Email: 461 Autolearn: 0 AvgScore: 1.82 AvgScanTime: 2.04 sec Spam: 83 Autolearn: 0 AvgScore: 11.53 AvgScanTime: 2.45 sec Ham: 378 Autolearn: 0 AvgScore: -0.31 AvgScanTime: 1.96 sec Time Spent Running SA: 0.26 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 76 55.97 91.57 48.15 2 XM_B_Unicode 71 39.48 85.54 29.37 3 T_SCC_BODY_TEXT_LINE 70 82.21 84.34 81.75 4 DKIM_SIGNED 51 50.54 61.45 48.15 5 XM_DK_Pass 49 49.89 59.04 47.88 6 DKIM_VALID 49 49.67 59.04 47.62 7 RELAYCOUNTRY_US 48 51.19 57.83 49.74 8 HTML_FONT_LOW_CONTRAST 48 30.37 57.83 24.34 9 XM_B_SpammyWords 47 28.42 56.63 22.22 10 DCC_CHECK 46 25.81 55.42 19.31 11 BAYES_50 42 68.76 50.60 72.75 12 DKIM_VALID_AU 40 43.60 48.19 42.59 13 DCC_CHECK_NEGATIVE 37 74.19 44.58 80.69 14 XM_B_Unicode3 36 22.13 43.37 17.46 15 XMListUnsubscribeExists 36 25.38 43.37 21.43 16 XM_Body_Dirty_Words 32 13.23 38.55 7.67 17 XM_SPF_SoftFail 27 8.03 32.53 2.65 18 FVGT_m_MULTI_ODD 26 14.97 31.33 11.38 19 RCVD_IN_MSPIKE_H2 26 15.84 31.33 12.43 20 XM_DK_Undo_02 25 7.59 30.12 2.65 21 FSL_BULK_SIG 25 18.22 30.12 15.61 22 ALL_TRUSTED 24 43.38 28.92 46.56 23 XMSubLong 23 19.74 27.71 17.99 24 SHORT_URI_2 23 6.51 27.71 1.85 25 DKIM_VALID_EF 23 26.90 27.71 26.72 26 BAYES_99 23 5.64 27.71 0.79 27 LOC_TINY_FONT_1 21 14.32 25.30 11.90 28 TooManyTo_001 20 8.46 24.10 5.03 29 BAYES_999 18 4.56 21.69 0.79 30 XM_Multi_Part_URI 18 11.93 21.69 9.79 31 TR_XM_DK_Unsub 16 13.67 19.28 12.43 32 RELAYCOUNTRY_META 14 7.16 16.87 5.03 33 T_TM2_M_HEADER_IN_MSG 13 18.00 15.66 18.52 34 UNPARSEABLE_RELAY 12 7.16 14.46 5.56 35 XM_B_SpammyWords2 12 9.98 14.46 8.99 36 MIME_HTML_ONLY 11 8.24 13.25 7.14 37 TR_XM_BayesUnsub 11 5.42 13.25 3.70 38 XM_B_Unsub 11 6.94 13.25 5.56 39 BAYES_60 10 7.16 12.05 6.08 40 UNTRUSTED_Relay 10 3.25 12.05 1.32 41 XM_DK_Undo_01 9 5.42 10.84 4.23 42 XM_Evil_Numbers_Gen 9 4.99 10.84 3.70 43 XM_UncommonTLD01 9 6.51 10.84 5.56 44 MAILING_LIST_MULTI 9 7.59 10.84 6.88 45 XM_H_Undi_Recip 8 2.17 9.64 0.53 46 XM_GoogleGroups 7 2.39 8.43 1.06 47 XM_H_Long_From01 7 3.04 8.43 1.85 48 T_KAM_HTML_FONT_INVALID 7 8.03 8.43 7.94 49 TR_XM_DKIM_Undo 7 1.74 8.43 0.26 50 RCVD_IN_MSPIKE_WL 6 18.66 7.23 21.16 51 TR_MRelay_UG 6 1.52 7.23 0.26 52 TM2_M_URI_OPT_OUT 6 3.69 7.23 2.91 53 TR_XM_Undi_Recip6 6 1.30 7.23 0.00 54 LOTS_OF_MONEY 6 3.04 7.23 2.12 55 XM_H_Long_From02 6 3.25 7.23 2.38 56 HTML_IMAGE_RATIO_02 6 3.25 7.23 2.38 57 NML_ADSP_CUSTOM_MED 6 1.95 7.23 0.79 58 TR_XM_UnparsRelay 6 1.74 7.23 0.53 59 DKIM_ADSP_CUSTOM_MED 6 1.95 7.23 0.79 60 TR_XM_SpammyWords4 5 2.39 6.02 1.59 61 TR_XM_FormFill2 5 1.08 6.02 0.00 62 RCVD_IN_MSPIKE_H3 5 9.11 6.02 9.79 63 XM_UB60 5 1.08 6.02 0.00 64 SpammyFromTLD_01 5 1.08 6.02 0.00 65 TR_XM_PHPForged 5 1.08 6.02 0.00 66 BAYES_80 4 4.12 4.82 3.97 67 XMSexyCombo_05 4 1.52 4.82 0.79 68 XM_H_PHPMailer 4 1.08 4.82 0.26 69 TR_XM_PHPDW 4 0.87 4.82 0.00 70 XM_B_Investor 4 1.52 4.82 0.79 71 BOTNET 4 1.95 4.82 1.32 72 XMBody_78 4 0.87 4.82 0.00 73 HTML_IMAGE_RATIO_04 4 2.39 4.82 1.85 74 TR_XM_SpammyRelay 4 2.39 4.82 1.85 75 XM_H_PHPOS 4 0.87 4.82 0.00 76 BOTNET_IPINHOSTNAME 4 4.34 4.82 4.23 77 XMStrtUSub 3 3.47 3.61 3.44 78 XM_B_Phish_Phrases 3 2.39 3.61 2.12 79 XM_UB50 3 1.08 3.61 0.53 80 HDRS_MISSP 3 0.65 3.61 0.00 81 T_TooManySym_01 3 6.72 3.61 7.41 82 TR_XM_SpammyWords2 3 0.65 3.61 0.00 83 FORGED_YAHOO_RCVD 3 0.65 3.61 0.00 84 PHP_SCRIPT 3 0.65 3.61 0.00 85 KHOP_HELO_FCRDNS 3 0.87 3.61 0.26 86 T_XMDrugObfuBody_00 3 1.30 3.61 0.79 87 TR_DCC_Bayes_99 3 0.65 3.61 0.00 88 BAYES_95 3 1.74 3.61 1.32 89 XMBdyGiftCard01 3 0.65 3.61 0.00 90 XM_B_SpammyWords3 3 1.30 3.61 0.79 91 RELAYCOUNTRY_IE 3 0.87 3.61 0.26 92 NORDNS_LOW_CONTRAST 3 0.87 3.61 0.26 93 FORGED_GMAIL_RCVD 2 0.87 2.41 0.53 94 TVD_RCVD_IP 2 0.65 2.41 0.26 95 RELAYCOUNTRY_FR 2 0.65 2.41 0.26 96 TR_XM_MaxWHORU 2 0.43 2.41 0.00 97 XM_Lotto 2 0.43 2.41 0.00 98 NUMERIC_HTTP_ADDR 2 0.65 2.41 0.26 99 XM_B_SpammyTLD 2 4.12 2.41 4.50 100 XM_Body_Dirty_Words_01 2 0.65 2.41 0.26 101 TR_Mismatch_TLD_02 2 0.43 2.41 0.00 102 RCVD_IN_BL_SPAMCOP_NET 2 1.08 2.41 0.79 103 TM2_M_VERY_LONG_WORD 2 1.08 2.41 0.79 104 TR_XM_INV_DKIM 2 0.43 2.41 0.00 105 XM_UB99 2 0.43 2.41 0.00 106 MPART_ALT_DIFF 2 1.52 2.41 1.32 107 TR_Mismatch_TLD_01 2 0.43 2.41 0.00 108 PDS_RDNS_DYNAMIC_FP 2 0.43 2.41 0.00 109 MIXED_ES 2 0.43 2.41 0.00 110 NO_DNS_FOR_FROM 2 0.43 2.41 0.00 111 TR_XM_Undi_Recip2 2 0.87 2.41 0.53 112 DKIM_INVALID 2 0.87 2.41 0.53 113 TR_XM_BayesRelay 2 0.43 2.41 0.00 114 T_FILL_THIS_FORM_SHORT 2 0.43 2.41 0.00 115 MIME_HTML_ONLY_MULTI 2 0.43 2.41 0.00 116 XM_B_SpammyWords4 2 0.43 2.41 0.00 117 UNDISC_MONEY 2 0.43 2.41 0.00 118 BOTNET_NORDNS 2 0.43 2.41 0.00 119 XM_UB999 2 0.43 2.41 0.00 120 T_US_DOLLARS_3 2 0.43 2.41 0.00 121 RDNS_DYNAMIC 2 0.43 2.41 0.00 122 XM_DIRTYINTL 2 1.08 2.41 0.79 123 SHOPIFY_IMG_NOT_RCVD_SFY 2 0.43 2.41 0.00 124 HTML_IMAGE_RATIO_06 2 1.08 2.41 0.79 125 RELAYCOUNTRY_IT 2 0.43 2.41 0.00 126 TR_XM_InvalidRelay 2 0.43 2.41 0.00 127 XM_OfRef6 2 0.87 2.41 0.53 128 URIBL_BLACK 2 0.43 2.41 0.00 129 SUBJ_ALL_CAPS 2 3.25 2.41 3.44 130 XMLngstWrd_02 1 0.22 1.20 0.00 131 TR_XM_MSPIKECOMBO 1 0.22 1.20 0.00 132 HK_SCAM 1 0.22 1.20 0.00 133 XM_Nigeria_01 1 0.22 1.20 0.00 134 NORMAL_HTTP_TO_IP 1 0.43 1.20 0.26 135 FORM_FRAUD_5 1 0.22 1.20 0.00 136 TR_XM_Undi_Recip5 1 0.22 1.20 0.00 137 T_REMOTE_IMAGE 1 3.47 1.20 3.97 138 TR_XM_Undi_RecipCombo2 1 0.22 1.20 0.00 139 TR_Sbj_FN_Bdy 1 0.22 1.20 0.00 140 RCVD_IN_MSPIKE_H5 1 5.42 1.20 6.35 141 RCVD_IN_MSPIKE_BL 1 0.22 1.20 0.00 142 FORGED_MUA_MOZILLA 1 0.22 1.20 0.00 143 URI_OPTOUT_3LD 1 0.22 1.20 0.00 144 XMStockSpam_01 1 0.22 1.20 0.00 145 TR_XM_NoHeaderRelay 1 0.22 1.20 0.00 146 XM_URI_RBL 1 0.43 1.20 0.26 147 XMSubMetaSx_00 1 0.65 1.20 0.53 148 RCVD_IN_PSBL 1 0.43 1.20 0.26 149 XMLngstWrd_03 1 0.22 1.20 0.00 150 HTML_COMMENT_SAVED_URL 1 0.22 1.20 0.00 151 TR_XM_Undi_Recip11 1 0.22 1.20 0.00 152 HTML_FONT_TINY_NORDNS 1 0.65 1.20 0.53 153 XMCapTrack 1 0.87 1.20 0.79 154 TR_XM_Undi_Recip14 1 0.22 1.20 0.00 155 RELAYCOUNTRY_KR 1 0.22 1.20 0.00 156 XMGppyBdWords 1 0.22 1.20 0.00 157 XMLngstWrd_01 1 0.65 1.20 0.53 158 RELAYCOUNTRY_AT 1 0.43 1.20 0.26 159 FROM_LOCAL_NOVOWEL 1 0.22 1.20 0.00 160 RELAYCOUNTRY_AU 1 1.52 1.20 1.59 161 XM_RXBody 1 0.22 1.20 0.00 162 XMNoVowels 1 3.69 1.20 4.23 163 TR_XM_DK_SendGrid 1 0.43 1.20 0.26 164 SHORTENED_URL_HREF 1 0.87 1.20 0.79 165 RELAYCOUNTRY_ID 1 0.22 1.20 0.00 166 XM_B_Unsub2 1 0.65 1.20 0.53 167 TR_XM_SpammyWords5 1 3.90 1.20 4.50 168 RELAYCOUNTRY_CN 1 0.22 1.20 0.00 169 RELAYCOUNTRY_PL 1 0.22 1.20 0.00 170 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.22 1.20 0.00 171 RCVD_IN_VALIDITY_CERTIFIED 1 0.87 1.20 0.79 172 XMPhish30 1 0.22 1.20 0.00 173 RELAYCOUNTRY_KH 1 0.22 1.20 0.00 174 HTML_MIME_NO_HTML_TAG 1 0.65 1.20 0.53 175 RCVD_IN_VALIDITY_SAFE 1 0.87 1.20 0.79 176 ADVANCE_FEE_5_NEW_MONEY 1 0.22 1.20 0.00 177 HTML_IMAGE_ONLY_20 1 3.04 1.20 3.44 178 PDS_OTHER_BAD_TLD 1 0.22 1.20 0.00 179 XMSubMetaSxObfu_03 1 0.22 1.20 0.00 180 RCVD_IN_MSPIKE_L3 1 0.22 1.20 0.00 181 ANY_BOUNCE_MESSAGE 1 34.49 1.20 41.80 182 HELO_DYNAMIC_SPLIT_IP 1 0.22 1.20 0.00 183 XM_HighProb1 1 0.22 1.20 0.00 184 XFER_LOTSA_MONEY 1 0.22 1.20 0.00 185 MONEY_FRAUD_8 1 0.22 1.20 0.00 186 XM_SendGrid 1 0.65 1.20 0.53 187 UNCLAIMED_MONEY 1 0.22 1.20 0.00 188 HK_RANDOM_ENVFROM 1 0.87 1.20 0.79 189 LOADSA_MONEY_COMBO 1 0.22 1.20 0.00 190 XMLngstWrd_04 1 0.22 1.20 0.00 191 TR_XM_FormFill 1 0.22 1.20 0.00 192 XMStockSpam_06 1 0.87 1.20 0.79 193 TM2_M_OBFU_COMMENT 1 0.22 1.20 0.00 194 TR_XM_PhishingBody 1 1.95 1.20 2.12 195 MONEY_FORM_SHORT 1 0.22 1.20 0.00 196 T_XMDrugObfuBody_14 1 0.43 1.20 0.26 197 SCC_BODY_URI_ONLY 1 23.86 1.20 28.84 198 RELAYCOUNTRY_TW 1 0.22 1.20 0.00 199 XM_H_PHPOS_M 1 0.22 1.20 0.00 200 ADVANCE_FEE_3_NEW_MONEY 1 0.22 1.20 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 309 82.21 84.34 81.75 2 DCC_CHECK_NEGATIVE 305 74.19 44.58 80.69 3 BAYES_50 275 68.76 50.60 72.75 4 RELAYCOUNTRY_US 188 51.19 57.83 49.74 5 DKIM_SIGNED 182 50.54 61.45 48.15 6 HTML_MESSAGE 182 55.97 91.57 48.15 7 XM_DK_Pass 181 49.89 59.04 47.88 8 DKIM_VALID 180 49.67 59.04 47.62 9 ALL_TRUSTED 176 43.38 28.92 46.56 10 DKIM_VALID_AU 161 43.60 48.19 42.59 11 BOUNCE_MESSAGE 158 34.49 1.20 41.80 12 ANY_BOUNCE_MESSAGE 158 34.49 1.20 41.80 13 XM_B_Unicode 111 39.48 85.54 29.37 14 SCC_BODY_URI_ONLY 109 23.86 1.20 28.84 15 DKIM_VALID_EF 101 26.90 27.71 26.72 16 HTML_FONT_LOW_CONTRAST 92 30.37 57.83 24.34 17 XM_B_SpammyWords 84 28.42 56.63 22.22 18 XMListUnsubscribeExists 81 25.38 43.37 21.43 19 RCVD_IN_MSPIKE_WL 80 18.66 7.23 21.16 20 DCC_CHECK 73 25.81 55.42 19.31 21 T_TM2_M_HEADER_IN_MSG 70 18.00 15.66 18.52 22 XMSubLong 68 19.74 27.71 17.99 23 XM_B_Unicode3 66 22.13 43.37 17.46 24 FSL_BULK_SIG 59 18.22 30.12 15.61 25 TR_XM_DK_Unsub 47 13.67 19.28 12.43 26 RCVD_IN_MSPIKE_H2 47 15.84 31.33 12.43 27 LOC_TINY_FONT_1 45 14.32 25.30 11.90 28 FVGT_m_MULTI_ODD 43 14.97 31.33 11.38 29 RCVD_IN_MSPIKE_H3 37 9.11 6.02 9.79 30 XM_Multi_Part_URI 37 11.93 21.69 9.79 31 XM_B_SpammyWords2 34 9.98 14.46 8.99 32 T_XMDrugObfuBody_08 30 6.51 0.00 7.94 33 T_KAM_HTML_FONT_INVALID 30 8.03 8.43 7.94 34 XM_Body_Dirty_Words 29 13.23 38.55 7.67 35 T_TooManySym_01 28 6.72 3.61 7.41 36 MIME_HTML_ONLY 27 8.24 13.25 7.14 37 MAILING_LIST_MULTI 26 7.59 10.84 6.88 38 RCVD_IN_MSPIKE_H5 24 5.42 1.20 6.35 39 BAYES_60 23 7.16 12.05 6.08 40 UNPARSEABLE_RELAY 21 7.16 14.46 5.56 41 XM_B_Unsub 21 6.94 13.25 5.56 42 XM_UncommonTLD01 21 6.51 10.84 5.56 43 T_TooManySym_02 20 4.34 0.00 5.29 44 BAYES_40 20 4.34 0.00 5.29 45 RELAYCOUNTRY_META 19 7.16 16.87 5.03 46 TooManyTo_001 19 8.46 24.10 5.03 47 RCVD_IN_MSPIKE_H4 19 4.12 0.00 5.03 48 BAYES_00 18 3.90 0.00 4.76 49 BAYES_20 17 3.69 0.00 4.50 50 XM_B_SpammyTLD 17 4.12 2.41 4.50 51 TR_XM_SpammyWords5 17 3.90 1.20 4.50 52 XM_DK_Undo_01 16 5.42 10.84 4.23 53 BOTNET_IPINHOSTNAME 16 4.34 4.82 4.23 54 XMNoVowels 16 3.69 1.20 4.23 55 HTML_IMAGE_RATIO_08 16 3.47 0.00 4.23 56 XM_DKIMWhitelistDomains 15 3.25 0.00 3.97 57 T_REMOTE_IMAGE 15 3.47 1.20 3.97 58 BAYES_80 15 4.12 4.82 3.97 59 XMNumbers 15 3.47 1.20 3.97 60 XM_Evil_Numbers_Gen 14 4.99 10.84 3.70 61 MIME_HTML_MOSTLY 14 3.25 1.20 3.70 62 TR_XM_BayesUnsub 14 5.42 13.25 3.70 63 TR_XM_DK_Bayes 13 2.82 0.00 3.44 64 TR_XM_DK_Bayes1 13 2.82 0.00 3.44 65 USER_IN_DEF_DKIM_WL 13 2.82 0.00 3.44 66 XMStrtUSub 13 3.47 3.61 3.44 67 SUBJ_ALL_CAPS 13 3.25 2.41 3.44 68 HTML_IMAGE_ONLY_20 13 3.04 1.20 3.44 69 MIME_HEADER_CTYPE_ONLY 12 2.60 0.00 3.17 70 HTML_IMAGE_ONLY_28 12 2.60 0.00 3.17 71 TM2_M_URI_OPT_OUT 11 3.69 7.23 2.91 72 TR_XM_DK_Bayes2 11 2.39 0.00 2.91 73 MIME_QP_LONG_LINE 11 2.39 0.00 2.91 74 XM_DK_Undo_02 10 7.59 30.12 2.65 75 XM_SPF_SoftFail 10 8.03 32.53 2.65 76 XMLngstWrd_00 10 2.39 1.20 2.65 77 IN_ZIMBRA_NJ_WHITELIST 10 2.17 0.00 2.65 78 HTML_IMAGE_RATIO_02 9 3.25 7.23 2.38 79 LotsOfNums_01 9 2.17 1.20 2.38 80 XM_H_Long_From02 9 3.25 7.23 2.38 81 T_TooManySym_03 8 1.74 0.00 2.12 82 TVD_SPACE_RATIO 8 1.74 0.00 2.12 83 XM_B_Phish_Phrases 8 2.39 3.61 2.12 84 XM_CamelCaseFrm001 8 1.74 0.00 2.12 85 TR_XM_PhishingBody 8 1.95 1.20 2.12 86 XM_B_Phish66 8 1.74 0.00 2.12 87 LOTS_OF_MONEY 8 3.04 7.23 2.12 88 SHORT_URI_2 7 6.51 27.71 1.85 89 XM_H_Long_From01 7 3.04 8.43 1.85 90 MISSING_HEADERS 7 1.52 0.00 1.85 91 XMGappySubj_01 7 1.52 0.00 1.85 92 TR_XM_SpammyRelay 7 2.39 4.82 1.85 93 HTML_IMAGE_RATIO_04 7 2.39 4.82 1.85 94 RELAYCOUNTRY_NL 6 1.30 0.00 1.59 95 TR_XM_SpammyWords4 6 2.39 6.02 1.59 96 TO_MALFORMED 6 1.30 0.00 1.59 97 RELAYCOUNTRY_AU 6 1.52 1.20 1.59 98 MPART_ALT_DIFF 5 1.52 2.41 1.32 99 UNTRUSTED_Relay 5 3.25 12.05 1.32 100 BOTNET 5 1.95 4.82 1.32 101 T_TooManySym_04 5 1.08 0.00 1.32 102 BAYES_95 5 1.74 3.61 1.32 103 FROM_GOV_DKIM_AU 4 0.87 0.00 1.06 104 INVALID_MSGID 4 0.87 0.00 1.06 105 XM_GoogleGroups 4 2.39 8.43 1.06 106 TooManyTo_002 4 0.87 0.00 1.06 107 REPLYTO_WITHOUT_TO_CC 4 0.87 0.00 1.06 108 TM2_M_A_HREF_HREF 4 0.87 0.00 1.06 109 USER_IN_WELCOMELIST 4 0.87 0.00 1.06 110 XM_ZIP 4 0.87 0.00 1.06 111 USER_IN_WHITELIST 4 0.87 0.00 1.06 112 IN_HORDE_ADDRESS_BOOK 4 0.87 0.00 1.06 113 XM_H_Delta_Help 4 0.87 0.00 1.06 114 XMCapTrack 3 0.87 1.20 0.79 115 RCVD_IN_IADB_SENDERID 3 0.65 0.00 0.79 116 XM_Body_Obfu01 3 0.65 0.00 0.79 117 TR_XM_SpoofPhishAttach 3 0.65 0.00 0.79 118 TM2_M_VERY_LONG_WORD 3 1.08 2.41 0.79 119 BAYES_999 3 4.56 21.69 0.79 120 TR_Symld_Words 3 0.65 0.00 0.79 121 RCVD_IN_BL_SPAMCOP_NET 3 1.08 2.41 0.79 122 RCVD_IN_IADB_LISTED 3 0.65 0.00 0.79 123 RCVD_IN_IADB_SPF 3 0.65 0.00 0.79 124 TR_XM_SB_Phish 3 0.65 0.00 0.79 125 XMSexyCombo_05 3 1.52 4.82 0.79 126 XMStockSpam_06 3 0.87 1.20 0.79 127 RCVD_IN_IADB_DK 3 0.65 0.00 0.79 128 XM_DIRTYINTL 3 1.08 2.41 0.79 129 NML_ADSP_CUSTOM_MED 3 1.95 7.23 0.79 130 HK_RANDOM_ENVFROM 3 0.87 1.20 0.79 131 XM_B_SpammyWords3 3 1.30 3.61 0.79 132 URI_HEX 3 0.65 0.00 0.79 133 DKIM_ADSP_CUSTOM_MED 3 1.95 7.23 0.79 134 HTML_IMAGE_RATIO_06 3 1.08 2.41 0.79 135 RELAYCOUNTRY_GB 3 0.65 0.00 0.79 136 HK_RANDOM_FROM 3 0.87 1.20 0.79 137 T_XMDrugObfuBody_00 3 1.30 3.61 0.79 138 TM2_M_HAS_BSLASH_URI 3 0.65 0.00 0.79 139 SHORTENED_URL_HREF 3 0.87 1.20 0.79 140 XM_B_Investor 3 1.52 4.82 0.79 141 BAYES_99 3 5.64 27.71 0.79 142 RCVD_IN_VALIDITY_CERTIFIED 3 0.87 1.20 0.79 143 RCVD_IN_VALIDITY_SAFE 3 0.87 1.20 0.79 144 FACEBOOK_IMG_NOT_RCVD_FB 2 0.43 0.00 0.53 145 HTML_FONT_TINY_NORDNS 2 0.65 1.20 0.53 146 XMSolicitRefs_0 2 0.43 0.00 0.53 147 HTML_IMAGE_ONLY_24 2 0.43 0.00 0.53 148 XM_UB50 2 1.08 3.61 0.53 149 XM_H_SpoofStaff4 2 0.43 0.00 0.53 150 XMLngstWrd_01 2 0.65 1.20 0.53 151 TR_XM_SpoofStaff 2 0.43 0.00 0.53 152 DEAR_SOMETHING 2 0.43 0.00 0.53 153 CHARSET_FARAWAY_HEADER 2 0.43 0.00 0.53 154 XM_B_SpammyTLD2 2 0.43 0.00 0.53 155 XM_H_Undi_Recip 2 2.17 9.64 0.53 156 RCVD_IN_IADB_VOUCHED 2 0.43 0.00 0.53 157 TR_XM_PSC1 2 0.43 0.00 0.53 158 XM_ZohoDesk1 2 0.43 0.00 0.53 159 FORGED_GMAIL_RCVD 2 0.87 2.41 0.53 160 XMSubMetaSx_00 2 0.65 1.20 0.53 161 XM_Ancestry_Forge 2 0.43 0.00 0.53 162 XMBody_95 2 0.43 0.00 0.53 163 XMSubPhish11 2 0.43 0.00 0.53 164 XMGappySubj_02 2 0.43 0.00 0.53 165 TR_XM_UnparsRelay 2 1.74 7.23 0.53 166 XM_SendGrid 2 0.65 1.20 0.53 167 XM_OfRef6 2 0.87 2.41 0.53 168 BAYES_05 2 0.65 1.20 0.53 169 XM_PDF 2 0.43 0.00 0.53 170 XM_B_Unsub2 2 0.65 1.20 0.53 171 DKIM_INVALID 2 0.87 2.41 0.53 172 RELAYCOUNTRY_CA 2 0.43 0.00 0.53 173 TR_XM_Undi_Recip2 2 0.87 2.41 0.53 174 XMSpoofStaff2 2 0.43 0.00 0.53 175 MIME_CHARSET_FARAWAY 2 0.43 0.00 0.53 176 HTML_MIME_NO_HTML_TAG 2 0.65 1.20 0.53 177 URI_NOVOWEL 1 0.22 0.00 0.26 178 XM_UB80 1 0.22 0.00 0.26 179 XMSlimDrugH 1 0.22 0.00 0.26 180 TR_XM_RelayPhish 1 0.22 0.00 0.26 181 XMDiploma_00 1 0.22 0.00 0.26 182 TooManyTo_003 1 0.22 0.00 0.26 183 TR_XM_Base64_C 1 0.22 0.00 0.26 184 XM_OfRef7 1 0.22 0.00 0.26 185 KHOP_HELO_FCRDNS 1 0.87 3.61 0.26 186 FROM_GOV_SPOOF 1 0.22 0.00 0.26 187 TR_LOTS_OF_MONEY3 1 0.22 0.00 0.26 188 XM_H_PHPMailer 1 1.08 4.82 0.26 189 TR_XM_Base64_M1 1 0.22 0.00 0.26 190 CTE_8BIT_MISMATCH 1 0.22 0.00 0.26 191 XMSubMetaI_00 1 0.22 0.00 0.26 192 NUMERIC_HTTP_ADDR 1 0.65 2.41 0.26 193 NORMAL_HTTP_TO_IP 1 0.43 1.20 0.26 194 XM_ProductURIs 1 0.22 0.00 0.26 195 XMHTML_After_End 1 0.22 0.00 0.26 196 RELAYCOUNTRY_FR 1 0.65 2.41 0.26 197 AC_DIV_BONANZA 1 0.22 0.00 0.26 198 TVD_RCVD_IP 1 0.65 2.41 0.26 199 FROM_EXCESS_BASE64 1 0.22 0.00 0.26 200 NICE_REPLY_A 1 0.22 0.00 0.26 ----------------------------------------------------------------------