Email: 76 Autolearn: 0 AvgScore: 4.07 AvgScanTime: 3.36 sec Spam: 12 Autolearn: 0 AvgScore: 11.50 AvgScanTime: 2.64 sec Ham: 64 Autolearn: 0 AvgScore: 2.67 AvgScanTime: 3.50 sec Time Spent Running SA: 0.07 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 12 88.16 100.00 85.94 2 DKIM_SIGNED 11 86.84 91.67 85.94 3 XM_DK_Pass 10 82.89 83.33 82.81 4 DKIM_VALID 10 40.79 83.33 32.81 5 RELAYCOUNTRY_US 10 88.16 83.33 89.06 6 DCC_CHECK_NEGATIVE 10 52.63 83.33 46.88 7 DKIM_VALID_AU 9 36.84 75.00 29.69 8 BAYES_50 8 46.05 66.67 42.19 9 XMListUnsubscribeExists 8 71.05 66.67 71.88 10 XM_B_Unicode 8 72.37 66.67 73.44 11 XM_B_SpammyWords 7 26.32 58.33 20.31 12 FVGT_m_MULTI_ODD 7 22.37 58.33 15.62 13 XM_B_Unicode3 6 59.21 50.00 60.94 14 TM2_M_VERY_LONG_WORD 4 7.89 33.33 3.12 15 XM_UncommonTLD01 4 7.89 33.33 3.12 16 RELAYCOUNTRY_META 4 7.89 33.33 3.12 17 HTML_FONT_LOW_CONTRAST 4 57.89 33.33 62.50 18 XM_Multi_Part_URI 4 53.95 33.33 57.81 19 DKIM_VALID_EF 4 17.11 33.33 14.06 20 RCVD_IN_MSPIKE_H2 4 17.11 33.33 14.06 21 XM_GoogleGroups 3 6.58 25.00 3.12 22 HTML_MIME_NO_HTML_TAG 3 7.89 25.00 4.69 23 XMLngstWrd_03 3 6.58 25.00 3.12 24 HTML_TITLE_SUBJ_DIFF 3 6.58 25.00 3.12 25 MIME_HTML_ONLY_MULTI 3 6.58 25.00 3.12 26 XM_H_PHPOS 3 3.95 25.00 0.00 27 TR_XM_PHPDW 3 3.95 25.00 0.00 28 XMLngstWrd_02 3 6.58 25.00 3.12 29 XMLngstWrd_01 3 6.58 25.00 3.12 30 XMLngstWrd_04 3 6.58 25.00 3.12 31 MIME_HTML_ONLY 3 11.84 25.00 9.38 32 XM_B_SpammyWords2 3 9.21 25.00 6.25 33 TR_XM_FormFill2 3 3.95 25.00 0.00 34 XMLngstWrd_00 3 6.58 25.00 3.12 35 TR_XM_PHPForged 3 3.95 25.00 0.00 36 SpammyFromTLD_01 3 3.95 25.00 0.00 37 UPPERCASE_75_100 3 6.58 25.00 3.12 38 UNPARSEABLE_RELAY 3 7.89 25.00 4.69 39 MPART_ALT_DIFF 3 6.58 25.00 3.12 40 XM_H_PHPOS_M 2 2.63 16.67 0.00 41 RCVD_IN_MSPIKE_WL 2 15.79 16.67 15.62 42 TR_XM_SpammyWords5 2 2.63 16.67 0.00 43 RCVD_IN_MSPIKE_H3 2 15.79 16.67 15.62 44 XM_UB50 2 3.95 16.67 1.56 45 TR_XM_PhishingBody 2 2.63 16.67 0.00 46 XM_B_SpammyWords3 2 7.89 16.67 6.25 47 XMStockSpam_06 2 2.63 16.67 0.00 48 RELAYCOUNTRY_TR 2 2.63 16.67 0.00 49 SUBJ_ALL_CAPS 2 2.63 16.67 0.00 50 LOTS_OF_MONEY 2 2.63 16.67 0.00 51 T_REMOTE_IMAGE 2 5.26 16.67 3.12 52 T_TM2_M_HEADER_IN_MSG 2 11.84 16.67 10.94 53 DCC_CHECK 2 47.37 16.67 53.12 54 XM_Body_Dirty_Words 2 10.53 16.67 9.38 55 MIME_HTML_MOSTLY 2 3.95 16.67 1.56 56 XM_Evil_Numbers_Gen 2 5.26 16.67 3.12 57 TR_XM_UnparsRelay 2 2.63 16.67 0.00 58 UNTRUSTED_Relay 2 3.95 16.67 1.56 59 TR_XM_DK_Unsub 2 6.58 16.67 4.69 60 TR_DCC_Bayes_99 1 1.32 8.33 0.00 61 XM_SPF_SoftFail 1 2.63 8.33 1.56 62 TR_XM_DKIM_Undo 1 1.32 8.33 0.00 63 XM_SendGrid 1 5.26 8.33 4.69 64 TR_Caps_n_Bayes_80 1 1.32 8.33 0.00 65 XM_B_Phish66 1 1.32 8.33 0.00 66 TooManyTo_003 1 2.63 8.33 1.56 67 BAYES_95 1 1.32 8.33 0.00 68 XMSolicitRefs_0 1 1.32 8.33 0.00 69 XM_B_SpammyTLD 1 2.63 8.33 1.56 70 LOC_TINY_FONT_1 1 52.63 8.33 60.94 71 TR_XM_SpammyRelay 1 1.32 8.33 0.00 72 T_MONEY_PERCENT 1 1.32 8.33 0.00 73 T_XMDrugObfuBody_00 1 1.32 8.33 0.00 74 RELAYCOUNTRY_MY 1 1.32 8.33 0.00 75 XM_DK_Undo_02 1 2.63 8.33 1.56 76 XM_B_Investor 1 3.95 8.33 3.12 77 AD_PREFS 1 1.32 8.33 0.00 78 XMPhish08 1 1.32 8.33 0.00 79 TR_XM_SpammyWords4 1 1.32 8.33 0.00 80 TR_XM_BayesUnsub 1 2.63 8.33 1.56 81 TR_XM_InvalidRelay 1 1.32 8.33 0.00 82 HTML_IMAGE_RATIO_08 1 1.32 8.33 0.00 83 XM_CamelCaseFrm001 1 1.32 8.33 0.00 84 T_FILL_THIS_FORM_SHORT 1 1.32 8.33 0.00 85 BAYES_80 1 1.32 8.33 0.00 86 TooManyTo_004 1 2.63 8.33 1.56 87 BAYES_99 1 2.63 8.33 1.56 88 TR_Caps_n_Bayes_99 1 1.32 8.33 0.00 89 XM_B_Unsub 1 2.63 8.33 1.56 90 XMSubLong 1 55.26 8.33 64.06 91 URI_TRUNCATED 1 1.32 8.33 0.00 92 TooManyTo_002 1 2.63 8.33 1.56 93 TooManyTo_001 1 2.63 8.33 1.56 94 DKIM_INVALID 1 46.05 8.33 53.12 95 NOT_SPAM 1 1.32 8.33 0.00 96 DATE_IN_PAST_06_12 1 1.32 8.33 0.00 97 T_XMHurry_00 1 1.32 8.33 0.00 98 XM_H_PHPMailer 1 1.32 8.33 0.00 99 TR_XM_DK_SendGrid 1 2.63 8.33 1.56 100 HTML_TAG_BALANCE_CENTER 1 1.32 8.33 0.00 101 BAYES_60 1 2.63 8.33 1.56 102 TR_XM_SPAMCOP 1 1.32 8.33 0.00 103 XM_DIRTYINTL 1 1.32 8.33 0.00 104 HTML_IMAGE_RATIO_02 1 1.32 8.33 0.00 105 XM_PDF 1 1.32 8.33 0.00 106 HTML_IMAGE_ONLY_12 1 1.32 8.33 0.00 107 HTML_TAG_BALANCE_BODY 1 1.32 8.33 0.00 108 RCVD_IN_BL_SPAMCOP_NET 1 1.32 8.33 0.00 109 BOTNET_IPINHOSTNAME 1 3.95 8.33 3.12 110 TooManyTo_005 1 2.63 8.33 1.56 111 TR_LOTS_OF_MONEY2 1 1.32 8.33 0.00 112 XMSexyCombo_05 1 3.95 8.33 3.12 113 RCVD_IN_VALIDITY_RPBL 1 1.32 8.33 0.00 114 RELAYCOUNTRY_BE 1 1.32 8.33 0.00 115 LongTLD 1 1.32 8.33 0.00 116 XMBody_29 1 1.32 8.33 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 57 88.16 83.33 89.06 2 DKIM_SIGNED 55 86.84 91.67 85.94 3 HTML_MESSAGE 55 88.16 100.00 85.94 4 XM_DK_Pass 53 82.89 83.33 82.81 5 XM_B_Unicode 47 72.37 66.67 73.44 6 XMListUnsubscribeExists 46 71.05 66.67 71.88 7 XMSubLong 41 55.26 8.33 64.06 8 HTML_FONT_LOW_CONTRAST 40 57.89 33.33 62.50 9 LOC_TINY_FONT_1 39 52.63 8.33 60.94 10 XM_B_Unicode3 39 59.21 50.00 60.94 11 XM_Multi_Part_URI 37 53.95 33.33 57.81 12 LotsOfNums_01 34 44.74 0.00 53.12 13 DCC_CHECK 34 47.37 16.67 53.12 14 DKIM_INVALID 34 46.05 8.33 53.12 15 BAYES_00 32 42.11 0.00 50.00 16 TR_XM_DK_Bayes 31 40.79 0.00 48.44 17 DCC_CHECK_NEGATIVE 30 52.63 83.33 46.88 18 BAYES_50 27 46.05 66.67 42.19 19 XM_B_REG_HTML 22 28.95 0.00 34.38 20 DKIM_VALID 21 40.79 83.33 32.81 21 DKIM_VALID_AU 19 36.84 75.00 29.69 22 XM_B_SpammyWords 13 26.32 58.33 20.31 23 RCVD_IN_MSPIKE_H3 10 15.79 16.67 15.62 24 RCVD_IN_MSPIKE_WL 10 15.79 16.67 15.62 25 FVGT_m_MULTI_ODD 10 22.37 58.33 15.62 26 DKIM_VALID_EF 9 17.11 33.33 14.06 27 RCVD_IN_MSPIKE_H2 9 17.11 33.33 14.06 28 T_TooManySym_01 8 10.53 0.00 12.50 29 T_KAM_HTML_FONT_INVALID 7 9.21 0.00 10.94 30 T_TM2_M_HEADER_IN_MSG 7 11.84 16.67 10.94 31 XM_Body_Dirty_Words 6 10.53 16.67 9.38 32 ALL_TRUSTED 6 7.89 0.00 9.38 33 MIME_HTML_ONLY 6 11.84 25.00 9.38 34 T_TooManySym_02 5 6.58 0.00 7.81 35 UPGRADE_MAILBOX 5 6.58 0.00 7.81 36 XM_B_SpammyWords3 4 7.89 16.67 6.25 37 XM_B_SpammyWords2 4 9.21 25.00 6.25 38 HTML_FONT_FACE_BAD 3 3.95 0.00 4.69 39 XM_SendGrid 3 5.26 8.33 4.69 40 HTML_MIME_NO_HTML_TAG 3 7.89 25.00 4.69 41 TR_XM_DK_Unsub 3 6.58 16.67 4.69 42 UNPARSEABLE_RELAY 3 7.89 25.00 4.69 43 XMSubMetaSx_00 3 3.95 0.00 4.69 44 HTML_TITLE_SUBJ_DIFF 2 6.58 25.00 3.12 45 MIME_HTML_ONLY_MULTI 2 6.58 25.00 3.12 46 XMLngstWrd_03 2 6.58 25.00 3.12 47 BAYES_20 2 2.63 0.00 3.12 48 XM_GoogleGroups 2 6.58 25.00 3.12 49 XM_H_Long_From01 2 2.63 0.00 3.12 50 XM_B_Investor 2 3.95 8.33 3.12 51 IN_ZIMBRA_NJ_WHITELIST 2 2.63 0.00 3.12 52 RELAYCOUNTRY_META 2 7.89 33.33 3.12 53 XMLngstWrd_00 2 6.58 25.00 3.12 54 T_REMOTE_IMAGE 2 5.26 16.67 3.12 55 INVALID_MSGID 2 2.63 0.00 3.12 56 XM_UncommonTLD01 2 7.89 33.33 3.12 57 TVD_SPACE_RATIO 2 2.63 0.00 3.12 58 XMLngstWrd_02 2 6.58 25.00 3.12 59 XMLngstWrd_01 2 6.58 25.00 3.12 60 XMLngstWrd_04 2 6.58 25.00 3.12 61 XMSubMetaSxObfu_00 2 2.63 0.00 3.12 62 TM2_M_VERY_LONG_WORD 2 7.89 33.33 3.12 63 XMSexyCombo_05 2 3.95 8.33 3.12 64 BOTNET_IPINHOSTNAME 2 3.95 8.33 3.12 65 MPART_ALT_DIFF 2 6.58 25.00 3.12 66 XM_Evil_Numbers_Gen 2 5.26 16.67 3.12 67 UPPERCASE_75_100 2 6.58 25.00 3.12 68 XMNumbers 2 2.63 0.00 3.12 69 XM_B_SpammyTLD 1 2.63 8.33 1.56 70 TR_Mismatch_TLD_01 1 1.32 0.00 1.56 71 XM_H_Undi_Recip 1 1.32 0.00 1.56 72 TR_XM_Undi_Recip2 1 1.32 0.00 1.56 73 TooManyTo_003 1 2.63 8.33 1.56 74 XM_SPF_SoftFail 1 2.63 8.33 1.56 75 T_TooManySym_03 1 1.32 0.00 1.56 76 FROM_GOV_SPOOF 1 1.32 0.00 1.56 77 XM_DKIMWhitelistDomains 1 1.32 0.00 1.56 78 HTML_IMAGE_ONLY_20 1 1.32 0.00 1.56 79 ANY_BOUNCE_MESSAGE 1 1.32 0.00 1.56 80 TO_MALFORMED 1 1.32 0.00 1.56 81 SpammyFromTLD_02 1 1.32 0.00 1.56 82 TR_XM_BayesUnsub 1 2.63 8.33 1.56 83 XMStrtUSub 1 1.32 0.00 1.56 84 XM_UB50 1 3.95 16.67 1.56 85 XMSubMetaSxObfu_03 1 1.32 0.00 1.56 86 XM_DK_Undo_02 1 2.63 8.33 1.56 87 HTML_IMAGE_RATIO_04 1 1.32 0.00 1.56 88 FVGT_m_MULTI_ODD_EMAIL 1 1.32 0.00 1.56 89 MSGID_NOFQDN1 1 1.32 0.00 1.56 90 XMGappySubj_01 1 1.32 0.00 1.56 91 TR_XM_DK_SendGrid 1 2.63 8.33 1.56 92 BAYES_60 1 2.63 8.33 1.56 93 XMSubject_78 1 1.32 0.00 1.56 94 RELAYCOUNTRY_GB 1 1.32 0.00 1.56 95 BOUNCE_MESSAGE 1 1.32 0.00 1.56 96 TooManyTo_004 1 2.63 8.33 1.56 97 BAYES_99 1 2.63 8.33 1.56 98 XM_B_Unsub 1 2.63 8.33 1.56 99 TooManyTo_001 1 2.63 8.33 1.56 100 TooManyTo_002 1 2.63 8.33 1.56 101 UNTRUSTED_Relay 1 3.95 16.67 1.56 102 RELAYCOUNTRY_BG 1 1.32 0.00 1.56 103 TooManyTo_005 1 2.63 8.33 1.56 104 BAYES_40 1 1.32 0.00 1.56 105 XM_H_Long_From02 1 1.32 0.00 1.56 106 USER_IN_DEF_DKIM_WL 1 1.32 0.00 1.56 107 CK_HELO_GENERIC 1 1.32 0.00 1.56 108 MIME_HTML_MOSTLY 1 3.95 16.67 1.56 109 LONG_JUNK_URI 1 1.32 0.00 1.56 ----------------------------------------------------------------------