[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-devel
Subject:    [auto] bad sandbox rules report
From:       nobody () spamassassin ! apache ! org (Rules Report Cron)
Date:       2008-12-31 8:30:40
Message-ID: 200812310830.mBV8UeUc017150 () spamassassin ! zones ! apache ! org
[Download RAW message or body]

HTTP get: http://ruleqa.spamassassin.org/1-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/2-days-ago?xml=1
HTTP get: http://ruleqa.spamassassin.org/3-days-ago?xml=1

Bad performing rules, from the past 3 night's mass-checks.

(Note: 'net' rules will be listed as 'no hits' unless you set 'tflags net'.
This also applies for meta rules which use 'net' rules.)

plugin: failed to create instance of plugin \
Mail::SpamAssassin::Plugin::Sandbox::felicity: Can't locate object method "new" via \
package "Mail::SpamAssassin::Plugin::Sandbox::felicity" (perhaps you forgot to load \
"Mail::SpamAssassin::Plugin::Sandbox::felicity"?) at (eval 275) line 1.

plugin: failed to create instance of plugin \
Mail::SpamAssassin::Plugin::Sandbox::hstern: Can't locate object method "new" via \
package "Mail::SpamAssassin::Plugin::Sandbox::hstern" (perhaps you forgot to load \
"Mail::SpamAssassin::Plugin::Sandbox::hstern"?) at (eval 276) line 1.


rulesrc/sandbox/mmartinec/25_yg.cf (17 rules, 16 bad):

  NOTVALID_GMAIL:  bad, avg S/O=0.70 avg Spam%=0.55 avg Ham%=0.24
  NOTVALID_PAY:  bad, avg S/O=0.28 avg Spam%=0.06 avg Ham%=0.16
  NOTVALID_YAHOO:  bad, avg S/O=0.78 avg Spam%=1.34 avg Ham%=0.38
  __AUTH_EBAY:  bad, avg S/O=0.06 avg Spam%=0.01 avg Ham%=0.13
      # used in: NOTVALID_PAY
  __AUTH_GMAIL:  bad, avg S/O=0.12 avg Spam%=0.56 avg Ham%=4.11
      # used in: NOTVALID_GMAIL
  __AUTH_PAYPAL:  bad, avg S/O=0.69 avg Spam%=0.05 avg Ham%=0.02
      # used in: NOTVALID_PAY
  __AUTH_YAHOO:  bad, avg S/O=0.42 avg Spam%=1.35 avg Ham%=1.86
      # used in: NOTVALID_YAHOO
  __AUTH_YAHOO1:  bad, avg S/O=0.43 avg Spam%=0.85 avg Ham%=1.14
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO3:  bad, avg S/O=0.47 avg Spam%=0.21 avg Ham%=0.23
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __AUTH_YAHOO4:  bad, avg S/O=0.14 avg Spam%=0.08 avg Ham%=0.46
      # used in: NOTVALID_YAHOO __AUTH_YAHOO
  __ML1:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%(.59
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML2:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%3.19
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML3:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%).21
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML4:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%.19
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __ML5:  bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%.96
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO
  __VIA_ML:  bad, avg S/O=0.00 avg Spam%=0.06 avg Ham%8.39
      # used in: NOTVALID_GMAIL NOTVALID_YAHOO

rulesrc/sandbox/mmartinec/20_misc.cf (13 rules, 4 bad):

  FROM_UNBAL2:  bad, avg S/O=0.49 avg Spam%=0.01 avg Ham%=0.01
  FROM_WSP_LEAD:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.53
  FROM_WSP_TRAIL:  bad, avg S/O=0.06 avg Spam%=0.03 avg Ham%=0.53
  RP_LASTNAME:  no hits at all

rulesrc/sandbox/mkettler/25_uribl.cf (5 rules, 5 bad):

  T_SURBL_MULTI1:  no hits at all
  T_SURBL_MULTI2:  no hits at all
  T_SURBL_MULTI3:  no hits at all
  T_SURBL_MULTI4:  no hits at all
  T_URIBL_BLACK_OVERLAP:  no hits at all

rulesrc/sandbox/mkettler/20_drugs.cf (1 rules, 1 bad):

  LFUZ_PWRMALE:  no hits of target type

rulesrc/sandbox/maddoc/99_doc_test.cf (7 rules, 4 bad):

  DS_FREEMAIL_SBLXBL:  no hits at all
  DS_SUBJ_COMMA:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.00
  __DS_HOST_HOTMAIL:  bad, avg S/O=0.27 avg Spam%=0.31 avg Ham%=0.85
      # used in: DS_FREEMAIL_SBLXBL
  __DS_HOST_YAHOO:  bad, avg S/O=0.19 avg Spam%=0.72 avg Ham%=2.98
      # used in: DS_FREEMAIL_SBLXBL

rulesrc/sandbox/kmcgrail/80_deadrules.cf (2 rules, 2 bad):

  KAM_STOCKOTC:  no hits at all
  KAM_STOCKTIP15:  no hits at all

rulesrc/sandbox/kmcgrail/70_phishing.cf (1 rules, 1 bad):

  KAM_PHISH1:  no hits of target type

rulesrc/sandbox/kmcgrail/70_mx.cf (4 rules, 2 bad):

  KAM_MX:  bad, avg S/O=0.60 avg Spam%=3.13 avg Ham%=2.11
  __KAM_MX3:  bad, avg S/O=0.60 avg Spam%=3.13 avg Ham%=2.11
      # used in: KAM_MX

rulesrc/sandbox/kmcgrail/20_test.cf (43 rules, 22 bad):

  KAM_1LINE:  no hits at all
  KAM_ABOUT:  no hits at all
  KAM_ADVERT:  no hits at all
  KAM_ADVERT2:  bad, avg S/O=0.21 avg Spam%=0.02 avg Ham%=0.09
  KAM_BIZ:  no hits at all
  KAM_FAST:  no hits at all
  KAM_GIFT:  no hits at all
  KAM_REPLACE:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.98
  __KAM_1LINE1:  no hits at all
      # used in: KAM_1LINE
  __KAM_1LINE2:  no hits at all
      # used in: KAM_1LINE
  __KAM_ABOUT1:  no hits at all
      # used in: KAM_ABOUT
  __KAM_ABOUT2:  bad, avg S/O=0.04 avg Spam%=0.01 avg Ham%=0.22
      # used in: KAM_ABOUT
  __KAM_ADVERT2:  no hits at all
      # used in: KAM_ADVERT
  __KAM_ADVERT3:  no hits at all
      # used in: KAM_ADVERT
  __KAM_ADVERT4:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
      # used in: KAM_ADVERT
  __KAM_BIZ1:  no hits at all
      # used in: KAM_BIZ
  __KAM_BIZ2:  no hits at all
      # used in: KAM_BIZ
  __KAM_FAST1:  no hits at all
      # used in: KAM_FAST
  __KAM_GIFT1:  no hits at all
      # used in: KAM_GIFT
  __KAM_GIFT2:  no hits at all
      # used in: KAM_GIFT
  __KAM_REP1:  no hits at all
      # used in: KAM_REPLACE
  __KAM_REP2:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.98
      # used in: KAM_REPLACE

rulesrc/sandbox/jm/80_sane.cf (150 rules, 50 bad):

  SANE_0c3c2453c66df7c8df280ebdad248db4:  no hits at all
  SANE_13b84073c47e1430d28f6852310f1e24:  no hits at all
  SANE_1bcdb8d4cae5f7cfefe310b3fce37407:  no hits at all
  SANE_1e4a68ee6f864251df2bd2c2820805ea:  no hits at all
  SANE_211b07d6a6bbd0d831c37df3ac112238:  no hits at all
  SANE_288f8016d836af09d6d57034b52fc5f6:  no hits at all
  SANE_29466e3bbdb72fcad000bf00469b265c:  no hits at all
  SANE_2b173a7fb7518c75ac8a2d294d773fd8:  no hits at all
  SANE_391bf5f63e3ab72e7f461b71f06eee80:  no hits at all
  SANE_3ca2a5874272d53ce2ad613e09b71fce:  bad, avg S/O=0.77 avg Spam%=0.06 avg \
Ham%=0.02  SANE_443ff86490ee315e02f9785f491b7bfd:  no hits at all
  SANE_4739448258e184b1415951775d4139ef:  no hits at all
  SANE_473ec8514c75992d5a9110363228bb33:  no hits at all
  SANE_4b127090f1ed198ef8007d8512cb0891:  no hits at all
  SANE_4f2004959aace5750bf8c6a1f8fdbad6:  no hits at all
  SANE_55a2e1f9afe27d0ecb210aded5350671:  no hits at all
  SANE_5b5adce1bd3865823ba98acc250e9ce6:  no hits at all
  SANE_5d45e71013e1bf6aa9c7f86d6cf21c0d:  no hits at all
  SANE_5df29067745223c48001d8db1ac686ab:  no hits at all
  SANE_770d974c14c048fb546c992159408021:  no hits at all
  SANE_77540077455aeadd911f2a12a5b5eaf5:  no hits at all
  SANE_77f4546a65a146a12097c4d4222d9f4d:  no hits at all
  SANE_817ff97bb8d9691f8ca9ccd2fabfbefb:  no hits at all
  SANE_85aedb78d0c7892c53cd35180d6d3972:  no hits at all
  SANE_8f9d40cc4e21b11c7171a7d6b3eea4c1:  bad, avg S/O=0.26 avg Spam%=0.02 avg \
Ham%=0.07  SANE_970bca3528887c0b4e6a1e0d63d20450:  no hits at all
  SANE_9f754392a8c622a3eb2ef735b6b00c3b:  no hits at all
  SANE_a348ed32eed4ec927e4e6fc579da7586:  no hits at all
  SANE_b09e89045a67f8aaed77e9ef430ed68d:  no hits at all
  SANE_b1666f872e931b52d09c9f2b601712c3:  no hits at all
  SANE_b74c14c03c2502118c8807a607a5744a:  no hits at all
  SANE_b792624f953fe7bac1bcaf051bea903f:  no hits at all
  SANE_c256beae85d9b81958cd20ce9d24fe7b:  no hits at all
  SANE_c2e7be51eecf941517f318ee39150b12:  no hits at all
  SANE_c5e5a37703662e0ddb9ade84fbec87a0:  no hits at all
  SANE_c9867f8f421f5cc77866438bcbcd0564:  no hits at all
  SANE_d0d2b0f6373bf91253d66dd74c594b87:  bad, avg S/O=0.20 avg Spam%=0.00 avg \
Ham%=0.00  SANE_d1ef7f3b64327d9d1c3535a0b7d7de11:  no hits at all
  SANE_d793965619441891f0b620c084d2d600:  no hits at all
  SANE_db753c9fabc9457efd8a9e6bcc485803:  bad, avg S/O=0.48 avg Spam%=0.00 avg \
Ham%=0.00  SANE_dbcae43bbc8bcf65efc826c058a76954:  no hits at all
  SANE_e0b42866efae083b5d78a87e2e6710e9:  bad, avg S/O=0.77 avg Spam%=0.01 avg \
Ham%=0.00  SANE_e25abff035c05b7ff829d5f599a90340:  no hits at all
  SANE_e3634fb4bb521c6a312bb1d001c20a1d:  bad, avg S/O=0.05 avg Spam%=0.03 avg \
Ham%=0.57  SANE_e761c503a58719e688c96a3ee254fbce:  bad, avg S/O=0.57 avg Spam%=0.42 \
avg Ham%=0.32  SANE_fb4053a5b92a05b0cd322a34ab76561c:  no hits at all
  SANE_m5372bd5260d3e6022b05cc794a288a72:  no hits at all
  SANE_m614d8dba879f47d3fe5ffbde4aa8d8a7:  no hits at all
  SANE_m72c8fe9fa7167078ff0b441e95bcb586:  no hits at all
  SANE_mb49329effea35453d098d577cddd778f:  no hits at all

rulesrc/sandbox/jm/70_tt_drugs.cf (12 rules, 2 bad):

  TT_OBSCURED_VALIUM:  no hits at all
  TT_OBSCURED_XANAX:  no hits at all

rulesrc/sandbox/jm/20_storm.cf (2 rules, 2 bad):

  GMD_R_DOT_HTML:  no hits at all
  JM_MID_STORM:  no hits at all

rulesrc/sandbox/jm/20_sought.cf (153 rules, 2 bad):

  JM_SOUGHT_2:  bad, avg S/O=0.78 avg Spam%=0.55 avg Ham%=0.35
  JM_SOUGHT_3:  bad, avg S/O=0.71 avg Spam%=0.81 avg Ham%=0.51

rulesrc/sandbox/jm/20_games.cf (3 rules, 3 bad):

  GAMES:  no hits at all
  __GAMES_BODY:  no hits at all
      # used in: GAMES
  __GAMES_SUBJ:  no hits at all
      # used in: GAMES

rulesrc/sandbox/jm/20_basic.cf (109 rules, 40 bad):

  AB_TEST_PDF4:  no hits at all
  CARD_DIRECT_WWW_ADDRESS:  no hits at all
  CTYPE_001C_A:  no hits at all
  CURR_PRICE:  no hits of target type
  DVLABS_GOZI_PDF:  no hits at all
  FAKE_OUTBLAZE_RCVD_168:  no hits at all
  FAKE_OUTBLAZE_RCVD_168_2:  no hits at all
  HDR_ORDER_FTSDMCXX_001C:  no hits at all
  HELO_LH_LD:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.02
  IMG_CID_PART1:  no hits at all
  JM_0800_GMT:  no hits at all
  JM_GMT_RCVD:  no hits at all
  JM_I_FEEL_LUCKY:  no hits at all
  JM_NICE_GIRL:  no hits at all
  JM_RCVD_QMAILV1:  no hits at all
  JM_REMOVE_FROM_URL:  no hits at all
  JM_TORA_XM:  no hits at all
  L_SPAM_TOOL_13:  bad, avg S/O=0.60 avg Spam%=0.00 avg Ham%=0.00
  MIME_BOUND_EQ_REL:  no hits of target type
  MSHTML_6_00_2900_3199_A:  no hits at all
  MSHTML_6_00_2900_3199_B:  no hits at all
  MSHTML_6_00_2900_3199_C:  no hits at all
  MSNBC_HDR_ORDER:  no hits at all
  MSNBC_THREAD_INDEX:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.69
  SB_GIF_AND_NO_URIS:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
  STOX_AND_PRICE:  no hits at all
  STOX_META_5:  no hits at all
  STOX_UA:  no hits of target type
  TEMPLATE_203_RCVD:  no hits at all
  TVD_PDF_FINGER01_JO:  no hits at all
  __CARD_DIRECT_WWW_ADDRESS:  no hits at all
      # used in: CARD_DIRECT_WWW_ADDRESS
  __HAS_ANY_EMAIL:  bad, avg S/O=0.11 avg Spam%=7.61 avg Ham%`.60
      # used in: SB_GIF_AND_NO_URIS
  __HAS_ANY_URI:  bad, avg S/O=0.50 avg Spam%.40 avg Ham%.63
      # used in: SB_GIF_AND_NO_URIS
  __LEGIT_MARLO_CARD:  no hits at all
      # used in: CARD_DIRECT_WWW_ADDRESS
  __MAILER_OL_6626:  no hits of target type
      # used in: JM_TORA_XM
  __MID_START_001C:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.15
      # used in: HDR_ORDER_FTSDMCXX_001C
  __MOLE_2962:  bad, avg S/O=0.28 avg Spam%=0.28 avg Ham%=0.73
      # used in: JM_TORA_XM
  __MSNBC_NOT_EXCH:  bad, avg S/O=0.44 avg Spam%=0.81 avg Ham%=1.02
      # used in: MSNBC_THREAD_INDEX
  __MSNBC_THREAD_INDEX:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=0.78
      # used in: MSNBC_THREAD_INDEX
  __NAKED_TO:  bad, avg S/O=0.18 avg Spam%.55 avg Ham%X.18
      # used in: JM_TORA_XM DOS_DEREK_AUG08

rulesrc/sandbox/hstern/70_syndicate.cf (15 rules, 14 bad):

  HS_FAST_FORWARD:  no hits at all
  HS_ODD_OE_ORIGINAL_MESSAGE:  no hits at all
  HS_OE_FUNNY_BODY_FROM:  no hits at all
  HS_SYNDICATE_P1:  no hits at all
  HS_SYNDICATE_P2:  no hits at all
  HS_SYNDICATE_P3:  no hits at all
  HS_SYNDICATE_P4:  no hits at all
  HS_SYNDICATE_P5:  no hits at all
  __HS_FUNNY_BODY_FROM:  no hits at all
      # used in: HS_OE_FUNNY_BODY_FROM HS_SYNDICATE_P4
  __HS_NONDEFAULT_OE_QUOTE:  bad, avg S/O=0.25 avg Spam%=0.13 avg Ham%=0.39
      # used in: HS_SYNDICATE_P2
  __HS_ODD_ORIGINAL_MESSAGE:  no hits of target type
      # used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P3
  __HS_QUOTE:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=4.14
      # used in: HS_SYNDICATE_P2 __HS_NONDEFAULT_OE_QUOTE
  __HS_SUBJ_RE_FW:  bad, avg S/O=0.11 avg Spam%=3.08 avg Ham%%.81
      # used in: HS_ODD_OE_ORIGINAL_MESSAGE HS_SYNDICATE_P2 HS_SYNDICATE_P3 \
__HS_NONDEFAULT_OE_QUOTE  __HS_SUBJ_UC_FW:  bad, avg S/O=0.36 avg Spam%=0.22 avg \
Ham%=0.38  # used in: HS_SYNDICATE_P1

rulesrc/sandbox/hstern/20_uri_tests.cf (15 rules, 5 bad):

  HS_EXTRA:  no hits of target type
  HS_GETMEOFF:  no hits at all
  HS_URI_HOOKUP:  no hits at all
  __HS_AOL_URI:  no hits at all
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5  __HS_MSNSPACES_URI:  no hits at all
      # used in: HS_SYNDICATE_P1 HS_SYNDICATE_P2 HS_SYNDICATE_P3 HS_SYNDICATE_P4 \
HS_SYNDICATE_P5

rulesrc/sandbox/hstern/20_meta_tests.cf (1 rules, 1 bad):

  HS_DRUG_DOLLAR_MANY:  no hits at all

rulesrc/sandbox/hstern/20_head_tests.cf (5 rules, 2 bad):

  HS_SUBJ_NEW_SOFTWARE:  no hits at all
  HS_SUBJ_ONLINE_PHARMACEUTICAL:  no hits at all

rulesrc/sandbox/hstern/20_body_tests.cf (8 rules, 4 bad):

  HS_BODY_UPLOADED_SOFTWARE:  no hits at all
  HS_MEETUP_FOR_SEX:  no hits at all
  HS_NO_FLOWERS:  no hits at all
  HS_SEXOHOLICS_DATESITE:  no hits at all

rulesrc/sandbox/fredt/99_zFVGT_FakeReply.cf (71 rules, 60 bad):

  FAKE_REPLY_B:  bad, avg S/O=0.63 avg Spam%=0.02 avg Ham%=0.01
  FAKE_REPLY_SURE_A:  bad, avg S/O=0.06 avg Spam%=1.31 avg Ham%.27
  FAKE_REPLY_SURE_B:  bad, avg S/O=0.06 avg Spam%=1.34 avg Ham% .90
  NICE_REPLY_A:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.10
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  NICE_REPLY_C:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  TEST_REPLY_B:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=2.30
  TEST_REPLY_C:  no hits of target type
  __BOTH_INR_AND_REF:  bad, avg S/O=0.79 avg Spam%=8.13 avg Ham%=2.20
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B NICE_REPLY_A  __INR_AND_NO_REF:  bad, avg S/O=0.29 avg Spam%=2.03 \
                avg Ham%=5.05
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B NICE_REPLY_B TEST_REPLY_B  __MISSING_REF:  bad, avg S/O=0.56 avg \
Spam%.99 avg Ham%w.25  # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A \
NICE_REPLY_B NICE_REPLY_C TEST_REPLY_B  __MISSING_REPLY:  bad, avg S/O=0.56 avg \
Spam%.28 avg Ham%u.62  # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A \
NICE_REPLY_B NICE_REPLY_C TEST_REPLY_C  __MISSING_THREAD:  bad, avg S/O=0.50 avg \
Spam%.68 avg Ham%.97  # used in: FAKE_REPLY_SURE_A
  __SUBJ_RE:  bad, avg S/O=0.09 avg Spam%=2.40 avg Ham%%.11
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A FAKE_REPLY_SURE_A \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B \
FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B FAKE_REPLY_SURE_B NICE_REPLY_A NICE_REPLY_B \
NICE_REPLY_C TEST_REPLY_B TEST_REPLY_C  __UA_GNUS:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __UA_IMP:  bad, avg S/O=0.10 avg Spam%=0.01 avg Ham%=0.12
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __UA_KMAIL:  bad, avg S/O=0.00 avg Spam%=0.00 avg \
                Ham%=1.18
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __UA_KNODE:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __UA_MOZ5:  bad, avg S/O=0.04 avg Spam%=0.04 avg Ham%=0.84
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __UA_MSENTOUR:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.21
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __UA_MSOEMAC:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __UA_MUTT:  bad, avg S/O=0.00 avg Spam%=0.00 avg \
                Ham%=1.33
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __UA_PAN:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __UA_XNEWS:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __XM_AOL:  bad, avg S/O=0.66 avg Spam%=0.05 avg Ham%=0.03
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_APPLEMAIL:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=2.52
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_BALSA:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_CALYPSO:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_COMMUNIG:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_DTMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_EDMAX:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_ELM:  bad, avg S/O=0.00 avg Spam%=0.00 avg \
                Ham%=0.25
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_EXMH:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_FORTE:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_FREEMAIL:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_GNUS:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __XM_LOTUSN:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_LOTUSN5:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_MAILCITY:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MAILSMITH:  no hits of target type
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MHE:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_MIMETOOLS:  bad, avg S/O=0.62 avg Spam%=0.04 avg Ham%=0.02
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MOZ4:  bad, avg S/O=0.12 avg Spam%=0.00 avg \
                Ham%=0.04
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __XM_MSCDO:  bad, avg S/O=0.32 avg Spam%=0.25 avg Ham%=0.53
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_MSOUT:  bad, avg S/O=0.64 avg Spam%=1.30 avg \
                Ham%=0.73
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_NETMAIL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_NETSCAPEW:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_NOVELL:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_OPENWEB:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_OPERA6:  no hits at all
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_PEGASUS:  bad, avg S/O=0.01 avg Spam%=0.00 avg \
                Ham%=0.08
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_POSTMAN:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_QUALCOM:  bad, avg S/O=0.45 avg Spam%=0.42 avg Ham%=0.51
      # used in: FAKE_REPLY_B FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_B \
TEST_REPLY_B __INR_AND_NO_REF  __XM_SKYRI:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __XM_SQRLMAIL:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_SYLPHEED:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_VM:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF
  __XM_WEBMAIL5:  no hits at all
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B
  __XM_WWWMAIL:  bad, avg S/O=0.30 avg Spam%=0.01 avg Ham%=0.02
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_C TEST_REPLY_C
  __XM_XIMEVOL:  no hits of target type
      # used in: FAKE_REPLY_SURE_A FAKE_REPLY_SURE_B NICE_REPLY_A __BOTH_INR_AND_REF

rulesrc/sandbox/felicity/70_phishing.cf (54 rules, 25 bad):

  TVD_PH_1:  bad, avg S/O=0.49 avg Spam%=0.00 avg Ham%=0.01
  TVD_PH_BODY_ACCOUNTS_POST:  bad, avg S/O=0.54 avg Spam%=0.15 avg Ham%=0.12
  TVD_PH_BODY_META:  bad, avg S/O=0.49 avg Spam%=0.03 avg Ham%=0.04
  TVD_PH_BODY_META_ALL:  bad, avg S/O=0.52 avg Spam%=0.18 avg Ham%=0.16
  TVD_PH_FR5:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.07
  TVD_PH_SEC:  no hits at all
  TVD_PH_SUBJ_ACCOUNTS_PRE:  bad, avg S/O=0.66 avg Spam%=0.03 avg Ham%=0.02
  TVD_PH_SUBJ_META:  bad, avg S/O=0.73 avg Spam%=0.03 avg Ham%=0.01
  TVD_PH_SUBJ_UPDATE:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  TVD_SUBJ_ACC_NUM:  no hits at all
  __PH_TVD_FROM2:  bad, avg S/O=0.21 avg Spam%=0.03 avg Ham%=0.13
      # used in: TVD_PH_FR5
  __TVD_PH_BODY_02:  no hits of target type
      # used in: TVD_PH_BODY_META TVD_PH_BODY_META_ALL
  __TVD_PH_BODY_07:  no hits at all
      # used in: TVD_PH_BODY_META TVD_PH_BODY_META_ALL
  __TVD_PH_SUBJ_00:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_02:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_04:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_15:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_17:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_18:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_36:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_37:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_39:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_52:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_58:  no hits at all
      # used in: TVD_PH_SUBJ_META
  __TVD_PH_SUBJ_ACCESS_POST:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
      # used in: TVD_PH_SUBJ_META

rulesrc/sandbox/felicity/70_other.cf (100 rules, 62 bad):

  FUZZY_MERIDIA:  no hits at all
  FUZZY_SPRM:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.02
  HEADER_COUNT_SUBJECT:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  RCVD_BAD_ID:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.00
  TVD_ACT_193:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
  TVD_APPROVED:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.01
  TVD_APP_LOAN:  no hits of target type
  TVD_BODY_END_STAR:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  TVD_COMPANY_PICK:  no hits at all
  TVD_DEAD_JOB:  no hits at all
  TVD_DEAR_HOMEOWNER:  no hits at all
  TVD_DOLLARS_US:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.05
  TVD_FLOAT_GENERAL:  no hits of target type
  TVD_FUZZY_SECTOR:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.06
  TVD_FUZZY_SECURITIES:  no hits of target type
  TVD_FUZZY_SYMBOL:  no hits of target type
  TVD_FW_GRAPHIC_ID3:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.05
  TVD_FW_GRAPHIC_ID3_2:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.05
  TVD_GET_STOCK:  bad, avg S/O=0.27 avg Spam%=0.01 avg Ham%=0.03
  TVD_GOOG_LUCKY:  no hits at all
  TVD_HEAD_EDITION:  no hits at all
  TVD_HEAD_KERNEL:  no hits of target type
  TVD_HEAD_USR:  no hits at all
  TVD_LONG_WORD5:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.01
  TVD_PDF_FINGER01:  no hits at all
  TVD_RATWARE_MSGID_01:  bad, avg S/O=0.27 avg Spam%=0.02 avg Ham%=0.07
  TVD_SECTION:  no hits of target type
  TVD_SINGLE_SPAN_DIV:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.01
  TVD_SPACED_SUBJECT_WORD5:  bad, avg S/O=0.17 avg Spam%=0.01 avg Ham%=0.03
  TVD_SPACED_WORDS:  no hits at all
  TVD_STOCK1:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
  TVD_SUBJ_APPR_LOAN:  no hits at all
  TVD_SUBJ_END_STAR:  no hits at all
  TVD_SUBJ_FINGER_04:  bad, avg S/O=0.66 avg Spam%=0.14 avg Ham%=0.07
  TVD_SUBJ_OWE:  no hits at all
  TVD_UA_FOSTERING:  no hits at all
  TVD_UNDER_VALUED:  no hits of target type
  TVD_VIS_HIDDEN:  no hits at all
  T_QP_LENGTH_77_78:  bad, avg S/O=0.38 avg Spam%.33 avg Ham%.79
  T_QP_LENGTH_78_79:  bad, avg S/O=0.44 avg Spam%=1.19 avg Ham%=1.51
  T_QP_LENGTH_79_80:  bad, avg S/O=0.15 avg Spam%=0.08 avg Ham%=0.49
  T_QP_LENGTH_80_81:  bad, avg S/O=0.09 avg Spam%=0.02 avg Ham%=0.25
  T_QP_LENGTH_81_82:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.12
  T_QP_LENGTH_82_83:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.02
  T_QP_LENGTH_83_84:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.03
  T_QP_LENGTH_84_85:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.02
  T_QP_LENGTH_85_86:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.02
  T_QP_LENGTH_86_87:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.09
  T_QP_LENGTH_87_88:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.28
  T_QP_LENGTH_88_89:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.23
  T_QP_LENGTH_89_90:  bad, avg S/O=0.19 avg Spam%=0.00 avg Ham%=0.02
  T_QP_LENGTH_90_INF:  bad, avg S/O=0.27 avg Spam%=0.30 avg Ham%=0.79
  T_TVD_IP_HEX:  bad, avg S/O=0.18 avg Spam%=0.00 avg Ham%=0.01
  T_TVD_IP_SING_HEX:  no hits at all
  T_TVD_MIME_NO_HEADERS:  bad, avg S/O=0.09 avg Spam%=0.01 avg Ham%=0.10
  T_TVD_PCT_OFF2:  bad, avg S/O=0.76 avg Spam%=0.45 avg Ham%=0.14
  T_TVD_SUBJ_FINGER_05:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
  __HEAD_X_KERNEL:  no hits of target type
      # used in: TVD_HEAD_KERNEL
  __TVD_BODY:  bad, avg S/O=0.50 avg Spam%.81 avg Ham%.96
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_MIME_ATT:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.12
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __TVD_MIME_CT_MM:  bad, avg S/O=0.25 avg Spam%=1.49 avg Ham%=4.36
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO
  __USER_AGENT_MUTT:  no hits at all
      # used in: TVD_HEAD_KERNEL

rulesrc/sandbox/fanf/30_text.cf (4 rules, 4 bad):

  IMG_ALT_BRACKETS:  no hits at all
  LONG_TERM_PRICE:  no hits of target type
  SHORT_TERM_PRICE:  no hits at all
  STOCK_PRICES:  no hits at all

rulesrc/sandbox/fanf/20_uri_tests.cf (1 rules, 1 bad):

  YAHOO_RDS_REDIR:  no hits at all

rulesrc/sandbox/fanf/10_headers.cf (3 rules, 2 bad):

  RCVD_FORGED_WROTE3:  no hits at all
  RCVD_FORGED_WROTE4:  no hits at all

rulesrc/sandbox/emailed/99_alex_test.cf (1 rules, 1 bad):

  AXB_XR_STULDAP:  no hits at all

rulesrc/sandbox/emailed/99_alex_dev.cf (9 rules, 6 bad):

  AXB_RCVD_ZOOBSEND:  no hits at all
  AXB_RCVD_ZOONAT:  no hits at all
  AXB_XMID_1212:  no hits of target type
  AXB_XMID_1510:  no hits at all
  AXB_XM_SENDMAIL_NOT:  no hits at all
  AXB_XTIDX_CHAIN:  no hits at all

rulesrc/sandbox/emailed/00_FVGT_File001.cf (604 rules, 372 bad):

  FB_ANA_TRIM:  no hits at all
  FB_ANUI:  no hits at all
  FB_AN_ERROR_4U:  no hits at all
  FB_BEDISCARDED:  no hits at all
  FB_BE_MILLION:  bad, avg S/O=0.34 avg Spam%=0.01 avg Ham%=0.01
  FB_BILLI0N:  no hits at all
  FB_BROKEN_PHNUM:  no hits at all
  FB_BROWSER_ERR:  no hits at all
  FB_C0MPANY:  no hits at all
  FB_CHOLESTERBLCK:  no hits at all
  FB_DROWNING_DEBT:  bad, avg S/O=0.38 avg Spam%=0.00 avg Ham%=0.00
  FB_EMAIL_HIER:  no hits at all
  FB_ENHANCED_MALE:  no hits at all
  FB_EXPLOSIVE:  no hits of target type
  FB_EXP_POWER_OF:  bad, avg S/O=0.14 avg Spam%=0.00 avg Ham%=0.00
  FB_FAKE_NUMBERS:  no hits at all
  FB_FAKE_NUMS2:  no hits at all
  FB_FAKE_NUMS4:  no hits at all
  FB_FEDERALLY_COMPL:  no hits at all
  FB_FHARMACY:  no hits at all
  FB_FORWARD_LOOK:  no hits at all
  FB_FREE888:  no hits at all
  FB_FUNNY_WEIGHT:  no hits at all
  FB_GAPPY_ADDRESS:  no hits at all
  FB_GAPPY_SOMETHING:  no hits of target type
  FB_GET_LAID:  no hits at all
  FB_GET_XXX_CASH:  no hits at all
  FB_GREAT_BEST_SEX:  bad, avg S/O=0.57 avg Spam%=0.02 avg Ham%=0.01
  FB_HA1R:  no hits at all
  FB_HOMELOAN:  no hits at all
  FB_IMAGIRL:  bad, avg S/O=0.45 avg Spam%=0.00 avg Ham%=0.00
  FB_IMPRESS_GIRL:  no hits of target type
  FB_IMPROVEJA:  no hits at all
  FB_INCREASE_VOL:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
  FB_L0AN:  no hits at all
  FB_LAON:  no hits at all
  FB_LATEST_OEM:  no hits at all
  FB_LETTERS_21B:  no hits of target type
  FB_LIMITED_TIME:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  FB_MAGIC_TAB:  no hits at all
  FB_MAKE_MONEY:  bad, avg S/O=0.08 avg Spam%=0.00 avg Ham%=0.01
  FB_MASCULINE_PERF:  no hits at all
  FB_MORE_SEMEN:  no hits at all
  FB_MORE_SIZE:  no hits of target type
  FB_MOST_QUALITY:  no hits at all
  FB_MOST_RECOG:  no hits of target type
  FB_N3W:  no hits at all
  FB_NEW_LOW_RATE:  no hits at all
  FB_NOT_PHONE_NUM2:  no hits of target type
  FB_NOT_PHONE_NUM3:  no hits at all
  FB_NOT_SCHOOL:  no hits of target type
  FB_NOW_NOW_NOW:  no hits of target type
  FB_NO_MORE_ADS:  no hits at all
  FB_NO_MORE_HTTP:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  FB_NO_MORE_OFFER:  no hits of target type
  FB_NUMYO:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.04
  FB_NUMYO2:  no hits at all
  FB_ODD_SPACED_MONEY:  no hits at all
  FB_ONIINE:  no hits at all
  FB_PA1N:  no hits at all
  FB_PASTE_LINK:  no hits at all
  FB_PC_DOCTOR:  no hits at all
  FB_PENIS_GROWTH:  no hits at all
  FB_PIPENEWSLETTER:  no hits at all
  FB_PIPE_ILLION:  no hits at all
  FB_PROLONGED_HARD:  no hits at all
  FB_RANDOM_SPUR:  no hits at all
  FB_REFI:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.06
  FB_REF_CODE_SPACE:  no hits at all
  FB_REWARDS_GATE:  no hits at all
  FB_RE_FI:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
  FB_ROLLER_IS_T:  no hits at all
  FB_ROLX:  no hits at all
  FB_SPACED_FREE:  no hits at all
  FB_SPACED_LOWER:  no hits at all
  FB_SPACED_PHN_3B:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
  FB_SPUR_M:  no hits at all
  FB_SSEX:  no hits of target type
  FB_STOCK_EXPLODE:  no hits at all
  FB_STREAM_OF:  no hits at all
  FB_STRONGER_EJ:  no hits at all
  FB_SUPERBREWARD:  no hits at all
  FB_SYMBLO:  no hits at all
  FB_THIS_ADVERT:  no hits at all
  FB_THOUS_PERSONAL:  no hits at all
  FB_TIRED_OF_YOUR:  bad, avg S/O=0.32 avg Spam%=0.00 avg Ham%=0.01
  FB_UGGS_NOW:  no hits at all
  FB_UNLOCK_YOUR_G:  no hits at all
  FB_UNRESOLV_PROV:  no hits at all
  FB_VERIFY_ZIP:  no hits at all
  FB_V_SPACE_GRA:  no hits at all
  FB_WHITEGOLD:  no hits at all
  FB_WORD1_END_DOLLAR:  bad, avg S/O=0.38 avg Spam%=0.03 avg Ham%=0.04
  FB_WORD2_END_DOLLAR:  bad, avg S/O=0.24 avg Spam%=0.03 avg Ham%=0.10
  FB_YOURSELF_MASTER:  no hits at all
  FB_YOUR_MORTGAGE:  bad, avg S/O=0.15 avg Spam%=0.01 avg Ham%=0.04
  FB_YOUR_PC_ERROR:  no hits at all
  FB_YOUR_WEIGHT:  no hits of target type
  FB_YOUR_WOMAN:  no hits at all
  FB_YOUTH_THIS:  no hits at all
  FB_YOU_CAN_BECOME:  bad, avg S/O=0.35 avg Spam%=0.01 avg Ham%=0.01
  FB_YOU_LOVE:  no hits of target type
  FF_IHOPE_YOU_SINK:  bad, avg S/O=0.43 avg Spam%=1.67 avg Ham%=2.26
  FF_LEO_FLOAT_RIGHT:  no hits of target type
  FH_BAD_MSOE14:  no hits at all
  FH_FROM_GET_NAME:  no hits at all
  FH_FROM_RND_1:  no hits at all
  FH_HAS_UID:  no hits at all
  FH_HAS_X:  no hits at all
  FH_HAS_XBBO:  no hits of target type
  FH_HAS_XCVBN:  no hits at all
  FH_HAS_XFGHJ:  no hits at all
  FH_HAS_XOVE:  no hits at all
  FH_HAS_XUIOP:  no hits at all
  FH_HELO_GMAILSMTP:  no hits at all
  FH_HOST_EQ_SPRINT_H:  no hits at all
  FH_MSGID_01C67:  no hits of target type
  FH_MSGID_DIGIT:  no hits at all
  FH_RANDOM_SURE:  bad, avg S/O=0.57 avg Spam%=0.04 avg Ham%=0.03
  FH_RCVD_FROM_2_WDS:  no hits of target type
  FH_RCVD_HELODATE:  no hits at all
  FH_RE_NEW_DDD:  no hits at all
  FH_VIRUS_NORTON:  no hits at all
  FH_XCON_HAS_EQ:  no hits at all
  FH_XMAIL_HEX20:  no hits of target type
  FH_XMAIL_RND_833:  bad, avg S/O=0.29 avg Spam%=0.03 avg Ham%=0.08
  FH_X_REFS_DDD:  no hits at all
  FM_APPROVE_COMPLETE:  no hits at all
  FM_ASCII_ART_SPACINGc:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.00
  FM_BIG_REASON:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.16
  FM_CLAIM_IPOD:  no hits of target type
  FM_COSTA_RICA:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.08
  FM_CUSTOMLOGODSGNc:  no hits at all
  FM_DOESNT_SAY_STOCK:  no hits at all
  FM_FAKE_53COM_SPOOF:  no hits at all
  FM_FORGED_GMAIL:  bad, avg S/O=0.04 avg Spam%=0.07 avg Ham%=1.71
  FM_FRM_RN_L_BRACK:  bad, avg S/O=0.60 avg Spam%=0.01 avg Ham%=0.01
  FM_FUCK_ASS_TEEN:  bad, avg S/O=0.44 avg Spam%=0.00 avg Ham%=0.00
  FM_GET_CASH_SURVEY:  no hits at all
  FM_GOOD_ENF_CREDIT:  no hits of target type
  FM_HOW_IMG_COST:  no hits at all
  FM_HOW_IMG_COST2:  no hits at all
  FM_IS_IT_OUR_ACCOUNT:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.02
  FM_LIKE_STOCKS:  no hits at all
  FM_LOAN_NUM_DOMAIN:  no hits at all
  FM_LOTTO_MONEY:  bad, avg S/O=0.27 avg Spam%=0.04 avg Ham%=0.11
  FM_LOTTO_YOU_WON:  bad, avg S/O=0.50 avg Spam%=0.03 avg Ham%=0.03
  FM_LOWER_CASE_HEAD:  no hits at all
  FM_MAKE_MONEY_HOME:  no hits of target type
  FM_MANY_DRUG_WORDS:  no hits at all
  FM_MEDS_SUBJ_2WDS:  no hits at all
  FM_MORTGAGE3PLUS:  no hits of target type
  FM_MORTGAGE4PLUS:  no hits of target type
  FM_MORTGAGE5PLUS:  no hits at all
  FM_MORTGAGE6PLUS:  no hits at all
  FM_MULTI_LUX_GIFTS:  no hits of target type
  FM_PAYING_LOWER:  no hits at all
  FM_PC_ERROR_DBL:  no hits at all
  FM_PEOPLE_LOOK_4ME:  no hits at all
  FM_RATSIGN_1106:  no hits of target type
  FM_REPLY_OR_NOT:  no hits at all
  FM_RE_HELLO_SPAM:  no hits of target type
  FM_ROLEX_ADS:  no hits at all
  FM_SUBJ_APPROVE:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.00
  FM_SUB_TEEN_NUDE:  no hits at all
  FM_TRUE_LOV_ALL_N:  no hits at all
  FM_WEIGHT_LOSS:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.03
  FM_XMAIL_F_OUT:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  FM_XREF_CLICKPHP:  no hits at all
  FRT_ADOBE2:  no hits at all
  FRT_ADULT2:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.01
  FRT_BEFORE:  bad, avg S/O=0.11 avg Spam%=0.00 avg Ham%=0.00
  FRT_BIGGERMEM1:  bad, avg S/O=0.64 avg Spam%=0.02 avg Ham%=0.01
  FRT_CANSPAM:  no hits of target type
  FRT_CLICK:  bad, avg S/O=0.08 avg Spam%=0.17 avg Ham%=1.90
  FRT_COCK:  bad, avg S/O=0.23 avg Spam%=0.01 avg Ham%=0.03
  FRT_CONTACT:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=2.16
  FRT_DIPLOMA:  no hits at all
  FRT_ESTABLISH:  no hits of target type
  FRT_ESTABLISH2:  no hits at all
  FRT_FOLLOW1:  bad, avg S/O=0.21 avg Spam%=0.00 avg Ham%=0.00
  FRT_FOLLOW2:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.00
  FRT_FRIEND:  bad, avg S/O=0.62 avg Spam%=0.01 avg Ham%=0.00
  FRT_FUCK1:  bad, avg S/O=0.20 avg Spam%=0.01 avg Ham%=0.03
  FRT_FUCK2:  no hits at all
  FRT_INCOME:  bad, avg S/O=0.16 avg Spam%=0.00 avg Ham%=0.00
  FRT_INTEREST:  no hits of target type
  FRT_INVESTOR:  no hits at all
  FRT_LITTLE:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.02
  FRT_LOLITA1:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.21
  FRT_MEETING:  no hits of target type
  FRT_OPPORTUN2:  bad, avg S/O=0.28 avg Spam%=0.00 avg Ham%=0.00
  FRT_PROFILE1:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=1.15
  FRT_PROFILE2:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.47
  FRT_PROFIT1:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  FRT_PROFIT2:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.01
  FRT_SOMA:  no hits at all
  FRT_SOMA2:  no hits at all
  FRT_STOCK1:  bad, avg S/O=0.11 avg Spam%=0.04 avg Ham%=0.34
  FRT_STOCK2:  bad, avg S/O=0.09 avg Spam%=0.04 avg Ham%=0.39
  FR_3TAG_3TAG:  bad, avg S/O=0.74 avg Spam%=0.00 avg Ham%=0.00
  FR_CANTSEETEXT:  no hits at all
  FR_COMMENT_ODD:  no hits at all
  FR_DIV_DRUGS_3:  no hits at all
  FR_IMPORT_CSS:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.19
  FR_M_E_D_S:  no hits at all
  FR_PORN_NOT_URL:  no hits of target type
  FR_P_END_P_MANY10:  no hits of target type
  FR_TEST_BASE64_BAD:  bad, avg S/O=0.55 avg Spam%=0.00 avg Ham%=0.00
  FR_TITLE_NUMS:  bad, avg S/O=0.62 avg Spam%=0.02 avg Ham%=0.01
  FR_WATCHES_HTTP:  bad, avg S/O=0.58 avg Spam%=0.03 avg Ham%=0.02
  FS_APPROVE_YOU:  no hits at all
  FS_ATTRACT_CUST:  no hits at all
  FS_AT_NO_COST:  bad, avg S/O=0.52 avg Spam%=0.00 avg Ham%=0.00
  FS_BROKEN_MEETING:  no hits at all
  FS_CLAIM_NOW:  no hits at all
  FS_COSTARICA:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  FS_CUTE_TEEN:  no hits at all
  FS_DOLLAR_BONUS:  bad, avg S/O=0.65 avg Spam%=0.01 avg Ham%=0.00
  FS_END_BILLS:  bad, avg S/O=0.34 avg Spam%=0.00 avg Ham%=0.00
  FS_GIFT_CARD_OFF:  no hits of target type
  FS_HUGECOCK:  no hits at all
  FS_LARGE_PERCENT2:  bad, avg S/O=0.61 avg Spam%=0.01 avg Ham%=0.01
  FS_LOW_INTMOR:  bad, avg S/O=0.66 avg Spam%=0.01 avg Ham%=0.00
  FS_LOW_RATES:  no hits of target type
  FS_MAKE_MONEY:  bad, avg S/O=0.76 avg Spam%=0.01 avg Ham%=0.00
  FS_NEW_SOFT_UPLOAD:  no hits at all
  FS_NEW_XXX:  no hits at all
  FS_PAYINGTOOM:  bad, avg S/O=0.37 avg Spam%=0.00 avg Ham%=0.00
  FS_PERSCRIPTION:  no hits at all
  FS_PHARMASUB2:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.01
  FS_PORN_STAR:  no hits of target type
  FS_PRE_SUBJ:  no hits at all
  FS_RAMROD:  no hits at all
  FS_REFI:  bad, avg S/O=0.77 avg Spam%=0.00 avg Ham%=0.00
  FS_REPL_TOKEN:  no hits at all
  FS_RESULTS_BED:  no hits at all
  FS_RE_APPROV:  no hits at all
  FS_SINGLE_LETTER_H:  bad, avg S/O=0.70 avg Spam%=0.01 avg Ham%=0.00
  FS_SINGLE_LETTER_J:  bad, avg S/O=0.53 avg Spam%=0.01 avg Ham%=0.01
  FS_SPLASH:  bad, avg S/O=0.10 avg Spam%=0.00 avg Ham%=0.00
  FS_START_TEEN:  bad, avg S/O=0.56 avg Spam%=0.01 avg Ham%=0.00
  FS_TIP_DDD:  no hits of target type
  FS_VIEWPHOTOS:  no hits at all
  FS_WE_WANT:  bad, avg S/O=0.13 avg Spam%=0.00 avg Ham%=0.00
  FS_WITH_SMALL:  no hits at all
  FS_YOUR_REFILL:  no hits at all
  FU_16R:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.03
  FU_CLICK_PHP_DDD:  no hits at all
      # used in: FM_XREF_CLICKPHP
  FU_COMMON_SUBS:  no hits at all
  FU_COMMON_SUBS2:  no hits of target type
  FU_ENDS_NUMS_DOTS_CLK:  no hits at all
  FU_ENDS_RT:  no hits at all
  FU_HOODIA:  no hits at all
  FU_LONG_HTML:  no hits at all
  FU_LOTSOFCOLONS:  no hits of target type
  FU_RX_DIR:  no hits of target type
  FU_SUB_D_WEIRD:  no hits at all
  FU_UKGEOCITIES:  bad, avg S/O=0.53 avg Spam%=0.00 avg Ham%=0.00
  FU_URI_TRACKER_T:  no hits at all
  __APPROVALFVGT:  bad, avg S/O=0.09 avg Spam%=0.16 avg Ham%=1.50
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS  __BEEN_APPROVED:  bad, avg S/O=0.36 avg Spam%=0.04 avg Ham%=0.08
      # used in: FM_APPROVE_COMPLETE
  __BIGDOLLARSFVGT:  bad, avg S/O=0.24 avg Spam%=0.92 avg Ham%=2.84
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS  __CAN_HELP:  bad, avg S/O=0.09 avg Spam%=0.22 avg Ham%=2.34
      # used in: FM_APPROVE_COMPLETE
  __COMPLETE_REVIEW:  no hits of target type
      # used in: FM_APPROVE_COMPLETE
  __COSTA_RI:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.56
      # used in: FM_COSTA_RICA
  __CS_WORD:  bad, avg S/O=0.31 avg Spam%=0.13 avg Ham%=0.28
      # used in: FM_MANY_DRUG_WORDS
  __DATE_700:  bad, avg S/O=0.30 avg Spam%=3.51 avg Ham%=8.34
      # used in: FM_RATSIGN_1106
  __DATE_LOWER:  no hits of target type
      # used in: FM_LOWER_CASE_HEAD
  __DOMAIN_WITH_NUMS:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.09
      # used in: FM_LOAN_NUM_DOMAIN
  __EXCLAIM_SUBJ:  bad, avg S/O=0.67 avg Spam%.17 avg Ham%=5.61
      # used in: FM_SUBJ_APPROVE
  __FB_BEST:  bad, avg S/O=0.06 avg Spam%=0.06 avg Ham%=0.95
      # used in: FM_BIG_REASON
  __FB_BIG:  bad, avg S/O=0.04 avg Spam%=0.06 avg Ham%=1.42
      # used in: FM_BIG_REASON
  __FB_CONGRADS:  bad, avg S/O=0.15 avg Spam%=0.08 avg Ham%=0.48
      # used in: FM_LOTTO_YOU_WON
  __FB_COST:  bad, avg S/O=0.24 avg Spam%=3.05 avg Ham%=9.55
      # used in: FM_HOW_IMG_COST2
  __FB_COULD_NOT_F:  no hits at all
      # used in: FM_PEOPLE_LOOK_4ME
  __FB_CUSTOM_RECOG:  no hits at all
      # used in: FM_CUSTOMLOGODSGNc
  __FB_DESIGNER:  bad, avg S/O=0.25 avg Spam%=0.49 avg Ham%=1.45
      # used in: FM_MULTI_LUX_GIFTS
  __FB_DO_NOT_REPLY:  no hits of target type
      # used in: FM_REPLY_OR_NOT
  __FB_FIND_OUT:  bad, avg S/O=0.10 avg Spam%=0.14 avg Ham%=1.23
      # used in: FM_MAKE_MONEY_HOME
  __FB_FROM_YOUR:  bad, avg S/O=0.14 avg Spam%=0.38 avg Ham%=2.32
      # used in: FM_MAKE_MONEY_HOME
  __FB_GENERATE:  bad, avg S/O=0.11 avg Spam%=0.34 avg Ham%=2.60
      # used in: FM_MAKE_MONEY_HOME
  __FB_GLASHUTE:  no hits at all
      # used in: FM_ROLEX_ADS
  __FB_HANDBAGS:  bad, avg S/O=0.36 avg Spam%=0.11 avg Ham%=0.20
      # used in: FM_MULTI_LUX_GIFTS
  __FB_HOME_HOUSE:  bad, avg S/O=0.15 avg Spam%=4.90 avg Ham%'.54
      # used in: FM_MAKE_MONEY_HOME
  __FB_HOTTEST:  bad, avg S/O=0.19 avg Spam%=0.30 avg Ham%=1.23
      # used in: FM_LIKE_STOCKS
  __FB_HOWMUCH:  bad, avg S/O=0.09 avg Spam%=0.18 avg Ham%=1.92
      # used in: FM_HOW_IMG_COST2
  __FB_IDENTITY:  bad, avg S/O=0.10 avg Spam%=0.13 avg Ham%=1.21
      # used in: FM_HOW_IMG_COST2
  __FB_IMAGE_OF:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FB_INK_PEN:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_MULTI_LUX_GIFTS
  __FB_LOGO_DESIGN:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_CUSTOMLOGODSGNc
  __FB_LOTTERY:  bad, avg S/O=0.08 avg Spam%=0.07 avg Ham%=0.76
      # used in: FM_LOTTO_MONEY FM_LOTTO_YOU_WON
  __FB_LUX_GIFTS:  bad, avg S/O=0.26 avg Spam%=0.00 avg Ham%=0.01
      # used in: FM_MULTI_LUX_GIFTS
  __FB_NATIONAL:  bad, avg S/O=0.04 avg Spam%=0.65 avg Ham%.06
      # used in: FM_LOTTO_MONEY FM_LOTTO_YOU_WON
  __FB_NUM_PERCNT:  bad, avg S/O=0.44 avg Spam%.40 avg Ham%.35
      # used in: FM_MULTI_LUX_GIFTS
  __FB_OMEGA:  bad, avg S/O=0.79 avg Spam%=0.63 avg Ham%=0.17
      # used in: FM_ROLEX_ADS
  __FB_PICK:  bad, avg S/O=0.24 avg Spam%=1.07 avg Ham%=3.36
      # used in: FM_LIKE_STOCKS
  __FB_PPLE_ARE_SEARCH:  no hits of target type
      # used in: FM_PEOPLE_LOOK_4ME
  __FB_PROJECTED:  bad, avg S/O=0.02 avg Spam%=0.01 avg Ham%=0.32
      # used in: FM_LIKE_STOCKS
  __FB_P_ALLNIGHT:  bad, avg S/O=0.58 avg Spam%=0.01 avg Ham%=0.01
      # used in: FM_TRUE_LOV_ALL_N
  __FB_P_TRUELOVE:  bad, avg S/O=0.19 avg Spam%=0.03 avg Ham%=0.11
      # used in: FM_TRUE_LOV_ALL_N
  __FB_REASON:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.05
      # used in: FM_BIG_REASON
  __FB_S_PRICE:  bad, avg S/O=0.59 avg Spam%!.42 avg Ham%.87
      # used in: FM_DOESNT_SAY_STOCK
  __FB_S_STOCK:  bad, avg S/O=0.09 avg Spam%=0.85 avg Ham%=8.55
      # used in: FM_DOESNT_SAY_STOCK FM_LIKE_STOCKS
  __FB_TARGET_AUDIEN:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.07
      # used in: FM_CUSTOMLOGODSGNc
  __FB_TOUR:  bad, avg S/O=0.02 avg Spam%=0.15 avg Ham%=6.10
      # used in: FM_COSTA_RICA
  __FB_WALLETS:  bad, avg S/O=0.71 avg Spam%=0.34 avg Ham%=0.14
      # used in: FM_MULTI_LUX_GIFTS
  __FB_YOUR_IMAGE:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FB_YOU_ARE_PAYING:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.04
      # used in: FM_PAYING_LOWER
  __FH_FRM_53:  no hits at all
      # used in: FM_FAKE_53COM_SPOOF
  __FH_MSGID_01C7:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.07
      # used in: FM_RE_HELLO_SPAM
  __FH_MSG_53:  no hits at all
      # used in: FM_FAKE_53COM_SPOOF
  __FH_RCV_53:  no hits at all
      # used in: FM_FAKE_53COM_SPOOF
  __FIXED_RATEFVGT:  bad, avg S/O=0.11 avg Spam%=0.01 avg Ham%=0.09
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS  __FM_HOW_COST:  bad, avg S/O=0.03 avg Spam%=0.02 avg Ham%=0.61
      # used in: FM_HOW_IMG_COST2
  __FM_HOW_COST_ID:  bad, avg S/O=0.08 avg Spam%=0.15 avg Ham%=1.78
      # used in: FM_HOW_IMG_COST2
  __FM_LARGE_MONEY:  bad, avg S/O=0.14 avg Spam%=2.02 avg Ham%.74
      # used in: FM_LOTTO_MONEY FM_LOTTO_YOU_WON
  __FM_MORTGAGE3PLUS:  no hits of target type
      # used in: FM_MORTGAGE3PLUS
  __FM_MORTGAGE4PLUS:  no hits of target type
      # used in: FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MORTGAGE5PLUS:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MORTGAGE6PLUS:  no hits at all
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS
  __FM_MY_PRICE:  bad, avg S/O=0.60 avg Spam%!.97 avg Ham%.89
      # used in: FM_DOESNT_SAY_STOCK
  __FM_NAT_LOTTERY:  bad, avg S/O=0.13 avg Spam%=0.04 avg Ham%=0.30
      # used in: FM_LOTTO_MONEY FM_LOTTO_YOU_WON
  __FM_STOCK_WORDS:  bad, avg S/O=0.22 avg Spam%=1.37 avg Ham%=4.77
      # used in: FM_LIKE_STOCKS
  __FM_YOUR_IMAGE:  no hits at all
      # used in: FM_HOW_IMG_COST2
  __FROM_GMAIL:  bad, avg S/O=0.12 avg Spam%=0.56 avg Ham%=4.10
      # used in: FM_FORGED_GMAIL
  __FROM_LOWER:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.13
      # used in: FM_LOWER_CASE_HEAD
  __FR_SPACING_15:  bad, avg S/O=0.32 avg Spam%=0.15 avg Ham%=0.33
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_17:  bad, avg S/O=0.54 avg Spam%=0.12 avg Ham%=0.10
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_22:  bad, avg S/O=0.09 avg Spam%=0.03 avg Ham%=0.28
      # used in: FM_ASCII_ART_SPACINGc
  __FR_SPACING_8:  bad, avg S/O=0.59 avg Spam%=1.39 avg Ham%=0.98
      # used in: FM_ASCII_ART_SPACINGc
  __FS_COST:  bad, avg S/O=0.58 avg Spam%=0.20 avg Ham%=0.15
      # used in: FM_HOW_IMG_COST
  __FS_FREE:  bad, avg S/O=0.49 avg Spam%=1.54 avg Ham%=1.62
      # used in: FM_CLAIM_IPOD
  __FS_HOWMUCH:  bad, avg S/O=0.39 avg Spam%=0.04 avg Ham%=0.06
      # used in: FM_HOW_IMG_COST
  __FS_IPODXBOX:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.09
      # used in: FM_CLAIM_IPOD
  __FS_MP3PLAY:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
      # used in: FM_CLAIM_IPOD
  __FS_RE_TWO_WORDS:  no hits of target type
      # used in: FM_MEDS_SUBJ_2WDS
  __FS_SUBJ_RE:  bad, avg S/O=0.04 avg Spam%=0.94 avg Ham%".45
      # used in: FM_RE_HELLO_SPAM
  __FS_S_TRADE:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.07
      # used in: FM_DOESNT_SAY_STOCK
  __FS_TEEN:  bad, avg S/O=0.51 avg Spam%=0.08 avg Ham%=0.07
      # used in: FM_SUB_TEEN_NUDE
  __FU_LOAN:  bad, avg S/O=0.30 avg Spam%=0.00 avg Ham%=0.00
      # used in: FM_LOAN_NUM_DOMAIN
  __F_ASS:  bad, avg S/O=0.18 avg Spam%=0.11 avg Ham%=0.50
      # used in: FM_FUCK_ASS_TEEN
  __F_FUCK:  bad, avg S/O=0.66 avg Spam%=0.21 avg Ham%=0.11
      # used in: FM_FUCK_ASS_TEEN
  __F_LARGE_MONEY:  bad, avg S/O=0.17 avg Spam%=1.17 avg Ham%=5.90
      # used in: FM_LOTTO_MONEY FM_LOTTO_YOU_WON __FM_LARGE_MONEY
  __F_LARGE_MONEY_2:  bad, avg S/O=0.09 avg Spam%=0.88 avg Ham%=8.50
      # used in: FM_LOTTO_MONEY FM_LOTTO_YOU_WON __FM_LARGE_MONEY
  __F_TEEN:  bad, avg S/O=0.08 avg Spam%=0.22 avg Ham%=2.56
      # used in: FM_FUCK_ASS_TEEN
  __GOOD_ENOUGH:  bad, avg S/O=0.09 avg Spam%=0.03 avg Ham%=0.27
      # used in: FM_GOOD_ENF_CREDIT
  __HOMELOANFVGT:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.17
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __LOANURIFVGT:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.14
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __LOSE_WEIGHT:  bad, avg S/O=0.70 avg Spam%=0.51 avg Ham%=0.22
      # used in: FM_WEIGHT_LOSS
  __MANY_RECIPS:  bad, avg S/O=0.68 avg Spam%.20 avg Ham%=4.78
      # used in: FM_IS_IT_OUR_ACCOUNT
  __MORTURIFVGT:  no hits of target type
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __MSGID_GMAIL:  bad, avg S/O=0.07 avg Spam%=0.41 avg Ham%=5.26
      # used in: FM_FORGED_GMAIL
  __MSGID_VGA:  no hits of target type
      # used in: FM_RATSIGN_1106
  __OWN_LAND:  bad, avg S/O=0.03 avg Spam%=0.09 avg Ham%=3.37
      # used in: FM_COSTA_RICA
  __OWN_PROP:  bad, avg S/O=0.02 avg Spam%=0.12 avg Ham%=6.64
      # used in: FM_COSTA_RICA
  __PREAPPROVEDFVGT:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.03
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __RAW_RANDOM:  bad, avg S/O=0.36 avg Spam%=0.01 avg Ham%=0.02
      # used in: FH_RANDOM_SURE
  __SEEN_ON_ABC:  bad, avg S/O=0.06 avg Spam%=0.05 avg Ham%=0.84
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CBS:  bad, avg S/O=0.09 avg Spam%=0.06 avg Ham%=0.63
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_CNN:  bad, avg S/O=0.06 avg Spam%=0.12 avg Ham%=2.04
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_NBC:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.03
      # used in: FM_WEIGHT_LOSS
  __SEEN_ON_OPRAH:  bad, avg S/O=0.47 avg Spam%=0.27 avg Ham%=0.31
      # used in: FM_WEIGHT_LOSS
  __SUBJ_LOWER:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.06
      # used in: FM_LOWER_CASE_HEAD
  __SURVEY:  bad, avg S/O=0.01 avg Spam%=0.05 avg Ham%=4.54
      # used in: FM_GET_CASH_SURVEY
  __TO___LOWER:  bad, avg S/O=0.06 avg Spam%=0.57 avg Ham%=9.72
      # used in: FM_LOWER_CASE_HEAD
  __VM_WORD:  no hits of target type
      # used in: FM_MANY_DRUG_WORDS
  __YOUR_ACCOUNT:  bad, avg S/O=0.31 avg Spam%=0.97 avg Ham%=2.16
      # used in: FM_IS_IT_OUR_ACCOUNT
  __YOUR_CREDIT:  bad, avg S/O=0.78 avg Spam%=1.53 avg Ham%=0.42
      # used in: FM_GOOD_ENF_CREDIT
  __YOUR_CREDITFVGT:  bad, avg S/O=0.75 avg Spam%=1.55 avg Ham%=0.53
      # used in: FM_MORTGAGE5PLUS FM_MORTGAGE5PLUS FM_MORTGAGE6PLUS FM_MORTGAGE3PLUS \
FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE3PLUS FM_MORTGAGE4PLUS FM_MORTGAGE4PLUS \
FM_MORTGAGE4PLUS __FM_MORTGAGE3PLUS __FM_MORTGAGE4PLUS __FM_MORTGAGE5PLUS \
__FM_MORTGAGE6PLUS  __YOU_HAVE_WON:  bad, avg S/O=0.65 avg Spam%=1.56 avg Ham%=0.86
      # used in: FM_LOTTO_YOU_WON
  __YOU_WON_SOMTIN:  bad, avg S/O=0.56 avg Spam%=1.62 avg Ham%=1.30
      # used in: FM_LOTTO_YOU_WON

rulesrc/sandbox/duncf/20_header.cf (3 rules, 2 bad):

  APOSTROPHE_TOCC:  no hits of target type
  STUDDLYCAPS:  bad, avg S/O=0.18 avg Spam%=0.32 avg Ham%=1.42

rulesrc/sandbox/duncf/20_debt.cf (2 rules, 1 bad):

  LOOPHOLE_1:  no hits at all

rulesrc/sandbox/dos/70_other.cf (122 rules, 99 bad):

  BELL_MOBILITY_TXT_MSG:  no hits at all
  DOS_ANAL_SPAM_MAILER:  no hits at all
  DOS_ANAL_SPAM_MAILER2:  no hits at all
  DOS_BODY_HIGH_NO_MID:  no hits at all
  DOS_DEREK_AUG08:  no hits at all
  DOS_DOM_LIST_CENTER:  no hits at all
  DOS_DOT_COM_AT:  no hits at all
  DOS_DOUBLE_SOTCK:  no hits at all
  DOS_FAKE_SQUIRREL:  bad, avg S/O=0.19 avg Spam%=0.01 avg Ham%=0.03
  DOS_FIX_MY_URI:  no hits at all
  DOS_FORGED_RCVD_QUADS:  no hits at all
  DOS_GOOGLE_LUCKY_REDIRECT:  no hits at all
  DOS_HC_ZIP_VIRUS:  no hits at all
  DOS_LET_GO_JOB:  no hits at all
  DOS_MED_CAN_PHARM_NOV07:  no hits at all
  DOS_MORTGAGE:  no hits at all
  DOS_OUTLOOK_TO_MX_IMAGE:  bad, avg S/O=0.73 avg Spam%=0.01 avg Ham%=0.00
  DOS_PLAYED_IN_HARDCORE:  no hits at all
      # used in: DOS_HC_ZIP_VIRUS
  DOS_PORN_BOUNDARY:  no hits at all
  DOS_PROVISION4:  no hits at all
  DOS_REMOVE_DOMAIN_DOT:  no hits at all
  DOS_REMOVE_DOMAIN_DOT_YAHOO:  no hits at all
  DOS_REPORT_FIN_INC:  no hits at all
  DOS_STOCK_BAT:  bad, avg S/O=0.48 avg Spam%=0.00 avg Ham%=0.00
  DOS_STOCK_CDYV_GENERIC:  no hits at all
  DOS_STOCK_INCOME_STATEMENT:  no hits at all
  DOS_STOCK_O_PRICE:  no hits at all
  DOS_TO_READ_STOCK:  no hits at all
  DOS_TWO_MIS_STOCK:  no hits at all
  DOS_URI_ASTERISK:  no hits at all
  DOS_YOUR_PLACE:  no hits at all
  DOS_ZIP_HARDCORE:  no hits at all
      # used in: DOS_HC_ZIP_VIRUS
  __BELL_MOBILITY_RELAY:  no hits at all
      # used in: BELL_MOBILITY_TXT_MSG
  __DOS_198K_VARI:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_248K_FIXED:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_372K_VARI:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_488K_FIXED:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_492K_INT:  no hits at all
      # used in: DOS_MORTGAGE
  __DOS_BODY_FRI:  bad, avg S/O=0.01 avg Spam%=0.17 avg Ham%.71
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_MON:  bad, avg S/O=0.03 avg Spam%=0.37 avg Ham%.10
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT \
DOS_STOCK_BAT  __DOS_BODY_SAT:  bad, avg S/O=0.17 avg Spam%=0.48 avg Ham%=2.35
      # used in: DOS_STOCK_BAT
  __DOS_BODY_STOCK:  bad, avg S/O=0.10 avg Spam%=0.57 avg Ham%=5.37
      # used in: DOS_STOCK_BAT
  __DOS_BODY_SUN:  bad, avg S/O=0.02 avg Spam%=0.19 avg Ham%.63
      # used in: DOS_STOCK_BAT
  __DOS_BODY_THU:  bad, avg S/O=0.01 avg Spam%=0.12 avg Ham%.88
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_BODY_TICKER:  bad, avg S/O=0.31 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_STOCK_BAT
  __DOS_BODY_TUE:  bad, avg S/O=0.01 avg Spam%=0.12 avg Ham%.16
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT \
DOS_STOCK_BAT  __DOS_BODY_WED:  bad, avg S/O=0.01 avg Spam%=0.13 avg Ham%.10
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_COMING_TO_YOUR_PLACE:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_CORRESPOND_EMAIL:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_DEAL_MAKE_MONEY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_DOM_LIST_CENTER:  no hits at all
      # used in: DOS_DOM_LIST_CENTER
  __DOS_DROP_ME_A_LINE:  no hits of target type
      # used in: DOS_YOUR_PLACE
  __DOS_GREAT_DRAWN_UP:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_HAS_ANY_URI:  bad, avg S/O=0.50 avg Spam%.40 avg Ham%.63
      # used in: DOS_FIX_MY_URI DOS_DEREK_AUG08 DOS_MED_CAN_PHARM_NOV07
  __DOS_HAS_LIST_ID:  bad, avg S/O=0.00 avg Spam%=0.02 avg Ham%3.19
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_LIST_UNSUB:  bad, avg S/O=0.00 avg Spam%=0.03 avg Ham%H.17
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAS_MAILING_LIST:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%.19
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_HAVE_TO_READ:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_HEADLINES:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=7.49
      # used in: DOS_STOCK_INCOME_STATEMENT
  __DOS_HI:  bad, avg S/O=0.01 avg Spam%=0.01 avg Ham%=1.01
      # used in: DOS_FIX_MY_URI
  __DOS_INCREASE_UP:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_I_DRIVE_A:  no hits of target type
      # used in: DOS_LET_GO_JOB
  __DOS_KEY_GET_IN_EARLY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_LET_GO_JOB:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_LINK:  bad, avg S/O=0.23 avg Spam%=4.66 avg Ham%.01
      # used in: DOS_FIX_MY_URI
  __DOS_MAILER_SM:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
      # used in: DOS_FAKE_SQUIRREL
  __DOS_MED_CAN_WEB_PHARM:  no hits at all
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_MARK_DOWN:  no hits of target type
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_NO_DIRECTION:  no hits at all
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MED_WHAT_COULD:  no hits of target type
      # used in: DOS_MED_CAN_PHARM_NOV07
  __DOS_MEET_EACH_OTHER:  bad, avg S/O=0.15 avg Spam%=0.00 avg Ham%=0.00
      # used in: DOS_YOUR_PLACE
  __DOS_MSGID_DIGITS10:  bad, avg S/O=0.30 avg Spam%=0.08 avg Ham%=0.19
      # used in: DOS_DEREK_AUG08
  __DOS_MY_OLD_JOB:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_NO_STOPPING:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_OIL_EXCEED:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_PERSONAL_EMAIL:  no hits at all
      # used in: DOS_YOUR_PLACE
  __DOS_RCVD_FRI:  bad, avg S/O=0.47 avg Spam%.59 avg Ham%.93
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_MON:  bad, avg S/O=0.44 avg Spam%.90 avg Ham% .29
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_SAT:  bad, avg S/O=0.68 avg Spam%.25 avg Ham%=6.65
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_SUN:  bad, avg S/O=0.65 avg Spam%.47 avg Ham%=7.28
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_THU:  bad, avg S/O=0.45 avg Spam%.23 avg Ham%.34
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_TUE:  bad, avg S/O=0.42 avg Spam%.03 avg Ham%!.97
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_RCVD_WED:  bad, avg S/O=0.42 avg Spam%.67 avg Ham%!.56
      # used in: DOS_STOCK_BAT DOS_STOCK_BAT DOS_STOCK_BAT
  __DOS_REF_2_WK_DAYS:  bad, avg S/O=0.01 avg Spam%=0.09 avg Ham%=5.96
      # used in: DOS_STOCK_BAT
  __DOS_REF_NEXT_WK_DAY:  bad, avg S/O=0.03 avg Spam%=0.26 avg Ham%=7.31
      # used in: DOS_STOCK_BAT
  __DOS_REF_TODAY:  bad, avg S/O=0.02 avg Spam%=0.55 avg Ham%2.98
      # used in: DOS_STOCK_BAT
  __DOS_RELAYED_EXT:  bad, avg S/O=0.29 avg Spam%4.61 avg Ham%.83
      # used in: DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_RELAY_SM:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.13
      # used in: DOS_FAKE_SQUIRREL
  __DOS_REQ_TO_READ:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_SINGLE_EXT_RELAY:  bad, avg S/O=0.69 avg Spam%.72 avg Ham%6.19
      # used in: DOS_FIX_MY_URI DOS_DEREK_AUG08 DOS_OUTLOOK_TO_MX_IMAGE
  __DOS_SM_MID:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.12
      # used in: DOS_FAKE_SQUIRREL
  __DOS_STOCK_COMPANY:  bad, avg S/O=0.04 avg Spam%=0.02 avg Ham%=0.49
      # used in: DOS_STOCK_O_PRICE
  __DOS_STOCK_O_PRICE:  no hits at all
      # used in: DOS_STOCK_O_PRICE
  __DOS_STOCK_TICKER:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.04
      # used in: DOS_STOCK_O_PRICE
  __DOS_SYMBOL_4:  no hits at all
      # used in: DOS_STOCK_INCOME_STATEMENT
  __DOS_TAKING_HOME:  no hits at all
      # used in: DOS_LET_GO_JOB
  __DOS_TOLD_DAY:  no hits at all
      # used in: DOS_TO_READ_STOCK
  __DOS_UA_SM:  bad, avg S/O=0.16 avg Spam%=0.02 avg Ham%=0.12
      # used in: DOS_FAKE_SQUIRREL
  __DOS_WASTE_TIME_MISS:  no hits at all
      # used in: DOS_TO_READ_STOCK

rulesrc/sandbox/dos/20_uri.cf (3 rules, 1 bad):

  GEO_QUERY_STRING:  no hits of target type

rules/72_active.cf (188 rules, 1 bad):

  TVD_FW_GRAPHIC_NAME_LONG:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.02

rules/70_sandbox.cf (99 rules, 4 bad):

  __TVD_MIME_ATT_AOPDF:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_AP:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.10
      # used in: TVD_PDF_FINGER01 TVD_PDF_FINGER01_JO __TVD_MIME_ATT
  __TVD_MIME_ATT_TP:  bad, avg S/O=0.51 avg Spam%r.96 avg Ham%q.07
      # used in: DOS_DEREK_AUG08 TVD_PDF_FINGER01
  __TVD_OUTLOOK_IMG:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.09
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2

rules/25_replace.cf (32 rules, 12 bad):

  FUZZY_AFFORDABLE:  no hits at all
  FUZZY_AMBIEN:  bad, avg S/O=0.22 avg Spam%=0.02 avg Ham%=0.06
  FUZZY_BILLION:  no hits at all
  FUZZY_CREDIT:  bad, avg S/O=0.44 avg Spam%=0.60 avg Ham%=0.76
  FUZZY_MORTGAGE:  no hits of target type
  FUZZY_PHENT:  no hits at all
  FUZZY_REFINANCE:  bad, avg S/O=0.18 avg Spam%=0.01 avg Ham%=0.03
  FUZZY_REMOVE:  no hits at all
  FUZZY_ROLEX:  no hits at all
  FUZZY_THOUSANDS:  no hits at all
  FUZZY_VIOXX:  no hits at all
  SUBJECT_FUZZY_CHEAP:  no hits at all

rules/20_vbounce.cf (161 rules, 96 bad):

  CHALLENGE_RESPONSE:  no hits at all
  VBOUNCE_MESSAGE:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.01
  __AUTO_GEN_BBTL:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __AUTO_GEN_XBT:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_0SPAM1:  no hits at all
      # used in: CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_0SPAM2:  no hits at all
      # used in: CHALLENGE_RESPONSE __CRBOUNCE_0SPAM
  __CRBOUNCE_ASK:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_EXI:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_GETRESP:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_HEADER:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_MIB:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_PREC_SPAM:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_QURB:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_RP:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_RP_2:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_SI:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_SI1:  no hits at all
      # used in: CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SI2:  no hits at all
      # used in: CHALLENGE_RESPONSE __CRBOUNCE_SI
  __CRBOUNCE_SPAMARREST:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_SZ:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_TMDA:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __CRBOUNCE_UNVERIF:  no hits at all
      # used in: CHALLENGE_RESPONSE
  __MAJORDOMO_HELP_BODY:  no hits of target type
      # used in: VBOUNCE_MESSAGE
  __MAJORDOMO_HELP_BODY2:  no hits of target type
      # used in: VBOUNCE_MESSAGE
  __MAJORDOMO_SUBJ:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __MY_SERVERS_FOUND:  no hits at all
      # used in: CHALLENGE_RESPONSE VBOUNCE_MESSAGE
  __VBOUNCE_ALERT:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_AMAVISD2:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_AOL:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_ATTACHMENT0:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_ATT_QUAR:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_AV_RESULTS:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_BANNED_MAT:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_BITDEFENDER:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_CISCO:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_CLICKBANK:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_CONT_VIOL:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_DEL_WARN:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_DETECTED:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_DISALLOWED:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO1:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_DOMINO2:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_DUTCH:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_EMAIL_REJ:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_EMANAGER:  no hits of target type
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_EMVD:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_EXIM:  no hits of target type
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_FORBIDDEN:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_FROMPT:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_GSHIELD:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_GUIN:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA:  no hits at all
      # used in: VBOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_GWAVA2:  no hits at all
      # used in: VBOUNCE_MESSAGE VBOUNCE_MESSAGE
  __VBOUNCE_INFLEX:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_INF_ATTACH:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN2:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_INTERSCAN3:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_JMAIL:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_LUTHER:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MAILMARSHAL2:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MAILSWEEP2:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MAJORDOMO_HELP:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MELDING:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MIME_INFO:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MMS:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_MSGLABS:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_NAV:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_NAV2:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_NAV3:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_NAVFAIL:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_NAV_DETECT:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_PROBLEME:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_PT_BLOCKED:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_QUOTED_EXE:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_RAV:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_REJECTED:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_REJ_FILT:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SCANMAIL:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SCREENSAVER:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SECURIQ:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SENDER:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SMTP:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_STRIP_ATTACH:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SYM_AVF:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_SYM_EMP:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_UNDELIV:  no hits of target type
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_VALERT:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_VIOLATION:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_VIR_FOUND:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_WARNING:  no hits at all
      # used in: VBOUNCE_MESSAGE
  __VBOUNCE_YOUSENT:  no hits at all
      # used in: VBOUNCE_MESSAGE

rules/20_uri_tests.cf (18 rules, 11 bad):

  IP_LINK_PLUS:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.41
  NORMAL_HTTP_TO_IP:  bad, avg S/O=0.09 avg Spam%=0.09 avg Ham%=0.88
  SPOOF_COM2COM:  bad, avg S/O=0.77 avg Spam%=0.01 avg Ham%=0.00
  SPOOF_COM2OTH:  bad, avg S/O=0.76 avg Spam%=0.02 avg Ham%=0.01
  SPOOF_NET2COM:  bad, avg S/O=0.66 avg Spam%=0.00 avg Ham%=0.00
  URI_HEX:  bad, avg S/O=0.69 avg Spam%=1.62 avg Ham%=0.73
  URI_NO_WWW_BIZ_CGI:  no hits at all
  URI_NO_WWW_INFO_CGI:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.03
  WEIRD_PORT:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.08
  YAHOO_DRS_REDIR:  no hits at all
  YAHOO_RD_REDIR:  no hits at all

rules/20_ratware.cf (92 rules, 13 bad):

  RATWARE_GECKO_BUILD:  no hits at all
  RATWARE_HASH_DASH:  no hits at all
  RATWARE_MOZ_MALFORMED:  no hits at all
  RATWARE_MPOP_WEBMAIL:  no hits at all
  __GATED_THROUGH_RCVD_REMOVER:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=7.09
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __HOTMAIL_BAYDAV_MSGID:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IMS_MSGID:  bad, avg S/O=0.01 avg Spam%=0.02 avg Ham%=1.35
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __IPLANET_MESSAGING_SERVER:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.20
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __LYRIS_EZLM_REMAILER:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%).35
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __SYMPATICO_MSGID:  no hits of target type
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __TAG_EXISTS_HTML:  bad, avg S/O=0.56 avg Spam%X.29 avg Ham%F.10
      # used in: HTML_MIME_NO_HTML_TAG
  __UNUSABLE_MSGID:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%).61
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2
  __WACKY_SENDMAIL_VERSION:  no hits at all
      # used in: TVD_FW_GRAPHIC_ID3 TVD_FW_GRAPHIC_ID3_2 __UNUSABLE_MSGID

rules/20_porn.cf (4 rules, 4 bad):

  CUM_SHOT:  bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
  FREE_PORN:  no hits at all
  LIVE_PORN:  no hits at all
  SUBJECT_SEXUAL:  no hits at all

rules/20_phrases.cf (48 rules, 35 bad):

  ACT_NOW_CAPS:  bad, avg S/O=0.12 avg Spam%=0.01 avg Ham%=0.06
  BAD_CREDIT:  bad, avg S/O=0.65 avg Spam%=0.60 avg Ham%=0.32
  BANG_GUAR:  bad, avg S/O=0.52 avg Spam%=0.11 avg Ham%=0.10
  BANG_OPRAH:  no hits at all
  BILLION_DOLLARS:  bad, avg S/O=0.17 avg Spam%=0.00 avg Ham%=0.01
  DEAR_FRIEND:  bad, avg S/O=0.05 avg Spam%=0.03 avg Ham%=0.55
  DEAR_SOMETHING:  bad, avg S/O=0.47 avg Spam%=0.09 avg Ham%=0.10
  DIET_1:  bad, avg S/O=0.61 avg Spam%=1.31 avg Ham%=0.86
  EM_ROLEX:  no hits at all
  EXCUSE_4:  no hits of target type
  EXCUSE_REMOVE:  bad, avg S/O=0.24 avg Spam%=0.00 avg Ham%=0.01
  FIN_FREE:  bad, avg S/O=0.09 avg Spam%=0.00 avg Ham%=0.02
  FORWARD_LOOKING:  no hits at all
  FREE_QUOTE_INSTANT:  bad, avg S/O=0.33 avg Spam%=0.00 avg Ham%=0.00
  INVESTMENT_ADVICE:  no hits of target type
  JOIN_MILLIONS:  bad, avg S/O=0.63 avg Spam%=0.02 avg Ham%=0.01
  LOW_PRICE:  bad, avg S/O=0.32 avg Spam%=0.33 avg Ham%=0.70
  MARKETING_PARTNERS:  bad, avg S/O=0.02 avg Spam%=0.00 avg Ham%=0.09
  NA_DOLLARS:  bad, avg S/O=0.62 avg Spam%=0.03 avg Ham%=0.02
  NOT_ADVISOR:  no hits at all
  NO_MEDICAL:  no hits at all
  OBSCURED_EMAIL:  bad, avg S/O=0.41 avg Spam%=0.00 avg Ham%=0.00
  ONE_TIME:  no hits at all
  PREST_NON_ACCREDITED:  no hits at all
  REFINANCE_NOW:  no hits of target type
  REMOVE_BEFORE_LINK:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.26
  RUDE_HTML:  no hits at all
  STOCK_ALERT:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.00
  STRONG_BUY:  bad, avg S/O=0.01 avg Spam%=0.00 avg Ham%=0.02
  URG_BIZ:  bad, avg S/O=0.77 avg Spam%=0.05 avg Ham%=0.01
  US_DOLLARS_3:  bad, avg S/O=0.07 avg Spam%=0.08 avg Ham%=1.10
  __RUDE_HTML_1:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_2:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_3:  no hits at all
      # used in: RUDE_HTML
  __RUDE_HTML_4:  no hits at all
      # used in: RUDE_HTML

rules/20_meta_tests.cf (19 rules, 4 bad):

  NO_HEADERS_MESSAGE:  bad, avg S/O=0.36 avg Spam%=0.00 avg Ham%=0.00
  UPPERCASE_75_100:  bad, avg S/O=0.78 avg Spam%=0.02 avg Ham%=0.01
  __NONEMPTY_BODY:  bad, avg S/O=0.50 avg Spam%.98 avg Ham%0.00
      # used in: STOX_META_5
  __UPPERCASE_75_100:  bad, avg S/O=0.78 avg Spam%=0.03 avg Ham%=0.01
      # used in: UPPERCASE_75_100

rules/20_imageinfo.cf (17 rules, 9 bad):

  DC_IMAGE_SPAM_TEXT:  bad, avg S/O=0.77 avg Spam%=0.03 avg Ham%=0.01
  DC_PNG_UNO_LARGO:  no hits of target type
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_GIF_MULTI_LARGO:  bad, avg S/O=0.31 avg Spam%=0.01 avg Ham%=0.02
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_IMG_TEXT_RATIO:  bad, avg S/O=0.68 avg Spam%=0.51 avg Ham%=0.24
      # used in: DC_IMAGE_SPAM_TEXT
  __DC_PNG_MULTI_LARGO:  no hits at all
      # used in: DC_IMAGE_SPAM_TEXT
  __GIF_AREA_180K:  bad, avg S/O=0.68 avg Spam%=0.05 avg Ham%=0.02
      # used in: DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT __DC_GIF_MULTI_LARGO
  __PNG_AREA_180K:  no hits of target type
      # used in: DC_IMAGE_SPAM_TEXT DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO \
__DC_PNG_MULTI_LARGO  __PNG_ATTACH_1:  bad, avg S/O=0.32 avg Spam%=0.01 avg Ham%=0.02
      # used in: DC_IMAGE_SPAM_TEXT DC_PNG_UNO_LARGO
  __PNG_ATTACH_2P:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.01
      # used in: DC_IMAGE_SPAM_TEXT __DC_PNG_MULTI_LARGO

rules/20_html_tests.cf (69 rules, 40 bad):

  HIDE_WIN_STATUS:  bad, avg S/O=0.04 avg Spam%=0.00 avg Ham%=0.03
  HTML_BADTAG_40_50:  no hits at all
  HTML_BADTAG_50_60:  no hits at all
  HTML_BADTAG_60_70:  no hits at all
  HTML_BADTAG_90_100:  no hits at all
  HTML_COMMENT_SAVED_URL:  bad, avg S/O=0.27 avg Spam%=0.07 avg Ham%=0.20
  HTML_COMMENT_SHORT:  bad, avg S/O=0.00 avg Spam%=0.00 avg Ham%=0.25
  HTML_EMBEDS:  bad, avg S/O=0.05 avg Spam%=0.01 avg Ham%=0.12
  HTML_FONT_FACE_BAD:  bad, avg S/O=0.09 avg Spam%=0.13 avg Ham%=1.22
  HTML_FONT_SIZE_HUGE:  bad, avg S/O=0.54 avg Spam%=0.20 avg Ham%=0.17
  HTML_FONT_SIZE_LARGE:  bad, avg S/O=0.58 avg Spam%=0.87 avg Ham%=0.63
  HTML_FORMACTION_MAILTO:  no hits at all
  HTML_IFRAME_SRC:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.04
  HTML_IMAGE_ONLY_24:  bad, avg S/O=0.74 avg Spam%=0.86 avg Ham%=0.31
  HTML_IMAGE_ONLY_28:  bad, avg S/O=0.43 avg Spam%=0.31 avg Ham%=0.42
  HTML_IMAGE_RATIO_02:  bad, avg S/O=0.27 avg Spam%=0.88 avg Ham%=2.39
  HTML_IMAGE_RATIO_04:  bad, avg S/O=0.08 avg Spam%=0.22 avg Ham%=2.73
  HTML_IMAGE_RATIO_06:  bad, avg S/O=0.03 avg Spam%=0.07 avg Ham%=2.17
  HTML_IMAGE_RATIO_08:  bad, avg S/O=0.03 avg Spam%=0.08 avg Ham%=2.46
  HTML_MESSAGE:  bad, avg S/O=0.54 avg Spam%Y.20 avg Ham%P.33
  HTML_MIME_NO_HTML_TAG:  bad, avg S/O=0.43 avg Spam%=0.58 avg Ham%=0.76
  HTML_NONELEMENT_40_50:  bad, avg S/O=0.76 avg Spam%=0.00 avg Ham%=0.00
  HTML_NONELEMENT_60_70:  no hits at all
  HTML_NONELEMENT_80_90:  no hits at all
  HTML_OBFUSCATE_05_10:  bad, avg S/O=0.65 avg Spam%=0.14 avg Ham%=0.07
  HTML_OBFUSCATE_50_60:  no hits at all
  HTML_OBFUSCATE_70_80:  no hits at all
  HTML_OBFUSCATE_90_100:  no hits at all
  HTML_TAG_BALANCE_BODY:  bad, avg S/O=0.12 avg Spam%=0.16 avg Ham%=1.18
  HTML_TAG_BALANCE_HEAD:  bad, avg S/O=0.68 avg Spam%=0.10 avg Ham%=0.05
  HTML_TAG_EXIST_BGSOUND:  no hits at all
  HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.13 avg Spam%=0.02 avg Ham%=0.16
  JS_FROMCHARCODE:  no hits at all
  OBFUSCATING_COMMENT:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.03
  __HTML_TITLE_SUBJ_DIFF:  bad, avg S/O=0.13 avg Spam%=0.02 avg Ham%=0.16
      # used in: HTML_TITLE_SUBJ_DIFF
  __JS_DOCWRITE:  bad, avg S/O=0.00 avg Spam%=0.01 avg Ham%=2.35
      # used in: JS_FROMCHARCODE
  __JS_FROMCHARCODE:  no hits at all
      # used in: JS_FROMCHARCODE
  __MIME_ATTACHMENT:  bad, avg S/O=0.38 avg Spam%=0.60 avg Ham%=0.97
      # used in: HTML_TITLE_SUBJ_DIFF STOX_META_5
  __OBFUSCATING_COMMENT_A:  bad, avg S/O=0.69 avg Spam%=0.01 avg Ham%=0.00
      # used in: OBFUSCATING_COMMENT
  __OBFUSCATING_COMMENT_B:  bad, avg S/O=0.51 avg Spam%=0.08 avg Ham%=0.07
      # used in: OBFUSCATING_COMMENT

rules/20_head_tests.cf (146 rules, 37 bad):

  BAD_ENC_HEADER:  bad, avg S/O=0.44 avg Spam%=0.02 avg Ham%=0.03
  DATE_IN_PAST_03_06:  bad, avg S/O=0.56 avg Spam%=0.89 avg Ham%=0.68
  ENGLISH_UCE_SUBJECT:  no hits at all
  FORGED_TELESP_RCVD:  no hits at all
  FROM_OFFERS:  bad, avg S/O=0.75 avg Spam%=0.01 avg Ham%=0.00
  HEADER_COUNT_CTYPE:  bad, avg S/O=0.07 avg Spam%=0.00 avg Ham%=0.02
  INVALID_TZ_EST:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.01
  JAPANESE_UCE_SUBJECT:  no hits at all
  MIME_HEADER_CTYPE_ONLY:  bad, avg S/O=0.09 avg Spam%=0.31 avg Ham%=3.17
  MISSING_DATE:  bad, avg S/O=0.22 avg Spam%=0.00 avg Ham%=0.01
  MISSING_HEADERS:  bad, avg S/O=0.03 avg Spam%=0.13 avg Ham%=3.84
  MISSING_MID:  bad, avg S/O=0.06 avg Spam%=0.00 avg Ham%=0.03
  MISSING_SUBJECT:  bad, avg S/O=0.76 avg Spam%=0.07 avg Ham%=0.02
  MSGID_FROM_MTA_HEADER:  bad, avg S/O=0.21 avg Spam%=0.47 avg Ham%=1.75
  NONEXISTENT_CHARSET:  no hits at all
  PREVENT_NONDELIVERY:  no hits at all
  RCVD_AM_PM:  no hits at all
  SUBJ_ALL_CAPS:  bad, avg S/O=0.74 avg Spam%=0.87 avg Ham%=0.31
  SUBJ_AS_SEEN:  no hits at all
  SUBJ_DOLLARS:  bad, avg S/O=0.47 avg Spam%=0.13 avg Ham%=0.15
  SUBJ_YOUR_DEBT:  bad, avg S/O=0.63 avg Spam%=0.04 avg Ham%=0.02
  SUBJ_YOUR_FAMILY:  bad, avg S/O=0.39 avg Spam%=0.01 avg Ham%=0.02
  TO_MALFORMED:  bad, avg S/O=0.67 avg Spam%=0.01 avg Ham%=0.00
  UNCLOSED_BRACKET:  bad, avg S/O=0.61 avg Spam%=0.03 avg Ham%=0.02
  WITH_LC_SMTP:  no hits at all
  X_IP:  bad, avg S/O=0.32 avg Spam%=0.07 avg Ham%=0.16
  X_PRIORITY_CC:  no hits at all
  __CD:  bad, avg S/O=0.03 avg Spam%=0.15 avg Ham%=5.78
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT:  bad, avg S/O=0.53 avg Spam%.55 avg Ham%.89
      # used in: MIME_HEADER_CTYPE_ONLY
  __CTE:  bad, avg S/O=0.46 avg Spam%D.49 avg Ham%Q.31
      # used in: MIME_HEADER_CTYPE_ONLY
  __CT_TEXT_PLAIN:  bad, avg S/O=0.52 avg Spam%9.42 avg Ham%6.86
      # used in: MIME_HEADER_CTYPE_ONLY DOS_DEREK_AUG08 HS_SYNDICATE_P2
  __ENV_AND_HDR_FROM_MATCH:  bad, avg S/O=0.78 avg Spam%.53 avg Ham%%.97
      # used in: TVD_PH_FR5
  __FROM_HOTMAIL_COM:  bad, avg S/O=0.46 avg Spam%=0.71 avg Ham%=0.83
      # used in: MSGID_FROM_MTA_HEADER
  __HAS_SUBJECT:  bad, avg S/O=0.50 avg Spam%.93 avg Ham%.98
      # used in: MISSING_SUBJECT BELL_MOBILITY_TXT_MSG
  __MIME_VERSION:  bad, avg S/O=0.49 avg Spam%.00 avg Ham%.38
      # used in: MIME_HEADER_CTYPE_ONLY
  __MSGID_BEFORE_OKAY:  bad, avg S/O=0.08 avg Spam%=0.13 avg Ham%=1.50
      # used in: MSGID_FROM_MTA_HEADER
  __MSGID_BEFORE_RECEIVED:  bad, avg S/O=0.18 avg Spam%=0.48 avg Ham%=2.11
      # used in: MSGID_FROM_MTA_HEADER

rules/20_fake_helo_tests.cf (11 rules, 1 bad):

  HELO_DYNAMIC_ROGERS:  no hits at all

rules/20_dynrdns.cf (36 rules, 1 bad):

  __LAST_UNTRUSTED_RELAY_NO_AUTH:  bad, avg S/O=0.50 avg Spam%0.00 avg Ham%.53
      # used in: DOS_DEREK_AUG08

rules/20_drugs.cf (86 rules, 4 bad):

  DRUGS_SMEAR1:  no hits at all
  DRUG_ED_GENERIC:  no hits at all
  DRUG_ED_ONLINE:  no hits at all
  SUBJECT_DRUG_GAP_S:  no hits at all

rules/20_compensate.cf (4 rules, 1 bad):

  __HAS_RCVD:  bad, avg S/O=0.50 avg Spam%0.00 avg Ham%0.00
      # used in: NO_HEADERS_MESSAGE

rules/20_body_tests.cf (29 rules, 16 bad):

  BLANK_LINES_80_90:  no hits at all
  EMAIL_ROT13:  no hits at all
  LONGWORDS:  bad, avg S/O=0.54 avg Spam%=0.01 avg Ham%=0.01
  MIME_BASE64_BLANKS:  bad, avg S/O=0.02 avg Spam%=0.06 avg Ham%=3.66
  MIME_HTML_MOSTLY:  bad, avg S/O=0.21 avg Spam%=0.33 avg Ham%=1.29
  MIME_HTML_ONLY:  bad, avg S/O=0.60 avg Spam%&.50 avg Ham%.81
      # used in: HTML_MIME_NO_HTML_TAG
  MIME_HTML_ONLY_MULTI:  bad, avg S/O=0.23 avg Spam%=0.48 avg Ham%=1.64
  MIME_QP_LONG_LINE:  bad, avg S/O=0.34 avg Spam%=1.53 avg Ham%=2.90
  MPART_ALT_DIFF:  bad, avg S/O=0.27 avg Spam%=0.98 avg Ham%=2.66
  MPART_ALT_DIFF_COUNT:  bad, avg S/O=0.60 avg Spam%=0.23 avg Ham%=0.15
  TRACKER_ID:  bad, avg S/O=0.76 avg Spam%=0.05 avg Ham%=0.02
  URI_TRUNCATED:  no hits at all
  __CTYPE_MULTIPART_ALT:  bad, avg S/O=0.52 avg Spam%3.16 avg Ham%0.72
      # used in: MIME_HTML_ONLY_MULTI
  __LONGWORDS_A:  bad, avg S/O=0.20 avg Spam%=0.00 avg Ham%=0.02
      # used in: LONGWORDS
  __LONGWORDS_B:  bad, avg S/O=0.43 avg Spam%=0.01 avg Ham%=0.01
      # used in: LONGWORDS
  __LONGWORDS_C:  bad, avg S/O=0.39 avg Spam%=0.02 avg Ham%=0.03
      # used in: LONGWORDS

rules/20_advance_fee.cf (56 rules, 33 bad):

  ADVANCE_FEE_2:  bad, avg S/O=0.59 avg Spam%=0.17 avg Ham%=0.12
  __FRAUD_AON:  bad, avg S/O=0.31 avg Spam%=0.03 avg Ham%=0.07
      # used in: ADVANCE_FEE_2
  __FRAUD_AUM:  bad, avg S/O=0.24 avg Spam%=0.01 avg Ham%=0.04
      # used in: ADVANCE_FEE_2
  __FRAUD_AXF:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_2
  __FRAUD_BEP:  bad, avg S/O=0.15 avg Spam%=0.02 avg Ham%=0.10
      # used in: ADVANCE_FEE_2
  __FRAUD_DBI:  bad, avg S/O=0.31 avg Spam%=7.86 avg Ham%.20
      # used in: ADVANCE_FEE_2
  __FRAUD_DPR:  bad, avg S/O=0.66 avg Spam%=0.04 avg Ham%=0.02
      # used in: ADVANCE_FEE_2
  __FRAUD_ETX:  bad, avg S/O=0.35 avg Spam%=0.08 avg Ham%=0.14
      # used in: ADVANCE_FEE_2
  __FRAUD_EZY:  no hits of target type
      # used in: ADVANCE_FEE_2
  __FRAUD_FBI:  bad, avg S/O=0.22 avg Spam%=0.01 avg Ham%=0.04
      # used in: ADVANCE_FEE_2
  __FRAUD_FVU:  bad, avg S/O=0.23 avg Spam%=0.00 avg Ham%=0.01
      # used in: ADVANCE_FEE_2
  __FRAUD_GAN:  bad, avg S/O=0.03 avg Spam%=0.00 avg Ham%=0.15
      # used in: ADVANCE_FEE_2
  __FRAUD_IOU:  bad, avg S/O=0.36 avg Spam%=0.28 avg Ham%=0.49
      # used in: ADVANCE_FEE_2
  __FRAUD_IRJ:  bad, avg S/O=0.10 avg Spam%=0.02 avg Ham%=0.21
      # used in: ADVANCE_FEE_2
  __FRAUD_IRT:  bad, avg S/O=0.25 avg Spam%=0.22 avg Ham%=0.69
      # used in: ADVANCE_FEE_2
  __FRAUD_JYG:  bad, avg S/O=0.51 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_2
  __FRAUD_KDT:  bad, avg S/O=0.35 avg Spam%=0.05 avg Ham%=0.10
      # used in: ADVANCE_FEE_2
  __FRAUD_LTX:  bad, avg S/O=0.66 avg Spam%=0.05 avg Ham%=0.03
      # used in: ADVANCE_FEE_2
  __FRAUD_MCQ:  bad, avg S/O=0.64 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_2
  __FRAUD_MLY:  bad, avg S/O=0.05 avg Spam%=0.04 avg Ham%=0.76
      # used in: ADVANCE_FEE_2
  __FRAUD_NRG:  bad, avg S/O=0.79 avg Spam%=0.01 avg Ham%=0.00
      # used in: ADVANCE_FEE_2
  __FRAUD_PTS:  bad, avg S/O=0.03 avg Spam%=0.05 avg Ham%=1.54
      # used in: ADVANCE_FEE_2
  __FRAUD_QFY:  bad, avg S/O=0.57 avg Spam%=0.01 avg Ham%=0.00
      # used in: ADVANCE_FEE_2
  __FRAUD_TCC:  bad, avg S/O=0.26 avg Spam%=0.01 avg Ham%=0.03
      # used in: ADVANCE_FEE_2
  __FRAUD_TDP:  bad, avg S/O=0.30 avg Spam%=0.05 avg Ham%=0.12
      # used in: ADVANCE_FEE_2
  __FRAUD_THJ:  bad, avg S/O=0.25 avg Spam%=0.01 avg Ham%=0.03
      # used in: ADVANCE_FEE_2
  __FRAUD_ULK:  bad, avg S/O=0.05 avg Spam%=0.00 avg Ham%=0.06
      # used in: ADVANCE_FEE_2
  __FRAUD_UOQ:  bad, avg S/O=0.72 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_2
  __FRAUD_UUY:  no hits of target type
      # used in: ADVANCE_FEE_2
  __FRAUD_WFC:  bad, avg S/O=0.62 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_2
  __FRAUD_WNY:  bad, avg S/O=0.32 avg Spam%=0.09 avg Ham%=0.18
      # used in: ADVANCE_FEE_2
  __FRAUD_YQV:  bad, avg S/O=0.38 avg Spam%=0.01 avg Ham%=0.01
      # used in: ADVANCE_FEE_2
  __FRAUD_ZFJ:  bad, avg S/O=0.12 avg Spam%=0.00 avg Ham%=0.00
      # used in: ADVANCE_FEE_2


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic