Email: 265 Autolearn: 0 AvgScore: 0.36 AvgScanTime: 1.84 sec Spam: 36 Autolearn: 0 AvgScore: 14.19 AvgScanTime: 2.29 sec Ham: 229 Autolearn: 0 AvgScore: -1.81 AvgScanTime: 1.77 sec Time Spent Running SA: 0.14 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 33 61.89 91.67 57.21 2 T_SCC_BODY_TEXT_LINE 27 80.38 75.00 81.22 3 DCC_CHECK_NEGATIVE 26 77.74 72.22 78.60 4 XM_DK_Pass 25 55.09 69.44 52.84 5 DKIM_SIGNED 25 56.23 69.44 54.15 6 DKIM_VALID 24 54.72 66.67 52.84 7 XM_B_Unicode 24 44.53 66.67 41.05 8 XM_B_SpammyWords 22 27.55 61.11 22.27 9 RELAYCOUNTRY_US 21 50.19 58.33 48.91 10 BAYES_50 18 66.42 50.00 69.00 11 RELAYCOUNTRY_META 17 14.72 47.22 9.61 12 DKIM_VALID_AU 15 38.87 41.67 38.43 13 T_KAM_HTML_FONT_INVALID 15 19.62 41.67 16.16 14 XM_B_Unicode3 15 24.15 41.67 21.40 15 MIME_HTML_ONLY 15 12.08 41.67 7.42 16 XMListUnsubscribeExists 14 32.08 38.89 31.00 17 XMSubLong 13 16.23 36.11 13.10 18 FVGT_m_MULTI_ODD 13 20.00 36.11 17.47 19 XM_B_SpammyWords2 11 9.43 30.56 6.11 20 RCVD_IN_MSPIKE_WL 10 25.66 27.78 25.33 21 DKIM_VALID_EF 10 31.70 27.78 32.31 22 DCC_CHECK 10 22.26 27.78 21.40 23 LOC_TINY_FONT_1 10 15.47 27.78 13.54 24 XM_Multi_Part_URI 9 10.57 25.00 8.30 25 XM_B_Unsub 9 15.47 25.00 13.97 26 XM_DK_Undo_02 9 6.04 25.00 3.06 27 TR_XM_BayesUnsub 9 13.58 25.00 11.79 28 UNTRUSTED_Relay 9 5.66 25.00 2.62 29 TR_XM_SpammyRelay 9 6.42 25.00 3.49 30 TR_XM_DKIM_Undo 8 3.40 22.22 0.44 31 T_TM2_M_HEADER_IN_MSG 8 18.87 22.22 18.34 32 XM_UncommonTLD01 7 8.30 19.44 6.55 33 RCVD_IN_MSPIKE_H2 7 14.72 19.44 13.97 34 BAYES_60 7 9.43 19.44 7.86 35 XM_Body_Dirty_Words 7 5.66 19.44 3.49 36 UNPARSEABLE_RELAY 7 12.08 19.44 10.92 37 HTML_FONT_LOW_CONTRAST 7 15.47 19.44 14.85 38 XM_UB50 6 3.40 16.67 1.31 39 TooManyTo_001 6 4.15 16.67 2.18 40 XM_B_SpammyWords3 6 2.64 16.67 0.44 41 BOTNET_IPINHOSTNAME 5 4.91 13.89 3.49 42 XM_SPF_SoftFail 5 2.64 13.89 0.87 43 XMSexyCombo_05 5 1.89 13.89 0.00 44 RCVD_IN_VALIDITY_RPBL 5 1.89 13.89 0.00 45 BOTNET 5 3.40 13.89 1.75 46 XM_B_Phish_Phrases 5 2.26 13.89 0.44 47 BAYES_99 5 2.26 13.89 0.44 48 TR_XM_NoHeaderRelay 5 2.26 13.89 0.44 49 RCVD_IN_MSPIKE_H3 5 11.32 13.89 10.92 50 RCVD_IN_MSPIKE_BL 4 1.51 11.11 0.00 51 TR_XM_UnparsRelay 4 2.26 11.11 0.87 52 FSL_BULK_SIG 4 13.96 11.11 14.41 53 TR_XM_MSPIKECOMBO 4 1.51 11.11 0.00 54 TR_XM_SpammyWords5 4 3.40 11.11 2.18 55 T_XMDrugObfuBody_14 4 1.51 11.11 0.00 56 XM_DIRTYINTL 4 2.64 11.11 1.31 57 LOTS_OF_MONEY 4 2.26 11.11 0.87 58 HTML_MIME_NO_HTML_TAG 4 2.26 11.11 0.87 59 TooManyTo_003 4 1.89 11.11 0.44 60 TooManyTo_004 4 1.89 11.11 0.44 61 TooManyTo_005 4 1.89 11.11 0.44 62 TooManyTo_002 4 1.89 11.11 0.44 63 XM_H_Long_From01 4 2.64 11.11 1.31 64 SpammyFromTLD_02 4 2.26 11.11 0.87 65 RELAYCOUNTRY_CA 4 2.64 11.11 1.31 66 TR_Symld_Words 3 2.64 8.33 1.75 67 XMStrtUSub 3 3.77 8.33 3.06 68 XM_Evil_Numbers_Gen 3 4.15 8.33 3.49 69 TR_XM_SpammyWords3 3 1.13 8.33 0.00 70 XMGappySubj_01 3 2.26 8.33 1.31 71 SUBJ_ALL_CAPS 3 2.64 8.33 1.75 72 TR_Mismatch_TLD_01 3 1.13 8.33 0.00 73 RCVD_IN_PSBL 3 1.13 8.33 0.00 74 RCVD_IN_MSPIKE_H5 3 11.32 8.33 11.79 75 BAYES_999 3 1.51 8.33 0.44 76 FROM_EXCESS_BASE64 3 1.89 8.33 0.87 77 BAYES_80 3 2.26 8.33 1.31 78 BAYES_95 3 3.02 8.33 2.18 79 RELAYCOUNTRY_IN 3 1.51 8.33 0.44 80 XMCapTrack 3 2.26 8.33 1.31 81 XMNumbers 3 6.04 8.33 5.68 82 SpammyFromTLD_01 3 1.13 8.33 0.00 83 RCVD_IN_BL_SPAMCOP_NET 3 1.89 8.33 0.87 84 MIME_HTML_MOSTLY 2 4.15 5.56 3.93 85 RCVD_IN_RP_RNBL 2 0.75 5.56 0.00 86 TR_BOTNET_NEGATE 2 1.13 5.56 0.44 87 TR_XM_RelayPhish 2 0.75 5.56 0.00 88 HTML_IMAGE_RATIO_04 2 3.77 5.56 3.49 89 TR_XM_InvalidRelay 2 0.75 5.56 0.00 90 XM_B_SpammyTLD 2 3.02 5.56 2.62 91 RCVD_IN_MSPIKE_H4 2 3.02 5.56 2.62 92 TR_DCC_Bayes_99 2 0.75 5.56 0.00 93 XM_OfRef6 2 1.13 5.56 0.44 94 RCVD_IN_MSPIKE_L3 2 0.75 5.56 0.00 95 RELAYCOUNTRY_RU 2 0.75 5.56 0.00 96 XM_H_Undi_Recip 2 0.75 5.56 0.00 97 XM_BadFromFormat 2 0.75 5.56 0.00 98 ALL_TRUSTED 2 37.36 5.56 42.36 99 TR_XM_PhishingBody 2 0.75 5.56 0.00 100 XM_B_DNDMA 2 0.75 5.56 0.00 101 TR_Mismatch_TLD_02 2 1.51 5.56 0.87 102 TR_XM_DK_Unsub 2 12.08 5.56 13.10 103 XM_ShortIntro_01 2 0.75 5.56 0.00 104 T_REMOTE_IMAGE 2 1.89 5.56 1.31 105 XM_UB60 2 1.13 5.56 0.44 106 PRICES_ARE_AFFORDABLE 2 0.75 5.56 0.00 107 RCVD_IN_MSPIKE_L4 2 0.75 5.56 0.00 108 TM2_M_VERY_LONG_WORD 2 2.26 5.56 1.75 109 RELAYCOUNTRY_AT 2 1.13 5.56 0.44 110 DEAR_FRIEND 2 0.75 5.56 0.00 111 XM_Body_Dirty_Words_01 1 0.38 2.78 0.00 112 XMPhish11 1 0.38 2.78 0.00 113 TR_XM_Base64_M1 1 0.38 2.78 0.00 114 HTTP_EXCESSIVE_ESCAPES 1 0.38 2.78 0.00 115 TR_XM_FormFill2 1 0.38 2.78 0.00 116 NOT_SPAM 1 0.38 2.78 0.00 117 XM_GoogleGroups2 1 0.38 2.78 0.00 118 XMSubMetaI_00 1 1.13 2.78 0.87 119 URIBL_BLACK 1 0.38 2.78 0.00 120 TR_XM_SpammyWords4 1 1.13 2.78 0.87 121 TR_Sbj_FN_Bdy 1 0.38 2.78 0.00 122 UNDISC_MONEY 1 0.38 2.78 0.00 123 XMSolicitRefs_0 1 0.38 2.78 0.00 124 XM_S_SketchInvoice 1 0.38 2.78 0.00 125 TR_XM_SpammyWords7 1 0.38 2.78 0.00 126 DEAR_BENEFICIARY 1 0.38 2.78 0.00 127 TR_XM_MaxSPIKE 1 0.38 2.78 0.00 128 TR_XM_MSPIKECOMBO2 1 0.38 2.78 0.00 129 SHORT_URI_5 1 0.38 2.78 0.00 130 LONG_JUNK_URI2 1 0.38 2.78 0.00 131 XM_HighProb1 1 0.38 2.78 0.00 132 TR_MetaPhish_Gmail 1 0.38 2.78 0.00 133 RELAYCOUNTRY_ES 1 0.38 2.78 0.00 134 XM_ProductURIs 1 0.38 2.78 0.00 135 T_Symld_Words_02 1 0.38 2.78 0.00 136 DKIM_INVALID 1 1.51 2.78 1.31 137 TR_XM_Undi_Recip6 1 0.38 2.78 0.00 138 SUBJ_ATTENTION 1 0.38 2.78 0.00 139 TR_XM_MaxWHORU 1 0.38 2.78 0.00 140 INVALID_DATE 1 0.38 2.78 0.00 141 NORMAL_HTTP_TO_IP 1 0.38 2.78 0.00 142 HTML_TAG_BALANCE_BODY 1 0.38 2.78 0.00 143 SCC_BODY_URI_ONLY 1 20.38 2.78 23.14 144 TR_XM_Base64_M2 1 0.38 2.78 0.00 145 BOUNCE_MESSAGE 1 29.81 2.78 34.06 146 URIBL_SBL_A 1 0.38 2.78 0.00 147 UNSUB_GOOG_FORM 1 0.38 2.78 0.00 148 URIBL_DBL_SPAM 1 0.38 2.78 0.00 149 NO_DNS_FOR_FROM 1 0.38 2.78 0.00 150 BOGUS_MIME_VERSION 1 0.38 2.78 0.00 151 RELAYCOUNTRY_PT 1 0.38 2.78 0.00 152 HTML_IMAGE_RATIO_02 1 2.64 2.78 2.62 153 RELAYCOUNTRY_DE 1 0.38 2.78 0.00 154 TR_XM_PHPForged 1 0.38 2.78 0.00 155 ADVANCE_FEE_3_NEW_MONEY 1 0.38 2.78 0.00 156 DRUG_ED_ONLINE 1 0.38 2.78 0.00 157 TR_XM_Undi_Recip5 1 0.38 2.78 0.00 158 TR_XM_PHPDW 1 0.38 2.78 0.00 159 HTML_IMAGE_RATIO_06 1 1.89 2.78 1.75 160 XM_H_PHPMailer 1 0.38 2.78 0.00 161 DIET_1 1 0.38 2.78 0.00 162 XM_GoogleGroups 1 1.13 2.78 0.87 163 RELAYCOUNTRY_KR 1 0.38 2.78 0.00 164 XM_UB80 1 0.38 2.78 0.00 165 HTML_IMAGE_RATIO_08 1 3.02 2.78 3.06 166 DKIM_ADSP_NXDOMAIN 1 0.38 2.78 0.00 167 NML_ADSP_CUSTOM_MED 1 0.38 2.78 0.00 168 HTML_IMAGE_ONLY_20 1 0.75 2.78 0.44 169 ANY_BOUNCE_MESSAGE 1 29.81 2.78 34.06 170 TR_XM_Base64_L2 1 0.38 2.78 0.00 171 FORGED_GMAIL_RCVD 1 0.38 2.78 0.00 172 BODY_EMPTY 1 0.38 2.78 0.00 173 MILLION_USD 1 0.38 2.78 0.00 174 RELAYCOUNTRY_BE 1 0.75 2.78 0.44 175 T_US_DOLLARS_3 1 0.38 2.78 0.00 176 MPART_ALT_DIFF_COUNT 1 0.75 2.78 0.44 177 INVALID_MSGID 1 2.26 2.78 2.18 178 TR_Caps_n_Bayes_99 1 0.38 2.78 0.00 179 XMSubMetaSx_00 1 2.26 2.78 2.18 180 XMBody_17 1 0.38 2.78 0.00 181 DRUGS_ERECTILE 1 0.38 2.78 0.00 182 XM_E_Blogspot 1 0.38 2.78 0.00 183 DKIM_ADSP_CUSTOM_MED 1 0.38 2.78 0.00 184 XM_H_Long_From02 1 0.75 2.78 0.44 185 NUMERIC_HTTP_ADDR 1 0.38 2.78 0.00 186 SHORTENED_URL_HREF 1 0.38 2.78 0.00 187 LONG_JUNK_URI3 1 1.89 2.78 1.75 188 XMPhish08 1 0.38 2.78 0.00 189 HK_SCAM 1 0.38 2.78 0.00 190 TR_XM_Base64_L1 1 0.38 2.78 0.00 191 XMSubMetaSSx_00 1 0.38 2.78 0.00 192 XM_URI_RBL 1 1.13 2.78 0.87 193 XM_H_PHPOS 1 0.38 2.78 0.00 194 XMReplyNow 1 0.38 2.78 0.00 195 T_TVD_MIME_NO_HEADERS 1 0.38 2.78 0.00 196 RELAYCOUNTRY_ZA 1 0.38 2.78 0.00 197 XM_DK_Undo_01 1 1.89 2.78 1.75 198 IMPOTENCE 1 0.38 2.78 0.00 199 XM_CamelCaseFrm001 1 0.38 2.78 0.00 200 XM_SendGrid 1 1.89 2.78 1.75 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 186 80.38 75.00 81.22 2 DCC_CHECK_NEGATIVE 180 77.74 72.22 78.60 3 BAYES_50 158 66.42 50.00 69.00 4 HTML_MESSAGE 131 61.89 91.67 57.21 5 DKIM_SIGNED 124 56.23 69.44 54.15 6 XM_DK_Pass 121 55.09 69.44 52.84 7 DKIM_VALID 121 54.72 66.67 52.84 8 RELAYCOUNTRY_US 112 50.19 58.33 48.91 9 ALL_TRUSTED 97 37.36 5.56 42.36 10 XM_B_Unicode 94 44.53 66.67 41.05 11 DKIM_VALID_AU 88 38.87 41.67 38.43 12 ANY_BOUNCE_MESSAGE 78 29.81 2.78 34.06 13 BOUNCE_MESSAGE 78 29.81 2.78 34.06 14 DKIM_VALID_EF 74 31.70 27.78 32.31 15 XMListUnsubscribeExists 71 32.08 38.89 31.00 16 RCVD_IN_MSPIKE_WL 58 25.66 27.78 25.33 17 SCC_BODY_URI_ONLY 53 20.38 2.78 23.14 18 XM_B_SpammyWords 51 27.55 61.11 22.27 19 XM_B_Unicode3 49 24.15 41.67 21.40 20 DCC_CHECK 49 22.26 27.78 21.40 21 T_TM2_M_HEADER_IN_MSG 42 18.87 22.22 18.34 22 FVGT_m_MULTI_ODD 40 20.00 36.11 17.47 23 T_KAM_HTML_FONT_INVALID 37 19.62 41.67 16.16 24 HTML_FONT_LOW_CONTRAST 34 15.47 19.44 14.85 25 FSL_BULK_SIG 33 13.96 11.11 14.41 26 XM_B_Unsub 32 15.47 25.00 13.97 27 RCVD_IN_MSPIKE_H2 32 14.72 19.44 13.97 28 LOC_TINY_FONT_1 31 15.47 27.78 13.54 29 XMSubLong 30 16.23 36.11 13.10 30 TR_XM_DK_Unsub 30 12.08 5.56 13.10 31 XM_DKIMWhitelistDomains 28 10.57 0.00 12.23 32 TR_XM_BayesUnsub 27 13.58 25.00 11.79 33 RCVD_IN_MSPIKE_H5 27 11.32 8.33 11.79 34 RCVD_IN_MSPIKE_H3 25 11.32 13.89 10.92 35 UNPARSEABLE_RELAY 25 12.08 19.44 10.92 36 RELAYCOUNTRY_META 22 14.72 47.22 9.61 37 BAYES_00 21 7.92 0.00 9.17 38 XM_B_Unsub2 21 7.92 0.00 9.17 39 XM_Multi_Part_URI 19 10.57 25.00 8.30 40 BAYES_60 18 9.43 19.44 7.86 41 TR_XM_DK_Bayes1 17 6.42 0.00 7.42 42 MIME_HTML_ONLY 17 12.08 41.67 7.42 43 TR_XM_DK_Bayes 17 6.42 0.00 7.42 44 BAYES_20 15 5.66 0.00 6.55 45 XM_UncommonTLD01 15 8.30 19.44 6.55 46 XM_B_SpammyWords2 14 9.43 30.56 6.11 47 XMNumbers 13 6.04 8.33 5.68 48 T_XMDrugObfuBody_08 12 4.53 0.00 5.24 49 TR_XM_DK_Bayes2 12 4.53 0.00 5.24 50 IN_ZIMBRA_NJ_WHITELIST 12 4.53 0.00 5.24 51 T_TooManySym_01 10 3.77 0.00 4.37 52 MIME_QP_LONG_LINE 9 3.40 0.00 3.93 53 MIME_HTML_MOSTLY 9 4.15 5.56 3.93 54 TR_XM_SpammyRelay 8 6.42 25.00 3.49 55 HTML_IMAGE_RATIO_04 8 3.77 5.56 3.49 56 XM_Body_Dirty_Words 8 5.66 19.44 3.49 57 LotsOfNums_01 8 3.02 0.00 3.49 58 TO_MALFORMED 8 3.02 0.00 3.49 59 BOTNET_IPINHOSTNAME 8 4.91 13.89 3.49 60 USER_IN_DEF_DKIM_WL 8 3.02 0.00 3.49 61 XM_Evil_Numbers_Gen 8 4.15 8.33 3.49 62 HTML_IMAGE_RATIO_08 7 3.02 2.78 3.06 63 XM_DK_Undo_02 7 6.04 25.00 3.06 64 XMStrtUSub 7 3.77 8.33 3.06 65 UNTRUSTED_Relay 6 5.66 25.00 2.62 66 XM_B_SpammyTLD 6 3.02 5.56 2.62 67 RCVD_IN_MSPIKE_H4 6 3.02 5.56 2.62 68 RELAYCOUNTRY_AU 6 2.26 0.00 2.62 69 HTML_IMAGE_RATIO_02 6 2.64 2.78 2.62 70 T_TooManySym_02 6 2.26 0.00 2.62 71 MAILING_LIST_MULTI 6 2.26 0.00 2.62 72 INVALID_MSGID 5 2.26 2.78 2.18 73 HTTPS_HTTP_MISMATCH 5 1.89 0.00 2.18 74 BAYES_95 5 3.02 8.33 2.18 75 XMSubMetaSx_00 5 2.26 2.78 2.18 76 RCVD_IN_VALIDITY_CERTIFIED 5 1.89 0.00 2.18 77 BAYES_05 5 1.89 0.00 2.18 78 TR_XM_SpammyWords5 5 3.40 11.11 2.18 79 RELAYCOUNTRY_GB 5 1.89 0.00 2.18 80 TooManyTo_001 5 4.15 16.67 2.18 81 RCVD_IN_VALIDITY_SAFE 5 1.89 0.00 2.18 82 TM2_M_VERY_LONG_WORD 4 2.26 5.56 1.75 83 LONG_JUNK_URI3 4 1.89 2.78 1.75 84 XM_DK_Undo_01 4 1.89 2.78 1.75 85 XM_SendGrid 4 1.89 2.78 1.75 86 TR_XM_DK_SendGrid 4 1.51 0.00 1.75 87 BOTNET 4 3.40 13.89 1.75 88 MPART_ALT_DIFF 4 1.51 0.00 1.75 89 HTML_IMAGE_RATIO_06 4 1.89 2.78 1.75 90 HK_RANDOM_ENVFROM 4 1.51 0.00 1.75 91 SUBJ_ALL_CAPS 4 2.64 8.33 1.75 92 XM_ZIP 4 1.51 0.00 1.75 93 TR_Symld_Words 4 2.64 8.33 1.75 94 XM_H_Long_From01 3 2.64 11.11 1.31 95 XMSpoofStaff2 3 1.13 0.00 1.31 96 XMCapTrack 3 2.26 8.33 1.31 97 T_XMHurry_00 3 1.13 0.00 1.31 98 BAYES_80 3 2.26 8.33 1.31 99 T_REMOTE_IMAGE 3 1.89 5.56 1.31 100 TR_XM_PSC1 3 1.13 0.00 1.31 101 MSGID_NOFQDN1 3 1.13 0.00 1.31 102 TVD_SPACE_RATIO 3 1.13 0.00 1.31 103 RELAYCOUNTRY_CA 3 2.64 11.11 1.31 104 BAYES_40 3 1.13 0.00 1.31 105 MISSING_HEADERS 3 1.13 0.00 1.31 106 TR_XM_SpoofStaff 3 1.13 0.00 1.31 107 XM_Body_Obfu01 3 1.13 0.00 1.31 108 IN_HORDE_ADDRESS_BOOK 3 1.13 0.00 1.31 109 HK_RANDOM_FROM 3 1.13 0.00 1.31 110 XM_H_SpoofStaff4 3 1.13 0.00 1.31 111 XMGappySubj_01 3 2.26 8.33 1.31 112 XM_DIRTYINTL 3 2.64 11.11 1.31 113 XM_Ancestry_Forge 3 1.13 0.00 1.31 114 XM_UB50 3 3.40 16.67 1.31 115 MIME_CHARSET_FARAWAY 3 1.13 0.00 1.31 116 DKIM_INVALID 3 1.51 2.78 1.31 117 TM2_M_URI_OPT_OUT 3 1.13 0.00 1.31 118 XMSexyCombo_01 2 0.75 0.00 0.87 119 RCVD_IN_BL_SPAMCOP_NET 2 1.89 8.33 0.87 120 TR_XM_SpoofPhishAttach 2 0.75 0.00 0.87 121 SpammyFromTLD_02 2 2.26 11.11 0.87 122 XM_URI_RBL 2 1.13 2.78 0.87 123 HTML_IMAGE_ONLY_08 2 0.75 0.00 0.87 124 XMBSHREFv2 2 0.75 0.00 0.87 125 XM_GoogleGroups 2 1.13 2.78 0.87 126 HTML_MIME_NO_HTML_TAG 2 2.26 11.11 0.87 127 LOTS_OF_MONEY 2 2.26 11.11 0.87 128 TR_XM_SB_Phish 2 0.75 0.00 0.87 129 RELAYCOUNTRY_FR 2 0.75 0.00 0.87 130 FROM_EXCESS_BASE64 2 1.89 8.33 0.87 131 XM_H_Trusted_IP 2 0.75 0.00 0.87 132 LongTLD 2 0.75 0.00 0.87 133 TR_Mismatch_TLD_02 2 1.51 5.56 0.87 134 HTML_FONT_TINY_NORDNS 2 0.75 0.00 0.87 135 XMStockSpam_06 2 0.75 0.00 0.87 136 XMSubPhish11 2 0.75 0.00 0.87 137 XM_PDF 2 0.75 0.00 0.87 138 TVD_PH_BODY_META 2 0.75 0.00 0.87 139 TR_XM_SpammyWords4 2 1.13 2.78 0.87 140 MIME_HTML_ONLY_MULTI 2 0.75 0.00 0.87 141 XMNoVowels 2 0.75 0.00 0.87 142 TR_XM_UnparsRelay 2 2.26 11.11 0.87 143 XMSubMetaI_00 2 1.13 2.78 0.87 144 TVD_RCVD_IP 2 0.75 0.00 0.87 145 XM_ZohoDesk1 2 0.75 0.00 0.87 146 XM_SPF_SoftFail 2 2.64 13.89 0.87 147 RCVD_IN_IADB_DK 1 0.38 0.00 0.44 148 RELAYCOUNTRY_IN 1 1.51 8.33 0.44 149 FROM_GOV_DKIM_AU 1 0.38 0.00 0.44 150 TR_XM_NoHeaderRelay 1 2.26 13.89 0.44 151 RELAYCOUNTRY_AT 1 1.13 5.56 0.44 152 XM_H_Long_From02 1 0.75 2.78 0.44 153 XM_RXBody 1 0.38 0.00 0.44 154 XMLngstWrd_02 1 0.38 0.00 0.44 155 TooManyTo_002 1 1.89 11.11 0.44 156 MPART_ALT_DIFF_COUNT 1 0.75 2.78 0.44 157 XMBdyGiftCard01 1 0.38 0.00 0.44 158 XMBrknScrpt_02 1 0.38 0.00 0.44 159 XM_UB60 1 1.13 5.56 0.44 160 URI_PHISH 1 0.38 0.00 0.44 161 XM_S_SubURI 1 0.38 0.00 0.44 162 USER_IN_WELCOMELIST 1 0.38 0.00 0.44 163 RELAYCOUNTRY_IE 1 0.38 0.00 0.44 164 XMHTML_After_End 1 0.38 0.00 0.44 165 T_TVD_MIME_EPI 1 0.38 0.00 0.44 166 XMSubject_48 1 0.38 0.00 0.44 167 REPLYTO_WITHOUT_TO_CC 1 0.38 0.00 0.44 168 XMSubject_60 1 0.38 0.00 0.44 169 TR_XM_SPAMCOP 1 0.38 0.00 0.44 170 CTE_8BIT_MISMATCH 1 0.38 0.00 0.44 171 XMDiploma_00 1 0.38 0.00 0.44 172 TooManyTo_003 1 1.89 11.11 0.44 173 XMLngstWrd_03 1 0.38 0.00 0.44 174 XM_UB95 1 0.38 0.00 0.44 175 RCVD_IN_IADB_LISTED 1 0.38 0.00 0.44 176 XMDateMe_00 1 0.38 0.00 0.44 177 RELAYCOUNTRY_PL 1 0.38 0.00 0.44 178 BAYES_999 1 1.51 8.33 0.44 179 BAYES_99 1 2.26 13.89 0.44 180 RELAYCOUNTRY_BE 1 0.75 2.78 0.44 181 USER_IN_WHITELIST 1 0.38 0.00 0.44 182 XMLngstWrd_04 1 0.38 0.00 0.44 183 XM_B_Phish_Phrases 1 2.26 13.89 0.44 184 TooManyTo_004 1 1.89 11.11 0.44 185 HTML_IMAGE_ONLY_20 1 0.75 2.78 0.44 186 TooManyTo_005 1 1.89 11.11 0.44 187 RELAYCOUNTRY_JP 1 0.38 0.00 0.44 188 XMLngstWrd_00 1 0.38 0.00 0.44 189 XMBody_78 1 0.38 0.00 0.44 190 XMEmptySub 1 0.38 0.00 0.44 191 T_TooManySym_03 1 0.38 0.00 0.44 192 XM_OfRef6 1 1.13 5.56 0.44 193 KHOP_HELO_FCRDNS 1 0.38 0.00 0.44 194 XMSubNoVowel 1 0.38 0.00 0.44 195 XM_B_SpammyWords3 1 2.64 16.67 0.44 196 RCVD_IN_IADB_SPF 1 0.38 0.00 0.44 197 FORGED_OUTLOOK_TAGS 1 0.38 0.00 0.44 198 XMLngstWrd_01 1 0.38 0.00 0.44 199 LONG_JUNK_URI 1 0.38 0.00 0.44 200 XM_UCStrings02 1 0.38 0.00 0.44 ----------------------------------------------------------------------