Email: 80 Autolearn: 0 AvgScore: 4.74 AvgScanTime: 3.20 sec Spam: 18 Autolearn: 0 AvgScore: 12.22 AvgScanTime: 3.11 sec Ham: 62 Autolearn: 0 AvgScore: 2.56 AvgScanTime: 3.23 sec Time Spent Running SA: 0.07 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 17 67.50 94.44 59.68 2 RELAYCOUNTRY_US 16 56.25 88.89 46.77 3 XM_B_Unicode 16 60.00 88.89 51.61 4 DKIM_VALID 15 56.25 83.33 48.39 5 DKIM_SIGNED 15 58.75 83.33 51.61 6 XM_DK_Pass 15 58.75 83.33 51.61 7 T_SCC_BODY_TEXT_LINE 14 81.25 77.78 82.26 8 XMListUnsubscribeExists 13 45.00 72.22 37.10 9 DCC_CHECK 12 46.25 66.67 40.32 10 BAYES_50 11 78.75 61.11 83.87 11 FVGT_m_MULTI_ODD 10 32.50 55.56 25.81 12 XM_Multi_Part_URI 10 25.00 55.56 16.13 13 XM_B_SpammyWords 10 30.00 55.56 22.58 14 LOC_TINY_FONT_1 9 30.00 50.00 24.19 15 HTML_FONT_LOW_CONTRAST 9 35.00 50.00 30.65 16 XM_B_Unicode3 9 33.75 50.00 29.03 17 DKIM_VALID_AU 8 27.50 44.44 22.58 18 XMSubLong 8 27.50 44.44 22.58 19 XM_B_SpammyWords2 7 11.25 38.89 3.23 20 RCVD_IN_MSPIKE_H2 7 23.75 38.89 19.35 21 UNPARSEABLE_RELAY 6 23.75 33.33 20.97 22 DCC_CHECK_NEGATIVE 6 53.75 33.33 59.68 23 BAYES_999 4 5.00 22.22 0.00 24 BAYES_99 4 5.00 22.22 0.00 25 XM_B_SpammyTLD 4 5.00 22.22 0.00 26 T_KAM_HTML_FONT_INVALID 4 15.00 22.22 12.90 27 TR_DCC_Bayes_99 3 3.75 16.67 0.00 28 FSL_BULK_SIG 3 25.00 16.67 27.42 29 XMNumbers 3 10.00 16.67 8.06 30 T_TM2_M_HEADER_IN_MSG 3 15.00 16.67 14.52 31 XM_UncommonTLD01 3 6.25 16.67 3.23 32 DKIM_VALID_EF 3 23.75 16.67 25.81 33 XM_DK_Undo_02 3 3.75 16.67 0.00 34 XM_B_SpammyWords3 3 5.00 16.67 1.61 35 BAYES_60 3 8.75 16.67 6.45 36 XM_Body_Dirty_Words 3 5.00 16.67 1.61 37 XM_H_Long_From01 3 5.00 16.67 1.61 38 TR_XM_SpammyWords5 3 5.00 16.67 1.61 39 BOTNET_IPINHOSTNAME 3 6.25 16.67 3.23 40 HTML_IMAGE_RATIO_08 3 3.75 16.67 0.00 41 TR_XM_BayesUnsub 2 6.25 11.11 4.84 42 TR_XM_UnparsRelay 2 5.00 11.11 3.23 43 RCVD_IN_MSPIKE_WL 2 13.75 11.11 14.52 44 UNTRUSTED_Relay 2 6.25 11.11 4.84 45 MIME_HTML_ONLY 2 5.00 11.11 3.23 46 SpammyFromTLD_01 2 2.50 11.11 0.00 47 XM_B_SEO 2 2.50 11.11 0.00 48 XM_B_Unsub 2 6.25 11.11 4.84 49 TM2_M_VERY_LONG_WORD 2 2.50 11.11 0.00 50 RCVD_IN_MSPIKE_H3 2 3.75 11.11 1.61 51 TR_XM_SpammyWords2 2 2.50 11.11 0.00 52 XM_UB50 2 3.75 11.11 1.61 53 TR_Mismatch_TLD_02 2 2.50 11.11 0.00 54 TR_XM_SEO4 2 2.50 11.11 0.00 55 TM2_M_URI_OPT_OUT 2 2.50 11.11 0.00 56 TR_XM_SpammyWords4 2 3.75 11.11 1.61 57 XM_B_Investor 2 3.75 11.11 1.61 58 HTML_IMAGE_RATIO_02 2 3.75 11.11 1.61 59 TR_XM_DKIM_Undo 2 2.50 11.11 0.00 60 RELAYCOUNTRY_META 2 10.00 11.11 9.68 61 XMSexyCombo_05 2 2.50 11.11 0.00 62 TR_XM_DK_Unsub 2 16.25 11.11 17.74 63 LOTS_OF_MONEY 2 6.25 11.11 4.84 64 T_REMOTE_IMAGE 1 2.50 5.56 1.61 65 XM_ShortIntro_01 1 2.50 5.56 1.61 66 TR_XM_PhishingBody 1 1.25 5.56 0.00 67 XM_DK_Undo_01 1 1.25 5.56 0.00 68 LotsOfNums_01 1 5.00 5.56 4.84 69 XM_SPF_SoftFail 1 1.25 5.56 0.00 70 MIME_QP_LONG_LINE 1 6.25 5.56 6.45 71 MONEY_BACK 1 1.25 5.56 0.00 72 XM_Evil_Numbers_Gen 1 5.00 5.56 4.84 73 XM_B_SpammyWords4 1 1.25 5.56 0.00 74 XM_H_Undi_Recip 1 1.25 5.56 0.00 75 SUBJ_ALL_CAPS 1 1.25 5.56 0.00 76 XM_B_Unsub2 1 1.25 5.56 0.00 77 XMBody_17 1 1.25 5.56 0.00 78 NOT_SPAM 1 1.25 5.56 0.00 79 XM_B_Phish_Phrases 1 2.50 5.56 1.61 80 RELAYCOUNTRY_DE 1 2.50 5.56 1.61 81 RCVD_IN_BL_SPAMCOP_NET 1 1.25 5.56 0.00 82 MIME_HEADER_CTYPE_ONLY 1 1.25 5.56 0.00 83 XMStockSpam_06 1 1.25 5.56 0.00 84 TR_Symld_Words 1 2.50 5.56 1.61 85 XMSubMetaSSx_00 1 1.25 5.56 0.00 86 TR_XM_COVIDMETA3 1 1.25 5.56 0.00 87 XM_CamelCaseFrm001 1 1.25 5.56 0.00 88 XMPhishDuo 1 1.25 5.56 0.00 89 TR_XM_Undi_Recip11 1 1.25 5.56 0.00 90 TR_XM_RelayPhish 1 1.25 5.56 0.00 91 XM_Nigeria_01 1 1.25 5.56 0.00 92 XM_E_Blogspot 1 1.25 5.56 0.00 93 TR_XM_SpammyRelay 1 5.00 5.56 4.84 94 TR_XM_SPAMCOP 1 1.25 5.56 0.00 95 MSGID_FROM_MTA_HEADER 1 1.25 5.56 0.00 96 XMPhish14 1 1.25 5.56 0.00 97 XM_B_COVIDMETA 1 1.25 5.56 0.00 98 RELAYCOUNTRY_NL 1 1.25 5.56 0.00 99 XMSubMetaSx_00 1 1.25 5.56 0.00 100 XMPhish08 1 1.25 5.56 0.00 101 XMHTML_After_End 1 1.25 5.56 0.00 102 HTML_IMAGE_RATIO_04 1 1.25 5.56 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 BAYES_50 52 78.75 61.11 83.87 2 T_SCC_BODY_TEXT_LINE 51 81.25 77.78 82.26 3 HTML_MESSAGE 37 67.50 94.44 59.68 4 DCC_CHECK_NEGATIVE 37 53.75 33.33 59.68 5 DKIM_SIGNED 32 58.75 83.33 51.61 6 XM_B_Unicode 32 60.00 88.89 51.61 7 XM_DK_Pass 32 58.75 83.33 51.61 8 DKIM_VALID 30 56.25 83.33 48.39 9 RELAYCOUNTRY_US 29 56.25 88.89 46.77 10 ALL_TRUSTED 26 32.50 0.00 41.94 11 DCC_CHECK 25 46.25 66.67 40.32 12 XMListUnsubscribeExists 23 45.00 72.22 37.10 13 HTML_FONT_LOW_CONTRAST 19 35.00 50.00 30.65 14 XM_B_Unicode3 18 33.75 50.00 29.03 15 FSL_BULK_SIG 17 25.00 16.67 27.42 16 ANY_BOUNCE_MESSAGE 17 21.25 0.00 27.42 17 BOUNCE_MESSAGE 17 21.25 0.00 27.42 18 FVGT_m_MULTI_ODD 16 32.50 55.56 25.81 19 DKIM_VALID_EF 16 23.75 16.67 25.81 20 LOC_TINY_FONT_1 15 30.00 50.00 24.19 21 DKIM_VALID_AU 14 27.50 44.44 22.58 22 XMSubLong 14 27.50 44.44 22.58 23 XM_B_SpammyWords 14 30.00 55.56 22.58 24 SCC_BODY_URI_ONLY 13 16.25 0.00 20.97 25 UNPARSEABLE_RELAY 13 23.75 33.33 20.97 26 RCVD_IN_MSPIKE_H2 12 23.75 38.89 19.35 27 TR_XM_DK_Unsub 11 16.25 11.11 17.74 28 XM_Multi_Part_URI 10 25.00 55.56 16.13 29 T_TM2_M_HEADER_IN_MSG 9 15.00 16.67 14.52 30 RCVD_IN_MSPIKE_WL 9 13.75 11.11 14.52 31 T_KAM_HTML_FONT_INVALID 8 15.00 22.22 12.90 32 TooManyTo_001 6 7.50 0.00 9.68 33 RELAYCOUNTRY_META 6 10.00 11.11 9.68 34 T_TooManySym_01 5 6.25 0.00 8.06 35 XMNumbers 5 10.00 16.67 8.06 36 T_TooManySym_02 5 6.25 0.00 8.06 37 RCVD_IN_MSPIKE_H5 5 6.25 0.00 8.06 38 MIME_QP_LONG_LINE 4 6.25 5.56 6.45 39 XMBrknScrpt_02 4 5.00 0.00 6.45 40 XMCapTrack 4 5.00 0.00 6.45 41 BAYES_60 4 8.75 16.67 6.45 42 RELAYCOUNTRY_AU 4 5.00 0.00 6.45 43 XM_Evil_Numbers_Gen 3 5.00 5.56 4.84 44 LotsOfNums_01 3 5.00 5.56 4.84 45 UNTRUSTED_Relay 3 6.25 11.11 4.84 46 WEIRD_QUOTING 3 3.75 0.00 4.84 47 TR_XM_BayesUnsub 3 6.25 11.11 4.84 48 XM_B_Unsub 3 6.25 11.11 4.84 49 NUMERIC_HTTP_ADDR 3 3.75 0.00 4.84 50 CTYPE_NULL 3 3.75 0.00 4.84 51 RCVD_IN_MSPIKE_H4 3 3.75 0.00 4.84 52 LOTS_OF_MONEY 3 6.25 11.11 4.84 53 IN_ZIMBRA_NJ_WHITELIST 3 3.75 0.00 4.84 54 TR_XM_SpammyRelay 3 5.00 5.56 4.84 55 BAYES_80 2 2.50 0.00 3.23 56 MIME_HTML_ONLY 2 5.00 11.11 3.23 57 MPART_ALT_DIFF_COUNT 2 2.50 0.00 3.23 58 TR_XM_UnparsRelay 2 5.00 11.11 3.23 59 XM_B_SpammyWords2 2 11.25 38.89 3.23 60 XM_UncommonTLD01 2 6.25 16.67 3.23 61 DKIM_INVALID 2 2.50 0.00 3.23 62 MIME_HTML_MOSTLY 2 2.50 0.00 3.23 63 BOTNET_IPINHOSTNAME 2 6.25 16.67 3.23 64 MAILING_LIST_MULTI 2 2.50 0.00 3.23 65 XMGappySubj_01 2 2.50 0.00 3.23 66 URI_NOVOWEL 2 2.50 0.00 3.23 67 TR_XM_DK_Bayes 2 2.50 0.00 3.23 68 BAYES_00 2 2.50 0.00 3.23 69 TVD_SPACE_RATIO 2 2.50 0.00 3.23 70 XM_PDF 1 1.25 0.00 1.61 71 TooManyTo_002 1 1.25 0.00 1.61 72 SHOPIFY_IMG_NOT_RCVD_SFY 1 1.25 0.00 1.61 73 RELAYCOUNTRY_FR 1 1.25 0.00 1.61 74 XMBSHREFv2 1 1.25 0.00 1.61 75 RCVD_IN_SORBS_DUL 1 1.25 0.00 1.61 76 XMStrtUSub 1 1.25 0.00 1.61 77 XMGppyBdWords 1 1.25 0.00 1.61 78 TooManyTo_003 1 1.25 0.00 1.61 79 RCVD_IN_IADB_LISTED 1 1.25 0.00 1.61 80 XM_ShortIntro_01 1 2.50 5.56 1.61 81 T_REMOTE_IMAGE 1 2.50 5.56 1.61 82 XMSlimDrugH 1 1.25 0.00 1.61 83 XM_Body_Obfu01 1 1.25 0.00 1.61 84 TR_XM_NoHeaderRelay 1 1.25 0.00 1.61 85 XM_UB50 1 3.75 11.11 1.61 86 BAYES_20 1 1.25 0.00 1.61 87 XM_B_Phish_Phrases 1 2.50 5.56 1.61 88 XMNoVowels 1 1.25 0.00 1.61 89 RCVD_IN_IADB_DK 1 1.25 0.00 1.61 90 RCVD_IN_IADB_OPTIN 1 1.25 0.00 1.61 91 T_XMDrugObfuBody_08 1 1.25 0.00 1.61 92 DEAR_FRIEND 1 1.25 0.00 1.61 93 HELO_NODOT 1 1.25 0.00 1.61 94 RELAYCOUNTRY_DE 1 2.50 5.56 1.61 95 XM_S_SpammyWords 1 1.25 0.00 1.61 96 RCVD_IN_MSPIKE_H3 1 3.75 11.11 1.61 97 XM_UB80 1 1.25 0.00 1.61 98 HELO_NO_DOMAIN 1 1.25 0.00 1.61 99 T_TooManySym_03 1 1.25 0.00 1.61 100 INVALID_MSGID 1 1.25 0.00 1.61 101 XM_Body_Dirty_Words 1 5.00 16.67 1.61 102 SpammyFromTLD_02 1 1.25 0.00 1.61 103 TR_LOTS_OF_MONEY3 1 1.25 0.00 1.61 104 BAYES_95 1 1.25 0.00 1.61 105 TR_XM_DK_Bayes1 1 1.25 0.00 1.61 106 XM_B_Investor 1 3.75 11.11 1.61 107 TR_XM_SpammyWords4 1 3.75 11.11 1.61 108 HTML_IMAGE_RATIO_02 1 3.75 11.11 1.61 109 BASE64_LENGTH_79_INF 1 1.25 0.00 1.61 110 TR_XM_Spammywords 1 1.25 0.00 1.61 111 XM_B_SpammyWords3 1 5.00 16.67 1.61 112 XM_URI_RBL 1 1.25 0.00 1.61 113 RCVD_IN_IADB_SPF 1 1.25 0.00 1.61 114 XMhairloss01 1 1.25 0.00 1.61 115 XM_DIRTYINTL 1 1.25 0.00 1.61 116 TooManyTo_005 1 1.25 0.00 1.61 117 RCVD_IN_IADB_VOUCHED 1 1.25 0.00 1.61 118 TR_Symld_Words 1 2.50 5.56 1.61 119 XM_S_SubURI 1 1.25 0.00 1.61 120 TR_XM_SpammyWords5 1 5.00 16.67 1.61 121 RCVD_IN_IADB_SENDERID 1 1.25 0.00 1.61 122 CTE_8BIT_MISMATCH 1 1.25 0.00 1.61 123 TooManyTo_004 1 1.25 0.00 1.61 124 TO_MALFORMED 1 1.25 0.00 1.61 125 HTML_IMAGE_ONLY_20 1 1.25 0.00 1.61 126 T_US_DOLLARS_3 1 1.25 0.00 1.61 127 XM_H_Long_From01 1 5.00 16.67 1.61 128 XM_UB60 1 1.25 0.00 1.61 129 TR_XM_DK_Bayes2 1 1.25 0.00 1.61 130 HTML_FONT_TINY_NORDNS 1 1.25 0.00 1.61 131 THIS_AD 1 1.25 0.00 1.61 ----------------------------------------------------------------------