Email: 429 Autolearn: 0 AvgScore: 2.74 AvgScanTime: 1.62 sec Spam: 66 Autolearn: 0 AvgScore: 12.80 AvgScanTime: 2.09 sec Ham: 363 Autolearn: 0 AvgScore: 0.91 AvgScanTime: 1.53 sec Time Spent Running SA: 0.19 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 61 59.91 92.42 53.99 2 DKIM_SIGNED 54 41.03 81.82 33.61 3 XM_DK_Pass 52 40.33 78.79 33.33 4 DKIM_VALID 52 39.86 78.79 32.78 5 T_SCC_BODY_TEXT_LINE 52 82.75 78.79 83.47 6 RELAYCOUNTRY_US 49 41.72 74.24 35.81 7 DCC_CHECK_NEGATIVE 42 71.33 63.64 72.73 8 XM_B_SpammyWords 40 18.41 60.61 10.74 9 XMListUnsubscribeExists 40 24.24 60.61 17.63 10 DKIM_VALID_AU 37 30.54 56.06 25.90 11 XM_B_Unicode 35 45.69 53.03 44.35 12 FVGT_m_MULTI_ODD 31 18.18 46.97 12.95 13 DKIM_VALID_EF 30 18.88 45.45 14.05 14 XM_DK_Undo_02 28 10.72 42.42 4.96 15 BAYES_50 28 54.55 42.42 56.75 16 XM_B_Unicode3 26 32.40 39.39 31.13 17 HTML_FONT_LOW_CONTRAST 25 16.08 37.88 12.12 18 T_KAM_HTML_FONT_INVALID 24 12.12 36.36 7.71 19 TR_XM_DK_Unsub 24 11.42 36.36 6.89 20 DCC_CHECK 24 28.67 36.36 27.27 21 TR_XM_DKIM_Undo 23 5.83 34.85 0.55 22 XM_Multi_Part_URI 20 11.19 30.30 7.71 23 RELAYCOUNTRY_META 19 9.32 28.79 5.79 24 RCVD_IN_MSPIKE_H2 19 12.35 28.79 9.37 25 LOC_TINY_FONT_1 16 11.19 24.24 8.82 26 RCVD_IN_BL_SPAMCOP_NET 15 3.96 22.73 0.55 27 XMSubMetaSx_00 15 5.36 22.73 2.20 28 T_TM2_M_HEADER_IN_MSG 15 10.49 22.73 8.26 29 T_XMDrugObfuBody_08 15 13.75 22.73 12.12 30 MPART_ALT_DIFF 14 6.99 21.21 4.41 31 XMSubLong 14 11.89 21.21 10.19 32 XM_B_SpammyWords2 13 6.29 19.70 3.86 33 BAYES_99 13 15.62 19.70 14.88 34 MIME_HTML_MOSTLY 13 6.99 19.70 4.68 35 RCVD_IN_MSPIKE_WL 12 15.85 18.18 15.43 36 XM_Body_Dirty_Words 12 6.29 18.18 4.13 37 UNTRUSTED_Relay 12 4.90 18.18 2.48 38 UNPARSEABLE_RELAY 12 6.53 18.18 4.41 39 BAYES_80 11 3.26 16.67 0.83 40 BOTNET 10 5.83 15.15 4.13 41 MIME_HTML_ONLY 9 7.93 13.64 6.89 42 TR_XM_UnparsRelay 9 3.26 13.64 1.38 43 TooManyTo_001 8 5.59 12.12 4.41 44 TR_XM_SpammyRelay 8 2.56 12.12 0.83 45 BAYES_95 8 2.80 12.12 1.10 46 BAYES_999 8 14.22 12.12 14.60 47 XM_B_SpammyWords3 7 2.33 10.61 0.83 48 XM_Evil_Numbers_Gen 7 3.73 10.61 2.48 49 TooManyTo_003 7 2.56 10.61 1.10 50 XM_UB50 7 3.03 10.61 1.65 51 TooManyTo_002 7 3.50 10.61 2.20 52 TooManyTo_004 7 2.10 10.61 0.55 53 XM_UncommonTLD01 6 4.66 9.09 3.86 54 XM_H_Long_From01 6 3.96 9.09 3.03 55 FSL_BULK_SIG 6 20.05 9.09 22.04 56 RCVD_IN_MSPIKE_H3 6 7.93 9.09 7.71 57 TR_XM_BayesUnsub 6 2.56 9.09 1.38 58 XM_B_Unsub 6 6.29 9.09 5.79 59 TR_XM_NoHeaderRelay 5 1.17 7.58 0.00 60 TR_XM_PHPForged 5 1.17 7.58 0.00 61 XM_H_PHPOS 5 1.17 7.58 0.00 62 TR_XM_FormFill2 5 1.17 7.58 0.00 63 XMNumbers 5 3.73 7.58 3.03 64 XM_SPF_SoftFail 5 2.10 7.58 1.10 65 TR_XM_SpammyWords2 5 1.17 7.58 0.00 66 RCVD_IN_MSPIKE_H5 5 5.83 7.58 5.51 67 TR_XM_PHPDW 5 1.17 7.58 0.00 68 TooManyTo_005 5 1.63 7.58 0.55 69 TR_XM_SpammyWords5 4 1.17 6.06 0.28 70 RCVD_IN_MSPIKE_BL 4 0.93 6.06 0.00 71 BAYES_60 4 6.29 6.06 6.34 72 BOTNET_IPINHOSTNAME 4 5.36 6.06 5.23 73 TR_XM_MSPIKECOMBO 4 0.93 6.06 0.00 74 RELAYCOUNTRY_IN 4 1.63 6.06 0.83 75 TR_Symld_Words 4 1.63 6.06 0.83 76 RCVD_IN_VALIDITY_RPBL 3 0.93 4.55 0.28 77 HTML_MIME_NO_HTML_TAG 3 2.10 4.55 1.65 78 XM_H_PHPMailer 3 0.93 4.55 0.28 79 TR_XM_PhishingBody 3 0.93 4.55 0.28 80 XM_B_SpammyTLD 3 1.40 4.55 0.83 81 MPART_ALT_DIFF_COUNT 3 0.70 4.55 0.00 82 T_TooManySym_01 3 4.20 4.55 4.13 83 XM_DIRTYINTL 3 1.17 4.55 0.55 84 XMGappySubj_01 3 1.17 4.55 0.55 85 XM_H_PHPOS_M 3 0.70 4.55 0.00 86 TR_DCC_Bayes_99 3 0.70 4.55 0.00 87 LOTS_OF_MONEY 3 1.17 4.55 0.55 88 TR_XM_SpammyWords4 3 0.93 4.55 0.28 89 BOTNET_NORDNS 3 0.70 4.55 0.00 90 TR_XM_InvalidRelay 3 0.70 4.55 0.00 91 TM2_M_URI_OPT_OUT 3 1.63 4.55 1.10 92 XMCapTrack 3 1.86 4.55 1.38 93 PHP_ORIG_SCRIPT_EVAL 2 0.47 3.03 0.00 94 RELAYCOUNTRY_CA 2 0.47 3.03 0.00 95 ANY_BOUNCE_MESSAGE 2 46.85 3.03 54.82 96 T_REMOTE_IMAGE 2 2.56 3.03 2.48 97 HK_RANDOM_FROM 2 1.17 3.03 0.83 98 XMSexyCombo_05 2 1.17 3.03 0.83 99 RELAYCOUNTRY_AT 2 0.70 3.03 0.28 100 TR_XM_SpammyWords3 2 0.47 3.03 0.00 101 XM_GoogleGroups 2 1.17 3.03 0.83 102 HELO_NODOT 2 0.47 3.03 0.00 103 XM_B_Phish66 2 0.70 3.03 0.28 104 T_TooManySym_02 2 2.80 3.03 2.75 105 XMStrtUSub 2 7.46 3.03 8.26 106 TM2_M_VERY_LONG_WORD 2 1.63 3.03 1.38 107 IMPOTENCE 2 0.47 3.03 0.00 108 XM_H_PHPOS_E 2 0.47 3.03 0.00 109 XM_BadFromFormat 2 0.70 3.03 0.28 110 MAILING_LIST_MULTI 2 1.17 3.03 0.83 111 MIME_QP_LONG_LINE 2 2.80 3.03 2.75 112 NO_DNS_FOR_FROM 2 0.93 3.03 0.55 113 TR_XM_Undi_Recip11 2 0.47 3.03 0.00 114 SpammyFromTLD_01 2 0.70 3.03 0.28 115 FSL_HELO_NON_FQDN_1 2 0.47 3.03 0.00 116 HTML_FONT_TINY_NORDNS 2 0.47 3.03 0.00 117 URIBL_DBL_SPAM 2 0.47 3.03 0.00 118 XMCmmnCold 2 0.47 3.03 0.00 119 XM_UB80 2 0.47 3.03 0.00 120 DKIM_INVALID 2 1.17 3.03 0.83 121 BOUNCE_MESSAGE 2 46.85 3.03 54.82 122 RCVD_IN_MSPIKE_L4 2 0.47 3.03 0.00 123 TR_XM_MaxWHORU 2 0.47 3.03 0.00 124 PDS_PHP_EVAL 2 0.47 3.03 0.00 125 XM_ShortIntro_01 2 0.70 3.03 0.28 126 HK_RANDOM_ENVFROM 2 1.63 3.03 1.38 127 RELAYCOUNTRY_AU 2 1.86 3.03 1.65 128 XM_B_Phish_Phrases 2 0.70 3.03 0.28 129 RCVD_IN_MSPIKE_L3 2 0.47 3.03 0.00 130 TR_Mismatch_TLD_02 2 0.70 3.03 0.28 131 HELO_NO_DOMAIN 2 0.47 3.03 0.00 132 RCVD_IN_PSBL 2 0.47 3.03 0.00 133 RELAYCOUNTRY_BR 2 0.47 3.03 0.00 134 XM_H_Undi_Recip 2 0.70 3.03 0.28 135 XM_DK_Undo_01 2 0.70 3.03 0.28 136 RELAYCOUNTRY_FR 1 0.47 1.52 0.28 137 RCVD_IN_VALIDITY_CERTIFIED 1 0.70 1.52 0.55 138 MISSING_HEADERS 1 0.70 1.52 0.55 139 XM_CamelCaseFrm001 1 0.23 1.52 0.00 140 RCVD_IN_MSPIKE_H4 1 2.10 1.52 2.20 141 BAYES_20 1 6.99 1.52 7.99 142 XM_TLDProd2 1 0.23 1.52 0.00 143 BOGUS_MIME_VERSION 1 0.23 1.52 0.00 144 SHORT_URI_5 1 0.23 1.52 0.00 145 XM_OfRef8 1 0.23 1.52 0.00 146 SHORT_URI_3 1 0.23 1.52 0.00 147 RELAYCOUNTRY_GB 1 0.47 1.52 0.28 148 TM2_M_BODY_EMPTY 1 0.23 1.52 0.00 149 BODY_SINGLE_URI 1 0.23 1.52 0.00 150 RCVD_IN_VALIDITY_SAFE 1 1.63 1.52 1.65 151 XMSubject_02 1 0.23 1.52 0.00 152 BODY_URI_ONLY 1 0.23 1.52 0.00 153 T_XMDrugObfuBody_14 1 1.17 1.52 1.10 154 XMEmptyBody_01 1 0.23 1.52 0.00 155 RELAYCOUNTRY_NL 1 0.23 1.52 0.00 156 INVALID_DATE 1 0.23 1.52 0.00 157 THIS_AD 1 0.23 1.52 0.00 158 TR_XM_PhishingBody2 1 0.23 1.52 0.00 159 XM_B_REG_HTML 1 0.23 1.52 0.00 160 DKIM_ADSP_NXDOMAIN 1 0.70 1.52 0.55 161 XMPhish11 1 0.23 1.52 0.00 162 XM_PDF 1 1.40 1.52 1.38 163 PRICES_ARE_AFFORDABLE 1 0.23 1.52 0.00 164 TO_NO_BRKTS_FROM_MSSP 1 0.23 1.52 0.00 165 XM_Body_Obfu01 1 0.70 1.52 0.55 166 PDS_RDNS_DYNAMIC_FP 1 0.23 1.52 0.00 167 MIME_HTML_ONLY_MULTI 1 0.23 1.52 0.00 168 DKIM_ADSP_CUSTOM_MED 1 0.70 1.52 0.55 169 XM_URI_RBL 1 0.23 1.52 0.00 170 RDNS_DYNAMIC 1 0.23 1.52 0.00 171 XM_OfRef6 1 0.23 1.52 0.00 172 HTML_TAG_BALANCE_HEAD 1 0.23 1.52 0.00 173 RELAYCOUNTRY_PL 1 0.47 1.52 0.28 174 XMDateMe_00 1 0.47 1.52 0.28 175 TR_XM_COVIDMETA1 1 0.23 1.52 0.00 176 XMSexyCombo_01 1 0.47 1.52 0.28 177 TR_XM_Spammywords 1 0.23 1.52 0.00 178 XMSubNoVowel 1 0.47 1.52 0.28 179 PDS_PHPEXP_BOT 1 0.23 1.52 0.00 180 XM_ZIP 1 1.17 1.52 1.10 181 XM_B_Investor 1 0.47 1.52 0.28 182 TO_EQ_FM_DOM_HTML_ONLY 1 0.23 1.52 0.00 183 XMNoUri_00 1 0.23 1.52 0.00 184 OBFU_TEXT_ATTACH 1 0.23 1.52 0.00 185 KHOP_HELO_FCRDNS 1 0.93 1.52 0.83 186 ALL_TRUSTED 1 50.82 1.52 59.78 187 XM_UB99 1 0.23 1.52 0.00 188 RELAYCOUNTRY_DE 1 0.47 1.52 0.28 189 XMDiploma_00 1 0.47 1.52 0.28 190 URIBL_BLACK 1 0.23 1.52 0.00 191 GMD_PDF_EMPTY_BODY 1 0.23 1.52 0.00 192 TR_XM_SPAMCOP 1 0.23 1.52 0.00 193 XM_B_DNDMA 1 0.23 1.52 0.00 194 RELAYCOUNTRY_CN 1 0.70 1.52 0.55 195 FORGED_GMAIL_RCVD 1 0.47 1.52 0.28 196 LotsOfNums_01 1 3.03 1.52 3.31 197 T_XMHurry_00 1 0.47 1.52 0.28 198 TR_XM_Undi_Recip14 1 0.23 1.52 0.00 199 T_FILL_THIS_FORM_SHORT 1 0.47 1.52 0.28 200 STY_INVIS_DIRECT 1 0.23 1.52 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 303 82.75 78.79 83.47 2 DCC_CHECK_NEGATIVE 264 71.33 63.64 72.73 3 ALL_TRUSTED 217 50.82 1.52 59.78 4 BAYES_50 206 54.55 42.42 56.75 5 ANY_BOUNCE_MESSAGE 199 46.85 3.03 54.82 6 BOUNCE_MESSAGE 199 46.85 3.03 54.82 7 HTML_MESSAGE 196 59.91 92.42 53.99 8 XM_B_Unicode 161 45.69 53.03 44.35 9 RELAYCOUNTRY_US 130 41.72 74.24 35.81 10 DKIM_SIGNED 122 41.03 81.82 33.61 11 XM_DK_Pass 121 40.33 78.79 33.33 12 DKIM_VALID 119 39.86 78.79 32.78 13 XM_B_Unicode3 113 32.40 39.39 31.13 14 SCC_BODY_URI_ONLY 101 23.78 1.52 27.82 15 DCC_CHECK 99 28.67 36.36 27.27 16 DKIM_VALID_AU 94 30.54 56.06 25.90 17 FSL_BULK_SIG 80 20.05 9.09 22.04 18 XMListUnsubscribeExists 64 24.24 60.61 17.63 19 RCVD_IN_MSPIKE_WL 56 15.85 18.18 15.43 20 BAYES_99 54 15.62 19.70 14.88 21 BAYES_999 53 14.22 12.12 14.60 22 DKIM_VALID_EF 51 18.88 45.45 14.05 23 FVGT_m_MULTI_ODD 47 18.18 46.97 12.95 24 HTML_FONT_LOW_CONTRAST 44 16.08 37.88 12.12 25 T_XMDrugObfuBody_08 44 13.75 22.73 12.12 26 XM_B_SpammyWords 39 18.41 60.61 10.74 27 XMSubLong 37 11.89 21.21 10.19 28 RCVD_IN_MSPIKE_H2 34 12.35 28.79 9.37 29 BAYES_00 33 7.69 0.00 9.09 30 LOC_TINY_FONT_1 32 11.19 24.24 8.82 31 XMStrtUSub 30 7.46 3.03 8.26 32 T_TM2_M_HEADER_IN_MSG 30 10.49 22.73 8.26 33 BAYES_20 29 6.99 1.52 7.99 34 TR_XM_DK_Bayes 29 6.76 0.00 7.99 35 TR_XM_DK_Bayes1 29 6.76 0.00 7.99 36 T_KAM_HTML_FONT_INVALID 28 12.12 36.36 7.71 37 RCVD_IN_MSPIKE_H3 28 7.93 9.09 7.71 38 XM_Multi_Part_URI 28 11.19 30.30 7.71 39 TR_XM_DK_Bayes2 27 6.29 0.00 7.44 40 TR_XM_DK_Unsub 25 11.42 36.36 6.89 41 MIME_HTML_ONLY 25 7.93 13.64 6.89 42 BAYES_60 23 6.29 6.06 6.34 43 XM_B_Unsub 21 6.29 9.09 5.79 44 RELAYCOUNTRY_META 21 9.32 28.79 5.79 45 RCVD_IN_MSPIKE_H5 20 5.83 7.58 5.51 46 BOTNET_IPINHOSTNAME 19 5.36 6.06 5.23 47 XM_DK_Undo_02 18 10.72 42.42 4.96 48 MIME_HTML_MOSTLY 17 6.99 19.70 4.68 49 MPART_ALT_DIFF 16 6.99 21.21 4.41 50 TooManyTo_001 16 5.59 12.12 4.41 51 UNPARSEABLE_RELAY 16 6.53 18.18 4.41 52 USER_IN_DEF_DKIM_WL 16 3.73 0.00 4.41 53 FROM_GOV_DKIM_AU 15 3.50 0.00 4.13 54 T_TooManySym_01 15 4.20 4.55 4.13 55 XM_Body_Dirty_Words 15 6.29 18.18 4.13 56 BOTNET 15 5.83 15.15 4.13 57 XM_UncommonTLD01 14 4.66 9.09 3.86 58 XM_B_SpammyWords2 14 6.29 19.70 3.86 59 INVALID_MSGID 14 3.26 0.00 3.86 60 LotsOfNums_01 12 3.03 1.52 3.31 61 XM_H_Long_From01 11 3.96 9.09 3.03 62 XMNumbers 11 3.73 7.58 3.03 63 T_TooManySym_02 10 2.80 3.03 2.75 64 TO_MALFORMED 10 2.33 0.00 2.75 65 MIME_QP_LONG_LINE 10 2.80 3.03 2.75 66 IN_ZIMBRA_NJ_WHITELIST 10 2.33 0.00 2.75 67 BAYES_40 10 2.56 1.52 2.75 68 FROM_EXCESS_BASE64 10 2.33 0.00 2.75 69 XM_DKIMWhitelistDomains 9 2.10 0.00 2.48 70 T_REMOTE_IMAGE 9 2.56 3.03 2.48 71 UNTRUSTED_Relay 9 4.90 18.18 2.48 72 XM_Evil_Numbers_Gen 9 3.73 10.61 2.48 73 XMSubMetaSx_00 8 5.36 22.73 2.20 74 RCVD_IN_MSPIKE_H4 8 2.10 1.52 2.20 75 TooManyTo_002 8 3.50 10.61 2.20 76 HTML_IMAGE_RATIO_04 8 2.10 1.52 2.20 77 RCVD_IN_VALIDITY_SAFE 6 1.63 1.52 1.65 78 HTML_MIME_NO_HTML_TAG 6 2.10 4.55 1.65 79 XM_H_NotFromAmazon 6 1.40 0.00 1.65 80 XM_UB50 6 3.03 10.61 1.65 81 RELAYCOUNTRY_AU 6 1.86 3.03 1.65 82 TM2_M_VERY_LONG_WORD 5 1.63 3.03 1.38 83 TR_XM_BayesUnsub 5 2.56 9.09 1.38 84 XM_PDF 5 1.40 1.52 1.38 85 XMCapTrack 5 1.86 4.55 1.38 86 HK_RANDOM_ENVFROM 5 1.63 3.03 1.38 87 HTML_IMAGE_RATIO_08 5 1.17 0.00 1.38 88 TR_XM_UnparsRelay 5 3.26 13.64 1.38 89 T_XMDrugObfuBody_14 4 1.17 1.52 1.10 90 XM_B_FormFill 4 0.93 0.00 1.10 91 IN_HORDE_ADDRESS_BOOK 4 0.93 0.00 1.10 92 XM_ZIP 4 1.17 1.52 1.10 93 HTML_IMAGE_ONLY_20 4 1.17 1.52 1.10 94 TM2_M_URI_OPT_OUT 4 1.63 4.55 1.10 95 BAYES_95 4 2.80 12.12 1.10 96 NUMERIC_HTTP_ADDR 4 0.93 0.00 1.10 97 XMLngstWrd_00 4 1.17 1.52 1.10 98 TooManyTo_003 4 2.56 10.61 1.10 99 XM_SPF_SoftFail 4 2.10 7.58 1.10 100 XMBody_95 4 0.93 0.00 1.10 101 HTML_IMAGE_RATIO_06 4 1.17 1.52 1.10 102 TVD_SPACE_RATIO 4 0.93 0.00 1.10 103 HTTP_ESCAPED_HOST 4 1.17 1.52 1.10 104 XM_B_SpammyTLD 3 1.40 4.55 0.83 105 URI_NOVOWEL 3 0.70 0.00 0.83 106 T_OBFU_PDF_ATTACH 3 0.70 0.00 0.83 107 XM_GoogleGroups 3 1.17 3.03 0.83 108 XMSexyCombo_05 3 1.17 3.03 0.83 109 HK_RANDOM_FROM 3 1.17 3.03 0.83 110 RELAYCOUNTRY_IE 3 0.70 0.00 0.83 111 MAILING_LIST_MULTI 3 1.17 3.03 0.83 112 TR_XM_SpammyRelay 3 2.56 12.12 0.83 113 TR_Symld_Words 3 1.63 6.06 0.83 114 XM_Body_Dirty_Words_01 3 0.70 0.00 0.83 115 BAYES_80 3 3.26 16.67 0.83 116 XMSubMetaI_00 3 0.70 0.00 0.83 117 DKIM_INVALID 3 1.17 3.03 0.83 118 RCVD_IN_IADB_SENDERID 3 0.70 0.00 0.83 119 RELAYCOUNTRY_IN 3 1.63 6.06 0.83 120 XM_B_SpammyWords3 3 2.33 10.61 0.83 121 KHOP_HELO_FCRDNS 3 0.93 1.52 0.83 122 RCVD_IN_IADB_LISTED 3 0.70 0.00 0.83 123 MSGID_NOFQDN1 3 0.70 0.00 0.83 124 RCVD_IN_IADB_SPF 3 0.70 0.00 0.83 125 RCVD_IN_IADB_DK 2 0.47 0.00 0.55 126 XM_Dr_From 2 0.47 0.00 0.55 127 TVD_RCVD_IP 2 0.47 0.00 0.55 128 RCVD_IN_BL_SPAMCOP_NET 2 3.96 22.73 0.55 129 XMLngstWrd_01 2 0.47 0.00 0.55 130 MISSING_HEADERS 2 0.70 1.52 0.55 131 RCVD_IN_VALIDITY_CERTIFIED 2 0.70 1.52 0.55 132 XMSubject_78 2 0.47 0.00 0.55 133 NO_DNS_FOR_FROM 2 0.93 3.03 0.55 134 LOTS_OF_MONEY 2 1.17 4.55 0.55 135 T_XMDrugObfuBody_00 2 0.47 0.00 0.55 136 TR_XM_SpoofPhishAttach 2 0.47 0.00 0.55 137 TR_MSPIKEBAYES00 2 0.47 0.00 0.55 138 DKIM_ADSP_CUSTOM_MED 2 0.70 1.52 0.55 139 XM_DIRTYINTL 2 1.17 4.55 0.55 140 RELAYCOUNTRY_FI 2 0.47 0.00 0.55 141 DKIM_ADSP_NXDOMAIN 2 0.70 1.52 0.55 142 XM_Body_Obfu01 2 0.70 1.52 0.55 143 XMGappySubj_01 2 1.17 4.55 0.55 144 XM_ZohoDesk1 2 0.47 0.00 0.55 145 TR_XM_SpoofStaff 2 0.47 0.00 0.55 146 XMSubPhish11 2 0.47 0.00 0.55 147 URI_HEX 2 0.47 0.00 0.55 148 HTTPS_HTTP_MISMATCH 2 0.47 0.00 0.55 149 XMBSHREFv2 2 0.47 0.00 0.55 150 RELAYCOUNTRY_CN 2 0.70 1.52 0.55 151 TR_XM_DKIM_Undo 2 5.83 34.85 0.55 152 LONGLN_LOW_CONTRAST 2 0.47 0.00 0.55 153 TR_XM_PSC1 2 0.47 0.00 0.55 154 XM_S_SubURI 2 0.70 1.52 0.55 155 XM_H_SpoofStaff4 2 0.47 0.00 0.55 156 XMLngstWrd_02 2 0.47 0.00 0.55 157 TooManyTo_005 2 1.63 7.58 0.55 158 XMStockSpam_06 2 0.47 0.00 0.55 159 XMNoVowels 2 0.70 1.52 0.55 160 TooManyTo_004 2 2.10 10.61 0.55 161 FROM_GOV_SPOOF 2 0.70 1.52 0.55 162 TR_XM_SB_Phish 2 0.47 0.00 0.55 163 XMSpoofStaff2 2 0.47 0.00 0.55 164 XM_GoogleGroups2 2 0.70 1.52 0.55 165 HTML_IMAGE_ONLY_28 2 0.70 1.52 0.55 166 TR_XM_PhishingBody 1 0.93 4.55 0.28 167 BAYES_05 1 0.23 0.00 0.28 168 URI_TRY_3LD 1 0.23 0.00 0.28 169 XM_B_Phish66 1 0.70 3.03 0.28 170 LOADSA_MONEY_COMBO 1 0.23 0.00 0.28 171 XM_H_PHPMailer 1 0.93 4.55 0.28 172 TR_XM_SpammyWords5 1 1.17 6.06 0.28 173 LongTLD 1 0.23 0.00 0.28 174 XM_GoogleGroups3 1 0.23 0.00 0.28 175 XMOemUri 1 0.23 0.00 0.28 176 BODY_EMPTY 1 0.23 0.00 0.28 177 RELAYCOUNTRY_GB 1 0.47 1.52 0.28 178 XMSubMetaI_01 1 0.23 0.00 0.28 179 RELAYCOUNTRY_AT 1 0.70 3.03 0.28 180 XM_Sams_Club_Forge 1 0.23 0.00 0.28 181 XM_SendGrid 1 0.23 0.00 0.28 182 XMSubMetaSxObfu_03 1 0.23 0.00 0.28 183 RCVD_IN_VALIDITY_RPBL 1 0.93 4.55 0.28 184 CTE_8BIT_MISMATCH 1 0.23 0.00 0.28 185 RELAYCOUNTRY_FR 1 0.47 1.52 0.28 186 SpammyFromTLD_01 1 0.70 3.03 0.28 187 XM_B_Investor 1 0.47 1.52 0.28 188 FROM_OFFERS 1 0.23 0.00 0.28 189 XMSubMetaD_00 1 0.23 0.00 0.28 190 RCVD_IN_IADB_VOUCHED 1 0.23 0.00 0.28 191 LONG_JUNK_URI3 1 0.23 0.00 0.28 192 XMSubNoVowel 1 0.47 1.52 0.28 193 XMDateMe_00 1 0.47 1.52 0.28 194 TR_XM_SpammyWords4 1 0.93 4.55 0.28 195 XMSexyCombo_01 1 0.47 1.52 0.28 196 RELAYCOUNTRY_PL 1 0.47 1.52 0.28 197 LONG_INVISIBLE_TEXT 1 0.23 0.00 0.28 198 BASE64_LENGTH_79_INF 1 0.23 0.00 0.28 199 HTML_FONT_FACE_BAD 1 0.23 0.00 0.28 200 RCVD_IN_RP_SAFE 1 0.23 0.00 0.28 ----------------------------------------------------------------------