[auto] bad sandbox rules report

HTTP get: https://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: https://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/smf/30_smf_nontest.cf (4 rules, 1 bad):

  FSL_PHP_EXPLOIT_41:  no hits of target type

rulesrc/sandbox/smf/20_smf.cf (39 rules, 18 bad):

  FSL_ABUSED_WEB_3:  bad, avg S/O=0.63 avg Spam%=0.75 avg Ham%=0.44
  FSL_NO_RCVD_1:  bad, avg S/O=0.02 avg Spam%=0.03 avg Ham%=1.90
  FSL_RCVD_EX_0:  bad, avg S/O=0.01 avg Spam%=0.03 avg Ham%=5.64
  FSL_RCVD_EX_1:  bad, avg S/O=0.75 avg Spam%=32.06 avg Ham%=10.46
  FSL_RCVD_EX_3:  bad, avg S/O=0.62 avg Spam%=13.74 avg Ham%=8.47
  FSL_RCVD_EX_4:  bad, avg S/O=0.11 avg Spam%=3.17 avg Ham%=24.57
  FSL_RCVD_EX_5:  bad, avg S/O=0.02 avg Spam%=0.49 avg Ham%=19.39
  FSL_RCVD_EX_GT_5:  bad, avg S/O=0.02 avg Spam%=0.53 avg Ham%=23.94
  FSL_RCVD_TR_2:  no hits of target type
  FSL_RCVD_TR_3:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.05
  FSL_RCVD_TR_4:  no hits of target type
  FSL_RCVD_TR_5:  no hits of target type
  FSL_RCVD_UT_1:  bad, avg S/O=0.74 avg Spam%=32.06 avg Ham%=11.48
  FSL_RCVD_UT_3:  bad, avg S/O=0.63 avg Spam%=13.74 avg Ham%=8.01
  FSL_RCVD_UT_4:  bad, avg S/O=0.11 avg Spam%=3.17 avg Ham%=24.47
  FSL_RCVD_UT_5:  bad, avg S/O=0.02 avg Spam%=0.49 avg Ham%=19.38
  FSL_RCVD_UT_GT_5:  bad, avg S/O=0.02 avg Spam%=0.53 avg Ham%=23.89
  FSL_UNDISCLOSED_RCPTS:  bad, avg S/O=0.68 avg Spam%=0.22 avg Ham%=0.10

rulesrc/sandbox/sidney/70_other.cf (2 rules, 1 bad):

  T_SCC_TLD_SITE:  bad, avg S/O=0.59 avg Spam%=0.04 avg Ham%=0.02

rulesrc/sandbox/pds/20_urlshort.cf (28 rules, 14 bad):

  DRUGS_ERECTILE_SHORT_SHORTNER:  no hits at all
  PDS_EMPTYSUBJ_URISHRT:  no hits at all
  PDS_FREEMAIL_REPLYTO_URISHRT:  no hits at all
  PDS_FROM_2_EMAILS_SHRTNER:  no hits at all
  PDS_SHORTFWD_URISHRT:  no hits at all
  PDS_SHORTFWD_URISHRT_FP:  no hits of target type
  PDS_SHORTFWD_URISHRT_QP:  no hits of target type
  PDS_SHORT_SPOOFED_URL:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  PDS_TINYSUBJ_URISHRT:  no hits of target type
  PDS_URISHRT_LOCALPART_SUBJ:  no hits at all
  SHORT_SHORTNER:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.01
  TONOM_EQ_TOLOC_SHRT_PSHRTNER:  no hits at all
  TONOM_EQ_TOLOC_SHRT_SHRTNER:  no hits at all
  XPRIO_URL_SHORTNER:  no hits at all

rulesrc/sandbox/pds/20_php.cf (14 rules, 3 bad):

  PDS_PHPEXP_BOT:  no hits at all
  PDS_PHP_EVAL:  no hits at all
  PDS_PHP_RUNTIME_FUNC:  no hits at all

rulesrc/sandbox/pds/20_ntld.cf (25 rules, 8 bad):

  BULK_RE_SUSP_NTLD:  no hits of target type
  GOOGLE_DRIVE_REPLY_BAD_NTLD:  no hits at all
  OFFER_ONLY_AMERICA:  no hits at all
  PDS_BTC_NTLD:  no hits at all
  PDS_PRO_TLD:  no hits at all
  SENT_TO_EMAIL_ADDR:  no hits at all
  SUSPNTLD_EXPIRATION_EXTORT:  no hits at all
  VPS_NO_NTLD:  no hits at all

rulesrc/sandbox/pds/20_helo.cf (6 rules, 1 bad):

  PDS_HP_HELO_NORDNS:  bad, avg S/O=0.72 avg Spam%=0.05 avg Ham%=0.02

rulesrc/sandbox/pds/20_btc.cf (17 rules, 6 bad):

  PDS_BTC_AHACKER:  no hits at all
  PDS_BTC_HACKER:  no hits at all
  PDS_LITECOIN_ID:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.03
  PDS_LTC_AHACKER:  no hits at all
  PDS_LTC_HACKER:  no hits at all
  PDS_LTC_HUSH:  no hits of target type

rulesrc/sandbox/pds/10_menaces.cf (34 rules, 8 bad):

  FROM_2_EMAILS_SHORT:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  PDS_DBL_URL_ILLEGAL_CHARS:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  PDS_DBL_URL_LINKBAIT:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  PDS_DOUBLE_URL:  bad, avg S/O=0.32 avg Spam%=0.96 avg Ham%=2.08
  PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE:  no hits at all
  PDS_TONAME_EQ_TOLOCAL_SHORT:  bad, avg S/O=0.68 avg Spam%=0.05 avg Ham%=0.02
  PDS_TONAME_EQ_TOLOCAL_VSHORT:  bad, avg S/O=0.69 avg Spam%=0.01 avg Ham%=0.00
  PDS_URI_HIDDEN_HELO_NO_DOMAIN:  bad, avg S/O=0.69 avg Spam%=0.11 avg Ham%=0.05

rulesrc/sandbox/mmartinec/20_rpvalid.cf (2 rules, 1 bad):

  RP_MATCHES_RCVD:  bad, avg S/O=0.44 avg Spam%=72.64 avg Ham%=58.00

rulesrc/sandbox/mmartinec/20_misc.cf (13 rules, 5 bad):

  FROM_UNBAL1:  no hits at all
  FROM_UNBAL2:  no hits at all
  LONGLINE:  bad, avg S/O=0.37 avg Spam%=1.03 avg Ham%=1.76
  MSGID_NOFQDN1:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
  MSGID_NOFQDN2:  bad, avg S/O=0.25 avg Spam%=2.39 avg Ham%=7.22

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_doc_test.cf (15 rules, 5 bad):

  FSL_FBOOK_PHISH:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.01
  FSL_HELO_DEVICE:  no hits at all
  FSL_HELO_FAKE:  bad, avg S/O=0.21 avg Spam%=0.09 avg Ham%=0.35
  FSL_INTERIA_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.17

rulesrc/sandbox/kmcgrail/20_sergio_experimental.cf (6 rules, 5 bad):

  SERGIO_SUBJECT_PORN008:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  SERGIO_SUBJECT_PORN009:  no hits of target type
  SERGIO_SUBJECT_PORN014:  no hits of target type
  SERGIO_SUBJECT_PORN015:  no hits of target type
  SERGIO_SUBJECT_VIAGRA01:  no hits of target type

rulesrc/sandbox/kmcgrail/20_rules_to_sandbox.cf (4 rules, 1 bad):

  US_DOLLARS_3:  no hits at all

rulesrc/sandbox/kmcgrail/20_mailing_list.cf (1 rules, 1 bad):

  AC_HTML_NONSENSE_TAGS:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/kmcgrail/20_kam.cf (2 rules, 1 bad):

  BILLION_OVERLAP:  no hits at all

rulesrc/sandbox/kmcgrail/20_html_tests.cf (2 rules, 1 bad):

  KAM_HTML_FONT_INVALID:  bad, avg S/O=0.53 avg Spam%=1.74 avg Ham%=1.55

rulesrc/sandbox/kmcgrail/20_freemail.cf (2 rules, 2 bad):

  FREEMAIL_FORGED_FROMDOMAIN:  bad, avg S/O=0.17 avg Spam%=1.99 avg Ham%=9.78
  HEADER_FROM_DIFFERENT_DOMAINS:  bad, avg S/O=0.46 avg Spam%=57.34 avg Ham%=66.88

rulesrc/sandbox/kmcgrail/20_demoted_tests.cf (1 rules, 1 bad):

  MSGID_MULTIPLE_AT:  bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.01

rulesrc/sandbox/kmcgrail/20_darxus_experimental.cf (2 rules, 1 bad):

  SPOOFED_URL_HOST:  bad, avg S/O=0.48 avg Spam%=0.12 avg Ham%=0.13

rulesrc/sandbox/kmcgrail/20_bug_7068.cf (2 rules, 2 bad):

  PP_TOO_MUCH_UNICODE02:  no hits at all
  PP_TOO_MUCH_UNICODE05:  no hits at all

rulesrc/sandbox/kmcgrail/20_bug_7063.cf (1 rules, 1 bad):

  PP_MIME_FAKE_ASCII_TEXT:  bad, avg S/O=0.24 avg Spam%=0.18 avg Ham%=0.57

rulesrc/sandbox/kmcgrail/20_ac_rules_test.cf (28 rules, 9 bad):

  AC_DIV_BONANZA:  bad, avg S/O=0.27 avg Spam%=0.02 avg Ham%=0.05
  AC_SPAMMY_URI_PATTERNS1:  no hits at all
  AC_SPAMMY_URI_PATTERNS10:  no hits at all
  AC_SPAMMY_URI_PATTERNS11:  no hits at all
  AC_SPAMMY_URI_PATTERNS12:  no hits at all
  AC_SPAMMY_URI_PATTERNS2:  no hits at all
  AC_SPAMMY_URI_PATTERNS3:  no hits at all
  AC_SPAMMY_URI_PATTERNS4:  no hits at all
  AC_SPAMMY_URI_PATTERNS9:  no hits at all

rulesrc/sandbox/khopesh/20_s25r.cf (10 rules, 6 bad):

  KHOP_BOTNET_UNCLEAN:  bad, avg S/O=0.72 avg Spam%=9.07 avg Ham%=3.53
  S25R:  bad, avg S/O=0.62 avg Spam%=12.32 avg Ham%=7.42
  S25R_1:  bad, avg S/O=0.22 avg Spam%=0.66 avg Ham%=2.35
  S25R_2:  bad, avg S/O=0.49 avg Spam%=0.59 avg Ham%=0.63
  S25R_3:  bad, avg S/O=0.10 avg Spam%=0.18 avg Ham%=1.55
  S25R_5:  bad, avg S/O=0.28 avg Spam%=0.05 avg Ham%=0.14

rulesrc/sandbox/khopesh/20_rcd_rdns.cf (24 rules, 2 bad):

  RCD_RDNS_SERVER:  bad, avg S/O=0.32 avg Spam%=12.57 avg Ham%=5.98
  RCD_RDNS_SERVER_MESSY:  bad, avg S/O=0.32 avg Spam%=15.01 avg Ham%=6.95

rulesrc/sandbox/khopesh/20_neon_overload.cf (6 rules, 3 bad):

  KHOP_JS_OBFUSCATION:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  TR_JS_FROMCHARCODE:  bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
  TR_JS_REDIRECTION_2:  bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/khopesh/20_khop_lists.cf (16 rules, 2 bad):

  KHOP_NO_FULL_NAME:  bad, avg S/O=0.76 avg Spam%=39.26 avg Ham%=12.33
  NOT_A_PERSON:  bad, avg S/O=0.38 avg Spam%=83.67 avg Ham%=50.81

rulesrc/sandbox/khopesh/20_khop_general.cf (8 rules, 1 bad):

  FORGED_URL_DOM:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.03

rulesrc/sandbox/khopesh/20_khop_experimental.cf (56 rules, 13 bad):

  KHOP_BIG_TO_CC:  bad, avg S/O=0.00 avg Spam%=0.11 avg Ham%=24.18
  KHOP_FAKE_EBAY:  no hits of target type
  KHOP_FROM_WWW:  bad, avg S/O=0.30 avg Spam%=0.08 avg Ham%=0.20
  KHOP_HELO_AS_VICTIM:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  REMOTE_IMAGE:  bad, avg S/O=0.56 avg Spam%=3.01 avg Ham%=2.36
  SHORTENED_URL_HREF:  bad, avg S/O=0.70 avg Spam%=0.37 avg Ham%=0.16
  SHORTENED_URL_SRC:  no hits at all
  SPOOFED_URL:  bad, avg S/O=0.48 avg Spam%=0.13 avg Ham%=0.14
  SUBJ_ALL_CAPS2:  no hits of target type
  SUBJ_ALL_CAPS3:  no hits of target type
  SUBJ_LACKS_WORDS:  bad, avg S/O=0.49 avg Spam%=0.71 avg Ham%=0.75
  URI_HIDDEN:  bad, avg S/O=0.25 avg Spam%=0.14 avg Ham%=0.43
  URL_SHORTENER:  bad, avg S/O=0.80 avg Spam%=3.36 avg Ham%=0.85

rulesrc/sandbox/khopesh/20_bug_6271.cf (3 rules, 1 bad):

  DATE_IN_FUTURE_96_Q:  no hits at all

rulesrc/sandbox/kb/70_misc.cf (11 rules, 4 bad):

  KB_RATWARE_OUTLOOK_MID:  no hits at all
  LIVEFILESTORE:  no hits at all
  THEBAT_UNREG:  no hits at all
  THREAD_INDEX_BAD:  bad, avg S/O=0.79 avg Spam%=1.25 avg Ham%=0.33

rulesrc/sandbox/kb/20_header.cf (7 rules, 3 bad):

  KB_DATE_CONTAINS_TAB:  no hits at all
  KB_FAKED_THE_BAT:  no hits at all
  KB_RATWARE_MSGID:  no hits at all

rulesrc/sandbox/jquinn/20_misc.cf (3 rules, 2 bad):

  EXCUSE_24:  no hits at all
  USING_VERP:  bad, avg S/O=0.04 avg Spam%=0.09 avg Ham%=2.26

rulesrc/sandbox/jm/70_tt_drugs.cf (8 rules, 2 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_VIAGRA:  no hits at all

rulesrc/sandbox/jm/20_basic.cf (69 rules, 26 bad):

  CTYPE_001C_B:  no hits at all
  CURR_PRICE:  no hits at all
  DYN_RDNS_SHORT_HELO_IMAGE:  no hits at all
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  HELO_OEM:  no hits at all
  IMG_CID_PART1:  no hits of target type
  LOTTERY_PH_004470:  no hits of target type
  L_SPAM_TOOL_13:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.38 avg Spam%=0.02 avg Ham%=0.03
  OE_MULTIPART_RELATED:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
  PART_CID_STOCK:  no hits at all
  PART_CID_STOCK_LESS:  no hits at all
  RCVD_FORGED_WROTE:  no hits at all
  RCVD_MAIL_COM:  no hits at all
  SB_GIF_AND_NO_URIS:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
  SHORT_HELO_AND_INLINE_IMAGE:  bad, avg S/O=0.50 avg Spam%=0.79 avg Ham%=0.80
  SPAMMY_XMAILER:  no hits at all
  STOCK_IMG_CTYPE:  no hits of target type
  STOCK_IMG_HDR_FROM:  no hits at all
  STOCK_IMG_HTML:  no hits at all
  STOCK_IMG_OUTLOOK:  no hits of target type
  STOX_BOUND_090909_B:  no hits at all
  STOX_REPLY_TYPE:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
  STOX_REPLY_TYPE_WITHOUT_QUOTES:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.00
  TVD_PDF_FINGER01_JO:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/jhardin/40_local_azurephish.cf (1 rules, 1 bad):

  PHISH_AZURE_CLOUDAPP:  no hits at all

rulesrc/sandbox/jhardin/40_local_419replyto.cf (26 rules, 11 bad):

  BODY_EMAIL_419_FRAUD_GM:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  BODY_EMAIL_419_FRAUD_HM:  no hits of target type
  REPTO_419_FRAUD_AOL:  no hits at all
  REPTO_419_FRAUD_AOL_LOOSE:  no hits at all
  REPTO_419_FRAUD_CNS:  no hits at all
  REPTO_419_FRAUD_PM:  no hits at all
  REPTO_419_FRAUD_QQ:  no hits at all
  REPTO_419_FRAUD_YH:  no hits at all
  REPTO_419_FRAUD_YH_LOOSE:  no hits at all
  REPTO_419_FRAUD_YJ:  no hits at all
  REPTO_419_FRAUD_YN:  no hits at all

rulesrc/sandbox/jhardin/20_xmailer.cf (52 rules, 5 bad):

  PHP_NOVER_MUA:  no hits at all
  XM_DIGITS_ONLY:  no hits at all
  XM_LIGHT_HEAVY:  no hits at all
  XM_PHPMAILER_FORGED:  no hits at all
  XM_UC_ONLY:  bad, avg S/O=0.77 avg Spam%=0.05 avg Ham%=0.01

rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (4 rules, 2 bad):

  URI_DEOBFU_INSTR:  no hits of target type
  URI_OBFU_TLD:  no hits of target type

rulesrc/sandbox/jhardin/20_thirdparty.cf (2 rules, 2 bad):

  DX_TEXT_02:  no hits at all
  DX_TEXT_03:  no hits at all

rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (25 rules, 2 bad):

  FORGED_TBIRD_IMG_SIZE:  no hits at all
  TO_NO_BRKTS_HTML_IMG:  bad, avg S/O=0.19 avg Spam%=0.14 avg Ham%=0.58

rulesrc/sandbox/jhardin/20_postcards.cf (4 rules, 1 bad):

  EXECUTABLE_URI:  bad, avg S/O=0.62 avg Spam%=0.02 avg Ham%=0.01

rulesrc/sandbox/jhardin/20_misc_testing.cf (1168 rules, 221 bad):

  ACH_CANCELLED:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  ACH_CANCELLED_EXE:  no hits at all
  AC_POST_EXTRAS:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  ADMAIL:  no hits of target type
  ADULT_DATING_COMPANY:  no hits at all
  AD_PREFS:  no hits of target type
  ANY_PILL_PRICE:  no hits at all
  APP_DEVELOPMENT_FREEM:  no hits at all
  APP_DEVELOPMENT_NORDNS:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  BEBEE_IMG_NOT_RCVD_BB:  no hits at all
  BILL_1618:  no hits of target type
  BITCOIN_BOMB:  no hits of target type
  BITCOIN_EXTORT_02:  no hits at all
  BITCOIN_OBFU_SUBJ:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
  BITCOIN_PAY_ME:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  BITCOIN_PDF:  no hits of target type
  BITCOIN_SPAM_01:  no hits of target type
  BITCOIN_SPAM_04:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  BITCOIN_SPAM_06:  no hits at all
  BITCOIN_SPAM_08:  no hits of target type
  BITCOIN_SPAM_10:  no hits at all
  BITCOIN_SPAM_11:  no hits at all
  BITCOIN_SPAM_12:  no hits at all
  BITCOIN_WFH_01:  no hits at all
  BODY_EMPTY:  bad, avg S/O=0.02 avg Spam%=0.07 avg Ham%=4.06
  BODY_SINGLE_URI:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
  BOMB_MONEY:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  CANT_SEE_AD:  no hits at all
  CDISP_SZ_MANY:  no hits at all
  COMMENT_GIBBERISH:  no hits at all
  CONTENT_AFTER_HTML:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.09
  CONTENT_AFTER_HTML_WEAK:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  CTYPE_NULL:  no hits of target type
  DAY_I_EARNED:  no hits at all
  DG_SPAMMER_EMAIL_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.19
  DG_SPAMMER_EMAIL_F:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.10
  DIRECT_LOW_CONTRAST:  bad, avg S/O=0.35 avg Spam%=0.14 avg Ham%=0.26
  DOC_ATTACH_NO_EXT:  no hits of target type
  DOTGOV_IMAGE:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  DQ_URI_DOM_IN_PATH:  no hits of target type
  DUP_SUSP_HDR:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  EBAY_IMG_NOT_RCVD_EBAY:  no hits at all
  ENVFROM_GOOG_TRIX:  no hits of target type
  FACEBOOK_IMG_NOT_RCVD_FB:  no hits at all
  FONT_INVIS_DOTGOV:  no hits of target type
  FONT_INVIS_HTML_NOHTML:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  FONT_INVIS_LONG_LINE:  bad, avg S/O=0.68 avg Spam%=0.02 avg Ham%=0.01
  FONT_INVIS_POSTEXTRAS:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_DOC_PDF:  bad, avg S/O=0.27 avg Spam%=0.04 avg Ham%=0.13
  FREEMAIL_DOC_PDF_BCC:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FREEMAIL_MANY_TO:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.06
  FREEMAIL_RVW_ATTCH:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.01
  FREEMAIL_WFH_01:  no hits at all
  FREEM_FRNUM_UNICD_EMPTY:  no hits at all
  FRNAME_IN_MSG_XPRIO_NO_SUB:  no hits at all
  FROM_LONG_DOM:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FROM_LONG_DOM_MINFP:  bad, avg S/O=0.71 avg Spam%=0.01 avg Ham%=0.00
  FROM_MISSP_PHISH:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  FROM_MISSP_TO_UNDISC:  no hits at all
  FROM_MULTI_SHORT_IMG:  bad, avg S/O=0.78 avg Spam%=0.05 avg Ham%=0.01
  FROM_NUMERIC_TLD:  no hits at all
  FROM_URI:  no hits of target type
  FUZZY_AMAZON:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_APPLE:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_CLICK_HERE:  bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_DR_OZ:  no hits at all
  FUZZY_HARRIS:  no hits of target type
  FUZZY_MONERO:  no hits at all
  FUZZY_NORTON:  no hits at all
  FUZZY_OPTOUT:  no hits at all
  FUZZY_OVERSTOCK:  no hits at all
  FUZZY_PROMOTION:  no hits at all
  FUZZY_SAVINGS:  no hits at all
  FUZZY_SECURITY:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.01
  FUZZY_UNSUBSCRIBE:  no hits at all
  FUZZY_WALLET:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
  FUZZY_WELLSFARGO:  no hits at all
  GAPPY_GENITALIA:  no hits at all
  GAPPY_HTML:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  GAPPY_LOW_CONTRAST:  no hits of target type
  GAPPY_PILLS:  no hits of target type
  GAPPY_SALES_LEADS_FREEM:  no hits at all
  GOOGLE_DOCS_PHISH:  no hits of target type
  GOOGLE_DOCS_PHISH_MANY:  no hits at all
  GOOGLE_DOC_SUSP:  no hits of target type
  GOOG_MALWARE_DNLD:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  GOOG_REDIR_SHORT:  no hits at all
  GOOG_STO_IMG_NOHTML:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  HAS_X_NO_RELAY:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  HDRS_LCASE_IMGONLY:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  HDRS_MISSP:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
  HDR_CASE_REV_ENC:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
  HDR_CASE_REV_MANY:  bad, avg S/O=0.29 avg Spam%=0.01 avg Ham%=0.02
  HEXHASH_WORD:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  HOSTED_IMG_DQ_UNSUB:  no hits at all
  HOSTED_IMG_FREEM:  no hits of target type
  HREF_EMPTY_PHPMAIL:  no hits of target type
  HTML_ATTACH:  bad, avg S/O=0.61 avg Spam%=0.07 avg Ham%=0.05
  HTML_ENTITY_ASCII_TINY:  bad, avg S/O=0.64 avg Spam%=0.01 avg Ham%=0.00
  HTML_SINGLET_MANY:  bad, avg S/O=0.51 avg Spam%=0.02 avg Ham%=0.02
  HTML_TEXT_INVISIBLE_STYLE:  bad, avg S/O=0.58 avg Spam%=0.00 avg Ham%=0.00
  JH_SPAMMY_HEADERS:  no hits at all
  JH_SPAMMY_PATTERN01:  no hits at all
  JH_SPAMMY_PATTERN02:  no hits at all
  LARGE_PCT_AFTER_MANY:  no hits at all
  LAZY_LISTWASHING:  no hits of target type
  LEADING_MANUFACTURER:  bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
  LH_URI_DOM_IN_PATH:  bad, avg S/O=0.30 avg Spam%=0.19 avg Ham%=0.45
  LINKEDIN_IMG_NOT_RCVD_LNKN:  no hits of target type
  LIST_PARTIAL:  bad, avg S/O=0.23 avg Spam%=0.08 avg Ham%=0.27
  LIST_PARTIAL_SHORT_MSG:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  LIST_PRTL_PUMPDUMP:  no hits at all
  LONGLN_LOW_CONTRAST:  no hits at all
  LONG_HEX_URI:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  LONG_IMG_URI:  bad, avg S/O=0.37 avg Spam%=0.01 avg Ham%=0.02
  MALF_HTML_B64:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  MALWARE_PASSWORD:  no hits at all
  MANY_PILL_PRICE:  no hits at all
  MANY_SPAN_IN_TEXT:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  MIXED_FONT_CASE:  no hits of target type
  MONERO_DEADLINE:  no hits at all
  MONERO_EXTORT_01:  no hits at all
  MONERO_MALWARE:  no hits at all
  MONERO_PAY_ME:  no hits at all
  MONEY_12LTRDOM:  bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.02
  MSGID_DOLLARS_URI_IMG:  no hits of target type
  MSGID_HDR_MALF:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
  MSMAIL_PRI_ABNORMAL:  no hits at all
  NEWEGG_IMG_NOT_RCVD_NEGG:  no hits at all
  NEW_PRODUCTS:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  NOT_SPAM:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  NSL_RCVD_HELO_USER:  no hits at all
  NSL_TO_ENDS_COMMA:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
  OBFU_ATTACH_MISSP:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00
  OBFU_DOC_ATTACH:  no hits of target type
  OBFU_GIF_ATTACH:  no hits at all
  OBFU_HTML_ATTACH:  no hits at all
  OBFU_HTML_ATT_MALW:  no hits at all
  OBFU_JPG_ATTACH:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
  OBFU_PDF_ATTACH:  bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.43
  OBFU_UNSUB_UL:  no hits at all
  PAYPAL_PHISH_07:  no hits of target type
  PDS_FROM_2_EMAILS:  no hits at all
  PHISH_FBASEAPP:  no hits at all
  PHOTO_EDITING_DIRECT:  no hits at all
  PHOTO_EDITING_FREEM:  no hits at all
  PHP_ORIG_SCRIPT_EVAL:  no hits at all
  PHP_SCRIPT_MUA:  no hits at all
  POSSIBLE_APPLE_PHISH_02:  no hits at all
  POSSIBLE_EBAY_PHISH_02:  no hits at all
  POSSIBLE_PAYPAL_PHISH_01:  no hits at all
  POSSIBLE_PAYPAL_PHISH_02:  no hits at all
  PUMPDUMP_MULTI:  no hits at all
  PUMPDUMP_TIP:  no hits at all
  RAND_HEADER_LIST_SPOOF:  no hits at all
  RAND_HEADER_MANY:  no hits of target type
  RAND_MKTG_HEADER:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  RCVD_DBL_DQ:  no hits at all
  RCVD_DOTEDU_SHORT:  no hits at all
  RCVD_DOTEDU_SUSP:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
  RDNS_LOCALHOST:  no hits at all
  RDNS_NUM_TLD_ATCHNX:  no hits at all
  REPLYTO_EMPTY:  no hits at all
  RUNON_SHY:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
  SCANNED_EXTERNAL:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
  SCRIPT_GIBBERISH:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  SENDGRID_REDIR_PHISH:  no hits of target type
  SHOPIFY_IMG_NOT_RCVD_SFY:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.02
  SHORTENER_SHORT_SUBJ:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
  STATIC_XPRIO_OLE:  bad, avg S/O=0.53 avg Spam%=0.05 avg Ham%=0.04
  STOCK_TIP:  no hits at all
  STY_INVIS_DIRECT:  no hits at all
  SUBJ_ATTENTION:  no hits at all
  SUBJ_OBFU_LOW_CNTRST:  no hits of target type
  SUBJ_OBFU_PUNCT_FEW:  bad, avg S/O=0.13 avg Spam%=0.04 avg Ham%=0.25
  SUBJ_OBFU_PUNCT_MANY:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03
  SUBJ_UNNEEDED_HTML:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  SUSP_UTF8_WORD_COMBO:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.02
  SUSP_UTF8_WORD_MANY:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
  SUSP_UTF8_WORD_SUBJ:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  SYSADMIN:  no hits at all
  TAGSTAT_IMG_NOT_RCVD_TGST:  no hits at all
  TARINGANET_IMG_NOT_RCVD_TN:  no hits at all
  TBIRD_SUSP_MIME_BDRY:  no hits at all
  TEQF_USR_MSGID_HEX:  no hits at all
  THIS_AD:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
  TONLINE_FAKE_DKIM:  no hits at all
  TO_TOO_MANY_WFH_01:  no hits at all
  TRANSFORM_LIFE:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  TUMBLR_IMG_NOT_RCVD_TUMB:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  TW_GIBBERISH_MANY:  no hits at all
  UC_GIBBERISH_OBFU:  no hits at all
  UNICODE_OBFU_ZW:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  UNSUB_GOOG_FORM:  no hits at all
  URI_ADOBESPARK:  no hits at all
  URI_DBL_INDIR:  bad, avg S/O=0.62 avg Spam%=0.06 avg Ham%=0.04
  URI_DOTDOT_LOW_CNTRST:  no hits of target type
  URI_DOTEDU:  no hits of target type
  URI_DOTEDU_ENTITY:  no hits at all
  URI_DOTTY_HEX:  no hits at all
  URI_GIBB_NO_PROTO:  no hits of target type
  URI_HEX_IP:  no hits at all
  URI_HIDDEN_2:  bad, avg S/O=0.25 avg Spam%=0.14 avg Ham%=0.42
  URI_IMG_CWINDOWSNET:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
  URI_IMG_WP_REDIR:  no hits at all
  URI_LONG_REPEAT:  no hits of target type
  URI_MALWARE_BH:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  URI_MALWARE_SCMS:  no hits at all
  URI_OBFU_DOM:  no hits at all
  URI_ONLY_MSGID_MALF:  no hits of target type
  URI_OPTOUT_3LD:  no hits of target type
  URI_OPTOUT_USME:  no hits at all
  URI_PHP_REDIR:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  URI_TRPL_INDIR:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.02
  URI_TRY_USME:  no hits of target type
  USB_DRIVES:  no hits at all
  WALMART_IMG_NOT_RCVD_WAL:  no hits at all
  WANT_TO_ORDER:  no hits of target type
  XPRIO_SHORT_SUBJ:  no hits at all
  YOUR_DELIVERY_ADDRESS:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
  ZW_OBFU_FROMTOSUBJ:  no hits at all

rulesrc/sandbox/jhardin/20_mailchimp.cf (4 rules, 1 bad):

  MC_MSFT_LISTMGR:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01

rulesrc/sandbox/jhardin/20_lotsa_money.cf (162 rules, 10 bad):

  COMPENSATION:  bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
  EMRCP:  no hits at all
  LOTS_OF_MONEY:  bad, avg S/O=0.74 avg Spam%=5.55 avg Ham%=1.99
  LOTTO_AGENT:  no hits at all
  LOTTO_AGENT_FM:  no hits at all
  LOTTO_URI:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  MONEY_ATM_CARD:  no hits at all
  MONEY_BARRISTER:  no hits at all
  MONEY_PERCENT:  bad, avg S/O=0.37 avg Spam%=0.08 avg Ham%=0.14
  WON_NBDY_ATTACH:  no hits at all

rulesrc/sandbox/jhardin/20_fillform.cf (19 rules, 4 bad):

  FILL_THIS_FORM:  bad, avg S/O=0.07 avg Spam%=0.19 avg Ham%=2.47
  FILL_THIS_FORM_FRAUD_PHISH:  bad, avg S/O=0.70 avg Spam%=0.04 avg Ham%=0.02
  FILL_THIS_FORM_LOAN:  bad, avg S/O=0.78 avg Spam%=0.04 avg Ham%=0.01
  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.43 avg Spam%=0.69 avg Ham%=0.93

rulesrc/sandbox/jhardin/20_advance_fee_reevolved.cf (31 rules, 1 bad):

  ADVANCE_FEE_2_NEW_FORM:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/jhardin/20_MIME_no_text.cf (4 rules, 2 bad):

  MIME_NO_TEXT:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.14
  MIME_PHP_NO_TEXT:  no hits at all

rulesrc/sandbox/jhardin/20_MIME_in_body.cf (3 rules, 1 bad):

  MIME_MALF:  no hits of target type

rulesrc/sandbox/hege/20_hk.cf (67 rules, 8 bad):

  HK_NAME_DRUGS:  no hits at all
  HK_NAME_FM_MR_MRS:  no hits at all
  HK_NAME_FROM:  no hits at all
  HK_RANDOM_ENVFROM:  bad, avg S/O=0.68 avg Spam%=0.04 avg Ham%=0.02
  HK_SPAMMY_FILENAME:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
  HK_WIN:  no hits at all
  URI_IN_URI_10:  no hits at all
  URI_IN_URI_5:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02

rulesrc/sandbox/gbechis/20_misc.cf (20 rules, 6 bad):

  GB_CUSTOM_HTM_URI:  bad, avg S/O=0.73 avg Spam%=1.10 avg Ham%=0.42
  GB_FAKE_RF:  bad, avg S/O=0.73 avg Spam%=0.54 avg Ham%=0.19
  GB_FAKE_RF_SHORT:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  GB_GOOGLE_OBFUR:  no hits of target type
  GB_PAYPAL_IMG_NOT_RCVD_PAYP:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
  SENDINBLUE_REDIR:  bad, avg S/O=0.50 avg Spam%=0.04 avg Ham%=0.04

rulesrc/sandbox/gbechis/20_freemail.cf (6 rules, 1 bad):

  GB_WEBFORM:  no hits at all

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (62 rules, 4 bad):

  FAKE_REPLY_A1:  no hits at all
  FAKE_REPLY_B:  no hits at all
  TEST_REPLY_B:  no hits of target type
  TEST_REPLY_C:  no hits of target type

rulesrc/sandbox/fkento/20_misc.cf (16 rules, 2 bad):

  FKO_TO_NAME_DOM_REPEAT:  no hits of target type
  MXG_LOWER_HDR_SPAM:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/felicity/70_phishing.cf (57 rules, 7 bad):

  HTTPS_HTTP_MISMATCH:  bad, avg S/O=0.78 avg Spam%=0.48 avg Ham%=0.14
  TVD_PH_1:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
  TVD_PH_BODY_ACCOUNTS_PRE:  bad, avg S/O=0.68 avg Spam%=0.17 avg Ham%=0.08
  TVD_PH_BODY_META:  no hits at all
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.80 avg Spam%=0.70 avg Ham%=0.18
  TVD_PH_FR5:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
  TVD_PH_REC:  bad, avg S/O=0.52 avg Spam%=0.01 avg Ham%=0.00

rulesrc/sandbox/felicity/70_other.cf (74 rules, 55 bad):

  BASE64_LENGTH_78_79:  no hits of target type
  BASE64_LENGTH_79_INF:  bad, avg S/O=0.43 avg Spam%=0.03 avg Ham%=0.04
  DRUGS_HDIA:  no hits at all
  FUZZY_MERIDIA:  no hits at all
  FUZZY_SPRM:  no hits of target type
  HEADER_COUNT_SUBJECT:  no hits at all
  NULL_IN_BODY:  no hits of target type
  RCVD_BAD_ID:  no hits at all
  TVD_ACT_193:  no hits at all
  TVD_APPROVED:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  TVD_APP_LOAN:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  TVD_BODY_END_STAR:  no hits of target type
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_ENVFROM_APOST:  no hits at all
  TVD_FINGER_01:  no hits of target type
  TVD_FINGER_02:  no hits of target type
  TVD_FLOAT_GENERAL:  no hits at all
  TVD_FUZZY_DEGREE:  no hits at all
  TVD_FUZZY_FINANCE:  no hits at all
  TVD_FUZZY_FIXED_RATE:  no hits at all
  TVD_FUZZY_MICROCAP:  no hits at all
  TVD_FUZZY_PHARMACEUTICAL:  no hits at all
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.22
  TVD_FUZZY_SYMBOL:  no hits at all
  TVD_FW_GRAPHIC_ID2:  no hits at all
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.23
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.23
  TVD_INCREASE_SIZE:  no hits at all
  TVD_LINK_SAVE:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  TVD_PDF_FINGER01:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  TVD_QUAL_MEDS:  no hits at all
  TVD_RATWARE_CB:  no hits at all
  TVD_RATWARE_CB_2:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.19
  TVD_RATWARE_MSGID_02:  no hits at all
  TVD_RCVD_IP:  bad, avg S/O=0.22 avg Spam%=0.02 avg Ham%=0.06
  TVD_RCVD_IP4:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.03
  TVD_RCVD_SINGLE:  no hits of target type
  TVD_SECTION:  no hits at all
  TVD_SILLY_URI_OBFU:  no hits at all
  TVD_SINGLE_SPAN_DIV:  bad, avg S/O=0.51 avg Spam%=0.02 avg Ham%=0.01
  TVD_SPACED_SUBJECT_WORD3:  no hits at all
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.25
  TVD_STOCK1:  no hits at all
  TVD_SUBJ_FINGER_03:  no hits at all
  TVD_SUBJ_OWE:  no hits at all
  TVD_SUBJ_WIPE_DEBT:  no hits of target type
  TVD_VISIT_PHARMA:  no hits of target type
  TVD_VIS_HIDDEN:  no hits at all
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.22
  T_TVD_SUBJ_FINGER_05:  no hits of target type
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.02 avg Spam%=0.07 avg Ham%=4.61
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.03 avg Spam%=0.16 avg Ham%=5.42
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.03 avg Spam%=0.16 avg Ham%=5.42

rulesrc/sandbox/fanf/30_text.cf (2 rules, 2 bad):

  LONG_TERM_PRICE:  no hits at all
  SHORT_TERM_PRICE:  no hits at all

rulesrc/sandbox/duncf/20_header.cf (3 rules, 1 bad):

  STUDDLYCAPS:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.22

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 1 bad):

  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (70 rules, 12 bad):

  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_FIX_MY_URI:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_OUTLOOK_TO_MX_IMAGE:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.00
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.25 avg Spam%=0.51 avg Ham%=1.49
  DOS_RCVD_IP_TWICE_B:  no hits at all
  DOS_STOCK_BAT:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
  X_MAILER_CME_6543_MSN:  no hits at all

rulesrc/sandbox/davej/20_non_ascii.cf (4 rules, 1 bad):

  CTE_8BIT_MISMATCH:  bad, avg S/O=0.62 avg Spam%=0.08 avg Ham%=0.05

rulesrc/sandbox/davej/20_bug_7550.cf (1 rules, 1 bad):

  VULN_PHPMAILER:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.04

rulesrc/sandbox/billcole/80_test.cf (30 rules, 9 bad):

  SCC_CANSPAM_2:  no hits at all
  SCC_ISEMM_LID_1:  no hits at all
  SCC_META_ODDDIV8:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  SCC_SPAMMER_ADDR_2:  no hits of target type
  SCC_SPECIAL_GUID:  no hits at all
  SCC_THREE_WORD_MONTY:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
  T_SCC_EBIKE:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  T_SCC_URL_CLOUDINARY:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.08
  T_SCC_URL_NOTIONSITE:  no hits of target type

rulesrc/sandbox/billcole/23_bug_6780.cf (4 rules, 1 bad):

  T_EMPTY_FROM_OR_TO_OR_CC:  bad, avg S/O=0.15 avg Spam%=0.06 avg Ham%=0.34

rulesrc/sandbox/billcole/21_bug_7219.cf (8 rules, 3 bad):

  SCC_BODY_SINGLE_WORD:  bad, avg S/O=0.47 avg Spam%=0.18 avg Ham%=0.20
  SCC_BODY_TEXT_LINE:  bad, avg S/O=0.52 avg Spam%=92.84 avg Ham%=99.93
  SCC_EMPTY_BODY:  bad, avg S/O=0.01 avg Spam%=0.07 avg Ham%=7.16

rulesrc/sandbox/axb/20_xmailer.cf (7 rules, 1 bad):

  AXB_XMAILER_MIMEOLE_OL_1ECD5:  no hits at all

rulesrc/sandbox/axb/20_axb_misc.cf (6 rules, 3 bad):

  AXB_XM_FORGED_OL2600:  no hits at all
  AXB_X_FF_SEZ_S:  bad, avg S/O=0.51 avg Spam%=0.01 avg Ham%=0.01
  AXB_X_OUTLOOKPROT_ENVSDR:  no hits of target type

rules/72_active.cf (60 rules, 5 bad):

  CTYPE_8SPACE_GIF:  no hits at all
  HK_CTE_RAW:  no hits at all
  OBFU_TEXT_ATTACH:  no hits of target type
  SENDGRID_REDIR:  no hits at all
  TVD_FW_GRAPHIC_NAME_MID:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00

rules/25_replace.cf (29 rules, 24 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_BILLION:  no hits at all
  FUZZY_CREDIT:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
  FUZZY_GUARANTEE:  no hits at all
  FUZZY_MEDICATION:  no hits at all
  FUZZY_MILLION:  no hits of target type
  FUZZY_MONEY:  no hits at all
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OBLIGATION:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHARMACY:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_PRESCRIPT:  no hits at all
  FUZZY_REFINANCE:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  no hits at all
  SUBJECT_FUZZY_CHEAP:  no hits at all
  SUBJECT_FUZZY_MEDS:  no hits at all
  SUBJECT_FUZZY_PENIS:  no hits at all
  SUBJECT_FUZZY_TION:  no hits at all
  SUBJECT_FUZZY_VPILL:  no hits at all

rules/20_vbounce.cf (176 rules, 6 bad):

  ANY_BOUNCE_MESSAGE:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  BOUNCE_MESSAGE:  no hits at all
  CHALLENGE_RESPONSE:  no hits at all
  CRBOUNCE_MESSAGE:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
  OOOBOUNCE_MESSAGE:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  VBOUNCE_MESSAGE:  no hits of target type

rules/20_uri_tests.cf (18 rules, 10 bad):

  HTTP_77:  no hits at all
  HTTP_EXCESSIVE_ESCAPES:  bad, avg S/O=0.65 avg Spam%=0.00 avg Ham%=0.00
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.26 avg Spam%=0.03 avg Ham%=0.07
  NUMERIC_HTTP_ADDR:  no hits at all
  SPOOF_COM2OTH:  no hits at all
  SPOOF_NET2COM:  no hits at all
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.21 avg Spam%=0.04 avg Ham%=0.15
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (100 rules, 23 bad):

  FORGED_IMS_HTML:  no hits at all
  FORGED_IMS_TAGS:  no hits at all
  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_QUALCOMM_TAGS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  HEADER_SPAM:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  RATWARE_EFROM:  no hits of target type
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  RATWARE_MS_HASH:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_OUTLOOK_NONAME:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_RCVD_PF:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  REPTO_QUOTE_AOL:  no hits at all
  REPTO_QUOTE_IMS:  no hits at all
  REPTO_QUOTE_MSN:  no hits at all
  REPTO_QUOTE_QUALCOMM:  no hits at all
  REPTO_QUOTE_YAHOO:  bad, avg S/O=0.69 avg Spam%=0.00 avg Ham%=0.00
  X_MESSAGE_INFO:  no hits at all

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (45 rules, 24 bad):

  BAD_CREDIT:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.01
  BANG_GUAR:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  BODY_ENHANCEMENT:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
  BODY_ENHANCEMENT2:  bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
  EM_ROLEX:  bad, avg S/O=0.38 avg Spam%=0.00 avg Ham%=0.00
  EXCUSE_4:  no hits of target type
  FORWARD_LOOKING:  no hits at all
  INVESTMENT_ADVICE:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  LOW_PRICE:  bad, avg S/O=0.56 avg Spam%=0.01 avg Ham%=0.01
  MARKETING_PARTNERS:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  MORE_SEX:  no hits of target type
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits at all
  OBSCURED_EMAIL:  no hits at all
  ONE_TIME:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  REFINANCE_YOUR_HOME:  no hits at all
  REPLICA_WATCH:  no hits at all
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits at all
  STRONG_BUY:  no hits at all

rules/20_meta_tests.cf (19 rules, 3 bad):

  EMPTY_MESSAGE:  bad, avg S/O=0.01 avg Spam%=0.06 avg Ham%=7.03
  FORGED_MUA_MOZILLA:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.05
  NO_HEADERS_MESSAGE:  no hits of target type

rules/20_imageinfo.cf (17 rules, 4 bad):

  DC_GIF_UNO_LARGO:  bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
  DC_IMAGE_SPAM_HTML:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
  DC_IMAGE_SPAM_TEXT:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.30 avg Spam%=0.02 avg Ham%=0.06

rules/20_html_tests.cf (69 rules, 36 bad):

  HIDE_WIN_STATUS:  no hits at all
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.56 avg Spam%=0.01 avg Ham%=0.01
  HTML_COMMENT_SHORT:  no hits at all
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.74 avg Spam%=11.51 avg Ham%=3.99
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.60 avg Spam%=7.79 avg Ham%=5.19
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  no hits at all
  HTML_IMAGE_ONLY_04:  bad, avg S/O=0.58 avg Spam%=0.02 avg Ham%=0.02
  HTML_IMAGE_ONLY_12:  bad, avg S/O=0.65 avg Spam%=0.13 avg Ham%=0.07
  HTML_IMAGE_ONLY_28:  bad, avg S/O=0.60 avg Spam%=0.34 avg Ham%=0.23
  HTML_IMAGE_ONLY_32:  bad, avg S/O=0.77 avg Spam%=0.54 avg Ham%=0.16
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.73 avg Spam%=1.38 avg Ham%=0.51
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.73 avg Spam%=1.85 avg Ham%=0.67
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.27 avg Spam%=0.19 avg Ham%=0.53
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.33 avg Spam%=0.24 avg Ham%=0.48
  HTML_MESSAGE:  bad, avg S/O=0.79 avg Spam%=81.05 avg Ham%=21.83
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.67 avg Spam%=1.47 avg Ham%=0.71
  HTML_MISSING_CTYPE:  no hits at all
  HTML_NONELEMENT_30_40:  no hits at all
  HTML_NONELEMENT_40_50:  no hits at all
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_20_30:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
  HTML_OBFUSCATE_30_40:  no hits at all
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.42 avg Spam%=0.26 avg Ham%=0.35
  HTML_TAG_BALANCE_HEAD:  bad, avg S/O=0.69 avg Spam%=0.03 avg Ham%=0.02
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits at all

rules/20_head_tests.cf (161 rules, 48 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.12 avg Spam%=0.04 avg Ham%=0.27
  CONFIRMED_FORGED:  no hits at all
  DATE_IN_FUTURE_96_XX:  no hits at all
  DATE_SPAMWARE_Y2K:  no hits at all
  FAKE_OUTBLAZE_RCVD:  no hits at all
  FORGED_MSGID_AOL:  no hits at all
  FORGED_MSGID_EXCITE:  no hits at all
  FORGED_MSGID_HOTMAIL:  no hits at all
  FORGED_MSGID_MSN:  no hits at all
  FORGED_MSGID_YAHOO:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
  FORGED_TELESP_RCVD:  no hits at all
  FROM_ILLEGAL_CHARS:  no hits at all
  FROM_LOCAL_HEX:  no hits at all
  HEADER_COUNT_CTYPE:  no hits at all
  HEAD_ILLEGAL_CHARS:  no hits at all
  INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.03
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  no hits at all
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  LOCALPART_IN_SUBJECT:  bad, avg S/O=0.44 avg Spam%=0.02 avg Ham%=0.03
  MIME_BOUND_DIGITS_15:  bad, avg S/O=0.69 avg Spam%=0.00 avg Ham%=0.00
  MIME_BOUND_MANY_HEX:  no hits at all
  MIME_HEADER_CTYPE_ONLY:  bad, avg S/O=0.23 avg Spam%=0.05 avg Ham%=0.17
  MISSING_HEADERS:  bad, avg S/O=0.71 avg Spam%=0.51 avg Ham%=0.21
  MISSING_MIMEOLE:  bad, avg S/O=0.27 avg Spam%=0.05 avg Ham%=0.14
  MISSING_SUBJECT:  bad, avg S/O=0.65 avg Spam%=0.06 avg Ham%=0.03
  MSGID_SPAM_CAPS:  bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
  MSGID_SPAM_LETTERS:  no hits at all
  MSGID_YAHOO_CAPS:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  NO_RDNS_DOTCOM_HELO:  bad, avg S/O=0.80 avg Spam%=0.02 avg Ham%=0.01
  PLING_QUERY:  bad, avg S/O=0.58 avg Spam%=0.05 avg Ham%=0.04
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  RCVD_DOUBLE_IP_LOOSE:  bad, avg S/O=0.51 avg Spam%=0.03 avg Ham%=0.03
  REPLYTO_ILLEGAL_CHARS:  no hits at all
  SORTED_RECIPS:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.12
  SUBJ_ALL_CAPS:  bad, avg S/O=0.70 avg Spam%=1.12 avg Ham%=0.49
  SUBJ_AS_SEEN:  no hits at all
  SUBJ_DOLLARS:  bad, avg S/O=0.66 avg Spam%=0.02 avg Ham%=0.01
  SUSPICIOUS_RECIPS:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  TO_MALFORMED:  bad, avg S/O=0.37 avg Spam%=0.04 avg Ham%=0.06
  UNRESOLVED_TEMPLATE:  no hits of target type
  WITH_LC_SMTP:  no hits at all
  X_PRIORITY_CC:  no hits at all

rules/20_freemail.cf (12 rules, 2 bad):

  FREEMAIL_ENVFROM_END_DIGIT:  bad, avg S/O=0.32 avg Spam%=0.06 avg Ham%=0.17
  FREEMAIL_FROM:  bad, avg S/O=0.24 avg Spam%=3.28 avg Ham%=10.49

rules/20_fake_helo_tests.cf (21 rules, 5 bad):

  HELO_DYNAMIC_CHELLO_NL:  no hits at all
  HELO_DYNAMIC_DIALIN:  no hits at all
  HELO_DYNAMIC_HOME_NL:  no hits at all
  HELO_DYNAMIC_ROGERS:  no hits at all
  HELO_STATIC_HOST:  bad, avg S/O=0.30 avg Spam%=0.02 avg Ham%=0.06

rules/20_dynrdns.cf (36 rules, 1 bad):

  RDNS_NONE:  bad, avg S/O=0.76 avg Spam%=17.88 avg Ham%=5.77

rules/20_drugs.cf (84 rules, 21 bad):

  DRUGS_ANXIETY:  no hits of target type
  DRUGS_ANXIETY_EREC:  no hits at all
  DRUGS_ANXIETY_OBFU:  no hits at all
  DRUGS_DIET:  no hits at all
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_MANYKINDS:  no hits at all
  DRUGS_MUSCLE:  no hits at all
  DRUGS_SLEEP_EREC:  no hits at all
  DRUGS_SMEAR1:  no hits at all
  DRUG_DOSAGE:  no hits at all
  DRUG_ED_CAPS:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  DRUG_ED_GENERIC:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  DRUG_ED_SILD:  no hits of target type
  NO_PRESCRIPTION:  bad, avg S/O=0.64 avg Spam%=0.00 avg Ham%=0.00
  ONLINE_PHARMACY:  no hits of target type
  SUBJECT_DRUG_GAP_C:  no hits at all
  SUBJECT_DRUG_GAP_L:  no hits at all
  SUBJECT_DRUG_GAP_S:  no hits at all
  SUBJECT_DRUG_GAP_X:  no hits at all
  VIA_GAP_GRA:  no hits at all

rules/20_body_tests.cf (30 rules, 16 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  HTTPS_IP_MISMATCH:  no hits at all
  LONGWORDS:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  MIMEPART_LIMIT_EXCEEDED:  no hits at all
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_TEXT:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.06
  MIME_HTML_MOSTLY:  bad, avg S/O=0.12 avg Spam%=0.26 avg Ham%=1.90
  MIME_HTML_ONLY_MULTI:  no hits at all
  MIME_QP_LONG_LINE:  bad, avg S/O=0.28 avg Spam%=1.97 avg Ham%=5.15
  MISSING_MIME_HB_SEP:  bad, avg S/O=0.66 avg Spam%=0.00 avg Ham%=0.00
  MPART_ALT_DIFF:  bad, avg S/O=0.42 avg Spam%=0.99 avg Ham%=1.35
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.26 avg Spam%=0.02 avg Ham%=0.07
  TVD_SPACE_RATIO:  bad, avg S/O=0.03 avg Spam%=0.03 avg Ham%=0.96
  URI_TRUNCATED:  bad, avg S/O=0.70 avg Spam%=0.12 avg Ham%=0.05
  WEIRD_QUOTING:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.03

not_present (2 rules, 2 bad):

  USER_IN_DKIM_WHITELIST:  no hits at all
  USER_IN_SPF_WHITELIST:  no hits at all