Email: 272 Autolearn: 0 AvgScore: 1.85 AvgScanTime: 3.75 sec Spam: 48 Autolearn: 0 AvgScore: 11.71 AvgScanTime: 3.05 sec Ham: 224 Autolearn: 0 AvgScore: -0.26 AvgScanTime: 3.90 sec Time Spent Running SA: 0.28 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 45 62.50 93.75 55.80 2 DKIM_SIGNED 41 48.16 85.42 40.18 3 RELAYCOUNTRY_US 40 45.96 83.33 37.95 4 XM_B_Unicode 40 55.88 83.33 50.00 5 XM_DK_Pass 38 46.32 79.17 39.29 6 T_SCC_BODY_TEXT_LINE 37 80.88 77.08 81.70 7 DKIM_VALID 37 45.59 77.08 38.84 8 FVGT_m_MULTI_ODD 31 27.57 64.58 19.64 9 DCC_CHECK_NEGATIVE 29 85.66 60.42 91.07 10 HTML_FONT_LOW_CONTRAST 27 33.09 56.25 28.12 11 XMListUnsubscribeExists 27 33.09 56.25 28.12 12 XM_DK_Undo_02 25 10.66 52.08 1.79 13 DKIM_VALID_AU 23 33.82 47.92 30.80 14 BAYES_50 20 62.13 41.67 66.52 15 BAYES_99 19 14.34 39.58 8.93 16 DCC_CHECK 19 14.34 39.58 8.93 17 LOC_TINY_FONT_1 17 19.85 35.42 16.52 18 XM_B_Unicode3 17 35.66 35.42 35.71 19 XM_B_SpammyWords 15 27.94 31.25 27.23 20 XM_Multi_Part_URI 13 15.07 27.08 12.50 21 TM2_M_URI_OPT_OUT 13 12.50 27.08 9.38 22 XM_Evil_Numbers_Gen 12 9.56 25.00 6.25 23 XMBody_17 12 6.25 25.00 2.23 24 BAYES_999 11 11.03 22.92 8.48 25 UNPARSEABLE_RELAY 10 8.82 20.83 6.25 26 XM_Body_Dirty_Words 9 7.35 18.75 4.91 27 RCVD_IN_MSPIKE_H2 9 8.46 18.75 6.25 28 T_TM2_M_HEADER_IN_MSG 8 11.03 16.67 9.82 29 TR_XM_BayesUnsub 8 8.46 16.67 6.70 30 DKIM_VALID_EF 8 19.49 16.67 20.09 31 XM_B_SpammyWords2 8 13.97 16.67 13.39 32 XM_B_Unsub 8 9.19 16.67 7.59 33 RELAYCOUNTRY_META 7 5.88 14.58 4.02 34 UNTRUSTED_Relay 6 3.68 12.50 1.79 35 BOTNET 6 2.57 12.50 0.45 36 XMSubLong 6 6.99 12.50 5.80 37 BAYES_80 6 4.78 12.50 3.12 38 XM_B_SpammyWords3 5 4.41 10.42 3.12 39 T_KAM_HTML_FONT_INVALID 5 9.56 10.42 9.38 40 BOTNET_IPINHOSTNAME 5 4.41 10.42 3.12 41 XM_B_SpammyTLD 5 4.04 10.42 2.68 42 TR_XM_FormFill2 4 2.21 8.33 0.89 43 HTML_IMAGE_RATIO_04 4 5.15 8.33 4.46 44 TR_XM_PHPDW 4 2.57 8.33 1.34 45 DKIM_INVALID 4 2.57 8.33 1.34 46 TR_XM_DKIM_Undo 4 2.21 8.33 0.89 47 FSL_BULK_SIG 4 2.21 8.33 0.89 48 MIME_HTML_MOSTLY 4 9.93 8.33 10.27 49 XM_H_PHPOS 4 2.21 8.33 0.89 50 TR_XM_PHPForged 4 2.21 8.33 0.89 51 RCVD_IN_BL_SPAMCOP_NET 4 1.47 8.33 0.00 52 TR_XM_SPAMCOP 3 1.10 6.25 0.00 53 XMSubEmpty 3 1.10 6.25 0.00 54 TR_XM_InvalidRelay 3 1.10 6.25 0.00 55 TM2_M_VERY_LONG_WORD 3 2.94 6.25 2.23 56 TR_XM_UnparsRelay 3 2.94 6.25 2.23 57 XM_H_PHPOS_M 3 1.47 6.25 0.45 58 RELAYCOUNTRY_FR 3 1.84 6.25 0.89 59 HTML_IMAGE_RATIO_08 3 2.21 6.25 1.34 60 TR_DCC_Bayes_99 3 1.47 6.25 0.45 61 XM_UncommonTLD01 3 5.88 6.25 5.80 62 HTML_IMAGE_RATIO_02 3 1.84 6.25 0.89 63 MIME_HTML_ONLY 3 5.51 6.25 5.36 64 XMSubject_60 2 1.10 4.17 0.45 65 XM_Body_Dirty_Words_01 2 1.10 4.17 0.45 66 MPART_ALT_DIFF 2 8.46 4.17 9.38 67 LotsOfNums_01 2 1.84 4.17 1.34 68 HTML_FONT_TINY_NORDNS 2 0.74 4.17 0.00 69 DKIM_ADSP_NXDOMAIN 2 0.74 4.17 0.00 70 XMSubNoVowel 2 1.10 4.17 0.45 71 XMSubMetaSx_00 2 1.47 4.17 0.89 72 KHOP_HELO_FCRDNS 2 1.10 4.17 0.45 73 ALL_TRUSTED 2 47.79 4.17 57.14 74 XMGappySubj_01 2 0.74 4.17 0.00 75 XM_UB99 2 0.74 4.17 0.00 76 XM_B_Unsub2 2 0.74 4.17 0.00 77 XMSexyCombo_05 2 1.10 4.17 0.45 78 XM_UB80 2 0.74 4.17 0.00 79 TooManyTo_001 2 2.57 4.17 2.23 80 XMGappySubj_02 2 0.74 4.17 0.00 81 BOTNET_NORDNS 2 0.74 4.17 0.00 82 TR_Sbj_FN_Bdy 2 0.74 4.17 0.00 83 XM_H_Long_From01 2 3.31 4.17 3.12 84 XMSolicitRefs_0 2 1.47 4.17 0.89 85 BAYES_60 2 8.46 4.17 9.38 86 DKIM_ADSP_CUSTOM_MED 1 1.10 2.08 0.89 87 XM_DK_Undo_01 1 1.84 2.08 1.79 88 FSL_HELO_NON_FQDN_1 1 0.37 2.08 0.00 89 XMLngstWrd_02 1 0.74 2.08 0.45 90 TR_XM_INV_DKIM 1 0.37 2.08 0.00 91 XMhairloss01 1 0.37 2.08 0.00 92 GOOG_STO_NOIMG_HTML 1 0.37 2.08 0.00 93 XM_ProductURIs 1 0.37 2.08 0.00 94 TR_XMSubLong 1 0.37 2.08 0.00 95 NO_DNS_FOR_FROM 1 0.74 2.08 0.45 96 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.37 2.08 0.00 97 URI_NOVOWEL 1 0.37 2.08 0.00 98 XM_H_PHPMailer 1 0.74 2.08 0.45 99 AMAZON_IMG_NOT_RCVD_AMZN 1 0.37 2.08 0.00 100 HK_RANDOM_ENVFROM 1 0.37 2.08 0.00 101 XM_UB999 1 0.37 2.08 0.00 102 TooManyTo_003 1 0.37 2.08 0.00 103 RELAYCOUNTRY_IN 1 0.37 2.08 0.00 104 DC_IMAGE_SPAM_HTML 1 0.37 2.08 0.00 105 URI_HEX 1 0.74 2.08 0.45 106 RCVD_IN_MSPIKE_H3 1 3.68 2.08 4.02 107 XM_DIRTYINTL 1 0.37 2.08 0.00 108 XM_E_Blogspot 1 0.74 2.08 0.45 109 T_XMDrugObfuBody_08 1 6.62 2.08 7.59 110 LONGLN_LOW_CONTRAST 1 0.37 2.08 0.00 111 RELAYCOUNTRY_TR 1 0.37 2.08 0.00 112 PDS_PRO_TLD 1 0.74 2.08 0.45 113 XMLngstWrd_01 1 1.10 2.08 0.89 114 SCC_BODY_URI_ONLY 1 21.69 2.08 25.89 115 XM_RXBody 1 0.37 2.08 0.00 116 XMSubMetaSSx_00 1 0.37 2.08 0.00 117 T_STY_INVIS_DIRECT 1 0.37 2.08 0.00 118 URI_OPTOUT_3LD 1 0.74 2.08 0.45 119 HELO_NO_DOMAIN 1 0.37 2.08 0.00 120 RCVD_IN_MSPIKE_WL 1 4.04 2.08 4.46 121 BAYES_05 1 1.10 2.08 0.89 122 XMSubMetaI_00 1 1.10 2.08 0.89 123 FROM_EXCESS_BASE64 1 1.84 2.08 1.79 124 XMSubPhish11 1 1.10 2.08 0.89 125 LOTS_OF_MONEY 1 2.94 2.08 3.12 126 XMStrtUSub 1 4.04 2.08 4.46 127 XM_B_Investor 1 1.47 2.08 1.34 128 XMSubMetaSxObfu_03 1 0.74 2.08 0.45 129 EMPTY_MESSAGE 1 0.37 2.08 0.00 130 MONEY_FORM_SHORT 1 1.10 2.08 0.89 131 TR_XM_MaxWHORU 1 0.37 2.08 0.00 132 TR_MetaPhish_Combo_01 1 0.37 2.08 0.00 133 TR_XM_NOT_AMZN 1 0.37 2.08 0.00 134 DIET_1 1 0.37 2.08 0.00 135 NML_ADSP_CUSTOM_MED 1 1.10 2.08 0.89 136 HELO_NODOT 1 0.37 2.08 0.00 137 OBFU_TEXT_ATTACH 1 0.37 2.08 0.00 138 DEAR_SOMETHING 1 0.37 2.08 0.00 139 DC_IMAGE_SPAM_TEXT 1 0.37 2.08 0.00 140 DC_PNG_UNO_LARGO 1 0.37 2.08 0.00 141 T_XMDrugObfuBody_14 1 1.10 2.08 0.89 142 UNSUB_GOOG_FORM 1 0.37 2.08 0.00 143 XM_B_Phish_Phrases 1 1.47 2.08 1.34 144 XM_H_NotFromAmazon 1 0.37 2.08 0.00 145 BOUNCE_MESSAGE 1 40.07 2.08 48.21 146 T_REMOTE_IMAGE 1 2.21 2.08 2.23 147 TR_XM_DK_Unsub 1 11.40 2.08 13.39 148 TM2_M_BODY_EMPTY 1 0.37 2.08 0.00 149 TR_XM_SpammyWords4 1 2.57 2.08 2.68 150 RELAYCOUNTRY_IT 1 0.37 2.08 0.00 151 TooManyTo_004 1 0.37 2.08 0.00 152 XMLngstWrd_03 1 0.74 2.08 0.45 153 RDNS_DYNAMIC 1 0.37 2.08 0.00 154 XMReplyNow 1 0.74 2.08 0.45 155 XM_SPF_SoftFail 1 1.47 2.08 1.34 156 XM_GoogleGroups 1 1.10 2.08 0.89 157 PDS_RDNS_DYNAMIC_FP 1 0.37 2.08 0.00 158 MISSING_SUBJECT 1 0.37 2.08 0.00 159 XM_H_Undi_Recip 1 0.37 2.08 0.00 160 HTML_OBFUSCATE_20_30 1 0.37 2.08 0.00 161 URI_PHP_REDIR 1 0.37 2.08 0.00 162 XMLngstWrd_00 1 3.31 2.08 3.57 163 ANY_BOUNCE_MESSAGE 1 40.07 2.08 48.21 164 T_TooManySym_01 1 2.94 2.08 3.12 165 TR_XM_SB_Phish 1 1.10 2.08 0.89 166 XMNoSubject 1 0.37 2.08 0.00 167 XM_UB50 1 1.47 2.08 1.34 168 TR_XM_SpammyWords5 1 1.84 2.08 1.79 169 XMStockSpam_06 1 0.74 2.08 0.45 170 TooManyTo_002 1 0.37 2.08 0.00 171 RELAYCOUNTRY_CN 1 0.37 2.08 0.00 172 RELAYCOUNTRY_PL 1 0.37 2.08 0.00 173 XM_UB60 1 0.37 2.08 0.00 174 T_FILL_THIS_FORM_SHORT 1 1.10 2.08 0.89 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 204 85.66 60.42 91.07 2 T_SCC_BODY_TEXT_LINE 183 80.88 77.08 81.70 3 BAYES_50 149 62.13 41.67 66.52 4 ALL_TRUSTED 128 47.79 4.17 57.14 5 HTML_MESSAGE 125 62.50 93.75 55.80 6 XM_B_Unicode 112 55.88 83.33 50.00 7 BOUNCE_MESSAGE 108 40.07 2.08 48.21 8 ANY_BOUNCE_MESSAGE 108 40.07 2.08 48.21 9 DKIM_SIGNED 90 48.16 85.42 40.18 10 XM_DK_Pass 88 46.32 79.17 39.29 11 DKIM_VALID 87 45.59 77.08 38.84 12 RELAYCOUNTRY_US 85 45.96 83.33 37.95 13 XM_B_Unicode3 80 35.66 35.42 35.71 14 DKIM_VALID_AU 69 33.82 47.92 30.80 15 XMListUnsubscribeExists 63 33.09 56.25 28.12 16 HTML_FONT_LOW_CONTRAST 63 33.09 56.25 28.12 17 XM_B_SpammyWords 61 27.94 31.25 27.23 18 SCC_BODY_URI_ONLY 58 21.69 2.08 25.89 19 DKIM_VALID_EF 45 19.49 16.67 20.09 20 FVGT_m_MULTI_ODD 44 27.57 64.58 19.64 21 LOC_TINY_FONT_1 37 19.85 35.42 16.52 22 XM_B_SpammyWords2 30 13.97 16.67 13.39 23 TR_XM_DK_Unsub 30 11.40 2.08 13.39 24 XM_Multi_Part_URI 28 15.07 27.08 12.50 25 MIME_HTML_MOSTLY 23 9.93 8.33 10.27 26 T_TM2_M_HEADER_IN_MSG 22 11.03 16.67 9.82 27 T_KAM_HTML_FONT_INVALID 21 9.56 10.42 9.38 28 BAYES_60 21 8.46 4.17 9.38 29 TM2_M_URI_OPT_OUT 21 12.50 27.08 9.38 30 MPART_ALT_DIFF 21 8.46 4.17 9.38 31 BAYES_99 20 14.34 39.58 8.93 32 DCC_CHECK 20 14.34 39.58 8.93 33 BAYES_999 19 11.03 22.92 8.48 34 XM_B_Unsub 17 9.19 16.67 7.59 35 T_XMDrugObfuBody_08 17 6.62 2.08 7.59 36 TR_XM_BayesUnsub 15 8.46 16.67 6.70 37 UNPARSEABLE_RELAY 14 8.82 20.83 6.25 38 RCVD_IN_MSPIKE_H2 14 8.46 18.75 6.25 39 XM_Evil_Numbers_Gen 14 9.56 25.00 6.25 40 XMSubLong 13 6.99 12.50 5.80 41 XM_DKIMWhitelistDomains 13 4.78 0.00 5.80 42 XM_UncommonTLD01 13 5.88 6.25 5.80 43 MIME_HTML_ONLY 12 5.51 6.25 5.36 44 USER_IN_DEF_DKIM_WL 12 4.41 0.00 5.36 45 XM_Body_Dirty_Words 11 7.35 18.75 4.91 46 XMStrtUSub 10 4.04 2.08 4.46 47 RCVD_IN_MSPIKE_WL 10 4.04 2.08 4.46 48 HTML_IMAGE_RATIO_04 10 5.15 8.33 4.46 49 TO_MALFORMED 9 3.31 0.00 4.02 50 RELAYCOUNTRY_META 9 5.88 14.58 4.02 51 INVALID_MSGID 9 3.31 0.00 4.02 52 RCVD_IN_MSPIKE_H3 9 3.68 2.08 4.02 53 BAYES_40 9 3.31 0.00 4.02 54 XMLngstWrd_00 8 3.31 2.08 3.57 55 TR_XM_SpammyRelay 7 2.57 0.00 3.12 56 BAYES_80 7 4.78 12.50 3.12 57 T_TooManySym_01 7 2.94 2.08 3.12 58 XM_H_Long_From01 7 3.31 4.17 3.12 59 BAYES_20 7 2.57 0.00 3.12 60 BOTNET_IPINHOSTNAME 7 4.41 10.42 3.12 61 XMNumbers 7 2.57 0.00 3.12 62 LOTS_OF_MONEY 7 2.94 2.08 3.12 63 XMBody_95 7 2.57 0.00 3.12 64 IN_ZIMBRA_NJ_WHITELIST 7 2.57 0.00 3.12 65 XM_B_SpammyWords3 7 4.41 10.42 3.12 66 XM_B_SpammyTLD 6 4.04 10.42 2.68 67 T_TooManySym_02 6 2.21 0.00 2.68 68 TR_XM_SpammyWords4 6 2.57 2.08 2.68 69 RELAYCOUNTRY_AU 6 2.21 0.00 2.68 70 BAYES_00 6 2.21 0.00 2.68 71 TooManyTo_001 5 2.57 4.17 2.23 72 TR_XM_UnparsRelay 5 2.94 6.25 2.23 73 TM2_M_VERY_LONG_WORD 5 2.94 6.25 2.23 74 RCVD_IN_VALIDITY_SAFE 5 1.84 0.00 2.23 75 MIME_QP_LONG_LINE 5 1.84 0.00 2.23 76 RCVD_IN_VALIDITY_CERTIFIED 5 1.84 0.00 2.23 77 T_REMOTE_IMAGE 5 2.21 2.08 2.23 78 XM_OfRef6 5 1.84 0.00 2.23 79 XMBody_17 5 6.25 25.00 2.23 80 MSGID_NOFQDN1 4 1.47 0.00 1.79 81 TR_XM_SpammyWords5 4 1.84 2.08 1.79 82 XM_ZIP 4 1.47 0.00 1.79 83 TR_XM_DK_Bayes 4 1.47 0.00 1.79 84 XM_Ancestry_Forge 4 1.47 0.00 1.79 85 XM_DK_Undo_01 4 1.84 2.08 1.79 86 TR_XM_DK_Bayes1 4 1.47 0.00 1.79 87 FROM_EXCESS_BASE64 4 1.84 2.08 1.79 88 XM_DK_Undo_02 4 10.66 52.08 1.79 89 UNTRUSTED_Relay 4 3.68 12.50 1.79 90 XM_B_Phish_Phrases 3 1.47 2.08 1.34 91 HTML_IMAGE_RATIO_08 3 2.21 6.25 1.34 92 RCVD_IN_RP_SAFE 3 1.10 0.00 1.34 93 XM_Body_Obfu01 3 1.10 0.00 1.34 94 TR_XM_Base64_C 3 1.10 0.00 1.34 95 HTML_IMAGE_RATIO_06 3 1.10 0.00 1.34 96 DKIM_INVALID 3 2.57 8.33 1.34 97 XM_UB50 3 1.47 2.08 1.34 98 RCVD_IN_RP_CERTIFIED 3 1.10 0.00 1.34 99 XM_SPF_SoftFail 3 1.47 2.08 1.34 100 FROM_GOV_SPOOF 3 1.10 0.00 1.34 101 TR_XM_DK_Bayes2 3 1.10 0.00 1.34 102 TR_Symld_Words 3 1.10 0.00 1.34 103 TR_XM_Base64_M1 3 1.10 0.00 1.34 104 T_Symld_Words_02 3 1.10 0.00 1.34 105 LotsOfNums_01 3 1.84 4.17 1.34 106 IN_HORDE_ADDRESS_BOOK 3 1.10 0.00 1.34 107 BAYES_95 3 1.10 0.00 1.34 108 TR_XM_PHPDW 3 2.57 8.33 1.34 109 XM_B_Investor 3 1.47 2.08 1.34 110 TVD_SPACE_RATIO 3 1.10 0.00 1.34 111 TR_XM_Base64_L1 3 1.10 0.00 1.34 112 T_XMDrugObfuBody_14 2 1.10 2.08 0.89 113 XM_H_PHPOS 2 2.21 8.33 0.89 114 RELAYCOUNTRY_FR 2 1.84 6.25 0.89 115 TR_XM_SpoofStaff 2 0.74 0.00 0.89 116 XM_CamelCaseFrm001 2 0.74 0.00 0.89 117 FSL_BULK_SIG 2 2.21 8.33 0.89 118 TR_XM_DKIM_Undo 2 2.21 8.33 0.89 119 NML_ADSP_CUSTOM_MED 2 1.10 2.08 0.89 120 T_FILL_THIS_FORM_SHORT 2 1.10 2.08 0.89 121 TR_XM_PSC1 2 0.74 0.00 0.89 122 USER_IN_WELCOMELIST 2 0.74 0.00 0.89 123 XMSolicitRefs_0 2 1.47 4.17 0.89 124 TR_XM_SB_Phish 2 1.10 2.08 0.89 125 HTML_IMAGE_RATIO_02 2 1.84 6.25 0.89 126 XMCapTrack 2 0.74 0.00 0.89 127 XMSpoofStaff2 2 0.74 0.00 0.89 128 XM_GoogleGroups 2 1.10 2.08 0.89 129 XMDiploma_00 2 0.74 0.00 0.89 130 XM_ZohoDesk1 2 0.74 0.00 0.89 131 TR_XM_PHPForged 2 2.21 8.33 0.89 132 USER_IN_WHITELIST 2 0.74 0.00 0.89 133 TR_XM_PhishingBody 2 0.74 0.00 0.89 134 TR_XM_FormFill2 2 2.21 8.33 0.89 135 XM_H_SpoofStaff4 2 0.74 0.00 0.89 136 HTML_IMAGE_ONLY_20 2 0.74 0.00 0.89 137 DKIM_ADSP_CUSTOM_MED 2 1.10 2.08 0.89 138 MONEY_FORM_SHORT 2 1.10 2.08 0.89 139 XMSubPhish11 2 1.10 2.08 0.89 140 WEIRD_PORT 2 0.74 0.00 0.89 141 XMSubMetaSx_00 2 1.47 4.17 0.89 142 XM_B_SpammyWords4 2 0.74 0.00 0.89 143 MY_SERVERS_FOUND 2 0.74 0.00 0.89 144 XMSubMetaI_00 2 1.10 2.08 0.89 145 XM_B_Phish66 2 0.74 0.00 0.89 146 BAYES_05 2 1.10 2.08 0.89 147 TR_XM_SpoofPhishAttach 2 0.74 0.00 0.89 148 XMLngstWrd_01 2 1.10 2.08 0.89 149 XMGenDplmaNmb 1 0.37 0.00 0.45 150 TR_XM_COVIDMETA4 1 0.37 0.00 0.45 151 XM_TLDProd2 1 0.37 0.00 0.45 152 XMSexyCombo_05 1 1.10 4.17 0.45 153 HTML_MIME_NO_HTML_TAG 1 0.37 0.00 0.45 154 AC_DIV_BONANZA 1 0.37 0.00 0.45 155 XMEmptySub 1 0.37 0.00 0.45 156 MPART_ALT_DIFF_COUNT 1 0.37 0.00 0.45 157 XM_H_PHPOS_M 1 1.47 6.25 0.45 158 LONG_IMG_URI 1 0.37 0.00 0.45 159 GMD_PDF_SQUARE 1 0.37 0.00 0.45 160 CTE_8BIT_MISMATCH 1 0.37 0.00 0.45 161 TO_EQ_FM_DOM_HTML_ONLY 1 0.37 0.00 0.45 162 HTML_TAG_BALANCE_BODY 1 0.37 0.00 0.45 163 XM_S_SubURI 1 0.37 0.00 0.45 164 RCVD_IN_MSPIKE_H5 1 0.37 0.00 0.45 165 RELAYCOUNTRY_CA 1 0.37 0.00 0.45 166 XM_Attn_01 1 0.37 0.00 0.45 167 XM_B_DNDMA 1 0.37 0.00 0.45 168 XMStockSpam_06 1 0.74 2.08 0.45 169 T_DOC_ATTACH_NO_EXT 1 0.37 0.00 0.45 170 XM_Dr_From 1 0.37 0.00 0.45 171 NICE_REPLY_A 1 0.37 0.00 0.45 172 MAILING_LIST_MULTI 1 0.37 0.00 0.45 173 SpammyFromTLD_01 1 0.37 0.00 0.45 174 XMReplyNow 1 0.74 2.08 0.45 175 XMLngstWrd_03 1 0.74 2.08 0.45 176 XM_H_Long_From02 1 0.37 0.00 0.45 177 TR_DCC_Bayes_99 1 1.47 6.25 0.45 178 XM_Lotto 1 0.37 0.00 0.45 179 LOW_PRICE 1 0.37 0.00 0.45 180 XM_H_Trusted_IP 1 0.37 0.00 0.45 181 XMLngstWrd_04 1 0.37 0.00 0.45 182 T_TooManySym_03 1 0.37 0.00 0.45 183 FORGED_GMAIL_RCVD 1 0.37 0.00 0.45 184 XM_H_PHPMailer 1 0.74 2.08 0.45 185 XM_SendGrid 1 0.37 0.00 0.45 186 NO_DNS_FOR_FROM 1 0.74 2.08 0.45 187 XM_Body_Dirty_Words_01 1 1.10 4.17 0.45 188 XMSubject_60 1 1.10 4.17 0.45 189 XMUrgent 1 0.37 0.00 0.45 190 NUMERIC_HTTP_ADDR 1 0.37 0.00 0.45 191 XMLngstWrd_02 1 0.74 2.08 0.45 192 XM_PDF 1 0.37 0.00 0.45 193 T_XMDrugObfuBody_12 1 0.37 0.00 0.45 194 TR_Mismatch_TLD_01 1 0.37 0.00 0.45 195 XMSubMetaSxObfu_03 1 0.74 2.08 0.45 196 XM_BadFromFormat 1 0.37 0.00 0.45 197 DOS_RCVD_IP_TWICE_B 1 0.37 0.00 0.45 198 KHOP_HELO_FCRDNS 1 1.10 4.17 0.45 199 SUBJ_ALL_CAPS 1 0.37 0.00 0.45 200 JOIN_MILLIONS 1 0.37 0.00 0.45 ----------------------------------------------------------------------