Email: 429 Autolearn: 0 AvgScore: 0.56 AvgScanTime: 3.01 sec Spam: 61 Autolearn: 0 AvgScore: 11.98 AvgScanTime: 3.23 sec Ham: 368 Autolearn: 0 AvgScore: -1.33 AvgScanTime: 2.97 sec Time Spent Running SA: 0.36 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 56 65.03 91.80 60.60 2 RELAYCOUNTRY_US 55 62.00 90.16 57.34 3 DKIM_SIGNED 53 50.12 86.89 44.02 4 XM_B_Unicode 52 53.61 85.25 48.37 5 XM_DK_Pass 51 49.42 83.61 43.75 6 DKIM_VALID 51 49.42 83.61 43.75 7 T_SCC_BODY_TEXT_LINE 50 82.75 81.97 82.88 8 XMListUnsubscribeExists 42 34.50 68.85 28.80 9 DCC_CHECK_NEGATIVE 38 89.28 62.30 93.75 10 DKIM_VALID_AU 37 36.36 60.66 32.34 11 XM_B_Unicode3 37 35.20 60.66 30.98 12 LOC_TINY_FONT_1 34 24.94 55.74 19.84 13 XM_B_SpammyWords 34 31.00 55.74 26.90 14 HTML_FONT_LOW_CONTRAST 30 28.67 49.18 25.27 15 BAYES_50 24 65.03 39.34 69.29 16 FVGT_m_MULTI_ODD 24 19.11 39.34 15.76 17 DCC_CHECK 23 10.72 37.70 6.25 18 XM_DK_Undo_02 22 6.99 36.07 2.17 19 XM_B_SpammyWords2 22 11.89 36.07 7.88 20 BAYES_99 21 9.79 34.43 5.71 21 XMSubLong 19 18.88 31.15 16.85 22 XM_Multi_Part_URI 17 10.72 27.87 7.88 23 DKIM_VALID_EF 15 21.68 24.59 21.20 24 BAYES_999 15 7.93 24.59 5.16 25 TR_XM_SpammyWords4 12 3.73 19.67 1.09 26 LOTS_OF_MONEY 12 3.96 19.67 1.36 27 BOTNET_IPINHOSTNAME 11 6.06 18.03 4.08 28 XM_B_Investor 11 2.80 18.03 0.27 29 XMNumbers 11 6.76 18.03 4.89 30 UNPARSEABLE_RELAY 11 15.62 18.03 15.22 31 T_KAM_HTML_FONT_INVALID 11 9.79 18.03 8.42 32 TR_XM_BayesUnsub 10 8.86 16.39 7.61 33 XM_B_Unsub 10 10.26 16.39 9.24 34 XM_Body_Dirty_Words 10 7.93 16.39 6.52 35 TM2_M_URI_OPT_OUT 10 8.39 16.39 7.07 36 RCVD_IN_MSPIKE_H2 9 11.19 14.75 10.60 37 TR_XM_DKIM_Undo 8 2.10 13.11 0.27 38 TR_XM_SpammyWords5 8 4.20 13.11 2.72 39 XMSubMetaSx_00 8 3.73 13.11 2.17 40 TR_XM_DK_Unsub 8 11.89 13.11 11.68 41 T_TM2_M_HEADER_IN_MSG 8 18.65 13.11 19.57 42 XM_UncommonTLD01 8 5.36 13.11 4.08 43 BOTNET 7 2.56 11.48 1.09 44 XM_B_SpammyWords3 7 2.80 11.48 1.36 45 HTML_IMAGE_RATIO_06 7 2.10 11.48 0.54 46 TR_XM_UnparsRelay 7 4.90 11.48 3.80 47 BAYES_80 7 3.73 11.48 2.45 48 TR_DCC_Bayes_99 5 1.17 8.20 0.00 49 HTML_IMAGE_RATIO_02 5 2.33 8.20 1.36 50 MIME_HTML_MOSTLY 5 4.43 8.20 3.80 51 XM_B_Phish_Phrases 5 3.50 8.20 2.72 52 TM2_M_VERY_LONG_WORD 4 3.26 6.56 2.72 53 XMSubLongNoVowel 4 0.93 6.56 0.00 54 TR_MRelay_UG 4 0.93 6.56 0.00 55 BAYES_60 4 7.23 6.56 7.34 56 TR_XM_PhishingBody 4 2.33 6.56 1.63 57 MPART_ALT_DIFF_COUNT 4 1.17 6.56 0.27 58 XM_DK_Undo_01 4 2.10 6.56 1.36 59 XM_B_SpammyTLD 4 3.26 6.56 2.72 60 XMStrtUSub 4 3.26 6.56 2.72 61 XMSubNoVowel 4 5.13 6.56 4.89 62 T_TooManySym_01 4 3.73 6.56 3.26 63 MIME_HTML_ONLY 3 15.38 4.92 17.12 64 TR_XM_FormFill2 3 0.93 4.92 0.27 65 TR_XM_PHPForged 3 0.93 4.92 0.27 66 UNTRUSTED_Relay 3 2.80 4.92 2.45 67 BAYES_95 3 2.10 4.92 1.63 68 MAILING_LIST_MULTI 3 3.03 4.92 2.72 69 LotsOfNums_01 3 1.86 4.92 1.36 70 TR_XM_PHPDW 3 0.93 4.92 0.27 71 XM_H_PHPOS 3 0.93 4.92 0.27 72 XM_H_Undi_Recip 3 0.93 4.92 0.27 73 XM_GoogleGroups 3 2.56 4.92 2.17 74 KHOP_HELO_FCRDNS 3 1.17 4.92 0.54 75 TR_XM_Undi_Recip6 3 0.70 4.92 0.00 76 RELAYCOUNTRY_META 3 4.90 4.92 4.89 77 XM_Evil_Numbers_Gen 3 4.90 4.92 4.89 78 HTTPS_HTTP_MISMATCH 2 0.93 3.28 0.54 79 T_XMHurry_00 2 0.47 3.28 0.00 80 XMPhish08 2 0.70 3.28 0.27 81 XMBody_95 2 3.03 3.28 2.99 82 TR_Mismatch_TLD_01 2 0.47 3.28 0.00 83 SpammyFromTLD_02 2 0.70 3.28 0.27 84 ALL_TRUSTED 2 33.57 3.28 38.59 85 TR_XM_SpammyWords2 2 0.47 3.28 0.00 86 HTML_IMAGE_RATIO_04 2 3.50 3.28 3.53 87 MY_SERVERS_FOUND 2 2.10 3.28 1.90 88 DIET_1 2 0.93 3.28 0.54 89 SpammyFromTLD_01 2 0.93 3.28 0.54 90 DKIM_INVALID 2 0.70 3.28 0.27 91 TR_Symld_Words 2 2.56 3.28 2.45 92 BAYES_40 2 1.86 3.28 1.63 93 MIME_QP_LONG_LINE 2 3.03 3.28 2.99 94 TR_XM_SpammyRelay 2 2.33 3.28 2.17 95 MPART_ALT_DIFF 2 7.93 3.28 8.70 96 FROM_GOV_DKIM_AU 2 0.93 3.28 0.54 97 TR_XM_SPAMCOP 2 0.70 3.28 0.27 98 XMReplyNow 2 0.47 3.28 0.00 99 RCVD_IN_BL_SPAMCOP_NET 2 0.93 3.28 0.54 100 BOTNET_NORDNS 2 0.47 3.28 0.00 101 XM_H_Long_From01 2 2.56 3.28 2.45 102 TR_XM_INV_DKIM 2 0.47 3.28 0.00 103 T_REMOTE_IMAGE 2 2.10 3.28 1.90 104 TooManyTo_001 2 6.53 3.28 7.07 105 XM_Body_Dirty_Words_03 1 0.23 1.64 0.00 106 FROM_SUSPICIOUS_NTLD_FP 1 0.23 1.64 0.00 107 DOS_RCVD_IP_TWICE_B 1 0.47 1.64 0.27 108 FROM_GOV_SPOOF 1 1.17 1.64 1.09 109 FROM_SUSPICIOUS_NTLD 1 0.23 1.64 0.00 110 RCVD_IN_IADB_SENDERID 1 0.47 1.64 0.27 111 SUBJ_OBFU_PUNCT_FEW 1 0.23 1.64 0.00 112 XM_B_SexDrugs2 1 0.23 1.64 0.00 113 NO_DNS_FOR_FROM 1 0.23 1.64 0.00 114 XMSexyCombo_01 1 0.47 1.64 0.27 115 MONEY_FORM 1 0.23 1.64 0.00 116 HELO_NO_DOMAIN 1 0.47 1.64 0.27 117 XM_H_PHPMailer 1 0.93 1.64 0.82 118 RCVD_IN_IADB_DK 1 0.70 1.64 0.54 119 XM_B_DNDMA 1 0.47 1.64 0.27 120 XMPhish14 1 0.47 1.64 0.27 121 URI_NOVOWEL 1 0.70 1.64 0.54 122 PLING_QUERY 1 0.23 1.64 0.00 123 RCVD_IN_IADB_VOUCHED 1 0.70 1.64 0.54 124 TooManyTo_004 1 0.47 1.64 0.27 125 FILL_THIS_FORM 1 0.47 1.64 0.27 126 XM_SPF_SoftFail 1 0.47 1.64 0.27 127 RCVD_IN_IADB_LISTED 1 0.70 1.64 0.54 128 XM_B_Unsub2 1 0.23 1.64 0.00 129 FILL_THIS_FORM_LOAN 1 0.47 1.64 0.27 130 OBFU_TEXT_ATTACH 1 0.23 1.64 0.00 131 XM_B_COVIDMETA 1 1.17 1.64 1.09 132 PRICES_ARE_AFFORDABLE 1 0.23 1.64 0.00 133 XM_Body_Dirty_Words_04 1 0.23 1.64 0.00 134 FORGED_RELAY_MUA_TO_MX 1 0.23 1.64 0.00 135 T_XMDrugObfuBody_00 1 0.47 1.64 0.27 136 RCVD_IN_VALIDITY_RPBL 1 0.47 1.64 0.27 137 HELO_NODOT 1 0.47 1.64 0.27 138 T_XMDrugObfuBody_14 1 1.86 1.64 1.90 139 TR_XM_MaxWHORU 1 0.23 1.64 0.00 140 XM_Body_Dirty_Words_02 1 0.23 1.64 0.00 141 XM_SendGrid 1 2.80 1.64 2.99 142 T_TooManySym_02 1 2.56 1.64 2.72 143 RCVD_IN_IADB_SPF 1 0.70 1.64 0.54 144 XMhairloss01 1 0.23 1.64 0.00 145 FROM_EXCESS_BASE64 1 0.47 1.64 0.27 146 PDS_OTHER_BAD_TLD 1 0.23 1.64 0.00 147 XMDiploma_00 1 1.17 1.64 1.09 148 TooManyTo_002 1 0.70 1.64 0.54 149 DKIM_ADSP_NXDOMAIN 1 0.23 1.64 0.00 150 BOUNCE_MESSAGE 1 27.04 1.64 31.25 151 XM_UB50 1 1.63 1.64 1.63 152 XM_DIRTYINTL 1 0.93 1.64 0.82 153 XM_H_PHPOS_M 1 0.23 1.64 0.00 154 MIME_CHARSET_FARAWAY 1 0.23 1.64 0.00 155 XM_Body_Dirty_Words_05 1 0.23 1.64 0.00 156 DOS_OE_TO_MX 1 0.23 1.64 0.00 157 XMSlimDrugH 1 0.23 1.64 0.00 158 TR_XM_Spammywords 1 0.23 1.64 0.00 159 MIMEOLE_DIRECT_TO_MX 1 0.23 1.64 0.00 160 ONE_TIME 1 0.23 1.64 0.00 161 XM_OfRef6 1 0.93 1.64 0.82 162 SHOPIFY_IMG_NOT_RCVD_SFY 1 0.70 1.64 0.54 163 TR_XM_RelayPhish 1 0.23 1.64 0.00 164 FSL_HELO_NON_FQDN_1 1 0.23 1.64 0.00 165 TooManyTo_003 1 0.70 1.64 0.54 166 HTML_OBFUSCATE_10_20 1 0.23 1.64 0.00 167 RDNS_DYNAMIC 1 0.23 1.64 0.00 168 PDS_RDNS_DYNAMIC_FP 1 0.23 1.64 0.00 169 RELAYCOUNTRY_CA 1 0.23 1.64 0.00 170 SUBJ_DOLLARS 1 0.23 1.64 0.00 171 TR_Mismatch_TLD_02 1 0.23 1.64 0.00 172 XM_S_SpammyWords 1 0.23 1.64 0.00 173 DEAR_FRIEND 1 0.23 1.64 0.00 174 XM_Body_Dirty_Words_01 1 0.47 1.64 0.27 175 HTML_MIME_NO_HTML_TAG 1 1.17 1.64 1.09 176 RELAYCOUNTRY_FR 1 0.47 1.64 0.27 177 TR_XM_Undi_Recip14 1 0.23 1.64 0.00 178 XMNoVowels 1 0.47 1.64 0.27 179 NOT_SPAM 1 0.23 1.64 0.00 180 SUSP_UTF8_WORD_SUBJ 1 0.23 1.64 0.00 181 RELAYCOUNTRY_AT 1 0.70 1.64 0.54 182 XMBody_29 1 0.23 1.64 0.00 183 XMSexyCombo_02 1 0.23 1.64 0.00 184 HTML_TAG_BALANCE_CENTER 1 0.23 1.64 0.00 185 HTML_IMAGE_RATIO_08 1 0.70 1.64 0.54 186 URIBL_DBL_SPAM 1 0.23 1.64 0.00 187 RCVD_IN_MSPIKE_WL 1 4.20 1.64 4.62 188 XM_OfRef7 1 0.47 1.64 0.27 189 XM_UB80 1 0.23 1.64 0.00 190 XMGenDplmaNmb 1 1.17 1.64 1.09 191 XMPhish11 1 0.23 1.64 0.00 192 DRUGS_ERECTILE 1 0.23 1.64 0.00 193 XM_Dr_From 1 0.47 1.64 0.27 194 XMMoneyMeta_00 1 0.23 1.64 0.00 195 FILL_THIS_FORM_LONG 1 0.23 1.64 0.00 196 TO_EQ_FM_DOM_HTML_ONLY 1 0.23 1.64 0.00 197 RCVD_IN_MSPIKE_H3 1 3.73 1.64 4.08 198 XM_B_SexDrugs1 1 0.23 1.64 0.00 199 ANY_BOUNCE_MESSAGE 1 27.04 1.64 31.25 200 XMSexyCombo_05 1 1.17 1.64 1.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 345 89.28 62.30 93.75 2 T_SCC_BODY_TEXT_LINE 305 82.75 81.97 82.88 3 BAYES_50 255 65.03 39.34 69.29 4 HTML_MESSAGE 223 65.03 91.80 60.60 5 RELAYCOUNTRY_US 211 62.00 90.16 57.34 6 XM_B_Unicode 178 53.61 85.25 48.37 7 DKIM_SIGNED 162 50.12 86.89 44.02 8 XM_DK_Pass 161 49.42 83.61 43.75 9 DKIM_VALID 161 49.42 83.61 43.75 10 ALL_TRUSTED 142 33.57 3.28 38.59 11 DKIM_VALID_AU 119 36.36 60.66 32.34 12 BOUNCE_MESSAGE 115 27.04 1.64 31.25 13 ANY_BOUNCE_MESSAGE 115 27.04 1.64 31.25 14 XM_B_Unicode3 114 35.20 60.66 30.98 15 XMListUnsubscribeExists 106 34.50 68.85 28.80 16 XM_B_SpammyWords 99 31.00 55.74 26.90 17 HTML_FONT_LOW_CONTRAST 93 28.67 49.18 25.27 18 DKIM_VALID_EF 78 21.68 24.59 21.20 19 LOC_TINY_FONT_1 73 24.94 55.74 19.84 20 SCC_BODY_URI_ONLY 73 17.02 0.00 19.84 21 T_TM2_M_HEADER_IN_MSG 72 18.65 13.11 19.57 22 MIME_HTML_ONLY 63 15.38 4.92 17.12 23 XMSubLong 62 18.88 31.15 16.85 24 FVGT_m_MULTI_ODD 58 19.11 39.34 15.76 25 UNPARSEABLE_RELAY 56 15.62 18.03 15.22 26 TR_XM_DK_Unsub 43 11.89 13.11 11.68 27 RCVD_IN_MSPIKE_H2 39 11.19 14.75 10.60 28 XM_B_Unsub 34 10.26 16.39 9.24 29 MPART_ALT_DIFF 32 7.93 3.28 8.70 30 XM_H_Trusted_IP 32 7.46 0.00 8.70 31 T_KAM_HTML_FONT_INVALID 31 9.79 18.03 8.42 32 T_XMDrugObfuBody_08 31 7.23 0.00 8.42 33 XM_B_SpammyWords2 29 11.89 36.07 7.88 34 XM_Multi_Part_URI 29 10.72 27.87 7.88 35 TR_XM_BayesUnsub 28 8.86 16.39 7.61 36 BAYES_60 27 7.23 6.56 7.34 37 TM2_M_URI_OPT_OUT 26 8.39 16.39 7.07 38 TooManyTo_001 26 6.53 3.28 7.07 39 XM_Body_Dirty_Words 24 7.93 16.39 6.52 40 MIME_HTML_ONLY_MULTI 23 5.36 0.00 6.25 41 BAYES_20 23 5.36 0.00 6.25 42 DCC_CHECK 23 10.72 37.70 6.25 43 BAYES_99 21 9.79 34.43 5.71 44 BAYES_999 19 7.93 24.59 5.16 45 XMNumbers 18 6.76 18.03 4.89 46 RELAYCOUNTRY_META 18 4.90 4.92 4.89 47 XMSubNoVowel 18 5.13 6.56 4.89 48 XM_Evil_Numbers_Gen 18 4.90 4.92 4.89 49 BAYES_00 18 4.20 0.00 4.89 50 XMGappySubj_01 17 3.96 0.00 4.62 51 RCVD_IN_MSPIKE_WL 17 4.20 1.64 4.62 52 XMGappySubj_02 17 3.96 0.00 4.62 53 XM_DKIMWhitelistDomains 17 3.96 0.00 4.62 54 XM_UncommonTLD01 15 5.36 13.11 4.08 55 RCVD_IN_MSPIKE_H3 15 3.73 1.64 4.08 56 BOTNET_IPINHOSTNAME 15 6.06 18.03 4.08 57 TR_XM_UnparsRelay 14 4.90 11.48 3.80 58 IN_ZIMBRA_NJ_WHITELIST 14 3.26 0.00 3.80 59 MIME_HTML_MOSTLY 14 4.43 8.20 3.80 60 XM_ProductURIs 14 3.26 0.00 3.80 61 INVALID_MSGID 13 3.03 0.00 3.53 62 USER_IN_DEF_DKIM_WL 13 3.03 0.00 3.53 63 HTML_IMAGE_RATIO_04 13 3.50 3.28 3.53 64 T_TooManySym_01 12 3.73 6.56 3.26 65 TR_XM_DK_Bayes2 11 2.56 0.00 2.99 66 MIME_QP_LONG_LINE 11 3.03 3.28 2.99 67 XMBody_95 11 3.03 3.28 2.99 68 TR_XM_DK_Bayes1 11 2.56 0.00 2.99 69 XM_SendGrid 11 2.80 1.64 2.99 70 TR_XM_DK_Bayes 11 2.56 0.00 2.99 71 XMStrtUSub 10 3.26 6.56 2.72 72 TR_XM_DK_SendGrid 10 2.33 0.00 2.72 73 XM_B_Phish_Phrases 10 3.50 8.20 2.72 74 TO_MALFORMED 10 2.33 0.00 2.72 75 TM2_M_VERY_LONG_WORD 10 3.26 6.56 2.72 76 TR_XM_SpammyWords5 10 4.20 13.11 2.72 77 MAILING_LIST_MULTI 10 3.03 4.92 2.72 78 XM_B_SpammyTLD 10 3.26 6.56 2.72 79 T_TooManySym_02 10 2.56 1.64 2.72 80 BAYES_80 9 3.73 11.48 2.45 81 XM_H_Long_From01 9 2.56 3.28 2.45 82 TR_Symld_Words 9 2.56 3.28 2.45 83 UNTRUSTED_Relay 9 2.80 4.92 2.45 84 TR_XM_SpammyRelay 8 2.33 3.28 2.17 85 XM_GoogleGroups 8 2.56 4.92 2.17 86 XM_DK_Undo_02 8 6.99 36.07 2.17 87 XMSubMetaSx_00 8 3.73 13.11 2.17 88 XMSubGarbage 7 1.63 0.00 1.90 89 T_REMOTE_IMAGE 7 2.10 3.28 1.90 90 MY_SERVERS_FOUND 7 2.10 3.28 1.90 91 T_XMDrugObfuBody_14 7 1.86 1.64 1.90 92 XMLngstWrd_00 6 1.40 0.00 1.63 93 RELAYCOUNTRY_DE 6 1.40 0.00 1.63 94 XM_UB50 6 1.63 1.64 1.63 95 RELAYCOUNTRY_AU 6 1.40 0.00 1.63 96 TR_XM_PhishingBody 6 2.33 6.56 1.63 97 BAYES_40 6 1.86 3.28 1.63 98 BAYES_95 6 2.10 4.92 1.63 99 HTML_IMAGE_RATIO_02 5 2.33 8.20 1.36 100 XMBSHREFv2 5 1.17 0.00 1.36 101 XM_B_SpammyWords3 5 2.80 11.48 1.36 102 XM_DK_Undo_01 5 2.10 6.56 1.36 103 LotsOfNums_01 5 1.86 4.92 1.36 104 LOTS_OF_MONEY 5 3.96 19.67 1.36 105 IN_HORDE_ADDRESS_BOOK 4 0.93 0.00 1.09 106 XM_ZIP 4 0.93 0.00 1.09 107 XMGenDplmaNmb 4 1.17 1.64 1.09 108 XMSexyCombo_05 4 1.17 1.64 1.09 109 RCVD_IN_VALIDITY_SAFE 4 0.93 0.00 1.09 110 TVD_SPACE_RATIO_MINFP 4 0.93 0.00 1.09 111 HTML_MIME_NO_HTML_TAG 4 1.17 1.64 1.09 112 TR_XM_SpammyWords4 4 3.73 19.67 1.09 113 HTML_IMAGE_ONLY_20 4 0.93 0.00 1.09 114 XMHTML_After_End 4 0.93 0.00 1.09 115 FROM_GOV_SPOOF 4 1.17 1.64 1.09 116 BOTNET 4 2.56 11.48 1.09 117 XMDiploma_00 4 1.17 1.64 1.09 118 T_FILL_THIS_FORM_SHORT 4 0.93 0.00 1.09 119 XM_B_COVIDMETA 4 1.17 1.64 1.09 120 XM_OfRef6 3 0.93 1.64 0.82 121 XMLngstWrd_01 3 0.70 0.00 0.82 122 XMPhish30 3 0.70 0.00 0.82 123 XM_DIRTYINTL 3 0.93 1.64 0.82 124 MSGID_NOFQDN1 3 0.70 0.00 0.82 125 TVD_RCVD_IP 3 0.70 0.00 0.82 126 URI_HEX 3 0.70 0.00 0.82 127 TVD_SPACE_RATIO 3 0.70 0.00 0.82 128 XMSubject_78 3 0.70 0.00 0.82 129 XM_H_PHPMailer 3 0.93 1.64 0.82 130 FSL_BULK_SIG 3 0.70 0.00 0.82 131 USER_IN_WHITELIST 3 0.70 0.00 0.82 132 XMSubPhish11 3 0.70 0.00 0.82 133 BAYES_05 3 0.70 0.00 0.82 134 TR_XM_SB_Phish 3 0.70 0.00 0.82 135 T_TooManySym_03 3 0.70 0.00 0.82 136 USER_IN_WELCOMELIST 3 0.70 0.00 0.82 137 TooManyTo_003 2 0.70 1.64 0.54 138 XMCapTrack 2 0.47 0.00 0.54 139 XM_UB60 2 0.47 0.00 0.54 140 SHOPIFY_IMG_NOT_RCVD_SFY 2 0.70 1.64 0.54 141 FROM_GOV_DKIM_AU 2 0.93 3.28 0.54 142 XMSpoofStaff2 2 0.47 0.00 0.54 143 RCVD_IN_BL_SPAMCOP_NET 2 0.93 3.28 0.54 144 TooManyTo_002 2 0.70 1.64 0.54 145 RELAYCOUNTRY_GB 2 0.47 0.00 0.54 146 XM_ZohoDesk1 2 0.47 0.00 0.54 147 TR_XM_SpoofPhishAttach 2 0.47 0.00 0.54 148 HTML_IMAGE_RATIO_08 2 0.70 1.64 0.54 149 TR_XM_PSC1 2 0.47 0.00 0.54 150 XMDateMe_00 2 0.47 0.00 0.54 151 XMLngstWrd_02 2 0.47 0.00 0.54 152 RCVD_IN_RP_SAFE 2 0.47 0.00 0.54 153 KHOP_HELO_FCRDNS 2 1.17 4.92 0.54 154 XMBrknScrpt_02 2 0.47 0.00 0.54 155 WEIRD_PORT 2 0.47 0.00 0.54 156 RELAYCOUNTRY_AT 2 0.70 1.64 0.54 157 URIBL_CSS 2 0.47 0.00 0.54 158 RCVD_IN_VALIDITY_CERTIFIED 2 0.47 0.00 0.54 159 HTML_IMAGE_ONLY_24 2 0.47 0.00 0.54 160 RCVD_IN_IADB_DK 2 0.70 1.64 0.54 161 RCVD_IN_IADB_VOUCHED 2 0.70 1.64 0.54 162 XM_PDF 2 0.47 0.00 0.54 163 URI_NOVOWEL 2 0.70 1.64 0.54 164 HTTPS_HTTP_MISMATCH 2 0.93 3.28 0.54 165 XM_H_SpoofStaff4 2 0.47 0.00 0.54 166 DIET_1 2 0.93 3.28 0.54 167 HTML_IMAGE_RATIO_06 2 2.10 11.48 0.54 168 TR_XM_SpoofStaff 2 0.47 0.00 0.54 169 SpammyFromTLD_01 2 0.93 3.28 0.54 170 RCVD_IN_IADB_SPF 2 0.70 1.64 0.54 171 URIBL_CSS_A 2 0.47 0.00 0.54 172 RCVD_IN_IADB_LISTED 2 0.70 1.64 0.54 173 T_TooManySym_04 2 0.47 0.00 0.54 174 FORGED_GMAIL_RCVD 1 0.23 0.00 0.27 175 TR_XM_SPAMCOP 1 0.70 3.28 0.27 176 NORDNS_LOW_CONTRAST 1 0.23 0.00 0.27 177 XM_H_Undi_Recip 1 0.93 4.92 0.27 178 HK_RANDOM_ENVFROM 1 0.23 0.00 0.27 179 RCVD_IN_MSPIKE_H5 1 0.23 0.00 0.27 180 SUBJ_ALL_CAPS 1 0.23 0.00 0.27 181 T_XMDrugObfuBody_12 1 0.23 0.00 0.27 182 TR_Caps_n_Bayes_80 1 0.23 0.00 0.27 183 XMGppyBdWords 1 0.23 0.00 0.27 184 RCVD_IN_IADB_OPTIN 1 0.23 0.00 0.27 185 TR_XM_Base64_M1 1 0.23 0.00 0.27 186 XMSubMetaI_00 1 0.23 0.00 0.27 187 XM_B_Investor 1 2.80 18.03 0.27 188 XM_H_PHPOS 1 0.93 4.92 0.27 189 TR_XM_PHPDW 1 0.93 4.92 0.27 190 XMBody_78 1 0.23 0.00 0.27 191 XM_OfRef7 1 0.47 1.64 0.27 192 XM_B_COPY_HTML 1 0.23 0.00 0.27 193 XMSolicitRefs_0 1 0.23 0.00 0.27 194 XM_Dr_From 1 0.47 1.64 0.27 195 SUBJ_BUY 1 0.23 0.00 0.27 196 XMLngstWrd_03 1 0.23 0.00 0.27 197 UNSUB_GOOG_FORM 1 0.23 0.00 0.27 198 HTML_IMAGE_ONLY_32 1 0.23 0.00 0.27 199 XM_Body_Obfu01 1 0.23 0.00 0.27 200 TRACKER_ID 1 0.23 0.00 0.27 ----------------------------------------------------------------------