Email: 303 Autolearn: 0 AvgScore: -0.34 AvgScanTime: 0.86 sec Spam: 48 Autolearn: 0 AvgScore: 12.38 AvgScanTime: 0.94 sec Ham: 255 Autolearn: 0 AvgScore: -2.74 AvgScanTime: 0.84 sec Time Spent Running SA: 0.07 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 48 100.00 100.00 100.00 2 HTML_MESSAGE 44 77.23 91.67 74.51 3 DKIM_SIGNED 39 75.25 81.25 74.12 4 XM_B_Unicode 39 60.73 81.25 56.86 5 RELAYCOUNTRY_US 38 67.99 79.17 65.88 6 T_SCC_BODY_TEXT_LINE 38 80.20 79.17 80.39 7 DKIM_VALID 35 70.30 72.92 69.80 8 XM_DK_Pass 34 72.28 70.83 72.55 9 DKIM_VALID_AU 26 56.11 54.17 56.47 10 XMListUnsubscribeExists 25 43.89 52.08 42.35 11 XM_B_Unicode3 25 37.29 52.08 34.51 12 XM_B_SpammyWords 25 37.62 52.08 34.90 13 FVGT_m_MULTI_ODD 23 28.05 47.92 24.31 14 XMSubLong 21 21.78 43.75 17.65 15 DKIM_VALID_EF 17 37.62 35.42 38.04 16 BAYES_99 17 7.92 35.42 2.75 17 BAYES_50 16 65.02 33.33 70.98 18 T_KAM_HTML_FONT_INVALID 16 21.45 33.33 19.22 19 LOC_TINY_FONT_1 16 28.38 33.33 27.45 20 BAYES_999 15 7.26 31.25 2.75 21 XM_DK_Undo_02 15 7.26 31.25 2.75 22 RCVD_IN_MSPIKE_H2 14 18.81 29.17 16.86 23 HTML_FONT_LOW_CONTRAST 13 29.04 27.08 29.41 24 XM_B_SpammyWords2 12 13.86 25.00 11.76 25 XM_B_SpammyWords3 11 6.60 22.92 3.53 26 RELAYCOUNTRY_META 11 12.87 22.92 10.98 27 MIME_HTML_ONLY 10 10.23 20.83 8.24 28 UNTRUSTED_Relay 10 9.24 20.83 7.06 29 T_TM2_M_HEADER_IN_MSG 10 16.50 20.83 15.69 30 XM_Multi_Part_URI 10 14.85 20.83 13.73 31 RCVD_IN_MSPIKE_WL 9 31.02 18.75 33.33 32 TR_XM_DKIM_Undo 9 2.97 18.75 0.00 33 UNPARSEABLE_RELAY 9 11.22 18.75 9.80 34 TR_XM_BayesUnsub 8 11.22 16.67 10.20 35 XMNumbers 8 10.23 16.67 9.02 36 TR_XM_DK_Unsub 8 15.84 16.67 15.69 37 XM_B_Unsub 8 11.88 16.67 10.98 38 RCVD_IN_MSPIKE_H3 8 15.84 16.67 15.69 39 XM_H_Long_From01 7 8.25 14.58 7.06 40 XM_H_Undi_Recip 7 2.64 14.58 0.39 41 XM_Body_Dirty_Words 7 7.92 14.58 6.67 42 TR_XM_UnparsRelay 7 5.28 14.58 3.53 43 BAYES_80 7 3.96 14.58 1.96 44 XM_DK_Undo_01 7 3.63 14.58 1.57 45 BOTNET_IPINHOSTNAME 6 7.92 12.50 7.06 46 XMSubMetaSx_00 6 3.30 12.50 1.57 47 T_TooManySym_01 6 7.26 12.50 6.27 48 XM_Evil_Numbers_Gen 6 5.61 12.50 4.31 49 BOTNET 6 1.98 12.50 0.00 50 T_XMDrugObfuBody_08 5 3.96 10.42 2.75 51 TR_XM_SpammyRelay 5 5.61 10.42 4.71 52 BAYES_60 5 9.90 10.42 9.80 53 XMBdyGiftCard01 5 1.98 10.42 0.39 54 XM_UncommonTLD01 5 8.91 10.42 8.63 55 XM_UB50 5 6.93 10.42 6.27 56 T_REMOTE_IMAGE 4 3.30 8.33 2.35 57 UNSUB_GOOG_FORM 4 1.32 8.33 0.00 58 XMSexyCombo_05 4 1.65 8.33 0.39 59 DKIM_INVALID 4 4.95 8.33 4.31 60 LOTS_OF_MONEY 4 4.62 8.33 3.92 61 T_FILL_THIS_FORM_SHORT 4 1.65 8.33 0.39 62 XM_E_Blogspot 4 1.32 8.33 0.00 63 TR_XM_Undi_Recip11 4 1.32 8.33 0.00 64 XM_DIRTYINTL 4 3.30 8.33 2.35 65 TR_XM_SpammyWords5 4 4.62 8.33 3.92 66 TR_XM_InvalidRelay 3 0.99 6.25 0.00 67 XM_UB999 3 0.99 6.25 0.00 68 TR_XM_SpammyWords2 3 0.99 6.25 0.00 69 XMWhlSbjSex 3 0.99 6.25 0.00 70 TR_MRelay_UG 3 1.32 6.25 0.39 71 TM2_M_URI_OPT_OUT 3 3.96 6.25 3.53 72 TR_XM_INV_DKIM 3 0.99 6.25 0.00 73 MAILING_LIST_MULTI 3 3.96 6.25 3.53 74 XM_UB99 3 0.99 6.25 0.00 75 NORDNS_LOW_CONTRAST 2 1.32 4.17 0.78 76 RCVD_IN_IADB_SPF 2 2.64 4.17 2.35 77 XM_H_PHPOS 2 0.66 4.17 0.00 78 URI_NOVOWEL 2 2.31 4.17 1.96 79 TR_XM_PHPForged 2 0.66 4.17 0.00 80 MPART_ALT_DIFF 2 2.31 4.17 1.96 81 TR_XM_SpammyWords4 2 2.31 4.17 1.96 82 TR_Symld_Words 2 2.64 4.17 2.35 83 XMDiploma_00 2 1.32 4.17 0.78 84 TooManyTo_004 2 0.99 4.17 0.39 85 TR_XM_Undi_Recip6 2 0.66 4.17 0.00 86 TR_XM_PhishingBody 2 2.31 4.17 1.96 87 HTML_TITLE_SUBJ_DIFF 2 0.66 4.17 0.00 88 NUMERIC_HTTP_ADDR 2 0.66 4.17 0.00 89 TooManyTo_003 2 2.31 4.17 1.96 90 RCVD_IN_IADB_LISTED 2 2.64 4.17 2.35 91 TR_XM_MaxWHORU 2 0.66 4.17 0.00 92 RCVD_IN_IADB_DK 2 1.98 4.17 1.57 93 HTML_IMAGE_RATIO_06 2 1.65 4.17 1.18 94 TooManyTo_002 2 2.31 4.17 1.96 95 XMSexyCombo_04 2 0.66 4.17 0.00 96 MIME_CHARSET_FARAWAY 2 0.66 4.17 0.00 97 XM_B_SpammyTLD 2 3.63 4.17 3.53 98 BAYES_95 2 1.65 4.17 1.18 99 TooManyTo_001 2 4.95 4.17 5.10 100 RCVD_IN_IADB_VOUCHED 2 1.98 4.17 1.57 101 RELAYCOUNTRY_IT 2 0.66 4.17 0.00 102 XM_GoogleGroups 2 1.32 4.17 0.78 103 TR_XM_PHPDW 2 0.66 4.17 0.00 104 NO_DNS_FOR_FROM 2 0.66 4.17 0.00 105 T_TooManySym_02 2 4.29 4.17 4.31 106 TR_XM_FormFill2 2 0.66 4.17 0.00 107 XM_SPF_SoftFail 2 2.97 4.17 2.75 108 XMSexyCombo_01 2 1.32 4.17 0.78 109 XM_B_DNDMA 2 3.96 4.17 3.92 110 RCVD_IN_VALIDITY_RPBL 2 0.66 4.17 0.00 111 RELAYCOUNTRY_AT 2 1.32 4.17 0.78 112 XMGenDplmaNmb 2 0.66 4.17 0.00 113 RCVD_IN_MSPIKE_BL 2 0.99 4.17 0.39 114 RCVD_IN_IADB_SENDERID 2 2.64 4.17 2.35 115 T_FILL_THIS_FORM_FRAUD_PHISH 1 0.33 2.08 0.00 116 XMBody_17 1 0.33 2.08 0.00 117 XMEmptyBody_01 1 0.33 2.08 0.00 118 XM_SendGrid 1 1.98 2.08 1.96 119 PDS_RDNS_DYNAMIC_FP 1 0.33 2.08 0.00 120 ADVANCE_FEE_5_NEW_FRM_MNY 1 0.33 2.08 0.00 121 FROM_SUSPICIOUS_NTLD 1 0.33 2.08 0.00 122 XMPhish14 1 1.32 2.08 1.18 123 HK_RANDOM_REPLYTO 1 0.66 2.08 0.39 124 CHARSET_FARAWAY_HEADER 1 0.33 2.08 0.00 125 XMSubMetaSxObfu_03 1 0.33 2.08 0.00 126 RELAYCOUNTRY_VN 1 0.33 2.08 0.00 127 T_US_DOLLARS_3 1 0.66 2.08 0.39 128 DEAR_FRIEND 1 0.33 2.08 0.00 129 XMPhish08 1 0.66 2.08 0.39 130 RELAYCOUNTRY_NL 1 0.33 2.08 0.00 131 FSL_HELO_NON_FQDN_1 1 0.33 2.08 0.00 132 MPART_ALT_DIFF_COUNT 1 0.33 2.08 0.00 133 RELAYCOUNTRY_IE 1 0.33 2.08 0.00 134 TR_XM_SEO4 1 0.33 2.08 0.00 135 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.66 2.08 0.39 136 HTML_IMAGE_RATIO_04 1 4.29 2.08 4.71 137 LotsOfNums_01 1 3.30 2.08 3.53 138 SHORT_URI_5 1 0.33 2.08 0.00 139 TR_XM_MSPIKECOMBO 1 0.66 2.08 0.39 140 HTML_IMAGE_RATIO_02 1 3.96 2.08 4.31 141 XFER_LOTSA_MONEY 1 0.33 2.08 0.00 142 FILL_THIS_FORM 1 0.33 2.08 0.00 143 XM_Nigeria_01 1 0.33 2.08 0.00 144 XMLongAddy 1 0.33 2.08 0.00 145 HTML_COMMENT_SAVED_URL 1 0.33 2.08 0.00 146 FROM_MISSP_EH_MATCH 1 0.33 2.08 0.00 147 TR_XM_Undi_Recip2 1 0.33 2.08 0.00 148 XM_H_PHPOS_M 1 0.33 2.08 0.00 149 RELAYCOUNTRY_CR 1 0.33 2.08 0.00 150 FROM_SUSPICIOUS_NTLD_FP 1 0.33 2.08 0.00 151 XM_B_SEO 1 0.33 2.08 0.00 152 XMSubMetaSxObfu_01 1 0.33 2.08 0.00 153 XMMoneyMeta_00 1 0.33 2.08 0.00 154 TR_BOTNET_NEGATE 1 0.33 2.08 0.00 155 BOUNCE_MESSAGE 1 11.22 2.08 12.94 156 XMSubPhish11 1 0.33 2.08 0.00 157 T_XMDrugObfuBody_14 1 0.33 2.08 0.00 158 HTML_FONT_TINY_NORDNS 1 0.99 2.08 0.78 159 XMStrtUSub 1 5.61 2.08 6.27 160 RELAYCOUNTRY_PL 1 0.33 2.08 0.00 161 PDS_FROM_NAME_TO_DOMAIN 1 0.33 2.08 0.00 162 RELAYCOUNTRY_FR 1 1.32 2.08 1.18 163 MONEY_FORM 1 0.33 2.08 0.00 164 TooManyTo_005 1 0.66 2.08 0.39 165 TR_XM_Undi_RecipCombo2 1 0.33 2.08 0.00 166 LOCALPART_IN_SUBJECT 1 0.33 2.08 0.00 167 TR_XM_Undi_Recip5 1 0.33 2.08 0.00 168 FROM_GOV_SPOOF 1 0.99 2.08 0.78 169 LOADSA_MONEY_COMBO 1 0.33 2.08 0.00 170 XM_OfRef6 1 0.33 2.08 0.00 171 DKIM_ADSP_NXDOMAIN 1 0.33 2.08 0.00 172 RCVD_IN_BL_SPAMCOP_NET 1 0.66 2.08 0.39 173 BAYES_40 1 1.98 2.08 1.96 174 HELO_NODOT 1 0.33 2.08 0.00 175 TR_XM_RelayPhish 1 0.33 2.08 0.00 176 BOTNET_NORDNS 1 0.33 2.08 0.00 177 XM_UB80 1 0.33 2.08 0.00 178 PRICES_ARE_AFFORDABLE 1 0.66 2.08 0.39 179 MIME_QP_LONG_LINE 1 5.61 2.08 6.27 180 XM_H_PHPMailer 1 0.66 2.08 0.39 181 TR_XM_Undi_Recip9 1 0.33 2.08 0.00 182 NORMAL_HTTP_TO_IP 1 0.33 2.08 0.00 183 RCVD_IN_IADB_OPTIN 1 0.33 2.08 0.00 184 HTML_TAG_BALANCE_HEAD 1 0.33 2.08 0.00 185 XM_B_SpammyWords4 1 0.33 2.08 0.00 186 OBFU_TEXT_ATTACH 1 0.33 2.08 0.00 187 PHP_SCRIPT 1 0.33 2.08 0.00 188 RCVD_IN_MSPIKE_ZBI 1 0.33 2.08 0.00 189 PLING_QUERY 1 0.66 2.08 0.39 190 TR_Mismatch_TLD_02 1 0.33 2.08 0.00 191 XM_Sft_Co_L33T 1 0.33 2.08 0.00 192 LONG_JUNK_URI 1 0.66 2.08 0.39 193 TM2_M_BODY_EMPTY 1 0.33 2.08 0.00 194 RCVD_IN_MSPIKE_L3 1 0.66 2.08 0.39 195 GAPPY_SUBJECT 1 0.99 2.08 0.78 196 TO_NO_BRKTS_FROM_MSSP 1 0.33 2.08 0.00 197 XMClaimOffer 1 0.33 2.08 0.00 198 XM_B_Phish_Phrases 1 0.66 2.08 0.39 199 KHOP_HELO_FCRDNS 1 1.65 2.08 1.57 200 HELO_LOCALHOST 1 0.33 2.08 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 255 100.00 100.00 100.00 2 T_SCC_BODY_TEXT_LINE 205 80.20 79.17 80.39 3 HTML_MESSAGE 190 77.23 91.67 74.51 4 DKIM_SIGNED 189 75.25 81.25 74.12 5 XM_DK_Pass 185 72.28 70.83 72.55 6 BAYES_50 181 65.02 33.33 70.98 7 DKIM_VALID 178 70.30 72.92 69.80 8 RELAYCOUNTRY_US 168 67.99 79.17 65.88 9 XM_B_Unicode 145 60.73 81.25 56.86 10 DKIM_VALID_AU 144 56.11 54.17 56.47 11 XMListUnsubscribeExists 108 43.89 52.08 42.35 12 DKIM_VALID_EF 97 37.62 35.42 38.04 13 XM_B_SpammyWords 89 37.62 52.08 34.90 14 XM_B_Unicode3 88 37.29 52.08 34.51 15 RCVD_IN_MSPIKE_WL 85 31.02 18.75 33.33 16 HTML_FONT_LOW_CONTRAST 75 29.04 27.08 29.41 17 LOC_TINY_FONT_1 70 28.38 33.33 27.45 18 FVGT_m_MULTI_ODD 62 28.05 47.92 24.31 19 ALL_TRUSTED 56 18.48 0.00 21.96 20 T_KAM_HTML_FONT_INVALID 49 21.45 33.33 19.22 21 XMSubLong 45 21.78 43.75 17.65 22 RCVD_IN_MSPIKE_H2 43 18.81 29.17 16.86 23 T_TM2_M_HEADER_IN_MSG 40 16.50 20.83 15.69 24 RCVD_IN_MSPIKE_H3 40 15.84 16.67 15.69 25 TR_XM_DK_Unsub 40 15.84 16.67 15.69 26 XM_DKIMWhitelistDomains 39 12.87 0.00 15.29 27 XM_Multi_Part_URI 35 14.85 20.83 13.73 28 ANY_BOUNCE_MESSAGE 33 11.22 2.08 12.94 29 BOUNCE_MESSAGE 33 11.22 2.08 12.94 30 XM_B_SpammyWords2 30 13.86 25.00 11.76 31 XM_B_Unsub 28 11.88 16.67 10.98 32 RELAYCOUNTRY_META 28 12.87 22.92 10.98 33 SCC_BODY_URI_ONLY 26 8.58 0.00 10.20 34 TR_XM_BayesUnsub 26 11.22 16.67 10.20 35 UNPARSEABLE_RELAY 25 11.22 18.75 9.80 36 RCVD_IN_MSPIKE_H5 25 8.25 0.00 9.80 37 BAYES_60 25 9.90 10.42 9.80 38 XMNumbers 23 10.23 16.67 9.02 39 XM_B_Unsub2 22 7.26 0.00 8.63 40 XM_UncommonTLD01 22 8.91 10.42 8.63 41 MIME_HTML_ONLY 21 10.23 20.83 8.24 42 BAYES_00 21 6.93 0.00 8.24 43 RCVD_IN_MSPIKE_H4 20 6.93 2.08 7.84 44 BOTNET_IPINHOSTNAME 18 7.92 12.50 7.06 45 UNTRUSTED_Relay 18 9.24 20.83 7.06 46 XM_H_Long_From01 18 8.25 14.58 7.06 47 XM_Body_Dirty_Words 17 7.92 14.58 6.67 48 MIME_QP_LONG_LINE 16 5.61 2.08 6.27 49 T_TooManySym_01 16 7.26 12.50 6.27 50 XM_UB50 16 6.93 10.42 6.27 51 TR_XM_DK_Bayes 16 5.28 0.00 6.27 52 XMStrtUSub 16 5.61 2.08 6.27 53 IN_ZIMBRA_NJ_WHITELIST 14 4.62 0.00 5.49 54 TR_XM_DK_Bayes1 14 4.62 0.00 5.49 55 TooManyTo_001 13 4.95 4.17 5.10 56 TR_XM_SpammyRelay 12 5.61 10.42 4.71 57 TR_XM_DK_Bayes2 12 3.96 0.00 4.71 58 HTML_IMAGE_RATIO_04 12 4.29 2.08 4.71 59 XM_Evil_Numbers_Gen 11 5.61 12.50 4.31 60 T_TooManySym_02 11 4.29 4.17 4.31 61 HTML_IMAGE_RATIO_02 11 3.96 2.08 4.31 62 DKIM_INVALID 11 4.95 8.33 4.31 63 LOTS_OF_MONEY 10 4.62 8.33 3.92 64 XM_B_DNDMA 10 3.96 4.17 3.92 65 TR_XM_SpammyWords5 10 4.62 8.33 3.92 66 SUBJ_ALL_CAPS 10 3.30 0.00 3.92 67 XM_B_SpammyWords3 9 6.60 22.92 3.53 68 XM_B_SpammyTLD 9 3.63 4.17 3.53 69 TR_XM_UnparsRelay 9 5.28 14.58 3.53 70 TO_MALFORMED 9 2.97 0.00 3.53 71 MAILING_LIST_MULTI 9 3.96 6.25 3.53 72 INVALID_MSGID 9 2.97 0.00 3.53 73 LotsOfNums_01 9 3.30 2.08 3.53 74 TM2_M_URI_OPT_OUT 9 3.96 6.25 3.53 75 RCVD_IN_VALIDITY_SAFE 9 2.97 0.00 3.53 76 RELAYCOUNTRY_AU 8 2.64 0.00 3.14 77 BAYES_999 7 7.26 31.25 2.75 78 T_XMDrugObfuBody_08 7 3.96 10.42 2.75 79 BAYES_99 7 7.92 35.42 2.75 80 XM_SPF_SoftFail 7 2.97 4.17 2.75 81 XM_DK_Undo_02 7 7.26 31.25 2.75 82 RELAYCOUNTRY_DE 7 2.64 2.08 2.75 83 RCVD_IN_VALIDITY_CERTIFIED 7 2.31 0.00 2.75 84 SpammyFromTLD_01 7 2.31 0.00 2.75 85 IN_HORDE_ADDRESS_BOOK 7 2.31 0.00 2.75 86 XM_DIRTYINTL 6 3.30 8.33 2.35 87 XM_B_Investor 6 2.31 2.08 2.35 88 RCVD_IN_IADB_SENDERID 6 2.64 4.17 2.35 89 RCVD_IN_IADB_SPF 6 2.64 4.17 2.35 90 XM_PDF 6 1.98 0.00 2.35 91 USER_IN_DEF_DKIM_WL 6 1.98 0.00 2.35 92 T_REMOTE_IMAGE 6 3.30 8.33 2.35 93 TR_Symld_Words 6 2.64 4.17 2.35 94 RCVD_IN_IADB_LISTED 6 2.64 4.17 2.35 95 BAYES_40 5 1.98 2.08 1.96 96 TooManyTo_002 5 2.31 4.17 1.96 97 NML_ADSP_CUSTOM_MED 5 1.65 0.00 1.96 98 BAYES_80 5 3.96 14.58 1.96 99 RELAYCOUNTRY_CA 5 1.65 0.00 1.96 100 BASE64_LENGTH_79_INF 5 1.65 0.00 1.96 101 MIME_HTML_MOSTLY 5 1.98 2.08 1.96 102 XMStockSpam_06 5 1.98 2.08 1.96 103 DKIM_ADSP_CUSTOM_MED 5 1.65 0.00 1.96 104 XM_SendGrid 5 1.98 2.08 1.96 105 URI_NOVOWEL 5 2.31 4.17 1.96 106 TR_XM_SpammyWords4 5 2.31 4.17 1.96 107 BAYES_05 5 1.65 0.00 1.96 108 MPART_ALT_DIFF 5 2.31 4.17 1.96 109 TR_XM_PhishingBody 5 2.31 4.17 1.96 110 TooManyTo_003 5 2.31 4.17 1.96 111 MSGID_NOFQDN1 5 1.65 0.00 1.96 112 TR_XM_DK_SendGrid 4 1.32 0.00 1.57 113 KHOP_HELO_FCRDNS 4 1.65 2.08 1.57 114 RCVD_IN_IADB_VOUCHED 4 1.98 4.17 1.57 115 XMSubMetaSx_00 4 3.30 12.50 1.57 116 T_Symld_Words_02 4 1.32 0.00 1.57 117 SpammyFromTLD_02 4 1.65 2.08 1.57 118 XM_DK_Undo_01 4 3.63 14.58 1.57 119 XMCmmnCold 4 1.32 0.00 1.57 120 T_TooManySym_03 4 1.32 0.00 1.57 121 XM_ZIP 4 1.32 0.00 1.57 122 RCVD_IN_IADB_DK 4 1.98 4.17 1.57 123 BAYES_95 3 1.65 4.17 1.18 124 BAYES_20 3 0.99 0.00 1.18 125 USER_IN_WHITELIST 3 0.99 0.00 1.18 126 XMLngstWrd_01 3 0.99 0.00 1.18 127 TVD_SPACE_RATIO 3 0.99 0.00 1.18 128 XMPhish14 3 1.32 2.08 1.18 129 NICE_REPLY_A 3 0.99 0.00 1.18 130 XMLngstWrd_00 3 0.99 0.00 1.18 131 USER_IN_WELCOMELIST 3 0.99 0.00 1.18 132 HTML_IMAGE_RATIO_08 3 0.99 0.00 1.18 133 RELAYCOUNTRY_FR 3 1.32 2.08 1.18 134 HTML_IMAGE_RATIO_06 3 1.65 4.17 1.18 135 T_XMDrugObfuBody_00 3 0.99 0.00 1.18 136 TR_Sbj_FN_Bdy 2 0.66 0.00 0.78 137 REPTO_QUOTE_YAHOO 2 0.66 0.00 0.78 138 XMGappySubj_01 2 0.66 0.00 0.78 139 FROM_GOV_SPOOF 2 0.99 2.08 0.78 140 URI_HEX 2 0.66 0.00 0.78 141 GAPPY_SUBJECT 2 0.99 2.08 0.78 142 RELAYCOUNTRY_SG 2 0.66 0.00 0.78 143 T_OBFU_PDF_ATTACH 2 0.66 0.00 0.78 144 XM_GoogleGroups 2 1.32 4.17 0.78 145 TR_XM_PSC1 2 0.66 0.00 0.78 146 XMSexyCombo_01 2 1.32 4.17 0.78 147 TR_XM_SpoofPhishAttach 2 0.66 0.00 0.78 148 XMBSHREFv2 2 0.66 0.00 0.78 149 XM_ZohoDesk1 2 0.66 0.00 0.78 150 TM2_M_VERY_LONG_WORD 2 0.99 2.08 0.78 151 RELAYCOUNTRY_AT 2 1.32 4.17 0.78 152 FROM_GOV_DKIM_AU 2 0.66 0.00 0.78 153 RELAYCOUNTRY_TW 2 0.66 0.00 0.78 154 XMSpoofStaff2 2 0.66 0.00 0.78 155 HTML_MIME_NO_HTML_TAG 2 0.66 0.00 0.78 156 NORDNS_LOW_CONTRAST 2 1.32 4.17 0.78 157 XM_Body_Obfu01 2 0.66 0.00 0.78 158 HK_RANDOM_FROM 2 0.66 0.00 0.78 159 XMSubNoVowel 2 0.66 0.00 0.78 160 TR_XM_SpoofStaff 2 0.66 0.00 0.78 161 XMDiploma_00 2 1.32 4.17 0.78 162 TR_Mismatch_TLD_01 2 0.66 0.00 0.78 163 HTML_FONT_TINY_NORDNS 2 0.99 2.08 0.78 164 XMBody_95 2 0.66 0.00 0.78 165 DEAR_SOMETHING 2 0.66 0.00 0.78 166 XM_H_SpoofStaff4 2 0.66 0.00 0.78 167 RCVD_IN_RP_SAFE 1 0.33 0.00 0.39 168 HTML_OBFUSCATE_10_20 1 0.33 0.00 0.39 169 RCVD_IN_BL_SPAMCOP_NET 1 0.66 2.08 0.39 170 HTML_IMAGE_ONLY_32 1 0.33 0.00 0.39 171 RCVD_IN_RP_CERTIFIED 1 0.33 0.00 0.39 172 PLING_QUERY 1 0.66 2.08 0.39 173 XMCapTrack 1 0.33 0.00 0.39 174 XM_S_SubURI 1 0.33 0.00 0.39 175 TR_XM_Undi_Recip15 1 0.33 0.00 0.39 176 XM_H_PHPMailer 1 0.66 2.08 0.39 177 PRICES_ARE_AFFORDABLE 1 0.66 2.08 0.39 178 XM_B_Phish_Phrases 1 0.66 2.08 0.39 179 RCVD_IN_MSPIKE_L3 1 0.66 2.08 0.39 180 LONG_JUNK_URI 1 0.66 2.08 0.39 181 URI_DOTEDU 1 0.33 0.00 0.39 182 HK_RANDOM_ENVFROM 1 0.33 0.00 0.39 183 HTML_IMAGE_ONLY_08 1 0.33 0.00 0.39 184 HTML_FONT_FACE_BAD 1 0.33 0.00 0.39 185 URI_TRY_3LD 1 0.33 0.00 0.39 186 SHORTENED_URL_HREF 1 0.33 0.00 0.39 187 XMBdyGiftCard01 1 1.98 10.42 0.39 188 MISSING_HEADERS 1 0.33 0.00 0.39 189 T_FILL_THIS_FORM_SHORT 1 1.65 8.33 0.39 190 RELAYCOUNTRY_GB 1 0.33 0.00 0.39 191 XM_S_SketchInvoice 1 0.33 0.00 0.39 192 TR_XM_NoHeaderRelay 1 0.66 2.08 0.39 193 XM_Body_Dirty_Words_01 1 0.66 2.08 0.39 194 XM_B_COVIDMETA 1 0.33 0.00 0.39 195 XMLngstWrd_02 1 0.33 0.00 0.39 196 RCVD_IN_MSPIKE_BL 1 0.99 4.17 0.39 197 TVD_RCVD_IP 1 0.33 0.00 0.39 198 WEIRD_PORT 1 0.33 0.00 0.39 199 T_US_DOLLARS_3 1 0.66 2.08 0.39 200 XM_B_Phish66 1 0.33 0.00 0.39 ----------------------------------------------------------------------