Email: 276 Autolearn: 0 AvgScore: 1.72 AvgScanTime: 2.83 sec Spam: 72 Autolearn: 0 AvgScore: 13.49 AvgScanTime: 3.17 sec Ham: 204 Autolearn: 0 AvgScore: -2.44 AvgScanTime: 2.72 sec Time Spent Running SA: 0.22 hours Time Spent Processing Spam: 0.06 hours Time Spent Processing Ham: 0.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 67 72.10 93.06 64.71 2 DCC_CHECK_NEGATIVE 56 87.68 77.78 91.18 3 XM_B_SpammyWords 54 43.12 75.00 31.86 4 DKIM_SIGNED 45 60.14 62.50 59.31 5 DKIM_VALID 43 57.61 59.72 56.86 6 XM_DK_Pass 43 58.33 59.72 57.84 7 RELAYCOUNTRY_US 42 58.33 58.33 58.33 8 XM_B_Unicode 41 51.09 56.94 49.02 9 FVGT_m_MULTI_ODD 38 25.72 52.78 16.18 10 BAYES_99 30 11.96 41.67 1.47 11 XMListUnsubscribeExists 30 35.14 41.67 32.84 12 RELAYCOUNTRY_META 30 17.39 41.67 8.82 13 TR_XM_BayesUnsub 30 15.58 41.67 6.37 14 XM_B_Unsub 30 17.75 41.67 9.31 15 DKIM_VALID_AU 30 43.84 41.67 44.61 16 BAYES_50 29 63.04 40.28 71.08 17 TR_XM_SpammyRelay 27 13.41 37.50 4.90 18 XM_B_Unicode3 25 33.33 34.72 32.84 19 BAYES_999 25 9.78 34.72 0.98 20 HTML_FONT_LOW_CONTRAST 24 30.07 33.33 28.92 21 HTML_IMAGE_RATIO_02 24 12.32 33.33 4.90 22 UNTRUSTED_Relay 24 12.32 33.33 4.90 23 LOC_TINY_FONT_1 21 24.64 29.17 23.04 24 XM_DK_Undo_02 20 9.06 27.78 2.45 25 TR_XM_NoHeaderRelay 19 7.61 26.39 0.98 26 XM_B_SpammyWords2 18 11.59 25.00 6.86 27 DKIM_VALID_EF 17 27.90 23.61 29.41 28 RELAYCOUNTRY_FR 17 6.52 23.61 0.49 29 RCVD_IN_MSPIKE_H2 16 18.12 22.22 16.67 30 XM_Multi_Part_URI 16 14.13 22.22 11.27 31 DCC_CHECK 16 12.32 22.22 8.82 32 XM_UB99 16 6.16 22.22 0.49 33 XMSubLong 15 18.12 20.83 17.16 34 TR_XM_DKIM_Undo 15 6.16 20.83 0.98 35 UNPARSEABLE_RELAY 14 16.67 19.44 15.69 36 MIME_HTML_ONLY 13 16.30 18.06 15.69 37 XM_UB999 13 4.71 18.06 0.00 38 XM_Evil_Numbers_Gen 11 6.88 15.28 3.92 39 BOTNET 10 4.71 13.89 1.47 40 XM_B_SpammyWords3 10 6.16 13.89 3.43 41 T_KAM_HTML_FONT_INVALID 9 15.22 12.50 16.18 42 TR_XM_DK_Unsub 9 13.41 12.50 13.73 43 T_TM2_M_HEADER_IN_MSG 8 16.67 11.11 18.63 44 XM_SPF_SoftFail 8 5.07 11.11 2.94 45 XM_UncommonTLD01 8 6.16 11.11 4.41 46 XM_Body_Dirty_Words 7 3.99 9.72 1.96 47 BOTNET_IPINHOSTNAME 7 3.62 9.72 1.47 48 TR_XM_UnparsRelay 7 6.52 9.72 5.39 49 XM_B_SpammyTLD 6 5.07 8.33 3.92 50 XM_UB50 6 4.35 8.33 2.94 51 LOTS_OF_MONEY 6 3.62 8.33 1.96 52 XM_B_Phish_Phrases 6 4.71 8.33 3.43 53 BAYES_60 5 9.42 6.94 10.29 54 TooManyTo_001 5 6.88 6.94 6.86 55 MIME_HTML_MOSTLY 4 2.17 5.56 0.98 56 TR_XM_SpammyWords4 4 2.17 5.56 0.98 57 XM_B_DNDMA 4 1.81 5.56 0.49 58 TR_XM_SpammyWords2 4 1.45 5.56 0.00 59 KHOP_HELO_FCRDNS 4 2.17 5.56 0.98 60 TR_XM_SpammyWords5 4 2.17 5.56 0.98 61 TR_DCC_Bayes_99 4 1.45 5.56 0.00 62 RELAYCOUNTRY_AT 4 2.17 5.56 0.98 63 BAYES_80 4 2.54 5.56 1.47 64 XMSexyCombo_05 4 1.81 5.56 0.49 65 TR_XM_RelayPhish 3 1.09 4.17 0.00 66 XM_SendGrid 3 2.17 4.17 1.47 67 TM2_M_VERY_LONG_WORD 3 2.54 4.17 1.96 68 DEAR_SOMETHING 3 1.09 4.17 0.00 69 RCVD_IN_BL_SPAMCOP_NET 3 1.45 4.17 0.49 70 HTML_IMAGE_RATIO_06 3 1.45 4.17 0.49 71 SpammyFromTLD_01 3 1.45 4.17 0.49 72 TR_Symld_Words 3 1.81 4.17 0.98 73 PRICES_ARE_AFFORDABLE 3 1.09 4.17 0.00 74 XM_B_Investor 3 4.35 4.17 4.41 75 SpammyFromTLD_02 3 1.81 4.17 0.98 76 TR_XM_PHPForged 3 1.45 4.17 0.49 77 TR_XM_FormFill2 3 1.45 4.17 0.49 78 TR_XM_PHPDW 3 1.45 4.17 0.49 79 TR_XM_SPAMCOP 3 1.09 4.17 0.00 80 MPART_ALT_DIFF 3 3.99 4.17 3.92 81 T_TooManySym_01 3 4.35 4.17 4.41 82 XM_H_PHPOS 3 1.45 4.17 0.49 83 RELAYCOUNTRY_CA 3 1.45 4.17 0.49 84 FSL_BULK_SIG 3 2.54 4.17 1.96 85 XMNumbers 2 3.62 2.78 3.92 86 FROM_EXCESS_BASE64 2 0.72 2.78 0.00 87 TooManyTo_004 2 0.72 2.78 0.00 88 XM_Body_Dirty_Words_01 2 0.72 2.78 0.00 89 TR_XM_SB_Phish 2 2.54 2.78 2.45 90 XM_B_Unsub2 2 1.81 2.78 1.47 91 XM_B_SpammyTLD2 2 0.72 2.78 0.00 92 TooManyTo_003 2 0.72 2.78 0.00 93 BOTNET_NORDNS 2 0.72 2.78 0.00 94 BAYES_95 2 2.17 2.78 1.96 95 XM_DIRTYINTL 2 1.45 2.78 0.98 96 TR_Mismatch_TLD_01 2 0.72 2.78 0.00 97 XMSubPhish11 2 2.54 2.78 2.45 98 RDNS_DYNAMIC 2 0.72 2.78 0.00 99 TR_Mismatch_TLD_02 2 0.72 2.78 0.00 100 T_TooManySym_02 2 2.90 2.78 2.94 101 XMSexyCombo_01 2 0.72 2.78 0.00 102 XM_DK_Undo_01 2 1.09 2.78 0.49 103 HTML_MIME_NO_HTML_TAG 2 2.54 2.78 2.45 104 TR_XM_Base64_M1 2 1.09 2.78 0.49 105 NORDNS_LOW_CONTRAST 2 1.09 2.78 0.49 106 PDS_RDNS_DYNAMIC_FP 2 0.72 2.78 0.00 107 MIME_HTML_ONLY_MULTI 2 1.45 2.78 0.98 108 DEAR_FRIEND 2 0.72 2.78 0.00 109 URIBL_CSS 2 1.45 2.78 0.98 110 T_REMOTE_IMAGE 2 3.26 2.78 3.43 111 HTML_FONT_TINY_NORDNS 2 1.09 2.78 0.49 112 TR_XM_Base64_M2 2 1.09 2.78 0.49 113 TM2_M_URI_OPT_OUT 2 3.62 2.78 3.92 114 DKIM_INVALID 2 2.54 2.78 2.45 115 URIBL_CSS_A 2 1.45 2.78 0.98 116 TR_XM_Base64_L1 2 1.09 2.78 0.49 117 TooManyTo_002 2 1.45 2.78 0.98 118 T_XMDrugObfuBody_14 2 2.90 2.78 2.94 119 XMSubMetaSx_00 2 2.54 2.78 2.45 120 XM_H_Long_From01 2 2.90 2.78 2.94 121 XMStrtUSub 1 5.43 1.39 6.86 122 XMReplyNow 1 0.72 1.39 0.49 123 XMPhish08 1 0.36 1.39 0.00 124 XMLngstWrd_01 1 0.72 1.39 0.49 125 TR_XM_INV_DKIM 1 0.36 1.39 0.00 126 URI_TRUNCATED 1 0.36 1.39 0.00 127 RELAYCOUNTRY_IE 1 0.72 1.39 0.49 128 XMHTML_After_End 1 0.36 1.39 0.00 129 XMBSHREFv2 1 0.72 1.39 0.49 130 TR_XM_PhishingBody 1 1.45 1.39 1.47 131 XM_S_SEO 1 0.36 1.39 0.00 132 XM_OfRef6 1 0.36 1.39 0.00 133 MISSING_HEADERS 1 1.09 1.39 0.98 134 RCVD_IN_MSPIKE_WL 1 2.17 1.39 2.45 135 HTML_TAG_BALANCE_HEAD 1 0.72 1.39 0.49 136 BOUNCE_MESSAGE 1 17.39 1.39 23.04 137 PDS_OTHER_BAD_TLD 1 0.36 1.39 0.00 138 TR_XM_COVIDMETA4 1 0.36 1.39 0.00 139 XM_H_Long_From02 1 1.09 1.39 0.98 140 XMMoneyMeta_00 1 1.09 1.39 0.98 141 XMBounce_02 1 0.36 1.39 0.00 142 TO_NO_BRKTS_HTML_ONLY 1 0.36 1.39 0.00 143 XMLngstWrd_02 1 0.72 1.39 0.49 144 TO_EQ_FM_DOM_HTML_ONLY 1 0.36 1.39 0.00 145 BASE64_LENGTH_79_INF 1 0.72 1.39 0.49 146 INVALID_MSGID 1 2.54 1.39 2.94 147 PDS_PRO_TLD 1 0.36 1.39 0.00 148 LotsOfNums_01 1 3.26 1.39 3.92 149 RELAYCOUNTRY_CN 1 0.36 1.39 0.00 150 TR_XM_MaxWHORU 1 0.36 1.39 0.00 151 XM_B_SEO 1 0.36 1.39 0.00 152 TR_XM_SEO3 1 0.36 1.39 0.00 153 RCVD_IN_VALIDITY_RPBL 1 0.36 1.39 0.00 154 T_XMDrugObfuBody_08 1 0.72 1.39 0.49 155 XM_B_SpammyWords4 1 0.36 1.39 0.00 156 BAD_ENC_HEADER 1 0.36 1.39 0.00 157 T_FILL_THIS_FORM_SHORT 1 0.36 1.39 0.00 158 LOW_PRICE 1 0.72 1.39 0.49 159 XMURI4U 1 0.36 1.39 0.00 160 XMStockSpam_06 1 1.09 1.39 0.98 161 URI_TRY_3LD 1 1.45 1.39 1.47 162 HTML_IMAGE_ONLY_32 1 0.36 1.39 0.00 163 TR_XM_SEO 1 0.36 1.39 0.00 164 TVD_PH_BODY_ACCOUNTS_PRE 1 0.72 1.39 0.49 165 XM_UB60 1 0.36 1.39 0.00 166 XMacai 1 0.36 1.39 0.00 167 XMGppyBdWords 1 0.36 1.39 0.00 168 THIS_AD 1 0.72 1.39 0.49 169 AC_DIV_BONANZA 1 0.36 1.39 0.00 170 TR_XM_Base64_L2 1 0.72 1.39 0.49 171 XMLngstWrd_03 1 0.72 1.39 0.49 172 RELAYCOUNTRY_AU 1 3.26 1.39 3.92 173 TR_XM_SEO4 1 0.36 1.39 0.00 174 XMSolicitRefs_0 1 0.72 1.39 0.49 175 XM_UB95 1 0.36 1.39 0.00 176 RCVD_IN_MSPIKE_H3 1 2.17 1.39 2.45 177 RELAYCOUNTRY_BR 1 0.36 1.39 0.00 178 RELAYCOUNTRY_RO 1 0.36 1.39 0.00 179 HELO_DYNAMIC_SPLIT_IP 1 0.36 1.39 0.00 180 XM_H_PHPOS_M 1 0.72 1.39 0.49 181 MIME_CHARSET_FARAWAY 1 1.45 1.39 1.47 182 TR_MetaPhish_Combo_01 1 1.45 1.39 1.47 183 NO_DNS_FOR_FROM 1 0.36 1.39 0.00 184 SUBJ_ALL_CAPS 1 0.72 1.39 0.49 185 XMSexyCombo_02 1 0.36 1.39 0.00 186 HTML_IMAGE_RATIO_04 1 2.17 1.39 2.45 187 BAYES_40 1 3.99 1.39 4.90 188 XMLngstWrd_00 1 1.09 1.39 0.98 189 OBFU_TEXT_ATTACH 1 0.36 1.39 0.00 190 HTML_TEXT_INVISIBLE_FONT 1 0.36 1.39 0.00 191 ANY_BOUNCE_MESSAGE 1 17.39 1.39 23.04 192 XMBounce_01 1 0.36 1.39 0.00 193 XMNoVowels 1 1.81 1.39 1.96 194 TR_XM_InvalidRelay 1 0.36 1.39 0.00 195 XM_ProductURIs 1 0.36 1.39 0.00 196 BAYES_20 1 0.72 1.39 0.49 197 URIBL_BLACK 1 0.36 1.39 0.00 198 TooManyTo_005 1 0.36 1.39 0.00 199 TR_XM_Base64_C 1 0.72 1.39 0.49 200 FONT_INVIS_MSGID 1 0.36 1.39 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 186 87.68 77.78 91.18 2 BAYES_50 145 63.04 40.28 71.08 3 HTML_MESSAGE 132 72.10 93.06 64.71 4 DKIM_SIGNED 121 60.14 62.50 59.31 5 RELAYCOUNTRY_US 119 58.33 58.33 58.33 6 XM_DK_Pass 118 58.33 59.72 57.84 7 DKIM_VALID 116 57.61 59.72 56.86 8 XM_B_Unicode 100 51.09 56.94 49.02 9 DKIM_VALID_AU 91 43.84 41.67 44.61 10 XMListUnsubscribeExists 67 35.14 41.67 32.84 11 XM_B_Unicode3 67 33.33 34.72 32.84 12 XM_B_SpammyWords 65 43.12 75.00 31.86 13 ALL_TRUSTED 65 23.55 0.00 31.86 14 DKIM_VALID_EF 60 27.90 23.61 29.41 15 HTML_FONT_LOW_CONTRAST 59 30.07 33.33 28.92 16 BOUNCE_MESSAGE 47 17.39 1.39 23.04 17 ANY_BOUNCE_MESSAGE 47 17.39 1.39 23.04 18 LOC_TINY_FONT_1 47 24.64 29.17 23.04 19 T_TM2_M_HEADER_IN_MSG 38 16.67 11.11 18.63 20 XMSubLong 35 18.12 20.83 17.16 21 RCVD_IN_MSPIKE_H2 34 18.12 22.22 16.67 22 FVGT_m_MULTI_ODD 33 25.72 52.78 16.18 23 T_KAM_HTML_FONT_INVALID 33 15.22 12.50 16.18 24 UNPARSEABLE_RELAY 32 16.67 19.44 15.69 25 MIME_HTML_ONLY 32 16.30 18.06 15.69 26 TR_XM_DK_Unsub 28 13.41 12.50 13.73 27 XM_Multi_Part_URI 23 14.13 22.22 11.27 28 BAYES_60 21 9.42 6.94 10.29 29 XM_B_Unsub 19 17.75 41.67 9.31 30 RELAYCOUNTRY_META 18 17.39 41.67 8.82 31 XM_DKIMWhitelistDomains 18 6.52 0.00 8.82 32 DCC_CHECK 18 12.32 22.22 8.82 33 BAYES_00 15 5.43 0.00 7.35 34 XMStrtUSub 14 5.43 1.39 6.86 35 XM_B_SpammyWords2 14 11.59 25.00 6.86 36 TooManyTo_001 14 6.88 6.94 6.86 37 TR_XM_BayesUnsub 13 15.58 41.67 6.37 38 IN_ZIMBRA_NJ_WHITELIST 12 4.35 0.00 5.88 39 TR_XM_UnparsRelay 11 6.52 9.72 5.39 40 TR_XM_DK_Bayes 10 3.62 0.00 4.90 41 TR_XM_DK_Bayes1 10 3.62 0.00 4.90 42 TR_XM_SpammyRelay 10 13.41 37.50 4.90 43 BAYES_40 10 3.99 1.39 4.90 44 HTML_IMAGE_RATIO_02 10 12.32 33.33 4.90 45 UNTRUSTED_Relay 10 12.32 33.33 4.90 46 TR_XM_DK_Bayes2 9 3.26 0.00 4.41 47 USER_IN_DEF_DKIM_WL 9 3.26 0.00 4.41 48 XM_UncommonTLD01 9 6.16 11.11 4.41 49 XM_B_Investor 9 4.35 4.17 4.41 50 T_TooManySym_01 9 4.35 4.17 4.41 51 XMNumbers 8 3.62 2.78 3.92 52 XM_B_SpammyTLD 8 5.07 8.33 3.92 53 XM_Evil_Numbers_Gen 8 6.88 15.28 3.92 54 LotsOfNums_01 8 3.26 1.39 3.92 55 RELAYCOUNTRY_AU 8 3.26 1.39 3.92 56 TM2_M_URI_OPT_OUT 8 3.62 2.78 3.92 57 MPART_ALT_DIFF 8 3.99 4.17 3.92 58 T_REMOTE_IMAGE 7 3.26 2.78 3.43 59 XMGappySubj_01 7 2.54 0.00 3.43 60 XM_B_SpammyWords3 7 6.16 13.89 3.43 61 XM_B_Phish_Phrases 7 4.71 8.33 3.43 62 XM_UB50 6 4.35 8.33 2.94 63 XM_SPF_SoftFail 6 5.07 11.11 2.94 64 INVALID_MSGID 6 2.54 1.39 2.94 65 T_TooManySym_02 6 2.90 2.78 2.94 66 MIME_QP_LONG_LINE 6 2.17 0.00 2.94 67 TO_MALFORMED 6 2.17 0.00 2.94 68 T_XMDrugObfuBody_14 6 2.90 2.78 2.94 69 XM_H_Long_From01 6 2.90 2.78 2.94 70 RCVD_IN_MSPIKE_WL 5 2.17 1.39 2.45 71 TR_XM_SB_Phish 5 2.54 2.78 2.45 72 USER_IN_WHITELIST 5 1.81 0.00 2.45 73 RCVD_IN_MSPIKE_H3 5 2.17 1.39 2.45 74 XMSubPhish11 5 2.54 2.78 2.45 75 XM_DK_Undo_02 5 9.06 27.78 2.45 76 HTML_MIME_NO_HTML_TAG 5 2.54 2.78 2.45 77 HTML_IMAGE_RATIO_04 5 2.17 1.39 2.45 78 DKIM_INVALID 5 2.54 2.78 2.45 79 XMSubMetaSx_00 5 2.54 2.78 2.45 80 USER_IN_WELCOMELIST 5 1.81 0.00 2.45 81 XM_CamelCaseFrm001 4 1.45 0.00 1.96 82 TM2_M_VERY_LONG_WORD 4 2.54 4.17 1.96 83 XM_Body_Dirty_Words 4 3.99 9.72 1.96 84 BAYES_95 4 2.17 2.78 1.96 85 IN_HORDE_ADDRESS_BOOK 4 1.45 0.00 1.96 86 LOTS_OF_MONEY 4 3.62 8.33 1.96 87 XMNoVowels 4 1.81 1.39 1.96 88 XM_PDF 4 1.45 0.00 1.96 89 FSL_BULK_SIG 4 2.54 4.17 1.96 90 MAILING_LIST_MULTI 4 1.45 0.00 1.96 91 XM_ZIP 4 1.45 0.00 1.96 92 BAYES_99 3 11.96 41.67 1.47 93 TR_XM_PhishingBody 3 1.45 1.39 1.47 94 XM_B_Unsub2 3 1.81 2.78 1.47 95 XM_SendGrid 3 2.17 4.17 1.47 96 HTTPS_HTTP_MISMATCH 3 1.09 0.00 1.47 97 TVD_SPACE_RATIO 3 1.09 0.00 1.47 98 URI_TRY_3LD 3 1.45 1.39 1.47 99 RELAYCOUNTRY_TW 3 1.09 0.00 1.47 100 MIME_CHARSET_FARAWAY 3 1.45 1.39 1.47 101 TR_MetaPhish_Combo_01 3 1.45 1.39 1.47 102 BAYES_80 3 2.54 5.56 1.47 103 TM2_M_HAS_BSLASH_URI 3 1.09 0.00 1.47 104 XM_H_PHPMailer 3 1.45 1.39 1.47 105 BOTNET_IPINHOSTNAME 3 3.62 9.72 1.47 106 URI_HEX 3 1.09 0.00 1.47 107 BOTNET 3 4.71 13.89 1.47 108 XMGappySubj_02 3 1.09 0.00 1.47 109 T_XMDrugObfuBody_00 2 0.72 0.00 0.98 110 TR_XM_NoHeaderRelay 2 7.61 26.39 0.98 111 RCVD_IN_IADB_OPTIN 2 0.72 0.00 0.98 112 MIME_HTML_MOSTLY 2 2.17 5.56 0.98 113 XM_H_Long_From02 2 1.09 1.39 0.98 114 XMMoneyMeta_00 2 1.09 1.39 0.98 115 BAYES_05 2 0.72 0.00 0.98 116 XM_GoogleGroups 2 0.72 0.00 0.98 117 MISSING_HEADERS 2 1.09 1.39 0.98 118 RCVD_IN_IADB_SPF 2 0.72 0.00 0.98 119 RCVD_IN_IADB_VOUCHED 2 0.72 0.00 0.98 120 TR_XM_SpoofStaff 2 0.72 0.00 0.98 121 REPLYTO_WITHOUT_TO_CC 2 0.72 0.00 0.98 122 TR_XM_SpammyWords4 2 2.17 5.56 0.98 123 RCVD_IN_VALIDITY_SAFE 2 0.72 0.00 0.98 124 FROM_LOCAL_HEX 2 0.72 0.00 0.98 125 XMBody_95 2 0.72 0.00 0.98 126 TR_XM_SpoofPhishAttach 2 0.72 0.00 0.98 127 TR_XM_SpammyWords5 2 2.17 5.56 0.98 128 TR_Symld_Words 2 1.81 4.17 0.98 129 XMStockSpam_06 2 1.09 1.39 0.98 130 RCVD_IN_VALIDITY_CERTIFIED 2 0.72 0.00 0.98 131 KHOP_HELO_FCRDNS 2 2.17 5.56 0.98 132 XM_DIRTYINTL 2 1.45 2.78 0.98 133 XM_B_Phish66 2 0.72 0.00 0.98 134 RELAYCOUNTRY_AT 2 2.17 5.56 0.98 135 BAYES_999 2 9.78 34.72 0.98 136 SpammyFromTLD_02 2 1.81 4.17 0.98 137 MSGID_NOFQDN1 2 0.72 0.00 0.98 138 XMDiploma_00 2 0.72 0.00 0.98 139 URIBL_CSS 2 1.45 2.78 0.98 140 XM_Body_Obfu01 2 0.72 0.00 0.98 141 XM_H_Undi_Recip 2 0.72 0.00 0.98 142 XM_ZohoDesk1 2 0.72 0.00 0.98 143 MIME_HTML_ONLY_MULTI 2 1.45 2.78 0.98 144 RCVD_IN_IADB_SENDERID 2 0.72 0.00 0.98 145 RCVD_IN_IADB_LISTED 2 0.72 0.00 0.98 146 XMLngstWrd_00 2 1.09 1.39 0.98 147 TR_XM_PSC1 2 0.72 0.00 0.98 148 FROM_GOV_SPOOF 2 1.09 1.39 0.98 149 XMSpoofStaff2 2 0.72 0.00 0.98 150 RCVD_IN_IADB_DK 2 0.72 0.00 0.98 151 T_TooManySym_03 2 0.72 0.00 0.98 152 TR_XM_DKIM_Undo 2 6.16 20.83 0.98 153 TR_XM_DK_SendGrid 2 0.72 0.00 0.98 154 TooManyTo_002 2 1.45 2.78 0.98 155 XM_Dr_From 2 0.72 0.00 0.98 156 URIBL_CSS_A 2 1.45 2.78 0.98 157 XM_H_SpoofStaff4 2 0.72 0.00 0.98 158 RELAYCOUNTRY_IE 1 0.72 1.39 0.49 159 XMBSHREFv2 1 0.72 1.39 0.49 160 XMSlimDrugH 1 0.36 0.00 0.49 161 HELO_STATIC_HOST 1 0.36 0.00 0.49 162 XMLngstWrd_01 1 0.72 1.39 0.49 163 XMReplyNow 1 0.72 1.39 0.49 164 HTML_FONT_FACE_BAD 1 0.36 0.00 0.49 165 XMHTMLBadTable_001 1 0.36 0.00 0.49 166 XMLngstWrd_02 1 0.72 1.39 0.49 167 XMSubNoVowel 1 0.36 0.00 0.49 168 RELAYCOUNTRY_LK 1 0.36 0.00 0.49 169 XMSubMetaSxObfu_03 1 0.36 0.00 0.49 170 HTML_TAG_BALANCE_HEAD 1 0.72 1.39 0.49 171 XMPhish14 1 0.36 0.00 0.49 172 HTML_IMAGE_RATIO_06 1 1.45 4.17 0.49 173 XM_B_DNDMA 1 1.81 5.56 0.49 174 XMGenDplmaNmb 1 0.36 0.00 0.49 175 RCVD_IN_BL_SPAMCOP_NET 1 1.45 4.17 0.49 176 XM_S_SubURI 1 0.36 0.00 0.49 177 XM_ShortIntro_01 1 0.36 0.00 0.49 178 SpammyFromTLD_01 1 1.45 4.17 0.49 179 T_STY_INVIS_DIRECT 1 0.36 0.00 0.49 180 BASE64_LENGTH_79_INF 1 0.72 1.39 0.49 181 HDRS_MISSP 1 0.36 0.00 0.49 182 TR_XM_Undi_Recip14 1 0.36 0.00 0.49 183 TR_Sbj_FN_Bdy 1 0.36 0.00 0.49 184 TVD_PH_BODY_ACCOUNTS_PRE 1 0.72 1.39 0.49 185 T_XMDrugObfuBody_08 1 0.72 1.39 0.49 186 URI_DOTEDU 1 0.36 0.00 0.49 187 LOW_PRICE 1 0.72 1.39 0.49 188 HTML_IMAGE_ONLY_20 1 0.36 0.00 0.49 189 GMD_PDF_HORIZ 1 0.36 0.00 0.49 190 XMSolicitRefs_0 1 0.72 1.39 0.49 191 XMSubEmpty 1 0.36 0.00 0.49 192 NUMERIC_HTTP_ADDR 1 0.36 0.00 0.49 193 XM_DK_Undo_01 1 1.09 2.78 0.49 194 TR_XM_Undi_Recip2 1 0.36 0.00 0.49 195 XM_B_DynamicLink 1 0.36 0.00 0.49 196 XM_H_PHPOS_M 1 0.72 1.39 0.49 197 TR_XM_Base64_L2 1 0.72 1.39 0.49 198 XMLngstWrd_03 1 0.72 1.39 0.49 199 XMSubMetaI_00 1 0.36 0.00 0.49 200 THIS_AD 1 0.72 1.39 0.49 ----------------------------------------------------------------------