Email: 457 Autolearn: 0 AvgScore: 1.47 AvgScanTime: 1.53 sec Spam: 90 Autolearn: 0 AvgScore: 12.03 AvgScanTime: 1.87 sec Ham: 367 Autolearn: 0 AvgScore: -1.11 AvgScanTime: 1.45 sec Time Spent Running SA: 0.19 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85 47.48 94.44 35.97 2 RELAYCOUNTRY_US 80 42.01 88.89 30.52 3 XM_B_Unicode 78 40.92 86.67 29.70 4 DKIM_SIGNED 78 44.86 86.67 34.60 5 T_SCC_BODY_TEXT_LINE 78 84.46 86.67 83.92 6 XM_DK_Pass 73 43.33 81.11 34.06 7 DKIM_VALID 73 42.89 81.11 33.51 8 XM_B_SpammyWords 63 27.13 70.00 16.62 9 XMListUnsubscribeExists 59 31.95 65.56 23.71 10 XM_Multi_Part_URI 53 17.51 58.89 7.36 11 LOC_TINY_FONT_1 50 19.47 55.56 10.63 12 DCC_CHECK_NEGATIVE 50 84.90 55.56 92.10 13 BAYES_50 46 67.61 51.11 71.66 14 DKIM_VALID_AU 41 31.73 45.56 28.34 15 FVGT_m_MULTI_ODD 40 20.13 44.44 14.17 16 DCC_CHECK 40 15.10 44.44 7.90 17 DKIM_VALID_EF 40 21.44 44.44 15.80 18 T_KAM_HTML_FONT_INVALID 36 13.35 40.00 6.81 19 XM_B_Unicode3 35 24.95 38.89 21.53 20 XMSubLong 31 16.85 34.44 12.53 21 HTML_FONT_LOW_CONTRAST 29 19.69 32.22 16.62 22 XM_B_SpammyWords2 29 11.60 32.22 6.54 23 MIME_HTML_ONLY 28 13.35 31.11 8.99 24 TR_XM_DK_Unsub 26 13.35 28.89 9.54 25 HTML_IMAGE_RATIO_06 21 5.03 23.33 0.54 26 FORGED_GMAIL_RCVD 20 4.60 22.22 0.27 27 DKIM_ADSP_CUSTOM_MED 20 5.03 22.22 0.82 28 NML_ADSP_CUSTOM_MED 20 4.81 22.22 0.54 29 XM_H_Long_From01 19 5.47 21.11 1.63 30 XM_B_Unsub 17 6.13 18.89 3.00 31 TR_XM_BayesUnsub 17 6.13 18.89 3.00 32 XM_Evil_Numbers_Gen 16 5.69 17.78 2.72 33 BAYES_99 15 4.81 16.67 1.91 34 BAYES_80 14 4.16 15.56 1.36 35 T_TM2_M_HEADER_IN_MSG 14 9.85 15.56 8.45 36 HTML_IMAGE_RATIO_08 13 3.94 14.44 1.36 37 XM_B_SpammyWords3 13 4.60 14.44 2.18 38 XM_DK_Undo_02 13 4.60 14.44 2.18 39 MIME_HTML_ONLY_MULTI 12 4.16 13.33 1.91 40 URI_TRY_3LD 12 4.16 13.33 1.91 41 MPART_ALT_DIFF 12 5.25 13.33 3.27 42 RCVD_IN_MSPIKE_H2 12 8.32 13.33 7.08 43 BAYES_60 12 5.03 13.33 3.00 44 TR_XM_DKIM_Undo 10 2.19 11.11 0.00 45 UNPARSEABLE_RELAY 10 6.13 11.11 4.90 46 T_XMDrugObfuBody_14 10 3.06 11.11 1.09 47 XM_Body_Dirty_Words 10 4.38 11.11 2.72 48 RELAYCOUNTRY_META 9 8.53 10.00 8.17 49 BAYES_999 9 3.28 10.00 1.63 50 BOTNET_IPINHOSTNAME 9 3.06 10.00 1.36 51 XMSubMetaSx_00 9 2.19 10.00 0.27 52 BOTNET 9 2.41 10.00 0.54 53 XM_UncommonTLD01 8 4.81 8.89 3.81 54 TR_XM_PHPForged 7 1.75 7.78 0.27 55 XM_H_PHPMailer 7 1.97 7.78 0.54 56 HTML_IMAGE_RATIO_02 7 2.19 7.78 0.82 57 LOTS_OF_MONEY 7 2.84 7.78 1.63 58 XMSubMetaSxObfu_03 7 1.53 7.78 0.00 59 TR_XM_PHPDW 7 1.75 7.78 0.27 60 MIME_HTML_MOSTLY 7 2.41 7.78 1.09 61 TR_XM_SB_Phish 6 2.41 6.67 1.36 62 XMSubPhish11 6 2.41 6.67 1.36 63 TR_XM_UnparsRelay 6 2.19 6.67 1.09 64 TR_XM_SpammyWords2 6 1.31 6.67 0.00 65 XMSexyCombo_05 6 1.97 6.67 0.82 66 XM_B_Phish_Phrases 6 2.63 6.67 1.63 67 TR_XM_SpammyRelay 6 3.50 6.67 2.72 68 DKIM_INVALID 5 1.97 5.56 1.09 69 BOTNET_NORDNS 5 1.31 5.56 0.27 70 TR_XM_FormFill2 5 1.31 5.56 0.27 71 XM_Body_Dirty_Words_01 5 1.31 5.56 0.27 72 UNTRUSTED_Relay 5 5.47 5.56 5.45 73 XM_B_SpammyTLD 5 2.63 5.56 1.91 74 XM_SPF_SoftFail 5 1.53 5.56 0.54 75 XM_GoogleGroups 5 2.63 5.56 1.91 76 TooManyTo_001 5 2.41 5.56 1.63 77 XM_H_PHPOS 5 1.31 5.56 0.27 78 TR_MetaPhish_Combo_01 5 1.75 5.56 0.82 79 XMStockSpam_06 5 1.31 5.56 0.27 80 XM_H_PHPOS_M 5 1.31 5.56 0.27 81 XMNumbers 4 2.84 4.44 2.45 82 HELO_NO_DOMAIN 4 0.88 4.44 0.00 83 HELO_NODOT 4 0.88 4.44 0.00 84 TR_XM_SpammyWords5 4 1.75 4.44 1.09 85 FSL_HELO_NON_FQDN_1 4 0.88 4.44 0.00 86 TR_XM_INV_DKIM 3 0.66 3.33 0.00 87 XM_B_Investor 3 1.09 3.33 0.54 88 RCVD_IN_MSPIKE_WL 3 3.72 3.33 3.81 89 TR_Mismatch_TLD_02 3 0.66 3.33 0.00 90 RCVD_IN_BL_SPAMCOP_NET 3 0.88 3.33 0.27 91 XM_UB50 3 1.97 3.33 1.63 92 FROM_SUSPICIOUS_NTLD_FP 3 0.66 3.33 0.00 93 XM_B_SpammyWords4 3 0.66 3.33 0.00 94 SpammyFromTLD_02 3 1.09 3.33 0.54 95 RCVD_IN_MSPIKE_H3 3 3.28 3.33 3.27 96 HTML_IMAGE_RATIO_04 3 2.41 3.33 2.18 97 XMBody_17 3 1.09 3.33 0.54 98 T_TooManySym_02 3 2.63 3.33 2.45 99 ALL_TRUSTED 3 50.33 3.33 61.85 100 XMStrtUSub 3 2.84 3.33 2.72 101 T_TooManySym_01 3 4.16 3.33 4.36 102 FROM_SUSPICIOUS_NTLD 3 0.66 3.33 0.00 103 BAYES_95 2 1.31 2.22 1.09 104 IMPOTENCE 2 0.44 2.22 0.00 105 URI_NOVOWEL 2 0.66 2.22 0.27 106 XMDateMe_00 2 0.66 2.22 0.27 107 RELAYCOUNTRY_AU 2 1.75 2.22 1.63 108 TM2_M_OBFU_COMMENT 2 0.44 2.22 0.00 109 TM2_M_VERY_LONG_WORD 2 1.09 2.22 0.82 110 XM_Lotto 2 0.44 2.22 0.00 111 RELAYCOUNTRY_PL 2 0.44 2.22 0.00 112 CK_HELO_GENERIC 2 0.44 2.22 0.00 113 TooManyTo_004 2 0.66 2.22 0.27 114 TM2_M_URI_OPT_OUT 2 0.88 2.22 0.54 115 TooManyTo_003 2 0.66 2.22 0.27 116 XM_OfRef6 2 0.44 2.22 0.00 117 LongTLD 2 0.44 2.22 0.00 118 HTML_MIME_NO_HTML_TAG 2 0.88 2.22 0.54 119 TR_DCC_Bayes_99 2 0.66 2.22 0.27 120 HTML_FONT_TINY_NORDNS 2 0.44 2.22 0.00 121 XMDiploma_00 2 0.66 2.22 0.27 122 TR_XM_SPAMCOP 2 0.44 2.22 0.00 123 SpammyFromTLD_01 2 0.66 2.22 0.27 124 PDS_OTHER_BAD_TLD 2 0.44 2.22 0.00 125 TooManyTo_002 2 0.88 2.22 0.54 126 LotsOfNums_01 2 2.41 2.22 2.45 127 XM_SendGrid 2 1.31 2.22 1.09 128 TR_XM_InvalidRelay 2 0.44 2.22 0.00 129 XMCmmnCold 2 0.44 2.22 0.00 130 XMGenDplmaNmb 2 0.66 2.22 0.27 131 TO_NO_BRKTS_HTML_ONLY 2 0.88 2.22 0.54 132 T_REMOTE_IMAGE 2 2.84 2.22 3.00 133 KHOP_HELO_FCRDNS 1 0.22 1.11 0.00 134 XMSexyCombo_04 1 0.22 1.11 0.00 135 XM_UB80 1 0.22 1.11 0.00 136 TR_XM_PhishingBody 1 0.44 1.11 0.27 137 ANY_BOUNCE_MESSAGE 1 46.39 1.11 57.49 138 IN_ZIMBRA_BLACKLIST 1 0.22 1.11 0.00 139 DRUGS_ERECTILE 1 0.22 1.11 0.00 140 GMD_PDF_HORIZ 1 0.22 1.11 0.00 141 TR_XM_SpoofPhishAttach 1 0.66 1.11 0.54 142 HDR_ORDER_FTSDMCXX_DIRECT 1 0.22 1.11 0.00 143 XMGappySubj_01 1 0.88 1.11 0.82 144 XMSubNoVowel 1 0.66 1.11 0.54 145 T_XMDrugObfuBody_00 1 0.22 1.11 0.00 146 FSL_BULK_SIG 1 0.88 1.11 0.82 147 HTML_OBFUSCATE_05_10 1 0.22 1.11 0.00 148 XMPhish11 1 0.22 1.11 0.00 149 DOS_OE_TO_MX 1 0.22 1.11 0.00 150 XM_B_SexDrugs1 1 0.22 1.11 0.00 151 TR_MetaPhish_Gmail 1 0.22 1.11 0.00 152 XM_PDF 1 0.44 1.11 0.27 153 HDR_ORDER_FTSDMCXX_NORDNS 1 0.22 1.11 0.00 154 RELAYCOUNTRY_CA 1 1.53 1.11 1.63 155 XM_Body_Dirty_Words_02 1 0.22 1.11 0.00 156 RELAYCOUNTRY_DE 1 0.44 1.11 0.27 157 TR_XM_SpammyWords7 1 0.22 1.11 0.00 158 MIMEOLE_DIRECT_TO_MX 1 0.22 1.11 0.00 159 TR_XM_NoHeaderRelay 1 0.22 1.11 0.00 160 HTML_EXTRA_CLOSE 1 0.22 1.11 0.00 161 GMD_PDF_SQUARE 1 0.22 1.11 0.00 162 TR_XM_DK_Bayes1 1 4.81 1.11 5.72 163 RDNS_DYNAMIC 1 0.22 1.11 0.00 164 RELAYCOUNTRY_BE 1 0.44 1.11 0.27 165 XM_Nigeria_01 1 0.22 1.11 0.00 166 MIME_QP_LONG_LINE 1 1.97 1.11 2.18 167 TR_Orig_Subnet 1 0.22 1.11 0.00 168 HK_RANDOM_ENVFROM 1 1.09 1.11 1.09 169 XMSolicitRefs_0 1 0.22 1.11 0.00 170 XM_B_SpammyTLD2 1 0.22 1.11 0.00 171 TR_XM_RelayPhish 1 0.22 1.11 0.00 172 XM_B_COVIDMETA 1 0.22 1.11 0.00 173 XMSubLongNoVowel 1 0.22 1.11 0.00 174 PDS_RDNS_DYNAMIC_FP 1 0.22 1.11 0.00 175 XMSlimDrugH 1 0.66 1.11 0.54 176 XMBody_95 1 0.66 1.11 0.54 177 TR_XM_DK_Bayes 1 4.81 1.11 5.72 178 BAYES_00 1 6.13 1.11 7.36 179 XMMoneyMeta_00 1 0.22 1.11 0.00 180 TR_XM_DK_Bayes2 1 4.60 1.11 5.45 181 XMSubject_60 1 0.44 1.11 0.27 182 DRUGS_MUSCLE 1 0.22 1.11 0.00 183 HTML_TAG_BALANCE_HEAD 1 0.44 1.11 0.27 184 URIBL_DBL_SPAM 1 0.22 1.11 0.00 185 URIBL_BLACK 1 0.22 1.11 0.00 186 XM_S_SketchInvoice 1 0.22 1.11 0.00 187 PLING_QUERY 1 0.44 1.11 0.27 188 NORDNS_LOW_CONTRAST 1 0.22 1.11 0.00 189 RCVD_IN_PSBL 1 0.22 1.11 0.00 190 XM_Nigeria_02 1 0.22 1.11 0.00 191 URIBL_DBL_ABUSE_SPAM 1 0.22 1.11 0.00 192 XM_OfRef7 1 0.22 1.11 0.00 193 RELAYCOUNTRY_ZW 1 0.22 1.11 0.00 194 MSGID_FROM_MTA_HEADER 1 0.88 1.11 0.82 195 BOGUS_MIME_VERSION 1 0.22 1.11 0.00 196 FROM_LOCAL_NOVOWEL 1 0.22 1.11 0.00 197 XMGappySubj_02 1 0.66 1.11 0.54 198 DRUGS_DIET 1 0.22 1.11 0.00 199 TR_XM_COVIDMETA3 1 0.22 1.11 0.00 200 XM_GoogleGroups2 1 0.44 1.11 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 338 84.90 55.56 92.10 2 T_SCC_BODY_TEXT_LINE 308 84.46 86.67 83.92 3 BAYES_50 263 67.61 51.11 71.66 4 ALL_TRUSTED 227 50.33 3.33 61.85 5 ANY_BOUNCE_MESSAGE 211 46.39 1.11 57.49 6 BOUNCE_MESSAGE 211 46.39 1.11 57.49 7 SCC_BODY_URI_ONLY 146 31.95 0.00 39.78 8 HTML_MESSAGE 132 47.48 94.44 35.97 9 DKIM_SIGNED 127 44.86 86.67 34.60 10 XM_DK_Pass 125 43.33 81.11 34.06 11 DKIM_VALID 123 42.89 81.11 33.51 12 RELAYCOUNTRY_US 112 42.01 88.89 30.52 13 XM_B_Unicode 109 40.92 86.67 29.70 14 DKIM_VALID_AU 104 31.73 45.56 28.34 15 XMListUnsubscribeExists 87 31.95 65.56 23.71 16 XM_B_Unicode3 79 24.95 38.89 21.53 17 T_XMDrugObfuBody_08 65 14.22 0.00 17.71 18 XM_B_SpammyWords 61 27.13 70.00 16.62 19 HTML_FONT_LOW_CONTRAST 61 19.69 32.22 16.62 20 DKIM_VALID_EF 58 21.44 44.44 15.80 21 FVGT_m_MULTI_ODD 52 20.13 44.44 14.17 22 XMSubLong 46 16.85 34.44 12.53 23 BAYES_20 42 9.19 0.00 11.44 24 LOC_TINY_FONT_1 39 19.47 55.56 10.63 25 TR_XM_DK_Unsub 35 13.35 28.89 9.54 26 MIME_HTML_ONLY 33 13.35 31.11 8.99 27 T_TM2_M_HEADER_IN_MSG 31 9.85 15.56 8.45 28 RELAYCOUNTRY_META 30 8.53 10.00 8.17 29 DCC_CHECK 29 15.10 44.44 7.90 30 BAYES_00 27 6.13 1.11 7.36 31 XM_Multi_Part_URI 27 17.51 58.89 7.36 32 RCVD_IN_MSPIKE_H2 26 8.32 13.33 7.08 33 T_KAM_HTML_FONT_INVALID 25 13.35 40.00 6.81 34 XM_B_SpammyWords2 24 11.60 32.22 6.54 35 TR_XM_DK_Bayes1 21 4.81 1.11 5.72 36 TR_XM_DK_Bayes 21 4.81 1.11 5.72 37 UNTRUSTED_Relay 20 5.47 5.56 5.45 38 TR_XM_DK_Bayes2 20 4.60 1.11 5.45 39 UNPARSEABLE_RELAY 18 6.13 11.11 4.90 40 XM_DKIMWhitelistDomains 18 3.94 0.00 4.90 41 T_TooManySym_01 16 4.16 3.33 4.36 42 RCVD_IN_MSPIKE_WL 14 3.72 3.33 3.81 43 XM_UncommonTLD01 14 4.81 8.89 3.81 44 RELAYCOUNTRY_AT 13 3.06 1.11 3.54 45 RCVD_IN_MSPIKE_H3 12 3.28 3.33 3.27 46 MPART_ALT_DIFF 12 5.25 13.33 3.27 47 XM_B_Unsub 11 6.13 18.89 3.00 48 TR_XM_BayesUnsub 11 6.13 18.89 3.00 49 BAYES_60 11 5.03 13.33 3.00 50 T_REMOTE_IMAGE 11 2.84 2.22 3.00 51 MAILING_LIST_MULTI 11 2.41 0.00 3.00 52 XM_Evil_Numbers_Gen 10 5.69 17.78 2.72 53 USER_IN_DEF_DKIM_WL 10 2.19 0.00 2.72 54 TR_XM_SpammyRelay 10 3.50 6.67 2.72 55 XMStrtUSub 10 2.84 3.33 2.72 56 XM_Body_Dirty_Words 10 4.38 11.11 2.72 57 IN_ZIMBRA_NJ_WHITELIST 9 1.97 0.00 2.45 58 T_TooManySym_02 9 2.63 3.33 2.45 59 LotsOfNums_01 9 2.41 2.22 2.45 60 XMNumbers 9 2.84 4.44 2.45 61 XM_DK_Undo_02 8 4.60 14.44 2.18 62 MIME_QP_LONG_LINE 8 1.97 1.11 2.18 63 HTML_IMAGE_RATIO_04 8 2.41 3.33 2.18 64 XM_B_SpammyWords3 8 4.60 14.44 2.18 65 INVALID_MSGID 7 1.53 0.00 1.91 66 XM_GoogleGroups 7 2.63 5.56 1.91 67 XM_B_SpammyTLD 7 2.63 5.56 1.91 68 MIME_HTML_ONLY_MULTI 7 4.16 13.33 1.91 69 BAYES_99 7 4.81 16.67 1.91 70 URI_TRY_3LD 7 4.16 13.33 1.91 71 XM_UB50 6 1.97 3.33 1.63 72 TooManyTo_001 6 2.41 5.56 1.63 73 XM_B_Phish_Phrases 6 2.63 6.67 1.63 74 BAYES_999 6 3.28 10.00 1.63 75 BAYES_40 6 1.31 0.00 1.63 76 RELAYCOUNTRY_CA 6 1.53 1.11 1.63 77 XM_H_Long_From01 6 5.47 21.11 1.63 78 RELAYCOUNTRY_AU 6 1.75 2.22 1.63 79 LOTS_OF_MONEY 6 2.84 7.78 1.63 80 TO_MALFORMED 5 1.09 0.00 1.36 81 XMNoVowels 5 1.09 0.00 1.36 82 BAYES_80 5 4.16 15.56 1.36 83 HTML_IMAGE_RATIO_08 5 3.94 14.44 1.36 84 XMSubPhish11 5 2.41 6.67 1.36 85 TR_XM_SB_Phish 5 2.41 6.67 1.36 86 HTML_IMAGE_ONLY_20 5 1.09 0.00 1.36 87 IN_HORDE_ADDRESS_BOOK 5 1.09 0.00 1.36 88 BOTNET_IPINHOSTNAME 5 3.06 10.00 1.36 89 USER_IN_WELCOMELIST 4 0.88 0.00 1.09 90 HK_RANDOM_ENVFROM 4 1.09 1.11 1.09 91 DKIM_INVALID 4 1.97 5.56 1.09 92 XM_ZIP 4 0.88 0.00 1.09 93 TR_XM_UnparsRelay 4 2.19 6.67 1.09 94 BAYES_95 4 1.31 2.22 1.09 95 HK_RANDOM_FROM 4 1.09 1.11 1.09 96 XM_SendGrid 4 1.31 2.22 1.09 97 XMLngstWrd_00 4 0.88 0.00 1.09 98 TR_XM_SpammyWords5 4 1.75 4.44 1.09 99 XM_DK_Undo_01 4 0.88 0.00 1.09 100 T_XMDrugObfuBody_14 4 3.06 11.11 1.09 101 MIME_HTML_MOSTLY 4 2.41 7.78 1.09 102 USER_IN_WHITELIST 4 0.88 0.00 1.09 103 XMLngstWrd_01 4 0.88 0.00 1.09 104 TM2_M_VERY_LONG_WORD 3 1.09 2.22 0.82 105 XMSexyCombo_05 3 1.97 6.67 0.82 106 FSL_BULK_SIG 3 0.88 1.11 0.82 107 XMGappySubj_01 3 0.88 1.11 0.82 108 XM_Body_Obfu01 3 0.66 0.00 0.82 109 T_TooManySym_03 3 0.66 0.00 0.82 110 MSGID_FROM_MTA_HEADER 3 0.88 1.11 0.82 111 TVD_SPACE_RATIO 3 0.66 0.00 0.82 112 TR_MetaPhish_Combo_01 3 1.75 5.56 0.82 113 HTML_IMAGE_RATIO_02 3 2.19 7.78 0.82 114 TR_XM_DK_SendGrid 3 0.66 0.00 0.82 115 DKIM_ADSP_CUSTOM_MED 3 5.03 22.22 0.82 116 URI_HEX 2 0.44 0.00 0.54 117 SpammyFromTLD_02 2 1.09 3.33 0.54 118 XMBSHREFv2 2 0.44 0.00 0.54 119 XMSlimDrugH 2 0.66 1.11 0.54 120 XMBody_95 2 0.66 1.11 0.54 121 RCVD_IN_IADB_SPF 2 0.44 0.00 0.54 122 XM_DIRTYINTL 2 0.44 0.00 0.54 123 RCVD_IN_VALIDITY_SAFE 2 0.44 0.00 0.54 124 XMLngstWrd_02 2 0.44 0.00 0.54 125 XM_SPF_SoftFail 2 1.53 5.56 0.54 126 TM2_M_URI_OPT_OUT 2 0.88 2.22 0.54 127 TR_Symld_Words 2 0.44 0.00 0.54 128 XMSubNoVowel 2 0.66 1.11 0.54 129 HTML_IMAGE_RATIO_06 2 5.03 23.33 0.54 130 TR_XM_SpoofPhishAttach 2 0.66 1.11 0.54 131 XM_CamelCaseFrm001 2 0.44 0.00 0.54 132 XM_H_FedEx_Spoof 2 0.44 0.00 0.54 133 XM_B_Investor 2 1.09 3.33 0.54 134 XM_H_PHPMailer 2 1.97 7.78 0.54 135 LONG_JUNK_URI3 2 0.44 0.00 0.54 136 XM_H_SpoofStaff4 2 0.44 0.00 0.54 137 RCVD_IN_IADB_LISTED 2 0.44 0.00 0.54 138 RELAYCOUNTRY_FR 2 0.44 0.00 0.54 139 XM_Dr_From 2 0.44 0.00 0.54 140 XMSubject_78 2 0.44 0.00 0.54 141 NML_ADSP_CUSTOM_MED 2 4.81 22.22 0.54 142 TR_XM_PSC1 2 0.44 0.00 0.54 143 RCVD_IN_IADB_SENDERID 2 0.44 0.00 0.54 144 RCVD_IN_IADB_DK 2 0.44 0.00 0.54 145 XMGappySubj_02 2 0.66 1.11 0.54 146 TR_XM_SpammyWords4 2 0.66 1.11 0.54 147 TO_NO_BRKTS_HTML_ONLY 2 0.88 2.22 0.54 148 BOTNET 2 2.41 10.00 0.54 149 MISSING_HEADERS 2 0.44 0.00 0.54 150 XMBody_17 2 1.09 3.33 0.54 151 XMSpoofStaff2 2 0.44 0.00 0.54 152 BAYES_05 2 0.44 0.00 0.54 153 HTML_MIME_NO_HTML_TAG 2 0.88 2.22 0.54 154 XMLngstWrd_04 2 0.44 0.00 0.54 155 TooManyTo_002 2 0.88 2.22 0.54 156 XMLngstWrd_03 2 0.44 0.00 0.54 157 FROM_GOV_SPOOF 2 0.44 0.00 0.54 158 TR_XM_SpoofStaff 2 0.44 0.00 0.54 159 DEAR_SOMETHING 2 0.44 0.00 0.54 160 SHORT_URI 2 0.44 0.00 0.54 161 XM_ZohoDesk1 2 0.44 0.00 0.54 162 RELAYCOUNTRY_NL 1 0.22 0.00 0.27 163 TooManyTo_004 1 0.66 2.22 0.27 164 TR_XM_Base64_C 1 0.22 0.00 0.27 165 RELAYCOUNTRY_BE 1 0.44 1.11 0.27 166 XMSubMetaI_00 1 0.22 0.00 0.27 167 RCVD_IN_BL_SPAMCOP_NET 1 0.88 3.33 0.27 168 XM_Body_Dirty_Words_01 1 1.31 5.56 0.27 169 XM_URI_RBL 1 0.22 0.00 0.27 170 XMOemUri 1 0.22 0.00 0.27 171 XMSubject_60 1 0.44 1.11 0.27 172 NUMERIC_HTTP_ADDR 1 0.22 0.00 0.27 173 TR_Sbj_FN_Bdy 1 0.22 0.00 0.27 174 TooManyTo_003 1 0.66 2.22 0.27 175 TR_LOTS_OF_MONEY3 1 0.22 0.00 0.27 176 TR_MetaPhish_Combo_01b 1 0.22 0.00 0.27 177 TO_NO_BRKTS_FROM_MSSP 1 0.22 0.00 0.27 178 TR_XM_FormFill2 1 1.31 5.56 0.27 179 RCVD_IN_MSPIKE_H5 1 0.22 0.00 0.27 180 TR_XM_PhishingBody 1 0.44 1.11 0.27 181 BOTNET_NORDNS 1 1.31 5.56 0.27 182 MIME_HEADER_CTYPE_ONLY 1 0.22 0.00 0.27 183 XM_PDF 1 0.44 1.11 0.27 184 RCVD_IN_MSPIKE_H4 1 0.22 0.00 0.27 185 RELAYCOUNTRY_DE 1 0.44 1.11 0.27 186 XM_BadFromFormat 1 0.22 0.00 0.27 187 TR_XM_Base64_L1 1 0.22 0.00 0.27 188 NO_RDNS_DOTCOM_HELO 1 0.22 0.00 0.27 189 DEAR_FRIEND 1 0.22 0.00 0.27 190 URI_NOVOWEL 1 0.66 2.22 0.27 191 T_OBFU_PDF_ATTACH 1 0.22 0.00 0.27 192 FORGED_GMAIL_RCVD 1 4.60 22.22 0.27 193 XMDateMe_00 1 0.66 2.22 0.27 194 FORGED_YAHOO_RCVD 1 0.22 0.00 0.27 195 TR_XM_PHPForged 1 1.75 7.78 0.27 196 HTML_IMAGE_ONLY_04 1 0.22 0.00 0.27 197 MY_SERVERS_FOUND 1 0.44 1.11 0.27 198 TR_XM_Base64_M1 1 0.22 0.00 0.27 199 XM_GoogleGroups2 1 0.44 1.11 0.27 200 XM_H_Long_From02 1 0.22 0.00 0.27 ----------------------------------------------------------------------