Email: 51 Autolearn: 0 AvgScore: 2.45 AvgScanTime: 2.92 sec Spam: 6 Autolearn: 0 AvgScore: 12.67 AvgScanTime: 6.15 sec Ham: 45 Autolearn: 0 AvgScore: 1.09 AvgScanTime: 2.49 sec Time Spent Running SA: 0.04 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 6 100.00 100.00 100.00 2 HTML_MESSAGE 6 78.43 100.00 75.56 3 RELAYCOUNTRY_US 6 76.47 100.00 73.33 4 XM_DK_Pass 5 72.55 83.33 71.11 5 RCVD_IN_MSPIKE_H2 5 39.22 83.33 33.33 6 DKIM_VALID 5 62.75 83.33 60.00 7 DKIM_SIGNED 5 72.55 83.33 71.11 8 XM_B_SpammyWords 5 58.82 83.33 55.56 9 XMListUnsubscribeExists 4 39.22 66.67 35.56 10 DKIM_VALID_AU 4 45.10 66.67 42.22 11 XM_B_SpammyWords2 4 27.45 66.67 22.22 12 FVGT_m_MULTI_ODD 4 23.53 66.67 17.78 13 BAYES_50 4 62.75 66.67 62.22 14 TR_XM_DKIM_Undo 4 9.80 66.67 2.22 15 XM_B_Unicode 4 50.98 66.67 48.89 16 XM_DK_Undo_02 4 11.76 66.67 4.44 17 HTML_FONT_LOW_CONTRAST 3 33.33 50.00 31.11 18 XM_B_SpammyWords3 3 9.80 50.00 4.44 19 MIME_HTML_ONLY 3 31.37 50.00 28.89 20 DKIM_VALID_EF 3 33.33 50.00 31.11 21 XM_Multi_Part_URI 3 17.65 50.00 13.33 22 RCVD_IN_BL_SPAMCOP_NET 2 3.92 33.33 0.00 23 BAYES_99 2 7.84 33.33 4.44 24 TR_XM_SPAMCOP 2 3.92 33.33 0.00 25 TR_XM_SpammyWords2 2 3.92 33.33 0.00 26 XM_H_Long_From01 2 13.73 33.33 11.11 27 XM_B_SpammyWords4 2 5.88 33.33 2.22 28 TR_XM_DK_Unsub 2 17.65 33.33 15.56 29 UNPARSEABLE_RELAY 2 19.61 33.33 17.78 30 NO_DNS_FOR_FROM 1 1.96 16.67 0.00 31 TO_NO_BRKTS_HTML_IMG 1 1.96 16.67 0.00 32 T_KAM_HTML_FONT_INVALID 1 9.80 16.67 8.89 33 T_TM2_M_HEADER_IN_MSG 1 29.41 16.67 31.11 34 XMLngstWrd_04 1 3.92 16.67 2.22 35 RELAYCOUNTRY_IE 1 3.92 16.67 2.22 36 XMLngstWrd_02 1 3.92 16.67 2.22 37 T_TooManySym_01 1 9.80 16.67 8.89 38 XM_B_Unicode3 1 29.41 16.67 31.11 39 XM_UncommonTLD01 1 11.76 16.67 11.11 40 TM2_M_VERY_LONG_WORD 1 3.92 16.67 2.22 41 MPART_ALT_DIFF 1 9.80 16.67 8.89 42 HTTPS_HTTP_MISMATCH 1 1.96 16.67 0.00 43 XM_S_SpammyWords 1 5.88 16.67 4.44 44 UPPERCASE_75_100 1 3.92 16.67 2.22 45 T_XMHurry_00 1 1.96 16.67 0.00 46 XM_GoogleGroups 1 3.92 16.67 2.22 47 XM_SendGrid 1 11.76 16.67 11.11 48 XMSubPhish11 1 1.96 16.67 0.00 49 TR_XM_DK_SendGrid 1 7.84 16.67 6.67 50 XMSubLong 1 17.65 16.67 17.78 51 BAYES_999 1 3.92 16.67 2.22 52 RELAYCOUNTRY_META 1 3.92 16.67 2.22 53 XM_B_Phish_Phrases 1 3.92 16.67 2.22 54 MONEY_BACK 1 5.88 16.67 4.44 55 XMLngstWrd_03 1 3.92 16.67 2.22 56 HTML_TITLE_SUBJ_DIFF 1 3.92 16.67 2.22 57 XMLngstWrd_01 1 3.92 16.67 2.22 58 XM_B_Unsub 1 13.73 16.67 13.33 59 TR_XM_BayesUnsub 1 9.80 16.67 8.89 60 TR_XM_Spammywords 1 5.88 16.67 4.44 61 XMWhlSbjSex 1 1.96 16.67 0.00 62 TR_XM_MaxWHORU 1 1.96 16.67 0.00 63 HTML_IMAGE_ONLY_16 1 1.96 16.67 0.00 64 TR_XM_SB_Phish 1 1.96 16.67 0.00 65 MIME_HTML_ONLY_MULTI 1 3.92 16.67 2.22 66 HTML_TAG_BALANCE_BODY 1 11.76 16.67 11.11 67 LOC_TINY_FONT_1 1 13.73 16.67 13.33 68 XMSubMetaI_00 1 1.96 16.67 0.00 69 XMLngstWrd_00 1 3.92 16.67 2.22 70 HTML_MIME_NO_HTML_TAG 1 3.92 16.67 2.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 45 100.00 100.00 100.00 2 HTML_MESSAGE 34 78.43 100.00 75.56 3 RELAYCOUNTRY_US 33 76.47 100.00 73.33 4 DKIM_SIGNED 32 72.55 83.33 71.11 5 XM_DK_Pass 32 72.55 83.33 71.11 6 BAYES_50 28 62.75 66.67 62.22 7 DKIM_VALID 27 62.75 83.33 60.00 8 XM_B_SpammyWords 25 58.82 83.33 55.56 9 XM_B_Unicode 22 50.98 66.67 48.89 10 DKIM_VALID_AU 19 45.10 66.67 42.22 11 XMListUnsubscribeExists 16 39.22 66.67 35.56 12 RCVD_IN_MSPIKE_H2 15 39.22 83.33 33.33 13 HTML_FONT_LOW_CONTRAST 14 33.33 50.00 31.11 14 T_TM2_M_HEADER_IN_MSG 14 29.41 16.67 31.11 15 XM_B_Unicode3 14 29.41 16.67 31.11 16 DKIM_VALID_EF 14 33.33 50.00 31.11 17 MIME_HTML_ONLY 13 31.37 50.00 28.89 18 ALL_TRUSTED 12 23.53 0.00 26.67 19 XMNumbers 10 19.61 0.00 22.22 20 XM_B_SpammyWords2 10 27.45 66.67 22.22 21 FVGT_m_MULTI_ODD 8 23.53 66.67 17.78 22 XMSubLong 8 17.65 16.67 17.78 23 BAYES_60 8 15.69 0.00 17.78 24 UNPARSEABLE_RELAY 8 19.61 33.33 17.78 25 TR_XM_DK_Unsub 7 17.65 33.33 15.56 26 LOTS_OF_MONEY 7 13.73 0.00 15.56 27 TR_XM_SpammyWords4 6 11.76 0.00 13.33 28 XM_B_Unsub 6 13.73 16.67 13.33 29 LOC_TINY_FONT_1 6 13.73 16.67 13.33 30 RCVD_IN_MSPIKE_H3 6 11.76 0.00 13.33 31 XM_Multi_Part_URI 6 17.65 50.00 13.33 32 RCVD_IN_MSPIKE_WL 6 11.76 0.00 13.33 33 XM_UncommonTLD01 5 11.76 16.67 11.11 34 XM_SendGrid 5 11.76 16.67 11.11 35 HTML_TAG_BALANCE_BODY 5 11.76 16.67 11.11 36 TR_XM_SpammyWords5 5 9.80 0.00 11.11 37 XM_H_Long_From01 5 13.73 33.33 11.11 38 DKIM_INVALID 5 9.80 0.00 11.11 39 T_KAM_HTML_FONT_INVALID 4 9.80 16.67 8.89 40 MPART_ALT_DIFF 4 9.80 16.67 8.89 41 TR_XM_BayesUnsub 4 9.80 16.67 8.89 42 T_TooManySym_01 4 9.80 16.67 8.89 43 XMBrknScrpt_02 4 7.84 0.00 8.89 44 IN_ZIMBRA_NJ_WHITELIST 3 5.88 0.00 6.67 45 TO_MALFORMED 3 5.88 0.00 6.67 46 XM_B_SpammyTLD 3 5.88 0.00 6.67 47 BOUNCE_MESSAGE 3 5.88 0.00 6.67 48 TR_XM_DK_SendGrid 3 7.84 16.67 6.67 49 BAYES_40 3 5.88 0.00 6.67 50 MSGID_NOFQDN1 3 5.88 0.00 6.67 51 ANY_BOUNCE_MESSAGE 3 5.88 0.00 6.67 52 TR_Symld_Words 3 5.88 0.00 6.67 53 INVALID_MSGID 3 5.88 0.00 6.67 54 BAYES_99 2 7.84 33.33 4.44 55 XM_B_SpammyWords3 2 9.80 50.00 4.44 56 RCVD_IN_IADB_LISTED 2 3.92 0.00 4.44 57 BAYES_00 2 3.92 0.00 4.44 58 XM_Body_Dirty_Words 2 3.92 0.00 4.44 59 HTML_IMAGE_RATIO_02 2 3.92 0.00 4.44 60 XM_S_SpammyWords 2 5.88 16.67 4.44 61 HK_RANDOM_ENVFROM 2 3.92 0.00 4.44 62 RCVD_IN_IADB_SENDERID 2 3.92 0.00 4.44 63 RCVD_IN_IADB_SPF 2 3.92 0.00 4.44 64 T_TooManySym_02 2 3.92 0.00 4.44 65 TR_XM_UnparsRelay 2 3.92 0.00 4.44 66 HTML_IMAGE_RATIO_06 2 3.92 0.00 4.44 67 XM_Evil_Numbers_Gen 2 3.92 0.00 4.44 68 XMStrtUSub 2 3.92 0.00 4.44 69 MONEY_BACK 2 5.88 16.67 4.44 70 LotsOfNums_01 2 3.92 0.00 4.44 71 MISSING_HEADERS 2 3.92 0.00 4.44 72 RCVD_IN_IADB_DK 2 3.92 0.00 4.44 73 TR_XM_Spammywords 2 5.88 16.67 4.44 74 XM_CamelCaseFrm001 2 3.92 0.00 4.44 75 HK_RANDOM_FROM 2 3.92 0.00 4.44 76 XM_DK_Undo_02 2 11.76 66.67 4.44 77 HTML_FONT_FACE_BAD 2 3.92 0.00 4.44 78 XMLngstWrd_02 1 3.92 16.67 2.22 79 TR_XM_DK_Bayes2 1 1.96 0.00 2.22 80 XMSubMetaSxObfu_02 1 1.96 0.00 2.22 81 BAYES_80 1 1.96 0.00 2.22 82 FILL_THIS_FORM 1 1.96 0.00 2.22 83 URI_NOVOWEL 1 1.96 0.00 2.22 84 XMLngstWrd_04 1 3.92 16.67 2.22 85 XM_B_Crypto 1 1.96 0.00 2.22 86 HTML_IMAGE_ONLY_28 1 1.96 0.00 2.22 87 XM_B_Phish_Phrases 1 3.92 16.67 2.22 88 XM_Dr_From 1 1.96 0.00 2.22 89 USER_IN_DEF_DKIM_WL 1 1.96 0.00 2.22 90 TooManyTo_002 1 1.96 0.00 2.22 91 HTML_IMAGE_ONLY_12 1 1.96 0.00 2.22 92 KHOP_HELO_FCRDNS 1 1.96 0.00 2.22 93 XMLngstWrd_01 1 3.92 16.67 2.22 94 HTML_TITLE_SUBJ_DIFF 1 3.92 16.67 2.22 95 TVD_PH_BODY_ACCOUNTS_PRE 1 1.96 0.00 2.22 96 HTML_IMAGE_RATIO_08 1 1.96 0.00 2.22 97 RCVD_IN_IADB_VOUCHED 1 1.96 0.00 2.22 98 XM_B_SpammyWords4 1 5.88 33.33 2.22 99 TooManyTo_001 1 1.96 0.00 2.22 100 XM_PDF 1 1.96 0.00 2.22 101 XMLngstWrd_00 1 3.92 16.67 2.22 102 TR_LOTS_OF_MONEY3 1 1.96 0.00 2.22 103 RCVD_IN_IADB_OPTIN 1 1.96 0.00 2.22 104 XMNoVowels 1 1.96 0.00 2.22 105 MIME_HTML_ONLY_MULTI 1 3.92 16.67 2.22 106 BAYES_95 1 1.96 0.00 2.22 107 XM_H_Long_From02 1 1.96 0.00 2.22 108 TM2_M_VERY_LONG_WORD 1 3.92 16.67 2.22 109 TR_XM_DK_Bayes 1 1.96 0.00 2.22 110 TVD_SPACE_RATIO 1 1.96 0.00 2.22 111 XMSubMetaSx_00 1 1.96 0.00 2.22 112 RCVD_IN_VALIDITY_CERTIFIED 1 1.96 0.00 2.22 113 RELAYCOUNTRY_IE 1 3.92 16.67 2.22 114 SpammyFromTLD_02 1 1.96 0.00 2.22 115 UPPERCASE_75_100 1 3.92 16.67 2.22 116 XM_GoogleGroups 1 3.92 16.67 2.22 117 MIME_HTML_MOSTLY 1 1.96 0.00 2.22 118 BAYES_999 1 3.92 16.67 2.22 119 RELAYCOUNTRY_META 1 3.92 16.67 2.22 120 XMLngstWrd_03 1 3.92 16.67 2.22 121 XM_H_Trusted_IP 1 1.96 0.00 2.22 122 IN_HORDE_ADDRESS_BOOK 1 1.96 0.00 2.22 123 MIME_QP_LONG_LINE 1 1.96 0.00 2.22 124 XM_DK_Undo_01 1 1.96 0.00 2.22 125 XM_Attn_01 1 1.96 0.00 2.22 126 XMSexyCombo_05 1 1.96 0.00 2.22 127 T_HTML_ATTACH 1 1.96 0.00 2.22 128 TR_Mismatch_TLD_02 1 1.96 0.00 2.22 129 T_REMOTE_IMAGE 1 1.96 0.00 2.22 130 T_XMDrugObfuBody_14 1 1.96 0.00 2.22 131 TR_XM_DK_Bayes1 1 1.96 0.00 2.22 132 RCVD_IN_VALIDITY_SAFE 1 1.96 0.00 2.22 133 HTML_MIME_NO_HTML_TAG 1 3.92 16.67 2.22 134 URI_OPTOUT_3LD 1 1.96 0.00 2.22 135 XM_H_PHPMailer 1 1.96 0.00 2.22 136 TR_XM_DKIM_Undo 1 9.80 66.67 2.22 ----------------------------------------------------------------------