Email: 104 Autolearn: 0 AvgScore: 1.38 AvgScanTime: 3.78 sec Spam: 17 Autolearn: 0 AvgScore: 14.18 AvgScanTime: 4.48 sec Ham: 87 Autolearn: 0 AvgScore: -1.11 AvgScanTime: 3.64 sec Time Spent Running SA: 0.11 hours Time Spent Processing Spam: 0.02 hours Time Spent Processing Ham: 0.09 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 15 62.50 88.24 57.47 2 RELAYCOUNTRY_US 14 65.38 82.35 62.07 3 BAYES_50 14 66.35 82.35 63.22 4 T_SCC_BODY_TEXT_LINE 14 82.69 82.35 82.76 5 DCC_CHECK_NEGATIVE 13 75.96 76.47 75.86 6 DKIM_SIGNED 12 62.50 70.59 60.92 7 XMListUnsubscribeExists 12 32.69 70.59 25.29 8 XM_DK_Pass 12 59.62 70.59 57.47 9 DKIM_VALID 12 58.65 70.59 56.32 10 DKIM_VALID_AU 11 46.15 64.71 42.53 11 MIME_HTML_ONLY 9 21.15 52.94 14.94 12 XM_B_Unicode 8 44.23 47.06 43.68 13 XM_UncommonTLD01 8 10.58 47.06 3.45 14 XM_B_Unicode3 7 25.96 41.18 22.99 15 RELAYCOUNTRY_META 7 12.50 41.18 6.90 16 FVGT_m_MULTI_ODD 6 18.27 35.29 14.94 17 XMSubLong 6 27.88 35.29 26.44 18 XM_B_SpammyWords 6 25.96 35.29 24.14 19 MPART_ALT_DIFF 6 8.65 35.29 3.45 20 XMLngstWrd_00 5 5.77 29.41 1.15 21 XM_GoogleGroups 5 5.77 29.41 1.15 22 HTML_MIME_NO_HTML_TAG 5 8.65 29.41 4.60 23 XMLngstWrd_02 5 5.77 29.41 1.15 24 XMLngstWrd_01 5 5.77 29.41 1.15 25 UPPERCASE_75_100 5 5.77 29.41 1.15 26 XMLngstWrd_04 5 5.77 29.41 1.15 27 MIME_HTML_ONLY_MULTI 5 7.69 29.41 3.45 28 XMLngstWrd_03 5 5.77 29.41 1.15 29 TM2_M_VERY_LONG_WORD 5 5.77 29.41 1.15 30 HTML_TITLE_SUBJ_DIFF 5 5.77 29.41 1.15 31 BOTNET 4 4.81 23.53 1.15 32 DCC_CHECK 4 24.04 23.53 24.14 33 SpammyFromTLD_02 4 3.85 23.53 0.00 34 HTML_FONT_LOW_CONTRAST 4 28.85 23.53 29.89 35 XM_Body_Dirty_Words 4 5.77 23.53 2.30 36 RCVD_IN_VALIDITY_RPBL 3 2.88 17.65 0.00 37 SpammyFromTLD_01 3 2.88 17.65 0.00 38 XM_B_SpammyTLD 3 4.81 17.65 2.30 39 BOTNET_IPINHOSTNAME 3 5.77 17.65 3.45 40 RCVD_IN_MSPIKE_WL 3 14.42 17.65 13.79 41 XMSubNoVowel 3 3.85 17.65 1.15 42 XM_UB50 3 4.81 17.65 2.30 43 RELAYCOUNTRY_RU 3 2.88 17.65 0.00 44 XM_DK_Undo_02 3 6.73 17.65 4.60 45 UNTRUSTED_Relay 3 4.81 17.65 2.30 46 RCVD_IN_MSPIKE_H2 3 10.58 17.65 9.20 47 XMSubLongNoVowel 2 1.92 11.76 0.00 48 URIBL_DBL_SPAM 2 1.92 11.76 0.00 49 XM_B_Investor 2 2.88 11.76 1.15 50 TM2_M_URI_OPT_OUT 2 14.42 11.76 14.94 51 XM_H_Long_From01 2 4.81 11.76 3.45 52 FROM_GOV_DKIM_AU 2 2.88 11.76 1.15 53 TR_XM_MaxWHORU 2 1.92 11.76 0.00 54 XM_SPF_SoftFail 2 5.77 11.76 4.60 55 BAYES_99 2 4.81 11.76 3.45 56 DKIM_VALID_EF 2 23.08 11.76 25.29 57 LOTS_OF_MONEY 2 5.77 11.76 4.60 58 XMBody_95 2 1.92 11.76 0.00 59 HTTPS_HTTP_MISMATCH 2 2.88 11.76 1.15 60 T_KAM_HTML_FONT_INVALID 2 10.58 11.76 10.34 61 MIXED_ES 2 1.92 11.76 0.00 62 RCVD_IN_MSPIKE_H3 2 5.77 11.76 4.60 63 LOC_TINY_FONT_1 2 15.38 11.76 16.09 64 NO_DNS_FOR_FROM 2 1.92 11.76 0.00 65 MPART_ALT_DIFF_COUNT 2 1.92 11.76 0.00 66 XMSexyCombo_05 2 1.92 11.76 0.00 67 XM_DIRTYINTL 1 1.92 5.88 1.15 68 XMSubEmpty 1 1.92 5.88 1.15 69 TVD_RCVD_IP 1 1.92 5.88 1.15 70 URI_NOVOWEL 1 0.96 5.88 0.00 71 RCVD_IN_MSPIKE_BL 1 0.96 5.88 0.00 72 HTML_IMAGE_RATIO_04 1 3.85 5.88 3.45 73 HTML_IMAGE_RATIO_02 1 2.88 5.88 2.30 74 XM_Body_Dirty_Words_02 1 0.96 5.88 0.00 75 DATE_IN_FUTURE_03_06 1 0.96 5.88 0.00 76 SCC_BODY_URI_ONLY 1 5.77 5.88 5.75 77 NAME_EMAIL_DIFF 1 0.96 5.88 0.00 78 TR_DCC_Bayes_99 1 2.88 5.88 2.30 79 CHARSET_FARAWAY_HEADER 1 0.96 5.88 0.00 80 SUBJ_DOLLARS 1 0.96 5.88 0.00 81 TR_XM_NoHeaderRelay 1 0.96 5.88 0.00 82 RCVD_IN_MSPIKE_H5 1 6.73 5.88 6.90 83 XM_Body_Dirty_Words_01 1 1.92 5.88 1.15 84 RELAYCOUNTRY_TW 1 0.96 5.88 0.00 85 XM_Evil_Numbers_Gen 1 5.77 5.88 5.75 86 TooManyTo_001 1 5.77 5.88 5.75 87 XM_B_SpammyTLD2 1 0.96 5.88 0.00 88 RDNS_DYNAMIC 1 0.96 5.88 0.00 89 HTML_IMAGE_RATIO_08 1 0.96 5.88 0.00 90 RELAYCOUNTRY_CL 1 0.96 5.88 0.00 91 XMBrknScrpt_02 1 0.96 5.88 0.00 92 TR_Symld_Words 1 1.92 5.88 1.15 93 XM_Multi_Part_URI 1 18.27 5.88 20.69 94 XM_B_Unsub2 1 1.92 5.88 1.15 95 T_TooManySym_02 1 13.46 5.88 14.94 96 TR_XM_DK_Unsub 1 9.62 5.88 10.34 97 DEAR_FRIEND 1 0.96 5.88 0.00 98 KHOP_HELO_FCRDNS 1 4.81 5.88 4.60 99 FROM_GOV_SPOOF 1 0.96 5.88 0.00 100 XM_URI_RBL 1 0.96 5.88 0.00 101 RCVD_IN_BL_SPAMCOP_NET 1 0.96 5.88 0.00 102 BOTNET_NORDNS 1 0.96 5.88 0.00 103 TR_XM_InvalidRelay 1 0.96 5.88 0.00 104 BAYES_60 1 9.62 5.88 10.34 105 XM_BadFromFormat 1 0.96 5.88 0.00 106 TO_EQ_FM_DOM_HTML_ONLY 1 0.96 5.88 0.00 107 XM_B_SpammyWords2 1 12.50 5.88 13.79 108 MIME_BASE64_TEXT 1 0.96 5.88 0.00 109 UNPARSEABLE_RELAY 1 7.69 5.88 8.05 110 MIME_CHARSET_FARAWAY 1 0.96 5.88 0.00 111 RCVD_IN_PSBL 1 1.92 5.88 1.15 112 RELAYCOUNTRY_NZ 1 0.96 5.88 0.00 113 MIME_HTML_MOSTLY 1 1.92 5.88 1.15 114 TR_XM_DKIM_Undo 1 1.92 5.88 1.15 115 TR_XM_SpammyWords4 1 3.85 5.88 3.45 116 TR_LOTS_OF_MONEY3 1 0.96 5.88 0.00 117 TO_NO_BRKTS_DYNIP 1 0.96 5.88 0.00 118 BODY_URI_ONLY 1 0.96 5.88 0.00 119 PDS_RDNS_DYNAMIC_FP 1 0.96 5.88 0.00 120 TR_XM_BayesUnsub 1 9.62 5.88 10.34 121 XM_B_Unsub 1 9.62 5.88 10.34 122 XMNumbers 1 5.77 5.88 5.75 123 T_TooManySym_01 1 15.38 5.88 17.24 124 TR_XM_SpammyRelay 1 3.85 5.88 3.45 125 T_XMHurry_00 1 0.96 5.88 0.00 126 XM_B_SexDrugs1 1 0.96 5.88 0.00 127 RELAYCOUNTRY_IN 1 0.96 5.88 0.00 128 RCVD_IN_MSPIKE_ZBI 1 0.96 5.88 0.00 129 LongTLD 1 1.92 5.88 1.15 130 RELAYCOUNTRY_SG 1 0.96 5.88 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 72 82.69 82.35 82.76 2 DCC_CHECK_NEGATIVE 66 75.96 76.47 75.86 3 BAYES_50 55 66.35 82.35 63.22 4 RELAYCOUNTRY_US 54 65.38 82.35 62.07 5 DKIM_SIGNED 53 62.50 70.59 60.92 6 XM_DK_Pass 50 59.62 70.59 57.47 7 HTML_MESSAGE 50 62.50 88.24 57.47 8 DKIM_VALID 49 58.65 70.59 56.32 9 XM_B_Unicode 38 44.23 47.06 43.68 10 DKIM_VALID_AU 37 46.15 64.71 42.53 11 ALL_TRUSTED 28 26.92 0.00 32.18 12 HTML_FONT_LOW_CONTRAST 26 28.85 23.53 29.89 13 XMSubLong 23 27.88 35.29 26.44 14 DKIM_VALID_EF 22 23.08 11.76 25.29 15 XMListUnsubscribeExists 22 32.69 70.59 25.29 16 XM_B_SpammyWords 21 25.96 35.29 24.14 17 DCC_CHECK 21 24.04 23.53 24.14 18 XM_B_Unicode3 20 25.96 41.18 22.99 19 T_TM2_M_HEADER_IN_MSG 19 18.27 0.00 21.84 20 XM_Multi_Part_URI 18 18.27 5.88 20.69 21 ANY_BOUNCE_MESSAGE 15 14.42 0.00 17.24 22 BOUNCE_MESSAGE 15 14.42 0.00 17.24 23 T_TooManySym_01 15 15.38 5.88 17.24 24 LOC_TINY_FONT_1 14 15.38 11.76 16.09 25 MIME_HTML_ONLY 13 21.15 52.94 14.94 26 TM2_M_URI_OPT_OUT 13 14.42 11.76 14.94 27 FVGT_m_MULTI_ODD 13 18.27 35.29 14.94 28 T_TooManySym_02 13 13.46 5.88 14.94 29 RCVD_IN_MSPIKE_WL 12 14.42 17.65 13.79 30 XM_B_SpammyWords2 12 12.50 5.88 13.79 31 XM_DKIMWhitelistDomains 10 9.62 0.00 11.49 32 MAILING_LIST_MULTI 10 9.62 0.00 11.49 33 T_KAM_HTML_FONT_INVALID 9 10.58 11.76 10.34 34 BAYES_60 9 9.62 5.88 10.34 35 XM_B_Unsub 9 9.62 5.88 10.34 36 TR_XM_BayesUnsub 9 9.62 5.88 10.34 37 FSL_BULK_SIG 9 8.65 0.00 10.34 38 TR_XM_DK_Unsub 9 9.62 5.88 10.34 39 RCVD_IN_MSPIKE_H2 8 10.58 17.65 9.20 40 BAYES_05 8 7.69 0.00 9.20 41 UNPARSEABLE_RELAY 7 7.69 5.88 8.05 42 BAYES_20 6 5.77 0.00 6.90 43 XM_B_Phish_Phrases 6 5.77 0.00 6.90 44 RELAYCOUNTRY_META 6 12.50 41.18 6.90 45 RCVD_IN_MSPIKE_H5 6 6.73 5.88 6.90 46 XM_B_SpammyWords3 5 4.81 0.00 5.75 47 XMNumbers 5 5.77 5.88 5.75 48 SCC_BODY_URI_ONLY 5 5.77 5.88 5.75 49 TVD_SPACE_RATIO 5 4.81 0.00 5.75 50 MIME_QP_LONG_LINE 5 4.81 0.00 5.75 51 TooManyTo_001 5 5.77 5.88 5.75 52 XM_Evil_Numbers_Gen 5 5.77 5.88 5.75 53 DKIM_INVALID 4 3.85 0.00 4.60 54 XM_DK_Undo_02 4 6.73 17.65 4.60 55 RCVD_IN_MSPIKE_H3 4 5.77 11.76 4.60 56 KHOP_HELO_FCRDNS 4 4.81 5.88 4.60 57 LOTS_OF_MONEY 4 5.77 11.76 4.60 58 XMGappySubj_01 4 3.85 0.00 4.60 59 XM_SPF_SoftFail 4 5.77 11.76 4.60 60 HTML_MIME_NO_HTML_TAG 4 8.65 29.41 4.60 61 TooManyTo_004 3 2.88 0.00 3.45 62 TR_XM_SpammyWords4 3 3.85 5.88 3.45 63 MIME_HTML_ONLY_MULTI 3 7.69 29.41 3.45 64 TR_XM_DK_Bayes2 3 2.88 0.00 3.45 65 BAYES_00 3 2.88 0.00 3.45 66 XM_UncommonTLD01 3 10.58 47.06 3.45 67 TR_XM_DK_Bayes 3 2.88 0.00 3.45 68 BAYES_999 3 2.88 0.00 3.45 69 TooManyTo_003 3 2.88 0.00 3.45 70 TO_EQ_FM_DOM_HTML_IMG 3 2.88 0.00 3.45 71 TR_XM_SpammyRelay 3 3.85 5.88 3.45 72 MPART_ALT_DIFF 3 8.65 35.29 3.45 73 TR_XM_SB_Phish 3 2.88 0.00 3.45 74 XM_H_Long_From01 3 4.81 11.76 3.45 75 RELAYCOUNTRY_AU 3 2.88 0.00 3.45 76 TR_XM_DK_Bayes1 3 2.88 0.00 3.45 77 T_XMDrugObfuBody_08 3 2.88 0.00 3.45 78 XMSubPhish11 3 2.88 0.00 3.45 79 HTML_IMAGE_RATIO_04 3 3.85 5.88 3.45 80 HTML_IMAGE_RATIO_06 3 2.88 0.00 3.45 81 T_TooManySym_03 3 2.88 0.00 3.45 82 BOTNET_IPINHOSTNAME 3 5.77 17.65 3.45 83 USER_IN_DEF_DKIM_WL 3 2.88 0.00 3.45 84 BAYES_40 3 2.88 0.00 3.45 85 XMStrtUSub 3 2.88 0.00 3.45 86 TooManyTo_002 3 2.88 0.00 3.45 87 BAYES_99 3 4.81 11.76 3.45 88 XM_UB50 2 4.81 17.65 2.30 89 USER_IN_WHITELIST 2 1.92 0.00 2.30 90 SHORT_URI_2 2 1.92 0.00 2.30 91 XM_Body_Dirty_Words 2 5.77 23.53 2.30 92 SHORT_SHORTNER 2 1.92 0.00 2.30 93 UNTRUSTED_Relay 2 4.81 17.65 2.30 94 XM_DK_Undo_01 2 1.92 0.00 2.30 95 XM_B_DNDMA 2 1.92 0.00 2.30 96 USER_IN_WELCOMELIST 2 1.92 0.00 2.30 97 XM_ZIP 2 1.92 0.00 2.30 98 XM_B_SpammyTLD 2 4.81 17.65 2.30 99 TR_DCC_Bayes_99 2 2.88 5.88 2.30 100 HTML_IMAGE_RATIO_02 2 2.88 5.88 2.30 101 RCVD_IN_MSPIKE_H4 2 1.92 0.00 2.30 102 FVGT_m_MULTI_ODD_EMAIL 2 1.92 0.00 2.30 103 XM_SendGrid 2 1.92 0.00 2.30 104 XM_H_PHPMailer 2 1.92 0.00 2.30 105 LotsOfNums_01 2 1.92 0.00 2.30 106 INVALID_MSGID 1 0.96 0.00 1.15 107 MIME_HTML_MOSTLY 1 1.92 5.88 1.15 108 TR_XM_DKIM_Undo 1 1.92 5.88 1.15 109 RELAYCOUNTRY_FR 1 0.96 0.00 1.15 110 RCVD_IN_PSBL 1 1.92 5.88 1.15 111 XMSubNoVowel 1 3.85 17.65 1.15 112 DKIM_ADSP_CUSTOM_MED 1 0.96 0.00 1.15 113 HTML_IMAGE_ONLY_20 1 0.96 0.00 1.15 114 TR_Mismatch_TLD_01 1 0.96 0.00 1.15 115 HTTPS_HTTP_MISMATCH 1 2.88 11.76 1.15 116 TR_Sbj_FN_Bdy 1 0.96 0.00 1.15 117 RELAYCOUNTRY_BG 1 0.96 0.00 1.15 118 HTML_IMAGE_ONLY_08 1 0.96 0.00 1.15 119 UPPERCASE_75_100 1 5.77 29.41 1.15 120 RELAYCOUNTRY_CN 1 0.96 0.00 1.15 121 RCVD_IN_RP_CERTIFIED 1 0.96 0.00 1.15 122 TR_Mismatch_TLD_02 1 0.96 0.00 1.15 123 XM_PDF 1 0.96 0.00 1.15 124 XMLngstWrd_04 1 5.77 29.41 1.15 125 LongTLD 1 1.92 5.88 1.15 126 XMStockSpam_06 1 0.96 0.00 1.15 127 IN_ZIMBRA_NJ_WHITELIST 1 0.96 0.00 1.15 128 HTML_TITLE_SUBJ_DIFF 1 5.77 29.41 1.15 129 TM2_M_VERY_LONG_WORD 1 5.77 29.41 1.15 130 TR_XM_COVIDMETA4 1 0.96 0.00 1.15 131 XMGenDplmaNmb 1 0.96 0.00 1.15 132 CTE_8BIT_MISMATCH 1 0.96 0.00 1.15 133 XMLngstWrd_03 1 5.77 29.41 1.15 134 NICE_REPLY_A 1 0.96 0.00 1.15 135 HTML_IMAGE_ONLY_28 1 0.96 0.00 1.15 136 XM_B_Investor 1 2.88 11.76 1.15 137 XMBody_17 1 0.96 0.00 1.15 138 XMSubject_78 1 0.96 0.00 1.15 139 XM_UCStrings02 1 0.96 0.00 1.15 140 XM_S_SubURI 1 0.96 0.00 1.15 141 XMLngstWrd_00 1 5.77 29.41 1.15 142 XM_GoogleGroups 1 5.77 29.41 1.15 143 XMGppyBdWords 1 0.96 0.00 1.15 144 RCVD_IN_RP_SAFE 1 0.96 0.00 1.15 145 T_XMDrugObfuBody_14 1 0.96 0.00 1.15 146 XM_Ancestry_Forge 1 0.96 0.00 1.15 147 BOTNET 1 4.81 23.53 1.15 148 XM_DIRTYINTL 1 1.92 5.88 1.15 149 TVD_RCVD_IP 1 1.92 5.88 1.15 150 XMSubMetaSxObfu_03 1 0.96 0.00 1.15 151 XMDiploma_00 1 0.96 0.00 1.15 152 XMSubEmpty 1 1.92 5.88 1.15 153 T_Symld_Words_02 1 0.96 0.00 1.15 154 XMLngstWrd_01 1 5.77 29.41 1.15 155 XMLngstWrd_02 1 5.77 29.41 1.15 156 LONG_JUNK_URI 1 0.96 0.00 1.15 157 TO_MALFORMED 1 0.96 0.00 1.15 158 MSGID_NOFQDN1 1 0.96 0.00 1.15 159 TR_Symld_Words 1 1.92 5.88 1.15 160 TM2_M_BODY_EMPTY 1 0.96 0.00 1.15 161 XM_Body_Obfu01 1 0.96 0.00 1.15 162 XM_B_Unsub2 1 1.92 5.88 1.15 163 NML_ADSP_CUSTOM_MED 1 0.96 0.00 1.15 164 XM_Body_Dirty_Words_01 1 1.92 5.88 1.15 165 XMSubMetaSx_00 1 0.96 0.00 1.15 166 FROM_GOV_DKIM_AU 1 2.88 11.76 1.15 167 T_REMOTE_IMAGE 1 0.96 0.00 1.15 ----------------------------------------------------------------------