Email: 78 Autolearn: 0 AvgScore: 4.22 AvgScanTime: 1.07 sec Spam: 21 Autolearn: 0 AvgScore: 13.14 AvgScanTime: 1.10 sec Ham: 57 Autolearn: 0 AvgScore: 0.93 AvgScanTime: 1.06 sec Time Spent Running SA: 0.02 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 19 80.77 90.48 77.19 2 DKIM_SIGNED 18 80.77 85.71 78.95 3 XM_B_Unicode 18 69.23 85.71 63.16 4 DKIM_VALID 17 74.36 80.95 71.93 5 XM_DK_Pass 17 76.92 80.95 75.44 6 DKIM_VALID_AU 16 71.79 76.19 70.18 7 XMListUnsubscribeExists 15 55.13 71.43 49.12 8 DCC_CHECK_NEGATIVE 14 79.49 66.67 84.21 9 RELAYCOUNTRY_META 14 42.31 66.67 33.33 10 XM_B_SpammyWords 13 51.28 61.90 47.37 11 T_SCC_BODY_TEXT_LINE 13 82.05 61.90 89.47 12 HTML_OBFUSCATE_05_10 11 38.46 52.38 33.33 13 RELAYCOUNTRY_CA 11 37.18 52.38 31.58 14 TM2_M_A_HREF_HREF 11 37.18 52.38 31.58 15 TR_XM_SpammyRelay 11 37.18 52.38 31.58 16 BAYES_99 10 12.82 47.62 0.00 17 TR_XM_DKIM_Undo 9 14.10 42.86 3.51 18 XM_DK_Undo_02 9 15.38 42.86 5.26 19 DCC_CHECK 7 20.51 33.33 15.79 20 RELAYCOUNTRY_US 7 47.44 33.33 52.63 21 XM_B_Unicode3 5 16.67 23.81 14.04 22 FORGED_RELAY_MUA_TO_MX 5 6.41 23.81 0.00 23 BAYES_80 4 15.38 19.05 14.04 24 FSL_BULK_SIG 4 8.97 19.05 5.26 25 XM_Multi_Part_URI 4 11.54 19.05 8.77 26 BAYES_999 3 3.85 14.29 0.00 27 UNTRUSTED_Relay 3 5.13 14.29 1.75 28 BAYES_95 3 8.97 14.29 7.02 29 HTML_FONT_LOW_CONTRAST 3 12.82 14.29 12.28 30 XM_H_Long_From01 3 6.41 14.29 3.51 31 T_KAM_HTML_FONT_INVALID 3 10.26 14.29 8.77 32 XM_DK_Undo_01 2 5.13 9.52 3.51 33 BOTNET 2 3.85 9.52 1.75 34 FORGED_GMAIL_RCVD 2 2.56 9.52 0.00 35 RCVD_IN_MSPIKE_H2 2 11.54 9.52 12.28 36 XMSubLong 2 14.10 9.52 15.79 37 T_REMOTE_IMAGE 2 2.56 9.52 0.00 38 URI_LONG_REPEAT 2 5.13 9.52 3.51 39 XM_B_SpammyTLD 2 3.85 9.52 1.75 40 TR_XM_UnparsRelay 2 2.56 9.52 0.00 41 XM_UncommonTLD01 2 5.13 9.52 3.51 42 BAYES_50 2 43.59 9.52 56.14 43 TM2_M_URI_OPT_OUT 2 3.85 9.52 1.75 44 HTML_IMAGE_RATIO_02 2 3.85 9.52 1.75 45 TR_DCC_Bayes_99 2 2.56 9.52 0.00 46 BAYES_60 2 7.69 9.52 7.02 47 TR_XM_InvalidRelay 2 2.56 9.52 0.00 48 DKIM_ADSP_CUSTOM_MED 2 5.13 9.52 3.51 49 XM_H_Undi_Recip 2 2.56 9.52 0.00 50 FVGT_m_MULTI_ODD 2 17.95 9.52 21.05 51 PDS_OTHER_BAD_TLD 2 2.56 9.52 0.00 52 UNPARSEABLE_RELAY 2 7.69 9.52 7.02 53 KHOP_HELO_FCRDNS 2 2.56 9.52 0.00 54 DKIM_VALID_EF 2 20.51 9.52 24.56 55 RCVD_IN_IADB_DK 1 5.13 4.76 5.26 56 RELAYCOUNTRY_KR 1 1.28 4.76 0.00 57 XM_SPF_SoftFail 1 1.28 4.76 0.00 58 OBFU_TEXT_ATTACH 1 1.28 4.76 0.00 59 RELAYCOUNTRY_PK 1 1.28 4.76 0.00 60 XM_B_DNDMA 1 2.56 4.76 1.75 61 XMSexyCombo_01 1 1.28 4.76 0.00 62 XM_H_PHPOS 1 1.28 4.76 0.00 63 XM_UB99 1 1.28 4.76 0.00 64 NML_ADSP_CUSTOM_MED 1 3.85 4.76 3.51 65 XMNumbers 1 8.97 4.76 10.53 66 SpammyFromTLD_01 1 1.28 4.76 0.00 67 RCVD_IN_BL_SPAMCOP_NET 1 3.85 4.76 3.51 68 RCVD_IN_MSPIKE_H3 1 5.13 4.76 5.26 69 MIME_HTML_ONLY 1 2.56 4.76 1.75 70 MPART_ALT_DIFF 1 1.28 4.76 0.00 71 MIME_QP_LONG_LINE 1 3.85 4.76 3.51 72 XM_B_SpammyWords2 1 5.13 4.76 5.26 73 TooManyTo_004 1 1.28 4.76 0.00 74 DKIM_INVALID 1 6.41 4.76 7.02 75 XM_CamelCaseFrm001 1 2.56 4.76 1.75 76 RDNS_DYNAMIC 1 1.28 4.76 0.00 77 XM_UB95 1 1.28 4.76 0.00 78 TR_XM_SpammyWords2 1 1.28 4.76 0.00 79 TooManyTo_001 1 6.41 4.76 7.02 80 TR_XM_FormFill2 1 1.28 4.76 0.00 81 PDS_RDNS_DYNAMIC_FP 1 1.28 4.76 0.00 82 XM_UB80 1 1.28 4.76 0.00 83 XMReplyNow 1 1.28 4.76 0.00 84 LotsOfNums_01 1 5.13 4.76 5.26 85 RCVD_IN_IADB_SPF 1 5.13 4.76 5.26 86 RELAYCOUNTRY_PL 1 1.28 4.76 0.00 87 XM_Body_Dirty_Words 1 7.69 4.76 8.77 88 BOTNET_IPINHOSTNAME 1 5.13 4.76 5.26 89 MIME_HTML_MOSTLY 1 2.56 4.76 1.75 90 XM_B_Investor 1 1.28 4.76 0.00 91 RELAYCOUNTRY_IN 1 1.28 4.76 0.00 92 XMSubMetaSx_00 1 2.56 4.76 1.75 93 BOTNET_NORDNS 1 1.28 4.76 0.00 94 LOC_TINY_FONT_1 1 14.10 4.76 17.54 95 RCVD_IN_MSPIKE_WL 1 17.95 4.76 22.81 96 TR_Mismatch_TLD_01 1 1.28 4.76 0.00 97 T_XMDrugObfuBody_08 1 6.41 4.76 7.02 98 TR_XM_PHPDW 1 1.28 4.76 0.00 99 RCVD_IN_IADB_LISTED 1 5.13 4.76 5.26 100 TR_XM_PHPForged 1 1.28 4.76 0.00 101 HTML_IMAGE_RATIO_06 1 1.28 4.76 0.00 102 TooManyTo_003 1 1.28 4.76 0.00 103 TooManyTo_002 1 1.28 4.76 0.00 104 RCVD_IN_IADB_SENDERID 1 5.13 4.76 5.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 51 82.05 61.90 89.47 2 DCC_CHECK_NEGATIVE 48 79.49 66.67 84.21 3 DKIM_SIGNED 45 80.77 85.71 78.95 4 HTML_MESSAGE 44 80.77 90.48 77.19 5 XM_DK_Pass 43 76.92 80.95 75.44 6 DKIM_VALID 41 74.36 80.95 71.93 7 DKIM_VALID_AU 40 71.79 76.19 70.18 8 XM_B_Unicode 36 69.23 85.71 63.16 9 BAYES_50 32 43.59 9.52 56.14 10 RELAYCOUNTRY_US 30 47.44 33.33 52.63 11 XMListUnsubscribeExists 28 55.13 71.43 49.12 12 XM_B_SpammyWords 27 51.28 61.90 47.37 13 HTML_OBFUSCATE_05_10 19 38.46 52.38 33.33 14 RELAYCOUNTRY_META 19 42.31 66.67 33.33 15 TM2_M_A_HREF_HREF 18 37.18 52.38 31.58 16 RELAYCOUNTRY_CA 18 37.18 52.38 31.58 17 TR_XM_SpammyRelay 18 37.18 52.38 31.58 18 DKIM_VALID_EF 14 20.51 9.52 24.56 19 RCVD_IN_MSPIKE_WL 13 17.95 4.76 22.81 20 FVGT_m_MULTI_ODD 12 17.95 9.52 21.05 21 T_TM2_M_HEADER_IN_MSG 11 14.10 0.00 19.30 22 LOC_TINY_FONT_1 10 14.10 4.76 17.54 23 DCC_CHECK 9 20.51 33.33 15.79 24 XMSubLong 9 14.10 9.52 15.79 25 XM_B_Unicode3 8 16.67 23.81 14.04 26 BAYES_80 8 15.38 19.05 14.04 27 ALL_TRUSTED 8 10.26 0.00 14.04 28 RCVD_IN_MSPIKE_H5 8 10.26 0.00 14.04 29 HTML_FONT_LOW_CONTRAST 7 12.82 14.29 12.28 30 RCVD_IN_MSPIKE_H2 7 11.54 9.52 12.28 31 XMNumbers 6 8.97 4.76 10.53 32 BAYES_40 5 6.41 0.00 8.77 33 XM_DKIMWhitelistDomains 5 6.41 0.00 8.77 34 XM_Body_Dirty_Words 5 7.69 4.76 8.77 35 XM_Multi_Part_URI 5 11.54 19.05 8.77 36 XM_B_Unsub 5 6.41 0.00 8.77 37 T_KAM_HTML_FONT_INVALID 5 10.26 14.29 8.77 38 BOUNCE_MESSAGE 4 5.13 0.00 7.02 39 ANY_BOUNCE_MESSAGE 4 5.13 0.00 7.02 40 XMGappySubj_01 4 5.13 0.00 7.02 41 T_TooManySym_02 4 5.13 0.00 7.02 42 TooManyTo_001 4 6.41 4.76 7.02 43 BAYES_95 4 8.97 14.29 7.02 44 DKIM_INVALID 4 6.41 4.76 7.02 45 BAYES_60 4 7.69 9.52 7.02 46 UNPARSEABLE_RELAY 4 7.69 9.52 7.02 47 T_TooManySym_01 4 5.13 0.00 7.02 48 T_XMDrugObfuBody_08 4 6.41 4.76 7.02 49 RCVD_IN_MSPIKE_H3 3 5.13 4.76 5.26 50 RCVD_IN_IADB_DK 3 5.13 4.76 5.26 51 TR_XM_DK_Bayes2 3 3.85 0.00 5.26 52 FSL_BULK_SIG 3 8.97 19.05 5.26 53 XM_B_SpammyWords2 3 5.13 4.76 5.26 54 USER_IN_DEF_DKIM_WL 3 3.85 0.00 5.26 55 BOTNET_IPINHOSTNAME 3 5.13 4.76 5.26 56 BAYES_00 3 3.85 0.00 5.26 57 XM_DK_Undo_02 3 15.38 42.86 5.26 58 LotsOfNums_01 3 5.13 4.76 5.26 59 RCVD_IN_IADB_SPF 3 5.13 4.76 5.26 60 TR_XM_DK_Unsub 3 3.85 0.00 5.26 61 XMGappySubj_02 3 3.85 0.00 5.26 62 RCVD_IN_IADB_SENDERID 3 5.13 4.76 5.26 63 TR_XM_DK_Bayes 3 3.85 0.00 5.26 64 TR_XM_DK_Bayes1 3 3.85 0.00 5.26 65 RCVD_IN_IADB_LISTED 3 5.13 4.76 5.26 66 INVALID_MSGID 3 3.85 0.00 5.26 67 IN_ZIMBRA_NJ_WHITELIST 3 3.85 0.00 5.26 68 TR_XM_DKIM_Undo 2 14.10 42.86 3.51 69 RCVD_IN_BL_SPAMCOP_NET 2 3.85 4.76 3.51 70 NML_ADSP_CUSTOM_MED 2 3.85 4.76 3.51 71 XM_B_Phish_Phrases 2 2.56 0.00 3.51 72 TR_XM_SpammyWords4 2 2.56 0.00 3.51 73 XM_DK_Undo_01 2 5.13 9.52 3.51 74 TR_XM_BayesUnsub 2 2.56 0.00 3.51 75 XMStrtUSub 2 2.56 0.00 3.51 76 RCVD_IN_MSPIKE_H4 2 2.56 0.00 3.51 77 XM_UncommonTLD01 2 5.13 9.52 3.51 78 MIME_QP_LONG_LINE 2 3.85 4.76 3.51 79 URI_LONG_REPEAT 2 5.13 9.52 3.51 80 DKIM_ADSP_CUSTOM_MED 2 5.13 9.52 3.51 81 XM_H_Long_From01 2 6.41 14.29 3.51 82 BASE64_LENGTH_79_INF 2 2.56 0.00 3.51 83 TO_MALFORMED 2 2.56 0.00 3.51 84 XM_ZIP 2 2.56 0.00 3.51 85 XM_Evil_Numbers_Gen 2 2.56 0.00 3.51 86 HTML_IMAGE_ONLY_20 2 2.56 0.00 3.51 87 HTML_IMAGE_RATIO_04 2 2.56 0.00 3.51 88 LOTS_OF_MONEY 2 2.56 0.00 3.51 89 BOTNET 1 3.85 9.52 1.75 90 TR_XM_DK_SendGrid 1 1.28 0.00 1.75 91 MIME_HTML_ONLY 1 2.56 4.76 1.75 92 MIME_HEADER_CTYPE_ONLY 1 1.28 0.00 1.75 93 XM_B_DNDMA 1 2.56 4.76 1.75 94 XMNoVowels 1 1.28 0.00 1.75 95 XM_DIRTYINTL 1 1.28 0.00 1.75 96 TM2_M_URI_OPT_OUT 1 3.85 9.52 1.75 97 T_XMDrugObfuBody_14 1 1.28 0.00 1.75 98 XM_UB50 1 1.28 0.00 1.75 99 XMStockSpam_06 1 1.28 0.00 1.75 100 XM_B_Unsub2 1 1.28 0.00 1.75 101 XM_B_SpammyTLD 1 3.85 9.52 1.75 102 XMSexyCombo_05 1 1.28 0.00 1.75 103 UNTRUSTED_Relay 1 5.13 14.29 1.75 104 TVD_SPACE_RATIO 1 1.28 0.00 1.75 105 RCVD_IN_IADB_VOUCHED 1 1.28 0.00 1.75 106 XMSubMetaSxObfu_03 1 1.28 0.00 1.75 107 XM_CamelCaseFrm001 1 2.56 4.76 1.75 108 TR_XM_SpammyWords5 1 1.28 0.00 1.75 109 MSGID_NOFQDN1 1 1.28 0.00 1.75 110 XMSubMetaSx_00 1 2.56 4.76 1.75 111 PLING_QUERY 1 1.28 0.00 1.75 112 MIME_HTML_MOSTLY 1 2.56 4.76 1.75 113 XM_SendGrid 1 1.28 0.00 1.75 114 HTML_IMAGE_RATIO_02 1 3.85 9.52 1.75 115 XMCmmnCold 1 1.28 0.00 1.75 116 XMLngstWrd_00 1 1.28 0.00 1.75 117 CHARSET_FARAWAY_HEADER 1 1.28 0.00 1.75 118 RCVD_IN_IADB_OPTIN 1 1.28 0.00 1.75 119 TM2_M_VERY_LONG_WORD 1 1.28 0.00 1.75 120 BAYES_05 1 1.28 0.00 1.75 121 MIME_CHARSET_FARAWAY 1 1.28 0.00 1.75 122 RELAYCOUNTRY_CN 1 1.28 0.00 1.75 123 WEIRD_PORT 1 1.28 0.00 1.75 124 TM2_M_HAS_BSLASH_URI 1 1.28 0.00 1.75 ----------------------------------------------------------------------