You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/02/10 02:56:35 UTC

svn commit: r1897926 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Author: spamassassin_role
Date: Thu Feb 10 02:56:35 2022
New Revision: 1897926

URL: http://svn.apache.org/viewvc?rev=1897926&view=rev
Log:
updated scores for revision 1897845 active rules added since last mass-check

Modified:
    spamassassin/trunk/rulesrc/scores/72_scores.cf
    spamassassin/trunk/rulesrc/scores/scores-set0
    spamassassin/trunk/rulesrc/scores/scores-set1
    spamassassin/trunk/rulesrc/scores/scores-set2
    spamassassin/trunk/rulesrc/scores/scores-set3
    spamassassin/trunk/rulesrc/scores/stats-set0
    spamassassin/trunk/rulesrc/scores/stats-set1

Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1897926&r1=1897925&r2=1897926&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Thu Feb 10 02:56:35 2022
@@ -11,45 +11,45 @@ score AC_SPAMMY_URI_PATTERNS12
 score AC_SPAMMY_URI_PATTERNS2               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS3               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS4               1.000 1.000 1.000 1.000
-score AC_SPAMMY_URI_PATTERNS8               2.337 1.038 2.337 1.038
+score AC_SPAMMY_URI_PATTERNS8               2.196 1.664 2.196 1.664
 score AC_SPAMMY_URI_PATTERNS9               1.000 1.000 1.000 1.000
 score ADMITS_SPAM                           2.497 2.397 2.497 2.397
 score ADULT_DATING_COMPANY                  10.001 10.001 10.001 10.001
 score ADVANCE_FEE_2_NEW_FORM                1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_FRM_MNY             1.499 2.018 1.499 2.018
+score ADVANCE_FEE_2_NEW_FRM_MNY             1.811 2.151 1.811 2.151
 score ADVANCE_FEE_2_NEW_MONEY               1.997 1.997 1.997 1.997
-score ADVANCE_FEE_3_NEW                     3.246 0.643 3.246 0.643
-score ADVANCE_FEE_3_NEW_FRM_MNY             0.145 0.001 0.145 0.001
-score ADVANCE_FEE_3_NEW_MONEY               2.232 0.220 2.232 0.220
-score ADVANCE_FEE_4_NEW                     1.561 2.297 1.561 2.297
+score ADVANCE_FEE_3_NEW                     3.288 0.630 3.288 0.630
+score ADVANCE_FEE_3_NEW_FRM_MNY             0.065 0.001 0.065 0.001
+score ADVANCE_FEE_3_NEW_MONEY               2.001 0.279 2.001 0.279
+score ADVANCE_FEE_4_NEW                     2.397 2.298 2.397 2.298
 score ADVANCE_FEE_4_NEW_FRM_MNY             2.596 2.497 2.596 2.497
 score ADVANCE_FEE_4_NEW_MONEY               0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW                     0.669 1.044 0.669 1.044
+score ADVANCE_FEE_5_NEW                     1.847 0.970 1.847 0.970
 score ADVANCE_FEE_5_NEW_FRM_MNY             0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_MONEY               0.036 0.472 0.036 0.472
-score AD_PREFS                              0.001 0.433 0.001 0.433
-score ALIBABA_IMG_NOT_RCVD_ALI              1.920 2.266 1.920 2.266
+score ADVANCE_FEE_5_NEW_MONEY               0.001 0.340 0.001 0.340
+score AD_PREFS                              0.001 0.476 0.001 0.476
+score ALIBABA_IMG_NOT_RCVD_ALI              2.247 2.117 2.247 2.117
 score AMAZON_IMG_NOT_RCVD_AMZN              2.497 2.497 2.497 2.497
 score APP_DEVELOPMENT_FREEM                 1.000 1.000 1.000 1.000
 score APP_DEVELOPMENT_NORDNS                1.997 1.997 1.997 1.997
 score AXB_XMAILER_MIMEOLE_OL_024C2          0.001 0.001 0.001 0.001
 score BEBEE_IMG_NOT_RCVD_BB                 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM                   2.996 2.031 2.996 2.031
+score BIGNUM_EMAILS_FREEM                   2.996 2.428 2.996 2.428
 score BIGNUM_EMAILS_MANY                    2.996 2.996 2.996 2.996
 score BITCOIN_BOMB                          1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE                      0.399 0.001 0.399 0.001
-score BITCOIN_EXTORT_01                     2.100 1.762 2.100 1.762
+score BITCOIN_DEADLINE                      1.589 0.001 1.589 0.001
+score BITCOIN_EXTORT_01                     2.344 1.241 2.344 1.241
 score BITCOIN_EXTORT_02                     1.000 1.000 1.000 1.000
 score BITCOIN_IMGUR                         1.000 1.000 1.000 1.000
 score BITCOIN_MALWARE                       1.000 0.001 1.000 0.001
 score BITCOIN_OBFU_SUBJ                     1.000 1.000 1.000 1.000
-score BITCOIN_ONAN                          2.929 1.000 2.929 1.000
+score BITCOIN_ONAN                          1.506 1.000 1.506 1.000
 score BITCOIN_PAY_ME                        1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_01                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02                       2.397 0.425 2.397 0.425
+score BITCOIN_SPAM_02                       2.394 0.881 2.394 0.881
 score BITCOIN_SPAM_03                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_04                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05                       0.001 0.853 0.001 0.853
+score BITCOIN_SPAM_05                       0.001 1.160 0.001 1.160
 score BITCOIN_SPAM_06                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_07                       3.496 3.499 3.496 3.499
 score BITCOIN_SPAM_08                       1.000 1.000 1.000 1.000
@@ -59,11 +59,11 @@ score BITCOIN_SPAM_11
 score BITCOIN_SPAM_12                       1.000 1.000 1.000 1.000
 score BITCOIN_SPF_ONLYALL                   0.001 1.000 0.001 1.000
 score BITCOIN_XPRIO                         0.001 0.001 0.001 0.001
-score BITCOIN_YOUR_INFO                     1.402 0.366 1.402 0.366
-score BODY_EMPTY                            1.997 1.886 1.997 1.886
-score BODY_SINGLE_URI                       2.296 1.069 2.296 1.069
-score BODY_URI_ONLY                         1.000 0.446 1.000 0.446
-score BOGUS_MIME_VERSION                    2.739 1.525 2.739 1.525
+score BITCOIN_YOUR_INFO                     1.405 0.164 1.405 0.164
+score BODY_EMPTY                            1.997 1.917 1.997 1.917
+score BODY_SINGLE_URI                       2.368 1.067 2.368 1.067
+score BODY_URI_ONLY                         1.000 0.380 1.000 0.380
+score BOGUS_MIME_VERSION                    2.748 1.523 2.748 1.523
 score BOGUS_MSM_HDRS                        1.000 1.000 1.000 1.000
 score BOMB_FREEM                            1.000 1.000 1.000 1.000
 score BOMB_MONEY                            1.000 1.000 1.000 1.000
@@ -73,42 +73,43 @@ score CANT_SEE_AD
 score CK_HELO_GENERIC                       0.248 0.001 0.248 0.001
 score COMMENT_GIBBERISH                     1.000 1.000 1.000 1.000
 score COMPENSATION                          1.000 0.001 1.000 0.001
-score CONTENT_AFTER_HTML                    2.497 2.497 2.497 2.497
+score CONTENT_AFTER_HTML                    2.371 2.497 2.371 2.497
 score CTE_8BIT_MISMATCH                     0.001 0.001 0.001 0.001
 score DAY_I_EARNED                          1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY                      0.844 1.500 0.844 1.500
+score DEAR_BENEFICIARY                      0.906 1.439 0.906 1.439
 score DKIMWL_BL                             0.001 2.996 0.001 2.996
 score DKIMWL_BLOCKED                        0.001 0.001 0.001 0.001
 score DKIMWL_WL_HIGH                        0.001 -0.001 0.001 -0.001
 score DKIMWL_WL_MED                         0.001 -0.001 0.001 -0.001
-score DKIMWL_WL_MEDHI                       0.001 -0.810 0.001 -0.810
+score DKIMWL_WL_MEDHI                       0.001 -0.737 0.001 -0.737
 score DOTGOV_IMAGE                          1.000 1.000 1.000 1.000
 score DX_TEXT_03                            1.498 1.597 1.498 1.597
 score DYNAMIC_IMGUR                         1.000 1.000 1.000 1.000
 score EBAY_IMG_NOT_RCVD_EBAY                1.000 1.000 1.000 1.000
 score ENCRYPTED_MESSAGE                     -1.000 -1.000 -1.000 -1.000
-score END_FUTURE_EMAILS                     1.000 0.067 1.000 0.067
+score END_FUTURE_EMAILS                     1.000 0.052 1.000 0.052
 score ENVFROM_GOOG_TRIX                     1.000 1.000 1.000 1.000
 score FACEBOOK_IMG_NOT_RCVD_FB              1.000 1.000 1.000 1.000
-score FAKE_REPLY_B                          1.808 1.575 1.808 1.575
+score FAKE_REPLY_A1                         2.306 0.001 2.306 0.001
+score FAKE_REPLY_B                          2.013 0.701 2.013 0.701
 score FBI_MONEY                             1.000 1.000 1.000 1.000
 score FBI_SPOOF                             1.000 1.000 1.000 1.000
-score FILL_THIS_FORM                        1.200 0.997 1.200 0.997
+score FILL_THIS_FORM                        1.196 0.998 1.196 0.998
 score FONT_INVIS_DIRECT                     0.001 0.001 0.001 0.001
 score FONT_INVIS_DOTGOV                     1.000 1.000 1.000 1.000
-score FONT_INVIS_HTML_NOHTML                2.996 0.001 2.996 0.001
-score FONT_INVIS_LONG_LINE                  1.783 2.054 1.783 2.054
-score FONT_INVIS_MSGID                      2.497 1.006 2.497 1.006
-score FONT_INVIS_NORDNS                     0.001 0.581 0.001 0.581
-score FONT_INVIS_POSTEXTRAS                 1.832 3.496 1.832 3.496
+score FONT_INVIS_HTML_NOHTML                2.996 2.690 2.996 2.690
+score FONT_INVIS_LONG_LINE                  1.697 2.131 1.697 2.131
+score FONT_INVIS_MSGID                      1.999 0.554 1.999 0.554
+score FONT_INVIS_NORDNS                     0.001 1.055 0.001 1.055
+score FONT_INVIS_POSTEXTRAS                 1.844 3.496 1.844 3.496
 score FORM_FRAUD                            1.000 0.998 1.000 0.998
-score FORM_FRAUD_5                          1.878 0.001 1.878 0.001
-score FOUND_YOU                             2.591 2.957 2.591 2.957
-score FREEMAIL_FORGED_FROMDOMAIN            0.248 0.248 0.248 0.248
+score FORM_FRAUD_5                          0.001 0.001 0.001 0.001
+score FOUND_YOU                             2.548 2.558 2.548 2.558
+score FREEMAIL_FORGED_FROMDOMAIN            0.249 0.248 0.249 0.248
 score FREEM_FRNUM_UNICD_EMPTY               1.000 1.000 1.000 1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB            1.000 1.000 1.000 1.000
-score FROMSPACE                             3.596 3.496 3.596 3.496
-score FROM_2_EMAILS_SHORT                   0.204 2.996 0.204 2.996
+score FROMSPACE                             3.595 3.496 3.595 3.496
+score FROM_2_EMAILS_SHORT                   0.001 2.996 0.001 2.996
 score FROM_ADDR_WS                          1.000 1.000 1.000 1.000
 score FROM_BANK_NOAUTH                      0.001 1.000 0.001 1.000
 score FROM_FMBLA_NDBLOCKED                  0.001 0.001 0.001 0.001
@@ -118,38 +119,40 @@ score FROM_FMBLA_NEWDOM28
 score FROM_GOV_DKIM_AU                      0.001 -0.001 0.001 -0.001
 score FROM_GOV_REPLYTO_FREEMAIL             0.001 1.000 0.001 1.000
 score FROM_GOV_SPOOF                        0.001 0.998 0.001 0.998
-score FROM_IN_TO_AND_SUBJ                   1.897 1.799 1.897 1.799
+score FROM_IN_TO_AND_SUBJ                   1.797 1.717 1.797 1.717
 score FROM_MISSPACED                        1.997 0.001 1.997 0.001
-score FROM_MISSP_EH_MATCH                   0.776 0.001 0.776 0.001
-score FROM_MISSP_FREEMAIL                   1.108 0.001 1.108 0.001
+score FROM_MISSP_EH_MATCH                   1.998 0.001 1.998 0.001
+score FROM_MISSP_FREEMAIL                   1.877 0.001 1.877 0.001
 score FROM_MISSP_MSFT                       0.001 0.001 0.001 0.001
 score FROM_MISSP_PHISH                      1.000 1.000 1.000 1.000
+score FROM_MISSP_REPLYTO                    1.000 0.001 1.000 0.001
 score FROM_MISSP_SPF_FAIL                   0.001 0.001 0.001 0.001
+score FROM_MISSP_TO_UNDISC                  0.707 1.288 0.707 1.288
 score FROM_MISSP_USER                       0.001 0.001 0.001 0.001
-score FROM_MULTI_NORDNS                     0.355 1.003 0.355 1.003
+score FROM_MULTI_NORDNS                     0.359 1.001 0.359 1.001
 score FROM_NEWDOM_BTC                       0.001 1.000 0.001 1.000
-score FROM_NTLD_LINKBAIT                    0.424 1.844 0.424 1.844
-score FROM_NTLD_REPLY_FREEMAIL              1.402 1.000 1.402 1.000
+score FROM_NTLD_LINKBAIT                    1.493 0.838 1.493 0.838
+score FROM_NTLD_REPLY_FREEMAIL              1.999 1.000 1.999 1.000
 score FROM_NUMBERO_NEWDOMAIN                0.001 1.000 0.001 1.000
 score FROM_NUMERIC_TLD                      1.000 1.000 1.000 1.000
 score FROM_PAYPAL_SPOOF                     0.001 0.001 0.001 0.001
 score FROM_SUSPICIOUS_NTLD                  0.498 0.498 0.498 0.498
 score FROM_SUSPICIOUS_NTLD_FP               1.997 1.997 1.997 1.997
 score FROM_WSP_TRAIL                        2.397 2.297 2.397 2.297
-score FSL_BULK_SIG                          0.001 1.370 0.001 1.370
+score FSL_BULK_SIG                          0.001 1.294 0.001 1.294
 score FSL_CTYPE_WIN1251                     0.001 0.001 0.001 0.001
-score FSL_NEW_HELO_USER                     0.001 0.001 0.001 0.001
-score FUZZY_AMAZON                          2.497 2.297 2.497 2.297
-score FUZZY_CLICK_HERE                      2.188 2.397 2.188 2.397
-score FUZZY_NORTON                          2.443 0.716 2.443 0.716
-score FUZZY_PAYPAL                          2.696 2.596 2.696 2.596
-score FUZZY_SECURITY                        2.497 0.505 2.497 0.505
-score FUZZY_WALLET                          3.197 3.096 3.197 3.096
+score FSL_NEW_HELO_USER                     1.997 0.001 1.997 0.001
+score FUZZY_AMAZON                          2.596 2.297 2.596 2.297
+score FUZZY_CLICK_HERE                      2.085 2.397 2.085 2.397
+score FUZZY_NORTON                          0.899 1.622 0.899 1.622
+score FUZZY_PAYPAL                          2.596 2.596 2.596 2.596
+score FUZZY_SECURITY                        2.497 1.643 2.497 1.643
+score FUZZY_WALLET                          3.196 3.096 3.196 3.096
 score GAPPY_LOW_CONTRAST                    2.497 2.497 2.497 2.497
 score GAPPY_SALES_LEADS_FREEM               1.000 1.000 1.000 1.000
-score GB_FAKE_RF_SHORT                      1.998 0.465 1.998 0.465
+score GB_FAKE_RF_SHORT                      1.997 0.467 1.997 0.467
 score GB_FORGED_MUA_POSTFIX                 1.000 1.000 1.000 1.000
-score GB_FREEMAIL_DISPTO                    0.499 0.498 0.499 0.498
+score GB_FREEMAIL_DISPTO                    0.498 0.498 0.498 0.498
 score GB_FREEMAIL_DISPTO_NOTFREEM           0.500 0.500 0.500 0.500
 score GB_GOOGLE_OBFUR                       0.750 0.750 0.750 0.750
 score GOOGLE_DOCS_PHISH                     1.000 1.000 1.000 1.000
@@ -157,17 +160,17 @@ score GOOGLE_DOCS_PHISH_MANY
 score GOOGLE_DOC_SUSP                       1.000 1.000 1.000 1.000
 score GOOGLE_DRIVE_REPLY_BAD_NTLD           1.000 1.000 1.000 1.000
 score GOOG_MALWARE_DNLD                     1.000 1.000 1.000 1.000
-score GOOG_REDIR_NORDNS                     2.607 2.785 2.607 2.785
-score GOOG_STO_EMAIL_PHISH                  2.173 2.160 2.173 2.160
+score GOOG_REDIR_NORDNS                     2.593 2.797 2.593 2.797
+score GOOG_STO_EMAIL_PHISH                  2.938 2.999 2.938 2.999
 score GOOG_STO_HTML_PHISH                   1.000 1.000 1.000 1.000
 score GOOG_STO_HTML_PHISH_MANY              1.000 1.000 1.000 1.000
-score GOOG_STO_IMG_HTML                     2.824 2.996 2.824 2.996
-score GOOG_STO_IMG_NOHTML                   1.000 1.000 1.000 1.000
-score GOOG_STO_NOIMG_HTML                   2.996 2.935 2.996 2.935
+score GOOG_STO_IMG_HTML                     2.807 2.996 2.807 2.996
+score GOOG_STO_IMG_NOHTML                   2.497 1.000 2.497 1.000
+score GOOG_STO_NOIMG_HTML                   2.996 2.947 2.996 2.947
 score HAS_X_NO_RELAY                        1.000 1.000 1.000 1.000
-score HAS_X_OUTGOING_SPAM_STAT              1.997 1.196 1.997 1.196
+score HAS_X_OUTGOING_SPAM_STAT              1.997 1.215 1.997 1.215
 score HDRS_LCASE                            0.100 0.001 0.100 0.001
-score HDRS_LCASE_IMGONLY                    0.047 0.098 0.047 0.098
+score HDRS_LCASE_IMGONLY                    0.098 0.099 0.098 0.099
 score HDRS_MISSP                            2.497 2.497 2.497 2.497
 score HDR_ORDER_FTSDMCXX_DIRECT             0.001 0.001 0.001 0.001
 score HDR_ORDER_FTSDMCXX_NORDNS             0.001 0.001 0.001 0.001
@@ -175,101 +178,102 @@ score HEADER_FROM_DIFFERENT_DOMAINS
 score HELO_NO_DOMAIN                        0.001 0.001 0.001 0.001
 score HEXHASH_WORD                          1.000 1.000 1.000 1.000
 score HK_CTE_RAW                            1.000 1.000 1.000 1.000
-score HK_LOTTO                              0.795 0.919 0.795 0.919
+score HK_LOTTO                              0.998 0.999 0.998 0.999
 score HK_NAME_MR_MRS                        0.998 0.998 0.998 0.998
 score HK_RANDOM_ENVFROM                     0.998 0.998 0.998 0.998
-score HK_RANDOM_FROM                        0.999 0.576 0.999 0.576
-score HK_RANDOM_REPLYTO                     0.998 0.885 0.998 0.885
+score HK_RANDOM_FROM                        0.998 0.590 0.998 0.590
+score HK_RANDOM_REPLYTO                     0.998 0.868 0.998 0.868
 score HK_RCVD_IP_MULTICAST                  1.000 1.000 1.000 1.000
-score HK_SCAM                               0.201 0.083 0.201 0.083
+score HK_SCAM                               0.453 0.158 0.453 0.158
 score HK_WIN                                1.000 1.000 1.000 1.000
-score HOSTED_IMG_DIRECT_MX                  2.856 3.037 2.856 3.037
+score HOSTED_IMG_DIRECT_MX                  3.496 2.324 3.496 2.324
 score HOSTED_IMG_DQ_UNSUB                   1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM                      3.497 3.496 3.497 3.496
+score HOSTED_IMG_FREEM                      3.496 3.496 3.496 3.496
 score HOSTED_IMG_MULTI                      1.000 1.000 1.000 1.000
-score HOSTED_IMG_MULTI_PUB_01               2.996 2.868 2.996 2.868
-score HTML_ENTITY_ASCII                     2.878 1.769 2.878 1.769
+score HOSTED_IMG_MULTI_PUB_01               2.996 2.891 2.996 2.891
+score HTML_ENTITY_ASCII                     2.999 2.450 2.999 2.450
 score HTML_ENTITY_ASCII_TINY                1.000 1.000 1.000 1.000
-score HTML_FONT_TINY_NORDNS                 1.997 0.807 1.997 0.807
+score HTML_FONT_TINY_NORDNS                 1.997 0.702 1.997 0.702
 score HTML_OFF_PAGE                         2.996 2.996 2.996 2.996
 score HTML_SHRT_CMNT_OBFU_MANY              1.000 1.000 1.000 1.000
-score HTML_SINGLET_MANY                     1.000 1.886 1.000 1.886
-score HTML_TAG_BALANCE_CENTER               2.199 2.716 2.199 2.716
-score HTML_TEXT_INVISIBLE_FONT              1.000 1.544 1.000 1.544
-score HTML_TEXT_INVISIBLE_STYLE             0.594 2.407 0.594 2.407
+score HTML_SINGLET_MANY                     1.000 1.879 1.000 1.879
+score HTML_TAG_BALANCE_CENTER               2.255 2.651 2.255 2.651
+score HTML_TEXT_INVISIBLE_FONT              1.000 1.995 1.000 1.995
+score HTML_TEXT_INVISIBLE_STYLE             0.374 2.288 0.374 2.288
 score IMG_ONLY_FM_DOM_INFO                  1.000 1.000 1.000 1.000
 score JH_SPAMMY_HEADERS                     3.496 3.496 3.496 3.496
 score JH_SPAMMY_PATTERN01                   1.000 1.000 1.000 1.000
 score JH_SPAMMY_PATTERN02                   1.000 1.000 1.000 1.000
-score KHOP_HELO_FCRDNS                      0.400 0.067 0.400 0.067
+score KHOP_HELO_FCRDNS                      0.400 0.146 0.400 0.146
 score LINKEDIN_IMG_NOT_RCVD_LNKN            1.000 1.000 1.000 1.000
 score LIST_PRTL_PUMPDUMP                    1.000 1.000 1.000 1.000
 score LIST_PRTL_SAME_USER                   1.000 1.000 1.000 1.000
-score LONGLN_LOW_CONTRAST                   2.497 2.497 2.497 2.497
-score LONG_HEX_URI                          2.025 0.233 2.025 0.233
-score LONG_IMG_URI                          0.001 1.433 0.001 1.433
-score LONG_INVISIBLE_TEXT                   1.437 1.945 1.437 1.945
+score LONGLN_LOW_CONTRAST                   2.497 2.368 2.497 2.368
+score LONG_HEX_URI                          2.022 0.227 2.022 0.227
+score LONG_IMG_URI                          0.001 1.287 0.001 1.287
+score LONG_INVISIBLE_TEXT                   1.439 2.082 1.439 2.082
 score LOTS_OF_MONEY                         0.010 0.010 0.010 0.010
 score LOTTO_AGENT                           1.000 1.000 1.000 1.000
-score LOTTO_DEPT                            0.904 0.001 0.904 0.001
+score LOTTO_DEPT                            1.169 0.001 1.169 0.001
 score LUCRATIVE                             1.000 1.000 1.000 1.000
 score MALF_HTML_B64                         1.000 1.000 1.000 1.000
-score MALWARE_NORDNS                        1.990 0.001 1.990 0.001
+score MALWARE_NORDNS                        1.835 0.001 1.835 0.001
 score MALWARE_PASSWORD                      1.000 1.000 1.000 1.000
 score MANY_HDRS_LCASE                       0.100 0.100 0.100 0.100
-score MANY_SPAN_IN_TEXT                     2.607 2.208 2.607 2.208
-score MILLION_HUNDRED                       0.001 0.017 0.001 0.017
-score MIMEOLE_DIRECT_TO_MX                  0.001 0.001 0.001 0.001
+score MANY_SPAN_IN_TEXT                     3.144 2.162 3.144 2.162
+score MILLION_HUNDRED                       0.001 0.153 0.001 0.153
+score MIMEOLE_DIRECT_TO_MX                  0.693 0.001 0.693 0.001
 score MIME_NO_TEXT                          1.000 1.000 1.000 1.000
-score MIXED_AREA_CASE                       1.246 0.712 1.246 0.712
-score MIXED_CENTER_CASE                     2.497 2.081 2.497 2.081
-score MIXED_CTYPE_CASE                      0.374 2.225 0.374 2.225
-score MIXED_ES                              2.996 1.205 2.996 1.205
-score MIXED_FONT_CASE                       2.497 2.134 2.497 2.134
-score MIXED_HREF_CASE                       1.592 1.647 1.592 1.647
-score MIXED_IMG_CASE                        2.194 2.996 2.194 2.996
+score MIXED_AREA_CASE                       0.270 2.042 0.270 2.042
+score MIXED_CENTER_CASE                     2.498 2.109 2.498 2.109
+score MIXED_CTYPE_CASE                      1.521 2.350 1.521 2.350
+score MIXED_ES                              2.996 1.367 2.996 1.367
+score MIXED_FONT_CASE                       2.497 1.661 2.497 1.661
+score MIXED_HREF_CASE                       1.556 0.406 1.556 0.406
+score MIXED_IMG_CASE                        2.190 2.996 2.190 2.996
 score MONERO_DEADLINE                       1.000 1.000 1.000 1.000
 score MONERO_EXTORT_01                      1.000 1.000 1.000 1.000
 score MONERO_MALWARE                        1.000 1.000 1.000 1.000
 score MONERO_PAY_ME                         1.000 1.000 1.000 1.000
 score MONEY_ATM_CARD                        0.001 0.001 0.001 0.001
-score MONEY_FORM_SHORT                      2.497 0.363 2.497 0.363
-score MONEY_FRAUD_3                         2.896 2.796 2.896 2.796
-score MONEY_FRAUD_5                         1.937 0.282 1.937 0.282
-score MONEY_FRAUD_8                         3.096 1.810 3.096 1.810
-score MONEY_FREEMAIL_REPTO                  1.104 0.001 1.104 0.001
-score MONEY_FROM_41                         1.997 1.416 1.997 1.416
+score MONEY_FORM_SHORT                      2.497 0.175 2.497 0.175
+score MONEY_FRAUD_3                         2.996 2.796 2.996 2.796
+score MONEY_FRAUD_5                         0.904 0.271 0.904 0.271
+score MONEY_FRAUD_8                         3.196 1.927 3.196 1.927
+score MONEY_FREEMAIL_REPTO                  1.085 0.001 1.085 0.001
+score MONEY_FROM_41                         1.997 1.544 1.997 1.544
 score MONEY_FROM_MISSP                      1.997 1.997 1.997 1.997
 score MSGID_DOLLARS_URI_IMG                 1.000 1.000 1.000 1.000
 score MSGID_HDR_MALF                        1.000 1.000 1.000 1.000
 score MSMAIL_PRI_ABNORMAL                   0.001 0.001 0.001 0.001
 score MSM_PRIO_REPTO                        1.000 1.000 1.000 1.000
-score NAME_EMAIL_DIFF                       2.933 0.001 2.933 0.001
+score NAME_EMAIL_DIFF                       3.595 0.001 3.595 0.001
 score NEWEGG_IMG_NOT_RCVD_NEGG              1.000 1.000 1.000 1.000
 score NEW_PRODUCTS                          1.000 1.000 1.000 1.000
-score NICE_REPLY_A                          -0.996 -0.001 -0.996 -0.001
-score NORDNS_LOW_CONTRAST                   1.887 0.001 1.887 0.001
+score NICE_REPLY_A                          -1.001 -0.001 -1.001 -0.001
+score NORDNS_LOW_CONTRAST                   1.884 0.001 1.884 0.001
 score NO_FM_NAME_IP_HOSTN                   0.001 0.001 0.001 0.001
 score NSL_RCVD_FROM_USER                    0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER                    1.661 1.093 1.661 1.093
+score NSL_RCVD_HELO_USER                    1.634 1.926 1.634 1.926
 score OBFU_BITCOIN                          1.000 1.000 1.000 1.000
-score ODD_FREEM_REPTO                       2.996 1.770 2.996 1.770
-score PDS_BTC_ID                            0.498 0.463 0.498 0.463
+score ODD_FREEM_REPTO                       2.996 1.641 2.996 1.641
+score PDS_BTC_ID                            0.256 0.498 0.256 0.498
 score PDS_BTC_MSGID                         0.001 0.001 0.001 0.001
 score PDS_DBL_URL_TNB_RUNON                 1.997 1.000 1.997 1.000
 score PDS_FRNOM_TODOM_DBL_URL               1.499 1.498 1.499 1.498
-score PDS_FRNOM_TODOM_NAKED_TO              1.498 1.110 1.498 1.110
-score PDS_FROM_NAME_TO_DOMAIN               1.997 1.881 1.997 1.881
+score PDS_FRNOM_TODOM_NAKED_TO              1.498 1.053 1.498 1.053
+score PDS_FROM_2_EMAILS                     1.000 1.697 1.000 1.697
+score PDS_FROM_NAME_TO_DOMAIN               1.997 1.941 1.997 1.941
 score PDS_HELO_SPF_FAIL                     0.001 1.000 0.001 1.000
 score PDS_HP_HELO_NORDNS                    0.998 0.001 0.998 0.001
-score PDS_OTHER_BAD_TLD                     1.998 1.770 1.998 1.770
+score PDS_OTHER_BAD_TLD                     1.997 1.766 1.997 1.766
 score PDS_PHPEXP_BOT                        1.498 1.498 1.498 1.498
 score PDS_PHP_EVAL                          1.498 1.498 1.498 1.498
 score PDS_RDNS_DYNAMIC_FP                   0.001 0.001 0.001 0.001
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE     1.997 1.263 1.997 1.263
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE     1.997 1.236 1.997 1.236
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE      1.997 1.997 1.997 1.997
 score PDS_TONAME_EQ_TOLOCAL_VSHORT          0.998 0.998 0.998 0.998
-score PDS_TO_EQ_FROM_NAME                   2.058 3.402 2.058 3.402
+score PDS_TO_EQ_FROM_NAME                   0.378 2.311 0.378 2.311
 score PHISH_AZURE_CLOUDAPP                  3.500 3.500 3.500 3.500
 score PHISH_FBASEAPP                        1.000 1.000 1.000 1.000
 score PHOTO_EDITING_DIRECT                  1.000 1.000 1.000 1.000
@@ -277,16 +281,16 @@ score PHOTO_EDITING_FREEM
 score PHP_NOVER_MUA                         1.000 1.000 1.000 1.000
 score PHP_ORIG_SCRIPT                       2.497 2.497 2.497 2.497
 score PHP_ORIG_SCRIPT_EVAL                  2.996 2.996 2.996 2.996
-score PHP_SCRIPT                            2.497 2.099 2.497 2.099
+score PHP_SCRIPT                            2.497 2.077 2.497 2.077
 score PHP_SCRIPT_MUA                        1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT               0.998 0.838 0.998 0.838
+score PP_MIME_FAKE_ASCII_TEXT               0.998 0.833 0.998 0.833
 score PP_TOO_MUCH_UNICODE02                 0.500 0.500 0.500 0.500
 score PP_TOO_MUCH_UNICODE05                 1.000 1.000 1.000 1.000
 score PUMPDUMP                              1.000 1.000 1.000 1.000
 score PUMPDUMP_MULTI                        1.000 1.000 1.000 1.000
-score RAND_HEADER_LIST_SPOOF                2.997 2.996 2.997 2.996
-score RAND_HEADER_MANY                      2.997 1.000 2.997 1.000
-score RAND_MKTG_HEADER                      1.997 1.496 1.997 1.496
+score RAND_HEADER_LIST_SPOOF                2.996 2.996 2.996 2.996
+score RAND_HEADER_MANY                      2.996 1.000 2.996 1.000
+score RAND_MKTG_HEADER                      1.997 1.490 1.997 1.490
 score RCVD_DOTEDU_SHORT                     1.000 1.000 1.000 1.000
 score RCVD_DOTEDU_SUSP_URI                  1.000 1.000 1.000 1.000
 score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
@@ -301,8 +305,8 @@ score RCVD_IN_MSPIKE_L5
 score RCVD_IN_MSPIKE_WL                     0.001 0.001 0.001 0.001
 score RCVD_IN_MSPIKE_ZBI                    0.001 0.001 0.001 0.001
 score RDNS_NUM_TLD_ATCHNX                   1.000 1.000 1.000 1.000
-score RDNS_NUM_TLD_XM                       0.244 1.588 0.244 1.588
-score REPLYTO_EMPTY                         3.096 2.996 3.096 2.996
+score RDNS_NUM_TLD_XM                       1.128 2.425 1.128 2.425
+score REPLYTO_EMPTY                         3.196 2.996 3.196 2.996
 score REPTO_419_FRAUD                       1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_AOL                   1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_AOL_LOOSE             1.000 1.000 1.000 1.000
@@ -317,77 +321,78 @@ score REPTO_419_FRAUD_YH
 score REPTO_419_FRAUD_YH_LOOSE              1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YJ                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YN                    1.000 1.000 1.000 1.000
-score SCC_BODY_URI_ONLY                     2.696 0.146 2.696 0.146
-score SCC_ISEMM_LID_1                       1.667 1.161 1.667 1.161
-score SCC_THREE_WORD_MONTY                  1.482 0.289 1.482 0.289
-score SCRIPT_GIBBERISH                      2.696 2.596 2.696 2.596
-score SENDGRID_REDIR                        1.499 0.001 1.499 0.001
+score SCC_BODY_URI_ONLY                     2.644 0.206 2.644 0.206
+score SCC_ISEMM_LID_1                       1.999 1.000 1.999 1.000
+score SCC_THREE_WORD_MONTY                  1.660 1.031 1.660 1.031
+score SCRIPT_GIBBERISH                      2.768 2.596 2.768 2.596
+score SENDGRID_REDIR                        1.498 0.001 1.498 0.001
 score SENDGRID_REDIR_PHISH                  1.000 1.000 1.000 1.000
 score SEO_SUSP_NTLD                         1.000 1.000 1.000 1.000
-score SERGIO_SUBJECT_PORN011                2.305 1.008 2.305 1.008
+score SERGIO_SUBJECT_PORN011                1.350 1.040 1.350 1.040
 score SERGIO_SUBJECT_VIAGRA01               4.399 4.295 4.399 4.295
-score SHOPIFY_IMG_NOT_RCVD_SFY              2.497 2.497 2.497 2.497
-score SHORTENED_URL_SRC                     2.497 2.397 2.497 2.397
-score SHORTENER_SHORT_IMG                   1.715 1.468 1.715 1.468
+score SHOPIFY_IMG_NOT_RCVD_SFY              2.497 2.498 2.497 2.498
+score SHORTENED_URL_SRC                     2.529 2.397 2.529 2.397
+score SHORTENER_SHORT_IMG                   0.925 1.123 0.925 1.123
 score SHORT_IMG_SUSP_NTLD                   1.000 1.000 1.000 1.000
 score SHORT_SHORTNER                        1.997 1.997 1.997 1.997
-score SPOOFED_FREEMAIL                      0.001 1.997 0.001 1.997
+score SPOOFED_FREEMAIL                      0.001 1.787 0.001 1.787
 score SPOOFED_FREEMAIL_NO_RDNS              1.000 0.001 1.000 0.001
-score SPOOFED_FREEM_REPTO                   0.001 1.556 0.001 1.556
+score SPOOFED_FREEM_REPTO                   0.001 1.466 0.001 1.466
 score SPOOFED_FREEM_REPTO_CHN               0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_RUS               0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID                       1.000 0.325 1.000 0.325
-score STATIC_XPRIO_OLE                      1.593 1.997 1.593 1.997
+score SPOOF_GMAIL_MID                       1.000 0.535 1.000 0.535
+score STATIC_XPRIO_OLE                      1.997 1.997 1.997 1.997
 score STOCK_TIP                             1.000 1.000 1.000 1.000
 score SUBJ_BRKN_WORDNUMS                    1.000 1.000 1.000 1.000
 score SURBL_BLOCKED                         0.001 0.001 0.001 0.001
-score SUSP_UTF8_WORD_COMBO                  2.997 2.996 2.997 2.996
-score SUSP_UTF8_WORD_MANY                   0.255 0.141 0.255 0.141
-score SUSP_UTF8_WORD_SUBJ                   1.302 0.001 1.302 0.001
+score SUSP_UTF8_WORD_COMBO                  2.996 2.996 2.996 2.996
+score SUSP_UTF8_WORD_MANY                   0.597 0.147 0.597 0.147
+score SUSP_UTF8_WORD_SUBJ                   1.301 0.001 1.301 0.001
 score SYSADMIN                              1.000 1.000 1.000 1.000
 score TAGSTAT_IMG_NOT_RCVD_TGST             1.000 1.000 1.000 1.000
 score TARINGANET_IMG_NOT_RCVD_TN            1.000 1.000 1.000 1.000
-score THIS_AD                               1.098 0.998 1.098 0.998
-score THIS_IS_ADV_SUSP_NTLD                 1.093 1.000 1.093 1.000
+score THIS_AD                               1.099 0.998 1.099 0.998
+score THIS_IS_ADV_SUSP_NTLD                 0.001 1.000 0.001 1.000
 score TONLINE_FAKE_DKIM                     1.000 1.000 1.000 1.000
 score TO_EQ_FM_DIRECT_MX                    0.001 0.001 0.001 0.001
 score TO_EQ_FM_DOM_SPF_FAIL                 0.001 0.001 0.001 0.001
 score TO_EQ_FM_SPF_FAIL                     0.001 0.001 0.001 0.001
-score TO_IN_SUBJ                            0.099 0.098 0.099 0.098
-score TO_NAME_SUBJ_NO_RDNS                  2.999 2.812 2.999 2.812
+score TO_IN_SUBJ                            0.098 0.098 0.098 0.098
+score TO_NAME_SUBJ_NO_RDNS                  2.612 2.932 2.612 2.932
 score TO_NO_BRKTS_FROM_MSSP                 2.497 0.001 2.497 0.001
-score TO_NO_BRKTS_HTML_IMG                  1.504 1.330 1.504 1.330
+score TO_NO_BRKTS_HTML_IMG                  1.715 1.405 1.715 1.405
 score TO_NO_BRKTS_HTML_ONLY                 1.997 1.997 1.997 1.997
 score TO_NO_BRKTS_MSFT                      1.000 0.001 1.000 0.001
-score TO_NO_BRKTS_NORDNS_HTML               1.997 0.384 1.997 0.384
-score TO_NO_BRKTS_PCNT                      2.497 1.727 2.497 1.727
+score TO_NO_BRKTS_NORDNS_HTML               1.997 0.392 1.997 0.392
+score TO_NO_BRKTS_PCNT                      1.000 1.557 1.000 1.557
 score TUMBLR_IMG_NOT_RCVD_TUMB              1.997 1.997 1.997 1.997
-score TVD_RCVD_SPACE_BRACKET                2.188 3.097 2.188 3.097
+score TVD_RCVD_SPACE_BRACKET                2.504 3.096 2.504 3.096
 score TVD_SPACE_ENCODED                     1.000 0.001 1.000 0.001
+score TVD_SPACE_RATIO_MINFP                 1.000 0.001 1.000 0.001
 score TW_GIBBERISH_MANY                     1.000 1.000 1.000 1.000
 score UC_GIBBERISH_OBFU                     1.000 1.000 1.000 1.000
 score UNDISC_FREEM                          3.595 3.396 3.595 3.396
-score UNDISC_MONEY                          3.595 3.206 3.595 3.206
+score UNDISC_MONEY                          3.595 3.318 3.595 3.318
 score UNICODE_OBFU_ASC                      2.497 2.497 2.497 2.497
 score UNICODE_OBFU_ZW                       1.000 1.000 1.000 1.000
 score UNSUB_GOOG_FORM                       2.497 2.497 2.497 2.497
 score URI_ADOBESPARK                        1.000 1.000 1.000 1.000
-score URI_AZURE_CLOUDAPP                    2.996 2.774 2.996 2.774
+score URI_AZURE_CLOUDAPP                    2.996 2.939 2.996 2.939
 score URI_DASHGOVEDU                        1.000 1.000 1.000 1.000
 score URI_DATA                              1.000 1.000 1.000 1.000
-score URI_DOTEDU                            0.301 1.997 0.301 1.997
+score URI_DOTEDU                            0.303 1.997 0.303 1.997
 score URI_DOTEDU_ENTITY                     1.000 1.000 1.000 1.000
 score URI_FIREBASEAPP                       2.996 2.996 2.996 2.996
-score URI_GOOGLE_PROXY                      2.198 1.805 2.198 1.805
-score URI_GOOG_STO_SPAMMY                   2.421 2.999 2.421 2.999
+score URI_GOOGLE_PROXY                      2.298 1.824 2.298 1.824
+score URI_GOOG_STO_SPAMMY                   2.999 2.053 2.999 2.053
 score URI_HEX_IP                            1.000 1.000 1.000 1.000
 score URI_IMG_WP_REDIR                      1.000 1.000 1.000 1.000
-score URI_IN_URI_10                         2.306 3.595 2.306 3.595
-score URI_IN_URI_5                          3.196 0.865 3.196 0.865
+score URI_IN_URI_10                         3.382 3.595 3.382 3.595
+score URI_IN_URI_5                          1.514 0.851 1.514 0.851
 score URI_LONG_REPEAT                       1.000 1.000 1.000 1.000
-score URI_ONLY_MSGID_MALF                   1.000 1.997 1.000 1.997
+score URI_ONLY_MSGID_MALF                   1.000 1.998 1.000 1.998
 score URI_OPTOUT_3LD                        1.000 1.000 1.000 1.000
-score URI_PHISH                             3.995 3.639 3.995 3.639
+score URI_PHISH                             3.995 3.646 3.995 3.646
 score URI_PHP_REDIR                         3.496 3.496 3.496 3.496
 score URI_TRY_3LD                           1.997 1.997 1.997 1.997
 score URI_TRY_USME                          1.000 1.000 1.000 1.000
@@ -396,15 +401,15 @@ score URI_WP_HACKED
 score URI_WP_HACKED_2                       2.497 2.497 2.497 2.497
 score USB_DRIVES                            1.000 1.000 1.000 1.000
 score USER_IN_DKIM_WELCOMELIST              0.001 0.001 0.001 0.001
-score VFY_ACCT_NORDNS                       2.487 2.491 2.487 2.491
+score VFY_ACCT_NORDNS                       2.749 2.624 2.749 2.624
 score VPS_NO_NTLD                           1.000 1.000 1.000 1.000
 score WALMART_IMG_NOT_RCVD_WAL              1.000 1.000 1.000 1.000
-score WORD_INVIS                            1.982 0.780 1.982 0.780
+score WORD_INVIS                            0.001 0.804 0.001 0.804
 score WORD_INVIS_MANY                       1.000 1.000 1.000 1.000
-score XFER_LOTSA_MONEY                      0.999 0.998 0.999 0.998
-score XM_DIGITS_ONLY                        2.989 1.604 2.989 1.604
-score XM_RANDOM                             2.497 1.497 2.497 1.497
-score XM_RECPTID                            2.997 2.996 2.997 2.996
+score XFER_LOTSA_MONEY                      0.998 0.998 0.998 0.998
+score XM_DIGITS_ONLY                        0.684 1.085 0.684 1.085
+score XM_RANDOM                             2.497 1.982 2.497 1.982
+score XM_RECPTID                            2.996 2.997 2.996 2.997
 score XPRIO                                 1.000 0.001 1.000 0.001
 score XPRIO_SHORT_SUBJ                      1.000 1.000 1.000 1.000
-score YOU_INHERIT                           2.133 2.011 2.133 2.011
+score YOU_INHERIT                           2.177 1.987 2.177 1.987

Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1897926&r1=1897925&r2=1897926&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Thu Feb 10 02:56:35 2022
@@ -1,214 +1,216 @@
-# Using score set 0 logs for revision 1897813 from:
-# ham-darxus.r1897813.log ham-ena-week0.r1897813.log ham-ena-week1.r1897813.log ham-ena-week2.r1897813.log ham-ena-week3.r1897813.log ham-ena-week4.r1897813.log ham-giovanni-ham.r1897813.log ham-giovanni-spammy.r1897813.log ham-giovanni-spam.r1897813.log ham-grenier.r1897813.log ham-hege.r1897813.log ham-jhardin.r1897813.log ham-llanga.r1897813.log ham-mmiroslaw-mails-ham.r1897813.log ham-mmiroslaw-mails-spam.r1897813.log ham-pds.r1897813.log ham-spamsponge.r1897813.log ham-thendrikx.r1897813.log spam-darxus.r1897813.log spam-ena-week0.r1897813.log spam-ena-week1.r1897813.log spam-ena-week2.r1897813.log spam-ena-week3.r1897813.log spam-ena-week4.r1897813.log spam-giovanni-ham.r1897813.log spam-giovanni-spammy.r1897813.log spam-giovanni-spam.r1897813.log spam-grenier.r1897813.log spam-hege.r1897813.log spam-jhardin.r1897813.log spam-llanga.r1897813.log spam-mmiroslaw-mails-ham.r1897813.log spam-mmiroslaw-mails-spam.r1897813.log spam-pds.r1897813.log spam-spamsponge.r1897813.log spam-
 thendrikx.r1897813.log
+# Using score set 0 logs for revision 1897845 from:
+# ham-darxus.r1897845.log ham-ena-week0.r1897845.log ham-ena-week1.r1897845.log ham-ena-week2.r1897845.log ham-ena-week3.r1897845.log ham-ena-week4.r1897845.log ham-giovanni-ham.r1897845.log ham-giovanni-spammy.r1897845.log ham-giovanni-spam.r1897845.log ham-grenier.r1897845.log ham-hege.r1897845.log ham-jhardin.r1897845.log ham-llanga.r1897845.log ham-mmiroslaw-mails-ham.r1897845.log ham-mmiroslaw-mails-spam.r1897845.log ham-pds.r1897845.log ham-spamsponge.r1897845.log ham-thendrikx.r1897845.log spam-darxus.r1897845.log spam-ena-week0.r1897845.log spam-ena-week1.r1897845.log spam-ena-week2.r1897845.log spam-ena-week3.r1897845.log spam-ena-week4.r1897845.log spam-giovanni-ham.r1897845.log spam-giovanni-spammy.r1897845.log spam-giovanni-spam.r1897845.log spam-grenier.r1897845.log spam-hege.r1897845.log spam-jhardin.r1897845.log spam-llanga.r1897845.log spam-mmiroslaw-mails-ham.r1897845.log spam-mmiroslaw-mails-spam.r1897845.log spam-pds.r1897845.log spam-spamsponge.r1897845.log spam-
 thendrikx.r1897845.log
 
 score ACCT_PHISHING_MANY             2.996
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.996
 score AC_HTML_NONSENSE_TAGS          1.997
-score AC_SPAMMY_URI_PATTERNS8        2.337
+score AC_SPAMMY_URI_PATTERNS8        2.196
 score ADMITS_SPAM                    2.497
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.499
+score ADVANCE_FEE_2_NEW_FRM_MNY      1.811
 score ADVANCE_FEE_2_NEW_MONEY        1.997
-score ADVANCE_FEE_3_NEW              3.246
-score ADVANCE_FEE_3_NEW_FRM_MNY      0.145
-score ADVANCE_FEE_3_NEW_MONEY        2.232
-score ADVANCE_FEE_4_NEW              1.561
+score ADVANCE_FEE_3_NEW              3.288
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.065
+score ADVANCE_FEE_3_NEW_MONEY        2.001
+score ADVANCE_FEE_4_NEW              2.397
 score ADVANCE_FEE_4_NEW_FRM_MNY      2.596
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW              0.669
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY        0.036
-score AD_PREFS                       0.001 # force non-zero
-score ALIBABA_IMG_NOT_RCVD_ALI       1.920
+score ADVANCE_FEE_5_NEW              1.847
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_5_NEW_MONEY        0.001
+score AD_PREFS                       0.001
+score ALIBABA_IMG_NOT_RCVD_ALI       2.247
 score AMAZON_IMG_NOT_RCVD_AMZN       2.497
 score APP_DEVELOPMENT_NORDNS         1.997
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
 score BIGNUM_EMAILS_FREEM            2.996
 score BIGNUM_EMAILS_MANY             2.996
-score BITCOIN_DEADLINE               0.399
-score BITCOIN_EXTORT_01              2.100
-score BITCOIN_ONAN                   2.929
-score BITCOIN_SPAM_02                2.397
+score BITCOIN_DEADLINE               1.589
+score BITCOIN_EXTORT_01              2.344
+score BITCOIN_ONAN                   1.506
+score BITCOIN_SPAM_02                2.394
 score BITCOIN_SPAM_07                3.496
 score BITCOIN_XPRIO                  0.001
-score BITCOIN_YOUR_INFO              1.402
+score BITCOIN_YOUR_INFO              1.405
 score BODY_EMPTY                     1.997
-score BODY_SINGLE_URI                2.296
-score BOGUS_MIME_VERSION             2.739
+score BODY_SINGLE_URI                2.368
+score BOGUS_MIME_VERSION             2.748
 score CK_HELO_GENERIC                0.248
-score CONTENT_AFTER_HTML             2.497
+score CONTENT_AFTER_HTML             2.371
 score CTE_8BIT_MISMATCH              0.001
-score DEAR_BENEFICIARY               0.844
+score DEAR_BENEFICIARY               0.906
 score DX_TEXT_03                     1.498
-score FAKE_REPLY_B                   1.808
-score FILL_THIS_FORM                 1.200
+score FAKE_REPLY_A1                  2.306
+score FAKE_REPLY_B                   2.013
+score FILL_THIS_FORM                 1.196
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_HTML_NOHTML         2.996
-score FONT_INVIS_LONG_LINE           1.783
-score FONT_INVIS_MSGID               2.497
+score FONT_INVIS_LONG_LINE           1.697
+score FONT_INVIS_MSGID               1.999
 score FONT_INVIS_NORDNS              0.001
-score FONT_INVIS_POSTEXTRAS          1.832
-score FORM_FRAUD_5                   1.878
-score FOUND_YOU                      2.591
-score FREEMAIL_FORGED_FROMDOMAIN     0.248
-score FROMSPACE                      3.596
-score FROM_2_EMAILS_SHORT            0.204
-score FROM_IN_TO_AND_SUBJ            1.897
+score FONT_INVIS_POSTEXTRAS          1.844
+score FORM_FRAUD_5                   0.001
+score FOUND_YOU                      2.548
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FROMSPACE                      3.595
+score FROM_2_EMAILS_SHORT            0.001
+score FROM_IN_TO_AND_SUBJ            1.797
 score FROM_MISSPACED                 1.997
-score FROM_MISSP_EH_MATCH            0.776
-score FROM_MISSP_FREEMAIL            1.108
+score FROM_MISSP_EH_MATCH            1.998
+score FROM_MISSP_FREEMAIL            1.877
 score FROM_MISSP_MSFT                0.001
+score FROM_MISSP_TO_UNDISC           0.707
 score FROM_MISSP_USER                0.001
-score FROM_MULTI_NORDNS              0.355
-score FROM_NTLD_LINKBAIT             0.424
-score FROM_NTLD_REPLY_FREEMAIL       1.402
+score FROM_MULTI_NORDNS              0.359
+score FROM_NTLD_LINKBAIT             1.493
+score FROM_NTLD_REPLY_FREEMAIL       1.999
 score FROM_SUSPICIOUS_NTLD           0.498
 score FROM_SUSPICIOUS_NTLD_FP        1.997
 score FROM_WSP_TRAIL                 2.397
 score FSL_CTYPE_WIN1251              0.001
-score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   2.497
-score FUZZY_CLICK_HERE               2.188
-score FUZZY_NORTON                   2.443
-score FUZZY_PAYPAL                   2.696
+score FSL_NEW_HELO_USER              1.997
+score FUZZY_AMAZON                   2.596
+score FUZZY_CLICK_HERE               2.085
+score FUZZY_NORTON                   0.899
+score FUZZY_PAYPAL                   2.596
 score FUZZY_SECURITY                 2.497
-score FUZZY_WALLET                   3.197
+score FUZZY_WALLET                   3.196
 score GAPPY_LOW_CONTRAST             2.497
-score GB_FAKE_RF_SHORT               1.998
-score GB_FREEMAIL_DISPTO             0.499
-score GOOG_REDIR_NORDNS              2.607
-score GOOG_STO_EMAIL_PHISH           2.173
-score GOOG_STO_IMG_HTML              2.824
+score GB_FAKE_RF_SHORT               1.997
+score GB_FREEMAIL_DISPTO             0.498
+score GOOG_REDIR_NORDNS              2.593
+score GOOG_STO_EMAIL_PHISH           2.938
+score GOOG_STO_IMG_HTML              2.807
+score GOOG_STO_IMG_NOHTML            2.497
 score GOOG_STO_NOIMG_HTML            2.996
 score HAS_X_OUTGOING_SPAM_STAT       1.997
-score HDRS_LCASE_IMGONLY             0.047
+score HDRS_LCASE_IMGONLY             0.098
 score HDRS_MISSP                     2.497
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.249
 score HELO_NO_DOMAIN                 0.001
-score HK_LOTTO                       0.795
+score HK_LOTTO                       0.998
 score HK_NAME_MR_MRS                 0.998
 score HK_RANDOM_ENVFROM              0.998
-score HK_RANDOM_FROM                 0.999
+score HK_RANDOM_FROM                 0.998
 score HK_RANDOM_REPLYTO              0.998
-score HK_SCAM                        0.201
-score HOSTED_IMG_DIRECT_MX           2.856
-score HOSTED_IMG_FREEM               3.497
+score HK_SCAM                        0.453
+score HOSTED_IMG_DIRECT_MX           3.496
+score HOSTED_IMG_FREEM               3.496
 score HOSTED_IMG_MULTI_PUB_01        2.996
-score HTML_ENTITY_ASCII              2.878
+score HTML_ENTITY_ASCII              2.999
 score HTML_FONT_TINY_NORDNS          1.997
 score HTML_OFF_PAGE                  2.996
-score HTML_TAG_BALANCE_CENTER        2.199
-score HTML_TEXT_INVISIBLE_STYLE      0.594
+score HTML_TAG_BALANCE_CENTER        2.255
+score HTML_TEXT_INVISIBLE_STYLE      0.374
 score JH_SPAMMY_HEADERS              3.496
 score LONGLN_LOW_CONTRAST            2.497
-score LONG_HEX_URI                   2.025
+score LONG_HEX_URI                   2.022
 score LONG_IMG_URI                   0.001
-score LONG_INVISIBLE_TEXT            1.437
+score LONG_INVISIBLE_TEXT            1.439
 score LOTS_OF_MONEY                  0.010
-score LOTTO_DEPT                     0.904
-score MALWARE_NORDNS                 1.990
-score MANY_SPAN_IN_TEXT              2.607
+score LOTTO_DEPT                     1.169
+score MALWARE_NORDNS                 1.835
+score MANY_SPAN_IN_TEXT              3.144
 score MILLION_HUNDRED                0.001
-score MIMEOLE_DIRECT_TO_MX           0.001
-score MIXED_AREA_CASE                1.246
-score MIXED_CENTER_CASE              2.497
-score MIXED_CTYPE_CASE               0.374
+score MIMEOLE_DIRECT_TO_MX           0.693
+score MIXED_AREA_CASE                0.270
+score MIXED_CENTER_CASE              2.498
+score MIXED_CTYPE_CASE               1.521
 score MIXED_ES                       2.996
 score MIXED_FONT_CASE                2.497
-score MIXED_HREF_CASE                1.592
-score MIXED_IMG_CASE                 2.194
+score MIXED_HREF_CASE                1.556
+score MIXED_IMG_CASE                 2.190
 score MONEY_ATM_CARD                 0.001
 score MONEY_FORM_SHORT               2.497
-score MONEY_FRAUD_3                  2.896
-score MONEY_FRAUD_5                  1.937
-score MONEY_FRAUD_8                  3.096
-score MONEY_FREEMAIL_REPTO           1.104
+score MONEY_FRAUD_3                  2.996
+score MONEY_FRAUD_5                  0.904
+score MONEY_FRAUD_8                  3.196
+score MONEY_FREEMAIL_REPTO           1.085
 score MONEY_FROM_41                  1.997
 score MONEY_FROM_MISSP               1.997
 score MSMAIL_PRI_ABNORMAL            0.001
-score NAME_EMAIL_DIFF                2.933
-score NICE_REPLY_A                   -0.996
-score NORDNS_LOW_CONTRAST            1.887
+score NAME_EMAIL_DIFF                3.595
+score NICE_REPLY_A                   -1.001
+score NORDNS_LOW_CONTRAST            1.884
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.661
+score NSL_RCVD_HELO_USER             1.634
 score ODD_FREEM_REPTO                2.996
-score PDS_BTC_ID                     0.498
-score PDS_BTC_MSGID                  0.001
+score PDS_BTC_ID                     0.256
+score PDS_BTC_MSGID                  0.001 # force non-zero
 score PDS_DBL_URL_TNB_RUNON          1.997
 score PDS_FRNOM_TODOM_DBL_URL        1.499
 score PDS_FRNOM_TODOM_NAKED_TO       1.498
 score PDS_FROM_NAME_TO_DOMAIN        1.997
 score PDS_HP_HELO_NORDNS             0.998
-score PDS_OTHER_BAD_TLD              1.998
+score PDS_OTHER_BAD_TLD              1.997
 score PDS_PHPEXP_BOT                 1.498
 score PDS_PHP_EVAL                   1.498
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.997
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.997
 score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.998
-score PDS_TO_EQ_FROM_NAME            2.058
+score PDS_TO_EQ_FROM_NAME            0.378
 score PHP_ORIG_SCRIPT                2.497
 score PHP_ORIG_SCRIPT_EVAL           2.996
 score PHP_SCRIPT                     2.497
 score PP_MIME_FAKE_ASCII_TEXT        0.998
-score RAND_HEADER_LIST_SPOOF         2.997
-score RAND_HEADER_MANY               2.997
+score RAND_HEADER_LIST_SPOOF         2.996
+score RAND_HEADER_MANY               2.996
 score RAND_MKTG_HEADER               1.997
-score RDNS_NUM_TLD_XM                0.244
-score REPLYTO_EMPTY                  3.096
-score SCC_BODY_URI_ONLY              2.696
-score SCC_ISEMM_LID_1                1.667
-score SCC_THREE_WORD_MONTY           1.482
-score SCRIPT_GIBBERISH               2.696
-score SENDGRID_REDIR                 1.499
-score SERGIO_SUBJECT_PORN011         2.305
+score RDNS_NUM_TLD_XM                1.128
+score REPLYTO_EMPTY                  3.196
+score SCC_BODY_URI_ONLY              2.644
+score SCC_ISEMM_LID_1                1.999
+score SCC_THREE_WORD_MONTY           1.660
+score SCRIPT_GIBBERISH               2.768
+score SENDGRID_REDIR                 1.498
+score SERGIO_SUBJECT_PORN011         1.350
 score SERGIO_SUBJECT_VIAGRA01        4.399
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.497
-score SHORTENED_URL_SRC              2.497
-score SHORTENER_SHORT_IMG            1.715
+score SHORTENED_URL_SRC              2.529
+score SHORTENER_SHORT_IMG            0.925
 score SHORT_SHORTNER                 1.997
-score STATIC_XPRIO_OLE               1.593
-score SUSP_UTF8_WORD_COMBO           2.997
-score SUSP_UTF8_WORD_MANY            0.255
-score SUSP_UTF8_WORD_SUBJ            1.302
-score THIS_AD                        1.098
-score THIS_IS_ADV_SUSP_NTLD          1.093
+score STATIC_XPRIO_OLE               1.997
+score SUSP_UTF8_WORD_COMBO           2.996
+score SUSP_UTF8_WORD_MANY            0.597
+score SUSP_UTF8_WORD_SUBJ            1.301
+score THIS_AD                        1.099
+score THIS_IS_ADV_SUSP_NTLD          0.001
 score TO_EQ_FM_DIRECT_MX             0.001
-score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.999
+score TO_IN_SUBJ                     0.098
+score TO_NAME_SUBJ_NO_RDNS           2.612
 score TO_NO_BRKTS_FROM_MSSP          2.497
-score TO_NO_BRKTS_HTML_IMG           1.504
+score TO_NO_BRKTS_HTML_IMG           1.715
 score TO_NO_BRKTS_HTML_ONLY          1.997
 score TO_NO_BRKTS_NORDNS_HTML        1.997
-score TO_NO_BRKTS_PCNT               2.497
 score TUMBLR_IMG_NOT_RCVD_TUMB       1.997
-score TVD_RCVD_SPACE_BRACKET         2.188
+score TVD_RCVD_SPACE_BRACKET         2.504
 score UNDISC_FREEM                   3.595
 score UNDISC_MONEY                   3.595
 score UNICODE_OBFU_ASC               2.497
 score UNSUB_GOOG_FORM                2.497
 score URI_AZURE_CLOUDAPP             2.996
-score URI_DOTEDU                     0.301
+score URI_DOTEDU                     0.303
 score URI_FIREBASEAPP                2.996
-score URI_GOOGLE_PROXY               2.198
-score URI_GOOG_STO_SPAMMY            2.421
-score URI_IN_URI_10                  2.306
-score URI_IN_URI_5                   3.196
+score URI_GOOGLE_PROXY               2.298
+score URI_GOOG_STO_SPAMMY            2.999
+score URI_IN_URI_10                  3.382
+score URI_IN_URI_5                   1.514
 score URI_PHISH                      3.995
 score URI_PHP_REDIR                  3.496
 score URI_TRY_3LD                    1.997
 score URI_WP_HACKED_2                2.497
-score VFY_ACCT_NORDNS                2.487
-score WORD_INVIS                     1.982
-score XFER_LOTSA_MONEY               0.999
-score XM_DIGITS_ONLY                 2.989
+score VFY_ACCT_NORDNS                2.749
+score WORD_INVIS                     0.001
+score XFER_LOTSA_MONEY               0.998
+score XM_DIGITS_ONLY                 0.684
 score XM_RANDOM                      2.497
-score XM_RECPTID                     2.997
-score YOU_INHERIT                    2.133
+score XM_RECPTID                     2.996
+score YOU_INHERIT                    2.177
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -262,6 +264,7 @@ score FREEM_FRNUM_UNICD_EMPTY        1.0
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
 score FROM_ADDR_WS                   1.000
 score FROM_MISSP_PHISH               1.000
+score FROM_MISSP_REPLYTO             1.000
 score FROM_NUMERIC_TLD               1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
@@ -274,7 +277,6 @@ score GOOGLE_DRIVE_REPLY_BAD_NTLD    1.0
 score GOOG_MALWARE_DNLD              1.000
 score GOOG_STO_HTML_PHISH            1.000
 score GOOG_STO_HTML_PHISH_MANY       1.000
-score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
 score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
@@ -310,6 +312,7 @@ score MSM_PRIO_REPTO                 1.0
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
 score OBFU_BITCOIN                   1.000
+score PDS_FROM_2_EMAILS              1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000
 score PHOTO_EDITING_DIRECT           1.000
@@ -349,7 +352,9 @@ score TAGSTAT_IMG_NOT_RCVD_TGST      1.0
 score TARINGANET_IMG_NOT_RCVD_TN     1.000
 score TONLINE_FAKE_DKIM              1.000
 score TO_NO_BRKTS_MSFT               1.000
+score TO_NO_BRKTS_PCNT               1.000
 score TVD_SPACE_ENCODED              1.000
+score TVD_SPACE_RATIO_MINFP          1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ZW                1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1897926&r1=1897925&r2=1897926&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Thu Feb 10 02:56:35 2022
@@ -6,61 +6,61 @@ score AC_BR_BONANZA                  0.0
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.996
 score AC_HTML_NONSENSE_TAGS          1.997
-score AC_SPAMMY_URI_PATTERNS8        1.038
+score AC_SPAMMY_URI_PATTERNS8        1.664
 score ADMITS_SPAM                    2.397
-score ADVANCE_FEE_2_NEW_FRM_MNY      2.018
+score ADVANCE_FEE_2_NEW_FRM_MNY      2.151
 score ADVANCE_FEE_2_NEW_MONEY        1.997
-score ADVANCE_FEE_3_NEW              0.643
+score ADVANCE_FEE_3_NEW              0.630
 score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_3_NEW_MONEY        0.220
-score ADVANCE_FEE_4_NEW              2.297
+score ADVANCE_FEE_3_NEW_MONEY        0.279
+score ADVANCE_FEE_4_NEW              2.298
 score ADVANCE_FEE_4_NEW_FRM_MNY      2.497
-score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW              1.044
+score ADVANCE_FEE_4_NEW_MONEY        0.001 # force non-zero
+score ADVANCE_FEE_5_NEW              0.970
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        0.472
-score AD_PREFS                       0.433
-score ALIBABA_IMG_NOT_RCVD_ALI       2.266
+score ADVANCE_FEE_5_NEW_MONEY        0.340
+score AD_PREFS                       0.476
+score ALIBABA_IMG_NOT_RCVD_ALI       2.117
 score AMAZON_IMG_NOT_RCVD_AMZN       2.497
 score APP_DEVELOPMENT_NORDNS         1.997
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            2.031
+score BIGNUM_EMAILS_FREEM            2.428
 score BIGNUM_EMAILS_MANY             2.996
 score BITCOIN_DEADLINE               0.001
-score BITCOIN_EXTORT_01              1.762
+score BITCOIN_EXTORT_01              1.241
 score BITCOIN_MALWARE                0.001
-score BITCOIN_SPAM_02                0.425
-score BITCOIN_SPAM_05                0.853
+score BITCOIN_SPAM_02                0.881
+score BITCOIN_SPAM_05                1.160
 score BITCOIN_SPAM_07                3.499
 score BITCOIN_XPRIO                  0.001
-score BITCOIN_YOUR_INFO              0.366
-score BODY_EMPTY                     1.886
-score BODY_SINGLE_URI                1.069
-score BODY_URI_ONLY                  0.446
-score BOGUS_MIME_VERSION             1.525
-score CK_HELO_GENERIC                0.001
+score BITCOIN_YOUR_INFO              0.164
+score BODY_EMPTY                     1.917
+score BODY_SINGLE_URI                1.067
+score BODY_URI_ONLY                  0.380
+score BOGUS_MIME_VERSION             1.523
+score CK_HELO_GENERIC                0.001 # force non-zero
 score CONTENT_AFTER_HTML             2.497
-score CTE_8BIT_MISMATCH              0.001
-score DEAR_BENEFICIARY               1.500
+score CTE_8BIT_MISMATCH              0.001 # force non-zero
+score DEAR_BENEFICIARY               1.439
 score DKIMWL_BL                      2.996
 score DKIMWL_WL_HIGH                 -0.001
-score DKIMWL_WL_MED                  -0.001 # force non-zero
-score DKIMWL_WL_MEDHI                -0.810
+score DKIMWL_WL_MED                  -0.001
+score DKIMWL_WL_MEDHI                -0.737
 score DX_TEXT_03                     1.597
-score END_FUTURE_EMAILS              0.067
-score FAKE_REPLY_B                   1.575
-score FILL_THIS_FORM                 0.997
+score END_FUTURE_EMAILS              0.052
+score FAKE_REPLY_B                   0.701
+score FILL_THIS_FORM                 0.998
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_HTML_NOHTML         0.001
-score FONT_INVIS_LONG_LINE           2.054
-score FONT_INVIS_MSGID               1.006
-score FONT_INVIS_NORDNS              0.581
+score FONT_INVIS_HTML_NOHTML         2.690
+score FONT_INVIS_LONG_LINE           2.131
+score FONT_INVIS_MSGID               0.554
+score FONT_INVIS_NORDNS              1.055
 score FONT_INVIS_POSTEXTRAS          3.496
-score FORGED_SPF_HELO                1.308
+score FORGED_SPF_HELO                1.280
 score FORM_FRAUD                     0.998
 score FORM_FRAUD_3                   2.297
 score FORM_FRAUD_5                   0.001
-score FOUND_YOU                      2.957
+score FOUND_YOU                      2.558
 score FREEMAIL_FORGED_FROMDOMAIN     0.248
 score FROMSPACE                      3.496
 score FROM_2_EMAILS_SHORT            2.996
@@ -69,86 +69,86 @@ score FROM_FMBLA_NEWDOM14            0.9
 score FROM_FMBLA_NEWDOM28            0.798
 score FROM_GOV_DKIM_AU               -0.001
 score FROM_GOV_SPOOF                 0.998
-score FROM_IN_TO_AND_SUBJ            1.799
+score FROM_IN_TO_AND_SUBJ            1.717
 score FROM_MISSPACED                 0.001
 score FROM_MISSP_EH_MATCH            0.001
 score FROM_MISSP_FREEMAIL            0.001
 score FROM_MISSP_MSFT                0.001
 score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_TO_UNDISC           1.436
+score FROM_MISSP_TO_UNDISC           1.288
 score FROM_MISSP_USER                0.001
-score FROM_MULTI_NORDNS              1.003
-score FROM_NTLD_LINKBAIT             1.844
+score FROM_MULTI_NORDNS              1.001
+score FROM_NTLD_LINKBAIT             0.838
 score FROM_PAYPAL_SPOOF              0.001
 score FROM_SUSPICIOUS_NTLD           0.498
 score FROM_SUSPICIOUS_NTLD_FP        1.997
 score FROM_WSP_TRAIL                 2.297
-score FSL_BULK_SIG                   1.370
+score FSL_BULK_SIG                   1.294
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
 score FUZZY_AMAZON                   2.297
 score FUZZY_CLICK_HERE               2.397
-score FUZZY_NORTON                   0.716
+score FUZZY_NORTON                   1.622
 score FUZZY_PAYPAL                   2.596
-score FUZZY_SECURITY                 0.505
+score FUZZY_SECURITY                 1.643
 score FUZZY_WALLET                   3.096
 score GAPPY_LOW_CONTRAST             2.497
-score GB_FAKE_RF_SHORT               0.465
+score GB_FAKE_RF_SHORT               0.467
 score GB_FREEMAIL_DISPTO             0.498
-score GOOG_REDIR_NORDNS              2.785
-score GOOG_STO_EMAIL_PHISH           2.160
+score GOOG_REDIR_NORDNS              2.797
+score GOOG_STO_EMAIL_PHISH           2.999
 score GOOG_STO_IMG_HTML              2.996
-score GOOG_STO_NOIMG_HTML            2.935
-score HAS_X_OUTGOING_SPAM_STAT       1.196
-score HDRS_LCASE_IMGONLY             0.098
+score GOOG_STO_NOIMG_HTML            2.947
+score HAS_X_OUTGOING_SPAM_STAT       1.215
+score HDRS_LCASE_IMGONLY             0.099
 score HDRS_MISSP                     2.497
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.248
 score HELO_NO_DOMAIN                 0.001
-score HK_LOTTO                       0.919
+score HK_LOTTO                       0.999
 score HK_NAME_MR_MRS                 0.998
 score HK_RANDOM_ENVFROM              0.998
-score HK_RANDOM_FROM                 0.576
-score HK_RANDOM_REPLYTO              0.885
-score HK_SCAM                        0.083
-score HOSTED_IMG_DIRECT_MX           3.037
+score HK_RANDOM_FROM                 0.590
+score HK_RANDOM_REPLYTO              0.868
+score HK_SCAM                        0.158
+score HOSTED_IMG_DIRECT_MX           2.324
 score HOSTED_IMG_FREEM               3.496
-score HOSTED_IMG_MULTI_PUB_01        2.868
-score HTML_ENTITY_ASCII              1.769
-score HTML_FONT_TINY_NORDNS          0.807
+score HOSTED_IMG_MULTI_PUB_01        2.891
+score HTML_ENTITY_ASCII              2.450
+score HTML_FONT_TINY_NORDNS          0.702
 score HTML_OFF_PAGE                  2.996
-score HTML_SINGLET_MANY              1.886
-score HTML_TAG_BALANCE_CENTER        2.716
-score HTML_TEXT_INVISIBLE_FONT       1.544
-score HTML_TEXT_INVISIBLE_STYLE      2.407
+score HTML_SINGLET_MANY              1.879
+score HTML_TAG_BALANCE_CENTER        2.651
+score HTML_TEXT_INVISIBLE_FONT       1.995
+score HTML_TEXT_INVISIBLE_STYLE      2.288
 score JH_SPAMMY_HEADERS              3.496
-score KHOP_FAKE_EBAY                 0.633
-score KHOP_HELO_FCRDNS               0.067
-score LONGLN_LOW_CONTRAST            2.497
-score LONG_HEX_URI                   0.233
-score LONG_IMG_URI                   1.433
-score LONG_INVISIBLE_TEXT            1.945
+score KHOP_FAKE_EBAY                 0.870
+score KHOP_HELO_FCRDNS               0.146
+score LONGLN_LOW_CONTRAST            2.368
+score LONG_HEX_URI                   0.227
+score LONG_IMG_URI                   1.287
+score LONG_INVISIBLE_TEXT            2.082
 score LOTS_OF_MONEY                  0.010
 score LOTTO_DEPT                     0.001
 score MALWARE_NORDNS                 0.001
-score MANY_SPAN_IN_TEXT              2.208
-score MILLION_HUNDRED                0.017
+score MANY_SPAN_IN_TEXT              2.162
+score MILLION_HUNDRED                0.153
 score MIMEOLE_DIRECT_TO_MX           0.001
-score MIXED_AREA_CASE                0.712
-score MIXED_CENTER_CASE              2.081
-score MIXED_CTYPE_CASE               2.225
-score MIXED_ES                       1.205
-score MIXED_FONT_CASE                2.134
-score MIXED_HREF_CASE                1.647
+score MIXED_AREA_CASE                2.042
+score MIXED_CENTER_CASE              2.109
+score MIXED_CTYPE_CASE               2.350
+score MIXED_ES                       1.367
+score MIXED_FONT_CASE                1.661
+score MIXED_HREF_CASE                0.406
 score MIXED_IMG_CASE                 2.996
 score MONEY_ATM_CARD                 0.001
-score MONEY_FORM_SHORT               0.363
+score MONEY_FORM_SHORT               0.175
 score MONEY_FRAUD_3                  2.796
-score MONEY_FRAUD_5                  0.282
-score MONEY_FRAUD_8                  1.810
+score MONEY_FRAUD_5                  0.271
+score MONEY_FRAUD_8                  1.927
 score MONEY_FREEMAIL_REPTO           0.001
-score MONEY_FROM_41                  1.416
+score MONEY_FROM_41                  1.544
 score MONEY_FROM_MISSP               1.997
 score MSMAIL_PRI_ABNORMAL            0.001
 score NAME_EMAIL_DIFF                0.001
@@ -156,90 +156,90 @@ score NICE_REPLY_A                   -0.
 score NORDNS_LOW_CONTRAST            0.001
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.093
-score ODD_FREEM_REPTO                1.770
-score PDS_BTC_ID                     0.463
+score NSL_RCVD_HELO_USER             1.926
+score ODD_FREEM_REPTO                1.641
+score PDS_BTC_ID                     0.498
 score PDS_BTC_MSGID                  0.001
 score PDS_FRNOM_TODOM_DBL_URL        1.498
-score PDS_FRNOM_TODOM_NAKED_TO       1.110
-score PDS_FROM_2_EMAILS              1.643
-score PDS_FROM_NAME_TO_DOMAIN        1.881
+score PDS_FRNOM_TODOM_NAKED_TO       1.053
+score PDS_FROM_2_EMAILS              1.697
+score PDS_FROM_NAME_TO_DOMAIN        1.941
 score PDS_HP_HELO_NORDNS             0.001
-score PDS_OTHER_BAD_TLD              1.770
+score PDS_OTHER_BAD_TLD              1.766
 score PDS_PHPEXP_BOT                 1.498
 score PDS_PHP_EVAL                   1.498
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.263
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.236
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.997
 score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.998
-score PDS_TO_EQ_FROM_NAME            3.402
+score PDS_TO_EQ_FROM_NAME            2.311
 score PHP_ORIG_SCRIPT                2.497
 score PHP_ORIG_SCRIPT_EVAL           2.996
-score PHP_SCRIPT                     2.099
-score PP_MIME_FAKE_ASCII_TEXT        0.838
+score PHP_SCRIPT                     2.077
+score PP_MIME_FAKE_ASCII_TEXT        0.833
 score RAND_HEADER_LIST_SPOOF         2.996
-score RAND_MKTG_HEADER               1.496
-score RCVD_IN_MSPIKE_H2              -0.001
-score RDNS_NUM_TLD_XM                1.588
+score RAND_MKTG_HEADER               1.490
+score RCVD_IN_MSPIKE_H2              -0.001 # force non-zero
+score RDNS_NUM_TLD_XM                2.425
 score REPLYTO_EMPTY                  2.996
-score SCC_BODY_URI_ONLY              0.146
-score SCC_ISEMM_LID_1                1.161
-score SCC_THREE_WORD_MONTY           0.289
+score SCC_BODY_URI_ONLY              0.206
+score SCC_ISEMM_LID_1                1.000
+score SCC_THREE_WORD_MONTY           1.031
 score SCRIPT_GIBBERISH               2.596
 score SENDGRID_REDIR                 0.001
-score SERGIO_SUBJECT_PORN011         1.008
+score SERGIO_SUBJECT_PORN011         1.040
 score SERGIO_SUBJECT_VIAGRA01        4.295
-score SHOPIFY_IMG_NOT_RCVD_SFY       2.497
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.498
 score SHORTENED_URL_SRC              2.397
-score SHORTENER_SHORT_IMG            1.468
+score SHORTENER_SHORT_IMG            1.123
 score SHORT_SHORTNER                 1.997
-score SPOOFED_FREEMAIL               1.997
+score SPOOFED_FREEMAIL               1.787
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOFED_FREEM_REPTO            1.556
-score SPOOF_GMAIL_MID                0.325
+score SPOOFED_FREEM_REPTO            1.466
+score SPOOF_GMAIL_MID                0.535
 score STATIC_XPRIO_OLE               1.997
 score SUSP_UTF8_WORD_COMBO           2.996
-score SUSP_UTF8_WORD_MANY            0.141
+score SUSP_UTF8_WORD_MANY            0.147
 score SUSP_UTF8_WORD_SUBJ            0.001
 score THIS_AD                        0.998
 score TO_EQ_FM_DIRECT_MX             0.001
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_HTML_ONLY             0.253
+score TO_EQ_FM_HTML_ONLY             0.256
 score TO_EQ_FM_SPF_FAIL              0.001
 score TO_IN_SUBJ                     0.098
-score TO_NAME_SUBJ_NO_RDNS           2.812
+score TO_NAME_SUBJ_NO_RDNS           2.932
 score TO_NO_BRKTS_FROM_MSSP          0.001
-score TO_NO_BRKTS_HTML_IMG           1.330
+score TO_NO_BRKTS_HTML_IMG           1.405
 score TO_NO_BRKTS_HTML_ONLY          1.997
-score TO_NO_BRKTS_NORDNS_HTML        0.384
-score TO_NO_BRKTS_PCNT               1.727
+score TO_NO_BRKTS_NORDNS_HTML        0.392
+score TO_NO_BRKTS_PCNT               1.557
 score TUMBLR_IMG_NOT_RCVD_TUMB       1.997
-score TVD_RCVD_SPACE_BRACKET         3.097
+score TVD_RCVD_SPACE_BRACKET         3.096
 score UNDISC_FREEM                   3.396
-score UNDISC_MONEY                   3.206
+score UNDISC_MONEY                   3.318
 score UNICODE_OBFU_ASC               2.497
 score UNSUB_GOOG_FORM                2.497
-score URI_AZURE_CLOUDAPP             2.774
+score URI_AZURE_CLOUDAPP             2.939
 score URI_DOTEDU                     1.997
 score URI_FIREBASEAPP                2.996
-score URI_GOOGLE_PROXY               1.805
-score URI_GOOG_STO_SPAMMY            2.999
+score URI_GOOGLE_PROXY               1.824
+score URI_GOOG_STO_SPAMMY            2.053
 score URI_IN_URI_10                  3.595
-score URI_IN_URI_5                   0.865
-score URI_ONLY_MSGID_MALF            1.997
-score URI_PHISH                      3.639
+score URI_IN_URI_5                   0.851
+score URI_ONLY_MSGID_MALF            1.998
+score URI_PHISH                      3.646
 score URI_PHP_REDIR                  3.496
 score URI_TRY_3LD                    1.997
 score URI_WP_HACKED                  3.496
 score URI_WP_HACKED_2                2.497
-score VFY_ACCT_NORDNS                2.491
-score WORD_INVIS                     0.780
+score VFY_ACCT_NORDNS                2.624
+score WORD_INVIS                     0.804
 score XFER_LOTSA_MONEY               0.998
-score XM_DIGITS_ONLY                 1.604
-score XM_RANDOM                      1.497
-score XM_RECPTID                     2.996
+score XM_DIGITS_ONLY                 1.085
+score XM_RANDOM                      1.982
+score XM_RECPTID                     2.997
 score XPRIO                          0.001
-score YOU_INHERIT                    2.011
+score YOU_INHERIT                    1.987
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000