The categorisation of e-mails by eXpurgate is archived by adding additional information to the header of an e-mail. According to this information e-mails may be sorted in an appropriate manner by using rules defined in any usual mail client.

EACH E-MAIL CHECKED BY EXPURGATE IS ASSIGNED ONE OF THE FOLLOWING CATEGORIES:

  • clean: e-mails with no suspicious features

  • bulk: mass mails such as newsletters

  • bulk.advertising: advertising e-mails that are not typical Spam, but are usually deemed to be a nuisance

  • bulk.porn: e-mails containing pornographic material, but which are not Spam (e.g. pornographic newsletters)

  • Spam: e-mail definitively identified as Spam or phishing e-mail

  • suspect: e-mails suspected of being Spam or "bulk"

  • dangerous: e-mails which may include dangerous self-executing code or attachments with these features

  • dangerous.attachment: e-mails containing an executable attachment

  • dangerous.code: e-mails containing potential dangerous content, e.g. references to local files

  • dangerous.iframe: e-mails using the iframe feature

  • clean.empty: e-mails containing no content at all, neither in the subject nor in the body

  • clean.empty-body: e-mails with a completely empty body

  • clean.almost-empty: e-mails with a extremely short body

  • clean.bounce: e-mails returned back to sender due to an error

IF THE OPTIONAL "VIRUS CHECK" IS ACTIVATED, E-MAILS CONTAINING VIRUSES ARE MARKED AS:

  • dangerous.virus: e-mails containing a virus

  • dangerous.virus-outbreak: E-mails, that are most likely to contain a new virus not yet recognized by virus detection due to the newness of their debut