Email: 70 Autolearn: 0 AvgScore: 1.67 AvgScanTime: 4.25 sec Spam: 17 Autolearn: 0 AvgScore: 13.24 AvgScanTime: 3.12 sec Ham: 53 Autolearn: 0 AvgScore: -2.04 AvgScanTime: 4.61 sec Time Spent Running SA: 0.08 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 14 78.57 82.35 77.36 2 DCC_CHECK_NEGATIVE 13 87.14 76.47 90.57 3 DKIM_SIGNED 13 65.71 76.47 62.26 4 XM_B_Unicode 12 51.43 70.59 45.28 5 RELAYCOUNTRY_US 12 74.29 70.59 75.47 6 XM_B_SpammyWords 11 37.14 64.71 28.30 7 RCVD_IN_MSPIKE_H2 10 27.14 58.82 16.98 8 DKIM_VALID 9 54.29 52.94 54.72 9 XM_DK_Pass 9 55.71 52.94 56.60 10 XM_B_Unicode3 7 30.00 41.18 26.42 11 XM_Multi_Part_URI 7 17.14 41.18 9.43 12 BAYES_50 7 47.14 41.18 49.06 13 XMListUnsubscribeExists 6 22.86 35.29 18.87 14 UNPARSEABLE_RELAY 6 18.57 35.29 13.21 15 LOC_TINY_FONT_1 6 18.57 35.29 13.21 16 FVGT_m_MULTI_ODD 6 18.57 35.29 13.21 17 XM_B_Unsub 6 11.43 35.29 3.77 18 DKIM_VALID_AU 6 47.14 35.29 50.94 19 MIME_HTML_ONLY 5 22.86 29.41 20.75 20 BAYES_99 5 7.14 29.41 0.00 21 TR_XM_UnparsRelay 5 10.00 29.41 3.77 22 TR_XM_BayesUnsub 5 10.00 29.41 3.77 23 HTML_IMAGE_RATIO_06 5 11.43 29.41 5.66 24 XM_Body_Dirty_Words 5 14.29 29.41 9.43 25 UNTRUSTED_Relay 4 7.14 23.53 1.89 26 BAYES_80 4 10.00 23.53 5.66 27 XM_B_SpammyWords2 4 11.43 23.53 7.55 28 XM_UB50 4 5.71 23.53 0.00 29 BOTNET_IPINHOSTNAME 4 8.57 23.53 3.77 30 DCC_CHECK 4 12.86 23.53 9.43 31 DKIM_INVALID 4 11.43 23.53 7.55 32 RELAYCOUNTRY_META 4 14.29 23.53 11.32 33 HTML_FONT_LOW_CONTRAST 4 21.43 23.53 20.75 34 RCVD_IN_BL_SPAMCOP_NET 3 4.29 17.65 0.00 35 BOTNET 3 7.14 17.65 3.77 36 XM_DK_Undo_02 3 7.14 17.65 3.77 37 DKIM_VALID_EF 3 34.29 17.65 39.62 38 TR_XM_MSPIKECOMBO 2 2.86 11.76 0.00 39 TR_XM_SpammyRelay 2 7.14 11.76 5.66 40 TR_XM_PHPForged 2 2.86 11.76 0.00 41 TR_XM_FormFill2 2 2.86 11.76 0.00 42 RCVD_IN_VALIDITY_RPBL 2 2.86 11.76 0.00 43 XM_H_PHPOS 2 2.86 11.76 0.00 44 TR_XM_PHPDW 2 2.86 11.76 0.00 45 XMSexyCombo_05 2 4.29 11.76 1.89 46 TRANSFORM_LIFE 2 2.86 11.76 0.00 47 RCVD_IN_MSPIKE_BL 2 2.86 11.76 0.00 48 RCVD_IN_MSPIKE_L5 2 2.86 11.76 0.00 49 RCVD_IN_MSPIKE_WL 2 18.57 11.76 20.75 50 RCVD_IN_MSPIKE_H3 2 17.14 11.76 18.87 51 TR_XM_DKIM_Undo 2 5.71 11.76 3.77 52 T_KAM_HTML_FONT_INVALID 2 10.00 11.76 9.43 53 BAYES_999 2 2.86 11.76 0.00 54 T_TM2_M_HEADER_IN_MSG 2 18.57 11.76 20.75 55 CK_HELO_GENERIC 1 1.43 5.88 0.00 56 BOTNET_NORDNS 1 1.43 5.88 0.00 57 KHOP_HELO_FCRDNS 1 1.43 5.88 0.00 58 TR_Sbj_FN_Bdy 1 1.43 5.88 0.00 59 XM_B_Unsub2 1 2.86 5.88 1.89 60 XMDiploma_00 1 2.86 5.88 1.89 61 DEAR_FRIEND 1 1.43 5.88 0.00 62 MIME_HTML_MOSTLY 1 1.43 5.88 0.00 63 RCVD_IN_PSBL 1 1.43 5.88 0.00 64 XM_UncommonTLD01 1 8.57 5.88 9.43 65 FSL_HELO_NON_FQDN_1 1 1.43 5.88 0.00 66 MIME_QP_LONG_LINE 1 2.86 5.88 1.89 67 RELAYCOUNTRY_FR 1 1.43 5.88 0.00 68 XM_H_Undi_Recip 1 1.43 5.88 0.00 69 HELO_NO_DOMAIN 1 1.43 5.88 0.00 70 TR_XM_PhishingBody 1 2.86 5.88 1.89 71 TR_XM_SPAMCOP 1 1.43 5.88 0.00 72 TR_XM_SpammyWords5 1 1.43 5.88 0.00 73 FSL_BULK_SIG 1 4.29 5.88 3.77 74 XMNumbers 1 4.29 5.88 3.77 75 XM_TLDProd1 1 1.43 5.88 0.00 76 TooManyTo_001 1 10.00 5.88 11.32 77 XMGenDplmaNmb 1 2.86 5.88 1.89 78 XMSubject_40 1 1.43 5.88 0.00 79 TR_Caps_n_Bayes_80 1 1.43 5.88 0.00 80 RELAYCOUNTRY_VN 1 1.43 5.88 0.00 81 XM_H_PHPMailer 1 1.43 5.88 0.00 82 SHOPIFY_IMG_NOT_RCVD_SFY 1 1.43 5.88 0.00 83 TR_XM_MSPIKECOMBO2 1 1.43 5.88 0.00 84 DRUGS_ERECTILE 1 1.43 5.88 0.00 85 HTML_IMAGE_RATIO_02 1 2.86 5.88 1.89 86 UNDISC_MONEY 1 1.43 5.88 0.00 87 XM_H_Long_From03 1 1.43 5.88 0.00 88 BAYES_40 1 8.57 5.88 9.43 89 XM_DIRTYINTL 1 4.29 5.88 3.77 90 T_FILL_THIS_FORM_SHORT 1 1.43 5.88 0.00 91 IMPOTENCE 1 1.43 5.88 0.00 92 RELAYCOUNTRY_NL 1 1.43 5.88 0.00 93 FROM_GOV_DKIM_AU 1 1.43 5.88 0.00 94 YOU_INHERIT 1 1.43 5.88 0.00 95 XM_H_PHPOS_M 1 1.43 5.88 0.00 96 XMSubLong 1 12.86 5.88 15.09 97 XM_B_Phish66 1 2.86 5.88 1.89 98 TR_XM_INV_DKIM 1 1.43 5.88 0.00 99 LONG_JUNK_URI3 1 1.43 5.88 0.00 100 XM_B_SpammyWords3 1 4.29 5.88 3.77 101 LotsOfNums_01 1 4.29 5.88 3.77 102 XM_B_Phish_Phrases 1 4.29 5.88 3.77 103 XM_SendGrid 1 7.14 5.88 7.55 104 TR_XM_DK_Unsub 1 7.14 5.88 7.55 105 FILL_THIS_FORM 1 1.43 5.88 0.00 106 XM_Superlative01 1 1.43 5.88 0.00 107 RELAYCOUNTRY_AU 1 2.86 5.88 1.89 108 XMSolicitRefs_0 1 1.43 5.88 0.00 109 URIBL_MW_SURBL 1 1.43 5.88 0.00 110 FILL_THIS_FORM_LONG 1 1.43 5.88 0.00 111 RELAYCOUNTRY_NO 1 1.43 5.88 0.00 112 XM_B_SpammyTLD 1 2.86 5.88 1.89 113 HELO_NODOT 1 1.43 5.88 0.00 114 SUBJ_ALL_CAPS 1 5.71 5.88 5.66 115 XM_Evil_Numbers_Gen 1 4.29 5.88 3.77 116 TR_DCC_Bayes_99 1 1.43 5.88 0.00 117 LongTLD 1 1.43 5.88 0.00 118 MPART_ALT_DIFF_COUNT 1 2.86 5.88 1.89 119 XM_TLDProd2 1 1.43 5.88 0.00 120 XM_RXBody 1 1.43 5.88 0.00 121 XMDateMe_00 1 1.43 5.88 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 48 87.14 76.47 90.57 2 HTML_MESSAGE 41 78.57 82.35 77.36 3 RELAYCOUNTRY_US 40 74.29 70.59 75.47 4 DKIM_SIGNED 33 65.71 76.47 62.26 5 XM_DK_Pass 30 55.71 52.94 56.60 6 DKIM_VALID 29 54.29 52.94 54.72 7 DKIM_VALID_AU 27 47.14 35.29 50.94 8 BAYES_50 26 47.14 41.18 49.06 9 XM_B_Unicode 24 51.43 70.59 45.28 10 DKIM_VALID_EF 21 34.29 17.65 39.62 11 XM_B_SpammyWords 15 37.14 64.71 28.30 12 XM_B_Unicode3 14 30.00 41.18 26.42 13 XMStrtUSub 12 17.14 0.00 22.64 14 RCVD_IN_MSPIKE_WL 11 18.57 11.76 20.75 15 T_TM2_M_HEADER_IN_MSG 11 18.57 11.76 20.75 16 HTML_FONT_LOW_CONTRAST 11 21.43 23.53 20.75 17 MIME_HTML_ONLY 11 22.86 29.41 20.75 18 XM_CamelCaseFrm001 10 14.29 0.00 18.87 19 RCVD_IN_MSPIKE_H3 10 17.14 11.76 18.87 20 ALL_TRUSTED 10 14.29 0.00 18.87 21 XMListUnsubscribeExists 10 22.86 35.29 18.87 22 TM2_M_HAS_BSLASH_URI 9 12.86 0.00 16.98 23 RCVD_IN_MSPIKE_H2 9 27.14 58.82 16.98 24 XMSubLong 8 12.86 5.88 15.09 25 BAYES_60 7 10.00 0.00 13.21 26 UNPARSEABLE_RELAY 7 18.57 35.29 13.21 27 LOC_TINY_FONT_1 7 18.57 35.29 13.21 28 FVGT_m_MULTI_ODD 7 18.57 35.29 13.21 29 BAYES_00 7 10.00 0.00 13.21 30 RELAYCOUNTRY_META 6 14.29 23.53 11.32 31 TooManyTo_001 6 10.00 5.88 11.32 32 XM_Body_Dirty_Words 5 14.29 29.41 9.43 33 BAYES_40 5 8.57 5.88 9.43 34 T_KAM_HTML_FONT_INVALID 5 10.00 11.76 9.43 35 XM_UncommonTLD01 5 8.57 5.88 9.43 36 IN_ZIMBRA_NJ_WHITELIST 5 7.14 0.00 9.43 37 DCC_CHECK 5 12.86 23.53 9.43 38 XM_Multi_Part_URI 5 17.14 41.18 9.43 39 INVALID_MSGID 4 5.71 0.00 7.55 40 XM_H_Trusted_IP 4 5.71 0.00 7.55 41 HTML_FONT_FACE_BAD 4 5.71 0.00 7.55 42 TO_MALFORMED 4 5.71 0.00 7.55 43 TR_XM_DK_Unsub 4 7.14 5.88 7.55 44 XM_SendGrid 4 7.14 5.88 7.55 45 XM_DKIMWhitelistDomains 4 5.71 0.00 7.55 46 MSGID_NOFQDN1 4 5.71 0.00 7.55 47 DKIM_INVALID 4 11.43 23.53 7.55 48 XM_B_SpammyWords2 4 11.43 23.53 7.55 49 HTML_MIME_NO_HTML_TAG 4 5.71 0.00 7.55 50 T_TooManySym_02 3 4.29 0.00 5.66 51 MAILING_LIST_MULTI 3 4.29 0.00 5.66 52 BAYES_05 3 4.29 0.00 5.66 53 TR_XM_DK_Bayes 3 4.29 0.00 5.66 54 TR_XM_DK_Bayes2 3 4.29 0.00 5.66 55 SUBJ_ALL_CAPS 3 5.71 5.88 5.66 56 HTML_IMAGE_RATIO_04 3 4.29 0.00 5.66 57 MPART_ALT_DIFF 3 4.29 0.00 5.66 58 BAYES_80 3 10.00 23.53 5.66 59 T_REMOTE_IMAGE 3 4.29 0.00 5.66 60 T_TooManySym_01 3 4.29 0.00 5.66 61 TR_XM_DK_Bayes1 3 4.29 0.00 5.66 62 TR_XM_SpammyRelay 3 7.14 11.76 5.66 63 HTML_IMAGE_RATIO_06 3 11.43 29.41 5.66 64 T_TooManySym_03 3 4.29 0.00 5.66 65 XM_PDF 2 2.86 0.00 3.77 66 XM_B_Phish_Phrases 2 4.29 5.88 3.77 67 LotsOfNums_01 2 4.29 5.88 3.77 68 XM_B_SpammyWords3 2 4.29 5.88 3.77 69 XM_DIRTYINTL 2 4.29 5.88 3.77 70 MIME_HTML_ONLY_MULTI 2 2.86 0.00 3.77 71 XM_Evil_Numbers_Gen 2 4.29 5.88 3.77 72 TR_XM_DKIM_Undo 2 5.71 11.76 3.77 73 T_XMDrugObfuBody_08 2 2.86 0.00 3.77 74 ANY_BOUNCE_MESSAGE 2 2.86 0.00 3.77 75 TVD_SPACE_RATIO 2 2.86 0.00 3.77 76 RELAYCOUNTRY_IT 2 2.86 0.00 3.77 77 FVGT_m_MULTI_ODD_EMAIL 2 2.86 0.00 3.77 78 XM_ZIP 2 2.86 0.00 3.77 79 BOTNET 2 7.14 17.65 3.77 80 TR_XM_BayesUnsub 2 10.00 29.41 3.77 81 IN_HORDE_ADDRESS_BOOK 2 2.86 0.00 3.77 82 TR_XM_UnparsRelay 2 10.00 29.41 3.77 83 XM_DK_Undo_02 2 7.14 17.65 3.77 84 XM_B_Unsub 2 11.43 35.29 3.77 85 BOUNCE_MESSAGE 2 2.86 0.00 3.77 86 BOTNET_IPINHOSTNAME 2 8.57 23.53 3.77 87 USER_IN_DEF_DKIM_WL 2 2.86 0.00 3.77 88 FSL_BULK_SIG 2 4.29 5.88 3.77 89 XMNumbers 2 4.29 5.88 3.77 90 RCVD_IN_VALIDITY_CERTIFIED 1 1.43 0.00 1.89 91 RCVD_IN_MSPIKE_H4 1 1.43 0.00 1.89 92 XMReplyNow 1 1.43 0.00 1.89 93 XM_URI_RBL 1 1.43 0.00 1.89 94 SUBJ_BUY 1 1.43 0.00 1.89 95 XM_B_Phish66 1 2.86 5.88 1.89 96 BAYES_95 1 1.43 0.00 1.89 97 RELAYCOUNTRY_RO 1 1.43 0.00 1.89 98 TM2_M_VERY_LONG_WORD 1 1.43 0.00 1.89 99 XM_Body_Obfu01 1 1.43 0.00 1.89 100 HTML_IMAGE_RATIO_02 1 2.86 5.88 1.89 101 FROM_GOV_SPOOF 1 1.43 0.00 1.89 102 XMLngstWrd_00 1 1.43 0.00 1.89 103 XM_H_Long_From01 1 1.43 0.00 1.89 104 MPART_ALT_DIFF_COUNT 1 2.86 5.88 1.89 105 T_XMDrugObfuBody_14 1 1.43 0.00 1.89 106 NICE_REPLY_A 1 1.43 0.00 1.89 107 XM_B_DNDMA 1 1.43 0.00 1.89 108 SpammyFromTLD_01 1 1.43 0.00 1.89 109 RELAYCOUNTRY_GB 1 1.43 0.00 1.89 110 XMNoVowels 1 1.43 0.00 1.89 111 XM_B_SpammyTLD 1 2.86 5.88 1.89 112 RCVD_IN_VALIDITY_SAFE 1 1.43 0.00 1.89 113 XM_UB80 1 1.43 0.00 1.89 114 XMHTML_After_End 1 1.43 0.00 1.89 115 LOTS_OF_MONEY 1 1.43 0.00 1.89 116 RELAYCOUNTRY_AU 1 2.86 5.88 1.89 117 HDRS_MISSP 1 1.43 0.00 1.89 118 TM2_M_URI_OPT_OUT 1 1.43 0.00 1.89 119 MIME_QP_LONG_LINE 1 2.86 5.88 1.89 120 UNTRUSTED_Relay 1 7.14 23.53 1.89 121 TR_XM_SpammyWords4 1 1.43 0.00 1.89 122 TR_XM_PhishingBody 1 2.86 5.88 1.89 123 XM_DK_Undo_01 1 1.43 0.00 1.89 124 XMDiploma_00 1 2.86 5.88 1.89 125 XM_Walgreens_Forge 1 1.43 0.00 1.89 126 HTML_EXTRA_CLOSE 1 1.43 0.00 1.89 127 PLING_QUERY 1 1.43 0.00 1.89 128 XM_B_Unsub2 1 2.86 5.88 1.89 129 TooManyTo_002 1 1.43 0.00 1.89 130 HTML_IMAGE_ONLY_12 1 1.43 0.00 1.89 131 RELAYCOUNTRY_CA 1 1.43 0.00 1.89 132 XM_GoogleGroups 1 1.43 0.00 1.89 133 TR_BOTNET_NEGATE 1 1.43 0.00 1.89 134 TR_XM_DK_SendGrid 1 1.43 0.00 1.89 135 BAYES_20 1 1.43 0.00 1.89 136 XMGenDplmaNmb 1 2.86 5.88 1.89 137 GMD_PDF_HORIZ 1 1.43 0.00 1.89 138 HTML_IMAGE_RATIO_08 1 1.43 0.00 1.89 139 XMSexyCombo_05 1 4.29 11.76 1.89 ----------------------------------------------------------------------