You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2024/11/17 02:42:57 UTC

svn commit: r1921914 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Author: spamassassin_role
Date: Sun Nov 17 02:42:57 2024
New Revision: 1921914

URL: http://svn.apache.org/viewvc?rev=1921914&view=rev
Log:
updated scores for revision 1921909 active rules added since last mass-check

Modified:
    spamassassin/trunk/rulesrc/scores/72_scores.cf
    spamassassin/trunk/rulesrc/scores/scores-set0
    spamassassin/trunk/rulesrc/scores/scores-set1
    spamassassin/trunk/rulesrc/scores/scores-set2
    spamassassin/trunk/rulesrc/scores/scores-set3
    spamassassin/trunk/rulesrc/scores/stats-set0
    spamassassin/trunk/rulesrc/scores/stats-set1

Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1921914&r1=1921913&r2=1921914&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Sun Nov 17 02:42:57 2024
@@ -1,9 +1,9 @@
-score ACCT_PHISHING_MANY                    2.394 2.999 2.394 2.999
+score ACCT_PHISHING_MANY                    2.478 2.367 2.478 2.367
 score AC_BR_BONANZA                         0.001 0.001 0.001 0.001
 score AC_DIV_BONANZA                        0.001 0.001 0.001 0.001
 score AC_FROM_MANY_DOTS                     2.499 2.499 2.499 2.499
 score AC_HTML_NONSENSE_TAGS                 1.999 1.999 1.999 1.999
-score AC_POST_EXTRAS                        1.392 2.300 1.392 2.300
+score AC_POST_EXTRAS                        0.854 2.052 0.854 2.052
 score AC_SPAMMY_URI_PATTERNS1               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS10              1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS11              1.000 1.000 1.000 1.000
@@ -13,282 +13,278 @@ score AC_SPAMMY_URI_PATTERNS3
 score AC_SPAMMY_URI_PATTERNS4               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS8               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS9               1.000 1.000 1.000 1.000
-score ADMITS_SPAM                           4.199 2.066 4.199 2.066
+score ADMITS_SPAM                           4.199 1.814 4.199 1.814
 score ADULT_DATING_COMPANY                  10.000 10.000 10.000 10.000
-score ADVANCE_FEE_2_NEW_FORM                0.813 1.999 0.813 1.999
-score ADVANCE_FEE_2_NEW_FRM_MNY             0.001 1.000 0.001 1.000
-score ADVANCE_FEE_2_NEW_MONEY               1.999 0.041 1.999 0.041
-score ADVANCE_FEE_3_NEW                     0.001 0.001 0.001 0.001
-score ADVANCE_FEE_3_NEW_FORM                0.799 1.599 0.799 1.599
-score ADVANCE_FEE_3_NEW_FRM_MNY             0.001 1.271 0.001 1.271
-score ADVANCE_FEE_3_NEW_MONEY               3.000 2.699 3.000 2.699
-score ADVANCE_FEE_4_NEW                     0.151 2.688 0.151 2.688
-score ADVANCE_FEE_4_NEW_FRM_MNY             1.587 0.001 1.587 0.001
-score ADVANCE_FEE_4_NEW_MONEY               0.001 2.313 0.001 2.313
-score ADVANCE_FEE_5_NEW                     2.399 0.001 2.399 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY             0.863 1.750 0.863 1.750
-score ADVANCE_FEE_5_NEW_MONEY               2.890 0.001 2.890 0.001
+score ADVANCE_FEE_2_NEW_FORM                0.760 1.868 0.760 1.868
+score ADVANCE_FEE_2_NEW_FRM_MNY             0.001 0.433 0.001 0.433
+score ADVANCE_FEE_2_NEW_MONEY               1.999 1.999 1.999 1.999
+score ADVANCE_FEE_3_NEW                     0.001 2.518 0.001 2.518
+score ADVANCE_FEE_3_NEW_FORM                2.299 1.404 2.299 1.404
+score ADVANCE_FEE_3_NEW_FRM_MNY             0.001 0.001 0.001 0.001
+score ADVANCE_FEE_3_NEW_MONEY               3.000 2.799 3.000 2.799
+score ADVANCE_FEE_4_NEW                     0.154 1.848 0.154 1.848
+score ADVANCE_FEE_4_NEW_FRM_MNY             0.567 0.583 0.567 0.583
+score ADVANCE_FEE_4_NEW_MONEY               0.001 0.001 0.001 0.001
+score ADVANCE_FEE_5_NEW                     2.399 2.295 2.399 2.295
+score ADVANCE_FEE_5_NEW_FRM_MNY             0.552 0.759 0.552 0.759
+score ADVANCE_FEE_5_NEW_MONEY               2.890 3.299 2.890 3.299
 score AD_PREFS                              0.499 0.499 0.499 0.499
 score ALIBABA_IMG_NOT_RCVD_ALI              1.000 1.000 1.000 1.000
 score AMAZON_IMG_NOT_RCVD_AMZN              1.000 1.000 1.000 1.000
 score APP_DEVELOPMENT_FREEM                 1.000 1.000 1.000 1.000
 score APP_DEVELOPMENT_NORDNS                1.000 1.000 1.000 1.000
-score ARC_SIGNED                            0.001 0.001 0.001 0.001
-score ARC_VALID                             0.001 0.001 0.001 0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2          0.001 0.001 0.001 0.001
 score BEBEE_IMG_NOT_RCVD_BB                 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM                   1.963 1.591 1.963 1.591
+score BIGNUM_EMAILS_FREEM                   0.981 1.000 0.981 1.000
 score BIGNUM_EMAILS_MANY                    2.999 2.999 2.999 2.999
 score BITCOIN_BOMB                          1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE                      1.000 1.000 1.000 1.000
-score BITCOIN_EXTORT_01                     4.505 0.616 4.505 0.616
+score BITCOIN_DEADLINE                      1.000 0.584 1.000 0.584
+score BITCOIN_EXTORT_01                     4.970 4.201 4.970 4.201
 score BITCOIN_EXTORT_02                     1.000 1.000 1.000 1.000
 score BITCOIN_IMGUR                         1.000 1.000 1.000 1.000
-score BITCOIN_MALWARE                       0.889 1.000 0.889 1.000
+score BITCOIN_MALWARE                       2.129 2.302 2.129 2.302
 score BITCOIN_OBFU_SUBJ                     1.000 1.000 1.000 1.000
-score BITCOIN_ONAN                          1.776 1.000 1.776 1.000
+score BITCOIN_ONAN                          1.162 2.058 1.162 2.058
 score BITCOIN_PAY_ME                        1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_01                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_02                       2.499 2.499 2.499 2.499
-score BITCOIN_SPAM_03                       2.499 2.499 2.499 2.499
+score BITCOIN_SPAM_03                       2.499 2.500 2.499 2.500
 score BITCOIN_SPAM_04                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05                       0.001 1.910 0.001 1.910
+score BITCOIN_SPAM_05                       0.001 1.000 0.001 1.000
 score BITCOIN_SPAM_06                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07                       3.499 0.281 3.499 0.281
+score BITCOIN_SPAM_07                       3.499 3.425 3.499 3.425
 score BITCOIN_SPAM_08                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_09                       1.499 1.137 1.499 1.137
+score BITCOIN_SPAM_09                       1.499 0.001 1.499 0.001
 score BITCOIN_SPAM_10                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_11                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_12                       1.000 1.000 1.000 1.000
 score BITCOIN_SPF_ONLYALL                   0.001 1.000 0.001 1.000
-score BITCOIN_TOEQFM                        3.499 3.499 3.499 3.499
-score BITCOIN_VISTA                         2.251 3.419 2.251 3.419
-score BITCOIN_XPRIO                         2.499 1.775 2.499 1.775
+score BITCOIN_TOEQFM                        3.499 3.498 3.499 3.498
+score BITCOIN_VISTA                         3.499 1.815 3.499 1.815
+score BITCOIN_XPRIO                         2.499 2.499 2.499 2.499
 score BITCOIN_YOUR_INFO                     1.000 1.000 1.000 1.000
-score BODY_URI_ONLY                         1.701 0.001 1.701 0.001
-score BOGUS_MIME_VERSION                    3.500 0.001 3.500 0.001
-score BOGUS_MSM_HDRS                        0.257 0.850 0.257 0.850
+score BODY_URI_ONLY                         1.702 0.001 1.702 0.001
+score BOGUS_MIME_VERSION                    3.499 3.499 3.499 3.499
+score BOGUS_MSM_HDRS                        2.906 0.262 2.906 0.262
 score BOMB_FREEM                            1.000 1.000 1.000 1.000
 score BOMB_MONEY                            1.000 1.000 1.000 1.000
 score BTC_ORG                               1.000 1.000 1.000 1.000
 score BULK_RE_SUSP_NTLD                     1.000 1.000 1.000 1.000
 score CANT_SEE_AD                           1.000 1.000 1.000 1.000
 score COMMENT_GIBBERISH                     1.000 1.000 1.000 1.000
+score COMPENSATION                          0.001 0.001 0.001 0.001
 score CONTENT_AFTER_HTML                    1.000 1.000 1.000 1.000
-score CONTENT_AFTER_HTML_WEAK               1.000 0.717 1.000 0.717
-score CTE_8BIT_MISMATCH                     0.999 0.639 0.999 0.639
+score CONTENT_AFTER_HTML_WEAK               1.000 1.000 1.000 1.000
+score CTE_8BIT_MISMATCH                     0.999 0.637 0.999 0.637
 score DAY_I_EARNED                          1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY                      3.399 3.099 3.399 3.099
-score DKIMWL_BL                             0.001 1.299 0.001 1.299
+score DEAR_BENEFICIARY                      3.399 3.199 3.399 3.199
+score DKIMWL_BL                             0.001 1.283 0.001 1.283
 score DKIMWL_BLOCKED                        0.001 0.001 0.001 0.001
-score DKIMWL_WL_HIGH                        0.001 -0.121 0.001 -0.121
+score DKIMWL_WL_HIGH                        0.001 -0.141 0.001 -0.141
 score DKIMWL_WL_MED                         0.001 -0.001 0.001 -0.001
 score DKIMWL_WL_MEDHI                       0.001 -0.001 0.001 -0.001
 score DOS_BODY_HIGH_NO_MID                  3.399 3.499 3.399 3.499
 score DOTGOV_IMAGE                          1.000 1.000 1.000 1.000
 score DSN_NO_MIMEVERSION                    1.999 1.999 1.999 1.999
-score DYNAMIC_IMGUR                         2.356 2.503 2.356 2.503
+score DYNAMIC_IMGUR                         2.357 1.534 2.357 1.534
 score EBAY_IMG_NOT_RCVD_EBAY                1.000 1.000 1.000 1.000
 score ENCRYPTED_MESSAGE                     -1.000 -0.999 -1.000 -0.999
-score END_FUTURE_EMAILS                     2.499 2.465 2.499 2.465
+score END_FUTURE_EMAILS                     2.499 2.451 2.499 2.451
 score ENVFROM_GOOG_TRIX                     1.000 1.000 1.000 1.000
-score FACEBOOK_IMG_NOT_RCVD_FB              1.999 1.999 1.999 1.999
-score FBI_MONEY                             0.251 1.004 0.251 1.004
-score FBI_SPOOF                             0.629 0.752 0.629 0.752
+score FACEBOOK_IMG_NOT_RCVD_FB              1.999 2.000 1.999 2.000
+score FBI_MONEY                             0.395 0.424 0.395 0.424
+score FBI_SPOOF                             0.001 1.999 0.001 1.999
 score FILL_THIS_FORM                        0.001 0.001 0.001 0.001
 score FONT_INVIS_DIRECT                     1.000 1.000 1.000 1.000
 score FONT_INVIS_DOTGOV                     1.000 1.000 1.000 1.000
-score FONT_INVIS_HTML_NOHTML                2.999 0.948 2.999 0.948
-score FONT_INVIS_LONG_LINE                  0.784 2.098 0.784 2.098
-score FONT_INVIS_MSGID                      1.946 1.435 1.946 1.435
-score FONT_INVIS_NORDNS                     0.001 1.048 0.001 1.048
-score FONT_INVIS_POSTEXTRAS                 1.898 1.098 1.898 1.098
+score FONT_INVIS_HTML_NOHTML                2.999 0.119 2.999 0.119
+score FONT_INVIS_LONG_LINE                  0.791 1.852 0.791 1.852
+score FONT_INVIS_MSGID                      1.950 1.440 1.950 1.440
+score FONT_INVIS_NORDNS                     0.001 0.456 0.001 0.456
+score FONT_INVIS_POSTEXTRAS                 2.434 1.347 2.434 1.347
+score FORGED_SPF_HELO                       0.001 2.249 0.001 2.249
 score FORM_FRAUD                            0.999 0.999 0.999 0.999
-score FORM_FRAUD_3                          1.866 2.899 1.866 2.899
-score FORM_FRAUD_5                          1.859 0.788 1.859 0.788
-score FOUND_YOU                             2.602 3.250 2.602 3.250
-score FREEMAIL_FORGED_FROMDOMAIN            0.202 0.001 0.202 0.001
+score FORM_FRAUD_3                          1.863 2.825 1.863 2.825
+score FORM_FRAUD_5                          1.859 0.783 1.859 0.783
+score FOUND_YOU                             2.603 3.250 2.603 3.250
+score FREEMAIL_FORGED_FROMDOMAIN            0.156 0.001 0.156 0.001
 score FREEM_FRNUM_UNICD_EMPTY               1.000 1.000 1.000 1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB            1.000 1.000 1.000 1.000
-score FROM_ADDR_WS                          2.999 0.001 2.999 0.001
-score FROM_BANK_NOAUTH                      0.001 0.999 0.001 0.999
+score FROM_ADDR_WS                          2.999 0.451 2.999 0.451
+score FROM_BANK_NOAUTH                      0.001 1.000 0.001 1.000
 score FROM_FMBLA_NDBLOCKED                  0.001 0.001 0.001 0.001
 score FROM_FMBLA_NEWDOM                     0.001 1.499 0.001 1.499
-score FROM_FMBLA_NEWDOM14                   0.001 0.656 0.001 0.656
-score FROM_FMBLA_NEWDOM28                   0.001 0.799 0.001 0.799
-score FROM_GOV_DKIM_AU                      0.001 -0.956 0.001 -0.956
+score FROM_FMBLA_NEWDOM14                   0.001 0.820 0.001 0.820
+score FROM_FMBLA_NEWDOM28                   0.001 0.800 0.001 0.800
+score FROM_GOV_DKIM_AU                      0.001 -0.345 0.001 -0.345
 score FROM_GOV_REPLYTO_FREEMAIL             0.001 1.000 0.001 1.000
 score FROM_GOV_SPOOF                        0.001 1.000 0.001 1.000
-score FROM_IN_TO_AND_SUBJ                   2.399 2.121 2.399 2.121
-score FROM_LONG_DOM                         1.499 1.430 1.499 1.430
+score FROM_IN_TO_AND_SUBJ                   2.399 1.653 2.399 1.653
+score FROM_LONG_DOM                         1.499 0.001 1.499 0.001
 score FROM_LONG_DOM_MINFP                   2.499 2.499 2.499 2.499
 score FROM_MISSPACED                        0.001 0.001 0.001 0.001
-score FROM_MISSP_FREEMAIL                   0.001 0.001 0.001 0.001
-score FROM_MISSP_MSFT                       0.001 0.001 0.001 0.001
-score FROM_MISSP_PHISH                      3.499 1.115 3.499 1.115
-score FROM_MISSP_REPLYTO                    2.398 0.952 2.398 0.952
+score FROM_MISSP_FREEMAIL                   0.001 1.880 0.001 1.880
+score FROM_MISSP_MSFT                       0.001 2.480 0.001 2.480
+score FROM_MISSP_PHISH                      3.500 2.017 3.500 2.017
+score FROM_MISSP_REPLYTO                    2.399 0.793 2.399 0.793
 score FROM_MISSP_SPF_FAIL                   0.001 0.001 0.001 0.001
-score FROM_MISSP_USER                       0.001 0.001 0.001 0.001
-score FROM_MISSP_XPRIO                      0.001 0.001 0.001 0.001
-score FROM_MULTI_NORDNS                     0.001 0.001 0.001 0.001
+score FROM_MISSP_USER                       0.001 2.966 0.001 2.966
+score FROM_MISSP_XPRIO                      0.001 0.448 0.001 0.448
+score FROM_MULTI_NORDNS                     0.001 0.121 0.001 0.121
 score FROM_NEWDOM_BTC                       0.001 1.000 0.001 1.000
-score FROM_NTLD_LINKBAIT                    0.485 0.683 0.485 0.683
-score FROM_NTLD_REPLY_FREEMAIL              1.999 0.274 1.999 0.274
+score FROM_NTLD_LINKBAIT                    0.001 1.971 0.001 1.971
+score FROM_NTLD_REPLY_FREEMAIL              1.446 1.000 1.446 1.000
 score FROM_NUMBERO_NEWDOMAIN                0.001 1.000 0.001 1.000
-score FROM_PAYPAL_SPOOF                     0.001 1.599 0.001 1.599
-score FROM_SUSPICIOUS_NTLD                  0.499 0.499 0.499 0.499
-score FROM_SUSPICIOUS_NTLD_FP               2.000 1.660 2.000 1.660
-score FROM_UNBAL2                           2.599 2.399 2.599 2.399
-score FSL_BULK_SIG                          0.001 0.001 0.001 0.001
+score FROM_PAYPAL_SPOOF                     0.001 1.600 0.001 1.600
+score FROM_SUSPICIOUS_NTLD                  0.499 0.500 0.499 0.500
+score FROM_SUSPICIOUS_NTLD_FP               1.999 1.999 1.999 1.999
+score FROM_UNBAL2                           2.599 2.400 2.599 2.400
+score FSL_BULK_SIG                          0.001 0.136 0.001 0.136
 score FSL_CTYPE_WIN1251                     0.001 0.001 0.001 0.001
 score FSL_NEW_HELO_USER                     0.001 0.001 0.001 0.001
-score FUZZY_AMAZON                          2.092 0.746 2.092 0.746
-score FUZZY_BITCOIN                         0.241 1.779 0.241 1.779
-score FUZZY_NORTON                          1.799 0.001 1.799 0.001
-score FUZZY_PAYPAL                          0.453 1.799 0.453 1.799
-score FUZZY_TRUMP                           2.531 0.001 2.531 0.001
-score GAPPY_HTML                            3.899 3.599 3.899 3.599
+score FUZZY_AMAZON                          1.910 2.215 1.910 2.215
+score FUZZY_BITCOIN                         0.456 2.324 0.456 2.324
+score FUZZY_TRUMP                           1.013 1.430 1.013 1.430
+score GAPPY_HTML                            3.899 2.699 3.899 2.699
 score GAPPY_SALES_LEADS_FREEM               1.000 1.000 1.000 1.000
-score GB_BITCOIN_NH                         1.368 1.597 1.368 1.597
-score GB_CUSTOM_HTM_URI                     1.499 0.996 1.499 0.996
-score GB_FAKE_RF_SHORT                      1.999 1.259 1.999 1.259
+score GB_BITCOIN_NH                         1.004 0.566 1.004 0.566
+score GB_CUSTOM_HTM_URI                     1.499 1.499 1.499 1.499
+score GB_FAKE_RF_SHORT                      1.999 2.000 1.999 2.000
 score GB_FORGED_MUA_POSTFIX                 1.000 1.000 1.000 1.000
 score GB_FREEMAIL_DISPTO                    0.001 0.001 0.001 0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM           0.202 0.499 0.202 0.499
+score GB_FREEMAIL_DISPTO_NOTFREEM           0.201 0.500 0.201 0.500
 score GB_GOOGLE_OBFUR                       0.750 0.750 0.750 0.750
-score GB_HASHBL_BTC                         0.001 4.256 0.001 4.256
+score GB_HASHBL_BTC                         0.001 4.265 0.001 4.265
 score GB_STORAGE_GOOGLE_EMAIL               1.000 1.000 1.000 1.000
 score GOOGLE_DOCS_PHISH                     1.000 1.000 1.000 1.000
 score GOOGLE_DOCS_PHISH_MANY                1.000 1.000 1.000 1.000
 score GOOGLE_DOC_SUSP                       1.000 1.000 1.000 1.000
 score GOOGLE_DRIVE_REPLY_BAD_NTLD           1.000 1.000 1.000 1.000
-score GOOG_MALWARE_DNLD                     3.154 4.490 3.154 4.490
-score GOOG_REDIR_NORDNS                     2.488 1.618 2.488 1.618
-score GOOG_STO_EMAIL_PHISH                  1.000 1.000 1.000 1.000
+score GOOG_MALWARE_DNLD                     3.063 2.884 3.063 2.884
+score GOOG_REDIR_NORDNS                     2.489 1.185 2.489 1.185
+score GOOG_STO_EMAIL_PHISH                  1.000 0.001 1.000 0.001
 score GOOG_STO_HTML_PHISH                   1.000 1.000 1.000 1.000
 score GOOG_STO_HTML_PHISH_MANY              1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_HTML                     1.000 1.000 1.000 1.000
-score GOOG_STO_IMG_NOHTML                   1.000 2.499 1.000 2.499
-score GOOG_STO_NOIMG_HTML                   2.899 2.745 2.899 2.745
+score GOOG_STO_IMG_NOHTML                   1.000 1.000 1.000 1.000
+score GOOG_STO_NOIMG_HTML                   2.899 2.910 2.899 2.910
 score HAS_X_NO_RELAY                        1.000 1.000 1.000 1.000
 score HAS_X_OUTGOING_SPAM_STAT              1.000 1.000 1.000 1.000
-score HDRS_LCASE                            0.100 0.001 0.100 0.001
-score HDRS_MISSP                            2.144 2.497 2.144 2.497
-score HDR_ORDER_FTSDMCXX_DIRECT             0.001 1.784 0.001 1.784
-score HDR_ORDER_FTSDMCXX_NORDNS             0.001 2.437 0.001 2.437
-score HEADER_FROM_DIFFERENT_DOMAINS         0.249 0.001 0.249 0.001
-score HELO_NO_DOMAIN                        0.001 0.001 0.001 0.001
+score HDRS_LCASE                            0.100 0.100 0.100 0.100
+score HDRS_MISSP                            2.146 2.247 2.146 2.247
+score HDR_ORDER_FTSDMCXX_DIRECT             0.001 1.876 0.001 1.876
+score HDR_ORDER_FTSDMCXX_NORDNS             0.010 1.290 0.010 1.290
+score HEADER_FROM_DIFFERENT_DOMAINS         0.250 0.249 0.250 0.249
+score HELO_NO_DOMAIN                        0.001 0.464 0.001 0.464
 score HEXHASH_WORD                          1.000 1.000 1.000 1.000
 score HK_CTE_RAW                            1.000 1.000 1.000 1.000
 score HK_LOTTO                              0.999 0.999 0.999 0.999
-score HK_NAME_FM_MR_MRS                     1.499 1.499 1.499 1.499
-score HK_NAME_MR_MRS                        0.999 0.999 0.999 0.999
+score HK_NAME_FM_MR_MRS                     1.499 0.001 1.499 0.001
+score HK_NAME_MR_MRS                        0.999 0.001 0.999 0.001
 score HK_RANDOM_ENVFROM                     0.004 0.001 0.004 0.001
-score HK_RANDOM_FROM                        0.999 0.043 0.999 0.043
-score HK_RANDOM_REPLYTO                     1.000 0.999 1.000 0.999
+score HK_RANDOM_FROM                        0.999 0.618 0.999 0.618
+score HK_RANDOM_REPLYTO                     0.999 0.999 0.999 0.999
 score HK_RCVD_IP_MULTICAST                  1.000 1.000 1.000 1.000
-score HK_SCAM                               1.859 1.999 1.859 1.999
+score HK_SCAM                               1.855 2.000 1.855 2.000
 score HK_WIN                                0.999 0.999 0.999 0.999
-score HOSTED_IMG_DIRECT_MX                  3.499 3.468 3.499 3.468
+score HOSTED_IMG_DIRECT_MX                  3.499 3.232 3.499 3.232
 score HOSTED_IMG_DQ_UNSUB                   1.000 1.000 1.000 1.000
 score HOSTED_IMG_FREEM                      1.000 1.000 1.000 1.000
 score HOSTED_IMG_MULTI                      1.000 1.000 1.000 1.000
-score HOSTED_IMG_MULTI_PUB_01               0.001 0.235 0.001 0.235
-score HREF_EMPTY_NORDNS                     2.499 1.613 2.499 1.613
-score HREF_EMPTY_PHPMAIL                    1.000 1.112 1.000 1.112
+score HOSTED_IMG_MULTI_PUB_01               0.001 0.001 0.001 0.001
+score HREF_EMPTY_NORDNS                     2.499 1.053 2.499 1.053
+score HREF_EMPTY_PHPMAIL                    1.000 1.000 1.000 1.000
 score HREF_EMPTY_XANTIABUSE                 1.000 1.000 1.000 1.000
 score HREF_EMPTY_XAUTHED                    1.000 1.000 1.000 1.000
-score HTML_BADATTR                          0.051 0.239 0.051 0.239
+score HTML_BADATTR                          0.266 0.408 0.266 0.408
 score HTML_ENTITY_ASCII                     2.999 2.999 2.999 2.999
 score HTML_ENTITY_ASCII_TINY                1.000 1.000 1.000 1.000
-score HTML_FONT_TINY_NORDNS                 1.999 1.922 1.999 1.922
+score HTML_FONT_TINY_NORDNS                 2.000 1.520 2.000 1.520
 score HTML_OFF_PAGE                         1.000 1.000 1.000 1.000
 score HTML_SHRT_CMNT_OBFU_MANY              1.000 1.000 1.000 1.000
-score HTML_SINGLET_MANY                     1.341 2.357 1.341 2.357
-score HTML_TAG_BALANCE_CENTER               2.400 2.698 2.400 2.698
+score HTML_SINGLET_MANY                     1.344 1.312 1.344 1.312
+score HTML_TAG_BALANCE_CENTER               2.401 1.360 2.401 1.360
 score HTML_TEXT_INVISIBLE_FONT              0.001 0.001 0.001 0.001
-score HTML_TEXT_INVISIBLE_STYLE             0.142 0.279 0.142 0.279
-score IMG_DIRECT_TO_MX                      1.403 0.001 1.403 0.001
-score IMG_ONLY_FM_DOM_INFO                  2.190 1.729 2.190 1.729
-score JH_SPAMMY_HEADERS                     3.499 3.200 3.499 3.200
+score HTML_TEXT_INVISIBLE_STYLE             0.147 1.364 0.147 1.364
+score IMG_DIRECT_TO_MX                      1.400 0.001 1.400 0.001
+score IMG_ONLY_FM_DOM_INFO                  2.196 1.161 2.196 1.161
+score JH_SPAMMY_HEADERS                     3.499 3.247 3.499 3.247
 score JH_SPAMMY_PATTERN01                   1.000 1.000 1.000 1.000
 score JH_SPAMMY_PATTERN02                   1.000 1.000 1.000 1.000
 score KHOP_HELO_FCRDNS                      0.399 0.399 0.399 0.399
 score LINKEDIN_IMG_NOT_RCVD_LNKN            1.000 1.000 1.000 1.000
-score LIST_PARTIAL_SHORT_MSG                2.499 1.420 2.499 1.420
+score LIST_PARTIAL_SHORT_MSG                2.500 1.172 2.500 1.172
 score LIST_PRTL_PUMPDUMP                    1.000 1.000 1.000 1.000
 score LIST_PRTL_SAME_USER                   1.000 1.000 1.000 1.000
 score LONGLN_LOW_CONTRAST                   2.499 2.499 2.499 2.499
-score LONG_HEX_URI                          2.999 2.696 2.999 2.696
-score LONG_IMG_URI                          2.999 0.001 2.999 0.001
+score LONG_HEX_URI                          2.999 2.299 2.999 2.299
+score LONG_IMG_URI                          3.000 1.970 3.000 1.970
 score LONG_INVISIBLE_TEXT                   1.000 1.000 1.000 1.000
 score LOTS_OF_MONEY                         0.010 0.010 0.010 0.010
-score LOTTO_AGENT                           1.360 0.852 1.360 0.852
-score LOTTO_DEPT                            1.529 1.999 1.529 1.999
+score LOTTO_AGENT                           1.499 0.913 1.499 0.913
+score LOTTO_DEPT                            1.529 0.001 1.529 0.001
 score LUCRATIVE                             1.000 1.000 1.000 1.000
-score MALFORMED_FREEMAIL                    2.429 0.001 2.429 0.001
+score MALFORMED_FREEMAIL                    2.427 2.198 2.427 2.198
 score MALF_HTML_B64                         1.000 1.000 1.000 1.000
-score MALWARE_NORDNS                        2.522 2.854 2.522 2.854
+score MALWARE_NORDNS                        2.159 2.004 2.159 2.004
 score MALWARE_PASSWORD                      1.000 1.000 1.000 1.000
-score MALW_ATTACH                           2.599 2.500 2.599 2.500
-score MANY_HDRS_LCASE                       0.100 0.001 0.100 0.001
-score MANY_SUBDOM                           2.899 2.999 2.899 2.999
-score MILLION_HUNDRED                       2.973 2.201 2.973 2.201
-score MILLION_USD                           1.999 1.999 1.999 1.999
-score MIMEOLE_DIRECT_TO_MX                  0.237 0.295 0.237 0.295
-score MIME_NO_TEXT                          0.001 0.994 0.001 0.994
+score MANY_SUBDOM                           2.899 2.899 2.899 2.899
+score MAY_BE_FORGED                         0.001 1.436 0.001 1.436
+score MILLION_HUNDRED                       2.262 2.477 2.262 2.477
+score MILLION_USD                           1.858 1.800 1.858 1.800
+score MIMEOLE_DIRECT_TO_MX                  0.226 1.344 0.226 1.344
+score MIME_NO_TEXT                          0.001 0.001 0.001 0.001
 score MIXED_AREA_CASE                       1.000 1.000 1.000 1.000
 score MIXED_CENTER_CASE                     2.499 2.499 2.499 2.499
-score MIXED_ES                              2.299 2.299 2.299 2.299
+score MIXED_ES                              2.299 2.399 2.299 2.399
 score MIXED_FONT_CASE                       1.000 1.000 1.000 1.000
-score MIXED_HREF_CASE                       1.999 1.999 1.999 1.999
+score MIXED_HREF_CASE                       1.999 1.895 1.999 1.895
 score MIXED_IMG_CASE                        1.000 1.000 1.000 1.000
 score MONERO_DEADLINE                       1.000 1.000 1.000 1.000
 score MONERO_EXTORT_01                      1.000 1.000 1.000 1.000
 score MONERO_MALWARE                        1.000 1.000 1.000 1.000
 score MONERO_PAY_ME                         1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD                        0.001 2.092 0.001 2.092
-score MONEY_FORM                            0.001 2.404 0.001 2.404
+score MONEY_ATM_CARD                        0.001 0.001 0.001 0.001
+score MONEY_FORM                            0.001 0.001 0.001 0.001
 score MONEY_FORM_SHORT                      0.001 0.001 0.001 0.001
-score MONEY_FRAUD_3                         0.001 2.699 0.001 2.699
-score MONEY_FRAUD_5                         0.001 2.637 0.001 2.637
+score MONEY_FRAUD_3                         0.001 1.828 0.001 1.828
+score MONEY_FRAUD_5                         0.001 0.001 0.001 0.001
 score MONEY_FRAUD_8                         0.001 0.001 0.001 0.001
-score MONEY_FREEMAIL_REPTO                  2.060 0.023 2.060 0.023
-score MONEY_FROM_41                         1.402 0.723 1.402 0.723
-score MONEY_FROM_MISSP                      0.001 0.001 0.001 0.001
-score MONEY_NOHTML                          1.743 1.346 1.743 1.346
+score MONEY_FREEMAIL_REPTO                  1.807 0.001 1.807 0.001
+score MONEY_FROM_41                         0.815 0.001 0.815 0.001
+score MONEY_FROM_MISSP                      0.001 1.999 0.001 1.999
+score MONEY_NOHTML                          1.979 1.104 1.979 1.104
 score MSGID_DOLLARS_URI_IMG                 1.000 1.000 1.000 1.000
 score MSGID_HDR_MALF                        1.000 1.000 1.000 1.000
-score MSM_PRIO_REPTO                        0.577 0.551 0.577 0.551
+score MSM_PRIO_REPTO                        2.026 1.564 2.026 1.564
 score NA_DOLLARS                            1.500 1.499 1.500 1.499
 score NEWEGG_IMG_NOT_RCVD_NEGG              1.000 1.000 1.000 1.000
 score NEW_PRODUCTS                          1.000 1.000 1.000 1.000
-score NICE_REPLY_A                          -0.460 -3.291 -0.460 -3.291
-score NORDNS_LOW_CONTRAST                   0.001 0.001 0.001 0.001
+score NICE_REPLY_A                          -0.153 -2.695 -0.153 -2.695
+score NORDNS_LOW_CONTRAST                   0.001 0.915 0.001 0.915
 score NO_FM_NAME_IP_HOSTN                   0.001 0.001 0.001 0.001
 score NSL_RCVD_FROM_USER                    0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER                    0.001 0.664 0.001 0.664
-score OBFU_BITCOIN                          2.999 0.197 2.999 0.197
-score OBFU_JVSCR_ESC                        2.299 2.199 2.299 2.199
-score ODD_FREEM_REPTO                       2.999 2.534 2.999 2.534
+score NSL_RCVD_HELO_USER                    0.001 0.683 0.001 0.683
+score OBFU_BITCOIN                          2.999 2.753 2.999 2.753
+score ODD_FREEM_REPTO                       2.999 2.560 2.999 2.560
 score PDS_BAD_THREAD_QP_64                  1.000 0.999 1.000 0.999
-score PDS_BTC_ID                            0.499 0.499 0.499 0.499
-score PDS_BTC_MSGID                         0.118 0.999 0.118 0.999
-score PDS_DBL_URL_LINKBAIT                  0.502 0.001 0.502 0.001
-score PDS_FRNOM_TODOM_DBL_URL               0.688 0.001 0.688 0.001
-score PDS_FRNOM_TODOM_NAKED_TO              1.499 0.501 1.499 0.501
-score PDS_FROM_2_EMAILS                     0.173 0.001 0.173 0.001
-score PDS_FROM_NAME_TO_DOMAIN               1.999 0.193 1.999 0.193
-score PDS_HELO_SPF_FAIL                     0.001 0.960 0.001 0.960
-score PDS_OTHER_BAD_TLD                     2.000 1.999 2.000 1.999
-score PHISH_ATTACH                          2.299 2.299 2.299 2.299
+score PDS_BTC_ID                            0.500 0.499 0.500 0.499
+score PDS_BTC_MSGID                         0.377 0.999 0.377 0.999
+score PDS_DBL_URL_LINKBAIT                  0.498 0.001 0.498 0.001
+score PDS_FRNOM_TODOM_DBL_URL               1.203 0.001 1.203 0.001
+score PDS_FRNOM_TODOM_NAKED_TO              1.304 0.342 1.304 0.342
+score PDS_FROM_2_EMAILS                     0.100 0.915 0.100 0.915
+score PDS_FROM_NAME_TO_DOMAIN               1.679 0.670 1.679 0.670
+score PDS_HELO_SPF_FAIL                     0.001 0.001 0.001 0.001
+score PDS_OTHER_BAD_TLD                     1.999 1.999 1.999 1.999
+score PHISH_ATTACH                          2.299 2.199 2.299 2.199
 score PHISH_AZURE_CLOUDAPP                  3.500 3.500 3.500 3.500
 score PHISH_FBASEAPP                        1.000 1.000 1.000 1.000
 score PHP_NOVER_MUA                         1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT                       2.398 2.384 2.398 2.384
-score PHP_SCRIPT                            2.499 0.540 2.499 0.540
+score PHP_ORIG_SCRIPT                       2.399 2.067 2.399 2.067
+score PHP_SCRIPT                            2.499 2.499 2.499 2.499
 score PHP_SCRIPT_MUA                        1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT               0.999 0.236 0.999 0.236
+score PP_MIME_FAKE_ASCII_TEXT               0.999 0.239 0.999 0.239
 score PP_TOO_MUCH_UNICODE02                 0.500 0.500 0.500 0.500
 score PP_TOO_MUCH_UNICODE05                 1.000 1.000 1.000 1.000
 score PUMPDUMP                              1.000 1.000 1.000 1.000
@@ -296,32 +292,19 @@ score PUMPDUMP_MULTI
 score RAND_HEADER_LIST_SPOOF                1.000 1.000 1.000 1.000
 score RAND_HEADER_MANY                      1.000 1.000 1.000 1.000
 score RAND_MKTG_HEADER                      1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS                       2.581 1.772 2.581 1.772
-score RCVD_DOTEDU_SHORT                     1.499 0.001 1.499 0.001
+score RATWARE_NO_RDNS                       1.485 1.346 1.485 1.346
+score RCVD_DOTEDU_SHORT                     1.500 1.126 1.500 1.126
 score RCVD_DOTEDU_SUSP_URI                  1.000 1.000 1.000 1.000
-score RCVD_IN_IADB_COURT                    0.001 0.001 0.001 0.001
 score RCVD_IN_IADB_DMARC                    0.001 -0.001 0.001 -0.001
 score RCVD_IN_IADB_ESP                      0.001 -0.001 0.001 -0.001
-score RCVD_IN_IADB_LEG_MAND                 0.001 0.001 0.001 0.001
-score RCVD_IN_IADB_URG                      0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H2                     0.001 -0.696 0.001 -0.696
-score RCVD_IN_MSPIKE_H3                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H4                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H5                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L2                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L4                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L5                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_WL                     0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_ZBI                    0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_H2                     0.001 -0.001 0.001 -0.001
 score RDNS_NUM_TLD_ATCHNX                   1.000 1.000 1.000 1.000
 score RDNS_NUM_TLD_XM                       1.000 1.000 1.000 1.000
-score REPTO_419_FRAUD                       2.999 1.598 2.999 1.598
+score REPTO_419_FRAUD                       2.999 2.621 2.999 2.621
 score REPTO_419_FRAUD_AOL                   1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_AOL_LOOSE             1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_CNS                   1.000 1.000 1.000 1.000
-score REPTO_419_FRAUD_GM                    0.331 1.313 0.331 1.313
+score REPTO_419_FRAUD_GM                    1.168 2.733 1.168 2.733
 score REPTO_419_FRAUD_GM_LOOSE              1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_HM                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_OL                    1.000 1.000 1.000 1.000
@@ -331,112 +314,112 @@ score REPTO_419_FRAUD_YH
 score REPTO_419_FRAUD_YH_LOOSE              1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YJ                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YN                    1.000 1.000 1.000 1.000
-score RISK_FREE                             2.399 0.001 2.399 0.001
-score SCC_CANSPAM_2                         2.845 3.160 2.845 3.160
+score RISK_FREE                             2.399 2.299 2.399 2.299
+score SCC_CANSPAM_2                         2.469 3.001 2.469 3.001
 score SCC_ISEMM_LID_1                       1.000 1.000 1.000 1.000
 score SCC_ISEMM_LID_1A                      1.000 1.000 1.000 1.000
-score SCC_ISEMM_LID_1B                      1.500 1.499 1.500 1.499
-score SCC_SPAMMER_ADDR_2                    1.775 1.543 1.775 1.543
+score SCC_ISEMM_LID_1B                      1.499 1.499 1.499 1.499
+score SCC_NEWBIE_HASBEENS                   0.001 2.199 0.001 2.199
+score SCC_SPAMMER_ADDR_2                    1.336 0.397 1.336 0.397
 score SENDGRID_REDIR                        0.001 0.001 0.001 0.001
 score SENDGRID_REDIR_PHISH                  1.000 1.000 1.000 1.000
 score SEO_SUSP_NTLD                         1.000 1.000 1.000 1.000
-score SERGIO_SUBJECT_VIAGRA01               2.500 0.001 2.500 0.001
+score SERGIO_SUBJECT_VIAGRA01               2.499 2.499 2.499 2.499
 score SHOPIFY_IMG_NOT_RCVD_SFY              2.499 2.499 2.499 2.499
-score SHORTENED_URL_SRC                     3.099 2.899 3.099 2.899
-score SHORTENER_SHORT_IMG                   0.001 0.001 0.001 0.001
-score SHORT_IMG_SUSP_NTLD                   1.182 1.499 1.182 1.499
+score SHORTENED_URL_SRC                     3.099 3.099 3.099 3.099
+score SHORTENER_SHORT_IMG                   0.001 2.499 0.001 2.499
+score SHORT_IMG_SUSP_NTLD                   0.793 1.303 0.793 1.303
 score SHY_OBFU_EXPIRE                       1.000 1.000 1.000 1.000
-score SHY_OBFU_PASSWORD                     4.000 1.000 4.000 1.000
+score SHY_OBFU_PASSWORD                     3.999 3.624 3.999 3.624
 score SPOOFED_FREEMAIL                      0.001 0.001 0.001 0.001
 score SPOOFED_FREEMAIL_NO_RDNS              0.001 0.001 0.001 0.001
-score SPOOFED_FREEM_REPTO                   0.001 0.001 0.001 0.001
+score SPOOFED_FREEM_REPTO                   0.001 2.500 0.001 2.500
 score SPOOFED_FREEM_REPTO_CHN               0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_RUS               0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID                       0.344 0.417 0.344 0.417
-score STATIC_XPRIO_OLE                      0.001 0.388 0.001 0.388
+score SPOOF_GMAIL_MID                       0.393 0.167 0.393 0.167
+score STATIC_XPRIO_OLE                      0.001 0.001 0.001 0.001
 score STOCK_TIP                             1.000 1.000 1.000 1.000
-score SUBJ_ATTENTION                        0.499 0.500 0.499 0.500
+score SUBJ_ATTENTION                        0.499 0.499 0.499 0.499
 score SUBJ_BRKN_WORDNUMS                    1.000 1.000 1.000 1.000
-score SURBL_BLOCKED                         0.001 0.001 0.001 0.001
-score SUSP_UTF8_WORD_COMBO                  2.399 2.063 2.399 2.063
-score SUSP_UTF8_WORD_FROM                   0.501 1.999 0.501 1.999
-score SUSP_UTF8_WORD_SUBJ                   1.997 1.999 1.997 1.999
+score SUSP_UTF8_WORD_COMBO                  2.999 2.601 2.999 2.601
+score SUSP_UTF8_WORD_FROM                   0.770 1.999 0.770 1.999
+score SUSP_UTF8_WORD_SUBJ                   1.122 1.999 1.122 1.999
 score SYSADMIN                              1.000 1.000 1.000 1.000
 score TAGSTAT_IMG_NOT_RCVD_TGST             1.000 1.000 1.000 1.000
 score TARINGANET_IMG_NOT_RCVD_TN            1.000 1.000 1.000 1.000
-score TEQF_USR_POLITE                       1.999 0.001 1.999 0.001
-score THIS_AD                               1.299 0.877 1.299 0.877
-score THIS_IS_ADV_SUSP_NTLD                 1.000 1.499 1.000 1.499
+score TEQF_USR_POLITE                       1.999 1.999 1.999 1.999
+score THIS_AD                               1.299 1.299 1.299 1.299
+score THIS_IS_ADV_SUSP_NTLD                 1.000 1.000 1.000 1.000
 score TONLINE_FAKE_DKIM                     1.000 1.000 1.000 1.000
 score TO_EQ_FM_DIRECT_MX                    0.001 0.001 0.001 0.001
-score TO_EQ_FM_DOM_SPF_FAIL                 0.001 1.370 0.001 1.370
-score TO_EQ_FM_SPF_FAIL                     0.001 0.001 0.001 0.001
+score TO_EQ_FM_DOM_HTML_ONLY                0.001 0.242 0.001 0.242
+score TO_EQ_FM_DOM_SPF_FAIL                 0.001 0.551 0.001 0.551
+score TO_EQ_FM_SPF_FAIL                     0.001 0.214 0.001 0.214
 score TO_IN_SUBJ                            0.100 0.099 0.100 0.099
-score TO_NAME_SUBJ_NO_RDNS                  2.849 2.255 2.849 2.255
-score TO_NO_BRKTS_HTML_IMG                  0.457 0.001 0.457 0.001
+score TO_NAME_SUBJ_NO_RDNS                  2.609 2.999 2.609 2.999
+score TO_NO_BRKTS_HTML_IMG                  0.448 0.001 0.448 0.001
 score TO_NO_BRKTS_HTML_ONLY                 1.999 1.999 1.999 1.999
-score TO_NO_BRKTS_MSFT                      0.001 0.716 0.001 0.716
-score TO_NO_BRKTS_NORDNS_HTML               1.999 0.001 1.999 0.001
+score TO_NO_BRKTS_MSFT                      0.001 0.266 0.001 0.266
+score TO_NO_BRKTS_NORDNS_HTML               2.000 0.001 2.000 0.001
 score TO_NO_BRKTS_PCNT                      2.499 2.499 2.499 2.499
-score TVD_SPACE_ENCODED                     2.008 2.499 2.008 2.499
-score TVD_SPACE_RATIO_MINFP                 0.591 0.001 0.591 0.001
+score TVD_SPACE_ENCODED                     1.980 2.499 1.980 2.499
+score TVD_SPACE_RATIO_MINFP                 0.603 0.001 0.603 0.001
 score TW_GIBBERISH_MANY                     1.000 1.000 1.000 1.000
 score UC_GIBBERISH_OBFU                     1.000 1.000 1.000 1.000
-score UNDISC_FREEM                          2.699 2.599 2.699 2.599
-score UNDISC_MONEY                          2.345 0.870 2.345 0.870
-score UNICODE_OBFU_ASC                      1.000 2.499 1.000 2.499
+score UNDISC_FREEM                          2.699 2.699 2.699 2.699
+score UNDISC_MONEY                          2.108 1.991 2.108 1.991
+score UNICODE_OBFU_ASC                      1.000 2.500 1.000 2.500
 score UNICODE_OBFU_ZW                       1.000 1.000 1.000 1.000
 score UNICODE_OBFU_ZW_MANY                  0.001 0.001 0.001 0.001
 score UNICODE_RTL_OBFU                      1.000 1.000 1.000 1.000
 score UNSUB_GOOG_FORM                       1.000 1.000 1.000 1.000
-score URIBL_CT_SURBL                        0.001 1.399 0.001 1.399
-score URIBL_DM_SURBL                        0.001 0.001 0.001 0.001
+score URIBL_CT_SURBL                        0.001 1.999 0.001 1.999
 score URI_ADOBESPARK                        1.000 1.000 1.000 1.000
 score URI_AZURE_CLOUDAPP                    1.000 1.000 1.000 1.000
 score URI_CLOUDFLAREIPFS                    0.001 0.001 0.001 0.001
 score URI_DASHGOVEDU                        1.000 1.000 1.000 1.000
 score URI_DATA                              1.000 1.000 1.000 1.000
-score URI_DOTEDU                            1.699 0.001 1.699 0.001
+score URI_DOTEDU                            1.697 1.999 1.697 1.999
 score URI_DOTEDU_ENTITY                     1.000 1.000 1.000 1.000
-score URI_DOTTY_HEX                         2.699 0.001 2.699 0.001
-score URI_DWEBIPFS                          3.499 0.552 3.499 0.552
-score URI_EXCESS_SLASHES                    0.500 0.299 0.500 0.299
-score URI_FIREBASEAPP                       2.999 1.000 2.999 1.000
+score URI_DOTTY_HEX                         2.699 0.391 2.699 0.391
+score URI_DWEBIPFS                          3.499 1.218 3.499 1.218
+score URI_EXCESS_SLASHES                    0.500 0.001 0.500 0.001
+score URI_FIREBASEAPP                       2.999 2.999 2.999 2.999
 score URI_FLKIPFSXYZIPFS                    3.499 3.499 3.499 3.499
 score URI_GOOGDRAWPREVIEW                   1.000 1.000 1.000 1.000
 score URI_GOOGDRAWPREVIEW_MINFP             3.499 3.499 3.499 3.499
 score URI_GOOGLE_PROXY                      0.001 0.001 0.001 0.001
-score URI_GOOG_STO_SPAMMY                   2.614 2.999 2.614 2.999
+score URI_GOOG_STO_SPAMMY                   2.672 2.999 2.672 2.999
 score URI_HEX_IP                            1.000 1.000 1.000 1.000
-score URI_IMG_CWINDOWSNET                   1.605 0.541 1.605 0.541
+score URI_IMG_CWINDOWSNET                   1.602 0.200 1.602 0.200
 score URI_IMG_WP_REDIR                      1.000 1.000 1.000 1.000
-score URI_IPFS                              1.000 0.001 1.000 0.001
-score URI_IPFSIO                            3.499 3.499 3.499 3.499
+score URI_IPFS                              1.001 0.001 1.001 0.001
+score URI_IPFSIO                            3.499 3.234 3.499 3.234
 score URI_LONG_REPEAT                       1.000 1.000 1.000 1.000
 score URI_NOCODEFORM                        1.000 1.000 1.000 1.000
 score URI_ONLY_MSGID_MALF                   1.000 1.000 1.000 1.000
 score URI_OPTOUT_3LD                        1.000 1.000 1.000 1.000
-score URI_PHISH                             0.001 0.204 0.001 0.204
+score URI_PHISH                             0.001 0.001 0.001 0.001
 score URI_PHP_REDIR                         1.000 1.000 1.000 1.000
 score URI_TRY_3LD                           1.999 1.999 1.999 1.999
 score URI_TRY_USME                          1.000 1.000 1.000 1.000
-score URI_WPADMIN                           2.299 0.001 2.299 0.001
+score URI_WPADMIN                           2.299 2.299 2.299 2.299
 score URI_WP_DIRINDEX                       1.000 1.000 1.000 1.000
 score URI_WP_HACKED                         0.001 0.001 0.001 0.001
-score URI_WP_HACKED_2                       1.860 2.499 1.860 2.499
+score URI_WP_HACKED_2                       1.861 1.846 1.861 1.846
 score USB_DRIVES                            1.000 1.000 1.000 1.000
-score VFY_ACCT_NORDNS                       2.498 2.999 2.498 2.999
+score VFY_ACCT_NORDNS                       2.500 2.410 2.500 2.410
 score VISTA_COST                            2.499 2.500 2.499 2.500
-score VISTA_TONOM_EQ_TOLOC                  2.499 2.499 2.499 2.499
+score VISTA_TONOM_EQ_TOLOC                  2.499 2.356 2.499 2.356
 score VPS_NO_NTLD                           1.000 1.000 1.000 1.000
 score WALMART_IMG_NOT_RCVD_WAL              1.000 1.000 1.000 1.000
-score WORD_INVIS                            1.000 2.999 1.000 2.999
+score WORD_INVIS                            1.000 1.000 1.000 1.000
 score WORD_INVIS_MANY                       1.000 1.000 1.000 1.000
-score XFER_LOTSA_MONEY                      0.882 0.999 0.882 0.999
+score XFER_LOTSA_MONEY                      0.920 1.000 0.920 1.000
 score XM_DIGITS_ONLY                        1.000 1.000 1.000 1.000
-score XM_RANDOM                             2.499 2.499 2.499 2.499
-score XPRIO                                 0.001 2.249 0.001 2.249
+score XM_RANDOM                             2.499 2.500 2.499 2.500
+score XPRIO                                 0.001 0.001 0.001 0.001
 score XPRIO_SHORT_SUBJ                      1.000 1.000 1.000 1.000
-score XPRIO_VISTA                           0.994 1.341 0.994 1.341
-score YOUR_PERMISSION                       1.342 1.006 1.342 1.006
-score YOU_INHERIT                           2.999 2.060 2.999 2.060
+score XPRIO_VISTA                           1.493 1.087 1.493 1.087
+score YOUR_PERMISSION                       2.341 2.799 2.341 2.799
+score YOU_INHERIT                           2.999 0.222 2.999 0.222

Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1921914&r1=1921913&r2=1921914&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Sun Nov 17 02:42:57 2024
@@ -1,138 +1,138 @@
 # Using score set 0 logs for revision 1921898 from:
 # ham-ena-week0.r1921898.log ham-ena-week1.r1921898.log ham-ena-week2.r1921898.log ham-ena-week3.r1921898.log ham-ena-week4.r1921898.log ham-giovanni-ham.r1921898.log ham-giovanni-spammy.r1921898.log ham-giovanni-spam.r1921898.log ham-grenier.r1921898.log ham-jhardin.r1921898.log ham-llanga.r1921898.log ham-mmiroslaw-mails-ham.r1921898.log ham-mmiroslaw-mails-spam.r1921898.log ham-spamsponge.r1921898.log ham-tsz-corpus.r1921898.log ham-whyscream.r1921898.log spam-ena-week0.r1921898.log spam-ena-week1.r1921898.log spam-ena-week2.r1921898.log spam-ena-week3.r1921898.log spam-ena-week4.r1921898.log spam-giovanni-ham.r1921898.log spam-giovanni-spammy.r1921898.log spam-giovanni-spam.r1921898.log spam-grenier.r1921898.log spam-jhardin.r1921898.log spam-llanga.r1921898.log spam-mmiroslaw-mails-ham.r1921898.log spam-mmiroslaw-mails-spam.r1921898.log spam-spamsponge.r1921898.log spam-tsz-corpus.r1921898.log spam-whyscream.r1921898.log
 
-score ACCT_PHISHING_MANY             2.394
+score ACCT_PHISHING_MANY             2.478
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.499
 score AC_HTML_NONSENSE_TAGS          1.999
-score AC_POST_EXTRAS                 1.392
+score AC_POST_EXTRAS                 0.854
 score ADMITS_SPAM                    4.199
-score ADVANCE_FEE_2_NEW_FORM         0.813
+score ADVANCE_FEE_2_NEW_FORM         0.760
 score ADVANCE_FEE_2_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_2_NEW_MONEY        1.999
 score ADVANCE_FEE_3_NEW              0.001
-score ADVANCE_FEE_3_NEW_FORM         0.799
+score ADVANCE_FEE_3_NEW_FORM         2.299
 score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_3_NEW_MONEY        3.000
-score ADVANCE_FEE_4_NEW              0.151
-score ADVANCE_FEE_4_NEW_FRM_MNY      1.587
+score ADVANCE_FEE_4_NEW              0.154
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.567
 score ADVANCE_FEE_4_NEW_MONEY        0.001
 score ADVANCE_FEE_5_NEW              2.399
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.863
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.552
 score ADVANCE_FEE_5_NEW_MONEY        2.890
 score AD_PREFS                       0.499
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            1.963
+score BIGNUM_EMAILS_FREEM            0.981
 score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_EXTORT_01              4.505
-score BITCOIN_MALWARE                0.889
-score BITCOIN_ONAN                   1.776
+score BITCOIN_EXTORT_01              4.970
+score BITCOIN_MALWARE                2.129
+score BITCOIN_ONAN                   1.162
 score BITCOIN_SPAM_02                2.499
 score BITCOIN_SPAM_03                2.499
 score BITCOIN_SPAM_07                3.499
 score BITCOIN_SPAM_09                1.499
 score BITCOIN_TOEQFM                 3.499
-score BITCOIN_VISTA                  2.251
+score BITCOIN_VISTA                  3.499
 score BITCOIN_XPRIO                  2.499
-score BODY_URI_ONLY                  1.701
-score BOGUS_MIME_VERSION             3.500
-score BOGUS_MSM_HDRS                 0.257
+score BODY_URI_ONLY                  1.702
+score BOGUS_MIME_VERSION             3.499
+score BOGUS_MSM_HDRS                 2.906
 score CTE_8BIT_MISMATCH              0.999
 score DEAR_BENEFICIARY               3.399
 score DOS_BODY_HIGH_NO_MID           3.399
 score DSN_NO_MIMEVERSION             1.999
-score DYNAMIC_IMGUR                  2.356
+score DYNAMIC_IMGUR                  2.357
 score ENCRYPTED_MESSAGE              -1.000
 score END_FUTURE_EMAILS              2.499
 score FACEBOOK_IMG_NOT_RCVD_FB       1.999
-score FBI_MONEY                      0.251
-score FBI_SPOOF                      0.629
+score FBI_MONEY                      0.395
+score FBI_SPOOF                      0.001
 score FILL_THIS_FORM                 0.001
 score FONT_INVIS_HTML_NOHTML         2.999
-score FONT_INVIS_LONG_LINE           0.784
-score FONT_INVIS_MSGID               1.946
+score FONT_INVIS_LONG_LINE           0.791
+score FONT_INVIS_MSGID               1.950
 score FONT_INVIS_NORDNS              0.001
-score FONT_INVIS_POSTEXTRAS          1.898
+score FONT_INVIS_POSTEXTRAS          2.434
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   1.866
+score FORM_FRAUD_3                   1.863
 score FORM_FRAUD_5                   1.859
-score FOUND_YOU                      2.602
-score FREEMAIL_FORGED_FROMDOMAIN     0.202
+score FOUND_YOU                      2.603
+score FREEMAIL_FORGED_FROMDOMAIN     0.156
 score FROM_ADDR_WS                   2.999
 score FROM_IN_TO_AND_SUBJ            2.399
 score FROM_LONG_DOM                  1.499
 score FROM_LONG_DOM_MINFP            2.499
 score FROM_MISSPACED                 0.001
-score FROM_MISSP_FREEMAIL            0.001 # force non-zero
+score FROM_MISSP_FREEMAIL            0.001
 score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_PHISH               3.499
-score FROM_MISSP_REPLYTO             2.398
+score FROM_MISSP_PHISH               3.500
+score FROM_MISSP_REPLYTO             2.399
 score FROM_MISSP_USER                0.001
 score FROM_MISSP_XPRIO               0.001
-score FROM_MULTI_NORDNS              0.001
-score FROM_NTLD_LINKBAIT             0.485
-score FROM_NTLD_REPLY_FREEMAIL       1.999
+score FROM_MULTI_NORDNS              0.001 # force non-zero
+score FROM_NTLD_LINKBAIT             0.001
+score FROM_NTLD_REPLY_FREEMAIL       1.446
 score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        2.000
+score FROM_SUSPICIOUS_NTLD_FP        1.999
 score FROM_UNBAL2                    2.599
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   2.092
-score FUZZY_BITCOIN                  0.241
-score FUZZY_NORTON                   1.799
-score FUZZY_PAYPAL                   0.453
-score FUZZY_TRUMP                    2.531
+score FUZZY_AMAZON                   1.910
+score FUZZY_BITCOIN                  0.456
+score FUZZY_NORTON                   1.780
+score FUZZY_PAYPAL                   1.348
+score FUZZY_TRUMP                    1.013
 score GAPPY_HTML                     3.899
-score GB_BITCOIN_NH                  1.368
+score GB_BITCOIN_NH                  1.004
 score GB_CUSTOM_HTM_URI              1.499
 score GB_FAKE_RF_SHORT               1.999
 score GB_FREEMAIL_DISPTO             0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.202
-score GOOG_MALWARE_DNLD              3.154
-score GOOG_REDIR_NORDNS              2.488
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.201
+score GOOG_MALWARE_DNLD              3.063
+score GOOG_REDIR_NORDNS              2.489
 score GOOG_STO_NOIMG_HTML            2.899
-score HDRS_MISSP                     2.144
+score HDRS_MISSP                     2.146
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
-score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.249
+score HDR_ORDER_FTSDMCXX_NORDNS      0.010
+score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
 score HK_LOTTO                       0.999
 score HK_NAME_FM_MR_MRS              1.499
 score HK_NAME_MR_MRS                 0.999
 score HK_RANDOM_ENVFROM              0.004
 score HK_RANDOM_FROM                 0.999
-score HK_RANDOM_REPLYTO              1.000
-score HK_SCAM                        1.859
+score HK_RANDOM_REPLYTO              0.999
+score HK_SCAM                        1.855
 score HK_WIN                         0.999
 score HOSTED_IMG_DIRECT_MX           3.499
 score HOSTED_IMG_MULTI_PUB_01        0.001
 score HREF_EMPTY_NORDNS              2.499
-score HTML_BADATTR                   0.051
+score HTML_BADATTR                   0.266
 score HTML_ENTITY_ASCII              2.999
-score HTML_FONT_TINY_NORDNS          1.999
-score HTML_SINGLET_MANY              1.341
-score HTML_TAG_BALANCE_CENTER        2.400
+score HTML_FONT_TINY_NORDNS          2.000
+score HTML_SINGLET_MANY              1.344
+score HTML_TAG_BALANCE_CENTER        2.401
 score HTML_TEXT_INVISIBLE_FONT       0.001
-score HTML_TEXT_INVISIBLE_STYLE      0.142
-score IMG_DIRECT_TO_MX               1.403
-score IMG_ONLY_FM_DOM_INFO           2.190
+score HTML_TEXT_INVISIBLE_STYLE      0.147
+score IMG_DIRECT_TO_MX               1.400
+score IMG_ONLY_FM_DOM_INFO           2.196
 score JH_SPAMMY_HEADERS              3.499
 score KHOP_HELO_FCRDNS               0.399
-score LIST_PARTIAL_SHORT_MSG         2.499
+score LIST_PARTIAL_SHORT_MSG         2.500
 score LONGLN_LOW_CONTRAST            2.499
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   2.999
+score LONG_IMG_URI                   3.000
 score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    1.360
+score LOTTO_AGENT                    1.499
 score LOTTO_DEPT                     1.529
-score MALFORMED_FREEMAIL             2.429
-score MALWARE_NORDNS                 2.522
+score MALFORMED_FREEMAIL             2.427
+score MALWARE_NORDNS                 2.159
 score MALW_ATTACH                    2.599
 score MANY_SUBDOM                    2.899
-score MILLION_HUNDRED                2.973
-score MILLION_USD                    1.999
-score MIMEOLE_DIRECT_TO_MX           0.237
+score MILLION_HUNDRED                2.262
+score MILLION_USD                    1.858
+score MIMEOLE_DIRECT_TO_MX           0.226
 score MIME_NO_TEXT                   0.001
 score MIXED_CENTER_CASE              2.499
 score MIXED_ES                       2.299
@@ -141,97 +141,97 @@ score MONEY_ATM_CARD                 0.0
 score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               0.001
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  0.001
+score MONEY_FRAUD_5                  0.001 # force non-zero
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           2.060
-score MONEY_FROM_41                  1.402
+score MONEY_FREEMAIL_REPTO           1.807
+score MONEY_FROM_41                  0.815
 score MONEY_FROM_MISSP               0.001
-score MONEY_NOHTML                   1.743
-score MSM_PRIO_REPTO                 0.577
+score MONEY_NOHTML                   1.979
+score MSM_PRIO_REPTO                 2.026
 score NA_DOLLARS                     1.500
-score NICE_REPLY_A                   -0.460
+score NICE_REPLY_A                   -0.153
 score NORDNS_LOW_CONTRAST            0.001
-score NO_FM_NAME_IP_HOSTN            0.001
+score NO_FM_NAME_IP_HOSTN            0.001 # force non-zero
 score NSL_RCVD_FROM_USER             0.001
 score NSL_RCVD_HELO_USER             0.001
 score OBFU_BITCOIN                   2.999
 score OBFU_JVSCR_ESC                 2.299
 score ODD_FREEM_REPTO                2.999
 score PDS_BAD_THREAD_QP_64           1.000
-score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.118
-score PDS_DBL_URL_LINKBAIT           0.502
-score PDS_FRNOM_TODOM_DBL_URL        0.688
-score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              0.173
-score PDS_FROM_NAME_TO_DOMAIN        1.999
-score PDS_OTHER_BAD_TLD              2.000
+score PDS_BTC_ID                     0.500
+score PDS_BTC_MSGID                  0.377
+score PDS_DBL_URL_LINKBAIT           0.498
+score PDS_FRNOM_TODOM_DBL_URL        1.203
+score PDS_FRNOM_TODOM_NAKED_TO       1.304
+score PDS_FROM_2_EMAILS              0.100
+score PDS_FROM_NAME_TO_DOMAIN        1.679
+score PDS_OTHER_BAD_TLD              1.999
 score PHISH_ATTACH                   2.299
-score PHP_ORIG_SCRIPT                2.398
+score PHP_ORIG_SCRIPT                2.399
 score PHP_SCRIPT                     2.499
 score PP_MIME_FAKE_ASCII_TEXT        0.999
-score RATWARE_NO_RDNS                2.581
-score RCVD_DOTEDU_SHORT              1.499
+score RATWARE_NO_RDNS                1.485
+score RCVD_DOTEDU_SHORT              1.500
 score REPTO_419_FRAUD                2.999
-score REPTO_419_FRAUD_GM             0.331
+score REPTO_419_FRAUD_GM             1.168
 score RISK_FREE                      2.399
-score SCC_CANSPAM_2                  2.845
-score SCC_ISEMM_LID_1B               1.500
-score SCC_SPAMMER_ADDR_2             1.775
-score SERGIO_SUBJECT_VIAGRA01        2.500
+score SCC_CANSPAM_2                  2.469
+score SCC_ISEMM_LID_1B               1.499
+score SCC_SPAMMER_ADDR_2             1.336
+score SERGIO_SUBJECT_VIAGRA01        2.499
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
 score SHORTENED_URL_SRC              3.099
-score SHORTENER_SHORT_IMG            0.001 # force non-zero
-score SHORT_IMG_SUSP_NTLD            1.182
-score SHY_OBFU_PASSWORD              4.000
+score SHORTENER_SHORT_IMG            0.001
+score SHORT_IMG_SUSP_NTLD            0.793
+score SHY_OBFU_PASSWORD              3.999
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOF_GMAIL_MID                0.344
+score SPOOF_GMAIL_MID                0.393
 score STATIC_XPRIO_OLE               0.001
 score SUBJ_ATTENTION                 0.499
-score SUSP_UTF8_WORD_COMBO           2.399
-score SUSP_UTF8_WORD_FROM            0.501
-score SUSP_UTF8_WORD_SUBJ            1.997
+score SUSP_UTF8_WORD_COMBO           2.999
+score SUSP_UTF8_WORD_FROM            0.770
+score SUSP_UTF8_WORD_SUBJ            1.122
 score TEQF_USR_POLITE                1.999
 score THIS_AD                        1.299
-score TO_EQ_FM_DIRECT_MX             0.001
+score TO_EQ_FM_DIRECT_MX             0.001 # force non-zero
 score TO_IN_SUBJ                     0.100
-score TO_NAME_SUBJ_NO_RDNS           2.849
-score TO_NO_BRKTS_HTML_IMG           0.457
+score TO_NAME_SUBJ_NO_RDNS           2.609
+score TO_NO_BRKTS_HTML_IMG           0.448
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.001 # force non-zero
-score TO_NO_BRKTS_NORDNS_HTML        1.999
+score TO_NO_BRKTS_MSFT               0.001
+score TO_NO_BRKTS_NORDNS_HTML        2.000
 score TO_NO_BRKTS_PCNT               2.499
-score TVD_SPACE_ENCODED              2.008
-score TVD_SPACE_RATIO_MINFP          0.591
+score TVD_SPACE_ENCODED              1.980
+score TVD_SPACE_RATIO_MINFP          0.603
 score UNDISC_FREEM                   2.699
-score UNDISC_MONEY                   2.345
+score UNDISC_MONEY                   2.108
 score UNICODE_OBFU_ZW_MANY           0.001
 score URI_CLOUDFLAREIPFS             0.001
-score URI_DOTEDU                     1.699
+score URI_DOTEDU                     1.697
 score URI_DOTTY_HEX                  2.699
 score URI_DWEBIPFS                   3.499
 score URI_EXCESS_SLASHES             0.500
 score URI_FIREBASEAPP                2.999
 score URI_FLKIPFSXYZIPFS             3.499
 score URI_GOOGDRAWPREVIEW_MINFP      3.499
-score URI_GOOGLE_PROXY               0.001
-score URI_GOOG_STO_SPAMMY            2.614
-score URI_IMG_CWINDOWSNET            1.605
-score URI_IPFS                       1.000
+score URI_GOOGLE_PROXY               0.001 # force non-zero
+score URI_GOOG_STO_SPAMMY            2.672
+score URI_IMG_CWINDOWSNET            1.602
+score URI_IPFS                       1.001
 score URI_IPFSIO                     3.499
 score URI_PHISH                      0.001
 score URI_TRY_3LD                    1.999
 score URI_WPADMIN                    2.299
 score URI_WP_HACKED                  0.001
-score URI_WP_HACKED_2                1.860
-score VFY_ACCT_NORDNS                2.498
+score URI_WP_HACKED_2                1.861
+score VFY_ACCT_NORDNS                2.500
 score VISTA_COST                     2.499
 score VISTA_TONOM_EQ_TOLOC           2.499
-score XFER_LOTSA_MONEY               0.882
+score XFER_LOTSA_MONEY               0.920
 score XM_RANDOM                      2.499
 score XPRIO                          0.001
-score XPRIO_VISTA                    0.994
-score YOUR_PERMISSION                1.342
+score XPRIO_VISTA                    1.493
+score YOUR_PERMISSION                2.341
 score YOU_INHERIT                    2.999
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -315,7 +315,6 @@ score LONG_INVISIBLE_TEXT            1.0
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
 score MALWARE_PASSWORD               1.000
-score MANY_HDRS_LCASE                0.100
 score MIXED_AREA_CASE                1.000
 score MIXED_FONT_CASE                1.000
 score MIXED_IMG_CASE                 1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1921914&r1=1921913&r2=1921914&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Sun Nov 17 02:42:57 2024
@@ -1,249 +1,261 @@
-# Using score set 1 logs for revision 1921827 from:
-# ham-net-ena-week0.r1921827.log ham-net-ena-week1.r1921827.log ham-net-ena-week4.r1921827.log ham-net-giovanni-ham.r1921827.log ham-net-giovanni-spammy.r1921827.log ham-net-giovanni-spam.r1921827.log ham-net-grenier.r1921827.log ham-net-jhardin.r1921827.log ham-net-llanga.r1921827.log ham-net-mmiroslaw-mails-ham.r1921827.log ham-net-mmiroslaw-mails-spam.r1921827.log ham-net-spamsponge.r1921827.log ham-net-tsz-corpus.r1921827.log ham-net-whyscream.r1921827.log spam-net-ena-week0.r1921827.log spam-net-ena-week1.r1921827.log spam-net-ena-week4.r1921827.log spam-net-giovanni-ham.r1921827.log spam-net-giovanni-spammy.r1921827.log spam-net-giovanni-spam.r1921827.log spam-net-grenier.r1921827.log spam-net-jhardin.r1921827.log spam-net-llanga.r1921827.log spam-net-mmiroslaw-mails-ham.r1921827.log spam-net-mmiroslaw-mails-spam.r1921827.log spam-net-spamsponge.r1921827.log spam-net-tsz-corpus.r1921827.log spam-net-whyscream.r1921827.log
+# Using score set 1 logs for revision 1921909 from:
+# ham-net-ena-week0.r1921909.log ham-net-ena-week1.r1921909.log ham-net-ena-week4.r1921909.log ham-net-giovanni-ham.r1921909.log ham-net-giovanni-spammy.r1921909.log ham-net-giovanni-spam.r1921909.log ham-net-grenier.r1921909.log ham-net-jhardin.r1921909.log ham-net-llanga.r1921909.log ham-net-mmiroslaw-mails-ham.r1921909.log ham-net-mmiroslaw-mails-spam.r1921909.log ham-net-spamsponge.r1921909.log ham-net-tsz-corpus.r1921909.log ham-net-whyscream.r1921909.log spam-net-ena-week0.r1921909.log spam-net-ena-week1.r1921909.log spam-net-ena-week4.r1921909.log spam-net-giovanni-ham.r1921909.log spam-net-giovanni-spammy.r1921909.log spam-net-giovanni-spam.r1921909.log spam-net-grenier.r1921909.log spam-net-jhardin.r1921909.log spam-net-llanga.r1921909.log spam-net-mmiroslaw-mails-ham.r1921909.log spam-net-mmiroslaw-mails-spam.r1921909.log spam-net-spamsponge.r1921909.log spam-net-tsz-corpus.r1921909.log spam-net-whyscream.r1921909.log
 
-score ACCT_PHISHING_MANY             2.999
+score ACCT_PHISHING_MANY             2.367
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.499
 score AC_HTML_NONSENSE_TAGS          1.999
-score AC_POST_EXTRAS                 2.300
-score ADMITS_SPAM                    2.066
-score ADVANCE_FEE_2_NEW_FORM         1.999
-score ADVANCE_FEE_2_NEW_MONEY        0.041
-score ADVANCE_FEE_3_NEW              0.001
-score ADVANCE_FEE_3_NEW_FORM         1.599
-score ADVANCE_FEE_3_NEW_FRM_MNY      1.271
-score ADVANCE_FEE_3_NEW_MONEY        2.699
-score ADVANCE_FEE_4_NEW              2.688
-score ADVANCE_FEE_4_NEW_MONEY        2.313
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.750
-score ADVANCE_FEE_5_NEW_MONEY        0.001
+score AC_POST_EXTRAS                 2.052
+score ADMITS_SPAM                    1.814
+score ADVANCE_FEE_2_NEW_FORM         1.868
+score ADVANCE_FEE_2_NEW_FRM_MNY      0.433
+score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_3_NEW              2.518
+score ADVANCE_FEE_3_NEW_FORM         1.404
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_3_NEW_MONEY        2.799
+score ADVANCE_FEE_4_NEW              1.848
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.583
+score ADVANCE_FEE_4_NEW_MONEY        0.001
+score ADVANCE_FEE_5_NEW              2.295
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.759
+score ADVANCE_FEE_5_NEW_MONEY        3.299
 score AD_PREFS                       0.499
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            1.591
 score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_EXTORT_01              0.616
+score BITCOIN_DEADLINE               0.584
+score BITCOIN_EXTORT_01              4.201
+score BITCOIN_MALWARE                2.302
+score BITCOIN_ONAN                   2.058
 score BITCOIN_SPAM_02                2.499
-score BITCOIN_SPAM_03                2.499
-score BITCOIN_SPAM_05                1.910
-score BITCOIN_SPAM_07                0.281
-score BITCOIN_SPAM_09                1.137
-score BITCOIN_TOEQFM                 3.499
-score BITCOIN_VISTA                  3.419
-score BITCOIN_XPRIO                  1.775
+score BITCOIN_SPAM_03                2.500
+score BITCOIN_SPAM_07                3.425
+score BITCOIN_SPAM_09                0.001
+score BITCOIN_TOEQFM                 3.498
+score BITCOIN_VISTA                  1.815
+score BITCOIN_XPRIO                  2.499
 score BODY_URI_ONLY                  0.001
-score BOGUS_MIME_VERSION             0.001
-score BOGUS_MSM_HDRS                 0.850
-score CONTENT_AFTER_HTML_WEAK        0.717
-score CTE_8BIT_MISMATCH              0.639
-score DEAR_BENEFICIARY               3.099
-score DKIMWL_BL                      1.299
-score DKIMWL_WL_HIGH                 -0.121
+score BOGUS_MIME_VERSION             3.499
+score BOGUS_MSM_HDRS                 0.262
+score COMPENSATION                   0.001
+score CTE_8BIT_MISMATCH              0.637
+score DEAR_BENEFICIARY               3.199
+score DKIMWL_BL                      1.283
+score DKIMWL_WL_HIGH                 -0.141
 score DKIMWL_WL_MED                  -0.001
 score DKIMWL_WL_MEDHI                -0.001
 score DOS_BODY_HIGH_NO_MID           3.499
 score DSN_NO_MIMEVERSION             1.999
-score DYNAMIC_IMGUR                  2.503
+score DYNAMIC_IMGUR                  1.534
 score ENCRYPTED_MESSAGE              -0.999
-score END_FUTURE_EMAILS              2.465
-score FACEBOOK_IMG_NOT_RCVD_FB       1.999
-score FBI_MONEY                      1.004
-score FBI_SPOOF                      0.752
+score END_FUTURE_EMAILS              2.451
+score FACEBOOK_IMG_NOT_RCVD_FB       2.000
+score FBI_MONEY                      0.424
+score FBI_SPOOF                      1.999
 score FILL_THIS_FORM                 0.001
-score FONT_INVIS_HTML_NOHTML         0.948
-score FONT_INVIS_LONG_LINE           2.098
-score FONT_INVIS_MSGID               1.435
-score FONT_INVIS_NORDNS              1.048
-score FONT_INVIS_POSTEXTRAS          1.098
-score FORGED_SPF_HELO                2.245
+score FONT_INVIS_HTML_NOHTML         0.119
+score FONT_INVIS_LONG_LINE           1.852
+score FONT_INVIS_MSGID               1.440
+score FONT_INVIS_NORDNS              0.456
+score FONT_INVIS_POSTEXTRAS          1.347
+score FORGED_SPF_HELO                2.249
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   2.899
-score FORM_FRAUD_5                   0.788
+score FORM_FRAUD_3                   2.825
+score FORM_FRAUD_5                   0.783
 score FOUND_YOU                      3.250
-score FREEMAIL_FORGED_FROMDOMAIN     0.001 # force non-zero
-score FROM_ADDR_WS                   0.001
-score FROM_BANK_NOAUTH               0.999
+score FREEMAIL_FORGED_FROMDOMAIN     0.001
+score FROM_ADDR_WS                   0.451
 score FROM_FMBLA_NEWDOM              1.499
-score FROM_FMBLA_NEWDOM14            0.656
-score FROM_FMBLA_NEWDOM28            0.799
-score FROM_GOV_DKIM_AU               -0.956
-score FROM_IN_TO_AND_SUBJ            2.121
-score FROM_LONG_DOM                  1.430
+score FROM_FMBLA_NEWDOM14            0.820
+score FROM_FMBLA_NEWDOM28            0.800
+score FROM_GOV_DKIM_AU               -0.345
+score FROM_IN_TO_AND_SUBJ            1.653
+score FROM_LONG_DOM                  0.001
 score FROM_LONG_DOM_MINFP            2.499
-score FROM_MISSPACED                 0.001
-score FROM_MISSP_FREEMAIL            0.001
-score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_PHISH               1.115
-score FROM_MISSP_REPLYTO             0.952
+score FROM_MISSPACED                 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL            1.880
+score FROM_MISSP_MSFT                2.480
+score FROM_MISSP_PHISH               2.017
+score FROM_MISSP_REPLYTO             0.793
 score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_USER                0.001 # force non-zero
-score FROM_MISSP_XPRIO               0.001
-score FROM_NTLD_LINKBAIT             0.683
-score FROM_NTLD_REPLY_FREEMAIL       0.274
-score FROM_PAYPAL_SPOOF              1.599
-score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        1.660
-score FROM_UNBAL2                    2.399
-score FSL_BULK_SIG                   0.001
+score FROM_MISSP_USER                2.966
+score FROM_MISSP_XPRIO               0.448
+score FROM_MULTI_NORDNS              0.121
+score FROM_NTLD_LINKBAIT             1.971
+score FROM_PAYPAL_SPOOF              1.600
+score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_SUSPICIOUS_NTLD_FP        1.999
+score FROM_UNBAL2                    2.400
+score FSL_BULK_SIG                   0.136
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   0.746
-score FUZZY_BITCOIN                  1.779
-score FUZZY_PAYPAL                   1.799
-score GAPPY_HTML                     3.599
-score GB_BITCOIN_NH                  1.597
-score GB_CUSTOM_HTM_URI              0.996
-score GB_FAKE_RF_SHORT               1.259
+score FUZZY_AMAZON                   2.215
+score FUZZY_BITCOIN                  2.324
+score FUZZY_TRUMP                    1.430
+score GAPPY_HTML                     2.699
+score GB_BITCOIN_NH                  0.566
+score GB_CUSTOM_HTM_URI              1.499
+score GB_FAKE_RF_SHORT               2.000
 score GB_FREEMAIL_DISPTO             0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
-score GB_HASHBL_BTC                  4.256
-score GOOG_MALWARE_DNLD              4.490
-score GOOG_REDIR_NORDNS              1.618
-score GOOG_STO_IMG_NOHTML            2.499
-score GOOG_STO_NOIMG_HTML            2.745
-score HDRS_MISSP                     2.497
-score HDR_ORDER_FTSDMCXX_DIRECT      1.784
-score HDR_ORDER_FTSDMCXX_NORDNS      2.437
-score HEADER_FROM_DIFFERENT_DOMAINS  0.001 # force non-zero
-score HELO_NO_DOMAIN                 0.001
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
+score GB_HASHBL_BTC                  4.265
+score GOOG_MALWARE_DNLD              2.884
+score GOOG_REDIR_NORDNS              1.185
+score GOOG_STO_EMAIL_PHISH           0.001
+score GOOG_STO_NOIMG_HTML            2.910
+score HDRS_MISSP                     2.247
+score HDR_ORDER_FTSDMCXX_DIRECT      1.876
+score HDR_ORDER_FTSDMCXX_NORDNS      1.290
+score HEADER_FROM_DIFFERENT_DOMAINS  0.249
+score HELO_NO_DOMAIN                 0.464
 score HK_LOTTO                       0.999
-score HK_NAME_FM_MR_MRS              1.499
-score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_ENVFROM              0.001
-score HK_RANDOM_FROM                 0.043
+score HK_NAME_FM_MR_MRS              0.001
+score HK_NAME_MR_MRS                 0.001 # force non-zero
+score HK_RANDOM_ENVFROM              0.001 # force non-zero
+score HK_RANDOM_FROM                 0.618
 score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        1.999
+score HK_SCAM                        2.000
 score HK_WIN                         0.999
-score HOSTED_IMG_DIRECT_MX           3.468
-score HOSTED_IMG_MULTI_PUB_01        0.235
-score HREF_EMPTY_NORDNS              1.613
-score HREF_EMPTY_PHPMAIL             1.112
-score HTML_BADATTR                   0.239
+score HOSTED_IMG_DIRECT_MX           3.232
+score HOSTED_IMG_MULTI_PUB_01        0.001
+score HREF_EMPTY_NORDNS              1.053
+score HTML_BADATTR                   0.408
 score HTML_ENTITY_ASCII              2.999
-score HTML_FONT_TINY_NORDNS          1.922
-score HTML_SINGLET_MANY              2.357
-score HTML_TAG_BALANCE_CENTER        2.698
+score HTML_FONT_TINY_NORDNS          1.520
+score HTML_SINGLET_MANY              1.312
+score HTML_TAG_BALANCE_CENTER        1.360
 score HTML_TEXT_INVISIBLE_FONT       0.001
-score HTML_TEXT_INVISIBLE_STYLE      0.279
-score IMG_ONLY_FM_DOM_INFO           1.729
-score JH_SPAMMY_HEADERS              3.200
+score HTML_TEXT_INVISIBLE_STYLE      1.364
+score IMG_DIRECT_TO_MX               0.001 # force non-zero
+score IMG_ONLY_FM_DOM_INFO           1.161
+score JH_SPAMMY_HEADERS              3.247
 score KHOP_HELO_FCRDNS               0.399
-score LIST_PARTIAL_SHORT_MSG         1.420
+score LIST_PARTIAL_SHORT_MSG         1.172
 score LONGLN_LOW_CONTRAST            2.499
-score LONG_HEX_URI                   2.696
-score LONG_IMG_URI                   0.001
+score LONG_HEX_URI                   2.299
+score LONG_IMG_URI                   1.970
 score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    0.852
-score LOTTO_DEPT                     1.999
-score MALWARE_NORDNS                 2.854
-score MALW_ATTACH                    2.500
-score MANY_SUBDOM                    2.999
-score MILLION_HUNDRED                2.201
-score MILLION_USD                    1.999
-score MIMEOLE_DIRECT_TO_MX           0.295
-score MIME_NO_TEXT                   0.994
+score LOTTO_AGENT                    0.913
+score LOTTO_DEPT                     0.001
+score MALFORMED_FREEMAIL             2.198
+score MALWARE_NORDNS                 2.004
+score MANY_SUBDOM                    2.899
+score MAY_BE_FORGED                  1.436
+score MILLION_HUNDRED                2.477
+score MILLION_USD                    1.800
+score MIMEOLE_DIRECT_TO_MX           1.344
+score MIME_NO_TEXT                   0.001
 score MIXED_CENTER_CASE              2.499
-score MIXED_ES                       2.299
-score MIXED_HREF_CASE                1.999
-score MONEY_ATM_CARD                 2.092
-score MONEY_FORM                     2.404
+score MIXED_ES                       2.399
+score MIXED_HREF_CASE                1.895
+score MONEY_ATM_CARD                 0.001 # force non-zero
+score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               0.001
-score MONEY_FRAUD_3                  2.699
-score MONEY_FRAUD_5                  2.637
+score MONEY_FRAUD_3                  1.828
+score MONEY_FRAUD_5                  0.001
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           0.023
-score MONEY_FROM_41                  0.723
-score MONEY_FROM_MISSP               0.001
-score MONEY_NOHTML                   1.346
-score MSM_PRIO_REPTO                 0.551
+score MONEY_FREEMAIL_REPTO           0.001
+score MONEY_FROM_41                  0.001
+score MONEY_FROM_MISSP               1.999
+score MONEY_NOHTML                   1.104
+score MSM_PRIO_REPTO                 1.564
 score NA_DOLLARS                     1.499
-score NICE_REPLY_A                   -3.291
-score NORDNS_LOW_CONTRAST            0.001
+score NICE_REPLY_A                   -2.695
+score NORDNS_LOW_CONTRAST            0.915
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             0.664
-score OBFU_BITCOIN                   0.197
-score OBFU_JVSCR_ESC                 2.199
-score ODD_FREEM_REPTO                2.534
+score NSL_RCVD_HELO_USER             0.683
+score OBFU_BITCOIN                   2.753
+score ODD_FREEM_REPTO                2.560
 score PDS_BAD_THREAD_QP_64           0.999
 score PDS_BTC_ID                     0.499
 score PDS_BTC_MSGID                  0.999
 score PDS_DBL_URL_LINKBAIT           0.001
 score PDS_FRNOM_TODOM_DBL_URL        0.001
-score PDS_FRNOM_TODOM_NAKED_TO       0.501
-score PDS_FROM_NAME_TO_DOMAIN        0.193
-score PDS_HELO_SPF_FAIL              0.960
+score PDS_FRNOM_TODOM_NAKED_TO       0.342
+score PDS_FROM_2_EMAILS              0.915
+score PDS_FROM_NAME_TO_DOMAIN        0.670
+score PDS_HELO_SPF_FAIL              0.001
 score PDS_OTHER_BAD_TLD              1.999
-score PHISH_ATTACH                   2.299
-score PHP_ORIG_SCRIPT                2.384
-score PHP_SCRIPT                     0.540
-score PP_MIME_FAKE_ASCII_TEXT        0.236
-score RATWARE_NO_RDNS                1.772
-score RCVD_DOTEDU_SHORT              0.001
+score PHISH_ATTACH                   2.199
+score PHP_ORIG_SCRIPT                2.067
+score PHP_SCRIPT                     2.499
+score PP_MIME_FAKE_ASCII_TEXT        0.239
+score RATWARE_NO_RDNS                1.346
+score RCVD_DOTEDU_SHORT              1.126
 score RCVD_IN_IADB_DMARC             -0.001
 score RCVD_IN_IADB_ESP               -0.001
-score RCVD_IN_MSPIKE_H2              -0.696
-score REPTO_419_FRAUD                1.598
-score REPTO_419_FRAUD_GM             1.313
-score SCC_CANSPAM_2                  3.160
+score RCVD_IN_MSPIKE_H2              -0.001 # force non-zero
+score REPTO_419_FRAUD                2.621
+score REPTO_419_FRAUD_GM             2.733
+score RISK_FREE                      2.299
+score SCC_CANSPAM_2                  3.001
 score SCC_ISEMM_LID_1B               1.499
-score SCC_SPAMMER_ADDR_2             1.543
+score SCC_NEWBIE_HASBEENS            2.199
+score SCC_SPAMMER_ADDR_2             0.397
+score SERGIO_SUBJECT_VIAGRA01        2.499
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORTENED_URL_SRC              2.899
-score SHORTENER_SHORT_IMG            0.001
-score SHORT_IMG_SUSP_NTLD            1.499
+score SHORTENED_URL_SRC              3.099
+score SHORTENER_SHORT_IMG            2.499
+score SHORT_IMG_SUSP_NTLD            1.303
+score SHY_OBFU_PASSWORD              3.624
 score SPOOFED_FREEMAIL               0.001
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOFED_FREEM_REPTO            0.001 # force non-zero
-score SPOOF_GMAIL_MID                0.417
-score STATIC_XPRIO_OLE               0.388
-score SUBJ_ATTENTION                 0.500
-score SUSP_UTF8_WORD_COMBO           2.063
+score SPOOFED_FREEM_REPTO            2.500
+score SPOOF_GMAIL_MID                0.167
+score STATIC_XPRIO_OLE               0.001 # force non-zero
+score SUBJ_ATTENTION                 0.499
+score SUSP_UTF8_WORD_COMBO           2.601
 score SUSP_UTF8_WORD_FROM            1.999
 score SUSP_UTF8_WORD_SUBJ            1.999
-score THIS_AD                        0.877
-score THIS_IS_ADV_SUSP_NTLD          1.499
+score TEQF_USR_POLITE                1.999
+score THIS_AD                        1.299
 score TO_EQ_FM_DIRECT_MX             0.001
-score TO_EQ_FM_DOM_SPF_FAIL          1.370
-score TO_EQ_FM_SPF_FAIL              0.001
+score TO_EQ_FM_DOM_HTML_ONLY         0.242
+score TO_EQ_FM_DOM_SPF_FAIL          0.551
+score TO_EQ_FM_SPF_FAIL              0.214
 score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.255
+score TO_NAME_SUBJ_NO_RDNS           2.999
 score TO_NO_BRKTS_HTML_IMG           0.001
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.716
-score TO_NO_BRKTS_NORDNS_HTML        0.001
+score TO_NO_BRKTS_MSFT               0.266
+score TO_NO_BRKTS_NORDNS_HTML        0.001 # force non-zero
 score TO_NO_BRKTS_PCNT               2.499
 score TVD_SPACE_ENCODED              2.499
-score UNDISC_FREEM                   2.599
-score UNDISC_MONEY                   0.870
-score UNICODE_OBFU_ASC               2.499
+score TVD_SPACE_RATIO_MINFP          0.001
+score UNDISC_FREEM                   2.699
+score UNDISC_MONEY                   1.991
+score UNICODE_OBFU_ASC               2.500
 score UNICODE_OBFU_ZW_MANY           0.001
-score URIBL_CT_SURBL                 1.399
-score URI_CLOUDFLAREIPFS             0.001
-score URI_DOTEDU                     0.001
-score URI_DWEBIPFS                   0.552
-score URI_EXCESS_SLASHES             0.299
+score URIBL_CT_SURBL                 1.999
+score URI_CLOUDFLAREIPFS             0.001 # force non-zero
+score URI_DOTEDU                     1.999
+score URI_DOTTY_HEX                  0.391
+score URI_DWEBIPFS                   1.218
+score URI_EXCESS_SLASHES             0.001
+score URI_FIREBASEAPP                2.999
 score URI_FLKIPFSXYZIPFS             3.499
 score URI_GOOGDRAWPREVIEW_MINFP      3.499
 score URI_GOOGLE_PROXY               0.001
 score URI_GOOG_STO_SPAMMY            2.999
-score URI_IMG_CWINDOWSNET            0.541
+score URI_IMG_CWINDOWSNET            0.200
 score URI_IPFS                       0.001
-score URI_IPFSIO                     3.499
-score URI_PHISH                      0.204
+score URI_IPFSIO                     3.234
+score URI_PHISH                      0.001
 score URI_TRY_3LD                    1.999
+score URI_WPADMIN                    2.299
 score URI_WP_HACKED                  0.001
-score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.999
+score URI_WP_HACKED_2                1.846
+score VFY_ACCT_NORDNS                2.410
 score VISTA_COST                     2.500
-score VISTA_TONOM_EQ_TOLOC           2.499
-score WORD_INVIS                     2.999
-score XFER_LOTSA_MONEY               0.999
-score XM_RANDOM                      2.499
-score XPRIO                          2.249
-score XPRIO_VISTA                    1.341
-score YOUR_PERMISSION                1.006
-score YOU_INHERIT                    2.060
+score VISTA_TONOM_EQ_TOLOC           2.356
+score XFER_LOTSA_MONEY               1.000
+score XM_RANDOM                      2.500
+score XPRIO                          0.001
+score XPRIO_VISTA                    1.087
+score YOUR_PERMISSION                2.799
+score YOU_INHERIT                    0.222
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
 score AC_SPAMMY_URI_PATTERNS11       1.000
@@ -254,22 +266,20 @@ score AC_SPAMMY_URI_PATTERNS4        1.0
 score AC_SPAMMY_URI_PATTERNS8        1.000
 score AC_SPAMMY_URI_PATTERNS9        1.000
 score ADULT_DATING_COMPANY           10.000
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.000
 score ALIBABA_IMG_NOT_RCVD_ALI       1.000
 score AMAZON_IMG_NOT_RCVD_AMZN       1.000
 score APP_DEVELOPMENT_FREEM          1.000
 score APP_DEVELOPMENT_NORDNS         1.000
 score BEBEE_IMG_NOT_RCVD_BB          1.000
+score BIGNUM_EMAILS_FREEM            1.000
 score BITCOIN_BOMB                   1.000
-score BITCOIN_DEADLINE               1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
-score BITCOIN_MALWARE                1.000
 score BITCOIN_OBFU_SUBJ              1.000
-score BITCOIN_ONAN                   1.000
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
 score BITCOIN_SPAM_04                1.000
+score BITCOIN_SPAM_05                1.000
 score BITCOIN_SPAM_06                1.000
 score BITCOIN_SPAM_08                1.000
 score BITCOIN_SPAM_10                1.000
@@ -284,6 +294,7 @@ score BULK_RE_SUSP_NTLD              1.0
 score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
 score CONTENT_AFTER_HTML             1.000
+score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
 score DKIMWL_BLOCKED                 0.001
 score DOTGOV_IMAGE                   1.000
@@ -293,10 +304,12 @@ score FONT_INVIS_DIRECT              1.0
 score FONT_INVIS_DOTGOV              1.000
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
+score FROM_BANK_NOAUTH               1.000
 score FROM_FMBLA_NDBLOCKED           0.001
 score FROM_GOV_REPLYTO_FREEMAIL      1.000
 score FROM_GOV_SPOOF                 1.000
 score FROM_NEWDOM_BTC                1.000
+score FROM_NTLD_REPLY_FREEMAIL       1.000
 score FROM_NUMBERO_NEWDOMAIN         1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
@@ -306,18 +319,20 @@ score GOOGLE_DOCS_PHISH              1.0
 score GOOGLE_DOCS_PHISH_MANY         1.000
 score GOOGLE_DOC_SUSP                1.000
 score GOOGLE_DRIVE_REPLY_BAD_NTLD    1.000
-score GOOG_STO_EMAIL_PHISH           1.000
 score GOOG_STO_HTML_PHISH            1.000
 score GOOG_STO_HTML_PHISH_MANY       1.000
 score GOOG_STO_IMG_HTML              1.000
+score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
 score HAS_X_OUTGOING_SPAM_STAT       1.000
+score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
 score HK_RCVD_IP_MULTICAST           1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
 score HOSTED_IMG_FREEM               1.000
 score HOSTED_IMG_MULTI               1.000
+score HREF_EMPTY_PHPMAIL             1.000
 score HREF_EMPTY_XANTIABUSE          1.000
 score HREF_EMPTY_XAUTHED             1.000
 score HTML_ENTITY_ASCII_TINY         1.000
@@ -374,7 +389,6 @@ score SCC_ISEMM_LID_1A               1.0
 score SENDGRID_REDIR_PHISH           1.000
 score SEO_SUSP_NTLD                  1.000
 score SHY_OBFU_EXPIRE                1.000
-score SHY_OBFU_PASSWORD              1.000
 score SPOOFED_FREEM_REPTO_CHN        1.000
 score SPOOFED_FREEM_REPTO_RUS        1.000
 score STOCK_TIP                      1.000
@@ -382,6 +396,7 @@ score SUBJ_BRKN_WORDNUMS             1.0
 score SYSADMIN                       1.000
 score TAGSTAT_IMG_NOT_RCVD_TGST      1.000
 score TARINGANET_IMG_NOT_RCVD_TN     1.000
+score THIS_IS_ADV_SUSP_NTLD          1.000
 score TONLINE_FAKE_DKIM              1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
@@ -393,7 +408,6 @@ score URI_AZURE_CLOUDAPP             1.0
 score URI_DASHGOVEDU                 1.000
 score URI_DATA                       1.000
 score URI_DOTEDU_ENTITY              1.000
-score URI_FIREBASEAPP                1.000
 score URI_GOOGDRAWPREVIEW            1.000
 score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
@@ -407,6 +421,7 @@ score URI_WP_DIRINDEX                1.0
 score USB_DRIVES                     1.000
 score VPS_NO_NTLD                    1.000
 score WALMART_IMG_NOT_RCVD_WAL       1.000
+score WORD_INVIS                     1.000
 score WORD_INVIS_MANY                1.000
 score XM_DIGITS_ONLY                 1.000
 score XPRIO_SHORT_SUBJ               1.000