It is not junk!

Section Headers Visualization Guide

📊 Overview of Analysis Structure

The spam analysis results are organized into 4 main sections, with 2 categories of indicators:

📈 Negative Indicators

These sections contain triggers that increase the spam score:

  • Subject Line Analysis
  • Infrastructure & Technical Issues
  • Content Analysis

📉 Positive Indicators

This section contains triggers that decrease the spam score:

  • Positive Indicators

Subject Line Analysis

ISSUE

Triggers that indicate spam-like subject line characteristics

Examples:

Infrastructure & Technical Issues

ISSUE

Technical problems and suspicious infrastructure indicators

Authentication Issues:
  • SPF temperror (DNS timeout)
  • SPF fail
  • DKIM fail
  • DMARC fail
  • DNS timeout error
Sending Platforms:
  • Amazon SES infrastructure
  • marketing platform: amazonses.com
  • generic UUID return path
Microsoft Indicators:
  • Microsoft SCL: 5 (moderate)
  • Microsoft junk classification
  • Microsoft ARA codes: 20 rules triggered
Domain Issues:
  • domain misalignment: nlcyber.com vs send.nlcyber.com
  • generic UUID return path
Header Issues:
  • tracking headers
  • marketing headers
  • Amazon SES headers
Other Infrastructure:
  • bulk markers
  • infrastructure: amazonses.com

Content Analysis

ISSUE

Content-based triggers found in email body

Urgency Indicators:
  • urgent, limited time, act now, hurry
Financial/Monetary:
  • free, money, discount, offer, sale
Marketing/Newsletter:
  • newsletter, subscribe, marketing, digest
Promotional Language:
  • amazing, incredible, exclusive, special
Call-to-Action:
  • click, download, register, sign up
Scarcity/Exclusivity:
  • limited, exclusive, only, scarce
Social Proof:
  • recommended, popular, trusted, best
Job Postings:
  • job, position, career, hire, employment
Formatting Issues:
  • high link density (15.2%)
  • very short body content
  • personal email domain
Other Content:
  • miscellaneous content triggers

Positive Indicators

GOOD

Good practices and legitimate email characteristics

Examples:
  • authentication headers
  • SPF/DKIM pass
  • both SPF and DKIM pass
  • DMARC pass
  • professional marketing infrastructure
  • List-Unsubscribe header
  • Precedence: bulk header
  • business domain
  • proper Message-ID format
  • personalization
  • body personalization: dear, hi, hello

🎯 Visual Flow

Email Analysis Results
├── 🔴 NEGATIVE INDICATORS (Increase Score)
│   ├── ## Subject Line Analysis
│   ├── ## Infrastructure & Technical Issues
│   │   ├── Authentication Issues
│   │   ├── Sending Platforms
│   │   ├── Microsoft Indicators
│   │   ├── Domain Issues
│   │   ├── Header Issues
│   │   └── Other Infrastructure
│   └── ## Content Analysis
│       ├── Urgency Indicators
│       ├── Financial/Monetary
│       ├── Marketing/Newsletter
│       ├── Promotional Language
│       ├── Call-to-Action
│       ├── Scarcity/Exclusivity
│       ├── Social Proof
│       ├── Job Postings
│       ├── Formatting Issues
│       └── Other Content
│
└── 🟢 POSITIVE INDICATORS (Decrease Score)
    └── ## Positive Indicators
        ├── Authentication passes
        ├── Professional infrastructure
        ├── Compliance headers
        └── Personalization

📋 Scoring Logic

  • Negative indicators add points to the spam score
  • Positive indicators subtract points from the spam score
  • Final score is capped between 0-10
Risk Level Score Range Description
LOW 0-2.9 Email is likely to be delivered normally
MEDIUM 3.0-5.9 Email may face some delivery challenges
HIGH 6.0-10.0 Email is likely to be flagged as spam

🎨 Display Format

Each section uses markdown-style formatting:

  • ## for main section headers
  • **Bold** for subcategory headers
  • Hierarchical bullet points for related items
  • Comma-separated lists for multiple triggers
  • Count indicators for repeated items: (3)

This structure provides a clear, organized view of what's affecting the email's spam score, making it easy to identify specific issues and positive practices.