Email: 283 Autolearn: 0 AvgScore: 2.54 AvgScanTime: 1.97 sec Spam: 155 Autolearn: 0 AvgScore: 10.60 AvgScanTime: 1.93 sec Ham: 128 Autolearn: 0 AvgScore: -7.22 AvgScanTime: 2.03 sec Time Spent Running SA: 0.16 hours Time Spent Processing Spam: 0.08 hours Time Spent Processing Ham: 0.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145 83.75 93.55 71.88 2 T_SCC_BODY_TEXT_LINE 126 79.86 81.29 78.12 3 DCC_CHECK 114 48.06 73.55 17.19 4 HTML_FONT_LOW_CONTRAST 106 51.94 68.39 32.03 5 MIME_HTML_ONLY 100 40.99 64.52 12.50 6 XM_SPF_SoftFail 98 36.40 63.23 3.91 7 ALL_TRUSTED 96 44.88 61.94 24.22 8 XM_UncommonTLD01 95 40.28 61.29 14.84 9 BOUNCE_MESSAGE 87 32.86 56.13 4.69 10 ANY_BOUNCE_MESSAGE 87 32.86 56.13 4.69 11 NORMAL_HTTP_TO_IP 86 31.10 55.48 1.56 12 BAYES_50 86 56.18 55.48 57.03 13 NUMERIC_HTTP_ADDR 86 31.10 55.48 1.56 14 DKIM_SIGNED 51 49.82 32.90 70.31 15 XM_B_Unicode 48 42.40 30.97 56.25 16 XM_DK_Pass 47 48.06 30.32 69.53 17 DKIM_VALID 46 47.70 29.68 69.53 18 XM_B_SpammyWords 45 30.04 29.03 31.25 19 RELAYCOUNTRY_US 44 44.88 28.39 64.84 20 DCC_CHECK_NEGATIVE 41 51.94 26.45 82.81 21 BAYES_60 37 19.79 23.87 14.84 22 DKIM_VALID_AU 36 37.10 23.23 53.91 23 XMListUnsubscribeExists 29 29.68 18.71 42.97 24 XM_B_Unicode3 24 24.38 15.48 35.16 25 FVGT_m_MULTI_ODD 22 20.49 14.19 28.12 26 RELAYCOUNTRY_META 22 13.43 14.19 12.50 27 XM_DK_Undo_02 21 9.54 13.55 4.69 28 BAYES_99 20 8.83 12.90 3.91 29 DKIM_VALID_EF 20 26.86 12.90 43.75 30 LOC_TINY_FONT_1 20 17.31 12.90 22.66 31 XMSubLong 19 15.90 12.26 20.31 32 T_TM2_M_HEADER_IN_MSG 18 13.43 11.61 15.62 33 RCVD_IN_MSPIKE_H2 18 14.13 11.61 17.19 34 BAYES_999 17 7.42 10.97 3.12 35 XM_B_Unsub 17 8.48 10.97 5.47 36 XM_B_SpammyWords2 17 10.95 10.97 10.94 37 TR_XM_BayesUnsub 17 8.48 10.97 5.47 38 XM_Body_Dirty_Words 17 12.72 10.97 14.84 39 XMNumbers 14 8.48 9.03 7.81 40 T_KAM_HTML_FONT_INVALID 13 13.07 8.39 18.75 41 FSL_BULK_SIG 13 6.71 8.39 4.69 42 XM_B_SpammyTLD 13 7.77 8.39 7.03 43 XM_Multi_Part_URI 13 9.89 8.39 11.72 44 XM_B_Investor 12 4.59 7.74 0.78 45 TR_XM_DKIM_Undo 12 5.30 7.74 2.34 46 TR_XM_SpammyWords5 12 5.30 7.74 2.34 47 TooManyTo_001 12 8.13 7.74 8.59 48 RCVD_IN_MSPIKE_WL 12 19.08 7.74 32.81 49 TR_XM_DK_Unsub 12 14.84 7.74 23.44 50 UNPARSEABLE_RELAY 12 8.13 7.74 8.59 51 TR_XM_SpammyRelay 12 6.01 7.74 3.91 52 XM_B_SpammyTLD2 11 3.89 7.10 0.00 53 HTML_IMAGE_RATIO_06 11 4.59 7.10 1.56 54 BOTNET 10 3.53 6.45 0.00 55 UNTRUSTED_Relay 10 6.01 6.45 5.47 56 TR_XM_UnparsRelay 9 3.89 5.81 1.56 57 TR_XM_PhishingBody 9 3.89 5.81 1.56 58 BAYES_80 8 5.30 5.16 5.47 59 XM_DIRTYINTL 8 3.53 5.16 1.56 60 SHORT_URI_2 8 3.18 5.16 0.78 61 XM_GoogleGroups 7 3.53 4.52 2.34 62 LOTS_OF_MONEY 7 4.95 4.52 5.47 63 XM_B_Phish_Phrases 7 2.83 4.52 0.78 64 TR_XM_SpammyWords4 7 3.18 4.52 1.56 65 RCVD_IN_MSPIKE_H3 7 9.54 4.52 15.62 66 XM_B_SpammyWords3 6 2.47 3.87 0.78 67 XMSubMetaSx_00 6 3.53 3.87 3.12 68 TM2_M_URI_OPT_OUT 6 2.83 3.87 1.56 69 TR_XM_SB_Phish 5 2.47 3.23 1.56 70 XM_H_Undi_Recip 5 3.18 3.23 3.12 71 RELAYCOUNTRY_DE 5 2.12 3.23 0.78 72 TR_XM_NoHeaderRelay 5 1.77 3.23 0.00 73 BOTNET_IPINHOSTNAME 5 2.83 3.23 2.34 74 DKIM_INVALID 5 2.12 3.23 0.78 75 MAILING_LIST_MULTI 5 3.89 3.23 4.69 76 RCVD_IN_MSPIKE_BL 5 2.12 3.23 0.78 77 TR_XM_SpammyWords2 5 1.77 3.23 0.00 78 TR_XM_MSPIKECOMBO 5 1.77 3.23 0.00 79 MPART_ALT_DIFF 5 2.12 3.23 0.78 80 LotsOfNums_01 4 2.83 2.58 3.12 81 DRUGS_ERECTILE 4 1.41 2.58 0.00 82 XMSlimDrugH 4 1.41 2.58 0.00 83 XM_UB50 4 3.53 2.58 4.69 84 RCVD_IN_MSPIKE_L3 4 1.41 2.58 0.00 85 INVALID_DATE 4 1.41 2.58 0.00 86 XMPhish11 4 1.41 2.58 0.00 87 XM_OfRef6 4 1.77 2.58 0.78 88 BOTNET_NORDNS 4 1.41 2.58 0.00 89 HTML_EXTRA_CLOSE 4 1.41 2.58 0.00 90 RELAYCOUNTRY_AU 4 3.18 2.58 3.91 91 XM_OfRef7 4 1.41 2.58 0.00 92 MPART_ALT_DIFF_COUNT 4 1.77 2.58 0.78 93 BOGUS_MIME_VERSION 4 1.41 2.58 0.00 94 PLING_QUERY 4 2.12 2.58 1.56 95 XM_GoogleGroups2 4 1.41 2.58 0.00 96 T_TooManySym_01 4 4.95 2.58 7.81 97 XMSexyCombo_01 3 1.77 1.94 1.56 98 RCVD_IN_VALIDITY_RPBL 3 1.06 1.94 0.00 99 HTML_IMAGE_RATIO_08 3 2.47 1.94 3.12 100 XM_DK_Undo_01 3 2.47 1.94 3.12 101 T_XMDrugObfuBody_08 3 1.77 1.94 1.56 102 XM_Evil_Numbers_Gen 3 3.89 1.94 6.25 103 XMSexyCombo_05 3 1.77 1.94 1.56 104 TR_XM_COVIDMETA4 3 1.06 1.94 0.00 105 XM_B_Phish66 3 1.77 1.94 1.56 106 TooManyTo_002 3 2.47 1.94 3.12 107 TR_XM_SpammyWords3 3 1.06 1.94 0.00 108 XM_H_PHPMailer 3 1.06 1.94 0.00 109 XMStrtUSub 3 4.24 1.94 7.03 110 TooManyTo_003 3 2.12 1.94 2.34 111 HTML_IMAGE_RATIO_04 3 4.95 1.94 8.59 112 T_Symld_Words_02 3 1.06 1.94 0.00 113 XMSubPhish11 3 1.77 1.94 1.56 114 MIME_QP_LONG_LINE 3 2.83 1.94 3.91 115 TR_DCC_Bayes_99 3 1.41 1.94 0.78 116 RELAYCOUNTRY_CA 3 1.77 1.94 1.56 117 TR_Symld_Words 3 1.41 1.94 0.78 118 HTML_IMAGE_ONLY_20 3 2.47 1.94 3.12 119 XM_Body_Dirty_Words_01 3 1.41 1.94 0.78 120 FROM_EXCESS_BASE64 3 1.41 1.94 0.78 121 RCVD_IN_MSPIKE_H4 3 4.59 1.94 7.81 122 TR_XM_PHPDW 3 1.06 1.94 0.00 123 HELO_NODOT 2 1.06 1.29 0.78 124 BAYES_00 2 6.01 1.29 11.72 125 XMDateMe_00 2 0.71 1.29 0.00 126 MIXED_CENTER_CASE 2 0.71 1.29 0.00 127 TR_XM_RelayPhish 2 0.71 1.29 0.00 128 XM_UB60 2 0.71 1.29 0.00 129 RCVD_IN_MSPIKE_H5 2 4.95 1.29 9.38 130 TR_XM_PhishingBody2 2 0.71 1.29 0.00 131 XMHTML_After_End 2 1.41 1.29 1.56 132 LONG_JUNK_URI3 2 0.71 1.29 0.00 133 RELAYCOUNTRY_IE 2 1.06 1.29 0.78 134 TM2_M_VERY_LONG_WORD 2 1.77 1.29 2.34 135 SHORTENED_URL_HREF 2 1.06 1.29 0.78 136 TR_XM_Undi_Recip2 2 1.41 1.29 1.56 137 XM_H_PHPOS 2 0.71 1.29 0.00 138 RDNS_DYNAMIC 2 1.06 1.29 0.78 139 TR_XM_PHPForged 2 0.71 1.29 0.00 140 XM_H_Long_From02 2 2.12 1.29 3.12 141 TR_XM_INV_DKIM 2 0.71 1.29 0.00 142 HELO_NO_DOMAIN 2 1.06 1.29 0.78 143 SpammyFromTLD_02 2 0.71 1.29 0.00 144 PDS_RDNS_DYNAMIC_FP 2 1.06 1.29 0.78 145 FSL_HELO_NON_FQDN_1 2 0.71 1.29 0.00 146 TR_XM_FormFill2 2 0.71 1.29 0.00 147 TR_BOTNET_NEGATE 2 0.71 1.29 0.00 148 XM_PDF 2 1.41 1.29 1.56 149 XMSexyCombo_02 2 0.71 1.29 0.00 150 IMPOTENCE 2 0.71 1.29 0.00 151 XMCapTrack 2 1.41 1.29 1.56 152 RELAYCOUNTRY_NL 2 1.06 1.29 0.78 153 XM_Body_Obfu01 2 0.71 1.29 0.00 154 XM_H_PHPOS_M 2 0.71 1.29 0.00 155 XMSubPhish18 2 0.71 1.29 0.00 156 BAYES_95 2 2.12 1.29 3.12 157 TR_XM_Undi_Recip13 2 1.06 1.29 0.78 158 TR_XM_InvalidRelay 2 1.06 1.29 0.78 159 TR_XM_Undi_Recip6 2 0.71 1.29 0.00 160 RCVD_IN_PSBL 1 0.35 0.65 0.00 161 TooManyTo_004 1 0.35 0.65 0.00 162 TR_XM_Undi_Recip12 1 0.35 0.65 0.00 163 TR_Mismatch_TLD_02 1 0.35 0.65 0.00 164 XM_B_SpammyWords4 1 0.71 0.65 0.78 165 FROM_SUSPICIOUS_NTLD_FP 1 0.35 0.65 0.00 166 XMPhish08 1 0.35 0.65 0.00 167 RELAYCOUNTRY_KR 1 0.35 0.65 0.00 168 RELAYCOUNTRY_IN 1 0.35 0.65 0.00 169 OBFU_TEXT_ATTACH 1 0.35 0.65 0.00 170 TM2_M_OBFU_COMMENT 1 0.35 0.65 0.00 171 HTML_FONT_SIZE_LARGE 1 0.35 0.65 0.00 172 RELAYCOUNTRY_SC 1 0.71 0.65 0.78 173 XMGappySubj_01 1 1.41 0.65 2.34 174 TR_XM_Spammywords 1 0.35 0.65 0.00 175 RELAYCOUNTRY_RU 1 0.35 0.65 0.00 176 XMEmptySub 1 1.06 0.65 1.56 177 TR_XM_HtmlAttach 1 0.35 0.65 0.00 178 XM_UB99 1 0.35 0.65 0.00 179 URI_TRY_3LD 1 0.35 0.65 0.00 180 XMSubMetaI_00 1 0.35 0.65 0.00 181 XM_UB999 1 0.35 0.65 0.00 182 STY_INVIS_DIRECT 1 0.35 0.65 0.00 183 RELAYCOUNTRY_FR 1 1.06 0.65 1.56 184 TR_XM_DK_Bayes2 1 2.83 0.65 5.47 185 T_REMOTE_IMAGE 1 2.83 0.65 5.47 186 DIET_1 1 0.35 0.65 0.00 187 XMBody_17 1 2.12 0.65 3.91 188 T_XMHurry_00 1 0.35 0.65 0.00 189 NO_DNS_FOR_FROM 1 0.35 0.65 0.00 190 T_TooManySym_02 1 3.53 0.65 7.03 191 DRUGS_MUSCLE 1 0.35 0.65 0.00 192 XMBrknScrpt_02 1 0.35 0.65 0.00 193 DC_PNG_UNO_LARGO 1 0.35 0.65 0.00 194 T_OBFU_HTML_ATTACH 1 0.35 0.65 0.00 195 XM_UB95 1 0.35 0.65 0.00 196 USER_IN_DEF_DKIM_WL 1 2.83 0.65 5.47 197 FVGT_m_MULTI_ODD_EMAIL 1 0.35 0.65 0.00 198 URIBL_BLACK 1 0.35 0.65 0.00 199 RELAYCOUNTRY_AT 1 0.71 0.65 0.78 200 HK_RANDOM_FROM 1 0.71 0.65 0.78 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 106 51.94 26.45 82.81 2 T_SCC_BODY_TEXT_LINE 100 79.86 81.29 78.12 3 HTML_MESSAGE 92 83.75 93.55 71.88 4 DKIM_SIGNED 90 49.82 32.90 70.31 5 XM_DK_Pass 89 48.06 30.32 69.53 6 DKIM_VALID 89 47.70 29.68 69.53 7 RELAYCOUNTRY_US 83 44.88 28.39 64.84 8 BAYES_50 73 56.18 55.48 57.03 9 XM_B_Unicode 72 42.40 30.97 56.25 10 DKIM_VALID_AU 69 37.10 23.23 53.91 11 DKIM_VALID_EF 56 26.86 12.90 43.75 12 XMListUnsubscribeExists 55 29.68 18.71 42.97 13 XM_B_Unicode3 45 24.38 15.48 35.16 14 RCVD_IN_MSPIKE_WL 42 19.08 7.74 32.81 15 HTML_FONT_LOW_CONTRAST 41 51.94 68.39 32.03 16 XM_B_SpammyWords 40 30.04 29.03 31.25 17 FVGT_m_MULTI_ODD 36 20.49 14.19 28.12 18 ALL_TRUSTED 31 44.88 61.94 24.22 19 TR_XM_DK_Unsub 30 14.84 7.74 23.44 20 LOC_TINY_FONT_1 29 17.31 12.90 22.66 21 XMSubLong 26 15.90 12.26 20.31 22 T_KAM_HTML_FONT_INVALID 24 13.07 8.39 18.75 23 RCVD_IN_MSPIKE_H2 22 14.13 11.61 17.19 24 DCC_CHECK 22 48.06 73.55 17.19 25 T_TM2_M_HEADER_IN_MSG 20 13.43 11.61 15.62 26 RCVD_IN_MSPIKE_H3 20 9.54 4.52 15.62 27 XM_DKIMWhitelistDomains 19 6.71 0.00 14.84 28 XM_Body_Dirty_Words 19 12.72 10.97 14.84 29 BAYES_60 19 19.79 23.87 14.84 30 XM_UncommonTLD01 19 40.28 61.29 14.84 31 RELAYCOUNTRY_META 16 13.43 14.19 12.50 32 MIME_HTML_ONLY 16 40.99 64.52 12.50 33 XM_Multi_Part_URI 15 9.89 8.39 11.72 34 BAYES_00 15 6.01 1.29 11.72 35 XM_B_SpammyWords2 14 10.95 10.97 10.94 36 INVALID_MSGID 13 4.59 0.00 10.16 37 IN_ZIMBRA_NJ_WHITELIST 12 4.24 0.00 9.38 38 RCVD_IN_MSPIKE_H5 12 4.95 1.29 9.38 39 TO_MALFORMED 12 4.24 0.00 9.38 40 HTML_IMAGE_RATIO_04 11 4.95 1.94 8.59 41 TooManyTo_001 11 8.13 7.74 8.59 42 UNPARSEABLE_RELAY 11 8.13 7.74 8.59 43 RCVD_IN_MSPIKE_H4 10 4.59 1.94 7.81 44 T_TooManySym_01 10 4.95 2.58 7.81 45 XMNumbers 10 8.48 9.03 7.81 46 TR_XM_DK_Bayes1 9 3.53 0.65 7.03 47 XM_B_SpammyTLD 9 7.77 8.39 7.03 48 TR_XM_DK_Bayes 9 3.53 0.65 7.03 49 T_TooManySym_02 9 3.53 0.65 7.03 50 XMStrtUSub 9 4.24 1.94 7.03 51 XM_H_Long_From01 8 2.83 0.00 6.25 52 XM_Evil_Numbers_Gen 8 3.89 1.94 6.25 53 TR_XM_BayesUnsub 7 8.48 10.97 5.47 54 LOTS_OF_MONEY 7 4.95 4.52 5.47 55 USER_IN_WHITELIST 7 2.47 0.00 5.47 56 UNTRUSTED_Relay 7 6.01 6.45 5.47 57 USER_IN_WELCOMELIST 7 2.47 0.00 5.47 58 TR_XM_DK_Bayes2 7 2.83 0.65 5.47 59 T_REMOTE_IMAGE 7 2.83 0.65 5.47 60 XM_B_Unsub 7 8.48 10.97 5.47 61 USER_IN_DEF_DKIM_WL 7 2.83 0.65 5.47 62 BAYES_80 7 5.30 5.16 5.47 63 XM_DK_Undo_02 6 9.54 13.55 4.69 64 MAILING_LIST_MULTI 6 3.89 3.23 4.69 65 BOUNCE_MESSAGE 6 32.86 56.13 4.69 66 XM_UB50 6 3.53 2.58 4.69 67 FSL_BULK_SIG 6 6.71 8.39 4.69 68 ANY_BOUNCE_MESSAGE 6 32.86 56.13 4.69 69 RELAYCOUNTRY_AU 5 3.18 2.58 3.91 70 MSGID_NOFQDN1 5 1.77 0.00 3.91 71 MIME_QP_LONG_LINE 5 2.83 1.94 3.91 72 TR_XM_SpammyRelay 5 6.01 7.74 3.91 73 BAYES_99 5 8.83 12.90 3.91 74 XMBody_17 5 2.12 0.65 3.91 75 XM_SPF_SoftFail 5 36.40 63.23 3.91 76 RCVD_IN_IADB_SENDERID 4 1.41 0.00 3.12 77 HTML_IMAGE_ONLY_20 4 2.47 1.94 3.12 78 BAYES_95 4 2.12 1.29 3.12 79 XMSubMetaSx_00 4 3.53 3.87 3.12 80 HTML_IMAGE_RATIO_08 4 2.47 1.94 3.12 81 XM_ZIP 4 1.41 0.00 3.12 82 BAYES_999 4 7.42 10.97 3.12 83 XM_H_Undi_Recip 4 3.18 3.23 3.12 84 LotsOfNums_01 4 2.83 2.58 3.12 85 XM_DK_Undo_01 4 2.47 1.94 3.12 86 RCVD_IN_IADB_SPF 4 1.41 0.00 3.12 87 XM_H_Long_From02 4 2.12 1.29 3.12 88 RCVD_IN_IADB_LISTED 4 1.41 0.00 3.12 89 TooManyTo_002 4 2.47 1.94 3.12 90 TooManyTo_003 3 2.12 1.94 2.34 91 RCVD_IN_IADB_VOUCHED 3 1.06 0.00 2.34 92 XMGappySubj_01 3 1.41 0.65 2.34 93 XM_GoogleGroups 3 3.53 4.52 2.34 94 BOTNET_IPINHOSTNAME 3 2.83 3.23 2.34 95 RCVD_IN_IADB_DK 3 1.06 0.00 2.34 96 TR_LOTS_OF_MONEY3 3 1.06 0.00 2.34 97 IN_HORDE_ADDRESS_BOOK 3 1.06 0.00 2.34 98 TR_XM_DKIM_Undo 3 5.30 7.74 2.34 99 TR_XM_SpammyWords5 3 5.30 7.74 2.34 100 TM2_M_VERY_LONG_WORD 3 1.77 1.29 2.34 101 RCVD_IN_IADB_OPTIN 3 1.06 0.00 2.34 102 SUBJ_ALL_CAPS 3 1.06 0.00 2.34 103 SCC_BODY_URI_ONLY 3 1.06 0.00 2.34 104 TVD_SPACE_RATIO 3 1.06 0.00 2.34 105 XMLngstWrd_00 2 1.06 0.65 1.56 106 MIME_HTML_MOSTLY 2 0.71 0.00 1.56 107 T_XMDrugObfuBody_14 2 0.71 0.00 1.56 108 TR_Sbj_FN_Bdy 2 1.06 0.65 1.56 109 TR_XM_SpoofStaff 2 0.71 0.00 1.56 110 XM_DIRTYINTL 2 3.53 5.16 1.56 111 XM_H_SpoofStaff4 2 0.71 0.00 1.56 112 HTML_IMAGE_RATIO_02 2 0.71 0.00 1.56 113 HTML_IMAGE_RATIO_06 2 4.59 7.10 1.56 114 FROM_GOV_SPOOF 2 1.06 0.65 1.56 115 XMCapTrack 2 1.41 1.29 1.56 116 XMSubPhish11 2 1.77 1.94 1.56 117 XM_Ancestry_Forge 2 0.71 0.00 1.56 118 RCVD_IN_VALIDITY_CERTIFIED 2 1.06 0.65 1.56 119 XMSpoofStaff2 2 0.71 0.00 1.56 120 XM_PDF 2 1.41 1.29 1.56 121 TR_XM_SpammyWords4 2 3.18 4.52 1.56 122 PLING_QUERY 2 2.12 2.58 1.56 123 TR_XM_SpoofPhishAttach 2 0.71 0.00 1.56 124 RELAYCOUNTRY_CA 2 1.77 1.94 1.56 125 XMSolicitRefs_0 2 0.71 0.00 1.56 126 BAYES_05 2 0.71 0.00 1.56 127 RCVD_IN_VALIDITY_SAFE 2 1.06 0.65 1.56 128 TM2_M_URI_OPT_OUT 2 2.83 3.87 1.56 129 NUMERIC_HTTP_ADDR 2 31.10 55.48 1.56 130 TR_XM_UnparsRelay 2 3.89 5.81 1.56 131 TR_XM_PhishingBody 2 3.89 5.81 1.56 132 XMEmptySub 2 1.06 0.65 1.56 133 TR_XM_SB_Phish 2 2.47 3.23 1.56 134 XMSexyCombo_01 2 1.77 1.94 1.56 135 RELAYCOUNTRY_FR 2 1.06 0.65 1.56 136 BAYES_40 2 0.71 0.00 1.56 137 XMHTML_After_End 2 1.41 1.29 1.56 138 TR_XM_Undi_Recip2 2 1.41 1.29 1.56 139 HTML_MIME_NO_HTML_TAG 2 0.71 0.00 1.56 140 TR_XM_PSC1 2 0.71 0.00 1.56 141 XMSexyCombo_05 2 1.77 1.94 1.56 142 XM_B_Phish66 2 1.77 1.94 1.56 143 T_XMDrugObfuBody_08 2 1.77 1.94 1.56 144 NORMAL_HTTP_TO_IP 2 31.10 55.48 1.56 145 HTTPS_HTTP_MISMATCH 2 0.71 0.00 1.56 146 XM_ZohoDesk1 2 0.71 0.00 1.56 147 XM_S_SubURI 1 0.35 0.00 0.78 148 TR_XM_SPAMCOP 1 0.71 0.65 0.78 149 XM_B_Phish_Phrases 1 2.83 4.52 0.78 150 PDS_RDNS_DYNAMIC_FP 1 1.06 1.29 0.78 151 SHORT_URI_2 1 3.18 5.16 0.78 152 DOS_RCVD_IP_TWICE_B 1 0.71 0.65 0.78 153 BAYES_20 1 0.35 0.00 0.78 154 MPART_ALT_DIFF_COUNT 1 1.77 2.58 0.78 155 RCVD_IN_MSPIKE_BL 1 2.12 3.23 0.78 156 RCVD_IN_MSPIKE_ZBI 1 0.35 0.00 0.78 157 XMAsSeen 1 0.35 0.00 0.78 158 HELO_NO_DOMAIN 1 1.06 1.29 0.78 159 XM_B_TRADE_HTML 1 0.35 0.00 0.78 160 RCVD_IN_BL_SPAMCOP_NET 1 0.71 0.65 0.78 161 RELAYCOUNTRY_NP 1 0.35 0.00 0.78 162 SUBJ_AS_SEEN 1 0.35 0.00 0.78 163 MIME_CHARSET_FARAWAY 1 0.35 0.00 0.78 164 XMLngstWrd_03 1 0.35 0.00 0.78 165 RELAYCOUNTRY_NL 1 1.06 1.29 0.78 166 T_DOC_ATTACH_NO_EXT 1 0.35 0.00 0.78 167 TR_Mismatch_TLD_01 1 0.35 0.00 0.78 168 RELAYCOUNTRY_KH 1 0.35 0.00 0.78 169 XMSubNoVowel 1 0.71 0.65 0.78 170 XM_Body_Dirty_Words_01 1 1.41 1.94 0.78 171 TR_XM_Undi_Recip13 1 1.06 1.29 0.78 172 XM_CamelCaseFrm001 1 0.35 0.00 0.78 173 TR_DCC_Bayes_99 1 1.41 1.94 0.78 174 URI_HEX 1 0.35 0.00 0.78 175 TR_Symld_Words 1 1.41 1.94 0.78 176 FROM_EXCESS_BASE64 1 1.41 1.94 0.78 177 XM_ShortIntro_01 1 0.35 0.00 0.78 178 CHARSET_FARAWAY_HEADER 1 0.35 0.00 0.78 179 T_TooManySym_03 1 0.35 0.00 0.78 180 HK_RANDOM_ENVFROM 1 0.71 0.65 0.78 181 RELAYCOUNTRY_ID 1 0.35 0.00 0.78 182 AC_FROM_MANY_DOTS 1 0.35 0.00 0.78 183 BITCOIN_OBFU_SUBJ 1 0.35 0.00 0.78 184 FORGED_GMAIL_RCVD 1 0.35 0.00 0.78 185 XMLngstWrd_01 1 0.35 0.00 0.78 186 MPART_ALT_DIFF 1 2.12 3.23 0.78 187 XMStockSpam_06 1 0.71 0.65 0.78 188 TR_XM_InvalidRelay 1 1.06 1.29 0.78 189 XMSubGiftCard1 1 0.35 0.00 0.78 190 LOCALPART_IN_SUBJECT 1 0.71 0.65 0.78 191 XM_B_Investor 1 4.59 7.74 0.78 192 RELAYCOUNTRY_SC 1 0.71 0.65 0.78 193 XMSubject_78 1 0.35 0.00 0.78 194 XMSubMetaSxObfu_03 1 0.35 0.00 0.78 195 RELAYCOUNTRY_DE 1 2.12 3.23 0.78 196 HELO_NODOT 1 1.06 1.29 0.78 197 XM_H_Trusted_IP 1 0.35 0.00 0.78 198 CTE_8BIT_MISMATCH 1 0.35 0.00 0.78 199 XM_B_SpammyWords3 1 2.47 3.87 0.78 200 XM_B_SpammyWords4 1 0.71 0.65 0.78 ----------------------------------------------------------------------