#
# Nigerian "419" (advance fee fraud) scam detection by mike@clueby4.org. Some
# rules are from http://www.rulesemporium.com/rules/99_sare_fraud_post25x.cf
# so please don't use both rulesets. This one here should be able to catch most
# nigerian scam.
#
# A few rules that we don't weight into the score, but want to see
# in order for the rules to trigger at all
#

body     __NIG_YOURSHARE        /\b([1-5][0-9](\.[0-9])? ?([%]|percent)|percentage +(of +the +total|for +your?|you +wish|you +want)|your +comm?iss?ion +for|comm?iss?ion +for +your|your +share,? +as +(a +|the +)?(compensation|commiss?ion|remunerr?ation)|y?our +share +of +the +(funds?|monies)|owner +of +the +account ?,? +will +be +compensated|you\b[^.]{0,99}\bentitled\b[^.]{0,99}\b(share|part)\b[^.]{0,99}\b(money|monies|funds|argent)|tell(ing)? +(us|me)\b[^.]{0,99}\byou +(would +)?(want|wish|require)\b|remunerr?ation +for +your +(services?|assistance)|be paid to you|claim a sum of|family asset|how the money will be split|offer you a generous compensation|to compensate you with|for your compensation|win cash|you are.{0,8}winner|(?:your|a) (?:pr[i1]ze|share shall be|sharing ratio|winning pay[- ]?out|sum pay[- ]?out)|deduct \$)/i
body     __NIG_FROM_SEC_COMP    /\b(?:from +the|through +a)\b[^.]{0,99}\bsecurity[^.]{0,20}company\b/i
body     __NIG_DOLLARS          /(\bdollars?\b|pounds?|\busd(ollars)?([0-9]|\b)|\bus\$|\$[0-9,.]{6,}|\$[0-9].{0,8}[mb]illion|\$[0-9.,]{2,10} ?m|\beuros?\b|u[.]?s[.]? [0-9.]+ m|contract paye?ment|paye?ment made through you|(?:big amount|a lot) +of +money|interest of investing in your country|\bus[0-9]|united state bills)/i
body     __NIG_MISC_MONEYTALK   /\b(?:bank|cash|compagnie de s.?.?curit.?.?|securit(y|ies)|funds?\b|somme d'argent|amount of money|paye.?.?ments.?.?|Western Union|deposits?|monn?ies|millions are won|inherr?itt?(ed|ance)|(?:winning|prize) amount|star prize of|financial breakthrough|receive payments|sum pay out|total prize money)/i
body	 __NIG_MISC_LOTTERY	/\b(?:(?:international|luckyday|overseas stake|promo|world).{1,15}lott(?:o|ery)|lott(?:o|ery) (?:co,?ordinator|international|online)|intl loteria|Internet Lottery Award|prize transfer agent|scientific game promo|(?:award|winning).{0,10} (?:notification|details)|golden strike|FREE LOTTO COMPANY|EU LOTTO AWARD|LOTTO WINNINGS|AWARD NOTICE|LUCKYSTAR)/i
body	__NIG_LOTTERY		/LOTTERY/
body	OFFSHORE_SCAM           /\boffshore\b.{0,20}(?:credit card|companies|account|financ|websites?)/i
body	 __NIG_OFFSHORE		/\b(?:over-? *seas?|off-? *shore)\b/i

# mail domains that spammers like ("\.co" patterns match .com, .co.uk and .co.in and possibly more)
header   __NIG_ISP_HDR    ALL =~ /[.@](netscape\.net|hotmail\.com|voila\.fr|telstra\.co|tiscali\.(co|nl)|[a-z][a-z]\.za|zwallet\.com|yahoo\.(co|fr)|bigpond\.co|fsmail\.net|indiatimes\.com|libero\.it|postino\.it|mmail\.com)/i
uri      __NIG_ISP_URI           /[.@](netscape\.net|hotmail\.com|voila\.fr|telstra\.co|tiscali\.(co|nl)|[a-z][a-z]\.za|zwallet\.com|yahoo\.(co|fr)|bigpond\.co|fsmail\.net|indiatimes\.com|libero\.it|postino\.it|mmail\.com)/i
meta     __NIG_ISP  __NIG_ISP_HDR || __NIG_ISP_URI

#
# Without this base, we have no match !
#
meta     __NIG_BASE             (__NIG_MISC_MONEYTALK || __NIG_DOLLARS) && (__NIG_DOLLARS || __NIG_US_DOLLARS || NA_DOLLARS || __NIG_UNCLAIMED || __NIG_BIZ_PARTNERSHIP || __NIG_REPRESENT + __NIG_SREPRESENT) && (__NIG_MISC_LOTTERY || __NIG_LOTTERY || __NIG_YOURSHARE || __NIG_CHARITY || __NIG_FROM_SEC_COMP || __NIG_NAME_IS_MR || __NIG_HONESTY || __NIG_KNOWNNAME || __NIG_KNOWNNAME_MAIL || __NIG_NEXT_OF_KIN || __NIGERIAN_BODY_38 || __NIG_ISP || __NIG_OFFSHORE || __NIG_COMPANY_NAME)

#
# Nigerian Countries
#
body     __NIG_COUNTRY          /\b(nigeria?|liberia?|south +africa?|algeria|bangladesh|botswana|ivory +coast|c[oô]te +d['´]? ?ivoire|cuba|dubai|kuwaiti?|sierr?a[- ]leonn?e|zimbabwe(an)|angola|kenya|congo|benin|cotonou|russia|west africa|zambia|u\.a\.e)|abidjan\b/i
#
# New Scam Lands
#
body	__NIG_COUNTRY_NEW		/(?:China|Korea)/i
meta	__NIG_COUNTRY2			(__NIG_COUNTRY_NEW + (__NIG_REPRESENT || __NIG_SREPRESENT) == 2)

#
# Rules counted toward the subscore
#
body	__NIG_KNOWNNAME		/\s(?:abacha|abubakar|ajobola|anigala|arap moi|aziz|bubenik|bello|bassole|dongo|dole|ewaen|ebub[ue]|egobia|ekpontu|gebarel|gezi|goodman|guei|gu[eéè]|gumbeze|ibiam|kabbahs|kabila|kamara|kazeem|khordokovsky|koffi|jude ezeh|margai|massaquoi|mbeki|mobutu|momoh|mubune|mugabe|muzenda|ngobessi|obasanjo|okafor|okoko|olonga|olumuyiwa|omo(?:nigho|rodion)|oyofo|rilwanu|savimbi|sese[- ]?seko|serena|shabangu|simpson|soludu|tarlor|taylor|yukos|zaid|zwinginna|chan fung)\b/i
body     __NIG_KNOWNNAME_MAIL   /(taylor|soludu|serena|abacha|gu[eéè]i|sese[- ]?seko|kabila|koffi|khordokovsky|yukos|ekpontu|egobia|ANTHONY|BELLO|Ezeh|Shabangu|makezela|okoko|gobessi|OYOFO|usman|hameed)\@/i
body     __NIG_UC_SUBJ_WORD     /\b(INVESTMENT|CONFIDENTIAL|PROPOSITION|PARTNERSHIP|URGENT(LY)?|TRANSACTION|BUSS?INESS|ASSISTANCE|NOTIFICATION +OF +PAYMENT|REPRESENTATIVE|WESTERN UNION MONEY TRANSFER|Award notice|LOTTO MONEY|CONTRACT PAYMENT|EMPLOYMENT MAIL|YOU HAVE WON|OFFICIAL PRIZE NOTICE|JOB OFFER|OFFSHORE REPRESENTATIVE)\b/
body	 __NIG_PICTURE		/picture of [^\.]{0,20} money/i
body	 __NIG_REPRESENT	/(?:searching for representatives?|(?:DISTRIBUTOR|RECEIVING) OFFICER|HONORABLE CONTRACTOR|(?:work as|be) our representative|invest in your (?:line of business|country))/i
header	 __NIG_SFROM		Subject =~ /(?:From|De):? /i
header	 __NIG_SLOTTERY		Subject =~ /(?:Lottery|ballot)/i
header	 __NIG_SREPRESENT	Subject =~ /REPRESENTATIVE|INVESTMENT|JOB (?:OPPORTUNITY|OFFER)|REP!/i
body	 __NIG_IMPORT		/IMPORT (?:&|and) EXPORT/i
body	 __NIG_TRANSBUS		/(?:transacting business|legitimate transactions|export +(?:and|\&) +import)/i
body	 __NIG_REASON		/(?:reason why i am contacting you|contacting you because)/i
body	 __NIG_FRAUD		/\b(?:mafia gang|steal from|fraud)\b/i
body     __NIG_COMPANY_NAME	/\b((?:bank|government) +(of +)nigeria|central +bank +of|trust +bank|apex +bank|bank of valetta|amalgamated +bank|bank +menatep|security +company|Cayman +Islands|allied +irish +bank|amsterdam +clearing +office|department +of +mineral +resources +and +energy|(?:PROMOTIONS|PRIZE) AWARD DEPARTMENT|Centre Charities Lottery|global +oil +corporation|mining +corporation|ministry +of +(?:oil +(?:and +)?mini?eral)|national +petroleum +corporation|prize +award +dept|security +.{1,10} +finance +firm +in +amsterdam|sierr?a +leonn?e +mining)\b/i
body     __NIG_GOD              /\b(?!mon dieu|my god).{4}(god|(our|the) +lord|jesus|allah|dieu)\b/i
body	 __NIG_SURPRISE		/\b(?:You may be sur?prised to receive this letter from me|this (?:letter|mail) (?:(?:may|will) come to you as|will be) a sur?prise|big surprise to get my mail|(?:may i first|to) introduce my ?self)\b/i
body	 __NIG_PAPERWORK	/(?:all necessary legal documents|covering documents|international passport|legal official protocol|letter of authority|Next of Kin Payment Application Form|provide immediately|writing this letter to solicit|vital documents)/i
body     __NIG_HEALTH           /\b(?:health(?![- ](?:service|care))|sickness|seriously injured|illness|heart +attack|arrêt +cardiaque)\b/i
body     __NIG_CHARITY          /\b(charit(y|ies)|orphanages?|widows?|church(es)?)\b/i
body	 __NIG_FAMILY		/\b(?:family|husband|relatives?|my late (?:husband|wife|brother|uncle|aunt|father|mother) (?:was|is|had|has)|locate(?: .{1,20})? extended relative|next of kin|the (?:eldest|oldest|youngest|first) son|the (?:wife|heir) (?:to|of))/i
body     __NIG_RESP_IMMEDIAT	/\b((respond|reply|contact) +(urgently|immediately)|(urgent|immediate|earliest|swift) +(reply|response)|within a limited time frame|most urgent|IMMEDIATE CONTRACT PAYMENT)\b/i
body     __NIG_RESP_KINDLY	/\b(?:please kindly reply|reply me kindly please)\b/i
body     __NIG_NAME_IS_MR       /\b(?:(my +name +is|i +am) +(mrs?|engr|barrister|dr|prince(ss)?)[. ]|Je suis (Monsieur|Mme))/i
body     __NIG_NAME_IS_OF       /\b(my +name +is|i +am).{2,20} of /i
body     __NIG_OVERINVOICED     /\bover-? *(invoiced?|cost(s|ing)?)\b/i
body     __NIG_MR_SOMETHING_UC  /\b(MRS?|MISS)\.? +[A-Z]+\b/
body     __NIG_MINISTRY_OF      /\b(ministry|departe?ment) +of\b/i
body	 __NIG_IAMTHE		/\bI am the .{1,20}(?:manager|director|president|head|chairman|minister|prince)/i
body     __NIG_ASSASSINATED     /\b(ass?ass?inat(ed|ion)|murder(e?d)?|kill(ed|ing)\b[^.]{0,99}\b(war +veterans|rebels?))\b/i
body     __NIG_LATE_SOMETHING   /\b(?:(of|the) +late +mrs?|(son|daughter|wife) +of +late|late +(father|husband)s?|le +(seul +)fils.{1,15}chef)\b/i
body     __NIG_ASYLUM           /\b(ass?ylum|exiled?|refugee|imprison(ed)?)\b/i
body     __NIG_FORMER_PREZ      /\b((former|ancien|ex-?|late) ?(?:president|head|chef)|(former|formal|past|was +(also +)?the) +([a-z]+ )?(president|royal|chairman|finance +minister|minister|director|chief +of|head +of)|ex-military +head +of +state|principal advocate and solicitor)\b/i
body     __NIG_FOREIGN          /\bforeign(er?)\b/i
body	 __NIG_TRADER		/\b(?:(?:diamonds?|oil) +trader|(?:millionaire|white|black|zimbabwean) farmers?)\b/i
uri      __NIG_NEWSREF          /\/\/(([a-z]+\.)cnn\.com|([a-z]+\.)bbc\.co\.uk|([a-z]+\.)guardian\.co\.uk|www\.state\.gov)\//i
body     __NIG_NEXT_OF_KIN      /\b(next +of +kin|beneficiar(y|ies))\b/i
body     __NIG_DECEASED         /\b(?:accident|la mort|deceased|death|cancer|disease|murder|poison(?:ed|ing)|since the demise|killed|disaster|wreck|(?:auto(mobile)?|boat|car|plane|train).{1,7}(?:crash)|bomb blast)\b/i
body     __NIG_UNCLAIMED        /\b(?:unclaimed|deposited a consignment|claim accredited funds|won the lottery|lottery claims?|claim your win|contract claims?|claims? (?:officer|agent|department|processing)|(?:deceased|dormant) account|this (?:bond|account) .{1,20} dormant state|money left behind|file for your claim)\b/i
body     __NIG_TRANSFER_ABROAD  /\b(?:(funds|money|monies|bonds?).{1,15}moved?|assist.{1,20}receiving.{1,20}money|votre assistance pour transf.?.?rer|transfer(r?ing)?|relocate\b[^.]{0,99}\b(abroad|to +your +country|out +of +((the|our) +)?country|europe)|(?:transfer(r?ing)?|relocate)[^.]{0,9}(funds|money|monies)[^.]{0,99}(abroad|to +your +country|out +of +((the|our) +)?country|europe)|assist[^.]{0,9}transfer(r?ing)? (?:those|the|these|our) funds)\b/i
body     __NIG_MUTUAL_BENEFIT   /\bmutual +(cooperation|benefi(ts|cial)|(golden +)?opportunity)\b/i
body     __NIG_BIZ_PARTNERSHIP  /\b(business +(?:partner|relation)(s|ship)?|silent +partner(s|ship)?)\b/i
body     __NIG_YOUR_ACCOUNT     /\b(into|in|to) +your +account\b/i
body     __NIG_BARRISTER        /\bbarrister/i     # No ending \b to catch e.g. "barristerpeter@foo"
body     __NIG_CONFIDENTIAL     /\b(?:(absolute(ly)?|strictest|stric[tk]ly|urgent(ly)?|utterly|utmost|highly|very|topmost|extremely|extraordinarily)\b[^.]{0,99}\b(private|privacy|confiance|confidence|discree?t(ly)?|secre(cy|t)(ly)?|confiden(?:tial|tail|tiel)(l?y|ity)?)|can.{1,5} disclose exclusive data|keep this information confidential|discreetly give)\b/i
body	 __NIG_BUSINESS_A	/Business proposal/i
meta	 __NIG_SECRET_BIZ	(__NIG_BUSINESS_A + __NIG_CONFIDENTIAL == 2)
body     __NIG_BEFORE_HIS_DEATH /\b(of|before) +(his|the) +death\b/i
body     __NIG_BENEFICIARY      /\bben[ei]ficiary\b/i
body     __NIG_HONESTY          /\b(transparent +honesty|your +transparency|confidence +in +you|(reliable|reputable|trust-? *worthy) (person|individual)|you are (reliable|reputable|trust-? *worthy)|very reliable and responsible)/i
body     __NIG_YOUR_COUNTRY     /\b(in|to|visit)[\s\t ]*your[\s\t ]*country\b/i
body     __NIG_PRIVATE_EMAIL    /\b(confidential|private|alternate|alternative) +((e-? *)?mail)\b/i
body     __NIG_EXPENSES		/\b(disburse?(ment)?|incurr?(ed)?|remunerr?at(ed?|ion)|remm?itt?(ed|ance|ing)?)\b/i
body     __NIG_EXEC_TRANSACT    /\b(?:execution[\s\t ]*of|carrying[\s\t ]*out)[\s\t ]*(this[\s\t ]*|the[\s\t ]*)(whole[\s\t ]*)transaction\b/i
body     __NIG_CONFISCATE       /\b(confiscat(ed?|ing)|(funds?|accounts?|assets)\b[^.]{0,99}\b(frozen|seized))\b/i
body     __NIG_URGENT_SOMETHING /\burgent\b[^.]{0,99}\b(business|assistance|proposal|profitable|claim)/i
body     __NIG_SOLICIT          /\bsolicit(ing)? +(for +)?(your +)?(confiden|assist)/i
body     __NIG_THE_DESK_OF	/\b(?:the +desk +of|from +the +desk:)\b/i
body     __NIG_MORE_DETAILS      /(?:further details and instructions|more details regarding this)/i
body     __NIG_SECURING_FUNDS   /\b(?:secur(e|ing) +(the +)?(funds?|monies)|secure approval of the funds?|funds were deposited by)\b/i
body     __NIG_FURNISH_YOU      /\bfurnish +you +with\b/i
body     __NIG_AFFIDAVITS       /\baffidavits?\b/i
body     __NIG_AGENT		/\b(?:investment broker|registered financial security agent|financial consultant|(?:accredited|fiduciary) agent|barrister|(?:relationship|transaction|claims?) (?:officer|department)|AWARD AGENCY|(?:APPROVED|appointed) AGENT)\b/i
body     __NIG_RISK_FREE        /\b(no +(legal +)?risks?|completly legal|risk-? *free|free +of +risks?|100% +safe|free from .{1,15} of risk|you (?:shall|are) not be liable)\b/i
body     __NIG_MODALITIES       /\bmodalit(ies|y)\b/i
body     __NIG_PAYMENTS		/\bRECEIVE +(THIS +)PAYMENTS\b/i
body     __NIG_ASSIST_TRANSACT  /\b(?:assistance +(in|with) +(this +|the +)?|assist me to +)(transaction|transfer(r?ing)?)\b/i
body     __NIG_OPERATE_ACCT     /\boperat(e|ing)\b[^.]{0,99}\b(for(ei|ie)gn|off-? ?shore|over-? ?seas?) +(bank +)?accounts?\b/i
body     __NIG_US_DOLLARS       /\b(united +states +dollars|u\.? ?s\.? +dollars|north american dollars)\b/i
body     __NIG_GREETING         /\b(compliments? of the|(?:dear(est)?|hello) (?:friend|dear)|dear sir|yours faithfully|dearest|season'?s greetings|pleasant day[\.,])\b/i
body     __NIG_CONTACT_DETAILS  /(?:\byour\b[^.]{0,99}\b(contact (details|information)|(?:private|confidential) +(e?[- ]?mail|telephone|tel|phone|fax))|(?:email|phone).{1,20}tell you details|send .{1,10}detail .{1,10}contact|contact my secretary)\b/i
body     __NIG_FOUND		/(?:found your (?:ad?dress|name|company)|your.{1,10}(?:name|company|ad?dress) (?:was|has been) discovered)/i
body     __NIG_MOUNTAIN_O_CASH  /\b(?:(huge|enormous) +(cash +deposit|amount +of +money\b[^.]{0,99}\bdeposit(ed)?)|importante somme d'argent)\b/i
body     __NIG_PRIVATE_LAWYER   /\bprivate +lawyer\b/i
body     __NIG_POLITICAL	/\b(?:political +problems|civil +war|guerre civil|brutal +war|liberation +movement|(?:by the|vindictive).{1,15}government)\b/i
body     __NIG_LEGIT_BIZ        /\blegitimate (?:business(es)?|transaction)\b/i
body     __NIG_UNREACH_MON      /\b(?:can not|cannot|can't) reach the money\b/i
body     __NIG_REDIR_EMAIL      /\b(reply|respond)\b[^.]{0,50}\b(to|through)\b[^.]{0,50}\@\b/i
body	 __NIG_TICKET		/\b(?:attached to (the )ticket number|lotto code numbers?|winning (ticket )numbers?|winning coupon|email coupon number|lucky numbers)\b/i
body	 __NIG_FREELOTTO	/free ?lott(?:o|ery)/i
body	 __NIG_LOTTOCONGRATS	/CONGRATULATION/
body	 __NIG_LOTTOCHARITIES	/CHARITIES/
body	 __NIG_LOTTOPROMOTIONS	/PROMOTIONS/
body	 __NIG_LOTTOVIP		/lott(?:o|ery) (?:promotion|co-?o?rdinator)/i
body	 __NIG_LOTTORANDOM	/\b(?:(?:random|automated) +(?:computer|selection) +(?:ballot(ing)?|system)|computer.{1,3}ballot(ing)?.{1,3}system|scientific computer game|e-?mail randomly selected|SELECTED.{0,20}DATA BASE OF INTERNET E-?MAIL.{0,20}(?:USERS|ADDRESSES))\b/i
body	 __NIG_DEARWINNER	/\bdear (?:prize |lotto )?.{0,3}winner\b/i
body	 __NIG_LUCKYWINNER	/\blucky.{1,3}(?:prize |lotto )?.{1,3}winners?\b/i
body	 __NIG_WINCONFIDENT	/\bconfidentiality .{1,20}winners?\b/i
body	 __NIG_INT_EMAIL	/(?:international|world-?wide) e-?mails?\b/i
uri	 __NIG_LOTTO_URI	/(?:lotto|lottery)/i

# if the nig-country is missing, count -1
meta	 __NIG_COUNTRYMISS	((__NIG_COUNTRY || __NIG_COUNTRY2) + (__NIG_COUNTRY || __NIG_COUNTRY2) + __NIG_MISC_LOTTERY == 0)

#
# Words and sentences which try to build trust.
#
body	__NIG_TRUST_1		/mutual benefit/i
body	__NIG_TRUST_2		/confidence/i
body	__NIG_TRUST_3		/trust/i
body	__NIG_TRUST_4		/reliable partner/i
body	__NIG_TRUST_5		/seek your help/i
body	__NIG_TRUST_6		/genuine desperation/i
body	__NIG_TRUST_7		/(?:my|your) commission/i
body	__NIG_TRUST_8		/open your heart/i
body	__NIG_TRUST_9		/seek your kind/i
body	__NIG_TRUST_10		/blessing for your kindness/i
body	__NIG_TRUST_11		/writing in tears/i
body	__NIG_TRUST_12		/destiny/i
body	__NIG_TRUST_13		/very honest person/i
body	__NIG_TRUST_14		/high(?:est|ly)?|intuitive/i
body	__NIG_TRUST_15		/code of conduct/i
body	__NIG_TRUST_16		/smooth transaction/i
body	__NIG_TRUST_17		/transparent honesty/i
body	__NIG_TRUST_18		/(?:honest|honourable) (?:cooperation|partnership)/i
body	__NIG_TRUST_19		/confidential (?:communications|telephone numbers)/i
body	__NIG_TRUST_20		/(?:your assurance|I assuere you)/i
body	__NIG_TRUST_21		/honesty and trust/i
body	__NIG_TRUST_22		/(?:nothing to fear about|without fear)/i
body	__NIG_TRUST_23		/importance of your assistance/i
body	__NIG_TRUST_24		/have to be careful/i
body	__NIG_TRUST_25		/take my word/i
body	__NIG_TRUST_26		/write you .{1,20}in good faith/i

meta	__NIG_TRUSTSHIP_1 	(__NIG_SURPRISE + __NIG_RISK_FREE + __NIG_TRUST_1 + __NIG_TRUST_2 + __NIG_TRUST_3 + __NIG_TRUST_4 + __NIG_TRUST_5 + __NIG_TRUST_6 + __NIG_TRUST_7 + __NIG_TRUST_8 + __NIG_TRUST_9 + __NIG_TRUST_10 + __NIG_TRUST_11 + __NIG_TRUST_12 + __NIG_TRUST_13 + __NIG_TRUST_14 + __NIG_TRUST_15 + __NIG_TRUST_16 + __NIG_TRUST_17 + __NIG_TRUST_18 + __NIG_TRUST_19 + __NIG_TRUST_20 + __NIG_TRUST_21 + __NIG_TRUST_22 + __NIG_TRUST_23 + __NIG_TRUST_24 + __NIG_TRUST_25 + __NIG_TRUST_26 >= 3)

meta	__NIG_TRUSTSHIP_2	(__NIG_SURPRISE + __NIG_RISK_FREE + __NIG_TRUST_1 + __NIG_TRUST_2 + __NIG_TRUST_3 + __NIG_TRUST_4 + __NIG_TRUST_5 + __NIG_TRUST_6 + __NIG_TRUST_7 + __NIG_TRUST_8 + __NIG_TRUST_9 + __NIG_TRUST_10 + __NIG_TRUST_11 + __NIG_TRUST_12 + __NIG_TRUST_13 + __NIG_TRUST_14 + __NIG_TRUST_15 + __NIG_TRUST_16 + __NIG_TRUST_17 + __NIG_TRUST_18 + __NIG_TRUST_19 + __NIG_TRUST_20 + __NIG_TRUST_21 + __NIG_TRUST_22 + __NIG_TRUST_23 + __NIG_TRUST_24 + __NIG_TRUST_25 + __NIG_TRUST_26 >= 6)

#
# Words that show how 'religous' the writer claims to be.
#
body	__NIG_GOD_1		/goodwill and continued prayer/i
body	__NIG_GOD_2		/call a prayer line/i
body	__NIG_GOD_3		/god gives .{1,10}second chance/i
body	__NIG_GOD_4		/the wish of god/i
body	__NIG_GOD_5		/true christian/i
body	__NIG_GOD_6		/wealth to god/i
body	__NIG_GOD_7		/jesus is yours/i
body	__NIG_GOD_8		/pray daily/i
body	__NIG_GOD_9		/new christian convert/i
body	__NIG_GOD_10		/money.{1,15}give.{1,15}ministry/i

meta	__NIG_RELIGIOUS_1	(__NIG_GOD_1 + __NIG_GOD_2 + __NIG_GOD_3 + __NIG_GOD_4 + __NIG_GOD_5 + __NIG_GOD_6 + __NIG_GOD_7 + __NIG_GOD_8 + __NIG_GOD_9 + __NIG_GOD_10 >= 2)
meta	__NIG_RELIGIOUS_2	(__NIG_GOD_1 + __NIG_GOD_2 + __NIG_GOD_3 + __NIG_GOD_4 + __NIG_GOD_5 + __NIG_GOD_6 + __NIG_GOD_7 + __NIG_GOD_8 + __NIG_GOD_9 + __NIG_GOD_10 >= 5)

#
# Typical words in the body
#
body	__NIG_CONF_1		/require from you/i
body	__NIG_CONF_2		/(?:Full (and Official )?Names?|Your +(full)? +name|Names in full)/i
body	__NIG_CONF_3		/Address/i
body	__NIG_CONF_4		/\b(?:Date of Birth|marital status|Sex|Age)\b/i
body	__NIG_CONF_5		/(?:Telephone|Phone)/i
body	__NIG_CONF_6		/(?:Fax numbers?|fax)/i
body	__NIG_CONF_7		/(?:receipt|confirmation)/i
body	__NIG_CONF_8		/(?:reply to my other account|get back to me on this e-?mail)/i
body	__NIG_CONF_9		/Reference (?:Number|and)/i
body	__NIG_CONF_10		/Batch (?:Number|File Code)/i
body	__NIG_CONF_11		/Profession/i
body	__NIG_CONF_12		/Working{1,10}passport/i
body	__NIG_CONF_13		/ticket number/i
body	__NIG_CONF_14		/As soon as this information is received/i

meta	__NIG_CONFIRM_1		(__NIG_CONF_1 + __NIG_CONF_2 + __NIG_CONF_3 + __NIG_CONF_4 + __NIG_CONF_5 + __NIG_CONF_6 + __NIG_CONF_7 + __NIG_CONF_8 + __NIG_CONF_9 + __NIG_CONF_10 + __NIG_CONF_11 + __NIG_CONF_12 + __NIG_CONF_13 + __NIG_CONF_14 >= 4)
meta	__NIG_CONFIRM_2		(__NIG_CONF_1 + __NIG_CONF_2 + __NIG_CONF_3 + __NIG_CONF_4 + __NIG_CONF_5 + __NIG_CONF_6 + __NIG_CONF_7 + __NIG_CONF_8 + __NIG_CONF_9 + __NIG_CONF_10 + __NIG_CONF_11 + __NIG_CONF_12 + __NIG_CONF_13 + __NIG_CONF_14 >= 7)

#
# Words that are significant for false positives.
#
body	__NIG_MIN_S1		/Conferencing/i
body	__NIG_MIN_S2		/registrant/i
body	__NIG_MIN_S3		/Regulation/i
body	__NIG_MIN_S4		/Summary/i
body	__NIG_MIN_S5		/Report/i
body	__NIG_MIN_S6		/Hedge funds/i
body	__NIG_MIN_S7		/speakers/i
body	__NIG_MIN_S8		/Fund Services/i
body	__NIG_MIN_S9		/Foundation/i
body	__NIG_MIN_S10		/competition/i
body	__NIG_MIN_S11		/strategies/i
body	__NIG_MIN_S12		/(?:Nasdaq|Dow Jones)/i
body    __NIG_MIN_S13		/intraday/i
body    __NIG_MIN_S14		/booking/i
body	__NIG_MIN_S15		/\bAsset\b/i
body    __NIG_MIN_S16		/(?:Daily|Weekly) Newsletter/i
body    __NIG_MIN_S17		/Disclaimer/i
body    __NIG_MIN_S18		/Interview/i
body    __NIG_MIN_S19		/Reuters/i
body    __NIG_MIN_S20		/Copyright/i
body    __NIG_MIN_S21		/All Rights Reserved/i
header	__NIG_MIN_S22		Subject =~ /Daily News/i
body    __NIG_MIN_S23		/pension funds/i


meta	__NIG_MIN_1		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 1)
meta	__NIG_MIN_2		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 2)
meta	__NIG_MIN_3		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 3)
meta	__NIG_MIN_4		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 4)
meta	__NIG_MIN_5		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 5)
meta	__NIG_MIN_6		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 6)
meta	__NIG_MIN_7		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 7)
meta	__NIG_MIN_8		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 8)
meta	__NIG_MIN_9		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 == 9)
meta	__NIG_MIN_10		(__NIG_MIN_S1 + __NIG_MIN_S2 + __NIG_MIN_S3 + __NIG_MIN_S4 + __NIG_MIN_S5 + __NIG_MIN_S6 + __NIG_MIN_S7 + __NIG_MIN_S8 + __NIG_MIN_S9 + __NIG_MIN_S10 + __NIG_MIN_S11 + __NIG_MIN_S12 + __NIG_MIN_S13 + __NIG_MIN_S14 + __NIG_MIN_S15 + __NIG_MIN_S16 + __NIG_MIN_S17 + __NIG_MIN_S18 + __NIG_MIN_S19 + __NIG_MIN_S20 + __NIG_MIN_S21 + __NIG_MIN_S22 + __NIG_MIN_S23 + __NIG_MIN_S24 + __NIG_MIN_S25 >= 10)

#
# Now count how many of these rules actually matched
# (How many of these do we really need to reach an acceptably low FP rate?)
#

meta     NIGERIAN_3   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) == 3 )

meta     NIGERIAN_4   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) == 4 )

meta     NIGERIAN_5   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) == 5 )

meta     NIGERIAN_6   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) == 6 )

meta     NIGERIAN_7   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) == 7 )

meta     NIGERIAN_8   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) == 8 )

meta     NIGERIAN_9   __NIG_BASE && (SUBJ_ALL_CAPS + __NIG_MISC_LOTTERY + __NIG_TICKET + __NIG_FREELOTTO + __NIG_LOTTOCONGRATS + __NIG_LOTTOCHARITIES + __NIG_LOTTOPROMOTIONS + __NIG_DEARWINNER + __NIG_LUCKYWINNER + __NIG_LOTTORANDOM + __NIG_LOTTOVIP + __NIG_WINCONFIDENT + __NIG_INT_EMAIL + __NIG_SURPRISE + __NIGERIAN_BODY_36 + __NIGERIAN_BODY_37 + __NIG_TRUSTSHIP_1 + __NIG_TRUSTSHIP_2 + __NIG_RELIGIOUS_1 + __NIG_RELIGIOUS_2 + __NIG_CONFIRM_1 + __NIG_CONFIRM_2 + __NIG_GOD + __NIG_SFROM + __NIG_SLOTTERY + __NIG_HEALTH + __NIG_CHARITY + __NIG_FAMILY + __NIG_RESP_IMMEDIAT + __NIG_RESP_KINDLY + __NIG_NAME_IS_MR + __NIG_NAME_IS_OF + __NIG_NIGERIAN_ISP + __NIG_MR_SOMETHING_UC + __NIG_MINISTRY_OF + __NIG_ASSASSINATED + __NIG_ASYLUM + __NIG_FORMER_PREZ + __NIG_FOREIGN + __NIG_TRADER + __NIG_COUNTRY + __NIG_PAPERWORK + __NIG_NEWSREF + __NIG_EXPENSES + __NIG_NEXT_OF_KIN + __NIG_DECEASED + __NIG_UNCLAIMED + __NIG_TRANSFER_ABROAD + __NIG_MUTUAL_BENEFIT + __NIG_KNOWNNAME + __NIG_KNOWNNAME_MAIL + __NIG_YOUR_ACCOUNT + __NIG_BARRISTER + __NIG_BIZ_PARTNERSHIP + __NIG_LATE_SOMETHING + __NIG_CONFIDENTIAL + __NIG_SECRET_BIZ + __NIG_BEFORE_HIS_DEATH + __NIG_OVERINVOICED + __NIG_BENEFICIARY + __NIG_HONESTY + __NIG_YOUR_COUNTRY + __NIG_PRIVATE_EMAIL + __NIG_EXEC_TRANSACT + __NIG_CONFISCATE + __NIG_URGENT_SOMETHING + __NIG_SOLICIT + __NIG_THE_DESK_OF + __NIG_MORE_DETAILS + __NIG_COMPANY_NAME + __NIG_PICTURE + __NIG_REPRESENT + __NIG_SREPRESENT + __NIG_IMPORT + __NIG_TRANSBUS + __NIG_YOURSHARE + __NIG_REASON + __NIG_FRAUD  + __NIG_SECURING_FUNDS + __NIG_FURNISH_YOU + __NIG_AFFIDAVITS + __NIG_AGENT + __NIG_RISK_FREE + __NIG_OFFSHORE + __NIG_PAYMENTS + __NIG_MODALITIES + __NIG_ASSIST_TRANSACT + __NIG_OPERATE_ACCT + __NIG_US_DOLLARS + __NIG_GREETING + __NIG_CONTACT_DETAILS + __NIG_FOUND + __NIG_MOUNTAIN_O_CASH + __NIG_UC_SUBJ_WORD + __NIG_PRIVATE_LAWYER + __NIG_LEGIT_BIZ + __NIG_UNREACH_MON + __NIG_POLITICAL + __NIG_REDIR_EMAIL - __NIG_COUNTRYMISS - __NIG_MIN_1 - (2 * __NIG_MIN_2) - (3 * __NIG_MIN_3) - (4 * __NIG_MIN_4) - (5 * __NIG_MIN_5) - (6 * __NIG_MIN_6) - (7 * __NIG_MIN_7) - (8 * __NIG_MIN_8) - (9 * __NIG_MIN_9) - (10 * __NIG_MIN_10) >= 9 )

describe NIGERIAN_3   Looks like a nigerian 419 scam (3)
describe NIGERIAN_4   Looks like a nigerian 419 scam (4)
describe NIGERIAN_5   Looks like a nigerian 419 scam (5)
describe NIGERIAN_6   Looks like a nigerian 419 scam (6)
describe NIGERIAN_7   Looks like a nigerian 419 scam (7)
describe NIGERIAN_8   Looks like a nigerian 419 scam (8)
describe NIGERIAN_9   Looks like a nigerian 419 scam (9+)

score NIGERIAN_3 0.7
score NIGERIAN_4 1.2
score NIGERIAN_5 2.0
score NIGERIAN_6 3.5
score NIGERIAN_7 5.0
score NIGERIAN_8 7.0
score NIGERIAN_9 9.0