Email: 49 Autolearn: 0 AvgScore: 4.04 AvgScanTime: 2.12 sec Spam: 10 Autolearn: 0 AvgScore: 12.40 AvgScanTime: 3.46 sec Ham: 39 Autolearn: 0 AvgScore: 1.90 AvgScanTime: 1.78 sec Time Spent Running SA: 0.03 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 10 71.43 100.00 64.10 2 DCC_CHECK_NEGATIVE 9 89.80 90.00 89.74 3 DKIM_SIGNED 8 65.31 80.00 61.54 4 HTML_MESSAGE 8 63.27 80.00 58.97 5 XM_DK_Pass 8 63.27 80.00 58.97 6 DKIM_VALID 8 61.22 80.00 56.41 7 BAYES_50 7 77.55 70.00 79.49 8 XMListUnsubscribeExists 6 44.90 60.00 41.03 9 RCVD_IN_MSPIKE_H2 6 28.57 60.00 20.51 10 LOC_TINY_FONT_1 6 18.37 60.00 7.69 11 XM_B_SpammyWords 6 55.10 60.00 53.85 12 MIME_HTML_ONLY 5 14.29 50.00 5.13 13 XM_Multi_Part_URI 5 16.33 50.00 7.69 14 DKIM_VALID_AU 5 40.82 50.00 38.46 15 DKIM_VALID_EF 5 36.73 50.00 33.33 16 XM_Body_Dirty_Words 4 16.33 40.00 10.26 17 FVGT_m_MULTI_ODD 4 24.49 40.00 20.51 18 TR_XM_DKIM_Undo 4 10.20 40.00 2.56 19 XM_B_Unicode 4 61.22 40.00 66.67 20 XM_DK_Undo_02 4 10.20 40.00 2.56 21 BOTNET_IPINHOSTNAME 3 8.16 30.00 2.56 22 HTML_FONT_LOW_CONTRAST 3 24.49 30.00 23.08 23 BAYES_99 3 8.16 30.00 2.56 24 BAYES_999 3 8.16 30.00 2.56 25 TR_XM_DK_Unsub 3 20.41 30.00 17.95 26 T_KAM_HTML_FONT_INVALID 2 24.49 20.00 25.64 27 XM_B_Crypto 2 4.08 20.00 0.00 28 HTML_MIME_NO_HTML_TAG 2 6.12 20.00 2.56 29 XM_B_SpammyWords3 2 12.24 20.00 10.26 30 TR_XM_UnparsRelay 2 12.24 20.00 10.26 31 UNPARSEABLE_RELAY 2 18.37 20.00 17.95 32 RCVD_IN_MSPIKE_H3 2 24.49 20.00 25.64 33 TM2_M_VERY_LONG_WORD 2 4.08 20.00 0.00 34 XM_Evil_Numbers_Gen 2 6.12 20.00 2.56 35 MPART_ALT_DIFF 2 6.12 20.00 2.56 36 TR_XM_BayesUnsub 2 6.12 20.00 2.56 37 XM_GoogleGroups 2 8.16 20.00 5.13 38 UPPERCASE_75_100 2 4.08 20.00 0.00 39 HTML_TITLE_SUBJ_DIFF 2 4.08 20.00 0.00 40 XMDateMe_00 2 6.12 20.00 2.56 41 XM_B_Unsub 2 6.12 20.00 2.56 42 XMLngstWrd_01 2 4.08 20.00 0.00 43 XMLngstWrd_00 2 6.12 20.00 2.56 44 XM_B_SpammyWords2 2 18.37 20.00 17.95 45 XM_B_Unicode3 2 16.33 20.00 15.38 46 RCVD_IN_MSPIKE_WL 2 28.57 20.00 30.77 47 BOTNET 2 4.08 20.00 0.00 48 XMLngstWrd_02 2 4.08 20.00 0.00 49 XMLngstWrd_03 2 4.08 20.00 0.00 50 XMLngstWrd_04 2 4.08 20.00 0.00 51 MIME_HTML_ONLY_MULTI 2 4.08 20.00 0.00 52 RELAYCOUNTRY_RU 1 2.04 10.00 0.00 53 TR_XM_FormFill2 1 2.04 10.00 0.00 54 MAILING_LIST_MULTI 1 6.12 10.00 5.13 55 XM_OfRef7 1 2.04 10.00 0.00 56 TR_XM_Crypto3 1 2.04 10.00 0.00 57 TR_XM_PHPForged 1 2.04 10.00 0.00 58 OBFU_TEXT_ATTACH 1 2.04 10.00 0.00 59 TM2_M_URI_OPT_OUT 1 2.04 10.00 0.00 60 DCC_CHECK 1 10.20 10.00 10.26 61 TooManyTo_003 1 4.08 10.00 2.56 62 TooManyTo_002 1 4.08 10.00 2.56 63 RCVD_IN_BL_SPAMCOP_NET 1 2.04 10.00 0.00 64 XM_B_Investor 1 4.08 10.00 2.56 65 TooManyTo_004 1 2.04 10.00 0.00 66 TR_XM_SPAMCOP 1 2.04 10.00 0.00 67 TooManyTo_001 1 4.08 10.00 2.56 68 XM_TLDProd2 1 2.04 10.00 0.00 69 URI_HEX 1 2.04 10.00 0.00 70 TO_NO_BRKTS_DYNIP 1 2.04 10.00 0.00 71 XMSexyCombo_05 1 2.04 10.00 0.00 72 RELAYCOUNTRY_META 1 4.08 10.00 2.56 73 TR_XM_PHPDW 1 2.04 10.00 0.00 74 XM_H_PHPOS 1 2.04 10.00 0.00 75 XM_Body_Dirty_Words_01 1 2.04 10.00 0.00 76 PDS_RDNS_DYNAMIC_FP 1 2.04 10.00 0.00 77 RDNS_DYNAMIC 1 2.04 10.00 0.00 78 XM_B_SpammyWords4 1 2.04 10.00 0.00 79 KHOP_HELO_FCRDNS 1 2.04 10.00 0.00 80 T_XMDrugObfuBody_08 1 4.08 10.00 2.56 81 XM_OfRef6 1 2.04 10.00 0.00 82 XM_SPF_SoftFail 1 4.08 10.00 2.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 35 89.80 90.00 89.74 2 BAYES_50 31 77.55 70.00 79.49 3 XM_B_Unicode 26 61.22 40.00 66.67 4 RELAYCOUNTRY_US 25 71.43 100.00 64.10 5 DKIM_SIGNED 24 65.31 80.00 61.54 6 HTML_MESSAGE 23 63.27 80.00 58.97 7 XM_DK_Pass 23 63.27 80.00 58.97 8 DKIM_VALID 22 61.22 80.00 56.41 9 XM_B_SpammyWords 21 55.10 60.00 53.85 10 XMListUnsubscribeExists 16 44.90 60.00 41.03 11 DKIM_VALID_AU 15 40.82 50.00 38.46 12 XMSubLong 14 28.57 0.00 35.90 13 ALL_TRUSTED 13 26.53 0.00 33.33 14 DKIM_VALID_EF 13 36.73 50.00 33.33 15 RCVD_IN_MSPIKE_WL 12 28.57 20.00 30.77 16 T_KAM_HTML_FONT_INVALID 10 24.49 20.00 25.64 17 RCVD_IN_MSPIKE_H3 10 24.49 20.00 25.64 18 HTML_FONT_LOW_CONTRAST 9 24.49 30.00 23.08 19 RCVD_IN_MSPIKE_H2 8 28.57 60.00 20.51 20 XMNumbers 8 16.33 0.00 20.51 21 T_TooManySym_01 8 16.33 0.00 20.51 22 FVGT_m_MULTI_ODD 8 24.49 40.00 20.51 23 T_TM2_M_HEADER_IN_MSG 8 16.33 0.00 20.51 24 T_TooManySym_02 7 14.29 0.00 17.95 25 XM_B_SpammyWords2 7 18.37 20.00 17.95 26 UNPARSEABLE_RELAY 7 18.37 20.00 17.95 27 TR_XM_DK_Unsub 7 20.41 30.00 17.95 28 XM_H_PHPMailer 6 12.24 0.00 15.38 29 ANY_BOUNCE_MESSAGE 6 12.24 0.00 15.38 30 XM_B_Unicode3 6 16.33 20.00 15.38 31 BAYES_60 6 12.24 0.00 15.38 32 BOUNCE_MESSAGE 6 12.24 0.00 15.38 33 SHORT_SHORTNER 6 12.24 0.00 15.38 34 XM_SendGrid 5 10.20 0.00 12.82 35 DCC_CHECK 4 10.20 10.00 10.26 36 XM_Body_Dirty_Words 4 16.33 40.00 10.26 37 TR_XM_SpammyWords5 4 8.16 0.00 10.26 38 XM_B_SpammyWords3 4 12.24 20.00 10.26 39 TR_XM_UnparsRelay 4 12.24 20.00 10.26 40 XMSubMetaSx_00 3 6.12 0.00 7.69 41 T_XMHurry_00 3 6.12 0.00 7.69 42 LOC_TINY_FONT_1 3 18.37 60.00 7.69 43 XM_Multi_Part_URI 3 16.33 50.00 7.69 44 XMGappySubj_01 3 6.12 0.00 7.69 45 LotsOfNums_01 3 6.12 0.00 7.69 46 DKIM_INVALID 2 4.08 0.00 5.13 47 RCVD_IN_IADB_LISTED 2 4.08 0.00 5.13 48 MAILING_LIST_MULTI 2 6.12 10.00 5.13 49 RCVD_IN_IADB_SENDERID 2 4.08 0.00 5.13 50 XM_S_SpammyWords 2 4.08 0.00 5.13 51 RCVD_IN_MSPIKE_H4 2 4.08 0.00 5.13 52 RCVD_IN_IADB_DK 2 4.08 0.00 5.13 53 XM_B_Phish_Phrases 2 4.08 0.00 5.13 54 MIME_HTML_ONLY 2 14.29 50.00 5.13 55 RCVD_IN_IADB_SPF 2 4.08 0.00 5.13 56 XM_B_SpammyTLD 2 4.08 0.00 5.13 57 T_TooManySym_03 2 4.08 0.00 5.13 58 LONGWORDS 2 4.08 0.00 5.13 59 SHORT_URI_2 2 4.08 0.00 5.13 60 XM_GoogleGroups 2 8.16 20.00 5.13 61 TR_XM_Spammywords 2 4.08 0.00 5.13 62 XM_Evil_Numbers_Gen 1 6.12 20.00 2.56 63 FROM_EXCESS_BASE64 1 2.04 0.00 2.56 64 AC_HTML_NONSENSE_TAGS 1 2.04 0.00 2.56 65 TooManyTo_003 1 4.08 10.00 2.56 66 TR_XM_DK_Bayes1 1 2.04 0.00 2.56 67 TR_XM_DK_SendGrid 1 2.04 0.00 2.56 68 MPART_ALT_DIFF 1 6.12 20.00 2.56 69 HTML_IMAGE_ONLY_20 1 2.04 0.00 2.56 70 TooManyTo_001 1 4.08 10.00 2.56 71 INVALID_MSGID 1 2.04 0.00 2.56 72 XMPhish11 1 2.04 0.00 2.56 73 BOGUS_MIME_VERSION 1 2.04 0.00 2.56 74 RELAYCOUNTRY_CA 1 2.04 0.00 2.56 75 XM_H_Long_From02 1 2.04 0.00 2.56 76 TVD_SPACE_RATIO 1 2.04 0.00 2.56 77 TR_XM_DK_Bayes 1 2.04 0.00 2.56 78 USER_IN_DEF_DKIM_WL 1 2.04 0.00 2.56 79 HTML_MIME_NO_HTML_TAG 1 6.12 20.00 2.56 80 TR_XM_Base64_L1 1 2.04 0.00 2.56 81 XM_B_SpammyTLD2 1 2.04 0.00 2.56 82 XMStrtUSub 1 2.04 0.00 2.56 83 T_XMDrugObfuBody_08 1 4.08 10.00 2.56 84 XMSexyCombo_01 1 2.04 0.00 2.56 85 IN_ZIMBRA_NJ_WHITELIST 1 2.04 0.00 2.56 86 XMGappySubj_02 1 2.04 0.00 2.56 87 XM_DKIMWhitelistDomains 1 2.04 0.00 2.56 88 XM_DK_Undo_02 1 10.20 40.00 2.56 89 TR_XM_SpammyRelay 1 2.04 0.00 2.56 90 URI_NOVOWEL 1 2.04 0.00 2.56 91 XM_B_DNDMA 1 2.04 0.00 2.56 92 MPART_ALT_DIFF_COUNT 1 2.04 0.00 2.56 93 RCVD_IN_PSBL 1 2.04 0.00 2.56 94 RCVD_IN_IADB_OPTIN 1 2.04 0.00 2.56 95 FVGT_m_MULTI_ODD_EMAIL 1 2.04 0.00 2.56 96 TR_XM_DK_Bayes2 1 2.04 0.00 2.56 97 HTML_EXTRA_CLOSE 1 2.04 0.00 2.56 98 TooManyTo_002 1 4.08 10.00 2.56 99 XM_B_Investor 1 4.08 10.00 2.56 100 XM_Dr_From 1 2.04 0.00 2.56 101 XMSubject_78 1 2.04 0.00 2.56 102 XM_GoogleGroups2 1 2.04 0.00 2.56 103 BAYES_99 1 8.16 30.00 2.56 104 RCVD_IN_IADB_VOUCHED 1 2.04 0.00 2.56 105 INVALID_DATE 1 2.04 0.00 2.56 106 BAYES_00 1 2.04 0.00 2.56 107 WEIRD_PORT 1 2.04 0.00 2.56 108 BOTNET_IPINHOSTNAME 1 8.16 30.00 2.56 109 XMSubNoVowel 1 2.04 0.00 2.56 110 TR_XM_PhishingBody 1 2.04 0.00 2.56 111 TVD_RCVD_IP 1 2.04 0.00 2.56 112 NICE_REPLY_A 1 2.04 0.00 2.56 113 T_Symld_Words_02 1 2.04 0.00 2.56 114 XMLngstWrd_00 1 6.12 20.00 2.56 115 BAYES_999 1 8.16 30.00 2.56 116 XMSubMetaSxObfu_03 1 2.04 0.00 2.56 117 MIXED_HREF_CASE 1 2.04 0.00 2.56 118 XM_SPF_SoftFail 1 4.08 10.00 2.56 119 XMSubEmpty 1 2.04 0.00 2.56 120 RELAYCOUNTRY_META 1 4.08 10.00 2.56 121 TR_XM_BayesUnsub 1 6.12 20.00 2.56 122 XMHTML_ManyTags1 1 2.04 0.00 2.56 123 IN_HORDE_ADDRESS_BOOK 1 2.04 0.00 2.56 124 T_TooManySym_04 1 2.04 0.00 2.56 125 MIME_HTML_MOSTLY 1 2.04 0.00 2.56 126 MIXED_CENTER_CASE 1 2.04 0.00 2.56 127 XMDateMe_00 1 6.12 20.00 2.56 128 TR_XM_DKIM_Undo 1 10.20 40.00 2.56 129 XM_B_Unsub 1 6.12 20.00 2.56 ----------------------------------------------------------------------