Email: 23 Autolearn: 0 AvgScore: 2.35 AvgScanTime: 2.48 sec Spam: 8 Autolearn: 0 AvgScore: 11.50 AvgScanTime: 3.72 sec Ham: 15 Autolearn: 0 AvgScore: -2.53 AvgScanTime: 1.81 sec Time Spent Running SA: 0.02 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 7 95.65 87.50 100.00 2 HTML_MESSAGE 7 78.26 87.50 73.33 3 RELAYCOUNTRY_US 6 78.26 75.00 80.00 4 DKIM_SIGNED 6 69.57 75.00 66.67 5 XM_DK_Pass 6 65.22 75.00 60.00 6 RCVD_IN_MSPIKE_H3 5 47.83 62.50 40.00 7 DKIM_VALID 5 60.87 62.50 60.00 8 RCVD_IN_MSPIKE_WL 5 52.17 62.50 46.67 9 XM_DK_Undo_02 4 17.39 50.00 0.00 10 XM_B_Unicode 4 52.17 50.00 53.33 11 DKIM_VALID_AU 4 43.48 50.00 40.00 12 FVGT_m_MULTI_ODD 3 34.78 37.50 33.33 13 BAYES_50 3 52.17 37.50 60.00 14 BAYES_999 3 13.04 37.50 0.00 15 BAYES_99 3 13.04 37.50 0.00 16 TR_XM_BayesUnsub 3 21.74 37.50 13.33 17 XM_B_Unsub 3 21.74 37.50 13.33 18 XMSubPhish11 2 8.70 25.00 0.00 19 TR_XM_DKIM_Undo 2 8.70 25.00 0.00 20 XMListUnsubscribeExists 2 34.78 25.00 40.00 21 XM_Multi_Part_URI 2 21.74 25.00 20.00 22 RELAYCOUNTRY_META 2 13.04 25.00 6.67 23 MIME_HTML_ONLY 2 21.74 25.00 20.00 24 BOTNET 2 8.70 25.00 0.00 25 RDNS_DYNAMIC 2 8.70 25.00 0.00 26 XM_Body_Dirty_Words 2 13.04 25.00 6.67 27 XM_B_Phish66 2 8.70 25.00 0.00 28 PDS_RDNS_DYNAMIC_FP 2 8.70 25.00 0.00 29 XM_B_SpammyWords2 2 21.74 25.00 20.00 30 XM_B_SpammyTLD 2 8.70 25.00 0.00 31 KHOP_HELO_FCRDNS 2 13.04 25.00 6.67 32 T_TM2_M_HEADER_IN_MSG 2 21.74 25.00 20.00 33 UNPARSEABLE_RELAY 2 17.39 25.00 13.33 34 TR_XM_UnparsRelay 2 13.04 25.00 6.67 35 TR_XM_SB_Phish 2 8.70 25.00 0.00 36 XM_B_SpammyWords 2 39.13 25.00 46.67 37 DKIM_VALID_EF 2 30.43 25.00 33.33 38 TR_XM_PhishingBody 2 8.70 25.00 0.00 39 TR_XM_SpammyWords2 2 8.70 25.00 0.00 40 BOTNET_IPINHOSTNAME 2 8.70 25.00 0.00 41 T_KAM_HTML_FONT_INVALID 2 26.09 25.00 26.67 42 MIME_CHARSET_FARAWAY 1 4.35 12.50 0.00 43 BAYES_80 1 4.35 12.50 0.00 44 TRACKER_ID 1 4.35 12.50 0.00 45 MPART_ALT_DIFF_COUNT 1 4.35 12.50 0.00 46 RCVD_IN_IADB_SENDERID 1 8.70 12.50 6.67 47 RELAYCOUNTRY_FR 1 4.35 12.50 0.00 48 T_XMDrugObfuBody_08 1 4.35 12.50 0.00 49 XM_Evil_Numbers_Gen 1 4.35 12.50 0.00 50 TooManyTo_004 1 4.35 12.50 0.00 51 TR_BOTNET_NEGATE 1 4.35 12.50 0.00 52 TooManyTo_001 1 13.04 12.50 13.33 53 LotsOfNums_01 1 17.39 12.50 20.00 54 TR_XM_SpoofPhishAttach 1 4.35 12.50 0.00 55 XM_SendGrid 1 8.70 12.50 6.67 56 RELAYCOUNTRY_AU 1 4.35 12.50 0.00 57 XM_B_Unicode3 1 30.43 12.50 40.00 58 OBFU_TEXT_ATTACH 1 4.35 12.50 0.00 59 MIME_HTML_MOSTLY 1 4.35 12.50 0.00 60 HTML_IMAGE_ONLY_08 1 4.35 12.50 0.00 61 XMHTMLBadTable_001 1 4.35 12.50 0.00 62 XMDateMe_00 1 8.70 12.50 6.67 63 MAILING_LIST_MULTI 1 4.35 12.50 0.00 64 XM_UncommonTLD01 1 8.70 12.50 6.67 65 RCVD_IN_IADB_SPF 1 8.70 12.50 6.67 66 TooManyTo_003 1 8.70 12.50 6.67 67 DCC_CHECK 1 4.35 12.50 0.00 68 XM_UB50 1 4.35 12.50 0.00 69 RCVD_IN_IADB_DK 1 8.70 12.50 6.67 70 LOC_TINY_FONT_1 1 17.39 12.50 20.00 71 HTML_FONT_LOW_CONTRAST 1 21.74 12.50 26.67 72 T_XMDrugObfuBody_14 1 8.70 12.50 6.67 73 XMSubLong 1 13.04 12.50 13.33 74 TooManyTo_002 1 8.70 12.50 6.67 75 LongTLD 1 4.35 12.50 0.00 76 RCVD_IN_IADB_LISTED 1 8.70 12.50 6.67 77 TVD_RCVD_IP 1 4.35 12.50 0.00 78 TO_NO_BRKTS_DYNIP 1 4.35 12.50 0.00 79 XM_Body_Dirty_Words_01 1 4.35 12.50 0.00 80 MIME_QP_LONG_LINE 1 13.04 12.50 13.33 81 TR_XM_DK_SendGrid 1 8.70 12.50 6.67 82 DKIM_INVALID 1 8.70 12.50 6.67 83 BAYES_95 1 8.70 12.50 6.67 84 HELO_DYNAMIC_SPLIT_IP 1 4.35 12.50 0.00 85 XM_PDF 1 4.35 12.50 0.00 86 TR_MetaPhish_Combo_01b 1 4.35 12.50 0.00 87 XMSubMetaSx_00 1 13.04 12.50 13.33 88 TR_XM_INV_DKIM 1 4.35 12.50 0.00 89 RELAYCOUNTRY_NL 1 4.35 12.50 0.00 90 HTML_IMAGE_RATIO_02 1 4.35 12.50 0.00 91 XM_H_MailChimp 1 4.35 12.50 0.00 92 HTML_TAG_BALANCE_BODY 1 4.35 12.50 0.00 93 RCVD_IN_MSPIKE_H2 1 21.74 12.50 26.67 94 XMSexyCombo_01 1 4.35 12.50 0.00 95 UNTRUSTED_Relay 1 4.35 12.50 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 15 95.65 87.50 100.00 2 RELAYCOUNTRY_US 12 78.26 75.00 80.00 3 HTML_MESSAGE 11 78.26 87.50 73.33 4 DKIM_SIGNED 10 69.57 75.00 66.67 5 BAYES_50 9 52.17 37.50 60.00 6 XM_DK_Pass 9 65.22 75.00 60.00 7 DKIM_VALID 9 60.87 62.50 60.00 8 XM_B_Unicode 8 52.17 50.00 53.33 9 RCVD_IN_MSPIKE_WL 7 52.17 62.50 46.67 10 XM_B_SpammyWords 7 39.13 25.00 46.67 11 RCVD_IN_MSPIKE_H3 6 47.83 62.50 40.00 12 DKIM_VALID_AU 6 43.48 50.00 40.00 13 XM_B_Unicode3 6 30.43 12.50 40.00 14 XMListUnsubscribeExists 6 34.78 25.00 40.00 15 DKIM_VALID_EF 5 30.43 25.00 33.33 16 FVGT_m_MULTI_ODD 5 34.78 37.50 33.33 17 RCVD_IN_MSPIKE_H2 4 21.74 12.50 26.67 18 T_KAM_HTML_FONT_INVALID 4 26.09 25.00 26.67 19 HTML_FONT_LOW_CONTRAST 4 21.74 12.50 26.67 20 XM_B_SpammyWords2 3 21.74 25.00 20.00 21 MIME_HTML_ONLY 3 21.74 25.00 20.00 22 LotsOfNums_01 3 17.39 12.50 20.00 23 XM_Multi_Part_URI 3 21.74 25.00 20.00 24 XMStrtUSub 3 13.04 0.00 20.00 25 T_TM2_M_HEADER_IN_MSG 3 21.74 25.00 20.00 26 LOC_TINY_FONT_1 3 17.39 12.50 20.00 27 ALL_TRUSTED 3 13.04 0.00 20.00 28 XM_DKIMWhitelistDomains 2 8.70 0.00 13.33 29 BAYES_00 2 8.70 0.00 13.33 30 TR_XM_DK_Unsub 2 8.70 0.00 13.33 31 XMBody_17 2 8.70 0.00 13.33 32 XMSubMetaSx_00 2 13.04 12.50 13.33 33 TR_XM_BayesUnsub 2 21.74 37.50 13.33 34 MIME_QP_LONG_LINE 2 13.04 12.50 13.33 35 XMSubMetaSSx_00 2 8.70 0.00 13.33 36 TooManyTo_001 2 13.04 12.50 13.33 37 BAYES_60 2 8.70 0.00 13.33 38 XM_B_Unsub 2 21.74 37.50 13.33 39 XMSubLong 2 13.04 12.50 13.33 40 XMNumbers 2 8.70 0.00 13.33 41 UNPARSEABLE_RELAY 2 17.39 25.00 13.33 42 XM_DK_Undo_01 2 8.70 0.00 13.33 43 T_TooManySym_02 1 4.35 0.00 6.67 44 KHOP_HELO_FCRDNS 1 13.04 25.00 6.67 45 HTML_IMAGE_RATIO_04 1 4.35 0.00 6.67 46 RCVD_IN_IADB_DK 1 8.70 12.50 6.67 47 IN_HORDE_ADDRESS_BOOK 1 4.35 0.00 6.67 48 RELAYCOUNTRY_IT 1 4.35 0.00 6.67 49 RCVD_IN_IADB_SPF 1 8.70 12.50 6.67 50 TooManyTo_003 1 8.70 12.50 6.67 51 XMBody_95 1 4.35 0.00 6.67 52 XM_UncommonTLD01 1 8.70 12.50 6.67 53 XMDateMe_00 1 8.70 12.50 6.67 54 IN_ZIMBRA_NJ_WHITELIST 1 4.35 0.00 6.67 55 XM_Body_Dirty_Words 1 13.04 25.00 6.67 56 HTML_FONT_FACE_BAD 1 4.35 0.00 6.67 57 TVD_SPACE_RATIO 1 4.35 0.00 6.67 58 XM_B_Unsub2 1 4.35 0.00 6.67 59 TO_MALFORMED 1 4.35 0.00 6.67 60 BAYES_95 1 8.70 12.50 6.67 61 XM_E_Blogspot 1 4.35 0.00 6.67 62 HTTPS_HTTP_MISMATCH 1 4.35 0.00 6.67 63 XM_Dr_From 1 4.35 0.00 6.67 64 XM_SendGrid 1 8.70 12.50 6.67 65 T_TooManySym_03 1 4.35 0.00 6.67 66 TR_XM_DK_SendGrid 1 8.70 12.50 6.67 67 DKIM_INVALID 1 8.70 12.50 6.67 68 BAYES_20 1 4.35 0.00 6.67 69 TR_XM_UnparsRelay 1 13.04 25.00 6.67 70 TR_XM_SpammyWords4 1 4.35 0.00 6.67 71 HTML_IMAGE_RATIO_08 1 4.35 0.00 6.67 72 LOTS_OF_MONEY 1 4.35 0.00 6.67 73 RCVD_IN_MSPIKE_H4 1 4.35 0.00 6.67 74 RELAYCOUNTRY_META 1 13.04 25.00 6.67 75 BANG_GUAR 1 4.35 0.00 6.67 76 RCVD_IN_IADB_LISTED 1 8.70 12.50 6.67 77 INVALID_MSGID 1 4.35 0.00 6.67 78 T_XMDrugObfuBody_14 1 8.70 12.50 6.67 79 MSGID_NOFQDN1 1 4.35 0.00 6.67 80 TooManyTo_002 1 8.70 12.50 6.67 81 HTML_MIME_NO_HTML_TAG 1 4.35 0.00 6.67 82 XMLngstWrd_00 1 4.35 0.00 6.67 83 FVGT_m_MULTI_ODD_EMAIL 1 4.35 0.00 6.67 84 XM_H_Trusted_IP 1 4.35 0.00 6.67 85 RCVD_IN_IADB_SENDERID 1 8.70 12.50 6.67 86 TM2_M_VERY_LONG_WORD 1 4.35 0.00 6.67 87 T_TooManySym_01 1 4.35 0.00 6.67 ----------------------------------------------------------------------