Email: 223 Autolearn: 0 AvgScore: 1.49 AvgScanTime: 2.14 sec Spam: 59 Autolearn: 0 AvgScore: 13.25 AvgScanTime: 2.27 sec Ham: 164 Autolearn: 0 AvgScore: -2.74 AvgScanTime: 2.09 sec Time Spent Running SA: 0.13 hours Time Spent Processing Spam: 0.04 hours Time Spent Processing Ham: 0.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 54 79.82 91.53 75.61 2 HTML_MESSAGE 51 79.82 86.44 77.44 3 DKIM_SIGNED 48 77.58 81.36 76.22 4 DKIM_VALID 45 74.44 76.27 73.78 5 XM_B_Unicode 44 67.71 74.58 65.24 6 XM_DK_Pass 44 74.44 74.58 74.39 7 DCC_CHECK_NEGATIVE 35 82.51 59.32 90.85 8 XMListUnsubscribeExists 32 52.02 54.24 51.22 9 DKIM_VALID_AU 31 54.26 52.54 54.88 10 XM_B_SpammyWords 30 39.01 50.85 34.76 11 LOC_TINY_FONT_1 30 30.49 50.85 23.17 12 BAYES_50 29 59.64 49.15 63.41 13 XM_DK_Undo_02 26 14.35 44.07 3.66 14 HTML_FONT_LOW_CONTRAST 25 33.63 42.37 30.49 15 DCC_CHECK 24 17.49 40.68 9.15 16 XMSubLong 23 25.11 38.98 20.12 17 XM_Multi_Part_URI 23 26.01 38.98 21.34 18 FVGT_m_MULTI_ODD 22 33.63 37.29 32.32 19 XM_B_Unicode3 21 39.46 35.59 40.85 20 RCVD_IN_MSPIKE_H2 19 22.42 32.20 18.90 21 DKIM_VALID_EF 17 35.87 28.81 38.41 22 LOTS_OF_MONEY 15 12.11 25.42 7.32 23 UNPARSEABLE_RELAY 15 25.11 25.42 25.00 24 BAYES_99 14 8.07 23.73 2.44 25 XM_B_SpammyWords2 14 14.35 23.73 10.98 26 BOTNET 12 5.83 20.34 0.61 27 XM_B_Unsub 11 8.07 18.64 4.27 28 TR_XM_BayesUnsub 11 8.07 18.64 4.27 29 T_TM2_M_HEADER_IN_MSG 11 23.32 18.64 25.00 30 XM_B_Investor 10 5.38 16.95 1.22 31 T_KAM_HTML_FONT_INVALID 10 18.39 16.95 18.90 32 BOTNET_IPINHOSTNAME 10 8.97 16.95 6.10 33 TR_XM_SpammyWords4 10 8.97 16.95 6.10 34 TR_XM_DKIM_Undo 9 5.38 15.25 1.83 35 RCVD_IN_BL_SPAMCOP_NET 9 4.93 15.25 1.22 36 XM_Body_Dirty_Words 8 6.28 13.56 3.66 37 TR_XM_SPAMCOP 8 3.59 13.56 0.00 38 BAYES_999 7 4.04 11.86 1.22 39 BAYES_80 7 6.73 11.86 4.88 40 TR_XM_UnparsRelay 6 8.07 10.17 7.32 41 RELAYCOUNTRY_META 6 10.31 10.17 10.37 42 TM2_M_URI_OPT_OUT 6 3.14 10.17 0.61 43 TR_DCC_Bayes_99 6 3.59 10.17 1.22 44 MIME_HTML_ONLY 6 11.21 10.17 11.59 45 BAYES_60 6 13.90 10.17 15.24 46 TR_XM_SpammyWords5 5 3.59 8.47 1.83 47 XM_UncommonTLD01 5 9.42 8.47 9.76 48 TR_XM_PHPForged 5 2.69 8.47 0.61 49 XM_ProductURIs 5 2.69 8.47 0.61 50 XM_H_PHPOS 5 2.69 8.47 0.61 51 XM_B_SpammyTLD 5 8.52 8.47 8.54 52 XMSubMetaSx_00 5 4.48 8.47 3.05 53 HTML_IMAGE_RATIO_02 5 4.48 8.47 3.05 54 TR_XM_DK_Unsub 5 18.39 8.47 21.95 55 TR_XM_FormFill2 5 2.69 8.47 0.61 56 TR_XM_PHPDW 5 2.69 8.47 0.61 57 MIME_HTML_MOSTLY 5 3.59 8.47 1.83 58 XM_H_PHPMailer 4 2.24 6.78 0.61 59 XMNumbers 4 5.83 6.78 5.49 60 TooManyTo_001 4 4.93 6.78 4.27 61 TR_LOTS_OF_MONEY2 4 2.24 6.78 0.61 62 TR_XM_SpammyRelay 4 4.48 6.78 3.66 63 XM_B_Phish_Phrases 4 4.04 6.78 3.05 64 UNTRUSTED_Relay 4 5.38 6.78 4.88 65 XM_H_Long_From01 4 4.93 6.78 4.27 66 T_MONEY_PERCENT 4 2.24 6.78 0.61 67 XM_H_PHPOS_M 4 2.24 6.78 0.61 68 XM_Evil_Numbers_Gen 4 2.69 6.78 1.22 69 TooManyTo_004 3 1.79 5.08 0.61 70 T_XMDrugObfuBody_14 3 2.69 5.08 1.83 71 TR_Mismatch_TLD_02 3 1.79 5.08 0.61 72 TooManyTo_002 3 2.24 5.08 1.22 73 HTML_IMAGE_RATIO_06 3 2.24 5.08 1.22 74 FSL_BULK_SIG 3 3.14 5.08 2.44 75 TooManyTo_003 3 1.79 5.08 0.61 76 T_TooManySym_01 3 7.17 5.08 7.93 77 XM_B_SpammyWords3 3 2.69 5.08 1.83 78 BOUNCE_MESSAGE 3 6.73 5.08 7.32 79 URIBL_BLACK 3 1.35 5.08 0.00 80 DKIM_INVALID 3 3.14 5.08 2.44 81 ANY_BOUNCE_MESSAGE 3 6.73 5.08 7.32 82 XM_B_SEO 2 0.90 3.39 0.00 83 RELAYCOUNTRY_AT 2 1.35 3.39 0.61 84 MISSING_HEADERS 2 0.90 3.39 0.00 85 KHOP_HELO_FCRDNS 2 2.24 3.39 1.83 86 TooManyTo_005 2 1.35 3.39 0.61 87 HTML_IMAGE_RATIO_08 2 1.79 3.39 1.22 88 HTML_IMAGE_RATIO_04 2 4.04 3.39 4.27 89 TR_XM_MaxWHORU 2 0.90 3.39 0.00 90 NO_DNS_FOR_FROM 2 0.90 3.39 0.00 91 SpammyFromTLD_02 2 2.24 3.39 1.83 92 T_TooManySym_02 2 5.83 3.39 6.71 93 XMDateMe_00 2 1.79 3.39 1.22 94 XMSubNoVowel 2 0.90 3.39 0.00 95 FSL_HELO_NON_FQDN_1 2 0.90 3.39 0.00 96 XM_PDF 2 3.14 3.39 3.05 97 XMSexyCombo_05 2 0.90 3.39 0.00 98 BOTNET_NORDNS 2 0.90 3.39 0.00 99 MPART_ALT_DIFF 2 1.35 3.39 0.61 100 TR_XM_Base64_L2 2 0.90 3.39 0.00 101 TR_XM_SpammyWords2 2 0.90 3.39 0.00 102 TR_XM_Base64_L1 2 1.35 3.39 0.61 103 TM2_M_VERY_LONG_WORD 2 3.59 3.39 3.66 104 SHOPIFY_IMG_NOT_RCVD_SFY 2 2.24 3.39 1.83 105 XM_SendGrid 2 3.14 3.39 3.05 106 XMMoneyMeta_00 2 0.90 3.39 0.00 107 TR_XM_NoHeadersAttach 2 0.90 3.39 0.00 108 HELO_NODOT 2 0.90 3.39 0.00 109 HELO_NO_DOMAIN 2 0.90 3.39 0.00 110 SpammyFromTLD_01 2 0.90 3.39 0.00 111 DRUGS_ERECTILE 2 0.90 3.39 0.00 112 LotsOfNums_01 2 5.83 3.39 6.71 113 NOT_SPAM 1 0.45 1.69 0.00 114 HTML_FONT_SIZE_LARGE 1 0.45 1.69 0.00 115 T_OBFU_PDF_ATTACH 1 1.35 1.69 1.22 116 XM_H_Undi_Recip 1 0.45 1.69 0.00 117 XM_Attn_01 1 0.45 1.69 0.00 118 OBFU_TEXT_ATTACH 1 0.45 1.69 0.00 119 RELAYCOUNTRY_AU 1 2.69 1.69 3.05 120 TR_XM_DK_Bayes2 1 1.35 1.69 1.22 121 XMNoUri_00 1 0.45 1.69 0.00 122 GMD_PDF_HORIZ 1 0.45 1.69 0.00 123 XM_B_DNDMA 1 0.45 1.69 0.00 124 ACT_NOW_CAPS 1 0.45 1.69 0.00 125 XM_B_Unsub2 1 0.45 1.69 0.00 126 XM_S_SpammyWords 1 0.45 1.69 0.00 127 TR_XM_SEO4 1 0.45 1.69 0.00 128 XM_UB50 1 3.14 1.69 3.66 129 XMSubEmpty 1 0.45 1.69 0.00 130 RCVD_IN_IADB_SPF 1 3.14 1.69 3.66 131 TR_XM_DK_Bayes1 1 2.24 1.69 2.44 132 MIME_CHARSET_FARAWAY 1 1.35 1.69 1.22 133 XM_H_PHPOS_E 1 0.45 1.69 0.00 134 TR_XM_PhishingBody 1 1.35 1.69 1.22 135 XM_SPF_SoftFail 1 1.79 1.69 1.83 136 XM_UB99 1 0.45 1.69 0.00 137 RELAYCOUNTRY_JP 1 0.45 1.69 0.00 138 RCVD_IN_IADB_DK 1 3.14 1.69 3.66 139 MIME_HTML_ONLY_MULTI 1 0.45 1.69 0.00 140 XMPhish08 1 0.45 1.69 0.00 141 NA_DOLLARS 1 0.45 1.69 0.00 142 TR_XM_DK_Bayes 1 2.24 1.69 2.44 143 XMHTML_After_End 1 0.90 1.69 0.61 144 CHARSET_FARAWAY_HEADER 1 0.45 1.69 0.00 145 XM_UB999 1 0.45 1.69 0.00 146 IMPOTENCE 1 0.45 1.69 0.00 147 HTTPS_HTTP_MISMATCH 1 0.90 1.69 0.61 148 TR_XM_Base64_M2 1 0.45 1.69 0.00 149 TR_XM_Undi_Recip6 1 0.45 1.69 0.00 150 RCVD_IN_IADB_VOUCHED 1 1.35 1.69 1.22 151 XMBody_78 1 0.45 1.69 0.00 152 FROM_SUSPICIOUS_NTLD_FP 1 0.45 1.69 0.00 153 TR_XM_INV_DKIM 1 0.45 1.69 0.00 154 PHP_ORIG_SCRIPT_EVAL 1 0.45 1.69 0.00 155 TR_XM_Base64_M1 1 0.45 1.69 0.00 156 XM_Body_Dirty_Words_01 1 0.45 1.69 0.00 157 HTML_TEXT_INVISIBLE_STYLE 1 0.45 1.69 0.00 158 BAYES_95 1 1.79 1.69 1.83 159 RELAYCOUNTRY_CA 1 1.35 1.69 1.22 160 XMSolicitRefs_0 1 0.90 1.69 0.61 161 XMGppyBdWords 1 0.45 1.69 0.00 162 TR_Caps_n_Bayes_99 1 0.45 1.69 0.00 163 XMSolicitRefs_4 1 0.45 1.69 0.00 164 XM_ShortIntro_01 1 0.45 1.69 0.00 165 SUSPICIOUS_RECIPS 1 0.45 1.69 0.00 166 DIET_1 1 0.90 1.69 0.61 167 MIME_QP_LONG_LINE 1 4.04 1.69 4.88 168 XM_S_SEO 1 0.45 1.69 0.00 169 DKIM_ADSP_NXDOMAIN 1 0.45 1.69 0.00 170 US_DOLLARS_3 1 0.90 1.69 0.61 171 TR_XM_Spammywords 1 0.45 1.69 0.00 172 BAD_CREDIT 1 0.45 1.69 0.00 173 XMSubMetaI_00 1 0.45 1.69 0.00 174 HTML_MIME_NO_HTML_TAG 1 3.59 1.69 4.27 175 TR_XM_DK_SendGrid 1 1.35 1.69 1.22 176 GOOG_STO_IMG_NOHTML 1 0.45 1.69 0.00 177 NORDNS_LOW_CONTRAST 1 0.45 1.69 0.00 178 TR_XM_Undi_Recip2 1 0.45 1.69 0.00 179 LongTLD 1 0.45 1.69 0.00 180 XM_CamelCaseFrm001 1 0.90 1.69 0.61 181 RCVD_IN_IADB_LISTED 1 3.14 1.69 3.66 182 HTML_OBFUSCATE_05_10 1 0.45 1.69 0.00 183 TR_XM_Base64_C 1 0.45 1.69 0.00 184 TR_Mismatch_TLD_01 1 0.45 1.69 0.00 185 FROM_SUSPICIOUS_NTLD 1 0.45 1.69 0.00 186 T_XMDrugObfuBody_00 1 0.90 1.69 0.61 187 TO_EQ_FM_DOM_HTML_ONLY 1 0.45 1.69 0.00 188 RCVD_IN_IADB_SENDERID 1 2.69 1.69 3.05 189 LONG_JUNK_URI 1 0.45 1.69 0.00 190 XM_RXBody 1 0.45 1.69 0.00 191 SUBJ_ALL_CAPS 1 1.35 1.69 1.22 192 MPART_ALT_DIFF_COUNT 1 0.90 1.69 0.61 193 T_TooManySym_03 1 2.24 1.69 2.44 194 BASE64_LENGTH_79_INF 1 0.45 1.69 0.00 195 XMBSHREFv2 1 1.35 1.69 1.22 196 BAYES_00 1 4.48 1.69 5.49 197 RELAYCOUNTRY_CN 1 0.45 1.69 0.00 198 PDS_PHP_EVAL 1 0.45 1.69 0.00 199 BAYES_40 1 3.14 1.69 3.66 200 TR_Sbj_FN_Bdy 1 0.45 1.69 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 149 82.51 59.32 90.85 2 HTML_MESSAGE 127 79.82 86.44 77.44 3 DKIM_SIGNED 125 77.58 81.36 76.22 4 RELAYCOUNTRY_US 124 79.82 91.53 75.61 5 XM_DK_Pass 122 74.44 74.58 74.39 6 DKIM_VALID 121 74.44 76.27 73.78 7 XM_B_Unicode 107 67.71 74.58 65.24 8 BAYES_50 104 59.64 49.15 63.41 9 DKIM_VALID_AU 90 54.26 52.54 54.88 10 XMListUnsubscribeExists 84 52.02 54.24 51.22 11 XM_B_Unicode3 67 39.46 35.59 40.85 12 DKIM_VALID_EF 63 35.87 28.81 38.41 13 XM_B_SpammyWords 57 39.01 50.85 34.76 14 FVGT_m_MULTI_ODD 53 33.63 37.29 32.32 15 HTML_FONT_LOW_CONTRAST 50 33.63 42.37 30.49 16 T_TM2_M_HEADER_IN_MSG 41 23.32 18.64 25.00 17 UNPARSEABLE_RELAY 41 25.11 25.42 25.00 18 LOC_TINY_FONT_1 38 30.49 50.85 23.17 19 TR_XM_DK_Unsub 36 18.39 8.47 21.95 20 XM_Multi_Part_URI 35 26.01 38.98 21.34 21 XMSubLong 33 25.11 38.98 20.12 22 RCVD_IN_MSPIKE_H2 31 22.42 32.20 18.90 23 T_KAM_HTML_FONT_INVALID 31 18.39 16.95 18.90 24 BAYES_60 25 13.90 10.17 15.24 25 ALL_TRUSTED 25 11.21 0.00 15.24 26 MIME_HTML_ONLY 19 11.21 10.17 11.59 27 XM_B_SpammyWords2 18 14.35 23.73 10.98 28 RELAYCOUNTRY_META 17 10.31 10.17 10.37 29 XMStrtUSub 16 7.62 1.69 9.76 30 XM_UncommonTLD01 16 9.42 8.47 9.76 31 DCC_CHECK 15 17.49 40.68 9.15 32 XM_DKIMWhitelistDomains 14 6.28 0.00 8.54 33 XM_B_SpammyTLD 14 8.52 8.47 8.54 34 T_TooManySym_01 13 7.17 5.08 7.93 35 BOUNCE_MESSAGE 12 6.73 5.08 7.32 36 ANY_BOUNCE_MESSAGE 12 6.73 5.08 7.32 37 TR_XM_UnparsRelay 12 8.07 10.17 7.32 38 LOTS_OF_MONEY 12 12.11 25.42 7.32 39 IN_ZIMBRA_NJ_WHITELIST 11 4.93 0.00 6.71 40 MAILING_LIST_MULTI 11 4.93 0.00 6.71 41 LotsOfNums_01 11 5.83 3.39 6.71 42 T_TooManySym_02 11 5.83 3.39 6.71 43 BOTNET_IPINHOSTNAME 10 8.97 16.95 6.10 44 USER_IN_DEF_DKIM_WL 10 4.48 0.00 6.10 45 TR_XM_SpammyWords4 10 8.97 16.95 6.10 46 INVALID_MSGID 10 4.48 0.00 6.10 47 BAYES_00 9 4.48 1.69 5.49 48 XMNumbers 9 5.83 6.78 5.49 49 BAYES_80 8 6.73 11.86 4.88 50 MIME_QP_LONG_LINE 8 4.04 1.69 4.88 51 TO_MALFORMED 8 3.59 0.00 4.88 52 RCVD_IN_MSPIKE_WL 8 3.59 0.00 4.88 53 UNTRUSTED_Relay 8 5.38 6.78 4.88 54 XM_H_Long_From01 7 4.93 6.78 4.27 55 HTML_MIME_NO_HTML_TAG 7 3.59 1.69 4.27 56 TR_XM_BayesUnsub 7 8.07 18.64 4.27 57 TooManyTo_001 7 4.93 6.78 4.27 58 HTML_IMAGE_RATIO_04 7 4.04 3.39 4.27 59 XM_B_Unsub 7 8.07 18.64 4.27 60 RCVD_IN_IADB_LISTED 6 3.14 1.69 3.66 61 TM2_M_VERY_LONG_WORD 6 3.59 3.39 3.66 62 XM_Body_Dirty_Words 6 6.28 13.56 3.66 63 BAYES_40 6 3.14 1.69 3.66 64 XM_UB50 6 3.14 1.69 3.66 65 RCVD_IN_IADB_SPF 6 3.14 1.69 3.66 66 XM_DK_Undo_02 6 14.35 44.07 3.66 67 TR_XM_SpammyRelay 6 4.48 6.78 3.66 68 RCVD_IN_IADB_DK 6 3.14 1.69 3.66 69 RCVD_IN_MSPIKE_H3 6 2.69 0.00 3.66 70 RCVD_IN_IADB_SENDERID 5 2.69 1.69 3.05 71 T_REMOTE_IMAGE 5 2.24 0.00 3.05 72 XM_SendGrid 5 3.14 3.39 3.05 73 XM_GoogleGroups 5 2.24 0.00 3.05 74 XM_DK_Undo_01 5 2.24 0.00 3.05 75 RELAYCOUNTRY_AU 5 2.69 1.69 3.05 76 HTML_IMAGE_RATIO_02 5 4.48 8.47 3.05 77 XMSubMetaSx_00 5 4.48 8.47 3.05 78 XM_B_Phish_Phrases 5 4.04 6.78 3.05 79 XM_PDF 5 3.14 3.39 3.05 80 USER_IN_WELCOMELIST 5 2.24 0.00 3.05 81 USER_IN_WHITELIST 5 2.24 0.00 3.05 82 RCVD_IN_VALIDITY_CERTIFIED 4 1.79 0.00 2.44 83 DKIM_INVALID 4 3.14 5.08 2.44 84 BAYES_99 4 8.07 23.73 2.44 85 RCVD_IN_VALIDITY_SAFE 4 1.79 0.00 2.44 86 T_TooManySym_03 4 2.24 1.69 2.44 87 TR_XM_DK_Bayes1 4 2.24 1.69 2.44 88 FSL_BULK_SIG 4 3.14 5.08 2.44 89 XM_ZIP 4 1.79 0.00 2.44 90 TR_XM_DK_Bayes 4 2.24 1.69 2.44 91 IN_HORDE_ADDRESS_BOOK 4 1.79 0.00 2.44 92 MSGID_NOFQDN1 3 1.35 0.00 1.83 93 MIME_HTML_MOSTLY 3 3.59 8.47 1.83 94 BAYES_05 3 1.35 0.00 1.83 95 SHOPIFY_IMG_NOT_RCVD_SFY 3 2.24 3.39 1.83 96 TVD_SPACE_RATIO 3 1.35 0.00 1.83 97 XM_SPF_SoftFail 3 1.79 1.69 1.83 98 SpammyFromTLD_02 3 2.24 3.39 1.83 99 KHOP_HELO_FCRDNS 3 2.24 3.39 1.83 100 TR_XM_SpammyWords5 3 3.59 8.47 1.83 101 T_XMDrugObfuBody_14 3 2.69 5.08 1.83 102 TR_XM_DKIM_Undo 3 5.38 15.25 1.83 103 XM_B_SpammyWords3 3 2.69 5.08 1.83 104 BAYES_95 3 1.79 1.69 1.83 105 XMSubject_78 3 1.35 0.00 1.83 106 XMSlimDrugH 2 0.90 0.00 1.22 107 SUBJ_ALL_CAPS 2 1.35 1.69 1.22 108 XMSpoofStaff2 2 0.90 0.00 1.22 109 TR_LOTS_OF_MONEY3 2 0.90 0.00 1.22 110 XM_H_SpoofStaff4 2 0.90 0.00 1.22 111 XMSubMetaSxObfu_03 2 0.90 0.00 1.22 112 XM_Body_Obfu01 2 0.90 0.00 1.22 113 BAYES_999 2 4.04 11.86 1.22 114 TR_XM_DK_SendGrid 2 1.35 1.69 1.22 115 XMBody_95 2 0.90 0.00 1.22 116 TR_DCC_Bayes_99 2 3.59 10.17 1.22 117 FROM_GOV_SPOOF 2 1.35 1.69 1.22 118 TR_XM_SB_Phish 2 0.90 0.00 1.22 119 RELAYCOUNTRY_CZ 2 0.90 0.00 1.22 120 XM_ZohoDesk1 2 0.90 0.00 1.22 121 XMBSHREFv2 2 1.35 1.69 1.22 122 TR_XM_SpoofPhishAttach 2 0.90 0.00 1.22 123 RCVD_IN_BL_SPAMCOP_NET 2 4.93 15.25 1.22 124 XM_Evil_Numbers_Gen 2 2.69 6.78 1.22 125 XMLngstWrd_00 2 0.90 0.00 1.22 126 TR_XM_PSC1 2 0.90 0.00 1.22 127 RCVD_IN_IADB_OPTIN 2 0.90 0.00 1.22 128 HTML_IMAGE_RATIO_08 2 1.79 3.39 1.22 129 TooManyTo_002 2 2.24 5.08 1.22 130 TR_XM_PhishingBody 2 1.35 1.69 1.22 131 MIME_CHARSET_FARAWAY 2 1.35 1.69 1.22 132 TR_XM_SpoofStaff 2 0.90 0.00 1.22 133 TR_XM_DK_Bayes2 2 1.35 1.69 1.22 134 TVD_RCVD_IP 2 0.90 0.00 1.22 135 XM_B_Phish66 2 0.90 0.00 1.22 136 RELAYCOUNTRY_IE 2 0.90 0.00 1.22 137 T_OBFU_PDF_ATTACH 2 1.35 1.69 1.22 138 XMSubPhish11 2 0.90 0.00 1.22 139 BAYES_20 2 0.90 0.00 1.22 140 XM_B_Investor 2 5.38 16.95 1.22 141 RELAYCOUNTRY_CA 2 1.35 1.69 1.22 142 XMDateMe_00 2 1.79 3.39 1.22 143 RCVD_IN_IADB_VOUCHED 2 1.35 1.69 1.22 144 HTML_IMAGE_RATIO_06 2 2.24 5.08 1.22 145 URI_TRY_3LD 2 0.90 0.00 1.22 146 RELAYCOUNTRY_TJ 2 0.90 0.00 1.22 147 URI_NOVOWEL 2 0.90 0.00 1.22 148 XMWghtMeta_00 1 0.45 0.00 0.61 149 BOTNET 1 5.83 20.34 0.61 150 XM_CamelCaseFrm001 1 0.90 1.69 0.61 151 RCVD_IN_MSPIKE_H5 1 0.45 0.00 0.61 152 SUBJECT_DIET 1 0.45 0.00 0.61 153 TR_XM_Base64_L1 1 1.35 3.39 0.61 154 MPART_ALT_DIFF_COUNT 1 0.90 1.69 0.61 155 NML_ADSP_CUSTOM_MED 1 0.45 0.00 0.61 156 RCVD_IN_VALIDITY_RPBL 1 0.45 0.00 0.61 157 T_XMDrugObfuBody_00 1 0.90 1.69 0.61 158 XMNoVowels 1 0.45 0.00 0.61 159 US_DOLLARS_3 1 0.90 1.69 0.61 160 RELAYCOUNTRY_NL 1 0.45 0.00 0.61 161 T_MONEY_PERCENT 1 2.24 6.78 0.61 162 HTML_IMAGE_ONLY_24 1 0.45 0.00 0.61 163 T_XMDrugObfuBody_08 1 0.45 0.00 0.61 164 DIET_1 1 0.90 1.69 0.61 165 XMLngstWrd_03 1 0.45 0.00 0.61 166 RELAYCOUNTRY_KR 1 0.45 0.00 0.61 167 XMLngstWrd_04 1 0.45 0.00 0.61 168 TR_XM_PHPDW 1 2.69 8.47 0.61 169 XM_H_MailChimp 1 0.45 0.00 0.61 170 XM_B_SpammyWords4 1 0.45 0.00 0.61 171 XM_H_Long_From03 1 0.45 0.00 0.61 172 HTML_IMAGE_ONLY_20 1 0.45 0.00 0.61 173 URIBL_CSS_A 1 0.45 0.00 0.61 174 XMLngstWrd_02 1 0.45 0.00 0.61 175 FROM_OFFERS 1 0.45 0.00 0.61 176 RCVD_IN_MSPIKE_H4 1 0.45 0.00 0.61 177 XM_H_PHPOS_M 1 2.24 6.78 0.61 178 TR_XM_FormFill2 1 2.69 8.47 0.61 179 XMAntiAgingB 1 0.45 0.00 0.61 180 URI_GOOGLE_PROXY 1 0.45 0.00 0.61 181 TR_Symld_Words 1 0.90 1.69 0.61 182 XMLngstWrd_01 1 0.45 0.00 0.61 183 SHORT_SHORTNER 1 0.45 0.00 0.61 184 PDS_OTHER_BAD_TLD 1 0.45 0.00 0.61 185 DKIM_ADSP_CUSTOM_MED 1 0.45 0.00 0.61 186 XM_Ancestry_Forge 1 0.45 0.00 0.61 187 ONE_TIME 1 0.45 0.00 0.61 188 TVD_SUBJ_ACC_NUM 1 0.45 0.00 0.61 189 XM_S_SubURI 1 0.45 0.00 0.61 190 HTML_IMAGE_ONLY_28 1 0.45 0.00 0.61 191 TooManyTo_005 1 1.35 3.39 0.61 192 XMLongAddy 1 0.45 0.00 0.61 193 XMReplyNow 1 0.45 0.00 0.61 194 XMCapTrack 1 0.45 0.00 0.61 195 TR_LOTS_OF_MONEY2 1 2.24 6.78 0.61 196 TR_Legit_01 1 0.45 0.00 0.61 197 TR_Mismatch_TLD_02 1 1.79 5.08 0.61 198 XMBody_03 1 0.45 0.00 0.61 199 T_TooManySym_04 1 0.45 0.00 0.61 200 TR_XM_PHPForged 1 2.69 8.47 0.61 ----------------------------------------------------------------------