Email: 394 Autolearn: 0 AvgScore: 1.40 AvgScanTime: 2.86 sec Spam: 37 Autolearn: 0 AvgScore: 14.51 AvgScanTime: 3.56 sec Ham: 357 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 2.78 sec Time Spent Running SA: 0.31 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 32 46.19 86.49 42.02 2 DKIM_SIGNED 29 45.18 78.38 41.74 3 DKIM_VALID 28 43.40 75.68 40.06 4 XM_DK_Pass 28 44.42 75.68 41.18 5 T_SCC_BODY_TEXT_LINE 26 83.50 70.27 84.87 6 RELAYCOUNTRY_US 26 39.59 70.27 36.41 7 XM_B_Unicode 26 31.47 70.27 27.45 8 XM_B_SpammyWords 24 22.08 64.86 17.65 9 DCC_CHECK_NEGATIVE 24 79.70 64.86 81.23 10 DKIM_VALID_AU 22 37.06 59.46 34.73 11 BAYES_50 22 63.20 59.46 63.59 12 XM_B_Unicode3 19 19.29 51.35 15.97 13 XMListUnsubscribeExists 18 21.07 48.65 18.21 14 HTML_FONT_LOW_CONTRAST 17 23.60 45.95 21.29 15 FVGT_m_MULTI_ODD 17 14.97 45.95 11.76 16 DKIM_VALID_EF 16 25.38 43.24 23.53 17 XM_B_SpammyWords2 13 9.39 35.14 6.72 18 LOC_TINY_FONT_1 13 16.75 35.14 14.85 19 DCC_CHECK 13 20.30 35.14 18.77 20 RELAYCOUNTRY_META 12 9.64 32.43 7.28 21 RCVD_IN_MSPIKE_WL 11 17.77 29.73 16.53 22 XM_Multi_Part_URI 11 7.61 29.73 5.32 23 RCVD_IN_MSPIKE_H2 10 15.23 27.03 14.01 24 LOTS_OF_MONEY 10 3.81 27.03 1.40 25 TR_XM_SpammyWords4 10 3.81 27.03 1.40 26 TR_XM_DK_Unsub 9 9.14 24.32 7.56 27 T_KAM_HTML_FONT_INVALID 9 8.38 24.32 6.72 28 UNTRUSTED_Relay 9 4.06 24.32 1.96 29 XM_DK_Undo_02 9 4.57 24.32 2.52 30 TR_XM_DKIM_Undo 8 3.05 21.62 1.12 31 T_TM2_M_HEADER_IN_MSG 8 11.42 21.62 10.36 32 UNPARSEABLE_RELAY 8 11.93 21.62 10.92 33 MIME_HTML_ONLY 8 12.94 21.62 12.04 34 TR_XM_SpammyRelay 7 6.60 18.92 5.32 35 XM_B_Unsub 7 11.42 18.92 10.64 36 XM_B_SpammyWords3 7 5.08 18.92 3.64 37 TR_XM_BayesUnsub 7 5.84 18.92 4.48 38 XM_B_Phish_Phrases 6 2.03 16.22 0.56 39 FSL_BULK_SIG 6 16.75 16.22 16.81 40 XMSubLong 6 9.39 16.22 8.68 41 XM_H_Undi_Recip 5 1.78 13.51 0.56 42 TR_XM_UnparsRelay 5 1.78 13.51 0.56 43 RCVD_IN_BL_SPAMCOP_NET 5 1.27 13.51 0.00 44 XM_UB50 5 2.79 13.51 1.68 45 XM_Body_Dirty_Words 5 8.63 13.51 8.12 46 RCVD_IN_MSPIKE_H5 4 3.05 10.81 2.24 47 BAYES_95 4 1.52 10.81 0.56 48 BAYES_60 4 4.57 10.81 3.92 49 TR_XM_PhishingBody 4 4.06 10.81 3.36 50 BOTNET_IPINHOSTNAME 4 3.55 10.81 2.80 51 MPART_ALT_DIFF 4 2.03 10.81 1.12 52 XM_B_SpammyWords4 4 1.27 10.81 0.28 53 RCVD_IN_MSPIKE_H3 4 11.93 10.81 12.04 54 BOTNET 4 2.79 10.81 1.96 55 TM2_M_URI_OPT_OUT 4 2.03 10.81 1.12 56 TR_XM_Undi_RecipCombo2 3 0.76 8.11 0.00 57 TR_XM_InvalidRelay 3 0.76 8.11 0.00 58 TR_XM_Undi_RecipCombo3 3 0.76 8.11 0.00 59 XM_H_Long_From01 3 4.57 8.11 4.20 60 XM_B_Investor 3 1.27 8.11 0.56 61 URI_OPTOUT_3LD 3 0.76 8.11 0.00 62 XMSubMetaSx_00 3 1.78 8.11 1.12 63 TR_XM_NoHeaderRelay 3 0.76 8.11 0.00 64 LotsOfNums_01 3 2.79 8.11 2.24 65 RCVD_IN_VALIDITY_RPBL 3 0.76 8.11 0.00 66 BOUNCE_MESSAGE 3 49.75 8.11 54.06 67 TR_XM_Undi_Recip11 3 0.76 8.11 0.00 68 KHOP_HELO_FCRDNS 3 1.02 8.11 0.28 69 ANY_BOUNCE_MESSAGE 3 49.75 8.11 54.06 70 RCVD_IN_MSPIKE_H4 3 2.79 8.11 2.24 71 BAYES_99 3 1.27 8.11 0.56 72 RELAYCOUNTRY_IN 3 1.02 8.11 0.28 73 TR_XM_Undi_Recip2 3 0.76 8.11 0.00 74 BAYES_999 3 1.02 8.11 0.28 75 TR_XM_Undi_Recip5 3 0.76 8.11 0.00 76 XMNumbers 3 5.84 8.11 5.60 77 MAILING_LIST_MULTI 3 1.78 8.11 1.12 78 RELAYCOUNTRY_IE 3 0.76 8.11 0.00 79 NML_ADSP_CUSTOM_MED 2 1.52 5.41 1.12 80 XM_UB60 2 0.51 5.41 0.00 81 XFER_LOTSA_MONEY 2 0.51 5.41 0.00 82 XM_DK_Undo_01 2 3.05 5.41 2.80 83 FSL_CTYPE_WIN1251 2 0.51 5.41 0.00 84 XMReplyNow 2 0.51 5.41 0.00 85 XMBounce_01 2 0.51 5.41 0.00 86 XMLngstWrd_02 2 0.76 5.41 0.28 87 AXB_XMAILER_MIMEOLE_OL_024C2 2 0.51 5.41 0.00 88 XM_UncommonTLD01 2 2.54 5.41 2.24 89 XM_OfRef6 2 0.51 5.41 0.00 90 XM_B_Phish66 2 2.79 5.41 2.52 91 XM_SPF_SoftFail 2 1.52 5.41 1.12 92 RCVD_IN_PSBL 2 0.76 5.41 0.28 93 SpammyFromTLD_02 2 0.51 5.41 0.00 94 DKIM_ADSP_CUSTOM_MED 2 1.52 5.41 1.12 95 XMLngstWrd_04 2 0.76 5.41 0.28 96 T_XMDrugObfuBody_14 2 1.02 5.41 0.56 97 PDS_LITECOIN_ID 2 0.51 5.41 0.00 98 HK_SCAM 2 0.51 5.41 0.00 99 MIME_HTML_MOSTLY 2 4.57 5.41 4.48 100 T_REMOTE_IMAGE 2 2.03 5.41 1.68 101 FORGED_GMAIL_RCVD 2 0.51 5.41 0.00 102 LOADSA_MONEY_COMBO 2 0.51 5.41 0.00 103 FSL_NEW_HELO_USER 2 0.51 5.41 0.00 104 XMLngstWrd_03 2 0.76 5.41 0.28 105 TVD_PH_BODY_ACCOUNTS_PRE 2 0.51 5.41 0.00 106 RELAYCOUNTRY_RU 2 0.51 5.41 0.00 107 TR_XM_Undi_Recip14 2 0.51 5.41 0.00 108 XMLngstWrd_00 2 2.28 5.41 1.96 109 XM_Body_Dirty_Words_01 2 0.51 5.41 0.00 110 TR_XM_SPAMCOP 2 0.51 5.41 0.00 111 MONEY_FRAUD_8 2 0.51 5.41 0.00 112 FORGED_MUA_OUTLOOK 2 0.51 5.41 0.00 113 HTML_IMAGE_RATIO_06 2 1.02 5.41 0.56 114 ADVANCE_FEE_5_NEW_MONEY 2 0.51 5.41 0.00 115 TR_XM_SpammyWords5 2 1.52 5.41 1.12 116 XM_Evil_Numbers_Gen 2 3.81 5.41 3.64 117 XMSexyCombo_05 2 2.03 5.41 1.68 118 UNSUB_GOOG_FORM 2 0.51 5.41 0.00 119 XM_E_Blogspot 2 0.76 5.41 0.28 120 UNDISC_MONEY 2 0.51 5.41 0.00 121 BAYES_80 2 2.03 5.41 1.68 122 NSL_RCVD_FROM_USER 2 0.51 5.41 0.00 123 TR_XM_RelayPhish 2 0.51 5.41 0.00 124 XM_B_SpammyTLD 2 0.76 5.41 0.28 125 XMGppyBdWords 2 0.76 5.41 0.28 126 XMSubMetaSxObfu_03 2 0.76 5.41 0.28 127 XM_H_PHPMailer 2 0.51 5.41 0.00 128 XMLngstWrd_01 2 1.02 5.41 0.56 129 XM_B_Unsub2 2 0.76 5.41 0.28 130 URI_NOVOWEL 1 0.25 2.70 0.00 131 OBFU_TEXT_ATTACH 1 0.25 2.70 0.00 132 NOT_SPAM 1 0.25 2.70 0.00 133 T_XMDrugObfuBody_08 1 7.11 2.70 7.56 134 XM_RXBody 1 0.25 2.70 0.00 135 TVD_SPACE_RATIO 1 2.28 2.70 2.24 136 TooManyTo_004 1 0.51 2.70 0.28 137 XM_URI_RBL 1 0.25 2.70 0.00 138 RELAYCOUNTRY_GB 1 1.02 2.70 0.84 139 RELAYCOUNTRY_PL 1 0.25 2.70 0.00 140 XM_TLDProd2 1 0.25 2.70 0.00 141 HTML_COMMENT_SAVED_URL 1 0.25 2.70 0.00 142 HTML_FONT_TINY_NORDNS 1 0.51 2.70 0.28 143 URIBL_DBL_SPAM 1 0.25 2.70 0.00 144 TR_XM_BayesRelay 1 0.25 2.70 0.00 145 TR_XM_PHPDW 1 0.25 2.70 0.00 146 XM_B_SexDrugs2 1 0.25 2.70 0.00 147 TR_XM_Undi_Recip9 1 0.25 2.70 0.00 148 RCVD_IN_RP_RNBL 1 0.25 2.70 0.00 149 MIME_QP_LONG_LINE 1 2.28 2.70 2.24 150 HTML_IMAGE_RATIO_02 1 2.79 2.70 2.80 151 MONEY_FORM 1 0.25 2.70 0.00 152 XM_ShortIntro_01 1 0.51 2.70 0.28 153 LONGLN_LOW_CONTRAST 1 0.51 2.70 0.28 154 DKIM_INVALID 1 1.78 2.70 1.68 155 TooManyTo_003 1 1.02 2.70 0.84 156 XMAntiAgingB 1 0.25 2.70 0.00 157 FILL_THIS_FORM 1 0.25 2.70 0.00 158 XM_H_PHPOS 1 0.25 2.70 0.00 159 T_XMDrugObfuBody_00 1 0.51 2.70 0.28 160 BAYES_40 1 3.55 2.70 3.64 161 TR_XM_SpoofStaff 1 0.76 2.70 0.56 162 HTML_IMAGE_RATIO_08 1 0.25 2.70 0.00 163 SHORT_SHORTNER 1 0.25 2.70 0.00 164 TooManyTo_002 1 1.02 2.70 0.84 165 RELAYCOUNTRY_CN 1 0.25 2.70 0.00 166 TRACKER_ID 1 0.25 2.70 0.00 167 HTML_IMAGE_RATIO_04 1 8.38 2.70 8.96 168 T_TONOM_EQ_TOLOC_SHRT_SHRTNER 1 0.25 2.70 0.00 169 T_US_DOLLARS_3 1 0.25 2.70 0.00 170 RCVD_HELO_IP_MISMATCH 1 0.25 2.70 0.00 171 XMStrtUSub 1 3.05 2.70 3.08 172 TR_LOTS_OF_MONEY2 1 0.25 2.70 0.00 173 PHP_SCRIPT 1 0.25 2.70 0.00 174 XM_UB80 1 0.25 2.70 0.00 175 RCVD_IN_MSPIKE_L4 1 0.25 2.70 0.00 176 TR_XM_SpoofStaff2 1 0.25 2.70 0.00 177 XMPhish03 1 0.25 2.70 0.00 178 RDNS_DYNAMIC 1 0.25 2.70 0.00 179 RELAYCOUNTRY_FR 1 0.25 2.70 0.00 180 XM_B_COVIDMETA 1 0.25 2.70 0.00 181 TM2_M_OBFU_COMMENT 1 0.25 2.70 0.00 182 TR_DCC_Bayes_99 1 0.25 2.70 0.00 183 SHORT_URI_2 1 0.25 2.70 0.00 184 SpammyFromTLD_01 1 0.51 2.70 0.28 185 TR_XM_MSPIKECOMBO 1 0.51 2.70 0.28 186 T_Symld_Words_02 1 0.25 2.70 0.00 187 XM_B_SexDrugs1 1 0.25 2.70 0.00 188 TooManyTo_001 1 3.55 2.70 3.64 189 FONT_INVIS_NORDNS 1 0.25 2.70 0.00 190 XM_UB95 1 0.25 2.70 0.00 191 XM_H_PHPOS_M 1 0.25 2.70 0.00 192 SCC_BODY_URI_ONLY 1 28.43 2.70 31.09 193 BAYES_20 1 5.58 2.70 5.88 194 XMStockSpam_06 1 0.25 2.70 0.00 195 XM_Body_Dirty_Words_02 1 0.25 2.70 0.00 196 XM_H_Long_From02 1 1.02 2.70 0.84 197 AXB_X_FF_SEZ_S 1 0.25 2.70 0.00 198 XMSolicitRefs_0 1 0.51 2.70 0.28 199 PDS_BTC_ID 1 0.25 2.70 0.00 200 NUMERIC_HTTP_ADDR 1 0.51 2.70 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 303 83.50 70.27 84.87 2 DCC_CHECK_NEGATIVE 290 79.70 64.86 81.23 3 BAYES_50 227 63.20 59.46 63.59 4 ALL_TRUSTED 201 51.02 0.00 56.30 5 BOUNCE_MESSAGE 193 49.75 8.11 54.06 6 ANY_BOUNCE_MESSAGE 193 49.75 8.11 54.06 7 HTML_MESSAGE 150 46.19 86.49 42.02 8 DKIM_SIGNED 149 45.18 78.38 41.74 9 XM_DK_Pass 147 44.42 75.68 41.18 10 DKIM_VALID 143 43.40 75.68 40.06 11 RELAYCOUNTRY_US 130 39.59 70.27 36.41 12 DKIM_VALID_AU 124 37.06 59.46 34.73 13 SCC_BODY_URI_ONLY 111 28.43 2.70 31.09 14 XM_B_Unicode 98 31.47 70.27 27.45 15 DKIM_VALID_EF 84 25.38 43.24 23.53 16 HTML_FONT_LOW_CONTRAST 76 23.60 45.95 21.29 17 DCC_CHECK 67 20.30 35.14 18.77 18 XMListUnsubscribeExists 65 21.07 48.65 18.21 19 XM_B_SpammyWords 63 22.08 64.86 17.65 20 FSL_BULK_SIG 60 16.75 16.22 16.81 21 RCVD_IN_MSPIKE_WL 59 17.77 29.73 16.53 22 XM_B_Unicode3 57 19.29 51.35 15.97 23 LOC_TINY_FONT_1 53 16.75 35.14 14.85 24 RCVD_IN_MSPIKE_H2 50 15.23 27.03 14.01 25 BAYES_05 49 12.44 0.00 13.73 26 RCVD_IN_MSPIKE_H3 43 11.93 10.81 12.04 27 MIME_HTML_ONLY 43 12.94 21.62 12.04 28 FVGT_m_MULTI_ODD 42 14.97 45.95 11.76 29 UNPARSEABLE_RELAY 39 11.93 21.62 10.92 30 XM_B_Unsub 38 11.42 18.92 10.64 31 T_TM2_M_HEADER_IN_MSG 37 11.42 21.62 10.36 32 HTML_IMAGE_RATIO_04 32 8.38 2.70 8.96 33 XMSubLong 31 9.39 16.22 8.68 34 XM_SendGrid 30 7.61 0.00 8.40 35 XM_Body_Dirty_Words 29 8.63 13.51 8.12 36 TR_XM_DK_Unsub 27 9.14 24.32 7.56 37 T_XMDrugObfuBody_08 27 7.11 2.70 7.56 38 TR_XM_DK_SendGrid 27 6.85 0.00 7.56 39 RELAYCOUNTRY_META 26 9.64 32.43 7.28 40 XM_B_SpammyWords2 24 9.39 35.14 6.72 41 T_KAM_HTML_FONT_INVALID 24 8.38 24.32 6.72 42 BAYES_00 23 5.84 0.00 6.44 43 BAYES_20 21 5.58 2.70 5.88 44 XMNumbers 20 5.84 8.11 5.60 45 TR_XM_SpammyRelay 19 6.60 18.92 5.32 46 XM_Multi_Part_URI 19 7.61 29.73 5.32 47 MIME_HTML_MOSTLY 16 4.57 5.41 4.48 48 TR_XM_BayesUnsub 16 5.84 18.92 4.48 49 TR_XM_DK_Bayes 16 4.06 0.00 4.48 50 TR_XM_DK_Bayes1 15 3.81 0.00 4.20 51 XM_H_Long_From01 15 4.57 8.11 4.20 52 BAYES_60 14 4.57 10.81 3.92 53 BAYES_40 13 3.55 2.70 3.64 54 T_TooManySym_01 13 3.30 0.00 3.64 55 XM_B_SpammyWords3 13 5.08 18.92 3.64 56 TR_XM_DK_Bayes2 13 3.30 0.00 3.64 57 XM_Evil_Numbers_Gen 13 3.81 5.41 3.64 58 TooManyTo_001 13 3.55 2.70 3.64 59 TR_XM_PhishingBody 12 4.06 10.81 3.36 60 XMStrtUSub 11 3.05 2.70 3.08 61 XM_DIRTYINTL 11 2.79 0.00 3.08 62 RELAYCOUNTRY_CA 11 3.05 2.70 3.08 63 BOTNET_IPINHOSTNAME 10 3.55 10.81 2.80 64 XM_DK_Undo_01 10 3.05 5.41 2.80 65 HTML_IMAGE_RATIO_02 10 2.79 2.70 2.80 66 T_TooManySym_02 10 2.54 0.00 2.80 67 IN_ZIMBRA_NJ_WHITELIST 10 2.54 0.00 2.80 68 XM_DKIMWhitelistDomains 9 2.28 0.00 2.52 69 XM_B_Phish66 9 2.79 5.41 2.52 70 XM_DK_Undo_02 9 4.57 24.32 2.52 71 MIME_HEADER_CTYPE_ONLY 8 2.03 0.00 2.24 72 LotsOfNums_01 8 2.79 8.11 2.24 73 RCVD_IN_MSPIKE_H5 8 3.05 10.81 2.24 74 TVD_SPACE_RATIO 8 2.28 2.70 2.24 75 XM_UncommonTLD01 8 2.54 5.41 2.24 76 MIME_QP_LONG_LINE 8 2.28 2.70 2.24 77 HTML_IMAGE_ONLY_20 8 2.03 0.00 2.24 78 USER_IN_DEF_DKIM_WL 8 2.03 0.00 2.24 79 RCVD_IN_MSPIKE_H4 8 2.79 8.11 2.24 80 BOTNET 7 2.79 10.81 1.96 81 XMLngstWrd_00 7 2.28 5.41 1.96 82 UNTRUSTED_Relay 7 4.06 24.32 1.96 83 T_REMOTE_IMAGE 6 2.03 5.41 1.68 84 DKIM_INVALID 6 1.78 2.70 1.68 85 BAYES_80 6 2.03 5.41 1.68 86 XM_UB50 6 2.79 13.51 1.68 87 XMSexyCombo_05 6 2.03 5.41 1.68 88 TO_MALFORMED 5 1.27 0.00 1.40 89 RELAYCOUNTRY_AU 5 1.27 0.00 1.40 90 INVALID_MSGID 5 1.27 0.00 1.40 91 XM_PDF 5 1.27 0.00 1.40 92 LOTS_OF_MONEY 5 3.81 27.03 1.40 93 TR_XM_SpammyWords4 5 3.81 27.03 1.40 94 FROM_GOV_SPOOF 4 1.02 0.00 1.12 95 DKIM_ADSP_CUSTOM_MED 4 1.52 5.41 1.12 96 XMSubMetaSx_00 4 1.78 8.11 1.12 97 MPART_ALT_DIFF 4 2.03 10.81 1.12 98 NML_ADSP_CUSTOM_MED 4 1.52 5.41 1.12 99 BASE64_LENGTH_79_INF 4 1.02 0.00 1.12 100 TR_XM_DKIM_Undo 4 3.05 21.62 1.12 101 XM_SPF_SoftFail 4 1.52 5.41 1.12 102 TM2_M_URI_OPT_OUT 4 2.03 10.81 1.12 103 MAILING_LIST_MULTI 4 1.78 8.11 1.12 104 XM_ZIP 4 1.02 0.00 1.12 105 SUBJ_ALL_CAPS 4 1.02 0.00 1.12 106 TR_Symld_Words 4 1.02 0.00 1.12 107 TR_XM_SpammyWords5 4 1.52 5.41 1.12 108 FROM_GOV_DKIM_AU 4 1.02 0.00 1.12 109 RELAYCOUNTRY_AT 3 0.76 0.00 0.84 110 XMGappySubj_01 3 0.76 0.00 0.84 111 TooManyTo_002 3 1.02 2.70 0.84 112 RCVD_IN_VALIDITY_CERTIFIED 3 0.76 0.00 0.84 113 RCVD_IN_VALIDITY_SAFE 3 0.76 0.00 0.84 114 RELAYCOUNTRY_GB 3 1.02 2.70 0.84 115 TooManyTo_003 3 1.02 2.70 0.84 116 XMhairloss01 3 0.76 0.00 0.84 117 XM_H_Long_From02 3 1.02 2.70 0.84 118 TM2_M_VERY_LONG_WORD 3 0.76 0.00 0.84 119 T_OBFU_PDF_ATTACH 3 0.76 0.00 0.84 120 XM_B_Investor 2 1.27 8.11 0.56 121 T_XMDrugObfuBody_14 2 1.02 5.41 0.56 122 MSGID_FROM_MTA_HEADER 2 0.51 0.00 0.56 123 TR_XM_UnparsRelay 2 1.78 13.51 0.56 124 BOGUS_MIME_VERSION 2 0.51 0.00 0.56 125 TR_XM_SpoofStaff 2 0.76 2.70 0.56 126 XM_Dr_From 2 0.51 0.00 0.56 127 TR_BOTNET_NEGATE 2 0.51 0.00 0.56 128 BAYES_95 2 1.52 10.81 0.56 129 USER_IN_WELCOMELIST 2 0.51 0.00 0.56 130 XMGenDplmaNmb 2 0.51 0.00 0.56 131 XM_ZohoDesk1 2 0.51 0.00 0.56 132 XM_H_Undi_Recip 2 1.78 13.51 0.56 133 XM_GoogleGroups 2 0.51 0.00 0.56 134 TR_XM_SpoofPhishAttach 2 0.51 0.00 0.56 135 XMSpoofStaff2 2 0.76 2.70 0.56 136 TR_XM_PSC1 2 0.51 0.00 0.56 137 XMLngstWrd_01 2 1.02 5.41 0.56 138 NO_DNS_FOR_FROM 2 0.51 0.00 0.56 139 XMSexyCombo_01 2 0.51 0.00 0.56 140 HTML_IMAGE_RATIO_06 2 1.02 5.41 0.56 141 USER_IN_WHITELIST 2 0.51 0.00 0.56 142 BAYES_99 2 1.27 8.11 0.56 143 XM_B_Phish_Phrases 2 2.03 16.22 0.56 144 XMPhish11 2 0.51 0.00 0.56 145 HTML_MIME_NO_HTML_TAG 2 0.51 0.00 0.56 146 XM_H_SpoofStaff4 2 0.51 0.00 0.56 147 XMDiploma_00 2 0.51 0.00 0.56 148 T_XMDrugObfuBody_00 1 0.51 2.70 0.28 149 XMLngstWrd_04 1 0.76 5.41 0.28 150 HTML_IMAGE_ONLY_24 1 0.25 0.00 0.28 151 RCVD_IN_IADB_DK 1 0.25 0.00 0.28 152 GMD_PDF_EMPTY_BODY 1 0.25 0.00 0.28 153 T_TVD_MIME_NO_HEADERS 1 0.25 0.00 0.28 154 T_TooManySym_03 1 0.25 0.00 0.28 155 KHOP_HELO_FCRDNS 1 1.02 8.11 0.28 156 XMLngstWrd_03 1 0.76 5.41 0.28 157 HTML_TAG_BALANCE_HEAD 1 0.25 0.00 0.28 158 XMPhishDuo 1 0.25 0.00 0.28 159 RELAYCOUNTRY_KR 1 0.25 0.00 0.28 160 TooManyTo_004 1 0.51 2.70 0.28 161 PLING_QUERY 1 0.25 0.00 0.28 162 TR_Legit_01 1 0.25 0.00 0.28 163 HTML_FONT_TINY_NORDNS 1 0.51 2.70 0.28 164 RELAYCOUNTRY_NL 1 0.25 0.00 0.28 165 DATE_IN_PAST_03_06 1 0.25 0.00 0.28 166 XMLngstWrd_02 1 0.76 5.41 0.28 167 RCVD_IN_MSPIKE_L3 1 0.25 0.00 0.28 168 XMBody_78 1 0.25 0.00 0.28 169 MIME_HTML_ONLY_MULTI 1 0.25 0.00 0.28 170 RCVD_IN_IADB_LISTED 1 0.25 0.00 0.28 171 CTE_8BIT_MISMATCH 1 0.25 0.00 0.28 172 TR_XM_MaxWHORU 1 0.25 0.00 0.28 173 XMPhish14 1 0.25 0.00 0.28 174 XM_ShortIntro_01 1 0.51 2.70 0.28 175 WEIRD_PORT 1 0.25 0.00 0.28 176 LONGLN_LOW_CONTRAST 1 0.51 2.70 0.28 177 T_TVD_MIME_EPI 1 0.25 0.00 0.28 178 HTML_TEXT_INVISIBLE_STYLE 1 0.25 0.00 0.28 179 TR_Mismatch_TLD_01 1 0.25 0.00 0.28 180 RCVD_IN_PSBL 1 0.76 5.41 0.28 181 DKIM_ADSP_NXDOMAIN 1 0.25 0.00 0.28 182 RCVD_IN_IADB_SENDERID 1 0.25 0.00 0.28 183 TR_XM_Spammywords 1 0.25 0.00 0.28 184 TM2_M_A_HREF_HREF 1 0.25 0.00 0.28 185 LongTLD 1 0.25 0.00 0.28 186 DEAR_FRIEND 1 0.25 0.00 0.28 187 RCVD_IN_IADB_SPF 1 0.25 0.00 0.28 188 XMSolicitRefs_0 1 0.51 2.70 0.28 189 NUMERIC_HTTP_ADDR 1 0.51 2.70 0.28 190 BAYES_999 1 1.02 8.11 0.28 191 LONG_JUNK_URI3 1 0.25 0.00 0.28 192 RCVD_IN_MSPIKE_BL 1 0.51 2.70 0.28 193 URI_HEX 1 0.25 0.00 0.28 194 XM_S_SubURI 1 0.25 0.00 0.28 195 XM_B_SpammyTLD 1 0.76 5.41 0.28 196 XMSubMetaSxObfu_03 1 0.76 5.41 0.28 197 URI_TRY_3LD 1 0.25 0.00 0.28 198 XMGppyBdWords 1 0.76 5.41 0.28 199 XMPhish08 1 0.51 2.70 0.28 200 XM_Body_Obfu01 1 0.25 0.00 0.28 ----------------------------------------------------------------------