I received a false positive that hits DOMAIN_RATIO. It is an "image only" type message from AOL. The only domain in the body is in the Content-ID in the img src. Has anyone else seen similar FPs? The message is attached, with irrelevant personal info removed. Stuart Johnston