR_XM_DK_Bayes2 12 1.80 1.54 1.83 66 XM_B_SpammyWords2 12 4.43 30.77 1.83 67 XM_Evil_Numbers_Gen 12 2.22 6.15 1.83 68 RCVD_IN_MSPIKE_H4 12 2.08 4.62 1.83 69 LotsOfNums_01 11 2.08 6.15 1.67 70 TVD_SPACE_RATIO 10 1.39 0.00 1.52 71 XMStockSpam_06 10 1.94 6.15 1.52 72 XM_UncommonTLD01 10 2.63 13.85 1.52 73 TooManyTo_001 9 2.08 9.23 1.37 74 T_TooManySym_02 8 1.11 0.00 1.22 75 HTML_MIME_NO_HTML_TAG 8 1.39 3.08 1.22 76 TO_MALFORMED 8 1.52 4.62 1.22 77 BAYES_80 7 1.80 9.23 1.07 78 XMSexyCombo_05 7 1.66 7.69 1.07 79 HTML_IMAGE_RATIO_04 7 1.39 4.62 1.07 80 LOTS_OF_MONEY 7 2.08 12.31 1.07 81 RELAYCOUNTRY_AU 7 1.52 6.15 1.07 82 RCVD_IN_VALIDITY_SAFE 7 0.97 0.00 1.07 83 SUBJ_ALL_CAPS 7 0.97 0.00 1.07 84 T_XMDrugObfuBody_14 6 1.39 6.15 0.91 85 TR_XM_SpammyRelay 6 2.08 13.85 0.91 86 XM_CamelCaseFrm001 6 1.52 7.69 0.91 87 HTML_IMAGE_ONLY_24 6 0.83 0.00 0.91 88 TVD_RCVD_IP 6 0.83 0.00 0.91 89 XMSexyCombo_01 6 0.97 1.54 0.91 90 XM_WL_UtahGOV 6 0.83 0.00 0.91 91 BOTNET_IPINHOSTNAME 6 1.66 9.23 0.91 92 UPPERCASE_75_100 6 0.83 0.00 0.91 93 IN_HORDE_ADDRESS_BOOK 6 0.83 0.00 0.91 94 XM_DK_Undo_02 5 3.19 27.69 0.76 95 MIME_HTML_MOSTLY 5 0.69 0.00 0.76 96 XMStrtUSub 5 1.11 4.62 0.76 97 HTML_FONT_FACE_BAD 5 0.69 0.00 0.76 98 MIME_QP_LONG_LINE 5 1.25 6.15 0.76 99 UNTRUSTED_Relay 5 2.49 20.00 0.76 100 RCVD_IN_VALIDITY_CERTIFIED 5 0.69 0.00 0.76 101 XM_B_Phish_Phrases 5 1.66 10.77 0.76 102 TR_Symld_Words 5 0.69 0.00 0.76 103 T_XMDrugObfuBody_00 5 0.83 1.54 0.76 104 T_FILL_THIS_FORM_SHORT 4 0.55 0.00 0.61 105 RELAYCOUNTRY_AT 4 0.69 1.54 0.61 106 BAYES_99 4 2.63 23.08 0.61 107 INVALID_MSGID 4 0.55 0.00 0.61 108 TR_XM_SpammyWords5 4 1.11 6.15 0.61 109 XM_DIRTYINTL 4 1.52 10.77 0.61 110 XM_B_Unsub2 3 1.39 10.77 0.46 111 XM_B_SpammyWords3 3 2.22 20.00 0.46 112 XMLngstWrd_00 3 0.69 3.08 0.46 113 HTML_IMAGE_RATIO_08 3 0.55 1.54 0.46 114 BAYES_999 3 2.35 21.54 0.46 115 XM_ZIP 3 0.42 0.00 0.46 116 XM_PDF 3 0.55 1.54 0.46 117 HTML_IMAGE_RATIO_06 3 0.97 6.15 0.46 118 XMSolicitRefs_0 3 0.83 4.62 0.46 119 BAYES_05 3 0.42 0.00 0.46 120 FORGED_MUA_OUTLOOK 3 0.55 1.54 0.46 121 TR_XM_SB_Phish 3 1.39 10.77 0.46 122 HK_RANDOM_ENVFROM 3 0.42 0.00 0.46 123 TM2_M_VERY_LONG_WORD 3 1.11 7.69 0.46 124 RELAYCOUNTRY_CA 3 0.55 1.54 0.46 125 BOTNET 3 1.80 15.38 0.46 126 HK_RANDOM_FROM 3 0.42 0.00 0.46 127 XM_Body_Obfu01 3 0.42 0.00 0.46 128 TR_XM_UnparsRelay 3 1.39 10.77 0.46 129 XMDiploma_00 3 0.97 6.15 0.46 130 XM_Dr_From 3 0.42 0.00 0.46 131 XMSubPhish11 3 1.39 10.77 0.46 132 RCVD_IN_RP_SAFE 2 0.28 0.00 0.30 133 TR_XM_SpammyWords4 2 1.25 10.77 0.30 134 XM_H_PHPMailer 2 0.69 4.62 0.30 135 FONT_INVIS_NORDNS 2 0.28 0.00 0.30 136 XMBSHREFv2 2 0.28 0.00 0.30 137 TooManyTo_003 2 0.28 0.00 0.30 138 SHORT_HELO_AND_INLINE_IMAGE 2 0.28 0.00 0.30 139 TR_XM_PSC1 2 0.28 0.00 0.30 140 USER_IN_WELCOMELIST 2 0.28 0.00 0.30 141 TR_XM_NoHeaderRelay 2 0.83 6.15 0.30 142 XMNoVowels 2 0.28 0.00 0.30 143 XM_RXBody 2 0.97 7.69 0.30 144 GMD_PDF_HORIZ 2 0.28 0.00 0.30 145 USER_IN_WHITELIST 2 0.28 0.00 0.30 146 TR_XM_PhishingBody 2 0.83 6.15 0.30 147 XM_ProductURIs 2 0.28 0.00 0.30 148 TR_BOTNET_NEGATE 2 0.28 0.00 0.30 149 XMSpoofStaff2 2 0.28 0.00 0.30 150 XM_H_SpoofStaff4 2 0.28 0.00 0.30 151 XM_SPF_SoftFail 2 0.69 4.62 0.30 152 TR_XM_SpoofPhishAttach 2 0.42 1.54 0.30 153 TR_XM_SpoofStaff 2 0.28 0.00 0.30 154 XM_Ancestry_Forge 2 0.28 0.00 0.30 155 T_OBFU_PDF_ATTACH 2 0.28 0.00 0.30 156 FROM_EXCESS_BASE64 2 0.28 0.00 0.30 157 BAYES_95 2 0.55 3.08 0.30 158 XM_ShortIntro_01 2 0.42 1.54 0.30 159 MISSING_HEADERS 2 0.28 0.00 0.30 160 RCVD_IN_PSBL 2 0.69 4.62 0.30 161 TooManyTo_002 2 0.28 0.00 0.30 162 XM_B_Crypto 2 0.42 1.54 0.30 163 XM_B_Phish66 2 0.42 1.54 0.30 164 XM_B_Investor 2 0.83 6.15 0.30 165 TR_XM_PHPDW 2 0.55 3.08 0.30 166 XM_OfRef6 2 0.83 6.15 0.30 167 XM_ZohoDesk1 2 0.28 0.00 0.30 168 DKIM_INVALID 2 0.83 6.15 0.30 169 URI_NOVOWEL 2 0.28 0.00 0.30 170 HELO_NO_DOMAIN 2 0.55 3.08 0.30 171 HELO_NODOT 2 0.55 3.08 0.30 172 TO_NO_BRKTS_HTML_ONLY 2 0.28 0.00 0.30 173 XMLngstWrd_03 1 0.14 0.00 0.15 174 FROM_GOV_SPOOF 1 0.14 0.00 0.15 175 RCVD_IN_IADB_LISTED 1 0.14 0.00 0.15 176 XM_B_COVIDMETA 1 0.55 4.62 0.15 177 WEIRD_QUOTING 1 0.14 0.00 0.15 178 XM_B_SpammyWords4 1 0.55 4.62 0.15 179 OBFU_UNSUB_UL 1 0.14 0.00 0.15 180 XMSexyCombo_02 1 0.28 1.54 0.15 181 SpammyFromTLD_01 1 0.42 3.08 0.15 182 T_TVD_MIME_NO_HEADERS 1 0.14 0.00 0.15 183 XM_H_Undi_Recip 1 0.42 3.08 0.15 184 CTYPE_NULL 1 0.14 0.00 0.15 185 KHOP_HELO_FCRDNS 1 0.28 1.54 0.15 186 TooManyTo_005 1 0.14 0.00 0.15 187 OOOBOUNCE_MESSAGE 1 0.14 0.00 0.15 188 RCVD_IN_IADB_VOUCHED 1 0.14 0.00 0.15 189 TR_XM_SpoofStaff3 1 0.14 0.00 0.15 190 RCVD_IN_SORBS_DUL 1 0.14 0.00 0.15 191 XM_B_FormFill 1 0.14 0.00 0.15 192 XM_H_PHPOS_M 1 0.42 3.08 0.15 193 XMEmptyBody_01 1 0.14 0.00 0.15 194 NOT_SPAM 1 0.14 0.00 0.15 195 TVD_PH_BODY_ACCOUNTS_PRE 1 0.14 0.00 0.15 196 XMBody_17 1 0.55 4.62 0.15 197 XMDateMe_00 1 0.55 4.62 0.15 198 TR_Sbj_FN_Bdy 1 0.14 0.00 0.15 199 TR_XM_PHPForged 1 0.42 3.08 0.15 200 URI_DOTEDU 1 0.14 0.00 0.15 ----------------------------------------------------------------------