Email: 265 Autolearn: 0 AvgScore: 2.23 AvgScanTime: 4.62 sec Spam: 53 Autolearn: 0 AvgScore: 13.06 AvgScanTime: 3.82 sec Ham: 212 Autolearn: 0 AvgScore: -0.48 AvgScanTime: 4.82 sec Time Spent Running SA: 0.34 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 XM_B_Unicode 49 54.72 92.45 45.28 2 HTML_MESSAGE 49 68.68 92.45 62.74 3 T_SCC_BODY_TEXT_LINE 46 84.15 86.79 83.49 4 DKIM_SIGNED 44 68.30 83.02 64.62 5 XM_DK_Pass 41 65.28 77.36 62.26 6 RELAYCOUNTRY_US 40 63.02 75.47 59.91 7 DKIM_VALID 40 64.15 75.47 61.32 8 XMListUnsubscribeExists 35 40.00 66.04 33.49 9 DCC_CHECK_NEGATIVE 33 73.96 62.26 76.89 10 XM_B_SpammyWords 32 28.68 60.38 20.75 11 XM_B_Unicode3 29 31.70 54.72 25.94 12 DKIM_VALID_AU 28 49.81 52.83 49.06 13 BAYES_50 28 56.98 52.83 58.02 14 FVGT_m_MULTI_ODD 26 25.28 49.06 19.34 15 LOC_TINY_FONT_1 24 21.13 45.28 15.09 16 HTML_FONT_LOW_CONTRAST 24 27.55 45.28 23.11 17 RCVD_IN_MSPIKE_H2 21 23.40 39.62 19.34 18 DCC_CHECK 20 26.04 37.74 23.11 19 DKIM_VALID_EF 20 29.43 37.74 27.36 20 XM_DK_Undo_02 19 13.58 35.85 8.02 21 XM_Multi_Part_URI 19 18.49 35.85 14.15 22 XMSubLong 18 21.13 33.96 17.92 23 XM_Body_Dirty_Words 17 8.68 32.08 2.83 24 UNPARSEABLE_RELAY 16 18.49 30.19 15.57 25 RELAYCOUNTRY_META 16 14.34 30.19 10.38 26 XM_B_SpammyWords2 15 12.45 28.30 8.49 27 TR_XM_DK_Unsub 14 13.21 26.42 9.91 28 BAYES_99 13 7.55 24.53 3.30 29 BAYES_999 12 6.79 22.64 2.83 30 UNTRUSTED_Relay 11 9.81 20.75 7.08 31 BOTNET 11 8.68 20.75 5.66 32 TR_XM_DKIM_Undo 11 5.28 20.75 1.42 33 TR_XM_SpammyRelay 10 5.28 18.87 1.89 34 RCVD_IN_MSPIKE_WL 10 21.13 18.87 21.70 35 T_TM2_M_HEADER_IN_MSG 10 20.38 18.87 20.75 36 T_KAM_HTML_FONT_INVALID 10 12.08 18.87 10.38 37 XMSubMetaSx_00 9 4.15 16.98 0.94 38 XMSexyCombo_05 9 4.15 16.98 0.94 39 XM_Evil_Numbers_Gen 9 6.04 16.98 3.30 40 TR_XM_UnparsRelay 9 5.66 16.98 2.83 41 XM_DIRTYINTL 9 3.77 16.98 0.47 42 MIME_HTML_ONLY 9 14.34 16.98 13.68 43 XM_UncommonTLD01 7 9.81 13.21 8.96 44 XM_UB50 7 4.53 13.21 2.36 45 T_REMOTE_IMAGE 7 4.91 13.21 2.83 46 XM_B_Unsub 7 12.45 13.21 12.26 47 TR_XM_BayesUnsub 7 6.42 13.21 4.72 48 XM_H_Long_From01 6 4.15 11.32 2.36 49 BOTNET_IPINHOSTNAME 5 7.17 9.43 6.60 50 BOTNET_NORDNS 5 1.89 9.43 0.00 51 XMNumbers 5 6.79 9.43 6.13 52 TR_XM_PhishingBody 5 7.55 9.43 7.08 53 TR_DCC_Bayes_99 5 2.64 9.43 0.94 54 XM_B_SpammyWords3 5 3.77 9.43 2.36 55 TR_XM_SPAMCOP 5 1.89 9.43 0.00 56 RCVD_IN_BL_SPAMCOP_NET 5 1.89 9.43 0.00 57 XM_B_SpammyWords4 4 1.89 7.55 0.47 58 BAYES_60 4 9.43 7.55 9.91 59 TR_XM_SpammyWords2 4 1.51 7.55 0.00 60 TM2_M_VERY_LONG_WORD 4 2.26 7.55 0.94 61 TR_XM_SpammyWords5 4 3.40 7.55 2.36 62 BAYES_80 4 2.64 7.55 1.42 63 HTML_IMAGE_RATIO_02 4 3.40 7.55 2.36 64 RCVD_IN_MSPIKE_H4 4 6.79 7.55 6.60 65 RCVD_IN_MSPIKE_H5 4 7.17 7.55 7.08 66 XM_DK_Undo_01 4 3.02 7.55 1.89 67 XMSexyCombo_01 4 1.51 7.55 0.00 68 DKIM_INVALID 4 4.15 7.55 3.30 69 HTML_IMAGE_RATIO_04 4 4.91 7.55 4.25 70 XMSubMetaSSx_00 3 1.13 5.66 0.00 71 XM_UB99 3 1.13 5.66 0.00 72 LotsOfNums_01 3 3.77 5.66 3.30 73 XMSexyCombo_02 3 1.13 5.66 0.00 74 TooManyTo_001 3 4.15 5.66 3.77 75 LOTS_OF_MONEY 3 4.15 5.66 3.77 76 FSL_BULK_SIG 3 9.43 5.66 10.38 77 TR_XM_SpammyWords4 3 3.77 5.66 3.30 78 HDRS_MISSP 3 1.13 5.66 0.00 79 FIN_FREE 3 1.51 5.66 0.47 80 RELAYCOUNTRY_AT 3 4.91 5.66 4.72 81 XMStrtUSub 3 7.55 5.66 8.02 82 TR_XM_NoHeaderRelay 3 1.13 5.66 0.00 83 T_TooManySym_02 3 8.68 5.66 9.43 84 XM_Body_Dirty_Words_01 3 1.13 5.66 0.00 85 XM_B_Investor 3 1.13 5.66 0.00 86 T_TooManySym_01 3 10.57 5.66 11.79 87 XMPhish14 3 1.89 5.66 0.94 88 TR_Mismatch_TLD_02 3 1.13 5.66 0.00 89 XM_UB999 3 1.13 5.66 0.00 90 XM_B_SpammyTLD 3 3.40 5.66 2.83 91 UNSUB_GOOG_FORM 2 0.75 3.77 0.00 92 HTML_IMAGE_RATIO_08 2 1.51 3.77 0.94 93 RELAYCOUNTRY_CN 2 1.89 3.77 1.42 94 XMBrknScrpt_02 2 0.75 3.77 0.00 95 XM_E_Blogspot 2 0.75 3.77 0.00 96 BASE64_LENGTH_79_INF 2 0.75 3.77 0.00 97 MIME_QP_LONG_LINE 2 5.28 3.77 5.66 98 XM_URI_RBL 2 0.75 3.77 0.00 99 SpammyFromTLD_01 2 0.75 3.77 0.00 100 XM_GoogleGroups 2 2.26 3.77 1.89 101 RCVD_IN_IADB_DK 2 1.89 3.77 1.42 102 RCVD_IN_IADB_SPF 2 2.26 3.77 1.89 103 XMPhish08 2 0.75 3.77 0.00 104 XM_SPF_SoftFail 2 0.75 3.77 0.00 105 MAILING_LIST_MULTI 2 5.66 3.77 6.13 106 RCVD_IN_IADB_LISTED 2 2.64 3.77 2.36 107 BAYES_20 2 2.64 3.77 2.36 108 HTML_EMBEDS 2 0.75 3.77 0.00 109 XM_H_Undi_Recip 2 0.75 3.77 0.00 110 RELAYCOUNTRY_IE 2 0.75 3.77 0.00 111 SpammyFromTLD_02 2 1.13 3.77 0.47 112 RELAYCOUNTRY_NL 2 0.75 3.77 0.00 113 HTML_IMAGE_RATIO_06 2 2.26 3.77 1.89 114 RCVD_IN_IADB_SENDERID 2 2.26 3.77 1.89 115 RELAYCOUNTRY_PK 2 0.75 3.77 0.00 116 RCVD_IN_MSPIKE_H3 2 7.17 3.77 8.02 117 TR_XM_BayesRelay 2 0.75 3.77 0.00 118 KHOP_HELO_FCRDNS 1 1.13 1.89 0.94 119 T_XMDrugObfuBody_08 1 1.51 1.89 1.42 120 XMSolicitRefs_0 1 1.13 1.89 0.94 121 XM_ProductURIs 1 1.51 1.89 1.42 122 IMPOTENCE 1 0.38 1.89 0.00 123 FROM_SUSPICIOUS_NTLD_FP 1 0.38 1.89 0.00 124 XM_B_Phish_Phrases 1 2.26 1.89 2.36 125 TR_Symld_Words 1 1.13 1.89 0.94 126 XMPhishDuo 1 0.38 1.89 0.00 127 BAYES_95 1 1.51 1.89 1.42 128 XM_Body_Obfu01 1 0.38 1.89 0.00 129 PDS_RDNS_DYNAMIC_FP 1 0.38 1.89 0.00 130 XMLngstWrd_00 1 1.13 1.89 0.94 131 HELO_NODOT 1 0.38 1.89 0.00 132 XM_H_PHPOS 1 0.38 1.89 0.00 133 RELAYCOUNTRY_AU 1 1.89 1.89 1.89 134 RDNS_DYNAMIC 1 0.38 1.89 0.00 135 XMStockSpam_06 1 0.75 1.89 0.47 136 XMSubNoVowel 1 0.75 1.89 0.47 137 TR_XM_Spammywords 1 1.13 1.89 0.94 138 LONG_JUNK_URI3 1 0.38 1.89 0.00 139 RELAYCOUNTRY_IT 1 0.38 1.89 0.00 140 TR_XM_PHPForged 1 0.38 1.89 0.00 141 XMSubMetaSxObfu_03 1 0.75 1.89 0.47 142 URIBL_DBL_SPAM 1 0.38 1.89 0.00 143 BAYES_05 1 2.26 1.89 2.36 144 MIME_HTML_MOSTLY 1 1.89 1.89 1.89 145 TR_Mismatch_TLD_01 1 1.89 1.89 1.89 146 XMNoVowels 1 0.75 1.89 0.47 147 XM_B_Unsub2 1 0.38 1.89 0.00 148 FSL_HELO_NON_FQDN_1 1 0.38 1.89 0.00 149 RELAYCOUNTRY_GB 1 1.13 1.89 0.94 150 XM_H_PHPOS_M 1 0.38 1.89 0.00 151 RELAYCOUNTRY_JP 1 0.38 1.89 0.00 152 FROM_SUSPICIOUS_NTLD 1 0.38 1.89 0.00 153 XMBdyGiftCard01 1 0.38 1.89 0.00 154 FROM_GOV_SPOOF 1 1.13 1.89 0.94 155 SCC_BODY_URI_ONLY 1 13.21 1.89 16.04 156 RELAYCOUNTRY_DE 1 0.75 1.89 0.47 157 XM_Combo_Sbj 1 0.38 1.89 0.00 158 NOT_SPAM 1 0.38 1.89 0.00 159 RELAYCOUNTRY_CA 1 0.75 1.89 0.47 160 XMSubLongNoVowel 1 0.38 1.89 0.00 161 ONLINE_PHARMACY 1 0.38 1.89 0.00 162 DKIM_ADSP_ALL 1 0.38 1.89 0.00 163 XM_B_COPY_HTML 1 0.38 1.89 0.00 164 XM_UB80 1 0.38 1.89 0.00 165 TR_XM_FormFill2 1 0.38 1.89 0.00 166 XM_S_SpammyWords 1 1.13 1.89 0.94 167 XMSexyCombo_04 1 0.38 1.89 0.00 168 TR_XM_COVIDMETA1 1 0.38 1.89 0.00 169 HELO_NO_DOMAIN 1 0.38 1.89 0.00 170 TR_XM_INV_DKIM 1 0.38 1.89 0.00 171 HTML_MIME_NO_HTML_TAG 1 3.02 1.89 3.30 172 RELAYCOUNTRY_BR 1 0.38 1.89 0.00 173 RCVD_IN_VALIDITY_SAFE 1 1.13 1.89 0.94 174 URIBL_BLACK 1 0.38 1.89 0.00 175 TR_BOTNET_NEGATE 1 1.13 1.89 0.94 176 OBFU_TEXT_ATTACH 1 0.38 1.89 0.00 177 TR_XM_InvalidRelay 1 0.38 1.89 0.00 178 PDS_OTHER_BAD_TLD 1 0.38 1.89 0.00 179 TR_MetaPhish_Combo_01b 1 0.38 1.89 0.00 180 RCVD_IN_VALIDITY_CERTIFIED 1 1.13 1.89 0.94 181 XM_H_PHPMailer 1 1.13 1.89 0.94 182 DRUGS_ERECTILE 1 0.38 1.89 0.00 183 TooManyTo_003 1 1.13 1.89 0.94 184 XMDateMe_00 1 0.38 1.89 0.00 185 XM_HighProb1 1 0.38 1.89 0.00 186 XMFrmHeader_28 1 0.38 1.89 0.00 187 TooManyTo_002 1 1.13 1.89 0.94 188 TR_XM_PHPDW 1 0.38 1.89 0.00 189 XMSubMetaSx_01 1 0.38 1.89 0.00 190 CHARSET_FARAWAY_HEADER 1 0.38 1.89 0.00 191 TooManyTo_004 1 1.13 1.89 0.94 192 RELAYCOUNTRY_PL 1 0.38 1.89 0.00 193 DIET_1 1 0.38 1.89 0.00 194 XM_B_Phish66 1 5.28 1.89 6.13 195 TVD_VISIT_PHARMA 1 0.38 1.89 0.00 196 MIME_CHARSET_FARAWAY 1 1.13 1.89 0.94 197 MPART_ALT_DIFF_COUNT 1 1.13 1.89 0.94 198 XM_PDF 1 2.26 1.89 2.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 177 84.15 86.79 83.49 2 DCC_CHECK_NEGATIVE 163 73.96 62.26 76.89 3 DKIM_SIGNED 137 68.30 83.02 64.62 4 HTML_MESSAGE 133 68.68 92.45 62.74 5 XM_DK_Pass 132 65.28 77.36 62.26 6 DKIM_VALID 130 64.15 75.47 61.32 7 RELAYCOUNTRY_US 127 63.02 75.47 59.91 8 BAYES_50 123 56.98 52.83 58.02 9 DKIM_VALID_AU 104 49.81 52.83 49.06 10 XM_B_Unicode 96 54.72 92.45 45.28 11 XMListUnsubscribeExists 71 40.00 66.04 33.49 12 ALL_TRUSTED 64 24.15 0.00 30.19 13 DKIM_VALID_EF 58 29.43 37.74 27.36 14 XM_B_Unicode3 55 31.70 54.72 25.94 15 DCC_CHECK 49 26.04 37.74 23.11 16 HTML_FONT_LOW_CONTRAST 49 27.55 45.28 23.11 17 RCVD_IN_MSPIKE_WL 46 21.13 18.87 21.70 18 XM_B_SpammyWords 44 28.68 60.38 20.75 19 T_TM2_M_HEADER_IN_MSG 44 20.38 18.87 20.75 20 FVGT_m_MULTI_ODD 41 25.28 49.06 19.34 21 RCVD_IN_MSPIKE_H2 41 23.40 39.62 19.34 22 BAYES_00 39 14.72 0.00 18.40 23 BOUNCE_MESSAGE 39 14.72 0.00 18.40 24 ANY_BOUNCE_MESSAGE 39 14.72 0.00 18.40 25 XMSubLong 38 21.13 33.96 17.92 26 TR_XM_DK_Bayes 35 13.21 0.00 16.51 27 TR_XM_DK_Bayes1 35 13.21 0.00 16.51 28 SCC_BODY_URI_ONLY 34 13.21 1.89 16.04 29 UNPARSEABLE_RELAY 33 18.49 30.19 15.57 30 LOC_TINY_FONT_1 32 21.13 45.28 15.09 31 TR_XM_DK_Bayes2 31 11.70 0.00 14.62 32 XM_Multi_Part_URI 30 18.49 35.85 14.15 33 MIME_HTML_ONLY 29 14.34 16.98 13.68 34 XM_B_Unsub 26 12.45 13.21 12.26 35 T_TooManySym_01 25 10.57 5.66 11.79 36 FSL_BULK_SIG 22 9.43 5.66 10.38 37 T_KAM_HTML_FONT_INVALID 22 12.08 18.87 10.38 38 RELAYCOUNTRY_META 22 14.34 30.19 10.38 39 BAYES_60 21 9.43 7.55 9.91 40 TR_XM_DK_Unsub 21 13.21 26.42 9.91 41 T_TooManySym_02 20 8.68 5.66 9.43 42 XM_UncommonTLD01 19 9.81 13.21 8.96 43 USER_IN_DEF_DKIM_WL 19 7.17 0.00 8.96 44 XM_B_SpammyWords2 18 12.45 28.30 8.49 45 XMStrtUSub 17 7.55 5.66 8.02 46 XM_DK_Undo_02 17 13.58 35.85 8.02 47 RCVD_IN_MSPIKE_H3 17 7.17 3.77 8.02 48 IN_ZIMBRA_NJ_WHITELIST 16 6.04 0.00 7.55 49 INVALID_MSGID 15 5.66 0.00 7.08 50 UNTRUSTED_Relay 15 9.81 20.75 7.08 51 TR_XM_PhishingBody 15 7.55 9.43 7.08 52 RCVD_IN_MSPIKE_H5 15 7.17 7.55 7.08 53 BOTNET_IPINHOSTNAME 14 7.17 9.43 6.60 54 RCVD_IN_MSPIKE_H4 14 6.79 7.55 6.60 55 TO_MALFORMED 14 5.28 0.00 6.60 56 MAILING_LIST_MULTI 13 5.66 3.77 6.13 57 XMNumbers 13 6.79 9.43 6.13 58 XM_B_Phish66 13 5.28 1.89 6.13 59 MIME_QP_LONG_LINE 12 5.28 3.77 5.66 60 BOTNET 12 8.68 20.75 5.66 61 XM_DKIMWhitelistDomains 11 4.15 0.00 5.19 62 FROM_GOV_DKIM_AU 10 3.77 0.00 4.72 63 RELAYCOUNTRY_AT 10 4.91 5.66 4.72 64 XMSubPhish11 10 3.77 0.00 4.72 65 TR_XM_BayesUnsub 10 6.42 13.21 4.72 66 TR_XM_SB_Phish 10 3.77 0.00 4.72 67 HTML_IMAGE_RATIO_04 9 4.91 7.55 4.25 68 TooManyTo_001 8 4.15 5.66 3.77 69 LOTS_OF_MONEY 8 4.15 5.66 3.77 70 XM_Evil_Numbers_Gen 7 6.04 16.98 3.30 71 TR_XM_SpammyWords4 7 3.77 5.66 3.30 72 LotsOfNums_01 7 3.77 5.66 3.30 73 DKIM_INVALID 7 4.15 7.55 3.30 74 HTML_MIME_NO_HTML_TAG 7 3.02 1.89 3.30 75 T_TooManySym_03 7 2.64 0.00 3.30 76 HTML_IMAGE_ONLY_16 7 2.64 0.00 3.30 77 BAYES_99 7 7.55 24.53 3.30 78 BAYES_999 6 6.79 22.64 2.83 79 MSGID_NOFQDN1 6 2.26 0.00 2.83 80 XM_Body_Dirty_Words 6 8.68 32.08 2.83 81 XM_B_SpammyTLD 6 3.40 5.66 2.83 82 TR_XM_UnparsRelay 6 5.66 16.98 2.83 83 BAYES_40 6 2.26 0.00 2.83 84 T_REMOTE_IMAGE 6 4.91 13.21 2.83 85 XMGappySubj_01 5 1.89 0.00 2.36 86 BAYES_05 5 2.26 1.89 2.36 87 TR_XM_SpammyWords5 5 3.40 7.55 2.36 88 RCVD_IN_IADB_LISTED 5 2.64 3.77 2.36 89 XM_UB50 5 4.53 13.21 2.36 90 XM_B_SpammyWords3 5 3.77 9.43 2.36 91 HTML_IMAGE_RATIO_02 5 3.40 7.55 2.36 92 XM_B_Phish_Phrases 5 2.26 1.89 2.36 93 XM_H_Long_From01 5 4.15 11.32 2.36 94 XM_PDF 5 2.26 1.89 2.36 95 BAYES_20 5 2.64 3.77 2.36 96 XM_GoogleGroups 4 2.26 3.77 1.89 97 RCVD_IN_IADB_SPF 4 2.26 3.77 1.89 98 MIME_HTML_MOSTLY 4 1.89 1.89 1.89 99 TR_Mismatch_TLD_01 4 1.89 1.89 1.89 100 TR_XM_SpammyRelay 4 5.28 18.87 1.89 101 RELAYCOUNTRY_AU 4 1.89 1.89 1.89 102 XM_ZIP 4 1.51 0.00 1.89 103 T_TooManySym_04 4 1.51 0.00 1.89 104 RCVD_IN_IADB_SENDERID 4 2.26 3.77 1.89 105 HTML_IMAGE_RATIO_06 4 2.26 3.77 1.89 106 RCVD_IN_IADB_VOUCHED 4 1.51 0.00 1.89 107 XM_DK_Undo_01 4 3.02 7.55 1.89 108 TR_XM_DK_SendGrid 3 1.13 0.00 1.42 109 RCVD_IN_IADB_DK 3 1.89 3.77 1.42 110 SUBJ_ALL_CAPS 3 1.13 0.00 1.42 111 XM_ZohoDesk1 3 1.13 0.00 1.42 112 BAYES_80 3 2.64 7.55 1.42 113 RELAYCOUNTRY_CN 3 1.89 3.77 1.42 114 XM_H_SpoofStaff4 3 1.13 0.00 1.42 115 T_XMDrugObfuBody_08 3 1.51 1.89 1.42 116 XM_ProductURIs 3 1.51 1.89 1.42 117 TR_XM_SpoofStaff 3 1.13 0.00 1.42 118 BAYES_95 3 1.51 1.89 1.42 119 XMSpoofStaff2 3 1.13 0.00 1.42 120 XM_B_DNDMA 3 1.13 0.00 1.42 121 TVD_SPACE_RATIO 3 1.13 0.00 1.42 122 SHOPIFY_IMG_NOT_RCVD_SFY 3 1.13 0.00 1.42 123 TR_XM_PSC1 3 1.13 0.00 1.42 124 TR_XM_DKIM_Undo 3 5.28 20.75 1.42 125 XMSubject_78 3 1.13 0.00 1.42 126 XM_SendGrid 3 1.13 0.00 1.42 127 T_OBFU_PDF_ATTACH 3 1.13 0.00 1.42 128 RELAYCOUNTRY_FR 2 0.75 0.00 0.94 129 RCVD_IN_MSPIKE_L3 2 0.75 0.00 0.94 130 XMSexyCombo_05 2 4.15 16.98 0.94 131 TR_XM_Spammywords 2 1.13 1.89 0.94 132 TooManyTo_005 2 0.75 0.00 0.94 133 TR_DCC_Bayes_99 2 2.64 9.43 0.94 134 TR_MSPIKEBAYES00 2 0.75 0.00 0.94 135 FROM_GOV_SPOOF 2 1.13 1.89 0.94 136 TR_XM_MSPIKECOMBO 2 0.75 0.00 0.94 137 RELAYCOUNTRY_GB 2 1.13 1.89 0.94 138 URI_NOVOWEL 2 0.75 0.00 0.94 139 XMSubMetaI_00 2 0.75 0.00 0.94 140 T_TooManySym_05 2 0.75 0.00 0.94 141 TR_Symld_Words 2 1.13 1.89 0.94 142 TM2_M_VERY_LONG_WORD 2 2.26 7.55 0.94 143 XMSubMetaSx_00 2 4.15 16.98 0.94 144 KHOP_HELO_FCRDNS 2 1.13 1.89 0.94 145 XMSolicitRefs_0 2 1.13 1.89 0.94 146 HTML_IMAGE_RATIO_08 2 1.51 3.77 0.94 147 HTTPS_HTTP_MISMATCH 2 0.75 0.00 0.94 148 XMLngstWrd_00 2 1.13 1.89 0.94 149 TR_BOTNET_NEGATE 2 1.13 1.89 0.94 150 RCVD_IN_VALIDITY_CERTIFIED 2 1.13 1.89 0.94 151 LongTLD 2 0.75 0.00 0.94 152 XM_H_PHPMailer 2 1.13 1.89 0.94 153 XMPhish14 2 1.89 5.66 0.94 154 RCVD_IN_VALIDITY_SAFE 2 1.13 1.89 0.94 155 MIME_CHARSET_FARAWAY 2 1.13 1.89 0.94 156 MPART_ALT_DIFF_COUNT 2 1.13 1.89 0.94 157 T_FILL_THIS_FORM_SHORT 2 0.75 0.00 0.94 158 TooManyTo_003 2 1.13 1.89 0.94 159 TooManyTo_002 2 1.13 1.89 0.94 160 XMBody_03 2 0.75 0.00 0.94 161 TooManyTo_004 2 1.13 1.89 0.94 162 TM2_M_URI_OPT_OUT 2 0.75 0.00 0.94 163 RCVD_IN_MSPIKE_BL 2 0.75 0.00 0.94 164 TR_XM_SpoofPhishAttach 2 0.75 0.00 0.94 165 XM_B_SEO 2 0.75 0.00 0.94 166 FROM_EXCESS_BASE64 2 0.75 0.00 0.94 167 NICE_REPLY_A 2 0.75 0.00 0.94 168 XM_S_SpammyWords 2 1.13 1.89 0.94 169 XM_CamelCaseFrm001 2 0.75 0.00 0.94 170 XMSubMetaSxObfu_03 1 0.75 1.89 0.47 171 RCVD_IN_RP_SAFE 1 0.38 0.00 0.47 172 NUMERIC_HTTP_ADDR 1 0.38 0.00 0.47 173 XMBody_17 1 0.38 0.00 0.47 174 XM_Dr_From 1 0.38 0.00 0.47 175 XM_Lotto 1 0.38 0.00 0.47 176 TR_XM_SEO4 1 0.38 0.00 0.47 177 XMSubNoVowel 1 0.75 1.89 0.47 178 TR_Sbj_FN_Bdy 1 0.38 0.00 0.47 179 TR_XM_COVIDMETA4 1 0.38 0.00 0.47 180 NO_RDNS_DOTCOM_HELO 1 0.38 0.00 0.47 181 MIME_HEADER_CTYPE_ONLY 1 0.38 0.00 0.47 182 XM_S_SubURI 1 0.38 0.00 0.47 183 TR_XM_COVIDMETA5 1 0.38 0.00 0.47 184 XMNoVowels 1 0.75 1.89 0.47 185 XMHTMLBadTable_001 1 0.38 0.00 0.47 186 FIN_FREE 1 1.51 5.66 0.47 187 RCVD_IN_RP_CERTIFIED 1 0.38 0.00 0.47 188 TM2_M_HAS_BSLASH_URI 1 0.38 0.00 0.47 189 XMHTML_After_End 1 0.38 0.00 0.47 190 URI_TRY_3LD 1 0.38 0.00 0.47 191 RCVD_IN_IADB_OPTIN 1 0.38 0.00 0.47 192 XM_B_SpammyWords4 1 1.89 7.55 0.47 193 T_HTML_ATTACH 1 0.38 0.00 0.47 194 XMSlimDrugH 1 0.38 0.00 0.47 195 XMLngstWrd_02 1 0.38 0.00 0.47 196 INVESTMENT_ADVICE 1 0.38 0.00 0.47 197 XMLngstWrd_04 1 0.38 0.00 0.47 198 IN_HORDE_ADDRESS_BOOK 1 0.38 0.00 0.47 199 XMLngstWrd_03 1 0.38 0.00 0.47 200 HTML_TAG_BALANCE_BODY 1 0.38 0.00 0.47 ----------------------------------------------------------------------