You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Rules Report Cron <no...@spamassassin.apache.org> on 2011/07/06 10:31:49 UTC

[auto] bad sandbox rules report

HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)


rulesrc/sandbox/wtogami/20_url_shortener.cf (10 rules, 7 bad):

  URL_SHORTENER:  bad, avg S/O=0.57 avg Spam%=1.96 avg Ham%=1.45
      # used in: SHORT_URL
  __URL_SHORTENER_ABC:  bad, avg S/O=0.30 avg Spam%=0.19 avg Ham%=0.43
      # used in: SHORT_URL URL_SHORTENER
  __URL_SHORTENER_DEFGHI:  bad, avg S/O=0.28 avg Spam%=0.16 avg Ham%=0.40
      # used in: SHORT_URL URL_SHORTENER
  __URL_SHORTENER_NUMS:  bad, avg S/O=0.63 avg Spam%=0.03 avg Ham%=0.02
      # used in: SHORT_URL URL_SHORTENER
  __URL_SHORTENER_T:  bad, avg S/O=0.30 avg Spam%=0.24 avg Ham%=0.50
      # used in: SHORT_URL URL_SHORTENER
  __URL_SHORTENER_TINYARRO:  no hits at all
      # used in: SHORT_URL URL_SHORTENER
  __URL_SHORTENER_UVWXYZ:  bad, avg S/O=0.53 avg Spam%=0.11 avg Ham%=0.09
      # used in: SHORT_URL URL_SHORTENER

rulesrc/sandbox/smf/20_smf.cf (13 rules, 5 bad):

  SMF_EXTRA_BRKTS_CC:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.01
  SMF_FROM_GMAIL:  bad, avg S/O=0.05 avg Spam%=0.69 avg Ham%=14.05
  SMF_GGRPS_FROM_GMAIL:  no hits of target type
  SMF_GGRPS_URIBL:  no hits of target type
  SMF_TO_GGRPS:  no hits of target type
      # used in: SMF_GGRPS_FROM_GMAIL SMF_GGRPS_URIBL

rulesrc/sandbox/sidney/70_other.cf (1 rules, 1 bad):

  T_UPPERCASE_HTTP:  bad, avg S/O=0.40 avg Spam%=0.10 avg Ham%=0.11

rulesrc/sandbox/mmartinec/20_misc.cf (14 rules, 8 bad):

  CR_IN_SUBJ:  no hits of target type
  FROM_UNBAL2:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.00
  FROM_WSP_TRAIL:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  LONGLINE:  bad, avg S/O=0.55 avg Spam%=3.95 avg Ham%=2.89
  MSGID_NOFQDN1:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02
  RP_LASTNAME:  no hits at all
  RP_MINUS:  no hits at all
  __LONGLINE:  bad, avg S/O=0.55 avg Spam%=3.95 avg Ham%=2.89
      # used in: LONGLINE

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits at all

rulesrc/sandbox/maddoc/99_fsl_testing.cf (15 rules, 5 bad):

  FSL_BOTSPAM_2:  no hits at all
  FSL_BOTSPAM_3:  no hits at all
  FSL_BOTSPAM_4:  no hits at all
  FSL_THIS_IS_ADV:  bad, avg S/O=0.56 avg Spam%=0.02 avg Ham%=0.01
  FSL_YHG_ABUSE:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=5.99

rulesrc/sandbox/maddoc/99_doc_test.cf (44 rules, 32 bad):

  FSL_BLOGSPOT_ABUSE:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.97
  FSL_CREATEPDF_ABUSE:  no hits at all
  FSL_FAKE_RCVD:  no hits at all
  FSL_FBOOK_PHISH:  no hits of target type
  FSL_FREEMAIL_1:  bad, avg S/O=0.72 avg Spam%=2.31 avg Ham%=0.87
  FSL_FREEMAIL_2:  bad, avg S/O=0.70 avg Spam%=1.36 avg Ham%=0.57
  FSL_GD1_URI:  no hits at all
  FSL_GD2_URI:  no hits of target type
  FSL_GEO_ABUSE:  no hits at all
  FSL_GG_ABUSE:  no hits at all
  FSL_GS_ABUSE:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  FSL_HAS_TINYURL:  bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.48
  FSL_HELO_FAKE:  bad, avg S/O=0.42 avg Spam%=0.08 avg Ham%=0.11
  FSL_HELO_HOME:  bad, avg S/O=0.39 avg Spam%=0.17 avg Ham%=0.25
  FSL_HELO_LITERAL:  no hits at all
  FSL_HELO_NON_FQDN_2:  bad, avg S/O=0.50 avg Spam%=95.22 avg Ham%=96.23
  FSL_HELO_SETUP:  no hits at all
  FSL_HELO_UNKNOWN:  no hits at all
  FSL_INTERIA_ABUSE:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  FSL_LSPACES_ABUSE:  no hits at all
  FSL_MIME_NO_TEXT:  bad, avg S/O=0.48 avg Spam%=0.02 avg Ham%=0.01
  FSL_SPAMWARE_STRING_1:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.13
  FSL_STACKED_TEXT:  no hits of target type
  FSL_UA2:  no hits at all
  FSL_Y360_ABUSE:  no hits of target type
  FSL_YG_ABUSE:  no hits at all
  FSL_YPIPES_ABUSE:  no hits of target type
  __CTYPE_MULTIPART_MIXED:  bad, avg S/O=0.23 avg Spam%=1.79 avg Ham%=5.87
      # used in: FSL_MIME_NO_TEXT
  __FROM_FREEMAIL:  bad, avg S/O=0.17 avg Spam%=3.66 avg Ham%=17.71
      # used in: FSL_FREEMAIL_2
  __HAS_REPLY_TO:  bad, avg S/O=0.31 avg Spam%=17.06 avg Ham%=38.60
      # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2
  __REPLY_FREEMAIL:  bad, avg S/O=0.72 avg Spam%=2.31 avg Ham%=0.87
      # used in: FSL_FREEMAIL_1 FSL_FREEMAIL_2
  __TWO_WORD_LINES:  bad, avg S/O=0.69 avg Spam%=0.37 avg Ham%=0.16
      # used in: FSL_STACKED_TEXT

rulesrc/sandbox/khopesh/20_trust.cf (3 rules, 2 bad):

  __GREYLISTING:  bad, avg S/O=0.02 avg Spam%=0.23 avg Ham%=10.29
      # used in: S25R_2
  __NOT_SPOOFED:  bad, avg S/O=0.24 avg Spam%=25.94 avg Ham%=8.48
      # used in: KHOP_FAKE_EBAY KHOP_SUBSCRIBED MAY_BE_FORGED S25R_2 SPOOFED_FREEMAIL

rulesrc/sandbox/khopesh/20_s25r.cf (13 rules, 2 bad):

  S25R_2:  bad, avg S/O=0.75 avg Spam%=1.32 avg Ham%=0.43
  SPOOFED_FREEMAIL:  bad, avg S/O=0.34 avg Spam%=8.13 avg Ham%=16.02

rulesrc/sandbox/khopesh/20_rcd_rdns.cf (24 rules, 3 bad):

  __RCD_RDNS_MAIL_MESSY:  bad, avg S/O=0.05 avg Spam%=1.13 avg Ham%=23.22
      # used in: TO_NO_BRKTS_DIRECT
  __RCD_RDNS_MTA_MESSY:  bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.22
      # used in: TO_NO_BRKTS_DIRECT
  __RCD_RDNS_MX_MESSY:  bad, avg S/O=0.13 avg Spam%=0.26 avg Ham%=1.78
      # used in: GZ_PILL_SQUATTERS

rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (16 rules, 3 bad):

  KHOP_SC_CIDR16:  no hits at all
  KHOP_SPAMHAUS_DROP:  bad, avg S/O=0.39 avg Spam%=2.17 avg Ham%=9.91
  KHOP_SPAMHAUS_DROP_LE:  bad, avg S/O=0.61 avg Spam%=1.53 avg Ham%=1.94

rulesrc/sandbox/khopesh/20_khop_lists.cf (18 rules, 8 bad):

  KHOP_MAIL_LINK:  bad, avg S/O=0.72 avg Spam%=1.44 avg Ham%=0.50
  KHOP_SUBSCRIBED:  bad, avg S/O=0.20 avg Spam%=5.77 avg Ham%=23.37
  KHOP_UNSUB_EMAIL:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.00
  KHOP_UNSUB_LINK:  no hits at all
  __MAIL_LINK:  bad, avg S/O=0.24 avg Spam%=1.75 avg Ham%=5.43
      # used in: KHOP_MAIL_LINK
  __NOT_A_PERSON:  bad, avg S/O=0.11 avg Spam%=9.90 avg Ham%=82.86
      # used in: KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __SUBSCRIPTION_INFO:  bad, avg S/O=0.18 avg Spam%=6.82 avg Ham%=32.14
      # used in: KHOP_MAIL_LINK KHOP_SUBSCRIBED KHOP_UNSUB_LINK REMOTE_IMAGE __NOT_A_PERSON
  __VACATION:  bad, avg S/O=0.49 avg Spam%=0.47 avg Ham%=0.45
      # used in: KHOP_MAIL_LINK KHOP_UNSUB_LINK __NOT_A_PERSON

rulesrc/sandbox/khopesh/20_khop_general.cf (13 rules, 8 bad):

  DSCL4_PNG:  no hits at all
  FROM_WWW:  bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.02
  IMAGE_MISMATCH:  no hits at all
  MAY_BE_FORGED:  bad, avg S/O=0.39 avg Spam%=0.09 avg Ham%=0.12
  __GIF_EXISTS:  bad, avg S/O=0.23 avg Spam%=0.13 avg Ham%=0.43
      # used in: IMAGE_MISMATCH
  __JPEG_EXISTS:  bad, avg S/O=0.26 avg Spam%=0.38 avg Ham%=1.05
      # used in: IMAGE_MISMATCH
  __MAY_BE_FORGED:  bad, avg S/O=0.25 avg Spam%=0.09 avg Ham%=0.25
      # used in: MAY_BE_FORGED
  __PNG_EXISTS:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.17
      # used in: IMAGE_MISMATCH

rulesrc/sandbox/khopesh/20_khop_experimental.cf (90 rules, 47 bad):

  ADV_SUBJ:  no hits at all
  BIG_HEADERS_2K:  bad, avg S/O=0.27 avg Spam%=13.39 avg Ham%=36.55
  BIG_HEADERS_3K:  bad, avg S/O=0.48 avg Spam%=21.80 avg Ham%=23.68
  BIG_HEADERS_4K:  bad, avg S/O=0.71 avg Spam%=33.83 avg Ham%=13.31
  BIG_HEADERS_5K:  bad, avg S/O=0.63 avg Spam%=10.38 avg Ham%=5.96
  BOTNET_NOPLUGIN:  no hits at all
  DEB_RAJONAA:  no hits at all
  DKIM_INVALID:  bad, avg S/O=0.04 avg Spam%=1.02 avg Ham%=27.61
  FORGED_HOTMAIL_RCVD3:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  FROM_WEBSITE:  bad, avg S/O=0.58 avg Spam%=0.00 avg Ham%=0.00
  KHOP_BIG_TO_CC:  bad, avg S/O=0.78 avg Spam%=2.53 avg Ham%=0.69
  KHOP_FAKE_EBAY:  bad, avg S/O=0.08 avg Spam%=0.01 avg Ham%=0.07
  KHOP_FOREIGN_CLICK:  bad, avg S/O=0.77 avg Spam%=0.15 avg Ham%=0.04
  KHOP_FROM_WWW:  bad, avg S/O=0.35 avg Spam%=0.13 avg Ham%=0.24
  KHOP_GREYED:  bad, avg S/O=0.62 avg Spam%=0.05 avg Ham%=0.03
  LONG_HEADER_LINE_160:  bad, avg S/O=0.15 avg Spam%=2.62 avg Ham%=14.76
  LONG_HEADER_LINE_240:  bad, avg S/O=0.05 avg Spam%=0.15 avg Ham%=2.58
  LONG_HEADER_LINE_320:  bad, avg S/O=0.01 avg Spam%=0.03 avg Ham%=2.71
  LONG_HEADER_LINE_400:  bad, avg S/O=0.04 avg Spam%=0.10 avg Ham%=2.29
  LONG_HEADER_LINE_500:  bad, avg S/O=0.06 avg Spam%=0.17 avg Ham%=2.56
  LONG_HEADER_LINE_80:  bad, avg S/O=0.35 avg Spam%=43.03 avg Ham%=79.40
  MALFORMED_FREEMAIL:  bad, avg S/O=0.57 avg Spam%=0.57 avg Ham%=0.39
  MS_XYMOSG_1K:  bad, avg S/O=0.69 avg Spam%=0.06 avg Ham%=0.02
  REMOTE_IMAGE:  bad, avg S/O=0.67 avg Spam%=3.79 avg Ham%=1.90
  SHORTENED_URL_HREF:  bad, avg S/O=0.30 avg Spam%=0.17 avg Ham%=0.40
  SHORTENED_URL_SRC:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00
  SHORT_URL:  bad, avg S/O=0.76 avg Spam%=1.09 avg Ham%=0.34
  SUBJ_ALL_CAPS2:  no hits at all
  SUBJ_ALL_CAPS3:  no hits at all
  UPPERCASE_URI:  bad, avg S/O=0.06 avg Spam%=0.19 avg Ham%=3.30
  URI_HIDDEN:  bad, avg S/O=0.12 avg Spam%=0.03 avg Ham%=0.18
  __BOTNET_CLIENT1:  no hits at all
      # used in: BOTNET_NOPLUGIN
  __BOTNET_CLIENT2:  no hits at all
      # used in: BOTNET_NOPLUGIN
  __BOTNET_SERVER:  no hits at all
      # used in: BOTNET_NOPLUGIN
  __EBAY_ADDRESS:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.10
      # used in: KHOP_FAKE_EBAY
  __FROM_WEB_DAEMON:  bad, avg S/O=0.19 avg Spam%=0.13 avg Ham%=0.53
      # used in: KHOP_FROM_WWW
  __GREYLISTED:  bad, avg S/O=0.09 avg Spam%=0.18 avg Ham%=1.71
      # used in: KHOP_GREYED
  __HOTMAIL_HELO:  bad, avg S/O=0.35 avg Spam%=0.59 avg Ham%=0.33
      # used in: FORGED_HOTMAIL_RCVD3
  __LISTID_DEBIAN:  bad, avg S/O=0.15 avg Spam%=0.03 avg Ham%=0.17
      # used in: DEB_RAJONAA
  __RAJONAA_INFO:  no hits at all
      # used in: DEB_RAJONAA
  __RDNS_IS_WWW:  bad, avg S/O=0.33 avg Spam%=0.05 avg Ham%=0.09
      # used in: KHOP_FROM_WWW
  __RELAY_THRU_WWW:  bad, avg S/O=0.30 avg Spam%=0.11 avg Ham%=0.25
      # used in: KHOP_FROM_WWW
  __SHORT_URL:  bad, avg S/O=0.74 avg Spam%=2.64 avg Ham%=0.92
      # used in: SHORT_URL
  __SUBJ_2UPPER:  bad, avg S/O=0.45 avg Spam%=64.04 avg Ham%=79.21
      # used in: SUBJ_ALL_CAPS2 SUBJ_ALL_CAPS3
  __SUBJ_4LOWER:  bad, avg S/O=0.49 avg Spam%=95.16 avg Ham%=98.11
      # used in: SUBJ_ALL_CAPS2 SUBJ_ALL_CAPS3
  __SUBJ_IMPORTANT:  bad, avg S/O=0.55 avg Spam%=0.15 avg Ham%=0.12
      # used in: SUBJ_ALL_CAPS3
  __SUBJ_SHORT:  bad, avg S/O=0.69 avg Spam%=2.80 avg Ham%=1.25
      # used in: SUBJ_ALL_CAPS2 SUBJ_ALL_CAPS3

rulesrc/sandbox/khopesh/20_khop_dynamic.cf (12 rules, 1 bad):

  __S25R_2:  bad, avg S/O=0.79 avg Spam%=3.31 avg Ham%=0.86
      # used in: S25R_2

rulesrc/sandbox/khopesh/20_khop_blessed.cf (13 rules, 4 bad):

  KHOP_BSD_REPORT:  no hits at all
  KHOP_LOGWATCH_REPORT:  no hits at all
  __BSD_REPORT:  no hits of target type
      # used in: KHOP_BSD_REPORT
  __LOGWATCH_REPORT:  no hits at all
      # used in: KHOP_LOGWATCH_REPORT

rulesrc/sandbox/khopesh/20_khop_bl.cf (18 rules, 5 bad):

  UNKNOWN_ORIGIN:  bad, avg S/O=0.51 avg Spam%=8.94 avg Ham%=8.49
  __RCVD_VIA_ARIN:  bad, avg S/O=0.08 avg Spam%=6.07 avg Ham%=73.57
      # used in: UNKNOWN_ORIGIN
  __RCVD_VIA_IPV6:  no hits of target type
      # used in: UNKNOWN_ORIGIN
  __RCVD_VIA_NON_RIR:  no hits at all
      # used in: UNKNOWN_ORIGIN
  __RCVD_VIA_RIPE:  bad, avg S/O=0.77 avg Spam%=47.81 avg Ham%=14.27
      # used in: UNKNOWN_ORIGIN

rulesrc/sandbox/khopesh/20_isc_attackers.cf (2 rules, 2 bad):

  KHOP_ISC:  no hits at all
  KHOP_ISC_LE:  no hits at all

rulesrc/sandbox/khopesh/20_chickenpox.cf (10 rules, 10 bad):

  J_CHICKENPOX_12:  bad, avg S/O=0.07 avg Spam%=0.06 avg Ham%=0.71
  J_CHICKENPOX_13:  bad, avg S/O=0.23 avg Spam%=0.10 avg Ham%=0.32
  J_CHICKENPOX_14:  bad, avg S/O=0.12 avg Spam%=0.04 avg Ham%=0.26
  J_CHICKENPOX_22:  bad, avg S/O=0.10 avg Spam%=0.09 avg Ham%=0.74
  J_CHICKENPOX_23:  bad, avg S/O=0.21 avg Spam%=0.17 avg Ham%=0.64
  J_CHICKENPOX_24:  bad, avg S/O=0.16 avg Spam%=0.04 avg Ham%=0.22
  J_CHICKENPOX_26:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.20
  J_CHICKENPOX_32:  bad, avg S/O=0.25 avg Spam%=0.12 avg Ham%=0.35
  J_CHICKENPOX_33:  bad, avg S/O=0.18 avg Spam%=0.15 avg Ham%=0.68
  J_CHICKENPOX_65:  bad, avg S/O=0.04 avg Spam%=0.03 avg Ham%=0.72

rulesrc/sandbox/kb/75_de.cf (1 rules, 1 bad):

  FROM_ADDR_BCDE:  no hits at all

rulesrc/sandbox/kb/70_misc.cf (22 rules, 16 bad):

  KB_CTYPE_SPACE:  no hits at all
  KB_CTYPE_SP_MOZ:  no hits at all
  LIVEFILESTORE:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  LIVEFILESTORE_HTML:  no hits at all
  OPERA_MID_NON_OP:  no hits at all
  OPERA_MID_NO_DIGIT:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  PQRTW_4:  no hits at all
  THREAD_INDEX_BAD:  bad, avg S/O=0.78 avg Spam%=1.05 avg Ham%=0.29
  THREAD_INDEX_HEX:  no hits at all
  __HAS_THREAD_INDEX:  bad, avg S/O=0.38 avg Spam%=4.45 avg Ham%=7.04
      # used in: MANY_BIG_LISTS THREAD_INDEX_BAD
  __KB_UA_MOZ:  bad, avg S/O=0.38 avg Spam%=1.95 avg Ham%=3.11
      # used in: KB_CTYPE_SP_MOZ
  __OPERA_MID_NON_OP:  bad, avg S/O=0.07 avg Spam%=0.07 avg Ham%=0.92
      # used in: OPERA_MID_NON_OP
  __OPERA_MUA:  bad, avg S/O=0.69 avg Spam%=0.26 avg Ham%=0.12
      # used in: OPERA_MID_NON_OP OPERA_MID_NO_DIGIT
  __PQRTW_4_A:  no hits at all
      # used in: PQRTW_4
  __PQRTW_4_SPAN:  no hits at all
      # used in: PQRTW_4
  __THREAD_INDEX_GOOD:  bad, avg S/O=0.32 avg Spam%=3.40 avg Ham%=6.75
      # used in: THREAD_INDEX_BAD TO_NO_BRKTS_DIRECT

rulesrc/sandbox/jm/70_tt_drugs.cf (12 rules, 3 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_VIAGRA:  no hits at all
  TT_OBSCURED_XANAX:  no hits at all

rulesrc/sandbox/jm/20_storm.cf (2 rules, 2 bad):

  GMD_R_DOT_HTML:  no hits at all
  JM_MID_STORM:  no hits at all

rulesrc/sandbox/jm/20_games.cf (3 rules, 3 bad):

  GAMES:  no hits at all
  __GAMES_BODY:  no hits at all
      # used in: GAMES
  __GAMES_SUBJ:  no hits at all
      # used in: GAMES

rulesrc/sandbox/jm/20_basic.cf (100 rules, 58 bad):

  BBC_RCVD_NCHAR_RAW:  no hits at all
  CARD_DIRECT_WWW_ADDRESS:  no hits at all
  CURR_PRICE:  no hits at all
  DUH_DIKSBJ:  no hits at all
  DVLABS_GOZI_PDF:  no hits at all
  DYN_RDNS_AND_INLINE_IMAGE:  bad, avg S/O=0.77 avg Spam%=0.06 avg Ham%=0.01
  FAKE_OUTBLAZE_RCVD_168:  no hits at all
  FAKE_OUTBLAZE_RCVD_168_2:  no hits at all
  FAKE_OUTBLAZE_RCVD_PURIN:  no hits at all
  FAKE_OUTBLAZE_RCVD_PURIN_2:  no hits at all
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HDR_ORDER_FTSDMCXX_BAT:  no hits at all
  HELO_LOCALHOST:  bad, avg S/O=0.43 avg Spam%=0.61 avg Ham%=0.77
  IMG_CID_PART1:  no hits of target type
  JM_0800_GMT:  no hits at all
  JM_EXIM_462:  no hits of target type
  JM_GMT_RCVD:  no hits at all
  JM_HOODIA:  no hits at all
  JM_NICE_GIRL:  no hits at all
  JM_REACTOR_MAILER:  no hits at all
  JM_REMOVE_FROM_URL:  no hits at all
  LOLLY_419:  no hits at all
  MSHTML_6_00_2900_3199_A:  no hits at all
  MSHTML_6_00_2900_3199_B:  no hits at all
  MSHTML_6_00_2900_3199_C:  no hits at all
  MSNBC_HDR_ORDER:  no hits at all
  MSNBC_MESSAGEGUID:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.09 avg Spam%=0.05 avg Ham%=0.50
  OE_MULTIPART_RELATED:  bad, avg S/O=0.46 avg Spam%=0.08 avg Ham%=0.09
  PART_CID_STOCK:  bad, avg S/O=0.39 avg Spam%=0.06 avg Ham%=0.07
  PART_CID_STOCK_LESS:  no hits at all
  PR_TD_NOWRAP_BAT:  no hits at all
  RATWARE_HELO_DM:  no hits at all
  RCVD_FORGED_WROTE:  no hits at all
  RCVD_MAIL_COM:  no hits at all
  SHORT_HELO_AND_INLINE_IMAGE:  bad, avg S/O=0.78 avg Spam%=0.06 avg Ham%=0.01
  STOCK_IMG_CTYPE:  bad, avg S/O=0.65 avg Spam%=0.03 avg Ham%=0.00
  STOCK_IMG_HDR_FROM:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  STOCK_IMG_HTML:  no hits at all
  STOX_BOUND_090909_B:  bad, avg S/O=0.12 avg Spam%=0.10 avg Ham%=0.71
  STOX_META_5:  no hits at all
  STOX_REPLY_TYPE:  bad, avg S/O=0.51 avg Spam%=0.27 avg Ham%=0.25
  STOX_REPLY_TYPE_WITHOUT_QUOTES:  bad, avg S/O=0.68 avg Spam%=0.23 avg Ham%=0.10
  STOX_UA:  no hits of target type
  TEMPLATE_203_RCVD:  no hits at all
  TVD_PDF_FINGER01_JO:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  T_CN_URL:  bad, avg S/O=0.65 avg Spam%=0.21 avg Ham%=0.11
  __CARD_DIRECT_WWW_ADDRESS:  no hits at all
      # used in: CARD_DIRECT_WWW_ADDRESS
  __HAS_ANY_URI:  bad, avg S/O=0.51 avg Spam%=95.58 avg Ham%=90.80
      # used in: NSL_FREEMAIL_M2
  __JM_REACTOR_DATE:  bad, avg S/O=0.25 avg Spam%=3.61 avg Ham%=10.82
      # used in: JM_REACTOR_MAILER
  __JM_REACTOR_XM2900:  bad, avg S/O=0.14 avg Spam%=0.02 avg Ham%=0.09
      # used in: JM_REACTOR_MAILER
  __JM_REACTOR_XMOLE:  bad, avg S/O=0.26 avg Spam%=0.03 avg Ham%=0.09
      # used in: JM_REACTOR_MAILER
  __LEGIT_MARLO_CARD:  no hits at all
      # used in: CARD_DIRECT_WWW_ADDRESS
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.02 avg Spam%=0.03 avg Ham%=2.06
      # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.06 avg Spam%=0.05 avg Ham%=0.76
      # used in: MSNBC_THREAD_INDEX
  __MULTIPART_RELATED:  bad, avg S/O=0.20 avg Spam%=0.25 avg Ham%=1.00
      # used in: OE_MULTIPART_RELATED
  __NAKED_TO:  bad, avg S/O=0.25 avg Spam%=15.56 avg Ham%=46.86
      # used in: DOS_DEREK_AUG08
  __PR_TD_NOWRAP:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.04
      # used in: PR_TD_NOWRAP_BAT

rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (6 rules, 2 bad):

  URI_OBFU_PROTO:  no hits at all
  URI_OBFU_WWW:  bad, avg S/O=0.39 avg Spam%=0.10 avg Ham%=0.15

rulesrc/sandbox/jhardin/20_tbird_image_spam.cf (34 rules, 16 bad):

  FORGED_TBIRD_IMG_ARROW:  no hits at all
  FORGED_TBIRD_IMG_SIZE:  no hits of target type
  FORGED_TBIRD_IMG_TO_MX:  no hits at all
  IMG_DIRECT_TO_MX:  bad, avg S/O=0.54 avg Spam%=0.01 avg Ham%=0.01
  TO_NO_BRKTS_DIRECT:  bad, avg S/O=0.74 avg Spam%=0.01 avg Ham%=0.00
  TO_NO_BRKTS_FREEMAIL:  bad, avg S/O=0.30 avg Spam%=3.93 avg Ham%=9.06
  TO_NO_BRKTS_HTML_IMG:  bad, avg S/O=0.55 avg Spam%=0.14 avg Ham%=0.10
  __FORGED_TBIRD_IMG:  no hits of target type
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE FORGED_TBIRD_IMG_TO_MX
  __IMG_LE_300K:  bad, avg S/O=0.42 avg Spam%=0.36 avg Ham%=0.45
      # used in: FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX
  __MIME_BDRY_0D0D:  bad, avg S/O=0.14 avg Spam%=0.03 avg Ham%=0.20
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE FORGED_TBIRD_IMG_TO_MX __FORGED_TBIRD_IMG
  __MUA_TBIRD:  bad, avg S/O=0.21 avg Spam%=2.44 avg Ham%=8.94
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE FORGED_TBIRD_IMG_TO_MX __FORGED_TBIRD_IMG
  __ONE_IMG:  bad, avg S/O=0.29 avg Spam%=0.41 avg Ham%=0.95
      # used in: FORGED_TBIRD_IMG_SIZE IMG_DIRECT_TO_MX TO_NO_BRKTS_HTML_IMG
  __TO_NO_ARROWS_R:  bad, avg S/O=0.27 avg Spam%=19.02 avg Ham%=50.80
      # used in: FORGED_TBIRD_IMG_ARROW TO_NO_BRKTS_DIRECT TO_NO_BRKTS_FREEMAIL TO_NO_BRKTS_HTML_IMG
  __TO_NO_BRKTS_FREEMAIL:  bad, avg S/O=0.30 avg Spam%=4.01 avg Ham%=9.22
      # used in: TO_NO_BRKTS_FREEMAIL
  __TO_NO_BRKTS_HTML_IMG:  bad, avg S/O=0.55 avg Spam%=0.14 avg Ham%=0.10
      # used in: TO_NO_BRKTS_HTML_IMG
  __TO_UNDISCLOSED:  bad, avg S/O=0.59 avg Spam%=1.48 avg Ham%=0.98
      # used in: FORGED_TBIRD_IMG_ARROW TO_NO_BRKTS_HTML_IMG __TO_NO_BRKTS_HTML_IMG

rulesrc/sandbox/jhardin/20_postcards.cf (16 rules, 10 bad):

  EXECUTABLE_URI:  bad, avg S/O=0.49 avg Spam%=0.03 avg Ham%=0.03
  POSTCARD_01:  no hits at all
  POSTCARD_02:  no hits at all
  POSTCARD_03:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.00
  POSTCARD_05:  no hits of target type
  POSTCARD_06:  no hits at all
  POSTCARD_07:  no hits at all
  POSTCARD_08:  no hits at all
  POSTCARD_09:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.02
  __EXECUTABLE_URI:  bad, avg S/O=0.49 avg Spam%=0.03 avg Ham%=0.03
      # used in: EXECUTABLE_URI

rulesrc/sandbox/jhardin/20_misc_testing.cf (219 rules, 76 bad):

  AD_COMPLAINTS:  no hits at all
  ARTHUR_INTRUST:  no hits at all
  ART_NAMES_ORG:  no hits at all
  CALL_SKYPE:  no hits at all
  DG_SPAMMER_EMAIL_B:  no hits of target type
  DG_SPAMMER_EMAIL_F:  bad, avg S/O=0.63 avg Spam%=0.00 avg Ham%=0.00
  DQ_URI_DOM_IN_PATH:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.18
  DYNDNS_URIS:  no hits of target type
  FREEMAIL_DOC_PDF:  bad, avg S/O=0.36 avg Spam%=0.05 avg Ham%=0.09
  FREEMAIL_RVW_ATTCH:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  FROM_ONE_CHAR:  bad, avg S/O=0.74 avg Spam%=0.02 avg Ham%=0.00
  FROM_TRL_UNDR:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.01
  FUZZY_OPTOUT:  no hits at all
  GZ_PILL_SQUATTERS:  no hits at all
  HAS_APPARENTLY_TO:  no hits at all
  HDRS_LCASE:  bad, avg S/O=0.17 avg Spam%=0.47 avg Ham%=2.40
  HDRS_LCASE_IMGONLY:  bad, avg S/O=0.59 avg Spam%=0.04 avg Ham%=0.03
  HTML_ATTACH:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  IMAGESHACK_URI:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
  LAZY_LISTWASHING:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
  LH_URI_DOM_IN_PATH:  bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=0.68
  LOTSA_EMAILS:  bad, avg S/O=0.77 avg Spam%=0.03 avg Ham%=0.01
  MANY_APPARENTLY_TO:  no hits at all
  MANY_BIG_LISTS:  bad, avg S/O=0.69 avg Spam%=0.01 avg Ham%=0.00
  MANY_GOOG_PROXY:  bad, avg S/O=0.29 avg Spam%=0.01 avg Ham%=0.01
  MANY_HDRS_LCASE:  bad, avg S/O=0.46 avg Spam%=0.05 avg Ham%=0.06
  MISQ_HTML:  bad, avg S/O=0.36 avg Spam%=0.13 avg Ham%=0.24
  NSL_FREEMAIL_M2:  bad, avg S/O=0.55 avg Spam%=1.30 avg Ham%=1.05
  NSL_TO_ENDS_COMMA:  bad, avg S/O=0.61 avg Spam%=0.02 avg Ham%=0.01
  NUM_EMAILS:  bad, avg S/O=0.74 avg Spam%=0.02 avg Ham%=0.01
  OBFU_DOC_ATTACH:  bad, avg S/O=0.46 avg Spam%=0.01 avg Ham%=0.01
  OBFU_GIF_ATTACH:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  OBFU_JPG_ATTACH:  bad, avg S/O=0.48 avg Spam%=0.01 avg Ham%=0.01
  OBFU_JVSCR_ESC:  no hits at all
  OBFU_PDF_ATTACH:  bad, avg S/O=0.29 avg Spam%=0.04 avg Ham%=0.10
  PPMC_FROM_1:  no hits at all
  RDNS_LOCALHOST:  no hits at all
  RUNON_SHY:  no hits of target type
  SCRIPT_GIBBERISH:  no hits of target type
  SPAMMY_MIME_BDRY_01:  no hits at all
  SUBJ_BRKN_WORDNUMS:  no hits at all
  SUBJ_BROKEN_WORDS:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  SUBJ_RE_CLNCLN:  no hits at all
  TO_JOHNZY:  no hits at all
  TO_SEM_SEM:  no hits of target type
  URI_1234:  no hits at all
  URI_HIDDEN_2:  bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.17
  URI_NUMERIC_CCTLD:  no hits at all
  WIKI_IMG:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  __APPARENTLY_TO:  no hits at all
      # used in: HAS_APPARENTLY_TO MANY_APPARENTLY_TO
  __ARTHUR_SIMMONS:  no hits at all
      # used in: ARTHUR_INTRUST
  __DLND_ATTACH:  bad, avg S/O=0.41 avg Spam%=0.01 avg Ham%=0.01
      # used in: FREEMAIL_RVW_ATTCH
  __DOC_ATTACH:  bad, avg S/O=0.09 avg Spam%=0.09 avg Ham%=0.85
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH
  __DYNDNS_URI:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
      # used in: DYNDNS_URIS
  __FEEDPROXY:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.11
      # used in: MANY_GOOG_PROXY
  __FROM_ALL_NUMS:  bad, avg S/O=0.54 avg Spam%=0.13 avg Ham%=0.11
      # used in: TO_NO_BRKTS_HTML_IMG
  __GZ_PILL_SQUAT1:  bad, avg S/O=0.33 avg Spam%=0.04 avg Ham%=0.08
      # used in: GZ_PILL_SQUATTERS
  __GZ_PILL_SQUAT2:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.22
      # used in: GZ_PILL_SQUATTERS
  __GZ_PILL_SQUATTERS:  no hits of target type
      # used in: GZ_PILL_SQUATTERS
  __HDRS_LCASE:  bad, avg S/O=0.09 avg Spam%=0.49 avg Ham%=4.69
      # used in: HDRS_LCASE HDRS_LCASE_IMGONLY MALFORMED_FREEMAIL MANY_HDRS_LCASE
  __INTRUST_DOMS:  no hits at all
      # used in: ARTHUR_INTRUST
  __MANY_BIG_LISTS:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
      # used in: MANY_BIG_LISTS
  __MANY_HDRS_LCASE:  bad, avg S/O=0.09 avg Spam%=0.05 avg Ham%=0.58
      # used in: MANY_HDRS_LCASE
  __MANY_RECORDS_1:  bad, avg S/O=0.78 avg Spam%=0.01 avg Ham%=0.00
      # used in: MANY_BIG_LISTS __MANY_BIG_LISTS
  __MANY_RECORDS_2:  bad, avg S/O=0.34 avg Spam%=0.98 avg Ham%=1.88
      # used in: MANY_BIG_LISTS __MANY_BIG_LISTS
  __MANY_RECORDS_3:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.53
      # used in: MANY_BIG_LISTS __MANY_BIG_LISTS
  __PDF_ATTACH:  bad, avg S/O=0.10 avg Spam%=0.05 avg Ham%=0.45
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH
  __PLS_REVIEW:  bad, avg S/O=0.06 avg Spam%=0.02 avg Ham%=0.25
      # used in: FREEMAIL_RVW_ATTCH
  __SCRIPT_GIBBERISH:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.00
      # used in: SCRIPT_GIBBERISH
  __SCRIPT_TAG_IN_BODY:  no hits of target type
      # used in: SCRIPT_GIBBERISH
  __SUBJ_BRKN_WORDNUMS:  no hits of target type
      # used in: SUBJ_BRKN_WORDNUMS
  __SUBJ_BROKEN_WORD:  bad, avg S/O=0.10 avg Spam%=0.06 avg Ham%=0.49
      # used in: SUBJ_BRKN_WORDNUMS SUBJ_BROKEN_WORDS __SUBJ_BRKN_WORDNUMS
  __TO_EQ_FROM_DOM:  bad, avg S/O=0.28 avg Spam%=4.91 avg Ham%=12.07
      # used in: TO_NO_BRKTS_FREEMAIL
  __TO_EQ_FROM_DOM_1:  bad, avg S/O=0.37 avg Spam%=4.04 avg Ham%=6.47
      # used in: TO_NO_BRKTS_FREEMAIL __TO_EQ_FROM_DOM
  __TO_EQ_FROM_DOM_2:  bad, avg S/O=0.13 avg Spam%=0.87 avg Ham%=5.61
      # used in: TO_NO_BRKTS_FREEMAIL __TO_EQ_FROM_DOM
  __TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.54 avg Spam%=0.72 avg Ham%=0.60
      # used in: SUBJ_BRKN_WORDNUMS __SUBJ_BRKN_WORDNUMS

rulesrc/sandbox/jhardin/20_lotsa_money.cf (129 rules, 9 bad):

  LOTS_OF_MONEY:  bad, avg S/O=0.43 avg Spam%=2.94 avg Ham%=3.95
  LOTTO_DEPT:  bad, avg S/O=0.70 avg Spam%=0.14 avg Ham%=0.06
  LOTTO_URI:  bad, avg S/O=0.73 avg Spam%=0.02 avg Ham%=0.01
  MONEY_FORM_SHORT:  bad, avg S/O=0.60 avg Spam%=0.27 avg Ham%=0.17
  __DEAL:  bad, avg S/O=0.32 avg Spam%=1.30 avg Ham%=2.75
      # used in: TO_NO_BRKTS_DIRECT
  __LOTSA_MONEY_00:  bad, avg S/O=0.31 avg Spam%=0.49 avg Ham%=1.11
      # used in: LOTS_OF_MONEY MONEY_FORM_SHORT
  __LOTSA_MONEY_01:  bad, avg S/O=0.45 avg Spam%=1.82 avg Ham%=2.27
      # used in: LOTS_OF_MONEY MONEY_FORM_SHORT
  __LOTSA_MONEY_02:  bad, avg S/O=0.55 avg Spam%=0.29 avg Ham%=0.23
      # used in: LOTS_OF_MONEY MONEY_FORM_SHORT
  __LOTSA_MONEY_03:  bad, avg S/O=0.35 avg Spam%=0.61 avg Ham%=1.11
      # used in: LOTS_OF_MONEY MONEY_FORM_SHORT

rulesrc/sandbox/jhardin/20_fillform.cf (18 rules, 7 bad):

  FILL_THIS_FORM_SHORT:  bad, avg S/O=0.44 avg Spam%=0.46 avg Ham%=0.58
  __FILL_THIS_FORM:  bad, avg S/O=0.60 avg Spam%=0.72 avg Ham%=0.47
      # used in: FILL_THIS_FORM_SHORT MONEY_FORM_SHORT
  __FILL_THIS_FORM_LONG2:  bad, avg S/O=0.75 avg Spam%=0.31 avg Ham%=0.10
      # used in: FILL_THIS_FORM_SHORT MONEY_FORM_SHORT __FILL_THIS_FORM
  __FILL_THIS_FORM_PARTIAL:  bad, avg S/O=0.29 avg Spam%=0.47 avg Ham%=1.17
      # used in: FILL_THIS_FORM_SHORT FILL_THIS_FORM_SHORT MONEY_FORM_SHORT MONEY_FORM_SHORT __FILL_THIS_FORM
  __FILL_THIS_FORM_PARTIAL_RAW:  bad, avg S/O=0.23 avg Spam%=1.27 avg Ham%=4.18
      # used in: FILL_THIS_FORM_SHORT FILL_THIS_FORM_SHORT MONEY_FORM_SHORT MONEY_FORM_SHORT __FILL_THIS_FORM
  __FILL_THIS_FORM_SHORT:  bad, avg S/O=0.34 avg Spam%=0.48 avg Ham%=0.90
      # used in: FILL_THIS_FORM_SHORT MONEY_FORM_SHORT
  __FILL_THIS_FORM_SHORT2:  bad, avg S/O=0.50 avg Spam%=0.74 avg Ham%=0.74
      # used in: FILL_THIS_FORM_SHORT MONEY_FORM_SHORT __FILL_THIS_FORM_SHORT

rulesrc/sandbox/jhardin/20_MIME_no_text.cf (5 rules, 4 bad):

  MIME_NO_TEXT:  bad, avg S/O=0.39 avg Spam%=0.02 avg Ham%=0.03
      # used in: MIME_PHP_NO_TEXT
  MIME_PHP_NO_TEXT:  no hits at all
  __CTYPE_MULTIPART_ANY:  bad, avg S/O=0.42 avg Spam%=24.31 avg Ham%=33.12
      # used in: MIME_PHP_NO_TEXT MANY_BIG_LISTS MIME_NO_TEXT
  __XM_PHP:  bad, avg S/O=0.63 avg Spam%=0.05 avg Ham%=0.02
      # used in: MIME_PHP_NO_TEXT

rulesrc/sandbox/hstern/70_syndicate.cf (15 rules, 15 bad):

  HS_FAST_FORWARD:  no hits at all
  HS_FORGED_OE_FW:  bad, avg S/O=0.75 avg Spam%=0.00 avg Ham%=0.00
  HS_ODD_OE_ORIGINAL_MESSAGE:  no hits at all
  HS_OE_FUNNY_BODY_FROM:  no hits at all
  HS_SYNDICATE_P1:  no hits at all
  HS_SYNDICATE_P2:  no hits at all
  HS_SYNDICATE_P3:  no hits at all
  HS_SYNDICATE_P4:  no hits at all
  HS_SYNDICATE_P5:  no hits at all
  __HS_FUNNY_BODY_FROM:  no hits of target type
      # used in: HS_OE_FUNNY_BODY_FROM HS_SYNDICATE_P4
  __HS_NONDEFAULT_OE_QUOTE:  bad, avg S/O=0.52 avg Spam%=0.17 avg Ham%=0.15
      # used in: HS_SYNDICATE_P2
  __HS_ODD_ORIGINAL_MESSAGE:  no hits of target type
      # used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P3
  __HS_QUOTE:  bad, avg S/O=0.01 avg Spam%=0.07 avg Ham%=6.22
      # used in: STOX_REPLY_TYPE_WITHOUT_QUOTES HS_SYNDICATE_P2 __HS_NONDEFAULT_OE_QUOTE
  __HS_SUBJ_RE_FW:  bad, avg S/O=0.08 avg Spam%=3.92 avg Ham%=42.15
      # used in: STOX_REPLY_TYPE_WITHOUT_QUOTES HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P2 HS_SYNDICATE_P3 MANY_BIG_LISTS __HS_NONDEFAULT_OE_QUOTE
  __HS_SUBJ_UC_FW:  bad, avg S/O=0.18 avg Spam%=0.11 avg Ham%=0.52
      # used in: HS_FORGED_OE_FW HS_SYNDICATE_P1

rulesrc/sandbox/hstern/20_uri_tests.cf (15 rules, 14 bad):

  HS_EXTRA:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
  HS_GETMEOFF:  no hits at all
  HS_INDEX_PARAM:  bad, avg S/O=0.21 avg Spam%=0.26 avg Ham%=0.98
  T_HS_INDEX_PARAM_0:  bad, avg S/O=0.30 avg Spam%=0.62 avg Ham%=1.38
  T_HS_INDEX_PARAM_1:  bad, avg S/O=0.31 avg Spam%=0.60 avg Ham%=1.31
  T_HS_INDEX_PARAM_2:  bad, avg S/O=0.31 avg Spam%=0.62 avg Ham%=1.32
  T_HS_INDEX_PARAM_3:  bad, avg S/O=0.21 avg Spam%=0.26 avg Ham%=0.99
  T_HS_INDEX_PARAM_4:  bad, avg S/O=0.30 avg Spam%=0.62 avg Ham%=1.38
  T_HS_INDEX_PARAM_5:  bad, avg S/O=0.21 avg Spam%=0.26 avg Ham%=0.98
  __HS_AOL_URI:  no hits at all
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5
  __HS_FREEHOST_URI:  no hits of target type
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5
  __HS_GEOCITIES_URI:  no hits of target type
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5 __HS_FREEHOST_URI
  __HS_MSNSPACES_URI:  no hits at all
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5 __HS_FREEHOST_URI
  __HS_TRIPOD_URI:  no hits of target type
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 HS_SYNDICATE_P5 __HS_FREEHOST_URI

rulesrc/sandbox/hstern/20_meta_tests.cf (1 rules, 1 bad):

  HS_DRUG_DOLLAR_MANY:  no hits at all

rulesrc/sandbox/hstern/20_head_tests.cf (5 rules, 5 bad):

  HS_BOBAX_MID_1:  no hits at all
  HS_BOBAX_MID_2:  no hits at all
  HS_OUTLOOK_MID_NOBRK:  no hits at all
  HS_SUBJ_NEW_SOFTWARE:  no hits at all
  HS_SUBJ_ONLINE_PHARMACEUTICAL:  no hits at all

rulesrc/sandbox/hstern/20_body_tests.cf (8 rules, 8 bad):

  HS_BODY_UPLOADED_SOFTWARE:  no hits at all
  HS_DRUG_DOLLAR_1:  no hits at all
  HS_DRUG_DOLLAR_2:  no hits at all
  HS_DRUG_DOLLAR_3:  no hits at all
  HS_MEETUP_FOR_SEX:  no hits at all
  HS_NO_FLOWERS:  no hits at all
  HS_SEXOHOLICS_DATESITE:  no hits at all
  HS_VPXL:  bad, avg S/O=0.70 avg Spam%=0.00 avg Ham%=0.00

rulesrc/sandbox/hege/20_hk.cf (81 rules, 27 bad):

  HK_MUCHMONEY:  bad, avg S/O=0.29 avg Spam%=2.09 avg Ham%=5.14
  HK_NAME_DR:  bad, avg S/O=0.21 avg Spam%=0.04 avg Ham%=0.13
  HK_PNISES:  no hits of target type
  HK_RANDOM_FROM_NAME:  bad, avg S/O=0.38 avg Spam%=0.06 avg Ham%=0.09
  HK_SCAM_N12:  no hits at all
  HK_SCAM_N14:  no hits at all
  HK_SCAM_N16:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  HK_SCAM_S12:  no hits at all
  HK_SCAM_S22:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  HK_SCAM_S23:  no hits of target type
  HK_SCAM_S3:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  HK_SCAM_S4:  bad, avg S/O=0.46 avg Spam%=0.02 avg Ham%=0.03
  HK_WIN:  no hits at all
  __HK_NAME_DR:  bad, avg S/O=0.33 avg Spam%=0.07 avg Ham%=0.14
      # used in: HK_NAME_DR
  __hk_bigmoney:  bad, avg S/O=0.26 avg Spam%=1.56 avg Ham%=4.42
      # used in: HK_MUCHMONEY
  __hk_million:  bad, avg S/O=0.38 avg Spam%=1.15 avg Ham%=1.89
      # used in: HK_MUCHMONEY
  __hk_million2:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
      # used in: HK_MUCHMONEY
  __hk_win_1:  bad, avg S/O=0.64 avg Spam%=0.14 avg Ham%=0.08
      # used in: HK_WIN
  __hk_win_6:  bad, avg S/O=0.50 avg Spam%=1.05 avg Ham%=0.96
      # used in: HK_WIN
  __hk_win_7:  no hits of target type
      # used in: HK_WIN
  __hk_win_9:  no hits at all
      # used in: HK_WIN
  __hk_win_c:  no hits at all
      # used in: HK_WIN
  __hk_win_d:  no hits at all
      # used in: HK_WIN
  __hk_win_e:  bad, avg S/O=0.23 avg Spam%=0.37 avg Ham%=1.23
      # used in: HK_WIN
  __hk_win_f:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00
      # used in: HK_WIN
  __hk_win_h:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.09
      # used in: HK_WIN
  __hk_win_m:  no hits at all
      # used in: HK_WIN

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (71 rules, 62 bad):

  FAKE_REPLY_SURE_A:  bad, avg S/O=0.07 avg Spam%=2.43 avg Ham%=33.62
  FAKE_REPLY_SURE_B:  bad, avg S/O=0.06 avg Spam%=2.56 avg Ham%=36.66
  NICE_REPLY_A:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_B:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_C:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  TEST_REPLY_B:  no hits of target type
  TEST_REPLY_C:  no hits of target type
  __BOTH_INR_AND_REF:  bad, avg S/O=0.49 avg Spam%=4.11 avg Ham%=4.30
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A
  __INR_AND_NO_REF:  bad, avg S/O=0.21 avg Spam%=1.64 avg Ham%=6.26
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B
  __MISSING_REF:  bad, avg S/O=0.64 avg Spam%=99.96 avg Ham%=56.18
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B TO_NO_BRKTS_DIRECT
  __MISSING_REPLY:  bad, avg S/O=0.65 avg Spam%=99.97 avg Ham%=54.55
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B HDRS_LCASE HDRS_LCASE MANY_HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT TO_NO_BRKTS_DIRECT
  __MISSING_THREAD:  bad, avg S/O=0.51 avg Spam%=95.55 avg Ham%=92.96
      # used in: FAKE_REPLY_SURE_A
  __NO_INR_YES_REF:  bad, avg S/O=0.63 avg Spam%=11.65 avg Ham%=6.75
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT
  __SUBJ_RE:  bad, avg S/O=0.07 avg Spam%=3.23 avg Ham%=41.38
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B TEST_REPLY_C
  __UA_GNUS:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __UA_IMP:  bad, avg S/O=0.23 avg Spam%=0.07 avg Ham%=0.24
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __UA_KMAIL:  bad, avg S/O=0.02 avg Spam%=0.02 avg Ham%=1.20
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __UA_KNODE:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __UA_MOZ5:  bad, avg S/O=0.36 avg Spam%=1.60 avg Ham%=2.84
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __UA_MSENTOUR:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __UA_MSOEMAC:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __UA_MUTT:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=4.22
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __UA_PAN:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __UA_XNEWS:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __XM_AOL:  bad, avg S/O=0.78 avg Spam%=0.40 avg Ham%=0.11
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_APPLEMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_BALSA:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_CALYPSO:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_COMMUNIG:  bad, avg S/O=0.36 avg Spam%=0.01 avg Ham%=0.01
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_DTMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_EDMAX:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_ELM:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_EMUMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_EXMH:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_FORTE:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_FREEMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_GNUS:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __XM_IMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_LOTUSN:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.23
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_LOTUSN5:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_MAILCITY:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MAILSMITH:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MHE:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_MIMETOOLS:  bad, avg S/O=0.76 avg Spam%=0.16 avg Ham%=0.05
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MOZ4:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __XM_MSCDO:  bad, avg S/O=0.20 avg Spam%=0.03 avg Ham%=0.10
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_MSOUT:  bad, avg S/O=0.80 avg Spam%=1.16 avg Ham%=0.29
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_NETMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_NETSCAPEW:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_NOVELL:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.09
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_OPENWEB:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_OPERA6:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_PEGASUS:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_POSTMAN:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_QUALCOM:  bad, avg S/O=0.35 avg Spam%=0.17 avg Ham%=0.32
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B __INR_AND_NO_REF
  __XM_SKYRI:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __XM_SQRLMAIL:  bad, avg S/O=0.26 avg Spam%=0.01 avg Ham%=0.02
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_SYLPHEED:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_VM:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_WEBMAIL5:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_WWWMAIL:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B HDRS_LCASE MANY_HDRS_LCASE NICE_REPLY_C TEST_REPLY_C TO_NO_BRKTS_DIRECT __NO_INR_YES_REF
  __XM_XIMEVOL:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF

rulesrc/sandbox/felicity/70_phishing.cf (54 rules, 29 bad):

  HTTPS_HTTP_MISMATCH:  bad, avg S/O=0.38 avg Spam%=0.03 avg Ham%=0.04
  TVD_PH_1:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.01
  TVD_PH_7:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.07
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.26 avg Spam%=0.06 avg Ham%=0.18
  TVD_PH_BODY_ACCOUNTS_PRE:  bad, avg S/O=0.37 avg Spam%=0.07 avg Ham%=0.12
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.42 avg Spam%=0.22 avg Ham%=0.30
  TVD_PH_FR5:  bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.08
  TVD_PH_SEC:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.01
  TVD_PH_SUBJ_META:  bad, avg S/O=0.68 avg Spam%=0.01 avg Ham%=0.00
  TVD_PH_SUBJ_META1:  no hits at all
  TVD_SUBJ_ACC_NUM:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
  __PH_TVD_FROM2:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.10
      # used in: TVD_PH_FR5
  __TVD_PH_BODY_01:  no hits at all
      # used in: TVD_PH_BODY_META_ALL
  __TVD_PH_BODY_02:  no hits at all
      # used in: TVD_PH_BODY_META_ALL
  __TVD_PH_BODY_07:  no hits at all
      # used in: TVD_PH_BODY_META_ALL
  __TVD_PH_SUBJ_02:  no hits of target type
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_04:  no hits of target type
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_15:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_17:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_18:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_19:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_29:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_31:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_36:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_37:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_39:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_52:  no hits of target type
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_58:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_59:  no hits at all
      # used in: TVD_PH_SUBJ_META

rulesrc/sandbox/felicity/70_other.cf (70 rules, 53 bad):

  BASE64_LENGTH_79_INF:  bad, avg S/O=0.77 avg Spam%=0.04 avg Ham%=0.01
  FUZZY_SPRM:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
  HEADER_COUNT_SUBJECT:  no hits at all
  TVD_APPROVED:  bad, avg S/O=0.68 avg Spam%=0.02 avg Ham%=0.01
  TVD_APP_LOAN:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  TVD_BODY_END_STAR:  no hits of target type
  TVD_COMPANY_PICK:  no hits at all
  TVD_DEAD_JOB:  no hits at all
  TVD_FINGER_01:  no hits of target type
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.09
  TVD_FUZZY_SECURITIES:  no hits of target type
  TVD_FW_GRAPHIC_ID2:  no hits at all
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.44
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.44
  TVD_GET_STOCK:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.04
  TVD_GOOG_LUCKY:  no hits of target type
  TVD_HEAD_EDITION:  no hits at all
  TVD_HEAD_KERNEL:  no hits of target type
  TVD_HEAD_USR:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.01
  TVD_NOT_SATISFIED:  no hits at all
  TVD_PCT_OFF:  no hits at all
  TVD_PDF_FINGER01:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.03 avg Spam%=0.04 avg Ham%=1.46
  TVD_RCVD_SPACE_BRACKET:  bad, avg S/O=0.47 avg Spam%=0.32 avg Ham%=0.34
  TVD_SINGLE_SPAN_DIV:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.31 avg Spam%=0.02 avg Ham%=0.06
  TVD_SPACED_WORDS:  no hits of target type
  TVD_SUBJ_END_STAR:  no hits at all
  TVD_SUBJ_FINGER_04:  bad, avg S/O=0.42 avg Spam%=0.09 avg Ham%=0.12
  TVD_UA_FOSTERING:  no hits at all
  TVD_UNDER_VALUED:  no hits at all
  T_TVD_IP_HEX:  no hits of target type
  T_TVD_IP_OCT:  no hits of target type
  T_TVD_IP_SING_HEX:  no hits at all
  T_TVD_MIME_EPI:  bad, avg S/O=0.76 avg Spam%=0.04 avg Ham%=0.01
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.32 avg Spam%=0.02 avg Ham%=0.04
  T_TVD_PCT_OFF2:  bad, avg S/O=0.49 avg Spam%=0.06 avg Ham%=0.08
  T_TVD_PCT_OFF3:  no hits at all
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.42 avg Spam%=0.04 avg Ham%=0.05
  T_TVD_SUBJ_FINGER_06:  no hits at all
  T_TVD_SUBJ_NUM_OBFU:  bad, avg S/O=0.54 avg Spam%=0.72 avg Ham%=0.60
  T_TVD_SUBJ_NUM_OBFU2:  bad, avg S/O=0.55 avg Spam%=1.11 avg Ham%=0.92
  T_TVD_SUBJ_NUM_OBFU3:  bad, avg S/O=0.55 avg Spam%=1.11 avg Ham%=0.92
  __HEAD_X_KERNEL:  no hits of target type
      # used in: TVD_HEAD_KERNEL
  __TVD_BODY:  bad, avg S/O=0.50 avg Spam%=99.20 avg Ham%=99.76
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_GOT_UR:  no hits at all
      # used in: TVD_FINGER_01
  __TVD_HAPPY_WITH:  no hits of target type
      # used in: TVD_FINGER_01
  __TVD_INT_CID:  bad, avg S/O=0.37 avg Spam%=0.79 avg Ham%=1.29
      # used in: TVD_FW_GRAPHIC_ID3
  __TVD_MIME_ATT:  bad, avg S/O=0.11 avg Spam%=0.05 avg Ham%=0.42
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_MIME_CT_MM:  bad, avg S/O=0.23 avg Spam%=1.79 avg Ham%=5.87
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_VISIT_SITE:  no hits at all
      # used in: TVD_FINGER_01
  __USER_AGENT_MUTT:  no hits at all
      # used in: TVD_HEAD_KERNEL

rulesrc/sandbox/fanf/30_text.cf (3 rules, 3 bad):

  IMG_ALT_BRACKETS:  no hits at all
  LONG_TERM_PRICE:  no hits of target type
  SHORT_TERM_PRICE:  no hits of target type

rulesrc/sandbox/fanf/20_uri_tests.cf (1 rules, 1 bad):

  YAHOO_RDS_REDIR:  no hits of target type

rulesrc/sandbox/fanf/10_headers.cf (3 rules, 3 bad):

  FROM_SPACE_COMMA:  no hits at all
  RCVD_FORGED_WROTE3:  no hits at all
  RCVD_FORGED_WROTE4:  no hits at all

rulesrc/sandbox/emailed/00_FVGT_File001.cf (603 rules, 476 bad):

  FB_ADD_INCHES:  no hits at all
  FB_ALMOST_SEX:  no hits at all
  FB_ANA_TRIM:  no hits at all
  FB_ANUI:  no hits at all
  FB_AN_ERROR_4U:  no hits at all
  FB_B0NUS:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  FB_BAD_ERECT:  no hits at all
  FB_BEDISCARDED:  no hits at all
  FB_BE_MILLION:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.01
  FB_BILLI0N:  no hits at all
  FB_BROKEN_PHNUM:  no hits at all
  FB_BROWSER_ERR:  no hits at all
  FB_C0MPANY:  no hits at all
  FB_CAN_LONGER:  no hits at all
  FB_CASINO:  no hits at all
  FB_CASINO_SPELLER:  no hits at all
  FB_CHOLESTERBLCK:  no hits at all
  FB_COM_ADR_SIGN:  no hits of target type
  FB_CONSOL_YOUR:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  FB_DDDD_BUCKS:  no hits of target type
  FB_DOUBLE_0WORDS:  no hits at all
  FB_DROWNING_DEBT:  no hits of target type
  FB_EMAIL_HIER:  no hits at all
  FB_ENHANCED_MALE:  no hits at all
  FB_EPHEDRA_IS:  no hits at all
  FB_EXPLOSIVE:  no hits of target type
  FB_EXP_POWER_OF:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  FB_FAKE_NUMBERS:  no hits at all
  FB_FAKE_NUMS2:  no hits at all
  FB_FAKE_NUMS4:  no hits at all
  FB_FEDERALLY_COMPL:  no hits at all
  FB_FHARMACY:  no hits at all
  FB_FORWARD_LOOK:  no hits at all
  FB_FREE888:  no hits at all
  FB_FUNNY_WEIGHT:  no hits of target type
  FB_GAPPY_ADDRESS:  no hits at all
  FB_GAPPY_SOMETHING:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  FB_GET_LAID:  no hits at all
  FB_GET_XXX_CASH:  no hits of target type
  FB_HA1R:  no hits at all
  FB_HEY_BRO_COMMA:  no hits at all
  FB_HG_H_CAP:  no hits at all
  FB_HOMELOAN:  no hits at all
  FB_IMAGIRL:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FB_IMPRESS_GIRL:  no hits at all
  FB_IMPROVEJA:  no hits at all
  FB_INCREASE_VOL:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  FB_INCREASE_YOUR:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  FB_INDEPEND_RWD:  no hits at all
  FB_IOW:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  FB_L0AN:  no hits at all
  FB_LATEST_OEM:  no hits at all
  FB_LETTERS_21B:  no hits at all
  FB_LIMITED_TIME:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  FB_LOSE_WEIGHT_CAP:  no hits at all
  FB_LOWER_PAYM:  no hits at all
  FB_MAKE_MONEY:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  FB_MASCULINE_PERF:  no hits at all
  FB_MED1CAT:  no hits at all
  FB_MEDS_PERCENT:  no hits at all
  FB_MEEDS:  no hits at all
  FB_MORE_SEMEN:  no hits of target type
  FB_MORE_SIZE:  no hits at all
  FB_MOST_QUALITY:  no hits at all
  FB_MOST_RECOG:  no hits at all
  FB_N3W:  no hits at all
  FB_NATIONALSURV:  no hits at all
  FB_NEW_LOW_RATE:  no hits at all
  FB_NOT_CREDIT:  no hits of target type
  FB_NOT_PHONE_NUM1:  no hits at all
  FB_NOT_PHONE_NUM2:  no hits at all
  FB_NOT_PHONE_NUM3:  no hits at all
  FB_NOT_SCHOOL:  no hits at all
  FB_NOW_NOW_NOW:  no hits of target type
  FB_NO_MORE_ADS:  no hits of target type
  FB_NO_MORE_MAIL:  bad, avg S/O=0.46 avg Spam%=0.00 avg Ham%=0.00
  FB_NO_MORE_OFFER:  no hits at all
  FB_NUMYO:  no hits at all
  FB_NUMYO2:  no hits at all
  FB_ODD_SPACED_MONEY:  no hits at all
  FB_ONIINE:  no hits at all
  FB_P1LL:  no hits at all
  FB_PA1N:  no hits at all
  FB_PASTE_LINK:  no hits at all
  FB_PC_DOCTOR:  no hits at all
  FB_PENIS_GROWTH:  no hits at all
  FB_PIPEDOLLAR:  no hits at all
  FB_PIPENEWSLETTER:  no hits at all
  FB_PIPE_ILLION:  no hits at all
  FB_PROLONGED_HARD:  no hits at all
  FB_RANDOM_SPUR:  no hits at all
  FB_REFI:  no hits of target type
  FB_REF_CODE_SPACE:  no hits at all
  FB_REM_PART:  no hits of target type
  FB_REPLIC_CAP:  no hits at all
  FB_REWARDS_GATE:  no hits at all
  FB_RE_FI:  no hits at all
  FB_ROLLER_IS_T:  no hits at all
  FB_ROLX:  no hits at all
  FB_SAVE_PERSC:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.01
  FB_SMALL_PEN:  no hits of target type
  FB_SPACED_CASH:  no hits at all
  FB_SPACED_LOWER:  no hits at all
  FB_SPACED_PHN_3B:  no hits of target type
  FB_SPACEY_ZIP:  no hits at all
  FB_SPUR_M:  no hits at all
  FB_SSEX:  no hits at all
  FB_STOCK_EXPLODE:  no hits at all
  FB_STOP_EMAILING:  no hits of target type
  FB_STREAM_OF:  no hits at all
  FB_STRONGER_EJ:  no hits at all
  FB_SUPERBREWARD:  no hits at all
  FB_SYMBLO:  no hits at all
  FB_THOUS_PERSONAL:  no hits at all
  FB_TIRED_OF_YOUR:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
  FB_UGGS_NOW:  no hits at all
  FB_ULTRA_ALLURE:  no hits at all
  FB_UNLOCK_YOUR_G:  no hits at all
  FB_UNRESOLV_PROV:  no hits at all
  FB_VERIFY_ZIP:  no hits at all
  FB_V_SPACE_GRA:  no hits at all
  FB_WHILECONNECTED:  no hits at all
  FB_WHITEGOLD:  no hits at all
  FB_WITHOUT_INCRE:  no hits of target type
  FB_WITHOUT_PRESC:  bad, avg S/O=0.39 avg Spam%=0.00 avg Ham%=0.00
  FB_WORD1_END_DOLLAR:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.03
  FB_WORD2_END_DOLLAR:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.08
  FB_YOURSELF_MASTER:  no hits at all
  FB_YOUR_MED:  no hits at all
  FB_YOUR_MORTGAGE:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.04
  FB_YOUR_PC_ERROR:  no hits at all
  FB_YOUR_REFI:  no hits at all
  FB_YOUR_WEIGHT:  no hits of target type
  FB_YOUR_WOMAN:  no hits at all
  FB_YOUTH_THIS:  no hits at all
  FB_YOU_CAN_BECOME:  bad, avg S/O=0.62 avg Spam%=0.04 avg Ham%=0.02
  FF_COMMENT_ODD:  no hits at all
  FF_IHOPE_YOU_SINK:  bad, avg S/O=0.06 avg Spam%=0.04 avg Ham%=0.70
  FF_LEO_FLOAT_RIGHT:  no hits at all
  FH_BAD_MSOE14:  no hits at all
  FH_BAD_OEV1441:  no hits at all
  FH_DATE_IS_19XX:  no hits at all
  FH_FROM_HOODIA:  no hits at all
  FH_FROM_RND_1:  no hits at all
  FH_HAS_UID:  no hits at all
  FH_HAS_X:  no hits at all
  FH_HAS_XBBO:  no hits at all
  FH_HAS_XCVBN:  no hits at all
  FH_HAS_XFGHJ:  no hits at all
  FH_HAS_XID:  no hits at all
  FH_HAS_XOVE:  no hits at all
  FH_HAS_XUIOP:  no hits at all
  FH_HAS_X_WBC:  no hits at all
  FH_HELO_ENDS_DOT:  no hits at all
  FH_HELO_EQ_610HEX:  no hits at all
  FH_HELO_GMAILSMTP:  no hits at all
  FH_HOST_EQ_PACBELL_D:  bad, avg S/O=0.71 avg Spam%=0.01 avg Ham%=0.00
  FH_HOST_EQ_SPRINT_H:  no hits at all
  FH_HOST_EQ_VERIZON_P:  no hits at all
  FH_HOST_IN_ADDRARPA:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
  FH_MSGID_000000:  no hits at all
  FH_MSGID_01C67:  no hits at all
  FH_MSGID_01C70XXX:  no hits at all
  FH_MSGID_DIGIT:  no hits at all
  FH_MSGID_REPLACE:  no hits at all
  FH_MSGID_XXBLAH:  no hits at all
  FH_RANDOM_SURE:  bad, avg S/O=0.52 avg Spam%=0.05 avg Ham%=0.05
  FH_RCVD_FROM_2_WDS:  no hits of target type
  FH_RCVD_HELODATE:  no hits at all
  FH_RE_NEW_DDD:  no hits at all
  FH_SPOOF_NAMES:  no hits at all
  FH_USER_MOZILLA_SMAL:  no hits at all
  FH_VIRUS_NORTON:  no hits at all
  FH_XCOMMENT_GIBBER:  no hits at all
  FH_XCON_HAS_EQ:  no hits at all
  FH_XMAIL_HEX20:  no hits of target type
  FH_XMAIL_REPLACE:  no hits at all
  FH_XMAIL_RND_833:  no hits at all
  FH_X_REFS_DDD:  no hits at all
  FM_APPROVE_COMPLETE:  no hits at all
  FM_ASCII_ART_SPACINGc:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  FM_BIG_REASON:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.10
  FM_CLAIM_IPOD:  no hits of target type
  FM_COKE_PEPSI:  no hits at all
  FM_CONG_GIFTCARD:  no hits of target type
  FM_COSTA_RICA:  no hits at all
  FM_CUSTOMLOGODSGNc:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  FM_DEBT_HELP:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  FM_DOESNT_SAY_STOCK:  no hits at all
  FM_FAKE_53COM_SPOOF:  no hits at all
  FM_FAKE_HELO_HOTMAIL:  no hits at all
  FM_FAKE_HELO_VERIZON:  no hits at all
  FM_FORGED_GMAIL:  bad, avg S/O=0.04 avg Spam%=0.19 avg Ham%=4.65
  FM_FUCK_ASS_TEEN:  no hits of target type
  FM_GET_CASH_SURVEY:  no hits at all
  FM_GOOD_ENF_CREDIT:  no hits of target type
  FM_HOW_IMG_COST:  no hits at all
  FM_HOW_IMG_COST2:  no hits at all
  FM_LEND_MONEY:  no hits at all
  FM_LIKE_STOCKS:  no hits at all
  FM_LOAN_NUM_DOMAIN:  no hits at all
  FM_LOWER_CASE_HEAD:  no hits at all
  FM_LUX_GIFTS_REDUCED:  no hits at all
  FM_MAKE_MONEY_HOME:  no hits of target type
  FM_MANY_DRUG_WORDS:  no hits at all
  FM_MEDS_SUBJ_2WDS:  no hits at all
  FM_MORTGAGE3PLUS:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.02
  FM_MORTGAGE4PLUS:  no hits of target type
  FM_MORTGAGE5PLUS:  no hits at all
  FM_MORTGAGE6PLUS:  no hits at all
  FM_MULTI_LUX_GIFTS:  no hits at all
  FM_NIKE_ADIDAS:  no hits at all
  FM_PAYING_LOWER:  no hits at all
  FM_PC_ERROR_DBL:  no hits at all
  FM_PEOPLE_LOOK_4ME:  no hits at all
  FM_PHN_NODNS:  no hits at all
  FM_RATSIGN_1106:  no hits at all
  FM_REPLY_OR_NOT:  no hits at all
  FM_RE_HELLO_SPAM:  no hits at all
  FM_ROLEX_ADS:  no hits at all
  FM_SCHOOL_TYPES:  no hits at all
  FM_SUBJ_YOU_PROFIT:  bad, avg S/O=0.50 avg Spam%=0.00 avg Ham%=0.00
  FM_SUB_TEEN_NUDE:  no hits at all
  FM_TRUE_LOV_ALL_N:  no hits at all
  FM_WEIGHT_LOSS:  no hits of target type
  FM_XMAIL_F_OUT:  no hits at all
  FM_XREF_CLICKPHP:  no hits at all
  FRM_SILVER_GOLD:  no hits at all
  FRT_ABSOLUT:  no hits of target type
  FRT_ADOBE2:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  FRT_ADULT2:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
  FRT_BEFORE:  no hits of target type
  FRT_BELOW2:  bad, avg S/O=0.54 avg Spam%=0.04 avg Ham%=0.04
  FRT_CANSPAM:  no hits at all
  FRT_CLICK:  bad, avg S/O=0.34 avg Spam%=0.01 avg Ham%=0.01
  FRT_COCK:  bad, avg S/O=0.40 avg Spam%=0.02 avg Ham%=0.03
  FRT_CONTACT:  bad, avg S/O=0.69 avg Spam%=0.10 avg Ham%=0.04
  FRT_DIPLOMA:  no hits at all
  FRT_DISCOUNT:  no hits at all
  FRT_DOLLAR:  no hits at all
  FRT_ESTABLISH:  no hits of target type
  FRT_ESTABLISH2:  no hits at all
  FRT_EXPERIENCE:  no hits of target type
  FRT_FOLLOW1:  no hits of target type
  FRT_FOLLOW2:  bad, avg S/O=0.25 avg Spam%=0.00 avg Ham%=0.01
  FRT_FREE:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.05
  FRT_FRIEND:  no hits of target type
  FRT_FUCK1:  bad, avg S/O=0.64 avg Spam%=0.02 avg Ham%=0.01
  FRT_FUCK2:  no hits at all
  FRT_GUARANTEE1:  no hits at all
  FRT_HOUR:  no hits at all
  FRT_INCOME:  bad, avg S/O=0.56 avg Spam%=0.00 avg Ham%=0.00
  FRT_INTEREST:  no hits of target type
  FRT_INVESTOR:  no hits at all
  FRT_LEVITRA:  no hits at all
  FRT_LITTLE:  bad, avg S/O=0.54 avg Spam%=0.01 avg Ham%=0.01
  FRT_LOLITA1:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.02
  FRT_MEETING:  no hits at all
  FRT_OFFER2:  bad, avg S/O=0.47 avg Spam%=0.01 avg Ham%=0.01
  FRT_OPPORTUN1:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  FRT_OPPORTUN2:  no hits at all
  FRT_PACKAGE:  no hits of target type
  FRT_PAYMENT:  bad, avg S/O=0.47 avg Spam%=0.00 avg Ham%=0.00
  FRT_PENIS1:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.00
  FRT_POSSIBLE:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.15
  FRT_PRICE:  no hits of target type
      # used in: FM_DOESNT_SAY_STOCK
  FRT_PROFILE1:  bad, avg S/O=0.34 avg Spam%=0.02 avg Ham%=0.04
  FRT_PROFILE2:  bad, avg S/O=0.18 avg Spam%=0.03 avg Ham%=0.12
  FRT_PROFIT1:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  FRT_PROFIT2:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
  FRT_REFINANCE1:  no hits at all
  FRT_SEXUAL:  no hits at all
  FRT_SLUT:  bad, avg S/O=0.45 avg Spam%=0.03 avg Ham%=0.03
  FRT_SOMA:  no hits at all
  FRT_SOMA2:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.06
  FRT_STOCK1:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
  FRT_STOCK2:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.10
  FRT_STRONG1:  no hits at all
  FRT_STRONG2:  no hits at all
  FRT_SYMBOL:  no hits at all
  FRT_TODAY2:  no hits of target type
  FRT_VALIUM1:  no hits at all
  FRT_VALIUM2:  no hits at all
  FRT_VIRGIN1:  no hits at all
  FRT_WEIGHT2:  no hits at all
  FRT_XANAX1:  no hits at all
  FRT_XANAX2:  no hits at all
  FR_3TAG_3TAG:  no hits at all
  FR_CANTSEETEXT:  no hits at all
  FR_COMMENT_ODD:  no hits at all
  FR_DIV_DRUGS_3:  no hits at all
  FR_IMPORT_CSS:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.01
  FR_MIDER:  no hits at all
  FR_M_E_D_S:  no hits at all
  FR_PORN_NOT_URL:  no hits at all
  FR_P_END_P_MANY10:  no hits of target type
  FR_TEST_BASE64_BAD:  bad, avg S/O=0.80 avg Spam%=0.00 avg Ham%=0.00
  FS_ATTRACT_CUST:  no hits at all
  FS_BROKEN_MEETING:  no hits at all
  FS_CAILIS:  no hits at all
  FS_CHEAP_CAP:  no hits at all
  FS_COSTARICA:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  FS_CUTE_TEEN:  no hits at all
  FS_DOLLAR_BONUS:  no hits at all
  FS_EJACULA:  no hits at all
  FS_END_BILLS:  bad, avg S/O=0.42 avg Spam%=0.00 avg Ham%=0.01
  FS_ERECTION:  no hits at all
  FS_GANGBANG:  no hits of target type
  FS_GIFT_CARD_OFF:  no hits at all
  FS_HOT_TEEN:  no hits at all
  FS_HUGECOCK:  no hits at all
  FS_LOWER_YOUR:  bad, avg S/O=0.71 avg Spam%=0.00 avg Ham%=0.00
  FS_LOW_INTMOR:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  FS_LOW_RATES:  no hits at all
  FS_MORE_CONFIDENT:  no hits at all
  FS_NEED_MONEY:  bad, avg S/O=0.57 avg Spam%=0.00 avg Ham%=0.00
  FS_NEW_SOFT_UPLOAD:  no hits at all
  FS_NEW_XXX:  no hits at all
  FS_NO_SCRIP:  no hits at all
  FS_NUDE:  no hits of target type
  FS_NUMYO:  no hits of target type
  FS_PERSCRIPTION:  no hits at all
  FS_PRE_SUBJ:  no hits at all
  FS_RAMROD:  no hits at all
  FS_REFI:  no hits at all
  FS_REPL_TOKEN:  no hits at all
  FS_RESULTS_BED:  no hits at all
  FS_RE_APPROV:  no hits at all
  FS_SINGLE_LETTER_H:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  FS_SINGLE_LETTER_J:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  FS_SPERMAX:  no hits at all
  FS_SPLASH:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  FS_START_TEEN:  no hits of target type
  FS_TEEN_BAD:  no hits at all
  FS_TIGHT_TEEN:  no hits at all
  FS_TIP_DDD:  no hits at all
  FS_VIEWPHOTOS:  no hits at all
  FS_WITH_SMALL:  no hits at all
  FS_YOUR_COMPUTER:  no hits at all
      # used in: FM_PC_ERROR_DBL
  FS_YOUR_PRESCRIP:  no hits of target type
  FU_16R:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  FU_CLICK_PHP_DDD:  no hits at all
      # used in: FM_XREF_CLICKPHP
  FU_COMMON_SUBS:  no hits at all
  FU_COMMON_SUBS2:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.04
  FU_ENDS_NUMS_DOTS_CLK:  no hits at all
  FU_ENDS_RT:  no hits at all
  FU_END_ET:  no hits at all
  FU_HG_PATH:  no hits at all
  FU_HOODIA:  no hits at all
  FU_LONG_HTML:  no hits at all
  FU_LONG_QUERY3:  no hits at all
  FU_LOTSOFCOLONS:  no hits of target type
  FU_MIDER:  no hits at all
  FU_RX_DIR:  no hits of target type
  FU_SUB_D_WEIRD:  no hits at all
  FU_UKGEOCITIES:  no hits at all
  FU_URI_TRACKER_T:  no hits at all
  __ALL_RANDOM:  bad, avg S/O=0.79 avg Spam%=0.05 avg Ham%=0.01
      # used in: FH_RANDOM_SURE
  __APPROVALFVGT:  bad, avg S/O=0.10 avg Spam%=0.11 avg Ham%=1.06
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS
  __BEEN_APPROVED:  bad, avg S/O=0.51 avg Spam%=0.12 avg Ham%=0.12
      # used in: FM_APPROVE_COMPLETE
  __BIGDOLLARSFVGT:  bad, avg S/O=0.22 avg Spam%=0.54 avg Ham%=1.92
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS
  __CAN_HELP:  bad, avg S/O=0.18 avg Spam%=0.35 avg Ham%=1.65
      # used in: FM_APPROVE_COMPLETE
  __COMPLETE_REVIEW:  no hits of target type
      # used in: FM_APPROVE_COMPLETE
  __COSTA_RI:  bad, avg S/O=0.14 avg Spam%=0.01 avg Ham%=0.03
      # used in: FM_COSTA_RICA
  __DATE_700:  bad, avg S/O=0.28 avg Spam%=4.09 avg Ham%=10.42
      # used in: FM_RATSIGN_1106
  __DATE_LOWER:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.10
      # used in: FM_LOWER_CASE_HEAD
  __DOMAIN_WITH_NUMS:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_LOAN_NUM_DOMAIN
  __FB_BA:  bad, avg S/O=0.05 avg Spam%=0.02 avg Ham%=0.36
      # used in: FM_SCHOOL_TYPES
  __FB_BCs:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_SCHOOL_TYPES
  __FB_BEST:  bad, avg S/O=0.48 avg Spam%=0.53 avg Ham%=0.57
      # used in: FM_BIG_REASON
  __FB_BIG:  bad, avg S/O=0.24 avg Spam%=0.22 avg Ham%=0.70
      # used in: FM_BIG_REASON
  __FB_COST:  bad, avg S/O=0.24 avg Spam%=1.77 avg Ham%=5.64
      # used in: FM_HOW_IMG_COST2
  __FB_COULD_NOT_F:  no hits at all
      # used in: FM_PEOPLE_LOOK_4ME
  __FB_CUSTOM_LOGO:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_CUSTOMLOGODSGNc
  __FB_CUSTOM_RECOG:  no hits of target type
      # used in: FM_CUSTOMLOGODSGNc
  __FB_DESIGNER:  bad, avg S/O=0.75 avg Spam%=2.15 avg Ham%=0.70
      # used in: FM_MULTI_LUX_GIFTS
  __FB_DO_NOT_REPLY:  no hits of target type
      # used in: FM_REPLY_OR_NOT TO_NO_BRKTS_DIRECT
  __FB_EMAIL_ME_BAC:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_REPLY_OR_NOT
  __FB_FIND_OUT:  bad, avg S/O=0.13 avg Spam%=0.06 avg Ham%=0.43
      # used in: FM_MAKE_MONEY_HOME
  __FB_FROM_YOUR:  bad, avg S/O=0.22 avg Spam%=0.48 avg Ham%=1.66
      # used in: FM_MAKE_MONEY_HOME
  __FB_GENERATE:  bad, avg S/O=0.03 avg Spam%=0.13 avg Ham%=4.13
      # used in: FM_MAKE_MONEY_HOME
  __FB_GLASHUTE:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_HOME_HOUSE:  bad, avg S/O=0.33 avg Spam%=9.18 avg Ham%=18.69
      # used in: FM_MAKE_MONEY_HOME
  __FB_HOTTEST:  bad, avg S/O=0.48 avg Spam%=0.20 avg Ham%=0.21
      # used in: FM_LIKE_STOCKS
  __FB_HOWMUCH:  bad, avg S/O=0.21 avg Spam%=0.45 avg Ham%=1.61
      # used in: FM_HOW_IMG_COST2
  __FB_IDENTITY:  bad, avg S/O=0.10 avg Spam%=0.18 avg Ham%=1.59
      # used in: FM_HOW_IMG_COST2
  __FB_IMAGE_OF:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FB_INK_PEN:  no hits at all
      # used in: FM_MULTI_LUX_GIFTS
  __FB_LOGO_DESIGN:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_CUSTOMLOGODSGNc
  __FB_LUX_GIFTS:  no hits at all
      # used in: FM_LUX_GIFTS_REDUCED FM_MULTI_LUX_GIFTS
  __FB_MA:  bad, avg S/O=0.19 avg Spam%=0.26 avg Ham%=1.10
      # used in: FM_SCHOOL_TYPES
  __FB_MBA:  bad, avg S/O=0.74 avg Spam%=0.23 avg Ham%=0.07
      # used in: FM_SCHOOL_TYPES
  __FB_NUM_PERCNT:  bad, avg S/O=0.58 avg Spam%=14.19 avg Ham%=10.17
      # used in: FM_LUX_GIFTS_REDUCED FM_MULTI_LUX_GIFTS
  __FB_PICK:  bad, avg S/O=0.17 avg Spam%=0.43 avg Ham%=2.07
      # used in: FM_LIKE_STOCKS
  __FB_PPLE_ARE_SEARCH:  no hits of target type
      # used in: FM_PEOPLE_LOOK_4ME
  __FB_PROJECTED:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.14
      # used in: FM_LIKE_STOCKS
  __FB_P_TRUELOVE:  bad, avg S/O=0.37 avg Spam%=0.21 avg Ham%=0.33
      # used in: FM_TRUE_LOV_ALL_N
  __FB_REASON:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.10
      # used in: FM_BIG_REASON
  __FB_ROLEX_MEN:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_ROLEX_WMEN:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_S_PRICE:  bad, avg S/O=0.67 avg Spam%=13.66 avg Ham%=6.71
      # used in: FM_DOESNT_SAY_STOCK
  __FB_S_STOCK:  bad, avg S/O=0.29 avg Spam%=1.11 avg Ham%=2.76
      # used in: FM_DOESNT_SAY_STOCK FM_LIKE_STOCKS
  __FB_S_SYMBOL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
      # used in: FM_DOESNT_SAY_STOCK FM_LIKE_STOCKS
  __FB_TARGET_AUDIEN:  bad, avg S/O=0.13 avg Spam%=0.01 avg Ham%=0.05
      # used in: FM_CUSTOMLOGODSGNc
  __FB_TOUR:  bad, avg S/O=0.21 avg Spam%=0.42 avg Ham%=1.58
      # used in: FM_COSTA_RICA
  __FB_WALLETS:  bad, avg S/O=0.76 avg Spam%=0.26 avg Ham%=0.05
      # used in: FM_MULTI_LUX_GIFTS
  __FB_YOU_ARE_PAYING:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_PAYING_LOWER
  __FHELO_VERIZON:  bad, avg S/O=0.57 avg Spam%=0.03 avg Ham%=0.02
      # used in: FM_FAKE_HELO_VERIZON
  __FHOST_VERIZON:  bad, avg S/O=0.77 avg Spam%=0.07 avg Ham%=0.02
      # used in: FM_FAKE_HELO_VERIZON
  __FH_FRM_53:  no hits at all
      # used in: FM_FAKE_53COM_SPOOF
  __FH_HAS_XPRIORITY:  bad, avg S/O=0.78 avg Spam%=21.41 avg Ham%=5.89
      # used in: FM_RE_HELLO_SPAM
  __FH_MSGID_01C7:  bad, avg S/O=0.78 avg Spam%=0.05 avg Ham%=0.01
      # used in: FM_RE_HELLO_SPAM
  __FH_MSG_53:  no hits at all
      # used in: FM_FAKE_53COM_SPOOF
  __FH_RCV_53:  no hits at all
      # used in: FM_FAKE_53COM_SPOOF
  __FIXED_RATEFVGT:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS
  __FM_HOW_COST:  bad, avg S/O=0.05 avg Spam%=0.03 avg Ham%=0.47
      # used in: FM_HOW_IMG_COST2
  __FM_HOW_COST_ID:  bad, avg S/O=0.09 avg Spam%=0.20 avg Ham%=2.01
      # used in: FM_HOW_IMG_COST2
  __FM_MORTGAGE3PLUS:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_MORTGAGE3PLUS
  __FM_MORTGAGE4PLUS:  no hits of target type
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MORTGAGE5PLUS:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MORTGAGE6PLUS:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MY_PRICE:  bad, avg S/O=0.67 avg Spam%=13.66 avg Ham%=6.72
      # used in: FM_DOESNT_SAY_STOCK
  __FM_STOCK_WORDS:  bad, avg S/O=0.21 avg Spam%=0.64 avg Ham%=2.39
      # used in: FM_LIKE_STOCKS
  __FROM_GMAIL:  bad, avg S/O=0.05 avg Spam%=0.70 avg Ham%=14.05
      # used in: FM_FORGED_GMAIL
  __FROM_ISO_2022_JP:  bad, avg S/O=0.13 avg Spam%=0.10 avg Ham%=0.66
      # used in: GZ_PILL_SQUATTERS
  __FROM_LOWER:  bad, avg S/O=0.30 avg Spam%=0.18 avg Ham%=0.39
      # used in: FM_LOWER_CASE_HEAD
  __FRT_GOLD:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
      # used in: FRM_SILVER_GOLD
  __FRT_SILVER:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
      # used in: FRM_SILVER_GOLD
  __FR_SPACING_15:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.85
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_17:  bad, avg S/O=0.16 avg Spam%=0.03 avg Ham%=0.16
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_22:  bad, avg S/O=0.07 avg Spam%=0.01 avg Ham%=0.14
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_8:  bad, avg S/O=0.10 avg Spam%=0.12 avg Ham%=1.10
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_9:  bad, avg S/O=0.08 avg Spam%=0.07 avg Ham%=0.79
      # used in: FM_ASCII_ART_SPACINGc
  __FS_ADIDAS:  no hits of target type
      # used in: FM_NIKE_ADIDAS
  __FS_COKE:  no hits of target type
      # used in: FM_COKE_PEPSI
  __FS_DEBT:  bad, avg S/O=0.49 avg Spam%=0.02 avg Ham%=0.02
      # used in: FM_DEBT_HELP
  __FS_HELP:  bad, avg S/O=0.57 avg Spam%=1.05 avg Ham%=0.78
      # used in: FM_DEBT_HELP
  __FS_HOWMUCH:  bad, avg S/O=0.77 avg Spam%=0.05 avg Ham%=0.01
      # used in: FM_HOW_IMG_COST
  __FS_IPODXBOX:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.07
      # used in: FM_CLAIM_IPOD
  __FS_LEND:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_LEND_MONEY
  __FS_MP3PLAY:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_CLAIM_IPOD
  __FS_NIKE:  no hits of target type
      # used in: FM_NIKE_ADIDAS
  __FS_PEPSI:  no hits of target type
      # used in: FM_COKE_PEPSI
  __FS_PROFIT:  bad, avg S/O=0.37 avg Spam%=0.01 avg Ham%=0.02
      # used in: FM_SUBJ_YOU_PROFIT
  __FS_RE_TWO_WORDS:  bad, avg S/O=0.64 avg Spam%=0.09 avg Ham%=0.05
      # used in: FM_MEDS_SUBJ_2WDS
  __FS_SUBJ_RE:  bad, avg S/O=0.05 avg Spam%=2.19 avg Ham%=37.97
      # used in: FM_RE_HELLO_SPAM
  __FS_S_TRADE:  bad, avg S/O=0.19 avg Spam%=0.01 avg Ham%=0.04
      # used in: FM_DOESNT_SAY_STOCK
  __FS_TEEN:  bad, avg S/O=0.50 avg Spam%=0.01 avg Ham%=0.01
      # used in: FM_SUB_TEEN_NUDE
  __FU_LOAN:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
      # used in: FM_LOAN_NUM_DOMAIN
  __F_ASS:  bad, avg S/O=0.16 avg Spam%=0.05 avg Ham%=0.27
      # used in: FM_FUCK_ASS_TEEN
  __F_FUCK:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.85
      # used in: FM_FUCK_ASS_TEEN
  __F_TEEN:  bad, avg S/O=0.16 avg Spam%=0.27 avg Ham%=1.40
      # used in: FM_FUCK_ASS_TEEN
  __GIFTCERT:  bad, avg S/O=0.26 avg Spam%=0.01 avg Ham%=0.02
      # used in: FM_CONG_GIFTCARD
  __GOOD_ENOUGH:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.31
      # used in: FM_GOOD_ENF_CREDIT
  __HOMELOANFVGT:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.25
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
  __HOST_HOTMAIL:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.28
      # used in: FM_FAKE_HELO_HOTMAIL FORGED_HOTMAIL_RCVD3
  __HOTMAILCOM:  bad, avg S/O=0.64 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_FAKE_HELO_HOTMAIL
  __LOANURIFVGT:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.07
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
  __MANY_RECIPS:  bad, avg S/O=0.70 avg Spam%=8.75 avg Ham%=3.68
      # used in: NSL_FREEMAIL_M2
  __MSGID_GMAIL:  bad, avg S/O=0.02 avg Spam%=0.33 avg Ham%=17.52
      # used in: FM_FORGED_GMAIL
  __MSGID_VGA:  no hits at all
      # used in: FM_RATSIGN_1106
  __NUMBERS_IN_SUBJ:  bad, avg S/O=0.46 avg Spam%=19.64 avg Ham%=23.05
      # used in: FM_LEND_MONEY
  __OWN_LAND:  bad, avg S/O=0.19 avg Spam%=0.33 avg Ham%=1.39
      # used in: FM_COSTA_RICA
  __OWN_PROP:  bad, avg S/O=0.06 avg Spam%=0.18 avg Ham%=3.09
      # used in: FM_COSTA_RICA
  __PREAPPROVEDFVGT:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS
  __RAW_RANDOM:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.04
      # used in: FH_RANDOM_SURE
  __SEEN_ON_ABC:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.72
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CBS:  bad, avg S/O=0.10 avg Spam%=0.04 avg Ham%=0.36
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CNN:  bad, avg S/O=0.07 avg Spam%=0.03 avg Ham%=0.40
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_NBC:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.20
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_OPRAH:  bad, avg S/O=0.64 avg Spam%=0.10 avg Ham%=0.05
      # used in: FM_WEIGHT_LOSS
  __SUBJ_LOWER:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.08
      # used in: FM_LOWER_CASE_HEAD
  __SURVEY:  bad, avg S/O=0.03 avg Spam%=0.05 avg Ham%=1.40
      # used in: FM_GET_CASH_SURVEY
  __TO___LOWER:  bad, avg S/O=0.08 avg Spam%=0.43 avg Ham%=4.91
      # used in: FM_LOWER_CASE_HEAD SUBJ_BRKN_WORDNUMS
  __YOUR_CREDIT:  bad, avg S/O=0.18 avg Spam%=0.05 avg Ham%=0.22
      # used in: FM_GOOD_ENF_CREDIT
  __YOUR_CREDITFVGT:  bad, avg S/O=0.36 avg Spam%=0.13 avg Ham%=0.24
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS __FM_MORTGAGE6PLUS

rulesrc/sandbox/duncf/20_header.cf (3 rules, 3 bad):

  APOSTROPHE_FROM:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
  APOSTROPHE_TOCC:  no hits of target type
  STUDDLYCAPS:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.24

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 1 bad):

  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (121 rules, 107 bad):

  BELL_MOBILITY_TXT_MSG:  no hits at all
  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_ANAL_SPAM_MAILER2:  no hits at all
  DOS_BODY_HIGH_NO_MID:  bad, avg S/O=0.79 avg Spam%=0.05 avg Ham%=0.01
  DOS_DEREK_AUG08:  no hits at all
  DOS_DOM_LIST_CENTER:  no hits at all
  DOS_DOT_COM_AT:  no hits at all
  DOS_DOUBLE_SOTCK:  no hits at all
  DOS_FAKE_SQUIRREL:  bad, avg S/O=0.24 avg Spam%=0.07 avg Ham%=0.21
  DOS_FAKE_UPS_TRACK_NUM:  no hits at all
  DOS_FIX_MY_URI:  no hits at all
  DOS_FORGED_RCVD_QUADS:  no hits at all
  DOS_GOOGLE_LUCKY_REDIRECT:  no hits at all
  DOS_HC_ZIP_VIRUS:  no hits at all
  DOS_HIGH_BAT_TO_MX:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_MED_CAN_PHARM_NOV07:  no hits at all
  DOS_MORTGAGE:  no hits at all
  DOS_PHISH_WWW_COM_BIZ:  no hits at all
  DOS_PLAYED_IN_HARDCORE:  no hits at all
      # used in: DOS_HC_ZIP_VIRUS
  DOS_PORN_BOUNDARY:  no hits at all
  DOS_PROVISION4:  no hits at all
  DOS_RCVD_IP_TWICE_A:  bad, avg S/O=0.60 avg Spam%=3.76 avg Ham%=2.52
  DOS_REMOVE_DOMAIN_DOT:  no hits at all
  DOS_REMOVE_DOMAIN_DOT_YAHOO:  no hits at all
  DOS_REPORT_FIN_INC:  no hits at all
  DOS_STOCK_BAT:  no hits at all
  DOS_STOCK_CDYV_GENERIC:  no hits at all
  DOS_STOCK_INCOME_STATEMENT:  no hits at all
  DOS_STOCK_O_PRICE:  no hits at all
  DOS_TO_READ_STOCK:  no hits at all
  DOS_TWO_MIS_STOCK:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
      # used in: DOS_HC_ZIP_VIRUS
  __BELL_MOBILITY_RELAY:  no hits at all
      # used in: BELL_MOBILITY_TXT_MSG
  __DOS_198K_VARI:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_248K_FIXED:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_372K_VARI:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_488K_FIXED:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_492K_INT:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_BODY_FRI:  bad, avg S/O=0.04 avg Spam%=0.36 avg Ham%=9.07
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_MON:  bad, avg S/O=0.03 avg Spam%=0.33 avg Ham%=9.21
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_SAT:  bad, avg S/O=0.02 avg Spam%=0.09 avg Ham%=3.82
      # used in: DOS_STOCK_BAT
  __DOS_BODY_STOCK:  bad, avg S/O=0.10 avg Spam%=0.23 avg Ham%=1.94
      # used in: DOS_STOCK_BAT
  __DOS_BODY_SUN:  bad, avg S/O=0.04 avg Spam%=0.30 avg Ham%=7.41
      # used in: DOS_STOCK_BAT
  __DOS_BODY_THU:  bad, avg S/O=0.02 avg Spam%=0.16 avg Ham%=8.45
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_TICKER:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_STOCK_BAT
  __DOS_BODY_TUE:  bad, avg S/O=0.01 avg Spam%=0.11 avg Ham%=9.20
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_WED:  bad, avg S/O=0.03 avg Spam%=0.29 avg Ham%=8.42
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_COMING_TO_YOUR_PLACE:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_CORRESPOND_EMAIL:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_DEAL_MAKE_MONEY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_DOM_LIST_CENTER:  no hits at all
      # used in: DOS_DOM_LIST_CENTER
  __DOS_DROP_ME_A_LINE:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_EMAIL_DIRECTLY:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_FINAL_NOTICE_DL:  no hits at all
      # used in: DOS_DOM_LIST_CENTER
  __DOS_GREAT_DRAWN_UP:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_HAS_ANY_URI:  bad, avg S/O=0.51 avg Spam%=95.58 avg Ham%=90.80
      # used in: DOS_FIX_MY_URI DOS_DEREK_AUG08 DOS_MED_CAN_PHARM_NOV07
  __DOS_HAS_LIST_ID:  bad, avg S/O=0.00 avg Spam%=0.14 avg Ham%=56.13
      # used in: DOS_HIGH_BAT_TO_MX FORGED_TBIRD_IMG_TO_MX HDRS_LCASE IMG_DIRECT_TO_MX MANY_HDRS_LCASE TO_NO_BRKTS_DIRECT
  __DOS_HAS_LIST_UNSUB:  bad, avg S/O=0.01 avg Spam%=0.57 avg Ham%=62.17
      # used in: DOS_HIGH_BAT_TO_MX FORGED_TBIRD_IMG_TO_MX IMG_DIRECT_TO_MX KHOP_MAIL_LINK KHOP_UNSUB_LINK TO_NO_BRKTS_DIRECT
  __DOS_HAS_MAILING_LIST:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=30.52
      # used in: DOS_HIGH_BAT_TO_MX FORGED_TBIRD_IMG_TO_MX IMG_DIRECT_TO_MX TO_NO_BRKTS_DIRECT
  __DOS_HAVE_TO_READ:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_HEADLINES:  no hits of target type
      # used in: DOS_STOCK_INCOME_STATEMENT
  __DOS_HI:  bad, avg S/O=0.03 avg Spam%=0.03 avg Ham%=1.22
      # used in: DOS_FIX_MY_URI
  __DOS_INCREASE_UP:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_I_DRIVE_A:  no hits of target type
      # used in: DOS_LET_GO_JOB
  __DOS_KEY_GET_IN_EARLY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_LET_GO_JOB:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_LINK:  bad, avg S/O=0.20 avg Spam%=2.37 avg Ham%=9.59
      # used in: DOS_FIX_MY_URI
  __DOS_MAILER_SM:  bad, avg S/O=0.16 avg Spam%=0.01 avg Ham%=0.04
      # used in: DOS_FAKE_SQUIRREL
  __DOS_MED_CAN_WEB_PHARM:  no hits at all
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_MARK_DOWN:  bad, avg S/O=0.60 avg Spam%=0.04 avg Ham%=0.03
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_NO_DIRECTION:  no hits at all
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_WHAT_COULD:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.01
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MEET_EACH_OTHER:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
      # used in: DOS_YOUR_PLACE
  __DOS_MSGID_DIGITS10:  bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
      # used in: DOS_DEREK_AUG08
  __DOS_MY_OLD_JOB:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_LET_GO_JOB
  __DOS_NOT_A_BILL:  no hits at all
      # used in: DOS_DOM_LIST_CENTER
  __DOS_NO_STOPPING:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_OIL_EXCEED:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_PERSONAL_EMAIL:  bad, avg S/O=0.35 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_YOUR_PLACE
  __DOS_RCVD_FRI:  bad, avg S/O=0.48 avg Spam%=16.07 avg Ham%=17.25
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_MON:  bad, avg S/O=0.46 avg Spam%=15.34 avg Ham%=17.79
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_SAT:  bad, avg S/O=0.60 avg Spam%=14.04 avg Ham%=9.28
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_SUN:  bad, avg S/O=0.59 avg Spam%=13.95 avg Ham%=9.47
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_THU:  bad, avg S/O=0.47 avg Spam%=16.19 avg Ham%=18.38
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_TUE:  bad, avg S/O=0.46 avg Spam%=16.36 avg Ham%=18.83
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_WED:  bad, avg S/O=0.47 avg Spam%=16.96 avg Ham%=19.10
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_REF_2_WK_DAYS:  bad, avg S/O=0.04 avg Spam%=0.16 avg Ham%=4.10
      # used in: DOS_STOCK_BAT
  __DOS_REF_NEXT_WK_DAY:  bad, avg S/O=0.05 avg Spam%=0.29 avg Ham%=5.86
      # used in: DOS_STOCK_BAT
  __DOS_REF_TODAY:  bad, avg S/O=0.02 avg Spam%=0.57 avg Ham%=26.77
      # used in: DOS_STOCK_BAT
  __DOS_RELAYED_EXT:  bad, avg S/O=0.27 avg Spam%=33.21 avg Ham%=91.82
      # used in: DOS_HIGH_BAT_TO_MX FORGED_TBIRD_IMG_TO_MX GZ_PILL_SQUATTERS IMG_DIRECT_TO_MX TO_NO_BRKTS_DIRECT
  __DOS_RELAY_SM:  bad, avg S/O=0.26 avg Spam%=0.10 avg Ham%=0.29
      # used in: DOS_FAKE_SQUIRREL
  __DOS_REQ_TO_READ:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_SINGLE_EXT_RELAY:  bad, avg S/O=0.76 avg Spam%=82.99 avg Ham%=26.45
      # used in: DOS_FIX_MY_URI DOS_HIGH_BAT_TO_MX DOS_DEREK_AUG08 FORGED_HOTMAIL_RCVD3 FORGED_TBIRD_IMG_TO_MX IMG_DIRECT_TO_MX TO_NO_BRKTS_DIRECT
  __DOS_SM_MID:  bad, avg S/O=0.12 avg Spam%=0.05 avg Ham%=0.37
      # used in: DOS_FAKE_SQUIRREL
  __DOS_STOCK_COMPANY:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.31
      # used in: DOS_STOCK_O_PRICE
  __DOS_STOCK_O_PRICE:  no hits at all
      # used in: DOS_STOCK_O_PRICE
  __DOS_STOCK_TICKER:  no hits at all
      # used in: DOS_STOCK_O_PRICE
  __DOS_SUB_SEARCH_ENGINE:  no hits at all
      # used in: DOS_DOM_LIST_CENTER
  __DOS_SYMBOL_4:  no hits at all
      # used in: DOS_STOCK_INCOME_STATEMENT
  __DOS_TAKING_HOME:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_TOLD_DAY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_UA_SM:  bad, avg S/O=0.20 avg Spam%=0.11 avg Ham%=0.43
      # used in: DOS_FAKE_SQUIRREL
  __DOS_WASTE_TIME_MISS:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_WRITE_ME_AT:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_YOUR_PLACE

rulesrc/sandbox/dos/20_uri.cf (2 rules, 2 bad):

  DOS_GOOGLE_DOCS:  no hits of target type
  DOS_LIVE_SPACES_CID:  no hits at all

rulesrc/sandbox/axb/20_axb_misc.cf (5 rules, 1 bad):

  AXB_X_GOOGRP_DIRADD:  no hits of target type

rules/72_active.cf (28 rules, 24 bad):

  CTYPE_8SPACE_GIF:  no hits at all
  OBFU_TEXT_ATTACH:  bad, avg S/O=0.71 avg Spam%=0.02 avg Ham%=0.01
  TVD_FW_GRAPHIC_NAME_LONG:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.02
  TVD_FW_GRAPHIC_NAME_MID:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.03
  __ANY_IMAGE_ATTACH:  bad, avg S/O=0.25 avg Spam%=0.50 avg Ham%=1.45
      # used in: DYN_RDNS_AND_INLINE_IMAGE PART_CID_STOCK PART_CID_STOCK_LESS SHORT_HELO_AND_INLINE_IMAGE STOCK_IMG_CTYPE STOCK_IMG_HDR_FROM STOCK_IMG_HTML REMOTE_IMAGE
  __ANY_TEXT_ATTACH:  bad, avg S/O=0.52 avg Spam%=99.37 avg Ham%=92.85
      # used in: MIME_PHP_NO_TEXT MIME_NO_TEXT
  __ANY_TEXT_ATTACH_DOC:  bad, avg S/O=0.52 avg Spam%=99.37 avg Ham%=92.85
      # used in: FSL_MIME_NO_TEXT
  __CTYPE_ONETAB_GIF:  bad, avg S/O=0.28 avg Spam%=0.09 avg Ham%=0.20
      # used in: STOCK_IMG_CTYPE
  __DOC_ATTACH_FN1:  bad, avg S/O=0.08 avg Spam%=0.08 avg Ham%=0.84
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH __DOC_ATTACH
  __DOC_ATTACH_FN2:  bad, avg S/O=0.07 avg Spam%=0.06 avg Ham%=0.85
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH __DOC_ATTACH
  __DOC_ATTACH_MT:  bad, avg S/O=0.09 avg Spam%=0.07 avg Ham%=0.74
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH __DOC_ATTACH
  __GIF_ATTACH:  bad, avg S/O=0.23 avg Spam%=0.13 avg Ham%=0.43
      # used in: IMAGE_MISMATCH
  __JPEG_ATTACH:  bad, avg S/O=0.26 avg Spam%=0.38 avg Ham%=1.05
      # used in: FORGED_TBIRD_IMG_ARROW FORGED_TBIRD_IMG_SIZE FORGED_TBIRD_IMG_TO_MX IMAGE_MISMATCH IMG_DIRECT_TO_MX __FORGED_TBIRD_IMG
  __PART_CID_STOCK_LESS:  bad, avg S/O=0.73 avg Spam%=0.06 avg Ham%=0.02
      # used in: PART_CID_STOCK_LESS
  __PART_STOCK_CD_F:  bad, avg S/O=0.28 avg Spam%=1.60 avg Ham%=4.06
      # used in: PART_CID_STOCK
  __PART_STOCK_CL:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.26
      # used in: PART_CID_STOCK
  __PDF_ATTACH_FN1:  bad, avg S/O=0.11 avg Spam%=0.05 avg Ham%=0.40
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH __PDF_ATTACH
  __PDF_ATTACH_FN2:  bad, avg S/O=0.10 avg Spam%=0.05 avg Ham%=0.42
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH __PDF_ATTACH
  __PDF_ATTACH_MT:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.32
      # used in: FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH __PDF_ATTACH
  __PNG_ATTACH:  bad, avg S/O=0.08 avg Spam%=0.02 avg Ham%=0.17
      # used in: IMAGE_MISMATCH
  __TVD_MIME_ATT_AOPDF:  bad, avg S/O=0.29 avg Spam%=0.04 avg Ham%=0.10
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_AP:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.32
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_TP:  bad, avg S/O=0.49 avg Spam%=86.13 avg Ham%=88.11
      # used in: DOS_DEREK_AUG08 TVD_PDF_FINGER01
  __TVD_OUTLOOK_IMG:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.67
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2

rules/25_replace.cf (32 rules, 23 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_AMBIEN:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.12
  FUZZY_BILLION:  no hits at all
  FUZZY_CREDIT:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.01
  FUZZY_GUARANTEE:  no hits at all
  FUZZY_MEDICATION:  no hits at all
  FUZZY_MONEY:  no hits at all
  FUZZY_MORTGAGE:  no hits at all
  FUZZY_OBLIGATION:  no hits at all
  FUZZY_OFFERS:  no hits at all
  FUZZY_PHENT:  no hits at all
  FUZZY_PRESCRIPT:  no hits at all
  FUZZY_PRICES:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.01
  FUZZY_REFINANCE:  no hits at all
  FUZZY_REMOVE:  no hits at all
  FUZZY_SOFTWARE:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  FUZZY_VLIUM:  no hits at all
  SUBJECT_FUZZY_MEDS:  no hits at all
  SUBJECT_FUZZY_PENIS:  no hits at all
  SUBJECT_FUZZY_TION:  no hits at all
  SUBJECT_FUZZY_VPILL:  no hits at all

rules/25_dkim.cf (16 rules, 4 bad):

  NML_ADSP_CUSTOM_HIGH:  no hits at all
  NML_ADSP_CUSTOM_LOW:  no hits at all
  NML_ADSP_CUSTOM_MED:  no hits at all
  __VIA_RESIGNER:  no hits at all
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED

rules/20_vbounce.cf (162 rules, 159 bad):

  ANY_BOUNCE_MESSAGE:  bad, avg S/O=0.18 avg Spam%=0.07 avg Ham%=0.33
  BOUNCE_MESSAGE:  bad, avg S/O=0.20 avg Spam%=0.07 avg Ham%=0.30
      # used in: ANY_BOUNCE_MESSAGE
  CHALLENGE_RESPONSE:  no hits at all
  CRBOUNCE_MESSAGE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE
  VBOUNCE_MESSAGE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_4:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_AG:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_BBTL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_CM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_MS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_PREC:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_XBT:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __AUTO_GEN_XXSP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_ADDR_ERR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_AUTO_GENERATED:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_AUTO_REPLY:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_AUTO_RESPOND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_AUTO_RESPONSE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_COULD_NOT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_CTYPE:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.43
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_DEL_FAIL:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_MAIL_LINK KHOP_UNSUB_LINK KHOP_UNSUB_LINK
  __BOUNCE_ESMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_ETRUST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_FROM_DAEMON:  bad, avg S/O=0.33 avg Spam%=0.05 avg Ham%=0.10
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_MAILDELFAIL:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.02
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_MAIL_DEL_FAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_MSGDELFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_NEVER_SEE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_NONWORKING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_NOTDEL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_NOTIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_NO_RESEND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_NO_VAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_OOO_2:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_OOO_3:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_OOO_H1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_OOO_H2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_OOO_H3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_READ_NOTIFICATION:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_RETURNED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_RET_MAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_RPATH_ERRMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_RPATH_MD:  bad, avg S/O=0.27 avg Spam%=0.01 avg Ham%=0.01
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_RPATH_NULL:  bad, avg S/O=0.08 avg Spam%=0.03 avg Ham%=0.30
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_STAT_FAIL:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.05
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_SYMANTEC:  bad, avg S/O=0.67 avg Spam%=0.00 avg Ham%=0.00
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_UNDELIVERABLE_ML:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.05
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_UNDEL_MSG:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_X_ERR_STAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __BOUNCE_Y_AUTOGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __CHALLENGE_RESPONSE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_MAIL_LINK KHOP_UNSUB_LINK KHOP_UNSUB_LINK
  __CRBOUNCE_0SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_0SPAM2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_ASK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_EXI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_GETRESP:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_HEADER:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_MIB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_PREC_SPAM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_QURB:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_RP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_RP_2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_SI:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_SI1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SI2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SPAMARREST:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_SPAMLION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_SZ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_TMDA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_UNVERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_UOL:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_VANQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __CRBOUNCE_VERIF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __CHALLENGE_RESPONSE
  __HAVE_BOUNCE_RELAYS:  bad, avg S/O=0.76 avg Spam%=31.55 avg Ham%=97.61
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK TO_NO_BRKTS_DIRECT
  __MAJORDOMO_HELP_BODY:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE
  __MAJORDOMO_SUBJ:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE
  __MY_SERVERS_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE CHALLENGE_RESPONSE CRBOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_MAIL_LINK KHOP_MAIL_LINK KHOP_UNSUB_LINK KHOP_UNSUB_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE
  __NONBOUNCE_READ_RECEIPT:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK
  __NONBOUNCE_READ_RECEIPT_CTYPE:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __NONBOUNCE_READ_RECEIPT
  __VBOUNCE_ALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_AMAVISD:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_AMAVISD2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_ANTIGEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_AOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_ATTACHMENT0:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_ATT_QUAR:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_AVREPORT0:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_AV_RESULTS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_BANNED_MAT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_BITDEFENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_CISCO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_CLICKBANK:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_CONT_VIOL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_DEL_WARN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_DETECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_DISALLOWED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_DOMINO1:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_DOMINO2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_DUTCH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_EMAIL_REJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_EMANAGER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_EMVD:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_EXIM:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_FORBIDDEN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_FROMPT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_GSHIELD:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_GUIN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_GWAVA:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_MAIL_LINK KHOP_UNSUB_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE VBOUNCE_MESSAGE __NOT_A_PERSON __NOT_A_PERSON
  __VBOUNCE_GWAVA2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_MAIL_LINK KHOP_UNSUB_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE VBOUNCE_MESSAGE __NOT_A_PERSON __NOT_A_PERSON
  __VBOUNCE_INFLEX:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_INF_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_INTERSCAN:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_INTERSCAN2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_INTERSCAN3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_JMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_LUTHER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MAILMARSHAL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MAILMARSHAL2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MAILSWEEP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MAILSWEEP2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MAILSWEEP3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK TO_NO_BRKTS_DIRECT VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MAJORDOMO_HELP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MELDING:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MIME_INFO:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MMS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_MSGLABS:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_NAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_NAV2:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_NAV3:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_NAVFAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_NAV_DETECT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_PROBLEME:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_PT_BLOCKED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_QUOTED_EXE:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_RAV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_REJECTED:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_REJ_FILT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SCANMAIL:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SCREENSAVER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SECURIQ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SENDER:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SMTP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_STRIP_ATTACH:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SYM_AVF:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_SYM_EMP:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_UNDELIV:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_VALERT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_VIOLATION:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_VIR_FOUND:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_WARNING:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __VBOUNCE_YOUSENT:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK VBOUNCE_MESSAGE __NOT_A_PERSON
  __XM_VBULLETIN:  bad, avg S/O=0.17 avg Spam%=0.04 avg Ham%=0.16
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __BOUNCE_AUTO_GENERATED __NOT_A_PERSON
  __X_CRON_ENV:  no hits of target type
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __BOUNCE_AUTO_GENERATED __NOT_A_PERSON
  __YESBOUNCE_AUTO_REPLIED_REJ:  no hits at all
      # used in: ANY_BOUNCE_MESSAGE BOUNCE_MESSAGE KHOP_MAIL_LINK KHOP_UNSUB_LINK __NONBOUNCE_READ_RECEIPT __NOT_A_PERSON

rules/20_uri_tests.cf (17 rules, 12 bad):

  HTTP_77:  no hits at all
  HTTP_ESCAPED_HOST:  bad, avg S/O=0.78 avg Spam%=0.75 avg Ham%=0.20
  IP_LINK_PLUS:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.19
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.37 avg Spam%=0.35 avg Ham%=0.60
  NUMERIC_HTTP_ADDR:  no hits at all
  SPOOF_NET2COM:  no hits at all
  URI_HEX:  bad, avg S/O=0.21 avg Spam%=0.16 avg Ham%=0.55
  URI_NO_WWW_INFO_CGI:  bad, avg S/O=0.64 avg Spam%=0.03 avg Ham%=0.01
  URI_UNSUBSCRIBE:  no hits at all
  WEIRD_PORT:  bad, avg S/O=0.17 avg Spam%=0.04 avg Ham%=0.21
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (91 rules, 44 bad):

  FORGED_IMS_HTML:  no hits at all
  FORGED_IMS_TAGS:  no hits at all
  FORGED_MUA_THEBAT_CS:  no hits at all
  FORGED_QUALCOMM_TAGS:  no hits at all
  FORGED_THEBAT_HTML:  no hits at all
  RATWARE_EFROM:  no hits at all
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_NAME_ID:  no hits at all
  RATWARE_OE_MALFORMED:  no hits at all
  RATWARE_RCVD_AT:  no hits at all
  RATWARE_RCVD_PF:  no hits at all
  RATWARE_ZERO_TZ:  no hits at all
  REPTO_QUOTE_AOL:  no hits at all
  REPTO_QUOTE_IMS:  no hits at all
  REPTO_QUOTE_MSN:  no hits at all
  REPTO_QUOTE_QUALCOMM:  no hits at all
  X_MESSAGE_INFO:  no hits at all
  __ANY_QUALCOMM_MUA:  bad, avg S/O=0.35 avg Spam%=0.17 avg Ham%=0.32
      # used in: FORGED_QUALCOMM_TAGS REPTO_QUOTE_QUALCOMM
  __AOL_MUA:  bad, avg S/O=0.78 avg Spam%=0.40 avg Ham%=0.11
      # used in: REPTO_QUOTE_AOL
  __CTYPE_CHARSET_QUOTED:  bad, avg S/O=0.41 avg Spam%=20.82 avg Ham%=29.11
      # used in: FORGED_MUA_THEBAT_CS
  __CTYPE_HAS_BOUNDARY:  bad, avg S/O=0.42 avg Spam%=24.31 avg Ham%=33.12
      # used in: TO_NO_BRKTS_DIRECT
  __CTYPE_HTML:  bad, avg S/O=0.72 avg Spam%=11.22 avg Ham%=4.25
      # used in: RATWARE_ZERO_TZ
  __GATED_THROUGH_RCVD_REMOVER:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=7.84
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __HAS_X_MAILING_LIST:  bad, avg S/O=0.12 avg Spam%=0.03 avg Ham%=0.21
      # used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH HDRS_LCASE MANY_HDRS_LCASE TO_NO_BRKTS_FREEMAIL
  __HOTMAIL_BAYDAV_MSGID:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.07
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IMS_HTML_BUILDS:  no hits of target type
      # used in: FORGED_IMS_HTML
  __IMS_HTML_RCVD:  no hits of target type
      # used in: FORGED_IMS_HTML
  __IMS_MSGID:  bad, avg S/O=0.02 avg Spam%=0.04 avg Ham%=2.28
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IPLANET_MESSAGING_SERVER:  bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.05
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __LYRIS_EZLM_REMAILER:  bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%=34.22
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __MAILMAN_21:  bad, avg S/O=0.00 avg Spam%=0.06 avg Ham%=22.36
      # used in: FORGED_MUA_THEBAT_CS
  __MIME_HTML:  bad, avg S/O=0.51 avg Spam%=34.08 avg Ham%=33.23
      # used in: FORGED_IMS_TAGS FORGED_QUALCOMM_TAGS HTML_MISSING_CTYPE
  __RATWARE_0_TZ_DATE:  bad, avg S/O=0.25 avg Spam%=3.61 avg Ham%=10.82
      # used in: RATWARE_NAME_ID RATWARE_ZERO_TZ
  __RATWARE_NAME_ID:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.08
      # used in: RATWARE_NAME_ID
  __REPTO_QUOTE:  bad, avg S/O=0.70 avg Spam%=10.20 avg Ham%=4.28
      # used in: REPTO_QUOTE_AOL REPTO_QUOTE_IMS REPTO_QUOTE_MSN REPTO_QUOTE_QUALCOMM
  __SYMPATICO_MSGID:  no hits of target type
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __TAG_EXISTS_BODY:  bad, avg S/O=0.50 avg Spam%=27.12 avg Ham%=26.70
      # used in: FORGED_IMS_TAGS
  __TAG_EXISTS_HEAD:  bad, avg S/O=0.53 avg Spam%=26.38 avg Ham%=23.70
      # used in: FORGED_IMS_TAGS
  __TAG_EXISTS_HTML:  bad, avg S/O=0.51 avg Spam%=27.38 avg Ham%=26.27
      # used in: FORGED_IMS_TAGS FORGED_QUALCOMM_TAGS
  __TAG_EXISTS_META:  bad, avg S/O=0.59 avg Spam%=18.06 avg Ham%=12.22
      # used in: FORGED_IMS_TAGS SCRIPT_GIBBERISH
  __UNUSABLE_MSGID:  bad, avg S/O=0.00 avg Spam%=0.05 avg Ham%=34.28
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __WACKY_SENDMAIL_VERSION:  no hits at all
      # used in: FORGED_MUA_MOZILLA HDRS_LCASE MANY_HDRS_LCASE TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2 __UNUSABLE_MSGID
  __YAHOO_BULK:  no hits of target type
      # used in: FORGED_IMS_HTML FORGED_IMS_TAGS

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  no hits at all
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (48 rules, 29 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.28 avg Spam%=0.01 avg Ham%=0.02
  BAD_CREDIT:  bad, avg S/O=0.39 avg Spam%=0.04 avg Ham%=0.07
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.63 avg Spam%=0.01 avg Ham%=0.01
  DEAR_FRIEND:  bad, avg S/O=0.69 avg Spam%=0.30 avg Ham%=0.14
  DEAR_SOMETHING:  bad, avg S/O=0.55 avg Spam%=0.14 avg Ham%=0.11
  EXCUSE_4:  no hits of target type
  FIN_FREE:  bad, avg S/O=0.29 avg Spam%=0.00 avg Ham%=0.01
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  bad, avg S/O=0.68 avg Spam%=0.00 avg Ham%=0.00
  INVESTMENT_ADVICE:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.17
  JOIN_MILLIONS:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  MARKETING_PARTNERS:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.01
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  bad, avg S/O=0.51 avg Spam%=0.00 avg Ham%=0.00
  OBSCURED_EMAIL:  no hits at all
  ONE_TIME:  no hits of target type
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits at all
  REFINANCE_YOUR_HOME:  no hits at all
  REMOVE_BEFORE_LINK:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.15
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  no hits at all
  STRONG_BUY:  no hits at all
  URG_BIZ:  bad, avg S/O=0.60 avg Spam%=0.15 avg Ham%=0.09
  __RUDE_HTML_1:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_2:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_3:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_4:  no hits at all
      # used in: RUDE_HTML

rules/20_meta_tests.cf (19 rules, 11 bad):

  FORGED_MUA_MOZILLA:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
  INVALID_MSGID:  bad, avg S/O=0.34 avg Spam%=0.32 avg Ham%=0.62
  NO_HEADERS_MESSAGE:  bad, avg S/O=0.27 avg Spam%=0.00 avg Ham%=0.00
  UPPERCASE_75_100:  bad, avg S/O=0.60 avg Spam%=0.08 avg Ham%=0.05
  __HAS_MSGID:  bad, avg S/O=0.50 avg Spam%=98.51 avg Ham%=99.78
      # used in: INVALID_MSGID
  __ISO_2022_JP_DELIM:  bad, avg S/O=0.12 avg Spam%=0.19 avg Ham%=1.39
      # used in: JAPANESE_UCE_BODY OBFUSCATING_COMMENT PLING_QUERY TVD_SPACE_RATIO UPPERCASE_75_100
  __MOZILLA_MSGID:  bad, avg S/O=0.27 avg Spam%=3.70 avg Ham%=9.84
      # used in: FORGED_MUA_MOZILLA
  __MOZILLA_MUA:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
      # used in: FORGED_MUA_MOZILLA
  __NONEMPTY_BODY:  bad, avg S/O=0.50 avg Spam%=99.85 avg Ham%=100.00
      # used in: STOX_META_5
  __SANE_MSGID:  bad, avg S/O=0.50 avg Spam%=98.15 avg Ham%=99.15
      # used in: INVALID_MSGID
  __UPPERCASE_75_100:  bad, avg S/O=0.60 avg Spam%=0.08 avg Ham%=0.05
      # used in: UPPERCASE_75_100

rules/20_imageinfo.cf (17 rules, 14 bad):

  DC_GIF_UNO_LARGO:  bad, avg S/O=0.79 avg Spam%=0.04 avg Ham%=0.01
  DC_IMAGE_SPAM_HTML:  bad, avg S/O=0.63 avg Spam%=0.04 avg Ham%=0.02
  DC_IMAGE_SPAM_TEXT:  bad, avg S/O=0.65 avg Spam%=0.04 avg Ham%=0.02
  DC_PNG_UNO_LARGO:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_GIF_MULTI_LARGO:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __DC_IMG_HTML_RATIO:  bad, avg S/O=0.61 avg Spam%=0.34 avg Ham%=0.18
      # used in: DC_IMAGE_SPAM_HTML
  __DC_IMG_TEXT_RATIO:  bad, avg S/O=0.56 avg Spam%=0.36 avg Ham%=0.25
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_PNG_MULTI_LARGO:  no hits of target type
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_AREA_180K:  bad, avg S/O=0.69 avg Spam%=0.05 avg Ham%=0.02
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __GIF_ATTACH_1:  bad, avg S/O=0.28 avg Spam%=0.11 avg Ham%=0.27
      # used in: DC_GIF_UNO_LARGO DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT
  __GIF_ATTACH_2P:  bad, avg S/O=0.11 avg Spam%=0.02 avg Ham%=0.16
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __PNG_AREA_180K:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.02
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO __DC_PNG_MULTI_LARGO
  __PNG_ATTACH_1:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.14
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO
  __PNG_ATTACH_2P:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.03
      # used in: DC_IMAGE_SPAM_HTML DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO

rules/20_html_tests.cf (69 rules, 45 bad):

  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.58 avg Spam%=0.05 avg Ham%=0.03
  HTML_COMMENT_SHORT:  no hits at all
  HTML_EMBEDS:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.05
  HTML_EXTRA_CLOSE:  bad, avg S/O=0.79 avg Spam%=0.08 avg Ham%=0.02
  HTML_FONT_FACE_BAD:  bad, avg S/O=0.52 avg Spam%=0.38 avg Ham%=0.31
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.27 avg Spam%=0.22 avg Ham%=0.60
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  no hits at all
  HTML_IMAGE_ONLY_16:  bad, avg S/O=0.63 avg Spam%=0.09 avg Ham%=0.05
      # used in: DC_IMAGE_SPAM_HTML
  HTML_IMAGE_ONLY_20:  bad, avg S/O=0.79 avg Spam%=0.38 avg Ham%=0.09
      # used in: DC_IMAGE_SPAM_HTML
  HTML_IMAGE_ONLY_28:  bad, avg S/O=0.65 avg Spam%=0.18 avg Ham%=0.09
      # used in: DC_IMAGE_SPAM_HTML
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.41 avg Spam%=1.00 avg Ham%=1.41
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.21 avg Spam%=0.41 avg Ham%=1.54
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.11 avg Spam%=0.14 avg Ham%=1.08
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.10 avg Spam%=0.10 avg Ham%=0.82
  HTML_MESSAGE:  bad, avg S/O=0.51 avg Spam%=34.06 avg Ham%=33.23
  HTML_MISSING_CTYPE:  no hits at all
  HTML_NONELEMENT_30_40:  no hits at all
  HTML_NONELEMENT_40_50:  no hits at all
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.75 avg Spam%=0.17 avg Ham%=0.06
  HTML_OBFUSCATE_30_40:  no hits at all
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.41 avg Spam%=0.25 avg Ham%=0.35
  HTML_TAG_BALANCE_HEAD:  bad, avg S/O=0.64 avg Spam%=0.12 avg Ham%=0.07
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.75 avg Spam%=0.12 avg Ham%=0.04
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  no hits at all
  __COMMENT_EXISTS:  bad, avg S/O=0.20 avg Spam%=4.32 avg Ham%=16.56
      # used in: TO_NO_BRKTS_DIRECT
  __HIGHBITS:  bad, avg S/O=0.58 avg Spam%=3.00 avg Ham%=2.14
      # used in: DOS_HIGH_BAT_TO_MX TVD_SPACE_RATIO DOS_BODY_HIGH_NO_MID
  __HTML_LINK_IMAGE:  bad, avg S/O=0.22 avg Spam%=5.75 avg Ham%=20.48
      # used in: REMOTE_IMAGE
  __HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.75 avg Spam%=0.12 avg Ham%=0.04
      # used in: HTML_TITLE_SUBJ_DIFF
  __JS_DOCWRITE:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.36
      # used in: JS_FROMCHARCODE
  __JS_FROMCHARCODE:  no hits at all
      # used in: JS_FROMCHARCODE
  __MIME_ATTACHMENT:  bad, avg S/O=0.19 avg Spam%=0.80 avg Ham%=3.30
      # used in: HTML_TITLE_SUBJ_DIFF STOX_META_5
  __OBFUSCATING_COMMENT_A:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.06
      # used in: OBFUSCATING_COMMENT
  __OBFUSCATING_COMMENT_B:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.52
      # used in: OBFUSCATING_COMMENT

rules/20_head_tests.cf (157 rules, 76 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.64 avg Spam%=0.12 avg Ham%=0.06
  CONFIRMED_FORGED:  no hits at all
  DATE_IN_FUTURE_96_XX:  no hits at all
  DATE_IN_PAST_03_06:  bad, avg S/O=0.52 avg Spam%=0.35 avg Ham%=0.32
  DATE_IN_PAST_12_24:  bad, avg S/O=0.68 avg Spam%=0.30 avg Ham%=0.14
  DATE_IN_PAST_24_48:  bad, avg S/O=0.39 avg Spam%=0.13 avg Ham%=0.21
  DATE_SPAMWARE_Y2K:  no hits at all
  ENGLISH_UCE_SUBJECT:  no hits at all
  FAKE_OUTBLAZE_RCVD:  no hits at all
  FORGED_HOTMAIL_RCVD2:  bad, avg S/O=0.73 avg Spam%=0.41 avg Ham%=0.15
  FORGED_MSGID_AOL:  no hits at all
  FORGED_MSGID_HOTMAIL:  no hits at all
  FORGED_MSGID_MSN:  no hits at all
  FROM_EXCESS_BASE64:  no hits at all
  FROM_LOCAL_HEX:  no hits at all
  HEADER_COUNT_CTYPE:  no hits at all
  HEAD_ILLEGAL_CHARS:  no hits at all
  INVALID_DATE_TZ_ABSURD:  bad, avg S/O=0.59 avg Spam%=0.01 avg Ham%=0.00
  INVALID_TZ_CST:  no hits at all
  INVALID_TZ_EST:  no hits at all
  JAPANESE_UCE_BODY:  no hits at all
  JAPANESE_UCE_SUBJECT:  no hits at all
  KOREAN_UCE_SUBJECT:  no hits at all
  LOCALPART_IN_SUBJECT:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  MIME_BOUND_MANY_HEX:  no hits at all
  MIME_HEADER_CTYPE_ONLY:  bad, avg S/O=0.27 avg Spam%=0.16 avg Ham%=0.43
  MISSING_HEADERS:  bad, avg S/O=0.40 avg Spam%=0.98 avg Ham%=1.39
  MISSING_SUBJECT:  bad, avg S/O=0.79 avg Spam%=0.15 avg Ham%=0.04
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.18 avg Spam%=0.13 avg Ham%=0.60
  MSGID_MULTIPLE_AT:  bad, avg S/O=0.14 avg Spam%=0.02 avg Ham%=0.14
  MSGID_SPAM_LETTERS:  no hits at all
  MULTI_FORGED:  no hits at all
  NONEXISTENT_CHARSET:  no hits at all
  NO_RDNS_DOTCOM_HELO:  bad, avg S/O=0.73 avg Spam%=0.02 avg Ham%=0.01
  PLING_QUERY:  bad, avg S/O=0.79 avg Spam%=0.84 avg Ham%=0.21
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  SUBJ_ALL_CAPS:  bad, avg S/O=0.66 avg Spam%=1.02 avg Ham%=0.52
  SUBJ_DOLLARS:  bad, avg S/O=0.24 avg Spam%=0.04 avg Ham%=0.10
  SUBJ_YOUR_DEBT:  bad, avg S/O=0.65 avg Spam%=0.03 avg Ham%=0.01
  SUBJ_YOUR_FAMILY:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  TO_MALFORMED:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.53
  WITH_LC_SMTP:  no hits at all
  X_IP:  bad, avg S/O=0.03 avg Spam%=0.01 avg Ham%=0.26
  X_PRIORITY_CC:  no hits at all
  __AT_AOL_MSGID:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.06
      # used in: FORGED_MSGID_AOL
  __CD:  bad, avg S/O=0.08 avg Spam%=0.97 avg Ham%=11.74
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT:  bad, avg S/O=0.52 avg Spam%=99.39 avg Ham%=93.00
      # used in: MIME_HEADER_CTYPE_ONLY
  __CTE:  bad, avg S/O=0.59 avg Spam%=74.39 avg Ham%=51.43
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT_TEXT_PLAIN:  bad, avg S/O=0.54 avg Spam%=63.88 avg Ham%=55.52
      # used in: MIME_HEADER_CTYPE_ONLY DOS_DEREK_AUG08 HS_SYNDICATE_P2
  __ENV_AND_HDR_FROM_MATCH:  bad, avg S/O=0.75 avg Spam%=67.47 avg Ham%=22.00
      # used in: STOCK_IMG_CTYPE STOCK_IMG_HDR_FROM STOCK_IMG_HTML TVD_PH_FR5
  __FORGED_AOL_RCVD:  no hits of target type
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_EUDORAMAIL_RCVD:  no hits at all
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_HOTMAIL_RCVD:  bad, avg S/O=0.29 avg Spam%=0.02 avg Ham%=0.04
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_JUNO_RCVD:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
      # used in: CONFIRMED_FORGED MULTI_FORGED
  __FORGED_RCVD_TRAIL:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.68
      # used in: CONFIRMED_FORGED
  __FROM_AOL_COM:  bad, avg S/O=0.69 avg Spam%=0.36 avg Ham%=0.17
      # used in: FORGED_MSGID_AOL
  __FROM_ENCODED_B64:  bad, avg S/O=0.49 avg Spam%=1.34 avg Ham%=1.34
      # used in: FROM_EXCESS_BASE64
  __FROM_HOTMAIL_COM:  bad, avg S/O=0.39 avg Spam%=0.61 avg Ham%=0.96
      # used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN MSGID_FROM_MTA_HEADER
  __FROM_NEEDS_MIME:  bad, avg S/O=0.58 avg Spam%=3.12 avg Ham%=2.24
      # used in: FROM_EXCESS_BASE64
  __FROM_YAHOO_COM:  bad, avg S/O=0.35 avg Spam%=0.96 avg Ham%=1.77
      # used in: FORGED_MSGID_HOTMAIL FORGED_MSGID_MSN
  __HAS_DATE:  bad, avg S/O=0.50 avg Spam%=98.40 avg Ham%=99.92
      # used in: NO_HEADERS_MESSAGE
  __HAS_MESSAGE_ID:  bad, avg S/O=0.50 avg Spam%=98.51 avg Ham%=99.78
      # used in: NO_HEADERS_MESSAGE DOS_BODY_HIGH_NO_MID
  __HAS_SUBJECT:  bad, avg S/O=0.50 avg Spam%=99.85 avg Ham%=99.96
      # used in: MISSING_SUBJECT BELL_MOBILITY_TXT_MSG
  __IS_EXCH:  bad, avg S/O=0.02 avg Spam%=0.03 avg Ham%=2.06
      # used in: TO_NO_BRKTS_DIRECT
  __JAPANESE_UCE_BODY:  no hits at all
      # used in: JAPANESE_UCE_BODY
  __MIME_VERSION:  bad, avg S/O=0.52 avg Spam%=98.83 avg Ham%=90.63
      # used in: MIME_HEADER_CTYPE_ONLY
  __ML1:  bad, avg S/O=0.00 avg Spam%=0.25 avg Ham%=56.10
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED FILL_THIS_FORM_SHORT HDRS_LCASE KHOP_MAIL_LINK KHOP_UNSUB_LINK MANY_HDRS_LCASE MAY_BE_FORGED REMOTE_IMAGE
  __ML2:  bad, avg S/O=0.00 avg Spam%=0.14 avg Ham%=56.13
      # used in: FREEMAIL_REPLY NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED FILL_THIS_FORM_SHORT FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH HDRS_LCASE HDRS_LCASE KHOP_MAIL_LINK KHOP_UNSUB_LINK MANY_HDRS_LCASE MANY_HDRS_LCASE MAY_BE_FORGED REMOTE_IMAGE TO_NO_BRKTS_FREEMAIL
  __ML3:  bad, avg S/O=0.00 avg Spam%=0.09 avg Ham%=49.37
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED FILL_THIS_FORM_SHORT HDRS_LCASE KHOP_MAIL_LINK KHOP_UNSUB_LINK MANY_HDRS_LCASE MAY_BE_FORGED REMOTE_IMAGE
  __ML4:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%=30.52
      # used in: FREEMAIL_REPLY NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED FILL_THIS_FORM_SHORT FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH HDRS_LCASE HDRS_LCASE KHOP_MAIL_LINK KHOP_UNSUB_LINK MANY_HDRS_LCASE MANY_HDRS_LCASE MAY_BE_FORGED REMOTE_IMAGE TO_NO_BRKTS_FREEMAIL
  __ML5:  bad, avg S/O=0.01 avg Spam%=0.13 avg Ham%=22.08
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED FILL_THIS_FORM_SHORT HDRS_LCASE KHOP_MAIL_LINK KHOP_UNSUB_LINK MANY_HDRS_LCASE MAY_BE_FORGED REMOTE_IMAGE
  __MSGID_BEFORE_OKAY:  bad, avg S/O=0.14 avg Spam%=0.36 avg Ham%=2.28
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_BEFORE_RECEIVED:  bad, avg S/O=0.20 avg Spam%=0.48 avg Ham%=1.92
      # used in: MSGID_FROM_MTA_HEADER
  __PLING_QUERY:  bad, avg S/O=0.53 avg Spam%=0.88 avg Ham%=0.77
      # used in: PLING_QUERY
  __VIA_ML:  bad, avg S/O=0.01 avg Spam%=0.36 avg Ham%=59.82
      # used in: NML_ADSP_CUSTOM_HIGH NML_ADSP_CUSTOM_LOW NML_ADSP_CUSTOM_MED FILL_THIS_FORM_SHORT HDRS_LCASE KHOP_MAIL_LINK KHOP_UNSUB_LINK MANY_HDRS_LCASE MAY_BE_FORGED REMOTE_IMAGE __NOT_A_PERSON

rules/20_freemail.cf (12 rules, 6 bad):

  FREEMAIL_ENVFROM_END_DIGIT:  bad, avg S/O=0.78 avg Spam%=1.96 avg Ham%=0.52
  FREEMAIL_FROM:  bad, avg S/O=0.29 avg Spam%=8.61 avg Ham%=20.78
  FREEMAIL_REPLY:  bad, avg S/O=0.71 avg Spam%=0.29 avg Ham%=0.12
  __freemail_safe:  bad, avg S/O=0.01 avg Spam%=0.31 avg Ham%=59.18
      # used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH HDRS_LCASE MANY_HDRS_LCASE TO_NO_BRKTS_FREEMAIL __TO_NO_BRKTS_FREEMAIL
  __freemail_safe_fwd:  bad, avg S/O=0.03 avg Spam%=0.17 avg Ham%=5.98
      # used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH HDRS_LCASE MANY_HDRS_LCASE TO_NO_BRKTS_FREEMAIL __TO_NO_BRKTS_FREEMAIL __freemail_safe
  __freemail_safe_rls:  no hits of target type
      # used in: FREEMAIL_REPLY FREEMAIL_DOC_PDF FREEMAIL_RVW_ATTCH HDRS_LCASE MANY_HDRS_LCASE TO_NO_BRKTS_FREEMAIL __TO_NO_BRKTS_FREEMAIL __freemail_safe

rules/20_fake_helo_tests.cf (16 rules, 2 bad):

  HELO_DYNAMIC_HOME_NL:  no hits at all
  HELO_DYNAMIC_ROGERS:  no hits at all

rules/20_dynrdns.cf (37 rules, 16 bad):

  __DOMINO_RCVD:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.02
      # used in: FM_PHN_NODNS KHOP_GREYED
  __LAST_EXTERNAL_RELAY_NO_AUTH:  bad, avg S/O=0.51 avg Spam%=98.23 avg Ham%=96.32
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_FAKE_EBAY KHOP_GREYED KHOP_SUBSCRIBED MAY_BE_FORGED S25R_2 SPOOFED_FREEMAIL
  __LAST_UNTRUSTED_RELAY_NO_AUTH:  bad, avg S/O=0.51 avg Spam%=98.23 avg Ham%=96.12
      # used in: DOS_HIGH_BAT_TO_MX DOS_DEREK_AUG08
  __RDNS_DYNAMIC_ADELPHIA:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_ATTBI:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_CHELLO_NO:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_COMCAST:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_HOME_NL:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_NTL:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_RR2:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_TDS:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_TELIA:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_VELOX:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_VIRTUA:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_VTR:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED
  __RDNS_DYNAMIC_YAHOOBB:  no hits at all
      # used in: DYN_RDNS_AND_INLINE_IMAGE KHOP_GREYED

rules/20_drugs.cf (86 rules, 21 bad):

  DRUGS_ANXIETY_EREC:  no hits at all
  DRUGS_ANXIETY_OBFU:  no hits at all
  DRUGS_DIET_OBFU:  no hits at all
  DRUGS_MUSCLE:  bad, avg S/O=0.52 avg Spam%=0.08 avg Ham%=0.06
  DRUGS_SLEEP_EREC:  no hits at all
  DRUG_DOSAGE:  no hits at all
  DRUG_ED_GENERIC:  no hits at all
  SUBJECT_DRUG_GAP_S:  no hits at all
  SUBJECT_DRUG_GAP_VA:  no hits at all
  SUBJECT_DRUG_GAP_X:  no hits at all
  VIA_GAP_GRA:  no hits at all
  __DRUGS_ANXIETY9:  no hits at all
      # used in: DRUGS_ANXIETY_EREC
  __DRUGS_ERECTILE11:  no hits of target type
      # used in: DRUGS_ANXIETY_EREC DRUGS_SLEEP_EREC
  __DRUGS_MUSCLE1:  bad, avg S/O=0.52 avg Spam%=0.08 avg Ham%=0.06
      # used in: DRUGS_MUSCLE
  __DRUGS_MUSCLE2:  no hits at all
      # used in: DRUGS_MUSCLE
  __DRUGS_MUSCLE3:  no hits at all
      # used in: DRUGS_MUSCLE
  __DRUGS_MUSCLE4:  no hits at all
      # used in: DRUGS_MUSCLE
  __DRUGS_MUSCLE5:  no hits at all
      # used in: DRUGS_MUSCLE
  __DRUGS_SLEEP2:  bad, avg S/O=0.36 avg Spam%=0.01 avg Ham%=0.01
      # used in: DRUGS_SLEEP_EREC
  __DRUGS_SLEEP3:  bad, avg S/O=0.66 avg Spam%=0.05 avg Ham%=0.00
      # used in: DRUGS_SLEEP_EREC
  __DRUGS_SLEEP4:  no hits at all
      # used in: DRUGS_SLEEP_EREC

rules/20_compensate.cf (4 rules, 1 bad):

  __HAS_RCVD:  bad, avg S/O=0.50 avg Spam%=100.00 avg Ham%=99.99
      # used in: NO_HEADERS_MESSAGE

rules/20_body_tests.cf (30 rules, 24 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  HTTPS_IP_MISMATCH:  no hits at all
  LONGWORDS:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.02
  MIME_BAD_ISO_CHARSET:  no hits at all
  MIME_BASE64_BLANKS:  bad, avg S/O=0.09 avg Spam%=0.09 avg Ham%=0.94
  MIME_HTML_MOSTLY:  bad, avg S/O=0.32 avg Spam%=0.84 avg Ham%=1.65
  MIME_HTML_ONLY:  bad, avg S/O=0.74 avg Spam%=13.24 avg Ham%=4.72
      # used in: FORGED_IMS_HTML FORGED_THEBAT_HTML
  MIME_HTML_ONLY_MULTI:  no hits at all
  MIME_QP_LONG_LINE:  bad, avg S/O=0.65 avg Spam%=1.71 avg Ham%=0.87
  MISSING_MIME_HB_SEP:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.01
  MPART_ALT_DIFF:  bad, avg S/O=0.70 avg Spam%=2.90 avg Ham%=1.17
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.72 avg Spam%=0.57 avg Ham%=0.22
  TRACKER_ID:  bad, avg S/O=0.78 avg Spam%=0.12 avg Ham%=0.03
  TVD_SPACE_RATIO:  bad, avg S/O=0.74 avg Spam%=1.07 avg Ham%=0.37
  URI_TRUNCATED:  no hits of target type
  WEIRD_QUOTING:  bad, avg S/O=0.09 avg Spam%=0.03 avg Ham%=0.27
  __CTYPE_MULTIPART_ALT:  bad, avg S/O=0.47 avg Spam%=22.28 avg Ham%=25.33
      # used in: MIME_HTML_ONLY_MULTI
  __LONGWORDS_A:  bad, avg S/O=0.14 avg Spam%=0.01 avg Ham%=0.06
      # used in: LONGWORDS
  __LONGWORDS_B:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.02
      # used in: LONGWORDS
  __LONGWORDS_C:  bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.04
      # used in: LONGWORDS
  __MIME_QP:  bad, avg S/O=0.46 avg Spam%=25.06 avg Ham%=28.87
      # used in: TO_NO_BRKTS_DIRECT
  __SUBJECT_UTF8_B_ENCODED:  bad, avg S/O=0.17 avg Spam%=0.07 avg Ham%=0.36
      # used in: TVD_SPACE_RATIO
  __TVD_SPACE_RATIO:  bad, avg S/O=0.63 avg Spam%=1.83 avg Ham%=1.05
      # used in: TVD_SPACE_RATIO TO_NO_BRKTS_DIRECT