You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Rules Report Cron <no...@spamassassin.apache.org> on 2009/11/25 09:33:12 UTC
[auto] bad sandbox rules report
HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1
Bad performing rules, from the past 3 night's mass-checks.
(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)
Use of uninitialized value in concatenation (.) or string at masses/rule-qa/list-bad-rules line 181.
demoting : config: found endif without matching conditional at masses/rule-qa/list-bad-rules line 181.
Use of uninitialized value in hash element at masses/rule-qa/list-bad-rules line 183.
rulesrc/sandbox/mmartinec/20_misc.cf (14 rules, 10 bad):
CR_IN_SUBJ: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
FROM_UC_UNBAL: no hits at all
FROM_UNBAL1: bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
FROM_WSP_LEAD: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
FROM_WSP_TRAIL: bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
LONGLINE: bad, avg S/O=0.53 avg Spam%=2.35 avg Ham%=2.06
MSGID_NOFQDN1: bad, avg S/O=0.26 avg Spam%=0.03 avg Ham%=0.07
MSGID_NOFQDN2: bad, avg S/O=0.80 avg Spam%=40.80 avg Ham%=10.37
MSGID_WSP_TRAIL: bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
RP_LASTNAME: no hits at all
rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):
LFUZ_PWRMALE: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.00
rulesrc/sandbox/maddoc/99_doc_test.cf (45 rules, 24 bad):
FSL_BLOGSPOT_ABUSE: bad, avg S/O=0.27 avg Spam%=0.14 avg Ham%=0.40
FSL_CREATEPDF_ABUSE: no hits at all
FSL_FAKE_RCVD: no hits at all
FSL_FBOOK_PHISH: no hits of target type
FSL_GD1_URI: no hits at all
FSL_GD2_URI: bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
FSL_GG_ABUSE: no hits at all
FSL_GS_ABUSE: bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
FSL_HAS_TINYURL: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.26
FSL_HELO_FAKE: bad, avg S/O=0.18 avg Spam%=0.05 avg Ham%=0.23
FSL_HELO_HOME: bad, avg S/O=0.77 avg Spam%=0.31 avg Ham%=0.09
FSL_HELO_LITERAL: no hits at all
FSL_HELO_NON_FQDN_2: bad, avg S/O=0.48 avg Spam%=91.88 avg Ham%=97.93
FSL_HELO_UNKNOWN: no hits at all
FSL_MIME_NO_TEXT: no hits of target type
FSL_RCVD_USER: bad, avg S/O=0.80 avg Spam%=4.27 avg Ham%=1.09
FSL_SPAMWARE_STRING_1: bad, avg S/O=0.57 avg Spam%=0.23 avg Ham%=0.17
FSL_STACKED_TEXT: no hits of target type
FSL_UA2: no hits at all
FSL_Y360_ABUSE: no hits of target type
FSL_YPIPES_ABUSE: no hits of target type
__ANY_TEXT_ATTACH_DOC: bad, avg S/O=0.51 avg Spam%=99.80 avg Ham%=94.97
# used in: FSL_MIME_NO_TEXT
__CTYPE_MULTIPART_MIXED: bad, avg S/O=0.29 avg Spam%=4.03 avg Ham%=9.75
# used in: FSL_MIME_NO_TEXT
__TWO_WORD_LINES: bad, avg S/O=0.36 avg Spam%=0.08 avg Ham%=0.14
# used in: FSL_STACKED_TEXT
rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):
KAM_PHISH1: no hits at all
rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 3 bad):
KAM_MX: bad, avg S/O=0.40 avg Spam%=3.19 avg Ham%=5.16
__KAM_MX2: bad, avg S/O=0.64 avg Spam%=0.01 avg Ham%=0.01
# used in: KAM_MX
__KAM_MX3: bad, avg S/O=0.40 avg Spam%=3.19 avg Ham%=5.16
# used in: KAM_MX
rulesrc/sandbox/kmcgrail/20_test.cf (43 rules, 29 bad):
KAM_1LINE: no hits at all
KAM_ABOUT: no hits at all
KAM_ADVERT: no hits at all
KAM_ANA: no hits at all
KAM_BIZ: no hits at all
KAM_CANSPAM: no hits at all
KAM_FAST: no hits at all
KAM_GIFT: no hits at all
KAM_REPLACE: bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.35
KAM_SHOP: no hits at all
__KAM_1LINE1: no hits at all
# used in: KAM_1LINE
__KAM_1LINE2: no hits at all
# used in: KAM_1LINE
__KAM_ABOUT1: no hits at all
# used in: KAM_ABOUT
__KAM_ABOUT2: bad, avg S/O=0.63 avg Spam%=0.13 avg Ham%=0.08
# used in: KAM_ABOUT
__KAM_ADVERT1: bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
# used in: KAM_ADVERT
__KAM_ADVERT2: no hits at all
# used in: KAM_ADVERT
__KAM_ADVERT3: no hits at all
# used in: KAM_ADVERT
__KAM_BIZ1: no hits at all
# used in: KAM_BIZ
__KAM_BIZ2: no hits at all
# used in: KAM_BIZ
__KAM_FAST1: no hits at all
# used in: KAM_FAST
__KAM_GIFT1: no hits at all
# used in: KAM_GIFT
__KAM_GIFT2: no hits at all
# used in: KAM_GIFT
__KAM_LOTTO2: bad, avg S/O=0.67 avg Spam%=0.87 avg Ham%=0.42
# used in: MONEY_FRAUD
__KAM_REP1: no hits at all
# used in: KAM_REPLACE
__KAM_REP2: bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.35
# used in: KAM_REPLACE
__KAM_SHOP1: no hits at all
# used in: KAM_SHOP
__KAM_SHOP3: no hits at all
# used in: KAM_SHOP
__KAM_WEIGHT2: bad, avg S/O=0.52 avg Spam%=0.14 avg Ham%=0.13
# used in: KAM_ANA
__KAM_WEIGHT3: bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.01
# used in: KAM_ANA
rulesrc/sandbox/khopesh/20_s25r.cf (13 rules, 1 bad):
S25R_0: bad, avg S/O=0.79 avg Spam%=40.62 avg Ham%=10.52
rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (7 rules, 7 bad):
KHOP_SC_CIDR16: no hits at all
KHOP_SC_CIDR24: no hits at all
KHOP_SC_CIDR8: no hits at all
KHOP_SC_TOP200: no hits at all
KHOP_SC_TOP_CIDR16: no hits at all
KHOP_SC_TOP_CIDR24: no hits at all
KHOP_SC_TOP_CIDR8: no hits at all
rulesrc/sandbox/khopesh/20_khop_lists.cf (7 rules, 7 bad):
KHOP_MAIL_LINK: bad, avg S/O=0.69 avg Spam%=3.75 avg Ham%=1.71
KHOP_NO_FULL_NAME: bad, avg S/O=0.49 avg Spam%=16.30 avg Ham%=17.22
KHOP_UNSUB_LINK: bad, avg S/O=0.33 avg Spam%=0.68 avg Ham%=1.42
__FROM_FULL_NAME: bad, avg S/O=0.54 avg Spam%=71.62 avg Ham%=82.63
# used in: KHOP_NO_FULL_NAME
__MAIL_LINK: bad, avg S/O=0.64 avg Spam%=4.81 avg Ham%=2.72
# used in: KHOP_MAIL_LINK
__SENDER_BOT: bad, avg S/O=0.04 avg Spam%=1.30 avg Ham%=35.73
# used in: KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
__UNSUB_LINK: bad, avg S/O=0.06 avg Spam%=0.72 avg Ham%=10.55
# used in: KHOP_MAIL_LINK KHOP_UNSUB_LINK SPOOFED_URL
rulesrc/sandbox/khopesh/20_khop_general.cf (20 rules, 15 bad):
ADV_SUBJ: no hits at all
IMAGE_MISMATCH: no hits at all
KHOP_HELO_FCRDNS: bad, avg S/O=0.13 avg Spam%=5.91 avg Ham%=9.22
NAME_EMAIL_DIFF: bad, avg S/O=0.28 avg Spam%=0.02 avg Ham%=0.04
SPOOFED_URL: bad, avg S/O=0.59 avg Spam%=1.13 avg Ham%=0.78
TWO_IPS_RCVD: bad, avg S/O=0.78 avg Spam%=0.47 avg Ham%=0.13
__GIF_EXISTS: bad, avg S/O=0.24 avg Spam%=0.42 avg Ham%=1.34
# used in: IMAGE_MISMATCH
__HELO_NOT_RDNS: bad, avg S/O=0.42 avg Spam%=17.87 avg Ham%=25.08
# used in: KHOP_HELO_FCRDNS
__JPEG_EXISTS: bad, avg S/O=0.39 avg Spam%=1.30 avg Ham%=2.02
# used in: IMAGE_MISMATCH
__NAME_EQ_EMAIL: bad, avg S/O=0.18 avg Spam%=0.23 avg Ham%=1.05
# used in: NAME_EMAIL_DIFF
__NAME_IS_EMAIL: bad, avg S/O=0.22 avg Spam%=0.22 avg Ham%=0.77
# used in: NAME_EMAIL_DIFF
__PNG_ATTACH: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.19
# used in: IMAGE_MISMATCH
__PNG_EXISTS: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.19
# used in: IMAGE_MISMATCH
__SPOOFED_URL: bad, avg S/O=0.24 avg Spam%=1.16 avg Ham%=3.75
# used in: SPOOFED_URL
__TWO_IPS_RCVD: bad, avg S/O=0.78 avg Spam%=0.48 avg Ham%=0.13
# used in: TWO_IPS_RCVD
rulesrc/sandbox/khopesh/20_khop_experimental.cf (3 rules, 1 bad):
HDRS_LCASE_NOASIA: bad, avg S/O=0.75 avg Spam%=9.11 avg Ham%=2.99
rulesrc/sandbox/khopesh/20_khop_blessed.cf (8 rules, 2 bad):
KHOP_PGP_INLINE: bad, avg S/O=0.33 avg Spam%=0.24 avg Ham%=0.00
__PGP_INLINE: no hits at all
# used in: KHOP_PGP_INLINE
rulesrc/sandbox/khopesh/20_khop_bl.cf (6 rules, 4 bad):
DKIM_INVALID: bad, avg S/O=0.05 avg Spam%=0.50 avg Ham%=10.23
KHOP_GREYED: no hits at all
__DKIM_EXISTS: bad, avg S/O=0.05 avg Spam%=0.50 avg Ham%=10.23
# used in: DKIM_INVALID
__GREYLISTED: no hits at all
# used in: KHOP_GREYED S25R_0
rulesrc/sandbox/kb/70_misc.cf (22 rules, 15 bad):
KB_CTYPE_SPACE: no hits at all
KB_CTYPE_SP_MOZ: no hits at all
LIVEFILESTORE_HTML: no hits of target type
OPERA_MID_NON_OP: no hits at all
OPERA_MID_NO_DIGIT: no hits of target type
PQRTW_4: no hits of target type
THREAD_INDEX_BAD: bad, avg S/O=0.24 avg Spam%=0.83 avg Ham%=2.58
__HAS_THREAD_INDEX: bad, avg S/O=0.10 avg Spam%=3.17 avg Ham%=27.57
# used in: THREAD_INDEX_BAD
__KB_UA_MOZ: bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.45
# used in: KB_CTYPE_SP_MOZ
__OPERA_MID_NON_OP: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.50
# used in: OPERA_MID_NON_OP
__OPERA_MID_NO_DIGIT: bad, avg S/O=0.52 avg Spam%=0.46 avg Ham%=0.42
# used in: OPERA_MID_NO_DIGIT
__OPERA_MUA: bad, avg S/O=0.75 avg Spam%=0.25 avg Ham%=0.09
# used in: OPERA_MID_NON_OP OPERA_MID_NO_DIGIT
__PQRTW_4_A: no hits of target type
# used in: PQRTW_4
__PQRTW_4_SPAN: no hits of target type
# used in: PQRTW_4
__THREAD_INDEX_GOOD: bad, avg S/O=0.09 avg Spam%=2.34 avg Ham%=24.99
# used in: THREAD_INDEX_BAD
rulesrc/sandbox/jm/80_sane.cf (150 rules, 109 bad):
SANE_059b23f04690d144449b7c99a6c6cd4b: no hits at all
SANE_06c7a4732c1f84900776ed70b0c46622: no hits at all
SANE_0b71b2414f60460dc5ce8b38f77afc84: no hits at all
SANE_0c64855d6ff8427a5506a57eaa7f23e4: no hits at all
SANE_0ca06ee38f5fa72293cb01412fd1366d: no hits at all
SANE_0e2fd237a2457014b4a604fb11e12351: no hits at all
SANE_0efc520389d9917a40993e4547f8df6e: no hits at all
SANE_13b84073c47e1430d28f6852310f1e24: no hits at all
SANE_15127c727eaa11887f10cbec9ac59c24: no hits at all
SANE_17a1b160af7209e41df5c25be75d4f60: no hits at all
SANE_1bcdb8d4cae5f7cfefe310b3fce37407: no hits at all
SANE_1e4a68ee6f864251df2bd2c2820805ea: no hits at all
SANE_2025b95f6cbbedc5b8ecc73c754b3ecd: no hits at all
SANE_211b07d6a6bbd0d831c37df3ac112238: no hits at all
SANE_22fd419db2276a962b097aec535f2714: no hits at all
SANE_237c2b0099548ddbfa5a37f07e0687ab: bad, avg S/O=0.75 avg Spam%=0.14 avg Ham%=0.05
SANE_241cd925b00cea31560e3a0a88292867: no hits at all
SANE_26a68f03f5905d9a620f0c60593598d2: no hits at all
SANE_29466e3bbdb72fcad000bf00469b265c: no hits at all
SANE_2fe4e6f7eec70291a3c84055066c7b75: no hits at all
SANE_3325b1231e51c0ba56c4034e2d775e02: no hits at all
SANE_350e3965f0c4efe66a6c43cfbe754b95: no hits of target type
SANE_36fb311b5181e5f2d7e793a38d2bbc27: no hits at all
SANE_3a4b6d0e824e4ba2b01bef041a9f77e5: no hits at all
SANE_3ca2a5874272d53ce2ad613e09b71fce: bad, avg S/O=0.50 avg Spam%=0.01 avg Ham%=0.01
SANE_3d1f8fc21841dac2a36473f1107539a3: no hits at all
SANE_4172e4d67852fe8e244b3ac23cd050a9: no hits at all
SANE_419197d1acf66526fd3096a7a243134b: no hits at all
SANE_429d184419724f2bb2dbfbb404c297f4: no hits at all
SANE_443ff86490ee315e02f9785f491b7bfd: no hits at all
SANE_4739448258e184b1415951775d4139ef: no hits at all
SANE_473ec8514c75992d5a9110363228bb33: no hits at all
SANE_4b127090f1ed198ef8007d8512cb0891: no hits at all
SANE_4f2004959aace5750bf8c6a1f8fdbad6: no hits at all
SANE_4f80b2832a0be0bcdf2fa8ea2db52b83: no hits at all
SANE_540b82f6e96d62e32e5ecf2cd638d9d0: no hits at all
SANE_55a2e1f9afe27d0ecb210aded5350671: no hits at all
SANE_5b5adce1bd3865823ba98acc250e9ce6: no hits at all
SANE_5df29067745223c48001d8db1ac686ab: no hits at all
SANE_60499b33deab95fe4907732e43073be5: no hits at all
SANE_625f77feaf525ad9ee0f7590649d4453: no hits at all
SANE_653e67146756b80ed03c5c123c8ce4dc: no hits at all
SANE_6d9b8dc22bdd1854958861e40ed01743: no hits at all
SANE_73d004f5ed3490d977cdcdbe924a5bf6: no hits at all
SANE_770d974c14c048fb546c992159408021: no hits at all
SANE_77540077455aeadd911f2a12a5b5eaf5: no hits at all
SANE_77f4546a65a146a12097c4d4222d9f4d: no hits at all
SANE_79ad75801cd5de32db3be5722cae69fc: no hits at all
SANE_7fc237f66e3978374a82bd42e3282c5d: no hits at all
SANE_8073d08320f6ec7508d4f7a3aefb13f2: no hits at all
SANE_817ff97bb8d9691f8ca9ccd2fabfbefb: no hits at all
SANE_85aedb78d0c7892c53cd35180d6d3972: no hits at all
SANE_8ff4365fd7663aaa089f175a6fb9d9c5: no hits at all
SANE_98328227b502aa6be6f6fd0e04e6ab34: no hits at all
SANE_98cad0aed53b13a2e01a9f8b55a91599: no hits at all
SANE_99c9d1f4909bb06f6993803835b323a8: no hits at all
SANE_9ccf63bd21526610a1e5766b4a5a66df: no hits at all
SANE_9ec550620e083178d3bcc9d653324939: bad, avg S/O=0.74 avg Spam%=0.51 avg Ham%=0.18
SANE_9f754392a8c622a3eb2ef735b6b00c3b: no hits at all
SANE_a0f2975dc1eba66becd2edb6b9b570de: no hits at all
SANE_a0f55c2936d8123b36954e9ee7de0a28: no hits of target type
SANE_a348ed32eed4ec927e4e6fc579da7586: no hits at all
SANE_a6b4228229a0cbfe4e08052606f0222b: no hits at all
SANE_a995172edaf283f69547eab5551dcc00: no hits at all
SANE_b09e89045a67f8aaed77e9ef430ed68d: no hits at all
SANE_b10b847773f344411d84aee4433f9930: no hits at all
SANE_b12099b9ad9b0db25d01e61276fefab5: no hits at all
SANE_b19a0b09c0fde8d9613593ab4d0874a5: no hits at all
SANE_b258019fe5a5c7a088f62b12c2ffc65a: no hits at all
SANE_b55928166b7dd86d82e1a0675ca2b1d0: no hits at all
SANE_b74c14c03c2502118c8807a607a5744a: no hits at all
SANE_b792624f953fe7bac1bcaf051bea903f: no hits at all
SANE_ba47ac876ecf9d9434a099876632b22b: no hits at all
SANE_be5d4555e028d1b8bc3c17415b5fce95: no hits at all
SANE_c256beae85d9b81958cd20ce9d24fe7b: no hits at all
SANE_c2e7be51eecf941517f318ee39150b12: no hits at all
SANE_c5e5a37703662e0ddb9ade84fbec87a0: no hits at all
SANE_c97e4079b46b2915d66cea44b79f17c5: no hits at all
SANE_c9867f8f421f5cc77866438bcbcd0564: no hits at all
SANE_cc2d7802858f0341d301b7f2d3c9c7c2: no hits at all
SANE_ce7a8ca9858b4f0806b3bbca7bdc595c: no hits at all
SANE_d793965619441891f0b620c084d2d600: no hits at all
SANE_daa623cb11d766d49327b6af6dced27e: no hits at all
SANE_db753c9fabc9457efd8a9e6bcc485803: no hits at all
SANE_dbcae43bbc8bcf65efc826c058a76954: no hits at all
SANE_ded3ba77891b605711b54af2c264b32f: no hits at all
SANE_df300736ee1d0723e9e9361846d6350e: no hits at all
SANE_e1dda269f3dd1d78c4d0e6d154e2c76c: no hits at all
SANE_e25abff035c05b7ff829d5f599a90340: no hits at all
SANE_e2ae2c84e02091f07fa6f6fa5fbf5f56: no hits at all
SANE_e3634fb4bb521c6a312bb1d001c20a1d: bad, avg S/O=0.78 avg Spam%=0.33 avg Ham%=0.10
SANE_e4fa59cc2a88295a3bd2c84e67564be7: no hits at all
SANE_e761c503a58719e688c96a3ee254fbce: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.28
SANE_e9470267063d9892fd9da5697e7fdd5f: no hits at all
SANE_eab2266c69bb04051617e2559fd196d9: no hits at all
SANE_ec20496617c80edc5fea24737f73bdc7: no hits at all
SANE_ec474d58454de0340f7e1ceae041b069: no hits at all
SANE_ef00ce28cfa5ed6e4c405ed37ff36d46: no hits at all
SANE_ef36779acd8a23f6576af6a431c00cca: no hits at all
SANE_efde2712b85bfb5e8597b36b4485ebef: no hits at all
SANE_f103e97140c3b2a483cd702f35e2a38c: no hits at all
SANE_f71a6e07c3f770cd68f363db8526de0b: no hits at all
SANE_fac0031ae2a816e3f81394b40b5cb44f: no hits at all
SANE_fb4053a5b92a05b0cd322a34ab76561c: no hits at all
SANE_m150552353f7eaba57a4da76c2a82098d: no hits at all
SANE_m5372bd5260d3e6022b05cc794a288a72: no hits at all
SANE_m614d8dba879f47d3fe5ffbde4aa8d8a7: no hits at all
SANE_m72c8fe9fa7167078ff0b441e95bcb586: no hits at all
SANE_mb49329effea35453d098d577cddd778f: no hits at all
rulesrc/sandbox/jm/70_tt_drugs.cf (12 rules, 2 bad):
TT_OBSCURED_VALIUM: no hits at all
TT_OBSCURED_VIAGRA: no hits at all
rulesrc/sandbox/jm/20_storm.cf (2 rules, 1 bad):
JM_MID_STORM: no hits at all
rulesrc/sandbox/jm/20_games.cf (3 rules, 3 bad):
GAMES: no hits at all
__GAMES_BODY: no hits at all
# used in: GAMES
__GAMES_SUBJ: no hits at all
# used in: GAMES
rulesrc/sandbox/jm/20_basic.cf (101 rules, 52 bad):
AB_TEST_PDF4: bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
BBC_RCVD_NCHAR_RAW: no hits at all
CARD_DIRECT_WWW_ADDRESS: no hits at all
CTYPE_001C_B: bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.24
CURR_PRICE: no hits of target type
DUH_DIKSBJ: no hits at all
DVLABS_GOZI_PDF: no hits at all
FAKE_OUTBLAZE_RCVD_168: no hits at all
FAKE_OUTBLAZE_RCVD_168_2: no hits at all
HDR_ORDER_FTSDMCXX_001C: no hits at all
HDR_ORDER_FTSDMCXX_BAT: no hits at all
IMG_ALT_HSPACE_CID_ALIGN: bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
IMG_CID_PART1: no hits of target type
JM_GMT_RCVD: no hits at all
JM_HOODIA: no hits at all
JM_NICE_GIRL: no hits at all
JM_REACTOR_MAILER: no hits at all
JM_REMOVE_FROM_URL: no hits at all
LOLLY_419: no hits at all
MSHTML_6_00_2900_3199_A: no hits at all
MSHTML_6_00_2900_3199_B: no hits at all
MSHTML_6_00_2900_3199_C: no hits at all
MSNBC_HDR_ORDER: no hits at all
MSNBC_MESSAGEGUID: no hits at all
MSNBC_THREAD_INDEX: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.94
PART_CID_STOCK_LESS: no hits at all
PR_TD_NOWRAP_BAT: no hits at all
RCVD_FORGED_WROTE: no hits at all
RCVD_MAIL_COM: no hits at all
SB_GIF_AND_NO_URIS: bad, avg S/O=0.78 avg Spam%=0.05 avg Ham%=0.01
STOCK_IMG_CTYPE: bad, avg S/O=0.66 avg Spam%=0.03 avg Ham%=0.02
STOCK_IMG_HTML: no hits at all
STOCK_IMG_OUTLOOK: bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
STOX_BOUND_090909_B: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.77
STOX_META_5: no hits at all
STOX_UA: no hits of target type
TEMPLATE_203_RCVD: no hits at all
TVD_PDF_FINGER01_JO: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.03
__CARD_DIRECT_WWW_ADDRESS: no hits of target type
# used in: CARD_DIRECT_WWW_ADDRESS
__HAS_ANY_EMAIL: bad, avg S/O=0.29 avg Spam%=25.18 avg Ham%=60.23
# used in: SB_GIF_AND_NO_URIS
__HAS_ANY_URI: bad, avg S/O=0.52 avg Spam%=88.69 avg Ham%=83.43
# used in: SB_GIF_AND_NO_URIS
__JM_REACTOR_DATE: bad, avg S/O=0.43 avg Spam%=3.60 avg Ham%=4.75
# used in: JM_REACTOR_MAILER
__JM_REACTOR_XM2900: bad, avg S/O=0.75 avg Spam%=1.10 avg Ham%=0.37
# used in: JM_REACTOR_MAILER
__JM_REACTOR_XMOLE: bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.37
# used in: JM_REACTOR_MAILER
__LEGIT_MARLO_CARD: no hits of target type
# used in: CARD_DIRECT_WWW_ADDRESS
__MID_START_001C: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.24
# used in: HDR_ORDER_FTSDMCXX_001C
__MIMEOLE_1106: bad, avg S/O=0.78 avg Spam%=0.21 avg Ham%=0.06
# used in: DOS_FIX_MY_URI
__MSNBC_NOT_EXCH: bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%=14.62
# used in: MSNBC_THREAD_INDEX
__MSNBC_THREAD_INDEX: bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.79
# used in: MSNBC_THREAD_INDEX
__NAKED_TO: bad, avg S/O=0.53 avg Spam%=35.83 avg Ham%=31.90
# used in: DOS_DEREK_AUG08
__PR_TD_NOWRAP: bad, avg S/O=0.78 avg Spam%=0.18 avg Ham%=0.05
# used in: PR_TD_NOWRAP_BAT
__XM_MS_IN_GENERAL: bad, avg S/O=0.79 avg Spam%=42.00 avg Ham%=10.95
# used in: STOCK_IMG_OUTLOOK
rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (1 rules, 1 bad):
URI_OBFU_WWW: bad, avg S/O=0.76 avg Spam%=0.05 avg Ham%=0.02
rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (19 rules, 14 bad):
FORGED_TBIRD_IMG_ARROW: bad, avg S/O=0.62 avg Spam%=0.01 avg Ham%=0.01
FORGED_TBIRD_IMG_SIZE: bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.00
IMG_DIRECT_TO_MX: bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
TO_NO_BRKTS_FREEMAIL: bad, avg S/O=0.25 avg Spam%=2.42 avg Ham%=7.35
TO_NO_BRKTS_FROM_RUNON: bad, avg S/O=0.48 avg Spam%=0.57 avg Ham%=0.62
TO_NO_BRKTS_HTML_IMG: bad, avg S/O=0.44 avg Spam%=0.23 avg Ham%=0.30
__FORGED_TBIRD_IMG: bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
# used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE
__IMG_LE_300K: bad, avg S/O=0.52 avg Spam%=1.12 avg Ham%=1.03
# used in: FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX
__JPEG_ATTACH: bad, avg S/O=0.39 avg Spam%=1.30 avg Ham%=2.01
# used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE IMAGE_MISMATCH IMG_DIRECT_TO_MX __FORGED_TBIRD_IMG
__MIME_BDRY_0D0D: bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.22
# used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE __FORGED_TBIRD_IMG
__MUA_TBIRD: bad, avg S/O=0.08 avg Spam%=0.64 avg Ham%=7.57
# used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE __FORGED_TBIRD_IMG
__ONE_IMG: bad, avg S/O=0.47 avg Spam%=1.65 avg Ham%=1.83
# used in: FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX TO_NO_BRKTS_HTML_IMG
__TO_NO_ARROWS_R: bad, avg S/O=0.52 avg Spam%=39.60 avg Ham%=36.56
# used in: FORGED_TBIRD_IMG_ARROW TO_NO_BRKTS_FREEMAIL TO_NO_BRKTS_FROM_RUNON TO_NO_BRKTS_HTML_IMG
__TO_UNDISCLOSED: bad, avg S/O=0.52 avg Spam%=0.68 avg Ham%=0.64
# used in: FORGED_TBIRD_IMG_ARROW TO_NO_BRKTS_FROM_RUNON TO_NO_BRKTS_HTML_IMG
rulesrc/sandbox/jhardin/20_misc_testing.cf (54 rules, 26 bad):
CALL_SKYPE: no hits at all
FREEMAIL_DOC_PDF: bad, avg S/O=0.18 avg Spam%=0.08 avg Ham%=0.37
HDRS_LCASE: bad, avg S/O=0.24 avg Spam%=0.38 avg Ham%=1.23
HTML_ATTACH: bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.13
LAZY_LISTWASHING: bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
MANY_SUBDOM: bad, avg S/O=0.63 avg Spam%=0.03 avg Ham%=0.01
MDN_BOTCHED: no hits at all
MISQ_HTML: bad, avg S/O=0.11 avg Spam%=0.06 avg Ham%=0.45
OBFU_DOC_ATTACH: bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.30
OBFU_HTML_ATTACH: bad, avg S/O=0.61 avg Spam%=0.02 avg Ham%=0.01
OBFU_PDF_ATTACH: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.50
RFC_ABUSE_POST: no hits of target type
RUNON_SHY: no hits of target type
TO_EQ_FROM: bad, avg S/O=0.77 avg Spam%=26.72 avg Ham%=8.00
URI_NUMERIC_CCTLD: bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
WIKI_IMG: bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
__DOC_ATTACH: bad, avg S/O=0.04 avg Spam%=0.12 avg Ham%=2.95
# used in: FREEMAIL_DOC_PDF
__DOC_ATTACH_FN1: bad, avg S/O=0.03 avg Spam%=0.09 avg Ham%=2.72
# used in: FREEMAIL_DOC_PDF __DOC_ATTACH
__DOC_ATTACH_FN2: bad, avg S/O=0.03 avg Spam%=0.09 avg Ham%=2.74
# used in: FREEMAIL_DOC_PDF __DOC_ATTACH
__DOC_ATTACH_MT: bad, avg S/O=0.04 avg Spam%=0.10 avg Ham%=2.63
# used in: FREEMAIL_DOC_PDF __DOC_ATTACH
__FROM_RUNON: bad, avg S/O=0.58 avg Spam%=0.94 avg Ham%=0.68
# used in: TO_NO_BRKTS_FROM_RUNON
__HDRS_LCASE: bad, avg S/O=0.72 avg Spam%=11.02 avg Ham%=4.30
# used in: HDRS_LCASE HDRS_LCASE_NOASIA
__PDF_ATTACH: bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.01
# used in: FREEMAIL_DOC_PDF
__PDF_ATTACH_FN1: bad, avg S/O=0.02 avg Spam%=0.03 avg Ham%=1.63
# used in: FREEMAIL_DOC_PDF __PDF_ATTACH
__PDF_ATTACH_FN2: bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.61
# used in: FREEMAIL_DOC_PDF __PDF_ATTACH
__PDF_ATTACH_MT: bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=1.52
# used in: FREEMAIL_DOC_PDF __PDF_ATTACH
rulesrc/sandbox/jhardin/20_lotsa_money.cf (98 rules, 41 bad):
LOTS_OF_MONEY: bad, avg S/O=0.49 avg Spam%=2.56 avg Ham%=2.65
LOTTO_YOU_WON: bad, avg S/O=0.75 avg Spam%=1.93 avg Ham%=0.64
MONEY_FRAUD: bad, avg S/O=0.78 avg Spam%=1.56 avg Ham%=0.45
__AFR_UNION: bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
# used in: MONEY_FRAUD
__CHARITY: bad, avg S/O=0.35 avg Spam%=0.14 avg Ham%=0.27
# used in: MONEY_FRAUD
__COMPENSATION: bad, avg S/O=0.49 avg Spam%=0.17 avg Ham%=0.18
# used in: MONEY_FRAUD
__DEAD_PARENT: bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
# used in: MONEY_FRAUD
__DEAL: bad, avg S/O=0.55 avg Spam%=2.13 avg Ham%=1.73
# used in: MONEY_FRAUD
__DECEASED: bad, avg S/O=0.72 avg Spam%=0.64 avg Ham%=0.24
# used in: MONEY_FRAUD
__DIED_IN: bad, avg S/O=0.54 avg Spam%=0.16 avg Ham%=0.14
# used in: MONEY_FRAUD
__DIPLOMATIC: bad, avg S/O=0.48 avg Spam%=0.06 avg Ham%=0.07
# used in: MONEY_FRAUD
__FEES: bad, avg S/O=0.48 avg Spam%=0.10 avg Ham%=0.11
# used in: MONEY_FRAUD
__FOUND_YOU: bad, avg S/O=0.73 avg Spam%=0.05 avg Ham%=0.02
# used in: MONEY_FRAUD
__FRAUD: bad, avg S/O=0.59 avg Spam%=0.52 avg Ham%=0.36
# used in: MONEY_FRAUD
__FRAUD_PTX: bad, avg S/O=0.28 avg Spam%=0.15 avg Ham%=0.39
# used in: MONEY_FRAUD
__HUSH_HUSH: bad, avg S/O=0.39 avg Spam%=3.66 avg Ham%=5.61
# used in: MONEY_FRAUD
__IS_LEGAL: bad, avg S/O=0.32 avg Spam%=0.01 avg Ham%=0.03
# used in: MONEY_FRAUD
__I_INHERIT: bad, avg S/O=0.66 avg Spam%=0.06 avg Ham%=0.03
# used in: MONEY_FRAUD
__LOTSA_MONEY_00: bad, avg S/O=0.41 avg Spam%=0.38 avg Ham%=0.55
# used in: LOTS_OF_MONEY MONEY_FRAUD
__LOTSA_MONEY_01: bad, avg S/O=0.50 avg Spam%=1.58 avg Ham%=1.57
# used in: LOTS_OF_MONEY MONEY_FRAUD
__LOTSA_MONEY_02: bad, avg S/O=0.56 avg Spam%=0.29 avg Ham%=0.23
# used in: LOTS_OF_MONEY MONEY_FRAUD
__LOTSA_MONEY_03: bad, avg S/O=0.47 avg Spam%=0.68 avg Ham%=0.78
# used in: LOTS_OF_MONEY MONEY_FRAUD
__LOTTO_ADMITS_3: bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.01
# used in: MONEY_FRAUD
__LUCRATIVE: bad, avg S/O=0.51 avg Spam%=0.06 avg Ham%=0.05
# used in: MONEY_FRAUD
__MILLIONS: bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.09
# used in: MONEY_FRAUD
__MY_FORTUNE: bad, avg S/O=0.53 avg Spam%=0.01 avg Ham%=0.01
# used in: MONEY_FRAUD
__NIGERIA: bad, avg S/O=0.77 avg Spam%=0.16 avg Ham%=0.05
# used in: MONEY_FRAUD
__NOT_SCAM: bad, avg S/O=0.64 avg Spam%=0.00 avg Ham%=0.00
# used in: MONEY_FRAUD
__OUR_BEHALF: bad, avg S/O=0.77 avg Spam%=0.06 avg Ham%=0.02
# used in: MONEY_FRAUD
__PCT_OF_PMTS: bad, avg S/O=0.73 avg Spam%=0.00 avg Ham%=0.00
# used in: MONEY_FRAUD
__RANDOM_PICK: bad, avg S/O=0.58 avg Spam%=0.10 avg Ham%=0.07
# used in: MONEY_FRAUD
__SCAM: bad, avg S/O=0.43 avg Spam%=0.08 avg Ham%=0.10
# used in: MONEY_FRAUD
__TRUSTED_CHECK: bad, avg S/O=0.68 avg Spam%=0.02 avg Ham%=0.01
# used in: MONEY_FRAUD
__UN: bad, avg S/O=0.38 avg Spam%=0.08 avg Ham%=0.13
# used in: MONEY_FRAUD
__WIDOW: bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.01
# used in: MONEY_FRAUD
__WILL_LEGAL: bad, avg S/O=0.77 avg Spam%=0.07 avg Ham%=0.02
# used in: MONEY_FRAUD
__WIRE_XFR: bad, avg S/O=0.75 avg Spam%=0.11 avg Ham%=0.04
# used in: MONEY_FRAUD
__XFER_MONEY: bad, avg S/O=0.79 avg Spam%=0.17 avg Ham%=0.05
# used in: MONEY_FRAUD
__YOUR_PERM: bad, avg S/O=0.11 avg Spam%=0.04 avg Ham%=0.32
# used in: MONEY_FRAUD
__YOU_ASSIST: bad, avg S/O=0.65 avg Spam%=0.27 avg Ham%=0.14
# used in: MONEY_FRAUD
__YOU_WON_01: bad, avg S/O=0.75 avg Spam%=1.87 avg Ham%=0.61
# used in: LOTTO_YOU_WON MONEY_FRAUD
rulesrc/sandbox/jhardin/20_fillform.cf (10 rules, 3 bad):
FILL_THIS_FORM_SHORT: bad, avg S/O=0.75 avg Spam%=0.54 avg Ham%=0.18
__FILL_THIS_FORM_PARTIAL: bad, avg S/O=0.49 avg Spam%=0.42 avg Ham%=0.43
# used in: FILL_THIS_FORM_SHORT FILL_THIS_FORM_SHORT
__FILL_THIS_FORM_PARTIAL_RAW: bad, avg S/O=0.47 avg Spam%=1.16 avg Ham%=1.31
# used in: FILL_THIS_FORM_SHORT FILL_THIS_FORM_SHORT
rulesrc/sandbox/jhardin/20_MIME_no_text.cf (6 rules, 5 bad):
MIME_NO_TEXT: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.31
MIME_PHP_NO_TEXT: no hits of target type
__ANY_TEXT_ATTACH: bad, avg S/O=0.51 avg Spam%=99.80 avg Ham%=94.97
# used in: MIME_NO_TEXT MIME_PHP_NO_TEXT
__CTYPE_MULTIPART_ANY: bad, avg S/O=0.52 avg Spam%=47.53 avg Ham%=43.82
# used in: MIME_NO_TEXT MIME_PHP_NO_TEXT
__XM_PHP: bad, avg S/O=0.66 avg Spam%=0.07 avg Ham%=0.04
# used in: MIME_PHP_NO_TEXT
rulesrc/sandbox/hstern/70_syndicate.cf (15 rules, 15 bad):
HS_FAST_FORWARD: no hits of target type
HS_FORGED_OE_FW: no hits of target type
HS_ODD_OE_ORIGINAL_MESSAGE: no hits at all
HS_OE_FUNNY_BODY_FROM: no hits at all
HS_SYNDICATE_P1: no hits at all
HS_SYNDICATE_P2: no hits of target type
HS_SYNDICATE_P3: no hits at all
HS_SYNDICATE_P4: no hits at all
HS_SYNDICATE_P5: no hits at all
__HS_FUNNY_BODY_FROM: no hits of target type
# used in: HS_OE_FUNNY_BODY_FROM HS_SYNDICATE_P4
__HS_NONDEFAULT_OE_QUOTE: bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.50
# used in: HS_SYNDICATE_P2
__HS_ODD_ORIGINAL_MESSAGE: no hits of target type
# used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P3
__HS_QUOTE: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=5.32
# used in: HS_SYNDICATE_P2 __HS_NONDEFAULT_OE_QUOTE
__HS_SUBJ_RE_FW: bad, avg S/O=0.01 avg Spam%=0.49 avg Ham%=37.89
# used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P2 HS_SYNDICATE_P3 __HS_NONDEFAULT_OE_QUOTE
__HS_SUBJ_UC_FW: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.77
# used in: HS_FORGED_OE_FW HS_SYNDICATE_P1
rulesrc/sandbox/hstern/20_uri_tests.cf (15 rules, 15 bad):
HS_EXTRA: no hits of target type
HS_GETMEOFF: no hits at all
HS_INDEX_PARAM: bad, avg S/O=0.46 avg Spam%=0.31 avg Ham%=0.37
HS_URI_HOOKUP: no hits at all
T_HS_INDEX_PARAM_0: bad, avg S/O=0.46 avg Spam%=0.52 avg Ham%=0.61
T_HS_INDEX_PARAM_1: bad, avg S/O=0.42 avg Spam%=0.40 avg Ham%=0.56
T_HS_INDEX_PARAM_2: bad, avg S/O=0.49 avg Spam%=0.52 avg Ham%=0.53
T_HS_INDEX_PARAM_3: bad, avg S/O=0.45 avg Spam%=0.31 avg Ham%=0.38
T_HS_INDEX_PARAM_4: bad, avg S/O=0.47 avg Spam%=0.52 avg Ham%=0.59
T_HS_INDEX_PARAM_5: bad, avg S/O=0.46 avg Spam%=0.31 avg Ham%=0.37
__HS_AOL_URI: no hits at all
# used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5
__HS_FREEHOST_URI: bad, avg S/O=0.21 avg Spam%=0.03 avg Ham%=0.11
# used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5
__HS_GEOCITIES_URI: bad, avg S/O=0.20 avg Spam%=0.03 avg Ham%=0.11
# used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5 __HS_FREEHOST_URI
__HS_MSNSPACES_URI: no hits at all
# used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5 __HS_FREEHOST_URI
__HS_TRIPOD_URI: bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.01
# used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5 __HS_FREEHOST_URI
rulesrc/sandbox/hstern/20_meta_tests.cf (1 rules, 1 bad):
HS_DRUG_DOLLAR_MANY: no hits at all
rulesrc/sandbox/hstern/20_head_tests.cf (5 rules, 3 bad):
HS_OUTLOOK_MID_NOBRK: no hits at all
HS_SUBJ_NEW_SOFTWARE: no hits at all
HS_SUBJ_ONLINE_PHARMACEUTICAL: no hits at all
rulesrc/sandbox/hstern/20_body_tests.cf (8 rules, 6 bad):
HS_BODY_UPLOADED_SOFTWARE: no hits at all
HS_DRUG_DOLLAR_2: no hits at all
HS_DRUG_DOLLAR_3: no hits at all
HS_MEETUP_FOR_SEX: no hits at all
HS_NO_FLOWERS: no hits at all
HS_SEXOHOLICS_DATESITE: no hits at all
rulesrc/sandbox/hege/20_hk.cf (97 rules, 27 bad):
HK_FAKENAME_YAHOO: bad, avg S/O=0.74 avg Spam%=0.05 avg Ham%=0.02
HK_MUCHMONEY: bad, avg S/O=0.37 avg Spam%=3.02 avg Ham%=5.10
HK_NAME_DR: bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.13
HK_NAME_FROM: bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
HK_RANDOM_FROM_NAME: bad, avg S/O=0.71 avg Spam%=0.15 avg Ham%=0.06
HK_SCAM_S22: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
HK_SCAM_S23: no hits of target type
HK_SCAM_S3: bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.02
HK_SCAM_S4: bad, avg S/O=0.68 avg Spam%=0.02 avg Ham%=0.01
HK_SUBJECT_SPACES: bad, avg S/O=0.73 avg Spam%=0.07 avg Ham%=0.03
HK_WIN: bad, avg S/O=0.64 avg Spam%=2.62 avg Ham%=1.49
__HK_HELO_YAHOO: bad, avg S/O=0.06 avg Spam%=0.42 avg Ham%=6.86
# used in: HK_FAKENAME_YAHOO
__HK_NAME_DR: bad, avg S/O=0.33 avg Spam%=0.07 avg Ham%=0.13
# used in: HK_NAME_DR
__HK_NAME_FROM: bad, avg S/O=0.80 avg Spam%=0.02 avg Ham%=0.00
# used in: HK_NAME_FROM
__HK_NAME_YAHOO: bad, avg S/O=0.61 avg Spam%=0.06 avg Ham%=0.04
# used in: HK_FAKENAME_YAHOO
__hk_bigmoney: bad, avg S/O=0.39 avg Spam%=2.60 avg Ham%=4.03
# used in: HK_MUCHMONEY
__hk_million: bad, avg S/O=0.36 avg Spam%=1.26 avg Ham%=2.22
# used in: HK_MUCHMONEY
__hk_million2: bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
# used in: HK_MUCHMONEY
__hk_win_4: bad, avg S/O=0.66 avg Spam%=0.06 avg Ham%=0.03
# used in: HK_WIN
__hk_win_6: bad, avg S/O=0.70 avg Spam%=1.18 avg Ham%=0.51
# used in: HK_WIN
__hk_win_7: no hits of target type
# used in: HK_WIN
__hk_win_9: no hits at all
# used in: HK_WIN
__hk_win_d: no hits at all
# used in: HK_WIN
__hk_win_e: bad, avg S/O=0.57 avg Spam%=1.15 avg Ham%=0.85
# used in: HK_WIN
__hk_win_h: bad, avg S/O=0.30 avg Spam%=0.03 avg Ham%=0.06
# used in: HK_WIN
__hk_win_m: no hits at all
# used in: HK_WIN
__hk_win_n: bad, avg S/O=0.59 avg Spam%=0.00 avg Ham%=0.00
# used in: HK_WIN
rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (71 rules, 63 bad):
FAKE_REPLY_A1: bad, avg S/O=0.72 avg Spam%=0.04 avg Ham%=0.01
FAKE_REPLY_B: bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.10
FAKE_REPLY_C: bad, avg S/O=0.79 avg Spam%=0.11 avg Ham%=0.03
FAKE_REPLY_SURE_A: bad, avg S/O=0.01 avg Spam%=0.26 avg Ham%=23.97
FAKE_REPLY_SURE_B: bad, avg S/O=0.01 avg Spam%=0.27 avg Ham%=30.79
NICE_REPLY_A: no hits of target type
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
NICE_REPLY_B: no hits of target type
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
NICE_REPLY_C: no hits of target type
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
TEST_REPLY_B: no hits of target type
TEST_REPLY_C: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.98
__BOTH_INR_AND_REF: bad, avg S/O=0.67 avg Spam%=3.96 avg Ham%=1.97
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A
__BROKE_MUAS: bad, avg S/O=0.43 avg Spam%=0.65 avg Ham%=0.87
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
__INR_AND_NO_REF: bad, avg S/O=0.12 avg Spam%=1.29 avg Ham%=9.49
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B
__MISSING_REF: bad, avg S/O=0.62 avg Spam%=99.98 avg Ham%=61.54
# used in: FAKE_REPLY_C FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B
__MISSING_REPLY: bad, avg S/O=0.62 avg Spam%=96.93 avg Ham%=59.81
# used in: FAKE_REPLY_A1 FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_C
__MISSING_THREAD: bad, avg S/O=0.57 avg Spam%=96.83 avg Ham%=72.43
# used in: FAKE_REPLY_SURE_A
__SUBJ_RE: bad, avg S/O=0.01 avg Spam%=0.44 avg Ham%=35.29
# used in: FAKE_REPLY_C FAKE_REPLY_A1 FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B TEST_REPLY_C
__UA_GNUS: no hits of target type
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__UA_IMP: bad, avg S/O=0.03 avg Spam%=0.06 avg Ham%=1.84
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__UA_KMAIL: bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.74
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__UA_KNODE: no hits of target type
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__UA_MOZ5: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.08
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__UA_MSENTOUR: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.18
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__UA_MSOEMAC: no hits of target type
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__UA_MUTT: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.16
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__UA_PAN: no hits of target type
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__UA_XNEWS: no hits of target type
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__XM_AOL: bad, avg S/O=0.60 avg Spam%=0.16 avg Ham%=0.11
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_APPLEMAIL: bad, avg S/O=0.02 avg Spam%=0.06 avg Ham%=3.15
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_BALSA: no hits of target type
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_CALYPSO: no hits of target type
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_COMMUNIG: bad, avg S/O=0.22 avg Spam%=0.02 avg Ham%=0.06
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_DTMAIL: no hits of target type
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_EDMAX: no hits at all
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_ELM: bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.03
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_EMUMAIL: no hits of target type
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_EXMH: bad, avg S/O=0.14 avg Spam%=0.01 avg Ham%=0.03
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_FORTE: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.03
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_GNUS: no hits of target type
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__XM_IMAIL: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_LOTUSN: bad, avg S/O=0.01 avg Spam%=0.03 avg Ham%=1.93
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_LOTUSN5: no hits of target type
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_MAILCITY: no hits of target type
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_MAILSMITH: no hits of target type
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_MHE: no hits at all
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_MIMETOOLS: bad, avg S/O=0.63 avg Spam%=0.03 avg Ham%=0.02
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_MOZ4: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.08
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__XM_MSCDO: bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.59
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_MSOUT: bad, avg S/O=0.50 avg Spam%=1.02 avg Ham%=1.00
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_NETMAIL: bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_NETSCAPEW: no hits of target type
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_NOVELL: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.66
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_OPENWEB: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_OPERA6: no hits at all
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_PEGASUS: bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.07
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_POSTMAN: no hits at all
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_QUALCOM: bad, avg S/O=0.09 avg Spam%=0.04 avg Ham%=0.41
# used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
__XM_SQRLMAIL: bad, avg S/O=0.62 avg Spam%=0.04 avg Ham%=0.03
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_SYLPHEED: bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.03
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_VM: bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.03
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
__XM_WEBMAIL5: no hits at all
# used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B __BROKE_MUAS
__XM_WWWMAIL: bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
# used in: FAKE_REPLY_C FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
__XM_XIMEVOL: bad, avg S/O=0.50 avg Spam%=0.02 avg Ham%=0.02
# used in: FAKE_REPLY_A1 FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
rulesrc/sandbox/felicity/70_phishing.cf (54 rules, 28 bad):
HTTPS_HTTP_MISMATCH: bad, avg S/O=0.61 avg Spam%=0.03 avg Ham%=0.02
TVD_PH_1: bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
TVD_PH_7: bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
TVD_PH_BODY_ACCOUNTS_POST: bad, avg S/O=0.41 avg Spam%=0.05 avg Ham%=0.08
TVD_PH_BODY_ACCOUNTS_PRE: bad, avg S/O=0.73 avg Spam%=0.10 avg Ham%=0.04
TVD_PH_BODY_META_ALL: bad, avg S/O=0.66 avg Spam%=0.22 avg Ham%=0.12
TVD_PH_FR5: bad, avg S/O=0.80 avg Spam%=0.06 avg Ham%=0.02
TVD_PH_SEC: bad, avg S/O=0.61 avg Spam%=0.01 avg Ham%=0.01
TVD_PH_SUBJ_ACCOUNTS_PRE: bad, avg S/O=0.74 avg Spam%=0.05 avg Ham%=0.02
TVD_PH_SUBJ_META: bad, avg S/O=0.79 avg Spam%=0.02 avg Ham%=0.01
TVD_PH_SUBJ_META_ALL: bad, avg S/O=0.77 avg Spam%=0.14 avg Ham%=0.04
TVD_PH_SUBJ_UPDATE: bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.01
# used in: TVD_PH_SUBJ_META_ALL
TVD_SUBJ_ACC_NUM: bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
__PH_TVD_FROM2: bad, avg S/O=0.42 avg Spam%=0.08 avg Ham%=0.10
# used in: TVD_PH_FR5
__TVD_PH_BODY_02: no hits of target type
# used in: TVD_PH_BODY_META_ALL
__TVD_PH_BODY_05: bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
# used in: TVD_PH_BODY_META_ALL
__TVD_PH_BODY_07: no hits at all
# used in: TVD_PH_BODY_META_ALL
__TVD_PH_SUBJ_00: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_02: no hits of target type
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_04: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_15: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_18: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_29: bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_36: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_39: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_52: bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_58: no hits at all
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
__TVD_PH_SUBJ_ACCESS_POST: bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
# used in: TVD_PH_SUBJ_META TVD_PH_SUBJ_META_ALL
rulesrc/sandbox/felicity/70_other.cf (74 rules, 55 bad):
BASE64_LENGTH_79_INF: bad, avg S/O=0.51 avg Spam%=0.01 avg Ham%=0.01
FUZZY_SPRM: bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
HEADER_COUNT_SUBJECT: no hits at all
NULL_IN_BODY: bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
SUBJECT_NEEDS_ENCODING: bad, avg S/O=0.53 avg Spam%=0.42 avg Ham%=0.37
TVD_APPROVED: bad, avg S/O=0.79 avg Spam%=0.02 avg Ham%=0.00
TVD_APP_LOAN: bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
TVD_BODY_END_STAR: bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.00
TVD_COMPANY_PICK: no hits at all
TVD_DEAD_JOB: no hits at all
TVD_DOLLARS_US: bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.01
TVD_FINGER_01: no hits of target type
TVD_FUZZY_SECTOR: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.40
TVD_FUZZY_SECURITIES: bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
TVD_FW_GRAPHIC_ID2: bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
TVD_FW_GRAPHIC_ID3: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.49
TVD_FW_GRAPHIC_ID3_2: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.50
TVD_GET_STOCK: bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.02
TVD_GOOG_LUCKY: no hits of target type
TVD_HEAD_EDITION: no hits at all
TVD_HEAD_KERNEL: no hits of target type
TVD_HEAD_USR: no hits at all
TVD_LONG_WORD5: bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
TVD_PCT_OFF: no hits at all
TVD_PDF_FINGER01: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.02
TVD_RATWARE_MSGID_01: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.40
TVD_RCVD_SPACE_BRACKET: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.57
TVD_SINGLE_SPAN_DIV: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
TVD_SPACED_SUBJECT_WORD5: bad, avg S/O=0.47 avg Spam%=0.06 avg Ham%=0.07
TVD_SUBJ_APPR_LOAN: no hits at all
TVD_SUBJ_END_STAR: no hits at all
TVD_SUBJ_FINGER_04: bad, avg S/O=0.27 avg Spam%=0.09 avg Ham%=0.25
TVD_SUBJ_FINGER_07: bad, avg S/O=0.43 avg Spam%=0.00 avg Ham%=0.00
TVD_SUBJ_WIPE_DEBT: no hits of target type
TVD_UA_FOSTERING: no hits at all
TVD_UNDER_VALUED: no hits of target type
T_TVD_IP_OCT: no hits at all
T_TVD_MIME_EPI: bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.06
T_TVD_MIME_NO_HEADERS: bad, avg S/O=0.65 avg Spam%=0.05 avg Ham%=0.03
T_TVD_PCT_OFF3: no hits at all
T_TVD_SUBJ_FINGER_05: bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.03
T_TVD_SUBJ_FINGER_06: bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
__HEAD_X_KERNEL: no hits of target type
# used in: TVD_HEAD_KERNEL
__TVD_BODY: bad, avg S/O=0.50 avg Spam%=99.86 avg Ham%=99.11
# used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
__TVD_GOT_UR: no hits of target type
# used in: TVD_FINGER_01
__TVD_HAPPY_WITH: no hits of target type
# used in: TVD_FINGER_01
__TVD_INT_CID: bad, avg S/O=0.38 avg Spam%=1.59 avg Ham%=2.59
# used in: TVD_FW_GRAPHIC_ID3
__TVD_MIME_ATT: bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.02
# used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
__TVD_MIME_ATT_AOPDF: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.50
# used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
__TVD_MIME_ATT_AP: bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=1.52
# used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
__TVD_MIME_ATT_TP: bad, avg S/O=0.40 avg Spam%=60.19 avg Ham%=91.15
# used in: DOS_DEREK_AUG08 TVD_PDF_FINGER01
__TVD_MIME_CT_MM: bad, avg S/O=0.29 avg Spam%=4.03 avg Ham%=9.75
# used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
__TVD_OUTLOOK_IMG: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.92
# used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__TVD_VISIT_SITE: no hits of target type
# used in: TVD_FINGER_01
__USER_AGENT_MUTT: no hits at all
# used in: TVD_HEAD_KERNEL
rulesrc/sandbox/fanf/30_text.cf (3 rules, 2 bad):
IMG_ALT_BRACKETS: no hits at all
SHORT_TERM_PRICE: bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
rulesrc/sandbox/fanf/20_uri_tests.cf (1 rules, 1 bad):
YAHOO_RDS_REDIR: no hits of target type
rulesrc/sandbox/fanf/10_headers.cf (2 rules, 2 bad):
RCVD_FORGED_WROTE3: no hits at all
RCVD_FORGED_WROTE4: no hits at all
rulesrc/sandbox/emailed/99_alex_dev.cf (10 rules, 8 bad):
AXB_MIME_IMG830: no hits at all
AXB_RCVD_ZOOBSEND: no hits at all
AXB_RCVD_ZOONAT: no hits at all
AXB_XMID_1212: no hits at all
AXB_XMID_1510: no hits at all
AXB_XMID_OEGOESNULL: no hits at all
AXB_XM_SENDMAIL_NOT: no hits at all
AXB_XTIDX_CHAIN: no hits at all
rulesrc/sandbox/emailed/00_FVGT_File001.cf (605 rules, 455 bad):
FB_ACHIEVE_BACH: no hits at all
FB_ADD_INCHES: no hits at all
FB_ALMOST_SEX: no hits at all
FB_ANA_TRIM: no hits at all
FB_ANUI: no hits at all
FB_AN_ERROR_4U: no hits at all
FB_B0NUS: no hits of target type
FB_BAD_ERECT: no hits at all
FB_BEDISCARDED: no hits at all
FB_BE_MILLION: bad, avg S/O=0.38 avg Spam%=0.00 avg Ham%=0.01
FB_BILLI0N: no hits at all
FB_BOOST_CONFIDEN: no hits of target type
FB_BROKEN_PHNUM: no hits at all
FB_BROWSER_ERR: no hits at all
FB_C0MPANY: no hits at all
FB_CAN_LONGER: no hits at all
FB_CASINO: no hits of target type
FB_CASINO_SPELLER: no hits at all
FB_CHOLESTERBLCK: no hits at all
FB_COM_ADR_SIGN: no hits of target type
FB_CONSOL_YOUR: bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
FB_DDDD_BUCKS: bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
FB_DOUBLE_0WORDS: no hits at all
FB_DROWNING_DEBT: no hits of target type
FB_EARN_UP_TO: bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
FB_EMAIL_HIER: no hits at all
FB_ENHANCED_MALE: no hits at all
FB_EPHEDRA_IS: no hits at all
FB_EXPLOSIVE: no hits of target type
FB_EXP_POWER_OF: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
FB_FAKE_NUMBERS: no hits at all
FB_FAKE_NUMS2: no hits at all
FB_FAKE_NUMS4: no hits at all
FB_FEDERALLY_COMPL: no hits at all
FB_FHARMACY: no hits at all
FB_FORWARD_LOOK: no hits at all
FB_FREE888: no hits at all
FB_FUNNY_WEIGHT: bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
FB_GAPPY_ADDRESS: no hits at all
FB_GAPPY_SOMETHING: bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.00
FB_GET_LAID: no hits at all
FB_GET_XXX_CASH: no hits at all
FB_HA1R: no hits at all
FB_HEY_BRO_COMMA: no hits at all
FB_HG_H_CAP: no hits at all
FB_HOMELOAN: no hits at all
FB_IMPRESS_GIRL: no hits at all
FB_IMPROVEJA: no hits at all
FB_INCREASE_VOL: no hits of target type
FB_IOW: no hits of target type
FB_L0AN: no hits at all
FB_LAON: no hits of target type
FB_LETTERS_21B: no hits at all
FB_LIMITED_TIME: bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
FB_LOWER_PAYM: no hits at all
FB_MAGIC_TAB: bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
FB_MAKE_MONEY: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.00
FB_MASCULINE_PERF: no hits at all
FB_MEEDS: bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
FB_MORE_SIZE: no hits at all
FB_N3W: no hits at all
FB_NATIONALSURV: no hits at all
FB_NEW_LOW_RATE: no hits of target type
FB_NOT_PHONE_NUM1: no hits at all
FB_NOT_PHONE_NUM3: no hits at all
FB_NOT_SCHOOL: no hits at all
FB_NOT_SEXUAL: no hits of target type
FB_NOW_NOW_NOW: no hits at all
FB_NO_MORE_ADS: bad, avg S/O=0.64 avg Spam%=0.00 avg Ham%=0.00
FB_NO_MORE_HTTP: bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
FB_NO_MORE_MAIL: bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
FB_NUMYO: no hits at all
FB_NUMYO2: no hits at all
FB_ODD_SPACED_MONEY: no hits at all
FB_ONIINE: no hits at all
FB_P1LL: no hits at all
FB_PA1N: no hits at all
FB_PASTE_LINK: no hits at all
FB_PC_DOCTOR: no hits at all
FB_PENIS_GROWTH: no hits at all
FB_PIPEDOLLAR: no hits at all
FB_PIPENEWSLETTER: no hits at all
FB_PIPE_ILLION: no hits at all
FB_PROLONGED_HARD: no hits at all
FB_RANDOM_SPUR: no hits at all
FB_REFI: no hits of target type
FB_REF_CODE_SPACE: no hits at all
FB_REM_PART: no hits of target type
FB_REPLIC_CAP: no hits at all
FB_REWARDS_GATE: no hits at all
FB_RE_FI: no hits at all
FB_ROLLER_IS_T: no hits at all
FB_ROLX: no hits at all
FB_SPACED_CASH: no hits at all
FB_SPACED_FREE: bad, avg S/O=0.64 avg Spam%=0.00 avg Ham%=0.00
FB_SPACED_LOWER: no hits at all
FB_SPACED_PHN_3B: bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
FB_SPACEY_ZIP: no hits at all
FB_SPUR_M: no hits at all
FB_SSEX: no hits at all
FB_STOCK_EXPLODE: no hits at all
FB_STOP_EMAILING: no hits at all
FB_STREAM_OF: no hits at all
FB_STRONGER_EJ: no hits at all
FB_SUPERBREWARD: no hits at all
FB_SYMBLO: no hits at all
FB_THOUS_PERSONAL: no hits at all
FB_UGGS_NOW: no hits at all
FB_UNLOCK_YOUR_G: no hits at all
FB_UNRESOLV_PROV: no hits at all
FB_VERIFY_ZIP: no hits at all
FB_V_SPACE_GRA: no hits at all
FB_WHILECONNECTED: no hits at all
FB_WHITEGOLD: no hits at all
FB_WITHOUT_INCRE: no hits of target type
FB_WORD1_END_DOLLAR: bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.02
FB_WORD2_END_DOLLAR: bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.06
FB_YOURSELF_MASTER: no hits at all
FB_YOUR_MORTGAGE: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
FB_YOUR_PC_ERROR: no hits at all
FB_YOUR_REFI: no hits at all
FB_YOUR_REFILL: bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
FB_YOUR_WOMAN: no hits at all
FB_YOUTH_THIS: no hits at all
FB_YOU_LOVE: no hits at all
FF_COMMENT_ODD: bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
FF_IHOPE_YOU_SINK: bad, avg S/O=0.47 avg Spam%=0.21 avg Ham%=0.23
FF_LEO_FLOAT_RIGHT: no hits at all
FH_BAD_MSOE14: no hits at all
FH_BAD_OEV1441: no hits at all
FH_DATE_IS_19XX: no hits at all
FH_FROM_CASH: bad, avg S/O=0.73 avg Spam%=0.02 avg Ham%=0.01
FH_FROM_GET_NAME: bad, avg S/O=0.30 avg Spam%=0.01 avg Ham%=0.01
FH_FROM_HOODIA: no hits at all
FH_HAS_UID: no hits at all
FH_HAS_X: no hits at all
FH_HAS_XBBO: no hits of target type
FH_HAS_XCVBN: no hits at all
FH_HAS_XFGHJ: no hits at all
FH_HAS_XID: bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
FH_HAS_XOVE: no hits at all
FH_HAS_XUIOP: no hits at all
FH_HAS_X_WBC: no hits at all
FH_HELO_ENDS_DOT: no hits at all
FH_HELO_EQ_610HEX: no hits at all
FH_HELO_GMAILSMTP: no hits at all
FH_HOST_EQ_SPRINT_H: no hits at all
FH_MSGID_000000: no hits at all
FH_MSGID_01C67: no hits at all
FH_MSGID_01C70XXX: no hits at all
FH_MSGID_DIGIT: no hits at all
FH_MSGID_REPLACE: no hits at all
FH_MSGID_XXBLAH: no hits at all
FH_RCVD_FROM_2_WDS: no hits of target type
FH_RCVD_HELODATE: no hits at all
FH_RE_NEW_DDD: no hits at all
FH_SPOOF_NAMES: no hits at all
FH_VIRUS_NORTON: no hits at all
FH_XCON_HAS_EQ: no hits at all
FH_XMAIL_HEX20: no hits of target type
FH_XMAIL_REPLACE: no hits at all
FH_X_REFS_DDD: no hits at all
FM_APPROVE_COMPLETE: no hits at all
FM_ASCII_ART_SPACINGc: no hits of target type
FM_BIG_REASON: bad, avg S/O=0.14 avg Spam%=0.01 avg Ham%=0.03
FM_CLAIM_IPOD: no hits of target type
FM_COKE_PEPSI: no hits at all
FM_COSTA_RICA: bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
FM_CUSTOMLOGODSGNc: no hits of target type
FM_DOESNT_SAY_STOCK: no hits at all
FM_FAKE_53COM_SPOOF: no hits at all
FM_FAKE_HELO_HOTMAIL: no hits at all
FM_FAKE_HELO_VERIZON: no hits at all
FM_FORGED_GMAIL: bad, avg S/O=0.01 avg Spam%=0.03 avg Ham%=2.13
FM_FRM_RN_L_BRACK: no hits at all
FM_FUCK_ASS_TEEN: no hits of target type
FM_GET_CASH_SURVEY: no hits at all
FM_GOOD_ENF_CREDIT: no hits of target type
FM_HOW_IMG_COST: no hits at all
FM_HOW_IMG_COST2: no hits at all
FM_IS_IT_OUR_ACCOUNT: bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.01
FM_LEND_MONEY: no hits at all
FM_LIKE_STOCKS: no hits at all
FM_LOAN_NUM_DOMAIN: no hits at all
FM_LOWER_CASE_HEAD: no hits at all
FM_LUX_GIFTS_REDUCED: no hits at all
FM_MAKE_MONEY_HOME: no hits of target type
FM_MANY_DRUG_WORDS: no hits at all
FM_MEDS_SUBJ_2WDS: no hits at all
FM_MORTGAGE3PLUS: bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
FM_MORTGAGE4PLUS: no hits of target type
FM_MORTGAGE5PLUS: no hits at all
FM_MORTGAGE6PLUS: no hits at all
FM_MULTI_LUX_GIFTS: no hits at all
FM_NIKE_ADIDAS: no hits at all
FM_PAYING_LOWER: no hits at all
FM_PC_ERROR_DBL: no hits at all
FM_PEOPLE_LOOK_4ME: no hits at all
FM_PHN_NODNS: no hits at all
FM_RATSIGN_1106: no hits at all
FM_REPLY_OR_NOT: no hits at all
FM_RE_HELLO_SPAM: no hits at all
FM_ROLEX_ADS: no hits at all
FM_SCHOOL_DIPLOMA: bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
FM_SCHOOL_TYPES: no hits at all
FM_SUB_TEEN_NUDE: no hits at all
FM_TRUE_LOV_ALL_N: no hits at all
FM_WEIGHT_LOSS: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
FM_XMAIL_F_OUT: no hits at all
FM_XREF_CLICKPHP: no hits at all
FRM_SILVER_GOLD: no hits at all
FRT_ABSOLUT: bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
FRT_ADOBE2: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02
FRT_ADULT2: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.04
FRT_BEFORE: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
FRT_CANSPAM: no hits of target type
FRT_CLICK: bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.01
FRT_COCK: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.93
FRT_CONTACT: bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=0.64
FRT_DIPLOMA: no hits at all
FRT_DISCOUNT: no hits at all
FRT_DOLLAR: no hits at all
FRT_ESTABLISH: bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
FRT_ESTABLISH2: no hits at all
FRT_EXPERIENCE: bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
FRT_FOLLOW1: bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
FRT_FOLLOW2: no hits of target type
FRT_FREE: bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
FRT_FRIEND: bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
FRT_FUCK1: bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.00
FRT_FUCK2: no hits at all
FRT_GUARANTEE1: no hits at all
FRT_HEALTH: bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
FRT_HOUR: bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.01
FRT_INCOME: bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.00
FRT_INTEREST: bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.00
FRT_INVESTOR: no hits at all
FRT_LEVITRA: no hits at all
FRT_LITTLE: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.01
FRT_LOLITA1: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.08
FRT_MEETING: no hits at all
FRT_OFFER2: bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
FRT_OPPORTUN1: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
FRT_OPPORTUN2: no hits at all
FRT_PACKAGE: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
FRT_PAYMENT: bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
FRT_PENIS1: bad, avg S/O=0.72 avg Spam%=0.01 avg Ham%=0.00
FRT_POSSIBLE: bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.07
FRT_PRICE: bad, avg S/O=0.62 avg Spam%=0.01 avg Ham%=0.01
# used in: FM_DOESNT_SAY_STOCK
FRT_PROFILE1: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.04
FRT_PROFILE2: bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.10
FRT_PROFIT1: bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.01
FRT_PROFIT2: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
FRT_PUSSY: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
FRT_REFINANCE1: no hits at all
FRT_SEXUAL: no hits at all
FRT_SLUT: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.36
FRT_SOMA: no hits at all
FRT_SOMA2: bad, avg S/O=0.34 avg Spam%=0.18 avg Ham%=0.36
FRT_STOCK1: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.03
FRT_STOCK2: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.07
FRT_STRONG1: no hits at all
FRT_STRONG2: no hits at all
FRT_SYMBOL: no hits at all
FRT_VALIUM1: no hits at all
FRT_VALIUM2: no hits at all
FRT_VIRGIN1: no hits at all
FRT_WEIGHT2: no hits at all
FRT_XANAX1: no hits at all
FRT_XANAX2: no hits at all
FR_3TAG_3TAG: no hits at all
FR_ALMOST_VIAG2: bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
FR_CANTSEETEXT: no hits at all
FR_COMMENT_ODD: bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
FR_DIV_DRUGS_3: no hits at all
FR_DOT_FEVER_5: bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
FR_IMPORT_CSS: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
FR_MIDER: no hits at all
FR_M_E_D_S: no hits at all
FR_PORN_NOT_URL: no hits at all
FR_P_END_P_MANY10: no hits of target type
FR_TEST_BASE64_BAD: no hits of target type
FR_TITLE_CONS_6: bad, avg S/O=0.27 avg Spam%=0.01 avg Ham%=0.02
FS_ATTRACT_CUST: no hits at all
FS_BROKEN_MEETING: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
FS_CAILIS: no hits of target type
FS_CHEAP_CAP: no hits at all
FS_COSTARICA: bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
FS_CUTE_TEEN: no hits at all
FS_DOLLAR_BONUS: no hits at all
FS_EJACULA: no hits at all
FS_END_BILLS: bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
FS_ERECTION: no hits at all
FS_GIFT_CARD_OFF: no hits of target type
FS_HUGECOCK: no hits at all
FS_LOWER_YOUR: bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
FS_LOW_RATES: no hits at all
FS_NEED_MONEY: bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
FS_NEW_SOFT_UPLOAD: no hits at all
FS_NEW_XXX: no hits at all
FS_NO_SCRIP: no hits at all
FS_NUMYO: no hits of target type
FS_PERSCRIPTION: no hits at all
FS_PORN_STAR: no hits at all
FS_PRE_SUBJ: no hits at all
FS_RAMROD: no hits at all
FS_REFI: no hits of target type
FS_REPL_TOKEN: no hits at all
FS_RESULTS_BED: no hits at all
FS_RE_APPROV: no hits at all
FS_SINGLE_LETTER_H: bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.01
FS_SINGLE_LETTER_J: bad, avg S/O=0.53 avg Spam%=0.01 avg Ham%=0.01
FS_SPERMAX: no hits at all
FS_SPLASH: bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
FS_START_DOYOU2: bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.00
FS_START_TEEN: bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
FS_TEEN_BAD: no hits at all
FS_TIGHT_TEEN: bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.00
FS_TIP_DDD: no hits at all
FS_VIEWPHOTOS: bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
FS_WE_WANT: bad, avg S/O=0.69 avg Spam%=0.00 avg Ham%=0.00
FS_WITH_SMALL: no hits at all
FS_YOUR_COMPUTER: no hits at all
# used in: FM_PC_ERROR_DBL
FU_16R: bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
FU_CLICK_PHP_DDD: no hits at all
# used in: FM_XREF_CLICKPHP
FU_COMMON_SUBS: no hits at all
FU_COMMON_SUBS2: bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
FU_ENDS_NUMS_DOTS_CLK: no hits at all
FU_ENDS_RT: no hits of target type
FU_END_ET: no hits at all
FU_HG_PATH: no hits at all
FU_HOODIA: no hits at all
FU_LONG_HTML: no hits of target type
FU_LONG_QUERY3: no hits at all
FU_LOTSOFCOLONS: no hits of target type
FU_MIDER: no hits at all
FU_RX_DIR: no hits at all
FU_SUB_D_WEIRD: no hits at all
FU_UKGEOCITIES: no hits at all
FU_URI_TRACKER_T: no hits at all
__APPROVALFVGT: bad, avg S/O=0.13 avg Spam%=0.15 avg Ham%=1.03
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS
__BEEN_APPROVED: bad, avg S/O=0.61 avg Spam%=0.10 avg Ham%=0.07
# used in: FM_APPROVE_COMPLETE
__BIGDOLLARSFVGT: bad, avg S/O=0.36 avg Spam%=0.46 avg Ham%=0.81
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS
__COMPLETE_REVIEW: no hits of target type
# used in: FM_APPROVE_COMPLETE
__COSTA_RI: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
# used in: FM_COSTA_RICA
__DATE_700: bad, avg S/O=0.38 avg Spam%=4.15 avg Ham%=6.77
# used in: FM_RATSIGN_1106
__DATE_LOWER: bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.04
# used in: FM_LOWER_CASE_HEAD
__DOMAIN_WITH_NUMS: bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.04
# used in: FM_LOAN_NUM_DOMAIN
__FB_BA: bad, avg S/O=0.12 avg Spam%=0.05 avg Ham%=0.37
# used in: FM_SCHOOL_TYPES
__FB_BCs: no hits of target type
# used in: FM_SCHOOL_TYPES
__FB_BEST: bad, avg S/O=0.65 avg Spam%=0.49 avg Ham%=0.26
# used in: FM_BIG_REASON
__FB_BIG: bad, avg S/O=0.32 avg Spam%=0.13 avg Ham%=0.29
# used in: FM_BIG_REASON
__FB_COST: bad, avg S/O=0.50 avg Spam%=3.43 avg Ham%=3.37
# used in: FM_HOW_IMG_COST2
__FB_COULD_NOT_F: no hits of target type
# used in: FM_PEOPLE_LOOK_4ME
__FB_CUSTOM_LOGO: bad, avg S/O=0.69 avg Spam%=0.00 avg Ham%=0.00
# used in: FM_CUSTOMLOGODSGNc
__FB_CUSTOM_RECOG: no hits at all
# used in: FM_CUSTOMLOGODSGNc
__FB_DO_NOT_REPLY: no hits of target type
# used in: FM_REPLY_OR_NOT
__FB_FIND_OUT: bad, avg S/O=0.63 avg Spam%=0.38 avg Ham%=0.22
# used in: FM_MAKE_MONEY_HOME
__FB_FROM_YOUR: bad, avg S/O=0.26 avg Spam%=0.67 avg Ham%=1.89
# used in: FM_MAKE_MONEY_HOME
__FB_GENERATE: bad, avg S/O=0.11 avg Spam%=0.30 avg Ham%=2.58
# used in: FM_MAKE_MONEY_HOME
__FB_GLASHUTE: no hits at all
# used in: FM_ROLEX_ADS
__FB_HANDBAGS: bad, avg S/O=0.53 avg Spam%=0.05 avg Ham%=0.05
# used in: FM_MULTI_LUX_GIFTS
__FB_HOME_HOUSE: bad, avg S/O=0.39 avg Spam%=5.51 avg Ham%=8.79
# used in: FM_MAKE_MONEY_HOME
__FB_HOTTEST: bad, avg S/O=0.66 avg Spam%=0.35 avg Ham%=0.18
# used in: FM_LIKE_STOCKS
__FB_HOWMUCH: bad, avg S/O=0.16 avg Spam%=0.17 avg Ham%=0.86
# used in: FM_HOW_IMG_COST2
__FB_IDENTITY: bad, avg S/O=0.13 avg Spam%=0.13 avg Ham%=0.88
# used in: FM_HOW_IMG_COST2
__FB_IMAGE_OF: no hits at all
# used in: FM_HOW_IMG_COST2
__FB_MA: bad, avg S/O=0.56 avg Spam%=0.80 avg Ham%=0.63
# used in: FM_SCHOOL_TYPES
__FB_MBA: bad, avg S/O=0.55 avg Spam%=0.14 avg Ham%=0.12
# used in: FM_SCHOOL_TYPES
__FB_NUM_PERCNT: bad, avg S/O=0.73 avg Spam%=20.03 avg Ham%=7.32
# used in: FM_LUX_GIFTS_REDUCED FM_MULTI_LUX_GIFTS
__FB_PICK: bad, avg S/O=0.34 avg Spam%=0.64 avg Ham%=1.24
# used in: FM_LIKE_STOCKS
__FB_PPLE_ARE_SEARCH: no hits of target type
# used in: FM_PEOPLE_LOOK_4ME
__FB_PROJECTED: bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.12
# used in: FM_LIKE_STOCKS
__FB_P_TRUELOVE: bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.36
# used in: FM_TRUE_LOV_ALL_N
__FB_REASON: bad, avg S/O=0.31 avg Spam%=0.02 avg Ham%=0.04
# used in: FM_BIG_REASON
__FB_ROLEX_WMEN: no hits of target type
# used in: FM_ROLEX_ADS
__FB_S_PRICE: bad, avg S/O=0.80 avg Spam%=18.06 avg Ham%=4.66
# used in: FM_DOESNT_SAY_STOCK
__FB_S_STOCK: bad, avg S/O=0.31 avg Spam%=0.91 avg Ham%=2.08
# used in: FM_DOESNT_SAY_STOCK FM_LIKE_STOCKS
__FB_S_SYMBOL: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
# used in: FM_DOESNT_SAY_STOCK FM_LIKE_STOCKS
__FB_TARGET_AUDIEN: bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.03
# used in: FM_CUSTOMLOGODSGNc
__FB_TOUR: bad, avg S/O=0.11 avg Spam%=0.12 avg Ham%=1.02
# used in: FM_COSTA_RICA
__FB_YOUR_IMAGE: no hits of target type
# used in: FM_HOW_IMG_COST2
__FB_YOU_ARE_PAYING: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.05
# used in: FM_PAYING_LOWER
__FH_FRM_53: no hits at all
# used in: FM_FAKE_53COM_SPOOF
__FH_MSGID_01C7: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
# used in: FM_RE_HELLO_SPAM
__FH_MSG_53: no hits at all
# used in: FM_FAKE_53COM_SPOOF
__FH_RCV_53: no hits at all
# used in: FM_FAKE_53COM_SPOOF
__FIXED_RATEFVGT: bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS
__FM_HOW_COST: bad, avg S/O=0.33 avg Spam%=0.12 avg Ham%=0.25
# used in: FM_HOW_IMG_COST2
__FM_HOW_COST_ID: bad, avg S/O=0.19 avg Spam%=0.26 avg Ham%=1.11
# used in: FM_HOW_IMG_COST2
__FM_MORTGAGE3PLUS: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
# used in: FM_MORTGAGE3PLUS
__FM_MORTGAGE4PLUS: no hits of target type
# used in: FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
__FM_MORTGAGE5PLUS: no hits at all
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
__FM_MORTGAGE6PLUS: no hits at all
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
__FM_MY_PRICE: bad, avg S/O=0.79 avg Spam%=18.06 avg Ham%=4.67
# used in: FM_DOESNT_SAY_STOCK
__FM_STOCK_WORDS: bad, avg S/O=0.40 avg Spam%=1.00 avg Ham%=1.52
# used in: FM_LIKE_STOCKS
__FM_YOUR_IMAGE: no hits of target type
# used in: FM_HOW_IMG_COST2
__FROM_GMAIL: bad, avg S/O=0.09 avg Spam%=0.86 avg Ham%=8.82
# used in: FM_FORGED_GMAIL
__FROM_ISO_2022_JP: bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.60
# used in: FM_FRM_RN_L_BRACK
__FROM_LEFT_BRACK: bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.03
# used in: FM_FRM_RN_L_BRACK
__FROM_LOWER: bad, avg S/O=0.15 avg Spam%=0.11 avg Ham%=0.66
# used in: FM_LOWER_CASE_HEAD
__FROM_RIGH_BRACK: bad, avg S/O=0.21 avg Spam%=0.01 avg Ham%=0.04
# used in: FM_FRM_RN_L_BRACK
__FRT_GOLD: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
# used in: FRM_SILVER_GOLD
__FRT_SILVER: bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.00
# used in: FRM_SILVER_GOLD
__FR_SPACING_15: bad, avg S/O=0.36 avg Spam%=0.13 avg Ham%=0.22
# used in: FM_ASCII_ART_SPACINGc
__FR_SPACING_17: bad, avg S/O=0.36 avg Spam%=0.18 avg Ham%=0.31
# used in: FM_ASCII_ART_SPACINGc
__FR_SPACING_22: bad, avg S/O=0.59 avg Spam%=0.24 avg Ham%=0.17
# used in: FM_ASCII_ART_SPACINGc
__FR_SPACING_8: bad, avg S/O=0.58 avg Spam%=2.08 avg Ham%=1.48
# used in: FM_ASCII_ART_SPACINGc
__FR_SPACING_9: bad, avg S/O=0.46 avg Spam%=0.65 avg Ham%=0.76
# used in: FM_ASCII_ART_SPACINGc
__FS_ADIDAS: no hits of target type
# used in: FM_NIKE_ADIDAS
__FS_COKE: bad, avg S/O=0.52 avg Spam%=0.01 avg Ham%=0.01
# used in: FM_COKE_PEPSI
__FS_COST: bad, avg S/O=0.68 avg Spam%=0.18 avg Ham%=0.08
# used in: FM_HOW_IMG_COST
__FS_FREE: bad, avg S/O=0.72 avg Spam%=1.12 avg Ham%=0.45
# used in: FM_CLAIM_IPOD
__FS_HOWMUCH: bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.01
# used in: FM_HOW_IMG_COST
__FS_IPODXBOX: bad, avg S/O=0.39 avg Spam%=0.03 avg Ham%=0.04
# used in: FM_CLAIM_IPOD
__FS_LEND: bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
# used in: FM_LEND_MONEY
__FS_MP3PLAY: no hits of target type
# used in: FM_CLAIM_IPOD
__FS_NIKE: no hits of target type
# used in: FM_NIKE_ADIDAS
__FS_PEPSI: bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
# used in: FM_COKE_PEPSI
__FS_RE_TWO_WORDS: bad, avg S/O=0.19 avg Spam%=0.01 avg Ham%=0.04
# used in: FM_MEDS_SUBJ_2WDS
__FS_SUBJ_RE: bad, avg S/O=0.01 avg Spam%=0.13 avg Ham%=27.29
# used in: FM_RE_HELLO_SPAM
__FS_S_TRADE: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.06
# used in: FM_DOESNT_SAY_STOCK
__FS_TEEN: bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
# used in: FM_SUB_TEEN_NUDE
__FU_LOAN: bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
# used in: FM_LOAN_NUM_DOMAIN
__F_ASS: bad, avg S/O=0.21 avg Spam%=0.05 avg Ham%=0.19
# used in: FM_FUCK_ASS_TEEN
__F_FUCK: bad, avg S/O=0.24 avg Spam%=0.16 avg Ham%=0.51
# used in: FM_FUCK_ASS_TEEN
__F_TEEN: bad, avg S/O=0.02 avg Spam%=0.21 avg Ham%=12.79
# used in: FM_FUCK_ASS_TEEN
__GOOD_ENOUGH: bad, avg S/O=0.40 avg Spam%=0.12 avg Ham%=0.19
# used in: FM_GOOD_ENF_CREDIT
__HOMELOANFVGT: bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.05
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
__HOST_HOTMAIL: bad, avg S/O=0.40 avg Spam%=0.58 avg Ham%=0.88
# used in: FM_FAKE_HELO_HOTMAIL
__HOTMAILCOM: bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
# used in: FM_FAKE_HELO_HOTMAIL
__LOANURIFVGT: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
__LOSE_WEIGHT: bad, avg S/O=0.74 avg Spam%=0.24 avg Ham%=0.08
# used in: FM_WEIGHT_LOSS
__MANY_RECIPS: bad, avg S/O=0.25 avg Spam%=2.43 avg Ham%=7.30
# used in: FM_IS_IT_OUR_ACCOUNT
__MBA: bad, avg S/O=0.31 avg Spam%=0.98 avg Ham%=2.20
# used in: FM_SCHOOL_DIPLOMA
__MORTURIFVGT: bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.00
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
__MSGID_GMAIL: bad, avg S/O=0.02 avg Spam%=0.20 avg Ham%=10.16
# used in: FM_FORGED_GMAIL
__MSGID_VGA: no hits at all
# used in: FM_RATSIGN_1106
__NUMBERS_IN_SUBJ: bad, avg S/O=0.47 avg Spam%=13.63 avg Ham%=15.63
# used in: FM_LEND_MONEY
__OWN_LAND: bad, avg S/O=0.12 avg Spam%=0.12 avg Ham%=0.88
# used in: FM_COSTA_RICA
__OWN_PROP: bad, avg S/O=0.24 avg Spam%=0.66 avg Ham%=2.03
# used in: FM_COSTA_RICA
__PHD: bad, avg S/O=0.41 avg Spam%=0.44 avg Ham%=0.62
# used in: FM_SCHOOL_DIPLOMA
__PREAPPROVEDFVGT: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
__SEEN_ON_ABC: bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.43
# used in: FM_WEIGHT_LOSS
__SEEN_ON_CBS: bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.23
# used in: FM_WEIGHT_LOSS
__SEEN_ON_CNN: bad, avg S/O=0.19 avg Spam%=0.05 avg Ham%=0.19
# used in: FM_WEIGHT_LOSS
__SEEN_ON_NBC: bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.09
# used in: FM_WEIGHT_LOSS
__SEEN_ON_OPRAH: bad, avg S/O=0.27 avg Spam%=0.11 avg Ham%=0.30
# used in: FM_WEIGHT_LOSS
__SUBJ_LOWER: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.14
# used in: FM_LOWER_CASE_HEAD
__SURVEY: bad, avg S/O=0.18 avg Spam%=0.17 avg Ham%=0.79
# used in: FM_GET_CASH_SURVEY
__TO___LOWER: bad, avg S/O=0.27 avg Spam%=1.67 avg Ham%=4.68
# used in: FM_LOWER_CASE_HEAD
__VM_WORD: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
# used in: FM_MANY_DRUG_WORDS
__YOUR_ACCOUNT: bad, avg S/O=0.57 avg Spam%=1.14 avg Ham%=0.89
# used in: FM_IS_IT_OUR_ACCOUNT
__YOUR_CREDIT: bad, avg S/O=0.42 avg Spam%=0.11 avg Ham%=0.16
# used in: FM_GOOD_ENF_CREDIT
__YOUR_CREDITFVGT: bad, avg S/O=0.48 avg Spam%=0.16 avg Ham%=0.18
# used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
rulesrc/sandbox/duncf/20_header.cf (3 rules, 3 bad):
APOSTROPHE_FROM: bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.02
APOSTROPHE_TOCC: no hits of target type
STUDDLYCAPS: bad, avg S/O=0.58 avg Spam%=0.28 avg Ham%=0.20
rulesrc/sandbox/duncf/20_debt.cf (2 rules, 1 bad):
LOOPHOLE_1: no hits at all
rulesrc/sandbox/dos/70_other.cf (122 rules, 105 bad):
BELL_MOBILITY_TXT_MSG: no hits at all
DOS_ANAL_SPAM_MAILER: no hits at all
DOS_ANAL_SPAM_MAILER2: no hits at all
DOS_BODY_HIGH_NO_MID: bad, avg S/O=0.50 avg Spam%=0.02 avg Ham%=0.02
DOS_DEREK_AUG08: no hits at all
DOS_DOM_LIST_CENTER: no hits at all
DOS_DOT_COM_AT: no hits at all
DOS_DOUBLE_SOTCK: no hits at all
DOS_FAKE_SQUIRREL: bad, avg S/O=0.30 avg Spam%=0.07 avg Ham%=0.17
DOS_FAKE_UPS_TRACK_NUM: no hits at all
DOS_FIX_MY_URI: no hits at all
DOS_FORGED_RCVD_QUADS: no hits at all
DOS_GOOGLE_LUCKY_REDIRECT: no hits at all
DOS_HC_ZIP_VIRUS: no hits at all
DOS_LET_GO_JOB: no hits at all
DOS_MED_CAN_PHARM_NOV07: no hits at all
DOS_MORTGAGE: no hits at all
DOS_OUTLOOK_TO_MX_IMAGE: no hits of target type
DOS_PHISH_WWW_COM_BIZ: no hits at all
DOS_PHISH_WWW_COM_RU: no hits at all
DOS_PLAYED_IN_HARDCORE: no hits at all
# used in: DOS_HC_ZIP_VIRUS
DOS_PORN_BOUNDARY: no hits at all
DOS_PROVISION4: no hits at all
DOS_RCVD_IP_TWICE_A: bad, avg S/O=0.17 avg Spam%=1.01 avg Ham%=5.08
DOS_RCVD_IP_TWICE_B: bad, avg S/O=0.60 avg Spam%=0.88 avg Ham%=0.59
DOS_REMOVE_DOMAIN_DOT: no hits at all
DOS_REMOVE_DOMAIN_DOT_YAHOO: no hits at all
DOS_REPORT_FIN_INC: no hits at all
DOS_STOCK_BAT: no hits at all
DOS_STOCK_CDYV_GENERIC: no hits at all
DOS_STOCK_INCOME_STATEMENT: no hits at all
DOS_STOCK_O_PRICE: no hits at all
DOS_TO_READ_STOCK: no hits at all
DOS_TWO_MIS_STOCK: no hits at all
DOS_URI_ASTERISK: no hits at all
DOS_YOUR_PLACE: no hits at all
DOS_ZIP_HARDCORE: no hits at all
# used in: DOS_HC_ZIP_VIRUS
__BELL_MOBILITY_RELAY: no hits at all
# used in: BELL_MOBILITY_TXT_MSG
__DOS_198K_VARI: no hits at all
# used in: DOS_MORTGAGE
__DOS_248K_FIXED: no hits at all
# used in: DOS_MORTGAGE
__DOS_372K_VARI: no hits at all
# used in: DOS_MORTGAGE
__DOS_488K_FIXED: no hits at all
# used in: DOS_MORTGAGE
__DOS_492K_INT: no hits at all
# used in: DOS_MORTGAGE
__DOS_BODY_FRI: bad, avg S/O=0.07 avg Spam%=0.44 avg Ham%=6.35
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_BODY_MON: bad, avg S/O=0.08 avg Spam%=0.62 avg Ham%=6.74
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_BODY_SAT: bad, avg S/O=0.07 avg Spam%=0.11 avg Ham%=1.52
# used in: DOS_STOCK_BAT
__DOS_BODY_STOCK: bad, avg S/O=0.39 avg Spam%=0.79 avg Ham%=1.23
# used in: DOS_STOCK_BAT
__DOS_BODY_SUN: bad, avg S/O=0.10 avg Spam%=0.56 avg Ham%=5.04
# used in: DOS_STOCK_BAT
__DOS_BODY_THU: bad, avg S/O=0.06 avg Spam%=0.41 avg Ham%=6.02
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_BODY_TICKER: bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
# used in: DOS_STOCK_BAT
__DOS_BODY_TUE: bad, avg S/O=0.08 avg Spam%=0.52 avg Ham%=6.41
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_BODY_WED: bad, avg S/O=0.05 avg Spam%=0.35 avg Ham%=6.18
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_COMING_TO_YOUR_PLACE: no hits at all
# used in: DOS_YOUR_PLACE
__DOS_CORRESPOND_EMAIL: no hits at all
# used in: DOS_YOUR_PLACE
__DOS_DEAL_MAKE_MONEY: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_DOM_LIST_CENTER: no hits at all
# used in: DOS_DOM_LIST_CENTER
__DOS_DROP_ME_A_LINE: no hits at all
# used in: DOS_YOUR_PLACE
__DOS_GREAT_DRAWN_UP: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_HAS_ANY_URI: bad, avg S/O=0.52 avg Spam%=88.69 avg Ham%=83.43
# used in: DOS_FIX_MY_URI DOS_DEREK_AUG08 DOS_MED_CAN_PHARM_NOV07
__DOS_HAS_LIST_ID: bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%=31.32
# used in: DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX
__DOS_HAS_LIST_UNSUB: bad, avg S/O=0.00 avg Spam%=0.14 avg Ham%=33.70
# used in: DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX
__DOS_HAS_MAILING_LIST: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=17.19
# used in: DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX
__DOS_HEADLINES: bad, avg S/O=0.54 avg Spam%=0.26 avg Ham%=0.22
# used in: DOS_STOCK_INCOME_STATEMENT
__DOS_HI: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.87
# used in: DOS_FIX_MY_URI
__DOS_INCREASE_UP: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_I_DRIVE_A: no hits of target type
# used in: DOS_LET_GO_JOB
__DOS_KEY_GET_IN_EARLY: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_LET_GO_JOB: no hits at all
# used in: DOS_LET_GO_JOB
__DOS_LINK: bad, avg S/O=0.62 avg Spam%=7.65 avg Ham%=4.67
# used in: DOS_FIX_MY_URI
__DOS_MAILER_SM: bad, avg S/O=0.55 avg Spam%=0.04 avg Ham%=0.03
# used in: DOS_FAKE_SQUIRREL
__DOS_MED_CAN_WEB_PHARM: no hits at all
# used in: DOS_MED_CAN_PHARM_NOV07
__DOS_MED_MARK_DOWN: bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.02
# used in: DOS_MED_CAN_PHARM_NOV07
__DOS_MED_NO_DIRECTION: no hits at all
# used in: DOS_MED_CAN_PHARM_NOV07
__DOS_MED_WHAT_COULD: no hits of target type
# used in: DOS_MED_CAN_PHARM_NOV07
__DOS_MEET_EACH_OTHER: bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
# used in: DOS_YOUR_PLACE
__DOS_MSGID_DIGITS10: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
# used in: DOS_DEREK_AUG08
__DOS_MSGID_DIGITS9: bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.00
# used in: DOS_DEREK_AUG08
__DOS_MY_OLD_JOB: no hits of target type
# used in: DOS_LET_GO_JOB
__DOS_NOT_A_BILL: bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
# used in: DOS_DOM_LIST_CENTER
__DOS_NO_STOPPING: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_OIL_EXCEED: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_RCVD_FRI: bad, avg S/O=0.34 avg Spam%=8.75 avg Ham%=17.14
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_RCVD_MON: bad, avg S/O=0.51 avg Spam%=20.00 avg Ham%=19.01
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_RCVD_SAT: bad, avg S/O=0.61 avg Spam%=7.94 avg Ham%=5.16
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_RCVD_SUN: bad, avg S/O=0.72 avg Spam%=15.53 avg Ham%=6.18
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_RCVD_THU: bad, avg S/O=0.45 avg Spam%=15.59 avg Ham%=19.26
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_RCVD_TUE: bad, avg S/O=0.51 avg Spam%=20.37 avg Ham%=19.38
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_RCVD_WED: bad, avg S/O=0.50 avg Spam%=19.74 avg Ham%=19.66
# used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
__DOS_REF_2_WK_DAYS: bad, avg S/O=0.12 avg Spam%=0.40 avg Ham%=3.04
# used in: DOS_STOCK_BAT
__DOS_REF_NEXT_WK_DAY: bad, avg S/O=0.09 avg Spam%=0.36 avg Ham%=3.83
# used in: DOS_STOCK_BAT
__DOS_REF_TODAY: bad, avg S/O=0.07 avg Spam%=1.28 avg Ham%=16.78
# used in: DOS_STOCK_BAT
__DOS_RELAYED_EXT: bad, avg S/O=0.29 avg Spam%=35.50 avg Ham%=88.17
# used in: DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX
__DOS_RELAY_SM: bad, avg S/O=0.16 avg Spam%=0.12 avg Ham%=0.67
# used in: DOS_FAKE_SQUIRREL
__DOS_REQ_TO_READ: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_SINGLE_EXT_RELAY: bad, avg S/O=0.80 avg Spam%=87.58 avg Ham%=22.05
# used in: DOS_FIX_MY_URI DOS_DEREK_AUG08 DOS_OUTLOOK_TO_MX_IMAGE IMG_DIRECT_TO_MX
__DOS_SM_MID: bad, avg S/O=0.14 avg Spam%=0.09 avg Ham%=0.59
# used in: DOS_FAKE_SQUIRREL
__DOS_STOCK_COMPANY: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.14
# used in: DOS_STOCK_O_PRICE
__DOS_STOCK_O_PRICE: no hits at all
# used in: DOS_STOCK_O_PRICE
__DOS_STOCK_TICKER: no hits of target type
# used in: DOS_STOCK_O_PRICE
__DOS_SUB_SEARCH_ENGINE: no hits at all
# used in: DOS_DOM_LIST_CENTER
__DOS_SYMBOL_4: no hits at all
# used in: DOS_STOCK_INCOME_STATEMENT
__DOS_TAKING_HOME: no hits at all
# used in: DOS_LET_GO_JOB
__DOS_TOLD_DAY: no hits at all
# used in: DOS_TO_READ_STOCK
__DOS_UA_SM: bad, avg S/O=0.16 avg Spam%=0.13 avg Ham%=0.66
# used in: DOS_FAKE_SQUIRREL
__DOS_WASTE_TIME_MISS: no hits at all
# used in: DOS_TO_READ_STOCK
rulesrc/sandbox/dos/20_uri.cf (2 rules, 1 bad):
DOS_GOOGLE_DOCS: no hits of target type
rules/72_active.cf (11 rules, 7 bad):
CTYPE_8SPACE_GIF: no hits at all
TVD_FW_GRAPHIC_NAME_LONG: bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.08
TVD_FW_GRAPHIC_NAME_MID: bad, avg S/O=0.26 avg Spam%=0.03 avg Ham%=0.09
__ANY_IMAGE_ATTACH: bad, avg S/O=0.36 avg Spam%=1.71 avg Ham%=2.99
# used in: PART_CID_STOCK_LESS STOCK_IMG_CTYPE STOCK_IMG_HTML STOCK_IMG_OUTLOOK DOS_OUTLOOK_TO_MX_IMAGE
__CTYPE_ONETAB_GIF: bad, avg S/O=0.13 avg Spam%=0.07 avg Ham%=0.45
# used in: STOCK_IMG_CTYPE
__GIF_ATTACH: bad, avg S/O=0.24 avg Spam%=0.42 avg Ham%=1.34
# used in: SB_GIF_AND_NO_URIS IMAGE_MISMATCH
__PART_CID_STOCK_LESS: bad, avg S/O=0.55 avg Spam%=0.03 avg Ham%=0.02
# used in: PART_CID_STOCK_LESS
rules/25_replace.cf (32 rules, 24 bad):
FUZZY_AFFORDABLE: no hits at all
FUZZY_AMBIEN: bad, avg S/O=0.28 avg Spam%=0.02 avg Ham%=0.06
FUZZY_BILLION: no hits at all
FUZZY_CPILL: bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.08
FUZZY_CREDIT: bad, avg S/O=0.38 avg Spam%=0.04 avg Ham%=0.07
FUZZY_ERECT: bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
FUZZY_GUARANTEE: no hits at all
FUZZY_MEDICATION: no hits at all
FUZZY_MILLION: bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
FUZZY_MONEY: no hits at all
FUZZY_MORTGAGE: no hits at all
FUZZY_OBLIGATION: no hits at all
FUZZY_OFFERS: no hits at all
FUZZY_PRESCRIPT: no hits at all
FUZZY_REFINANCE: no hits at all
FUZZY_REMOVE: no hits at all
FUZZY_SOFTWARE: no hits at all
FUZZY_THOUSANDS: no hits at all
FUZZY_VIOXX: no hits at all
FUZZY_VLIUM: no hits at all
SUBJECT_FUZZY_MEDS: no hits at all
SUBJECT_FUZZY_PENIS: no hits at all
SUBJECT_FUZZY_TION: no hits at all
SUBJECT_FUZZY_VPILL: no hits at all
rules/25_dkim.cf (16 rules, 4 bad):
NML_ADSP_CUSTOM_HIGH: no hits at all
NML_ADSP_CUSTOM_LOW: no hits at all
NML_ADSP_CUSTOM_MED: no hits at all
__VIA_RESIGNER: no hits at all
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED
rules/20_vbounce.cf (162 rules, 149 bad):
ANY_BOUNCE_MESSAGE: bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.10
BOUNCE_MESSAGE: bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.08
# used in: ANY_BOUNCE_MESSAGE
CHALLENGE_RESPONSE: no hits at all
CRBOUNCE_MESSAGE: bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE
VBOUNCE_MESSAGE: no hits of target type
# used in: ANY_BOUNCE_MESSAGE
__AUTO_GEN_3: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__AUTO_GEN_BBTL: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE
__AUTO_GEN_CM: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__AUTO_GEN_MS: bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__AUTO_GEN_PREC: bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__AUTO_GEN_XBT: bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE
__AUTO_GEN_XXSP: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_ADDR_ERR: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_AUTO_GENERATED: bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_AUTO_REPLY: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.06
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_AUTO_RESPOND: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_AUTO_RESPONSE: no hits of target type
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_CTYPE: bad, avg S/O=0.61 avg Spam%=0.18 avg Ham%=0.11
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_DEL_FAIL: bad, avg S/O=0.80 avg Spam%=0.01 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_ESMTP: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_ETRUST: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_FROM_DAEMON: bad, avg S/O=0.64 avg Spam%=0.15 avg Ham%=0.08
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_INTERSCAN: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_MAILDELFAIL: bad, avg S/O=0.61 avg Spam%=0.03 avg Ham%=0.02
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_MSGDELFAIL: bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_NEVER_SEE: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_NONWORKING: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_NOTDEL: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_NOTIF: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_NO_RESEND: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_NO_VAL: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_OOO_2: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_OOO_3: no hits of target type
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_OOO_H1: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_OOO_H2: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_OOO_H3: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_READ_NOTIFICATION: no hits of target type
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_RETURNED: bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_RET_MAIL: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_RPATH_ERRMAIL: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_RPATH_NULL: bad, avg S/O=0.10 avg Spam%=0.02 avg Ham%=0.17
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_STAT_FAIL: bad, avg S/O=0.54 avg Spam%=0.04 avg Ham%=0.04
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_UNDELIVERABLE: bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_UNDELIVERABLE_ML: bad, avg S/O=0.77 avg Spam%=0.04 avg Ham%=0.01
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_X_ERR_STAT: no hits at all
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__BOUNCE_Y_AUTOGEN: no hits of target type
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__CHALLENGE_RESPONSE: bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE
__CRBOUNCE_0SPAM: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_0SPAM1: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
__CRBOUNCE_0SPAM2: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
__CRBOUNCE_ASK: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_EXI: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_GETRESP: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_HEADER: bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_MIB: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_PREC_SPAM: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_QURB: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_RP: no hits of target type
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_RP_2: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_SI: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_SI1: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE __CRBOUNCE_SI
__CRBOUNCE_SI2: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE __CRBOUNCE_SI
__CRBOUNCE_SPAMARREST: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_SPAMLION: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_SZ: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_TMDA: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_UNVERIF: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_UOL: no hits of target type
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_VANQ: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__CRBOUNCE_VERIF: no hits at all
# used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE __CHALLENGE_RESPONSE
__HAVE_BOUNCE_RELAYS: bad, avg S/O=0.23 avg Spam%=13.61 avg Ham%=4.08
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__MAJORDOMO_HELP_BODY: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__MAJORDOMO_HELP_BODY2: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__MAJORDOMO_SUBJ: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__MY_SERVERS_FOUND: no hits at all
# used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE VBOUNCE_MESSAGE
__NONBOUNCE_READ_RECEIPT: no hits of target type
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE
__NONBOUNCE_READ_RECEIPT_CTYPE: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.05
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __NONBOUNCE_READ_RECEIPT
__VBOUNCE_ALERT: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_AMAVISD: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_AMAVISD2: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_ANTIGEN: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_AOL: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_ATTACHMENT0: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_ATT_QUAR: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_AVREPORT0: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_AV_RESULTS: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_BANNED_MAT: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_BITDEFENDER: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_CISCO: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_CLICKBANK: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_CONT_VIOL: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_DETECTED: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_DISALLOWED: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_DOMINO1: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_DOMINO2: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_DUTCH: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_EMAIL_REJ: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_EMANAGER: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_EMVD: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_EXIM: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_FORBIDDEN: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_FROMPT: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_GSHIELD: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_GUIN: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_GWAVA: no hits at all
# used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_GWAVA2: no hits at all
# used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_INFLEX: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_INF_ATTACH: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_INTERSCAN: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_INTERSCAN2: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_INTERSCAN3: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_JMAIL: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_LUTHER: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MAILMARSHAL: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MAILMARSHAL2: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MAILSWEEP: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MAILSWEEP2: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MAILSWEEP3: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MAJORDOMO_HELP: no hits of target type
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MELDING: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MIME_INFO: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MMS: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_MSGLABS: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_NAV: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_NAV2: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_NAV3: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_NAVFAIL: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_NAV_DETECT: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_PROBLEME: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_PT_BLOCKED: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_QUOTED_EXE: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_RAV: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_REJECTED: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_REJ_FILT: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SCANMAIL: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SCREENSAVER: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SECURIQ: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SENDER: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SMTP: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_STRIP_ATTACH: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SYM_AVF: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_SYM_EMP: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_UNDELIV: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_VALERT: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_VIOLATION: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_VIR_FOUND: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_WARNING: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__VBOUNCE_YOUSENT: no hits at all
# used in: ANY_BOUNCE_MESSAGE VBOUNCE_MESSAGE
__X_CRON_ENV: no hits of target type
# used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE __BOUNCE_AUTO_GENERATED
rules/20_uri_tests.cf (17 rules, 13 bad):
HTTP_77: no hits at all
HTTP_ESCAPED_HOST: bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.08
HTTP_EXCESSIVE_ESCAPES: bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
IP_LINK_PLUS: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.06
NORMAL_HTTP_TO_IP: bad, avg S/O=0.46 avg Spam%=0.26 avg Ham%=0.31
NUMERIC_HTTP_ADDR: no hits at all
SPOOF_NET2COM: no hits at all
URI_NO_WWW_BIZ_CGI: no hits of target type
URI_NO_WWW_INFO_CGI: bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
URI_UNSUBSCRIBE: no hits at all
WEIRD_PORT: bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.14
YAHOO_DRS_REDIR: no hits at all
YAHOO_RD_REDIR: no hits at all
rules/20_ratware.cf (92 rules, 43 bad):
FORGED_IMS_HTML: no hits at all
FORGED_IMS_TAGS: no hits at all
FORGED_MUA_IMS: bad, avg S/O=0.65 avg Spam%=0.03 avg Ham%=0.01
FORGED_MUA_THEBAT_CS: no hits at all
FORGED_OUTLOOK_TAGS: bad, avg S/O=0.75 avg Spam%=0.93 avg Ham%=0.35
FORGED_QUALCOMM_TAGS: no hits at all
FORGED_THEBAT_HTML: no hits at all
HEADER_SPAM: bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
RATWARE_GECKO_BUILD: no hits at all
RATWARE_HASH_DASH: no hits at all
RATWARE_MOZ_MALFORMED: no hits at all
RATWARE_MPOP_WEBMAIL: bad, avg S/O=0.49 avg Spam%=0.02 avg Ham%=0.02
RATWARE_OE_MALFORMED: no hits at all
RATWARE_RCVD_AT: no hits at all
RATWARE_RCVD_PF: no hits at all
REPTO_QUOTE_AOL: no hits at all
REPTO_QUOTE_IMS: no hits at all
REPTO_QUOTE_MSN: no hits at all
REPTO_QUOTE_QUALCOMM: no hits at all
X_MESSAGE_INFO: no hits at all
__ANY_IMS_MUA: bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.60
# used in: FORGED_IMS_TAGS
__ANY_QUALCOMM_MUA: bad, avg S/O=0.09 avg Spam%=0.04 avg Ham%=0.41
# used in: FORGED_QUALCOMM_TAGS REPTO_QUOTE_QUALCOMM
__AOL_MUA: bad, avg S/O=0.60 avg Spam%=0.16 avg Ham%=0.11
# used in: REPTO_QUOTE_AOL
__CTYPE_CHARSET_QUOTED: bad, avg S/O=0.64 avg Spam%=33.57 avg Ham%=19.06
# used in: FORGED_MUA_THEBAT_CS
__GATED_THROUGH_RCVD_REMOVER: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=3.51
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__HOTMAIL_BAYDAV_MSGID: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.06
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__IMS_HTML_BUILDS: bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.01
# used in: FORGED_IMS_HTML
__IMS_HTML_RCVD: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
# used in: FORGED_IMS_HTML
__IMS_MSGID: bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%=16.16
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__IMS_MUA: bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.60
# used in: FORGED_IMS_HTML FORGED_MUA_IMS REPTO_QUOTE_IMS
__IPLANET_MESSAGING_SERVER: bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.14
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__LYRIS_EZLM_REMAILER: bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=18.87
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__MAILMAN_21: bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=12.64
# used in: FORGED_MUA_THEBAT_CS
__MIME_HTML: bad, avg S/O=0.67 avg Spam%=82.98 avg Ham%=40.73
# used in: FORGED_IMS_TAGS FORGED_OUTLOOK_TAGS FORGED_QUALCOMM_TAGS HTML_MISSING_CTYPE
__REPTO_QUOTE: bad, avg S/O=0.70 avg Spam%=5.79 avg Ham%=2.49
# used in: REPTO_QUOTE_AOL REPTO_QUOTE_IMS REPTO_QUOTE_MSN REPTO_QUOTE_QUALCOMM
__SYMPATICO_MSGID: no hits of target type
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__TAG_EXISTS_BODY: bad, avg S/O=0.69 avg Spam%=76.87 avg Ham%=34.44
# used in: FORGED_IMS_TAGS FORGED_OUTLOOK_TAGS
__TAG_EXISTS_HEAD: bad, avg S/O=0.70 avg Spam%=75.09 avg Ham%=32.60
# used in: FORGED_IMS_TAGS FORGED_OUTLOOK_TAGS
__TAG_EXISTS_HTML: bad, avg S/O=0.70 avg Spam%=79.95 avg Ham%=34.09
# used in: FORGED_IMS_TAGS FORGED_OUTLOOK_TAGS FORGED_QUALCOMM_TAGS HTML_MIME_NO_HTML_TAG
__TAG_EXISTS_META: bad, avg S/O=0.73 avg Spam%=63.86 avg Ham%=23.89
# used in: FORGED_IMS_TAGS FORGED_OUTLOOK_TAGS
__UNUSABLE_MSGID: bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=19.52
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
__WACKY_SENDMAIL_VERSION: no hits of target type
# used in: FORGED_MUA_IMS TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2 __UNUSABLE_MSGID
__YAHOO_BULK: no hits of target type
# used in: FORGED_IMS_HTML FORGED_IMS_TAGS FORGED_OUTLOOK_TAGS SPOOFED_URL
rules/20_porn.cf (4 rules, 4 bad):
CUM_SHOT: no hits at all
FREE_PORN: no hits at all
LIVE_PORN: no hits at all
SUBJECT_SEXUAL: no hits at all
rules/20_phrases.cf (48 rules, 30 bad):
ACT_NOW_CAPS: bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.02
BAD_CREDIT: bad, avg S/O=0.27 avg Spam%=0.02 avg Ham%=0.05
BANG_OPRAH: no hits at all
DEAR_SOMETHING: bad, avg S/O=0.55 avg Spam%=0.22 avg Ham%=0.18
DIET_1: bad, avg S/O=0.70 avg Spam%=0.77 avg Ham%=0.32
EXCUSE_24: bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
EXCUSE_4: bad, avg S/O=0.79 avg Spam%=0.00 avg Ham%=0.00
FIN_FREE: bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
FORWARD_LOOKING: no hits at all
FREE_QUOTE_INSTANT: bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
INVESTMENT_ADVICE: bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
JOIN_MILLIONS: bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
LOW_PRICE: bad, avg S/O=0.79 avg Spam%=0.25 avg Ham%=0.07
MARKETING_PARTNERS: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
NOT_ADVISOR: no hits at all
OBSCURED_EMAIL: no hits at all
ONE_TIME: bad, avg S/O=0.65 avg Spam%=0.02 avg Ham%=0.01
PREST_NON_ACCREDITED: no hits at all
REFINANCE_NOW: no hits at all
REFINANCE_YOUR_HOME: no hits at all
REMOVE_BEFORE_LINK: bad, avg S/O=0.65 avg Spam%=0.08 avg Ham%=0.04
RUDE_HTML: no hits at all
STOCK_ALERT: no hits at all
STRONG_BUY: no hits at all
URG_BIZ: bad, avg S/O=0.76 avg Spam%=0.23 avg Ham%=0.07
US_DOLLARS_3: bad, avg S/O=0.76 avg Spam%=0.44 avg Ham%=0.14
__RUDE_HTML_1: no hits at all
# used in: RUDE_HTML
__RUDE_HTML_2: no hits at all
# used in: RUDE_HTML
__RUDE_HTML_3: no hits at all
# used in: RUDE_HTML
__RUDE_HTML_4: no hits at all
# used in: RUDE_HTML
rules/20_meta_tests.cf (19 rules, 8 bad):
EMPTY_MESSAGE: bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.02
NO_HEADERS_MESSAGE: no hits at all
UPPERCASE_50_75: bad, avg S/O=0.20 avg Spam%=0.07 avg Ham%=0.30
UPPERCASE_75_100: bad, avg S/O=0.17 avg Spam%=0.08 avg Ham%=0.39
__ISO_2022_JP_DELIM: bad, avg S/O=0.14 avg Spam%=0.16 avg Ham%=0.93
# used in: GAPPY_SUBJECT JAPANESE_UCE_BODY OBFUSCATING_COMMENT PLING_QUERY TVD_SPACE_RATIO UPPERCASE_50_75 UPPERCASE_75_100
__NONEMPTY_BODY: bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=99.94
# used in: EMPTY_MESSAGE STOX_META_5
__UPPERCASE_50_75: bad, avg S/O=0.20 avg Spam%=0.07 avg Ham%=0.30
# used in: UPPERCASE_50_75
__UPPERCASE_75_100: bad, avg S/O=0.17 avg Spam%=0.08 avg Ham%=0.39
# used in: UPPERCASE_75_100
rules/20_imageinfo.cf (17 rules, 14 bad):
DC_GIF_UNO_LARGO: bad, avg S/O=0.56 avg Spam%=0.03 avg Ham%=0.02
DC_IMAGE_SPAM_HTML: bad, avg S/O=0.68 avg Spam%=0.03 avg Ham%=0.01
DC_IMAGE_SPAM_TEXT: bad, avg S/O=0.50 avg Spam%=0.03 avg Ham%=0.03
DC_PNG_UNO_LARGO: no hits of target type
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
__DC_GIF_MULTI_LARGO: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
__DC_IMG_HTML_RATIO: bad, avg S/O=0.69 avg Spam%=1.29 avg Ham%=0.57
# used in: DC_IMAGE_SPAM_HTML
__DC_IMG_TEXT_RATIO: bad, avg S/O=0.62 avg Spam%=1.28 avg Ham%=0.77
# used in: DC_IMAGE_SPAM_TEXT
__DC_PNG_MULTI_LARGO: no hits of target type
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
__GIF_AREA_180K: bad, avg S/O=0.33 avg Spam%=0.03 avg Ham%=0.06
# used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
__GIF_ATTACH_1: bad, avg S/O=0.38 avg Spam%=0.41 avg Ham%=0.68
# used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
__GIF_ATTACH_2P: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.66
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
__PNG_AREA_180K: no hits of target type
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO __DC_PNG_MULTI_LARGO
__PNG_ATTACH_1: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.13
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO
__PNG_ATTACH_2P: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.06
# used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO
rules/20_html_tests.cf (69 rules, 44 bad):
HIDE_WIN_STATUS: bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
HTML_BADTAG_40_50: no hits at all
HTML_BADTAG_50_60: no hits at all
HTML_BADTAG_60_70: no hits at all
HTML_BADTAG_90_100: no hits at all
HTML_COMMENT_SAVED_URL: bad, avg S/O=0.23 avg Spam%=0.02 avg Ham%=0.06
HTML_COMMENT_SHORT: no hits at all
HTML_EMBEDS: bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
HTML_FONT_FACE_BAD: bad, avg S/O=0.61 avg Spam%=0.36 avg Ham%=0.22
HTML_FONT_SIZE_HUGE: bad, avg S/O=0.75 avg Spam%=0.33 avg Ham%=0.11
HTML_FONT_SIZE_LARGE: bad, avg S/O=0.47 avg Spam%=0.37 avg Ham%=0.41
HTML_FORMACTION_MAILTO: no hits at all
HTML_IFRAME_SRC: no hits at all
HTML_IMAGE_ONLY_16: bad, avg S/O=0.73 avg Spam%=0.33 avg Ham%=0.12
# used in: DC_IMAGE_SPAM_HTML
HTML_IMAGE_RATIO_04: bad, avg S/O=0.52 avg Spam%=0.96 avg Ham%=0.90
HTML_IMAGE_RATIO_06: bad, avg S/O=0.14 avg Spam%=0.13 avg Ham%=0.83
HTML_IMAGE_RATIO_08: bad, avg S/O=0.11 avg Spam%=0.07 avg Ham%=0.55
HTML_MESSAGE: bad, avg S/O=0.67 avg Spam%=82.98 avg Ham%=40.70
HTML_MIME_NO_HTML_TAG: bad, avg S/O=0.53 avg Spam%=0.59 avg Ham%=0.52
HTML_MISSING_CTYPE: no hits at all
HTML_NONELEMENT_30_40: no hits at all
HTML_NONELEMENT_40_50: no hits at all
HTML_NONELEMENT_60_70: no hits at all
HTML_NONELEMENT_80_90: no hits at all
HTML_OBFUSCATE_05_10: bad, avg S/O=0.47 avg Spam%=0.05 avg Ham%=0.06
HTML_OBFUSCATE_10_20: bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
HTML_OBFUSCATE_20_30: bad, avg S/O=0.78 avg Spam%=0.00 avg Ham%=0.00
HTML_OBFUSCATE_30_40: no hits at all
HTML_OBFUSCATE_50_60: no hits at all
HTML_OBFUSCATE_70_80: no hits at all
HTML_OBFUSCATE_90_100: no hits at all
HTML_TAG_BALANCE_BODY: bad, avg S/O=0.57 avg Spam%=0.79 avg Ham%=0.60
HTML_TAG_BALANCE_HEAD: bad, avg S/O=0.49 avg Spam%=0.05 avg Ham%=0.06
HTML_TAG_EXIST_BGSOUND: no hits at all
HTML_TITLE_SUBJ_DIFF: bad, avg S/O=0.44 avg Spam%=0.08 avg Ham%=0.10
JS_FROMCHARCODE: no hits at all
OBFUSCATING_COMMENT: no hits at all
__HIGHBITS: bad, avg S/O=0.17 avg Spam%=1.90 avg Ham%=9.09
# used in: TVD_SPACE_RATIO DOS_BODY_HIGH_NO_MID
__HTML_TITLE_SUBJ_DIFF: bad, avg S/O=0.43 avg Spam%=0.08 avg Ham%=0.10
# used in: HTML_TITLE_SUBJ_DIFF
__JS_DOCWRITE: bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.18
# used in: JS_FROMCHARCODE
__JS_FROMCHARCODE: no hits at all
# used in: JS_FROMCHARCODE
__MIME_ATTACHMENT: bad, avg S/O=0.31 avg Spam%=3.48 avg Ham%=7.69
# used in: EMPTY_MESSAGE HTML_TITLE_SUBJ_DIFF STOX_META_5
__OBFUSCATING_COMMENT_A: bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.23
# used in: OBFUSCATING_COMMENT
__OBFUSCATING_COMMENT_B: bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=0.74
# used in: OBFUSCATING_COMMENT
rules/20_head_tests.cf (156 rules, 85 bad):
BAD_ENC_HEADER: bad, avg S/O=0.72 avg Spam%=0.79 avg Ham%=0.30
CONFIRMED_FORGED: no hits at all
DATE_IN_PAST_03_06: bad, avg S/O=0.74 avg Spam%=0.64 avg Ham%=0.23
DATE_IN_PAST_12_24: bad, avg S/O=0.78 avg Spam%=0.26 avg Ham%=0.07
DATE_IN_PAST_24_48: bad, avg S/O=0.53 avg Spam%=0.10 avg Ham%=0.09
DATE_IN_PAST_96_XX: bad, avg S/O=0.75 avg Spam%=0.83 avg Ham%=0.52
DATE_SPAMWARE_Y2K: no hits at all
ENGLISH_UCE_SUBJECT: bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
EXTRA_MPART_TYPE: bad, avg S/O=0.15 avg Spam%=0.23 avg Ham%=1.32
FAKE_OUTBLAZE_RCVD: no hits at all
FORGED_HOTMAIL_RCVD2: bad, avg S/O=0.75 avg Spam%=0.25 avg Ham%=0.08
FORGED_MSGID_AOL: no hits at all
FORGED_MSGID_HOTMAIL: no hits at all
FORGED_MSGID_MSN: no hits at all
FROM_EXCESS_BASE64: no hits at all
FROM_LOCAL_HEX: no hits at all
FROM_NO_USER: bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.01
GAPPY_SUBJECT: bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
HEADER_COUNT_CTYPE: no hits at all
HEAD_ILLEGAL_CHARS: no hits at all
INVALID_TZ_CST: no hits at all
INVALID_TZ_EST: no hits at all
JAPANESE_UCE_BODY: no hits at all
JAPANESE_UCE_SUBJECT: no hits at all
KOREAN_UCE_SUBJECT: no hits at all
MIME_BOUND_DIGITS_15: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.18
MIME_BOUND_MANY_HEX: no hits at all
MISSING_HEADERS: bad, avg S/O=0.76 avg Spam%=2.43 avg Ham%=0.76
MISSING_MIMEOLE: bad, avg S/O=0.35 avg Spam%=0.18 avg Ham%=0.34
MISSING_SUBJECT: bad, avg S/O=0.25 avg Spam%=0.03 avg Ham%=0.08
MSGID_FROM_MTA_HEADER: bad, avg S/O=0.44 avg Spam%=0.61 avg Ham%=0.79
MSGID_MULTIPLE_AT: bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.14
MSGID_RANDY: bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
MSGID_SHORT: bad, avg S/O=0.80 avg Spam%=0.05 avg Ham%=0.02
MSGID_SPAM_LETTERS: no hits at all
MULTI_FORGED: no hits at all
NONEXISTENT_CHARSET: no hits at all
PLING_QUERY: bad, avg S/O=0.66 avg Spam%=0.29 avg Ham%=0.15
PREVENT_NONDELIVERY: no hits at all
RCVD_AM_PM: no hits at all
RCVD_DOUBLE_IP_LOOSE: bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.01
SORTED_RECIPS: bad, avg S/O=0.69 avg Spam%=0.27 avg Ham%=0.12
SUBJ_ALL_CAPS: bad, avg S/O=0.61 avg Spam%=2.81 avg Ham%=1.82
SUBJ_DOLLARS: bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.03
SUBJ_ILLEGAL_CHARS: bad, avg S/O=0.56 avg Spam%=0.28 avg Ham%=0.21
TO_MALFORMED: bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.04
WITH_LC_SMTP: no hits at all
X_IP: bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.13
X_PRIORITY_CC: no hits at all
__AT_AOL_MSGID: bad, avg S/O=0.17 avg Spam%=0.02 avg Ham%=0.12
# used in: FORGED_MSGID_AOL
__AT_HOTMAIL_MSGID: bad, avg S/O=0.33 avg Spam%=0.06 avg Ham%=0.12
# used in: FORGED_MSGID_HOTMAIL
__CT_TEXT_PLAIN: bad, avg S/O=0.21 avg Spam%=12.96 avg Ham%=48.54
# used in: DOS_DEREK_AUG08 HS_SYNDICATE_P2
__ENV_AND_HDR_FROM_MATCH: bad, avg S/O=0.65 avg Spam%=89.97 avg Ham%=47.88
# used in: STOCK_IMG_CTYPE STOCK_IMG_HTML STOCK_IMG_OUTLOOK TVD_PH_FR5
__FORGED_AOL_RCVD: bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.00
# used in: CONFIRMED_FORGED MULTI_FORGED
__FORGED_HOTMAIL_RCVD: bad, avg S/O=0.63 avg Spam%=0.04 avg Ham%=0.03
# used in: CONFIRMED_FORGED MULTI_FORGED
__FORGED_JUNO_RCVD: bad, avg S/O=0.63 avg Spam%=0.02 avg Ham%=0.03
# used in: CONFIRMED_FORGED MULTI_FORGED
__FORGED_RCVD_TRAIL: bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=1.58
# used in: CONFIRMED_FORGED
__FROM_AOL_COM: bad, avg S/O=0.52 avg Spam%=0.19 avg Ham%=0.18
# used in: FORGED_MSGID_AOL
__FROM_ENCODED_B64: bad, avg S/O=0.42 avg Spam%=1.33 avg Ham%=1.85
# used in: FROM_EXCESS_BASE64
__FROM_ENCODED_QP: bad, avg S/O=0.03 avg Spam%=0.19 avg Ham%=5.98
# used in: KHOP_NO_FULL_NAME
__FROM_HOTMAIL_COM: bad, avg S/O=0.25 avg Spam%=0.46 avg Ham%=1.41
# used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN MSGID_FROM_MTA_HEADER
__FROM_NEEDS_MIME: bad, avg S/O=0.52 avg Spam%=8.08 avg Ham%=7.50
# used in: FROM_EXCESS_BASE64 KHOP_NO_FULL_NAME
__FROM_YAHOO_COM: bad, avg S/O=0.36 avg Spam%=0.74 avg Ham%=1.32
# used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN SUBJ_ILLEGAL_CHARS
__GAPPY_SUBJECT: bad, avg S/O=0.13 avg Spam%=0.05 avg Ham%=0.33
# used in: GAPPY_SUBJECT
__HAS_DATE: bad, avg S/O=0.49 avg Spam%=97.31 avg Ham%=99.97
# used in: NO_HEADERS_MESSAGE
__HAS_MESSAGE_ID: bad, avg S/O=0.49 avg Spam%=97.13 avg Ham%=99.77
# used in: NO_HEADERS_MESSAGE DOS_BODY_HIGH_NO_MID
__HAS_MIMEOLE: bad, avg S/O=0.62 avg Spam%=40.22 avg Ham%=24.95
# used in: MISSING_MIMEOLE
__HAS_SQUIRRELMAIL_IN_MAILER: bad, avg S/O=0.55 avg Spam%=0.04 avg Ham%=0.03
# used in: MISSING_MIMEOLE
__HAS_SUBJECT: bad, avg S/O=0.50 avg Spam%=99.97 avg Ham%=99.92
# used in: MISSING_SUBJECT BELL_MOBILITY_TXT_MSG
__JAPANESE_UCE_BODY: no hits at all
# used in: JAPANESE_UCE_BODY
__ML1: bad, avg S/O=0.00 avg Spam%=0.11 avg Ham%=31.28
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED KHOP_HELO_FCRDNS KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
__ML2: bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%=31.32
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED KHOP_HELO_FCRDNS KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
__ML3: bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=25.87
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED KHOP_HELO_FCRDNS KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
__ML4: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=17.19
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED KHOP_HELO_FCRDNS KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
__ML5: bad, avg S/O=0.01 avg Spam%=0.13 avg Ham%=14.13
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED KHOP_HELO_FCRDNS KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
__MSGID_BEFORE_OKAY: bad, avg S/O=0.24 avg Spam%=0.48 avg Ham%=1.52
# used in: MSGID_FROM_MTA_HEADER
__MSGID_BEFORE_RECEIVED: bad, avg S/O=0.38 avg Spam%=1.06 avg Ham%=1.75
# used in: MSGID_FROM_MTA_HEADER
__MSGID_OK_DIGITS: bad, avg S/O=0.47 avg Spam%=37.55 avg Ham%=41.91
# used in: MSGID_RANDY
__MSGID_OK_HOST: bad, avg S/O=0.37 avg Spam%=38.00 avg Ham%=64.16
# used in: MSGID_RANDY
__PLING_QUERY: bad, avg S/O=0.36 avg Spam%=0.34 avg Ham%=0.61
# used in: PLING_QUERY
__SUBJECT_ENCODED_B64: bad, avg S/O=0.64 avg Spam%=5.99 avg Ham%=3.38
# used in: SUBJECT_NEEDS_ENCODING
__SUBJECT_ENCODED_QP: bad, avg S/O=0.09 avg Spam%=1.35 avg Ham%=14.17
# used in: SUBJECT_NEEDS_ENCODING
__SUBJECT_NEEDS_MIME: bad, avg S/O=0.27 avg Spam%=6.29 avg Ham%=16.86
# used in: SUBJECT_NEEDS_ENCODING
__SUBJ_ILLEGAL_CHARS: bad, avg S/O=0.58 avg Spam%=0.30 avg Ham%=0.21
# used in: SUBJ_ILLEGAL_CHARS
__VIA_ML: bad, avg S/O=0.01 avg Spam%=0.26 avg Ham%=33.87
# used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED KHOP_HELO_FCRDNS KHOP_MAIL_LINK KHOP_NO_FULL_NAME KHOP_UNSUB_LINK SPOOFED_URL
rules/20_freemail.cf (15 rules, 9 bad):
FREEMAIL_ENVFROM_END_DIGIT: bad, avg S/O=0.80 avg Spam%=1.75 avg Ham%=0.45
FREEMAIL_FROM: bad, avg S/O=0.28 avg Spam%=5.66 avg Ham%=14.92
FREEMAIL_REPLY: bad, avg S/O=0.63 avg Spam%=0.21 avg Ham%=0.12
__freemail_safe: bad, avg S/O=0.01 avg Spam%=0.27 avg Ham%=44.01
# used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF HDRS_LCASE_NOASIA KHOP_HELO_FCRDNS TO_NO_BRKTS_FREEMAIL
__freemail_safe_fwd: bad, avg S/O=0.02 avg Spam%=0.24 avg Ham%=13.39
# used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF HDRS_LCASE_NOASIA KHOP_HELO_FCRDNS TO_NO_BRKTS_FREEMAIL __freemail_safe
__freemail_safe_ml1: bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%=31.32
# used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF HDRS_LCASE_NOASIA KHOP_HELO_FCRDNS TO_NO_BRKTS_FREEMAIL __freemail_safe
__freemail_safe_ml2: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=17.19
# used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF HDRS_LCASE_NOASIA KHOP_HELO_FCRDNS TO_NO_BRKTS_FREEMAIL __freemail_safe
__freemail_safe_ml3: bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
# used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF HDRS_LCASE_NOASIA KHOP_HELO_FCRDNS TO_NO_BRKTS_FREEMAIL __freemail_safe
__freemail_safe_rls: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.92
# used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF HDRS_LCASE_NOASIA KHOP_HELO_FCRDNS TO_NO_BRKTS_FREEMAIL __freemail_safe
rules/20_fake_helo_tests.cf (16 rules, 1 bad):
HELO_DYNAMIC_ROGERS: no hits at all
rules/20_dynrdns.cf (37 rules, 17 bad):
RDNS_NONE: bad, avg S/O=0.79 avg Spam%=40.62 avg Ham%=10.52
# used in: FM_PHN_NODNS
__CGATE_RCVD: bad, avg S/O=0.60 avg Spam%=1.17 avg Ham%=0.77
# used in: FM_PHN_NODNS RDNS_NONE KHOP_GREYED S25R_0
__DOMINO_RCVD: bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.15
# used in: FM_PHN_NODNS RDNS_NONE KHOP_GREYED S25R_0
__LAST_EXTERNAL_RELAY_NO_AUTH: bad, avg S/O=0.51 avg Spam%=100.00 avg Ham%=97.97
# used in: KHOP_GREYED S25R_0
__LAST_UNTRUSTED_RELAY_NO_AUTH: bad, avg S/O=0.51 avg Spam%=100.00 avg Ham%=97.92
# used in: DOS_DEREK_AUG08
__RDNS_DYNAMIC_ADELPHIA: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_ATTBI: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_CHELLO_NO: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_COMCAST: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_RR2: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_SPACELAN: bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.00
# used in: KHOP_GREYED
__RDNS_DYNAMIC_TDS: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_TELIA: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_VIRTUA: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_VTR: no hits at all
# used in: KHOP_GREYED
__RDNS_DYNAMIC_YAHOOBB: no hits at all
# used in: KHOP_GREYED
__RDNS_NONE: bad, avg S/O=0.80 avg Spam%=40.89 avg Ham%=10.56
# used in: FM_PHN_NODNS RDNS_NONE KHOP_GREYED S25R_0
rules/20_drugs.cf (86 rules, 31 bad):
DRUGS_ANXIETY: bad, avg S/O=0.67 avg Spam%=0.02 avg Ham%=0.01
DRUGS_ANXIETY_EREC: no hits at all
DRUGS_ANXIETY_OBFU: no hits at all
DRUGS_DIET_OBFU: no hits at all
DRUGS_MUSCLE: bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.16
DRUGS_SLEEP_EREC: no hits at all
DRUG_DOSAGE: no hits at all
DRUG_ED_GENERIC: no hits at all
SUBJECT_DRUG_GAP_S: no hits at all
SUBJECT_DRUG_GAP_VA: no hits at all
SUBJECT_DRUG_GAP_X: no hits at all
VIA_GAP_GRA: no hits at all
__DRUGS_ANXIETY2: bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ANXIETY3: bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.01
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC DRUGS_ANXIETY_OBFU
__DRUGS_ANXIETY4: no hits of target type
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ANXIETY5: bad, avg S/O=0.40 avg Spam%=0.00 avg Ham%=0.00
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ANXIETY6: no hits of target type
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ANXIETY7: no hits at all
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ANXIETY8: no hits at all
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ANXIETY9: no hits at all
# used in: DRUGS_ANXIETY DRUGS_ANXIETY_EREC
__DRUGS_ERECTILE11: no hits at all
# used in: DRUGS_ANXIETY_EREC DRUGS_SLEEP_EREC
__DRUGS_ERECTILE2: no hits at all
# used in: DRUGS_ANXIETY_EREC DRUGS_SLEEP_EREC
__DRUGS_MUSCLE1: bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.16
# used in: DRUGS_MUSCLE
__DRUGS_MUSCLE2: no hits at all
# used in: DRUGS_MUSCLE
__DRUGS_MUSCLE3: no hits at all
# used in: DRUGS_MUSCLE
__DRUGS_MUSCLE5: no hits at all
# used in: DRUGS_MUSCLE
__DRUGS_SLEEP: bad, avg S/O=0.51 avg Spam%=0.01 avg Ham%=0.01
# used in: DRUGS_SLEEP_EREC
__DRUGS_SLEEP1: bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
# used in: DRUGS_SLEEP_EREC __DRUGS_SLEEP
__DRUGS_SLEEP2: bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
# used in: DRUGS_SLEEP_EREC __DRUGS_SLEEP
__DRUGS_SLEEP3: no hits at all
# used in: DRUGS_SLEEP_EREC __DRUGS_SLEEP
__DRUGS_SLEEP4: no hits at all
# used in: DRUGS_SLEEP_EREC __DRUGS_SLEEP
rules/20_compensate.cf (4 rules, 1 bad):
__HAS_RCVD: bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=99.45
# used in: NO_HEADERS_MESSAGE
rules/20_body_tests.cf (30 rules, 21 bad):
BLANK_LINES_80_90: no hits at all
EMAIL_ROT13: no hits at all
HTTPS_IP_MISMATCH: no hits at all
LONGWORDS: bad, avg S/O=0.35 avg Spam%=0.04 avg Ham%=0.08
MIME_BAD_ISO_CHARSET: no hits at all
MIME_BASE64_BLANKS: bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=0.80
MIME_BASE64_TEXT: bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.17
MIME_HTML_MOSTLY: bad, avg S/O=0.44 avg Spam%=0.51 avg Ham%=0.64
MIME_HTML_ONLY_MULTI: no hits at all
MIME_QP_LONG_LINE: bad, avg S/O=0.47 avg Spam%=3.13 avg Ham%=3.54
MISSING_MIME_HB_SEP: bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.19
MPART_ALT_DIFF: bad, avg S/O=0.51 avg Spam%=0.57 avg Ham%=0.55
TRACKER_ID: bad, avg S/O=0.19 avg Spam%=0.04 avg Ham%=0.19
TVD_SPACE_RATIO: bad, avg S/O=0.41 avg Spam%=0.83 avg Ham%=1.18
WEIRD_QUOTING: bad, avg S/O=0.10 avg Spam%=0.02 avg Ham%=0.14
__CTYPE_MULTIPART_ALT: bad, avg S/O=0.56 avg Spam%=41.29 avg Ham%=32.05
# used in: MIME_HTML_ONLY_MULTI
__LONGWORDS_A: bad, avg S/O=0.21 avg Spam%=0.11 avg Ham%=0.44
# used in: LONGWORDS
__LONGWORDS_B: bad, avg S/O=0.28 avg Spam%=0.04 avg Ham%=0.11
# used in: LONGWORDS
__LONGWORDS_C: bad, avg S/O=0.57 avg Spam%=0.16 avg Ham%=0.12
# used in: LONGWORDS
__SUBJECT_UTF8_B_ENCODED: bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.43
# used in: TVD_SPACE_RATIO
__TVD_SPACE_RATIO: bad, avg S/O=0.37 avg Spam%=1.13 avg Ham%=1.96
# used in: TVD_SPACE_RATIO
rules/20_advance_fee.cf (56 rules, 13 bad):
__FRAUD_AON: bad, avg S/O=0.78 avg Spam%=0.22 avg Ham%=0.06
# used in: MONEY_FRAUD
__FRAUD_AUM: bad, avg S/O=0.75 avg Spam%=0.07 avg Ham%=0.02
# used in: MONEY_FRAUD
__FRAUD_AXF: bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
# used in: MONEY_FRAUD
__FRAUD_GAN: bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.02
# used in: MONEY_FRAUD
__FRAUD_IRJ: bad, avg S/O=0.78 avg Spam%=0.19 avg Ham%=0.06
# used in: MONEY_FRAUD
__FRAUD_IRT: bad, avg S/O=0.77 avg Spam%=0.62 avg Ham%=0.19
# used in: MONEY_FRAUD
__FRAUD_MLY: bad, avg S/O=0.40 avg Spam%=0.26 avg Ham%=0.40
# used in: MONEY_FRAUD
__FRAUD_TDP: bad, avg S/O=0.78 avg Spam%=0.16 avg Ham%=0.05
# used in: MONEY_FRAUD
__FRAUD_THJ: bad, avg S/O=0.79 avg Spam%=0.06 avg Ham%=0.02
# used in: MONEY_FRAUD
__FRAUD_ULK: bad, avg S/O=0.42 avg Spam%=0.02 avg Ham%=0.02
# used in: MONEY_FRAUD
__FRAUD_UUY: bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
# used in: MONEY_FRAUD
__FRAUD_WDR: bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
# used in: MONEY_FRAUD
__FRAUD_WNY: bad, avg S/O=0.59 avg Spam%=0.27 avg Ham%=0.18
# used in: MONEY_FRAUD