Email: 197 Autolearn: 0 AvgScore: 0.24 AvgScanTime: 3.16 sec Spam: 35 Autolearn: 0 AvgScore: 14.20 AvgScanTime: 2.83 sec Ham: 162 Autolearn: 0 AvgScore: -2.77 AvgScanTime: 3.23 sec Time Spent Running SA: 0.17 hours Time Spent Processing Spam: 0.03 hours Time Spent Processing Ham: 0.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 31 58.88 88.57 52.47 2 T_SCC_BODY_TEXT_LINE 28 81.22 80.00 81.48 3 RELAYCOUNTRY_US 26 51.27 74.29 46.30 4 DKIM_SIGNED 26 55.33 74.29 51.23 5 XM_DK_Pass 25 54.31 71.43 50.62 6 XM_B_Unicode 25 50.76 71.43 46.30 7 DKIM_VALID 25 53.81 71.43 50.00 8 DCC_CHECK 24 48.22 68.57 43.83 9 DKIM_VALID_AU 19 40.10 54.29 37.04 10 BAYES_50 18 73.60 51.43 78.40 11 XMListUnsubscribeExists 16 35.53 45.71 33.33 12 XM_B_Unicode3 16 28.43 45.71 24.69 13 DKIM_VALID_EF 14 31.47 40.00 29.63 14 XM_B_SpammyWords 13 24.87 37.14 22.22 15 LOC_TINY_FONT_1 13 24.37 37.14 21.60 16 FSL_BULK_SIG 13 34.01 37.14 33.33 17 XMSubLong 12 21.32 34.29 18.52 18 RCVD_IN_MSPIKE_H2 11 16.75 31.43 13.58 19 FVGT_m_MULTI_ODD 11 22.34 31.43 20.37 20 DCC_CHECK_NEGATIVE 11 51.78 31.43 56.17 21 UNPARSEABLE_RELAY 10 14.72 28.57 11.73 22 MIME_HTML_ONLY 10 12.18 28.57 8.64 23 RELAYCOUNTRY_META 9 10.66 25.71 7.41 24 HTML_FONT_LOW_CONTRAST 9 22.34 25.71 21.60 25 RCVD_IN_MSPIKE_WL 9 23.35 25.71 22.84 26 XM_Multi_Part_URI 8 17.26 22.86 16.05 27 XM_UncommonTLD01 8 9.64 22.86 6.79 28 XM_H_Long_From01 7 5.58 20.00 2.47 29 BAYES_99 7 5.58 20.00 2.47 30 T_KAM_HTML_FONT_INVALID 7 17.26 20.00 16.67 31 T_REMOTE_IMAGE 6 5.08 17.14 2.47 32 RCVD_IN_MSPIKE_H3 6 10.15 17.14 8.64 33 BAYES_999 6 5.08 17.14 2.47 34 XM_DK_Undo_02 6 4.57 17.14 1.85 35 UNTRUSTED_Relay 6 6.09 17.14 3.70 36 XM_B_Unsub 5 8.12 14.29 6.79 37 TR_DCC_Bayes_99 5 2.54 14.29 0.00 38 TR_XM_DKIM_Undo 5 2.54 14.29 0.00 39 TR_XM_BayesUnsub 5 8.12 14.29 6.79 40 TR_XM_DK_Unsub 5 16.75 14.29 17.28 41 BOTNET 4 2.03 11.43 0.00 42 XM_Body_Dirty_Words 4 10.66 11.43 10.49 43 BAYES_80 4 3.05 11.43 1.23 44 TR_XM_SpammyRelay 4 5.08 11.43 3.70 45 TR_XM_UnparsRelay 4 3.05 11.43 1.23 46 XM_B_SpammyWords2 4 5.58 11.43 4.32 47 XMNumbers 4 6.09 11.43 4.94 48 BOTNET_IPINHOSTNAME 3 2.54 8.57 1.23 49 XM_UB999 3 1.52 8.57 0.00 50 MIME_HTML_MOSTLY 3 6.09 8.57 5.56 51 T_TM2_M_HEADER_IN_MSG 3 10.15 8.57 10.49 52 SCC_BODY_URI_ONLY 3 25.89 8.57 29.63 53 SpammyFromTLD_01 3 2.03 8.57 0.62 54 LOTS_OF_MONEY 3 2.54 8.57 1.23 55 HTML_IMAGE_RATIO_04 3 5.08 8.57 4.32 56 XM_UB99 3 1.52 8.57 0.00 57 TR_Mismatch_TLD_01 3 2.03 8.57 0.62 58 TR_XM_BayesRelay 3 1.52 8.57 0.00 59 RCVD_IN_BL_SPAMCOP_NET 3 1.52 8.57 0.00 60 HTML_IMAGE_RATIO_02 3 5.08 8.57 4.32 61 XM_SPF_SoftFail 3 1.52 8.57 0.00 62 XM_UB50 3 4.06 8.57 3.09 63 TR_XM_SpammyWords4 2 2.03 5.71 1.23 64 LONG_JUNK_URI2 2 1.52 5.71 0.62 65 BODY_EMPTY 2 1.02 5.71 0.00 66 BOTNET_NORDNS 2 1.02 5.71 0.00 67 URIBL_DBL_SPAM 2 1.02 5.71 0.00 68 RCVD_IN_VALIDITY_RPBL 2 1.02 5.71 0.00 69 TR_XM_InvalidRelay 2 1.02 5.71 0.00 70 HTML_IMAGE_RATIO_08 2 2.03 5.71 1.23 71 XM_URI_RBL 2 1.02 5.71 0.00 72 XM_SendGrid 2 1.52 5.71 0.62 73 XMSubMetaSSx_00 2 1.02 5.71 0.00 74 TR_XM_SpammyWords5 2 2.03 5.71 1.23 75 TR_XM_FormFill2 2 1.02 5.71 0.00 76 RCVD_IN_PSBL 2 1.02 5.71 0.00 77 UNSUB_GOOG_FORM 2 1.02 5.71 0.00 78 XMBSHREFv2 2 1.52 5.71 0.62 79 BAYES_40 2 2.54 5.71 1.85 80 RELAYCOUNTRY_IT 2 1.02 5.71 0.00 81 XM_DK_Undo_01 2 2.03 5.71 1.23 82 XMSubMetaSx_00 2 1.02 5.71 0.00 83 TR_XM_PHPForged 2 1.02 5.71 0.00 84 T_TooManySym_02 2 3.55 5.71 3.09 85 TR_XM_SPAMCOP 2 1.02 5.71 0.00 86 XM_E_Blogspot 2 1.02 5.71 0.00 87 SpammyFromTLD_02 2 2.03 5.71 1.23 88 XM_H_PHPOS 2 1.02 5.71 0.00 89 XM_H_Undi_Recip 2 1.02 5.71 0.00 90 NAME_EMAIL_DIFF 2 1.02 5.71 0.00 91 LONG_JUNK_URI 2 1.02 5.71 0.00 92 TR_Mismatch_TLD_02 2 1.52 5.71 0.62 93 XMEmptyBody_01 2 1.02 5.71 0.00 94 XM_Evil_Numbers_Gen 2 5.08 5.71 4.94 95 TM2_M_BODY_EMPTY 2 1.02 5.71 0.00 96 BAYES_60 2 8.12 5.71 8.64 97 RCVD_IN_MSPIKE_H5 2 9.14 5.71 9.88 98 TR_XM_PHPDW 2 1.02 5.71 0.00 99 T_TooManySym_01 2 4.57 5.71 4.32 100 RELAYCOUNTRY_CA 2 1.52 5.71 0.62 101 DOS_OE_TO_MX 1 0.51 2.86 0.00 102 XMSubMetaD_03 1 1.02 2.86 0.62 103 XM_B_SpammyTLD 1 3.55 2.86 3.70 104 RELAYCOUNTRY_PL 1 0.51 2.86 0.00 105 RCVD_IN_VALIDITY_CERTIFIED 1 1.52 2.86 1.23 106 T_XMDrugObfuBody_08 1 1.52 2.86 1.23 107 HTML_MIME_NO_HTML_TAG 1 2.03 2.86 1.85 108 MIME_CHARSET_FARAWAY 1 0.51 2.86 0.00 109 SHOPIFY_IMG_NOT_RCVD_SFY 1 2.03 2.86 1.85 110 TooManyTo_003 1 0.51 2.86 0.00 111 FORGED_MUA_EUDORA 1 0.51 2.86 0.00 112 T_XMDrugObfuBody_14 1 0.51 2.86 0.00 113 FROM_GOV_SPOOF 1 1.52 2.86 1.23 114 SUBJ_ILLEGAL_CHARS 1 0.51 2.86 0.00 115 HTML_COMMENT_SAVED_URL 1 0.51 2.86 0.00 116 SHORTENED_URL_HREF 1 0.51 2.86 0.00 117 DKIM_INVALID 1 1.52 2.86 1.23 118 XMSubject_78 1 0.51 2.86 0.00 119 HTML_IMAGE_ONLY_16 1 1.02 2.86 0.62 120 XPRIO_URL_SHORTNER 1 0.51 2.86 0.00 121 TR_Caps_n_Bayes_80 1 0.51 2.86 0.00 122 RCVD_IN_RP_RNBL 1 0.51 2.86 0.00 123 CHARSET_FARAWAY_HEADER 1 0.51 2.86 0.00 124 NUMERIC_HTTP_ADDR 1 0.51 2.86 0.00 125 MIMEOLE_DIRECT_TO_MX 1 0.51 2.86 0.00 126 HTTP_EXCESSIVE_ESCAPES 1 0.51 2.86 0.00 127 TM2_M_VERY_LONG_WORD 1 1.52 2.86 1.23 128 TR_MetaPhish_Combo_01 1 0.51 2.86 0.00 129 RELAYCOUNTRY_FR 1 2.03 2.86 1.85 130 BAD_ENC_HEADER 1 0.51 2.86 0.00 131 XMSubNoVowel 1 2.03 2.86 1.85 132 TVD_RCVD_IP 1 0.51 2.86 0.00 133 XMLngstWrd_03 1 1.02 2.86 0.62 134 TR_XM_NoHeaderRelay 1 0.51 2.86 0.00 135 FROM_EXCESS_BASE64 1 1.52 2.86 1.23 136 XMStockSpam_06 1 1.52 2.86 1.23 137 XMLngstWrd_00 1 1.02 2.86 0.62 138 SUBJ_ALL_CAPS 1 1.52 2.86 1.23 139 THIS_AD 1 1.02 2.86 0.62 140 RELAYCOUNTRY_RU 1 0.51 2.86 0.00 141 HDR_ORDER_FTSDMCXX_DIRECT 1 0.51 2.86 0.00 142 HK_RANDOM_REPLYTO 1 0.51 2.86 0.00 143 XMSubMetaI_00 1 1.02 2.86 0.62 144 XMStrtUSub 1 3.55 2.86 3.70 145 XMPhish04 1 0.51 2.86 0.00 146 INVALID_MSGID 1 3.05 2.86 3.09 147 TR_Symld_Words 1 0.51 2.86 0.00 148 FROM_LOCAL_NOVOWEL 1 0.51 2.86 0.00 149 SHORT_URI 1 0.51 2.86 0.00 150 TooManyTo_001 1 4.06 2.86 4.32 151 TR_XM_MSPIKECOMBO 1 0.51 2.86 0.00 152 DATE_IN_PAST_12_24 1 1.02 2.86 0.62 153 TR_XM_DK_SendGrid 1 0.51 2.86 0.00 154 LONG_HEX_URI 1 0.51 2.86 0.00 155 TR_XM_MaxWHORU 1 0.51 2.86 0.00 156 FROM_SUSPICIOUS_NTLD 1 0.51 2.86 0.00 157 TooManyTo_005 1 0.51 2.86 0.00 158 RELAYCOUNTRY_JP 1 0.51 2.86 0.00 159 XMSexyCombo_05 1 1.52 2.86 1.23 160 BAYES_05 1 0.51 2.86 0.00 161 URI_TRUNCATED 1 0.51 2.86 0.00 162 PDS_PRO_TLD 1 1.02 2.86 0.62 163 T_XMHurry_00 1 1.02 2.86 0.62 164 XMHTMLBadTable_001 1 1.02 2.86 0.62 165 RCVD_IN_VALIDITY_SAFE 1 2.03 2.86 1.85 166 RCVD_IN_MSPIKE_H4 1 4.06 2.86 4.32 167 XMLngstWrd_04 1 1.02 2.86 0.62 168 XM_B_Phish_Phrases 1 1.02 2.86 0.62 169 RCVD_IN_MSPIKE_BL 1 0.51 2.86 0.00 170 TR_XM_Base64_M1 1 0.51 2.86 0.00 171 TooManyTo_002 1 0.51 2.86 0.00 172 NO_DNS_FOR_FROM 1 0.51 2.86 0.00 173 XM_B_SpammyWords3 1 2.54 2.86 2.47 174 HTML_FONT_TINY_NORDNS 1 0.51 2.86 0.00 175 TO_NAME_SUBJ_NO_RDNS 1 0.51 2.86 0.00 176 BAYES_95 1 2.03 2.86 1.85 177 XMLngstWrd_01 1 1.02 2.86 0.62 178 SUBJECT_NEEDS_ENCODING 1 0.51 2.86 0.00 179 HDR_ORDER_FTSDMCXX_NORDNS 1 0.51 2.86 0.00 180 TR_XM_SpammyWords3 1 0.51 2.86 0.00 181 LOCALPART_IN_SUBJECT 1 0.51 2.86 0.00 182 SHORT_URI_2 1 0.51 2.86 0.00 183 XMSubMetaI_01 1 1.02 2.86 0.62 184 TM2_M_URI_OPT_OUT 1 1.02 2.86 0.62 185 HTML_OBFUSCATE_05_10 1 0.51 2.86 0.00 186 MPART_ALT_DIFF 1 2.54 2.86 2.47 187 XM_CamelCaseFrm001 1 1.52 2.86 1.23 188 XM_TLDProd2 1 0.51 2.86 0.00 189 HTML_IMAGE_RATIO_06 1 2.54 2.86 2.47 190 RELAYCOUNTRY_GB 1 1.02 2.86 0.62 191 TO_EQ_FM_DOM_HTML_ONLY 1 0.51 2.86 0.00 192 XMLngstWrd_02 1 1.02 2.86 0.62 193 RCVD_IN_MSPIKE_L4 1 0.51 2.86 0.00 194 TooManyTo_004 1 0.51 2.86 0.00 195 FROM_SUSPICIOUS_NTLD_FP 1 0.51 2.86 0.00 196 TR_XM_PhishingBody 1 3.05 2.86 3.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 132 81.22 80.00 81.48 2 BAYES_50 127 73.60 51.43 78.40 3 DCC_CHECK_NEGATIVE 91 51.78 31.43 56.17 4 HTML_MESSAGE 85 58.88 88.57 52.47 5 DKIM_SIGNED 83 55.33 74.29 51.23 6 XM_DK_Pass 82 54.31 71.43 50.62 7 DKIM_VALID 81 53.81 71.43 50.00 8 RELAYCOUNTRY_US 75 51.27 74.29 46.30 9 XM_B_Unicode 75 50.76 71.43 46.30 10 ALL_TRUSTED 73 37.06 0.00 45.06 11 DCC_CHECK 71 48.22 68.57 43.83 12 DKIM_VALID_AU 60 40.10 54.29 37.04 13 BOUNCE_MESSAGE 58 29.44 0.00 35.80 14 ANY_BOUNCE_MESSAGE 58 29.44 0.00 35.80 15 XMListUnsubscribeExists 54 35.53 45.71 33.33 16 FSL_BULK_SIG 54 34.01 37.14 33.33 17 DKIM_VALID_EF 48 31.47 40.00 29.63 18 SCC_BODY_URI_ONLY 48 25.89 8.57 29.63 19 XM_B_Unicode3 40 28.43 45.71 24.69 20 RCVD_IN_MSPIKE_WL 37 23.35 25.71 22.84 21 XM_B_SpammyWords 36 24.87 37.14 22.22 22 LOC_TINY_FONT_1 35 24.37 37.14 21.60 23 HTML_FONT_LOW_CONTRAST 35 22.34 25.71 21.60 24 FVGT_m_MULTI_ODD 33 22.34 31.43 20.37 25 XMSubLong 30 21.32 34.29 18.52 26 TR_XM_DK_Unsub 28 16.75 14.29 17.28 27 T_KAM_HTML_FONT_INVALID 27 17.26 20.00 16.67 28 XM_Multi_Part_URI 26 17.26 22.86 16.05 29 RCVD_IN_MSPIKE_H2 22 16.75 31.43 13.58 30 UNPARSEABLE_RELAY 19 14.72 28.57 11.73 31 T_TM2_M_HEADER_IN_MSG 17 10.15 8.57 10.49 32 XM_Body_Dirty_Words 17 10.66 11.43 10.49 33 RCVD_IN_MSPIKE_H5 16 9.14 5.71 9.88 34 XM_DKIMWhitelistDomains 15 7.61 0.00 9.26 35 RCVD_IN_MSPIKE_H3 14 10.15 17.14 8.64 36 MIME_HTML_ONLY 14 12.18 28.57 8.64 37 BAYES_60 14 8.12 5.71 8.64 38 RELAYCOUNTRY_META 12 10.66 25.71 7.41 39 USER_IN_DEF_DKIM_WL 11 5.58 0.00 6.79 40 XM_B_Unsub 11 8.12 14.29 6.79 41 XM_UncommonTLD01 11 9.64 22.86 6.79 42 TR_XM_BayesUnsub 11 8.12 14.29 6.79 43 MIME_HTML_MOSTLY 9 6.09 8.57 5.56 44 BAYES_00 8 4.06 0.00 4.94 45 XM_Evil_Numbers_Gen 8 5.08 5.71 4.94 46 XMNumbers 8 6.09 11.43 4.94 47 HTML_IMAGE_RATIO_04 7 5.08 8.57 4.32 48 TooManyTo_001 7 4.06 2.86 4.32 49 RCVD_IN_MSPIKE_H4 7 4.06 2.86 4.32 50 XM_B_SpammyWords2 7 5.58 11.43 4.32 51 HTML_IMAGE_RATIO_02 7 5.08 8.57 4.32 52 TO_MALFORMED 7 3.55 0.00 4.32 53 T_TooManySym_01 7 4.57 5.71 4.32 54 XM_B_SpammyTLD 6 3.55 2.86 3.70 55 XMStrtUSub 6 3.55 2.86 3.70 56 TR_XM_SpammyRelay 6 5.08 11.43 3.70 57 IN_ZIMBRA_NJ_WHITELIST 6 3.05 0.00 3.70 58 RELAYCOUNTRY_AU 6 3.05 0.00 3.70 59 UNTRUSTED_Relay 6 6.09 17.14 3.70 60 USER_IN_WHITELIST 5 2.54 0.00 3.09 61 USER_IN_WELCOMELIST 5 2.54 0.00 3.09 62 T_TooManySym_02 5 3.55 5.71 3.09 63 INVALID_MSGID 5 3.05 2.86 3.09 64 MIME_QP_LONG_LINE 5 2.54 0.00 3.09 65 XM_UB50 5 4.06 8.57 3.09 66 TR_XM_PhishingBody 5 3.05 2.86 3.09 67 TR_XM_DK_Bayes1 4 2.03 0.00 2.47 68 T_REMOTE_IMAGE 4 5.08 17.14 2.47 69 BAYES_999 4 5.08 17.14 2.47 70 XM_B_Phish66 4 2.03 0.00 2.47 71 XM_H_Long_From01 4 5.58 20.00 2.47 72 BAYES_99 4 5.58 20.00 2.47 73 XM_ZIP 4 2.03 0.00 2.47 74 TR_XM_DK_Bayes 4 2.03 0.00 2.47 75 XM_B_SpammyWords3 4 2.54 2.86 2.47 76 MPART_ALT_DIFF 4 2.54 2.86 2.47 77 HTML_IMAGE_RATIO_06 4 2.54 2.86 2.47 78 LotsOfNums_01 4 2.03 0.00 2.47 79 HTML_MIME_NO_HTML_TAG 3 2.03 2.86 1.85 80 SHOPIFY_IMG_NOT_RCVD_SFY 3 2.03 2.86 1.85 81 XM_DK_Undo_02 3 4.57 17.14 1.85 82 RELAYCOUNTRY_FR 3 2.03 2.86 1.85 83 XMSubNoVowel 3 2.03 2.86 1.85 84 BAYES_40 3 2.54 5.71 1.85 85 XM_DIRTYINTL 3 1.52 0.00 1.85 86 XMGappySubj_01 3 1.52 0.00 1.85 87 RCVD_IN_VALIDITY_SAFE 3 2.03 2.86 1.85 88 IN_HORDE_ADDRESS_BOOK 3 1.52 0.00 1.85 89 BAYES_95 3 2.03 2.86 1.85 90 MAILING_LIST_MULTI 3 1.52 0.00 1.85 91 TR_XM_SpammyWords4 2 2.03 5.71 1.23 92 RCVD_IN_VALIDITY_CERTIFIED 2 1.52 2.86 1.23 93 T_XMDrugObfuBody_08 2 1.52 2.86 1.23 94 HTML_FONT_SIZE_HUGE 2 1.02 0.00 1.23 95 BOTNET_IPINHOSTNAME 2 2.54 8.57 1.23 96 FROM_GOV_SPOOF 2 1.52 2.86 1.23 97 DKIM_INVALID 2 1.52 2.86 1.23 98 HTML_IMAGE_RATIO_08 2 2.03 5.71 1.23 99 LOTS_OF_MONEY 2 2.54 8.57 1.23 100 TR_XM_SpammyWords5 2 2.03 5.71 1.23 101 XMSpoofStaff2 2 1.02 0.00 1.23 102 TVD_PH_BODY_META 2 1.02 0.00 1.23 103 TM2_M_VERY_LONG_WORD 2 1.52 2.86 1.23 104 SUBJ_ALL_CAPS 2 1.52 2.86 1.23 105 FROM_EXCESS_BASE64 2 1.52 2.86 1.23 106 XMStockSpam_06 2 1.52 2.86 1.23 107 TR_XM_DK_Bayes2 2 1.02 0.00 1.23 108 XM_DK_Undo_01 2 2.03 5.71 1.23 109 XM_ZohoDesk1 2 1.02 0.00 1.23 110 TR_XM_SpoofStaff 2 1.02 0.00 1.23 111 BAYES_80 2 3.05 11.43 1.23 112 TR_XM_UnparsRelay 2 3.05 11.43 1.23 113 XMSexyCombo_05 2 1.52 2.86 1.23 114 TVD_SPACE_RATIO 2 1.02 0.00 1.23 115 SpammyFromTLD_02 2 2.03 5.71 1.23 116 XM_H_SpoofStaff4 2 1.02 0.00 1.23 117 XMSubPhish11 2 1.02 0.00 1.23 118 TR_XM_SpoofPhishAttach 2 1.02 0.00 1.23 119 XM_Body_Obfu01 2 1.02 0.00 1.23 120 XM_PDF 2 1.02 0.00 1.23 121 XMDiploma_00 2 1.02 0.00 1.23 122 XM_CamelCaseFrm001 2 1.52 2.86 1.23 123 TR_XM_PSC1 2 1.02 0.00 1.23 124 XM_GoogleGroups 2 1.02 0.00 1.23 125 KHOP_HELO_FCRDNS 2 1.02 0.00 1.23 126 TR_XM_SB_Phish 2 1.02 0.00 1.23 127 XMSubMetaD_03 1 1.02 2.86 0.62 128 MISSING_HEADERS 1 0.51 0.00 0.62 129 XM_ShortIntro_01 1 0.51 0.00 0.62 130 SUBJ_BUY 1 0.51 0.00 0.62 131 HK_RANDOM_FROM 1 0.51 0.00 0.62 132 HTML_IMAGE_ONLY_08 1 0.51 0.00 0.62 133 TM2_M_OBFU_COMMENT 1 0.51 0.00 0.62 134 BANG_GUAR 1 0.51 0.00 0.62 135 FROM_GOV_DKIM_AU 1 0.51 0.00 0.62 136 LONG_JUNK_URI2 1 1.52 5.71 0.62 137 XM_Body_Dirty_Words_01 1 0.51 0.00 0.62 138 XMBody_17 1 0.51 0.00 0.62 139 HTML_IMAGE_ONLY_16 1 1.02 2.86 0.62 140 XMSubEmpty 1 0.51 0.00 0.62 141 RELAYCOUNTRY_SG 1 0.51 0.00 0.62 142 XMHTML_After_End 1 0.51 0.00 0.62 143 RCVD_IN_RP_CERTIFIED 1 0.51 0.00 0.62 144 ONE_TIME 1 0.51 0.00 0.62 145 XMDateMe_00 1 0.51 0.00 0.62 146 HTML_EXTRA_CLOSE 1 0.51 0.00 0.62 147 XM_S_SpammyWords 1 0.51 0.00 0.62 148 XM_SendGrid 1 1.52 5.71 0.62 149 SpammyFromTLD_01 1 2.03 8.57 0.62 150 HTTPS_HTTP_MISMATCH 1 0.51 0.00 0.62 151 SUBJ_DOLLARS 1 0.51 0.00 0.62 152 URI_NOVOWEL 1 0.51 0.00 0.62 153 RCVD_IN_IADB_DK 1 0.51 0.00 0.62 154 T_TooManySym_03 1 0.51 0.00 0.62 155 XMSolicitRefs_0 1 0.51 0.00 0.62 156 XMLngstWrd_03 1 1.02 2.86 0.62 157 RCVD_IN_IADB_SENDERID 1 0.51 0.00 0.62 158 HK_RANDOM_ENVFROM 1 0.51 0.00 0.62 159 XMBSHREFv2 1 1.52 5.71 0.62 160 THIS_AD 1 1.02 2.86 0.62 161 BAYES_20 1 0.51 0.00 0.62 162 GMD_PDF_SQUARE 1 0.51 0.00 0.62 163 XMCapTrack 1 0.51 0.00 0.62 164 XMLngstWrd_00 1 1.02 2.86 0.62 165 XMSubMetaI_00 1 1.02 2.86 0.62 166 XM_Combo_Sbj 1 0.51 0.00 0.62 167 HTML_IMAGE_ONLY_24 1 0.51 0.00 0.62 168 TR_XM_Spammywords 1 0.51 0.00 0.62 169 XM_H_Trusted_IP 1 0.51 0.00 0.62 170 XM_OfRef6 1 0.51 0.00 0.62 171 RCVD_IN_RP_SAFE 1 0.51 0.00 0.62 172 TR_XM_PhishingBody2 1 0.51 0.00 0.62 173 CTE_8BIT_MISMATCH 1 0.51 0.00 0.62 174 XMPhish14 1 0.51 0.00 0.62 175 TR_Mismatch_TLD_01 1 2.03 8.57 0.62 176 DATE_IN_PAST_12_24 1 1.02 2.86 0.62 177 XM_S_SubURI 1 0.51 0.00 0.62 178 XM_B_Unsub2 1 0.51 0.00 0.62 179 XMHTMLBadTable_001 1 1.02 2.86 0.62 180 PDS_PRO_TLD 1 1.02 2.86 0.62 181 XM_H_Long_From02 1 0.51 0.00 0.62 182 T_XMHurry_00 1 1.02 2.86 0.62 183 XM_B_Investor 1 0.51 0.00 0.62 184 TR_XM_SpoofStaff3 1 0.51 0.00 0.62 185 MSGID_NOFQDN1 1 0.51 0.00 0.62 186 XMLngstWrd_04 1 1.02 2.86 0.62 187 XM_B_Phish_Phrases 1 1.02 2.86 0.62 188 XM_E_Weebly 1 0.51 0.00 0.62 189 TR_Mismatch_TLD_02 1 1.52 5.71 0.62 190 XMMoneyMeta_00 1 0.51 0.00 0.62 191 XMLngstWrd_01 1 1.02 2.86 0.62 192 PP_MIME_FAKE_ASCII_TEXT 1 0.51 0.00 0.62 193 TRACKER_ID 1 0.51 0.00 0.62 194 RCVD_IN_IADB_LISTED 1 0.51 0.00 0.62 195 XMSubMetaI_01 1 1.02 2.86 0.62 196 TM2_M_URI_OPT_OUT 1 1.02 2.86 0.62 197 HDRS_MISSP 1 0.51 0.00 0.62 198 XM_Attn_01 1 0.51 0.00 0.62 199 RELAYCOUNTRY_GB 1 1.02 2.86 0.62 200 RCVD_IN_IADB_SPF 1 0.51 0.00 0.62 ----------------------------------------------------------------------