# Using score set 1 logs for revision 1222937 from: # ham-net-bb-guenther_fraud.log ham-net-bb-jhardin.log ham-net-bb-jhardin_fraud.log ham-net-bb-jm.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bernie-mix.log ham-net-danmcdonald.log ham-net-darxus-trap.log ham-net-darxus.log ham-net-grenier.log ham-net-jarif.log ham-net-llanga.log ham-net-wt-ackbar.log ham-net-wt-en1.log ham-net-wt-en2-flh.log ham-net-wt-en3.log ham-net-wt-hamtrap.log ham-net-wt-homeone.log ham-net-wt-jp1.log ham-net-zmi.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin.log spam-net-bb-jhardin_fraud.log spam-net-bb-jm.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bernie-mix.log spam-net-danmcdonald.log spam-net-darxus-trap.log spam-net-darxus.log spam-net-grenier.log spam-net-jarif.log spam-net-llanga.log spam-net-wt-ackbar.log spam-net-wt-en1.log spam-net-wt-en2-flh.log spam-net-wt-en3.log spam-net-wt-hamtrap.log spam-net-wt-homeone.log spam-net-wt-jp1.log spam-net-zmi.log score ADVANCE_FEE_2_NEW_FORM 0.001 score ADVANCE_FEE_2_NEW_FRM_MNY 0.001 score ADVANCE_FEE_2_NEW_MONEY 0.046 score ADVANCE_FEE_3_NEW 0.736 score ADVANCE_FEE_3_NEW_FORM 0.234 score ADVANCE_FEE_3_NEW_FRM_MNY 1.887 score ADVANCE_FEE_3_NEW_MONEY 0.001 score ADVANCE_FEE_4_NEW 0.001 score ADVANCE_FEE_4_NEW_FORM 1.574 score ADVANCE_FEE_4_NEW_FRM_MNY 1.762 score ADVANCE_FEE_4_NEW_MONEY 0.001 # force non-zero score ADVANCE_FEE_5_NEW 2.621 score ADVANCE_FEE_5_NEW_FORM 0.323 score ADVANCE_FEE_5_NEW_FRM_MNY 1.879 score ADVANCE_FEE_5_NEW_MONEY 2.222 score ANY_PILL_PRICE 3.319 score AXB_HELO_HOME_UN 2.503 score CK_HELO_DYNAMIC_SPLIT_IP 0.001 score CN_B2B_SPAMMER 1.557 score CTYPE_NULL 1.353 score DATE_IN_FUTURE_96_Q 2.360 score DATE_IN_FUTURE_Q_PLUS 2.699 score DEAR_BENEFICIARY 1.907 score DECEASED_NO_ML 0.001 score END_FUTURE_EMAILS 2.053 score FB_GREAT_BEST_SEX 2.699 score FB_STAMINA_IN_BED 2.246 score FILL_THIS_FORM 0.001 score FORGED_RELAY_MUA_TO_MX 0.001 score FORM_FRAUD_3 1.884 score FORM_FRAUD_5 0.001 # force non-zero score FROM_12LTRDOM 1.452 score FROM_IN_TO_AND_SUBJ 0.805 score FROM_MISSPACED 2.940 score FROM_MISSP_DKIM 1.560 score FROM_MISSP_DYNIP 0.421 score FROM_MISSP_EH_MATCH 0.822 score FROM_MISSP_FREEMAIL 0.226 score FROM_MISSP_MSFT 2.542 score FROM_MISSP_NO_TO 0.140 score FROM_MISSP_REPLYTO 0.290 score FROM_MISSP_SPF_FAIL 0.001 score FROM_MISSP_TO_UNDISC 0.190 score FROM_MISSP_URI 0.001 score FROM_MISSP_USER 3.356 score FROM_UNBAL1 2.699 score FRT_ERECTION 2.299 score FR_DOT_FEVER_5 2.899 score FSL_BOTSPAM_1 1.472 score FSL_CTYPE_WIN1251 1.999 score FSL_MID_419 0.116 score FSL_MISSP_REPLYTO 0.507 score FSL_NEW_HELO_USER 0.001 score FSL_UA 0.582 score FSL_XM_419 0.730 score GAPPY_HTML 1.065 score GAPPY_PHONE_NA 1.873 score HELO_MISC_IP 0.001 score HELO_NO_DOMAIN 0.001 # force non-zero score HK_LOTTO_NAME 0.150 score HK_NAME_FM_MR_MRS 2.699 score HK_NAME_FREE 0.500 score HK_NAME_MR_MRS 2.699 score HK_PNIS 0.434 score HK_SCAM_N1 0.536 score HK_SCAM_N15 0.001 score HK_SCAM_N2 2.886 score HK_SCAM_N3 2.499 score HK_SCAM_N8 1.793 score JM_FAKE_PSMTP_RCVD 0.974 score KB_FORGED_MOZ4 0.963 score KHOP_DYNAMIC 0.646 score LOTS_OF_MONEY 0.001 # force non-zero score LOTTO_AGENT 2.710 score MANY_PILL_PRICE 4.008 score MANY_SPAN_IN_TEXT 2.903 score MONEY_ATM_CARD 0.001 # force non-zero score MONEY_FORM 0.077 score MONEY_FRAUD_3 0.001 score MONEY_FRAUD_5 2.012 score MONEY_FRAUD_8 0.001 score MONEY_FROM_MISSP 1.524 score MONEY_LOTTERY 0.001 score MSGID_WSP_TRAIL 1.212 score NSL_RCVD_FROM_USER 0.001 score NSL_RCVD_HELO_USER 2.478 score OBFU_ATTACH_MISSP 0.937 score OBFU_TEXT_ATTACH 2.260 score RISK_FREE 3.899 score RP_8BIT 1.348 score RP_MATCHES_RCVD -1.288 score S25R_4 0.041 score SCANNED_EXTERNAL 3.099 score SINGLE_HEADER_1K 0.262 score SINGLE_HEADER_2K 3.149 score SINGLE_HEADER_3K 2.571 score SINGLE_HEADER_4K 3.199 score STYLE_GIBBERISH 3.875 score SUBJ_OBFU_PUNCT_MANY 1.461 score TINY_FLOAT 0.349 score TO_EQ_FM_DIRECT_MX 1.090 score TO_EQ_FM_DOM_SPF_FAIL 1.645 score TO_EQ_FM_HTML_DIRECT 2.478 score TO_EQ_FM_HTML_ONLY 3.157 score TO_EQ_FM_SPF_FAIL 1.354 score TO_IN_SUBJ 2.597 score TO_NO_BRKTS_DIRECT 2.458 score TO_NO_BRKTS_DYNIP 0.001 score TO_NO_BRKTS_FROM_MSSP 0.001 score TO_NO_BRKTS_HTML_ONLY 1.262 score TO_NO_BRKTS_MSFT 1.163 score TVD_PH_BODY_META 1.983 score URI_OBFU_TLD 0.443 # in active.list but have no hits in recent corpus score CK_HELO_DYNAMIC_POOL 0.001 # force non-zero score URIBL_SBL_A 0.001 # force non-zero