[auto] bad sandbox rules report

HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_LINK_AWS_S3_WEB:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/smf/20_smf.cf (39 rules, 23 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.53 avg Spam%=0.61 avg Ham%=0.53
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.40 avg Spam%=0.19 avg Ham%=0.28
  FSL_NO_RCVD_1:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.07
  FSL_RCVD_EX_0:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.51
  FSL_RCVD_EX_1:  bad, avg S/O=0.52 avg Spam%=34.49 avg Ham%=31.66
  FSL_RCVD_EX_2:  bad, avg S/O=0.73 avg Spam%=57.54 avg Ham%=21.34
  FSL_RCVD_EX_3:  bad, avg S/O=0.44 avg Spam%=5.37 avg Ham%=6.85
  FSL_RCVD_EX_4:  bad, avg S/O=0.07 avg Spam%=0.89 avg Ham%=12.06
  FSL_RCVD_EX_5:  bad, avg S/O=0.04 avg Spam%=0.47 avg Ham%=10.32
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.08 avg Spam%=1.23 avg Ham%=14.28
  FSL_RCVD_TR_1:  bad, avg S/O=0.06 avg Spam%=0.25 avg Ham%=3.84
  FSL_RCVD_TR_2:  no hits of target type
  FSL_RCVD_TR_3:  bad, avg S/O=0.53 avg Spam%=0.03 avg Ham%=0.03
  FSL_RCVD_TR_4:  no hits of target type
  FSL_RCVD_TR_5:  bad, avg S/O=0.51 avg Spam%=48.11 avg Ham%=46.10
  FSL_RCVD_TR_GT_5:  no hits of target type
  FSL_RCVD_UT_1:  bad, avg S/O=0.52 avg Spam%=34.50 avg Ham%=32.42
  FSL_RCVD_UT_2:  bad, avg S/O=0.73 avg Spam%=57.53 avg Ham%=20.86
  FSL_RCVD_UT_3:  bad, avg S/O=0.45 avg Spam%=5.37 avg Ham%=6.63
  FSL_RCVD_UT_4:  bad, avg S/O=0.07 avg Spam%=0.89 avg Ham%=11.98
  FSL_RCVD_UT_5:  bad, avg S/O=0.04 avg Spam%=0.47 avg Ham%=10.31
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.08 avg Spam%=1.23 avg Ham%=14.26
  FSL_UNDISCLOSED_RCPTS:  bad, avg S/O=0.80 avg Spam%=0.36 avg Ham%=0.09

rulesrc/sandbox/pds/20_urlshort.cf (30 rules, 12 bad):

  DRUGS_ERECTILE_SHORT_SHORTNER:  no hits at all
  PDS_FREEMAIL_REPLYTO_URISHRT:  no hits at all
  PDS_FROM_2_EMAILS_SHRTNER:  no hits at all
  PDS_NO_FULL_NAME_SPOOFED_URL:  no hits at all
  PDS_SHORTFWD_URISHRT:  no hits at all
  PDS_SHORTFWD_URISHRT_QP:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
  PDS_SHORT_SPOOFED_URL:  no hits at all
  PDS_TINYSUBJ_URISHRT:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  PDS_URISHRT_LOCALPART_SUBJ:  no hits at all
  SHORT_SHORTNER:  bad, avg S/O=0.56 avg Spam%=0.01 avg Ham%=0.01
  TONOM_EQ_TOLOC_SHRT_PSHRTNER:  no hits at all
  XPRIO_URL_SHORTNER:  no hits at all

rulesrc/sandbox/pds/20_php.cf (15 rules, 3 bad):

  PDS_PHPEXP_BOT:  no hits at all
  PDS_PHP_EVAL:  no hits at all
  PDS_PHP_RUNTIME_FUNC:  no hits at all

rulesrc/sandbox/pds/20_ntld.cf (25 rules, 8 bad):

  BULK_RE_SUSP_NTLD:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  OFFER_ONLY_AMERICA:  no hits at all
  PDS_BTC_NTLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  SUSPNTLD_EXPIRATION_EXTORT:  no hits at all
  THIS_IS_ADV_SUSP_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all

rulesrc/sandbox/pds/20_helo.cf (6 rules, 1 bad):

  PDS_HP_HELO_NORDNS:  bad, avg S/O=0.58 avg Spam%=0.12 avg Ham%=0.09

rulesrc/sandbox/pds/20_btc.cf (16 rules, 4 bad):

  PDS_BTC_AHACKER:  no hits at all
  PDS_BTC_HACKER:  no hits at all
  PDS_LTC_AHACKER:  no hits at all
  PDS_LTC_HACKER:  no hits at all

rulesrc/sandbox/pds/10_menaces.cf (34 rules, 8 bad):

  BODY_QUOTE_MALF_MSGID:  bad, avg S/O=0.68 avg Spam%=0.60 avg Ham%=0.29
  FROM_2_EMAILS_SHORT:  no hits at all
  PDS_BRAND_SUBJ_NAKED_TO:  bad, avg S/O=0.54 avg Spam%=0.07 avg Ham%=0.06
  PDS_DBL_URL_LINKBAIT:  bad, avg S/O=0.36 avg Spam%=0.03 avg Ham%=0.05
  PDS_DBL_URL_TNB_RUNON:  bad, avg S/O=0.33 avg Spam%=0.27 avg Ham%=0.55
  PDS_DOUBLE_URL:  bad, avg S/O=0.28 avg Spam%=1.70 avg Ham%=4.40
  PDS_RDNS_DYNAMIC_FP:  no hits at all
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  no hits of target type

rulesrc/sandbox/mmartinec/20_misc.cf (12 rules, 3 bad):

  FROM_UNBAL1:  no hits at all
  MSGID_NOFQDN1:  bad, avg S/O=0.50 avg Spam%=0.01 avg Ham%=0.01
  MSGID_NOFQDN2:  bad, avg S/O=0.43 avg Spam%=3.46 avg Ham%=4.61

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_doc_test.cf (15 rules, 10 bad):

  FSL_FAKE_HOTMAIL_RVCD:  no hits at all
  FSL_FBOOK_PHISH:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  FSL_HAS_TINYURL:  bad, avg S/O=0.67 avg Spam%=0.03 avg Ham%=0.02
  FSL_HELO_BARE_IP_2:  bad, avg S/O=0.37 avg Spam%=0.09 avg Ham%=0.15
  FSL_HELO_DEVICE:  no hits at all
  FSL_HELO_FAKE:  bad, avg S/O=0.47 avg Spam%=0.12 avg Ham%=0.13
  FSL_HELO_NON_FQDN_1:  bad, avg S/O=0.69 avg Spam%=0.27 avg Ham%=0.12
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
  FSL_STACKED_TEXT:  no hits of target type

rulesrc/sandbox/kmcgrail/20_sergio_experimental.cf (7 rules, 6 bad):

  SERGIO_SUBJECT_PORN006:  no hits of target type
  SERGIO_SUBJECT_PORN008:  no hits of target type
  SERGIO_SUBJECT_PORN009:  no hits of target type
  SERGIO_SUBJECT_PORN014:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  SERGIO_SUBJECT_PORN015:  no hits of target type
  SERGIO_SUBJECT_VIAGRA01:  no hits at all

rulesrc/sandbox/kmcgrail/20_rules_to_sandbox.cf (4 rules, 1 bad):

  US_DOLLARS_3:  no hits at all

rulesrc/sandbox/kmcgrail/20_mailing_list.cf (1 rules, 1 bad):

  AC_HTML_NONSENSE_TAGS:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.04

rulesrc/sandbox/kmcgrail/20_kam.cf (2 rules, 1 bad):

  BILLION_OVERLAP:  no hits at all

rulesrc/sandbox/kmcgrail/20_html_tests.cf (2 rules, 1 bad):

  KAM_HTML_FONT_INVALID:  bad, avg S/O=0.22 avg Spam%=1.96 avg Ham%=6.75

rulesrc/sandbox/kmcgrail/20_freemail.cf (2 rules, 2 bad):

  FREEMAIL_FORGED_FROMDOMAIN:  bad, avg S/O=0.27 avg Spam%=1.59 avg Ham%=4.26
  HEADER_FROM_DIFFERENT_DOMAINS:  bad, avg S/O=0.07 avg Spam%=3.42 avg Ham%=45.76

rulesrc/sandbox/kmcgrail/20_fake_helo_tests.cf (5 rules, 3 bad):

  CK_HELO_DYNAMIC_SPLIT_IP:  bad, avg S/O=0.29 avg Spam%=0.29 avg Ham%=0.73
  CK_HELO_GENERIC:  bad, avg S/O=0.76 avg Spam%=0.12 avg Ham%=0.04
  HELO_MISC_IP:  bad, avg S/O=0.46 avg Spam%=1.23 avg Ham%=1.45

rulesrc/sandbox/kmcgrail/20_demoted_tests.cf (1 rules, 1 bad):

  MSGID_MULTIPLE_AT:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00

rulesrc/sandbox/kmcgrail/20_bug_7068.cf (2 rules, 2 bad):

  PP_TOO_MUCH_UNICODE02:  no hits at all
  PP_TOO_MUCH_UNICODE05:  no hits at all

rulesrc/sandbox/kmcgrail/20_bug_7063.cf (1 rules, 1 bad):

  PP_MIME_FAKE_ASCII_TEXT:  bad, avg S/O=0.76 avg Spam%=1.00 avg Ham%=0.32

rulesrc/sandbox/kmcgrail/20_ac_rules_test.cf (28 rules, 10 bad):

  AC_BR_BONANZA:  bad, avg S/O=0.33 avg Spam%=0.30 avg Ham%=0.61
  AC_DIV_BONANZA:  bad, avg S/O=0.39 avg Spam%=0.03 avg Ham%=0.05
  AC_SPAMMY_URI_PATTERNS1:  no hits at all
  AC_SPAMMY_URI_PATTERNS10:  no hits at all
  AC_SPAMMY_URI_PATTERNS11:  no hits at all
  AC_SPAMMY_URI_PATTERNS12:  no hits at all
  AC_SPAMMY_URI_PATTERNS2:  no hits at all
  AC_SPAMMY_URI_PATTERNS3:  no hits at all
  AC_SPAMMY_URI_PATTERNS4:  no hits at all
  AC_SPAMMY_URI_PATTERNS9:  no hits at all

rulesrc/sandbox/khopesh/20_s25r.cf (11 rules, 6 bad):

  KHOP_BOTNET_9:  bad, avg S/O=0.47 avg Spam%=3.28 avg Ham%=3.70
  S25R:  bad, avg S/O=0.79 avg Spam%=55.12 avg Ham%=14.58
  S25R_1:  bad, avg S/O=0.25 avg Spam%=0.99 avg Ham%=2.91
  S25R_2:  bad, avg S/O=0.28 avg Spam%=0.34 avg Ham%=0.89
  S25R_4:  bad, avg S/O=0.42 avg Spam%=0.02 avg Ham%=0.02
  S25R_5:  bad, avg S/O=0.06 avg Spam%=0.06 avg Ham%=0.86

rulesrc/sandbox/khopesh/20_rcd_rdns.cf (24 rules, 4 bad):

  RCD_RDNS_DYNAMIC:  bad, avg S/O=0.50 avg Spam%=0.17 avg Ham%=0.16
  RCD_RDNS_DYNAMIC_MESSY:  bad, avg S/O=0.50 avg Spam%=0.17 avg Ham%=0.16
  RCD_RDNS_SERVER:  bad, avg S/O=0.62 avg Spam%=32.36 avg Ham%=53.61
  RCD_RDNS_SERVER_MESSY:  bad, avg S/O=0.58 avg Spam%=39.05 avg Ham%=53.98

rulesrc/sandbox/khopesh/20_khop_lists.cf (16 rules, 2 bad):

  KHOP_NO_FULL_NAME:  bad, avg S/O=0.50 avg Spam%=8.18 avg Ham%=8.21
  NOT_A_PERSON:  bad, avg S/O=0.47 avg Spam%=90.15 avg Ham%=80.73

rulesrc/sandbox/khopesh/20_khop_general.cf (8 rules, 2 bad):

  FROM_WWW:  no hits of target type
  MAY_BE_FORGED:  bad, avg S/O=0.64 avg Spam%=0.02 avg Ham%=0.01

rulesrc/sandbox/khopesh/20_khop_experimental.cf (58 rules, 13 bad):

  KHOP_BIG_TO_CC:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%=13.40
  KHOP_FAKE_EBAY:  no hits of target type
  KHOP_FROM_WWW:  bad, avg S/O=0.38 avg Spam%=0.16 avg Ham%=0.26
  KHOP_HELO_AS_VICTIM:  bad, avg S/O=0.80 avg Spam%=0.01 avg Ham%=0.00
  NAME_EMAIL_DIFF:  bad, avg S/O=0.61 avg Spam%=0.04 avg Ham%=0.03
  REMOTE_IMAGE:  bad, avg S/O=0.72 avg Spam%=2.49 avg Ham%=0.96
  SHORTENED_URL_SRC:  no hits at all
  SHORT_URL:  bad, avg S/O=0.26 avg Spam%=0.34 avg Ham%=0.96
  SUBJ_ALL_CAPS2:  no hits of target type
  SUBJ_ALL_CAPS3:  no hits of target type
  SUBJ_LACKS_WORDS:  bad, avg S/O=0.50 avg Spam%=0.64 avg Ham%=0.63
  URI_HIDDEN:  bad, avg S/O=0.15 avg Spam%=0.11 avg Ham%=0.63
  URL_SHORTENER:  bad, avg S/O=0.57 avg Spam%=1.68 avg Ham%=1.25

rulesrc/sandbox/kb/70_misc.cf (11 rules, 4 bad):

  KB_RATWARE_OUTLOOK_MID:  no hits at all
  LIVEFILESTORE:  no hits at all
  THEBAT_UNREG:  no hits at all
  THREAD_INDEX_BAD:  bad, avg S/O=0.79 avg Spam%=0.91 avg Ham%=0.24

rulesrc/sandbox/kb/20_header.cf (7 rules, 4 bad):

  FORGED_RELAY_MUA_TO_MX:  bad, avg S/O=0.71 avg Spam%=0.04 avg Ham%=0.02
  KB_DATE_CONTAINS_TAB:  no hits at all
  KB_FAKED_THE_BAT:  no hits at all
  KB_RATWARE_MSGID:  no hits at all

rulesrc/sandbox/jquinn/20_misc.cf (3 rules, 2 bad):

  EXCUSE_24:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  USING_VERP:  bad, avg S/O=0.22 avg Spam%=0.87 avg Ham%=3.13

rulesrc/sandbox/jm/70_tt_drugs.cf (8 rules, 2 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_VIAGRA:  no hits at all

rulesrc/sandbox/jm/20_basic.cf (69 rules, 27 bad):

  CURR_PRICE:  no hits of target type
  DYN_RDNS_AND_INLINE_IMAGE:  bad, avg S/O=0.31 avg Spam%=0.06 avg Ham%=0.13
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  HELO_LH_HOME:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
  HELO_LOCALHOST:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.11
  IMG_CID_PART1:  no hits of target type
  LOTTERY_1:  no hits at all
  LOTTERY_PH_004470:  no hits of target type
  L_SPAM_TOOL_13:  no hits at all
  MSNBC_MESSAGEGUID:  no hits of target type
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.48 avg Spam%=0.01 avg Ham%=0.02
  OE_MULTIPART_RELATED:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  PART_CID_STOCK:  no hits at all
  PART_CID_STOCK_LESS:  no hits at all
  RCVD_FORGED_WROTE:  no hits at all
  RCVD_MAIL_COM:  no hits at all
  SB_GIF_AND_NO_URIS:  bad, avg S/O=0.63 avg Spam%=0.01 avg Ham%=0.01
  SHORT_HELO_AND_INLINE_IMAGE:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
  SPAMMY_XMAILER:  no hits at all
  STOCK_IMG_CTYPE:  bad, avg S/O=0.48 avg Spam%=0.01 avg Ham%=0.01
  STOCK_IMG_HDR_FROM:  no hits at all
  STOCK_IMG_HTML:  no hits at all
  STOX_BOUND_090909_B:  bad, avg S/O=0.61 avg Spam%=0.04 avg Ham%=0.03
  STOX_REPLY_TYPE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  STOX_REPLY_TYPE_WITHOUT_QUOTES:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  TVD_PDF_FINGER01_JO:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01

rulesrc/sandbox/jhardin/40_local_azurephish.cf (1 rules, 1 bad):

  PHISH_AZURE_CLOUDAPP:  no hits at all

rulesrc/sandbox/jhardin/40_local_419replyto.cf (31 rules, 7 bad):

  REPTO_419_FRAUD_AOL:  no hits at all
  REPTO_419_FRAUD_AOL_LOOSE:  no hits at all
  REPTO_419_FRAUD_OL:  no hits at all
  REPTO_419_FRAUD_PM:  no hits at all
  REPTO_419_FRAUD_QQ:  no hits at all
  REPTO_419_FRAUD_YH_LOOSE:  no hits at all
  REPTO_419_FRAUD_YJ:  no hits at all

rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (3 rules, 1 bad):

  URI_DEOBFU_INSTR:  no hits of target type

rulesrc/sandbox/jhardin/20_thirdparty.cf (2 rules, 2 bad):

  DX_TEXT_02:  no hits at all
  DX_TEXT_03:  no hits of target type

rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (26 rules, 4 bad):

  FORGED_TBIRD_IMG_SIZE:  no hits at all
  TO_NO_BRKTS_FROM_MSSP:  no hits at all
  TO_NO_BRKTS_HTML_IMG:  bad, avg S/O=0.12 avg Spam%=0.11 avg Ham%=0.79
  TO_NO_BRKTS_NORDNS_HTML:  bad, avg S/O=0.70 avg Spam%=1.75 avg Ham%=0.74

rulesrc/sandbox/jhardin/20_postcards.cf (7 rules, 5 bad):

  EXECUTABLE_URI:  no hits of target type
  POSTCARD_03:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
  POSTCARD_05:  no hits of target type
  POSTCARD_08:  no hits of target type
  POSTCARD_09:  bad, avg S/O=0.57 avg Spam%=0.02 avg Ham%=0.02

rulesrc/sandbox/jhardin/20_misc_testing.cf (1213 rules, 229 bad):

  ACCT_PHISHING:  bad, avg S/O=0.69 avg Spam%=0.39 avg Ham%=0.18
  ACH_CANCELLED:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
  ACH_CANCELLED_EXE:  no hits at all
  AC_POST_EXTRAS:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  ADMAIL:  no hits of target type
  ADULT_DATING_COMPANY:  no hits at all
  AD_PREFS:  no hits of target type
  AMAZON_IMG_NOT_RCVD_AMZN:  bad, avg S/O=0.72 avg Spam%=0.02 avg Ham%=0.01
  ANY_PILL_PRICE:  no hits at all
  BAT_BDRY_TO_MALF:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  BEBEE_IMG_NOT_RCVD_BB:  no hits at all
  BILL_1618:  no hits of target type
  BITCOIN_BOMB:  no hits of target type
  BITCOIN_EXTORT_02:  no hits at all
  BITCOIN_OBFU_SUBJ:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
  BITCOIN_SPAM_01:  no hits of target type
  BITCOIN_SPAM_04:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  BITCOIN_SPAM_06:  no hits at all
  BITCOIN_SPAM_08:  no hits of target type
  BITCOIN_SPAM_10:  no hits at all
  BITCOIN_SPAM_11:  no hits at all
  BITCOIN_SPAM_12:  no hits at all
  BITCOIN_WFH_01:  no hits at all
  BODY_EMPTY:  bad, avg S/O=0.09 avg Spam%=0.32 avg Ham%=3.35
  BODY_URI_ONLY:  bad, avg S/O=0.69 avg Spam%=0.27 avg Ham%=0.12
  CANT_SEE_AD:  no hits at all
  CN_B2B_SPAMMER:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  COMMENT_GIBBERISH:  no hits at all
  CONTENT_AFTER_HTML:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.03
  CONTENT_AFTER_HTML_WEAK:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  CTYPE_NULL:  no hits at all
  DAY_I_EARNED:  no hits at all
  DG_SPAMMER_EMAIL_B:  no hits of target type
  DG_SPAMMER_EMAIL_F:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  DIRECT_LOW_CONTRAST:  bad, avg S/O=0.76 avg Spam%=0.82 avg Ham%=0.26
  DOC_ATTACH_NO_EXT:  no hits of target type
  DOTGOV_IMAGE:  no hits of target type
  DUP_SUSP_HDR:  no hits of target type
  EBAY_IMG_NOT_RCVD_EBAY:  no hits at all
  ENVFROM_GOOG_TRIX:  no hits at all
  FONT_INVIS_DOTGOV:  no hits at all
  FONT_INVIS_HTML_NOHTML:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  FONT_INVIS_LONG_LINE:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.19
  FONT_INVIS_POSTEXTRAS:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_DOC_PDF:  bad, avg S/O=0.65 avg Spam%=0.08 avg Ham%=0.04
  FREEMAIL_DOC_PDF_BCC:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_MANY_TO:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.08
  FREEMAIL_RVW_ATTCH:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_WFH_01:  no hits at all
  FREEM_FRNUM_UNICD_EMPTY:  no hits at all
  FRNAME_IN_MSG_XPRIO_NO_SUB:  no hits at all
  FROM_IN_TO_AND_SUBJ:  bad, avg S/O=0.68 avg Spam%=0.06 avg Ham%=0.03
  FROM_LONG_DOM:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=1.13
  FROM_MISSPACED:  bad, avg S/O=0.74 avg Spam%=0.92 avg Ham%=0.32
  FROM_MISSP_DYNIP:  bad, avg S/O=0.48 avg Spam%=0.16 avg Ham%=0.18
  FROM_MISSP_EH_MATCH:  bad, avg S/O=0.69 avg Spam%=0.80 avg Ham%=0.36
  FROM_MISSP_PHISH:  no hits at all
  FROM_MISSP_TO_UNDISC:  no hits at all
  FROM_MULTI_NORDNS:  no hits at all
  FROM_MULTI_SHORT_IMG:  no hits of target type
  FROM_NUMERIC_TLD:  no hits at all
  FROM_URI:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  FUZZY_AMAZON:  bad, avg S/O=0.76 avg Spam%=0.02 avg Ham%=0.00
  FUZZY_ANDROID:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_BROWSER:  no hits at all
  FUZZY_DR_OZ:  no hits at all
  FUZZY_FACEBOOK:  no hits at all
  FUZZY_HARRIS:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_MONERO:  no hits of target type
  FUZZY_NORTON:  no hits at all
  FUZZY_OPTOUT:  no hits at all
  FUZZY_OVERSTOCK:  no hits at all
  FUZZY_PORN:  no hits at all
  FUZZY_PROMOTION:  no hits at all
  FUZZY_UNSUBSCRIBE:  no hits at all
  FUZZY_WALLET:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.01
  FUZZY_WELLSFARGO:  no hits at all
  GAPPY_GENITALIA:  no hits at all
  GAPPY_PILLS:  no hits of target type
  GAPPY_SALES_LEADS_FREEM:  no hits at all
  GOOGLE_DOCS_PHISH:  no hits at all
  GOOGLE_DOCS_PHISH_MANY:  no hits at all
  GOOGLE_DOC_SUSP:  no hits of target type
  GOOG_REDIR_FRAUD:  bad, avg S/O=0.40 avg Spam%=0.14 avg Ham%=0.21
  GOOG_REDIR_HTML_ONLY:  bad, avg S/O=0.65 avg Spam%=0.81 avg Ham%=0.43
  GOOG_REDIR_NORDNS:  bad, avg S/O=0.56 avg Spam%=0.48 avg Ham%=0.38
  GOOG_REDIR_SHORT:  no hits at all
  GOOG_STO_IMG_HTML:  bad, avg S/O=0.22 avg Spam%=0.17 avg Ham%=0.61
  GOOG_STO_IMG_NOHTML:  bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.00
  HAS_APPARENTLY_TO:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  HAS_X_NO_RELAY:  no hits of target type
  HDRS_LCASE:  no hits at all
  HDRS_LCASE_IMGONLY:  bad, avg S/O=0.79 avg Spam%=0.02 avg Ham%=0.01
  HDR_CASE_REV_ENC:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  HDR_CASE_REV_MANY:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.01
  HEXHASH_WORD:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  HOSTED_IMG_DQ_UNSUB:  no hits at all
  HREF_EMPTY_XANTIABUSE:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  HREF_EMPTY_XAUTHED:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  HTML_EMPTY_CELLS_MANY:  no hits of target type
  HTML_ENTITY_ASCII_TINY:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.01
  HTML_FONT_TINY_NORDNS:  no hits at all
  HTML_OFF_PAGE:  no hits of target type
  HTML_SHRT_CMNT_OBFU_MANY:  no hits at all
  HTML_TAG_BALANCE_CENTER:  no hits at all
  HTML_TEXT_INVISIBLE_STYLE:  bad, avg S/O=0.16 avg Spam%=0.03 avg Ham%=0.15
  JH_SPAMMY_PATTERN01:  no hits at all
  JH_SPAMMY_PATTERN02:  no hits at all
  LARGE_PCT_AFTER_MANY:  no hits at all
  LH_URI_DOM_IN_PATH:  bad, avg S/O=0.24 avg Spam%=0.60 avg Ham%=1.87
  LINKEDIN_IMG_NOT_RCVD_LNKN:  no hits at all
  LIST_PARTIAL:  bad, avg S/O=0.69 avg Spam%=0.59 avg Ham%=0.26
  LIST_PARTIAL_SHORT_MSG:  bad, avg S/O=0.55 avg Spam%=0.02 avg Ham%=0.02
  LIST_PRTL_PUMPDUMP:  no hits at all
  LONG_HEX_URI:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.01
  LONG_IMG_URI:  bad, avg S/O=0.28 avg Spam%=0.04 avg Ham%=0.10
  MALF_HTML_B64:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  MALWARE_PASSWORD:  no hits at all
  MANY_HDRS_LCASE:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  MANY_PILL_PRICE:  no hits of target type
  MANY_SPAN_IN_TEXT:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.02
  MIXED_FONT_CASE:  no hits of target type
  MONERO_DEADLINE:  no hits at all
  MONERO_EXTORT_01:  no hits at all
  MONERO_MALWARE:  no hits at all
  MONERO_PAY_ME:  no hits at all
  MONEY_12LTRDOM:  bad, avg S/O=0.17 avg Spam%=0.03 avg Ham%=0.16
  MSGID_DOLLARS_URI_IMG:  no hits at all
  MSGID_HDR_MALF:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
  MSMAIL_PRI_ABNORMAL:  no hits at all
  NEWEGG_IMG_NOT_RCVD_NEGG:  no hits at all
  NORDNS_LOW_CONTRAST:  no hits at all
  NOT_SPAM:  bad, avg S/O=0.61 avg Spam%=0.00 avg Ham%=0.00
  NSL_TO_ENDS_COMMA:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  OBFU_GIF_ATTACH:  no hits at all
  OBFU_HTML_ATT_MALW:  no hits at all
  OBFU_JPG_ATTACH:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.01
  OBFU_PDF_ATTACH:  bad, avg S/O=0.13 avg Spam%=0.03 avg Ham%=0.18
  OBFU_UNSUB_UL:  no hits of target type
  PAYPAL_PHISH_06:  no hits at all
  PAYPAL_PHISH_07:  no hits of target type
  PHISH_FBASEAPP:  no hits at all
  PHOTO_EDITING_DIRECT:  no hits at all
  PHOTO_EDITING_FREEM:  no hits at all
  PHP_NOVER_MUA:  no hits at all
  PHP_ORIG_SCRIPT:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.01
  PHP_ORIG_SCRIPT_EVAL:  no hits at all
  PHP_SCRIPT_MUA:  no hits at all
  POSSIBLE_APPLE_PHISH_01:  no hits of target type
  POSSIBLE_EBAY_PHISH_02:  no hits at all
  POSSIBLE_PAYPAL_PHISH_01:  no hits at all
  POSSIBLE_PAYPAL_PHISH_02:  no hits at all
  PUMPDUMP_MULTI:  no hits at all
  PUMPDUMP_TIP:  no hits at all
  RAND_HEADER_LIST_SPOOF:  no hits of target type
  RAND_HEADER_MANY:  no hits at all
  RATWARE_NO_RDNS:  no hits at all
  RCVD_DBL_DQ:  no hits at all
  RCVD_DOTEDU_SHORT:  no hits at all
  RCVD_DOTEDU_SUSP:  no hits of target type
  RCVD_DOTEDU_SUSP_URI:  no hits at all
  RDNS_LOCALHOST:  no hits at all
  RDNS_NUM_TLD_ATCHNX:  no hits at all
  RDNS_NUM_TLD_XM:  no hits at all
  REPLYTO_EMPTY:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  RUNON_SHY:  bad, avg S/O=0.16 avg Spam%=0.01 avg Ham%=0.07
  SCANNED_EXTERNAL:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
  SCRIPT_GIBBERISH:  bad, avg S/O=0.59 avg Spam%=0.00 avg Ham%=0.00
  SHOPIFY_IMG_NOT_RCVD_SFY:  bad, avg S/O=0.62 avg Spam%=0.02 avg Ham%=0.01
  SHORTENER_SHORT_SUBJ:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  STOCK_TIP:  no hits at all
  STY_INVIS_DIRECT:  bad, avg S/O=0.77 avg Spam%=0.28 avg Ham%=0.08
  SUBJ_ATTENTION:  no hits at all
  SUBJ_OBFU_PUNCT_FEW:  bad, avg S/O=0.34 avg Spam%=0.05 avg Ham%=0.10
  SUBJ_OBFU_PUNCT_MANY:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.02
  SUSP_UTF8_WORD_MANY:  bad, avg S/O=0.77 avg Spam%=0.02 avg Ham%=0.01
  SYSADMIN:  no hits at all
  TAGSTAT_IMG_NOT_RCVD_TGST:  no hits at all
  TARINGANET_IMG_NOT_RCVD_TN:  no hits at all
  TEQF_USR_IMAGE:  no hits at all
  TEQF_USR_MSGID_HEX:  no hits at all
  TEQF_USR_MSGID_MALF:  no hits at all
  THIS_AD:  bad, avg S/O=0.40 avg Spam%=0.30 avg Ham%=0.46
  TONLINE_FAKE_DKIM:  no hits at all
  TO_NAME_SUBJ_NO_RDNS:  bad, avg S/O=0.07 avg Spam%=0.05 avg Ham%=0.61
  TO_TOO_MANY_WFH_01:  no hits at all
  TRANSFORM_LIFE:  no hits at all
  TUMBLR_IMG_NOT_RCVD_TUMB:  no hits of target type
  TVD_SPACE_RATIO_MINFP:  bad, avg S/O=0.49 avg Spam%=0.93 avg Ham%=0.97
  TW_GIBBERISH_MANY:  no hits at all
  UC_GIBBERISH_OBFU:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  UNICODE_OBFU_ZW_MANY:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.18
  UNSUB_GOOG_FORM:  no hits at all
  URI_ADOBESPARK:  no hits at all
  URI_DATA:  no hits at all
  URI_DBL_INDIR:  bad, avg S/O=0.38 avg Spam%=0.13 avg Ham%=0.21
  URI_DOTDOT_LOW_CNTRST:  no hits of target type
  URI_DOTEDU:  bad, avg S/O=0.41 avg Spam%=0.01 avg Ham%=0.01
  URI_DOTEDU_ENTITY:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  URI_DOTEDU_LONG:  no hits of target type
  URI_DWEBIPFS:  bad, avg S/O=0.64 avg Spam%=0.03 avg Ham%=0.02
  URI_GIBB_NO_PROTO:  no hits of target type
  URI_HIDDEN_2:  bad, avg S/O=0.15 avg Spam%=0.11 avg Ham%=0.63
  URI_IMG_CWINDOWSNET:  bad, avg S/O=0.27 avg Spam%=0.01 avg Ham%=0.03
  URI_IMG_WP_REDIR:  no hits of target type
  URI_LONG_REPEAT:  no hits of target type
  URI_MALWARE_BH:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
  URI_MALWARE_SCMS:  no hits at all
  URI_ONLY_MSGID_MALF:  no hits of target type
  URI_OPTOUT_3LD:  no hits of target type
  URI_OPTOUT_USME:  no hits at all
  URI_TRPL_INDIR:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.04
  URI_TRY_3LD:  bad, avg S/O=0.66 avg Spam%=0.16 avg Ham%=0.08
  URI_TRY_USME:  no hits of target type
  URI_WP_HACKED:  bad, avg S/O=0.55 avg Spam%=0.18 avg Ham%=0.14
  URI_WP_HACKED_2:  bad, avg S/O=0.64 avg Spam%=0.01 avg Ham%=0.01
  VISTA_COST:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  WALMART_IMG_NOT_RCVD_WAL:  no hits at all
  WANT_TO_ORDER:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
  WORD_INVIS:  bad, avg S/O=0.55 avg Spam%=0.01 avg Ham%=0.01
  WORD_INVIS_MANY:  bad, avg S/O=0.61 avg Spam%=0.00 avg Ham%=0.00
  XM_DIGITS_ONLY:  no hits at all
  XM_LIGHT_HEAVY:  no hits at all
  XM_ONE_WORD:  bad, avg S/O=0.74 avg Spam%=0.77 avg Ham%=0.27
  XM_PHPMAILER_FORGED:  no hits at all
  XPRIO_SHORT_SUBJ:  no hits at all
  ZW_OBFU_BITCOIN:  no hits of target type
  ZW_OBFU_FREEM:  no hits at all
  ZW_OBFU_FROMTOSUBJ:  no hits at all

rulesrc/sandbox/jhardin/20_lotsa_money.cf (160 rules, 8 bad):

  COMPENSATION:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  EMRCP:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  LOTS_OF_MONEY:  bad, avg S/O=0.61 avg Spam%=3.93 avg Ham%=2.47
  LOTTO_URI:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  MONEY_BARRISTER:  no hits at all
  MONEY_PERCENT:  bad, avg S/O=0.58 avg Spam%=0.19 avg Ham%=0.14
  WON_NBDY_ATTACH:  no hits at all
  XFER_LOTSA_MONEY:  bad, avg S/O=0.59 avg Spam%=0.10 avg Ham%=0.03

rulesrc/sandbox/jhardin/20_fillform.cf (19 rules, 4 bad):

  FILL_THIS_FORM:  bad, avg S/O=0.13 avg Spam%=0.27 avg Ham%=1.85
  FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.46 avg Spam%=0.06 avg Ham%=0.07
  FILL_THIS_FORM_LOAN:  no hits at all
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.36 avg Spam%=0.43 avg Ham%=0.75

rulesrc/sandbox/jhardin/20_advance_fee_reevolved.cf (31 rules, 2 bad):

  ADVANCE_FEE_2_NEW_FRM_MNY:  bad, avg S/O=0.45 avg Spam%=0.02 avg Ham%=0.02
  ADVANCE_FEE_5_NEW:  bad, avg S/O=0.76 avg Spam%=0.04 avg Ham%=0.01

rulesrc/sandbox/jhardin/20_MIME_no_text.cf (7 rules, 2 bad):

  MIME_NO_TEXT:  no hits of target type
  MIME_PHP_NO_TEXT:  no hits at all

rulesrc/sandbox/jhardin/20_MIME_in_body.cf (3 rules, 1 bad):

  MIME_MALF:  no hits of target type

rulesrc/sandbox/hege/20_hk.cf (66 rules, 5 bad):

  HK_NAME_FM_MR_MRS:  no hits at all
  HK_SPAMMY_FILENAME:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00
  HK_WIN:  no hits at all
  URI_IN_URI_10:  no hits at all
  URI_IN_URI_5:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/gbechis/20_ratware.cf (6 rules, 1 bad):

  GB_FORGED_MUA_POSTFIX:  no hits at all

rulesrc/sandbox/gbechis/20_misc.cf (24 rules, 8 bad):

  GB_BING_REDIR:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.05
  GB_CUSTOM_HTM_URI:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.09
  GB_FAKE_RF_SHORT:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
  GB_GOOGLE_AMP:  no hits of target type
  GB_GOOGLE_OBFUR:  no hits of target type
  GB_PAYPAL_IMG_NOT_RCVD_PAYP:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  GB_SUBJ_ICONS:  bad, avg S/O=0.69 avg Spam%=4.63 avg Ham%=2.05
  SENDINBLUE_REDIR:  bad, avg S/O=0.27 avg Spam%=0.04 avg Ham%=0.10

rulesrc/sandbox/gbechis/20_freemail.cf (6 rules, 3 bad):

  GB_FREEMAIL_DISPTO:  bad, avg S/O=0.63 avg Spam%=0.02 avg Ham%=0.01
  GB_FREEMAIL_DISPTO_NOTFREEM:  bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
  GB_WEBFORM:  no hits at all

rulesrc/sandbox/gbechis/20_btc.cf (17 rules, 1 bad):

  GB_BITCOIN_CP:  no hits at all

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (62 rules, 4 bad):

  FAKE_REPLY_A1:  no hits at all
  FAKE_REPLY_B:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  TEST_REPLY_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.26
  TEST_REPLY_C:  no hits of target type

rulesrc/sandbox/fkento/20_paypal_abuse.cf (9 rules, 1 bad):

  MXG_PAYPAL_ABUSE:  no hits of target type

rulesrc/sandbox/fkento/20_misc.cf (17 rules, 4 bad):

  MXG_BING_REDIR_SUSP:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.14
  MXG_GOOGLE_FOREIGN_REDIR:  bad, avg S/O=0.17 avg Spam%=0.04 avg Ham%=0.20
  MXG_LOWER_HDR_SPAM:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
  MXG_SPOOFED_DOCUSIGN:  bad, avg S/O=0.52 avg Spam%=0.29 avg Ham%=0.27

rulesrc/sandbox/felicity/70_phishing.cf (57 rules, 8 bad):

  HTTPS_HTTP_MISMATCH:  bad, avg S/O=0.77 avg Spam%=1.16 avg Ham%=0.35
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.34 avg Spam%=0.26 avg Ham%=0.50
  TVD_PH_BODY_ACCOUNTS_PRE:  bad, avg S/O=0.35 avg Spam%=0.28 avg Ham%=0.52
  TVD_PH_BODY_META:  bad, avg S/O=0.47 avg Spam%=0.04 avg Ham%=0.04
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.35 avg Spam%=0.57 avg Ham%=1.04
  TVD_PH_FR5:  no hits of target type
  TVD_PH_SEC:  bad, avg S/O=0.70 avg Spam%=0.16 avg Ham%=0.07
  TVD_PH_SUBJ_META1:  bad, avg S/O=0.53 avg Spam%=0.30 avg Ham%=0.26

rulesrc/sandbox/felicity/70_other.cf (73 rules, 54 bad):

  BASE64_LENGTH_78_79:  no hits of target type
  DRUGS_HDIA:  no hits at all
  FUZZY_MERIDIA:  no hits at all
  FUZZY_SPRM:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  HEADER_COUNT_SUBJECT:  no hits at all
  NULL_IN_BODY:  no hits at all
  RCVD_BAD_ID:  no hits at all
  TVD_ACT_193:  no hits at all
  TVD_APP_LOAN:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
  TVD_BODY_END_STAR:  no hits of target type
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_ENVFROM_APOST:  no hits at all
  TVD_FINGER_02:  no hits of target type
  TVD_FLOAT_GENERAL:  no hits at all
  TVD_FUZZY_DEGREE:  no hits at all
  TVD_FUZZY_FINANCE:  no hits at all
  TVD_FUZZY_FIXED_RATE:  no hits at all
  TVD_FUZZY_MICROCAP:  no hits at all
  TVD_FUZZY_PHARMACEUTICAL:  no hits at all
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.12
  TVD_FUZZY_SECURITIES:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  TVD_FUZZY_SYMBOL:  no hits at all
  TVD_FW_GRAPHIC_ID2:  no hits at all
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.24 avg Spam%=0.03 avg Ham%=0.08
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.24 avg Spam%=0.03 avg Ham%=0.09
  TVD_INCREASE_SIZE:  no hits at all
  TVD_LINK_SAVE:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
  TVD_PDF_FINGER01:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
  TVD_RATWARE_CB:  no hits at all
  TVD_RATWARE_CB_2:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.23 avg Spam%=0.06 avg Ham%=0.21
  TVD_RATWARE_MSGID_02:  no hits at all
  TVD_RCVD_IP:  no hits of target type
  TVD_RCVD_IP4:  no hits of target type
  TVD_RCVD_SINGLE:  no hits of target type
  TVD_SECTION:  no hits at all
  TVD_SILLY_URI_OBFU:  no hits at all
  TVD_SPACED_SUBJECT_WORD3:  no hits at all
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.11
  TVD_STOCK1:  no hits at all
  TVD_SUBJ_FINGER_03:  no hits at all
  TVD_SUBJ_FINGER_07:  no hits of target type
  TVD_SUBJ_OWE:  no hits at all
  TVD_SUBJ_WIPE_DEBT:  no hits of target type
  TVD_VISIT_PHARMA:  bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.04
  TVD_VIS_HIDDEN:  no hits at all
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.07
  T_TVD_PCT_OFF2:  bad, avg S/O=0.69 avg Spam%=1.29 avg Ham%=0.59
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  T_TVD_SUBJ_FINGER_06:  no hits of target type
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.05 avg Spam%=0.17 avg Ham%=3.06
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.08 avg Spam%=0.31 avg Ham%=3.45
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.08 avg Spam%=0.31 avg Ham%=3.45

rulesrc/sandbox/fanf/30_text.cf (2 rules, 2 bad):

  LONG_TERM_PRICE:  no hits at all
  SHORT_TERM_PRICE:  no hits at all

rulesrc/sandbox/duncf/20_header.cf (3 rules, 1 bad):

  STUDDLYCAPS:  bad, avg S/O=0.14 avg Spam%=0.04 avg Ham%=0.24

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 2 bad):

  BANKING_LAWS:  no hits at all
  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (71 rules, 12 bad):

  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_FIX_MY_URI:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_OUTLOOK_TO_MX_IMAGE:  no hits at all
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.44 avg Spam%=0.74 avg Ham%=0.93
  DOS_RCVD_IP_TWICE_B:  bad, avg S/O=0.66 avg Spam%=0.11 avg Ham%=0.06
  DOS_STOCK_BAT:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
  X_MAILER_CME_6543_MSN:  no hits at all

rulesrc/sandbox/davej/20_non_ascii.cf (4 rules, 1 bad):

  CTE_8BIT_MISMATCH:  bad, avg S/O=0.68 avg Spam%=0.09 avg Ham%=0.04

rulesrc/sandbox/davej/20_bug_7550.cf (1 rules, 1 bad):

  VULN_PHPMAILER:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.04

rulesrc/sandbox/billcole/80_test.cf (36 rules, 7 bad):

  HTML_BADATTR:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
  SCC_CANSPAM_2:  bad, avg S/O=0.10 avg Spam%=0.05 avg Ham%=0.42
  SCC_ISEMM_LID_1:  no hits at all
  SCC_META_ODDDIV8:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.02
  SCC_SPAMMER_ADDR_2:  no hits at all
  SCC_SPECIAL_GUID:  no hits at all
  T_SCC_TLD_XYZ:  bad, avg S/O=0.34 avg Spam%=0.01 avg Ham%=0.03

rulesrc/sandbox/billcole/24_mixed_es.cf (3 rules, 1 bad):

  MIXED_ES:  bad, avg S/O=0.64 avg Spam%=0.02 avg Ham%=0.01

rulesrc/sandbox/billcole/23_bug_6780.cf (4 rules, 1 bad):

  T_EMPTY_FROM_OR_TO_OR_CC:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.10

rulesrc/sandbox/billcole/21_bug_7219.cf (8 rules, 2 bad):

  SCC_BODY_TEXT_LINE:  bad, avg S/O=0.52 avg Spam%=93.97 avg Ham%=99.73
  SCC_EMPTY_BODY:  bad, avg S/O=0.04 avg Spam%=0.27 avg Ham%=6.03

rulesrc/sandbox/axb/20_axb_misc.cf (6 rules, 3 bad):

  AXB_XM_FORGED_OL2600:  no hits at all
  AXB_X_FF_SEZ_S:  bad, avg S/O=0.09 avg Spam%=0.06 avg Ham%=0.61
  AXB_X_OUTLOOKPROT_ENVSDR:  no hits of target type

rules/72_active.cf (60 rules, 5 bad):

  CTYPE_8SPACE_GIF:  no hits at all
  HK_CTE_RAW:  no hits at all
  OBFU_TEXT_ATTACH:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  SENDGRID_REDIR:  no hits at all
  TVD_FW_GRAPHIC_NAME_MID:  bad, avg S/O=0.54 avg Spam%=0.00 avg Ham%=0.00

rules/25_replace.cf (29 rules, 23 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_BILLION:  no hits at all
  FUZZY_GUARANTEE:  no hits at all
  FUZZY_MEDICATION:  no hits at all
  FUZZY_MONEY:  no hits at all
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OBLIGATION:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHARMACY:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_PRESCRIPT:  no hits at all
  FUZZY_PRICES:  no hits of target type
  FUZZY_REFINANCE:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  no hits at all
  SUBJECT_FUZZY_CHEAP:  no hits at all
  SUBJECT_FUZZY_MEDS:  no hits at all
  SUBJECT_FUZZY_PENIS:  no hits at all
  SUBJECT_FUZZY_TION:  no hits at all
  SUBJECT_FUZZY_VPILL:  no hits at all

rules/20_vbounce.cf (176 rules, 5 bad):

  ANY_BOUNCE_MESSAGE:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  BOUNCE_MESSAGE:  no hits at all
  CHALLENGE_RESPONSE:  no hits at all
  OOOBOUNCE_MESSAGE:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  VBOUNCE_MESSAGE:  no hits of target type

rules/20_uri_tests.cf (18 rules, 10 bad):

  HTTP_77:  no hits at all
  HTTP_EXCESSIVE_ESCAPES:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  NUMERIC_HTTP_ADDR:  no hits at all
  SPOOF_COM2COM:  no hits at all
  SPOOF_NET2COM:  no hits at all
  URI_HEX:  bad, avg S/O=0.64 avg Spam%=1.25 avg Ham%=0.70
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.21 avg Spam%=0.03 avg Ham%=0.11
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (100 rules, 21 bad):

  FORGED_IMS_HTML:  no hits at all
  FORGED_IMS_TAGS:  no hits at all
  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_QUALCOMM_TAGS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  HEADER_SPAM:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
  RATWARE_EFROM:  no hits of target type
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_MS_HASH:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_RCVD_PF:  no hits at all
  REPTO_QUOTE_AOL:  no hits at all
  REPTO_QUOTE_IMS:  no hits at all
  REPTO_QUOTE_MSN:  no hits at all
  REPTO_QUOTE_QUALCOMM:  no hits at all
  REPTO_QUOTE_YAHOO:  no hits at all
  X_MESSAGE_INFO:  no hits at all

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (45 rules, 28 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.59 avg Spam%=0.11 avg Ham%=0.08
  BAD_CREDIT:  bad, avg S/O=0.58 avg Spam%=0.02 avg Ham%=0.02
  BANG_GUAR:  bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.02
  BANG_OPRAH:  no hits at all
  BODY_ENHANCEMENT:  bad, avg S/O=0.16 avg Spam%=0.04 avg Ham%=0.19
  EM_ROLEX:  bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
  EXCUSE_REMOVE:  no hits of target type
  FIN_FREE:  bad, avg S/O=0.62 avg Spam%=0.04 avg Ham%=0.02
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  INVESTMENT_ADVICE:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  JOIN_MILLIONS:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.02
  LOW_PRICE:  bad, avg S/O=0.18 avg Spam%=0.15 avg Ham%=0.68
  MARKETING_PARTNERS:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.05
  MONEY_BACK:  bad, avg S/O=0.56 avg Spam%=0.03 avg Ham%=0.03
  MORE_SEX:  no hits of target type
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
  OBSCURED_EMAIL:  no hits at all
  ONE_TIME:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  REFINANCE_YOUR_HOME:  no hits at all
  REMOVE_BEFORE_LINK:  bad, avg S/O=0.73 avg Spam%=0.09 avg Ham%=0.03
  REPLICA_WATCH:  no hits at all
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits at all
  STRONG_BUY:  no hits at all

rules/20_meta_tests.cf (19 rules, 4 bad):

  EMPTY_MESSAGE:  bad, avg S/O=0.04 avg Spam%=0.26 avg Ham%=5.93
  FORGED_MUA_MOZILLA:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  NO_HEADERS_MESSAGE:  no hits at all
  UPPERCASE_50_75:  bad, avg S/O=0.55 avg Spam%=0.12 avg Ham%=0.10

rules/20_imageinfo.cf (17 rules, 4 bad):

  DC_GIF_UNO_LARGO:  no hits of target type
  DC_IMAGE_SPAM_HTML:  no hits of target type
  DC_IMAGE_SPAM_TEXT:  no hits of target type
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.57 avg Spam%=0.07 avg Ham%=0.05

rules/20_html_tests.cf (69 rules, 32 bad):

  HIDE_WIN_STATUS:  no hits at all
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.02
  HTML_COMMENT_SHORT:  no hits at all
  HTML_FONT_LOW_CONTRAST:  bad, avg S/O=0.59 avg Spam%=3.62 avg Ham%=2.50
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.63 avg Spam%=94.39 avg Ham%=55.49
  HTML_FONT_SIZE_LARGE:  no hits at all
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  no hits at all
  HTML_IMAGE_ONLY_12:  bad, avg S/O=0.78 avg Spam%=0.86 avg Ham%=0.24
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.35 avg Spam%=2.53 avg Ham%=4.60
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.26 avg Spam%=0.89 avg Ham%=2.58
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.11 avg Spam%=0.39 avg Ham%=3.07
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.16 avg Spam%=0.37 avg Ham%=1.93
  HTML_MESSAGE:  bad, avg S/O=0.63 avg Spam%=94.39 avg Ham%=55.49
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.70 avg Spam%=2.18 avg Ham%=0.95
  HTML_MISSING_CTYPE:  no hits at all
  HTML_NONELEMENT_30_40:  no hits at all
  HTML_NONELEMENT_40_50:  no hits at all
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.45 avg Spam%=0.98 avg Ham%=1.18
  HTML_OBFUSCATE_30_40:  no hits at all
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.72 avg Spam%=0.02 avg Ham%=0.01
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits at all

rules/20_head_tests.cf (160 rules, 54 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.25 avg Spam%=0.06 avg Ham%=0.18
  CONFIRMED_FORGED:  no hits at all
  DATE_IN_FUTURE_24_48:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  DATE_IN_FUTURE_48_96:  no hits at all
  DATE_IN_FUTURE_96_XX:  no hits at all
  DATE_IN_PAST_96_XX:  bad, avg S/O=0.19 avg Spam%=0.03 avg Ham%=0.14
  DATE_SPAMWARE_Y2K:  no hits at all
  ENGLISH_UCE_SUBJECT:  no hits at all
  FAKE_OUTBLAZE_RCVD:  no hits at all
  FORGED_MSGID_AOL:  no hits at all
  FORGED_MSGID_EXCITE:  no hits at all
  FORGED_MSGID_HOTMAIL:  no hits at all
  FORGED_MSGID_MSN:  no hits at all
  FORGED_MSGID_YAHOO:  no hits at all
  FORGED_TELESP_RCVD:  no hits at all
  FORGED_YAHOO_RCVD:  bad, avg S/O=0.33 avg Spam%=0.02 avg Ham%=0.03
  FROM_EXCESS_BASE64:  bad, avg S/O=0.59 avg Spam%=0.52 avg Ham%=0.35
  FROM_ILLEGAL_CHARS:  no hits at all
  FROM_LOCAL_DIGITS:  bad, avg S/O=0.40 avg Spam%=0.04 avg Ham%=0.07
  FROM_LOCAL_HEX:  no hits at all
  FROM_STARTS_WITH_NUMS:  bad, avg S/O=0.79 avg Spam%=0.07 avg Ham%=0.02
  HEADER_COUNT_CTYPE:  no hits at all
  HEAD_ILLEGAL_CHARS:  no hits at all
  INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  no hits at all
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  LOCALPART_IN_SUBJECT:  bad, avg S/O=0.16 avg Spam%=0.13 avg Ham%=0.65
  MIME_BOUND_DIGITS_15:  no hits at all
  MIME_BOUND_MANY_HEX:  no hits at all
  MIME_HEADER_CTYPE_ONLY:  bad, avg S/O=0.58 avg Spam%=0.21 avg Ham%=0.15
  MISSING_MIMEOLE:  bad, avg S/O=0.38 avg Spam%=0.05 avg Ham%=0.08
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.73 avg Spam%=0.31 avg Ham%=0.11
  MSGID_SPAM_LETTERS:  no hits at all
  MSGID_YAHOO_CAPS:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  PLING_QUERY:  bad, avg S/O=0.65 avg Spam%=0.46 avg Ham%=0.25
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.32
  SORTED_RECIPS:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.13
  SUBJ_ALL_CAPS:  bad, avg S/O=0.64 avg Spam%=1.22 avg Ham%=0.69
  SUBJ_AS_SEEN:  no hits of target type
  SUBJ_BUY:  bad, avg S/O=0.19 avg Spam%=0.01 avg Ham%=0.03
  SUBJ_DOLLARS:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.36
  SUBJ_YOUR_FAMILY:  bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.01
  SUSPICIOUS_RECIPS:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.02
  TO_MALFORMED:  bad, avg S/O=0.18 avg Spam%=0.03 avg Ham%=0.13
  UNRESOLVED_TEMPLATE:  no hits of target type
  WITH_LC_SMTP:  no hits at all
  X_PRIORITY_CC:  no hits at all

rules/20_freemail.cf (12 rules, 2 bad):

  FREEMAIL_FROM:  bad, avg S/O=0.38 avg Spam%=2.91 avg Ham%=4.71
  FREEMAIL_REPLY:  bad, avg S/O=0.72 avg Spam%=0.04 avg Ham%=0.02

rules/20_fake_helo_tests.cf (19 rules, 9 bad):

  HELO_DYNAMIC_CHELLO_NL:  no hits at all
  HELO_DYNAMIC_DHCP:  bad, avg S/O=0.28 avg Spam%=0.02 avg Ham%=0.05
  HELO_DYNAMIC_DIALIN:  no hits at all
  HELO_DYNAMIC_HEXIP:  no hits at all
  HELO_DYNAMIC_HOME_NL:  no hits at all
  HELO_DYNAMIC_IPADDR:  bad, avg S/O=0.55 avg Spam%=0.16 avg Ham%=0.13
  HELO_DYNAMIC_ROGERS:  no hits at all
  HELO_DYNAMIC_SPLIT_IP:  bad, avg S/O=0.55 avg Spam%=0.12 avg Ham%=0.10
  HELO_STATIC_HOST:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03

rules/20_dynrdns.cf (36 rules, 1 bad):

  RDNS_NONE:  bad, avg S/O=0.76 avg Spam%=27.40 avg Ham%=8.71

rules/20_drugs.cf (84 rules, 17 bad):

  DRUGS_ANXIETY:  no hits of target type
  DRUGS_ANXIETY_EREC:  no hits at all
  DRUGS_ANXIETY_OBFU:  no hits at all
  DRUGS_DIET:  no hits of target type
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_MANYKINDS:  no hits at all
  DRUGS_MUSCLE:  no hits at all
  DRUGS_SLEEP_EREC:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_DOSAGE:  no hits at all
  DRUG_ED_GENERIC:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  DRUG_ED_SILD:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  ONLINE_PHARMACY:  bad, avg S/O=0.21 avg Spam%=0.01 avg Ham%=0.04
  SUBJECT_DRUG_GAP_S:  no hits at all
  SUBJECT_DRUG_GAP_X:  no hits at all
  VIA_GAP_GRA:  no hits at all

rules/20_body_tests.cf (30 rules, 15 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  HTTPS_IP_MISMATCH:  no hits at all
  MIMEPART_LIMIT_EXCEEDED:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_TEXT:  bad, avg S/O=0.25 avg Spam%=0.02 avg Ham%=0.06
  MIME_HTML_MOSTLY:  bad, avg S/O=0.70 avg Spam%=4.40 avg Ham%=1.84
  MIME_HTML_ONLY:  bad, avg S/O=0.72 avg Spam%=31.72 avg Ham%=12.31
  MIME_HTML_ONLY_MULTI:  no hits at all
  MIME_QP_LONG_LINE:  bad, avg S/O=0.59 avg Spam%=13.37 avg Ham%=9.23
  MPART_ALT_DIFF:  bad, avg S/O=0.64 avg Spam%=5.63 avg Ham%=3.14
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.57 avg Spam%=0.22 avg Ham%=0.16
  TRACKER_ID:  bad, avg S/O=0.13 avg Spam%=0.04 avg Ham%=0.25
  TVD_SPACE_RATIO:  bad, avg S/O=0.09 avg Spam%=0.08 avg Ham%=0.78
  WEIRD_QUOTING:  bad, avg S/O=0.21 avg Spam%=0.01 avg Ham%=0.02

not_present (2 rules, 2 bad):

  USER_IN_DKIM_WHITELIST:  no hits at all
  USER_IN_SPF_WHITELIST:  no hits at all