blob: db82be07f54195f1405fc9267c6a61dd4dabcc48 [file] [log] [blame]
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
score AC_HTML_NONSENSE_TAGS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS12 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS2 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS4 2.851 1.000 2.851 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FRM_MNY 1.164 1.041 1.164 1.041
score ADVANCE_FEE_2_NEW_MONEY 1.997 0.001 1.997 0.001
score ADVANCE_FEE_3_NEW 3.497 3.499 3.497 3.499
score ADVANCE_FEE_3_NEW_MONEY 3.196 3.100 3.196 3.100
score ADVANCE_FEE_4_NEW_FORM 2.699 1.218 2.699 1.218
score ADVANCE_FEE_4_NEW_MONEY 2.696 2.799 2.696 2.799
score ADVANCE_FEE_5_NEW 4.096 2.623 4.096 2.623
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.001 0.001 0.001
score ADVANCE_FEE_5_NEW_MONEY 3.396 3.299 3.396 3.299
score AXB_XMAILER_MIMEOLE_OL_024C2 0.991 1.243 0.991 1.243
score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.824 1.923 0.824 1.923
score BODY_EMPTY 2.996 2.999 2.996 2.999
score BODY_SINGLE_URI 1.255 0.001 1.255 0.001
score BODY_SINGLE_WORD 1.102 1.076 1.102 1.076
score BODY_URI_ONLY 0.240 0.999 0.240 0.999
score BOGUS_MSM_HDRS 1.000 1.000 1.000 1.000
score CANT_SEE_AD 2.996 2.999 2.996 2.999
score CK_HELO_DYNAMIC_SPLIT_IP 0.111 0.001 0.111 0.001
score CK_HELO_GENERIC 0.249 0.250 0.249 0.250
score CN_B2B_SPAMMER 2.696 2.700 2.696 2.700
score COMMENT_GIBBERISH 1.499 1.499 1.499 1.499
score COMPENSATION 1.498 1.092 1.498 1.092
score DATE_IN_FUTURE_96_Q 3.096 2.999 3.096 2.999
score DEAR_BENEFICIARY 3.798 3.999 3.798 3.999
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
score FILL_THIS_FORM 0.001 0.001 0.001 0.001
score FORM_FRAUD 0.999 0.999 0.999 0.999
score FORM_FRAUD_3 2.796 2.629 2.796 2.629
score FORM_FRAUD_5 2.963 2.900 2.963 2.900
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
score FOUND_YOU 1.000 1.000 1.000 1.000
score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.001 0.001 0.001
score FROM_IN_TO_AND_SUBJ 0.970 0.717 0.970 0.717
score FROM_MISSPACED 0.001 0.001 0.001 0.001
score FROM_MISSP_FREEMAIL 3.993 0.001 3.993 0.001
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
score FROM_MISSP_REPLYTO 1.599 0.001 1.599 0.001
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
score FROM_MISSP_TO_UNDISC 2.407 3.199 2.407 3.199
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
score FSL_HELO_BARE_IP_2 1.498 1.500 1.498 1.500
score FSL_MIME_NO_TEXT 0.001 0.001 0.001 0.001
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
score FUZZY_CLICK_HERE 1.141 1.951 1.141 1.951
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
score GOOG_REDIR_SHORT 2.796 2.799 2.796 2.799
score HDRS_LCASE 0.099 0.100 0.099 0.100
score HDRS_MISSP 1.794 1.999 1.794 1.999
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
score HELO_MISC_IP 0.249 0.250 0.249 0.250
score HEXHASH_WORD 2.355 0.001 2.355 0.001
score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
score HK_RANDOM_FROM 0.998 0.999 0.998 0.999
score HK_SCAM_N1 1.555 3.099 1.555 3.099
score HK_SCAM_N13 2.397 2.599 2.397 2.599
score HK_SCAM_N2 2.996 2.405 2.996 2.405
score HTML_FONT_TINY 1.499 1.499 1.499 1.499
score HTML_OFF_PAGE 1.997 1.000 1.997 1.000
score IMG_DIRECT_TO_MX 0.001 1.305 0.001 1.305
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
score LONG_HEX_URI 1.000 1.000 1.000 1.000
score LONG_IMG_URI 0.553 0.001 0.553 0.001
score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
score LOTTO_AGENT 1.498 1.500 1.498 1.500
score LOTTO_DEPT 1.997 1.999 1.997 1.999
score LUCRATIVE 1.000 1.000 1.000 1.000
score MALFORMED_FREEMAIL 1.881 0.001 1.881 0.001
score MANY_SPAN_IN_TEXT 2.792 2.800 2.792 2.800
score MILLION_USD 0.001 0.001 0.001 0.001
score MIME_NO_TEXT 1.779 1.999 1.779 1.999
score MONEY_ATM_CARD 0.267 1.213 0.267 1.213
score MONEY_FORM 0.001 0.001 0.001 0.001
score MONEY_FRAUD_3 2.896 2.799 2.896 2.799
score MONEY_FRAUD_5 2.533 0.001 2.533 0.001
score MONEY_FRAUD_8 0.001 0.001 0.001 0.001
score MONEY_FROM_41 1.997 1.999 1.997 1.999
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
score MONEY_LOTTERY 2.539 1.839 2.539 1.839
score MSGID_NOFQDN1 2.393 0.001 2.393 0.001
score MSM_PRIO_REPTO 2.497 2.499 2.497 2.499
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
score NSL_RCVD_HELO_USER 1.004 0.001 1.004 0.001
score OBFU_DOC_ATTACH 2.696 2.599 2.696 2.599
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
score PHP_ORIG_SCRIPT 1.000 1.000 1.000 1.000
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
score PP_MIME_FAKE_ASCII_TEXT 0.998 0.001 0.998 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
score RCVD_IN_MSPIKE_BL 0.001 0.010 0.001 0.010
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
score RCVD_IN_MSPIKE_H3 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_L3 0.001 2.300 0.001 2.300
score RCVD_IN_MSPIKE_L4 0.001 2.399 0.001 2.399
score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_ZBI 0.001 2.399 0.001 2.399
score RISK_FREE 2.796 2.699 2.796 2.699
score RP_MATCHES_RCVD -1.643 -1.243 -1.643 -1.243
score SINGLETS_LOW_CONTRAST 4.095 2.642 4.095 2.642
score SPOOFED_FREEM_REPTO 2.498 2.499 2.498 2.499
score SPOOFED_FREEM_REPTO_CHN 1.000 1.000 1.000 1.000
score STATIC_XPRIO_OLE 1.997 1.999 1.997 1.999
score STOCK_LOW_CONTRAST 2.497 2.348 2.497 2.348
score STOCK_TIP 1.000 1.000 1.000 1.000
score STYLE_GIBBERISH 3.392 2.818 3.392 2.818
score SUBJ_ATTENTION 0.498 0.499 0.498 0.499
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
score TEQF_USR_POLITE 1.997 2.000 1.997 2.000
score THIS_AD 1.289 1.693 1.289 1.693
score TO_EQ_FM_DIRECT_MX 2.598 1.108 2.598 1.108
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.098 0.055 0.098 0.055
score TO_NO_BRKTS_FROM_MSSP 0.001 0.001 0.001 0.001
score TO_NO_BRKTS_HTML_IMG 0.001 0.918 0.001 0.918
score TO_NO_BRKTS_HTML_ONLY 1.998 1.999 1.998 1.999
score TO_NO_BRKTS_MSFT 2.497 2.499 2.497 2.499
score TO_NO_BRKTS_NORDNS_HTML 0.001 0.650 0.001 0.650
score TO_NO_BRKTS_PCNT 2.497 2.499 2.497 2.499
score TVD_SPACE_ENCODED 2.497 2.500 2.497 2.500
score TVD_SPACE_ENC_FM_MIME 0.983 1.999 0.983 1.999
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
score UPGRADE_MAILBOX 2.596 1.992 2.596 1.992
score URI_DQ_UNSUB 2.398 0.001 2.398 0.001
score URI_ONLY_MSGID_MALF 3.595 1.696 3.595 1.696
score URI_OPTOUT_3LD 1.997 2.000 1.997 2.000
score URI_PHISH 1.000 1.000 1.000 1.000
score URI_TRY_3LD 0.100 0.001 0.100 0.001
score URI_WPADMIN 3.795 3.699 3.795 3.699
score URI_WP_DIRINDEX 2.996 2.999 2.996 2.999
score URI_WP_HACKED 2.996 2.999 2.996 2.999
score URI_WP_HACKED_2 1.998 1.999 1.998 1.999
score US_DOLLARS_3 1.012 0.514 1.012 0.514
score XPRIO 1.997 2.000 1.997 2.000
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000