Email: 66 Autolearn: 0 AvgScore: 5.62 AvgScanTime: 3.82 sec Spam: 31 Autolearn: 0 AvgScore: 11.81 AvgScanTime: 3.50 sec Ham: 35 Autolearn: 0 AvgScore: 0.14 AvgScanTime: 4.11 sec Time Spent Running SA: 0.07 hours Time Spent Processing Spam: 0.03 hours Time Spent Processing Ham: 0.04 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 28 84.85 90.32 80.00 2 DKIM_SIGNED 27 80.30 87.10 74.29 3 XM_DK_Pass 26 75.76 83.87 68.57 4 XM_B_Unicode 25 65.15 80.65 51.43 5 RELAYCOUNTRY_US 25 77.27 80.65 74.29 6 XMListUnsubscribeExists 25 54.55 80.65 31.43 7 DCC_CHECK 23 40.91 74.19 11.43 8 LOC_TINY_FONT_1 22 45.45 70.97 22.86 9 BAYES_50 21 66.67 67.74 65.71 10 XMSubLong 20 40.91 64.52 20.00 11 HTML_FONT_LOW_CONTRAST 20 51.52 64.52 40.00 12 XM_B_Unicode3 19 42.42 61.29 25.71 13 XM_Multi_Part_URI 18 40.91 58.06 25.71 14 DKIM_INVALID 17 30.30 54.84 8.57 15 LotsOfNums_01 16 28.79 51.61 8.57 16 XMSubMetaSx_00 16 24.24 51.61 0.00 17 XM_B_REG_HTML 14 21.21 45.16 0.00 18 DKIM_VALID 10 50.00 32.26 65.71 19 XM_B_SpammyWords 9 34.85 29.03 40.00 20 DKIM_VALID_AU 8 42.42 25.81 57.14 21 DCC_CHECK_NEGATIVE 8 59.09 25.81 88.57 22 RELAYCOUNTRY_META 7 16.67 22.58 11.43 23 XM_DK_Undo_02 7 13.64 22.58 5.71 24 TR_XM_SpammyRelay 6 12.12 19.35 5.71 25 RCVD_IN_MSPIKE_H2 5 13.64 16.13 11.43 26 XM_B_SpammyWords2 5 15.15 16.13 14.29 27 BAYES_99 5 10.61 16.13 5.71 28 TR_XM_DKIM_Undo 4 6.06 12.90 0.00 29 FVGT_m_MULTI_ODD 4 21.21 12.90 28.57 30 T_KAM_HTML_FONT_INVALID 3 16.67 9.68 22.86 31 SUBJ_ALL_CAPS 3 4.55 9.68 0.00 32 DKIM_VALID_EF 3 19.70 9.68 28.57 33 RCVD_IN_MSPIKE_WL 3 27.27 9.68 42.86 34 MIME_HTML_ONLY 3 10.61 9.68 11.43 35 UPGRADE_MAILBOX 3 4.55 9.68 0.00 36 UNTRUSTED_Relay 3 6.06 9.68 2.86 37 XM_Body_Dirty_Words 3 15.15 9.68 20.00 38 RCVD_IN_MSPIKE_H3 3 19.70 9.68 28.57 39 BAYES_80 3 4.55 9.68 0.00 40 FSL_BULK_SIG 3 6.06 9.68 2.86 41 BAYES_999 3 7.58 9.68 5.71 42 XM_B_Unsub 2 10.61 6.45 14.29 43 TR_XM_DK_Unsub 2 6.06 6.45 5.71 44 RELAYCOUNTRY_AU 2 4.55 6.45 2.86 45 MIME_HTML_MOSTLY 2 7.58 6.45 8.57 46 T_TooManySym_02 2 6.06 6.45 5.71 47 BAYES_60 2 9.09 6.45 11.43 48 HTML_IMAGE_RATIO_02 2 4.55 6.45 2.86 49 XM_SPF_SoftFail 2 4.55 6.45 2.86 50 T_TooManySym_01 2 6.06 6.45 5.71 51 T_TooManySym_03 2 6.06 6.45 5.71 52 TR_Symld_Words 2 3.03 6.45 0.00 53 T_TM2_M_HEADER_IN_MSG 2 19.70 6.45 31.43 54 XMSexyCombo_05 2 3.03 6.45 0.00 55 XMStrtUSub 2 9.09 6.45 11.43 56 BOTNET 2 3.03 6.45 0.00 57 XM_DIRTYINTL 2 4.55 6.45 2.86 58 TR_XM_BayesUnsub 2 10.61 6.45 14.29 59 TooManyTo_001 2 7.58 6.45 8.57 60 FROM_EXCESS_BASE64 2 3.03 6.45 0.00 61 UNPARSEABLE_RELAY 2 7.58 6.45 8.57 62 MIME_QP_LONG_LINE 2 6.06 6.45 5.71 63 TR_XM_SPAMCOP 1 1.52 3.23 0.00 64 NUMERIC_HTTP_ADDR 1 1.52 3.23 0.00 65 ADVANCE_FEE_5_NEW_FRM_MNY 1 1.52 3.23 0.00 66 NA_DOLLARS 1 1.52 3.23 0.00 67 ALL_TRUSTED 1 10.61 3.23 17.14 68 WEIRD_PORT 1 1.52 3.23 0.00 69 TR_XM_SB_Phish 1 1.52 3.23 0.00 70 XM_UB99 1 1.52 3.23 0.00 71 XM_Evil_Numbers_Gen 1 4.55 3.23 5.71 72 XM_UB999 1 1.52 3.23 0.00 73 XM_H_PHPOS 1 1.52 3.23 0.00 74 XM_B_SpammyWords3 1 1.52 3.23 0.00 75 RELAYCOUNTRY_ID 1 1.52 3.23 0.00 76 T_TooManySym_04 1 1.52 3.23 0.00 77 FONT_INVIS_MSGID 1 1.52 3.23 0.00 78 HTML_FONT_TINY_NORDNS 1 1.52 3.23 0.00 79 RCVD_IN_BL_SPAMCOP_NET 1 1.52 3.23 0.00 80 MONEY_FORM 1 1.52 3.23 0.00 81 URI_PHISH 1 1.52 3.23 0.00 82 RELAYCOUNTRY_PL 1 1.52 3.23 0.00 83 TR_XM_PHPDW 1 1.52 3.23 0.00 84 HTML_FONT_SIZE_HUGE 1 1.52 3.23 0.00 85 RELAYCOUNTRY_IE 1 1.52 3.23 0.00 86 HTML_TAG_BALANCE_BODY 1 1.52 3.23 0.00 87 TR_XM_MaxWHORU 1 1.52 3.23 0.00 88 DKIM_ADSP_NXDOMAIN 1 1.52 3.23 0.00 89 RELAYCOUNTRY_MY 1 1.52 3.23 0.00 90 SpammyFromTLD_01 1 1.52 3.23 0.00 91 TR_XM_FormFill2 1 1.52 3.23 0.00 92 MPART_ALT_DIFF 1 1.52 3.23 0.00 93 XM_B_SpammyTLD 1 3.03 3.23 2.86 94 TR_Caps_n_Bayes_80 1 1.52 3.23 0.00 95 XMSubMetaI_00 1 1.52 3.23 0.00 96 LOTS_OF_MONEY 1 4.55 3.23 5.71 97 URG_BIZ 1 1.52 3.23 0.00 98 T_FILL_THIS_FORM_SHORT 1 1.52 3.23 0.00 99 TR_XM_SpammyWords2 1 1.52 3.23 0.00 100 XM_OfRef6 1 1.52 3.23 0.00 101 XM_OfRef7 1 1.52 3.23 0.00 102 FBI_MONEY 1 1.52 3.23 0.00 103 FILL_THIS_FORM 1 1.52 3.23 0.00 104 XMSubPhish3 1 1.52 3.23 0.00 105 XM_OfRef8 1 1.52 3.23 0.00 106 TR_XM_NoHeaderRelay 1 1.52 3.23 0.00 107 TR_XM_InvalidRelay 1 1.52 3.23 0.00 108 URI_WPADMIN 1 1.52 3.23 0.00 109 TR_XM_PHPForged 1 1.52 3.23 0.00 110 XMNumbers 1 4.55 3.23 5.71 111 INVALID_MSGID 1 4.55 3.23 5.71 112 TVD_PH_BODY_ACCOUNTS_PRE 1 1.52 3.23 0.00 113 BOTNET_IPINHOSTNAME 1 7.58 3.23 11.43 114 RELAYCOUNTRY_DE 1 3.03 3.23 2.86 115 XM_CamelCaseFrm001 1 3.03 3.23 2.86 116 HTML_IMAGE_RATIO_04 1 7.58 3.23 11.43 117 PDS_FRNOM_TODOM_NAKED_TO 1 1.52 3.23 0.00 118 XM_UncommonTLD01 1 6.06 3.23 8.57 119 XM_URI_RBL 1 1.52 3.23 0.00 120 XM_UB80 1 1.52 3.23 0.00 121 XM_SendGrid 1 3.03 3.23 2.86 122 XM_UB50 1 1.52 3.23 0.00 123 TR_XM_UnparsRelay 1 1.52 3.23 0.00 124 FBI_SPOOF 1 1.52 3.23 0.00 125 NO_DNS_FOR_FROM 1 1.52 3.23 0.00 126 TR_XM_PhishingBody 1 6.06 3.23 8.57 127 XMSubject_78 1 1.52 3.23 0.00 128 XMPhish08 1 1.52 3.23 0.00 129 TR_XM_SpammyWords5 1 1.52 3.23 0.00 130 TM2_M_URI_OPT_OUT 1 1.52 3.23 0.00 131 XM_B_FormFill 1 1.52 3.23 0.00 132 PDS_FROM_NAME_TO_DOMAIN 1 1.52 3.23 0.00 133 TR_DCC_Bayes_99 1 1.52 3.23 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 31 59.09 25.81 88.57 2 HTML_MESSAGE 28 84.85 90.32 80.00 3 RELAYCOUNTRY_US 26 77.27 80.65 74.29 4 DKIM_SIGNED 26 80.30 87.10 74.29 5 XM_DK_Pass 24 75.76 83.87 68.57 6 BAYES_50 23 66.67 67.74 65.71 7 DKIM_VALID 23 50.00 32.26 65.71 8 DKIM_VALID_AU 20 42.42 25.81 57.14 9 XM_B_Unicode 18 65.15 80.65 51.43 10 RCVD_IN_MSPIKE_WL 15 27.27 9.68 42.86 11 HTML_FONT_LOW_CONTRAST 14 51.52 64.52 40.00 12 XM_B_SpammyWords 14 34.85 29.03 40.00 13 XMListUnsubscribeExists 11 54.55 80.65 31.43 14 T_TM2_M_HEADER_IN_MSG 11 19.70 6.45 31.43 15 FVGT_m_MULTI_ODD 10 21.21 12.90 28.57 16 RCVD_IN_MSPIKE_H3 10 19.70 9.68 28.57 17 DKIM_VALID_EF 10 19.70 9.68 28.57 18 XM_Multi_Part_URI 9 40.91 58.06 25.71 19 XM_B_Unicode3 9 42.42 61.29 25.71 20 T_KAM_HTML_FONT_INVALID 8 16.67 9.68 22.86 21 LOC_TINY_FONT_1 8 45.45 70.97 22.86 22 XMSubLong 7 40.91 64.52 20.00 23 XM_Body_Dirty_Words 7 15.15 9.68 20.00 24 ALL_TRUSTED 6 10.61 3.23 17.14 25 TR_XM_BayesUnsub 5 10.61 6.45 14.29 26 XM_B_SpammyWords2 5 15.15 16.13 14.29 27 XM_DKIMWhitelistDomains 5 7.58 0.00 14.29 28 XM_B_Unsub 5 10.61 6.45 14.29 29 HTML_IMAGE_RATIO_04 4 7.58 3.23 11.43 30 BOTNET_IPINHOSTNAME 4 7.58 3.23 11.43 31 DCC_CHECK 4 40.91 74.19 11.43 32 XMStrtUSub 4 9.09 6.45 11.43 33 MIME_HTML_ONLY 4 10.61 9.68 11.43 34 BAYES_60 4 9.09 6.45 11.43 35 RCVD_IN_MSPIKE_H2 4 13.64 16.13 11.43 36 RELAYCOUNTRY_META 4 16.67 22.58 11.43 37 BAYES_00 3 4.55 0.00 8.57 38 TR_XM_PhishingBody 3 6.06 3.23 8.57 39 UNPARSEABLE_RELAY 3 7.58 6.45 8.57 40 XM_B_Phish_Phrases 3 4.55 0.00 8.57 41 XM_UncommonTLD01 3 6.06 3.23 8.57 42 TooManyTo_001 3 7.58 6.45 8.57 43 RCVD_IN_MSPIKE_H4 3 4.55 0.00 8.57 44 MIME_HTML_MOSTLY 3 7.58 6.45 8.57 45 LotsOfNums_01 3 28.79 51.61 8.57 46 DKIM_INVALID 3 30.30 54.84 8.57 47 BAYES_99 2 10.61 16.13 5.71 48 XM_ZIP 2 3.03 0.00 5.71 49 XM_B_Unsub2 2 3.03 0.00 5.71 50 TR_XM_DK_Bayes1 2 3.03 0.00 5.71 51 BAYES_999 2 7.58 9.68 5.71 52 TR_XM_SpammyWords4 2 3.03 0.00 5.71 53 MIME_QP_LONG_LINE 2 6.06 6.45 5.71 54 XM_DK_Undo_01 2 3.03 0.00 5.71 55 HTML_IMAGE_RATIO_08 2 3.03 0.00 5.71 56 TO_MALFORMED 2 3.03 0.00 5.71 57 TR_XM_DK_Bayes 2 3.03 0.00 5.71 58 XM_H_Long_From01 2 3.03 0.00 5.71 59 XM_B_Phish66 2 3.03 0.00 5.71 60 INVALID_MSGID 2 4.55 3.23 5.71 61 FVGT_m_MULTI_ODD_EMAIL 2 3.03 0.00 5.71 62 XMNumbers 2 4.55 3.23 5.71 63 T_REMOTE_IMAGE 2 3.03 0.00 5.71 64 TR_XM_SpammyRelay 2 12.12 19.35 5.71 65 RCVD_IN_MSPIKE_H5 2 3.03 0.00 5.71 66 LOTS_OF_MONEY 2 4.55 3.23 5.71 67 XM_DK_Undo_02 2 13.64 22.58 5.71 68 BAYES_40 2 3.03 0.00 5.71 69 T_TooManySym_03 2 6.06 6.45 5.71 70 TVD_RCVD_IP 2 3.03 0.00 5.71 71 TM2_M_VERY_LONG_WORD 2 3.03 0.00 5.71 72 T_TooManySym_01 2 6.06 6.45 5.71 73 T_TooManySym_02 2 6.06 6.45 5.71 74 TVD_SPACE_RATIO 2 3.03 0.00 5.71 75 XM_Evil_Numbers_Gen 2 4.55 3.23 5.71 76 MSGID_NOFQDN1 2 3.03 0.00 5.71 77 TR_XM_DK_Unsub 2 6.06 6.45 5.71 78 XM_PDF 2 3.03 0.00 5.71 79 USER_IN_DEF_DKIM_WL 2 3.03 0.00 5.71 80 XMMoneyMeta_01 1 1.52 0.00 2.86 81 RCVD_IN_IADB_SENDERID 1 1.52 0.00 2.86 82 TR_XM_DK_Bayes2 1 1.52 0.00 2.86 83 XM_B_COPY_HTML 1 1.52 0.00 2.86 84 XMLngstWrd_00 1 1.52 0.00 2.86 85 XMCapTrack 1 1.52 0.00 2.86 86 T_XMHurry_00 1 1.52 0.00 2.86 87 MAILING_LIST_MULTI 1 1.52 0.00 2.86 88 FSL_BULK_SIG 1 6.06 9.68 2.86 89 RELAYCOUNTRY_GB 1 1.52 0.00 2.86 90 MSGID_FROM_MTA_HEADER 1 1.52 0.00 2.86 91 XM_SendGrid 1 3.03 3.23 2.86 92 XMPhish14 1 1.52 0.00 2.86 93 RCVD_IN_IADB_LISTED 1 1.52 0.00 2.86 94 RCVD_IN_IADB_SPF 1 1.52 0.00 2.86 95 RELAYCOUNTRY_DE 1 3.03 3.23 2.86 96 XM_CamelCaseFrm001 1 3.03 3.23 2.86 97 IN_ZIMBRA_NJ_WHITELIST 1 1.52 0.00 2.86 98 HTML_MIME_NO_HTML_TAG 1 1.52 0.00 2.86 99 XM_DIRTYINTL 1 4.55 6.45 2.86 100 FROM_LOCAL_NOVOWEL 1 1.52 0.00 2.86 101 XMMoneyMeta_00 1 1.52 0.00 2.86 102 UNTRUSTED_Relay 1 6.06 9.68 2.86 103 XM_B_SpammyTLD 1 3.03 3.23 2.86 104 RELAYCOUNTRY_SG 1 1.52 0.00 2.86 105 XM_Body_Obfu01 1 1.52 0.00 2.86 106 XM_SPF_SoftFail 1 4.55 6.45 2.86 107 HTML_IMAGE_RATIO_02 1 4.55 6.45 2.86 108 XM_H_PHPMailer 1 1.52 0.00 2.86 109 RCVD_IN_IADB_DK 1 1.52 0.00 2.86 110 XMBSHREFv2 1 1.52 0.00 2.86 111 XMSolicitRefs_0 1 1.52 0.00 2.86 112 RELAYCOUNTRY_AU 1 4.55 6.45 2.86 113 T_OBFU_PDF_ATTACH 1 1.52 0.00 2.86 114 XMLongAddy 1 1.52 0.00 2.86 115 T_XMDrugObfuBody_08 1 1.52 0.00 2.86 116 T_XMDrugObfuBody_14 1 1.52 0.00 2.86 117 BAYES_05 1 1.52 0.00 2.86 ----------------------------------------------------------------------