Email: 228 Autolearn: 0 AvgScore: 0.39 AvgScanTime: 1.92 sec Spam: 36 Autolearn: 0 AvgScore: 15.31 AvgScanTime: 2.62 sec Ham: 192 Autolearn: 0 AvgScore: -2.40 AvgScanTime: 1.79 sec Time Spent Running SA: 0.12 hours Time Spent Processing Spam: 0.03 hours Time Spent Processing Ham: 0.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 33 57.46 91.67 51.04 2 T_SCC_BODY_TEXT_LINE 26 80.70 72.22 82.29 3 XM_B_Unicode 21 40.35 58.33 36.98 4 DKIM_SIGNED 20 49.56 55.56 48.44 5 DCC_CHECK 20 35.09 55.56 31.25 6 XM_B_SpammyWords 20 25.88 55.56 20.31 7 RELAYCOUNTRY_US 19 49.56 52.78 48.96 8 XM_DK_Pass 17 47.37 47.22 47.40 9 DCC_CHECK_NEGATIVE 16 64.47 44.44 68.23 10 DKIM_VALID 15 46.49 41.67 47.40 11 BAYES_50 15 66.23 41.67 70.83 12 UNTRUSTED_Relay 14 8.77 38.89 3.12 13 MIME_HTML_ONLY 14 16.67 38.89 12.50 14 XMListUnsubscribeExists 14 26.32 38.89 23.96 15 HTML_FONT_LOW_CONTRAST 13 26.75 36.11 25.00 16 BOTNET 12 6.14 33.33 1.04 17 FSL_BULK_SIG 12 28.07 33.33 27.08 18 LOC_TINY_FONT_1 11 14.91 30.56 11.98 19 FVGT_m_MULTI_ODD 10 18.42 27.78 16.67 20 XM_B_Unicode3 10 18.42 27.78 16.67 21 T_REMOTE_IMAGE 10 6.14 27.78 2.08 22 RCVD_IN_MSPIKE_L3 9 4.39 25.00 0.52 23 RCVD_IN_MSPIKE_BL 9 4.39 25.00 0.52 24 RCVD_IN_BL_SPAMCOP_NET 9 3.95 25.00 0.00 25 DKIM_VALID_AU 9 38.60 25.00 41.15 26 XMSubLong 9 17.54 25.00 16.15 27 XM_B_DynamicLink 9 3.95 25.00 0.00 28 FROM_EXCESS_BASE64 9 4.39 25.00 0.52 29 TR_XM_MSPIKECOMBO 9 4.39 25.00 0.52 30 T_TM2_M_HEADER_IN_MSG 8 17.98 22.22 17.19 31 XM_B_SpammyWords2 8 8.33 22.22 5.73 32 BAYES_99 8 6.14 22.22 3.12 33 BAYES_95 8 5.26 22.22 2.08 34 XM_B_Investor 8 4.39 22.22 1.04 35 HDRS_MISSP 7 3.07 19.44 0.00 36 HTML_FONT_TINY_NORDNS 7 3.07 19.44 0.00 37 XM_Body_Dirty_Words 7 11.40 19.44 9.90 38 XM_Multi_Part_URI 6 9.21 16.67 7.81 39 RCVD_IN_MSPIKE_H2 6 12.72 16.67 11.98 40 XM_B_Unsub 6 11.40 16.67 10.42 41 TR_XM_BayesUnsub 6 9.21 16.67 7.81 42 XMSubMetaSx_00 6 4.82 16.67 2.60 43 TR_XM_SpammyWords4 6 3.07 16.67 0.52 44 LOTS_OF_MONEY 6 3.07 16.67 0.52 45 UNPARSEABLE_RELAY 6 10.09 16.67 8.85 46 DKIM_VALID_EF 5 27.63 13.89 30.21 47 DKIM_INVALID 5 3.07 13.89 1.04 48 XM_UB95 5 2.19 13.89 0.00 49 RELAYCOUNTRY_META 5 7.46 13.89 6.25 50 BAYES_999 5 3.51 13.89 1.56 51 TR_XM_SpammyWords5 5 3.95 13.89 2.08 52 XM_UB99 5 2.19 13.89 0.00 53 XMNumbers 4 7.02 11.11 6.25 54 SpammyFromTLD_01 4 1.75 11.11 0.00 55 TR_DCC_Bayes_99 4 1.75 11.11 0.00 56 XM_UncommonTLD01 4 4.82 11.11 3.65 57 TooManyTo_001 4 9.65 11.11 9.38 58 TR_XM_DKIM_Undo 4 2.63 11.11 1.04 59 BOTNET_IPINHOSTNAME 4 5.26 11.11 4.17 60 TR_XM_SpammyRelay 4 3.07 11.11 1.56 61 TR_XM_DK_Unsub 4 12.72 11.11 13.02 62 BAYES_60 4 5.70 11.11 4.69 63 XM_DK_Undo_02 4 5.70 11.11 4.69 64 TR_XM_COVIDMETA4 3 1.75 8.33 0.52 65 XM_UB999 3 1.32 8.33 0.00 66 TM2_M_URI_OPT_OUT 3 2.63 8.33 1.56 67 TR_XM_SpammyWords2 3 1.32 8.33 0.00 68 URI_NOVOWEL 3 3.07 8.33 2.08 69 XM_Body_Dirty_Words_01 3 1.32 8.33 0.00 70 TR_XM_PhishingBody 3 1.75 8.33 0.52 71 TR_XM_MSPIKECOMBO2 3 1.32 8.33 0.00 72 ALL_TRUSTED 3 39.04 8.33 44.79 73 XM_UB50 3 3.51 8.33 2.60 74 XMSexyCombo_05 3 2.19 8.33 1.04 75 TR_XM_MaxSPIKE 3 1.32 8.33 0.00 76 TR_XM_UnparsRelay 3 1.75 8.33 0.52 77 T_KAM_HTML_FONT_INVALID 2 9.21 5.56 9.90 78 XMSubMetaSx_01 2 0.88 5.56 0.00 79 HTML_IMAGE_RATIO_04 2 3.95 5.56 3.65 80 TR_XM_PHPDW 2 0.88 5.56 0.00 81 XM_B_Phish66 2 1.32 5.56 0.52 82 MPART_ALT_DIFF 2 3.51 5.56 3.12 83 T_TooManySym_01 2 5.26 5.56 5.21 84 NO_DNS_FOR_FROM 2 0.88 5.56 0.00 85 XMSexyCombo_01 2 0.88 5.56 0.00 86 TR_XM_INV_DKIM 2 0.88 5.56 0.00 87 XM_B_SpammyTLD 2 3.51 5.56 3.12 88 XM_SPF_SoftFail 2 4.82 5.56 4.69 89 HTML_IMAGE_RATIO_06 2 2.19 5.56 1.56 90 XMStrtUSub 2 1.32 5.56 0.52 91 TR_XM_MaxWHORU 2 0.88 5.56 0.00 92 XM_Evil_Numbers_Gen 2 1.75 5.56 1.04 93 HTML_FONT_SIZE_LARGE 2 3.07 5.56 2.60 94 MIME_HTML_MOSTLY 2 3.07 5.56 2.60 95 HTML_IMAGE_RATIO_08 2 0.88 5.56 0.00 96 XMSexyCombo_02 2 0.88 5.56 0.00 97 XM_H_PHPMailer 2 1.32 5.56 0.52 98 RCVD_IN_MSPIKE_WL 2 17.11 5.56 19.27 99 RELAYCOUNTRY_IN 2 0.88 5.56 0.00 100 XM_B_SpammyWords3 2 0.88 5.56 0.00 101 HTML_IMAGE_ONLY_28 1 0.44 2.78 0.00 102 RDNS_DYNAMIC 1 0.44 2.78 0.00 103 XMClaimOffer 1 0.44 2.78 0.00 104 SpammyFromTLD_02 1 0.44 2.78 0.00 105 OBFU_TEXT_ATTACH 1 0.44 2.78 0.00 106 NOT_SPAM 1 0.44 2.78 0.00 107 PDS_RDNS_DYNAMIC_FP 1 0.44 2.78 0.00 108 XM_H_PHPOS_M 1 0.44 2.78 0.00 109 TO_EQ_FM_DOM_HTML_ONLY 1 0.44 2.78 0.00 110 HELO_NO_DOMAIN 1 0.44 2.78 0.00 111 XM_OfRef6 1 0.44 2.78 0.00 112 RCVD_IN_MSPIKE_H4 1 6.14 2.78 6.77 113 HTML_IMAGE_RATIO_02 1 3.07 2.78 3.12 114 TR_XM_DK_SendGrid 1 3.51 2.78 3.65 115 SUBJ_OBFU_PUNCT_FEW 1 0.44 2.78 0.00 116 XM_Body_Dirty_Words_02 1 0.44 2.78 0.00 117 HTML_MIME_NO_HTML_TAG 1 1.32 2.78 1.04 118 RELAYCOUNTRY_AT 1 1.75 2.78 1.56 119 KHOP_HELO_FCRDNS 1 2.63 2.78 2.60 120 XMPhish08 1 0.44 2.78 0.00 121 BAYES_80 1 2.19 2.78 2.08 122 T_XMDrugObfuBody_14 1 1.32 2.78 1.04 123 FSL_HELO_NON_FQDN_1 1 0.44 2.78 0.00 124 XM_SendGrid 1 3.95 2.78 4.17 125 T_TooManySym_02 1 3.95 2.78 4.17 126 TVD_VISIT_PHARMA 1 0.44 2.78 0.00 127 MIME_QP_LONG_LINE 1 4.39 2.78 4.69 128 TooManyTo_002 1 1.32 2.78 1.04 129 XMSlimDrugH 1 0.44 2.78 0.00 130 TR_XM_FormFill2 1 0.44 2.78 0.00 131 ONLINE_PHARMACY 1 0.44 2.78 0.00 132 RCVD_IN_MSPIKE_H3 1 4.39 2.78 4.69 133 TR_XM_COVIDMETA1 1 0.44 2.78 0.00 134 T_Symld_Words_02 1 0.44 2.78 0.00 135 XM_H_PHPOS 1 0.44 2.78 0.00 136 FROM_GOV_SPOOF 1 0.88 2.78 0.52 137 XM_B_Phish_Phrases 1 0.44 2.78 0.00 138 TR_XM_PHPForged 1 0.44 2.78 0.00 139 XMWinner 1 0.44 2.78 0.00 140 BOTNET_NORDNS 1 0.44 2.78 0.00 141 HELO_NODOT 1 0.44 2.78 0.00 142 SUBJ_ALL_CAPS 1 0.44 2.78 0.00 143 XM_B_SexDrugs1 1 0.44 2.78 0.00 144 RELAYCOUNTRY_BE 1 0.44 2.78 0.00 145 MPART_ALT_DIFF_COUNT 1 0.88 2.78 0.52 146 TR_XM_InvalidRelay 1 0.44 2.78 0.00 147 PDS_OTHER_BAD_TLD 1 0.44 2.78 0.00 148 TooManyTo_003 1 1.32 2.78 1.04 149 TR_Symld_Words 1 1.32 2.78 1.04 150 XM_UB60 1 0.44 2.78 0.00 151 INVALID_MSGID 1 2.63 2.78 2.60 152 RELAYCOUNTRY_KR 1 0.44 2.78 0.00 153 TooManyTo_004 1 0.44 2.78 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 158 80.70 72.22 82.29 2 BAYES_50 136 66.23 41.67 70.83 3 DCC_CHECK_NEGATIVE 131 64.47 44.44 68.23 4 HTML_MESSAGE 98 57.46 91.67 51.04 5 RELAYCOUNTRY_US 94 49.56 52.78 48.96 6 DKIM_SIGNED 93 49.56 55.56 48.44 7 XM_DK_Pass 91 47.37 47.22 47.40 8 DKIM_VALID 91 46.49 41.67 47.40 9 ALL_TRUSTED 86 39.04 8.33 44.79 10 DKIM_VALID_AU 79 38.60 25.00 41.15 11 XM_B_Unicode 71 40.35 58.33 36.98 12 BOUNCE_MESSAGE 71 31.14 0.00 36.98 13 ANY_BOUNCE_MESSAGE 71 31.14 0.00 36.98 14 DCC_CHECK 60 35.09 55.56 31.25 15 DKIM_VALID_EF 58 27.63 13.89 30.21 16 FSL_BULK_SIG 52 28.07 33.33 27.08 17 HTML_FONT_LOW_CONTRAST 48 26.75 36.11 25.00 18 SCC_BODY_URI_ONLY 46 20.18 0.00 23.96 19 XMListUnsubscribeExists 46 26.32 38.89 23.96 20 XM_B_SpammyWords 39 25.88 55.56 20.31 21 RCVD_IN_MSPIKE_WL 37 17.11 5.56 19.27 22 T_TM2_M_HEADER_IN_MSG 33 17.98 22.22 17.19 23 XM_B_Unicode3 32 18.42 27.78 16.67 24 FVGT_m_MULTI_ODD 32 18.42 27.78 16.67 25 XMSubLong 31 17.54 25.00 16.15 26 TR_XM_DK_Unsub 25 12.72 11.11 13.02 27 MIME_HTML_ONLY 24 16.67 38.89 12.50 28 RCVD_IN_MSPIKE_H2 23 12.72 16.67 11.98 29 LOC_TINY_FONT_1 23 14.91 30.56 11.98 30 T_XMDrugObfuBody_08 20 8.77 0.00 10.42 31 XM_B_Unsub 20 11.40 16.67 10.42 32 XM_Body_Dirty_Words 19 11.40 19.44 9.90 33 T_KAM_HTML_FONT_INVALID 19 9.21 5.56 9.90 34 TooManyTo_001 18 9.65 11.11 9.38 35 UNPARSEABLE_RELAY 17 10.09 16.67 8.85 36 XM_DKIMWhitelistDomains 16 7.02 0.00 8.33 37 BAYES_00 16 7.02 0.00 8.33 38 TR_XM_BayesUnsub 15 9.21 16.67 7.81 39 XM_Multi_Part_URI 15 9.21 16.67 7.81 40 RCVD_IN_MSPIKE_H5 15 6.58 0.00 7.81 41 RCVD_IN_MSPIKE_H4 13 6.14 2.78 6.77 42 IN_ZIMBRA_NJ_WHITELIST 13 5.70 0.00 6.77 43 TR_XM_DK_Bayes 12 5.26 0.00 6.25 44 TR_XM_DK_Bayes1 12 5.26 0.00 6.25 45 XMNumbers 12 7.02 11.11 6.25 46 RELAYCOUNTRY_META 12 7.46 13.89 6.25 47 XM_B_SpammyWords2 11 8.33 22.22 5.73 48 TR_XM_DK_Bayes2 11 4.82 0.00 5.73 49 BAYES_20 10 4.39 0.00 5.21 50 T_TooManySym_01 10 5.26 5.56 5.21 51 XM_DK_Undo_02 9 5.70 11.11 4.69 52 XM_SPF_SoftFail 9 4.82 5.56 4.69 53 MIME_QP_LONG_LINE 9 4.39 2.78 4.69 54 BAYES_60 9 5.70 11.11 4.69 55 RCVD_IN_MSPIKE_H3 9 4.39 2.78 4.69 56 BOTNET_IPINHOSTNAME 8 5.26 11.11 4.17 57 XM_SendGrid 8 3.95 2.78 4.17 58 T_TooManySym_02 8 3.95 2.78 4.17 59 XMGappySubj_01 8 3.51 0.00 4.17 60 XM_UncommonTLD01 7 4.82 11.11 3.65 61 HTML_IMAGE_RATIO_04 7 3.95 5.56 3.65 62 TR_XM_DK_SendGrid 7 3.51 2.78 3.65 63 BAYES_40 7 3.07 0.00 3.65 64 USER_IN_DEF_DKIM_WL 6 2.63 0.00 3.12 65 BAYES_99 6 6.14 22.22 3.12 66 LotsOfNums_01 6 2.63 0.00 3.12 67 XM_B_SpammyTLD 6 3.51 5.56 3.12 68 HTML_IMAGE_RATIO_02 6 3.07 2.78 3.12 69 MPART_ALT_DIFF 6 3.51 5.56 3.12 70 UNTRUSTED_Relay 6 8.77 38.89 3.12 71 RELAYCOUNTRY_AU 6 2.63 0.00 3.12 72 XMGappySubj_02 5 2.19 0.00 2.60 73 HTML_FONT_SIZE_LARGE 5 3.07 5.56 2.60 74 XM_UB50 5 3.51 8.33 2.60 75 XMSubMetaSx_00 5 4.82 16.67 2.60 76 XMLngstWrd_00 5 2.19 0.00 2.60 77 TR_XM_SB_Phish 5 2.19 0.00 2.60 78 INVALID_MSGID 5 2.63 2.78 2.60 79 XMSubPhish11 5 2.19 0.00 2.60 80 MIME_HTML_MOSTLY 5 3.07 5.56 2.60 81 KHOP_HELO_FCRDNS 5 2.63 2.78 2.60 82 BAYES_95 4 5.26 22.22 2.08 83 TR_XM_SpammyWords5 4 3.95 13.89 2.08 84 BAYES_80 4 2.19 2.78 2.08 85 URI_NOVOWEL 4 3.07 8.33 2.08 86 XM_ProductURIs 4 1.75 0.00 2.08 87 T_REMOTE_IMAGE 4 6.14 27.78 2.08 88 USER_IN_WHITELIST 4 1.75 0.00 2.08 89 USER_IN_WELCOMELIST 4 1.75 0.00 2.08 90 XM_ZIP 4 1.75 0.00 2.08 91 RCVD_IN_VALIDITY_SAFE 4 1.75 0.00 2.08 92 XMLngstWrd_01 4 1.75 0.00 2.08 93 TM2_M_VERY_LONG_WORD 3 1.32 0.00 1.56 94 XM_B_Unsub2 3 1.32 0.00 1.56 95 MIME_HTML_ONLY_MULTI 3 1.32 0.00 1.56 96 TR_XM_SpammyRelay 3 3.07 11.11 1.56 97 HTML_IMAGE_RATIO_06 3 2.19 5.56 1.56 98 TVD_SPACE_RATIO 3 1.32 0.00 1.56 99 XM_DK_Undo_01 3 1.32 0.00 1.56 100 RCVD_IN_VALIDITY_CERTIFIED 3 1.32 0.00 1.56 101 TM2_M_URI_OPT_OUT 3 2.63 8.33 1.56 102 TO_MALFORMED 3 1.32 0.00 1.56 103 IN_HORDE_ADDRESS_BOOK 3 1.32 0.00 1.56 104 BAYES_999 3 3.51 13.89 1.56 105 RCVD_IN_IADB_LISTED 3 1.32 0.00 1.56 106 RELAYCOUNTRY_AT 3 1.75 2.78 1.56 107 MAILING_LIST_MULTI 2 0.88 0.00 1.04 108 XM_H_SpoofStaff4 2 0.88 0.00 1.04 109 TR_Symld_Words 2 1.32 2.78 1.04 110 XM_Combo_Sbj 2 0.88 0.00 1.04 111 TR_XM_PSC1 2 0.88 0.00 1.04 112 XM_Evil_Numbers_Gen 2 1.75 5.56 1.04 113 XM_Dr_From 2 0.88 0.00 1.04 114 XM_ZohoDesk1 2 0.88 0.00 1.04 115 TooManyTo_002 2 1.32 2.78 1.04 116 TR_XM_SpoofStaff 2 0.88 0.00 1.04 117 TR_XM_DKIM_Undo 2 2.63 11.11 1.04 118 HTML_TAG_BALANCE_BODY 2 0.88 0.00 1.04 119 TVD_RCVD_IP 2 0.88 0.00 1.04 120 RCVD_IN_IADB_SPF 2 0.88 0.00 1.04 121 XMSpoofStaff2 2 0.88 0.00 1.04 122 XM_B_Investor 2 4.39 22.22 1.04 123 TooManyTo_003 2 1.32 2.78 1.04 124 TR_XM_SpoofPhishAttach 2 0.88 0.00 1.04 125 XM_H_Long_From01 2 0.88 0.00 1.04 126 XMSexyCombo_05 2 2.19 8.33 1.04 127 REPLYTO_WITHOUT_TO_CC 2 0.88 0.00 1.04 128 WEIRD_PORT 2 0.88 0.00 1.04 129 RELAYCOUNTRY_CA 2 0.88 0.00 1.04 130 MISSING_HEADERS 2 0.88 0.00 1.04 131 T_XMDrugObfuBody_14 2 1.32 2.78 1.04 132 HTML_MIME_NO_HTML_TAG 2 1.32 2.78 1.04 133 XMBSHREFv2 2 0.88 0.00 1.04 134 XM_PDF 2 0.88 0.00 1.04 135 DKIM_INVALID 2 3.07 13.89 1.04 136 BOTNET 2 6.14 33.33 1.04 137 RCVD_IN_IADB_VOUCHED 2 0.88 0.00 1.04 138 XM_CamelCaseFrm001 1 0.44 0.00 0.52 139 XMHTML_After_End 1 0.44 0.00 0.52 140 DEAR_SOMETHING 1 0.44 0.00 0.52 141 XM_H_Long_From02 1 0.44 0.00 0.52 142 NUMERIC_HTTP_ADDR 1 0.44 0.00 0.52 143 FROM_EXCESS_BASE64 1 4.39 25.00 0.52 144 XMHTMLBadTable_001 1 0.44 0.00 0.52 145 XM_H_PHPMailer 1 1.32 5.56 0.52 146 RCVD_IN_IADB_SENDERID 1 0.44 0.00 0.52 147 T_FILL_THIS_FORM_SHORT 1 0.44 0.00 0.52 148 XM_S_SubURI 1 0.44 0.00 0.52 149 XM_H_Undi_Recip 1 0.44 0.00 0.52 150 RCVD_IN_PSBL 1 0.44 0.00 0.52 151 TM2_M_OBFU_COMMENT 1 0.44 0.00 0.52 152 XMNoVowels 1 0.44 0.00 0.52 153 FROM_GOV_SPOOF 1 0.88 2.78 0.52 154 MIME_BASE64_TEXT 1 0.44 0.00 0.52 155 NA_DOLLARS 1 0.44 0.00 0.52 156 XMStockSpam_06 1 0.44 0.00 0.52 157 T_XMHurry_00 1 0.44 0.00 0.52 158 XMLngstWrd_04 1 0.44 0.00 0.52 159 XMStrtUSub 1 1.32 5.56 0.52 160 XMLngstWrd_03 1 0.44 0.00 0.52 161 URIBL_BLACK 1 0.44 0.00 0.52 162 HTML_IMAGE_ONLY_16 1 0.44 0.00 0.52 163 TR_XM_SpammyWords4 1 3.07 16.67 0.52 164 XM_H_Trusted_IP 1 0.44 0.00 0.52 165 NO_PRESCRIPTION 1 0.44 0.00 0.52 166 XM_B_Phish66 1 1.32 5.56 0.52 167 URI_TRY_3LD 1 0.44 0.00 0.52 168 CTE_8BIT_MISMATCH 1 0.44 0.00 0.52 169 HTTPS_HTTP_MISMATCH 1 0.44 0.00 0.52 170 TR_XM_COVIDMETA4 1 1.75 8.33 0.52 171 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.44 0.00 0.52 172 TR_XM_UnparsRelay 1 1.75 8.33 0.52 173 TR_XM_MSPIKECOMBO 1 4.39 25.00 0.52 174 XMLngstWrd_02 1 0.44 0.00 0.52 175 GMD_PDF_HORIZ 1 0.44 0.00 0.52 176 MPART_ALT_DIFF_COUNT 1 0.88 2.78 0.52 177 RCVD_IN_RP_SAFE 1 0.44 0.00 0.52 178 XM_GoogleGroups 1 0.44 0.00 0.52 179 XMDateMe_00 1 0.44 0.00 0.52 180 URI_DOTEDU 1 0.44 0.00 0.52 181 XM_Body_Obfu01 1 0.44 0.00 0.52 182 RELAYCOUNTRY_DE 1 0.44 0.00 0.52 183 XM_DIRTYINTL 1 0.44 0.00 0.52 184 XMSolicitRefs_0 1 0.44 0.00 0.52 185 RCVD_IN_IADB_OPTIN 1 0.44 0.00 0.52 186 RCVD_IN_RP_CERTIFIED 1 0.44 0.00 0.52 187 LOTS_OF_MONEY 1 3.07 16.67 0.52 188 RCVD_IN_IADB_DK 1 0.44 0.00 0.52 189 TR_XM_PhishingBody 1 1.75 8.33 0.52 190 NICE_REPLY_A 1 0.44 0.00 0.52 191 XMSubMetaSxObfu_03 1 0.44 0.00 0.52 192 RCVD_IN_MSPIKE_BL 1 4.39 25.00 0.52 193 RCVD_IN_MSPIKE_L3 1 4.39 25.00 0.52 194 T_TooManySym_03 1 0.44 0.00 0.52 ----------------------------------------------------------------------