HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (42 rules, 32 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.34 avg Spam%=1.45 avg Ham%=2.70
  FSL_ABUSED_WEB_2:  bad, avg S/O=0.43 avg Spam%=0.58 avg Ham%=0.61
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.41 avg Spam%=1.27 avg Ham%=1.56
  FSL_NOT_FROM_HOTMAIL:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.07
  FSL_NOT_FROM_YAHOO:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.60
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.71
  FSL_RCVD_EX_1:  bad, avg S/O=0.60 avg Spam%=53.98 avg Ham%=36.43
  FSL_RCVD_EX_2:  bad, avg S/O=0.40 avg Spam%=18.56 avg Ham%=28.22
  FSL_RCVD_EX_3:  bad, avg S/O=0.21 avg Spam%=5.79 avg Ham%=21.14
  FSL_RCVD_EX_4:  bad, avg S/O=0.75 avg Spam%=13.79 avg Ham%=4.70
  FSL_RCVD_EX_5:  bad, avg S/O=0.65 avg Spam%=5.04 avg Ham%=2.74
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.41 avg Spam%=2.82 avg Ham%=4.06
  FSL_RCVD_TR_1:  bad, avg S/O=0.10 avg Spam%=2.88 avg Ham%=24.64
  FSL_RCVD_TR_4:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.19
  FSL_RCVD_TR_5:  bad, avg S/O=0.62 avg Spam%=44.51 avg Ham%=26.86
  FSL_RCVD_TR_GT_5:  bad, avg S/O=0.20 avg Spam%=0.03 avg Ham%=0.11
  FSL_RCVD_UT_1:  bad, avg S/O=0.60 avg Spam%=53.98 avg Ham%=35.77
  FSL_RCVD_UT_2:  bad, avg S/O=0.40 avg Spam%=18.56 avg Ham%=28.22
  FSL_RCVD_UT_3:  bad, avg S/O=0.21 avg Spam%=5.79 avg Ham%=21.14
  FSL_RCVD_UT_4:  bad, avg S/O=0.75 avg Spam%=13.79 avg Ham%=4.70
  FSL_RCVD_UT_5:  bad, avg S/O=0.65 avg Spam%=5.04 avg Ham%=2.74
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.41 avg Spam%=2.82 avg Ham%=4.06
  __FSL_COUNT_EXTERN:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=97.29
      # used in: FSL_RCVD_EX_0 FSL_RCVD_EX_1 FSL_RCVD_EX_2 FSL_RCVD_EX_3 
FSL_RCVD_EX_4 FSL_RCVD_EX_5 FSL_RCVD_EX_GT_5
  __FSL_COUNT_TRUST:  bad, avg S/O=0.61 avg Spam%=89.96 avg Ham%=56.32
      # used in: FSL_NO_RCVD_1 FSL_RCVD_TR_1 FSL_RCVD_TR_4 FSL_RCVD_TR_5 
FSL_RCVD_TR_GT_5
  __FSL_COUNT_UNTRUST:  bad, avg S/O=0.51 avg Spam%=99.98 avg Ham%=96.63
      # used in: FSL_NO_RCVD_1 FSL_RCVD_UT_1 FSL_RCVD_UT_2 FSL_RCVD_UT_3 
FSL_RCVD_UT_4 FSL_RCVD_UT_5 FSL_RCVD_UT_GT_5
  __FSL_ENVFROM_HOTMAIL:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.06
      # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_LIVE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
      # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_ENVFROM_YAHOO:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
      # used in: FSL_NOT_FROM_YAHOO
  __FSL_RELAY_GOOGLE:  bad, avg S/O=0.03 avg Spam%=0.11 avg Ham%=3.74
      # used in: URI_GOOGLE_PROXY
  __FSL_RELAY_HOTMAIL:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.02
      # used in: FSL_NOT_FROM_HOTMAIL
  __FSL_RELAY_YAHOO:  bad, avg S/O=0.37 avg Spam%=0.13 avg Ham%=0.22
      # used in: FSL_NOT_FROM_YAHOO

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.17 avg Spam%=0.06 avg Ham%=0.28

rulesrc/sandbox/pds/20_ntld.cf (21 rules, 4 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all
  __VPSNUMBERONLY_TLD:  no hits at all
      # used in: VPS_NO_NTLD

rulesrc/sandbox/pds/20_gdocs.cf (9 rules, 4 bad):

  __PDS_GOOGLE_DRIVE_SHARE:  no hits of target type
      # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD
  __PDS_GOOGLE_DRIVE_SHARE_1:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
      # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_2:  no hits of target type
      # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE
  __PDS_GOOGLE_DRIVE_SHARE_3:  no hits at all
      # used in: GOOGLE_DRIVE_REPLY_BAD_NTLD __PDS_GOOGLE_DRIVE_SHARE

rulesrc/sandbox/pds/10_menaces.cf (16 rules, 4 bad):

  PDS_DOUBLE_URL:  bad, avg S/O=0.09 avg Spam%=0.91 avg Ham%=9.10
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  bad, avg S/O=0.78 avg Spam%=0.14 avg Ham%=0.00
  __KHOP_URI_HIDDEN:  bad, avg S/O=0.74 avg Spam%=1.00 avg Ham%=0.36
      # used in: PDS_URI_HIDDEN_HELO_NO_DOMAIN
  __PDS_DOUBLE_URL:  bad, avg S/O=0.09 avg Spam%=0.91 avg Ham%=9.10
      # used in: PDS_DOUBLE_URL

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  __RP_MATCHES_RCVD:  bad, avg S/O=0.14 avg Spam%=7.12 avg Ham%=43.90
      # used in: ADVANCE_FEE_3_NEW LIST_PRTL_SAME_USER THIS_AD 
ADVANCE_FEE_4_NEW_FORM GAPPY_HTML SUBJ_BROKEN_WORD SUBJ_OBFU_PUNCT_FEW 
SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG UC_GIBBERISH_OBFU

rulesrc/sandbox/mmartinec/20_misc.cf (13 rules, 7 bad):

  CR_IN_SUBJ:  no hits of target type
  LONGLINE:  bad, avg S/O=0.25 avg Spam%=4.86 avg Ham%=14.44
  MSGID_NOFQDN1:  bad, avg S/O=0.72 avg Spam%=0.05 avg Ham%=0.02
  MSGID_NOFQDN2:  bad, avg S/O=0.78 avg Spam%=13.60 avg Ham%=3.90
  __LONGLINE:  bad, avg S/O=0.25 avg Spam%=4.86 avg Ham%=14.44
      # used in: FROM_WORDY_SHORT LONGLINE URI_GOOGLE_PROXY
  __MSGID_NOFQDN1:  bad, avg S/O=0.72 avg Spam%=0.05 avg Ham%=0.02
      # used in: MSGID_NOFQDN1
  __MSGID_NOFQDN2:  bad, avg S/O=0.78 avg Spam%=13.60 avg Ham%=3.90
      # used in: TEQF_USR_MSGID_MALF MSGID_NOFQDN2

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_fsl_testing.cf (8 rules, 1 bad):

  FSL_YHG_ABUSE:  no hits of target type

rulesrc/sandbox/maddoc/99_doc_test.cf (16 rules, 11 bad):

  FSL_FBOOK_PHISH:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.08
  FSL_HAS_TINYURL:  bad, avg S/O=0.12 avg Spam%=0.02 avg Ham%=0.11
  FSL_HELO_BARE_IP_2:  bad, avg S/O=0.49 avg Spam%=0.19 avg Ham%=0.20
  FSL_HELO_DEVICE:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FSL_HELO_NON_FQDN_1:  bad, avg S/O=0.42 avg Spam%=1.50 avg Ham%=0.72
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.04
  FSL_STACKED_TEXT:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.00
  __CTYPE_MULTIPART_MIXED:  bad, avg S/O=0.10 avg Spam%=0.73 avg Ham%=6.58
      # used in: FSL_MIME_NO_TEXT
  __FSL_HELO_BARE_IP_2:  bad, avg S/O=0.55 avg Spam%=0.32 avg Ham%=0.26
      # used in: FSL_HELO_BARE_IP_2
  __TWO_WORD_LINES:  bad, avg S/O=0.66 avg Spam%=0.58 avg Ham%=0.30
      # used in: FSL_STACKED_TEXT

rulesrc/sandbox/kmcgrail/20_utf7.cf (1 rules, 1 bad):

  KAM_BLOCK_UTF7:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/kmcgrail/20_sergio_experimental.cf (8 rules, 3 bad):

  SERGIO_SUBJECT_PORN008:  bad, avg S/O=0.55 avg Spam%=0.01 avg Ham%=0.01
  SERGIO_SUBJECT_PORN009:  no hits of target type
  SERGIO_SUBJECT_PORN013:  no hits of target type

rulesrc/sandbox/kmcgrail/20_needed.cf (1 rules, 1 bad):

  __KAM_LOTTO2:  bad, avg S/O=0.07 avg Spam%=0.06 avg Ham%=0.85
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM

rulesrc/sandbox/kmcgrail/20_mailing_list.cf (1 rules, 1 bad):

  AC_HTML_NONSENSE_TAGS:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/kmcgrail/20_html_tests.cf (1 rules, 1 bad):

  KAM_HTML_FONT_INVALID:  bad, avg S/O=0.11 avg Spam%=1.58 avg Ham%=12.59

rulesrc/sandbox/kmcgrail/20_freemail.cf (2 rules, 2 bad):

  FREEMAIL_FORGED_FROMDOMAIN:  bad, avg S/O=0.12 avg Spam%=0.33 avg Ham%=2.31
  HEADER_FROM_DIFFERENT_DOMAINS:  bad, avg S/O=0.09 avg Spam%=3.41 avg 
Ham%=34.21
      # used in: FREEMAIL_FORGED_FROMDOMAIN

rulesrc/sandbox/kmcgrail/20_dfs_experimental.cf (1 rules, 1 bad):

  DSN_NO_MIMEVERSION:  bad, avg S/O=0.56 avg Spam%=0.38 avg Ham%=0.30

rulesrc/sandbox/kmcgrail/20_demoted_tests.cf (1 rules, 1 bad):

  MSGID_MULTIPLE_AT:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.05

rulesrc/sandbox/kmcgrail/20_darxus_experimental.cf (2 rules, 2 bad):

  SPOOFED_URL_HOST:  bad, avg S/O=0.01 avg Spam%=0.08 avg Ham%=5.62
  __SPOOFED_URL_HOST:  bad, avg S/O=0.03 avg Spam%=0.29 avg Ham%=10.47
      # used in: SPOOFED_URL_HOST

rulesrc/sandbox/kmcgrail/20_bug_7068.cf (2 rules, 2 bad):

  PP_TOO_MUCH_UNICODE02:  no hits at all
  PP_TOO_MUCH_UNICODE05:  no hits at all

rulesrc/sandbox/kmcgrail/20_bug_7063.cf (1 rules, 1 bad):

  PP_MIME_FAKE_ASCII_TEXT:  bad, avg S/O=0.65 avg Spam%=1.18 avg Ham%=0.61

rulesrc/sandbox/kmcgrail/20_body_tests.cf (4 rules, 1 bad):

  __KAM_BODY_LENGTH_LT_1024:  bad, avg S/O=0.71 avg Spam%=26.48 avg Ham%=10.81
      # used in: LONG_HEX_URI

rulesrc/sandbox/kmcgrail/20_ac_rules_test.cf (28 rules, 23 bad):

  AC_DIV_BONANZA:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.06
  AC_SPAMMY_URI_PATTERNS1:  no hits at all
  AC_SPAMMY_URI_PATTERNS10:  no hits at all
  AC_SPAMMY_URI_PATTERNS11:  no hits at all
  AC_SPAMMY_URI_PATTERNS12:  no hits at all
  AC_SPAMMY_URI_PATTERNS2:  no hits at all
  AC_SPAMMY_URI_PATTERNS3:  no hits at all
  AC_SPAMMY_URI_PATTERNS9:  no hits at all
  __AC_1SEQC_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS9
  __AC_1SEQV_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS9
  __AC_CHDSEQ_URI:  no hits of target type
      # used in: AC_SPAMMY_URI_PATTERNS12
  __AC_LAND_URI:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.00
      # used in: AC_SPAMMY_URI_PATTERNS2
  __AC_MHDSEQ_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS12
  __AC_NDOMLONGNASPX_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS11
  __AC_OUTI_URI:  no hits of target type
      # used in: AC_SPAMMY_URI_PATTERNS1
  __AC_OUTL_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS1
  __AC_PHPOFFSUB_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS3
  __AC_PHPOFFTOP_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS3
  __AC_PUNCTNUMS_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS10
  __AC_REPORT_URI:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.26
      # used in: AC_SPAMMY_URI_PATTERNS2
  __AC_RMOVE_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS9
  __AC_UHDSEQ_URI:  no hits at all
      # used in: AC_SPAMMY_URI_PATTERNS12
  __AC_UNSUB_URI:  bad, avg S/O=0.11 avg Spam%=0.06 avg Ham%=0.45
      # used in: AC_SPAMMY_URI_PATTERNS2

rulesrc/sandbox/khopesh/20_trust.cf (3 rules, 1 bad):

  __GREYLISTING:  bad, avg S/O=0.69 avg Spam%=1.97 avg Ham%=5.15
      # used in: S25R S25R_1 S25R_2 S25R_3 S25R_5

rulesrc/sandbox/khopesh/20_s25r.cf (11 rules, 5 bad):

  S25R:  bad, avg S/O=0.33 avg Spam%=12.02 avg Ham%=23.92
  S25R_1:  bad, avg S/O=0.37 avg Spam%=2.79 avg Ham%=4.84
  S25R_2:  bad, avg S/O=0.13 avg Spam%=0.66 avg Ham%=4.59
  S25R_3:  bad, avg S/O=0.70 avg Spam%=0.23 avg Ham%=0.10
  S25R_5:  bad, avg S/O=0.27 avg Spam%=0.15 avg Ham%=0.39

rulesrc/sandbox/khopesh/20_rcd_rdns.cf (24 rules, 2 bad):

  __RCD_RDNS_SMTP:  bad, avg S/O=0.24 avg Spam%=4.43 avg Ham%=1.40
      # used in: AMAZON_IMG_NOT_RCVD_AMZN FROM_WORDY_SHORT TEQF_USR_MSGID_MALF
  __RCD_RDNS_SMTP_MESSY:  bad, avg S/O=0.27 avg Spam%=5.41 avg Ham%=2.00
      # used in: HTML_TAG_BALANCE_CENTER TO_EQ_FM_HTML_ONLY

rulesrc/sandbox/khopesh/20_neon_overload.cf (9 rules, 7 bad):

  KHOP_JS_OBFUSCATION:  no hits of target type
  TR_FILLER_TEXT:  no hits of target type
  TR_JS_FROMCHARCODE:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  TR_JS_REDIRECTION_0:  no hits of target type
  TR_JS_REDIRECTION_2:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  __TR_JS_CONCATINATED_HTTP:  no hits of target type
      # used in: KHOP_JS_OBFUSCATION
  __TR_JS_EXTRA_CONCAT:  no hits of target type
      # used in: KHOP_JS_OBFUSCATION

rulesrc/sandbox/khopesh/20_khop_lists.cf (16 rules, 12 bad):

  KHOP_NO_FULL_NAME:  bad, avg S/O=0.77 avg Spam%=29.11 avg Ham%=8.63
  KHOP_UNSUB_EMAIL:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
  NOT_A_PERSON:  bad, avg S/O=0.45 avg Spam%=81.24 avg Ham%=66.66
  __FROM_FULL_NAME:  bad, avg S/O=0.48 avg Spam%=58.63 avg Ham%=54.36
      # used in: KHOP_NO_FULL_NAME
  __FROM_INFO:  bad, avg S/O=0.12 avg Spam%=0.09 avg Ham%=0.64
      # used in: LIST_PRTL_SAME_USER TEQF_USR_MSGID_MALF
  __KHOP_NO_FULL_NAME:  bad, avg S/O=0.77 avg Spam%=29.11 avg Ham%=8.63
      # used in: KHOP_NO_FULL_NAME
  __NOT_A_PERSON:  bad, avg S/O=0.45 avg Spam%=81.24 avg Ham%=66.66
      # used in: KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST __KHOP_NO_FULL_NAME
  __SENDER_BOT:  bad, avg S/O=0.53 avg Spam%=49.72 avg Ham%=55.71
      # used in: LIST_PRTL_SAME_USER TEQF_USR_MSGID_MALF KHOP_NO_FULL_NAME 
NOT_A_PERSON REMOTE_IMAGE SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST URI_PHISH __KHOP_NO_FULL_NAME __LIST_PRTL_SAME_USER 
__NOT_A_PERSON __REMOTE_IMAGE
  __SUBSCRIPTION_INFO:  bad, avg S/O=0.26 avg Spam%=57.13 avg Ham%=19.64
      # used in: KHOP_NO_FULL_NAME NOT_A_PERSON REMOTE_IMAGE SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST URI_PHISH __KHOP_NO_FULL_NAME __NOT_A_PERSON __REMOTE_IMAGE
  __UNSUB_LINK:  bad, avg S/O=0.24 avg Spam%=23.00 avg Ham%=7.34
      # used in: ADVANCE_FEE_3_NEW GAPPY_HTML KHOP_NO_FULL_NAME 
KHOP_UNSUB_EMAIL MANY_SUBDOM NOT_A_PERSON SPOOFED_URL SPOOFED_URL_HOST 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST TO_EQ_FM_DOM_HTML_IMG URI_PHISH 
__KHOP_NO_FULL_NAME __NOT_A_PERSON
  __UNSUB_MAILTO:  bad, avg S/O=0.23 avg Spam%=0.02 avg Ham%=0.01
      # used in: KHOP_UNSUB_EMAIL
  __VACATION:  bad, avg S/O=0.69 avg Spam%=0.69 avg Ham%=1.77
      # used in: KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST __KHOP_NO_FULL_NAME __NOT_A_PERSON

rulesrc/sandbox/khopesh/20_khop_general.cf (8 rules, 8 bad):

  DEAR_EMAIL:  bad, avg S/O=0.51 avg Spam%=0.09 avg Ham%=0.08
  DEAR_NOBODY:  bad, avg S/O=0.76 avg Spam%=0.07 avg Ham%=0.02
  FORGED_URL_DOM:  bad, avg S/O=0.70 avg Spam%=0.14 avg Ham%=0.06
  FROM_WWW:  bad, avg S/O=0.62 avg Spam%=0.01 avg Ham%=0.00
  MAY_BE_FORGED:  bad, avg S/O=0.14 avg Spam%=0.05 avg Ham%=0.34
  __FORGED_URL_DOM_1:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.05
      # used in: FORGED_URL_DOM
  __FORGED_URL_DOM_2:  bad, avg S/O=0.72 avg Spam%=0.14 avg Ham%=0.06
      # used in: FORGED_URL_DOM
  __MAY_BE_FORGED:  bad, avg S/O=0.09 avg Spam%=0.06 avg Ham%=0.55
      # used in: MAY_BE_FORGED S25R

rulesrc/sandbox/khopesh/20_khop_experimental.cf (60 rules, 39 bad):

  ADV_SUBJ:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  FROM_2_EMAILS:  bad, avg S/O=0.71 avg Spam%=6.01 avg Ham%=2.21
  HELO_NO_DOMAIN:  bad, avg S/O=0.35 avg Spam%=1.43 avg Ham%=0.96
  KHOP_BIG_TO_CC:  bad, avg S/O=0.35 avg Spam%=0.95 avg Ham%=1.77
  KHOP_FAKE_EBAY:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.33
  KHOP_FROM_WWW:  bad, avg S/O=0.19 avg Spam%=0.12 avg Ham%=0.50
  KHOP_HELO_FCRDNS:  bad, avg S/O=0.48 avg Spam%=7.73 avg Ham%=8.39
  REMOTE_IMAGE:  bad, avg S/O=0.56 avg Spam%=10.36 avg Ham%=7.95
  SHORTENED_URL_HREF:  bad, avg S/O=0.41 avg Spam%=0.41 avg Ham%=0.59
  SHORTENED_URL_SRC:  bad, avg S/O=0.35 avg Spam%=0.02 avg Ham%=0.04
  SHORT_URL:  bad, avg S/O=0.50 avg Spam%=0.28 avg Ham%=0.29
  SPOOFED_URL:  bad, avg S/O=0.02 avg Spam%=0.11 avg Ham%=5.66
  SUBJ_ALL_CAPS2:  no hits of target type
  SUBJ_ALL_CAPS3:  no hits of target type
  SUBJ_LACKS_WORDS:  bad, avg S/O=0.59 avg Spam%=1.44 avg Ham%=1.01
  UPPERCASE_URI:  bad, avg S/O=0.21 avg Spam%=1.29 avg Ham%=4.98
  URI_HIDDEN:  bad, avg S/O=0.74 avg Spam%=1.00 avg Ham%=0.36
  __EBAY_ADDRESS:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.33
      # used in: KHOP_FAKE_EBAY
  __FROM_WEB_DAEMON:  bad, avg S/O=0.08 avg Spam%=0.15 avg Ham%=1.73
      # used in: KHOP_FROM_WWW
  __HELO_NOT_RDNS:  bad, avg S/O=0.39 avg Spam%=9.84 avg Ham%=14.89
      # used in: KHOP_HELO_FCRDNS
  __RDNS_IS_WWW:  bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.18
      # used in: KHOP_FROM_WWW
  __RDNS_LONG:  bad, avg S/O=0.35 avg Spam%=8.39 avg Ham%=15.48
      # used in: HTML_TEXT_INVISIBLE_STYLE
  __RDNS_SHORT:  bad, avg S/O=0.16 avg Spam%=2.75 avg Ham%=13.65
      # used in: KHOP_HELO_FCRDNS
  __RELAY_THRU_WWW:  bad, avg S/O=0.16 avg Spam%=0.12 avg Ham%=0.59
      # used in: KHOP_FROM_WWW
  __REMOTE_IMAGE:  bad, avg S/O=0.56 avg Spam%=10.36 avg Ham%=7.95
      # used in: REMOTE_IMAGE URI_PHISH
  __SHORT_URL:  bad, avg S/O=0.54 avg Spam%=0.64 avg Ham%=0.54
      # used in: SHORT_URL
  __SPOOFED_URL:  bad, avg S/O=0.03 avg Spam%=0.35 avg Ham%=10.96
      # used in: SPOOFED_URL
  __SUBJ_2UPPER:  bad, avg S/O=0.40 avg Spam%=57.71 avg Ham%=85.26
      # used in: SUBJ_ALL_CAPS2 SUBJ_ALL_CAPS3
  __SUBJ_4LOWER:  bad, avg S/O=0.49 avg Spam%=94.39 avg Ham%=98.18
      # used in: SUBJ_ALL_CAPS2 SUBJ_ALL_CAPS3
  __SUBJ_HAS_WORDS:  bad, avg S/O=0.49 avg Spam%=94.94 avg Ham%=98.44
      # used in: SUBJ_LACKS_WORDS
  __SUBJ_IMPORTANT:  bad, avg S/O=0.24 avg Spam%=0.08 avg Ham%=0.24
      # used in: SUBJ_ALL_CAPS3
  __SUBJ_NOT_SHORT:  bad, avg S/O=0.49 avg Spam%=92.68 avg Ham%=97.05
      # used in: SUBJ_LACKS_WORDS
  __SUBJ_SHORT:  bad, avg S/O=0.68 avg Spam%=1.17 avg Ham%=0.56
      # used in: SUBJ_ALL_CAPS2 SUBJ_ALL_CAPS3
  __TO_EQ_FROM_USR:  bad, avg S/O=0.69 avg Spam%=2.48 avg Ham%=1.10
      # used in: LIST_PRTL_SAME_USER __LIST_PRTL_SAME_USER
  __TO_EQ_FROM_USR_1:  bad, avg S/O=0.64 avg Spam%=2.05 avg Ham%=1.16
      # used in: LIST_PRTL_SAME_USER TEQF_USR_MSGID_MALF __LIST_PRTL_SAME_USER 
__TO_EQ_FROM_USR
  __TO_EQ_FROM_USR_2:  bad, avg S/O=0.70 avg Spam%=1.29 avg Ham%=0.54
      # used in: LIST_PRTL_SAME_USER __LIST_PRTL_SAME_USER __TO_EQ_FROM_USR
  __TO_EQ_FROM_USR_NN:  bad, avg S/O=0.69 avg Spam%=2.40 avg Ham%=1.10
      # used in: TEQF_USR_MSGID_MALF
  __TO_EQ_FROM_USR_NN_1:  bad, avg S/O=0.63 avg Spam%=2.00 avg Ham%=1.16
      # used in: TEQF_USR_MSGID_MALF __TO_EQ_FROM_USR_NN
  __TO_EQ_FROM_USR_NN_2:  bad, avg S/O=0.70 avg Spam%=1.24 avg Ham%=0.54
      # used in: TEQF_USR_MSGID_MALF __TO_EQ_FROM_USR_NN

rulesrc/sandbox/khopesh/20_khop_dynamic.cf (13 rules, 3 bad):

  __S25R_1:  bad, avg S/O=0.31 avg Spam%=8.14 avg Ham%=18.38
      # used in: S25R S25R_1 S25R_2 S25R_3 S25R_5
  __S25R_2:  bad, avg S/O=0.19 avg Spam%=1.19 avg Ham%=5.16
      # used in: S25R S25R_1 S25R_2 S25R_3 S25R_5
  __S25R_5:  bad, avg S/O=0.72 avg Spam%=1.70 avg Ham%=0.67
      # used in: S25R S25R_1 S25R_2 S25R_3 S25R_5

rulesrc/sandbox/kb/70_misc.cf (16 rules, 6 bad):

  KB_RATWARE_OUTLOOK_MID:  no hits at all
  LIVEFILESTORE:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  THEBAT_UNREG:  no hits at all
  THREAD_INDEX_BAD:  bad, avg S/O=0.65 avg Spam%=4.61 avg Ham%=2.51
  __HAS_THREAD_INDEX:  bad, avg S/O=0.53 avg Spam%=5.06 avg Ham%=4.53
      # used in: STOCK_LOW_CONTRAST THREAD_INDEX_BAD TO_EQ_FM_DOM_HTML_IMG 
UPGRADE_MAILBOX
  __THREAD_INDEX_GOOD:  bad, avg S/O=0.19 avg Spam%=0.45 avg Ham%=2.02
      # used in: ADVANCE_FEE_3_NEW FROM_WORDY_SHORT ADVANCE_FEE_4_NEW_FORM 
THREAD_INDEX_BAD

rulesrc/sandbox/kb/20_header.cf (6 rules, 3 bad):

  KB_DATE_CONTAINS_TAB:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  KB_FAKED_THE_BAT:  no hits at all
  __KB_DATE_CONTAINS_TAB:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
      # used in: KB_DATE_CONTAINS_TAB KB_FAKED_THE_BAT

rulesrc/sandbox/jquinn/20_misc.cf (3 rules, 3 bad):

  EXCUSE_24:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
  USING_VERP:  bad, avg S/O=0.19 avg Spam%=1.18 avg Ham%=4.78
  __USING_VERP1:  bad, avg S/O=0.09 avg Spam%=1.27 avg Ham%=12.01
      # used in: FROM_WORDY_SHORT USING_VERP

rulesrc/sandbox/jm/70_tt_drugs.cf (11 rules, 5 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_VIAGRA:  no hits at all
  __TT_BROKEN_VALIUM:  no hits at all
      # used in: TT_OBSCURED_VALIUM
  __TT_OBSCURED_VALIUM:  no hits at all
      # used in: TT_OBSCURED_VALIUM
  __TT_VALIUM:  no hits at all
      # used in: TT_OBSCURED_VALIUM

rulesrc/sandbox/jm/20_bug_6152.cf (1 rules, 1 bad):

  BUG6152_INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.06 avg Spam%=0.00 avg 
Ham%=0.01

rulesrc/sandbox/jm/20_basic.cf (71 rules, 31 bad):

  CURR_PRICE:  no hits at all
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  LOTTERY_PH_004470:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.01
  L_SPAM_TOOL_13:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.24
  PART_CID_STOCK:  no hits at all
  PART_CID_STOCK_LESS:  no hits at all
  RCVD_FORGED_WROTE:  no hits at all
  RCVD_MAIL_COM:  no hits at all
  SHORT_HELO_AND_INLINE_IMAGE:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.34
  SPAMMY_XMAILER:  no hits at all
  STOCK_IMG_HDR_FROM:  no hits at all
  STOCK_IMG_HTML:  no hits at all
  STOX_REPLY_TYPE:  bad, avg S/O=0.71 avg Spam%=0.01 avg Ham%=0.00
  TVD_PDF_FINGER01_JO:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.04
  __AFF_004470_NUMBER:  bad, avg S/O=0.79 avg Spam%=0.02 avg Ham%=0.01
      # used in: LOTTERY_PH_004470
  __AFF_LOTTERY:  bad, avg S/O=0.16 avg Spam%=0.33 avg Ham%=1.77
      # used in: LOTTERY_PH_004470
  __HAS_ANY_URI:  bad, avg S/O=0.48 avg Spam%=81.05 avg Ham%=86.93
      # used in: T_SCC_BODY_URI_ONLY URI_ONLY_LOW_CONTRAST URI_PHISH 
__BODY_URI_ONLY
  __HELO_NO_DOMAIN:  bad, avg S/O=0.39 avg Spam%=1.51 avg Ham%=0.96
      # used in: HELO_NO_DOMAIN LUCRATIVE PDS_URI_HIDDEN_HELO_NO_DOMAIN 
SHORT_HELO_AND_INLINE_IMAGE
  __HS_SUBJ_RE_FW:  bad, avg S/O=0.23 avg Spam%=2.27 avg Ham%=7.58
      # used in: MIME_PHP_NO_TEXT
  __JM_REACTOR_DATE:  bad, avg S/O=0.24 avg Spam%=9.00 avg Ham%=28.63
      # used in: MANY_SUBDOM
  __MID_START_001C:  no hits of target type
      # used in: HDR_ORDER_FTSDMCXX_001C
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
      # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.24
      # used in: MSNBC_THREAD_INDEX
  __REPLYTO_EXISTS:  bad, avg S/O=0.41 avg Spam%=34.63 avg Ham%=50.19
      # used in: IRS_SPOOF __IRS_SPOOF
  __XM_OL_10_0_4115:  no hits at all
      # used in: SPAMMY_XMAILER
  __XM_OL_28001441:  no hits at all
      # used in: SPAMMY_XMAILER
  __XM_OL_28004682:  no hits at all
      # used in: SPAMMY_XMAILER
  __XM_OL_48072300:  no hits at all
      # used in: SPAMMY_XMAILER
  __XM_OL_4_72_2106_4:  no hits at all
      # used in: SPAMMY_XMAILER

rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (5 rules, 3 bad):

  URI_DEOBFU_INSTR:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  URI_OBFU_PROTO:  no hits of target type
  __URI_DEOBFU_INSTR:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.01
      # used in: URI_DEOBFU_INSTR

rulesrc/sandbox/jhardin/20_thirdparty.cf (3 rules, 1 bad):

  DX_TEXT_03:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.05

rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (26 rules, 8 bad):

  FORGED_TBIRD_IMG_ARROW:  no hits of target type
  FORGED_TBIRD_IMG_SIZE:  no hits at all
  IMG_DIRECT_TO_MX:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.17
  __FORGED_TBIRD_IMG:  no hits of target type
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE
  __IMG_LE_300K:  bad, avg S/O=0.26 avg Spam%=0.68 avg Ham%=1.86
      # used in: FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX
  __MUA_TBIRD:  bad, avg S/O=0.74 avg Spam%=6.20 avg Ham%=2.12
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE __FORGED_TBIRD_IMG
  __ONE_IMG:  bad, avg S/O=0.26 avg Spam%=0.84 avg Ham%=2.42
      # used in: FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX
  __TO_NO_ARROWS_R:  bad, avg S/O=0.27 avg Spam%=18.86 avg Ham%=51.93
      # used in: FROM_WORDY_SHORT FORGED_TBIRD_IMG_ARROW

rulesrc/sandbox/jhardin/20_shared_subrules.cf (3 rules, 1 bad):

  __BUGGED_IMG:  bad, avg S/O=0.24 avg Spam%=18.82 avg Ham%=58.69
      # used in: LIST_PRTL_SAME_USER STOCK_LOW_CONTRAST MANY_HDRS_LCASE 
TO_EQ_FM_DOM_HTML_ONLY

rulesrc/sandbox/jhardin/20_postcards.cf (6 rules, 6 bad):

  EXECUTABLE_URI:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
  POSTCARD_03:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  POSTCARD_05:  no hits of target type
  POSTCARD_06:  no hits of target type
  POSTCARD_09:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.01
  __EXECUTABLE_URI:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
      # used in: EXECUTABLE_URI

rulesrc/sandbox/jhardin/20_misc_testing.cf (696 rules, 223 bad):

  ACCT_PHISHING:  bad, avg S/O=0.53 avg Spam%=0.02 avg Ham%=0.02
  ACH_CANCELLED_EXE:  no hits at all
  ADMAIL:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
  AD_PREFS:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.04
  AMAZON_IMG_NOT_RCVD_AMZN:  bad, avg S/O=0.50 avg Spam%=0.03 avg Ham%=0.03
  APP_DEVELOPMENT_NORDNS:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  BTC_ORG:  no hits of target type
  CDISP_SZ_MANY:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00
  DATE_DOTS:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  DAY_I_EARNED:  no hits at all
  DG_SPAMMER_EMAIL_B:  bad, avg S/O=0.38 avg Spam%=0.00 avg Ham%=0.00
  DG_SPAMMER_EMAIL_F:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.02
  DOC_ATTACH_NO_EXT:  no hits of target type
  DQ_URI_DOM_IN_PATH:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
  EBAY_IMG_NOT_RCVD_EBAY:  bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
  END_FUTURE_EMAILS:  bad, avg S/O=0.34 avg Spam%=0.73 avg Ham%=1.43
  FREEMAIL_DOC_PDF:  bad, avg S/O=0.43 avg Spam%=0.03 avg Ham%=0.05
  FREEMAIL_MANY_TO:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  FROM_URI:  bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
  FROM_WORDY_SHORT:  bad, avg S/O=0.73 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_ANDROID:  no hits of target type
  FUZZY_OPTOUT:  no hits at all
  FUZZY_SAVINGS:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_SECURITY:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_WALLET:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  GAPPY_GENITALIA:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  GAPPY_HTML:  no hits of target type
  GAPPY_LOW_CONTRAST:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.01
  GOOGLE_DOCS_PHISH:  no hits at all
  GOOGLE_DOCS_PHISH_MANY:  no hits at all
  GOOG_MALWARE_DNLD:  no hits at all
  HACKED_PHP_URI:  no hits of target type
  HDR_CASE_REV_ENC:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  HDR_CASE_REV_MANY:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
  HTML_ATTACH:  bad, avg S/O=0.51 avg Spam%=0.05 avg Ham%=0.05
  HTML_TAG_BALANCE_CENTER:  bad, avg S/O=0.68 avg Spam%=0.34 avg Ham%=0.15
  HTML_TEXT_INVISIBLE_STYLE:  bad, avg S/O=0.77 avg Spam%=0.14 avg Ham%=0.04
  IMAGESHACK_URI:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  IRS_SPOOF:  no hits of target type
  LARGE_PCT_AFTER_MANY:  no hits at all
  LAZY_LISTWASHING:  no hits of target type
  LH_URI_DOM_IN_PATH:  bad, avg S/O=0.17 avg Spam%=0.19 avg Ham%=0.94
  LIST_PRTL_PUMPDUMP:  no hits at all
  LIST_PRTL_SAME_USER:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.10
  LONG_HEX_URI:  bad, avg S/O=0.33 avg Spam%=0.05 avg Ham%=0.09
  LONG_IMG_URI:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.29
  MALW_ATTACH:  no hits at all
  MANY_HDRS_LCASE:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  MANY_PILL_PRICE:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  MANY_SUBDOM:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  MONEY_12LTRDOM:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.04
  NSL_TO_ENDS_COMMA:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
  OBFU_ATTACH_MISSP:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
  OBFU_HTML_ATTACH:  bad, avg S/O=0.41 avg Spam%=0.04 avg Ham%=0.06
      # used in: OBFU_ATTACH_MISSP
  OBFU_HTML_ATT_MALW:  no hits at all
  OBFU_JPG_ATTACH:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
      # used in: OBFU_ATTACH_MISSP
  OBFU_PDF_ATTACH:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.86
      # used in: OBFU_ATTACH_MISSP
  PUMPDUMP:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  PUMPDUMP_MULTI:  no hits at all
      # used in: PUMPDUMP
  PUMPDUMP_TIP:  no hits at all
  RDNS_LOCALHOST:  no hits at all
  REPLYTO_EMPTY:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
  RUNON_SHY:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  SCANNED_EXTERNAL:  bad, avg S/O=0.54 avg Spam%=0.03 avg Ham%=0.02
  STOCK_LOW_CONTRAST:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.03
  STOCK_TIP:  no hits at all
  SUBJ_ATTENTION:  bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
  SUBJ_BRKN_WORDNUMS:  no hits of target type
  SUBJ_BROKEN_WORD:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  SUBJ_OBFU_LOW_CNTRST:  bad, avg S/O=0.49 avg Spam%=0.05 avg Ham%=0.05
  SUBJ_OBFU_PUNCT_FEW:  bad, avg S/O=0.37 avg Spam%=0.48 avg Ham%=0.80
  SUBJ_OBFU_PUNCT_MANY:  bad, avg S/O=0.46 avg Spam%=0.17 avg Ham%=0.20
  SYSADMIN:  no hits of target type
  TEQF_USR_MSGID_MALF:  no hits at all
  THIS_AD:  bad, avg S/O=0.48 avg Spam%=0.09 avg Ham%=0.10
  TINY_FLOAT:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  TO_EQ_FM_DOM_HTML_IMG:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.10
  TO_EQ_FM_DOM_HTML_ONLY:  bad, avg S/O=0.23 avg Spam%=0.03 avg Ham%=0.10
  TO_EQ_FM_HTML_DIRECT:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  TO_EQ_FM_HTML_ONLY:  bad, avg S/O=0.13 avg Spam%=0.02 avg Ham%=0.11
  TO_SEM_SEM:  no hits of target type
  TW_GIBBERISH_MANY:  no hits at all
  UC_GIBBERISH_OBFU:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
  UPGRADE_MAILBOX:  bad, avg S/O=0.07 avg Spam%=0.08 avg Ham%=1.15
  URI_1234:  no hits of target type
  URI_DATA:  no hits at all
  URI_DBL_INDIR:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.70
  URI_DOTDOT_LOW_CNTRST:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
  URI_GOOGLE_PROXY:  bad, avg S/O=0.42 avg Spam%=0.03 avg Ham%=0.04
  URI_MALWARE_BH:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  URI_OBFU_DOM:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.03
  URI_ONLY_LOW_CONTRAST:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.20
  URI_PHISH:  bad, avg S/O=0.68 avg Spam%=0.04 avg Ham%=0.02
  URI_TRPL_INDIR:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.09
  URI_TRY_3LD:  bad, avg S/O=0.06 avg Spam%=0.06 avg Ham%=0.85
  WIKI_IMG:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.01
  __128_HEX_URI:  bad, avg S/O=0.33 avg Spam%=0.05 avg Ham%=0.09
      # used in: LONG_HEX_URI
  __45_ALNUM_IMG:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.29
      # used in: LONG_IMG_URI
  __ACCESS_RESTORE:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.03
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY ACCT_PHISHING 
URI_PHISH
  __ACCESS_SUSPENDED:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY ACCT_PHISHING 
URI_PHISH
  __ACCOUNT_REACTIV:  bad, avg S/O=0.57 avg Spam%=0.02 avg Ham%=0.02
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY ACCT_PHISHING 
URI_PHISH
  __ACCT_PHISH:  bad, avg S/O=0.53 avg Spam%=0.02 avg Ham%=0.02
      # used in: GOOGLE_DOCS_PHISH ACCT_PHISHING URI_PHISH
  __ACH_CANCELLED_01:  no hits at all
      # used in: ACH_CANCELLED_EXE
  __ACH_CANCELLED_02:  no hits at all
      # used in: ACH_CANCELLED_EXE
  __ACH_CANCELLED_03:  no hits at all
      # used in: ACH_CANCELLED_EXE
  __ACH_CANCELLED_04:  no hits at all
      # used in: ACH_CANCELLED_EXE
  __ACH_CANCELLED_EXE:  no hits at all
      # used in: ACH_CANCELLED_EXE
  __ADMAIL:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
      # used in: ADMAIL
  __ADMITS_SPAM:  bad, avg S/O=0.74 avg Spam%=0.43 avg Ham%=0.15
      # used in: HTML_TEXT_INVISIBLE_STYLE
  __AMAZON_IMG_NOT_RCVD_AMZN:  bad, avg S/O=0.20 avg Spam%=0.04 avg Ham%=0.15
      # used in: AMAZON_IMG_NOT_RCVD_AMZN
  __APP_DEVELOPMENT:  bad, avg S/O=0.17 avg Spam%=0.07 avg Ham%=0.36
      # used in: APP_DEVELOPMENT_NORDNS
  __BODY_TEXT_LINE:  bad, avg S/O=0.50 avg Spam%=99.99 avg Ham%=99.99
      # used in: URI_ONLY_LOW_CONTRAST WON_NBDY_ATTACH
  __BODY_URI_ONLY:  bad, avg S/O=0.79 avg Spam%=2.94 avg Ham%=0.77
      # used in: URI_ONLY_LOW_CONTRAST
  __CAN_HELP:  bad, avg S/O=0.60 avg Spam%=3.44 avg Ham%=2.25
      # used in: MONEY_LOTTERY URI_PHISH
  __CLEAN_MAILBOX:  no hits of target type
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY URI_PHISH
  __CR_IN_SUBJ:  no hits of target type
      # used in: THIS_AD
  __CT_ENCRYPTED:  no hits of target type
      # used in: FROM_WORDY_SHORT MIME_PHP_NO_TEXT
  __DAY_I_EARNED:  no hits at all
      # used in: DAY_I_EARNED
  __DOC_ATTACH:  bad, avg S/O=0.73 avg Spam%=0.15 avg Ham%=0.06
      # used in: FREEMAIL_DOC_PDF WON_MONEY_ATTACH WON_NBDY_ATTACH
  __EBAY_IMG_NOT_RCVD_EBAY:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.01
      # used in: EBAY_IMG_NOT_RCVD_EBAY
  __EMAIL_PHISH:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.36
      # used in: GOOGLE_DOCS_PHISH URI_PHISH
  __EMPTY_BODY:  bad, avg S/O=0.59 avg Spam%=0.44 avg Ham%=0.30
      # used in: WON_NBDY_ATTACH
  __END_FUTURE_EMAILS:  bad, avg S/O=0.33 avg Spam%=0.85 avg Ham%=1.75
      # used in: END_FUTURE_EMAILS
  __FAILED_LOGINS:  no hits of target type
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY ACCT_PHISHING 
URI_PHISH __ACCT_PHISH
  __FB_COST:  bad, avg S/O=0.29 avg Spam%=1.07 avg Ham%=2.68
      # used in: URI_PHISH
  __FB_S_STOCK:  bad, avg S/O=0.18 avg Spam%=0.85 avg Ham%=3.81
      # used in: STOCK_LOW_CONTRAST
  __FB_TOUR:  bad, avg S/O=0.09 avg Spam%=0.28 avg Ham%=2.67
      # used in: FILL_THIS_FORM
  __FREEMAIL_DOC_PDF:  bad, avg S/O=0.43 avg Spam%=0.03 avg Ham%=0.05
      # used in: FREEMAIL_DOC_PDF
  __FROM_12LTRDOM_1:  bad, avg S/O=0.45 avg Spam%=3.45 avg Ham%=4.26
      # used in: MONEY_12LTRDOM
  __FROM_DOM_INFO:  bad, avg S/O=0.77 avg Spam%=0.83 avg Ham%=0.25
      # used in: HTML_TEXT_INVISIBLE_STYLE
  __FROM_LOWER:  bad, avg S/O=0.15 avg Spam%=0.18 avg Ham%=1.03
      # used in: TO_EQ_FM_DOM_HTML_ONLY TO_EQ_FM_HTML_ONLY URI_GOOGLE_PROXY
  __FROM_MISSPACED:  bad, avg S/O=0.74 avg Spam%=1.34 avg Ham%=0.47
      # used in: FROM_WORDY_SHORT
  __FROM_URI_1:  bad, avg S/O=0.62 avg Spam%=0.01 avg Ham%=0.00
      # used in: FROM_URI
  __FROM_WORDY:  bad, avg S/O=0.39 avg Spam%=0.50 avg Ham%=0.82
      # used in: FROM_WORDY_SHORT
  __GAPPY_HTML:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
      # used in: GAPPY_HTML
  __GAPPY_HTML_01:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
      # used in: GAPPY_HTML __GAPPY_HTML
  __GAPPY_HTML_02:  no hits of target type
      # used in: GAPPY_HTML __GAPPY_HTML
  __GOOGLE_DOCS_PHISH_1:  no hits at all
      # used in: GOOGLE_DOCS_PHISH
  __GOOGLE_DOCS_PHISH_2:  no hits at all
      # used in: GOOGLE_DOCS_PHISH
  __GOOG_MALWARE_DNLD:  no hits at all
      # used in: GOOG_MALWARE_DNLD
  __HACKED_PHP_URI:  no hits of target type
      # used in: HACKED_PHP_URI
  __HDRS_LCASE_KNOWN:  bad, avg S/O=0.07 avg Spam%=0.51 avg Ham%=7.25
      # used in: STOCK_LOW_CONTRAST END_FUTURE_EMAILS MANY_HDRS_LCASE 
UPGRADE_MAILBOX
  __HDR_CASE_REVERSED:  bad, avg S/O=0.11 avg Spam%=0.06 avg Ham%=0.50
      # used in: HDR_CASE_REV_ENC HDR_CASE_REV_MANY
  __HDR_CASE_REV_MANY:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
      # used in: HDR_CASE_REV_MANY
  __HDR_RCVD_AMAZON:  bad, avg S/O=0.05 avg Spam%=0.13 avg Ham%=2.23
      # used in: AMAZON_IMG_NOT_RCVD_AMZN __AMAZON_IMG_NOT_RCVD_AMZN
  __HDR_RCVD_EBAY:  no hits of target type
      # used in: EBAY_IMG_NOT_RCVD_EBAY __EBAY_IMG_NOT_RCVD_EBAY
  __HTML_FONT_LOW_CONTRAST_MINFP:  bad, avg S/O=0.44 avg Spam%=14.89 avg 
Ham%=19.08
      # used in: STOCK_LOW_CONTRAST UPGRADE_MAILBOX
  __HTML_TAG_BALANCE_CENTER:  bad, avg S/O=0.67 avg Spam%=0.37 avg Ham%=0.18
      # used in: HTML_TEXT_INVISIBLE_STYLE HTML_TAG_BALANCE_CENTER
  __IRS_FM_NAME:  no hits of target type
      # used in: IRS_SPOOF
  __IRS_SPOOF:  no hits of target type
      # used in: IRS_SPOOF
  __LARGE_PERCENT_AFTER:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
      # used in: LARGE_PCT_AFTER_MANY
  __LCL__ENV_AND_HDR_FROM_MATCH:  bad, avg S/O=0.68 avg Spam%=51.11 avg 
Ham%=24.59
      # used in: SYSADMIN TEQF_USR_MSGID_MALF SUBJ_BROKEN_WORD 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY
  __LCL__KAM_BODY_LENGTH_LT_1024:  bad, avg S/O=0.71 avg Spam%=26.48 avg 
Ham%=10.81
      # used in: LONG_HEX_URI
  __LIST_PARTIAL:  bad, avg S/O=0.29 avg Spam%=10.87 avg Ham%=26.50
      # used in: LIST_PRTL_PUMPDUMP LIST_PRTL_SAME_USER
  __LIST_PRTL_PUMPDUMP:  no hits of target type
      # used in: LIST_PRTL_PUMPDUMP
  __LIST_PRTL_SAME_USER:  bad, avg S/O=0.41 avg Spam%=0.11 avg Ham%=0.15
      # used in: LIST_PRTL_SAME_USER
  __LOCK_MAILBOX:  bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.01
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY URI_PHISH 
__EMAIL_PHISH __GOOGLE_DOCS_PHISH_2
  __MAILBOX_FULL_SE:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY URI_PHISH 
__EMAIL_PHISH __GOOGLE_DOCS_PHISH_2
  __MAIL_ACCT_ACCESS1:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY URI_PHISH 
__EMAIL_PHISH __GOOGLE_DOCS_PHISH_2
  __MANY_HDRS_LCASE:  bad, avg S/O=0.16 avg Spam%=0.03 avg Ham%=0.16
      # used in: MANY_HDRS_LCASE
  __MANY_SUBDOM:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.09
      # used in: MANY_SUBDOM
  __MONEY_12LTRDOM:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.04
      # used in: MONEY_12LTRDOM
  __MSGID_GUID:  bad, avg S/O=0.06 avg Spam%=0.63 avg Ham%=9.62
      # used in: AMAZON_IMG_NOT_RCVD_AMZN
  __MSGID_HEXISH:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.04
      # used in: STOCK_LOW_CONTRAST END_FUTURE_EMAILS MANY_HDRS_LCASE 
UPGRADE_MAILBOX __HDRS_LCASE_KNOWN __HTML_FONT_LOW_CONTRAST_MINFP
  __MSGID_HEX_UID:  no hits of target type
      # used in: STOCK_LOW_CONTRAST END_FUTURE_EMAILS MANY_HDRS_LCASE 
UPGRADE_MAILBOX __HDRS_LCASE_KNOWN __HTML_FONT_LOW_CONTRAST_MINFP
  __NUMBERS_IN_SUBJ:  bad, avg S/O=0.25 avg Spam%=6.06 avg Ham%=17.83
      # used in: URI_PHISH
  __PDF_ATTACH:  bad, avg S/O=0.04 avg Spam%=0.09 avg Ham%=2.45
      # used in: MIME_PHP_NO_TEXT DOC_ATTACH_NO_EXT FREEMAIL_DOC_PDF 
WON_MONEY_ATTACH WON_NBDY_ATTACH __FREEMAIL_DOC_PDF
  __PD_CNT_1:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP_TIP __LIST_PRTL_PUMPDUMP
  __PHPMAILER_MUA:  bad, avg S/O=0.34 avg Spam%=1.04 avg Ham%=1.96
      # used in: FROM_WORDY_SHORT
  __PILL_PRICE_02:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
      # used in: MANY_PILL_PRICE
  __PUMPDUMP_01:  no hits at all
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_02:  no hits of target type
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_03:  no hits of target type
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_05:  no hits at all
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_06:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.00
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_07:  no hits at all
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_08:  no hits at all
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_09:  no hits at all
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __PUMPDUMP_10:  no hits at all
      # used in: LIST_PRTL_PUMPDUMP PUMPDUMP PUMPDUMP_MULTI PUMPDUMP_TIP 
__LIST_PRTL_PUMPDUMP __PD_CNT_1
  __SCANNED:  bad, avg S/O=0.54 avg Spam%=0.03 avg Ham%=0.02
      # used in: SCANNED_EXTERNAL
  __SECURITY_DEPT:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY ACCT_PHISHING 
URI_PHISH __ACCT_PHISH __GOOGLE_DOCS_PHISH_2
  __SMIME_MESSAGE:  no hits of target type
      # used in: T_SCC_BODY_URI_ONLY T_SCC_EMPTY_BODY URI_ONLY_LOW_CONTRAST 
WON_NBDY_ATTACH __BODY_URI_ONLY __EMPTY_BODY
  __STOCK_TIP:  no hits of target type
      # used in: PUMPDUMP_TIP STOCK_TIP
  __STY_INVIS:  bad, avg S/O=0.17 avg Spam%=5.10 avg Ham%=24.76
      # used in: HTML_TEXT_INVISIBLE_STYLE
  __STY_INVIS_MANY:  bad, avg S/O=0.14 avg Spam%=0.65 avg Ham%=3.90
      # used in: HTML_TEXT_INVISIBLE_STYLE
  __SUBJ_ATTENTION:  bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
      # used in: SUBJ_ATTENTION
  __SUBJ_BRKN_WORDNUMS:  no hits of target type
      # used in: SUBJ_BRKN_WORDNUMS
  __SUBJ_BROKEN_WORD:  bad, avg S/O=0.31 avg Spam%=0.30 avg Ham%=0.67
      # used in: SUBJ_BRKN_WORDNUMS SUBJ_BROKEN_WORD __SUBJ_BRKN_WORDNUMS
  __SUBJ_OBFU_PUNCT:  bad, avg S/O=0.27 avg Spam%=3.85 avg Ham%=10.25
      # used in: SUBJ_OBFU_LOW_CNTRST SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY
  __SURVEY:  bad, avg S/O=0.11 avg Spam%=0.24 avg Ham%=1.83
      # used in: ADVANCE_FEE_3_NEW
  __SYSADMIN:  bad, avg S/O=0.15 avg Spam%=0.18 avg Ham%=1.02
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY SYSADMIN URI_PHISH 
__EMAIL_PHISH __GOOGLE_DOCS_PHISH_2
  __TENWORD_GIBBERISH:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
      # used in: TW_GIBBERISH_MANY
  __THIS_AD:  bad, avg S/O=0.16 avg Spam%=0.10 avg Ham%=0.54
      # used in: THIS_AD
  __TO_EQ_FM_DOM_HTML_IMG:  bad, avg S/O=0.15 avg Spam%=0.05 avg Ham%=0.29
      # used in: TO_EQ_FM_DOM_HTML_IMG
  __TO_EQ_FM_DOM_HTML_ONLY:  bad, avg S/O=0.22 avg Spam%=0.04 avg Ham%=0.14
      # used in: TO_EQ_FM_DOM_HTML_ONLY
  __TO_EQ_FM_HTML_DIRECT:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
      # used in: TO_EQ_FM_HTML_DIRECT
  __TO_EQ_FM_HTML_ONLY:  bad, avg S/O=0.21 avg Spam%=0.03 avg Ham%=0.12
      # used in: TO_EQ_FM_HTML_ONLY
  __TO_EQ_FROM:  bad, avg S/O=0.69 avg Spam%=2.72 avg Ham%=1.23
      # used in: TEQF_USR_MSGID_MALF TO_EQ_FM_HTML_DIRECT TO_EQ_FM_HTML_ONLY 
__TO_EQ_FM_HTML_DIRECT __TO_EQ_FM_HTML_ONLY
  __TO_EQ_FROM_1:  bad, avg S/O=0.63 avg Spam%=1.71 avg Ham%=1.02
      # used in: TEQF_USR_MSGID_MALF TO_EQ_FM_HTML_DIRECT TO_EQ_FM_HTML_ONLY 
__TO_EQ_FM_HTML_DIRECT __TO_EQ_FM_HTML_ONLY __TO_EQ_FROM
  __TO_EQ_FROM_DOM:  bad, avg S/O=0.47 avg Spam%=2.84 avg Ham%=3.25
      # used in: TEQF_USR_MSGID_MALF TO_EQ_FM_DOM_HTML_IMG 
TO_EQ_FM_DOM_HTML_ONLY __TO_EQ_FM_DOM_HTML_IMG __TO_EQ_FM_DOM_HTML_ONLY
  __TO_EQ_FROM_DOM_1:  bad, avg S/O=0.38 avg Spam%=1.80 avg Ham%=2.91
      # used in: TEQF_USR_MSGID_MALF TO_EQ_FM_DOM_HTML_IMG 
TO_EQ_FM_DOM_HTML_ONLY __TO_EQ_FM_DOM_HTML_IMG __TO_EQ_FM_DOM_HTML_ONLY 
__TO_EQ_FROM_DOM
  __TO_EQ_FROM_DOM_2:  bad, avg S/O=0.76 avg Spam%=1.04 avg Ham%=0.33
      # used in: TEQF_USR_MSGID_MALF TO_EQ_FM_DOM_HTML_IMG 
TO_EQ_FM_DOM_HTML_ONLY __TO_EQ_FM_DOM_HTML_IMG __TO_EQ_FM_DOM_HTML_ONLY 
__TO_EQ_FROM_DOM
  __TO_WAY_TOO_MANY:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.10
      # used in: FREEMAIL_MANY_TO
  __TO___LOWER:  bad, avg S/O=0.45 avg Spam%=6.58 avg Ham%=7.93
      # used in: END_FUTURE_EMAILS SUBJ_BRKN_WORDNUMS
  __TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.36 avg Spam%=0.25 avg Ham%=0.44
      # used in: SUBJ_BRKN_WORDNUMS __SUBJ_BRKN_WORDNUMS
  __UA_MSOMAC:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.05
      # used in: STOCK_LOW_CONTRAST END_FUTURE_EMAILS MANY_HDRS_LCASE 
UPGRADE_MAILBOX __HDRS_LCASE_KNOWN __HTML_FONT_LOW_CONTRAST_MINFP
  __UC_GIBB_OBFU:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.04
      # used in: UC_GIBBERISH_OBFU
  __UPGR_MAILBOX:  bad, avg S/O=0.07 avg Spam%=0.17 avg Ham%=2.34
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY UPGRADE_MAILBOX 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_2
  __UPPERCASE_URI:  bad, avg S/O=0.21 avg Spam%=1.29 avg Ham%=4.98
      # used in: ADVANCE_FEE_3_NEW MANY_SUBDOM URI_PHISH
  __URI_DATA:  no hits at all
      # used in: URI_DATA
  __URI_DBL_INDIR:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.79
      # used in: URI_DBL_INDIR
  __URI_DOM_DOTDOT:  bad, avg S/O=0.30 avg Spam%=0.02 avg Ham%=0.04
      # used in: URI_DOTDOT_LOW_CNTRST
  __URI_GOOGLE_PROXY:  bad, avg S/O=0.40 avg Spam%=0.04 avg Ham%=0.06
      # used in: URI_GOOGLE_PROXY
  __URI_IMG_AMAZON:  bad, avg S/O=0.06 avg Spam%=0.04 avg Ham%=0.59
      # used in: AMAZON_IMG_NOT_RCVD_AMZN __AMAZON_IMG_NOT_RCVD_AMZN
  __URI_IMG_EBAY:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.29
      # used in: EBAY_IMG_NOT_RCVD_EBAY __EBAY_IMG_NOT_RCVD_EBAY
  __URI_MAILTO:  bad, avg S/O=0.28 avg Spam%=20.11 avg Ham%=51.68
      # used in: EBAY_IMG_NOT_RCVD_EBAY
  __URI_OBFU_DOM:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.04
      # used in: URI_OBFU_DOM
  __URI_PHISH:  bad, avg S/O=0.12 avg Spam%=0.05 avg Ham%=0.37
      # used in: URI_PHISH
  __URI_TRPL_INDIR:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.09
      # used in: URI_DBL_INDIR URI_TRPL_INDIR
  __VALIDATE_MBOX_SE:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY URI_PHISH 
__EMAIL_PHISH __GOOGLE_DOCS_PHISH_2 __URI_PHISH
  __VERIFY_ACCOUNT:  bad, avg S/O=0.12 avg Spam%=0.12 avg Ham%=0.88
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY ACCT_PHISHING 
URI_PHISH __ACCT_PHISH __GOOGLE_DOCS_PHISH_2 __URI_PHISH
  __WEBMAIL_ACCT:  bad, avg S/O=0.58 avg Spam%=0.00 avg Ham%=0.00
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY URI_PHISH 
__EMAIL_PHISH __GOOGLE_DOCS_PHISH_2 __URI_PHISH
  __XEROXWORKCTR_MUA:  no hits at all
      # used in: SCANNED_EXTERNAL

rulesrc/sandbox/jhardin/20_lotsa_money.cf (154 rules, 65 bad):

  LOTS_OF_MONEY:  bad, avg S/O=0.48 avg Spam%=5.04 avg Ham%=5.46
      # used in: ADVANCE_FEE_3_NEW
  LOTTO_DEPT:  bad, avg S/O=0.49 avg Spam%=0.06 avg Ham%=0.06
  LOTTO_URI:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  LUCRATIVE:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.00
  MONEY_LOTTERY:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  MONEY_PERCENT:  bad, avg S/O=0.31 avg Spam%=0.13 avg Ham%=0.28
  WON_MONEY_ATTACH:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
  WON_NBDY_ATTACH:  no hits at all
  __AFRICAN_STATE:  bad, avg S/O=0.75 avg Spam%=0.47 avg Ham%=0.16
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __AFR_UNION:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM __AFRICAN_STATE
  __ATM_CARD:  bad, avg S/O=0.67 avg Spam%=0.07 avg Ham%=0.03
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __AUTO_ACCIDENT:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM LOTTO_DEPT
  __BANK_DRAFT:  bad, avg S/O=0.65 avg Spam%=0.02 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __BURKINA_FASO:  bad, avg S/O=0.51 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM __AFRICAN_STATE
  __CONTACT_YOU:  bad, avg S/O=0.80 avg Spam%=0.12 avg Ham%=0.03
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __COURIER:  bad, avg S/O=0.61 avg Spam%=0.08 avg Ham%=0.05
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __DEAD_PARENT:  bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __DEAL:  bad, avg S/O=0.35 avg Spam%=1.92 avg Ham%=3.52
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __DECEASED:  bad, avg S/O=0.45 avg Spam%=0.18 avg Ham%=0.21
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __DIPLOMATIC:  bad, avg S/O=0.42 avg Spam%=0.07 avg Ham%=0.09
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __EARLY_DEMISE:  bad, avg S/O=0.80 avg Spam%=0.01 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FIFTY_FIFTY:  bad, avg S/O=0.22 avg Spam%=0.85 avg Ham%=2.93
      # used in: MONEY_PERCENT URI_PHISH
  __GET_TICKET:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.04
      # used in: MONEY_LOTTERY
  __HAS_WON_01:  no hits at all
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH
  __HUSH_HUSH:  bad, avg S/O=0.72 avg Spam%=15.32 avg Ham%=5.83
      # used in: TO_EQ_FM_HTML_DIRECT
  __IS_LEGAL:  bad, avg S/O=0.61 avg Spam%=0.03 avg Ham%=0.02
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __IVORY_COAST:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM __AFRICAN_STATE
  __I_INHERIT:  bad, avg S/O=0.76 avg Spam%=0.02 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __LOTSA_MONEY_00:  bad, avg S/O=0.38 avg Spam%=0.51 avg Ham%=0.81
      # used in: ADVANCE_FEE_3_NEW LOTS_OF_MONEY ADVANCE_FEE_4_NEW_FORM 
MONEY_12LTRDOM MONEY_LOTTERY MONEY_PERCENT WON_MONEY_ATTACH
  __LOTSA_MONEY_01:  bad, avg S/O=0.52 avg Spam%=3.22 avg Ham%=2.95
      # used in: ADVANCE_FEE_3_NEW LOTS_OF_MONEY ADVANCE_FEE_4_NEW_FORM 
MONEY_LOTTERY MONEY_PERCENT WON_MONEY_ATTACH
  __LOTSA_MONEY_02:  bad, avg S/O=0.66 avg Spam%=1.25 avg Ham%=0.64
      # used in: ADVANCE_FEE_3_NEW LOTS_OF_MONEY ADVANCE_FEE_4_NEW_FORM 
MONEY_LOTTERY MONEY_PERCENT WON_MONEY_ATTACH
  __LOTSA_MONEY_03:  bad, avg S/O=0.30 avg Spam%=0.64 avg Ham%=1.52
      # used in: ADVANCE_FEE_3_NEW LOTS_OF_MONEY ADVANCE_FEE_4_NEW_FORM 
MONEY_LOTTERY MONEY_PERCENT WON_MONEY_ATTACH
  __LOTSA_MONEY_04:  bad, avg S/O=0.56 avg Spam%=0.58 avg Ham%=0.45
      # used in: ADVANCE_FEE_3_NEW LOTS_OF_MONEY ADVANCE_FEE_4_NEW_FORM 
MONEY_LOTTERY MONEY_PERCENT WON_MONEY_ATTACH
  __LOTTO_ADMITS:  bad, avg S/O=0.28 avg Spam%=0.20 avg Ham%=0.52
      # used in: MONEY_LOTTERY
  __LOTTO_ADMITS_1:  bad, avg S/O=0.25 avg Spam%=0.16 avg Ham%=0.46
      # used in: MONEY_LOTTERY __LOTTO_ADMITS
  __LOTTO_ADMITS_2:  bad, avg S/O=0.27 avg Spam%=0.03 avg Ham%=0.07
      # used in: MONEY_LOTTERY __LOTTO_ADMITS
  __LOTTO_ADMITS_3:  bad, avg S/O=0.26 avg Spam%=0.03 avg Ham%=0.09
      # used in: MONEY_LOTTERY __LOTTO_ADMITS
  __LOTTO_AGENT_02:  no hits at all
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY
  __LOTTO_DEPT:  bad, avg S/O=0.44 avg Spam%=0.07 avg Ham%=0.08
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM LOTTO_DEPT 
MONEY_LOTTERY
  __LOTTO_VERIFY:  no hits at all
      # used in: MONEY_LOTTERY
  __LUCKY_WINNER:  bad, avg S/O=0.56 avg Spam%=0.03 avg Ham%=0.03
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __LUCRATIVE:  bad, avg S/O=0.40 avg Spam%=0.15 avg Ham%=0.22
      # used in: LUCRATIVE
  __MONEY_LOTTERY:  bad, avg S/O=0.54 avg Spam%=0.09 avg Ham%=0.08
      # used in: MONEY_LOTTERY
  __MOVE_MONEY:  bad, avg S/O=0.25 avg Spam%=0.16 avg Ham%=0.48
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH __MONEY_LOTTERY
  __PAY_YOU:  bad, avg S/O=0.56 avg Spam%=0.02 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __PCT_FOR_YOU:  bad, avg S/O=0.22 avg Spam%=0.11 avg Ham%=0.38
      # used in: MONEY_PERCENT URI_PHISH
  __PCT_FOR_YOU_1:  bad, avg S/O=0.19 avg Spam%=0.06 avg Ham%=0.26
      # used in: MONEY_PERCENT URI_PHISH __PCT_FOR_YOU
  __PCT_FOR_YOU_2:  bad, avg S/O=0.35 avg Spam%=0.02 avg Ham%=0.04
      # used in: MONEY_PERCENT URI_PHISH __PCT_FOR_YOU
  __PCT_FOR_YOU_3:  bad, avg S/O=0.40 avg Spam%=0.06 avg Ham%=0.08
      # used in: MONEY_PERCENT URI_PHISH __PCT_FOR_YOU
  __SCAM:  bad, avg S/O=0.17 avg Spam%=0.11 avg Ham%=0.56
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __TO_YOUR_ORG:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.10
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM LOTTO_DEPT 
MONEY_LOTTERY __MONEY_LOTTERY
  __TRAVEL_ITINERARY:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
      # used in: ADVANCE_FEE_3_NEW LOTS_OF_MONEY ADVANCE_FEE_4_NEW_FORM 
LOTTO_DEPT MONEY_LOTTERY MONEY_PERCENT WON_MONEY_ATTACH __MONEY_LOTTERY
  __TRUSTED_CHECK:  bad, avg S/O=0.54 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __WIDOW:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __WILL_LEGAL:  bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.03
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __WIRE_XFR:  bad, avg S/O=0.51 avg Spam%=0.06 avg Ham%=0.06
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __XFER_MONEY:  bad, avg S/O=0.31 avg Spam%=0.27 avg Ham%=0.58
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __YOUR_FUND:  bad, avg S/O=0.36 avg Spam%=0.29 avg Ham%=0.52
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __YOUR_PERM:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.45
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __YOU_ASSIST:  bad, avg S/O=0.67 avg Spam%=0.08 avg Ham%=0.04
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __YOU_WON:  bad, avg S/O=0.32 avg Spam%=0.17 avg Ham%=0.37
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH __MONEY_LOTTERY
  __YOU_WON_01:  bad, avg S/O=0.28 avg Spam%=0.14 avg Ham%=0.35
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH __MONEY_LOTTERY __YOU_WON
  __YOU_WON_02:  bad, avg S/O=0.34 avg Spam%=0.01 avg Ham%=0.02
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH __MONEY_LOTTERY __YOU_WON
  __YOU_WON_04:  no hits at all
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH __MONEY_LOTTERY __YOU_WON
  __YOU_WON_05:  bad, avg S/O=0.59 avg Spam%=0.02 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM MONEY_LOTTERY 
WON_MONEY_ATTACH WON_NBDY_ATTACH __MONEY_LOTTERY __YOU_WON

rulesrc/sandbox/jhardin/20_fillform.cf (18 rules, 7 bad):

  FILL_THIS_FORM:  bad, avg S/O=0.62 avg Spam%=0.26 avg Ham%=0.16
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.18 avg Spam%=0.28 avg Ham%=1.29
  __FILL_THIS_FORM:  bad, avg S/O=0.56 avg Spam%=0.27 avg Ham%=0.22
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
ADVANCE_FEE_4_NEW_FORM FILL_THIS_FORM_SHORT
  __FILL_THIS_FORM_PARTIAL:  bad, avg S/O=0.24 avg Spam%=0.38 avg Ham%=1.23
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
ADVANCE_FEE_4_NEW_FORM FILL_THIS_FORM_SHORT __FILL_THIS_FORM
  __FILL_THIS_FORM_PARTIAL_RAW:  bad, avg S/O=0.18 avg Spam%=0.90 avg Ham%=4.00
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
ADVANCE_FEE_4_NEW_FORM FILL_THIS_FORM_SHORT __FILL_THIS_FORM
  __FILL_THIS_FORM_SHORT:  bad, avg S/O=0.16 avg Spam%=0.30 avg Ham%=1.64
      # used in: FROM_WORDY_SHORT FILL_THIS_FORM_SHORT
  __FILL_THIS_FORM_SHORT2:  bad, avg S/O=0.23 avg Spam%=0.43 avg Ham%=1.41
      # used in: FROM_WORDY_SHORT FILL_THIS_FORM_SHORT __FILL_THIS_FORM_SHORT

rulesrc/sandbox/jhardin/20_advance_fee_reevolved.cf (32 rules, 2 bad):

  ADVANCE_FEE_3_NEW:  bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
  ADVANCE_FEE_4_NEW_FORM:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/jhardin/20_MIME_no_text.cf (7 rules, 6 bad):

  MIME_PHP_NO_TEXT:  no hits at all
  __CTYPE_MULTIPART_ANY:  bad, avg S/O=0.46 avg Spam%=57.26 avg Ham%=67.48
      # used in: MIME_PHP_NO_TEXT
  __MIME_NO_TEXT:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.04
      # used in: MIME_PHP_NO_TEXT
  __PHP_MUA:  bad, avg S/O=0.65 avg Spam%=0.02 avg Ham%=0.01
      # used in: MIME_PHP_NO_TEXT
  __PHP_MUA_1:  bad, avg S/O=0.65 avg Spam%=0.02 avg Ham%=0.01
      # used in: MIME_PHP_NO_TEXT __PHP_MUA
  __PHP_MUA_2:  no hits at all
      # used in: MIME_PHP_NO_TEXT __PHP_MUA

rulesrc/sandbox/hege/20_hk.cf (49 rules, 6 bad):

  HK_FIRST_NAME_TMPL:  no hits of target type
  HK_SPAMMY_FILENAME:  bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
  HK_UNSUB_TMPL:  no hits of target type
  TAB_IN_FROM:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  __TAB_IN_FROM:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
      # used in: TAB_IN_FROM
  __hk_bigmoney:  bad, avg S/O=0.23 avg Spam%=2.00 avg Ham%=6.65
      # used in: URI_PHISH

rulesrc/sandbox/hege/20_bug5523.cf (1 rules, 1 bad):

  MILLION_EUR:  bad, avg S/O=0.46 avg Spam%=0.04 avg Ham%=0.05

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (57 rules, 39 bad):

  FAKE_REPLY_B:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.01
  FAKE_REPLY_SURE_A:  bad, avg S/O=0.21 avg Spam%=1.35 avg Ham%=4.97
  FAKE_REPLY_SURE_B:  bad, avg S/O=0.20 avg Spam%=1.45 avg Ham%=5.74
  NICE_REPLY_A:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.66
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_B:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_C:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  TEST_REPLY_B:  no hits of target type
  TEST_REPLY_C:  no hits of target type
  __BROKE_MUAS:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __INR_AND_NO_REF:  bad, avg S/O=0.75 avg Spam%=1.67 avg Ham%=0.55
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B
  __MISSING_REF:  bad, avg S/O=0.53 avg Spam%=99.41 avg Ham%=88.37
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_A 
NICE_REPLY_B NICE_REPLY_C SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_B 
UPGRADE_MAILBOX __HTML_FONT_LOW_CONTRAST_MINFP
  __MISSING_REPLY:  bad, avg S/O=0.53 avg Spam%=99.45 avg Ham%=88.52
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_B 
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY 
NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C SPOOFED_URL SPOOFED_URL_HOST 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY 
TEST_REPLY_C UPGRADE_MAILBOX __HTML_FONT_LOW_CONTRAST_MINFP
  __MISSING_THREAD:  bad, avg S/O=0.50 avg Spam%=94.94 avg Ham%=95.47
      # used in: FAKE_REPLY_SURE_A
  __SUBJ_RE:  bad, avg S/O=0.21 avg Spam%=1.96 avg Ham%=7.45
      # used in: BULK_RE_SUSP_NTLD FAKE_REPLY_B FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B 
TEST_REPLY_C
  __UA_GNUS:  no hits of target type
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __UA_KMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __UA_KNODE:  no hits of target type
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __UA_MSENTOUR:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __UA_MSOEMAC:  no hits at all
      # used in: STOCK_LOW_CONTRAST END_FUTURE_EMAILS FAKE_REPLY_B 
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B MANY_HDRS_LCASE NICE_REPLY_B TEST_REPLY_B 
UPGRADE_MAILBOX __HDRS_LCASE_KNOWN __HTML_FONT_LOW_CONTRAST_MINFP 
__INR_AND_NO_REF
  __UA_MUTT:  bad, avg S/O=0.06 avg Spam%=0.07 avg Ham%=1.07
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __UA_PAN:  no hits of target type
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __UA_XNEWS:  no hits of target type
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __XM_APPLEMAIL:  bad, avg S/O=0.12 avg Spam%=0.04 avg Ham%=0.28
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_BALSA:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __XM_CALYPSO:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __XM_COMMUNIG:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_EXMH:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_FORTE:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __XM_GNUS:  no hits at all
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __XM_LOTUSN:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_MHE:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __XM_MIMETOOLS:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.10
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_MSCDO:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.15
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_NOVELL:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
  __XM_QUALCOM:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B 
TEST_REPLY_B __INR_AND_NO_REF
  __XM_SKYRI:  no hits at all
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __XM_SYLPHEED:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.06
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __XM_VM:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A
  __XM_WWWMAIL:  no hits of target type
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF ADVANCE_FEE_4_NEW_FORM FAKE_REPLY_SURE_A 
FAKE_REPLY_SURE_B LOTTO_DEPT MANY_HDRS_LCASE MONEY_LOTTERY NICE_REPLY_C 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TEST_REPLY_C UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP

rulesrc/sandbox/felicity/70_phishing.cf (58 rules, 36 bad):

  HTTPS_HTTP_MISMATCH:  bad, avg S/O=0.02 avg Spam%=0.11 avg Ham%=5.61
  TVD_PH_1:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.02
  TVD_PH_7:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.34 avg Spam%=0.09 avg Ham%=0.16
  TVD_PH_BODY_ACCOUNTS_PRE:  bad, avg S/O=0.33 avg Spam%=0.04 avg Ham%=0.08
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.43 avg Spam%=0.19 avg Ham%=0.26
  TVD_PH_FR5:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.07
  TVD_PH_REC:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  TVD_PH_SEC:  bad, avg S/O=0.43 avg Spam%=0.03 avg Ham%=0.03
  TVD_PH_SUBJ_META:  bad, avg S/O=0.38 avg Spam%=0.03 avg Ham%=0.05
  TVD_PH_SUBJ_META1:  bad, avg S/O=0.74 avg Spam%=0.32 avg Ham%=0.09
  TVD_SUBJ_ACC_NUM:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.03
  __PH_TVD_FROM2:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.33
      # used in: TVD_PH_FR5
  __TVD_PH_BODY_01:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_BODY_META_ALL 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_BODY_02:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_BODY_META_ALL 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_BODY_07:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_BODY_META_ALL 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.34 avg Spam%=0.09 avg Ham%=0.16
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY 
TVD_PH_BODY_ACCOUNTS_POST TVD_PH_BODY_META_ALL URI_PHISH __EMAIL_PHISH 
__GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_BODY_ACCOUNTS_PRE:  bad, avg S/O=0.33 avg Spam%=0.04 avg Ham%=0.08
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY 
TVD_PH_BODY_ACCOUNTS_PRE TVD_PH_BODY_META_ALL URI_PHISH __EMAIL_PHISH 
__GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_00:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_02:  no hits of target type
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_04:  no hits of target type
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_15:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_17:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_18:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_29:  bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_36:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_37:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_38:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.02
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_52:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_54:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_59:  no hits at all
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_ACCESS_POST:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_ACCOUNTS_PRE:  bad, avg S/O=0.31 avg Spam%=0.02 avg Ham%=0.04
      # used in: TVD_PH_SUBJ_META1
  __TVD_PH_SUBJ_META:  bad, avg S/O=0.38 avg Spam%=0.03 avg Ham%=0.05
      # used in: GOOGLE_DOCS_PHISH GOOGLE_DOCS_PHISH_MANY TVD_PH_SUBJ_META 
URI_PHISH __EMAIL_PHISH __GOOGLE_DOCS_PHISH_1 __GOOGLE_DOCS_PHISH_2
  __TVD_PH_SUBJ_SEC_MEASURES:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
      # used in: TVD_PH_SUBJ_META1
  __TVD_PH_SUBJ_UPDATE:  bad, avg S/O=0.32 avg Spam%=0.01 avg Ham%=0.02
      # used in: TVD_PH_SUBJ_META1

rulesrc/sandbox/felicity/70_other.cf (78 rules, 58 bad):

  BASE64_LENGTH_78_79:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  BASE64_LENGTH_79_INF:  bad, avg S/O=0.79 avg Spam%=0.02 avg Ham%=0.00
  DRUGS_HDIA:  no hits at all
  FUZZY_MERIDIA:  no hits at all
  FUZZY_SPRM:  no hits of target type
  HEADER_COUNT_SUBJECT:  no hits at all
  RCVD_BAD_ID:  no hits at all
  TVD_ACT_193:  no hits at all
  TVD_APPROVED:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.05
  TVD_BODY_END_STAR:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.01
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_DOLLARS_US:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.03
  TVD_ENVFROM_APOST:  no hits at all
  TVD_FINGER_02:  no hits at all
  TVD_FLOAT_GENERAL:  no hits at all
  TVD_FROM_1:  bad, avg S/O=0.68 avg Spam%=0.17 avg Ham%=0.08
  TVD_FUZZY_DEGREE:  no hits at all
  TVD_FUZZY_FINANCE:  no hits at all
  TVD_FUZZY_FIXED_RATE:  no hits at all
  TVD_FUZZY_MICROCAP:  no hits at all
  TVD_FUZZY_PHARMACEUTICAL:  no hits at all
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.26
  TVD_FUZZY_SECURITIES:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
  TVD_FUZZY_SYMBOL:  no hits at all
  TVD_FW_GRAPHIC_ID2:  no hits at all
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.85
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.86
  TVD_INCREASE_SIZE:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  TVD_LINK_SAVE:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
  TVD_PCT_OFF:  no hits of target type
  TVD_PDF_FINGER01:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.04
  TVD_RATWARE_CB:  no hits at all
  TVD_RATWARE_CB_2:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.08
  TVD_RATWARE_MSGID_02:  no hits at all
  TVD_SECTION:  no hits at all
  TVD_SILLY_URI_OBFU:  no hits at all
  TVD_SINGLE_SPAN_DIV:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.01
  TVD_SPACED_SUBJECT_WORD3:  no hits at all
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.03
  TVD_STOCK1:  no hits at all
  TVD_SUBJ_FINGER_03:  no hits at all
  TVD_SUBJ_FINGER_04:  bad, avg S/O=0.57 avg Spam%=0.06 avg Ham%=0.05
  TVD_SUBJ_OWE:  no hits at all
  TVD_SUBJ_WIPE_DEBT:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  TVD_UNDER_VALUED:  no hits of target type
  TVD_VIS_HIDDEN:  no hits at all
  T_TVD_MIME_EPI:  bad, avg S/O=0.46 avg Spam%=0.02 avg Ham%=0.02
  T_TVD_PCT_OFF2:  bad, avg S/O=0.71 avg Spam%=1.78 avg Ham%=0.71
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.04
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.36 avg Spam%=0.25 avg Ham%=0.44
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.34 avg Spam%=0.44 avg Ham%=0.88
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.34 avg Spam%=0.44 avg Ham%=0.88
  __TVD_BODY:  bad, avg S/O=0.50 avg Spam%=99.90 avg Ham%=99.74
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_INT_CID:  bad, avg S/O=0.27 avg Spam%=1.76 avg Ham%=4.63
      # used in: TVD_FW_GRAPHIC_ID3
  __TVD_MIME_ATT:  bad, avg S/O=0.02 avg Spam%=0.06 avg Ham%=2.37
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_MIME_CT_MM:  bad, avg S/O=0.10 avg Spam%=0.73 avg Ham%=6.58
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO

rulesrc/sandbox/fanf/30_text.cf (2 rules, 1 bad):

  LONG_TERM_PRICE:  no hits of target type

rulesrc/sandbox/duncf/20_header.cf (3 rules, 1 bad):

  STUDDLYCAPS:  bad, avg S/O=0.25 avg Spam%=0.08 avg Ham%=0.23

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 2 bad):

  BANKING_LAWS:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (72 rules, 51 bad):

  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_BODY_HIGH_NO_MID:  bad, avg S/O=0.65 avg Spam%=0.32 avg Ham%=0.16
  DOS_FIX_MY_URI:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_OUTLOOK_TO_MX_IMAGE:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.21
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.63 avg Spam%=3.59 avg Ham%=2.13
  DOS_RCVD_IP_TWICE_B:  bad, avg S/O=0.76 avg Spam%=2.27 avg Ham%=0.47
  DOS_STOCK_BAT:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
  X_MAILER_CME_6543_MSN:  no hits at all
  __DOS_BODY_FRI:  bad, avg S/O=0.06 avg Spam%=0.33 avg Ham%=5.22
      # used in: DOS_STOCK_BAT
  __DOS_BODY_MON:  bad, avg S/O=0.65 avg Spam%=10.20 avg Ham%=5.46
      # used in: DOS_STOCK_BAT
  __DOS_BODY_SAT:  bad, avg S/O=0.05 avg Spam%=0.11 avg Ham%=1.94
      # used in: DOS_STOCK_BAT
  __DOS_BODY_STOCK:  bad, avg S/O=0.19 avg Spam%=0.65 avg Ham%=2.72
      # used in: DOS_STOCK_BAT
  __DOS_BODY_SUN:  bad, avg S/O=0.05 avg Spam%=0.21 avg Ham%=4.28
      # used in: DOS_STOCK_BAT
  __DOS_BODY_THU:  bad, avg S/O=0.05 avg Spam%=0.20 avg Ham%=4.31
      # used in: DOS_STOCK_BAT
  __DOS_BODY_TICKER:  no hits at all
      # used in: DOS_STOCK_BAT
  __DOS_BODY_TUE:  bad, avg S/O=0.09 avg Spam%=0.51 avg Ham%=5.32
      # used in: DOS_STOCK_BAT
  __DOS_BODY_WED:  bad, avg S/O=0.05 avg Spam%=0.25 avg Ham%=4.41
      # used in: DOS_STOCK_BAT
  __DOS_COMING_TO_YOUR_PLACE:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_CORRESPOND_EMAIL:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_DROP_ME_A_LINE:  no hits of target type
      # used in: DOS_YOUR_PLACE
  __DOS_EMAIL_DIRECTLY:  no hits of target type
      # used in: DOS_YOUR_PLACE
  __DOS_HAS_ANY_URI:  bad, avg S/O=0.48 avg Spam%=81.05 avg Ham%=86.93
      # used in: DOS_FIX_MY_URI
  __DOS_HAS_LIST_ID:  bad, avg S/O=0.08 avg Spam%=2.71 avg Ham%=29.94
      # used in: DOS_HIGH_BAT_TO_MX LIST_PRTL_PUMPDUMP LIST_PRTL_SAME_USER 
DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX TO_EQ_FM_HTML_DIRECT
  __DOS_HAS_LIST_UNSUB:  bad, avg S/O=0.20 avg Spam%=13.23 avg Ham%=51.21
      # used in: DOS_HIGH_BAT_TO_MX LIST_PRTL_PUMPDUMP LIST_PRTL_SAME_USER 
DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX KHOP_NO_FULL_NAME MONEY_LOTTERY 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST TO_EQ_FM_HTML_DIRECT URI_DATA
  __DOS_HAS_MAILING_LIST:  bad, avg S/O=0.09 avg Spam%=0.26 avg Ham%=2.65
      # used in: DOS_HIGH_BAT_TO_MX BTC_ORG DOS_OUTLOOK_TO_MX_IMAGE 
IMG_DIRECT_TO_MX TO_EQ_FM_HTML_DIRECT
  __DOS_HI:  bad, avg S/O=0.41 avg Spam%=0.50 avg Ham%=0.71
      # used in: DOS_FIX_MY_URI
  __DOS_I_AM_25:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_YOUR_PLACE
  __DOS_I_DRIVE_A:  no hits of target type
      # used in: DOS_LET_GO_JOB
  __DOS_LET_GO_JOB:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_LINK:  bad, avg S/O=0.52 avg Spam%=14.37 avg Ham%=13.05
      # used in: DOS_FIX_MY_URI
  __DOS_MEET_EACH_OTHER:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_YOUR_PLACE
  __DOS_MY_OLD_JOB:  no hits of target type
      # used in: DOS_LET_GO_JOB
  __DOS_RCVD_FRI:  bad, avg S/O=0.47 avg Spam%=14.87 avg Ham%=16.93
      # used in: DOS_STOCK_BAT
  __DOS_RCVD_MON:  bad, avg S/O=0.58 avg Spam%=26.00 avg Ham%=19.04
      # used in: DOS_STOCK_BAT
  __DOS_RCVD_SAT:  bad, avg S/O=0.58 avg Spam%=13.13 avg Ham%=9.66
      # used in: DOS_STOCK_BAT
  __DOS_RCVD_SUN:  bad, avg S/O=0.62 avg Spam%=15.26 avg Ham%=9.28
      # used in: DOS_STOCK_BAT
  __DOS_RCVD_THU:  bad, avg S/O=0.43 avg Spam%=14.51 avg Ham%=19.39
      # used in: DOS_STOCK_BAT
  __DOS_RCVD_TUE:  bad, avg S/O=0.46 avg Spam%=15.94 avg Ham%=18.83
      # used in: DOS_STOCK_BAT
  __DOS_RCVD_WED:  bad, avg S/O=0.46 avg Spam%=15.78 avg Ham%=18.44
      # used in: DOS_STOCK_BAT
  __DOS_REF_2_WK_DAYS:  bad, avg S/O=0.10 avg Spam%=0.32 avg Ham%=2.93
      # used in: DOS_STOCK_BAT
  __DOS_REF_NEXT_WK_DAY:  bad, avg S/O=0.09 avg Spam%=0.32 avg Ham%=3.23
      # used in: DOS_STOCK_BAT
  __DOS_REF_TODAY:  bad, avg S/O=0.39 avg Spam%=9.61 avg Ham%=14.89
      # used in: DOS_STOCK_BAT
  __DOS_RELAYED_EXT:  bad, avg S/O=0.40 avg Spam%=52.51 avg Ham%=80.17
      # used in: DOS_HIGH_BAT_TO_MX DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX 
S25R_1 TO_EQ_FM_HTML_DIRECT
  __DOS_SINGLE_EXT_RELAY:  bad, avg S/O=0.60 avg Spam%=53.98 avg Ham%=36.43
      # used in: DOS_FIX_MY_URI DOS_HIGH_BAT_TO_MX DOS_OUTLOOK_TO_MX_IMAGE 
IMG_DIRECT_TO_MX MANY_HDRS_LCASE TO_EQ_FM_HTML_DIRECT
  __DOS_TAKING_HOME:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_WRITE_ME_AT:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_YOUR_PLACE

rulesrc/sandbox/davej/20_non_ascii.cf (4 rules, 3 bad):

  L_8BIT_MISMATCH:  bad, avg S/O=0.66 avg Spam%=0.42 avg Ham%=0.22
  __L_BODY_8BITS:  bad, avg S/O=0.26 avg Spam%=20.73 avg Ham%=59.59
      # used in: L_8BIT_MISMATCH
  __L_CTE_7BIT:  bad, avg S/O=0.33 avg Spam%=6.50 avg Ham%=13.49
      # used in: L_8BIT_MISMATCH

rulesrc/sandbox/davej/20_bug_7550.cf (1 rules, 1 bad):

  VULN_PHPMAILER:  bad, avg S/O=0.07 avg Spam%=0.08 avg Ham%=0.97

rulesrc/sandbox/billcole/80_test.cf (11 rules, 3 bad):

  T_SCC_THREE_WORD_MONTY:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  __HAS_HREF:  bad, avg S/O=0.16 avg Spam%=9.15 avg Ham%=47.99
      # used in: FROM_WORDY_SHORT
  __HAS_IMG_SRC:  bad, avg S/O=0.13 avg Spam%=4.00 avg Ham%=25.80
      # used in: FROM_WORDY_SHORT

rulesrc/sandbox/billcole/23_bug_6780.cf (4 rules, 3 bad):

  T_EMPTY_FROM_OR_TO_OR_CC:  bad, avg S/O=0.24 avg Spam%=0.05 avg Ham%=0.15
  __EMPTY_CC:  bad, avg S/O=0.51 avg Spam%=95.94 avg Ham%=93.26
      # used in: T_EMPTY_FROM_OR_TO_OR_CC
  __EMPTY_FROM:  bad, avg S/O=0.73 avg Spam%=0.00 avg Ham%=0.00
      # used in: T_EMPTY_FROM_OR_TO_OR_CC

rulesrc/sandbox/billcole/21_bug_7219.cf (6 rules, 5 bad):

  T_SCC_BODY_TEXT_LINE:  bad, avg S/O=0.50 avg Spam%=99.72 avg Ham%=99.61
  T_SCC_BODY_URI_ONLY:  bad, avg S/O=0.79 avg Spam%=2.90 avg Ham%=0.77
  T_SCC_EMPTY_BODY:  bad, avg S/O=0.58 avg Spam%=0.39 avg Ham%=0.28
  __SCC_BODY_TEXT_LINE_FULL:  bad, avg S/O=0.50 avg Spam%=99.99 avg Ham%=99.99
      # used in: T_SCC_BODY_TEXT_LINE T_SCC_BODY_URI_ONLY T_SCC_EMPTY_BODY
  __SCC_SUBJECT_HAS_NON_SPACE:  bad, avg S/O=0.50 avg Spam%=99.79 avg Ham%=99.94
      # used in: T_SCC_BODY_TEXT_LINE T_SCC_BODY_URI_ONLY T_SCC_EMPTY_BODY

rulesrc/sandbox/axb/20_axb_misc.cf (6 rules, 2 bad):

  AXB_X_AOL_SEZ_S:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  AXB_X_OUTLOOKPROT_ENVSDR:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02

rules/72_active.cf (40 rules, 28 bad):

  CTYPE_8SPACE_GIF:  no hits at all
  OBFU_TEXT_ATTACH:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.04
  __ANY_IMAGE_ATTACH:  bad, avg S/O=0.27 avg Spam%=1.74 avg Ham%=4.72
      # used in: PART_CID_STOCK PART_CID_STOCK_LESS SHORT_HELO_AND_INLINE_IMAGE 
STOCK_IMG_HDR_FROM STOCK_IMG_HTML DOS_OUTLOOK_TO_MX_IMAGE REMOTE_IMAGE 
TO_EQ_FM_HTML_ONLY URI_PHISH
  __ANY_TEXT_ATTACH:  bad, avg S/O=0.50 avg Spam%=99.08 avg Ham%=98.02
      # used in: MIME_PHP_NO_TEXT SYSADMIN
  __ANY_TEXT_ATTACH_DOC:  bad, avg S/O=0.50 avg Spam%=99.08 avg Ham%=98.02
      # used in: FSL_MIME_NO_TEXT
  __DOC_ATTACH_FN1:  bad, avg S/O=0.71 avg Spam%=0.13 avg Ham%=0.05
      # used in: FREEMAIL_DOC_PDF WON_MONEY_ATTACH WON_NBDY_ATTACH __DOC_ATTACH
  __DOC_ATTACH_FN2:  bad, avg S/O=0.72 avg Spam%=0.14 avg Ham%=0.05
      # used in: FREEMAIL_DOC_PDF WON_MONEY_ATTACH WON_NBDY_ATTACH __DOC_ATTACH
  __DOC_ATTACH_MT:  bad, avg S/O=0.60 avg Spam%=0.08 avg Ham%=0.05
      # used in: DOC_ATTACH_NO_EXT FREEMAIL_DOC_PDF WON_MONEY_ATTACH 
WON_NBDY_ATTACH __DOC_ATTACH
  __EXE_ATTACH:  no hits at all
      # used in: ACH_CANCELLED_EXE __ACH_CANCELLED_EXE
  __GIF_ATTACH:  bad, avg S/O=0.40 avg Spam%=0.60 avg Ham%=0.77
      # used in: WON_NBDY_ATTACH
  __HTML_ATTACH_01:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.04
      # used in: HTML_ATTACH
  __HTML_ATTACH_02:  bad, avg S/O=0.51 avg Spam%=0.05 avg Ham%=0.05
      # used in: HTML_ATTACH OBFU_HTML_ATT_MALW
  __JPEG_ATTACH:  bad, avg S/O=0.31 avg Spam%=1.36 avg Ham%=2.94
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX 
WON_NBDY_ATTACH __FORGED_TBIRD_IMG
  __KAM_BLOCK_UTF7_2:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
      # used in: KAM_BLOCK_UTF7
  __LOTTO_ATTACH_2:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
      # used in: MONEY_LOTTERY __LOTTO_ADMITS
  __MALW_ATTACH_01_01:  no hits at all
      # used in: MALW_ATTACH
  __MALW_ATTACH_01_02:  no hits at all
      # used in: MALW_ATTACH
  __PART_CID_STOCK_LESS:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
      # used in: PART_CID_STOCK_LESS
  __PART_STOCK_CD_F:  bad, avg S/O=0.13 avg Spam%=0.93 avg Ham%=6.36
      # used in: PART_CID_STOCK
  __PART_STOCK_CL:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.62
      # used in: PART_CID_STOCK
  __PDF_ATTACH_FN1:  bad, avg S/O=0.02 avg Spam%=0.05 avg Ham%=2.17
      # used in: MIME_PHP_NO_TEXT DOC_ATTACH_NO_EXT FREEMAIL_DOC_PDF 
WON_MONEY_ATTACH WON_NBDY_ATTACH __FREEMAIL_DOC_PDF __PDF_ATTACH
  __PDF_ATTACH_FN2:  bad, avg S/O=0.04 avg Spam%=0.08 avg Ham%=2.05
      # used in: MIME_PHP_NO_TEXT DOC_ATTACH_NO_EXT FREEMAIL_DOC_PDF 
WON_MONEY_ATTACH WON_NBDY_ATTACH __FREEMAIL_DOC_PDF __PDF_ATTACH
  __PDF_ATTACH_MT:  bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=1.51
      # used in: MIME_PHP_NO_TEXT DOC_ATTACH_NO_EXT FREEMAIL_DOC_PDF 
WON_MONEY_ATTACH WON_NBDY_ATTACH __FREEMAIL_DOC_PDF __PDF_ATTACH
  __TVD_MIME_ATT_AOPDF:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.86
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_AP:  bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=1.51
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_TP:  bad, avg S/O=0.49 avg Spam%=79.84 avg Ham%=81.77
      # used in: TVD_PDF_FINGER01
  __TVD_OUTLOOK_IMG:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.92
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __ZIP_ATTACH_NOFN:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
      # used in: OBFU_HTML_ATT_MALW

rules/25_replace.cf (29 rules, 23 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_BILLION:  no hits at all
  FUZZY_GUARANTEE:  no hits at all
  FUZZY_MEDICATION:  no hits at all
  FUZZY_MILLION:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_MONEY:  no hits at all
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OBLIGATION:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_PRESCRIPT:  no hits at all
  FUZZY_REFINANCE:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  no hits at all
  FUZZY_XPILL:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.12
  SUBJECT_FUZZY_CHEAP:  no hits of target type
  SUBJECT_FUZZY_MEDS:  no hits at all
  SUBJECT_FUZZY_PENIS:  no hits at all
  SUBJECT_FUZZY_TION:  no hits at all
  SUBJECT_FUZZY_VPILL:  no hits at all

rules/25_dkim.cf (18 rules, 6 bad):

  DKIM_INVALID:  no hits at all
  NML_ADSP_CUSTOM_HIGH:  no hits at all
  NML_ADSP_CUSTOM_LOW:  no hits at all
  NML_ADSP_CUSTOM_MED:  no hits at all
  __DKIM_DEPENDABLE:  no hits at all
      # used in: END_FUTURE_EMAILS
  __VIA_RESIGNER:  no hits at all
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED

rules/20_vbounce.cf (162 rules, 152 bad):

  ANY_BOUNCE_MESSAGE:  no hits of target type
  BOUNCE_MESSAGE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE
  CHALLENGE_RESPONSE:  no hits at all
  CRBOUNCE_MESSAGE:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE
  VBOUNCE_MESSAGE:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_AG:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_BBTL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_CM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_MS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_PREC:  bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __AUTO_GEN_XXSP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_ADDR_ERR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_AUTO_GENERATED:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_AUTO_REPLY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_AUTO_RESPOND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_COULD_NOT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_CTYPE:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.20
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE MIME_PHP_NO_TEXT 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_DATA_FORMAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_DEL_FAIL:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_ESMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_ETRUST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_FROM_DAEMON:  bad, avg S/O=0.72 avg Spam%=0.08 avg Ham%=0.03
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_MAILDELFAIL:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_MAIL_DEL_FAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_NEVER_SEE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_NONWORKING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_NOTDEL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_NOTIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_NO_RESEND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_NO_VAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_OOO_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_OOO_3:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_OOO_H1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_OOO_H2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_OOO_H3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_READ_NOTIFICATION:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.05
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_RETURNED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_RET_MAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_RPATH_ERRMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_RPATH_MD:  bad, avg S/O=0.29 avg Spam%=0.01 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_RPATH_NULL:  bad, avg S/O=0.76 avg Spam%=30.99 avg Ham%=9.69
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE DSN_NO_MIMEVERSION 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_STAT_FAIL:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_SYMANTEC:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_UNDELIVERABLE:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_UNDELIVERABLE_ML:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_UNDEL_MSG:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_X_ERR_STAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __BOUNCE_Y_AUTOGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __CHALLENGE_RESPONSE:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __CRBOUNCE_0SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_0SPAM2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_ASK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_EXI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_GETRESP:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_MIB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_PREC_SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_QURB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_RP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_RP_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_SI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_SI1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SI2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SPAMARREST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_SPAMLION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_SZ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_TMDA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_UNVERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_UOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_VANQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __CRBOUNCE_VERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__CHALLENGE_RESPONSE
  __HAVE_BOUNCE_RELAYS:  bad, avg S/O=0.41 avg Spam%=76.79 avg Ham%=52.84
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST
  __MAJORDOMO_SUBJ:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME
  __MY_SERVERS_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE CHALLENGE_RESPONSE 
CRBOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME
  __NONBOUNCE_READ_RECEIPT:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.13
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST __KHOP_NO_FULL_NAME
  __NONBOUNCE_READ_RECEIPT_CTYPE:  bad, avg S/O=0.01 avg Spam%=0.00 avg 
Ham%=0.13
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST __KHOP_NO_FULL_NAME 
__NONBOUNCE_READ_RECEIPT
  __VBOUNCE_ALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_AMAVISD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_AMAVISD2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_ANTIGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_AOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_ATT_QUAR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_AVREPORT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_AV_RESULTS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_BANNED_MAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_BITDEFENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_CISCO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_CLICKBANK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_CONT_VIOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_DEL_WARN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_DETECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_DISALLOWED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_DOMINO1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_DOMINO2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_DUTCH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_EMAIL_REJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_EMANAGER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_EMVD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_EXIM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_FORBIDDEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_FROMPT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_GSHIELD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_GUIN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_GWAVA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_GWAVA2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_INFLEX:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_INF_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_INTERSCAN2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_INTERSCAN3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_JMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_LUTHER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MAILMARSHAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MAILMARSHAL2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MAILSWEEP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MAILSWEEP2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MAILSWEEP3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MELDING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MIME_INFO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MMS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_MSGLABS:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_NAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_NAV2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_NAV3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_NAVFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_NAV_DETECT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_PROBLEME:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_PT_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_QUOTED_EXE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_RAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_REJECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_REJ_FILT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SCANMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SCREENSAVER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SECURIQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_STRIP_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SYM_AVF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_SYM_EMP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_UNDELIV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_VALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_VIOLATION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_VIR_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_WARNING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __VBOUNCE_YOUSENT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_NO_FULL_NAME NOT_A_PERSON 
SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST VBOUNCE_MESSAGE __KHOP_NO_FULL_NAME 
__NOT_A_PERSON
  __XM_VBULLETIN:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.12
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE FROM_WORDY_SHORT 
KHOP_NO_FULL_NAME NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST 
__BOUNCE_AUTO_GENERATED __KHOP_NO_FULL_NAME __NOT_A_PERSON
  __X_CRON_ENV:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.04
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST __BOUNCE_AUTO_GENERATED 
__KHOP_NO_FULL_NAME __NOT_A_PERSON
  __YESBOUNCE_AUTO_REPLIED_REJ:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_NO_FULL_NAME 
NOT_A_PERSON SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST __KHOP_NO_FULL_NAME 
__NONBOUNCE_READ_RECEIPT __NOT_A_PERSON

rules/20_uri_tests.cf (17 rules, 15 bad):

  HTTP_77:  no hits at all
  HTTP_ESCAPED_HOST:  bad, avg S/O=0.21 avg Spam%=0.02 avg Ham%=0.09
  HTTP_EXCESSIVE_ESCAPES:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.03
  IP_LINK_PLUS:  bad, avg S/O=0.38 avg Spam%=0.00 avg Ham%=0.00
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.57 avg Spam%=0.17 avg Ham%=0.13
  NUMERIC_HTTP_ADDR:  no hits at all
  SPOOF_COM2COM:  bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
  SPOOF_COM2OTH:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  SPOOF_NET2COM:  no hits at all
  URI_HEX:  bad, avg S/O=0.12 avg Spam%=0.11 avg Ham%=0.87
  URI_NO_WWW_INFO_CGI:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.02
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.29 avg Spam%=0.05 avg Ham%=0.12
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (99 rules, 56 bad):

  FORGED_IMS_HTML:  no hits at all
  FORGED_IMS_TAGS:  no hits at all
  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_QUALCOMM_TAGS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  HEADER_SPAM:  no hits of target type
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_RCVD_PF:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  REPTO_QUOTE_AOL:  no hits at all
  REPTO_QUOTE_IMS:  no hits at all
  REPTO_QUOTE_MSN:  no hits at all
  REPTO_QUOTE_QUALCOMM:  no hits at all
  X_MESSAGE_INFO:  no hits at all
  __0_TZ_1:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
      # used in: RATWARE_ZERO_TZ
  __0_TZ_2:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
      # used in: RATWARE_ZERO_TZ
  __0_TZ_3:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
      # used in: RATWARE_ZERO_TZ
  __0_TZ_4:  no hits at all
      # used in: RATWARE_ZERO_TZ
  __0_TZ_5:  no hits at all
      # used in: RATWARE_ZERO_TZ
  __0_TZ_6:  no hits of target type
      # used in: RATWARE_ZERO_TZ
  __0_TZ_7:  no hits at all
      # used in: RATWARE_ZERO_TZ
  __ANY_QUALCOMM_MUA:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
      # used in: FORGED_QUALCOMM_TAGS REPTO_QUOTE_QUALCOMM
  __CTYPE_CHARSET_QUOTED:  bad, avg S/O=0.71 avg Spam%=28.96 avg Ham%=11.70
      # used in: FORGED_MUA_THEBAT_CS
  __CTYPE_HTML:  bad, avg S/O=0.58 avg Spam%=18.18 avg Ham%=12.96
      # used in: MIME_PHP_NO_TEXT RATWARE_ZERO_TZ
  __GATED_THROUGH_RCVD_REMOVER:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __GROUPSIO_GATED:  no hits at all
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __GROUPSIO_MSGID:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.08
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2 __GROUPSIO_GATED
  __HAS_XORIGMSGID:  no hits at all
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2 __GROUPSIO_GATED
  __HAS_X_LOOP:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.91
      # used in: ADVANCE_FEE_3_NEW
  __HAS_X_MAILING_LIST:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=4.90
      # used in: FREEMAIL_REPLY FROM_WORDY_SHORT FREEMAIL_DOC_PDF 
KHOP_HELO_FCRDNS MANY_HDRS_LCASE __FREEMAIL_DOC_PDF
  __HAS_X_MAILMAN_VERSION:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.85
      # used in: FREEMAIL_REPLY FROM_WORDY_SHORT FREEMAIL_DOC_PDF 
KHOP_HELO_FCRDNS MANY_HDRS_LCASE __FREEMAIL_DOC_PDF
  __HOTMAIL_BAYDAV_MSGID:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.00
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __IMS_HTML_BUILDS:  no hits at all
      # used in: FORGED_IMS_HTML
  __IMS_HTML_RCVD:  no hits at all
      # used in: FORGED_IMS_HTML
  __IPLANET_MESSAGING_SERVER:  no hits at all
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __LYRIS_EZLM_REMAILER:  bad, avg S/O=0.03 avg Spam%=0.19 avg Ham%=6.45
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __MAILMAN_21:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.85
      # used in: FORGED_MUA_THEBAT_CS
  __MIME_HTML:  bad, avg S/O=0.48 avg Spam%=70.36 avg Ham%=76.82
      # used in: FORGED_IMS_TAGS FORGED_QUALCOMM_TAGS HTML_MISSING_CTYPE 
GAPPY_HTML __GAPPY_HTML
  __MIME_VERSION_APPLEMAIL:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
      # used in: MIME_PHP_NO_TEXT
  __MSGID_APPLEMAIL:  bad, avg S/O=0.16 avg Spam%=0.17 avg Ham%=0.89
      # used in: MIME_PHP_NO_TEXT STOCK_LOW_CONTRAST END_FUTURE_EMAILS 
MANY_HDRS_LCASE MONEY_LOTTERY UPGRADE_MAILBOX __HDRS_LCASE_KNOWN 
__HTML_FONT_LOW_CONTRAST_MINFP
  __RATWARE_0_TZ_DATE:  bad, avg S/O=0.24 avg Spam%=9.00 avg Ham%=28.63
      # used in: RATWARE_NAME_ID RATWARE_ZERO_TZ
  __REPTO_QUOTE:  bad, avg S/O=0.54 avg Spam%=13.85 avg Ham%=11.60
      # used in: REPTO_QUOTE_AOL REPTO_QUOTE_IMS REPTO_QUOTE_MSN 
REPTO_QUOTE_QUALCOMM
  __SYMPATICO_MSGID:  no hits at all
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __TAG_EXISTS_BODY:  bad, avg S/O=0.46 avg Spam%=61.73 avg Ham%=71.38
      # used in: FORGED_IMS_TAGS
  __TAG_EXISTS_HEAD:  bad, avg S/O=0.46 avg Spam%=60.66 avg Ham%=70.32
      # used in: FORGED_IMS_TAGS
  __TAG_EXISTS_HTML:  bad, avg S/O=0.46 avg Spam%=61.65 avg Ham%=71.85
      # used in: FORGED_IMS_TAGS FORGED_QUALCOMM_TAGS HTML_MIME_NO_HTML_TAG 
TO_EQ_FM_DOM_HTML_ONLY
  __TAG_EXISTS_META:  bad, avg S/O=0.40 avg Spam%=42.51 avg Ham%=64.66
      # used in: FORGED_IMS_TAGS
  __UNUSABLE_MSGID:  bad, avg S/O=0.03 avg Spam%=0.19 avg Ham%=6.45
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2
  __USER_AGENT_APPLEMAIL:  bad, avg S/O=0.18 avg Spam%=0.02 avg Ham%=0.11
      # used in: MIME_PHP_NO_TEXT
  __WACKY_SENDMAIL_VERSION:  no hits at all
      # used in: FORGED_MUA_MOZILLA MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 
TVD_FW_GRAPHIC_ID3_2 __UNUSABLE_MSGID
  __X_MAILER_APPLEMAIL:  bad, avg S/O=0.21 avg Spam%=0.03 avg Ham%=0.12
      # used in: MIME_PHP_NO_TEXT __USER_AGENT_APPLEMAIL
  __YAHOO_BULK:  no hits at all
      # used in: FORGED_IMS_HTML FORGED_IMS_TAGS SPOOFED_URL SPOOFED_URL_HOST

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (44 rules, 35 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.04
  BAD_CREDIT:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.12
  BANG_GUAR:  bad, avg S/O=0.74 avg Spam%=0.04 avg Ham%=0.01
  BANG_OPRAH:  no hits at all
  BODY_ENHANCEMENT:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.06
  BODY_ENHANCEMENT2:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  DEAR_FRIEND:  bad, avg S/O=0.67 avg Spam%=0.10 avg Ham%=0.05
  DEAR_SOMETHING:  bad, avg S/O=0.51 avg Spam%=0.31 avg Ham%=0.29
  DIET_1:  bad, avg S/O=0.77 avg Spam%=0.59 avg Ham%=0.18
  EM_ROLEX:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  FIN_FREE:  bad, avg S/O=0.53 avg Spam%=0.01 avg Ham%=0.01
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  GUARANTEED_100_PERCENT:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  INVESTMENT_ADVICE:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.01
  JOIN_MILLIONS:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03
  LOW_PRICE:  bad, avg S/O=0.07 avg Spam%=0.02 avg Ham%=0.22
  MARKETING_PARTNERS:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.01
  MORE_SEX:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
  NOT_ADVISOR:  no hits at all
  OBSCURED_EMAIL:  no hits at all
  ONE_TIME:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  PREST_NON_ACCREDITED:  no hits at all
  PRICES_ARE_AFFORDABLE:  bad, avg S/O=0.45 avg Spam%=0.01 avg Ham%=0.01
  REFINANCE_NOW:  no hits at all
  REFINANCE_YOUR_HOME:  no hits at all
  REMOVE_BEFORE_LINK:  bad, avg S/O=0.49 avg Spam%=0.41 avg Ham%=0.43
  REPLICA_WATCH:  no hits at all
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits at all
  STRONG_BUY:  no hits at all
  __RUDE_HTML_1:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_2:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_3:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_4:  no hits at all
      # used in: RUDE_HTML

rules/20_meta_tests.cf (19 rules, 11 bad):

  FORGED_MUA_MOZILLA:  bad, avg S/O=0.71 avg Spam%=0.62 avg Ham%=0.25
  INVALID_MSGID:  bad, avg S/O=0.65 avg Spam%=0.32 avg Ham%=0.17
  NO_HEADERS_MESSAGE:  no hits at all
  UPPERCASE_50_75:  bad, avg S/O=0.54 avg Spam%=0.14 avg Ham%=0.12
  UPPERCASE_75_100:  bad, avg S/O=0.62 avg Spam%=0.02 avg Ham%=0.01
  __HAS_MSGID:  bad, avg S/O=0.50 avg Spam%=99.26 avg Ham%=99.08
      # used in: INVALID_MSGID
  __MOZILLA_MSGID:  bad, avg S/O=0.55 avg Spam%=14.26 avg Ham%=11.54
      # used in: FORGED_MUA_MOZILLA THIS_AD URI_PHISH
  __MSGID_COMMENT:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
      # used in: INVALID_MSGID
  __SANE_MSGID:  bad, avg S/O=0.50 avg Spam%=98.94 avg Ham%=98.91
      # used in: INVALID_MSGID
  __UPPERCASE_50_75:  bad, avg S/O=0.54 avg Spam%=0.14 avg Ham%=0.12
      # used in: UPPERCASE_50_75
  __UPPERCASE_75_100:  bad, avg S/O=0.62 avg Spam%=0.02 avg Ham%=0.01
      # used in: UPPERCASE_75_100

rules/20_imageinfo.cf (17 rules, 14 bad):

  DC_GIF_UNO_LARGO:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  DC_IMAGE_SPAM_HTML:  no hits of target type
  DC_IMAGE_SPAM_TEXT:  no hits of target type
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.23 avg Spam%=0.02 avg Ham%=0.05
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_GIF_MULTI_LARGO:  bad, avg S/O=0.75 avg Spam%=0.05 avg Ham%=0.00
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_IMG_HTML_RATIO:  bad, avg S/O=0.77 avg Spam%=0.86 avg Ham%=0.25
      # used in: DC_IMAGE_SPAM_HTML
  __DC_IMG_TEXT_RATIO:  bad, avg S/O=0.62 avg Spam%=1.15 avg Ham%=0.67
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_PNG_MULTI_LARGO:  bad, avg S/O=0.27 avg Spam%=0.09 avg Ham%=0.19
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_AREA_180K:  bad, avg S/O=0.76 avg Spam%=0.05 avg Ham%=0.00
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT 
__DC_GIF_MULTI_LARGO
  __GIF_ATTACH_1:  bad, avg S/O=0.44 avg Spam%=0.37 avg Ham%=0.40
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_ATTACH_2P:  bad, avg S/O=0.35 avg Spam%=0.24 avg Ham%=0.37
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __PNG_AREA_180K:  bad, avg S/O=0.27 avg Spam%=0.10 avg Ham%=0.25
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO 
__DC_PNG_MULTI_LARGO
  __PNG_ATTACH_1:  bad, avg S/O=0.13 avg Spam%=0.25 avg Ham%=1.65
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO
  __PNG_ATTACH_2P:  bad, avg S/O=0.18 avg Spam%=0.25 avg Ham%=1.13
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO

rules/20_html_tests.cf (69 rules, 49 bad):

  HIDE_WIN_STATUS:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.00
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.12 avg Spam%=0.02 avg Ham%=0.15
  HTML_COMMENT_SHORT:  no hits at all
  HTML_EMBEDS:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
  HTML_EXTRA_CLOSE:  bad, avg S/O=0.64 avg Spam%=0.03 avg Ham%=0.01
  HTML_FONT_FACE_BAD:  bad, avg S/O=0.59 avg Spam%=0.19 avg Ham%=0.13
  HTML_FONT_LOW_CONTRAST:  bad, avg S/O=0.40 avg Spam%=16.15 avg Ham%=24.16
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.45 avg Spam%=0.11 avg Ham%=0.13
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.61 avg Spam%=0.28 avg Ham%=0.18
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  no hits at all
  HTML_IMAGE_ONLY_24:  bad, avg S/O=0.75 avg Spam%=0.79 avg Ham%=0.26
      # used in: DC_IMAGE_SPAM_HTML
  HTML_IMAGE_ONLY_28:  bad, avg S/O=0.74 avg Spam%=1.01 avg Ham%=0.36
      # used in: DC_IMAGE_SPAM_HTML
  HTML_IMAGE_ONLY_32:  bad, avg S/O=0.46 avg Spam%=0.50 avg Ham%=0.57
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.33 avg Spam%=2.56 avg Ham%=5.07
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.27 avg Spam%=1.84 avg Ham%=4.82
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.27 avg Spam%=1.46 avg Ham%=3.97
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.45 avg Spam%=2.99 avg Ham%=3.28
  HTML_MESSAGE:  bad, avg S/O=0.48 avg Spam%=70.34 avg Ham%=76.81
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.71 avg Spam%=3.59 avg Ham%=1.50
  HTML_MISSING_CTYPE:  no hits at all
  HTML_NONELEMENT_30_40:  no hits at all
  HTML_NONELEMENT_40_50:  no hits at all
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.52 avg Spam%=0.12 avg Ham%=0.11
  HTML_OBFUSCATE_30_40:  no hits at all
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.33 avg Spam%=0.25 avg Ham%=0.52
  HTML_TAG_BALANCE_HEAD:  bad, avg S/O=0.30 avg Spam%=0.04 avg Ham%=0.09
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.77 avg Spam%=0.10 avg Ham%=0.03
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits at all
  __COMMENT_EXISTS:  bad, avg S/O=0.26 avg Spam%=19.66 avg Ham%=56.78
      # used in: ADMAIL ADVANCE_FEE_3_NEW LOTTO_DEPT SUBJ_BROKEN_WORD 
TO_EQ_FM_DOM_HTML_IMG
  __HIGHBITS:  bad, avg S/O=0.44 avg Spam%=24.77 avg Ham%=31.90
      # used in: DOS_HIGH_BAT_TO_MX TVD_SPACE_RATIO DOS_BODY_HIGH_NO_MID
  __HTML_LINK_IMAGE:  bad, avg S/O=0.31 avg Spam%=27.24 avg Ham%=61.69
      # used in: ADVANCE_FEE_3_NEW MONEY_LOTTERY REMOTE_IMAGE 
TO_EQ_FM_DOM_HTML_IMG URI_PHISH
  __HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.77 avg Spam%=0.10 avg Ham%=0.03
      # used in: HTML_TITLE_SUBJ_DIFF
  __JS_DOCWRITE:  bad, avg S/O=0.21 avg Spam%=0.05 avg Ham%=0.17
      # used in: JS_FROMCHARCODE
  __JS_FROMCHARCODE:  no hits at all
      # used in: JS_FROMCHARCODE
  __MIME_ATTACHMENT:  bad, avg S/O=0.12 avg Spam%=0.44 avg Ham%=3.43
      # used in: HTML_TITLE_SUBJ_DIFF
  __OBFUSCATING_COMMENT_A:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
      # used in: OBFUSCATING_COMMENT
  __OBFUSCATING_COMMENT_B:  bad, avg S/O=0.12 avg Spam%=0.09 avg Ham%=0.72
      # used in: OBFUSCATING_COMMENT
  __TAG_EXISTS_CENTER:  bad, avg S/O=0.39 avg Spam%=12.42 avg Ham%=19.36
      # used in: ADVANCE_FEE_3_NEW TO_EQ_FM_HTML_ONLY URI_PHISH

rules/20_head_tests.cf (158 rules, 85 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.75 avg Spam%=0.71 avg Ham%=0.23
  CONFIRMED_FORGED:  no hits at all
  DATE_IN_FUTURE_96_XX:  no hits at all
  DATE_IN_PAST_24_48:  bad, avg S/O=0.80 avg Spam%=0.26 avg Ham%=0.07
  DATE_SPAMWARE_Y2K:  no hits at all
  FAKE_OUTBLAZE_RCVD:  no hits at all
  FORGED_HOTMAIL_RCVD2:  bad, avg S/O=0.74 avg Spam%=0.04 avg Ham%=0.01
  FORGED_MSGID_AOL:  no hits at all
  FORGED_MSGID_HOTMAIL:  no hits at all
  FORGED_MSGID_MSN:  no hits at all
  FORGED_MSGID_YAHOO:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  FORGED_TELESP_RCVD:  no hits at all
  FROM_EXCESS_BASE64:  bad, avg S/O=0.71 avg Spam%=5.53 avg Ham%=1.95
  FROM_LOCAL_HEX:  no hits at all
  FROM_OFFERS:  bad, avg S/O=0.50 avg Spam%=0.03 avg Ham%=0.03
  GAPPY_SUBJECT:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.26
  HEADER_COUNT_CTYPE:  no hits at all
  HEAD_ILLEGAL_CHARS:  no hits at all
  INVALID_DATE_TZ_ABSURD:  no hits of target type
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  no hits at all
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  MIME_BOUND_DIGITS_15:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.02
  MIME_BOUND_MANY_HEX:  no hits at all
  MIME_HEADER_CTYPE_ONLY:  bad, avg S/O=0.42 avg Spam%=0.16 avg Ham%=0.22
  MISSING_DATE:  bad, avg S/O=0.76 avg Spam%=0.05 avg Ham%=0.01
  MISSING_FROM:  bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
  MISSING_MID:  bad, avg S/O=0.44 avg Spam%=0.74 avg Ham%=0.92
  MISSING_SUBJECT:  bad, avg S/O=0.64 avg Spam%=0.04 avg Ham%=0.02
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.23 avg Spam%=0.10 avg Ham%=0.34
  MSGID_SHORT:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.01
  MSGID_SPAM_LETTERS:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  PLING_QUERY:  bad, avg S/O=0.44 avg Spam%=0.41 avg Ham%=0.52
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  SORTED_RECIPS:  bad, avg S/O=0.76 avg Spam%=0.05 avg Ham%=0.02
  SUBJ_ALL_CAPS:  bad, avg S/O=0.65 avg Spam%=2.29 avg Ham%=1.24
  SUBJ_AS_SEEN:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  SUBJ_DOLLARS:  bad, avg S/O=0.23 avg Spam%=0.07 avg Ham%=0.22
  TO_MALFORMED:  bad, avg S/O=0.47 avg Spam%=0.03 avg Ham%=0.03
  WITH_LC_SMTP:  no hits at all
  X_PRIORITY_CC:  no hits at all
  __AT_AOL_MSGID:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
      # used in: FORGED_MSGID_AOL
  __AT_YAHOO_MSGID:  bad, avg S/O=0.55 avg Spam%=0.04 avg Ham%=0.03
      # used in: FORGED_MSGID_YAHOO
  __CD:  bad, avg S/O=0.27 avg Spam%=0.76 avg Ham%=1.97
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT:  bad, avg S/O=0.50 avg Spam%=99.10 avg Ham%=98.14
      # used in: MIME_HEADER_CTYPE_ONLY
  __CTE:  bad, avg S/O=0.54 avg Spam%=42.41 avg Ham%=35.67
      # used in: MIME_HEADER_CTYPE_ONLY L_8BIT_MISMATCH
  __CT_TEXT_PLAIN:  bad, avg S/O=0.57 avg Spam%=23.74 avg Ham%=18.13
      # used in: MIME_HEADER_CTYPE_ONLY L_8BIT_MISMATCH
  __ENV_AND_HDR_FROM_MATCH:  bad, avg S/O=0.68 avg Spam%=51.11 avg Ham%=24.59
      # used in: STOCK_IMG_HDR_FROM STOCK_IMG_HTML SYSADMIN TEQF_USR_MSGID_MALF 
SUBJ_BROKEN_WORD SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TVD_PH_FR5 URI_DATA
  __FORGED_AOL_RCVD:  no hits at all
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_JUNO_RCVD:  bad, avg S/O=0.69 avg Spam%=0.00 avg Ham%=0.00
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_RCVD_TRAIL:  bad, avg S/O=0.19 avg Spam%=0.42 avg Ham%=1.75
      # used in: CONFIRMED_FORGED
  __FROM_AOL_COM:  bad, avg S/O=0.67 avg Spam%=0.03 avg Ham%=0.01
      # used in: FORGED_MSGID_AOL
  __FROM_ENCODED_B64:  bad, avg S/O=0.71 avg Spam%=5.53 avg Ham%=1.95
      # used in: FROM_EXCESS_BASE64 HDR_CASE_REV_ENC
  __FROM_ENCODED_QP:  bad, avg S/O=0.12 avg Spam%=1.82 avg Ham%=12.83
      # used in: THIS_AD KHOP_NO_FULL_NAME TO_EQ_FM_DOM_HTML_ONLY
  __FROM_HOTMAIL_COM:  bad, avg S/O=0.56 avg Spam%=0.16 avg Ham%=0.13
      # used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN MSGID_FROM_MTA_HEADER
  __FROM_MSN_COM:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
      # used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN REPTO_QUOTE_MSN
  __FROM_YAHOO_COM:  bad, avg S/O=0.59 avg Spam%=0.14 avg Ham%=0.10
      # used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN FORGED_MSGID_YAHOO
  __GAPPY_SUBJECT:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.26
      # used in: GAPPY_SUBJECT GAPPY_LOW_CONTRAST
  __HAS_DATE:  bad, avg S/O=0.50 avg Spam%=99.95 avg Ham%=99.99
      # used in: MISSING_DATE NO_HEADERS_MESSAGE
  __HAS_FROM:  bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=100.00
      # used in: MISSING_FROM T_EMPTY_FROM_OR_TO_OR_CC
  __HAS_MESSAGE_ID:  bad, avg S/O=0.50 avg Spam%=99.26 avg Ham%=99.08
      # used in: MISSING_MID NO_HEADERS_MESSAGE DOS_BODY_HIGH_NO_MID
  __HAS_SUBJECT:  bad, avg S/O=0.50 avg Spam%=99.96 avg Ham%=99.98
      # used in: MISSING_SUBJECT
  __IS_EXCH:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
      # used in: TO_EQ_FM_DOM_HTML_IMG TO_EQ_FM_DOM_HTML_ONLY
  __JAPANESE_UCE_BODY:  no hits at all
      # used in: JAPANESE_UCE_BODY
  __MIME_VERSION:  bad, avg S/O=0.50 avg Spam%=98.87 avg Ham%=97.27
      # used in: MIME_HEADER_CTYPE_ONLY DSN_NO_MIMEVERSION
  __ML1:  bad, avg S/O=0.21 avg Spam%=5.86 avg Ham%=21.41
      # used in: ADVANCE_FEE_3_NEW BULK_RE_SUSP_NTLD FILL_THIS_FORM 
FROM_WORDY_SHORT NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED 
FILL_THIS_FORM_SHORT FSL_HELO_BARE_IP_2 KHOP_HELO_FCRDNS KHOP_NO_FULL_NAME 
LOTTO_DEPT MANY_HDRS_LCASE MANY_SUBDOM MAY_BE_FORGED NOT_A_PERSON REMOTE_IMAGE 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST URI_OBFU_DOM 
UC_GIBBERISH_OBFU URI_DATA URI_GOOGLE_PROXY URI_PHISH __KHOP_NO_FULL_NAME
  __ML2:  bad, avg S/O=0.08 avg Spam%=2.71 avg Ham%=29.94
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FREEMAIL_REPLY 
FROM_WORDY_SHORT NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED 
FILL_THIS_FORM_SHORT FREEMAIL_DOC_PDF FSL_HELO_BARE_IP_2 KHOP_HELO_FCRDNS 
KHOP_NO_FULL_NAME LOTTO_DEPT MANY_HDRS_LCASE MANY_SUBDOM MAY_BE_FORGED 
NOT_A_PERSON REMOTE_IMAGE SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST URI_OBFU_DOM UC_GIBBERISH_OBFU URI_DATA URI_PHISH 
__FREEMAIL_DOC_PDF __KHOP_NO_FULL_NAME
  __ML3:  bad, avg S/O=0.05 avg Spam%=0.39 avg Ham%=6.72
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED 
FILL_THIS_FORM_SHORT FSL_HELO_BARE_IP_2 KHOP_HELO_FCRDNS KHOP_NO_FULL_NAME 
LOTTO_DEPT MANY_HDRS_LCASE MANY_SUBDOM MAY_BE_FORGED NOT_A_PERSON REMOTE_IMAGE 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST URI_OBFU_DOM 
UC_GIBBERISH_OBFU URI_DATA URI_PHISH __KHOP_NO_FULL_NAME
  __ML4:  bad, avg S/O=0.09 avg Spam%=0.26 avg Ham%=2.65
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FREEMAIL_REPLY 
FROM_WORDY_SHORT NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED 
FILL_THIS_FORM_SHORT FREEMAIL_DOC_PDF FSL_HELO_BARE_IP_2 KHOP_HELO_FCRDNS 
KHOP_NO_FULL_NAME LOTTO_DEPT MANY_HDRS_LCASE MANY_SUBDOM MAY_BE_FORGED 
NOT_A_PERSON REMOTE_IMAGE SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD 
SUBJ_OBFU_LOW_CNTRST URI_OBFU_DOM UC_GIBBERISH_OBFU URI_DATA URI_PHISH 
__FREEMAIL_DOC_PDF __KHOP_NO_FULL_NAME
  __ML5:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=7.89
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED 
FILL_THIS_FORM_SHORT FSL_HELO_BARE_IP_2 KHOP_HELO_FCRDNS KHOP_NO_FULL_NAME 
LOTTO_DEPT MANY_HDRS_LCASE MANY_SUBDOM MAY_BE_FORGED NOT_A_PERSON REMOTE_IMAGE 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST URI_OBFU_DOM 
UC_GIBBERISH_OBFU URI_DATA URI_PHISH __KHOP_NO_FULL_NAME
  __ML_TURNS_SP_TO_TAB:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=4.30
      # used in: KB_DATE_CONTAINS_TAB KB_FAKED_THE_BAT TAB_IN_FROM
  __MSGID_BEFORE_OKAY:  bad, avg S/O=0.38 avg Spam%=0.13 avg Ham%=0.21
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_BEFORE_RECEIVED:  bad, avg S/O=0.26 avg Spam%=0.12 avg Ham%=0.35
      # used in: MSGID_FROM_MTA_HEADER TO_EQ_FM_DOM_HTML_ONLY
  __MSGID_OK_DIGITS:  bad, avg S/O=0.41 avg Spam%=31.32 avg Ham%=45.81
      # used in: SYSADMIN SUBJ_BROKEN_WORD
  __MSGID_OK_HEX:  bad, avg S/O=0.27 avg Spam%=10.54 avg Ham%=28.98
      # used in: TO_EQ_FM_DOM_HTML_ONLY
  __MSGID_OK_HOST:  bad, avg S/O=0.51 avg Spam%=61.22 avg Ham%=59.11
      # used in: URI_DEOBFU_INSTR
  __MSGID_RANDY:  bad, avg S/O=0.77 avg Spam%=3.47 avg Ham%=1.01
      # used in: HTML_TEXT_INVISIBLE_STYLE
  __PLING_QUERY:  bad, avg S/O=0.44 avg Spam%=0.41 avg Ham%=0.52
      # used in: PLING_QUERY
  __SUBJECT_ENCODED_B64:  bad, avg S/O=0.77 avg Spam%=17.37 avg Ham%=5.04
      # used in: END_FUTURE_EMAILS HDR_CASE_REV_ENC SUBJ_LACKS_WORDS
  __VIA_ML:  bad, avg S/O=0.16 avg Spam%=7.29 avg Ham%=38.74
      # used in: ADVANCE_FEE_3_NEW FILL_THIS_FORM FROM_WORDY_SHORT 
NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED 
FILL_THIS_FORM_SHORT FSL_HELO_BARE_IP_2 KHOP_HELO_FCRDNS KHOP_NO_FULL_NAME 
LOTTO_DEPT MANY_HDRS_LCASE MANY_SUBDOM MAY_BE_FORGED NOT_A_PERSON REMOTE_IMAGE 
SPOOFED_URL SPOOFED_URL_HOST SUBJ_BROKEN_WORD SUBJ_OBFU_LOW_CNTRST URI_OBFU_DOM 
UC_GIBBERISH_OBFU URI_DATA URI_PHISH __KHOP_NO_FULL_NAME __NOT_A_PERSON 
__REMOTE_IMAGE

rules/20_freemail.cf (12 rules, 5 bad):

  FREEMAIL_FROM:  bad, avg S/O=0.74 avg Spam%=9.88 avg Ham%=3.40
      # used in: FREEMAIL_FORGED_FROMDOMAIN
  FREEMAIL_REPLY:  bad, avg S/O=0.75 avg Spam%=0.09 avg Ham%=0.03
  __freemail_safe:  bad, avg S/O=0.09 avg Spam%=2.96 avg Ham%=30.58
      # used in: FREEMAIL_REPLY FROM_WORDY_SHORT FREEMAIL_DOC_PDF 
KHOP_HELO_FCRDNS MANY_HDRS_LCASE __FREEMAIL_DOC_PDF
  __freemail_safe_fwd:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.62
      # used in: FREEMAIL_REPLY FROM_WORDY_SHORT FREEMAIL_DOC_PDF 
KHOP_HELO_FCRDNS MANY_HDRS_LCASE __FREEMAIL_DOC_PDF __freemail_safe
  __freemail_safe_rls:  no hits of target type
      # used in: FREEMAIL_REPLY FROM_WORDY_SHORT FREEMAIL_DOC_PDF 
KHOP_HELO_FCRDNS MANY_HDRS_LCASE __FREEMAIL_DOC_PDF __freemail_safe

rules/20_fake_helo_tests.cf (18 rules, 3 bad):

  HELO_DYNAMIC_DIALIN:  no hits at all
  HELO_DYNAMIC_HOME_NL:  no hits at all
  HELO_DYNAMIC_ROGERS:  no hits at all

rules/20_dynrdns.cf (36 rules, 2 bad):

  __LAST_EXTERNAL_RELAY_NO_AUTH:  bad, avg S/O=0.51 avg Spam%=99.98 avg 
Ham%=97.29
      # used in: STOCK_LOW_CONTRAST TEQF_USR_MSGID_MALF KHOP_FAKE_EBAY 
KHOP_HELO_FCRDNS MANY_HDRS_LCASE MAY_BE_FORGED S25R S25R_1 S25R_2 S25R_3 S25R_5 
SUBJ_OBFU_PUNCT_FEW SUBJ_OBFU_PUNCT_MANY TO_EQ_FM_DOM_HTML_IMG 
TO_EQ_FM_DOM_HTML_ONLY TO_EQ_FM_HTML_ONLY UPGRADE_MAILBOX 
__HTML_FONT_LOW_CONTRAST_MINFP
  __LAST_UNTRUSTED_RELAY_NO_AUTH:  bad, avg S/O=0.51 avg Spam%=99.98 avg 
Ham%=96.63
      # used in: DOS_HIGH_BAT_TO_MX

rules/20_drugs.cf (84 rules, 59 bad):

  DRUGS_ANXIETY:  bad, avg S/O=0.40 avg Spam%=0.01 avg Ham%=0.01
  DRUGS_ANXIETY_EREC:  no hits at all
  DRUGS_ANXIETY_OBFU:  no hits at all
  DRUGS_DIET:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_MANYKINDS:  no hits at all
  DRUGS_MUSCLE:  no hits of target type
      # used in: DRUGS_MANYKINDS
  DRUGS_SLEEP_EREC:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_DOSAGE:  no hits at all
  DRUG_ED_GENERIC:  no hits at all
  DRUG_ED_SILD:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  SUBJECT_DRUG_GAP_S:  no hits at all
  SUBJECT_DRUG_GAP_X:  no hits at all
  VIA_GAP_GRA:  no hits at all
  __DRUGS_ANXIETY1:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_ANXIETY_OBFU 
DRUGS_MANYKINDS
  __DRUGS_ANXIETY3:  no hits of target type
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_ANXIETY_OBFU 
DRUGS_MANYKINDS
  __DRUGS_ANXIETY4:  no hits of target type
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_MANYKINDS
  __DRUGS_ANXIETY5:  no hits of target type
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_MANYKINDS
  __DRUGS_ANXIETY6:  no hits of target type
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_MANYKINDS
  __DRUGS_ANXIETY7:  no hits of target type
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_MANYKINDS
  __DRUGS_ANXIETY9:  no hits at all
      # used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_MANYKINDS
  __DRUGS_ANXIETY_VAL:  no hits of target type
      # used in: DRUGS_ANXIETY_OBFU
  __DRUGS_ANXIETY_XAN:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
      # used in: DRUGS_ANXIETY_OBFU
  __DRUGS_DIET1:  no hits of target type
      # used in: DRUGS_DIET DRUGS_DIET_OBFU DRUGS_MANYKINDS
  __DRUGS_DIET2:  no hits at all
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET3:  no hits at all
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET4:  no hits at all
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET5:  no hits at all
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET6:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET8:  no hits at all
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET9:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
      # used in: DRUGS_DIET DRUGS_MANYKINDS
  __DRUGS_DIET_PHEN:  no hits of target type
      # used in: DRUGS_DIET_OBFU
  __DRUGS_ERECTILE11:  no hits at all
      # used in: DRUGS_ANXIETY_EREC DRUGS_MANYKINDS DRUGS_SLEEP_EREC
  __DRUGS_ERECTILE5:  no hits of target type
      # used in: DRUGS_ANXIETY_EREC DRUGS_MANYKINDS DRUGS_SLEEP_EREC
  __DRUGS_ERECTILE8:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
      # used in: DRUGS_ANXIETY_EREC DRUGS_MANYKINDS DRUGS_SLEEP_EREC
  __DRUGS_MUSCLE2:  no hits of target type
      # used in: DRUGS_MANYKINDS DRUGS_MUSCLE
  __DRUGS_MUSCLE3:  no hits at all
      # used in: DRUGS_MANYKINDS DRUGS_MUSCLE
  __DRUGS_MUSCLE4:  no hits at all
      # used in: DRUGS_MANYKINDS DRUGS_MUSCLE
  __DRUGS_MUSCLE5:  no hits at all
      # used in: DRUGS_MANYKINDS DRUGS_MUSCLE
  __DRUGS_PAIN:  bad, avg S/O=0.69 avg Spam%=0.03 avg Ham%=0.01
      # used in: DRUGS_MANYKINDS
  __DRUGS_PAIN1:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN10:  no hits at all
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN11:  no hits at all
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN12:  no hits at all
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN13:  no hits at all
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN14:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN2:  no hits of target type
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN3:  no hits of target type
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN4:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN5:  bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN6:  no hits of target type
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN7:  no hits of target type
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_PAIN9:  no hits at all
      # used in: DRUGS_MANYKINDS __DRUGS_PAIN
  __DRUGS_SLEEP:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
      # used in: DRUGS_MANYKINDS DRUGS_SLEEP_EREC
  __DRUGS_SLEEP1:  no hits of target type
      # used in: DRUGS_MANYKINDS DRUGS_SLEEP_EREC __DRUGS_SLEEP
  __DRUGS_SLEEP2:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
      # used in: DRUGS_MANYKINDS DRUGS_SLEEP_EREC __DRUGS_SLEEP
  __DRUGS_SLEEP3:  no hits at all
      # used in: DRUGS_MANYKINDS DRUGS_SLEEP_EREC __DRUGS_SLEEP
  __DRUGS_SLEEP4:  no hits at all
      # used in: DRUGS_MANYKINDS DRUGS_SLEEP_EREC __DRUGS_SLEEP

rules/20_compensate.cf (4 rules, 1 bad):

  __HAS_RCVD:  bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=100.00
      # used in: NO_HEADERS_MESSAGE

rules/20_body_tests.cf (29 rules, 18 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  HTTPS_IP_MISMATCH:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_HTML_MOSTLY:  bad, avg S/O=0.53 avg Spam%=3.18 avg Ham%=2.76
  MIME_HTML_ONLY:  bad, avg S/O=0.54 avg Spam%=19.23 avg Ham%=16.24
      # used in: FORGED_IMS_HTML FORGED_THEBAT_HTML HTML_MIME_NO_HTML_TAG
  MIME_HTML_ONLY_MULTI:  no hits at all
  MIME_QP_LONG_LINE:  bad, avg S/O=0.11 avg Spam%=0.92 avg Ham%=7.06
  MPART_ALT_DIFF:  bad, avg S/O=0.53 avg Spam%=3.96 avg Ham%=3.54
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.74 avg Spam%=0.41 avg Ham%=0.14
  TRACKER_ID:  bad, avg S/O=0.36 avg Spam%=0.11 avg Ham%=0.20
  TVD_SPACE_RATIO:  bad, avg S/O=0.47 avg Spam%=0.82 avg Ham%=0.94
  URI_TRUNCATED:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.05
  WEIRD_QUOTING:  bad, avg S/O=0.69 avg Spam%=0.08 avg Ham%=0.04
  __CTYPE_MULTIPART_ALT:  bad, avg S/O=0.49 avg Spam%=56.05 avg Ham%=57.68
      # used in: MIME_HTML_ONLY_MULTI TO_EQ_FM_DOM_HTML_IMG 
TO_EQ_FM_DOM_HTML_ONLY
  __MIME_QP:  bad, avg S/O=0.32 avg Spam%=14.02 avg Ham%=30.34
      # used in: MANY_HDRS_LCASE MANY_SUBDOM SUBJ_BROKEN_WORD
  __SUBJECT_UTF8_B_ENCODED:  bad, avg S/O=0.76 avg Spam%=16.15 avg Ham%=4.92
      # used in: TVD_SPACE_RATIO HDR_CASE_REV_ENC
  __TVD_SPACE_RATIO:  bad, avg S/O=0.79 avg Spam%=3.57 avg Ham%=0.97
      # used in: TVD_SPACE_RATIO HDR_CASE_REV_ENC

rules/20_advance_fee.cf (53 rules, 8 bad):

  __FRAUD_AON:  bad, avg S/O=0.78 avg Spam%=0.13 avg Ham%=0.04
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_BEP:  bad, avg S/O=0.79 avg Spam%=0.04 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_IRT:  bad, avg S/O=0.58 avg Spam%=0.49 avg Ham%=0.36
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_JYG:  bad, avg S/O=0.72 avg Spam%=0.02 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_MLY:  bad, avg S/O=0.24 avg Spam%=0.06 avg Ham%=0.19
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_ULK:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_WDR:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM
  __FRAUD_WFC:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_3_NEW ADVANCE_FEE_4_NEW_FORM

rules/10_hasbase.cf (21 rules, 10 bad):

  __HAS_CC:  bad, avg S/O=0.37 avg Spam%=4.07 avg Ham%=6.89
      # used in: T_EMPTY_FROM_OR_TO_OR_CC URI_PHISH
  __HAS_ERRORS_TO:  bad, avg S/O=0.09 avg Spam%=0.67 avg Ham%=6.88
      # used in: ADVANCE_FEE_3_NEW AMAZON_IMG_NOT_RCVD_AMZN FROM_WORDY_SHORT 
LIST_PRTL_SAME_USER LONG_IMG_URI ADVANCE_FEE_4_NEW_FORM FSL_HELO_BARE_IP_2 
URI_DATA
  __HAS_IN_REPLY_TO:  bad, avg S/O=0.05 avg Spam%=0.55 avg Ham%=11.48
      # used in: ADVANCE_FEE_3_NEW MIME_PHP_NO_TEXT ADVANCE_FEE_4_NEW_FORM 
LOTTO_DEPT SUBJ_BROKEN_WORD TO_EQ_FM_DOM_HTML_ONLY
  __HAS_LIST_ID:  bad, avg S/O=0.08 avg Spam%=2.71 avg Ham%=29.94
      # used in: USING_VERP
  __HAS_ORGANIZATION:  bad, avg S/O=0.62 avg Spam%=1.51 avg Ham%=0.92
      # used in: BTC_ORG
  __HAS_SENDER:  bad, avg S/O=0.13 avg Spam%=1.80 avg Ham%=12.58
      # used in: ADVANCE_FEE_3_NEW FROM_WORDY_SHORT STOCK_LOW_CONTRAST 
UPGRADE_MAILBOX URI_PHISH
  __HAS_TNEF:  bad, avg S/O=0.07 avg Spam%=0.18 avg Ham%=2.51
      # used in: FROM_WORDY_SHORT
  __HAS_TO:  bad, avg S/O=0.50 avg Spam%=99.19 avg Ham%=99.83
      # used in: T_EMPTY_FROM_OR_TO_OR_CC
  __HAS_URI:  bad, avg S/O=0.51 avg Spam%=94.99 avg Ham%=93.00
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __HAS_X_REF:  bad, avg S/O=0.05 avg Spam%=0.59 avg Ham%=11.63
      # used in: MIME_PHP_NO_TEXT

Reply via email to