Email: 48 Autolearn: 0 AvgScore: 4.33 AvgScanTime: 1.35 sec Spam: 11 Autolearn: 0 AvgScore: 15.73 AvgScanTime: 1.05 sec Ham: 37 Autolearn: 0 AvgScore: 0.95 AvgScanTime: 1.43 sec Time Spent Running SA: 0.02 hours Time Spent Processing Spam: 0.00 hours Time Spent Processing Ham: 0.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 8 89.58 72.73 94.59 2 XM_B_SpammyWords 7 43.75 63.64 37.84 3 XM_B_Unicode 6 45.83 54.55 43.24 4 HTML_MESSAGE 6 66.67 54.55 70.27 5 RELAYCOUNTRY_US 5 68.75 45.45 75.68 6 DKIM_VALID 5 60.42 45.45 64.86 7 XM_DK_Pass 5 62.50 45.45 67.57 8 DKIM_SIGNED 5 64.58 45.45 70.27 9 RELAYCOUNTRY_META 4 12.50 36.36 5.41 10 BOTNET 4 8.33 36.36 0.00 11 TR_XM_SpammyRelay 4 10.42 36.36 2.70 12 UNTRUSTED_Relay 4 10.42 36.36 2.70 13 DCC_CHECK 3 10.42 27.27 5.41 14 XM_SPF_SoftFail 3 6.25 27.27 0.00 15 RCVD_IN_MSPIKE_H2 3 25.00 27.27 24.32 16 RELAYCOUNTRY_RU 3 6.25 27.27 0.00 17 XMListUnsubscribeExists 3 35.42 27.27 37.84 18 BAYES_50 3 47.92 27.27 54.05 19 BAYES_80 3 10.42 27.27 5.41 20 XMSubLong 3 22.92 27.27 21.62 21 XM_B_Unicode3 3 22.92 27.27 21.62 22 DKIM_VALID_AU 3 41.67 27.27 45.95 23 RCVD_IN_MSPIKE_L3 2 4.17 18.18 0.00 24 TR_XM_MaxWHORU 2 4.17 18.18 0.00 25 TR_XM_MSPIKECOMBO 2 4.17 18.18 0.00 26 BAYES_95 2 10.42 18.18 8.11 27 RCVD_IN_MSPIKE_BL 2 4.17 18.18 0.00 28 DKIM_VALID_EF 2 35.42 18.18 40.54 29 SpammyFromTLD_01 2 4.17 18.18 0.00 30 TR_XM_SpammyWords3 2 4.17 18.18 0.00 31 XM_UncommonTLD01 2 16.67 18.18 16.22 32 XM_UB95 2 4.17 18.18 0.00 33 XM_Multi_Part_URI 2 20.83 18.18 21.62 34 TR_XM_SpammyWords5 2 6.25 18.18 2.70 35 NO_DNS_FOR_FROM 2 4.17 18.18 0.00 36 XM_UB80 2 4.17 18.18 0.00 37 DEAR_SOMETHING 2 6.25 18.18 2.70 38 MIME_HTML_ONLY 2 22.92 18.18 24.32 39 BAYES_60 2 16.67 18.18 16.22 40 MIME_HTML_MOSTLY 2 4.17 18.18 0.00 41 TR_XM_InvalidRelay 2 4.17 18.18 0.00 42 RCVD_IN_VALIDITY_RPBL 2 6.25 18.18 2.70 43 UNPARSEABLE_RELAY 2 10.42 18.18 8.11 44 FSL_BULK_SIG 2 6.25 18.18 2.70 45 XM_B_SpammyWords2 2 22.92 18.18 24.32 46 LOC_TINY_FONT_1 2 14.58 18.18 13.51 47 BOTNET_IPINHOSTNAME 1 4.17 9.09 2.70 48 XM_Combo_Sbj 1 2.08 9.09 0.00 49 MILLION_USD 1 2.08 9.09 0.00 50 HK_SCAM 1 2.08 9.09 0.00 51 FILL_THIS_FORM_LONG 1 2.08 9.09 0.00 52 TR_XM_PHPDW 1 2.08 9.09 0.00 53 HTML_IMAGE_ONLY_04 1 2.08 9.09 0.00 54 MONEY_NOHTML 1 2.08 9.09 0.00 55 XM_B_SpammyTLD 1 4.17 9.09 2.70 56 RCVD_IN_MSPIKE_H3 1 29.17 9.09 35.14 57 XM_H_Undi_Recip 1 2.08 9.09 0.00 58 T_TooManySym_01 1 12.50 9.09 13.51 59 XM_B_Unsub 1 8.33 9.09 8.11 60 RELAYCOUNTRY_CA 1 2.08 9.09 0.00 61 XMReplyNow 1 2.08 9.09 0.00 62 XM_H_PHPOS 1 2.08 9.09 0.00 63 HTML_IMAGE_RATIO_02 1 2.08 9.09 0.00 64 TR_XM_FormFill2 1 2.08 9.09 0.00 65 XM_SendGrid 1 4.17 9.09 2.70 66 TR_Symld_Words 1 8.33 9.09 8.11 67 TR_Sbj_FN_Bdy 1 2.08 9.09 0.00 68 AD_PREFS 1 2.08 9.09 0.00 69 XM_OfRef6 1 2.08 9.09 0.00 70 BODY_URI_ONLY 1 2.08 9.09 0.00 71 XM_B_Investor 1 2.08 9.09 0.00 72 NO_PRESCRIPTION 1 2.08 9.09 0.00 73 ALL_TRUSTED 1 18.75 9.09 21.62 74 TR_Caps_n_Bayes_80 1 2.08 9.09 0.00 75 T_KAM_HTML_FONT_INVALID 1 18.75 9.09 21.62 76 TR_XM_Undi_Recip4 1 2.08 9.09 0.00 77 TR_XM_Undi_Recip5 1 2.08 9.09 0.00 78 FILL_THIS_FORM 1 2.08 9.09 0.00 79 ADVANCE_FEE_3_NEW_FRM_MNY 1 2.08 9.09 0.00 80 XM_DK_Undo_02 1 6.25 9.09 5.41 81 TR_XM_PHPForged 1 2.08 9.09 0.00 82 T_XMDrugObfuBody_08 1 4.17 9.09 2.70 83 MPART_ALT_DIFF 1 8.33 9.09 8.11 84 TR_XM_Undi_Recip2 1 2.08 9.09 0.00 85 XM_OfRef7 1 2.08 9.09 0.00 86 FROM_EXCESS_BASE64 1 2.08 9.09 0.00 87 TR_XM_DKIM_Undo 1 4.17 9.09 2.70 88 MONEY_FRAUD_3 1 2.08 9.09 0.00 89 XMGappySubj_01 1 4.17 9.09 2.70 90 XMGappySubj_02 1 2.08 9.09 0.00 91 XM_Evil_Numbers_Gen 1 4.17 9.09 2.70 92 URI_HEX 1 2.08 9.09 0.00 93 XM_B_SpammyWords3 1 8.33 9.09 8.11 94 TR_XM_BayesUnsub 1 8.33 9.09 8.11 95 T_REMOTE_IMAGE 1 2.08 9.09 0.00 96 T_TooManySym_02 1 8.33 9.09 8.11 97 TO_EQ_FM_DOM_HTML_ONLY 1 2.08 9.09 0.00 98 HTML_SHORT_LINK_IMG_1 1 2.08 9.09 0.00 99 T_TM2_M_HEADER_IN_MSG 1 8.33 9.09 8.11 100 URG_BIZ 1 2.08 9.09 0.00 101 BAYES_999 1 4.17 9.09 2.70 102 LOTS_OF_MONEY 1 4.17 9.09 2.70 103 XM_OfRef8 1 2.08 9.09 0.00 104 XM_Dr_From 1 4.17 9.09 2.70 105 XMWrdJen 1 2.08 9.09 0.00 106 XM_ShortIntro_01 1 6.25 9.09 5.41 107 TR_XM_UnparsRelay 1 6.25 9.09 5.41 108 XM_B_DynamicLink 1 2.08 9.09 0.00 109 FVGT_m_MULTI_ODD 1 22.92 9.09 27.03 110 RCVD_IN_BL_SPAMCOP_NET 1 2.08 9.09 0.00 111 MONEY_FORM 1 2.08 9.09 0.00 112 TR_XM_Undi_Recip9 1 2.08 9.09 0.00 113 TR_XM_PhishingBody 1 4.17 9.09 2.70 114 TR_XM_Undi_RecipCombo3 1 2.08 9.09 0.00 115 BAYES_99 1 6.25 9.09 5.41 116 FROM_GOV_SPOOF 1 2.08 9.09 0.00 117 RCVD_IN_MSPIKE_WL 1 33.33 9.09 40.54 118 XM_H_PHPMailer 1 2.08 9.09 0.00 119 TVD_SPACE_RATIO_MINFP 1 2.08 9.09 0.00 120 SUBJ_ALL_CAPS 1 2.08 9.09 0.00 121 XMPhish08 1 2.08 9.09 0.00 122 NOT_SPAM 1 2.08 9.09 0.00 123 TR_XM_Undi_RecipCombo2 1 2.08 9.09 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 35 89.58 72.73 94.59 2 RELAYCOUNTRY_US 28 68.75 45.45 75.68 3 HTML_MESSAGE 26 66.67 54.55 70.27 4 DKIM_SIGNED 26 64.58 45.45 70.27 5 XM_DK_Pass 25 62.50 45.45 67.57 6 DKIM_VALID 24 60.42 45.45 64.86 7 BAYES_50 20 47.92 27.27 54.05 8 DKIM_VALID_AU 17 41.67 27.27 45.95 9 XM_B_Unicode 16 45.83 54.55 43.24 10 DKIM_VALID_EF 15 35.42 18.18 40.54 11 RCVD_IN_MSPIKE_WL 15 33.33 9.09 40.54 12 XM_B_SpammyWords 14 43.75 63.64 37.84 13 XMListUnsubscribeExists 14 35.42 27.27 37.84 14 RCVD_IN_MSPIKE_H3 13 29.17 9.09 35.14 15 HTML_FONT_LOW_CONTRAST 10 20.83 0.00 27.03 16 FVGT_m_MULTI_ODD 10 22.92 9.09 27.03 17 RCVD_IN_MSPIKE_H2 9 25.00 27.27 24.32 18 MIME_HTML_ONLY 9 22.92 18.18 24.32 19 XM_B_SpammyWords2 9 22.92 18.18 24.32 20 T_KAM_HTML_FONT_INVALID 8 18.75 9.09 21.62 21 XM_Multi_Part_URI 8 20.83 18.18 21.62 22 ALL_TRUSTED 8 18.75 9.09 21.62 23 XM_B_Unicode3 8 22.92 27.27 21.62 24 XMSubLong 8 22.92 27.27 21.62 25 XM_UncommonTLD01 6 16.67 18.18 16.22 26 BAYES_60 6 16.67 18.18 16.22 27 TR_XM_DK_Unsub 6 12.50 0.00 16.22 28 T_TooManySym_01 5 12.50 9.09 13.51 29 LOC_TINY_FONT_1 5 14.58 18.18 13.51 30 INVALID_MSGID 4 8.33 0.00 10.81 31 TO_MALFORMED 4 8.33 0.00 10.81 32 XM_H_Long_From01 4 8.33 0.00 10.81 33 MSGID_NOFQDN1 4 8.33 0.00 10.81 34 BAYES_95 3 10.42 18.18 8.11 35 XM_B_Unsub 3 8.33 9.09 8.11 36 IN_HORDE_ADDRESS_BOOK 3 6.25 0.00 8.11 37 MIME_HTML_ONLY_MULTI 3 6.25 0.00 8.11 38 MPART_ALT_DIFF 3 8.33 9.09 8.11 39 TR_Symld_Words 3 8.33 9.09 8.11 40 MIME_QP_LONG_LINE 3 6.25 0.00 8.11 41 TR_XM_BayesUnsub 3 8.33 9.09 8.11 42 XM_B_SpammyWords3 3 8.33 9.09 8.11 43 T_TooManySym_02 3 8.33 9.09 8.11 44 T_TM2_M_HEADER_IN_MSG 3 8.33 9.09 8.11 45 XM_DKIMWhitelistDomains 3 6.25 0.00 8.11 46 LotsOfNums_01 3 6.25 0.00 8.11 47 USER_IN_DEF_DKIM_WL 3 6.25 0.00 8.11 48 DKIM_ADSP_CUSTOM_MED 3 6.25 0.00 8.11 49 XM_Body_Dirty_Words 3 6.25 0.00 8.11 50 XM_GoogleGroups 3 6.25 0.00 8.11 51 UNPARSEABLE_RELAY 3 10.42 18.18 8.11 52 FORGED_GMAIL_RCVD 2 4.17 0.00 5.41 53 XMLngstWrd_01 2 4.17 0.00 5.41 54 ANY_BOUNCE_MESSAGE 2 4.17 0.00 5.41 55 RELAYCOUNTRY_META 2 12.50 36.36 5.41 56 TM2_M_VERY_LONG_WORD 2 4.17 0.00 5.41 57 DCC_CHECK 2 10.42 27.27 5.41 58 XMStrtUSub 2 4.17 0.00 5.41 59 XMNumbers 2 4.17 0.00 5.41 60 XMLngstWrd_00 2 4.17 0.00 5.41 61 BAYES_40 2 4.17 0.00 5.41 62 XM_DK_Undo_02 2 6.25 9.09 5.41 63 XMLngstWrd_04 2 4.17 0.00 5.41 64 BOUNCE_MESSAGE 2 4.17 0.00 5.41 65 UPPERCASE_75_100 2 4.17 0.00 5.41 66 XMLngstWrd_02 2 4.17 0.00 5.41 67 DKIM_INVALID 2 4.17 0.00 5.41 68 XMLngstWrd_03 2 4.17 0.00 5.41 69 HTML_TITLE_SUBJ_DIFF 2 4.17 0.00 5.41 70 RCVD_IN_MSPIKE_H4 2 4.17 0.00 5.41 71 BAYES_99 2 6.25 9.09 5.41 72 BAYES_00 2 4.17 0.00 5.41 73 HTML_MIME_NO_HTML_TAG 2 4.17 0.00 5.41 74 T_XMHurry_00 2 4.17 0.00 5.41 75 BAYES_80 2 10.42 27.27 5.41 76 XM_ShortIntro_01 2 6.25 9.09 5.41 77 TR_XM_UnparsRelay 2 6.25 9.09 5.41 78 HTTPS_HTTP_MISMATCH 1 2.08 0.00 2.70 79 XM_B_SpammyTLD 1 4.17 9.09 2.70 80 BOTNET_IPINHOSTNAME 1 4.17 9.09 2.70 81 XMSubMetaSxObfu_03 1 2.08 0.00 2.70 82 XM_DK_Undo_01 1 2.08 0.00 2.70 83 RELAYCOUNTRY_TR 1 2.08 0.00 2.70 84 T_XMDrugObfuBody_08 1 4.17 9.09 2.70 85 XM_SendGrid 1 4.17 9.09 2.70 86 NML_ADSP_CUSTOM_MED 1 2.08 0.00 2.70 87 WEIRD_PORT 1 2.08 0.00 2.70 88 TR_XM_SpammyRelay 1 10.42 36.36 2.70 89 TR_XM_SpammyWords2 1 2.08 0.00 2.70 90 UNTRUSTED_Relay 1 10.42 36.36 2.70 91 HK_RANDOM_REPLYTO 1 2.08 0.00 2.70 92 HTML_TEXT_INVISIBLE_FONT 1 2.08 0.00 2.70 93 HTML_TEXT_INVISIBLE_STYLE 1 2.08 0.00 2.70 94 RELAYCOUNTRY_JP 1 2.08 0.00 2.70 95 BAYES_999 1 4.17 9.09 2.70 96 GMD_PDF_SQUARE 1 2.08 0.00 2.70 97 LOTS_OF_MONEY 1 4.17 9.09 2.70 98 TVD_RCVD_IP 1 2.08 0.00 2.70 99 HTML_TAG_BALANCE_BODY 1 2.08 0.00 2.70 100 XMBody_95 1 2.08 0.00 2.70 101 TR_XM_SpammyWords5 1 6.25 18.18 2.70 102 THIS_AD 1 2.08 0.00 2.70 103 TR_XM_DKIM_Undo 1 4.17 9.09 2.70 104 T_DOC_ATTACH_NO_EXT 1 2.08 0.00 2.70 105 DEAR_SOMETHING 1 6.25 18.18 2.70 106 XMGappySubj_01 1 4.17 9.09 2.70 107 XM_Evil_Numbers_Gen 1 4.17 9.09 2.70 108 XMDateMe_00 1 2.08 0.00 2.70 109 XMSubject_78 1 2.08 0.00 2.70 110 TR_XM_SpammyWords4 1 2.08 0.00 2.70 111 XM_B_Phish66 1 2.08 0.00 2.70 112 RCVD_IN_VALIDITY_RPBL 1 6.25 18.18 2.70 113 XM_Dr_From 1 4.17 9.09 2.70 114 XMSubMetaSx_00 1 2.08 0.00 2.70 115 TooManyTo_001 1 2.08 0.00 2.70 116 FSL_BULK_SIG 1 6.25 18.18 2.70 117 TR_XM_PhishingBody 1 4.17 9.09 2.70 ----------------------------------------------------------------------