Email: 282 Autolearn: 0 AvgScore: 1.04 AvgScanTime: 2.71 sec Spam: 37 Autolearn: 0 AvgScore: 11.27 AvgScanTime: 3.28 sec Ham: 245 Autolearn: 0 AvgScore: -0.51 AvgScanTime: 2.63 sec Time Spent Running SA: 0.21 hours Time Spent Processing Spam: 0.03 hours Time Spent Processing Ham: 0.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 34 69.86 91.89 66.53 2 T_SCC_BODY_TEXT_LINE 31 78.72 83.78 77.96 3 XM_B_Unicode 31 60.64 83.78 57.14 4 DCC_CHECK_NEGATIVE 28 91.13 75.68 93.47 5 RELAYCOUNTRY_US 26 43.62 70.27 39.59 6 DKIM_SIGNED 25 38.65 67.57 34.29 7 XM_DK_Pass 25 38.30 67.57 33.88 8 DKIM_VALID 24 37.59 64.86 33.47 9 BAYES_50 22 50.00 59.46 48.57 10 XM_B_SpammyWords 20 22.34 54.05 17.55 11 XM_B_Unicode3 18 41.49 48.65 40.41 12 XMListUnsubscribeExists 15 21.28 40.54 18.37 13 FVGT_m_MULTI_ODD 15 27.30 40.54 25.31 14 DKIM_VALID_AU 15 28.01 40.54 26.12 15 XMSubLong 11 23.05 29.73 22.04 16 XM_SPF_SoftFail 10 9.22 27.03 6.53 17 RCVD_IN_MSPIKE_H2 10 10.64 27.03 8.16 18 HTML_FONT_LOW_CONTRAST 10 18.09 27.03 16.73 19 DKIM_VALID_EF 9 20.21 24.32 19.59 20 UNPARSEABLE_RELAY 9 7.09 24.32 4.49 21 RELAYCOUNTRY_META 9 7.45 24.32 4.90 22 LOC_TINY_FONT_1 9 17.02 24.32 15.92 23 DCC_CHECK 9 8.87 24.32 6.53 24 XM_Body_Dirty_Words 9 9.93 24.32 7.76 25 XM_B_SpammyWords2 8 7.09 21.62 4.90 26 XM_DK_Undo_02 7 4.96 18.92 2.86 27 TooManyTo_001 7 7.80 18.92 6.12 28 XM_UncommonTLD01 7 6.38 18.92 4.49 29 LOTS_OF_MONEY 6 2.48 16.22 0.41 30 XM_H_Long_From01 6 4.26 16.22 2.45 31 XM_Multi_Part_URI 6 10.64 16.22 9.80 32 UNTRUSTED_Relay 5 3.55 13.51 2.04 33 FSL_BULK_SIG 5 5.32 13.51 4.08 34 ALL_TRUSTED 5 50.35 13.51 55.92 35 BAYES_95 5 3.19 13.51 1.63 36 RCVD_IN_MSPIKE_H3 5 6.74 13.51 5.71 37 TR_XM_SpammyWords4 5 2.13 13.51 0.41 38 RCVD_IN_MSPIKE_WL 5 14.89 13.51 15.10 39 T_KAM_HTML_FONT_INVALID 5 8.51 13.51 7.76 40 XM_B_Unsub 5 4.61 13.51 3.27 41 XM_DK_Undo_01 5 3.90 13.51 2.45 42 TR_XM_BayesUnsub 5 4.61 13.51 3.27 43 BAYES_99 4 24.82 10.81 26.94 44 BOTNET_IPINHOSTNAME 4 3.90 10.81 2.86 45 TR_XM_SpammyRelay 4 3.19 10.81 2.04 46 XM_H_Undi_Recip 4 1.77 10.81 0.41 47 DKIM_ADSP_CUSTOM_MED 4 1.77 10.81 0.41 48 TR_XM_UnparsRelay 4 1.77 10.81 0.41 49 TM2_M_URI_OPT_OUT 4 1.42 10.81 0.00 50 BAYES_80 4 2.13 10.81 0.82 51 NML_ADSP_CUSTOM_MED 4 1.77 10.81 0.41 52 BOTNET 4 3.19 10.81 2.04 53 XMStockSpam_06 3 1.42 8.11 0.41 54 XM_UB50 3 2.48 8.11 1.63 55 XM_Evil_Numbers_Gen 3 2.48 8.11 1.63 56 MIME_HTML_ONLY 3 9.22 8.11 9.39 57 SHORT_URI_3 3 3.90 8.11 3.27 58 XM_B_SpammyTLD 3 4.26 8.11 3.67 59 XMDiploma_00 3 1.06 8.11 0.00 60 HTML_EMBEDS 3 1.06 8.11 0.00 61 TR_XM_DK_Unsub 3 7.45 8.11 7.35 62 TR_XM_DKIM_Undo 3 2.84 8.11 2.04 63 XMNumbers 3 3.90 8.11 3.27 64 MAILING_LIST_MULTI 3 1.42 8.11 0.41 65 XM_B_Investor 3 2.13 8.11 1.22 66 XM_CamelCaseFrm001 3 1.06 8.11 0.00 67 BODY_ENHANCEMENT 3 1.06 8.11 0.00 68 XM_Body_Dirty_Words_01 3 1.42 8.11 0.41 69 T_TM2_M_HEADER_IN_MSG 3 15.96 8.11 17.14 70 T_XMDrugObfuBody_14 2 1.42 5.41 0.82 71 TR_Mismatch_TLD_02 2 0.71 5.41 0.00 72 TR_Sbj_FN_Bdy 2 1.06 5.41 0.41 73 LotsOfNums_01 2 1.42 5.41 0.82 74 TR_XM_Undi_Recip6 2 0.71 5.41 0.00 75 RCVD_IN_RP_RNBL 2 0.71 5.41 0.00 76 XMSubNoVowel 2 1.06 5.41 0.41 77 FORGED_GMAIL_RCVD 2 0.71 5.41 0.00 78 TR_Symld_Words 2 1.77 5.41 1.22 79 TR_XM_MSPIKECOMBO 2 0.71 5.41 0.00 80 TR_XM_PhishingBody 2 1.42 5.41 0.82 81 TooManyTo_003 2 0.71 5.41 0.00 82 T_REMOTE_IMAGE 2 3.19 5.41 2.86 83 RCVD_IN_MSPIKE_BL 2 0.71 5.41 0.00 84 XM_GoogleGroups 2 1.06 5.41 0.41 85 TR_XM_SpammyWords5 2 0.71 5.41 0.00 86 KHOP_HELO_FCRDNS 2 1.42 5.41 0.82 87 RELAYCOUNTRY_IE 2 0.71 5.41 0.00 88 SHOPIFY_IMG_NOT_RCVD_SFY 2 1.77 5.41 1.22 89 TR_XM_PHPForged 2 1.06 5.41 0.41 90 XMSubMetaSx_00 2 3.55 5.41 3.27 91 SpammyFromTLD_02 2 1.06 5.41 0.41 92 XMSubMetaSSx_00 2 1.06 5.41 0.41 93 TR_XM_FormFill2 2 1.06 5.41 0.41 94 TooManyTo_002 2 0.71 5.41 0.00 95 TooManyTo_004 2 0.71 5.41 0.00 96 TR_XM_NoHeaderRelay 2 0.71 5.41 0.00 97 TR_XM_InvalidRelay 2 0.71 5.41 0.00 98 XM_H_PHPOS 2 1.06 5.41 0.41 99 TR_Mismatch_TLD_01 2 0.71 5.41 0.00 100 XM_E_Blogspot 2 1.06 5.41 0.41 101 TR_MRelay_UG 2 0.71 5.41 0.00 102 TR_XM_PHPDW 2 1.06 5.41 0.41 103 HTML_IMAGE_RATIO_02 2 2.48 5.41 2.04 104 SpammyFromTLD_01 2 0.71 5.41 0.00 105 XMSubLongNoVowel 2 0.71 5.41 0.00 106 FORGED_MUA_OUTLOOK 1 0.35 2.70 0.00 107 XM_S_SpammyWords 1 0.35 2.70 0.00 108 HTTP_EXCESSIVE_ESCAPES 1 0.35 2.70 0.00 109 IMPOTENCE 1 0.35 2.70 0.00 110 XM_B_SpammyTLD2 1 0.35 2.70 0.00 111 TO_EQ_FM_DOM_HTML_ONLY 1 0.35 2.70 0.00 112 FROM_MISSP_MSFT 1 0.35 2.70 0.00 113 RELAYCOUNTRY_CN 1 0.35 2.70 0.00 114 XM_UB95 1 0.35 2.70 0.00 115 TR_BOTNET_NEGATE 1 0.71 2.70 0.41 116 T_XMDrugObfuBody_00 1 0.35 2.70 0.00 117 RELAYCOUNTRY_DE 1 0.71 2.70 0.41 118 XMEmptySub 1 0.35 2.70 0.00 119 BAYES_60 1 5.32 2.70 5.71 120 RELAYCOUNTRY_CA 1 0.35 2.70 0.00 121 XMStrtUSub 1 1.06 2.70 0.82 122 FSL_CTYPE_WIN1251 1 0.35 2.70 0.00 123 RELAYCOUNTRY_RU 1 0.35 2.70 0.00 124 RDNS_DYNAMIC 1 0.35 2.70 0.00 125 XMPhish30 1 0.35 2.70 0.00 126 DKIM_INVALID 1 1.06 2.70 0.82 127 T_TooManySym_01 1 2.48 2.70 2.45 128 CK_HELO_GENERIC 1 0.35 2.70 0.00 129 NO_DNS_FOR_FROM 1 0.35 2.70 0.00 130 OBFU_TEXT_ATTACH 1 0.35 2.70 0.00 131 MIME_QP_LONG_LINE 1 2.13 2.70 2.04 132 TR_XM_Undi_Recip14 1 0.35 2.70 0.00 133 FROM_SUSPICIOUS_NTLD 1 0.35 2.70 0.00 134 RELAYCOUNTRY_NL 1 1.06 2.70 0.82 135 XM_DIRTYINTL 1 1.06 2.70 0.82 136 TM2_M_OBFU_COMMENT 1 0.35 2.70 0.00 137 RELAYCOUNTRY_IT 1 0.35 2.70 0.00 138 PDS_PHPEXP_BOT 1 0.35 2.70 0.00 139 NOT_SPAM 1 0.35 2.70 0.00 140 T_PDS_X_PHP_WP_EXP 1 0.35 2.70 0.00 141 MPART_ALT_DIFF 1 1.42 2.70 1.22 142 TR_XM_SPAMCOP 1 0.35 2.70 0.00 143 FROM_MISSP_XPRIO 1 0.35 2.70 0.00 144 MIME_HTML_MOSTLY 1 3.19 2.70 3.27 145 TR_XM_Spammywords 1 0.35 2.70 0.00 146 T_TooManySym_02 1 2.13 2.70 2.04 147 GMD_PDF_SQUARE 1 0.35 2.70 0.00 148 MISSING_HEADERS 1 0.35 2.70 0.00 149 TR_XM_SpoofPhishAttach 1 0.35 2.70 0.00 150 XMReplyNow 1 0.35 2.70 0.00 151 RCVD_IN_BL_SPAMCOP_NET 1 0.35 2.70 0.00 152 TR_XM_SpammyWords3 1 0.35 2.70 0.00 153 FROM_GOV_SPOOF 1 0.71 2.70 0.41 154 XM_UB80 1 0.35 2.70 0.00 155 XM_URI_RBL 1 0.71 2.70 0.41 156 T_MONEY_PERCENT 1 0.35 2.70 0.00 157 PDS_RDNS_DYNAMIC_FP 1 0.35 2.70 0.00 158 XM_OfRef7 1 0.35 2.70 0.00 159 TR_XM_MaxWHORU 1 0.35 2.70 0.00 160 SUBJ_OBFU_PUNCT_FEW 1 0.35 2.70 0.00 161 XM_B_SpammyWords3 1 1.06 2.70 0.82 162 BOTNET_NORDNS 1 0.35 2.70 0.00 163 XM_OfRef6 1 0.35 2.70 0.00 164 TM2_M_VERY_LONG_WORD 1 1.06 2.70 0.82 165 XMSexyCombo_05 1 1.77 2.70 1.63 166 XMClaimOffer 1 0.35 2.70 0.00 167 HTML_FONT_SIZE_LARGE 1 0.35 2.70 0.00 168 FAKE_REPLY_C 1 0.35 2.70 0.00 169 XMPhish08 1 0.35 2.70 0.00 170 RELAYCOUNTRY_GB 1 1.77 2.70 1.63 171 RELAYCOUNTRY_CH 1 0.35 2.70 0.00 172 REPLYTO_WITHOUT_TO_CC 1 0.35 2.70 0.00 173 TooManyTo_005 1 0.35 2.70 0.00 174 HTML_IMAGE_RATIO_06 1 0.71 2.70 0.41 175 XM_PDF 1 0.71 2.70 0.41 176 RCVD_IN_MSPIKE_L3 1 0.35 2.70 0.00 177 XMPhish14 1 0.71 2.70 0.41 178 MIME_CHARSET_FARAWAY 1 0.71 2.70 0.41 179 XMPhishDuo 1 0.35 2.70 0.00 180 RELAYCOUNTRY_IN 1 0.35 2.70 0.00 181 BAYES_00 1 6.03 2.70 6.53 182 LongTLD 1 0.35 2.70 0.00 183 HTML_IMAGE_RATIO_04 1 5.32 2.70 5.71 184 AXB_XMAILER_MIMEOLE_OL_1ECD5 1 0.35 2.70 0.00 185 UNSUB_GOOG_FORM 1 0.35 2.70 0.00 186 RCVD_IN_MSPIKE_L4 1 0.35 2.70 0.00 187 TR_LOTS_OF_MONEY2 1 0.35 2.70 0.00 188 T_XMHurry_00 1 0.71 2.70 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 229 91.13 75.68 93.47 2 T_SCC_BODY_TEXT_LINE 191 78.72 83.78 77.96 3 HTML_MESSAGE 163 69.86 91.89 66.53 4 XM_B_Unicode 140 60.64 83.78 57.14 5 ALL_TRUSTED 137 50.35 13.51 55.92 6 BAYES_50 119 50.00 59.46 48.57 7 BOUNCE_MESSAGE 115 40.78 0.00 46.94 8 ANY_BOUNCE_MESSAGE 115 40.78 0.00 46.94 9 XM_B_Unicode3 99 41.49 48.65 40.41 10 RELAYCOUNTRY_US 97 43.62 70.27 39.59 11 DKIM_SIGNED 84 38.65 67.57 34.29 12 XM_DK_Pass 83 38.30 67.57 33.88 13 DKIM_VALID 82 37.59 64.86 33.47 14 BAYES_99 66 24.82 10.81 26.94 15 BAYES_999 65 23.05 0.00 26.53 16 DKIM_VALID_AU 64 28.01 40.54 26.12 17 FVGT_m_MULTI_ODD 62 27.30 40.54 25.31 18 XMSubLong 54 23.05 29.73 22.04 19 DKIM_VALID_EF 48 20.21 24.32 19.59 20 XMListUnsubscribeExists 45 21.28 40.54 18.37 21 XM_B_SpammyWords 43 22.34 54.05 17.55 22 T_TM2_M_HEADER_IN_MSG 42 15.96 8.11 17.14 23 HTML_FONT_LOW_CONTRAST 41 18.09 27.03 16.73 24 LOC_TINY_FONT_1 39 17.02 24.32 15.92 25 RCVD_IN_MSPIKE_WL 37 14.89 13.51 15.10 26 T_XMDrugObfuBody_08 35 12.41 0.00 14.29 27 SCC_BODY_URI_ONLY 25 8.87 0.00 10.20 28 XM_Multi_Part_URI 24 10.64 16.22 9.80 29 MIME_HTML_ONLY 23 9.22 8.11 9.39 30 RCVD_IN_MSPIKE_H2 20 10.64 27.03 8.16 31 T_KAM_HTML_FONT_INVALID 19 8.51 13.51 7.76 32 XM_Body_Dirty_Words 19 9.93 24.32 7.76 33 TR_XM_DK_Unsub 18 7.45 8.11 7.35 34 BAYES_20 17 6.03 0.00 6.94 35 XMGappySubj_01 16 5.67 0.00 6.53 36 XM_SPF_SoftFail 16 9.22 27.03 6.53 37 XMGappySubj_02 16 5.67 0.00 6.53 38 RCVD_IN_MSPIKE_H5 16 5.67 0.00 6.53 39 BAYES_00 16 6.03 2.70 6.53 40 DCC_CHECK 16 8.87 24.32 6.53 41 TooManyTo_001 15 7.80 18.92 6.12 42 XMLngstWrd_00 15 5.32 0.00 6.12 43 TR_XM_DK_Bayes1 14 4.96 0.00 5.71 44 BAYES_60 14 5.32 2.70 5.71 45 TR_XM_DK_Bayes2 14 4.96 0.00 5.71 46 RCVD_IN_MSPIKE_H3 14 6.74 13.51 5.71 47 TR_XM_DK_Bayes 14 4.96 0.00 5.71 48 HTML_IMAGE_RATIO_04 14 5.32 2.70 5.71 49 XM_B_SpammyWords2 12 7.09 21.62 4.90 50 RELAYCOUNTRY_META 12 7.45 24.32 4.90 51 UNPARSEABLE_RELAY 11 7.09 24.32 4.49 52 XM_UncommonTLD01 11 6.38 18.92 4.49 53 FSL_BULK_SIG 10 5.32 13.51 4.08 54 IN_ZIMBRA_NJ_WHITELIST 10 3.55 0.00 4.08 55 HTML_IMAGE_ONLY_32 9 3.19 0.00 3.67 56 XMLngstWrd_01 9 3.19 0.00 3.67 57 XM_B_SpammyTLD 9 4.26 8.11 3.67 58 SHORT_URI_3 8 3.90 8.11 3.27 59 MIME_HTML_MOSTLY 8 3.19 2.70 3.27 60 XMLngstWrd_02 8 2.84 0.00 3.27 61 XMNumbers 8 3.90 8.11 3.27 62 XM_B_Unsub 8 4.61 13.51 3.27 63 XMSubMetaSx_00 8 3.55 5.41 3.27 64 XMWhlSbjSex 8 2.84 0.00 3.27 65 TR_XM_BayesUnsub 8 4.61 13.51 3.27 66 XM_DK_Undo_02 7 4.96 18.92 2.86 67 BOTNET_IPINHOSTNAME 7 3.90 10.81 2.86 68 T_REMOTE_IMAGE 7 3.19 5.41 2.86 69 INVALID_MSGID 7 2.48 0.00 2.86 70 RCVD_IN_MSPIKE_H4 7 2.48 0.00 2.86 71 XM_DKIMWhitelistDomains 7 2.48 0.00 2.86 72 HTML_MIME_NO_HTML_TAG 6 2.13 0.00 2.45 73 T_TooManySym_01 6 2.48 2.70 2.45 74 IN_HORDE_ADDRESS_BOOK 6 2.13 0.00 2.45 75 XM_H_Long_From01 6 4.26 16.22 2.45 76 BAYES_40 6 2.13 0.00 2.45 77 XM_DK_Undo_01 6 3.90 13.51 2.45 78 TO_MALFORMED 6 2.13 0.00 2.45 79 UNTRUSTED_Relay 5 3.55 13.51 2.04 80 USER_IN_DEF_DKIM_WL 5 1.77 0.00 2.04 81 USER_IN_WHITELIST 5 1.77 0.00 2.04 82 TR_XM_SpammyRelay 5 3.19 10.81 2.04 83 MIME_QP_LONG_LINE 5 2.13 2.70 2.04 84 T_TooManySym_02 5 2.13 2.70 2.04 85 TR_XM_DKIM_Undo 5 2.84 8.11 2.04 86 USER_IN_WELCOMELIST 5 1.77 0.00 2.04 87 XM_H_PHPMailer 5 1.77 0.00 2.04 88 HTML_IMAGE_RATIO_02 5 2.48 5.41 2.04 89 BOTNET 5 3.19 10.81 2.04 90 XM_UB50 4 2.48 8.11 1.63 91 XM_Evil_Numbers_Gen 4 2.48 8.11 1.63 92 BAYES_95 4 3.19 13.51 1.63 93 RCVD_IN_IADB_LISTED 4 1.42 0.00 1.63 94 XMSexyCombo_05 4 1.77 2.70 1.63 95 RELAYCOUNTRY_GB 4 1.77 2.70 1.63 96 XM_B_DNDMA 4 1.42 0.00 1.63 97 RELAYCOUNTRY_AU 3 1.06 0.00 1.22 98 TVD_SPACE_RATIO 3 1.06 0.00 1.22 99 TR_Symld_Words 3 1.77 5.41 1.22 100 MPART_ALT_DIFF 3 1.42 2.70 1.22 101 RCVD_IN_IADB_SENDERID 3 1.06 0.00 1.22 102 SHOPIFY_IMG_NOT_RCVD_SFY 3 1.77 5.41 1.22 103 XM_B_Investor 3 2.13 8.11 1.22 104 RCVD_IN_IADB_SPF 3 1.06 0.00 1.22 105 XMSubMetaI_00 3 1.06 0.00 1.22 106 URI_NOVOWEL 3 1.06 0.00 1.22 107 MSGID_NOFQDN1 3 1.06 0.00 1.22 108 T_XMDrugObfuBody_14 2 1.42 5.41 0.82 109 RCVD_IN_IADB_DK 2 0.71 0.00 0.82 110 LotsOfNums_01 2 1.42 5.41 0.82 111 MPART_ALT_DIFF_COUNT 2 0.71 0.00 0.82 112 HTML_IMAGE_ONLY_28 2 0.71 0.00 0.82 113 PLING_QUERY 2 0.71 0.00 0.82 114 WEIRD_PORT 2 0.71 0.00 0.82 115 XMStrtUSub 2 1.06 2.70 0.82 116 DKIM_INVALID 2 1.06 2.70 0.82 117 XM_ShortIntro_01 2 0.71 0.00 0.82 118 RELAYCOUNTRY_NL 2 1.06 2.70 0.82 119 XM_DIRTYINTL 2 1.06 2.70 0.82 120 TR_XM_PhishingBody 2 1.42 5.41 0.82 121 RCVD_IN_IADB_VOUCHED 2 0.71 0.00 0.82 122 KHOP_HELO_FCRDNS 2 1.42 5.41 0.82 123 XM_B_SpammyWords3 2 1.06 2.70 0.82 124 XM_B_Phish_Phrases 2 0.71 0.00 0.82 125 TM2_M_VERY_LONG_WORD 2 1.06 2.70 0.82 126 BAYES_80 2 2.13 10.81 0.82 127 RCVD_IN_IADB_OPTIN 2 0.71 0.00 0.82 128 T_XMDrugObfuBody_12 1 0.35 0.00 0.41 129 NICE_REPLY_A 1 0.35 0.00 0.41 130 LONGLN_LOW_CONTRAST 1 0.35 0.00 0.41 131 RELAYCOUNTRY_AT 1 0.35 0.00 0.41 132 TR_Sbj_FN_Bdy 1 1.06 5.41 0.41 133 XM_Lotto 1 0.35 0.00 0.41 134 TVD_RCVD_IP 1 0.35 0.00 0.41 135 BODY_EMPTY 1 0.35 0.00 0.41 136 XMMoneyMeta_00 1 0.35 0.00 0.41 137 XMLngstWrd_03 1 0.35 0.00 0.41 138 XMStockSpam_06 1 1.42 8.11 0.41 139 TR_BOTNET_NEGATE 1 0.71 2.70 0.41 140 RELAYCOUNTRY_DE 1 0.71 2.70 0.41 141 XMSlimDrugH 1 0.35 0.00 0.41 142 XM_Body_Obfu01 1 0.35 0.00 0.41 143 TR_XM_SEO4 1 0.35 0.00 0.41 144 T_TooManySym_03 1 0.35 0.00 0.41 145 XMNoVowels 1 0.35 0.00 0.41 146 BAYES_05 1 0.35 0.00 0.41 147 XMSubNoVowel 1 1.06 5.41 0.41 148 XM_H_Undi_Recip 1 1.77 10.81 0.41 149 TR_XM_SpammyWords4 1 2.13 13.51 0.41 150 FORGED_YAHOO_RCVD 1 0.35 0.00 0.41 151 LONG_JUNK_URI3 1 0.35 0.00 0.41 152 MSGID_FROM_MTA_HEADER 1 0.35 0.00 0.41 153 XM_GoogleGroups 1 1.06 5.41 0.41 154 XM_B_SEO 1 0.35 0.00 0.41 155 HELO_NO_DOMAIN 1 0.35 0.00 0.41 156 HTML_IMAGE_ONLY_20 1 0.35 0.00 0.41 157 XMLngstWrd_04 1 0.35 0.00 0.41 158 FROM_GOV_SPOOF 1 0.71 2.70 0.41 159 RCVD_IN_VALIDITY_SAFE 1 0.35 0.00 0.41 160 XMSubMetaSxObfu_03 1 0.35 0.00 0.41 161 XM_URI_RBL 1 0.71 2.70 0.41 162 LOTS_OF_MONEY 1 2.48 16.22 0.41 163 DKIM_ADSP_CUSTOM_MED 1 1.77 10.81 0.41 164 TR_XM_PHPForged 1 1.06 5.41 0.41 165 NO_RDNS_DOTCOM_HELO 1 0.35 0.00 0.41 166 XM_UB60 1 0.35 0.00 0.41 167 MAILING_LIST_MULTI 1 1.42 8.11 0.41 168 NUMERIC_HTTP_ADDR 1 0.35 0.00 0.41 169 OOOBOUNCE_MESSAGE 1 0.35 0.00 0.41 170 XM_B_SpammyWords4 1 0.35 0.00 0.41 171 SpammyFromTLD_02 1 1.06 5.41 0.41 172 HTML_IMAGE_ONLY_08 1 0.35 0.00 0.41 173 XM_ProductURIs 1 0.35 0.00 0.41 174 FROM_EXCESS_BASE64 1 0.35 0.00 0.41 175 TR_XM_FormFill2 1 1.06 5.41 0.41 176 XMSubMetaSSx_00 1 1.06 5.41 0.41 177 TR_XM_UnparsRelay 1 1.77 10.81 0.41 178 HTML_IMAGE_RATIO_06 1 0.71 2.70 0.41 179 CTE_8BIT_MISMATCH 1 0.35 0.00 0.41 180 XM_PDF 1 0.71 2.70 0.41 181 XM_B_Phish66 1 0.35 0.00 0.41 182 XMPhish14 1 0.71 2.70 0.41 183 SUBJ_ALL_CAPS 1 0.35 0.00 0.41 184 TR_MSPIKEBAYES00 1 0.35 0.00 0.41 185 MIME_CHARSET_FARAWAY 1 0.71 2.70 0.41 186 XM_S_SubURI 1 0.35 0.00 0.41 187 RELAYCOUNTRY_KR 1 0.35 0.00 0.41 188 XM_H_PHPOS 1 1.06 5.41 0.41 189 XM_E_Blogspot 1 1.06 5.41 0.41 190 XM_Body_Dirty_Words_01 1 1.42 8.11 0.41 191 TR_XM_PHPDW 1 1.06 5.41 0.41 192 XM_H_PHPOS_M 1 0.35 0.00 0.41 193 RCVD_IN_VALIDITY_CERTIFIED 1 0.35 0.00 0.41 194 NML_ADSP_CUSTOM_MED 1 1.77 10.81 0.41 195 XM_B_DynamicLink 1 0.35 0.00 0.41 196 MANY_SPAN_IN_TEXT 1 0.35 0.00 0.41 197 XM_B_Unsub2 1 0.35 0.00 0.41 198 T_FILL_THIS_FORM_SHORT 1 0.35 0.00 0.41 199 HELO_NODOT 1 0.35 0.00 0.41 200 T_XMHurry_00 1 0.71 2.70 0.41 ----------------------------------------------------------------------