Email: 317 Autolearn: 0 AvgScore: 2.52 AvgScanTime: 3.44 sec Spam: 51 Autolearn: 0 AvgScore: 12.39 AvgScanTime: 3.81 sec Ham: 266 Autolearn: 0 AvgScore: 0.63 AvgScanTime: 3.37 sec Time Spent Running SA: 0.30 hours Time Spent Processing Spam: 0.05 hours Time Spent Processing Ham: 0.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 46 58.04 90.20 51.88 2 HTML_MESSAGE 46 58.36 90.20 52.26 3 XM_DK_Pass 43 55.21 84.31 49.62 4 RELAYCOUNTRY_US 42 57.41 82.35 52.63 5 DKIM_VALID 42 55.21 82.35 50.00 6 XM_B_Unicode 41 45.43 80.39 38.72 7 XMListUnsubscribeExists 38 40.06 74.51 33.46 8 DCC_CHECK_NEGATIVE 33 83.28 64.71 86.84 9 DKIM_VALID_AU 28 44.16 54.90 42.11 10 LOC_TINY_FONT_1 28 27.44 54.90 22.18 11 BAYES_50 26 65.93 50.98 68.80 12 XM_B_Unicode3 25 28.71 49.02 24.81 13 XM_Multi_Part_URI 24 19.56 47.06 14.29 14 XM_B_SpammyWords 24 28.71 47.06 25.19 15 HTML_FONT_LOW_CONTRAST 22 26.81 43.14 23.68 16 FVGT_m_MULTI_ODD 22 19.24 43.14 14.66 17 RCVD_IN_MSPIKE_H2 21 18.30 41.18 13.91 18 XM_DK_Undo_02 20 7.57 39.22 1.50 19 DCC_CHECK 18 16.72 35.29 13.16 20 T_KAM_HTML_FONT_INVALID 15 12.93 29.41 9.77 21 UNPARSEABLE_RELAY 14 13.25 27.45 10.53 22 XM_B_SpammyWords2 13 13.56 25.49 11.28 23 XMSubLong 12 13.56 23.53 11.65 24 RCVD_IN_BL_SPAMCOP_NET 10 3.47 19.61 0.38 25 DKIM_VALID_EF 10 29.65 19.61 31.58 26 XM_UncommonTLD01 10 9.46 19.61 7.52 27 XMNumbers 9 4.42 17.65 1.88 28 T_TM2_M_HEADER_IN_MSG 9 18.30 17.65 18.42 29 XMSubMetaSx_00 9 5.05 17.65 2.63 30 BAYES_99 9 4.10 17.65 1.50 31 TR_XM_SPAMCOP 9 3.15 17.65 0.38 32 RELAYCOUNTRY_META 8 7.26 15.69 5.64 33 TR_XM_DKIM_Undo 8 2.84 15.69 0.38 34 BAYES_999 7 2.84 13.73 0.75 35 TR_XM_DK_Unsub 7 17.67 13.73 18.42 36 TR_XM_BayesUnsub 6 3.79 11.76 2.26 37 XM_B_Unsub 6 3.79 11.76 2.26 38 TR_XM_SpammyRelay 6 4.73 11.76 3.38 39 UNTRUSTED_Relay 6 4.73 11.76 3.38 40 XM_Body_Dirty_Words 6 5.05 11.76 3.76 41 BOTNET_IPINHOSTNAME 6 4.42 11.76 3.01 42 SpammyFromTLD_01 6 4.10 11.76 2.63 43 TR_XM_FormFill2 6 3.15 11.76 1.50 44 XM_B_SpammyTLD 6 4.10 11.76 2.63 45 TR_XM_PHPForged 5 2.84 9.80 1.50 46 TR_XM_PHPDW 5 2.84 9.80 1.50 47 XM_H_PHPOS 5 2.84 9.80 1.50 48 XM_B_Phish_Phrases 5 3.79 9.80 2.63 49 TR_DCC_Bayes_99 5 1.58 9.80 0.00 50 MIME_HTML_ONLY 5 10.73 9.80 10.90 51 TR_XM_SpammyWords5 4 1.58 7.84 0.38 52 XM_UB50 4 2.52 7.84 1.50 53 DKIM_INVALID 4 2.84 7.84 1.88 54 TooManyTo_001 4 5.05 7.84 4.51 55 XMEmptyBody_01 4 1.26 7.84 0.00 56 XMSexyCombo_05 4 2.52 7.84 1.50 57 BAYES_80 4 3.15 7.84 2.26 58 TM2_M_BODY_EMPTY 4 1.26 7.84 0.00 59 BAYES_95 4 1.89 7.84 0.75 60 BODY_EMPTY 4 1.26 7.84 0.00 61 XM_H_Long_From01 4 7.89 7.84 7.89 62 XMSexyCombo_01 3 0.95 5.88 0.00 63 XM_B_SpammyWords3 3 2.84 5.88 2.26 64 TR_XM_UnparsRelay 3 2.84 5.88 2.26 65 TooManyTo_002 3 1.26 5.88 0.38 66 BAYES_20 3 3.15 5.88 2.63 67 DIET_1 3 0.95 5.88 0.00 68 XM_B_Unsub2 3 1.58 5.88 0.75 69 BAYES_60 3 10.09 5.88 10.90 70 LOTS_OF_MONEY 3 2.21 5.88 1.50 71 TooManyTo_004 3 0.95 5.88 0.00 72 MPART_ALT_DIFF 3 4.10 5.88 3.76 73 T_REMOTE_IMAGE 3 4.73 5.88 4.51 74 XM_Evil_Numbers_Gen 3 3.79 5.88 3.38 75 TR_XM_SpammyWords2 3 1.26 5.88 0.38 76 XMStockSpam_06 3 1.58 5.88 0.75 77 TooManyTo_003 3 0.95 5.88 0.00 78 HTML_FONT_TINY_NORDNS 3 1.26 5.88 0.38 79 MIME_HTML_MOSTLY 3 3.79 5.88 3.38 80 RELAYCOUNTRY_PL 2 0.63 3.92 0.00 81 XM_ProductURIs 2 0.63 3.92 0.00 82 XMSubMetaSxObfu_02 2 0.95 3.92 0.38 83 XM_SPF_SoftFail 2 1.26 3.92 0.75 84 HTML_IMAGE_ONLY_04 2 0.63 3.92 0.00 85 XM_DIRTYINTL 2 0.95 3.92 0.38 86 T_XMDrugObfuBody_14 2 2.84 3.92 2.63 87 XMSubMetaSSx_00 2 1.26 3.92 0.75 88 XMSexyCombo_02 2 0.63 3.92 0.00 89 TR_XM_PhishingBody 2 1.89 3.92 1.50 90 TM2_M_URI_OPT_OUT 2 1.58 3.92 1.13 91 XMSubEmpty 2 0.95 3.92 0.38 92 XMSubNoVowel 2 0.95 3.92 0.38 93 TR_XM_SpammyWords4 2 1.58 3.92 1.13 94 SpammyFromTLD_02 2 0.63 3.92 0.00 95 BAYES_40 2 4.42 3.92 4.51 96 T_TooManySym_01 2 4.10 3.92 4.14 97 BOTNET 2 0.95 3.92 0.38 98 EMPTY_MESSAGE 2 0.63 3.92 0.00 99 TR_Symld_Words 2 1.89 3.92 1.50 100 RDNS_DYNAMIC 2 0.63 3.92 0.00 101 XMReplyNow 2 0.63 3.92 0.00 102 HTML_IMAGE_RATIO_04 2 4.73 3.92 4.89 103 KHOP_HELO_FCRDNS 2 0.95 3.92 0.38 104 TooManyTo_005 2 0.63 3.92 0.00 105 LotsOfNums_01 2 3.15 3.92 3.01 106 TR_XM_InvalidRelay 2 0.63 3.92 0.00 107 LONG_JUNK_URI2 2 0.63 3.92 0.00 108 XM_UB99 2 0.63 3.92 0.00 109 TR_Sbj_FN_Bdy 2 0.95 3.92 0.38 110 XM_CamelCaseFrm001 2 2.84 3.92 2.63 111 XM_Body_Dirty_Words_01 2 0.63 3.92 0.00 112 SHOPIFY_IMG_NOT_RCVD_SFY 2 0.63 3.92 0.00 113 URIBL_DBL_SPAM 1 0.32 1.96 0.00 114 XM_B_Phish66 1 0.63 1.96 0.38 115 XMLngstWrd_04 1 0.63 1.96 0.38 116 HTML_IMAGE_RATIO_02 1 1.89 1.96 1.88 117 NML_ADSP_CUSTOM_MED 1 0.32 1.96 0.00 118 TVD_SPACE_RATIO 1 1.26 1.96 1.13 119 OBFU_TEXT_ATTACH 1 0.32 1.96 0.00 120 FSL_BULK_SIG 1 1.89 1.96 1.88 121 TR_XM_Base64_L1 1 0.32 1.96 0.00 122 RELAYCOUNTRY_RU 1 0.32 1.96 0.00 123 FROM_EXCESS_BASE64 1 1.26 1.96 1.13 124 XMSubMetaI_00 1 1.26 1.96 1.13 125 DKIM_ADSP_CUSTOM_MED 1 0.63 1.96 0.38 126 BOUNCE_MESSAGE 1 28.08 1.96 33.08 127 T_XMDrugObfuBody_08 1 0.95 1.96 0.75 128 XMStrtUSub 1 6.62 1.96 7.52 129 TR_XM_MaxWHORU 1 0.32 1.96 0.00 130 ANY_BOUNCE_MESSAGE 1 28.08 1.96 33.08 131 NOT_SPAM 1 0.32 1.96 0.00 132 ALL_TRUSTED 1 34.70 1.96 40.98 133 XMGppyBdWords 1 0.32 1.96 0.00 134 T_TooManySym_02 1 2.52 1.96 2.63 135 T_Symld_Words_02 1 0.32 1.96 0.00 136 RELAYCOUNTRY_NO 1 0.32 1.96 0.00 137 MONEY_BACK 1 1.26 1.96 1.13 138 TVD_SPACE_RATIO_MINFP 1 0.32 1.96 0.00 139 HELO_DYNAMIC_SPLIT_IP 1 0.32 1.96 0.00 140 LONG_JUNK_URI3 1 0.63 1.96 0.38 141 XMSubMetaSxObfu_04 1 0.32 1.96 0.00 142 XMSexyCombo_04 1 0.32 1.96 0.00 143 XM_H_PHPMailer 1 0.95 1.96 0.75 144 NO_DNS_FOR_FROM 1 0.32 1.96 0.00 145 RELAYCOUNTRY_FR 1 0.95 1.96 0.75 146 XM_DK_Undo_01 1 0.63 1.96 0.38 147 XMLngstWrd_03 1 0.63 1.96 0.38 148 XMWinner 1 0.63 1.96 0.38 149 URI_TRUNCATED 1 0.63 1.96 0.38 150 HK_RANDOM_ENVFROM 1 0.32 1.96 0.00 151 XMNoVowels 1 0.63 1.96 0.38 152 MPART_ALT_DIFF_COUNT 1 0.32 1.96 0.00 153 XMSubMetaSxObfu_03 1 0.95 1.96 0.75 154 XMOemUri 1 1.26 1.96 1.13 155 HTML_IMAGE_RATIO_06 1 1.26 1.96 1.13 156 NORDNS_LOW_CONTRAST 1 0.32 1.96 0.00 157 URI_WP_HACKED_2 1 0.32 1.96 0.00 158 T_XMDrugObfuBody_00 1 0.95 1.96 0.75 159 TVD_RCVD_IP 1 1.26 1.96 1.13 160 RELAYCOUNTRY_VN 1 0.32 1.96 0.00 161 HTML_MIME_NO_HTML_TAG 1 2.84 1.96 3.01 162 XM_UB999 1 0.32 1.96 0.00 163 XMBody_29 1 0.32 1.96 0.00 164 PDS_PRO_TLD 1 0.32 1.96 0.00 165 FROM_GOV_SPOOF 1 0.95 1.96 0.75 166 RELAYCOUNTRY_SG 1 0.32 1.96 0.00 167 URI_OPTOUT_3LD 1 0.32 1.96 0.00 168 URIBL_BLACK 1 0.32 1.96 0.00 169 HTTPS_HTTP_MISMATCH 1 0.63 1.96 0.38 170 XMLngstWrd_02 1 0.63 1.96 0.38 171 RELAYCOUNTRY_AU 1 2.21 1.96 2.26 172 RELAYCOUNTRY_CA 1 0.32 1.96 0.00 173 XM_ShortIntro_01 1 0.32 1.96 0.00 174 XMSubMetaSSx_01 1 0.32 1.96 0.00 175 XMLngstWrd_01 1 0.63 1.96 0.38 176 T_FILL_THIS_FORM_SHORT 1 0.63 1.96 0.38 177 TO_EQ_FM_DOM_HTML_ONLY 1 0.32 1.96 0.00 178 XMLngstWrd_00 1 0.95 1.96 0.75 179 RCVD_IN_VALIDITY_SAFE 1 1.26 1.96 1.13 180 XMPhish08 1 0.32 1.96 0.00 181 XM_Sams_Club_Forge 1 1.26 1.96 1.13 182 XM_SendGrid 1 0.63 1.96 0.38 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 231 83.28 64.71 86.84 2 BAYES_50 183 65.93 50.98 68.80 3 RELAYCOUNTRY_US 140 57.41 82.35 52.63 4 HTML_MESSAGE 139 58.36 90.20 52.26 5 DKIM_SIGNED 138 58.04 90.20 51.88 6 DKIM_VALID 133 55.21 82.35 50.00 7 XM_DK_Pass 132 55.21 84.31 49.62 8 DKIM_VALID_AU 112 44.16 54.90 42.11 9 ALL_TRUSTED 109 34.70 1.96 40.98 10 XM_B_Unicode 103 45.43 80.39 38.72 11 XMListUnsubscribeExists 89 40.06 74.51 33.46 12 BOUNCE_MESSAGE 88 28.08 1.96 33.08 13 ANY_BOUNCE_MESSAGE 88 28.08 1.96 33.08 14 DKIM_VALID_EF 84 29.65 19.61 31.58 15 XM_B_SpammyWords 67 28.71 47.06 25.19 16 XM_B_Unicode3 66 28.71 49.02 24.81 17 HTML_FONT_LOW_CONTRAST 63 26.81 43.14 23.68 18 LOC_TINY_FONT_1 59 27.44 54.90 22.18 19 T_TM2_M_HEADER_IN_MSG 49 18.30 17.65 18.42 20 TR_XM_DK_Unsub 49 17.67 13.73 18.42 21 FVGT_m_MULTI_ODD 39 19.24 43.14 14.66 22 XM_Multi_Part_URI 38 19.56 47.06 14.29 23 RCVD_IN_MSPIKE_H2 37 18.30 41.18 13.91 24 DCC_CHECK 35 16.72 35.29 13.16 25 XMSubLong 31 13.56 23.53 11.65 26 XM_B_SpammyWords2 30 13.56 25.49 11.28 27 MIME_HTML_ONLY 29 10.73 9.80 10.90 28 BAYES_60 29 10.09 5.88 10.90 29 UNPARSEABLE_RELAY 28 13.25 27.45 10.53 30 T_KAM_HTML_FONT_INVALID 26 12.93 29.41 9.77 31 XM_H_Long_From01 21 7.89 7.84 7.89 32 XM_UncommonTLD01 20 9.46 19.61 7.52 33 BAYES_00 20 6.31 0.00 7.52 34 XMStrtUSub 20 6.62 1.96 7.52 35 MAILING_LIST_MULTI 19 5.99 0.00 7.14 36 XM_DKIMWhitelistDomains 16 5.05 0.00 6.02 37 RELAYCOUNTRY_META 15 7.26 15.69 5.64 38 XMSubPhish11 15 4.73 0.00 5.64 39 TR_XM_SB_Phish 15 4.73 0.00 5.64 40 HTML_IMAGE_RATIO_04 13 4.73 3.92 4.89 41 BAYES_40 12 4.42 3.92 4.51 42 T_REMOTE_IMAGE 12 4.73 5.88 4.51 43 TooManyTo_001 12 5.05 7.84 4.51 44 INVALID_MSGID 11 3.47 0.00 4.14 45 T_TooManySym_01 11 4.10 3.92 4.14 46 TO_MALFORMED 11 3.47 0.00 4.14 47 IN_ZIMBRA_NJ_WHITELIST 10 3.15 0.00 3.76 48 MPART_ALT_DIFF 10 4.10 5.88 3.76 49 RCVD_IN_MSPIKE_H3 10 3.15 0.00 3.76 50 TR_XM_DK_Bayes1 10 3.15 0.00 3.76 51 XM_Body_Dirty_Words 10 5.05 11.76 3.76 52 RCVD_IN_MSPIKE_WL 10 3.15 0.00 3.76 53 TR_XM_DK_Bayes 10 3.15 0.00 3.76 54 USER_IN_DEF_DKIM_WL 9 2.84 0.00 3.38 55 MIME_HTML_MOSTLY 9 3.79 5.88 3.38 56 MIME_QP_LONG_LINE 9 2.84 0.00 3.38 57 XM_Evil_Numbers_Gen 9 3.79 5.88 3.38 58 TR_XM_SpammyRelay 9 4.73 11.76 3.38 59 UNTRUSTED_Relay 9 4.73 11.76 3.38 60 TR_XM_DK_Bayes2 8 2.52 0.00 3.01 61 BOTNET_IPINHOSTNAME 8 4.42 11.76 3.01 62 HTML_MIME_NO_HTML_TAG 8 2.84 1.96 3.01 63 LotsOfNums_01 8 3.15 3.92 3.01 64 XM_B_Phish_Phrases 7 3.79 9.80 2.63 65 XM_CamelCaseFrm001 7 2.84 3.92 2.63 66 XM_B_SpammyTLD 7 4.10 11.76 2.63 67 XMSubMetaSx_00 7 5.05 17.65 2.63 68 SpammyFromTLD_01 7 4.10 11.76 2.63 69 BAYES_20 7 3.15 5.88 2.63 70 BASE64_LENGTH_79_INF 7 2.21 0.00 2.63 71 T_XMDrugObfuBody_14 7 2.84 3.92 2.63 72 T_TooManySym_02 7 2.52 1.96 2.63 73 RELAYCOUNTRY_AU 6 2.21 1.96 2.26 74 XMGappySubj_01 6 1.89 0.00 2.26 75 BAYES_80 6 3.15 7.84 2.26 76 TR_XM_UnparsRelay 6 2.84 5.88 2.26 77 TR_XM_BayesUnsub 6 3.79 11.76 2.26 78 XM_B_Unsub 6 3.79 11.76 2.26 79 XM_B_SpammyWords3 6 2.84 5.88 2.26 80 XM_ZIP 5 1.58 0.00 1.88 81 XMNumbers 5 4.42 17.65 1.88 82 HTML_IMAGE_RATIO_02 5 1.89 1.96 1.88 83 MSGID_NOFQDN1 5 1.58 0.00 1.88 84 FSL_BULK_SIG 5 1.89 1.96 1.88 85 DKIM_INVALID 5 2.84 7.84 1.88 86 TR_XM_FormFill2 4 3.15 11.76 1.50 87 BAYES_99 4 4.10 17.65 1.50 88 XM_H_PHPOS_M 4 1.26 0.00 1.50 89 XMSexyCombo_05 4 2.52 7.84 1.50 90 TR_Symld_Words 4 1.89 3.92 1.50 91 XM_PDF 4 1.26 0.00 1.50 92 XM_H_PHPOS 4 2.84 9.80 1.50 93 LOTS_OF_MONEY 4 2.21 5.88 1.50 94 XM_DK_Undo_02 4 7.57 39.22 1.50 95 TR_XM_PhishingBody 4 1.89 3.92 1.50 96 TR_XM_PHPDW 4 2.84 9.80 1.50 97 XM_UB50 4 2.52 7.84 1.50 98 TR_XM_PHPForged 4 2.84 9.80 1.50 99 MIME_HTML_ONLY_MULTI 4 1.26 0.00 1.50 100 XMBody_95 3 0.95 0.00 1.13 101 RCVD_IN_VALIDITY_SAFE 3 1.26 1.96 1.13 102 XM_Sams_Club_Forge 3 1.26 1.96 1.13 103 TR_XM_SpammyWords4 3 1.58 3.92 1.13 104 HTML_IMAGE_RATIO_06 3 1.26 1.96 1.13 105 XMOemUri 3 1.26 1.96 1.13 106 TVD_RCVD_IP 3 1.26 1.96 1.13 107 XMPhish14 3 0.95 0.00 1.13 108 XM_UB60 3 0.95 0.00 1.13 109 MONEY_BACK 3 1.26 1.96 1.13 110 BAYES_05 3 0.95 0.00 1.13 111 TM2_M_VERY_LONG_WORD 3 0.95 0.00 1.13 112 XMDiploma_00 3 0.95 0.00 1.13 113 TM2_M_URI_OPT_OUT 3 1.58 3.92 1.13 114 MSGID_FROM_MTA_HEADER 3 0.95 0.00 1.13 115 RELAYCOUNTRY_IN 3 0.95 0.00 1.13 116 TVD_SPACE_RATIO 3 1.26 1.96 1.13 117 FROM_EXCESS_BASE64 3 1.26 1.96 1.13 118 XMSubMetaI_00 3 1.26 1.96 1.13 119 XMSubject_60 2 0.63 0.00 0.75 120 XMStockSpam_06 2 1.58 5.88 0.75 121 BAYES_95 2 1.89 7.84 0.75 122 TR_XM_SpoofStaff 2 0.63 0.00 0.75 123 XMLngstWrd_00 2 0.95 1.96 0.75 124 HTML_IMAGE_ONLY_16 2 0.63 0.00 0.75 125 TR_Mismatch_TLD_01 2 0.63 0.00 0.75 126 XMSubMetaSxObfu_03 2 0.95 1.96 0.75 127 RELAYCOUNTRY_GB 2 0.63 0.00 0.75 128 XM_B_Unsub2 2 1.58 5.88 0.75 129 T_XMDrugObfuBody_00 2 0.95 1.96 0.75 130 T_STY_INVIS_DIRECT 2 0.63 0.00 0.75 131 XMMoneyMeta_00 2 0.63 0.00 0.75 132 XMSpoofStaff2 2 0.63 0.00 0.75 133 FROM_GOV_SPOOF 2 0.95 1.96 0.75 134 SUBJ_ALL_CAPS 2 0.63 0.00 0.75 135 XMSubMetaSSx_00 2 1.26 3.92 0.75 136 RCVD_IN_VALIDITY_CERTIFIED 2 0.63 0.00 0.75 137 BAYES_999 2 2.84 13.73 0.75 138 XM_Body_Obfu01 2 0.63 0.00 0.75 139 XM_H_PHPMailer 2 0.95 1.96 0.75 140 XMBSHREFv2 2 0.63 0.00 0.75 141 TR_XM_PSC1 2 0.63 0.00 0.75 142 MIME_BASE64_TEXT 2 0.63 0.00 0.75 143 TM2_M_IP_DIFF 2 0.63 0.00 0.75 144 RELAYCOUNTRY_FR 2 0.95 1.96 0.75 145 XM_H_SpoofStaff4 2 0.63 0.00 0.75 146 XM_SPF_SoftFail 2 1.26 3.92 0.75 147 XM_ZohoDesk1 2 0.63 0.00 0.75 148 T_XMDrugObfuBody_08 2 0.95 1.96 0.75 149 HTML_IMAGE_RATIO_08 2 0.63 0.00 0.75 150 TR_XM_SpoofPhishAttach 2 0.63 0.00 0.75 151 HELO_NODOT 1 0.32 0.00 0.38 152 FORGED_GMAIL_RCVD 1 0.32 0.00 0.38 153 TR_XM_SpammyWords2 1 1.26 5.88 0.38 154 HELO_NO_DOMAIN 1 0.32 0.00 0.38 155 XMLngstWrd_02 1 0.63 1.96 0.38 156 HTTPS_HTTP_MISMATCH 1 0.63 1.96 0.38 157 XMBody_03 1 0.32 0.00 0.38 158 URI_TRY_3LD 1 0.32 0.00 0.38 159 TR_Sbj_FN_Bdy 1 0.95 3.92 0.38 160 XMUrgent 1 0.32 0.00 0.38 161 HTML_FONT_TINY_NORDNS 1 1.26 5.88 0.38 162 CTE_8BIT_MISMATCH 1 0.32 0.00 0.38 163 NICE_REPLY_A 1 0.32 0.00 0.38 164 XMSubMetaSx_01 1 0.32 0.00 0.38 165 FROM_SUSPICIOUS_NTLD 1 0.32 0.00 0.38 166 T_FILL_THIS_FORM_SHORT 1 0.63 1.96 0.38 167 URI_HEX 1 0.32 0.00 0.38 168 XMLngstWrd_01 1 0.63 1.96 0.38 169 TR_XM_SPAMCOP 1 3.15 17.65 0.38 170 TR_MetaPhish_Combo_01 1 0.32 0.00 0.38 171 TR_XM_DKIM_Undo 1 2.84 15.69 0.38 172 T_TooManySym_03 1 0.32 0.00 0.38 173 XMHTMLBadTable_001 1 0.32 0.00 0.38 174 XM_SendGrid 1 0.63 1.96 0.38 175 TR_MetaPhish_Combo_01b 1 0.32 0.00 0.38 176 XMGappySubj_02 1 0.32 0.00 0.38 177 FROM_GOV_DKIM_AU 1 0.32 0.00 0.38 178 XMSubNoVowel 1 0.95 3.92 0.38 179 XMSubject_02 1 0.32 0.00 0.38 180 RELAYCOUNTRY_PK 1 0.32 0.00 0.38 181 T_XMDrugObfuBody_06 1 0.32 0.00 0.38 182 XM_GoogleGroups 1 0.32 0.00 0.38 183 LOW_PRICE 1 0.32 0.00 0.38 184 BOTNET 1 0.95 3.92 0.38 185 XMSolicitRefs_0 1 0.32 0.00 0.38 186 GMD_PDF_SQUARE 1 0.32 0.00 0.38 187 KHOP_HELO_FCRDNS 1 0.95 3.92 0.38 188 RELAYCOUNTRY_FI 1 0.32 0.00 0.38 189 XMSubject_78 1 0.32 0.00 0.38 190 HTML_TAG_BALANCE_BODY 1 0.32 0.00 0.38 191 XM_B_Investor 1 0.32 0.00 0.38 192 THIS_AD 1 0.32 0.00 0.38 193 DATE_IN_PAST_06_12 1 0.32 0.00 0.38 194 TR_XM_DK_SendGrid 1 0.32 0.00 0.38 195 LONG_JUNK_URI3 1 0.63 1.96 0.38 196 RELAYCOUNTRY_IE 1 0.32 0.00 0.38 197 T_DOC_ATTACH_NO_EXT 1 0.32 0.00 0.38 198 TR_XM_Base64_M1 1 0.32 0.00 0.38 199 XMBody_17 1 0.32 0.00 0.38 200 HTML_IMAGE_ONLY_20 1 0.32 0.00 0.38 ----------------------------------------------------------------------