Email: 40 Autolearn: 0 AvgScore: 1.93 AvgScanTime: 6.90 sec Spam: 8 Autolearn: 0 AvgScore: 11.38 AvgScanTime: 7.30 sec Ham: 32 Autolearn: 0 AvgScore: -0.44 AvgScanTime: 6.80 sec Time Spent Running SA: 0.08 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 8 75.00 100.00 68.75 2 DCC_CHECK_NEGATIVE 6 92.50 75.00 96.88 3 HTML_MESSAGE 5 65.00 62.50 65.62 4 TR_XM_BayesUnsub 4 12.50 50.00 3.12 5 XM_B_Unsub 4 12.50 50.00 3.12 6 DKIM_VALID 4 50.00 50.00 50.00 7 DKIM_SIGNED 4 52.50 50.00 53.12 8 BOTNET 4 10.00 50.00 0.00 9 XM_B_SpammyWords 4 25.00 50.00 18.75 10 BAYES_50 4 60.00 50.00 62.50 11 XM_DK_Pass 4 52.50 50.00 53.12 12 XMSubPhish11 3 12.50 37.50 6.25 13 UNPARSEABLE_RELAY 3 10.00 37.50 3.12 14 TR_XM_SB_Phish 3 12.50 37.50 6.25 15 XM_B_Unicode 3 37.50 37.50 37.50 16 TR_XM_UnparsRelay 3 7.50 37.50 0.00 17 MIME_HTML_MOSTLY 3 12.50 37.50 6.25 18 DCC_CHECK 2 7.50 25.00 3.12 19 BAYES_80 2 7.50 25.00 3.12 20 XM_SPF_SoftFail 2 7.50 25.00 3.12 21 RCVD_IN_MSPIKE_H2 2 15.00 25.00 12.50 22 XM_ProductURIs 2 5.00 25.00 0.00 23 XM_DK_Undo_02 2 5.00 25.00 0.00 24 DKIM_VALID_AU 2 40.00 25.00 43.75 25 MPART_ALT_DIFF 2 7.50 25.00 3.12 26 XMStrtUSub 2 5.00 25.00 0.00 27 BOTNET_IPINHOSTNAME 2 12.50 25.00 9.38 28 LOC_TINY_FONT_1 2 10.00 25.00 6.25 29 FVGT_m_MULTI_ODD 2 20.00 25.00 18.75 30 XM_Body_Dirty_Words 2 17.50 25.00 15.62 31 RDNS_DYNAMIC 1 2.50 12.50 0.00 32 PDS_RDNS_DYNAMIC_FP 1 2.50 12.50 0.00 33 TooManyTo_003 1 2.50 12.50 0.00 34 T_TooManySym_04 1 5.00 12.50 3.12 35 BAYES_99 1 2.50 12.50 0.00 36 TR_XM_DK_SendGrid 1 2.50 12.50 0.00 37 OBFU_TEXT_ATTACH 1 2.50 12.50 0.00 38 TooManyTo_001 1 2.50 12.50 0.00 39 T_TooManySym_01 1 15.00 12.50 15.62 40 T_KAM_HTML_FONT_INVALID 1 10.00 12.50 9.38 41 RCVD_IN_MSPIKE_H4 1 7.50 12.50 6.25 42 TR_XM_PHPForged 1 2.50 12.50 0.00 43 XMNumbers 1 5.00 12.50 3.12 44 TR_XM_PHPDW 1 2.50 12.50 0.00 45 XMSubject_78 1 2.50 12.50 0.00 46 INVALID_MSGID 1 7.50 12.50 6.25 47 XM_Multi_Part_URI 1 12.50 12.50 12.50 48 XM_RXBody 1 2.50 12.50 0.00 49 FSL_BULK_SIG 1 2.50 12.50 0.00 50 XM_B_Unicode3 1 17.50 12.50 18.75 51 XM_H_PHPOS 1 2.50 12.50 0.00 52 HTML_IMAGE_RATIO_02 1 2.50 12.50 0.00 53 KHOP_HELO_FCRDNS 1 2.50 12.50 0.00 54 TooManyTo_004 1 2.50 12.50 0.00 55 ANY_BOUNCE_MESSAGE 1 7.50 12.50 6.25 56 DKIM_VALID_EF 1 30.00 12.50 34.38 57 TR_XM_FormFill2 1 2.50 12.50 0.00 58 T_TooManySym_02 1 15.00 12.50 15.62 59 BAYES_999 1 2.50 12.50 0.00 60 T_TooManySym_03 1 5.00 12.50 3.12 61 BAYES_95 1 5.00 12.50 3.12 62 TooManyTo_002 1 2.50 12.50 0.00 63 XM_B_SpammyWords2 1 5.00 12.50 3.12 64 URI_HEX 1 2.50 12.50 0.00 65 XM_SendGrid 1 2.50 12.50 0.00 66 HTML_FONT_LOW_CONTRAST 1 15.00 12.50 15.62 67 TO_NO_BRKTS_DYNIP 1 2.50 12.50 0.00 68 TM2_M_VERY_LONG_WORD 1 2.50 12.50 0.00 69 RCVD_IN_MSPIKE_WL 1 30.00 12.50 34.38 70 BOUNCE_MESSAGE 1 7.50 12.50 6.25 71 XMSubLong 1 22.50 12.50 25.00 72 TR_XM_DKIM_Undo 1 2.50 12.50 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 31 92.50 75.00 96.88 2 RELAYCOUNTRY_US 22 75.00 100.00 68.75 3 HTML_MESSAGE 21 65.00 62.50 65.62 4 BAYES_50 20 60.00 50.00 62.50 5 XM_DK_Pass 17 52.50 50.00 53.12 6 DKIM_SIGNED 17 52.50 50.00 53.12 7 DKIM_VALID 16 50.00 50.00 50.00 8 DKIM_VALID_AU 14 40.00 25.00 43.75 9 XM_B_Unicode 12 37.50 37.50 37.50 10 RCVD_IN_MSPIKE_WL 11 30.00 12.50 34.38 11 DKIM_VALID_EF 11 30.00 12.50 34.38 12 ALL_TRUSTED 10 25.00 0.00 31.25 13 XMListUnsubscribeExists 9 22.50 0.00 28.12 14 RCVD_IN_MSPIKE_H3 9 22.50 0.00 28.12 15 XMSubLong 8 22.50 12.50 25.00 16 T_TM2_M_HEADER_IN_MSG 8 20.00 0.00 25.00 17 FVGT_m_MULTI_ODD 6 20.00 25.00 18.75 18 XM_B_Unicode3 6 17.50 12.50 18.75 19 LotsOfNums_01 6 15.00 0.00 18.75 20 XM_B_SpammyWords 6 25.00 50.00 18.75 21 BAYES_60 6 15.00 0.00 18.75 22 HTML_IMAGE_RATIO_04 5 12.50 0.00 15.62 23 T_TooManySym_02 5 15.00 12.50 15.62 24 HTML_FONT_LOW_CONTRAST 5 15.00 12.50 15.62 25 TR_XM_DK_Unsub 5 12.50 0.00 15.62 26 XM_Body_Dirty_Words 5 17.50 25.00 15.62 27 T_TooManySym_01 5 15.00 12.50 15.62 28 XM_Multi_Part_URI 4 12.50 12.50 12.50 29 XM_UncommonTLD01 4 10.00 0.00 12.50 30 XM_PDF 4 10.00 0.00 12.50 31 XM_DKIMWhitelistDomains 4 10.00 0.00 12.50 32 RCVD_IN_MSPIKE_H2 4 15.00 25.00 12.50 33 MIME_QP_LONG_LINE 3 7.50 0.00 9.38 34 BOTNET_IPINHOSTNAME 3 12.50 25.00 9.38 35 T_KAM_HTML_FONT_INVALID 3 10.00 12.50 9.38 36 LOC_TINY_FONT_1 2 10.00 25.00 6.25 37 TR_XM_SB_Phish 2 12.50 37.50 6.25 38 INVALID_MSGID 2 7.50 12.50 6.25 39 TVD_SPACE_RATIO 2 5.00 0.00 6.25 40 RCVD_IN_IADB_SENDERID 2 5.00 0.00 6.25 41 RCVD_IN_IADB_LISTED 2 5.00 0.00 6.25 42 BOUNCE_MESSAGE 2 7.50 12.50 6.25 43 XMGappySubj_01 2 5.00 0.00 6.25 44 RCVD_IN_MSPIKE_H4 2 7.50 12.50 6.25 45 RCVD_IN_IADB_SPF 2 5.00 0.00 6.25 46 MSGID_NOFQDN1 2 5.00 0.00 6.25 47 XMSubMetaSx_00 2 5.00 0.00 6.25 48 BAYES_40 2 5.00 0.00 6.25 49 ANY_BOUNCE_MESSAGE 2 7.50 12.50 6.25 50 RCVD_IN_IADB_DK 2 5.00 0.00 6.25 51 MIME_HTML_MOSTLY 2 12.50 37.50 6.25 52 TR_XM_SpoofPhishAttach 2 5.00 0.00 6.25 53 XM_B_SpammyTLD 2 5.00 0.00 6.25 54 XMSubPhish11 2 12.50 37.50 6.25 55 XMSubMetaSxObfu_03 2 5.00 0.00 6.25 56 HTML_MIME_NO_HTML_TAG 2 5.00 0.00 6.25 57 MIME_HTML_ONLY 2 5.00 0.00 6.25 58 TO_MALFORMED 2 5.00 0.00 6.25 59 XM_B_DynamicLink 1 2.50 0.00 3.12 60 MAILING_LIST_MULTI 1 2.50 0.00 3.12 61 XM_H_Undi_Recip 1 2.50 0.00 3.12 62 HTML_IMAGE_ONLY_20 1 2.50 0.00 3.12 63 XM_B_Phish66 1 2.50 0.00 3.12 64 T_TooManySym_03 1 5.00 12.50 3.12 65 XM_DK_Undo_01 1 2.50 0.00 3.12 66 IN_ZIMBRA_NJ_WHITELIST 1 2.50 0.00 3.12 67 XMHTML_After_End 1 2.50 0.00 3.12 68 HTML_IMAGE_RATIO_08 1 2.50 0.00 3.12 69 XM_B_SpammyWords2 1 5.00 12.50 3.12 70 T_TooManySym_05 1 2.50 0.00 3.12 71 SpammyFromTLD_02 1 2.50 0.00 3.12 72 T_TooManySym_04 1 5.00 12.50 3.12 73 TR_XM_BayesUnsub 1 12.50 50.00 3.12 74 XMSubNoVowel 1 2.50 0.00 3.12 75 DKIM_INVALID 1 2.50 0.00 3.12 76 XM_CamelCaseFrm001 1 2.50 0.00 3.12 77 TO_NO_BRKTS_HTML_ONLY 1 2.50 0.00 3.12 78 XM_B_Unsub2 1 2.50 0.00 3.12 79 BAYES_00 1 2.50 0.00 3.12 80 XM_H_PHPMailer 1 2.50 0.00 3.12 81 TR_MetaPhish_Combo_01 1 2.50 0.00 3.12 82 BAYES_20 1 2.50 0.00 3.12 83 TR_Mismatch_TLD_02 1 2.50 0.00 3.12 84 HTML_IMAGE_ONLY_08 1 2.50 0.00 3.12 85 BAYES_95 1 5.00 12.50 3.12 86 HTML_IMAGE_ONLY_32 1 2.50 0.00 3.12 87 SpammyFromTLD_01 1 2.50 0.00 3.12 88 XM_B_Unsub 1 12.50 50.00 3.12 89 XM_Evil_Numbers_Gen 1 2.50 0.00 3.12 90 BAYES_80 1 7.50 25.00 3.12 91 TR_XM_PhishingBody 1 2.50 0.00 3.12 92 DCC_CHECK 1 7.50 25.00 3.12 93 XMGappySubj_02 1 2.50 0.00 3.12 94 XM_SPF_SoftFail 1 7.50 25.00 3.12 95 BODY_URI_ONLY 1 2.50 0.00 3.12 96 UNPARSEABLE_RELAY 1 10.00 37.50 3.12 97 XM_H_Trusted_IP 1 2.50 0.00 3.12 98 MPART_ALT_DIFF 1 7.50 25.00 3.12 99 XMNumbers 1 5.00 12.50 3.12 ----------------------------------------------------------------------