score ACCT_PHISHING 1.498 1.498 1.498 1.498 score ACCT_PHISHING_MANY 1.775 2.989 1.775 2.989 score AC_BR_BONANZA 0.001 0.001 0.001 0.001 score AC_DIV_BONANZA 0.001 0.001 0.001 0.001 score AC_HTML_NONSENSE_TAGS 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS10 3.995 0.717 3.995 0.717 score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS12 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS2 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000 score ADMITS_SPAM 2.696 2.796 2.696 2.796 score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000 score ADVANCE_FEE_2_NEW_FRM_MNY 0.476 1.483 0.476 1.483 score ADVANCE_FEE_2_NEW_MONEY 1.997 1.997 1.997 1.997 score ADVANCE_FEE_3_NEW 2.798 2.495 2.798 2.495 score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 0.076 0.001 0.076 score ADVANCE_FEE_3_NEW_MONEY 3.796 3.096 3.796 3.096 score ADVANCE_FEE_4_NEW 2.497 2.596 2.497 2.596 score ADVANCE_FEE_4_NEW_FRM_MNY 1.117 1.770 1.117 1.770 score ADVANCE_FEE_4_NEW_MONEY 3.096 3.096 3.096 3.096 score ADVANCE_FEE_5_NEW 2.796 2.696 2.796 2.696 score ADVANCE_FEE_5_NEW_FRM_MNY 2.687 2.824 2.687 2.824 score ADVANCE_FEE_5_NEW_MONEY 2.781 2.833 2.781 2.833 score AD_PREFS 0.001 1.571 0.001 1.571 score AXB_XMAILER_MIMEOLE_OL_024C2 2.258 0.905 2.258 0.905 score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.869 0.657 1.869 0.657 score AXB_XM_FORGED_OL2600 2.269 1.310 2.269 1.310 score AXB_X_FF_SEZ_S 2.397 2.245 2.397 2.245 score BIGNUM_EMAILS 0.001 2.996 0.001 2.996 score BODY_URI_ONLY 0.998 0.998 0.998 0.998 score CANT_SEE_AD 1.000 1.000 1.000 1.000 score CK_HELO_DYNAMIC_SPLIT_IP 1.498 1.498 1.498 1.498 score COMMENT_GIBBERISH 1.498 1.498 1.498 1.498 score COMPENSATION 1.498 1.162 1.498 1.162 score DATE_IN_FUTURE_96_Q 2.897 2.297 2.897 2.297 score DEAR_BENEFICIARY 4.091 3.396 4.091 3.396 score DSN_NO_MIMEVERSION 1.998 1.997 1.998 1.997 score FBI_MONEY 1.999 1.999 1.999 1.999 score FBI_SPOOF 1.674 1.137 1.674 1.137 score FILL_THIS_FORM 3.497 2.232 3.497 2.232 score FORM_FRAUD 0.998 0.936 0.998 0.936 score FORM_FRAUD_3 1.888 2.511 1.888 2.511 score FORM_FRAUD_5 1.726 1.742 1.726 1.742 score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000 score FOUND_YOU 2.792 3.246 2.792 3.246 score FREEMAIL_DOC_PDF_BCC 0.001 2.497 0.001 2.497 score FREEMAIL_FORGED_FROMDOMAIN 0.003 0.248 0.003 0.248 score FROM_MISSPACED 0.001 0.001 0.001 0.001 score FROM_MISSP_EH_MATCH 1.997 1.997 1.997 1.997 score FROM_MISSP_FREEMAIL 0.001 0.783 0.001 0.783 score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001 score FROM_MISSP_PHISH 2.409 3.777 2.409 3.777 score FROM_MISSP_REPLYTO 3.532 0.001 3.532 0.001 score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000 score FROM_MISSP_TO_UNDISC 0.001 0.001 0.001 0.001 score FROM_MISSP_USER 0.001 0.001 0.001 0.001 score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001 score FROM_WEBSITE 3.096 0.123 3.096 0.123 score FSL_BOTSPAM_1 2.999 0.700 2.999 0.700 score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001 score FSL_HELO_BARE_IP_2 1.997 1.735 1.997 1.735 score FSL_HELO_FAKE 0.001 0.001 0.001 0.001 score FSL_MY_NAME_IS 0.001 0.001 0.001 0.001 score FSL_NEW_HELO_USER 1.378 1.193 1.378 1.193 score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000 score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000 score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000 score GOOG_REDIR_NORDNS 2.661 1.588 2.661 1.588 score GOOG_REDIR_SHORT 0.396 0.001 0.396 0.001 score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001 score HEXHASH_WORD 2.200 2.996 2.200 2.996 score HK_LOTTO 0.001 0.449 0.001 0.449 score HK_LOTTO_NAME 0.998 0.752 0.998 0.752 score HK_LOTTO_SUBJECT 0.998 0.998 0.998 0.998 score HK_NAME_MR_MRS 0.998 0.001 0.998 0.001 score HK_RANDOM_FROM 0.999 0.998 0.999 0.998 score HK_RANDOM_REPLYTO 0.998 0.998 0.998 0.998 score HK_SCAM_N15 0.001 2.497 0.001 2.497 score HK_SCAM_N2 2.996 2.255 2.996 2.255 score HK_SCAM_N3 0.001 2.596 0.001 2.596 score HTML_OFF_PAGE 1.997 1.998 1.997 1.998 score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000 score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000 score LONG_HEX_URI 2.996 1.044 2.996 1.044 score LONG_IMG_URI 1.000 1.000 1.000 1.000 score LOTS_OF_MONEY 0.010 0.010 0.010 0.010 score LOTTO_AGENT 2.497 2.497 2.497 2.497 score LOTTO_AGENT_RPLY 1.862 2.028 1.862 2.028 score LOTTO_DEPT 0.001 0.001 0.001 0.001 score LOTTO_URI 0.001 0.001 0.001 0.001 score LUCRATIVE 1.998 1.000 1.998 1.000 score MALFORMED_FREEMAIL 0.001 1.829 0.001 1.829 score MANY_SPAN_IN_TEXT 2.197 0.001 2.197 0.001 score MILLION_USD 1.582 1.056 1.582 1.056 score MIME_NO_TEXT 1.997 1.997 1.997 1.997 score MONEY_ATM_CARD 1.343 0.144 1.343 0.144 score MONEY_FORM 0.001 0.001 0.001 0.001 score MONEY_FRAUD_3 3.396 3.296 3.396 3.296 score MONEY_FRAUD_5 1.848 3.756 1.848 3.756 score MONEY_FRAUD_8 2.657 2.927 2.657 2.927 score MONEY_FROM_41 1.997 1.998 1.997 1.998 score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001 score MSGID_NOFQDN1 3.795 3.696 3.795 3.696 score NAME_EMAIL_DIFF 3.695 0.599 3.695 0.599 score NA_DOLLARS 0.001 1.498 0.001 1.498 score NSL_RCVD_FROM_USER 0.171 0.118 0.171 0.118 score NSL_RCVD_HELO_USER 1.215 2.048 1.215 2.048 score OBFU_TEXT_ATTACH 2.191 1.791 2.191 1.791 score PDS_FROM_2_EMAILS 3.995 0.449 3.995 0.449 score PHISHING_FREEMAIL 3.096 2.999 3.096 2.999 score PP_MIME_FAKE_ASCII_TEXT 0.998 0.001 0.998 0.001 score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500 score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000 score PUMPDUMP 1.000 1.000 1.000 1.000 score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000 score RAND_HEADER_MANY 1.000 1.000 1.000 1.000 score RCVD_IN_MSPIKE_BL 0.001 0.010 0.001 0.010 score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001 score RCVD_IN_MSPIKE_H3 0.001 -0.010 0.001 -0.010 score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010 score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000 score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001 score RCVD_IN_MSPIKE_L3 0.001 1.498 0.001 1.498 score RCVD_IN_MSPIKE_L4 0.001 2.497 0.001 2.497 score RCVD_IN_MSPIKE_L5 0.001 3.196 0.001 3.196 score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010 score RCVD_IN_MSPIKE_ZBI 0.001 0.085 0.001 0.085 score RISK_FREE 2.896 2.796 2.896 2.796 score RP_MATCHES_RCVD -1.050 -1.317 -1.050 -1.317 score SERGIO_SUBJECT_VIAGRA01 2.999 2.570 2.999 2.570 score SPOOFED_FREEM_REPTO 1.997 1.998 1.997 1.998 score SPOOFED_FREEM_REPTO_CHN 1.997 1.997 1.997 1.997 score STOCK_LOW_CONTRAST 1.000 1.000 1.000 1.000 score STYLE_GIBBERISH 3.499 3.496 3.499 3.496 score SYSADMIN 1.000 1.000 1.000 1.000 score TAB_IN_FROM 0.348 0.294 0.348 0.294 score THIS_AD 1.871 1.665 1.871 1.665 score TO_EQ_FM_DOM_SPF_FAIL 0.001 2.099 0.001 2.099 score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001 score TO_IN_SUBJ 0.098 0.098 0.098 0.098 score TO_NO_BRKTS_FROM_MSSP 0.799 0.273 0.799 0.273 score TO_NO_BRKTS_HTML_IMG 1.049 1.664 1.049 1.664 score TO_NO_BRKTS_HTML_ONLY 1.997 1.997 1.997 1.997 score TO_NO_BRKTS_MSFT 2.498 2.497 2.498 2.497 score TO_NO_BRKTS_NORDNS_HTML 0.001 0.971 0.001 0.971 score TO_NO_BRKTS_PCNT 2.497 2.394 2.497 2.394 score TVD_FROM_1 0.998 0.998 0.998 0.998 score TVD_SPACE_ENCODED 2.497 1.249 2.497 1.249 score TVD_SPACE_ENC_FM_MIME 1.997 1.997 1.997 1.997 score TVD_SPACE_RATIO_MINFP 2.746 2.746 2.746 2.746 score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000 score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000 score URI_DQ_UNSUB 1.507 1.991 1.507 1.991 score URI_GOOGLE_PROXY 2.497 2.497 2.497 2.497 score URI_ONLY_MSGID_MALF 0.001 0.034 0.001 0.034 score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000 score URI_PHISH 2.085 1.685 2.085 1.685 score URI_TRY_3LD 0.001 0.001 0.001 0.001 score URI_TRY_USME 2.997 2.996 2.997 2.996 score URI_WP_DIRINDEX 2.996 1.000 2.996 1.000 score URI_WP_HACKED 2.996 2.498 2.996 2.498 score URI_WP_HACKED_2 1.997 1.997 1.997 1.997 score XM_PHPMAILER_FORGED 2.397 2.245 2.397 2.245 score YOU_INHERIT 2.696 2.696 2.696 2.696