Email: 51 Autolearn: 0 AvgScore: 1.22 AvgScanTime: 1.32 sec Spam: 5 Autolearn: 0 AvgScore: 18.00 AvgScanTime: 0.58 sec Ham: 46 Autolearn: 0 AvgScore: -0.61 AvgScanTime: 1.40 sec Time Spent Running SA: 0.02 hours Time Spent Processing Spam: 0.00 hours Time Spent Processing Ham: 0.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 5 100.00 100.00 100.00 2 RELAYCOUNTRY_US 4 70.59 80.00 69.57 3 XM_UncommonTLD01 4 23.53 80.00 17.39 4 HTML_MESSAGE 3 76.47 60.00 78.26 5 BAYES_50 3 70.59 60.00 71.74 6 BOTNET_NORDNS 3 5.88 60.00 0.00 7 BOTNET 3 5.88 60.00 0.00 8 HTML_FONT_LOW_CONTRAST 2 25.49 40.00 23.91 9 DKIM_VALID 2 64.71 40.00 67.39 10 NORDNS_LOW_CONTRAST 2 3.92 40.00 0.00 11 XMBody_78 2 3.92 40.00 0.00 12 DKIM_VALID_AU 2 50.98 40.00 52.17 13 DKIM_SIGNED 2 70.59 40.00 73.91 14 DATE_IN_PAST_06_12 2 3.92 40.00 0.00 15 XM_DK_Pass 2 66.67 40.00 69.57 16 RCVD_IN_PSBL 2 5.88 40.00 2.17 17 FSL_HELO_NON_FQDN_1 1 1.96 20.00 0.00 18 XM_B_SpammyWords2 1 19.61 20.00 19.57 19 TM2_M_IP_DIFF 1 1.96 20.00 0.00 20 XM_HighProb1 1 1.96 20.00 0.00 21 XM_B_SpammyWords 1 35.29 20.00 36.96 22 XMCmmnCold 1 1.96 20.00 0.00 23 XM_URI_RBL 1 1.96 20.00 0.00 24 TR_XM_PHPDW 1 1.96 20.00 0.00 25 BAYES_95 1 1.96 20.00 0.00 26 MAILING_LIST_MULTI 1 5.88 20.00 4.35 27 BAYES_80 1 3.92 20.00 2.17 28 RELAYCOUNTRY_META 1 15.69 20.00 15.22 29 XM_DK_Undo_02 1 3.92 20.00 2.17 30 TR_XM_PHPForged 1 1.96 20.00 0.00 31 XMhairloss01 1 1.96 20.00 0.00 32 TR_XM_SPAMCOP 1 1.96 20.00 0.00 33 TR_XM_FormFill2 1 1.96 20.00 0.00 34 RCVD_IN_BL_SPAMCOP_NET 1 1.96 20.00 0.00 35 XM_B_Unicode 1 49.02 20.00 52.17 36 RELAYCOUNTRY_BR 1 1.96 20.00 0.00 37 UNTRUSTED_Relay 1 1.96 20.00 0.00 38 XMSubMetaSx_01 1 1.96 20.00 0.00 39 HELO_NODOT 1 1.96 20.00 0.00 40 TooManyTo_001 1 13.73 20.00 13.04 41 DKIM_VALID_EF 1 15.69 20.00 15.22 42 XM_Body_Dirty_Words 1 15.69 20.00 15.22 43 XMSubLong 1 31.37 20.00 32.61 44 XMSubMetaSx_00 1 5.88 20.00 4.35 45 XM_UB95 1 1.96 20.00 0.00 46 DATE_IN_FUTURE_06_12 1 1.96 20.00 0.00 47 URIBL_DBL_SPAM 1 1.96 20.00 0.00 48 RELAYCOUNTRY_JP 1 1.96 20.00 0.00 49 SpammyFromTLD_01 1 5.88 20.00 4.35 50 XM_H_PHPOS_M 1 1.96 20.00 0.00 51 XM_H_PHPOS 1 1.96 20.00 0.00 52 XM_H_PHPMailer 1 1.96 20.00 0.00 53 T_TM2_M_HEADER_IN_MSG 1 15.69 20.00 15.22 54 HELO_NO_DOMAIN 1 1.96 20.00 0.00 55 XMListUnsubscribeExists 1 47.06 20.00 50.00 56 RCVD_IN_MSPIKE_H2 1 29.41 20.00 30.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 46 100.00 100.00 100.00 2 HTML_MESSAGE 36 76.47 60.00 78.26 3 DKIM_SIGNED 34 70.59 40.00 73.91 4 BAYES_50 33 70.59 60.00 71.74 5 RELAYCOUNTRY_US 32 70.59 80.00 69.57 6 XM_DK_Pass 32 66.67 40.00 69.57 7 DKIM_VALID 31 64.71 40.00 67.39 8 XM_B_Unicode 24 49.02 20.00 52.17 9 DKIM_VALID_AU 24 50.98 40.00 52.17 10 XMListUnsubscribeExists 23 47.06 20.00 50.00 11 XM_B_SpammyWords 17 35.29 20.00 36.96 12 XM_B_Unicode3 16 31.37 0.00 34.78 13 XMSubLong 15 31.37 20.00 32.61 14 RCVD_IN_MSPIKE_H2 14 29.41 20.00 30.43 15 FVGT_m_MULTI_ODD 13 25.49 0.00 28.26 16 HTML_FONT_LOW_CONTRAST 11 25.49 40.00 23.91 17 RCVD_IN_MSPIKE_WL 11 21.57 0.00 23.91 18 ALL_TRUSTED 10 19.61 0.00 21.74 19 XM_B_SpammyWords2 9 19.61 20.00 19.57 20 MIME_HTML_ONLY 9 17.65 0.00 19.57 21 XM_Multi_Part_URI 8 15.69 0.00 17.39 22 T_KAM_HTML_FONT_INVALID 8 15.69 0.00 17.39 23 RCVD_IN_MSPIKE_H3 8 15.69 0.00 17.39 24 XM_UncommonTLD01 8 23.53 80.00 17.39 25 LOC_TINY_FONT_1 8 15.69 0.00 17.39 26 XM_Body_Dirty_Words 7 15.69 20.00 15.22 27 DKIM_VALID_EF 7 15.69 20.00 15.22 28 T_TM2_M_HEADER_IN_MSG 7 15.69 20.00 15.22 29 RELAYCOUNTRY_META 7 15.69 20.00 15.22 30 MPART_ALT_DIFF 7 13.73 0.00 15.22 31 T_TooManySym_02 6 11.76 0.00 13.04 32 MIME_QP_LONG_LINE 6 11.76 0.00 13.04 33 XM_DKIMWhitelistDomains 6 11.76 0.00 13.04 34 LotsOfNums_01 6 11.76 0.00 13.04 35 T_TooManySym_01 6 11.76 0.00 13.04 36 BAYES_60 6 11.76 0.00 13.04 37 USER_IN_DEF_DKIM_WL 6 11.76 0.00 13.04 38 TooManyTo_001 6 13.73 20.00 13.04 39 MIME_HTML_ONLY_MULTI 5 9.80 0.00 10.87 40 XMNumbers 5 9.80 0.00 10.87 41 BOUNCE_MESSAGE 4 7.84 0.00 8.70 42 TM2_M_VERY_LONG_WORD 4 7.84 0.00 8.70 43 HTML_MIME_NO_HTML_TAG 4 7.84 0.00 8.70 44 UNPARSEABLE_RELAY 4 7.84 0.00 8.70 45 XMStrtUSub 4 7.84 0.00 8.70 46 ANY_BOUNCE_MESSAGE 4 7.84 0.00 8.70 47 XMLngstWrd_00 4 7.84 0.00 8.70 48 XM_GoogleGroups 4 7.84 0.00 8.70 49 UPPERCASE_75_100 3 5.88 0.00 6.52 50 TR_XM_SpammyRelay 3 5.88 0.00 6.52 51 MIME_HTML_MOSTLY 3 5.88 0.00 6.52 52 XMLngstWrd_03 3 5.88 0.00 6.52 53 HTML_TITLE_SUBJ_DIFF 3 5.88 0.00 6.52 54 XM_B_Unsub 3 5.88 0.00 6.52 55 XMLngstWrd_02 3 5.88 0.00 6.52 56 XMLngstWrd_01 3 5.88 0.00 6.52 57 DKIM_INVALID 3 5.88 0.00 6.52 58 RCVD_IN_MSPIKE_H4 3 5.88 0.00 6.52 59 XMLngstWrd_04 3 5.88 0.00 6.52 60 HTML_IMAGE_RATIO_06 2 3.92 0.00 4.35 61 BAYES_40 2 3.92 0.00 4.35 62 TR_XM_PSC1 2 3.92 0.00 4.35 63 IN_ZIMBRA_NJ_WHITELIST 2 3.92 0.00 4.35 64 RCVD_IN_MSPIKE_BL 2 3.92 0.00 4.35 65 BAYES_00 2 3.92 0.00 4.35 66 MAILING_LIST_MULTI 2 5.88 20.00 4.35 67 T_REMOTE_IMAGE 2 3.92 0.00 4.35 68 TR_XM_MSPIKECOMBO 2 3.92 0.00 4.35 69 XMSubMetaSx_00 2 5.88 20.00 4.35 70 XM_H_SpoofStaff4 2 3.92 0.00 4.35 71 SpammyFromTLD_01 2 5.88 20.00 4.35 72 RELAYCOUNTRY_GB 2 3.92 0.00 4.35 73 XM_B_SpammyWords3 2 3.92 0.00 4.35 74 XM_ZIP 2 3.92 0.00 4.35 75 MSGID_NOFQDN1 2 3.92 0.00 4.35 76 TR_XM_SpoofStaff 2 3.92 0.00 4.35 77 TR_XM_UnparsRelay 2 3.92 0.00 4.35 78 XMSpoofStaff2 2 3.92 0.00 4.35 79 TR_XM_SpoofPhishAttach 2 3.92 0.00 4.35 80 TVD_SPACE_RATIO 2 3.92 0.00 4.35 81 T_XMDrugObfuBody_14 2 3.92 0.00 4.35 82 TO_MALFORMED 2 3.92 0.00 4.35 83 FVGT_m_MULTI_ODD_EMAIL 2 3.92 0.00 4.35 84 TR_XM_BayesUnsub 2 3.92 0.00 4.35 85 XM_SendGrid 2 3.92 0.00 4.35 86 TR_Symld_Words 2 3.92 0.00 4.35 87 XM_ZohoDesk1 2 3.92 0.00 4.35 88 INVALID_MSGID 2 3.92 0.00 4.35 89 XM_Evil_Numbers_Gen 2 3.92 0.00 4.35 90 T_TooManySym_03 2 3.92 0.00 4.35 91 XM_B_SpammyTLD 2 3.92 0.00 4.35 92 TR_XM_PhishingBody 1 1.96 0.00 2.17 93 XM_UCStrings02 1 1.96 0.00 2.17 94 TR_XM_DK_Bayes 1 1.96 0.00 2.17 95 HTML_IMAGE_RATIO_02 1 1.96 0.00 2.17 96 TR_XM_SB_Phish 1 1.96 0.00 2.17 97 TR_XM_DKIM_Undo 1 1.96 0.00 2.17 98 URI_TRY_3LD 1 1.96 0.00 2.17 99 TooManyTo_002 1 1.96 0.00 2.17 100 BAYES_05 1 1.96 0.00 2.17 101 XMDiploma_00 1 1.96 0.00 2.17 102 XMGppyBdWords 1 1.96 0.00 2.17 103 IN_HORDE_ADDRESS_BOOK 1 1.96 0.00 2.17 104 BAYES_999 1 1.96 0.00 2.17 105 TooManyTo_003 1 1.96 0.00 2.17 106 URI_HEX 1 1.96 0.00 2.17 107 XMSubMetaSxObfu_02 1 1.96 0.00 2.17 108 XM_B_Phish_Phrases 1 1.96 0.00 2.17 109 SpammyFromTLD_02 1 1.96 0.00 2.17 110 XM_DK_Undo_01 1 1.96 0.00 2.17 111 TR_Mismatch_TLD_01 1 1.96 0.00 2.17 112 XMSubPhish11 1 1.96 0.00 2.17 113 XMCapTrack 1 1.96 0.00 2.17 114 XMGappySubj_01 1 1.96 0.00 2.17 115 FROM_GOV_SPOOF 1 1.96 0.00 2.17 116 RCVD_IN_PSBL 1 5.88 40.00 2.17 117 RCVD_IN_IADB_OPTIN 1 1.96 0.00 2.17 118 LONG_JUNK_URI 1 1.96 0.00 2.17 119 RCVD_IN_VALIDITY_RPBL 1 1.96 0.00 2.17 120 RELAYCOUNTRY_AU 1 1.96 0.00 2.17 121 T_XMDrugObfuBody_08 1 1.96 0.00 2.17 122 LOTS_OF_MONEY 1 1.96 0.00 2.17 123 TR_XM_DK_Bayes1 1 1.96 0.00 2.17 124 RELAYCOUNTRY_IE 1 1.96 0.00 2.17 125 TR_XM_SpammyWords4 1 1.96 0.00 2.17 126 RCVD_IN_IADB_DK 1 1.96 0.00 2.17 127 XM_DIRTYINTL 1 1.96 0.00 2.17 128 RELAYCOUNTRY_BG 1 1.96 0.00 2.17 129 RCVD_IN_MSPIKE_L5 1 1.96 0.00 2.17 130 RCVD_IN_IADB_LISTED 1 1.96 0.00 2.17 131 HTML_IMAGE_ONLY_20 1 1.96 0.00 2.17 132 TVD_RCVD_IP 1 1.96 0.00 2.17 133 TR_XM_DK_SendGrid 1 1.96 0.00 2.17 134 XMSubMetaSxObfu_03 1 1.96 0.00 2.17 135 RELAYCOUNTRY_TR 1 1.96 0.00 2.17 136 XM_DK_Undo_02 1 3.92 20.00 2.17 137 TR_XM_MaxWHORU 1 1.96 0.00 2.17 138 RCVD_IN_MSPIKE_L3 1 1.96 0.00 2.17 139 BAYES_80 1 3.92 20.00 2.17 140 BOTNET_IPINHOSTNAME 1 1.96 0.00 2.17 141 TR_XM_DK_Bayes2 1 1.96 0.00 2.17 142 TooManyTo_004 1 1.96 0.00 2.17 143 HTML_IMAGE_RATIO_08 1 1.96 0.00 2.17 144 XMBSHREFv2 1 1.96 0.00 2.17 145 RCVD_IN_IADB_SPF 1 1.96 0.00 2.17 146 XM_H_Trusted_IP 1 1.96 0.00 2.17 147 NO_DNS_FOR_FROM 1 1.96 0.00 2.17 148 XM_CamelCaseFrm001 1 1.96 0.00 2.17 149 TR_XM_SpammyWords5 1 1.96 0.00 2.17 150 TM2_M_URI_OPT_OUT 1 1.96 0.00 2.17 151 XM_B_Phish66 1 1.96 0.00 2.17 152 TR_XM_SpammyWords3 1 1.96 0.00 2.17 153 HTML_IMAGE_RATIO_04 1 1.96 0.00 2.17 154 RCVD_IN_IADB_SENDERID 1 1.96 0.00 2.17 155 XM_H_Long_From01 1 1.96 0.00 2.17 156 RELAYCOUNTRY_CA 1 1.96 0.00 2.17 157 RCVD_IN_IADB_VOUCHED 1 1.96 0.00 2.17 158 XMSubMetaI_00 1 1.96 0.00 2.17 159 BAYES_99 1 1.96 0.00 2.17 ----------------------------------------------------------------------