Email: 85 Autolearn: 0 AvgScore: 3.68 AvgScanTime: 1.60 sec Spam: 30 Autolearn: 0 AvgScore: 11.37 AvgScanTime: 1.76 sec Ham: 55 Autolearn: 0 AvgScore: -0.51 AvgScanTime: 1.52 sec Time Spent Running SA: 0.04 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 27 74.12 90.00 65.45 2 RELAYCOUNTRY_US 22 72.94 73.33 72.73 3 DKIM_SIGNED 22 74.12 73.33 74.55 4 XM_B_Unicode 21 52.94 70.00 43.64 5 XM_DK_Pass 21 70.59 70.00 70.91 6 DKIM_VALID 21 70.59 70.00 70.91 7 XMListUnsubscribeExists 20 43.53 66.67 30.91 8 DCC_CHECK_NEGATIVE 20 82.35 66.67 90.91 9 DKIM_VALID_AU 16 61.18 53.33 65.45 10 XM_B_SpammyWords 14 48.24 46.67 49.09 11 BAYES_50 13 48.24 43.33 50.91 12 MIME_HTML_ONLY 12 32.94 40.00 29.09 13 FVGT_m_MULTI_ODD 11 31.76 36.67 29.09 14 XM_B_Unicode3 11 29.41 36.67 25.45 15 DCC_CHECK 10 17.65 33.33 9.09 16 RELAYCOUNTRY_META 9 17.65 30.00 10.91 17 HTML_FONT_LOW_CONTRAST 9 21.18 30.00 16.36 18 BAYES_99 9 14.12 30.00 5.45 19 LOC_TINY_FONT_1 9 16.47 30.00 9.09 20 BOTNET_IPINHOSTNAME 8 10.59 26.67 1.82 21 XM_DK_Undo_02 7 9.41 23.33 1.82 22 DKIM_VALID_EF 7 34.12 23.33 40.00 23 XM_B_SpammyWords2 7 15.29 23.33 10.91 24 UNTRUSTED_Relay 6 10.59 20.00 5.45 25 T_XMHurry_00 6 8.24 20.00 1.82 26 RCVD_IN_MSPIKE_WL 6 27.06 20.00 30.91 27 TR_XM_SpammyRelay 6 8.24 20.00 1.82 28 RCVD_IN_MSPIKE_H2 6 11.76 20.00 7.27 29 T_TM2_M_HEADER_IN_MSG 6 17.65 20.00 16.36 30 RCVD_IN_MSPIKE_H3 5 18.82 16.67 20.00 31 XM_Body_Dirty_Words 5 17.65 16.67 18.18 32 XM_UB50 5 8.24 16.67 3.64 33 BAYES_999 5 8.24 16.67 3.64 34 XM_GoogleGroups 5 9.41 16.67 5.45 35 TR_XM_BayesUnsub 5 15.29 16.67 14.55 36 XM_B_Unsub 5 15.29 16.67 14.55 37 TooManyTo_001 5 9.41 16.67 5.45 38 MIME_HTML_MOSTLY 4 7.06 13.33 3.64 39 UNPARSEABLE_RELAY 4 8.24 13.33 5.45 40 BAYES_60 4 9.41 13.33 7.27 41 MPART_ALT_DIFF 4 9.41 13.33 7.27 42 HTML_MIME_NO_HTML_TAG 4 10.59 13.33 9.09 43 XMSubMetaSx_00 4 5.88 13.33 1.82 44 TR_XM_DKIM_Undo 4 4.71 13.33 0.00 45 XMLngstWrd_01 3 9.41 10.00 9.09 46 XM_B_Investor 3 5.88 10.00 3.64 47 MIME_HTML_ONLY_MULTI 3 7.06 10.00 5.45 48 XMLngstWrd_03 3 7.06 10.00 5.45 49 UPPERCASE_75_100 3 7.06 10.00 5.45 50 BAYES_80 3 7.06 10.00 5.45 51 TM2_M_URI_OPT_OUT 3 3.53 10.00 0.00 52 XMLngstWrd_04 3 7.06 10.00 5.45 53 T_KAM_HTML_FONT_INVALID 3 16.47 10.00 20.00 54 TM2_M_VERY_LONG_WORD 3 8.24 10.00 7.27 55 TR_XM_DK_Unsub 3 9.41 10.00 9.09 56 XM_Multi_Part_URI 3 14.12 10.00 16.36 57 XMLngstWrd_00 3 10.59 10.00 10.91 58 XMLngstWrd_02 3 7.06 10.00 5.45 59 LOTS_OF_MONEY 3 8.24 10.00 7.27 60 HTML_TITLE_SUBJ_DIFF 3 7.06 10.00 5.45 61 XMSexyCombo_02 2 2.35 6.67 0.00 62 LotsOfNums_01 2 7.06 6.67 7.27 63 TR_UG_Sexy_Spam 2 2.35 6.67 0.00 64 HTML_IMAGE_RATIO_06 2 2.35 6.67 0.00 65 TooManyTo_002 2 3.53 6.67 1.82 66 TR_XM_SpammyWords4 2 5.88 6.67 5.45 67 XM_B_SpammyWords3 2 2.35 6.67 0.00 68 XMBody_29 2 2.35 6.67 0.00 69 BOTNET 2 2.35 6.67 0.00 70 TR_XM_InvalidRelay 2 2.35 6.67 0.00 71 XMSubLong 2 29.41 6.67 41.82 72 TooManyTo_005 2 2.35 6.67 0.00 73 TooManyTo_004 2 2.35 6.67 0.00 74 HTML_IMAGE_RATIO_02 2 3.53 6.67 1.82 75 TR_DCC_Bayes_99 2 2.35 6.67 0.00 76 RCVD_IN_MSPIKE_L3 2 2.35 6.67 0.00 77 HTML_IMAGE_RATIO_04 2 7.06 6.67 7.27 78 XM_Evil_Numbers_Gen 2 4.71 6.67 3.64 79 TooManyTo_003 2 2.35 6.67 0.00 80 TR_XM_UnparsRelay 2 2.35 6.67 0.00 81 RCVD_IN_VALIDITY_RPBL 2 2.35 6.67 0.00 82 XMSexyCombo_01 2 2.35 6.67 0.00 83 TR_XM_MSPIKECOMBO 2 3.53 6.67 1.82 84 MAILING_LIST_MULTI 2 3.53 6.67 1.82 85 XM_DK_Undo_01 2 5.88 6.67 5.45 86 XM_Body_Dirty_Words_01 2 2.35 6.67 0.00 87 XM_UncommonTLD01 2 4.71 6.67 3.64 88 RCVD_IN_MSPIKE_BL 2 3.53 6.67 1.82 89 SUSPICIOUS_RECIPS 2 2.35 6.67 0.00 90 XMStrtUSub 2 2.35 6.67 0.00 91 DATE_IN_PAST_96_XX 1 1.18 3.33 0.00 92 RELAYCOUNTRY_FR 1 1.18 3.33 0.00 93 SpammyFromTLD_01 1 1.18 3.33 0.00 94 XMSolicitRefs_0 1 1.18 3.33 0.00 95 TR_Orig_Subnet 1 1.18 3.33 0.00 96 XM_H_Long_From01 1 2.35 3.33 1.82 97 ADVANCE_FEE_3_NEW_MONEY 1 1.18 3.33 0.00 98 DKIM_INVALID 1 3.53 3.33 3.64 99 NML_ADSP_CUSTOM_MED 1 1.18 3.33 0.00 100 MIME_BASE64_TEXT 1 1.18 3.33 0.00 101 RELAYCOUNTRY_SE 1 1.18 3.33 0.00 102 XM_B_SpammyTLD 1 1.18 3.33 0.00 103 TR_XM_PhishingBody 1 1.18 3.33 0.00 104 TR_XM_SpammyWords3 1 1.18 3.33 0.00 105 XM_DIRTYINTL 1 2.35 3.33 1.82 106 SpammyFromTLD_02 1 1.18 3.33 0.00 107 RELAYCOUNTRY_GB 1 2.35 3.33 1.82 108 DEAR_FRIEND 1 1.18 3.33 0.00 109 RELAYCOUNTRY_BE 1 1.18 3.33 0.00 110 BAYES_95 1 3.53 3.33 3.64 111 TR_XM_SpammyWords2 1 1.18 3.33 0.00 112 ANY_BOUNCE_MESSAGE 1 4.71 3.33 5.45 113 FORGED_GMAIL_RCVD 1 1.18 3.33 0.00 114 XM_UB80 1 1.18 3.33 0.00 115 RELAYCOUNTRY_AT 1 1.18 3.33 0.00 116 XMPhish08 1 1.18 3.33 0.00 117 TR_XM_PHPDW 1 1.18 3.33 0.00 118 XM_H_PHPOS 1 1.18 3.33 0.00 119 TR_XM_PHPForged 1 1.18 3.33 0.00 120 RCVD_IN_MSPIKE_H4 1 4.71 3.33 5.45 121 XM_SPF_SoftFail 1 3.53 3.33 3.64 122 BOUNCE_MESSAGE 1 4.71 3.33 5.45 123 TR_XM_NoHeaderRelay 1 1.18 3.33 0.00 124 TR_XM_FormFill2 1 1.18 3.33 0.00 125 MONEY_FRAUD_5 1 1.18 3.33 0.00 126 TR_XM_MSPIKECOMBO2 1 1.18 3.33 0.00 127 RELAYCOUNTRY_CN 1 1.18 3.33 0.00 128 URIBL_DBL_SPAM 1 1.18 3.33 0.00 129 FROM_EXCESS_BASE64 1 1.18 3.33 0.00 130 URI_OPTOUT_3LD 1 1.18 3.33 0.00 131 T_XMDrugObfuBody_14 1 4.71 3.33 5.45 132 RELAYCOUNTRY_AU 1 1.18 3.33 0.00 133 XMSexyCombo_05 1 1.18 3.33 0.00 134 TR_LOTS_OF_MONEY3 1 1.18 3.33 0.00 135 NOT_SPAM 1 1.18 3.33 0.00 136 DKIM_ADSP_CUSTOM_MED 1 1.18 3.33 0.00 137 T_XMDrugObfuBody_03 1 1.18 3.33 0.00 138 XM_SendGrid 1 1.18 3.33 0.00 139 RELAYCOUNTRY_NO 1 1.18 3.33 0.00 140 TR_XM_MaxSPIKE 1 1.18 3.33 0.00 141 RELAYCOUNTRY_CI 1 1.18 3.33 0.00 142 FSL_BULK_SIG 1 1.18 3.33 0.00 143 HK_RANDOM_FROM 1 1.18 3.33 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 50 82.35 66.67 90.91 2 DKIM_SIGNED 41 74.12 73.33 74.55 3 RELAYCOUNTRY_US 40 72.94 73.33 72.73 4 DKIM_VALID 39 70.59 70.00 70.91 5 XM_DK_Pass 39 70.59 70.00 70.91 6 HTML_MESSAGE 36 74.12 90.00 65.45 7 DKIM_VALID_AU 36 61.18 53.33 65.45 8 BAYES_50 28 48.24 43.33 50.91 9 XM_B_SpammyWords 27 48.24 46.67 49.09 10 XM_B_Unicode 24 52.94 70.00 43.64 11 XMSubLong 23 29.41 6.67 41.82 12 DKIM_VALID_EF 22 34.12 23.33 40.00 13 RCVD_IN_MSPIKE_WL 17 27.06 20.00 30.91 14 XMListUnsubscribeExists 17 43.53 66.67 30.91 15 FVGT_m_MULTI_ODD 16 31.76 36.67 29.09 16 MIME_HTML_ONLY 16 32.94 40.00 29.09 17 XM_B_Unicode3 14 29.41 36.67 25.45 18 T_KAM_HTML_FONT_INVALID 11 16.47 10.00 20.00 19 RCVD_IN_MSPIKE_H3 11 18.82 16.67 20.00 20 ALL_TRUSTED 10 11.76 0.00 18.18 21 XM_Body_Dirty_Words 10 17.65 16.67 18.18 22 T_TM2_M_HEADER_IN_MSG 9 17.65 20.00 16.36 23 XM_Multi_Part_URI 9 14.12 10.00 16.36 24 IN_ZIMBRA_NJ_WHITELIST 9 10.59 0.00 16.36 25 HTML_FONT_LOW_CONTRAST 9 21.18 30.00 16.36 26 XM_B_Unsub 8 15.29 16.67 14.55 27 TR_XM_BayesUnsub 8 15.29 16.67 14.55 28 T_TooManySym_01 8 9.41 0.00 14.55 29 XMLngstWrd_00 6 10.59 10.00 10.91 30 XM_B_SpammyWords2 6 15.29 23.33 10.91 31 HTML_IMAGE_ONLY_28 6 7.06 0.00 10.91 32 BAYES_00 6 7.06 0.00 10.91 33 RELAYCOUNTRY_META 6 17.65 30.00 10.91 34 T_TooManySym_02 6 7.06 0.00 10.91 35 T_REMOTE_IMAGE 6 7.06 0.00 10.91 36 XMNumbers 5 5.88 0.00 9.09 37 HTML_MIME_NO_HTML_TAG 5 10.59 13.33 9.09 38 LOC_TINY_FONT_1 5 16.47 30.00 9.09 39 TR_XM_DK_Unsub 5 9.41 10.00 9.09 40 BAYES_40 5 5.88 0.00 9.09 41 XMLngstWrd_01 5 9.41 10.00 9.09 42 DCC_CHECK 5 17.65 33.33 9.09 43 RCVD_IN_MSPIKE_H2 4 11.76 20.00 7.27 44 HTML_IMAGE_RATIO_04 4 7.06 6.67 7.27 45 XM_PDF 4 4.71 0.00 7.27 46 T_OBFU_PDF_ATTACH 4 4.71 0.00 7.27 47 TM2_M_VERY_LONG_WORD 4 8.24 10.00 7.27 48 TR_XM_DK_Bayes 4 4.71 0.00 7.27 49 LOTS_OF_MONEY 4 8.24 10.00 7.27 50 BAYES_60 4 9.41 13.33 7.27 51 LotsOfNums_01 4 7.06 6.67 7.27 52 TR_XM_DK_Bayes1 4 4.71 0.00 7.27 53 INVALID_MSGID 4 4.71 0.00 7.27 54 MPART_ALT_DIFF 4 9.41 13.33 7.27 55 TR_XM_DK_Bayes2 4 4.71 0.00 7.27 56 XMLngstWrd_04 3 7.06 10.00 5.45 57 XM_GoogleGroups 3 9.41 16.67 5.45 58 XM_DK_Undo_01 3 5.88 6.67 5.45 59 TVD_SPACE_RATIO 3 3.53 0.00 5.45 60 BOUNCE_MESSAGE 3 4.71 3.33 5.45 61 RCVD_IN_MSPIKE_H4 3 4.71 3.33 5.45 62 XMLngstWrd_02 3 7.06 10.00 5.45 63 BAYES_05 3 3.53 0.00 5.45 64 T_XMDrugObfuBody_14 3 4.71 3.33 5.45 65 HTML_TITLE_SUBJ_DIFF 3 7.06 10.00 5.45 66 TooManyTo_001 3 9.41 16.67 5.45 67 RCVD_IN_MSPIKE_H5 3 3.53 0.00 5.45 68 GMD_PDF_SQUARE 3 3.53 0.00 5.45 69 UNPARSEABLE_RELAY 3 8.24 13.33 5.45 70 UNTRUSTED_Relay 3 10.59 20.00 5.45 71 MIME_HTML_ONLY_MULTI 3 7.06 10.00 5.45 72 TR_XM_SpammyWords4 3 5.88 6.67 5.45 73 XMLongAddy 3 3.53 0.00 5.45 74 XMLngstWrd_03 3 7.06 10.00 5.45 75 T_XMDrugObfuBody_08 3 3.53 0.00 5.45 76 BAYES_99 3 14.12 30.00 5.45 77 ANY_BOUNCE_MESSAGE 3 4.71 3.33 5.45 78 FROM_GOV_DKIM_AU 3 3.53 0.00 5.45 79 XM_H_Long_From03 3 3.53 0.00 5.45 80 BAYES_80 3 7.06 10.00 5.45 81 UPPERCASE_75_100 3 7.06 10.00 5.45 82 FVGT_m_MULTI_ODD_EMAIL 2 2.35 0.00 3.64 83 XM_Evil_Numbers_Gen 2 4.71 6.67 3.64 84 XM_DKIMWhitelistDomains 2 2.35 0.00 3.64 85 KHOP_HELO_FCRDNS 2 2.35 0.00 3.64 86 XM_SPF_SoftFail 2 3.53 3.33 3.64 87 XM_UncommonTLD01 2 4.71 6.67 3.64 88 HTML_FONT_SIZE_LARGE 2 2.35 0.00 3.64 89 TO_MALFORMED 2 2.35 0.00 3.64 90 DEAR_SOMETHING 2 2.35 0.00 3.64 91 XMHTMLBadTable_001 2 2.35 0.00 3.64 92 XM_B_Investor 2 5.88 10.00 3.64 93 MIME_HTML_MOSTLY 2 7.06 13.33 3.64 94 DKIM_INVALID 2 3.53 3.33 3.64 95 BAYES_999 2 8.24 16.67 3.64 96 XM_UB50 2 8.24 16.67 3.64 97 XM_B_Unsub2 2 2.35 0.00 3.64 98 RELAYCOUNTRY_CA 2 2.35 0.00 3.64 99 T_TooManySym_03 2 2.35 0.00 3.64 100 BODY_ENHANCEMENT2 2 2.35 0.00 3.64 101 MSGID_NOFQDN1 2 2.35 0.00 3.64 102 BAYES_95 2 3.53 3.33 3.64 103 TR_XM_SpammyWords5 2 2.35 0.00 3.64 104 XM_H_Trusted_IP 1 1.18 0.00 1.82 105 RCVD_IN_RP_SAFE 1 1.18 0.00 1.82 106 MAILING_LIST_MULTI 1 3.53 6.67 1.82 107 DIET_1 1 1.18 0.00 1.82 108 RELAYCOUNTRY_NL 1 1.18 0.00 1.82 109 TR_XM_MSPIKECOMBO 1 3.53 6.67 1.82 110 LONG_JUNK_URI 1 1.18 0.00 1.82 111 XMSubMetaSxObfu_03 1 1.18 0.00 1.82 112 RELAYCOUNTRY_BG 1 1.18 0.00 1.82 113 XMGappySubj_01 1 1.18 0.00 1.82 114 URI_DOTEDU 1 1.18 0.00 1.82 115 HTML_FONT_FACE_BAD 1 1.18 0.00 1.82 116 RCVD_IN_MSPIKE_BL 1 3.53 6.67 1.82 117 XMSubMetaSx_00 1 5.88 13.33 1.82 118 UPPERCASE_50_75 1 1.18 0.00 1.82 119 HTML_FONT_SIZE_HUGE 1 1.18 0.00 1.82 120 BAYES_20 1 1.18 0.00 1.82 121 TO_NO_BRKTS_HTML_ONLY 1 1.18 0.00 1.82 122 TR_XM_SpammyRelay 1 8.24 20.00 1.82 123 XM_H_PHPMailer 1 1.18 0.00 1.82 124 GMD_PDF_HORIZ 1 1.18 0.00 1.82 125 T_XMHurry_00 1 8.24 20.00 1.82 126 XMDiploma_00 1 1.18 0.00 1.82 127 XM_ProductURIs 1 1.18 0.00 1.82 128 LONG_JUNK_URI3 1 1.18 0.00 1.82 129 USER_IN_DEF_DKIM_WL 1 1.18 0.00 1.82 130 TooManyTo_002 1 3.53 6.67 1.82 131 RCVD_IN_MSPIKE_L4 1 1.18 0.00 1.82 132 RELAYCOUNTRY_IT 1 1.18 0.00 1.82 133 XM_H_Long_From01 1 2.35 3.33 1.82 134 XM_DIRTYINTL 1 2.35 3.33 1.82 135 XM_UB60 1 1.18 0.00 1.82 136 TR_XMSubLong 1 1.18 0.00 1.82 137 RCVD_IN_RP_CERTIFIED 1 1.18 0.00 1.82 138 HTML_IMAGE_RATIO_08 1 1.18 0.00 1.82 139 FILL_THIS_FORM 1 1.18 0.00 1.82 140 BOTNET_IPINHOSTNAME 1 10.59 26.67 1.82 141 MIME_QP_LONG_LINE 1 1.18 0.00 1.82 142 RELAYCOUNTRY_GB 1 2.35 3.33 1.82 143 XM_DK_Undo_02 1 9.41 23.33 1.82 144 HTML_IMAGE_RATIO_02 1 3.53 6.67 1.82 ----------------------------------------------------------------------