[auto] bad sandbox rules report

HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1
Use of uninitialized value $opts{"rule"} in concatenation (.) or string at masses/rule-qa/list-bad-rules line 181.
demoting : config: invalid head test GMAIL_NOREPLY: From: .*no-reply\@gmail.com at masses/rule-qa/list-bad-rules line 181.
Use of uninitialized value $opts{"rule"} in hash element at masses/rule-qa/list-bad-rules line 183.

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/20_smf.cf (37 rules, 22 bad):

  FSL_ABUSED_WEB_1:  bad, avg S/O=0.64 avg Spam%=0.82 avg Ham%=0.47
  FSL_ABUSED_WEB_3:  bad, avg S/O=0.34 avg Spam%=0.16 avg Ham%=0.31
  FSL_NO_RCVD_1:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.23
  FSL_RCVD_EX_0:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=3.16
  FSL_RCVD_EX_1:  bad, avg S/O=0.27 avg Spam%=13.63 avg Ham%=36.47
  FSL_RCVD_EX_2:  bad, avg S/O=0.78 avg Spam%=75.56 avg Ham%=20.99
  FSL_RCVD_EX_3:  bad, avg S/O=0.54 avg Spam%=7.97 avg Ham%=6.78
  FSL_RCVD_EX_4:  bad, avg S/O=0.14 avg Spam%=1.72 avg Ham%=10.38
  FSL_RCVD_EX_5:  bad, avg S/O=0.03 avg Spam%=0.33 avg Ham%=9.42
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.06 avg Spam%=0.78 avg Ham%=12.80
  FSL_RCVD_TR_1:  bad, avg S/O=0.08 avg Spam%=0.41 avg Ham%=4.72
  FSL_RCVD_TR_2:  no hits of target type
  FSL_RCVD_TR_3:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.04
  FSL_RCVD_TR_4:  no hits of target type
  FSL_RCVD_TR_5:  bad, avg S/O=0.22 avg Spam%=13.28 avg Ham%=47.62
  FSL_RCVD_TR_GT_5:  no hits of target type
  FSL_RCVD_UT_1:  bad, avg S/O=0.27 avg Spam%=13.65 avg Ham%=37.45
  FSL_RCVD_UT_2:  bad, avg S/O=0.79 avg Spam%=75.54 avg Ham%=20.41
  FSL_RCVD_UT_3:  bad, avg S/O=0.55 avg Spam%=7.98 avg Ham%=6.47
  FSL_RCVD_UT_4:  bad, avg S/O=0.14 avg Spam%=1.71 avg Ham%=10.28
  FSL_RCVD_UT_5:  bad, avg S/O=0.03 avg Spam%=0.33 avg Ham%=9.42
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.06 avg Spam%=0.78 avg Ham%=12.76

rulesrc/sandbox/sidney/70_other.cf (2 rules, 1 bad):

  T_SCC_TLD_SITE:  bad, avg S/O=0.77 avg Spam%=0.06 avg Ham%=0.02

rulesrc/sandbox/pds/20_urlshort.cf (30 rules, 13 bad):

  DRUGS_ERECTILE_SHORT_SHORTNER:  no hits at all
  PDS_EMPTYSUBJ_URISHRT:  no hits at all
  PDS_FREEMAIL_REPLYTO_URISHRT:  no hits at all
  PDS_FROM_2_EMAILS_SHRTNER:  no hits at all
  PDS_NO_FULL_NAME_SPOOFED_URL:  no hits at all
  PDS_SHORTFWD_URISHRT_FP:  no hits at all
  PDS_SHORTFWD_URISHRT_QP:  no hits at all
  PDS_SHORT_SPOOFED_URL:  no hits at all
  PDS_TINYSUBJ_URISHRT:  no hits of target type
  PDS_URISHRT_LOCALPART_SUBJ:  no hits at all
  SHORT_SHORTNER:  bad, avg S/O=0.76 avg Spam%=0.02 avg Ham%=0.01
  TONOM_EQ_TOLOC_SHRT_PSHRTNER:  no hits at all
  TONOM_EQ_TOLOC_SHRT_SHRTNER:  no hits at all

rulesrc/sandbox/pds/20_php.cf (15 rules, 4 bad):

  PDS_PHPEXP_BOT:  bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
  PDS_PHP_EVAL:  no hits at all
  PDS_PHP_RUNTIME_FUNC:  no hits at all
  PDS_X_PHP_WP_EXP:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/pds/20_ntld.cf (26 rules, 10 bad):

  BULK_RE_SUSP_NTLD:  no hits of target type
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  OFFER_ONLY_AMERICA:  no hits at all
  PDS_BTC_NTLD:  no hits at all
  PDS_PRO_TLD:  bad, avg S/O=0.41 avg Spam%=0.11 avg Ham%=0.15
  SENT_TO_EMAIL_ADDR:  no hits at all
  SEO_SUSP_NTLD:  no hits at all
  SUSPNTLD_EXPIRATION_EXTORT:  no hits at all
  THIS_IS_ADV_SUSP_NTLD:  no hits at all
  VPS_NO_NTLD:  no hits at all

rulesrc/sandbox/pds/20_helo.cf (6 rules, 1 bad):

  PDS_HP_HELO_NORDNS:  bad, avg S/O=0.65 avg Spam%=0.11 avg Ham%=0.06

rulesrc/sandbox/pds/20_btc.cf (17 rules, 5 bad):

  PDS_BTC_AHACKER:  no hits at all
  PDS_BTC_HACKER:  no hits at all
  PDS_LITECOIN_ID:  bad, avg S/O=0.46 avg Spam%=0.02 avg Ham%=0.02
  PDS_LTC_AHACKER:  no hits at all
  PDS_LTC_HACKER:  no hits at all

rulesrc/sandbox/pds/10_menaces.cf (32 rules, 7 bad):

  PDS_BRAND_SUBJ_NAKED_TO:  bad, avg S/O=0.79 avg Spam%=0.04 avg Ham%=0.01
  PDS_DBL_URL_TNB_RUNON:  bad, avg S/O=0.29 avg Spam%=0.18 avg Ham%=0.42
  PDS_DOUBLE_URL:  bad, avg S/O=0.41 avg Spam%=2.29 avg Ham%=3.31
  PDS_RDNS_DYNAMIC_FP:  bad, avg S/O=0.67 avg Spam%=1.29 avg Ham%=0.62
  PDS_TONAME_EQ_TOLOCAL_SHORT:  bad, avg S/O=0.72 avg Spam%=0.04 avg Ham%=0.01
  PDS_TONAME_EQ_TOLOCAL_VSHORT:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.00
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  no hits of target type

rulesrc/sandbox/mmartinec/20_misc.cf (13 rules, 3 bad):

  FROM_UNBAL1:  no hits at all
  MSGID_NOFQDN1:  bad, avg S/O=0.52 avg Spam%=0.01 avg Ham%=0.01
  MSGID_NOFQDN2:  bad, avg S/O=0.34 avg Spam%=2.01 avg Ham%=3.91

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_doc_test.cf (15 rules, 7 bad):

  FSL_FBOOK_PHISH:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.00
  FSL_HELO_DEVICE:  no hits at all
  FSL_HELO_FAKE:  bad, avg S/O=0.46 avg Spam%=0.10 avg Ham%=0.12
  FSL_HELO_NON_FQDN_1:  bad, avg S/O=0.55 avg Spam%=0.17 avg Ham%=0.14
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  no hits of target type
  FSL_STACKED_TEXT:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/kmcgrail/20_sergio_experimental.cf (6 rules, 5 bad):

  SERGIO_SUBJECT_PORN008:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  SERGIO_SUBJECT_PORN009:  no hits of target type
  SERGIO_SUBJECT_PORN014:  no hits of target type
  SERGIO_SUBJECT_PORN015:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
  SERGIO_SUBJECT_VIAGRA01:  no hits at all

rulesrc/sandbox/kmcgrail/20_rules_to_sandbox.cf (4 rules, 1 bad):

  US_DOLLARS_3:  no hits at all

rulesrc/sandbox/kmcgrail/20_kam.cf (2 rules, 1 bad):

  BILLION_OVERLAP:  no hits at all

rulesrc/sandbox/kmcgrail/20_html_tests.cf (2 rules, 1 bad):

  KAM_HTML_FONT_INVALID:  bad, avg S/O=0.55 avg Spam%=4.65 avg Ham%=3.77

rulesrc/sandbox/kmcgrail/20_freemail.cf (2 rules, 2 bad):

  FREEMAIL_FORGED_FROMDOMAIN:  bad, avg S/O=0.17 avg Spam%=0.75 avg Ham%=3.74
  HEADER_FROM_DIFFERENT_DOMAINS:  bad, avg S/O=0.04 avg Spam%=1.84 avg Ham%=40.64

rulesrc/sandbox/kmcgrail/20_fake_helo_tests.cf (5 rules, 3 bad):

  CK_HELO_DYNAMIC_SPLIT_IP:  bad, avg S/O=0.30 avg Spam%=0.21 avg Ham%=0.47
  CK_HELO_GENERIC:  bad, avg S/O=0.79 avg Spam%=0.05 avg Ham%=0.01
  HELO_MISC_IP:  bad, avg S/O=0.37 avg Spam%=0.81 avg Ham%=1.40

rulesrc/sandbox/kmcgrail/20_bug_7068.cf (2 rules, 2 bad):

  PP_TOO_MUCH_UNICODE02:  no hits at all
  PP_TOO_MUCH_UNICODE05:  no hits at all

rulesrc/sandbox/kmcgrail/20_ac_rules_test.cf (28 rules, 10 bad):

  AC_DIV_BONANZA:  bad, avg S/O=0.60 avg Spam%=0.05 avg Ham%=0.04
  AC_SPAMMY_URI_PATTERNS1:  no hits at all
  AC_SPAMMY_URI_PATTERNS10:  no hits at all
  AC_SPAMMY_URI_PATTERNS11:  no hits at all
  AC_SPAMMY_URI_PATTERNS12:  no hits at all
  AC_SPAMMY_URI_PATTERNS2:  no hits at all
  AC_SPAMMY_URI_PATTERNS3:  no hits at all
  AC_SPAMMY_URI_PATTERNS4:  no hits at all
  AC_SPAMMY_URI_PATTERNS8:  no hits at all
  AC_SPAMMY_URI_PATTERNS9:  no hits at all

rulesrc/sandbox/khopesh/20_s25r.cf (10 rules, 3 bad):

  KHOP_BOTNET_7:  bad, avg S/O=0.33 avg Spam%=1.62 avg Ham%=3.30
  KHOP_BOTNET_9:  bad, avg S/O=0.33 avg Spam%=1.62 avg Ham%=3.30
  S25R_2:  bad, avg S/O=0.20 avg Spam%=0.28 avg Ham%=1.12

rulesrc/sandbox/khopesh/20_rcd_rdns.cf (23 rules, 5 bad):

  RCD_RDNS_DYNAMIC:  bad, avg S/O=0.48 avg Spam%=0.03 avg Ham%=0.04
  RCD_RDNS_DYNAMIC_CLEAN:  bad, avg S/O=0.61 avg Spam%=0.01 avg Ham%=0.01
  RCD_RDNS_DYNAMIC_MESSY:  bad, avg S/O=0.35 avg Spam%=0.02 avg Ham%=0.04
  RCD_RDNS_SERVER:  bad, avg S/O=0.77 avg Spam%=24.86 avg Ham%=83.95
  RCD_RDNS_SERVER_MESSY:  bad, avg S/O=0.74 avg Spam%=30.35 avg Ham%=84.27

rulesrc/sandbox/khopesh/20_neon_overload.cf (4 rules, 3 bad):

  TR_JS_REDIRECTION_0:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00
  TR_JS_REDIRECTION_1:  bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
  TR_JS_REDIRECTION_2:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/khopesh/20_khop_lists.cf (16 rules, 2 bad):

  KHOP_NO_FULL_NAME:  bad, avg S/O=0.59 avg Spam%=12.62 avg Ham%=8.65
  NOT_A_PERSON:  bad, avg S/O=0.43 avg Spam%=89.32 avg Ham%=66.15

rulesrc/sandbox/khopesh/20_khop_general.cf (8 rules, 4 bad):

  DEAR_NOBODY:  bad, avg S/O=0.48 avg Spam%=0.03 avg Ham%=0.03
  FORGED_URL_DOM:  bad, avg S/O=0.60 avg Spam%=0.03 avg Ham%=0.02
  FROM_WWW:  bad, avg S/O=0.42 avg Spam%=0.01 avg Ham%=0.01
  MAY_BE_FORGED:  bad, avg S/O=0.36 avg Spam%=0.01 avg Ham%=0.01

rulesrc/sandbox/khopesh/20_khop_experimental.cf (56 rules, 10 bad):

  KHOP_BIG_TO_CC:  bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%=10.99
  KHOP_FROM_WWW:  bad, avg S/O=0.06 avg Spam%=0.02 avg Ham%=0.24
  REMOTE_IMAGE:  bad, avg S/O=0.63 avg Spam%=2.06 avg Ham%=1.19
  SHORTENED_URL_SRC:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  SHORT_URL:  bad, avg S/O=0.46 avg Spam%=0.63 avg Ham%=0.73
  SUBJ_ALL_CAPS2:  no hits of target type
  SUBJ_ALL_CAPS3:  no hits of target type
  SUBJ_LACKS_WORDS:  bad, avg S/O=0.61 avg Spam%=0.83 avg Ham%=0.53
  URI_HIDDEN:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.53
  URL_SHORTENER:  bad, avg S/O=0.62 avg Spam%=3.64 avg Ham%=2.25

rulesrc/sandbox/kb/70_misc.cf (11 rules, 4 bad):

  KB_RATWARE_OUTLOOK_MID:  no hits at all
  LIVEFILESTORE:  no hits at all
  THEBAT_UNREG:  no hits at all
  THREAD_INDEX_BAD:  bad, avg S/O=0.80 avg Spam%=0.94 avg Ham%=0.24

rulesrc/sandbox/kb/20_header.cf (7 rules, 4 bad):

  FORGED_RELAY_MUA_TO_MX:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.00
  KB_DATE_CONTAINS_TAB:  no hits at all
  KB_FAKED_THE_BAT:  no hits at all
  KB_RATWARE_MSGID:  no hits at all

rulesrc/sandbox/jquinn/20_misc.cf (3 rules, 2 bad):

  EXCUSE_24:  no hits of target type
  USING_VERP:  bad, avg S/O=0.14 avg Spam%=0.49 avg Ham%=3.08

rulesrc/sandbox/jm/70_tt_drugs.cf (8 rules, 2 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_VIAGRA:  no hits at all

rulesrc/sandbox/jm/20_bug_5920.cf (2 rules, 1 bad):

  T_BUG5920_X_IP:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/jm/20_basic.cf (68 rules, 26 bad):

  CTYPE_001C_B:  no hits at all
  CURR_PRICE:  no hits at all
  DYN_RDNS_SHORT_HELO_IMAGE:  no hits of target type
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  HELO_LH_HOME:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  HELO_LOCALHOST:  bad, avg S/O=0.29 avg Spam%=0.05 avg Ham%=0.13
  IMG_CID_PART1:  no hits of target type
  LOTTERY_PH_004470:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  L_SPAM_TOOL_13:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.02
  PART_CID_STOCK:  no hits at all
  PART_CID_STOCK_LESS:  no hits at all
  RCVD_FORGED_WROTE:  no hits at all
  RCVD_MAIL_COM:  no hits at all
  SB_GIF_AND_NO_URIS:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.01
  SHORT_HELO_AND_INLINE_IMAGE:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
  SPAMMY_XMAILER:  no hits at all
  STOCK_IMG_CTYPE:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  STOCK_IMG_HDR_FROM:  no hits at all
  STOCK_IMG_HTML:  no hits at all
  STOCK_IMG_OUTLOOK:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  STOX_BOUND_090909_B:  no hits at all
  STOX_REPLY_TYPE:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.01
  STOX_REPLY_TYPE_WITHOUT_QUOTES:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  TVD_PDF_FINGER01_JO:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/jhardin/40_local_azurephish.cf (1 rules, 1 bad):

  PHISH_AZURE_CLOUDAPP:  no hits at all

rulesrc/sandbox/jhardin/40_local_419replyto.cf (22 rules, 8 bad):

  REPTO_419_FRAUD_AOL_LOOSE:  no hits at all
  REPTO_419_FRAUD_CNS:  no hits at all
  REPTO_419_FRAUD_PM:  no hits at all
  REPTO_419_FRAUD_QQ:  no hits at all
  REPTO_419_FRAUD_YH:  no hits at all
  REPTO_419_FRAUD_YH_LOOSE:  no hits at all
  REPTO_419_FRAUD_YJ:  no hits at all
  REPTO_419_FRAUD_YN:  no hits at all

rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (2 rules, 1 bad):

  URI_DEOBFU_INSTR:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/jhardin/20_thirdparty.cf (3 rules, 3 bad):

  DX_TEXT_01:  no hits of target type
  DX_TEXT_02:  no hits at all
  DX_TEXT_03:  no hits of target type

rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (26 rules, 4 bad):

  FORGED_TBIRD_IMG_SIZE:  no hits at all
  TO_NO_BRKTS_FROM_MSSP:  bad, avg S/O=0.59 avg Spam%=0.86 avg Ham%=0.60
  TO_NO_BRKTS_HTML_IMG:  bad, avg S/O=0.10 avg Spam%=0.04 avg Ham%=0.38
  TO_NO_BRKTS_NORDNS_HTML:  bad, avg S/O=0.46 avg Spam%=0.84 avg Ham%=1.01

rulesrc/sandbox/jhardin/20_postcards.cf (6 rules, 5 bad):

  EXECUTABLE_URI:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  POSTCARD_03:  no hits of target type
  POSTCARD_05:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
  POSTCARD_06:  no hits of target type
  POSTCARD_09:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/jhardin/20_misc_testing.cf (1205 rules, 214 bad):

  ACH_CANCELLED:  no hits of target type
  ACH_CANCELLED_EXE:  no hits at all
  AC_FROM_MANY_DOTS:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  ADMAIL:  no hits of target type
  ADULT_DATING_COMPANY:  no hits at all
  AD_PREFS:  no hits of target type
  ANY_PILL_PRICE:  no hits at all
  APP_DEVELOPMENT_FREEM:  no hits at all
  APP_DEVELOPMENT_NORDNS:  bad, avg S/O=0.66 avg Spam%=0.00 avg Ham%=0.00
  BAT_BDRY_TO_MALF:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.00
  BEBEE_IMG_NOT_RCVD_BB:  no hits at all
  BILL_1618:  no hits of target type
  BITCOIN_BOMB:  no hits of target type
  BITCOIN_OBFU_SUBJ:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
  BITCOIN_ONAN:  no hits at all
  BITCOIN_SPAM_01:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  BITCOIN_SPAM_06:  no hits at all
  BITCOIN_SPAM_08:  no hits of target type
  BITCOIN_SPAM_10:  no hits at all
  BITCOIN_SPAM_11:  no hits at all
  BITCOIN_SPAM_12:  no hits at all
  BITCOIN_WFH_01:  no hits at all
  BITCOIN_YOUR_INFO:  bad, avg S/O=0.79 avg Spam%=0.07 avg Ham%=0.02
  BODY_EMPTY:  bad, avg S/O=0.08 avg Spam%=0.32 avg Ham%=3.69
  BODY_SINGLE_URI:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  BOMB_MONEY:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  CDISP_SZ_MANY:  no hits at all
  COMMENT_GIBBERISH:  no hits at all
  CONTENT_AFTER_HTML:  bad, avg S/O=0.13 avg Spam%=0.01 avg Ham%=0.03
  CTYPE_NULL:  no hits at all
  DATE_DOTS:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  DAY_I_EARNED:  no hits at all
  DETAILS_OF_PRODUCT:  no hits of target type
  DG_SPAMMER_EMAIL_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.09
  DG_SPAMMER_EMAIL_F:  bad, avg S/O=0.36 avg Spam%=0.02 avg Ham%=0.04
  DIRECT_LOW_CONTRAST:  bad, avg S/O=0.26 avg Spam%=1.47 avg Ham%=4.21
  DOC_ATTACH_NO_EXT:  no hits of target type
  DOTGOV_IMAGE:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  DYNAMIC_IMGUR:  bad, avg S/O=0.76 avg Spam%=1.33 avg Ham%=0.41
  ENVFROM_GOOG_TRIX:  no hits at all
  FACEBOOK_IMG_NOT_RCVD_FB:  no hits of target type
  FONT_INVIS_DIRECT:  bad, avg S/O=0.61 avg Spam%=0.01 avg Ham%=0.00
  FONT_INVIS_DOTGOV:  no hits at all
  FONT_INVIS_HTML_NOHTML:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  FONT_INVIS_LONG_LINE:  bad, avg S/O=0.34 avg Spam%=0.05 avg Ham%=0.09
  FONT_INVIS_MSGID:  bad, avg S/O=0.69 avg Spam%=0.06 avg Ham%=0.02
  FREEMAIL_DOC_PDF:  bad, avg S/O=0.70 avg Spam%=0.09 avg Ham%=0.04
  FREEMAIL_DOC_PDF_BCC:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_MANY_TO:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
  FREEMAIL_WFH_01:  no hits at all
  FREEM_FRNUM_UNICD_EMPTY:  no hits at all
  FRNAME_IN_MSG_XPRIO_NO_SUB:  no hits at all
  FROM_LONG_DOM:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.25
  FROM_LONG_DOM_MINFP:  bad, avg S/O=0.15 avg Spam%=0.50 avg Ham%=2.95
  FROM_MISSPACED:  bad, avg S/O=0.46 avg Spam%=0.48 avg Ham%=0.56
  FROM_MISSP_EH_MATCH:  bad, avg S/O=0.46 avg Spam%=0.49 avg Ham%=0.57
  FROM_MULTI_SHORT_IMG:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
  FROM_NUMERIC_TLD:  no hits at all
  FROM_URI:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  FUZZY_ANDROID:  no hits at all
  FUZZY_APPLE:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_BROWSER:  no hits of target type
  FUZZY_BTC_WALLET:  no hits at all
  FUZZY_CLICK_HERE:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.01
  FUZZY_DR_OZ:  no hits at all
  FUZZY_FACEBOOK:  no hits at all
  FUZZY_HARRIS:  no hits of target type
  FUZZY_IMPORTANT:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_MICROSOFT:  no hits at all
  FUZZY_MONERO:  no hits at all
  FUZZY_OPTOUT:  no hits at all
  FUZZY_OVERSTOCK:  no hits at all
  FUZZY_PORN:  no hits at all
  FUZZY_PRIVACY:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_PROMOTION:  no hits at all
  FUZZY_SAVINGS:  no hits at all
  FUZZY_SECURITY:  bad, avg S/O=0.61 avg Spam%=0.01 avg Ham%=0.00
  FUZZY_UNSUBSCRIBE:  no hits at all
  FUZZY_WALLET:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  FUZZY_WELLSFARGO:  no hits at all
  GAPPY_GENITALIA:  no hits at all
  GAPPY_PILLS:  no hits of target type
  GAPPY_SALES_LEADS_FREEM:  no hits at all
  GOOGLE_DOCS_PHISH:  no hits at all
  GOOGLE_DOCS_PHISH_MANY:  no hits at all
  GOOGLE_DOC_SUSP:  no hits of target type
  GOOG_REDIR_FRAUD:  bad, avg S/O=0.73 avg Spam%=0.00 avg Ham%=0.00
  GOOG_REDIR_HTML_ONLY:  bad, avg S/O=0.44 avg Spam%=0.76 avg Ham%=0.96
  GOOG_REDIR_NORDNS:  bad, avg S/O=0.14 avg Spam%=0.16 avg Ham%=0.95
  GOOG_REDIR_SHORT:  no hits of target type
  GOOG_STO_IMG_NOHTML:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.15
  HAS_X_NO_RELAY:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  HDRS_LCASE_IMGONLY:  bad, avg S/O=0.69 avg Spam%=0.01 avg Ham%=0.00
  HDR_CASE_REV_ENC:  no hits of target type
  HDR_CASE_REV_MANY:  bad, avg S/O=0.34 avg Spam%=0.01 avg Ham%=0.02
  HEXHASH_WORD:  bad, avg S/O=0.61 avg Spam%=0.02 avg Ham%=0.01
  HOSTED_IMG_DQ_UNSUB:  no hits at all
  HTML_FONT_TINY_NORDNS:  bad, avg S/O=0.57 avg Spam%=2.24 avg Ham%=1.67
  HTML_OFF_PAGE:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  HTML_SHRT_CMNT_OBFU_MANY:  no hits at all
  HTML_TAG_BALANCE_CENTER:  no hits at all
  HTML_TEXT_INVISIBLE_STYLE:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.15
  JH_SPAMMY_HEADERS:  no hits at all
  JH_SPAMMY_PATTERN01:  no hits at all
  JH_SPAMMY_PATTERN02:  no hits at all
  LARGE_PCT_AFTER_MANY:  no hits at all
  LH_URI_DOM_IN_PATH:  bad, avg S/O=0.38 avg Spam%=0.66 avg Ham%=1.06
  LIST_PARTIAL_SHORT_MSG:  bad, avg S/O=0.44 avg Spam%=0.02 avg Ham%=0.02
  LIST_PRTL_PUMPDUMP:  no hits at all
  LONGLN_LOW_CONTRAST:  no hits at all
  LONG_HEX_URI:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  LONG_IMG_URI:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.07
  MALF_HTML_B64:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
  MANY_HDRS_LCASE:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  MANY_PILL_PRICE:  no hits of target type
  MIXED_FONT_CASE:  no hits of target type
  MONERO_DEADLINE:  no hits at all
  MONERO_EXTORT_01:  no hits at all
  MONERO_MALWARE:  no hits at all
  MONERO_PAY_ME:  no hits at all
  MONEY_12LTRDOM:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.09
  MSGID_DOLLARS_URI_IMG:  no hits at all
  MSMAIL_PRI_ABNORMAL:  no hits at all
  NEWEGG_IMG_NOT_RCVD_NEGG:  no hits at all
  NEW_PRODUCTS:  bad, avg S/O=0.48 avg Spam%=0.06 avg Ham%=0.07
  NORDNS_LOW_CONTRAST:  bad, avg S/O=0.26 avg Spam%=1.15 avg Ham%=3.20
  NOT_SPAM:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  OBFU_DOC_ATTACH:  no hits of target type
  OBFU_GIF_ATTACH:  no hits at all
  OBFU_HTML_ATT_MALW:  no hits at all
  OBFU_JPG_ATTACH:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  OBFU_JVSCR_ESC:  no hits at all
  OBFU_PDF_ATTACH:  bad, avg S/O=0.17 avg Spam%=0.04 avg Ham%=0.22
  OBFU_UNSUB_UL:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  PAYPAL_PHISH_06:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  PAYPAL_PHISH_07:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  PDS_FROM_2_EMAILS:  no hits at all
  PHOTO_EDITING_DIRECT:  no hits at all
  PHOTO_EDITING_FREEM:  no hits at all
  PHP_NOVER_MUA:  no hits at all
  PHP_ORIG_SCRIPT_EVAL:  no hits at all
  PHP_SCRIPT_MUA:  no hits at all
  POSSIBLE_APPLE_PHISH_02:  no hits at all
  POSSIBLE_EBAY_PHISH_02:  no hits at all
  PUMPDUMP:  no hits at all
  PUMPDUMP_MULTI:  no hits at all
  PUMPDUMP_TIP:  no hits at all
  RAND_HEADER_LIST_SPOOF:  no hits of target type
  RAND_HEADER_MANY:  no hits at all
  RATWARE_NO_RDNS:  no hits at all
  RCVD_DBL_DQ:  no hits at all
  RCVD_DOTEDU_SHORT:  no hits at all
  RCVD_DOTEDU_SUSP:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.00
  RDNS_LOCALHOST:  no hits at all
  RDNS_NUM_TLD_ATCHNX:  no hits at all
  RDNS_NUM_TLD_XM:  no hits at all
  READY_TO_SHIP:  bad, avg S/O=0.57 avg Spam%=0.64 avg Ham%=0.48
  REPLYTO_EMPTY:  no hits at all
  RUNON_SHY:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.05
  SCANNED_EXTERNAL:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  SCRIPT_GIBBERISH:  no hits at all
  SHOPIFY_IMG_NOT_RCVD_SFY:  bad, avg S/O=0.17 avg Spam%=0.03 avg Ham%=0.15
  STOCK_TIP:  no hits at all
  STY_INVIS_DIRECT:  no hits at all
  SUBJ_OBFU_PUNCT_FEW:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.12
  SUBJ_OBFU_PUNCT_MANY:  bad, avg S/O=0.29 avg Spam%=0.01 avg Ham%=0.02
  SUSP_UTF8_WORD_MANY:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.00
  SUSP_UTF8_WORD_SUBJ:  no hits at all
  SYSADMIN:  no hits at all
  TAGSTAT_IMG_NOT_RCVD_TGST:  no hits at all
  TARINGANET_IMG_NOT_RCVD_TN:  no hits at all
  TBIRD_SUSP_MIME_BDRY:  no hits at all
  TEQF_USR_IMAGE:  no hits at all
  TEQF_USR_MSGID_HEX:  no hits at all
  TEQF_USR_MSGID_MALF:  no hits at all
  THIS_AD:  bad, avg S/O=0.21 avg Spam%=0.07 avg Ham%=0.28
  TONLINE_FAKE_DKIM:  no hits at all
  TO_TOO_MANY_WFH_01:  no hits at all
  TRANSFORM_LIFE:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.01
  TUMBLR_IMG_NOT_RCVD_TUMB:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  TW_GIBBERISH_MANY:  no hits at all
  UC_GIBBERISH_OBFU:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  UNICODE_OBFU_ZW_MANY:  bad, avg S/O=0.06 avg Spam%=0.02 avg Ham%=0.25
  UNSUB_GOOG_FORM:  no hits at all
  URI_ADOBESPARK:  no hits at all
  URI_DATA:  no hits of target type
  URI_DBL_INDIR:  bad, avg S/O=0.50 avg Spam%=0.09 avg Ham%=0.09
  URI_DOTDOT_LOW_CNTRST:  no hits of target type
  URI_DOTEDU_ENTITY:  no hits at all
  URI_GIBB_NO_PROTO:  no hits of target type
  URI_GOOGLE_PROXY:  bad, avg S/O=0.71 avg Spam%=0.02 avg Ham%=0.01
  URI_HEX_IP:  no hits at all
  URI_HIDDEN_2:  bad, avg S/O=0.09 avg Spam%=0.05 avg Ham%=0.53
  URI_IMG_CWINDOWSNET:  bad, avg S/O=0.39 avg Spam%=0.02 avg Ham%=0.03
  URI_IMG_WP_REDIR:  no hits of target type
  URI_LONG_REPEAT:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  URI_MALWARE_SCMS:  no hits at all
  URI_OBFU_DOM:  no hits at all
  URI_OPTOUT_3LD:  no hits of target type
  URI_OPTOUT_USME:  no hits at all
  URI_TRPL_INDIR:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.03
  URI_TRY_3LD:  bad, avg S/O=0.40 avg Spam%=0.08 avg Ham%=0.12
  URI_TRY_USME:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  USB_DRIVES:  no hits at all
  VISTA_COST:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  WALMART_IMG_NOT_RCVD_WAL:  no hits at all
  WIKI_IMG:  bad, avg S/O=0.58 avg Spam%=0.60 avg Ham%=0.43
  WORD_INVIS:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  XM_LIGHT_HEAVY:  no hits at all
  XM_ONE_WORD:  bad, avg S/O=0.73 avg Spam%=0.83 avg Ham%=0.31
  XM_PHPMAILER_FORGED:  no hits at all
  XPRIO_SHORT_SUBJ:  no hits at all
  ZW_OBFU_BITCOIN:  no hits of target type
  ZW_OBFU_FROMTOSUBJ:  no hits at all

rulesrc/sandbox/jhardin/20_lotsa_money.cf (160 rules, 7 bad):

  LOTS_OF_MONEY:  bad, avg S/O=0.56 avg Spam%=3.20 avg Ham%=2.49
  LOTTO_AGENT_FM:  no hits at all
  LOTTO_URI:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  MONEY_BARRISTER:  no hits at all
  MONEY_PERCENT:  bad, avg S/O=0.60 avg Spam%=0.22 avg Ham%=0.14
  WON_NBDY_ATTACH:  no hits at all
  YOU_INHERIT:  no hits at all

rulesrc/sandbox/jhardin/20_fillform.cf (19 rules, 4 bad):

  FILL_THIS_FORM:  bad, avg S/O=0.16 avg Spam%=0.22 avg Ham%=1.17
  FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.64 avg Spam%=0.08 avg Ham%=0.04
  FILL_THIS_FORM_LOAN:  no hits at all
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.36 avg Spam%=0.35 avg Ham%=0.63

rulesrc/sandbox/jhardin/20_MIME_no_text.cf (7 rules, 1 bad):

  MIME_PHP_NO_TEXT:  no hits at all

rulesrc/sandbox/jhardin/20_MIME_in_body.cf (3 rules, 1 bad):

  MIME_MALF:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/hege/20_hk.cf (66 rules, 7 bad):

  HK_GOLDDUST:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
  HK_NAME_FM_MR_MRS:  no hits at all
  HK_NAME_FROM:  no hits at all
  HK_SPAMMY_FILENAME:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  HK_WIN:  no hits at all
  URI_IN_URI_10:  no hits at all
  URI_IN_URI_5:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03

rulesrc/sandbox/gbechis/20_misc.cf (20 rules, 6 bad):

  GB_CUSTOM_HTM_URI:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.10
  GB_FAKE_RF:  bad, avg S/O=0.78 avg Spam%=0.61 avg Ham%=0.18
  GB_FAKE_RF_SHORT:  no hits of target type
  GB_GOOGLE_OBFUR:  no hits at all
  GB_SUBJ_ICONS:  bad, avg S/O=0.65 avg Spam%=4.81 avg Ham%=2.59
  SENDINBLUE_REDIR:  bad, avg S/O=0.42 avg Spam%=0.06 avg Ham%=0.08

rulesrc/sandbox/gbechis/20_freemail.cf (6 rules, 1 bad):

  GB_WEBFORM:  no hits at all

rulesrc/sandbox/gbechis/20_btc.cf (18 rules, 1 bad):

  GB_BITCOIN_CP:  no hits at all

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (61 rules, 4 bad):

  FAKE_REPLY_A1:  no hits of target type
  FAKE_REPLY_B:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.01
  TEST_REPLY_B:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.21
  TEST_REPLY_C:  no hits of target type

rulesrc/sandbox/fkento/20_phone_numbers.cf (9 rules, 1 bad):

  MXG_PHONE_OBFU_ONLY:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/fkento/20_paypal_abuse.cf (9 rules, 1 bad):

  MXG_PAYPAL_ABUSE:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/fkento/20_misc.cf (16 rules, 3 bad):

  MXG_GOOGLE_FOREIGN_REDIR:  bad, avg S/O=0.06 avg Spam%=0.03 avg Ham%=0.53
  MXG_LOWER_HDR_SPAM:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  MXG_SPOOFED_DOCUSIGN:  bad, avg S/O=0.60 avg Spam%=0.08 avg Ham%=0.05

rulesrc/sandbox/felicity/70_phishing.cf (57 rules, 7 bad):

  HTTPS_HTTP_MISMATCH:  bad, avg S/O=0.74 avg Spam%=0.53 avg Ham%=0.18
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.58 avg Spam%=0.20 avg Ham%=0.14
  TVD_PH_BODY_META:  bad, avg S/O=0.74 avg Spam%=0.07 avg Ham%=0.02
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.79 avg Spam%=0.82 avg Ham%=0.22
  TVD_PH_FR5:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  TVD_PH_REC:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  TVD_PH_SEC:  bad, avg S/O=0.80 avg Spam%=0.20 avg Ham%=0.05

rulesrc/sandbox/felicity/70_other.cf (69 rules, 54 bad):

  BASE64_LENGTH_78_79:  no hits of target type
  DRUGS_HDIA:  no hits at all
  FUZZY_MERIDIA:  no hits at all
  FUZZY_SPRM:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  HEADER_COUNT_SUBJECT:  no hits at all
  NULL_IN_BODY:  no hits of target type
  RCVD_BAD_ID:  no hits at all
  TVD_ACT_193:  no hits at all
  TVD_APPROVED:  bad, avg S/O=0.30 avg Spam%=0.01 avg Ham%=0.01
  TVD_APP_LOAN:  no hits of target type
  TVD_BODY_END_STAR:  no hits of target type
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_ENVFROM_APOST:  no hits at all
  TVD_FINGER_02:  no hits of target type
  TVD_FLOAT_GENERAL:  no hits at all
  TVD_FUZZY_DEGREE:  no hits at all
  TVD_FUZZY_FINANCE:  no hits at all
  TVD_FUZZY_FIXED_RATE:  no hits at all
  TVD_FUZZY_MICROCAP:  no hits at all
  TVD_FUZZY_PHARMACEUTICAL:  no hits at all
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.13
  TVD_FUZZY_SECURITIES:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  TVD_FUZZY_SYMBOL:  no hits at all
  TVD_FW_GRAPHIC_ID2:  no hits at all
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.35 avg Spam%=0.06 avg Ham%=0.11
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.35 avg Spam%=0.06 avg Ham%=0.11
  TVD_LINK_SAVE:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.44 avg Spam%=0.01 avg Ham%=0.01
  TVD_PDF_FINGER01:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  TVD_QUAL_MEDS:  no hits at all
  TVD_RATWARE_CB:  no hits at all
  TVD_RATWARE_CB_2:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.62 avg Spam%=0.50 avg Ham%=0.31
  TVD_RATWARE_MSGID_02:  no hits at all
  TVD_RCVD_IP:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.03
  TVD_RCVD_IP4:  no hits of target type
  TVD_RCVD_SINGLE:  no hits of target type
  TVD_RCVD_SPACE_BRACKET:  no hits at all
  TVD_SECTION:  no hits at all
  TVD_SILLY_URI_OBFU:  no hits at all
  TVD_SPACED_SUBJECT_WORD3:  no hits at all
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.23 avg Spam%=0.03 avg Ham%=0.11
  TVD_STOCK1:  no hits at all
  TVD_SUBJ_FINGER_03:  no hits at all
  TVD_SUBJ_OWE:  no hits at all
  TVD_SUBJ_WIPE_DEBT:  no hits of target type
  TVD_VISIT_PHARMA:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.02
  TVD_VIS_HIDDEN:  no hits at all
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.27 avg Spam%=0.03 avg Ham%=0.08
  T_TVD_PCT_OFF2:  bad, avg S/O=0.07 avg Spam%=0.06 avg Ham%=0.80
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.03 avg Spam%=0.07 avg Ham%=2.51
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.09 avg Spam%=0.27 avg Ham%=2.91
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.09 avg Spam%=0.27 avg Ham%=2.91

rulesrc/sandbox/fanf/30_text.cf (2 rules, 2 bad):

  LONG_TERM_PRICE:  no hits at all
  SHORT_TERM_PRICE:  no hits at all

rulesrc/sandbox/duncf/20_header.cf (3 rules, 1 bad):

  STUDDLYCAPS:  bad, avg S/O=0.51 avg Spam%=0.11 avg Ham%=0.11

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 2 bad):

  BANKING_LAWS:  no hits at all
  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (71 rules, 12 bad):

  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_FIX_MY_URI:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.35 avg Spam%=0.57 avg Ham%=1.08
  DOS_RCVD_IP_TWICE_B:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.11
  DOS_RCVD_IP_TWICE_C:  no hits at all
  DOS_STOCK_BAT:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
  X_MAILER_CME_6543_MSN:  no hits at all

rulesrc/sandbox/davej/20_non_ascii.cf (4 rules, 1 bad):

  CTE_8BIT_MISMATCH:  bad, avg S/O=0.76 avg Spam%=0.10 avg Ham%=0.03

rulesrc/sandbox/davej/20_bug_7550.cf (1 rules, 1 bad):

  VULN_PHPMAILER:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/billcole/80_test.cf (34 rules, 9 bad):

  HTML_BADATTR:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.00
  SCC_HB_ANY:  no hits of target type
  SCC_ISEMM_LID_1:  no hits at all
  SCC_SPAMMER_ADDR_1:  no hits of target type
  SCC_SPAMMER_ADDR_2:  no hits of target type
  SCC_SPECIAL_GUID:  no hits at all
  SCC_THREE_WORD_MONTY:  no hits of target type
  T_SCC_EBIKE:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.02
  T_SCC_URL_CLOUDINARY:  bad, avg S/O=0.44 avg Spam%=0.04 avg Ham%=0.05

rulesrc/sandbox/billcole/24_mixed_es.cf (3 rules, 1 bad):

  MIXED_ES:  bad, avg S/O=0.68 avg Spam%=0.04 avg Ham%=0.02

rulesrc/sandbox/billcole/23_bug_6780.cf (4 rules, 1 bad):

  T_EMPTY_FROM_OR_TO_OR_CC:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.09

rulesrc/sandbox/billcole/21_bug_7219.cf (8 rules, 2 bad):

  SCC_BODY_TEXT_LINE:  bad, avg S/O=0.52 avg Spam%=93.40 avg Ham%=99.67
  SCC_EMPTY_BODY:  bad, avg S/O=0.05 avg Spam%=0.33 avg Ham%=6.60

rulesrc/sandbox/axb/20_xmailer.cf (7 rules, 1 bad):

  AXB_XMAILER_MIMEOLE_OL_1ECD5:  no hits at all

rulesrc/sandbox/axb/20_axb_misc.cf (5 rules, 2 bad):

  AXB_XM_FORGED_OL2600:  no hits at all
  AXB_X_OUTLOOKPROT_ENVSDR:  no hits of target type

rules/72_active.cf (60 rules, 4 bad):

  CTYPE_8SPACE_GIF:  no hits at all
  HK_CTE_RAW:  no hits at all
  OBFU_TEXT_ATTACH:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  SENDGRID_REDIR:  no hits at all

rules/25_replace.cf (29 rules, 26 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_BILLION:  no hits at all
  FUZZY_CPILL:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  FUZZY_GUARANTEE:  no hits at all
  FUZZY_MEDICATION:  no hits at all
  FUZZY_MILLION:  no hits of target type
  FUZZY_MONEY:  no hits at all
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OBLIGATION:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_PRESCRIPT:  no hits at all
  FUZZY_PRICES:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_REFINANCE:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  no hits at all
  FUZZY_VPILL:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_XPILL:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  SUBJECT_FUZZY_CHEAP:  no hits at all
  SUBJECT_FUZZY_MEDS:  no hits at all
  SUBJECT_FUZZY_PENIS:  no hits at all
  SUBJECT_FUZZY_TION:  no hits at all
  SUBJECT_FUZZY_VPILL:  no hits at all

rules/20_vbounce.cf (176 rules, 4 bad):

  BOUNCE_MESSAGE:  no hits at all
  CHALLENGE_RESPONSE:  no hits at all
  OOOBOUNCE_MESSAGE:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  VBOUNCE_MESSAGE:  no hits of target type

rules/20_uri_tests.cf (18 rules, 12 bad):

  HTTP_77:  no hits at all
  HTTP_EXCESSIVE_ESCAPES:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
  NUMERIC_HTTP_ADDR:  no hits at all
  SPOOF_COM2COM:  no hits at all
  SPOOF_COM2OTH:  no hits at all
  SPOOF_NET2COM:  no hits at all
  URI_HEX:  bad, avg S/O=0.37 avg Spam%=0.29 avg Ham%=0.49
  URI_NO_WWW_BIZ_CGI:  no hits at all
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.41 avg Spam%=0.06 avg Ham%=0.09
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (100 rules, 23 bad):

  FORGED_IMS_HTML:  no hits at all
  FORGED_IMS_TAGS:  no hits at all
  FORGED_MUA_IMS:  no hits at all
  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_QUALCOMM_TAGS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  HEADER_SPAM:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  RATWARE_EFROM:  no hits of target type
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_MS_HASH:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_RCVD_PF:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  REPTO_QUOTE_AOL:  no hits at all
  REPTO_QUOTE_IMS:  no hits at all
  REPTO_QUOTE_MSN:  no hits at all
  REPTO_QUOTE_QUALCOMM:  no hits at all
  REPTO_QUOTE_YAHOO:  no hits of target type
  X_MESSAGE_INFO:  no hits at all

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (45 rules, 30 bad):

  BAD_CREDIT:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  BANG_GUAR:  bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.03
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00
  BODY_ENHANCEMENT:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  BODY_ENHANCEMENT2:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
  DIET_1:  bad, avg S/O=0.29 avg Spam%=0.46 avg Ham%=1.12
  EM_ROLEX:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  EXCUSE_4:  no hits of target type
  EXCUSE_REMOVE:  no hits of target type
  FIN_FREE:  bad, avg S/O=0.76 avg Spam%=0.07 avg Ham%=0.02
  FORWARD_LOOKING:  no hits at all
  GUARANTEED_100_PERCENT:  no hits of target type
  INVESTMENT_ADVICE:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
  JOIN_MILLIONS:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.32
  LOW_PRICE:  bad, avg S/O=0.05 avg Spam%=0.03 avg Ham%=0.57
  MONEY_BACK:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.04
  MORE_SEX:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits of target type
  OBSCURED_EMAIL:  no hits at all
  ONE_TIME:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  REFINANCE_YOUR_HOME:  no hits at all
  REMOVE_BEFORE_LINK:  bad, avg S/O=0.65 avg Spam%=0.06 avg Ham%=0.03
  REPLICA_WATCH:  no hits at all
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits at all
  STRONG_BUY:  no hits at all

rules/20_meta_tests.cf (19 rules, 4 bad):

  EMPTY_MESSAGE:  bad, avg S/O=0.05 avg Spam%=0.32 avg Ham%=6.52
  FORGED_MUA_MOZILLA:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.02
  NO_HEADERS_MESSAGE:  no hits at all
  PERCENT_RANDOM:  no hits of target type

rules/20_imageinfo.cf (17 rules, 4 bad):

  DC_GIF_UNO_LARGO:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  DC_IMAGE_SPAM_HTML:  no hits of target type
  DC_IMAGE_SPAM_TEXT:  no hits of target type
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.70 avg Spam%=0.08 avg Ham%=0.03

rules/20_html_tests.cf (69 rules, 33 bad):

  HIDE_WIN_STATUS:  no hits at all
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
  HTML_COMMENT_SHORT:  no hits at all
  HTML_FONT_LOW_CONTRAST:  bad, avg S/O=0.70 avg Spam%=12.98 avg Ham%=5.66
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.62 avg Spam%=95.48 avg Ham%=59.57
  HTML_FONT_SIZE_LARGE:  no hits at all
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  no hits at all
  HTML_IMAGE_ONLY_12:  bad, avg S/O=0.73 avg Spam%=0.51 avg Ham%=0.19
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.35 avg Spam%=2.38 avg Ham%=4.33
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.34 avg Spam%=1.28 avg Ham%=2.45
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.34 avg Spam%=0.58 avg Ham%=1.13
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.34 avg Spam%=0.50 avg Ham%=0.99
  HTML_MESSAGE:  bad, avg S/O=0.62 avg Spam%=95.48 avg Ham%=59.57
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.71 avg Spam%=2.34 avg Ham%=0.96
  HTML_MISSING_CTYPE:  no hits at all
  HTML_NONELEMENT_30_40:  no hits at all
  HTML_NONELEMENT_40_50:  no hits at all
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.22 avg Spam%=0.61 avg Ham%=2.21
  HTML_OBFUSCATE_30_40:  no hits at all
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.56 avg Spam%=4.13 avg Ham%=3.20
  HTML_TAG_BALANCE_HEAD:  bad, avg S/O=0.77 avg Spam%=0.06 avg Ham%=0.02
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits at all

rules/20_head_tests.cf (160 rules, 54 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.44 avg Spam%=0.15 avg Ham%=0.19
  CONFIRMED_FORGED:  no hits at all
  DATE_IN_FUTURE_24_48:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  DATE_IN_FUTURE_96_XX:  no hits at all
  DATE_IN_PAST_96_XX:  bad, avg S/O=0.25 avg Spam%=0.05 avg Ham%=0.14
  DATE_SPAMWARE_Y2K:  no hits at all
  ENGLISH_UCE_SUBJECT:  no hits at all
  FAKE_OUTBLAZE_RCVD:  no hits at all
  FORGED_HOTMAIL_RCVD2:  bad, avg S/O=0.71 avg Spam%=0.03 avg Ham%=0.01
  FORGED_MSGID_AOL:  no hits at all
  FORGED_MSGID_EXCITE:  no hits at all
  FORGED_MSGID_HOTMAIL:  no hits at all
  FORGED_MSGID_MSN:  no hits at all
  FORGED_MSGID_YAHOO:  no hits of target type
  FORGED_TELESP_RCVD:  no hits at all
  FROM_BLANK_NAME:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  FROM_EXCESS_BASE64:  bad, avg S/O=0.59 avg Spam%=0.31 avg Ham%=0.21
  FROM_ILLEGAL_CHARS:  no hits at all
  FROM_LOCAL_DIGITS:  bad, avg S/O=0.74 avg Spam%=0.19 avg Ham%=0.07
  FROM_LOCAL_HEX:  no hits at all
  GAPPY_SUBJECT:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  HEADER_COUNT_CTYPE:  no hits at all
  HEAD_ILLEGAL_CHARS:  no hits at all
  INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  no hits at all
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  MIME_BOUND_MANY_HEX:  no hits at all
  MISSING_MIMEOLE:  bad, avg S/O=0.13 avg Spam%=0.01 avg Ham%=0.09
  MISSING_SUBJECT:  bad, avg S/O=0.78 avg Spam%=0.07 avg Ham%=0.02
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.74 avg Spam%=0.26 avg Ham%=0.09
  MSGID_SPAM_LETTERS:  no hits at all
  MSGID_YAHOO_CAPS:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  PLING_QUERY:  bad, avg S/O=0.24 avg Spam%=0.12 avg Ham%=0.37
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.15 avg Spam%=0.05 avg Ham%=0.28
  RCVD_FAKE_HELO_DOTCOM:  bad, avg S/O=0.73 avg Spam%=0.00 avg Ham%=0.00
  SORTED_RECIPS:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.13
  SUBJ_ALL_CAPS:  bad, avg S/O=0.71 avg Spam%=1.06 avg Ham%=0.42
  SUBJ_AS_SEEN:  no hits of target type
  SUBJ_BUY:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  SUBJ_DOLLARS:  bad, avg S/O=0.19 avg Spam%=0.06 avg Ham%=0.26
  SUBJ_YOUR_FAMILY:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
  SUSPICIOUS_RECIPS:  bad, avg S/O=0.71 avg Spam%=0.02 avg Ham%=0.01
  TO_MALFORMED:  bad, avg S/O=0.45 avg Spam%=0.08 avg Ham%=0.10
  UNRESOLVED_TEMPLATE:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
  WITH_LC_SMTP:  no hits at all
  X_IP:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  X_PRIORITY_CC:  no hits at all

rules/20_freemail.cf (12 rules, 3 bad):

  FREEMAIL_ENVFROM_END_DIGIT:  bad, avg S/O=0.75 avg Spam%=0.14 avg Ham%=0.05
  FREEMAIL_FROM:  bad, avg S/O=0.45 avg Spam%=3.43 avg Ham%=4.18
  FREEMAIL_REPLY:  bad, avg S/O=0.69 avg Spam%=0.04 avg Ham%=0.02

rules/20_fake_helo_tests.cf (19 rules, 8 bad):

  HELO_DYNAMIC_CHELLO_NL:  no hits at all
  HELO_DYNAMIC_DHCP:  bad, avg S/O=0.51 avg Spam%=0.02 avg Ham%=0.02
  HELO_DYNAMIC_DIALIN:  no hits at all
  HELO_DYNAMIC_HOME_NL:  no hits at all
  HELO_DYNAMIC_IPADDR:  bad, avg S/O=0.23 avg Spam%=0.04 avg Ham%=0.15
  HELO_DYNAMIC_ROGERS:  no hits at all
  HELO_DYNAMIC_SPLIT_IP:  bad, avg S/O=0.64 avg Spam%=0.01 avg Ham%=0.01
  HELO_STATIC_HOST:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02

rules/20_dynrdns.cf (36 rules, 2 bad):

  RDNS_DYNAMIC:  bad, avg S/O=0.67 avg Spam%=1.29 avg Ham%=0.64
  RDNS_NONE:  bad, avg S/O=0.33 avg Spam%=10.15 avg Ham%=20.69

rules/20_drugs.cf (84 rules, 17 bad):

  DRUGS_ANXIETY:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
  DRUGS_ANXIETY_EREC:  no hits at all
  DRUGS_ANXIETY_OBFU:  no hits at all
  DRUGS_DIET:  no hits at all
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_MANYKINDS:  no hits at all
  DRUGS_MUSCLE:  no hits at all
  DRUGS_SLEEP_EREC:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_DOSAGE:  no hits at all
  DRUG_ED_CAPS:  no hits at all
  DRUG_ED_GENERIC:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  ONLINE_PHARMACY:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
  SUBJECT_DRUG_GAP_S:  no hits at all
  SUBJECT_DRUG_GAP_X:  no hits at all
  VIA_GAP_GRA:  no hits at all

rules/20_body_tests.cf (30 rules, 15 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  HTTPS_IP_MISMATCH:  no hits at all
  MIMEPART_LIMIT_EXCEEDED:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_TEXT:  bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.05
  MIME_HTML_MOSTLY:  bad, avg S/O=0.14 avg Spam%=0.31 avg Ham%=1.99
  MIME_HTML_ONLY_MULTI:  no hits at all
  MIME_QP_LONG_LINE:  bad, avg S/O=0.21 avg Spam%=2.89 avg Ham%=11.05
  MISSING_MIME_HB_SEP:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
  MPART_ALT_DIFF:  bad, avg S/O=0.27 avg Spam%=0.93 avg Ham%=2.49
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.42 avg Spam%=0.24 avg Ham%=0.33
  TRACKER_ID:  bad, avg S/O=0.36 avg Spam%=0.04 avg Ham%=0.08
  TVD_SPACE_RATIO:  bad, avg S/O=0.06 avg Spam%=0.05 avg Ham%=0.78
  WEIRD_QUOTING:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.02

not_present (2 rules, 2 bad):

  USER_IN_DKIM_WHITELIST:  no hits at all
  USER_IN_SPF_WHITELIST:  no hits at all