Email: 40 Autolearn: 0 AvgScore: 10.20 AvgScanTime: 5.23 sec Spam: 14 Autolearn: 0 AvgScore: 25.50 AvgScanTime: 5.09 sec Ham: 26 Autolearn: 0 AvgScore: 1.96 AvgScanTime: 5.30 sec Time Spent Running SA: 0.06 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.04 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 13 82.50 92.86 76.92 2 RELAYCOUNTRY_US 12 75.00 85.71 69.23 3 XM_B_Unicode 11 70.00 78.57 65.38 4 DKIM_SIGNED 10 67.50 71.43 65.38 5 DKIM_VALID 10 67.50 71.43 65.38 6 DCC_CHECK_NEGATIVE 10 77.50 71.43 80.77 7 XM_DK_Pass 10 67.50 71.43 65.38 8 FVGT_m_MULTI_ODD 8 40.00 57.14 30.77 9 DKIM_VALID_AU 8 50.00 57.14 46.15 10 XMListUnsubscribeExists 7 45.00 50.00 42.31 11 RCVD_IN_MSPIKE_H2 7 35.00 50.00 26.92 12 HTML_FONT_LOW_CONTRAST 6 37.50 42.86 34.62 13 LOC_TINY_FONT_1 6 30.00 42.86 23.08 14 XM_DK_Undo_02 5 17.50 35.71 7.69 15 XM_B_Unicode3 5 27.50 35.71 23.08 16 RELAYCOUNTRY_META 5 20.00 35.71 11.54 17 BAYES_50 5 45.00 35.71 50.00 18 XM_Multi_Part_URI 4 17.50 28.57 11.54 19 DCC_CHECK 4 22.50 28.57 19.23 20 DKIM_VALID_EF 4 37.50 28.57 42.31 21 XM_B_SpammyWords 4 35.00 28.57 38.46 22 BOTNET 4 12.50 28.57 3.85 23 BAYES_80 3 12.50 21.43 7.69 24 BAYES_99 3 10.00 21.43 3.85 25 XM_B_SpammyWords2 3 17.50 21.43 15.38 26 XM_B_Unsub 3 15.00 21.43 11.54 27 MIME_HTML_ONLY 3 15.00 21.43 11.54 28 TM2_M_VERY_LONG_WORD 3 10.00 21.43 3.85 29 UNPARSEABLE_RELAY 3 20.00 21.43 19.23 30 BOTNET_IPINHOSTNAME 3 17.50 21.43 15.38 31 RCVD_IN_MSPIKE_H3 3 22.50 21.43 23.08 32 BAYES_999 3 10.00 21.43 3.85 33 RCVD_IN_MSPIKE_WL 3 27.50 21.43 30.77 34 T_TM2_M_HEADER_IN_MSG 3 32.50 21.43 38.46 35 TR_XM_BayesUnsub 3 15.00 21.43 11.54 36 RELAYCOUNTRY_RU 2 5.00 14.29 0.00 37 XM_SPF_SoftFail 2 5.00 14.29 0.00 38 TR_XM_SpammyRelay 2 7.50 14.29 3.85 39 TR_Phish_OUT 2 5.00 14.29 0.00 40 TR_XM_DKIM_Undo 2 7.50 14.29 3.85 41 TR_XM_UnparsRelay 2 12.50 14.29 11.54 42 T_XMDrugObfuBody_08 2 5.00 14.29 0.00 43 URI_WP_DIRINDEX 2 5.00 14.29 0.00 44 UPPERCASE_50_75 2 5.00 14.29 0.00 45 HTML_MIME_NO_HTML_TAG 2 5.00 14.29 0.00 46 MPART_ALT_DIFF_COUNT 2 5.00 14.29 0.00 47 T_KAM_HTML_FONT_INVALID 2 17.50 14.29 19.23 48 XMSubLong 2 32.50 14.29 42.31 49 LotsOfNums_01 2 7.50 14.29 3.85 50 XMLngstWrd_03 1 2.50 7.14 0.00 51 SpammyFromTLD_02 1 5.00 7.14 3.85 52 T_XMDrugObfuBody_14 1 2.50 7.14 0.00 53 TR_DCC_Bayes_99 1 2.50 7.14 0.00 54 BAYES_95 1 7.50 7.14 7.69 55 RCVD_IN_VALIDITY_SAFE 1 2.50 7.14 0.00 56 XM_SendGrid 1 12.50 7.14 15.38 57 TR_XM_FormFill2 1 2.50 7.14 0.00 58 HTML_IMAGE_RATIO_04 1 2.50 7.14 0.00 59 BAYES_60 1 12.50 7.14 15.38 60 SUBJ_BUY 1 2.50 7.14 0.00 61 XM_B_SpammyTLD 1 7.50 7.14 7.69 62 XM_H_PHPOS 1 2.50 7.14 0.00 63 BODY_URI_ONLY 1 2.50 7.14 0.00 64 XMLngstWrd_00 1 2.50 7.14 0.00 65 TR_XM_PHPDW 1 2.50 7.14 0.00 66 TR_XM_SPAMCOP 1 2.50 7.14 0.00 67 XM_B_SpammyWords3 1 5.00 7.14 3.85 68 MIME_HTML_MOSTLY 1 2.50 7.14 0.00 69 XMStockSpam_06 1 2.50 7.14 0.00 70 XMLngstWrd_02 1 2.50 7.14 0.00 71 TR_BOTNET_NEGATE 1 2.50 7.14 0.00 72 RELAYCOUNTRY_CL 1 2.50 7.14 0.00 73 URI_HEX 1 2.50 7.14 0.00 74 XMNoUri_00 1 2.50 7.14 0.00 75 LOTS_OF_MONEY 1 5.00 7.14 3.85 76 FSL_BULK_SIG 1 5.00 7.14 3.85 77 XM_TLDProd2 1 2.50 7.14 0.00 78 RCVD_IN_VALIDITY_CERTIFIED 1 2.50 7.14 0.00 79 XMHTMLBadTable_001 1 2.50 7.14 0.00 80 HTML_TITLE_SUBJ_DIFF 1 2.50 7.14 0.00 81 HTML_IMAGE_RATIO_02 1 2.50 7.14 0.00 82 UNTRUSTED_Relay 1 7.50 7.14 7.69 83 BAYES_40 1 5.00 7.14 3.85 84 XM_Dr_From 1 2.50 7.14 0.00 85 XMNumbers 1 10.00 7.14 11.54 86 UPPERCASE_75_100 1 2.50 7.14 0.00 87 XMLngstWrd_01 1 2.50 7.14 0.00 88 XMLngstWrd_04 1 2.50 7.14 0.00 89 TR_XM_PHPForged 1 2.50 7.14 0.00 90 XM_B_Investor 1 2.50 7.14 0.00 91 XM_GoogleGroups 1 2.50 7.14 0.00 92 XM_Body_Dirty_Words 1 7.50 7.14 7.69 93 XM_UncommonTLD01 1 10.00 7.14 11.54 94 RCVD_IN_BL_SPAMCOP_NET 1 2.50 7.14 0.00 95 MPART_ALT_DIFF 1 2.50 7.14 0.00 96 RELAYCOUNTRY_CA 1 2.50 7.14 0.00 97 MIME_HTML_ONLY_MULTI 1 2.50 7.14 0.00 98 PLING_QUERY 1 5.00 7.14 3.85 99 RELAYCOUNTRY_AT 1 2.50 7.14 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 21 77.50 71.43 80.77 2 HTML_MESSAGE 20 82.50 92.86 76.92 3 RELAYCOUNTRY_US 18 75.00 85.71 69.23 4 XM_DK_Pass 17 67.50 71.43 65.38 5 XM_B_Unicode 17 70.00 78.57 65.38 6 DKIM_VALID 17 67.50 71.43 65.38 7 DKIM_SIGNED 17 67.50 71.43 65.38 8 BAYES_50 13 45.00 35.71 50.00 9 DKIM_VALID_AU 12 50.00 57.14 46.15 10 XMSubLong 11 32.50 14.29 42.31 11 DKIM_VALID_EF 11 37.50 28.57 42.31 12 XMListUnsubscribeExists 11 45.00 50.00 42.31 13 T_TM2_M_HEADER_IN_MSG 10 32.50 21.43 38.46 14 XM_B_SpammyWords 10 35.00 28.57 38.46 15 HTML_FONT_LOW_CONTRAST 9 37.50 42.86 34.62 16 RCVD_IN_MSPIKE_WL 8 27.50 21.43 30.77 17 FVGT_m_MULTI_ODD 8 40.00 57.14 30.77 18 RCVD_IN_MSPIKE_H2 7 35.00 50.00 26.92 19 ALL_TRUSTED 6 15.00 0.00 23.08 20 RCVD_IN_MSPIKE_H3 6 22.50 21.43 23.08 21 LOC_TINY_FONT_1 6 30.00 42.86 23.08 22 XM_B_Unicode3 6 27.50 35.71 23.08 23 T_KAM_HTML_FONT_INVALID 5 17.50 14.29 19.23 24 T_TooManySym_01 5 12.50 0.00 19.23 25 UNPARSEABLE_RELAY 5 20.00 21.43 19.23 26 DCC_CHECK 5 22.50 28.57 19.23 27 BOTNET_IPINHOSTNAME 4 17.50 21.43 15.38 28 XM_B_SpammyWords2 4 17.50 21.43 15.38 29 BAYES_60 4 12.50 7.14 15.38 30 XM_SendGrid 4 12.50 7.14 15.38 31 XM_UncommonTLD01 3 10.00 7.14 11.54 32 T_TooManySym_02 3 7.50 0.00 11.54 33 XM_DKIMWhitelistDomains 3 7.50 0.00 11.54 34 TR_XM_BayesUnsub 3 15.00 21.43 11.54 35 TR_XM_UnparsRelay 3 12.50 14.29 11.54 36 XMNumbers 3 10.00 7.14 11.54 37 MIME_HTML_ONLY 3 15.00 21.43 11.54 38 XM_Multi_Part_URI 3 17.50 28.57 11.54 39 XM_B_Unsub 3 15.00 21.43 11.54 40 RELAYCOUNTRY_META 3 20.00 35.71 11.54 41 RCVD_IN_MSPIKE_H4 2 5.00 0.00 7.69 42 XM_Body_Dirty_Words 2 7.50 7.14 7.69 43 UNTRUSTED_Relay 2 7.50 7.14 7.69 44 ANY_BOUNCE_MESSAGE 2 5.00 0.00 7.69 45 USER_IN_DEF_DKIM_WL 2 5.00 0.00 7.69 46 BOUNCE_MESSAGE 2 5.00 0.00 7.69 47 XMBSHREFv2 2 5.00 0.00 7.69 48 XM_Evil_Numbers_Gen 2 5.00 0.00 7.69 49 BAYES_95 2 7.50 7.14 7.69 50 BAYES_80 2 12.50 21.43 7.69 51 XM_DK_Undo_02 2 17.50 35.71 7.69 52 XM_B_SpammyTLD 2 7.50 7.14 7.69 53 TVD_RCVD_IP 2 5.00 0.00 7.69 54 TR_XM_DK_SendGrid 1 2.50 0.00 3.85 55 XM_B_Phish_Phrases 1 2.50 0.00 3.85 56 XM_B_DNDMA 1 2.50 0.00 3.85 57 XM_UB80 1 2.50 0.00 3.85 58 XMNoVowels 1 2.50 0.00 3.85 59 LotsOfNums_01 1 7.50 14.29 3.85 60 T_XMHurry_00 1 2.50 0.00 3.85 61 XM_H_Long_From01 1 2.50 0.00 3.85 62 TR_XM_SB_Phish 1 2.50 0.00 3.85 63 BOTNET 1 12.50 28.57 3.85 64 WEIRD_PORT 1 2.50 0.00 3.85 65 DEAR_FRIEND 1 2.50 0.00 3.85 66 PLING_QUERY 1 5.00 7.14 3.85 67 XMCapTrack 1 2.50 0.00 3.85 68 TR_XM_NoHeaderRelay 1 2.50 0.00 3.85 69 XMSubMetaSx_00 1 2.50 0.00 3.85 70 LOTS_OF_MONEY 1 5.00 7.14 3.85 71 HTML_IMAGE_RATIO_06 1 2.50 0.00 3.85 72 BAYES_20 1 2.50 0.00 3.85 73 FSL_BULK_SIG 1 5.00 7.14 3.85 74 XMSubMetaSxObfu_03 1 2.50 0.00 3.85 75 RELAYCOUNTRY_CN 1 2.50 0.00 3.85 76 XMGappySubj_01 1 2.50 0.00 3.85 77 BAYES_999 1 10.00 21.43 3.85 78 MSGID_NOFQDN1 1 2.50 0.00 3.85 79 TR_XM_PhishingBody 1 2.50 0.00 3.85 80 BAYES_40 1 5.00 7.14 3.85 81 TR_XM_SpammyWords4 1 2.50 0.00 3.85 82 INVALID_MSGID 1 2.50 0.00 3.85 83 XM_B_SpammyWords3 1 5.00 7.14 3.85 84 TM2_M_VERY_LONG_WORD 1 10.00 21.43 3.85 85 TR_XM_SpammyRelay 1 7.50 14.29 3.85 86 RELAYCOUNTRY_IE 1 2.50 0.00 3.85 87 XM_B_Unsub2 1 2.50 0.00 3.85 88 IN_ZIMBRA_NJ_WHITELIST 1 2.50 0.00 3.85 89 XM_B_Phish66 1 2.50 0.00 3.85 90 XMSubject_78 1 2.50 0.00 3.85 91 BAYES_05 1 2.50 0.00 3.85 92 T_FILL_THIS_FORM_SHORT 1 2.50 0.00 3.85 93 TR_XM_DKIM_Undo 1 7.50 14.29 3.85 94 RCVD_IN_PSBL 1 2.50 0.00 3.85 95 XMSubPhish11 1 2.50 0.00 3.85 96 MAILING_LIST_MULTI 1 2.50 0.00 3.85 97 TO_MALFORMED 1 2.50 0.00 3.85 98 SpammyFromTLD_02 1 5.00 7.14 3.85 99 XMDateMe_00 1 2.50 0.00 3.85 100 BAYES_99 1 10.00 21.43 3.85 101 RELAYCOUNTRY_PL 1 2.50 0.00 3.85 102 BAYES_00 1 2.50 0.00 3.85 103 AC_DIV_BONANZA 1 2.50 0.00 3.85 104 XMHTML_After_End 1 2.50 0.00 3.85 105 FSL_HAS_TINYURL 1 2.50 0.00 3.85 ----------------------------------------------------------------------