HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/20_smf.cf (40 rules, 21 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.62 avg Spam%=1.04 avg Ham%=0.63
  FSL_NO_RCVD_1:  bad, avg S/O=0.05 avg Spam%=0.09 avg Ham%=1.69
  FSL_RCVD_EX_0:  bad, avg S/O=0.02 avg Spam%=0.13 avg Ham%=6.52
  FSL_RCVD_EX_1:  bad, avg S/O=0.78 avg Spam%=78.51 avg Ham%=22.65
  FSL_RCVD_EX_2:  bad, avg S/O=0.57 avg Spam%=17.72 avg Ham%=13.52
  FSL_RCVD_EX_3:  bad, avg S/O=0.48 avg Spam%=1.73 avg Ham%=1.86
  FSL_RCVD_EX_4:  bad, avg S/O=0.04 avg Spam%=0.75 avg Ham%=18.64
  FSL_RCVD_EX_5:  bad, avg S/O=0.03 avg Spam%=0.38 avg Ham%=13.77
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.03 avg Spam%=0.78 avg Ham%=23.05
  FSL_RCVD_TR_1:  bad, avg S/O=0.40 avg Spam%=3.02 avg Ham%=4.25
  FSL_RCVD_TR_2:  no hits of target type
  FSL_RCVD_TR_3:  bad, avg S/O=0.53 avg Spam%=0.08 avg Ham%=0.07
  FSL_RCVD_TR_4:  no hits of target type
  FSL_RCVD_TR_5:  bad, avg S/O=0.66 avg Spam%=33.78 avg Ham%=17.62
  FSL_RCVD_TR_GT_5:  no hits of target type
  FSL_RCVD_UT_1:  bad, avg S/O=0.77 avg Spam%=78.60 avg Ham%=23.66
  FSL_RCVD_UT_2:  bad, avg S/O=0.58 avg Spam%=17.66 avg Ham%=13.03
  FSL_RCVD_UT_3:  bad, avg S/O=0.55 avg Spam%=1.70 avg Ham%=1.40
  FSL_RCVD_UT_4:  bad, avg S/O=0.04 avg Spam%=0.74 avg Ham%=18.54
  FSL_RCVD_UT_5:  bad, avg S/O=0.03 avg Spam%=0.38 avg Ham%=13.77
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.03 avg Spam%=0.78 avg Ham%=22.99

rulesrc/sandbox/sidney/70_other.cf (2 rules, 1 bad):

  T_SCC_TLD_FUN:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/pds/20_urlshort.cf (30 rules, 15 bad):

  DRUGS_ERECTILE_SHORT_SHORTNER:  no hits at all
  PDS_EMPTYSUBJ_URISHRT:  no hits at all
  PDS_FREEMAIL_REPLYTO_URISHRT:  no hits at all
  PDS_FROM_2_EMAILS_SHRTNER:  no hits at all
  PDS_NO_FULL_NAME_SPOOFED_URL:  no hits at all
  PDS_SHORTFWD_URISHRT:  no hits at all
  PDS_SHORTFWD_URISHRT_FP:  no hits at all
  PDS_SHORTFWD_URISHRT_QP:  no hits at all
  PDS_SHORT_SPOOFED_URL:  no hits at all
  PDS_TINYSUBJ_URISHRT:  no hits at all
  PDS_URISHRT_LOCALPART_SUBJ:  no hits at all
  SHORT_SHORTNER:  no hits at all
  TONOM_EQ_TOLOC_SHRT_PSHRTNER:  no hits at all
  TONOM_EQ_TOLOC_SHRT_SHRTNER:  no hits at all
  XPRIO_URL_SHORTNER:  no hits at all

rulesrc/sandbox/pds/20_php.cf (14 rules, 2 bad):

  PDS_PHPEXP_BOT:  no hits at all
  PDS_PHP_RUNTIME_FUNC:  no hits at all

rulesrc/sandbox/pds/20_ntld.cf (24 rules, 8 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.00
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  OFFER_ONLY_AMERICA:  no hits at all
  PDS_BTC_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  SEO_SUSP_NTLD:  no hits at all
  SUSPNTLD_EXPIRATION_EXTORT:  no hits at all
  VPS_NO_NTLD:  no hits at all

rulesrc/sandbox/pds/20_helo.cf (5 rules, 1 bad):

  PDS_HP_HELO_NORDNS:  bad, avg S/O=0.66 avg Spam%=0.28 avg Ham%=0.00

rulesrc/sandbox/pds/20_btc.cf (18 rules, 7 bad):

  PDS_BTC_AHACKER:  no hits at all
  PDS_BTC_HACKER:  no hits at all
  PDS_BTC_MSGID:  no hits at all
  PDS_LITECOIN_ID:  bad, avg S/O=0.73 avg Spam%=0.07 avg Ham%=0.03
  PDS_LTC_AHACKER:  no hits at all
  PDS_LTC_HACKER:  no hits at all
  PDS_LTC_HUSH:  bad, avg S/O=0.61 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/pds/10_menaces.cf (32 rules, 7 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.54 avg Spam%=0.27 avg Ham%=0.23
  FROM_2_EMAILS_SHORT:  bad, avg S/O=0.39 avg Spam%=0.21 avg Ham%=0.33
  PDS_DBL_URL_TNB_RUNON:  no hits at all
  PDS_DOUBLE_URL:  bad, avg S/O=0.64 avg Spam%=5.08 avg Ham%=2.80
  PDS_RDNS_DYNAMIC_FP:  bad, avg S/O=0.66 avg Spam%=3.50 avg Ham%=0.04
  PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE:  no hits of target type
  PDS_TONAME_EQ_TOLOCAL_SHORT:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.01

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  RP_MATCHES_RCVD:  bad, avg S/O=0.23 avg Spam%=73.54 avg Ham%=21.90

rulesrc/sandbox/mmartinec/20_misc.cf (12 rules, 3 bad):

  FROM_WSP_TRAIL:  no hits at all
  MSGID_NOFQDN1:  bad, avg S/O=0.51 avg Spam%=0.02 avg Ham%=0.02
  MSGID_NOFQDN2:  bad, avg S/O=0.19 avg Spam%=1.53 avg Ham%=6.37

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_doc_test.cf (15 rules, 8 bad):

  FSL_FAKE_HOTMAIL_RVCD:  no hits at all
  FSL_FBOOK_PHISH:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.01
  FSL_HELO_BARE_IP_2:  bad, avg S/O=0.31 avg Spam%=0.11 avg Ham%=0.24
  FSL_HELO_DEVICE:  no hits at all
  FSL_HELO_FAKE:  bad, avg S/O=0.44 avg Spam%=0.22 avg Ham%=0.28
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  no hits of target type
  FSL_STACKED_TEXT:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/kmcgrail/20_sergio_experimental.cf (5 rules, 4 bad):

  SERGIO_SUBJECT_PORN008:  no hits of target type
  SERGIO_SUBJECT_PORN009:  no hits of target type
  SERGIO_SUBJECT_PORN014:  no hits of target type
  SERGIO_SUBJECT_VIAGRA01:  no hits at all

rulesrc/sandbox/kmcgrail/20_rules_to_sandbox.cf (4 rules, 2 bad):

  MILLION_USD:  bad, avg S/O=0.66 avg Spam%=0.14 avg Ham%=0.00
  US_DOLLARS_3:  no hits at all

rulesrc/sandbox/kmcgrail/20_kam.cf (2 rules, 1 bad):

  BILLION_OVERLAP:  no hits at all

rulesrc/sandbox/kmcgrail/20_html_tests.cf (2 rules, 1 bad):

  KAM_HTML_FONT_INVALID:  bad, avg S/O=0.46 avg Spam%=2.63 avg Ham%=3.13

rulesrc/sandbox/kmcgrail/20_freemail.cf (2 rules, 2 bad):

  FREEMAIL_FORGED_FROMDOMAIN:  bad, avg S/O=0.29 avg Spam%=2.95 avg Ham%=7.18
  HEADER_FROM_DIFFERENT_DOMAINS:  bad, avg S/O=0.14 avg Spam%=8.39 avg 
Ham%=53.59

rulesrc/sandbox/kmcgrail/20_fake_helo_tests.cf (5 rules, 2 bad):

  CK_HELO_DYNAMIC_SPLIT_IP:  bad, avg S/O=0.62 avg Spam%=0.41 avg Ham%=0.25
  CK_HELO_GENERIC:  no hits at all

rulesrc/sandbox/kmcgrail/20_dfs_experimental.cf (1 rules, 1 bad):

  DSN_NO_MIMEVERSION:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/kmcgrail/20_bug_7068.cf (2 rules, 2 bad):

  PP_TOO_MUCH_UNICODE02:  no hits at all
  PP_TOO_MUCH_UNICODE05:  no hits at all

rulesrc/sandbox/kmcgrail/20_bug_7063.cf (1 rules, 1 bad):

  PP_MIME_FAKE_ASCII_TEXT:  bad, avg S/O=0.55 avg Spam%=0.55 avg Ham%=0.44

rulesrc/sandbox/kmcgrail/20_ac_rules_test.cf (28 rules, 10 bad):

  AC_DIV_BONANZA:  bad, avg S/O=0.60 avg Spam%=0.10 avg Ham%=0.07
  AC_SPAMMY_URI_PATTERNS1:  no hits at all
  AC_SPAMMY_URI_PATTERNS10:  no hits at all
  AC_SPAMMY_URI_PATTERNS11:  no hits at all
  AC_SPAMMY_URI_PATTERNS12:  no hits at all
  AC_SPAMMY_URI_PATTERNS2:  no hits at all
  AC_SPAMMY_URI_PATTERNS3:  no hits at all
  AC_SPAMMY_URI_PATTERNS4:  no hits at all
  AC_SPAMMY_URI_PATTERNS8:  no hits at all
  AC_SPAMMY_URI_PATTERNS9:  no hits at all

rulesrc/sandbox/khopesh/20_s25r.cf (10 rules, 3 bad):

  S25R:  bad, avg S/O=0.71 avg Spam%=20.70 avg Ham%=8.64
  S25R_3:  bad, avg S/O=0.21 avg Spam%=0.05 avg Ham%=0.18
  S25R_4:  bad, avg S/O=0.34 avg Spam%=0.08 avg Ham%=0.16

rulesrc/sandbox/khopesh/20_rcd_rdns.cf (22 rules, 2 bad):

  RCD_RDNS_SERVER:  bad, avg S/O=0.60 avg Spam%=18.36 avg Ham%=27.33
  RCD_RDNS_SERVER_MESSY:  bad, avg S/O=0.58 avg Spam%=21.95 avg Ham%=29.90

rulesrc/sandbox/khopesh/20_khop_lists.cf (16 rules, 2 bad):

  KHOP_NO_FULL_NAME:  bad, avg S/O=0.70 avg Spam%=17.97 avg Ham%=7.74
  NOT_A_PERSON:  bad, avg S/O=0.43 avg Spam%=90.03 avg Ham%=68.32

rulesrc/sandbox/khopesh/20_khop_general.cf (8 rules, 1 bad):

  FROM_WWW:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/khopesh/20_khop_experimental.cf (55 rules, 12 bad):

  KHOP_BIG_TO_CC:  bad, avg S/O=0.01 avg Spam%=0.17 avg Ham%=23.61
  KHOP_FAKE_EBAY:  no hits of target type
  KHOP_FROM_WWW:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.31
  NAME_EMAIL_DIFF:  bad, avg S/O=0.50 avg Spam%=0.36 avg Ham%=0.36
  REMOTE_IMAGE:  bad, avg S/O=0.79 avg Spam%=5.43 avg Ham%=1.48
  SHORTENED_URL_SRC:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  SHORT_URL:  bad, avg S/O=0.56 avg Spam%=0.67 avg Ham%=0.52
  SUBJ_ALL_CAPS2:  no hits of target type
  SUBJ_ALL_CAPS3:  no hits of target type
  SUBJ_LACKS_WORDS:  bad, avg S/O=0.60 avg Spam%=0.85 avg Ham%=0.56
  URI_HIDDEN:  bad, avg S/O=0.20 avg Spam%=0.15 avg Ham%=0.62
  URL_SHORTENER:  bad, avg S/O=0.62 avg Spam%=1.71 avg Ham%=1.05

rulesrc/sandbox/khopesh/20_bug_6271.cf (2 rules, 2 bad):

  DATE_IN_FUTURE_96_Q:  no hits of target type
  DATE_IN_FUTURE_Q_PLUS:  no hits at all

rulesrc/sandbox/kb/70_misc.cf (11 rules, 4 bad):

  KB_RATWARE_OUTLOOK_MID:  no hits at all
  LIVEFILESTORE:  no hits at all
  THEBAT_UNREG:  no hits at all
  THREAD_INDEX_BAD:  bad, avg S/O=0.45 avg Spam%=0.29 avg Ham%=0.36

rulesrc/sandbox/kb/20_header.cf (7 rules, 3 bad):

  KB_DATE_CONTAINS_TAB:  no hits at all
  KB_FAKED_THE_BAT:  no hits at all
  KB_RATWARE_MSGID:  no hits at all

rulesrc/sandbox/jquinn/20_misc.cf (3 rules, 2 bad):

  EXCUSE_24:  no hits of target type
  USING_VERP:  bad, avg S/O=0.54 avg Spam%=3.36 avg Ham%=2.81

rulesrc/sandbox/jm/70_tt_drugs.cf (8 rules, 2 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_VIAGRA:  no hits at all

rulesrc/sandbox/jm/20_basic.cf (66 rules, 22 bad):

  CTYPE_001C_B:  no hits at all
  CURR_PRICE:  no hits of target type
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  HELO_LH_HOME:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  HELO_OEM:  no hits at all
  L_SPAM_TOOL_13:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.02
  OE_MULTIPART_RELATED:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.01
  PART_CID_STOCK:  no hits at all
  PART_CID_STOCK_LESS:  no hits at all
  RCVD_FORGED_WROTE:  no hits at all
  RCVD_MAIL_COM:  no hits at all
  SPAMMY_XMAILER:  no hits at all
  STOCK_IMG_HDR_FROM:  no hits at all
  STOCK_IMG_HTML:  no hits at all
  STOCK_IMG_OUTLOOK:  no hits at all
  STOX_BOUND_090909_B:  bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
  STOX_REPLY_TYPE:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
  STOX_REPLY_TYPE_WITHOUT_QUOTES:  bad, avg S/O=0.51 avg Spam%=0.01 avg 
Ham%=0.01
  TT_MSGID_TRUNC:  no hits at all
  TVD_PDF_FINGER01_JO:  bad, avg S/O=0.40 avg Spam%=0.01 avg Ham%=0.01

rulesrc/sandbox/jhardin/40_local_azurephish.cf (1 rules, 1 bad):

  PHISH_AZURE_CLOUDAPP:  no hits at all

rulesrc/sandbox/jhardin/40_local_419replyto.cf (23 rules, 10 bad):

  BODY_EMAIL_419_FRAUD_GM:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  BODY_EMAIL_419_FRAUD_HM:  no hits of target type
  REPTO_419_FRAUD_AOL:  no hits at all
  REPTO_419_FRAUD_AOL_LOOSE:  no hits at all
  REPTO_419_FRAUD_CNS:  no hits at all
  REPTO_419_FRAUD_QQ:  no hits at all
  REPTO_419_FRAUD_YH:  no hits at all
  REPTO_419_FRAUD_YH_LOOSE:  no hits at all
  REPTO_419_FRAUD_YJ:  no hits at all
  REPTO_419_FRAUD_YN:  no hits at all

rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (2 rules, 1 bad):

  URI_DEOBFU_INSTR:  no hits of target type

rulesrc/sandbox/jhardin/20_thirdparty.cf (2 rules, 2 bad):

  DX_TEXT_02:  no hits at all
  DX_TEXT_03:  no hits of target type

rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (25 rules, 2 bad):

  FORGED_TBIRD_IMG_SIZE:  no hits at all
  TO_NO_BRKTS_FROM_MSSP:  bad, avg S/O=0.66 avg Spam%=0.53 avg Ham%=0.02

rulesrc/sandbox/jhardin/20_postcards.cf (3 rules, 2 bad):

  EXECUTABLE_URI:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  POSTCARD_09:  no hits of target type

rulesrc/sandbox/jhardin/20_misc_testing.cf (1177 rules, 221 bad):

  ACH_CANCELLED:  no hits of target type
  ACH_CANCELLED_EXE:  no hits at all
  ADMAIL:  no hits at all
  ADULT_DATING_COMPANY:  no hits at all
  AD_PREFS:  no hits of target type
  ALIBABA_IMG_NOT_RCVD_ALI:  no hits at all
  ANY_PILL_PRICE:  no hits at all
  BEBEE_IMG_NOT_RCVD_BB:  no hits at all
  BILL_1618:  no hits of target type
  BITCOIN_BOMB:  no hits of target type
  BITCOIN_DEADLINE:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  BITCOIN_EXTORT_02:  no hits at all
  BITCOIN_MALF_HTML:  no hits at all
  BITCOIN_OBFU_SUBJ:  no hits of target type
  BITCOIN_ONAN:  no hits at all
  BITCOIN_SPAM_01:  no hits of target type
  BITCOIN_SPAM_02:  no hits at all
  BITCOIN_SPAM_04:  no hits at all
  BITCOIN_SPAM_06:  no hits at all
  BITCOIN_SPAM_08:  no hits of target type
  BITCOIN_SPAM_09:  no hits at all
  BITCOIN_SPAM_10:  no hits at all
  BITCOIN_SPAM_11:  no hits at all
  BITCOIN_SPAM_12:  no hits at all
  BITCOIN_WFH_01:  no hits at all
  BITCOIN_XPRIO:  bad, avg S/O=0.67 avg Spam%=0.02 avg Ham%=0.00
  BITCOIN_YOUR_INFO:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.02
  BODY_EMPTY:  no hits at all
  BODY_SINGLE_URI:  no hits at all
  BOMB_FREEM:  no hits at all
  BOMB_MONEY:  no hits of target type
  CANT_SEE_AD:  no hits at all
  CDISP_SZ_MANY:  no hits at all
  COMMENT_GIBBERISH:  no hits at all
  CTYPE_NULL:  no hits at all
  DAY_I_EARNED:  no hits at all
  DG_SPAMMER_EMAIL_B:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.27
  DG_SPAMMER_EMAIL_F:  no hits of target type
  DIRECT_LOW_CONTRAST:  bad, avg S/O=0.70 avg Spam%=3.03 avg Ham%=1.32
  DOC_ATTACH_NO_EXT:  no hits of target type
  DOTGOV_IMAGE:  no hits of target type
  DYNAMIC_IMGUR:  bad, avg S/O=0.73 avg Spam%=0.15 avg Ham%=0.05
  EBAY_IMG_NOT_RCVD_EBAY:  no hits at all
  ENVFROM_GOOG_TRIX:  no hits at all
  FACEBOOK_IMG_NOT_RCVD_FB:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  FONT_INVIS_DOTGOV:  no hits at all
  FONT_INVIS_LONG_LINE:  bad, avg S/O=0.59 avg Spam%=0.10 avg Ham%=0.07
  FONT_INVIS_POSTEXTRAS:  no hits at all
  FREEMAIL_DOC_PDF:  bad, avg S/O=0.54 avg Spam%=0.10 avg Ham%=0.08
  FREEMAIL_MANY_TO:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.08
  FREEMAIL_RVW_ATTCH:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_WFH_01:  no hits at all
  FREEM_FRNUM_UNICD_EMPTY:  no hits at all
  FRNAME_IN_MSG_XPRIO_NO_SUB:  no hits at all
  FROM_LONG_DOM:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.34
  FROM_LONG_DOM_MINFP:  bad, avg S/O=0.65 avg Spam%=2.05 avg Ham%=1.11
  FROM_MISSPACED:  bad, avg S/O=0.65 avg Spam%=0.35 avg Ham%=0.01
  FROM_MISSP_EH_MATCH:  bad, avg S/O=0.66 avg Spam%=0.47 avg Ham%=0.02
  FROM_MISSP_PHISH:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  FROM_MISSP_TO_UNDISC:  no hits at all
  FROM_MULTI_NORDNS:  bad, avg S/O=0.67 avg Spam%=0.03 avg Ham%=0.00
  FROM_MULTI_SHORT_IMG:  bad, avg S/O=0.30 avg Spam%=0.01 avg Ham%=0.01
  FROM_NUMERIC_TLD:  no hits at all
  FROM_URI:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_AMAZON:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_ANDROID:  no hits at all
  FUZZY_APPLE:  no hits of target type
  FUZZY_BITCOIN:  no hits at all
  FUZZY_BROWSER:  no hits at all
  FUZZY_BTC_WALLET:  no hits at all
  FUZZY_DR_OZ:  no hits at all
  FUZZY_FACEBOOK:  no hits at all
  FUZZY_HARRIS:  no hits of target type
  FUZZY_MICROSOFT:  no hits at all
  FUZZY_MONERO:  no hits at all
  FUZZY_OPTOUT:  no hits at all
  FUZZY_OVERSTOCK:  no hits at all
  FUZZY_PAYPAL:  bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.01
  FUZZY_PORN:  no hits at all
  FUZZY_PRIVACY:  no hits at all
  FUZZY_PROMOTION:  no hits at all
  FUZZY_UNSUBSCRIBE:  no hits at all
  FUZZY_WELLSFARGO:  no hits at all
  GAPPY_GENITALIA:  no hits at all
  GAPPY_PILLS:  no hits of target type
  GAPPY_SALES_LEADS_FREEM:  no hits at all
  GOOGLE_DOCS_PHISH:  no hits at all
  GOOGLE_DOCS_PHISH_MANY:  no hits at all
  GOOGLE_DOC_SUSP:  no hits at all
  GOOG_REDIR_SHORT:  no hits at all
  HAS_X_NO_RELAY:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  HDRS_LCASE_IMGONLY:  no hits at all
  HDR_CASE_REV_ENC:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.02
  HDR_CASE_REV_MANY:  bad, avg S/O=0.53 avg Spam%=0.03 avg Ham%=0.03
  HEXHASH_WORD:  bad, avg S/O=0.36 avg Spam%=0.01 avg Ham%=0.01
  HOSTED_IMG_DQ_UNSUB:  no hits at all
  HREF_EMPTY_NORDNS:  bad, avg S/O=0.44 avg Spam%=0.22 avg Ham%=0.28
  HREF_EMPTY_PHPMAIL:  no hits of target type
  HTML_ATTACH:  no hits at all
  HTML_ENTITY_ASCII_TINY:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
  HTML_FONT_TINY_NORDNS:  no hits at all
  HTML_SHRT_CMNT_OBFU_MANY:  no hits at all
  HTML_SINGLET_MANY:  bad, avg S/O=0.60 avg Spam%=0.06 avg Ham%=0.04
  HTML_TEXT_INVISIBLE_STYLE:  bad, avg S/O=0.79 avg Spam%=0.12 avg Ham%=0.03
  ISO_ATTACH:  no hits at all
  JH_SPAMMY_PATTERN01:  no hits at all
  JH_SPAMMY_PATTERN02:  no hits at all
  LARGE_PCT_AFTER_MANY:  no hits at all
  LAZY_LISTWASHING:  no hits of target type
  LINKEDIN_IMG_NOT_RCVD_LNKN:  no hits at all
  LIST_PARTIAL:  bad, avg S/O=0.50 avg Spam%=0.28 avg Ham%=0.28
  LIST_PARTIAL_SHORT_MSG:  bad, avg S/O=0.43 avg Spam%=0.02 avg Ham%=0.03
  LIST_PRTL_PUMPDUMP:  no hits at all
  LONGLN_LOW_CONTRAST:  bad, avg S/O=0.78 avg Spam%=0.66 avg Ham%=0.06
  LONG_HEX_URI:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  LONG_IMG_URI:  bad, avg S/O=0.32 avg Spam%=0.01 avg Ham%=0.02
  MALF_HTML_B64:  bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.00
  MALWARE_PASSWORD:  no hits at all
  MANY_HDRS_LCASE:  no hits of target type
  MANY_PILL_PRICE:  no hits at all
  MIXED_CENTER_CASE:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02
  MIXED_FONT_CASE:  no hits of target type
  MONERO_DEADLINE:  no hits at all
  MONERO_EXTORT_01:  no hits at all
  MONERO_MALWARE:  no hits at all
  MONERO_PAY_ME:  no hits at all
  MONEY_12LTRDOM:  bad, avg S/O=0.12 avg Spam%=0.03 avg Ham%=0.20
  MSGID_DOLLARS_URI_IMG:  no hits at all
  MSGID_HDR_MALF:  no hits at all
  MSMAIL_PRI_ABNORMAL:  no hits at all
  NEWEGG_IMG_NOT_RCVD_NEGG:  no hits at all
  NORDNS_LOW_CONTRAST:  bad, avg S/O=0.69 avg Spam%=1.54 avg Ham%=0.69
  NOT_SPAM:  no hits of target type
  NSL_TO_ENDS_COMMA:  no hits of target type
  OBFU_BITCOIN:  no hits at all
  OBFU_DOC_ATTACH:  no hits at all
  OBFU_GIF_ATTACH:  no hits at all
  OBFU_HTML_ATTACH:  no hits at all
  OBFU_HTML_ATT_MALW:  no hits at all
  OBFU_JVSCR_ESC:  no hits at all
  OBFU_PDF_ATTACH:  bad, avg S/O=0.34 avg Spam%=0.21 avg Ham%=0.42
  PAYPAL_PHISH_07:  no hits of target type
  PDS_FROM_2_EMAILS:  no hits at all
  PDS_TO_EQ_FROM_NAME:  no hits at all
  PHISH_FBASEAPP:  no hits at all
  PHOTO_EDITING_DIRECT:  no hits at all
  PHOTO_EDITING_FREEM:  no hits at all
  PHP_ORIG_SCRIPT:  no hits at all
  PHP_SCRIPT_MUA:  no hits at all
  POSSIBLE_APPLE_PHISH_02:  no hits at all
  POSSIBLE_EBAY_PHISH_02:  no hits at all
  POSSIBLE_PAYPAL_PHISH_01:  no hits at all
  POSSIBLE_PAYPAL_PHISH_02:  no hits at all
  PUMPDUMP:  no hits at all
  PUMPDUMP_MULTI:  no hits at all
  PUMPDUMP_TIP:  no hits at all
  RAND_HEADER_LIST_SPOOF:  no hits at all
  RAND_HEADER_MANY:  no hits at all
  RATWARE_NO_RDNS:  no hits at all
  RCVD_DBL_DQ:  no hits at all
  RCVD_DOTEDU_SHORT:  no hits at all
  RCVD_DOTEDU_SUSP:  no hits of target type
  RDNS_LOCALHOST:  no hits at all
  RDNS_NUM_TLD_ATCHNX:  no hits at all
  RDNS_NUM_TLD_XM:  no hits at all
  REPLYTO_EMPTY:  no hits at all
  RUNON_SHY:  bad, avg S/O=0.73 avg Spam%=0.09 avg Ham%=0.03
  SCANNED_EXTERNAL:  no hits of target type
  SCRIPT_GIBBERISH:  no hits at all
  STOCK_TIP:  no hits at all
  STY_INVIS_DIRECT:  no hits at all
  SUBJ_OBFU_PUNCT_FEW:  bad, avg S/O=0.35 avg Spam%=0.10 avg Ham%=0.19
  SUBJ_OBFU_PUNCT_MANY:  bad, avg S/O=0.39 avg Spam%=0.02 avg Ham%=0.03
  SUBJ_UNNEEDED_HTML:  no hits at all
  SYSADMIN:  no hits at all
  TAGSTAT_IMG_NOT_RCVD_TGST:  no hits at all
  TARINGANET_IMG_NOT_RCVD_TN:  no hits at all
  TBIRD_SUSP_MIME_BDRY:  no hits at all
  TEQF_USR_IMAGE:  no hits at all
  TEQF_USR_MSGID_HEX:  no hits at all
  TEQF_USR_MSGID_MALF:  no hits at all
  THIS_AD:  bad, avg S/O=0.13 avg Spam%=0.03 avg Ham%=0.22
  TONLINE_FAKE_DKIM:  no hits at all
  TO_TOO_MANY_WFH_01:  no hits at all
  TRANSFORM_LIFE:  bad, avg S/O=0.13 avg Spam%=0.01 avg Ham%=0.06
  TUMBLR_IMG_NOT_RCVD_TUMB:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
  TVD_SPACE_RATIO_MINFP:  bad, avg S/O=0.51 avg Spam%=0.39 avg Ham%=0.38
  TW_GIBBERISH_MANY:  no hits at all
  UC_GIBBERISH_OBFU:  no hits at all
  UNICODE_OBFU_ZW_MANY:  bad, avg S/O=0.39 avg Spam%=0.05 avg Ham%=0.08
  UNSUB_GOOG_FORM:  no hits at all
  URI_ADOBESPARK:  no hits at all
  URI_DASHGOVEDU:  no hits at all
  URI_DATA:  no hits at all
  URI_DOTDOT_LOW_CNTRST:  no hits of target type
  URI_DOTEDU_ENTITY:  no hits at all
  URI_DQ_UNSUB:  no hits at all
  URI_GIBB_NO_PROTO:  no hits of target type
  URI_HEX_IP:  no hits at all
  URI_HIDDEN_2:  bad, avg S/O=0.21 avg Spam%=0.16 avg Ham%=0.61
  URI_IMG_CWINDOWSNET:  bad, avg S/O=0.73 avg Spam%=0.04 avg Ham%=0.01
  URI_IMG_WP_REDIR:  no hits of target type
  URI_LONG_REPEAT:  no hits at all
  URI_MALWARE_SCMS:  no hits at all
  URI_OBFU_DOM:  no hits at all
  URI_OPTOUT_3LD:  no hits at all
  URI_OPTOUT_USME:  no hits at all
  URI_PHP_REDIR:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  URI_TRPL_INDIR:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.02
  URI_TRY_3LD:  bad, avg S/O=0.72 avg Spam%=0.18 avg Ham%=0.07
  URI_TRY_USME:  no hits at all
  USB_DRIVES:  no hits at all
  WALMART_IMG_NOT_RCVD_WAL:  no hits at all
  WANT_TO_ORDER:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  XM_DIGITS_ONLY:  no hits at all
  XM_LIGHT_HEAVY:  no hits at all
  XM_ONE_WORD:  bad, avg S/O=0.77 avg Spam%=1.00 avg Ham%=0.30
  XM_PHPMAILER_FORGED:  no hits at all
  XPRIO_SHORT_SUBJ:  no hits at all
  ZW_OBFU_BITCOIN:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  ZW_OBFU_FROMTOSUBJ:  no hits at all

rulesrc/sandbox/jhardin/20_lotsa_money.cf (161 rules, 12 bad):

  COMPENSATION:  bad, avg S/O=0.80 avg Spam%=0.04 avg Ham%=0.00
  EMRCP:  no hits at all
  LOTS_OF_MONEY:  bad, avg S/O=0.70 avg Spam%=5.37 avg Ham%=2.29
  LOTTO_AGENT:  no hits at all
  LOTTO_AGENT_FM:  no hits at all
  LOTTO_AGENT_RPLY:  no hits at all
  LOTTO_URI:  bad, avg S/O=0.61 avg Spam%=0.00 avg Ham%=0.00
  MONEY_BARRISTER:  no hits at all
  SHARE_50_50:  no hits at all
  WON_MONEY_ATTACH:  no hits at all
  WON_NBDY_ATTACH:  no hits at all
  YOU_INHERIT:  no hits at all

rulesrc/sandbox/jhardin/20_fillform.cf (19 rules, 3 bad):

  FILL_THIS_FORM:  bad, avg S/O=0.13 avg Spam%=0.48 avg Ham%=3.32
  FILL_THIS_FORM_LOAN:  no hits at all
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.31 avg Spam%=0.47 avg Ham%=1.06

rulesrc/sandbox/jhardin/20_MIME_no_text.cf (7 rules, 1 bad):

  MIME_PHP_NO_TEXT:  no hits at all

rulesrc/sandbox/jhardin/20_MIME_in_body.cf (3 rules, 1 bad):

  MIME_MALF:  no hits at all

rulesrc/sandbox/hege/20_hk.cf (58 rules, 7 bad):

  HK_NAME_DRUGS:  no hits at all
  HK_NAME_FM_MR_MRS:  no hits at all
  HK_NAME_FROM:  no hits at all
  HK_SPAMMY_FILENAME:  no hits at all
  HK_WIN:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  URI_IN_URI_10:  no hits at all
  URI_IN_URI_5:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/gbechis/20_ratware.cf (6 rules, 1 bad):

  GB_FORGED_MUA_POSTFIX:  no hits at all

rulesrc/sandbox/gbechis/20_misc.cf (21 rules, 5 bad):

  GB_CUSTOM_HTM_URI:  bad, avg S/O=0.73 avg Spam%=0.77 avg Ham%=0.19
  GB_FAKE_RF_SHORT:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
  GB_GOOGLE_OBFUR:  no hits at all
  GB_PAYPAL_IMG_NOT_RCVD_PAYP:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  SENDINBLUE_REDIR:  bad, avg S/O=0.67 avg Spam%=0.12 avg Ham%=0.06

rulesrc/sandbox/gbechis/20_freemail.cf (6 rules, 1 bad):

  GB_WEBFORM:  no hits at all

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (58 rules, 4 bad):

  FAKE_REPLY_A1:  no hits at all
  FAKE_REPLY_B:  no hits at all
  TEST_REPLY_B:  no hits of target type
  TEST_REPLY_C:  no hits of target type

rulesrc/sandbox/fkento/20_phone_numbers.cf (9 rules, 1 bad):

  MXG_PHONE_OBFU_ONLY:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/felicity/70_phishing.cf (56 rules, 4 bad):

  TVD_PH_BODY_META:  no hits at all
  TVD_PH_FR5:  no hits of target type
  TVD_PH_REC:  bad, avg S/O=0.76 avg Spam%=0.01 avg Ham%=0.00
  TVD_PH_SUBJ_META1:  bad, avg S/O=0.73 avg Spam%=1.29 avg Ham%=0.48

rulesrc/sandbox/felicity/70_other.cf (70 rules, 55 bad):

  BASE64_LENGTH_78_79:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.03
  BASE64_LENGTH_79_INF:  bad, avg S/O=0.29 avg Spam%=0.02 avg Ham%=0.03
  DRUGS_HDIA:  no hits at all
  FUZZY_MERIDIA:  no hits at all
  FUZZY_SPRM:  no hits of target type
  HEADER_COUNT_SUBJECT:  no hits at all
  NULL_IN_BODY:  no hits at all
  RCVD_BAD_ID:  no hits at all
  SUBJECT_NEEDS_ENCODING:  no hits at all
  TVD_ACT_193:  no hits at all
  TVD_APPROVED:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  TVD_BODY_END_STAR:  no hits of target type
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_ENVFROM_APOST:  no hits at all
  TVD_FINGER_02:  no hits at all
  TVD_FLOAT_GENERAL:  no hits at all
  TVD_FUZZY_DEGREE:  no hits at all
  TVD_FUZZY_FINANCE:  no hits at all
  TVD_FUZZY_FIXED_RATE:  no hits at all
  TVD_FUZZY_MICROCAP:  no hits at all
  TVD_FUZZY_PHARMACEUTICAL:  no hits at all
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.03
  TVD_FUZZY_SECURITIES:  no hits of target type
  TVD_FUZZY_SYMBOL:  no hits at all
  TVD_FW_GRAPHIC_ID2:  no hits at all
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.43 avg Spam%=0.10 avg Ham%=0.14
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.44 avg Spam%=0.11 avg Ham%=0.14
  TVD_INCREASE_SIZE:  no hits at all
  TVD_IP_HEX:  no hits of target type
  TVD_LINK_SAVE:  no hits at all
  TVD_PDF_FINGER01:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
  TVD_RATWARE_CB:  no hits at all
  TVD_RATWARE_CB_2:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.70 avg Spam%=0.42 avg Ham%=0.18
  TVD_RATWARE_MSGID_02:  no hits at all
  TVD_RCVD_IP:  bad, avg S/O=0.76 avg Spam%=0.16 avg Ham%=0.05
  TVD_RCVD_IP4:  no hits of target type
  TVD_RCVD_SINGLE:  no hits of target type
  TVD_RCVD_SPACE_BRACKET:  no hits at all
  TVD_SECTION:  no hits at all
  TVD_SILLY_URI_OBFU:  no hits at all
  TVD_SPACED_SUBJECT_WORD3:  no hits at all
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.07 avg Spam%=0.03 avg Ham%=0.34
  TVD_STOCK1:  no hits at all
  TVD_SUBJ_FINGER_03:  no hits at all
  TVD_SUBJ_OWE:  no hits at all
  TVD_SUBJ_WIPE_DEBT:  no hits of target type
  TVD_UNDER_VALUED:  no hits of target type
  TVD_VISIT_PHARMA:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.04
  TVD_VIS_HIDDEN:  no hits at all
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.07
  T_TVD_PCT_OFF2:  bad, avg S/O=0.10 avg Spam%=0.02 avg Ham%=0.23
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.02 avg Spam%=0.10 avg Ham%=5.80
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.03 avg Spam%=0.17 avg Ham%=6.38
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.03 avg Spam%=0.17 avg Ham%=6.38

rulesrc/sandbox/fanf/30_text.cf (2 rules, 2 bad):

  LONG_TERM_PRICE:  no hits at all
  SHORT_TERM_PRICE:  no hits at all

rulesrc/sandbox/duncf/20_header.cf (2 rules, 1 bad):

  STUDDLYCAPS:  bad, avg S/O=0.17 avg Spam%=0.03 avg Ham%=0.16

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 2 bad):

  BANKING_LAWS:  no hits at all
  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (69 rules, 14 bad):

  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_BODY_HIGH_NO_MID:  bad, avg S/O=0.64 avg Spam%=0.07 avg Ham%=0.04
  DOS_FIX_MY_URI:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_OE_TO_MX_IMAGE:  no hits at all
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.45 avg Spam%=0.74 avg Ham%=0.90
  DOS_RCVD_IP_TWICE_B:  no hits at all
  DOS_RCVD_IP_TWICE_C:  no hits at all
  DOS_STOCK_BAT:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
  X_MAILER_CME_6543_MSN:  no hits at all

rulesrc/sandbox/davej/20_non_ascii.cf (4 rules, 1 bad):

  CTE_8BIT_MISMATCH:  bad, avg S/O=0.80 avg Spam%=0.13 avg Ham%=0.03

rulesrc/sandbox/davej/20_bug_7550.cf (1 rules, 1 bad):

  VULN_PHPMAILER:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.05

rulesrc/sandbox/billcole/80_test.cf (29 rules, 7 bad):

  HTML_BADATTR:  no hits of target type
  SCC_CANSPAM_2:  no hits at all
  SCC_HB_ANY:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  SCC_ISEMM_LID_1:  no hits at all
  SCC_SPAMMER_ADDR_2:  no hits of target type
  SCC_SPECIAL_GUID:  no hits at all
  T_SCC_URL_CLOUDINARY:  bad, avg S/O=0.56 avg Spam%=0.04 avg Ham%=0.03

rulesrc/sandbox/billcole/23_bug_6780.cf (4 rules, 1 bad):

  T_EMPTY_FROM_OR_TO_OR_CC:  bad, avg S/O=0.17 avg Spam%=0.02 avg Ham%=0.11

rulesrc/sandbox/billcole/21_bug_7219.cf (8 rules, 4 bad):

  SCC_BODY_SINGLE_WORD:  bad, avg S/O=0.27 avg Spam%=0.10 avg Ham%=0.26
  SCC_BODY_TEXT_LINE:  bad, avg S/O=0.50 avg Spam%=99.90 avg Ham%=99.93
  SCC_BODY_URI_ONLY:  bad, avg S/O=0.73 avg Spam%=0.87 avg Ham%=0.31
  SCC_EMPTY_BODY:  bad, avg S/O=0.43 avg Spam%=0.07 avg Ham%=0.10

rulesrc/sandbox/axb/20_xmailer.cf (6 rules, 1 bad):

  AXB_XMAILER_MIMEOLE_OL_1ECD5:  no hits at all

rulesrc/sandbox/axb/20_axb_misc.cf (5 rules, 2 bad):

  AXB_XM_FORGED_OL2600:  no hits at all
  AXB_X_OUTLOOKPROT_ENVSDR:  no hits of target type

rules/72_active.cf (60 rules, 4 bad):

  CTYPE_8SPACE_GIF:  no hits at all
  HK_CTE_RAW:  no hits at all
  OBFU_TEXT_ATTACH:  no hits of target type
  SENDGRID_REDIR:  no hits at all

rules/25_replace.cf (29 rules, 25 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_BILLION:  no hits at all
  FUZZY_CPILL:  no hits of target type
  FUZZY_CREDIT:  bad, avg S/O=0.61 avg Spam%=0.05 avg Ham%=0.03
  FUZZY_GUARANTEE:  no hits at all
  FUZZY_MEDICATION:  no hits at all
  FUZZY_MILLION:  no hits of target type
  FUZZY_MONEY:  no hits at all
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OBLIGATION:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHARMACY:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_PRESCRIPT:  no hits at all
  FUZZY_REFINANCE:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  no hits at all
  SUBJECT_FUZZY_CHEAP:  no hits at all
  SUBJECT_FUZZY_MEDS:  no hits at all
  SUBJECT_FUZZY_PENIS:  no hits at all
  SUBJECT_FUZZY_TION:  no hits at all
  SUBJECT_FUZZY_VPILL:  no hits at all

rules/20_vbounce.cf (176 rules, 4 bad):

  BOUNCE_MESSAGE:  no hits at all
  CHALLENGE_RESPONSE:  no hits at all
  CRBOUNCE_MESSAGE:  no hits at all
  VBOUNCE_MESSAGE:  no hits at all

rules/20_uri_tests.cf (18 rules, 9 bad):

  HTTP_77:  no hits at all
  IP_LINK_PLUS:  no hits at all
  NUMERIC_HTTP_ADDR:  no hits at all
  SPOOF_COM2COM:  no hits at all
  SPOOF_NET2COM:  no hits at all
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.59 avg Spam%=0.17 avg Ham%=0.12
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (100 rules, 27 bad):

  FORGED_IMS_HTML:  no hits at all
  FORGED_IMS_TAGS:  no hits at all
  FORGED_MUA_EUDORA:  no hits at all
  FORGED_MUA_OIMO:  no hits at all
  FORGED_MUA_THEBAT_BOUN:  no hits at all
  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_QUALCOMM_TAGS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  HEADER_SPAM:  no hits at all
  RATWARE_EFROM:  no hits at all
  RATWARE_EGROUPS:  no hits at all
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_MS_HASH:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_OUTLOOK_NONAME:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_RCVD_PF:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  REPTO_QUOTE_AOL:  no hits at all
  REPTO_QUOTE_IMS:  no hits at all
  REPTO_QUOTE_MSN:  no hits at all
  REPTO_QUOTE_QUALCOMM:  no hits at all
  REPTO_QUOTE_YAHOO:  no hits at all
  X_MESSAGE_INFO:  no hits at all

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (45 rules, 28 bad):

  BAD_CREDIT:  bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.01
  BANG_GUAR:  bad, avg S/O=0.61 avg Spam%=0.01 avg Ham%=0.01
  BANG_OPRAH:  no hits at all
  BODY_ENHANCEMENT:  no hits of target type
  BODY_ENHANCEMENT2:  no hits of target type
  DIET_1:  bad, avg S/O=0.73 avg Spam%=0.22 avg Ham%=0.08
  EXCUSE_4:  no hits of target type
  EXCUSE_REMOVE:  no hits of target type
  FIN_FREE:  bad, avg S/O=0.74 avg Spam%=0.06 avg Ham%=0.02
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  no hits at all
  GUARANTEED_100_PERCENT:  no hits of target type
  INVESTMENT_ADVICE:  no hits of target type
  JOIN_MILLIONS:  no hits of target type
  LOW_PRICE:  bad, avg S/O=0.26 avg Spam%=0.01 avg Ham%=0.03
  MALE_ENHANCE:  no hits at all
  MONEY_BACK:  bad, avg S/O=0.78 avg Spam%=0.03 avg Ham%=0.01
  MORE_SEX:  no hits of target type
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits of target type
  OBSCURED_EMAIL:  no hits at all
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  REFINANCE_YOUR_HOME:  no hits at all
  REPLICA_WATCH:  no hits at all
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits at all
  STRONG_BUY:  no hits at all

rules/20_meta_tests.cf (19 rules, 6 bad):

  EMPTY_MESSAGE:  bad, avg S/O=0.75 avg Spam%=0.04 avg Ham%=0.01
  FORGED_MUA_MOZILLA:  bad, avg S/O=0.34 avg Spam%=0.02 avg Ham%=0.03
  INVALID_MSGID:  bad, avg S/O=0.71 avg Spam%=0.09 avg Ham%=0.04
  NO_HEADERS_MESSAGE:  no hits at all
  PERCENT_RANDOM:  no hits at all
  UPPERCASE_50_75:  bad, avg S/O=0.63 avg Spam%=0.16 avg Ham%=0.10

rules/20_imageinfo.cf (17 rules, 3 bad):

  DC_IMAGE_SPAM_HTML:  no hits of target type
  DC_IMAGE_SPAM_TEXT:  no hits of target type
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.63 avg Spam%=0.08 avg Ham%=0.05

rules/20_html_tests.cf (69 rules, 30 bad):

  HIDE_WIN_STATUS:  no hits at all
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SHORT:  no hits at all
  HTML_FONT_LOW_CONTRAST:  bad, avg S/O=0.65 avg Spam%=4.30 avg Ham%=2.30
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.74 avg Spam%=94.30 avg Ham%=33.85
  HTML_FONT_SIZE_LARGE:  no hits at all
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  no hits at all
  HTML_IMAGE_ONLY_28:  bad, avg S/O=0.79 avg Spam%=0.95 avg Ham%=0.25
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.76 avg Spam%=2.89 avg Ham%=0.90
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.72 avg Spam%=1.93 avg Ham%=0.76
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.69 avg Spam%=1.74 avg Ham%=0.79
  HTML_MESSAGE:  bad, avg S/O=0.74 avg Spam%=94.30 avg Ham%=33.85
  HTML_MISSING_CTYPE:  no hits at all
  HTML_NONELEMENT_30_40:  no hits at all
  HTML_NONELEMENT_40_50:  no hits at all
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.35 avg Spam%=0.21 avg Ham%=0.39
  HTML_OBFUSCATE_30_40:  no hits at all
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.76 avg Spam%=0.68 avg Ham%=0.22
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits at all

rules/20_head_tests.cf (160 rules, 52 bad):

  CONFIRMED_FORGED:  no hits at all
  DATE_IN_FUTURE_03_06:  bad, avg S/O=0.79 avg Spam%=0.04 avg Ham%=0.01
  DATE_IN_FUTURE_24_48:  no hits at all
  DATE_IN_FUTURE_48_96:  no hits at all
  DATE_IN_FUTURE_96_XX:  no hits at all
  DATE_SPAMWARE_Y2K:  no hits at all
  ENGLISH_UCE_SUBJECT:  no hits at all
  FAKE_OUTBLAZE_RCVD:  no hits at all
  FORGED_MSGID_AOL:  no hits at all
  FORGED_MSGID_EXCITE:  no hits at all
  FORGED_MSGID_HOTMAIL:  no hits at all
  FORGED_MSGID_MSN:  no hits at all
  FORGED_MSGID_YAHOO:  no hits of target type
  FORGED_TELESP_RCVD:  no hits at all
  FROM_BLANK_NAME:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
  FROM_ILLEGAL_CHARS:  no hits at all
  FROM_LOCAL_DIGITS:  bad, avg S/O=0.79 avg Spam%=0.27 avg Ham%=0.07
  FROM_LOCAL_HEX:  no hits at all
  FROM_STARTS_WITH_NUMS:  bad, avg S/O=0.53 avg Spam%=0.05 avg Ham%=0.04
  GAPPY_SUBJECT:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.01
  HEADER_COUNT_CTYPE:  no hits at all
  HEAD_ILLEGAL_CHARS:  no hits at all
  INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.42 avg Spam%=0.01 avg Ham%=0.02
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  no hits at all
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  LOCALPART_IN_SUBJECT:  bad, avg S/O=0.72 avg Spam%=0.08 avg Ham%=0.03
  MIME_BOUND_DD_DIGITS:  no hits at all
  MIME_BOUND_MANY_HEX:  no hits at all
  MISSING_MID:  bad, avg S/O=0.43 avg Spam%=0.30 avg Ham%=0.39
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.42 avg Spam%=0.06 avg Ham%=0.09
  MSGID_RANDY:  no hits of target type
  MSGID_SPAM_CAPS:  no hits at all
  MSGID_SPAM_LETTERS:  no hits at all
  MSGID_YAHOO_CAPS:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  PLING_QUERY:  bad, avg S/O=0.63 avg Spam%=0.21 avg Ham%=0.12
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.66 avg Spam%=0.26 avg Ham%=0.13
  SORTED_RECIPS:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.19
  SUBJ_AS_SEEN:  no hits of target type
  SUBJ_DOLLARS:  bad, avg S/O=0.33 avg Spam%=0.03 avg Ham%=0.06
  SUBJ_ILLEGAL_CHARS:  no hits at all
  SUSPICIOUS_RECIPS:  bad, avg S/O=0.58 avg Spam%=0.03 avg Ham%=0.03
  TO_MALFORMED:  bad, avg S/O=0.42 avg Spam%=0.08 avg Ham%=0.10
  UNRESOLVED_TEMPLATE:  no hits at all
  WITH_LC_SMTP:  no hits at all
  X_PRIORITY_CC:  no hits at all

rules/20_freemail.cf (12 rules, 1 bad):

  FREEMAIL_FROM:  bad, avg S/O=0.43 avg Spam%=5.73 avg Ham%=7.53

rules/20_fake_helo_tests.cf (20 rules, 9 bad):

  HELO_DYNAMIC_CHELLO_NL:  no hits at all
  HELO_DYNAMIC_DHCP:  no hits of target type
  HELO_DYNAMIC_DIALIN:  no hits at all
  HELO_DYNAMIC_HCC:  no hits at all
  HELO_DYNAMIC_HEXIP:  no hits at all
  HELO_DYNAMIC_HOME_NL:  no hits at all
  HELO_DYNAMIC_IPADDR:  bad, avg S/O=0.53 avg Spam%=0.09 avg Ham%=0.08
  HELO_DYNAMIC_ROGERS:  no hits at all
  HELO_STATIC_HOST:  bad, avg S/O=0.69 avg Spam%=0.08 avg Ham%=0.03

rules/20_drugs.cf (84 rules, 18 bad):

  DRUGS_ANXIETY:  no hits of target type
  DRUGS_ANXIETY_EREC:  no hits at all
  DRUGS_ANXIETY_OBFU:  no hits at all
  DRUGS_DIET:  no hits at all
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_MANYKINDS:  no hits at all
  DRUGS_MUSCLE:  no hits at all
  DRUGS_SLEEP_EREC:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_DOSAGE:  no hits at all
  DRUG_ED_CAPS:  no hits at all
  DRUG_ED_GENERIC:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  NO_PRESCRIPTION:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
  ONLINE_PHARMACY:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.04
  SUBJECT_DRUG_GAP_S:  no hits at all
  SUBJECT_DRUG_GAP_X:  no hits at all
  VIA_GAP_GRA:  no hits at all

rules/20_body_tests.cf (30 rules, 16 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  HTTPS_IP_MISMATCH:  no hits at all
  LONGWORDS:  bad, avg S/O=0.80 avg Spam%=0.03 avg Ham%=0.01
  MIMEPART_LIMIT_EXCEEDED:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_TEXT:  bad, avg S/O=0.45 avg Spam%=0.05 avg Ham%=0.07
  MIME_HTML_MOSTLY:  bad, avg S/O=0.41 avg Spam%=1.36 avg Ham%=1.94
  MIME_HTML_ONLY_MULTI:  no hits at all
  MIME_QP_LONG_LINE:  bad, avg S/O=0.34 avg Spam%=5.95 avg Ham%=11.72
  MISSING_MIME_HB_SEP:  no hits of target type
  MPART_ALT_DIFF:  bad, avg S/O=0.67 avg Spam%=3.70 avg Ham%=1.78
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.58 avg Spam%=0.15 avg Ham%=0.10
  TRACKER_ID:  bad, avg S/O=0.43 avg Spam%=0.07 avg Ham%=0.10
  TVD_SPACE_RATIO:  bad, avg S/O=0.39 avg Spam%=0.10 avg Ham%=0.15
  WEIRD_QUOTING:  bad, avg S/O=0.54 avg Spam%=0.04 avg Ham%=0.04

not_present (2 rules, 2 bad):

  USER_IN_DKIM_WHITELIST:  no hits at all
  USER_IN_SPF_WHITELIST:  no hits at all

Reply via email to