Email: 444 Autolearn: 0 AvgScore: 0.93 AvgScanTime: 1.88 sec Spam: 58 Autolearn: 0 AvgScore: 12.55 AvgScanTime: 2.31 sec Ham: 386 Autolearn: 0 AvgScore: -0.82 AvgScanTime: 1.82 sec Time Spent Running SA: 0.23 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.19 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 55 53.38 94.83 47.15 2 DCC_CHECK_NEGATIVE 53 96.40 91.38 97.15 3 DKIM_SIGNED 51 53.60 87.93 48.45 4 XM_B_Unicode 51 37.61 87.93 30.05 5 RELAYCOUNTRY_US 48 52.25 82.76 47.67 6 XM_DK_Pass 47 51.80 81.03 47.41 7 DKIM_VALID 46 50.68 79.31 46.37 8 LOC_TINY_FONT_1 38 22.07 65.52 15.54 9 DKIM_VALID_AU 37 42.34 63.79 39.12 10 XM_B_SpammyWords 34 27.48 58.62 22.80 11 XMListUnsubscribeExists 31 28.60 53.45 24.87 12 XM_DK_Undo_02 26 6.31 44.83 0.52 13 DKIM_VALID_EF 25 31.31 43.10 29.53 14 FVGT_m_MULTI_ODD 24 17.34 41.38 13.73 15 BAYES_50 24 71.17 41.38 75.65 16 XM_B_Unicode3 24 23.42 41.38 20.73 17 HTML_FONT_LOW_CONTRAST 22 21.62 37.93 19.17 18 XM_Multi_Part_URI 21 11.94 36.21 8.29 19 XM_B_SpammyWords2 21 10.36 36.21 6.48 20 TR_XM_BayesUnsub 19 9.46 32.76 5.96 21 XM_B_Unsub 19 9.91 32.76 6.48 22 BAYES_99 18 4.73 31.03 0.78 23 RCVD_IN_MSPIKE_H2 18 10.81 31.03 7.77 24 T_TM2_M_HEADER_IN_MSG 17 16.22 29.31 14.25 25 UNPARSEABLE_RELAY 15 10.59 25.86 8.29 26 LOTS_OF_MONEY 15 5.18 25.86 2.07 27 XMSubLong 14 17.12 24.14 16.06 28 BAYES_999 13 3.60 22.41 0.78 29 TR_XM_DKIM_Undo 12 2.70 20.69 0.00 30 T_KAM_HTML_FONT_INVALID 11 9.23 18.97 7.77 31 RELAYCOUNTRY_META 11 6.08 18.97 4.15 32 XM_SPF_SoftFail 10 2.93 17.24 0.78 33 TR_XM_DK_Unsub 10 10.36 17.24 9.33 34 RCVD_IN_BL_SPAMCOP_NET 9 2.03 15.52 0.00 35 T_MONEY_PERCENT 9 2.93 15.52 1.04 36 XM_B_SpammyWords3 9 4.28 15.52 2.59 37 TR_LOTS_OF_MONEY2 9 2.93 15.52 1.04 38 UNTRUSTED_Relay 8 3.38 13.79 1.81 39 MIME_HTML_ONLY 8 11.49 13.79 11.14 40 HTML_IMAGE_RATIO_02 8 3.15 13.79 1.55 41 TR_XM_UnparsRelay 7 2.48 12.07 1.04 42 MIME_HTML_MOSTLY 7 3.15 12.07 1.81 43 TR_XM_SpammyRelay 7 2.70 12.07 1.30 44 TR_XM_SPAMCOP 6 1.35 10.34 0.00 45 XM_Body_Dirty_Words 5 2.70 8.62 1.81 46 BAYES_60 5 7.66 8.62 7.51 47 XM_UncommonTLD01 5 4.05 8.62 3.37 48 BAYES_95 5 2.03 8.62 1.04 49 DKIM_INVALID 5 2.93 8.62 2.07 50 XM_OfRef6 5 1.35 8.62 0.26 51 T_XMDrugObfuBody_08 5 3.38 8.62 2.59 52 TR_XM_SpammyWords4 5 1.35 8.62 0.26 53 BOTNET 5 1.13 8.62 0.00 54 DCC_CHECK 5 3.60 8.62 2.85 55 TR_XM_SpammyWords2 4 0.90 6.90 0.00 56 XMStrtUSub 4 6.76 6.90 6.74 57 XM_B_SpammyTLD 4 3.15 6.90 2.59 58 XM_UB50 4 1.58 6.90 0.78 59 TR_XM_InvalidRelay 4 0.90 6.90 0.00 60 BAYES_80 4 2.70 6.90 2.07 61 XMSubMetaSx_00 4 2.25 6.90 1.55 62 XM_Evil_Numbers_Gen 4 4.05 6.90 3.63 63 TM2_M_VERY_LONG_WORD 4 1.58 6.90 0.78 64 T_XMDrugObfuBody_14 4 1.35 6.90 0.52 65 BOTNET_IPINHOSTNAME 3 3.15 5.17 2.85 66 T_XMHurry_00 3 0.90 5.17 0.26 67 XMSolicitRefs_0 3 0.68 5.17 0.00 68 XMSolicitRefs_4 3 0.68 5.17 0.00 69 XMGppyBdWords 3 0.90 5.17 0.26 70 RCVD_IN_VALIDITY_RPBL 3 0.68 5.17 0.00 71 XM_B_Investor 3 0.90 5.17 0.26 72 HTML_FONT_TINY_NORDNS 3 1.35 5.17 0.78 73 T_TooManySym_01 3 6.76 5.17 6.99 74 XM_B_Phish_Phrases 3 1.58 5.17 1.04 75 TR_XM_PhishingBody 2 1.13 3.45 0.78 76 XMSlimDrugH 2 0.68 3.45 0.26 77 TooManyTo_001 2 2.70 3.45 2.59 78 XM_H_Long_From01 2 4.95 3.45 5.18 79 TR_XM_PHPDW 2 0.90 3.45 0.52 80 XM_B_Crypto 2 0.45 3.45 0.00 81 NAME_EMAIL_DIFF 2 0.45 3.45 0.00 82 MAILING_LIST_MULTI 2 3.60 3.45 3.63 83 TM2_M_URI_OPT_OUT 2 1.35 3.45 1.04 84 SHOPIFY_IMG_NOT_RCVD_SFY 2 1.13 3.45 0.78 85 CK_HELO_GENERIC 2 0.45 3.45 0.00 86 XM_TLDProd2 2 0.45 3.45 0.00 87 RELAYCOUNTRY_PL 2 0.45 3.45 0.00 88 NO_DNS_FOR_FROM 2 0.45 3.45 0.00 89 FILL_THIS_FORM_LONG 2 0.45 3.45 0.00 90 FSL_BULK_SIG 2 1.13 3.45 0.78 91 RELAYCOUNTRY_FR 2 0.68 3.45 0.26 92 XM_H_PHPOS 2 0.90 3.45 0.52 93 XM_ProductURIs 2 0.68 3.45 0.26 94 TR_XM_FormFill2 2 0.90 3.45 0.52 95 TR_Mismatch_TLD_02 2 0.45 3.45 0.00 96 FILL_THIS_FORM 2 0.45 3.45 0.00 97 URI_DOTEDU 2 0.45 3.45 0.00 98 T_TooManySym_02 2 2.48 3.45 2.33 99 BOTNET_NORDNS 2 0.45 3.45 0.00 100 XMNoVowels 2 2.93 3.45 2.85 101 SpammyFromTLD_01 2 0.45 3.45 0.00 102 XMBSHREFv2 2 0.45 3.45 0.00 103 XM_UB99 2 0.45 3.45 0.00 104 MIXED_CENTER_CASE 2 0.45 3.45 0.00 105 XMPhish08 2 0.45 3.45 0.00 106 XM_UB999 2 0.45 3.45 0.00 107 TR_XM_PHPForged 2 0.90 3.45 0.52 108 XM_OfRef7 2 0.45 3.45 0.00 109 MONEY_FORM 2 0.45 3.45 0.00 110 TR_XM_MaxWHORU 2 0.45 3.45 0.00 111 T_Symld_Words_02 2 0.68 3.45 0.26 112 XM_DK_Undo_01 2 0.90 3.45 0.52 113 TR_Symld_Words 1 1.13 1.72 1.04 114 TVD_SPACE_ENCODED 1 0.23 1.72 0.00 115 TR_XM_Undi_RecipCombo3 1 0.23 1.72 0.00 116 TR_MRelay_UG 1 0.23 1.72 0.00 117 UNDISC_MONEY 1 0.23 1.72 0.00 118 RELAYCOUNTRY_CZ 1 0.23 1.72 0.00 119 BAYES_40 1 3.15 1.72 3.37 120 TVD_SPACE_RATIO_MINFP 1 0.23 1.72 0.00 121 XM_HighProb1 1 0.23 1.72 0.00 122 HTML_IMAGE_RATIO_06 1 2.93 1.72 3.11 123 MONEY_FRAUD_3 1 0.23 1.72 0.00 124 BAYES_20 1 1.80 1.72 1.81 125 HTML_IMAGE_RATIO_08 1 0.68 1.72 0.52 126 XM_GoogleGroups 1 1.58 1.72 1.55 127 CHARSET_FARAWAY_HEADER 1 0.45 1.72 0.26 128 FSL_HELO_NON_FQDN_1 1 0.23 1.72 0.00 129 TooManyTo_005 1 0.23 1.72 0.00 130 SHORTENED_URL_HREF 1 0.23 1.72 0.00 131 MIME_QP_LONG_LINE 1 1.58 1.72 1.55 132 XM_Body_Dirty_Words_01 1 0.23 1.72 0.00 133 TR_XM_Undi_Recip5 1 0.23 1.72 0.00 134 BOUNCE_MESSAGE 1 36.94 1.72 42.23 135 XM_H_PHPOS_M 1 0.68 1.72 0.52 136 TooManyTo_002 1 0.23 1.72 0.00 137 HELO_NODOT 1 0.90 1.72 0.78 138 TR_XM_COVIDMETA4 1 0.45 1.72 0.26 139 RCVD_IN_RP_RNBL 1 0.45 1.72 0.26 140 XM_H_Long_From02 1 0.45 1.72 0.26 141 MIME_CHARSET_FARAWAY 1 0.45 1.72 0.26 142 HTML_IMAGE_RATIO_04 1 1.80 1.72 1.81 143 DATE_IN_FUTURE_06_12 1 0.23 1.72 0.00 144 XM_H_PHPMailer 1 0.90 1.72 0.78 145 TR_XM_SB_Phish 1 3.15 1.72 3.37 146 XM_URI_RBL 1 0.23 1.72 0.00 147 T_XMDrugObfuBody_12 1 0.45 1.72 0.26 148 XMSubMetaSxObfu_03 1 0.23 1.72 0.00 149 RELAYCOUNTRY_CA 1 0.90 1.72 0.78 150 XMBody_78 1 0.68 1.72 0.52 151 CHARSET_FARAWAY 1 0.23 1.72 0.00 152 RELAYCOUNTRY_GB 1 0.45 1.72 0.26 153 ADVANCE_FEE_2_NEW_FRM_MNY 1 0.23 1.72 0.00 154 XM_UB80 1 0.23 1.72 0.00 155 XMStockSpam_06 1 1.35 1.72 1.30 156 LONG_JUNK_URI2 1 0.23 1.72 0.00 157 XM_CamelCaseFrm001 1 1.13 1.72 1.04 158 TR_XM_Undi_RecipCombo2 1 0.23 1.72 0.00 159 NORDNS_LOW_CONTRAST 1 0.45 1.72 0.26 160 XMNumbers 1 1.80 1.72 1.81 161 XMSexyCombo_01 1 0.23 1.72 0.00 162 MPART_ALT_DIFF_COUNT 1 0.45 1.72 0.26 163 XMSexyCombo_02 1 0.23 1.72 0.00 164 TR_DCC_Bayes_99 1 0.23 1.72 0.00 165 RELAYCOUNTRY_AU 1 1.35 1.72 1.30 166 TR_XM_Undi_Recip9 1 0.23 1.72 0.00 167 TR_XM_NoHeaderRelay 1 0.23 1.72 0.00 168 RCVD_IN_MSPIKE_WL 1 2.48 1.72 2.59 169 TO_EQ_FM_DOM_HTML_ONLY 1 0.23 1.72 0.00 170 SpammyFromTLD_02 1 0.68 1.72 0.52 171 HELO_NO_DOMAIN 1 0.90 1.72 0.78 172 RCVD_IN_MSPIKE_H3 1 2.25 1.72 2.33 173 XMSubMetaI_00 1 0.68 1.72 0.52 174 FROM_EXCESS_BASE64 1 0.45 1.72 0.26 175 XM_ShortIntro_01 1 0.45 1.72 0.26 176 TR_XM_Undi_Recip11 1 0.23 1.72 0.00 177 TR_LOTS_OF_MONEY3 1 0.45 1.72 0.26 178 XMSexyCombo_05 1 0.68 1.72 0.52 179 MILLION_HUNDRED 1 0.23 1.72 0.00 180 FORM_FRAUD 1 0.23 1.72 0.00 181 RELAYCOUNTRY_SK 1 0.23 1.72 0.00 182 TooManyTo_003 1 0.23 1.72 0.00 183 HTTPS_HTTP_MISMATCH 1 0.23 1.72 0.00 184 XM_H_Undi_Recip 1 0.23 1.72 0.00 185 XM_RECPTID 1 0.23 1.72 0.00 186 T_XMDrugObfuBody_00 1 0.68 1.72 0.52 187 XM_UB60 1 0.45 1.72 0.26 188 RELAYCOUNTRY_ID 1 0.23 1.72 0.00 189 XM_DIRTYINTL 1 0.45 1.72 0.26 190 RELAYCOUNTRY_TW 1 0.23 1.72 0.00 191 DKIM_ADSP_ALL 1 0.23 1.72 0.00 192 TR_XM_Undi_Recip2 1 0.23 1.72 0.00 193 URIBL_BLACK 1 0.23 1.72 0.00 194 TVD_RCVD_IP 1 0.23 1.72 0.00 195 ANY_BOUNCE_MESSAGE 1 36.94 1.72 42.23 196 T_REMOTE_IMAGE 1 3.38 1.72 3.63 197 XMClaimOffer 1 0.23 1.72 0.00 198 FROM_GOV_SPOOF 1 0.68 1.72 0.52 199 KHOP_HELO_FCRDNS 1 0.45 1.72 0.26 200 XMSubPhish11 1 3.15 1.72 3.37 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 375 96.40 91.38 97.15 2 BAYES_50 292 71.17 41.38 75.65 3 ALL_TRUSTED 187 42.12 0.00 48.45 4 DKIM_SIGNED 187 53.60 87.93 48.45 5 RELAYCOUNTRY_US 184 52.25 82.76 47.67 6 XM_DK_Pass 183 51.80 81.03 47.41 7 HTML_MESSAGE 182 53.38 94.83 47.15 8 DKIM_VALID 179 50.68 79.31 46.37 9 BOUNCE_MESSAGE 163 36.94 1.72 42.23 10 ANY_BOUNCE_MESSAGE 163 36.94 1.72 42.23 11 DKIM_VALID_AU 151 42.34 63.79 39.12 12 XM_B_Unicode 116 37.61 87.93 30.05 13 DKIM_VALID_EF 114 31.31 43.10 29.53 14 XMListUnsubscribeExists 96 28.60 53.45 24.87 15 XM_B_SpammyWords 88 27.48 58.62 22.80 16 XM_B_Unicode3 80 23.42 41.38 20.73 17 HTML_FONT_LOW_CONTRAST 74 21.62 37.93 19.17 18 XMSubLong 62 17.12 24.14 16.06 19 LOC_TINY_FONT_1 60 22.07 65.52 15.54 20 T_TM2_M_HEADER_IN_MSG 55 16.22 29.31 14.25 21 FVGT_m_MULTI_ODD 53 17.34 41.38 13.73 22 MIME_HTML_ONLY 43 11.49 13.79 11.14 23 TR_XM_DK_Unsub 36 10.36 17.24 9.33 24 XM_Multi_Part_URI 32 11.94 36.21 8.29 25 UNPARSEABLE_RELAY 32 10.59 25.86 8.29 26 XM_DKIMWhitelistDomains 31 6.98 0.00 8.03 27 T_KAM_HTML_FONT_INVALID 30 9.23 18.97 7.77 28 RCVD_IN_MSPIKE_H2 30 10.81 31.03 7.77 29 BAYES_60 29 7.66 8.62 7.51 30 T_TooManySym_01 27 6.76 5.17 6.99 31 XMStrtUSub 26 6.76 6.90 6.74 32 BAYES_00 26 5.86 0.00 6.74 33 XM_B_SpammyWords2 25 10.36 36.21 6.48 34 XM_B_Unsub 25 9.91 32.76 6.48 35 TR_XM_BayesUnsub 23 9.46 32.76 5.96 36 TR_XM_DK_Bayes2 22 4.95 0.00 5.70 37 TR_XM_DK_Bayes 22 4.95 0.00 5.70 38 TR_XM_DK_Bayes1 22 4.95 0.00 5.70 39 XM_H_Long_From01 20 4.95 3.45 5.18 40 RELAYCOUNTRY_META 16 6.08 18.97 4.15 41 MAILING_LIST_MULTI 14 3.60 3.45 3.63 42 T_REMOTE_IMAGE 14 3.38 1.72 3.63 43 XM_Evil_Numbers_Gen 14 4.05 6.90 3.63 44 BAYES_40 13 3.15 1.72 3.37 45 TR_XM_SB_Phish 13 3.15 1.72 3.37 46 XM_UncommonTLD01 13 4.05 8.62 3.37 47 XMSubPhish11 13 3.15 1.72 3.37 48 HTML_IMAGE_RATIO_06 12 2.93 1.72 3.11 49 XMGappySubj_01 12 2.70 0.00 3.11 50 XM_B_Unsub2 12 2.70 0.00 3.11 51 BOTNET_IPINHOSTNAME 11 3.15 5.17 2.85 52 INVALID_MSGID 11 2.48 0.00 2.85 53 XMNoVowels 11 2.93 3.45 2.85 54 IN_ZIMBRA_NJ_WHITELIST 11 2.48 0.00 2.85 55 DCC_CHECK 11 3.60 8.62 2.85 56 HTML_MIME_NO_HTML_TAG 11 2.48 0.00 2.85 57 TO_MALFORMED 10 2.25 0.00 2.59 58 XM_B_SpammyTLD 10 3.15 6.90 2.59 59 HTML_IMAGE_ONLY_28 10 2.25 0.00 2.59 60 TooManyTo_001 10 2.70 3.45 2.59 61 USER_IN_DEF_DKIM_WL 10 2.25 0.00 2.59 62 XMGappySubj_02 10 2.25 0.00 2.59 63 T_XMDrugObfuBody_08 10 3.38 8.62 2.59 64 XM_B_SpammyWords3 10 4.28 15.52 2.59 65 RCVD_IN_MSPIKE_WL 10 2.48 1.72 2.59 66 T_TooManySym_02 9 2.48 3.45 2.33 67 RCVD_IN_MSPIKE_H3 9 2.25 1.72 2.33 68 LotsOfNums_01 8 1.80 0.00 2.07 69 BAYES_80 8 2.70 6.90 2.07 70 DKIM_INVALID 8 2.93 8.62 2.07 71 LOTS_OF_MONEY 8 5.18 25.86 2.07 72 UNTRUSTED_Relay 7 3.38 13.79 1.81 73 BAYES_20 7 1.80 1.72 1.81 74 MIME_HTML_MOSTLY 7 3.15 12.07 1.81 75 XM_Body_Dirty_Words 7 2.70 8.62 1.81 76 HTML_IMAGE_RATIO_04 7 1.80 1.72 1.81 77 XMNumbers 7 1.80 1.72 1.81 78 XM_SendGrid 7 1.58 0.00 1.81 79 MIME_QP_LONG_LINE 6 1.58 1.72 1.55 80 RCVD_IN_VALIDITY_SAFE 6 1.35 0.00 1.55 81 XM_GoogleGroups 6 1.58 1.72 1.55 82 RCVD_IN_VALIDITY_CERTIFIED 6 1.35 0.00 1.55 83 XMSubMetaSx_00 6 2.25 6.90 1.55 84 XM_PDF 6 1.35 0.00 1.55 85 HTML_IMAGE_RATIO_02 6 3.15 13.79 1.55 86 LOW_PRICE 5 1.13 0.00 1.30 87 XMStockSpam_06 5 1.35 1.72 1.30 88 RELAYCOUNTRY_AU 5 1.35 1.72 1.30 89 TR_XM_SpammyRelay 5 2.70 12.07 1.30 90 XM_ZIP 4 0.90 0.00 1.04 91 TR_XM_UnparsRelay 4 2.48 12.07 1.04 92 MSGID_NOFQDN1 4 0.90 0.00 1.04 93 GMD_PDF_HORIZ 4 0.90 0.00 1.04 94 TR_Symld_Words 4 1.13 1.72 1.04 95 XM_CamelCaseFrm001 4 1.13 1.72 1.04 96 TM2_M_URI_OPT_OUT 4 1.35 3.45 1.04 97 IN_HORDE_ADDRESS_BOOK 4 0.90 0.00 1.04 98 BAYES_95 4 2.03 8.62 1.04 99 T_MONEY_PERCENT 4 2.93 15.52 1.04 100 HTML_IMAGE_ONLY_32 4 0.90 0.00 1.04 101 BAYES_05 4 0.90 0.00 1.04 102 XMBody_95 4 1.13 1.72 1.04 103 XM_B_Phish_Phrases 4 1.58 5.17 1.04 104 TR_LOTS_OF_MONEY2 4 2.93 15.52 1.04 105 T_TooManySym_03 3 0.68 0.00 0.78 106 TR_XM_PhishingBody 3 1.13 3.45 0.78 107 XM_UB50 3 1.58 6.90 0.78 108 BAYES_99 3 4.73 31.03 0.78 109 DKIM_ADSP_CUSTOM_MED 3 0.68 0.00 0.78 110 SHOPIFY_IMG_NOT_RCVD_SFY 3 1.13 3.45 0.78 111 XM_Ancestry_Forge 3 0.68 0.00 0.78 112 HELO_NODOT 3 0.90 1.72 0.78 113 TVD_SPACE_RATIO 3 0.68 0.00 0.78 114 RELAYCOUNTRY_CA 3 0.90 1.72 0.78 115 XM_H_PHPMailer 3 0.90 1.72 0.78 116 HK_RANDOM_ENVFROM 3 0.68 0.00 0.78 117 FSL_BULK_SIG 3 1.13 3.45 0.78 118 HK_RANDOM_FROM 3 0.68 0.00 0.78 119 HELO_NO_DOMAIN 3 0.90 1.72 0.78 120 BAYES_999 3 3.60 22.41 0.78 121 HTML_FONT_TINY_NORDNS 3 1.35 5.17 0.78 122 XM_SPF_SoftFail 3 2.93 17.24 0.78 123 TM2_M_VERY_LONG_WORD 3 1.58 6.90 0.78 124 RCVD_IN_IADB_DK 2 0.45 0.00 0.52 125 TR_XM_PHPDW 2 0.90 3.45 0.52 126 DATE_IN_PAST_06_12 2 0.45 0.00 0.52 127 RCVD_IN_IADB_LISTED 2 0.45 0.00 0.52 128 NML_ADSP_CUSTOM_MED 2 0.45 0.00 0.52 129 HTML_IMAGE_RATIO_08 2 0.68 1.72 0.52 130 RCVD_IN_IADB_VOUCHED 2 0.45 0.00 0.52 131 TR_XM_SpoofStaff 2 0.45 0.00 0.52 132 XMBody_78 2 0.68 1.72 0.52 133 HTML_IMAGE_ONLY_20 2 0.45 0.00 0.52 134 MISSING_HEADERS 2 0.45 0.00 0.52 135 XM_Body_Obfu01 2 0.45 0.00 0.52 136 XMSubject_78 2 0.45 0.00 0.52 137 TR_XM_SpammyWords5 2 0.45 0.00 0.52 138 XM_H_PHPOS_M 2 0.68 1.72 0.52 139 XMSpoofStaff2 2 0.45 0.00 0.52 140 XM_DK_Undo_02 2 6.31 44.83 0.52 141 XMSexyCombo_05 2 0.68 1.72 0.52 142 HTML_IMAGE_ONLY_08 2 0.45 0.00 0.52 143 RCVD_IN_IADB_SENDERID 2 0.45 0.00 0.52 144 T_XMDrugObfuBody_00 2 0.68 1.72 0.52 145 USER_IN_WELCOMELIST 2 0.45 0.00 0.52 146 HTML_FONT_FACE_BAD 2 0.45 0.00 0.52 147 RELAYCOUNTRY_DE 2 0.45 0.00 0.52 148 TR_XM_FormFill2 2 0.90 3.45 0.52 149 XM_H_PHPOS 2 0.90 3.45 0.52 150 RCVD_IN_IADB_OPTIN 2 0.45 0.00 0.52 151 RCVD_IN_IADB_OPTIN_GT50 2 0.45 0.00 0.52 152 RCVD_IN_IADB_SPF 2 0.45 0.00 0.52 153 XMSubMetaI_00 2 0.68 1.72 0.52 154 SpammyFromTLD_02 2 0.68 1.72 0.52 155 XM_ZohoDesk1 2 0.45 0.00 0.52 156 SHORT_URI 2 0.45 0.00 0.52 157 TR_XM_PSC1 2 0.45 0.00 0.52 158 THIS_AD 2 0.45 0.00 0.52 159 FROM_GOV_SPOOF 2 0.68 1.72 0.52 160 MPART_ALT_DIFF 2 0.45 0.00 0.52 161 XMSubject_60 2 0.45 0.00 0.52 162 XM_H_SpoofStaff4 2 0.45 0.00 0.52 163 T_XMDrugObfuBody_14 2 1.35 6.90 0.52 164 USER_IN_WHITELIST 2 0.45 0.00 0.52 165 TR_XM_DK_SendGrid 2 0.45 0.00 0.52 166 XM_DK_Undo_01 2 0.90 3.45 0.52 167 INVALID_DATE 2 0.45 0.00 0.52 168 XMBody_17 2 0.45 0.00 0.52 169 TR_XM_PHPForged 2 0.90 3.45 0.52 170 TR_XM_SpoofPhishAttach 2 0.45 0.00 0.52 171 T_TooManySym_04 2 0.45 0.00 0.52 172 TM2_M_JAVASCRIPT_HREF 1 0.23 0.00 0.26 173 FORGED_GMAIL_RCVD 1 0.23 0.00 0.26 174 TR_Mismatch_TLD_01 1 0.23 0.00 0.26 175 T_FILL_THIS_FORM_SHORT 1 0.23 0.00 0.26 176 CHARSET_FARAWAY_HEADER 1 0.45 1.72 0.26 177 TRACKER_ID 1 0.23 0.00 0.26 178 RELAYCOUNTRY_CH 1 0.23 0.00 0.26 179 XM_B_Phish66 1 0.23 0.00 0.26 180 T_XMHurry_00 1 0.90 5.17 0.26 181 XMLngstWrd_02 1 0.23 0.00 0.26 182 URI_NOVOWEL 1 0.23 0.00 0.26 183 T_OBFU_PDF_ATTACH 1 0.23 0.00 0.26 184 MIME_HEADER_CTYPE_ONLY 1 0.23 0.00 0.26 185 XM_BadFromFormat 1 0.23 0.00 0.26 186 XMLngstWrd_00 1 0.23 0.00 0.26 187 XM_B_DynamicLink 1 0.23 0.00 0.26 188 FROM_LOCAL_HEX 1 0.23 0.00 0.26 189 XMSlimDrugH 1 0.68 3.45 0.26 190 XM_Attn_01 1 0.23 0.00 0.26 191 RELAYCOUNTRY_GB 1 0.45 1.72 0.26 192 URI_HEX 1 0.23 0.00 0.26 193 T_STY_INVIS_DIRECT 1 0.23 0.00 0.26 194 NORDNS_LOW_CONTRAST 1 0.45 1.72 0.26 195 FROM_OFFERS 1 0.23 0.00 0.26 196 XMGppyBdWords 1 0.90 5.17 0.26 197 XMPhish30 1 0.23 0.00 0.26 198 MIME_CHARSET_FARAWAY 1 0.45 1.72 0.26 199 TR_XM_COVIDMETA4 1 0.45 1.72 0.26 200 RCVD_IN_RP_RNBL 1 0.45 1.72 0.26 ----------------------------------------------------------------------