You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/09/04 02:45:32 UTC
svn commit: r1903852 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Sun Sep 4 02:45:32 2022
New Revision: 1903852
URL: http://svn.apache.org/viewvc?rev=1903852&view=rev
Log:
updated scores for revision 1903843 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1903852&r1=1903851&r2=1903852&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Sun Sep 4 02:45:32 2022
@@ -1,6 +1,6 @@
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS 3.000 2.999 3.000 2.999
+score AC_FROM_MANY_DOTS 2.999 2.999 2.999 2.999
score AC_HTML_NONSENSE_TAGS 1.999 1.999 1.999 1.999
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
@@ -12,48 +12,45 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
-score ADMITS_SPAM 2.899 2.999 2.899 2.999
+score ADMITS_SPAM 2.799 2.699 2.799 2.699
score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.772 1.152 1.772 1.152
-score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
-score ADVANCE_FEE_3_NEW 2.040 3.499 2.040 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 2.299 0.001 2.299
-score ADVANCE_FEE_3_NEW_MONEY 2.727 2.699 2.727 2.699
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 2.499 0.001 2.499
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.429 2.499 0.429 2.499
+score ADVANCE_FEE_2_NEW_MONEY 1.999 2.000 1.999 2.000
+score ADVANCE_FEE_3_NEW 3.499 3.499 3.499 3.499
+score ADVANCE_FEE_3_NEW_MONEY 2.799 2.699 2.799 2.699
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.599 1.341 2.599 1.341
score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW 2.199 2.199 2.199 2.199
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.821 1.183 0.821 1.183
-score ADVANCE_FEE_5_NEW_MONEY 0.926 0.813 0.926 0.813
-score AD_PREFS 0.010 0.001 0.010 0.001
-score ALIBABA_IMG_NOT_RCVD_ALI 2.388 2.499 2.388 2.499
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499 1.802 2.499 1.802
-score APOSTROPHE_TOCC 0.999 0.001 0.999 0.001
+score ADVANCE_FEE_5_NEW 2.399 2.299 2.399 2.299
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.023 0.001 0.023
+score ADVANCE_FEE_5_NEW_MONEY 1.281 2.350 1.281 2.350
+score AD_PREFS 0.347 0.001 0.347 0.001
+score ALIBABA_IMG_NOT_RCVD_ALI 2.500 2.499 2.500 2.499
+score AMAZON_IMG_NOT_RCVD_AMZN 2.499 2.499 2.499 2.499
+score APOSTROPHE_TOCC 0.999 0.348 0.999 0.348
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
-score ARC_SIGNED 0.001 0.001 0.001 0.001
-score ARC_VALID 0.001 0.001 0.001 0.001
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.108 1.882 1.108 1.882
-score AXB_X_FF_SEZ_S 3.199 1.426 3.199 1.426
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.548 1.267 0.548 1.267
+score AXB_X_FF_SEZ_S 3.399 2.080 3.399 2.080
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM 2.771 1.507 2.771 1.507
+score BIGNUM_EMAILS_FREEM 2.999 1.210 2.999 1.210
score BIGNUM_EMAILS_MANY 2.999 2.999 2.999 2.999
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
score BITCOIN_DEADLINE 1.000 1.000 1.000 1.000
-score BITCOIN_EXTORT_01 2.103 0.001 2.103 0.001
+score BITCOIN_EXTORT_01 2.102 1.073 2.102 1.073
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML 3.499 2.090 3.499 2.090
+score BITCOIN_MALF_HTML 3.499 2.209 3.499 2.209
score BITCOIN_MALWARE 1.000 1.000 1.000 1.000
score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000
-score BITCOIN_ONAN 2.999 1.688 2.999 1.688
+score BITCOIN_ONAN 2.999 2.999 2.999 2.999
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02 2.499 0.182 2.499 0.182
-score BITCOIN_SPAM_03 2.500 2.499 2.500 2.499
+score BITCOIN_SPAM_02 2.499 0.014 2.499 0.014
+score BITCOIN_SPAM_03 2.499 2.499 2.499 2.499
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05 0.001 1.787 0.001 1.787
+score BITCOIN_SPAM_05 0.001 1.029 0.001 1.029
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_07 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
@@ -62,152 +59,152 @@ score BITCOIN_SPAM_10
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
-score BITCOIN_XPRIO 2.500 0.001 2.500 0.001
+score BITCOIN_XPRIO 2.499 0.001 2.499 0.001
score BITCOIN_YOUR_INFO 1.000 1.000 1.000 1.000
-score BODY_EMAIL_419_FRAUD_GM 0.515 0.338 0.515 0.338
-score BODY_SINGLE_URI 1.845 0.250 1.845 0.250
+score BODY_EMAIL_419_FRAUD_GM 2.150 1.000 2.150 1.000
+score BODY_SINGLE_URI 1.851 0.691 1.851 0.691
score BODY_SINGLE_WORD 0.001 0.001 0.001 0.001
-score BODY_URI_ONLY 1.000 1.452 1.000 1.452
+score BODY_URI_ONLY 1.000 1.266 1.000 1.266
score BOGUS_MIME_VERSION 3.499 3.499 3.499 3.499
-score BOGUS_MSM_HDRS 2.999 2.097 2.999 2.097
+score BOGUS_MSM_HDRS 2.999 2.378 2.999 2.378
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score BTC_ORG 1.000 1.000 1.000 1.000
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000
-score CK_HELO_GENERIC 0.250 0.001 0.250 0.001
+score CK_HELO_GENERIC 0.249 0.001 0.249 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
score COMPENSATION 1.000 1.499 1.000 1.499
-score CONTENT_AFTER_HTML 1.679 1.308 1.679 1.308
+score CONTENT_AFTER_HTML 1.846 1.337 1.846 1.337
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
-score CTE_8BIT_MISMATCH 1.000 0.206 1.000 0.206
-score DATE_IN_FUTURE_Q_PLUS 2.499 2.299 2.499 2.299
+score CTE_8BIT_MISMATCH 0.999 0.001 0.999 0.001
+score DATE_IN_FUTURE_Q_PLUS 2.499 2.499 2.499 2.499
score DAY_I_EARNED 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 3.199 1.923 3.199 1.923
+score DEAR_BENEFICIARY 3.199 3.099 3.199 3.099
score DKIMWL_BL 0.001 1.000 0.001 1.000
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
-score DKIMWL_WL_MEDHI 0.001 -0.999 0.001 -0.999
+score DKIMWL_WL_MEDHI 0.001 -0.913 0.001 -0.913
score DOTGOV_IMAGE 1.000 1.000 1.000 1.000
-score DX_TEXT_03 0.199 0.400 0.199 0.400
+score DX_TEXT_03 0.299 0.399 0.299 0.399
score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
-score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999
+score ENCRYPTED_MESSAGE -1.000 -0.999 -1.000 -0.999
score END_FUTURE_EMAILS 1.000 2.499 1.000 2.499
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
-score FILL_THIS_FORM 1.192 0.071 1.192 0.071
-score FONT_INVIS_DIRECT 1.291 0.697 1.291 0.697
+score FILL_THIS_FORM 1.196 1.100 1.196 1.100
+score FONT_INVIS_DIRECT 1.286 0.033 1.286 0.033
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
score FONT_INVIS_HTML_NOHTML 2.999 2.999 2.999 2.999
-score FONT_INVIS_LONG_LINE 3.000 2.999 3.000 2.999
-score FONT_INVIS_MSGID 0.001 0.417 0.001 0.417
-score FONT_INVIS_NORDNS 1.885 2.499 1.885 2.499
-score FONT_INVIS_POSTEXTRAS 1.600 1.972 1.600 1.972
-score FORM_FRAUD 1.000 1.000 1.000 1.000
-score FORM_FRAUD_5 1.509 1.094 1.509 1.094
+score FONT_INVIS_LONG_LINE 2.999 2.999 2.999 2.999
+score FONT_INVIS_MSGID 0.471 0.261 0.471 0.261
+score FONT_INVIS_NORDNS 1.876 2.499 1.876 2.499
+score FONT_INVIS_POSTEXTRAS 1.605 2.181 1.605 2.181
+score FORGED_SPF_HELO 0.001 0.757 0.001 0.757
+score FORM_FRAUD 1.000 0.999 1.000 0.999
+score FORM_FRAUD_3 0.001 0.220 0.001 0.220
+score FORM_FRAUD_5 2.362 1.574 2.362 1.574
score FOUND_YOU 3.249 3.249 3.249 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.249 0.250 0.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.250 0.249 0.250
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
-score FROM_2_EMAILS_SHORT 0.104 1.859 0.104 1.859
+score FROM_2_EMAILS_SHORT 0.001 1.882 0.001 1.882
score FROM_ADDR_WS 2.999 2.999 2.999 2.999
score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
-score FROM_FMBLA_NEWDOM 0.001 1.499 0.001 1.499
-score FROM_FMBLA_NEWDOM14 0.001 0.302 0.001 0.302
+score FROM_FMBLA_NEWDOM 0.001 1.398 0.001 1.398
+score FROM_FMBLA_NEWDOM14 0.001 0.999 0.001 0.999
score FROM_FMBLA_NEWDOM28 0.001 0.800 0.001 0.800
-score FROM_GOV_DKIM_AU 0.001 -0.165 0.001 -0.165
+score FROM_GOV_DKIM_AU 0.001 -0.576 0.001 -0.576
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000
score FROM_MISSPACED 1.999 1.999 1.999 1.999
-score FROM_MISSP_EH_MATCH 0.408 0.324 0.408 0.324
-score FROM_MISSP_FREEMAIL 3.099 2.055 3.099 2.055
+score FROM_MISSP_EH_MATCH 0.403 0.001 0.403 0.001
+score FROM_MISSP_FREEMAIL 2.999 0.783 2.999 0.783
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
-score FROM_MISSP_REPLYTO 1.000 0.001 1.000 0.001
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
-score FROM_MULTI_NORDNS 0.769 1.069 0.769 1.069
+score FROM_MULTI_NORDNS 0.767 0.001 0.767 0.001
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
-score FROM_NTLD_LINKBAIT 0.515 1.295 0.515 1.295
-score FROM_NTLD_REPLY_FREEMAIL 1.388 1.000 1.388 1.000
+score FROM_NTLD_LINKBAIT 0.665 1.385 0.665 1.385
+score FROM_NTLD_REPLY_FREEMAIL 1.999 1.000 1.999 1.000
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
-score FROM_ONE_CHAR 2.399 1.716 2.399 1.716
-score FROM_PAYPAL_SPOOF 0.001 1.213 0.001 1.213
-score FROM_SUSPICIOUS_NTLD 0.499 0.001 0.499 0.001
-score FROM_SUSPICIOUS_NTLD_FP 2.000 1.999 2.000 1.999
-score FSL_BULK_SIG 0.001 0.001 0.001 0.001
+score FROM_ONE_CHAR 1.905 0.721 1.905 0.721
+score FROM_PAYPAL_SPOOF 0.001 1.238 0.001 1.238
+score FROM_SUSPICIOUS_NTLD 0.499 0.499 0.499 0.499
+score FROM_SUSPICIOUS_NTLD_FP 1.999 2.000 1.999 2.000
+score FSL_BULK_SIG 0.001 0.359 0.001 0.359
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_AMAZON 2.399 2.399 2.399 2.399
-score FUZZY_WALLET 1.786 1.899 1.786 1.899
+score FUZZY_AMAZON 2.499 2.399 2.499 2.399
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
-score GB_BITCOIN_CP 0.725 1.312 0.725 1.312
+score GB_BITCOIN_CP 1.670 2.512 1.670 2.512
score GB_CUSTOM_HTM_URI 1.000 1.000 1.000 1.000
-score GB_FAKE_RF_SHORT 1.287 0.978 1.287 0.978
+score GB_FAKE_RF_SHORT 1.980 0.997 1.980 0.997
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
score GB_FREEMAIL_DISPTO 0.499 0.499 0.499 0.499
score GB_FREEMAIL_DISPTO_NOTFREEM 0.499 0.499 0.499 0.499
score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750
-score GB_HASHBL_BTC 0.001 3.228 0.001 3.228
+score GB_HASHBL_BTC 0.001 2.151 0.001 2.151
score GB_STORAGE_GOOGLE_EMAIL 1.000 1.000 1.000 1.000
-score GB_URI_FLEEK_STO_HTM 1.000 0.999 1.000 0.999
+score GB_URI_FLEEK_STO_HTM 0.999 0.999 0.999 0.999
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
score GOOG_REDIR_HTML_ONLY 1.999 1.999 1.999 1.999
-score GOOG_REDIR_NORDNS 2.500 3.122 2.500 3.122
-score GOOG_STO_EMAIL_PHISH 2.697 2.989 2.697 2.989
+score GOOG_REDIR_NORDNS 2.500 3.299 2.500 3.299
+score GOOG_STO_EMAIL_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000
score GOOG_STO_NOIMG_HTML 2.999 2.999 2.999 2.999
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
-score HAS_X_OUTGOING_SPAM_STAT 1.605 0.549 1.605 0.549
-score HDRS_LCASE 0.100 0.021 0.100 0.021
-score HDRS_LCASE_IMGONLY 0.099 0.099 0.099 0.099
-score HDRS_MISSP 2.499 1.808 2.499 1.808
+score HAS_X_OUTGOING_SPAM_STAT 1.999 0.001 1.999 0.001
+score HDRS_LCASE 0.100 0.100 0.100 0.100
+score HDRS_LCASE_IMGONLY 0.099 0.100 0.099 0.100
+score HDRS_MISSP 2.499 1.660 2.499 1.660
score HDR_ORDER_FTSDMCXX_DIRECT 0.001 0.001 0.001 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001 0.001 0.001 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.249 0.249 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250 0.250 0.250 0.250
score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_CTE_RAW 1.000 1.000 1.000 1.000
score HK_NAME_MR_MRS 1.000 0.999 1.000 0.999
-score HK_RANDOM_ENVFROM 0.999 0.999 0.999 0.999
-score HK_RANDOM_FROM 0.999 1.000 0.999 1.000
-score HK_RANDOM_REPLYTO 1.000 0.999 1.000 0.999
+score HK_RANDOM_ENVFROM 1.000 0.999 1.000 0.999
+score HK_RANDOM_FROM 1.000 1.000 1.000 1.000
+score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
score HK_SCAM 1.999 1.999 1.999 1.999
-score HOSTED_IMG_DIRECT_MX 3.499 1.647 3.499 1.647
+score HOSTED_IMG_DIRECT_MX 2.814 1.957 2.814 1.957
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM 3.499 3.198 3.499 3.198
+score HOSTED_IMG_FREEM 3.499 2.023 3.499 2.023
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
-score HOSTED_IMG_MULTI_PUB_01 2.999 2.999 2.999 2.999
+score HOSTED_IMG_MULTI_PUB_01 2.999 3.000 2.999 3.000
score HTML_ENTITY_ASCII 3.000 2.999 3.000 2.999
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE 2.999 3.000 2.999 3.000
+score HTML_OFF_PAGE 2.999 2.999 2.999 2.999
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
score HTML_SINGLET_MANY 1.000 1.000 1.000 1.000
-score HTML_TEXT_INVISIBLE_FONT 1.000 1.394 1.000 1.394
-score HTML_TEXT_INVISIBLE_STYLE 1.883 3.103 1.883 3.103
-score IMG_ONLY_FM_DOM_INFO 1.951 1.111 1.951 1.111
+score HTML_TEXT_INVISIBLE_FONT 1.000 1.401 1.000 1.401
+score HTML_TEXT_INVISIBLE_STYLE 1.875 3.100 1.875 3.100
+score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
score JH_SPAMMY_HEADERS 3.499 3.499 3.499 3.499
score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000
score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000
-score KHOP_HELO_FCRDNS 0.400 0.399 0.400 0.399
+score KHOP_HELO_FCRDNS 0.400 0.001 0.400 0.001
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
-score LONG_HEX_URI 2.037 1.608 2.037 1.608
-score LONG_IMG_URI 1.936 0.937 1.936 0.937
-score LONG_INVISIBLE_TEXT 2.999 2.845 2.999 2.845
+score LONG_HEX_URI 2.653 1.574 2.653 1.574
+score LONG_IMG_URI 1.937 1.038 1.937 1.038
+score LONG_INVISIBLE_TEXT 2.999 2.828 2.999 2.828
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
score LOTTO_AGENT 1.499 1.499 1.499 1.499
score LOTTO_DEPT 0.001 0.001 0.001 0.001
@@ -215,14 +212,15 @@ score LUCRATIVE
score MALF_HTML_B64 1.000 1.000 1.000 1.000
score MALWARE_NORDNS 1.000 1.000 1.000 1.000
score MALWARE_PASSWORD 1.000 1.000 1.000 1.000
-score MANY_SUBDOM 2.200 2.299 2.200 2.299
+score MANY_HDRS_LCASE 0.001 0.100 0.001 0.100
+score MANY_SUBDOM 2.199 2.299 2.199 2.299
score MILLION_HUNDRED 0.001 0.001 0.001 0.001
-score MILLION_USD 0.212 0.026 0.212 0.026
+score MILLION_USD 0.001 0.001 0.001 0.001
score MIMEOLE_DIRECT_TO_MX 1.999 0.001 1.999 0.001
score MIME_NO_TEXT 1.000 1.000 1.000 1.000
score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
score MIXED_CENTER_CASE 1.000 1.000 1.000 1.000
-score MIXED_ES 2.299 1.420 2.299 1.420
+score MIXED_ES 2.300 2.163 2.300 2.163
score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
score MIXED_HREF_CASE 1.000 1.000 1.000 1.000
score MIXED_IMG_CASE 1.000 1.000 1.000 1.000
@@ -231,52 +229,53 @@ score MONERO_EXTORT_01
score MONERO_MALWARE 1.000 1.000 1.000 1.000
score MONERO_PAY_ME 1.000 1.000 1.000 1.000
score MONEY_ATM_CARD 0.001 0.001 0.001 0.001
-score MONEY_FORM 0.001 0.001 0.001 0.001
-score MONEY_FORM_SHORT 2.486 2.081 2.486 2.081
-score MONEY_FRAUD_3 2.760 2.040 2.760 2.040
+score MONEY_FORM 0.471 0.711 0.471 0.711
+score MONEY_FORM_SHORT 1.684 1.921 1.684 1.921
+score MONEY_FRAUD_3 1.745 2.999 1.745 2.999
score MONEY_FRAUD_5 0.001 0.001 0.001 0.001
-score MONEY_FRAUD_8 0.124 2.507 0.124 2.507
-score MONEY_FREEMAIL_REPTO 2.999 1.989 2.999 1.989
+score MONEY_FRAUD_8 0.258 0.001 0.258 0.001
+score MONEY_FREEMAIL_REPTO 2.999 1.985 2.999 1.985
score MONEY_FROM_41 1.999 1.999 1.999 1.999
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
score MSMAIL_PRI_ABNORMAL 0.001 0.001 0.001 0.001
-score MSM_PRIO_REPTO 1.000 2.294 1.000 2.294
-score NAME_EMAIL_DIFF 1.730 0.001 1.730 0.001
-score NA_DOLLARS 1.499 0.001 1.499 0.001
+score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000
+score NAME_EMAIL_DIFF 1.731 0.001 1.731 0.001
+score NA_DOLLARS 0.496 1.499 0.496 1.499
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
score NEW_PRODUCTS 1.000 1.000 1.000 1.000
-score NICE_REPLY_A -2.487 -0.001 -2.487 -0.001
+score NICE_REPLY_A -2.952 -0.978 -2.952 -0.978
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER 0.001 0.061 0.001 0.061
-score NUMBERONLY_BITCOIN_EXP 0.938 1.194 0.938 1.194
+score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
+score NUMBERONLY_BITCOIN_EXP 1.999 1.152 1.999 1.152
score OBFU_BITCOIN 1.000 1.000 1.000 1.000
-score OBFU_TEXT_ATTACH 0.001 0.353 0.001 0.353
-score ODD_FREEM_REPTO 3.000 2.342 3.000 2.342
-score PDS_BTC_ID 0.499 0.500 0.499 0.500
-score PDS_BTC_MSGID 0.001 0.001 0.001 0.001
-score PDS_BTC_NTLD 1.227 1.418 1.227 1.418
-score PDS_DBL_URL_TNB_RUNON 1.999 1.999 1.999 1.999
+score OBFU_TEXT_ATTACH 0.494 0.001 0.494 0.001
+score ODD_FREEM_REPTO 2.999 2.840 2.999 2.840
+score PDS_BTC_ID 0.499 0.499 0.499 0.499
+score PDS_BTC_MSGID 0.002 0.001 0.002 0.001
+score PDS_BTC_NTLD 0.001 1.999 0.001 1.999
+score PDS_DBL_URL_TNB_RUNON 1.999 1.000 1.999 1.000
+score PDS_FROM_2_EMAILS 1.000 3.499 1.000 3.499
score PDS_HELO_SPF_FAIL 0.001 1.999 0.001 1.999
-score PDS_NAKED_TO_NUMERO 1.999 1.999 1.999 1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.749 0.749 0.749 0.749
+score PDS_NAKED_TO_NUMERO 1.999 2.000 1.999 2.000
+score PDS_NO_FULL_NAME_SPOOFED_URL 0.749 0.750 0.749 0.750
score PDS_OTHER_BAD_TLD 1.999 1.999 1.999 1.999
-score PDS_PHPEXP_BOT 1.334 0.001 1.334 0.001
+score PDS_PHPEXP_BOT 1.362 0.746 1.362 0.746
score PDS_PHP_EVAL 1.499 1.499 1.499 1.499
-score PDS_SHORT_BOGUS_MSM_HDRS 1.123 1.264 1.123 1.264
+score PDS_SHORT_BOGUS_MSM_HDRS 1.681 0.641 1.681 0.641
score PDS_SHORT_SPOOFED_URL 1.999 1.999 1.999 1.999
-score PDS_TINYSUBJ_URISHRT 1.499 0.387 1.499 0.387
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.000 1.999 2.000 1.999
+score PDS_TINYSUBJ_URISHRT 1.499 1.499 1.499 1.499
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999 0.001 1.999 0.001
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 2.500 2.499 2.500 2.499
-score PHP_ORIG_SCRIPT_EVAL 2.856 2.999 2.856 2.999
-score PHP_SCRIPT 2.499 1.751 2.499 1.751
+score PHP_ORIG_SCRIPT 2.499 2.499 2.499 2.499
+score PHP_ORIG_SCRIPT_EVAL 2.999 2.999 2.999 2.999
+score PHP_SCRIPT 2.499 2.197 2.499 2.197
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT 0.999 0.081 0.999 0.081
+score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
@@ -284,27 +283,17 @@ score PUMPDUMP_MULTI
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
score RAND_MKTG_HEADER 1.999 1.999 1.999 1.999
-score RATWARE_NO_RDNS 0.412 0.277 0.412 0.277
+score RATWARE_NO_RDNS 2.824 1.937 2.824 1.937
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
-score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
-score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H4 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H5 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000
-score RDNS_NUM_TLD_XM 0.701 0.821 0.701 0.821
+score RDNS_NUM_TLD_XM 1.611 2.184 1.611 2.184
score REPTO_419_FRAUD 0.001 0.001 0.001 0.001
score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_AOL_LOOSE 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_CNS 1.000 1.000 1.000 1.000
-score REPTO_419_FRAUD_GM 2.999 1.404 2.999 1.404
+score REPTO_419_FRAUD_GM 2.999 1.000 2.999 1.000
score REPTO_419_FRAUD_GM_LOOSE 0.999 0.999 0.999 0.999
score REPTO_419_FRAUD_HM 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_OL 1.000 1.000 1.000 1.000
@@ -316,90 +305,87 @@ score REPTO_419_FRAUD_YJ
score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000
score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000
score SCC_BODY_SINGLE_WORD 0.001 0.001 0.001 0.001
-score SCC_BODY_URI_ONLY 2.800 1.727 2.800 1.727
-score SCC_CANSPAM_2 3.099 2.399 3.099 2.399
-score SCC_ISEMM_LID_1 2.720 0.937 2.720 0.937
-score SCC_THREE_WORD_MONTY 2.200 2.499 2.200 2.499
+score SCC_BODY_URI_ONLY 2.799 1.930 2.799 1.930
+score SCC_CANSPAM_2 3.099 2.262 3.099 2.262
+score SCC_ISEMM_LID_1 2.188 2.393 2.188 2.393
score SENDGRID_REDIR 1.499 1.499 1.499 1.499
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
-score SERGIO_SUBJECT_VIAGRA01 0.747 2.685 0.747 2.685
-score SHOPIFY_IMG_NOT_RCVD_SFY 1.638 0.001 1.638 0.001
+score SERGIO_SUBJECT_VIAGRA01 1.933 0.305 1.933 0.305
+score SHOPIFY_IMG_NOT_RCVD_SFY 1.640 1.508 1.640 1.508
score SHORTENER_SHORT_IMG 0.001 0.001 0.001 0.001
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
-score SHORT_SHORTNER 2.000 1.900 2.000 1.900
-score SPOOFED_FREEMAIL 0.001 1.346 0.001 1.346
-score SPOOFED_FREEMAIL_NO_RDNS 1.000 0.001 1.000 0.001
+score SHORT_SHORTNER 1.999 2.000 1.999 2.000
+score SPOOFED_FREEMAIL 0.001 1.701 0.001 1.701
+score SPOOFED_FREEMAIL_NO_RDNS 1.000 0.017 1.000 0.017
score SPOOFED_FREEM_REPTO 0.001 2.499 0.001 2.499
-score SPOOFED_FREEM_REPTO_CHN 0.001 3.307 0.001 3.307
+score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
score SPOOF_GMAIL_MID 1.000 0.001 1.000 0.001
score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001
score STOCK_TIP 1.000 1.000 1.000 1.000
score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000
-score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
-score THIS_AD 1.100 1.200 1.100 1.200
+score THIS_AD 1.199 1.199 1.199 1.199
score THIS_IS_ADV_SUSP_NTLD 1.000 1.000 1.000 1.000
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
-score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.500 0.001 1.500 0.001
+score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.499 1.499 1.499 1.499
score TO_EQ_FM_DIRECT_MX 1.000 1.000 1.000 1.000
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
score TO_NAME_SUBJ_NO_RDNS 1.000 1.000 1.000 1.000
-score TO_NO_BRKTS_FROM_MSSP 2.500 2.499 2.500 2.499
-score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
+score TO_NO_BRKTS_FROM_MSSP 2.499 2.499 2.499 2.499
+score TO_NO_BRKTS_HTML_IMG 1.999 2.000 1.999 2.000
+score TO_NO_BRKTS_HTML_ONLY 1.999 2.000 1.999 2.000
score TO_NO_BRKTS_MSFT 1.000 0.001 1.000 0.001
-score TO_NO_BRKTS_NORDNS_HTML 1.999 1.205 1.999 1.205
-score TO_NO_BRKTS_PCNT 2.500 2.499 2.500 2.499
-score TVD_RCVD_SPACE_BRACKET 2.241 2.752 2.241 2.752
-score TVD_SPACE_ENCODED 1.000 2.499 1.000 2.499
-score TVD_SPACE_RATIO_MINFP 1.000 0.001 1.000 0.001
+score TO_NO_BRKTS_NORDNS_HTML 1.999 1.358 1.999 1.358
+score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
+score TVD_RCVD_SPACE_BRACKET 1.372 1.904 1.372 1.904
+score TVD_SPACE_RATIO_MINFP 1.000 0.205 1.000 0.205
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score UNDISC_FREEM 3.299 3.199 3.299 3.199
-score UNDISC_MONEY 3.399 1.801 3.399 1.801
-score UNICODE_OBFU_ASC 2.500 2.499 2.500 2.499
+score UNDISC_FREEM 3.299 3.099 3.299 3.099
+score UNDISC_MONEY 2.382 0.149 2.382 0.149
+score UNICODE_OBFU_ASC 2.499 2.499 2.499 2.499
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
score URI_ADOBESPARK 1.000 1.000 1.000 1.000
score URI_AZURE_CLOUDAPP 1.000 1.000 1.000 1.000
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_DOTEDU 1.999 1.999 1.999 1.999
+score URI_DOTEDU 1.999 2.000 1.999 2.000
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
score URI_FIREBASEAPP 1.000 1.000 1.000 1.000
-score URI_GOOGLE_PROXY 2.299 2.299 2.299 2.299
+score URI_GOOGLE_PROXY 2.399 2.299 2.399 2.299
score URI_GOOG_STO_SPAMMY 3.000 3.000 3.000 3.000
score URI_HEX_IP 1.000 1.000 1.000 1.000
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
score URI_LONG_REPEAT 1.000 1.000 1.000 1.000
-score URI_OBFU_DOM 2.299 2.199 2.299 2.199
-score URI_ONLY_MSGID_MALF 1.000 1.816 1.000 1.816
+score URI_OBFU_DOM 2.299 2.299 2.299 2.299
+score URI_ONLY_MSGID_MALF 1.000 1.594 1.000 1.594
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.999 3.350 3.999 3.350
-score URI_PHP_REDIR 3.500 2.776 3.500 2.776
-score URI_TRY_3LD 1.949 1.657 1.949 1.657
+score URI_PHISH 3.999 3.602 3.999 3.602
+score URI_PHP_REDIR 3.499 3.271 3.499 3.271
+score URI_TRY_3LD 1.952 1.967 1.952 1.967
score URI_TRY_USME 1.000 1.000 1.000 1.000
-score URI_WPADMIN 2.399 2.299 2.399 2.299
-score URI_WP_DIRINDEX 3.284 3.491 3.284 3.491
-score URI_WP_HACKED 1.000 3.499 1.000 3.499
-score URI_WP_HACKED_2 2.499 2.249 2.499 2.249
+score URI_WPADMIN 2.499 2.400 2.499 2.400
+score URI_WP_DIRINDEX 3.286 3.496 3.286 3.496
+score URI_WP_HACKED 1.000 3.500 1.000 3.500
+score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
score USB_DRIVES 1.000 1.000 1.000 1.000
-score VFY_ACCT_NORDNS 2.904 2.416 2.904 2.416
+score VFY_ACCT_NORDNS 2.407 2.690 2.407 2.690
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
score WORD_INVIS 0.001 0.001 0.001 0.001
score WORD_INVIS_MANY 1.000 1.000 1.000 1.000
-score XFER_LOTSA_MONEY 0.999 0.001 0.999 0.001
+score XFER_LOTSA_MONEY 0.999 0.999 0.999 0.999
score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
-score XM_RANDOM 2.499 1.337 2.499 1.337
+score XM_RANDOM 2.499 2.499 2.499 2.499
score XM_RECPTID 2.999 2.999 2.999 2.999
score XPRIO 1.000 0.001 1.000 0.001
-score XPRIO_SHORT_SUBJ 1.114 1.000 1.114 1.000
-score XPRIO_URL_SHORTNER 0.999 0.595 0.999 0.595
-score YOU_INHERIT 2.199 1.026 2.199 1.026
+score XPRIO_SHORT_SUBJ 2.311 2.396 2.311 2.396
+score XPRIO_URL_SHORTNER 0.999 0.999 0.999 0.999
+score YOU_INHERIT 2.199 1.055 2.199 1.055
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1903852&r1=1903851&r2=1903852&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Sun Sep 4 02:45:32 2022
@@ -1,193 +1,191 @@
-# Using score set 0 logs for revision 1903801 from:
-# ham-ena-week0.r1903801.log ham-ena-week1.r1903801.log ham-ena-week2.r1903801.log ham-ena-week3.r1903801.log ham-ena-week4.r1903801.log ham-giovanni-ham.r1903801.log ham-giovanni-spammy.r1903801.log ham-giovanni-spam.r1903801.log ham-grenier.r1903801.log ham-hege.r1903801.log ham-jhardin.r1903801.log ham-llanga.r1903801.log ham-mmiroslaw-mails-ham.r1903801.log ham-mmiroslaw-mails-spam.r1903801.log ham-spamsponge.r1903801.log ham-thendrikx.r1903801.log ham-tsz-spam-corpus.r1903801.log spam-ena-week0.r1903801.log spam-ena-week1.r1903801.log spam-ena-week2.r1903801.log spam-ena-week3.r1903801.log spam-ena-week4.r1903801.log spam-giovanni-ham.r1903801.log spam-giovanni-spammy.r1903801.log spam-giovanni-spam.r1903801.log spam-grenier.r1903801.log spam-hege.r1903801.log spam-jhardin.r1903801.log spam-llanga.r1903801.log spam-mmiroslaw-mails-ham.r1903801.log spam-mmiroslaw-mails-spam.r1903801.log spam-spamsponge.r1903801.log spam-thendrikx.r1903801.log spam-tsz-spam-corpus.r1903801.log
+# Using score set 0 logs for revision 1903824 from:
+# ham-ena-week0.r1903824.log ham-ena-week1.r1903824.log ham-ena-week2.r1903824.log ham-ena-week3.r1903824.log ham-ena-week4.r1903824.log ham-giovanni-ham.r1903824.log ham-giovanni-spammy.r1903824.log ham-giovanni-spam.r1903824.log ham-grenier.r1903824.log ham-hege.r1903824.log ham-jhardin.r1903824.log ham-llanga.r1903824.log ham-mmiroslaw-mails-ham.r1903824.log ham-mmiroslaw-mails-spam.r1903824.log ham-thendrikx.r1903824.log ham-tsz-spam-corpus.r1903824.log spam-ena-week0.r1903824.log spam-ena-week1.r1903824.log spam-ena-week2.r1903824.log spam-ena-week3.r1903824.log spam-ena-week4.r1903824.log spam-giovanni-ham.r1903824.log spam-giovanni-spammy.r1903824.log spam-giovanni-spam.r1903824.log spam-grenier.r1903824.log spam-hege.r1903824.log spam-jhardin.r1903824.log spam-llanga.r1903824.log spam-mmiroslaw-mails-ham.r1903824.log spam-mmiroslaw-mails-spam.r1903824.log spam-thendrikx.r1903824.log spam-tsz-spam-corpus.r1903824.log
score AC_DIV_BONANZA 0.001
-score AC_FROM_MANY_DOTS 3.000
+score AC_FROM_MANY_DOTS 2.999
score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 2.899
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.772
+score ADMITS_SPAM 2.799
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.429
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.040
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_3_NEW_MONEY 2.727
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.869
+score ADVANCE_FEE_3_NEW_MONEY 2.799
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.599
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 2.199
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.821
-score ADVANCE_FEE_5_NEW_MONEY 0.926
-score AD_PREFS 0.010
-score ALIBABA_IMG_NOT_RCVD_ALI 2.388
+score ADVANCE_FEE_5_NEW 2.399
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 1.281
+score AD_PREFS 0.347
+score ALIBABA_IMG_NOT_RCVD_ALI 2.500
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
score APOSTROPHE_TOCC 0.999
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.108
-score AXB_X_FF_SEZ_S 3.199
-score BIGNUM_EMAILS_FREEM 2.771
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.548
+score AXB_X_FF_SEZ_S 3.399
+score BIGNUM_EMAILS_FREEM 2.999
score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_EXTORT_01 2.103
+score BITCOIN_EXTORT_01 2.102
score BITCOIN_MALF_HTML 3.499
score BITCOIN_ONAN 2.999
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 2.500
-score BITCOIN_XPRIO 2.500
-score BODY_EMAIL_419_FRAUD_GM 0.515
-score BODY_SINGLE_URI 1.845
+score BITCOIN_SPAM_03 2.499
+score BITCOIN_XPRIO 2.499
+score BODY_EMAIL_419_FRAUD_GM 2.150
+score BODY_SINGLE_URI 1.851
score BODY_SINGLE_WORD 0.001
score BOGUS_MIME_VERSION 3.499
score BOGUS_MSM_HDRS 2.999
-score CK_HELO_GENERIC 0.250
-score CONTENT_AFTER_HTML 1.679
-score CTE_8BIT_MISMATCH 1.000
+score CK_HELO_GENERIC 0.249
+score CONTENT_AFTER_HTML 1.846
+score CTE_8BIT_MISMATCH 0.999
score DATE_IN_FUTURE_Q_PLUS 2.499
score DEAR_BENEFICIARY 3.199
-score DX_TEXT_03 0.199
-score ENCRYPTED_MESSAGE -0.999
-score FILL_THIS_FORM 1.192
-score FONT_INVIS_DIRECT 1.291
+score DX_TEXT_03 0.299
+score ENCRYPTED_MESSAGE -1.000
+score FILL_THIS_FORM 1.196
+score FONT_INVIS_DIRECT 1.286
score FONT_INVIS_HTML_NOHTML 2.999
-score FONT_INVIS_LONG_LINE 3.000
-score FONT_INVIS_MSGID 0.001
-score FONT_INVIS_NORDNS 1.885
-score FONT_INVIS_POSTEXTRAS 1.600
-score FORM_FRAUD_5 1.509
+score FONT_INVIS_LONG_LINE 2.999
+score FONT_INVIS_MSGID 0.471
+score FONT_INVIS_NORDNS 1.876
+score FONT_INVIS_POSTEXTRAS 1.605
+score FORM_FRAUD_5 2.362
score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_2_EMAILS_SHORT 0.104
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_2_EMAILS_SHORT 0.001
score FROM_ADDR_WS 2.999
score FROM_MISSPACED 1.999
-score FROM_MISSP_EH_MATCH 0.408
-score FROM_MISSP_FREEMAIL 3.099
+score FROM_MISSP_EH_MATCH 0.403
+score FROM_MISSP_FREEMAIL 2.999
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 0.769
-score FROM_NTLD_LINKBAIT 0.515
-score FROM_NTLD_REPLY_FREEMAIL 1.388
-score FROM_ONE_CHAR 2.399
+score FROM_MULTI_NORDNS 0.767
+score FROM_NTLD_LINKBAIT 0.665
+score FROM_NTLD_REPLY_FREEMAIL 1.999
+score FROM_ONE_CHAR 1.905
score FROM_SUSPICIOUS_NTLD 0.499
-score FROM_SUSPICIOUS_NTLD_FP 2.000
+score FROM_SUSPICIOUS_NTLD_FP 1.999
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.399
-score FUZZY_WALLET 1.786
-score GB_BITCOIN_CP 0.725
-score GB_FAKE_RF_SHORT 1.287
+score FUZZY_AMAZON 2.499
+score FUZZY_WALLET 1.899
+score GB_BITCOIN_CP 1.670
+score GB_FAKE_RF_SHORT 1.980
score GB_FREEMAIL_DISPTO 0.499
score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_URI_FLEEK_STO_HTM 1.000
+score GB_URI_FLEEK_STO_HTM 0.999
score GOOG_REDIR_HTML_ONLY 1.999
score GOOG_REDIR_NORDNS 2.500
-score GOOG_STO_EMAIL_PHISH 2.697
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 1.605
+score HAS_X_OUTGOING_SPAM_STAT 1.999
score HDRS_LCASE_IMGONLY 0.099
score HDRS_MISSP 2.499
score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
score HK_NAME_MR_MRS 1.000
-score HK_RANDOM_ENVFROM 0.999
-score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 1.000
+score HK_RANDOM_ENVFROM 1.000
+score HK_RANDOM_FROM 1.000
+score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 1.999
-score HOSTED_IMG_DIRECT_MX 3.499
+score HOSTED_IMG_DIRECT_MX 2.814
score HOSTED_IMG_FREEM 3.499
score HOSTED_IMG_MULTI_PUB_01 2.999
score HTML_ENTITY_ASCII 3.000
score HTML_OFF_PAGE 2.999
-score HTML_TEXT_INVISIBLE_STYLE 1.883
-score IMG_ONLY_FM_DOM_INFO 1.951
+score HTML_TEXT_INVISIBLE_STYLE 1.875
score JH_SPAMMY_HEADERS 3.499
-score LONG_HEX_URI 2.037
-score LONG_IMG_URI 1.936
+score LONG_HEX_URI 2.653
+score LONG_IMG_URI 1.937
score LONG_INVISIBLE_TEXT 2.999
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 1.499
-score LOTTO_DEPT 0.001 # force non-zero
-score MANY_SUBDOM 2.200
+score LOTTO_DEPT 0.001
+score MANY_SUBDOM 2.199
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.212
+score MILLION_USD 0.001
score MIMEOLE_DIRECT_TO_MX 1.999
-score MIXED_ES 2.299
+score MIXED_ES 2.300
score MONEY_ATM_CARD 0.001
-score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 2.486
-score MONEY_FRAUD_3 2.760
+score MONEY_FORM 0.471
+score MONEY_FORM_SHORT 1.684
+score MONEY_FRAUD_3 1.745
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 0.124
+score MONEY_FRAUD_8 0.258
score MONEY_FREEMAIL_REPTO 2.999
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
score MSMAIL_PRI_ABNORMAL 0.001
-score NAME_EMAIL_DIFF 1.730
-score NA_DOLLARS 1.499
-score NICE_REPLY_A -2.487
+score NAME_EMAIL_DIFF 1.731
+score NA_DOLLARS 0.496
+score NICE_REPLY_A -2.952
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.938
-score OBFU_TEXT_ATTACH 0.001
-score ODD_FREEM_REPTO 3.000
+score NUMBERONLY_BITCOIN_EXP 1.999
+score OBFU_TEXT_ATTACH 0.494
+score ODD_FREEM_REPTO 2.999
score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.001
-score PDS_BTC_NTLD 1.227
+score PDS_BTC_MSGID 0.002
+score PDS_BTC_NTLD 0.001
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_NAKED_TO_NUMERO 1.999
score PDS_NO_FULL_NAME_SPOOFED_URL 0.749
score PDS_OTHER_BAD_TLD 1.999
-score PDS_PHPEXP_BOT 1.334
+score PDS_PHPEXP_BOT 1.362
score PDS_PHP_EVAL 1.499
-score PDS_SHORT_BOGUS_MSM_HDRS 1.123
+score PDS_SHORT_BOGUS_MSM_HDRS 1.681
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TINYSUBJ_URISHRT 1.499
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.000
-score PHP_ORIG_SCRIPT 2.500
-score PHP_ORIG_SCRIPT_EVAL 2.856
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
+score PHP_ORIG_SCRIPT 2.499
+score PHP_ORIG_SCRIPT_EVAL 2.999
score PHP_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 0.412
-score RDNS_NUM_TLD_XM 0.701
-score REPTO_419_FRAUD 0.001
+score RATWARE_NO_RDNS 2.824
+score RDNS_NUM_TLD_XM 1.611
+score REPTO_419_FRAUD 0.001 # force non-zero
score REPTO_419_FRAUD_GM 2.999
score REPTO_419_FRAUD_GM_LOOSE 0.999
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 2.800
+score SCC_BODY_URI_ONLY 2.799
score SCC_CANSPAM_2 3.099
-score SCC_ISEMM_LID_1 2.720
-score SCC_THREE_WORD_MONTY 2.200
+score SCC_ISEMM_LID_1 2.188
+score SCC_THREE_WORD_MONTY 2.199
score SENDGRID_REDIR 1.499
-score SERGIO_SUBJECT_VIAGRA01 0.747
-score SHOPIFY_IMG_NOT_RCVD_SFY 1.638
-score SHORTENER_SHORT_IMG 0.001
-score SHORT_SHORTNER 2.000
+score SERGIO_SUBJECT_VIAGRA01 1.933
+score SHOPIFY_IMG_NOT_RCVD_SFY 1.640
+score SHORTENER_SHORT_IMG 0.001 # force non-zero
+score SHORT_SHORTNER 1.999
score STATIC_XPRIO_OLE 0.001
-score THIS_AD 1.100
-score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.500
-score TO_NO_BRKTS_FROM_MSSP 2.500
+score THIS_AD 1.199
+score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.499
+score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.500
-score TVD_RCVD_SPACE_BRACKET 2.241
+score TO_NO_BRKTS_PCNT 2.499
+score TVD_RCVD_SPACE_BRACKET 1.372
score UNDISC_FREEM 3.299
-score UNDISC_MONEY 3.399
-score UNICODE_OBFU_ASC 2.500
+score UNDISC_MONEY 2.382
+score UNICODE_OBFU_ASC 2.499
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.299
+score URI_GOOGLE_PROXY 2.399
score URI_OBFU_DOM 2.299
score URI_PHISH 3.999
-score URI_PHP_REDIR 3.500
-score URI_TRY_3LD 1.949
-score URI_WPADMIN 2.399
-score URI_WP_DIRINDEX 3.284
+score URI_PHP_REDIR 3.499
+score URI_TRY_3LD 1.952
+score URI_WPADMIN 2.499
+score URI_WP_DIRINDEX 3.286
score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.904
+score VFY_ACCT_NORDNS 2.407
score WORD_INVIS 0.001
score XFER_LOTSA_MONEY 0.999
score XM_RANDOM 2.499
score XM_RECPTID 2.999
-score XPRIO_SHORT_SUBJ 1.114
+score XPRIO_SHORT_SUBJ 2.311
score XPRIO_URL_SHORTNER 0.999
score YOU_INHERIT 2.199
score AC_BR_BONANZA 0.001
@@ -245,7 +243,6 @@ score FONT_INVIS_DOTGOV 1.0
score FORM_FRAUD 1.000
score FREEM_FRNUM_UNICD_EMPTY 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
-score FROM_MISSP_REPLYTO 1.000
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_CUSTOM_HTM_URI 1.000
score GB_FORGED_MUA_POSTFIX 1.000
@@ -256,6 +253,7 @@ score GOOGLE_DOCS_PHISH_MANY 1.0
score GOOGLE_DOC_SUSP 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000
score GOOG_MALWARE_DNLD 1.000
+score GOOG_STO_EMAIL_PHISH 1.000
score GOOG_STO_HTML_PHISH 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_HTML 1.000
@@ -271,6 +269,7 @@ score HTML_ENTITY_ASCII_TINY 1.0
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score HTML_SINGLET_MANY 1.000
score HTML_TEXT_INVISIBLE_FONT 1.000
+score IMG_ONLY_FM_DOM_INFO 1.000
score JH_SPAMMY_PATTERN01 1.000
score JH_SPAMMY_PATTERN02 1.000
score KHOP_HELO_FCRDNS 0.400
@@ -297,6 +296,7 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
+score PDS_FROM_2_EMAILS 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -338,7 +338,6 @@ score TO_EQ_FM_DIRECT_MX 1.0
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 1.000
score TO_NO_BRKTS_MSFT 1.000
-score TVD_SPACE_ENCODED 1.000
score TVD_SPACE_RATIO_MINFP 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1903852&r1=1903851&r2=1903852&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Sun Sep 4 02:45:32 2022
@@ -1,230 +1,220 @@
-# Using score set 1 logs for revision 1903705 from:
-# ham-net-ena-week0.r1903705.log ham-net-ena-week1.r1903705.log ham-net-ena-week2.r1903705.log ham-net-ena-week3.r1903705.log ham-net-ena-week4.r1903705.log ham-net-giovanni-ham.r1903705.log ham-net-giovanni-spammy.r1903705.log ham-net-giovanni-spam.r1903705.log ham-net-grenier.r1903705.log ham-net-hege.r1903705.log ham-net-jhardin.r1903705.log ham-net-llanga.r1903705.log ham-net-mmiroslaw-mails-ham.r1903705.log ham-net-mmiroslaw-mails-spam.r1903705.log ham-net-spamsponge.r1903705.log ham-net-thendrikx.r1903705.log ham-net-tsz-spam-corpus.r1903705.log spam-net-ena-week0.r1903705.log spam-net-ena-week1.r1903705.log spam-net-ena-week2.r1903705.log spam-net-ena-week3.r1903705.log spam-net-ena-week4.r1903705.log spam-net-giovanni-ham.r1903705.log spam-net-giovanni-spammy.r1903705.log spam-net-giovanni-spam.r1903705.log spam-net-grenier.r1903705.log spam-net-hege.r1903705.log spam-net-jhardin.r1903705.log spam-net-llanga.r1903705.log spam-net-mmiroslaw-mails-ham.r1903705.log spam-net-mmi
roslaw-mails-spam.r1903705.log spam-net-spamsponge.r1903705.log spam-net-thendrikx.r1903705.log spam-net-tsz-spam-corpus.r1903705.log
+# Using score set 1 logs for revision 1903843 from:
+# ham-net-ena-week0.r1903843.log ham-net-ena-week1.r1903843.log ham-net-ena-week2.r1903843.log ham-net-ena-week3.r1903843.log ham-net-ena-week4.r1903843.log ham-net-giovanni-ham.r1903843.log ham-net-giovanni-spammy.r1903843.log ham-net-giovanni-spam.r1903843.log ham-net-hege.r1903843.log ham-net-jhardin.r1903843.log ham-net-llanga.r1903843.log ham-net-mmiroslaw-mails-ham.r1903843.log ham-net-mmiroslaw-mails-spam.r1903843.log ham-net-spamsponge.r1903843.log ham-net-thendrikx.r1903843.log ham-net-tsz-spam-corpus.r1903843.log spam-net-ena-week0.r1903843.log spam-net-ena-week1.r1903843.log spam-net-ena-week2.r1903843.log spam-net-ena-week3.r1903843.log spam-net-ena-week4.r1903843.log spam-net-giovanni-ham.r1903843.log spam-net-giovanni-spammy.r1903843.log spam-net-giovanni-spam.r1903843.log spam-net-hege.r1903843.log spam-net-jhardin.r1903843.log spam-net-llanga.r1903843.log spam-net-mmiroslaw-mails-ham.r1903843.log spam-net-mmiroslaw-mails-spam.r1903843.log spam-net-spamsponge.r1903843
.log spam-net-thendrikx.r1903843.log spam-net-tsz-spam-corpus.r1903843.log
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.999
score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 2.999
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.152
-score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADMITS_SPAM 2.699
+score ADVANCE_FEE_2_NEW_FRM_MNY 2.499
+score ADVANCE_FEE_2_NEW_MONEY 2.000
score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 2.299
score ADVANCE_FEE_3_NEW_MONEY 2.699
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.499
-score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 2.199
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.183
-score ADVANCE_FEE_5_NEW_MONEY 0.813
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.341
+score ADVANCE_FEE_4_NEW_MONEY 0.001 # force non-zero
+score ADVANCE_FEE_5_NEW 2.299
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.023
+score ADVANCE_FEE_5_NEW_MONEY 2.350
score AD_PREFS 0.001
score ALIBABA_IMG_NOT_RCVD_ALI 2.499
-score AMAZON_IMG_NOT_RCVD_AMZN 1.802
-score APOSTROPHE_TOCC 0.001
+score AMAZON_IMG_NOT_RCVD_AMZN 2.499
+score APOSTROPHE_TOCC 0.348
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.882
-score AXB_X_FF_SEZ_S 1.426
-score BIGNUM_EMAILS_FREEM 1.507
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.267
+score AXB_X_FF_SEZ_S 2.080
+score BIGNUM_EMAILS_FREEM 1.210
score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_EXTORT_01 0.001
-score BITCOIN_MALF_HTML 2.090
-score BITCOIN_ONAN 1.688
-score BITCOIN_SPAM_02 0.182
+score BITCOIN_EXTORT_01 1.073
+score BITCOIN_MALF_HTML 2.209
+score BITCOIN_ONAN 2.999
+score BITCOIN_SPAM_02 0.014
score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_05 1.787
-score BITCOIN_XPRIO 0.001 # force non-zero
-score BODY_EMAIL_419_FRAUD_GM 0.338
-score BODY_SINGLE_URI 0.250
+score BITCOIN_SPAM_05 1.029
+score BITCOIN_XPRIO 0.001
+score BODY_SINGLE_URI 0.691
score BODY_SINGLE_WORD 0.001
-score BODY_URI_ONLY 1.452
+score BODY_URI_ONLY 1.266
score BOGUS_MIME_VERSION 3.499
-score BOGUS_MSM_HDRS 2.097
+score BOGUS_MSM_HDRS 2.378
score CK_HELO_GENERIC 0.001
score COMPENSATION 1.499
-score CONTENT_AFTER_HTML 1.308
-score CTE_8BIT_MISMATCH 0.206
-score DATE_IN_FUTURE_Q_PLUS 2.299
-score DEAR_BENEFICIARY 1.923
+score CONTENT_AFTER_HTML 1.337
+score CTE_8BIT_MISMATCH 0.001
+score DATE_IN_FUTURE_Q_PLUS 2.499
+score DEAR_BENEFICIARY 3.099
score DKIMWL_WL_HIGH -0.001
score DKIMWL_WL_MED -0.001
-score DKIMWL_WL_MEDHI -0.999
-score DX_TEXT_03 0.400
+score DKIMWL_WL_MEDHI -0.913
+score DX_TEXT_03 0.399
score ENCRYPTED_MESSAGE -0.999
score END_FUTURE_EMAILS 2.499
-score FILL_THIS_FORM 0.071
-score FONT_INVIS_DIRECT 0.697
+score FILL_THIS_FORM 1.100
+score FONT_INVIS_DIRECT 0.033
score FONT_INVIS_HTML_NOHTML 2.999
score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 0.417
+score FONT_INVIS_MSGID 0.261
score FONT_INVIS_NORDNS 2.499
-score FONT_INVIS_POSTEXTRAS 1.972
-score FORGED_SPF_HELO 0.169
-score FORM_FRAUD 1.000
-score FORM_FRAUD_3 2.222
-score FORM_FRAUD_5 1.094
+score FONT_INVIS_POSTEXTRAS 2.181
+score FORGED_SPF_HELO 0.757
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 0.220
+score FORM_FRAUD_5 1.574
score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_2_EMAILS_SHORT 1.859
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
+score FROM_2_EMAILS_SHORT 1.882
score FROM_ADDR_WS 2.999
-score FROM_FMBLA_NEWDOM 1.499
-score FROM_FMBLA_NEWDOM14 0.302
+score FROM_FMBLA_NEWDOM 1.398
+score FROM_FMBLA_NEWDOM14 0.999
score FROM_FMBLA_NEWDOM28 0.800
-score FROM_GOV_DKIM_AU -0.165
+score FROM_GOV_DKIM_AU -0.576
score FROM_MISSPACED 1.999
-score FROM_MISSP_EH_MATCH 0.324
-score FROM_MISSP_FREEMAIL 2.055
+score FROM_MISSP_EH_MATCH 0.001
+score FROM_MISSP_FREEMAIL 0.783
score FROM_MISSP_MSFT 0.001 # force non-zero
score FROM_MISSP_SPF_FAIL 0.001
-score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 1.069
-score FROM_NTLD_LINKBAIT 1.295
-score FROM_ONE_CHAR 1.716
-score FROM_PAYPAL_SPOOF 1.213
-score FROM_SUSPICIOUS_NTLD 0.001
-score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FSL_BULK_SIG 0.001
+score FROM_MISSP_USER 0.001 # force non-zero
+score FROM_MULTI_NORDNS 0.001
+score FROM_NTLD_LINKBAIT 1.385
+score FROM_ONE_CHAR 0.721
+score FROM_PAYPAL_SPOOF 1.238
+score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_SUSPICIOUS_NTLD_FP 2.000
+score FSL_BULK_SIG 0.359
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
score FUZZY_AMAZON 2.399
-score FUZZY_WALLET 1.899
-score GB_BITCOIN_CP 1.312
-score GB_FAKE_RF_SHORT 0.978
+score GB_BITCOIN_CP 2.512
+score GB_FAKE_RF_SHORT 0.997
score GB_FREEMAIL_DISPTO 0.499
score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_HASHBL_BTC 3.228
+score GB_HASHBL_BTC 2.151
score GB_URI_FLEEK_STO_HTM 0.999
score GOOG_REDIR_HTML_ONLY 1.999
-score GOOG_REDIR_NORDNS 3.122
-score GOOG_STO_EMAIL_PHISH 2.989
+score GOOG_REDIR_NORDNS 3.299
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 0.549
-score HDRS_LCASE 0.021
-score HDRS_LCASE_IMGONLY 0.099
-score HDRS_MISSP 1.808
+score HAS_X_OUTGOING_SPAM_STAT 0.001 # force non-zero
+score HDRS_LCASE_IMGONLY 0.100
+score HDRS_MISSP 1.660
score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 0.999
score HK_RANDOM_FROM 1.000
score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 1.999
-score HOSTED_IMG_DIRECT_MX 1.647
-score HOSTED_IMG_FREEM 3.198
-score HOSTED_IMG_MULTI_PUB_01 2.999
+score HOSTED_IMG_DIRECT_MX 1.957
+score HOSTED_IMG_FREEM 2.023
+score HOSTED_IMG_MULTI_PUB_01 3.000
score HTML_ENTITY_ASCII 2.999
-score HTML_OFF_PAGE 3.000
-score HTML_TEXT_INVISIBLE_FONT 1.394
-score HTML_TEXT_INVISIBLE_STYLE 3.103
-score IMG_ONLY_FM_DOM_INFO 1.111
+score HTML_OFF_PAGE 2.999
+score HTML_TEXT_INVISIBLE_FONT 1.401
+score HTML_TEXT_INVISIBLE_STYLE 3.100
score JH_SPAMMY_HEADERS 3.499
-score KHOP_HELO_FCRDNS 0.399
-score LONG_HEX_URI 1.608
-score LONG_IMG_URI 0.937
-score LONG_INVISIBLE_TEXT 2.845
+score KHOP_HELO_FCRDNS 0.001 # force non-zero
+score LONG_HEX_URI 1.574
+score LONG_IMG_URI 1.038
+score LONG_INVISIBLE_TEXT 2.828
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 1.499
-score LOTTO_DEPT 0.001
+score LOTTO_DEPT 0.001 # force non-zero
score MANY_SUBDOM 2.299
-score MAY_BE_FORGED 2.099
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.026
+score MILLION_USD 0.001 # force non-zero
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIXED_ES 1.420
+score MIXED_ES 2.163
score MONEY_ATM_CARD 0.001
-score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 2.081
-score MONEY_FRAUD_3 2.040
+score MONEY_FORM 0.711
+score MONEY_FORM_SHORT 1.921
+score MONEY_FRAUD_3 2.999
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 2.507
-score MONEY_FREEMAIL_REPTO 1.989
+score MONEY_FRAUD_8 0.001 # force non-zero
+score MONEY_FREEMAIL_REPTO 1.985
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
score MSMAIL_PRI_ABNORMAL 0.001
-score MSM_PRIO_REPTO 2.294
score NAME_EMAIL_DIFF 0.001
-score NA_DOLLARS 0.001
-score NICE_REPLY_A -0.001
+score NA_DOLLARS 1.499
+score NICE_REPLY_A -0.978
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.061
-score NUMBERONLY_BITCOIN_EXP 1.194
-score OBFU_TEXT_ATTACH 0.353
-score ODD_FREEM_REPTO 2.342
-score PDS_BTC_ID 0.500
+score NSL_RCVD_HELO_USER 0.001
+score NUMBERONLY_BITCOIN_EXP 1.152
+score OBFU_TEXT_ATTACH 0.001
+score ODD_FREEM_REPTO 2.840
+score PDS_BTC_ID 0.499
score PDS_BTC_MSGID 0.001
-score PDS_BTC_NTLD 1.418
-score PDS_DBL_URL_TNB_RUNON 1.999
+score PDS_BTC_NTLD 1.999
+score PDS_FROM_2_EMAILS 3.499
score PDS_HELO_SPF_FAIL 1.999
-score PDS_NAKED_TO_NUMERO 1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.749
+score PDS_NAKED_TO_NUMERO 2.000
+score PDS_NO_FULL_NAME_SPOOFED_URL 0.750
score PDS_OTHER_BAD_TLD 1.999
+score PDS_PHPEXP_BOT 0.746
score PDS_PHP_EVAL 1.499
-score PDS_SHORT_BOGUS_MSM_HDRS 1.264
+score PDS_SHORT_BOGUS_MSM_HDRS 0.641
score PDS_SHORT_SPOOFED_URL 1.999
-score PDS_TINYSUBJ_URISHRT 0.387
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
+score PDS_TINYSUBJ_URISHRT 1.499
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 0.001
score PHP_ORIG_SCRIPT 2.499
score PHP_ORIG_SCRIPT_EVAL 2.999
-score PHP_SCRIPT 1.751
-score PP_MIME_FAKE_ASCII_TEXT 0.081
+score PHP_SCRIPT 2.197
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 0.277
+score RATWARE_NO_RDNS 1.937
score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_XM 0.821
-score REPTO_419_FRAUD 0.001 # force non-zero
-score REPTO_419_FRAUD_GM 1.404
+score RDNS_NUM_TLD_XM 2.184
+score REPTO_419_FRAUD 0.001
score REPTO_419_FRAUD_GM_LOOSE 0.999
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 1.727
-score SCC_CANSPAM_2 2.399
-score SCC_ISEMM_LID_1 0.937
-score SCC_THREE_WORD_MONTY 2.499
+score SCC_BODY_URI_ONLY 1.930
+score SCC_CANSPAM_2 2.262
+score SCC_ISEMM_LID_1 2.393
score SENDGRID_REDIR 1.499
-score SERGIO_SUBJECT_VIAGRA01 2.685
-score SHOPIFY_IMG_NOT_RCVD_SFY 0.001
+score SERGIO_SUBJECT_VIAGRA01 0.305
+score SHOPIFY_IMG_NOT_RCVD_SFY 1.508
score SHORTENER_SHORT_IMG 0.001
-score SHORT_SHORTNER 1.900
-score SPOOFED_FREEMAIL 1.346
-score SPOOFED_FREEMAIL_NO_RDNS 0.001
+score SHORT_SHORTNER 2.000
+score SPOOFED_FREEMAIL 1.701
+score SPOOFED_FREEMAIL_NO_RDNS 0.017
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 3.307
score SPOOF_GMAIL_MID 0.001
score STATIC_XPRIO_OLE 0.001
-score THIS_AD 1.200
-score TONOM_EQ_TOLOC_SHRT_SHRTNER 0.001
+score THIS_AD 1.199
+score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.499
score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_HTML_IMG 2.000
+score TO_NO_BRKTS_HTML_ONLY 2.000
score TO_NO_BRKTS_MSFT 0.001
-score TO_NO_BRKTS_NORDNS_HTML 1.205
+score TO_NO_BRKTS_NORDNS_HTML 1.358
score TO_NO_BRKTS_PCNT 2.499
-score TVD_RCVD_SPACE_BRACKET 2.752
-score TVD_SPACE_ENCODED 2.499
-score TVD_SPACE_RATIO_MINFP 0.001
-score UNDISC_FREEM 3.199
-score UNDISC_MONEY 1.801
+score TVD_RCVD_SPACE_BRACKET 1.904
+score TVD_SPACE_RATIO_MINFP 0.205
+score UNDISC_FREEM 3.099
+score UNDISC_MONEY 0.149
score UNICODE_OBFU_ASC 2.499
-score URI_DOTEDU 1.999
+score URI_DOTEDU 2.000
score URI_GOOGLE_PROXY 2.299
-score URI_OBFU_DOM 2.199
-score URI_ONLY_MSGID_MALF 1.816
-score URI_PHISH 3.350
-score URI_PHP_REDIR 2.776
-score URI_TRY_3LD 1.657
-score URI_WPADMIN 2.299
-score URI_WP_DIRINDEX 3.491
-score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.249
-score VFY_ACCT_NORDNS 2.416
+score URI_OBFU_DOM 2.299
+score URI_ONLY_MSGID_MALF 1.594
+score URI_PHISH 3.602
+score URI_PHP_REDIR 3.271
+score URI_TRY_3LD 1.967
+score URI_WPADMIN 2.400
+score URI_WP_DIRINDEX 3.496
+score URI_WP_HACKED 3.500
+score URI_WP_HACKED_2 2.499
+score VFY_ACCT_NORDNS 2.690
score WORD_INVIS 0.001
-score XFER_LOTSA_MONEY 0.001
-score XM_RANDOM 1.337
+score XFER_LOTSA_MONEY 0.999
+score XM_RANDOM 2.499
score XM_RECPTID 2.999
-score XPRIO 0.001 # force non-zero
-score XPRIO_URL_SHORTNER 0.595
-score YOU_INHERIT 1.026
+score XPRIO 0.001
+score XPRIO_SHORT_SUBJ 2.396
+score XPRIO_URL_SHORTNER 0.999
+score YOU_INHERIT 1.055
score AC_BR_BONANZA 0.001
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -259,6 +249,7 @@ score BITCOIN_SPAM_11 1.0
score BITCOIN_SPAM_12 1.000
score BITCOIN_SPF_ONLYALL 1.000
score BITCOIN_YOUR_INFO 1.000
+score BODY_EMAIL_419_FRAUD_GM 1.000
score BOMB_FREEM 1.000
score BOMB_MONEY 1.000
score BTC_ORG 1.000
@@ -296,11 +287,13 @@ score GOOGLE_DOCS_PHISH_MANY 1.0
score GOOGLE_DOC_SUSP 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000
score GOOG_MALWARE_DNLD 1.000
+score GOOG_STO_EMAIL_PHISH 1.000
score GOOG_STO_HTML_PHISH 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_HTML 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
+score HDRS_LCASE 0.100
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
@@ -309,6 +302,7 @@ score HOSTED_IMG_MULTI 1.0
score HTML_ENTITY_ASCII_TINY 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score HTML_SINGLET_MANY 1.000
+score IMG_ONLY_FM_DOM_INFO 1.000
score JH_SPAMMY_PATTERN01 1.000
score JH_SPAMMY_PATTERN02 1.000
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
@@ -318,6 +312,7 @@ score LUCRATIVE 1.0
score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
+score MANY_HDRS_LCASE 0.100
score MIME_NO_TEXT 1.000
score MIXED_AREA_CASE 1.000
score MIXED_CENTER_CASE 1.000
@@ -330,9 +325,11 @@ score MONERO_MALWARE 1.0
score MONERO_PAY_ME 1.000
score MSGID_DOLLARS_URI_IMG 1.000
score MSGID_HDR_MALF 1.000
+score MSM_PRIO_REPTO 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
+score PDS_DBL_URL_TNB_RUNON 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -349,6 +346,7 @@ score RDNS_NUM_TLD_ATCHNX 1.0
score REPTO_419_FRAUD_AOL 1.000
score REPTO_419_FRAUD_AOL_LOOSE 1.000
score REPTO_419_FRAUD_CNS 1.000
+score REPTO_419_FRAUD_GM 1.000
score REPTO_419_FRAUD_HM 1.000
score REPTO_419_FRAUD_OL 1.000
score REPTO_419_FRAUD_PM 1.000
@@ -361,6 +359,7 @@ score REPTO_INFONUMSCOM 1.0
score SENDGRID_REDIR_PHISH 1.000
score SEO_SUSP_NTLD 1.000
score SHORT_IMG_SUSP_NTLD 1.000
+score SPOOFED_FREEM_REPTO_CHN 1.000
score SPOOFED_FREEM_REPTO_RUS 1.000
score STOCK_TIP 1.000
score SUBJ_BRKN_WORDNUMS 1.000
@@ -393,4 +392,3 @@ score VPS_NO_NTLD 1.0
score WALMART_IMG_NOT_RCVD_WAL 1.000
score WORD_INVIS_MANY 1.000
score XM_DIGITS_ONLY 1.000
-score XPRIO_SHORT_SUBJ 1.000