# Using score set 0 logs for revision 1196997 from: # ham-bb-guenther_fraud.log ham-bb-jhardin.log ham-bb-jhardin_fraud.log ham-bb-jm.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bernie-mix.log ham-danmcdonald.log ham-darxus-trap.log ham-darxus.log ham-grenier.log ham-hege.log ham-jarif.log ham-llanga.log ham-wt-ackbar.log ham-wt-en1.log ham-wt-en2-flh.log ham-wt-en3.log ham-wt-hamtrap.log ham-wt-homeone.log ham-wt-jp1.log ham-zmi.log spam-bb-guenther_fraud.log spam-bb-jhardin.log spam-bb-jhardin_fraud.log spam-bb-jm.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bernie-mix.log spam-danmcdonald.log spam-darxus-trap.log spam-darxus.log spam-grenier.log spam-hege.log spam-jarif.log spam-llanga.log spam-wt-ackbar.log spam-wt-en1.log spam-wt-en2-flh.log spam-wt-en3.log spam-wt-hamtrap.log spam-wt-homeone.log spam-wt-jp1.log spam-zmi.log score ADVANCE_FEE_2_NEW_FORM 0.025 score ADVANCE_FEE_2_NEW_FRM_MNY 0.613 score ADVANCE_FEE_2_NEW_MONEY 0.365 score ADVANCE_FEE_3_NEW 2.028 score ADVANCE_FEE_3_NEW_FORM 2.736 score ADVANCE_FEE_3_NEW_FRM_MNY 1.628 score ADVANCE_FEE_3_NEW_MONEY 0.001 score ADVANCE_FEE_4_NEW 0.001 score ADVANCE_FEE_4_NEW_FORM 1.691 score ADVANCE_FEE_4_NEW_FRM_MNY 1.069 score ADVANCE_FEE_4_NEW_MONEY 0.001 score ADVANCE_FEE_5_NEW 1.172 score ADVANCE_FEE_5_NEW_FORM 3.099 score ADVANCE_FEE_5_NEW_FRM_MNY 2.232 score ADVANCE_FEE_5_NEW_MONEY 0.001 score ANY_PILL_PRICE 0.001 score AXB_HELO_HOME_UN 3.319 score CK_HELO_DYNAMIC_POOL 0.248 score CK_HELO_DYNAMIC_SPLIT_IP 0.001 score CN_B2B_SPAMMER 0.999 score CTYPE_NULL 1.086 score DATE_IN_FUTURE_96_Q 2.799 score DATE_IN_FUTURE_Q_PLUS 2.799 score DEAR_BENEFICIARY 2.899 score DG_SPAMMER_EMAIL_F 2.799 score END_FUTURE_EMAILS 2.799 score FB_GREAT_BEST_SEX 1.054 score FB_STAMINA_IN_BED 1.832 score FILL_THIS_FORM 0.001 score FORGED_RELAY_MUA_TO_MX 0.001 score FORM_FRAUD_3 0.001 # force non-zero score FORM_FRAUD_5 0.001 score FROM_12LTRDOM 2.355 score FROM_IN_TO_AND_SUBJ 3.198 score FROM_MISSPACED 0.001 score FROM_MISSP_DYNIP 1.297 score FROM_MISSP_EH_MATCH 0.001 score FROM_MISSP_FREEMAIL 3.399 score FROM_MISSP_MSFT 0.001 # force non-zero score FROM_MISSP_NO_TO 0.107 score FROM_MISSP_REPLYTO 0.001 score FROM_MISSP_TO_UNDISC 0.001 score FROM_MISSP_URI 0.001 score FROM_MISSP_USER 0.001 score FROM_UNBAL1 2.684 score FRT_ERECTION 2.263 score FR_DOT_FEVER_5 2.999 score FSL_BOTSPAM_1 1.921 score FSL_CTYPE_WIN1251 0.001 score FSL_NEW_HELO_USER 0.001 score FSL_UA 0.462 score FSL_XM_419 0.002 score GAPPY_HTML 2.999 score GAPPY_PHONE_NA 2.512 score HDRS_LCASE_IMGONLY 0.001 score HELO_MISC_IP 0.248 score HELO_NO_DOMAIN 0.238 score HK_LOTTO_NAME 0.999 score HK_NAME_FREE 0.499 score HK_PNIS 0.998 score HK_SCAM_N2 3.099 score HK_SPAMMY_FILENAME 2.499 score JM_FAKE_PSMTP_RCVD 2.606 score KB_FORGED_MOZ4 2.999 score KHOP_DYNAMIC 1.998 score LOTS_OF_MONEY 0.001 # force non-zero score LOTTO_AGENT 2.799 score MANY_PILL_PRICE 4.149 score MANY_SPAN_IN_TEXT 3.000 score MONEY_ATM_CARD 2.252 score MONEY_FRAUD_3 0.001 score MONEY_FRAUD_5 0.001 score MONEY_FRAUD_8 0.001 score MONEY_FROM_MISSP 2.019 score MONEY_LOTTERY 3.099 score MSGID_NOFQDN1 0.001 score NSL_RCVD_FROM_USER 0.542 score NSL_RCVD_HELO_USER 1.663 score OBFU_ATTACH_MISSP 2.468 score OBFU_TEXT_ATTACH 2.699 score RISK_FREE 0.001 # force non-zero score RP_8BIT 0.979 score RP_MATCHES_RCVD -2.136 score S25R_4 2.599 score S25R_6 1.180 score SCANNED_EXTERNAL 3.299 score SINGLE_HEADER_1K 2.796 score SINGLE_HEADER_2K 3.896 score SINGLE_HEADER_3K 2.799 score SINGLE_HEADER_4K 2.499 score STYLE_GIBBERISH 3.396 score SUBJ_OBFU_PUNCT_FEW 0.001 score SUBJ_OBFU_PUNCT_MANY 0.750 score TAB_IN_FROM 0.455 score TINY_FLOAT 3.165 score TO_EQ_FM_DIRECT_MX 1.933 score TO_EQ_FM_DOM_HTML_ONLY 2.899 score TO_EQ_FM_HTML_DIRECT 2.929 score TO_EQ_FM_HTML_ONLY 2.123 score TO_IN_SUBJ 3.899 score TO_NO_BRKTS_DIRECT 3.084 score TO_NO_BRKTS_DYNIP 0.001 score TO_NO_BRKTS_FROM_MSSP 0.018 score TO_NO_BRKTS_MSFT 1.481 score TO_NO_BRKTS_NORDNS 0.001 score TO_NO_BRKTS_NORDNS_HTML 0.001 score TVD_SPACE_RATIO_MINFP 2.595 score URI_OBFU_TLD 2.136 # in active.list but have no hits in recent corpus score FROM_MISSP_DKIM 0.001 # force non-zero score FROM_MISSP_SPF_FAIL 0.001 # force non-zero score TO_EQ_FM_DOM_SPF_FAIL 0.001 # force non-zero score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero