Email: 77 Autolearn: 0 AvgScore: 6.83 AvgScanTime: 1.31 sec Spam: 25 Autolearn: 0 AvgScore: 15.32 AvgScanTime: 1.18 sec Ham: 52 Autolearn: 0 AvgScore: 2.75 AvgScanTime: 1.37 sec Time Spent Running SA: 0.03 hours Time Spent Processing Spam: 0.01 hours Time Spent Processing Ham: 0.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 24 81.82 96.00 75.00 2 DKIM_VALID 22 74.03 88.00 67.31 3 XM_DK_Pass 22 80.52 88.00 76.92 4 DKIM_SIGNED 22 80.52 88.00 76.92 5 XM_B_SpammyWords 20 46.75 80.00 30.77 6 XMListUnsubscribeExists 19 61.04 76.00 53.85 7 DCC_CHECK 18 54.55 72.00 46.15 8 T_SCC_BODY_TEXT_LINE 17 81.82 68.00 88.46 9 XM_B_Unicode 17 62.34 68.00 59.62 10 DKIM_VALID_AU 15 51.95 60.00 48.08 11 RELAYCOUNTRY_US 14 61.04 56.00 63.46 12 DKIM_VALID_EF 14 41.56 56.00 34.62 13 LOC_TINY_FONT_1 13 28.57 52.00 17.31 14 TR_XM_DK_Unsub 11 29.87 44.00 23.08 15 BAYES_50 10 63.64 40.00 75.00 16 RCVD_IN_MSPIKE_H2 10 29.87 40.00 25.00 17 HTML_FONT_LOW_CONTRAST 9 37.66 36.00 38.46 18 UNTRUSTED_Relay 9 20.78 36.00 13.46 19 MIME_HTML_MOSTLY 8 19.48 32.00 13.46 20 SpammyFromTLD_01 8 10.39 32.00 0.00 21 XM_B_SpammyWords2 8 15.58 32.00 7.69 22 XMSubLong 8 31.17 32.00 30.77 23 URI_NOVOWEL 7 11.69 28.00 3.85 24 XM_DK_Undo_02 7 11.69 28.00 3.85 25 RCVD_IN_MSPIKE_WL 7 32.47 28.00 34.62 26 DCC_CHECK_NEGATIVE 7 45.45 28.00 53.85 27 MIME_HTML_ONLY 7 22.08 28.00 19.23 28 MPART_ALT_DIFF 7 10.39 28.00 1.92 29 TR_XM_DKIM_Undo 7 9.09 28.00 0.00 30 BAYES_99 7 10.39 28.00 1.92 31 XM_B_Unicode3 6 22.08 24.00 21.15 32 XMSubMetaSx_00 6 11.69 24.00 5.77 33 XM_Body_Dirty_Words 6 16.88 24.00 13.46 34 RELAYCOUNTRY_META 6 15.58 24.00 11.54 35 XM_Multi_Part_URI 6 15.58 24.00 11.54 36 XM_UB99 5 6.49 20.00 0.00 37 FVGT_m_MULTI_ODD 5 29.87 20.00 34.62 38 TR_XM_SpammyWords4 5 7.79 20.00 1.92 39 TR_XM_SpammyRelay 5 14.29 20.00 11.54 40 LOTS_OF_MONEY 5 14.29 20.00 11.54 41 BAYES_80 5 7.79 20.00 1.92 42 TR_DCC_Bayes_99 5 6.49 20.00 0.00 43 XM_B_SpammyWords3 4 7.79 16.00 3.85 44 XM_B_Unsub 4 7.79 16.00 3.85 45 T_REMOTE_IMAGE 4 6.49 16.00 1.92 46 TR_XM_BayesUnsub 4 7.79 16.00 3.85 47 HTML_IMAGE_RATIO_06 4 5.19 16.00 0.00 48 XM_DIRTYINTL 3 3.90 12.00 0.00 49 XMSexyCombo_05 3 11.69 12.00 11.54 50 XM_UB999 3 3.90 12.00 0.00 51 UNPARSEABLE_RELAY 3 19.48 12.00 23.08 52 TR_XM_SPAMCOP 3 3.90 12.00 0.00 53 RELAYCOUNTRY_IN 3 5.19 12.00 1.92 54 T_MONEY_PERCENT 3 3.90 12.00 0.00 55 TR_LOTS_OF_MONEY2 3 3.90 12.00 0.00 56 RCVD_IN_MSPIKE_H3 3 14.29 12.00 15.38 57 XM_B_Investor 3 3.90 12.00 0.00 58 LONG_JUNK_URI 3 3.90 12.00 0.00 59 RCVD_IN_BL_SPAMCOP_NET 3 3.90 12.00 0.00 60 T_KAM_HTML_FONT_INVALID 3 10.39 12.00 9.62 61 BAYES_999 3 5.19 12.00 1.92 62 T_XMDrugObfuBody_14 2 2.60 8.00 0.00 63 TR_XM_SpammyWords2 2 2.60 8.00 0.00 64 TR_Symld_Words 2 2.60 8.00 0.00 65 XM_Body_Dirty_Words_01 2 2.60 8.00 0.00 66 RCVD_IN_MSPIKE_H5 2 10.39 8.00 11.54 67 BOTNET_NORDNS 2 2.60 8.00 0.00 68 BOTNET_IPINHOSTNAME 2 7.79 8.00 7.69 69 XM_UB50 2 9.09 8.00 9.62 70 URIBL_DBL_SPAM 2 2.60 8.00 0.00 71 TooManyTo_001 2 6.49 8.00 5.77 72 T_TM2_M_HEADER_IN_MSG 2 16.88 8.00 21.15 73 TR_XM_BayesRelay 2 2.60 8.00 0.00 74 RCVD_IN_MSPIKE_H4 2 7.79 8.00 7.69 75 TM2_M_URI_OPT_OUT 2 2.60 8.00 0.00 76 BOTNET 2 3.90 8.00 1.92 77 BAYES_60 2 9.09 8.00 9.62 78 FSL_BULK_SIG 2 12.99 8.00 15.38 79 IMPOTENCE 1 1.30 4.00 0.00 80 XMSubPhish11 1 1.30 4.00 0.00 81 FROM_ADDR_WS 1 1.30 4.00 0.00 82 TR_XM_NoHeaderRelay 1 1.30 4.00 0.00 83 MONEY_BACK 1 1.30 4.00 0.00 84 RELAYCOUNTRY_AU 1 1.30 4.00 0.00 85 TR_Mismatch_TLD_02 1 1.30 4.00 0.00 86 XM_B_Phish66 1 1.30 4.00 0.00 87 XM_H_PHPOS 1 1.30 4.00 0.00 88 REPLYTO_WITHOUT_TO_CC 1 1.30 4.00 0.00 89 XM_UB80 1 1.30 4.00 0.00 90 TR_XM_Base64_M2 1 1.30 4.00 0.00 91 RCVD_IN_RP_RNBL 1 1.30 4.00 0.00 92 XMClaimOffer 1 1.30 4.00 0.00 93 HTML_IMAGE_RATIO_04 1 1.30 4.00 0.00 94 RELAYCOUNTRY_CA 1 1.30 4.00 0.00 95 TR_XM_PHPDW 1 1.30 4.00 0.00 96 XMStockSpam_06 1 1.30 4.00 0.00 97 HTML_TAG_BALANCE_BODY 1 7.79 4.00 9.62 98 DIET_1 1 1.30 4.00 0.00 99 XM_H_PHPMailer 1 1.30 4.00 0.00 100 DRUGS_ERECTILE 1 1.30 4.00 0.00 101 FROM_SUSPICIOUS_NTLD 1 1.30 4.00 0.00 102 HELO_NO_DOMAIN 1 1.30 4.00 0.00 103 TR_XM_PhishingBody 1 3.90 4.00 3.85 104 XMSexyCombo_01 1 2.60 4.00 1.92 105 RELAYCOUNTRY_FR 1 1.30 4.00 0.00 106 XM_UncommonTLD01 1 3.90 4.00 3.85 107 TR_XM_COVIDMETA1 1 1.30 4.00 0.00 108 HTML_IMAGE_ONLY_24 1 1.30 4.00 0.00 109 MISSING_HEADERS 1 1.30 4.00 0.00 110 FROM_WSP_TRAIL 1 1.30 4.00 0.00 111 XM_RECPTID 1 1.30 4.00 0.00 112 BAYES_95 1 1.30 4.00 0.00 113 FROM_EXCESS_BASE64 1 1.30 4.00 0.00 114 TR_XM_PHPForged 1 1.30 4.00 0.00 115 T_XMDrugObfuBody_00 1 1.30 4.00 0.00 116 XMStrtUSub 1 3.90 4.00 3.85 117 TR_XM_SB_Phish 1 1.30 4.00 0.00 118 SHORT_URI_2 1 1.30 4.00 0.00 119 XM_B_Phish_Phrases 1 1.30 4.00 0.00 120 TR_XM_FormFill2 1 1.30 4.00 0.00 121 HELO_NODOT 1 1.30 4.00 0.00 122 FSL_HELO_NON_FQDN_1 1 1.30 4.00 0.00 123 XM_SendGrid 1 6.49 4.00 7.69 124 KHOP_HELO_FCRDNS 1 1.30 4.00 0.00 125 XM_Body_Obfu01 1 1.30 4.00 0.00 126 PDS_OTHER_BAD_TLD 1 1.30 4.00 0.00 127 FROM_SUSPICIOUS_NTLD_FP 1 1.30 4.00 0.00 128 XM_H_PHPOS_M 1 1.30 4.00 0.00 129 TR_XM_DK_SendGrid 1 1.30 4.00 0.00 130 TR_XM_UnparsRelay 1 3.90 4.00 3.85 131 TR_XM_Base64_M1 1 1.30 4.00 0.00 132 XM_Dr_From 1 1.30 4.00 0.00 133 XMSubNoVowel 1 1.30 4.00 0.00 134 XM_ProductURIs 1 3.90 4.00 3.85 135 XM_SPF_SoftFail 1 1.30 4.00 0.00 136 XM_UB95 1 1.30 4.00 0.00 137 HTML_IMAGE_RATIO_02 1 6.49 4.00 7.69 138 URI_TRUNCATED 1 1.30 4.00 0.00 139 XMCmmnCold 1 1.30 4.00 0.00 140 XM_B_SpammyTLD 1 1.30 4.00 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 46 81.82 68.00 88.46 2 DKIM_SIGNED 40 80.52 88.00 76.92 3 XM_DK_Pass 40 80.52 88.00 76.92 4 BAYES_50 39 63.64 40.00 75.00 5 HTML_MESSAGE 39 81.82 96.00 75.00 6 DKIM_VALID 35 74.03 88.00 67.31 7 RELAYCOUNTRY_US 33 61.04 56.00 63.46 8 XM_B_Unicode 31 62.34 68.00 59.62 9 XMListUnsubscribeExists 28 61.04 76.00 53.85 10 DCC_CHECK_NEGATIVE 28 45.45 28.00 53.85 11 DKIM_VALID_AU 25 51.95 60.00 48.08 12 DCC_CHECK 24 54.55 72.00 46.15 13 HTML_FONT_LOW_CONTRAST 20 37.66 36.00 38.46 14 DKIM_VALID_EF 18 41.56 56.00 34.62 15 RCVD_IN_MSPIKE_WL 18 32.47 28.00 34.62 16 FVGT_m_MULTI_ODD 18 29.87 20.00 34.62 17 XMSubLong 16 31.17 32.00 30.77 18 XM_B_SpammyWords 16 46.75 80.00 30.77 19 RCVD_IN_MSPIKE_H2 13 29.87 40.00 25.00 20 TR_XM_DK_Unsub 12 29.87 44.00 23.08 21 UNPARSEABLE_RELAY 12 19.48 12.00 23.08 22 T_TM2_M_HEADER_IN_MSG 11 16.88 8.00 21.15 23 XM_B_Unicode3 11 22.08 24.00 21.15 24 XMNumbers 10 12.99 0.00 19.23 25 T_XMHurry_00 10 12.99 0.00 19.23 26 MIME_HTML_ONLY 10 22.08 28.00 19.23 27 ALL_TRUSTED 10 12.99 0.00 19.23 28 LOC_TINY_FONT_1 9 28.57 52.00 17.31 29 FSL_BULK_SIG 8 12.99 8.00 15.38 30 T_TooManySym_01 8 10.39 0.00 15.38 31 RCVD_IN_MSPIKE_H3 8 14.29 12.00 15.38 32 UNTRUSTED_Relay 7 20.78 36.00 13.46 33 XM_Body_Dirty_Words 7 16.88 24.00 13.46 34 MIME_HTML_MOSTLY 7 19.48 32.00 13.46 35 T_TooManySym_02 7 9.09 0.00 13.46 36 XM_Multi_Part_URI 6 15.58 24.00 11.54 37 RELAYCOUNTRY_META 6 15.58 24.00 11.54 38 LOTS_OF_MONEY 6 14.29 20.00 11.54 39 TR_XM_SpammyRelay 6 14.29 20.00 11.54 40 RCVD_IN_MSPIKE_H5 6 10.39 8.00 11.54 41 XMSexyCombo_05 6 11.69 12.00 11.54 42 XMNoVowels 6 7.79 0.00 11.54 43 T_KAM_HTML_FONT_INVALID 5 10.39 12.00 9.62 44 BAYES_60 5 9.09 8.00 9.62 45 XM_UB50 5 9.09 8.00 9.62 46 HTML_TAG_BALANCE_BODY 5 7.79 4.00 9.62 47 DKIM_INVALID 5 6.49 0.00 9.62 48 HTML_IMAGE_RATIO_02 4 6.49 4.00 7.69 49 RCVD_IN_MSPIKE_H4 4 7.79 8.00 7.69 50 XM_SendGrid 4 6.49 4.00 7.69 51 XM_B_SpammyWords2 4 15.58 32.00 7.69 52 TO_MALFORMED 4 5.19 0.00 7.69 53 BOTNET_IPINHOSTNAME 4 7.79 8.00 7.69 54 BAYES_00 3 3.90 0.00 5.77 55 RELAYCOUNTRY_DE 3 3.90 0.00 5.77 56 TR_XM_DK_Bayes2 3 3.90 0.00 5.77 57 TR_XM_SpammyWords5 3 3.90 0.00 5.77 58 XM_H_Long_From01 3 3.90 0.00 5.77 59 TooManyTo_001 3 6.49 8.00 5.77 60 TR_XM_DK_Bayes 3 3.90 0.00 5.77 61 XMSubMetaSx_00 3 11.69 24.00 5.77 62 TR_XM_DK_Bayes1 3 3.90 0.00 5.77 63 BAYES_05 3 3.90 0.00 5.77 64 SCC_BODY_URI_ONLY 3 3.90 0.00 5.77 65 NUMERIC_HTTP_ADDR 3 3.90 0.00 5.77 66 TVD_SPACE_RATIO 2 2.60 0.00 3.85 67 XM_ProductURIs 2 3.90 4.00 3.85 68 TR_XM_UnparsRelay 2 3.90 4.00 3.85 69 RELAYCOUNTRY_GB 2 2.60 0.00 3.85 70 XMGappySubj_01 2 2.60 0.00 3.85 71 TR_XM_BayesUnsub 2 7.79 16.00 3.85 72 XMStrtUSub 2 3.90 4.00 3.85 73 XM_B_Unsub 2 7.79 16.00 3.85 74 XM_S_SubURI 2 2.60 0.00 3.85 75 IN_ZIMBRA_NJ_WHITELIST 2 2.60 0.00 3.85 76 SUBJ_ALL_CAPS 2 2.60 0.00 3.85 77 INVALID_MSGID 2 2.60 0.00 3.85 78 XM_UncommonTLD01 2 3.90 4.00 3.85 79 TR_XM_PhishingBody 2 3.90 4.00 3.85 80 XM_DK_Undo_02 2 11.69 28.00 3.85 81 XM_B_SpammyWords3 2 7.79 16.00 3.85 82 XMPhish11 2 2.60 0.00 3.85 83 URI_NOVOWEL 2 11.69 28.00 3.85 84 URI_HEX 1 1.30 0.00 1.92 85 BAYES_999 1 5.19 12.00 1.92 86 BAYES_99 1 10.39 28.00 1.92 87 BOTNET 1 3.90 8.00 1.92 88 XMSubMetaI_00 1 1.30 0.00 1.92 89 ANY_BOUNCE_MESSAGE 1 1.30 0.00 1.92 90 SHORT_URI 1 1.30 0.00 1.92 91 HTML_IMAGE_ONLY_32 1 1.30 0.00 1.92 92 RDNS_DYNAMIC 1 1.30 0.00 1.92 93 BAYES_80 1 7.79 20.00 1.92 94 XM_Evil_Numbers_Gen 1 1.30 0.00 1.92 95 XM_DKIMWhitelistDomains 1 1.30 0.00 1.92 96 T_TooManySym_03 1 1.30 0.00 1.92 97 BOUNCE_MESSAGE 1 1.30 0.00 1.92 98 MPART_ALT_DIFF 1 10.39 28.00 1.92 99 T_REMOTE_IMAGE 1 6.49 16.00 1.92 100 XM_CamelCaseFrm001 1 1.30 0.00 1.92 101 RCVD_IN_VALIDITY_CERTIFIED 1 1.30 0.00 1.92 102 CTE_8BIT_MISMATCH 1 1.30 0.00 1.92 103 RELAYCOUNTRY_IN 1 5.19 12.00 1.92 104 TR_XM_SpammyWords4 1 7.79 20.00 1.92 105 RCVD_IN_VALIDITY_SAFE 1 1.30 0.00 1.92 106 XMSexyCombo_01 1 2.60 4.00 1.92 107 HK_RANDOM_ENVFROM 1 1.30 0.00 1.92 108 XM_H_Undi_Recip 1 1.30 0.00 1.92 109 XM_PDF 1 1.30 0.00 1.92 110 NORMAL_HTTP_TO_IP 1 1.30 0.00 1.92 111 USER_IN_DEF_DKIM_WL 1 1.30 0.00 1.92 ----------------------------------------------------------------------