You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2023/05/23 02:50:13 UTC
svn commit: r1910006 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Tue May 23 02:50:12 2023
New Revision: 1910006
URL: http://svn.apache.org/viewvc?rev=1910006&view=rev
Log:
updated scores for revision 1909974 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1910006&r1=1910005&r2=1910006&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Tue May 23 02:50:12 2023
@@ -1,7 +1,7 @@
score ACCT_PHISHING_MANY 2.999 2.999 2.999 2.999
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS 2.999 0.306 2.999 0.306
+score AC_FROM_MANY_DOTS 2.999 0.304 2.999 0.304
score AC_HTML_NONSENSE_TAGS 1.999 1.999 1.999 1.999
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
@@ -18,15 +18,14 @@ score ADULT_DATING_COMPANY
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
-score ADVANCE_FEE_3_NEW 3.003 3.265 3.003 3.265
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.304 0.001 0.304 0.001
-score ADVANCE_FEE_3_NEW_MONEY 2.334 2.599 2.334 2.599
-score ADVANCE_FEE_4_NEW 2.299 2.299 2.299 2.299
-score ADVANCE_FEE_4_NEW_MONEY 1.088 2.400 1.088 2.400
-score ADVANCE_FEE_5_NEW 2.280 1.321 2.280 1.321
+score ADVANCE_FEE_3_NEW 3.499 3.268 3.499 3.268
+score ADVANCE_FEE_3_NEW_MONEY 2.699 2.599 2.699 2.599
+score ADVANCE_FEE_4_NEW 2.299 1.834 2.299 1.834
+score ADVANCE_FEE_4_NEW_MONEY 0.972 2.399 0.972 2.399
+score ADVANCE_FEE_5_NEW 0.991 1.247 0.991 1.247
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_MONEY 0.001 0.001 0.001 0.001
-score AD_PREFS 0.499 0.259 0.499 0.259
+score ADVANCE_FEE_5_NEW_MONEY 0.153 0.001 0.153 0.001
+score AD_PREFS 0.499 0.238 0.499 0.238
score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000
score AMAZON_IMG_NOT_RCVD_AMZN 0.001 0.001 0.001 0.001
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
@@ -34,53 +33,54 @@ score APP_DEVELOPMENT_NORDNS
score ARC_SIGNED 0.001 0.001 0.001 0.001
score ARC_VALID 0.001 0.001 0.001 0.001
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
+score AXB_XM_FORGED_OL2600 1.241 0.001 1.241 0.001
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM 0.766 0.001 0.766 0.001
-score BIGNUM_EMAILS_MANY 2.895 2.999 2.895 2.999
+score BIGNUM_EMAILS_FREEM 1.864 0.001 1.864 0.001
+score BIGNUM_EMAILS_MANY 2.259 2.999 2.259 2.999
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE 1.902 2.999 1.902 2.999
-score BITCOIN_EXTORT_01 3.925 3.574 3.925 3.574
+score BITCOIN_DEADLINE 1.972 2.999 1.972 2.999
+score BITCOIN_EXTORT_01 4.696 3.606 4.696 3.606
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML 2.319 2.498 2.319 2.498
-score BITCOIN_MALWARE 2.682 3.203 2.682 3.203
-score BITCOIN_OBFU_SUBJ 3.499 1.765 3.499 1.765
+score BITCOIN_MALF_HTML 2.060 2.382 2.060 2.382
+score BITCOIN_MALWARE 0.370 2.595 0.370 2.595
+score BITCOIN_OBFU_SUBJ 3.499 1.768 3.499 1.768
score BITCOIN_ONAN 1.000 1.000 1.000 1.000
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_02 2.499 2.499 2.499 2.499
-score BITCOIN_SPAM_03 0.001 0.001 0.001 0.001
+score BITCOIN_SPAM_03 1.972 0.001 1.972 0.001
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05 0.001 0.409 0.001 0.409
+score BITCOIN_SPAM_05 0.001 1.412 0.001 1.412
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07 2.176 2.249 2.176 2.249
+score BITCOIN_SPAM_07 2.748 2.366 2.748 2.366
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_09 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
-score BITCOIN_XPRIO 1.870 0.651 1.870 0.651
+score BITCOIN_XPRIO 0.066 1.452 0.066 1.452
score BITCOIN_YOUR_INFO 2.999 2.999 2.999 2.999
-score BODY_SINGLE_URI 2.142 1.987 2.142 1.987
+score BODY_SINGLE_URI 1.581 1.953 1.581 1.953
score BODY_SINGLE_WORD 0.001 0.001 0.001 0.001
-score BODY_URI_ONLY 0.356 0.001 0.356 0.001
+score BODY_URI_ONLY 1.012 0.001 1.012 0.001
score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000
score BOGUS_MSM_HDRS 1.000 1.000 1.000 1.000
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score BTC_ORG 1.000 1.000 1.000 1.000
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000
-score CANT_SEE_AD 1.019 1.507 1.019 1.507
-score CK_HELO_GENERIC 0.250 0.249 0.250 0.249
+score CANT_SEE_AD 1.025 1.565 1.025 1.565
+score CK_HELO_GENERIC 0.250 0.250 0.250 0.250
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score COMPENSATION 1.499 1.348 1.499 1.348
+score COMPENSATION 0.519 1.467 0.519 1.467
score CONTENT_AFTER_HTML 1.000 1.000 1.000 1.000
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
-score CTE_8BIT_MISMATCH 0.999 0.001 0.999 0.001
-score DATE_IN_FUTURE_Q_PLUS 3.800 3.699 3.800 3.699
+score CTE_8BIT_MISMATCH 1.000 0.001 1.000 0.001
+score DATE_IN_FUTURE_Q_PLUS 3.799 3.699 3.799 3.699
score DAY_I_EARNED 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 2.489 0.044 2.489 0.044
+score DEAR_BENEFICIARY 2.699 0.040 2.699 0.040
score DKIMWL_BL 0.001 1.000 0.001 1.000
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
@@ -90,200 +90,201 @@ score DOTGOV_IMAGE
score DSN_NO_MIMEVERSION 1.999 1.999 1.999 1.999
score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
-score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999
-score END_FUTURE_EMAILS 2.500 2.499 2.500 2.499
+score ENCRYPTED_MESSAGE -0.999 -1.000 -0.999 -1.000
+score END_FUTURE_EMAILS 2.499 2.499 2.499 2.499
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
-score FAKE_REPLY_A1 0.857 0.001 0.857 0.001
-score FAKE_REPLY_B 2.064 0.001 2.064 0.001
+score FAKE_REPLY_A1 1.002 0.001 1.002 0.001
+score FAKE_REPLY_B 1.013 0.001 1.013 0.001
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
-score FILL_THIS_FORM 0.699 0.001 0.699 0.001
+score FILL_THIS_FORM 0.700 0.001 0.700 0.001
score FONT_INVIS_DIRECT 0.001 0.001 0.001 0.001
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000
-score FONT_INVIS_LONG_LINE 2.999 3.000 2.999 3.000
-score FONT_INVIS_MSGID 1.335 0.190 1.335 0.190
+score FONT_INVIS_LONG_LINE 2.999 2.999 2.999 2.999
+score FONT_INVIS_MSGID 1.339 0.001 1.339 0.001
score FONT_INVIS_NORDNS 1.000 1.000 1.000 1.000
-score FONT_INVIS_POSTEXTRAS 0.153 1.388 0.153 1.388
+score FONT_INVIS_POSTEXTRAS 0.152 1.385 0.152 1.385
score FORM_FRAUD 0.999 0.001 0.999 0.001
-score FORM_FRAUD_3 2.399 2.300 2.399 2.300
+score FORM_FRAUD_3 2.499 2.299 2.499 2.299
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
score FOUND_YOU 1.000 1.000 1.000 1.000
-score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.249 0.250 0.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.249 0.249 0.249
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
-score FROM_2_EMAILS_SHORT 0.244 0.001 0.244 0.001
-score FROM_ADDR_WS 3.000 1.321 3.000 1.321
+score FROM_2_EMAILS_SHORT 0.001 0.098 0.001 0.098
+score FROM_ADDR_WS 2.999 1.327 2.999 1.327
score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
score FROM_FMBLA_NEWDOM 0.001 0.001 0.001 0.001
-score FROM_FMBLA_NEWDOM14 0.001 0.966 0.001 0.966
+score FROM_FMBLA_NEWDOM14 0.001 0.967 0.001 0.967
score FROM_FMBLA_NEWDOM28 0.001 0.001 0.001 0.001
-score FROM_GOV_DKIM_AU 0.001 -0.572 0.001 -0.572
+score FROM_GOV_DKIM_AU 0.001 -0.377 0.001 -0.377
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000
score FROM_IN_TO_AND_SUBJ 1.799 1.799 1.799 1.799
-score FROM_MISSPACED 0.001 0.001 0.001 0.001
-score FROM_MISSP_DYNIP 2.399 0.915 2.399 0.915
-score FROM_MISSP_EH_MATCH 1.210 1.447 1.210 1.447
-score FROM_MISSP_FREEMAIL 1.939 3.099 1.939 3.099
+score FROM_MISSPACED 0.304 0.001 0.304 0.001
+score FROM_MISSP_DYNIP 1.396 0.916 1.396 0.916
+score FROM_MISSP_EH_MATCH 1.253 1.437 1.253 1.437
+score FROM_MISSP_FREEMAIL 1.895 3.099 1.895 3.099
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
-score FROM_MISSP_REPLYTO 2.499 0.697 2.499 0.697
+score FROM_MISSP_REPLYTO 2.500 0.697 2.500 0.697
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
-score FROM_NTLD_LINKBAIT 1.081 1.999 1.081 1.999
-score FROM_NTLD_REPLY_FREEMAIL 0.158 1.000 0.158 1.000
+score FROM_NTLD_LINKBAIT 0.598 0.001 0.598 0.001
+score FROM_NTLD_REPLY_FREEMAIL 0.162 1.000 0.162 1.000
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
-score FROM_PAYPAL_SPOOF 0.001 0.453 0.001 0.453
-score FROM_SUSPICIOUS_NTLD 0.499 0.192 0.499 0.192
+score FROM_PAYPAL_SPOOF 0.001 0.001 0.001 0.001
+score FROM_SUSPICIOUS_NTLD 0.500 0.192 0.500 0.192
score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999
-score FROM_WSP_TRAIL 3.299 2.999 3.299 2.999
+score FROM_WSP_TRAIL 3.300 2.999 3.300 2.999
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_AMAZON 1.594 0.001 1.594 0.001
+score FUZZY_AMAZON 1.350 0.001 1.350 0.001
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
-score GB_BITCOIN_NH 0.577 1.415 0.577 1.415
-score GB_CUSTOM_HTM_URI 1.500 0.106 1.500 0.106
+score GB_BITCOIN_NH 2.258 1.310 2.258 1.310
+score GB_CUSTOM_HTM_URI 1.499 0.092 1.499 0.092
score GB_FAKE_RF_SHORT 1.942 1.999 1.942 1.999
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
score GB_FREEMAIL_DISPTO 0.001 0.001 0.001 0.001
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.500 0.500 0.500
score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750
score GB_GOOGLE_TRANSL 0.749 0.749 0.749 0.749
-score GB_HASHBL_BTC 0.001 1.807 0.001 1.807
+score GB_HASHBL_BTC 0.001 1.729 0.001 1.729
score GB_STORAGE_GOOGLE_EMAIL 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
-score GOOG_MALWARE_DNLD 2.167 2.357 2.167 2.357
-score GOOG_REDIR_HTML_ONLY 1.999 1.999 1.999 1.999
+score GOOG_MALWARE_DNLD 1.415 3.053 1.415 3.053
+score GOOG_REDIR_HTML_ONLY 1.999 2.000 1.999 2.000
score GOOG_REDIR_NORDNS 2.597 3.099 2.597 3.099
score GOOG_STO_EMAIL_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
-score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000
-score GOOG_STO_IMG_NOHTML 2.059 2.499 2.059 2.499
+score GOOG_STO_IMG_HTML 1.975 1.000 1.975 1.000
+score GOOG_STO_IMG_NOHTML 2.052 2.499 2.052 2.499
score GOOG_STO_NOIMG_HTML 2.999 2.999 2.999 2.999
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
-score HAS_X_OUTGOING_SPAM_STAT 0.501 1.585 0.501 1.585
-score HDRS_MISSP 2.091 0.270 2.091 0.270
+score HAS_X_OUTGOING_SPAM_STAT 1.000 1.515 1.000 1.515
+score HDRS_LCASE 0.100 0.100 0.100 0.100
+score HDRS_MISSP 2.499 0.269 2.499 0.269
score HDR_ORDER_FTSDMCXX_DIRECT 0.001 0.001 0.001 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001 0.001 0.001 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.250 0.249 0.250
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250 0.249 0.250 0.249
score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_CTE_RAW 1.000 1.000 1.000 1.000
score HK_LOTTO 1.000 0.001 1.000 0.001
-score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
+score HK_NAME_MR_MRS 0.999 1.000 0.999 1.000
score HK_RANDOM_ENVFROM 0.001 0.001 0.001 0.001
-score HK_RANDOM_FROM 0.999 0.001 0.999 0.001
+score HK_RANDOM_FROM 1.000 0.001 1.000 0.001
score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
-score HK_SCAM 0.001 0.001 0.001 0.001
+score HK_SCAM 0.675 0.001 0.675 0.001
score HOSTED_IMG_DIRECT_MX 0.001 0.001 0.001 0.001
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM 0.001 0.001 0.001 0.001
+score HOSTED_IMG_FREEM 1.000 0.001 1.000 0.001
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
score HOSTED_IMG_MULTI_PUB_01 2.999 2.999 2.999 2.999
-score HTML_ENTITY_ASCII 2.615 2.999 2.615 2.999
-score HTML_ENTITY_ASCII_TINY 0.001 1.101 0.001 1.101
-score HTML_OFF_PAGE 2.497 0.001 2.497 0.001
+score HTML_ENTITY_ASCII 2.999 2.999 2.999 2.999
+score HTML_ENTITY_ASCII_TINY 2.826 1.200 2.826 1.200
+score HTML_OFF_PAGE 2.153 0.001 2.153 0.001
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
score HTML_SINGLET_MANY 2.499 1.000 2.499 1.000
-score HTML_TAG_BALANCE_CENTER 3.199 3.097 3.199 3.097
-score HTML_TEXT_INVISIBLE_FONT 0.895 1.999 0.895 1.999
-score HTML_TEXT_INVISIBLE_STYLE 1.889 0.001 1.889 0.001
+score HTML_TAG_BALANCE_CENTER 3.099 3.099 3.099 3.099
+score HTML_TEXT_INVISIBLE_FONT 1.889 1.999 1.889 1.999
+score HTML_TEXT_INVISIBLE_STYLE 1.887 0.001 1.887 0.001
score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
score JH_SPAMMY_HEADERS 3.499 3.499 3.499 3.499
score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000
score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000
-score KHOP_HELO_FCRDNS 0.399 0.396 0.399 0.396
+score KHOP_FAKE_EBAY 0.699 0.001 0.699 0.001
+score KHOP_HELO_FCRDNS 0.399 0.394 0.399 0.394
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
-score LONG_HEX_URI 2.999 2.946 2.999 2.946
+score LONG_HEX_URI 2.999 2.957 2.999 2.957
score LONG_IMG_URI 0.001 0.001 0.001 0.001
-score LONG_INVISIBLE_TEXT 2.999 1.824 2.999 1.824
-score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
+score LONG_INVISIBLE_TEXT 2.999 1.826 2.999 1.826
+score LOTS_OF_MONEY 0.010 0.009 0.010 0.009
score LUCRATIVE 1.000 1.000 1.000 1.000
score MALF_HTML_B64 1.000 1.000 1.000 1.000
-score MALWARE_NORDNS 2.091 2.185 2.091 2.185
-score MALWARE_PASSWORD 1.513 0.104 1.513 0.104
-score MANY_HDRS_LCASE 0.099 0.001 0.099 0.001
-score MILLION_HUNDRED 0.438 0.001 0.438 0.001
-score MILLION_USD 2.000 1.215 2.000 1.215
+score MALWARE_NORDNS 1.000 2.119 1.000 2.119
+score MALWARE_PASSWORD 2.649 2.980 2.649 2.980
+score MANY_HDRS_LCASE 0.018 0.001 0.018 0.001
+score MILLION_HUNDRED 0.001 0.001 0.001 0.001
+score MILLION_USD 1.575 1.218 1.575 1.218
score MIMEOLE_DIRECT_TO_MX 0.001 0.001 0.001 0.001
-score MIME_NO_TEXT 1.999 1.999 1.999 1.999
+score MIME_NO_TEXT 1.999 1.604 1.999 1.604
score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
score MIXED_CENTER_CASE 2.499 2.499 2.499 2.499
-score MIXED_ES 2.500 2.499 2.500 2.499
+score MIXED_ES 2.399 2.499 2.399 2.499
score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
-score MIXED_HREF_CASE 1.865 1.722 1.865 1.722
+score MIXED_HREF_CASE 1.862 1.999 1.862 1.999
score MIXED_IMG_CASE 1.000 1.000 1.000 1.000
score MONERO_DEADLINE 1.000 1.000 1.000 1.000
score MONERO_EXTORT_01 1.000 1.000 1.000 1.000
score MONERO_MALWARE 1.000 1.000 1.000 1.000
score MONERO_PAY_ME 1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD 0.740 1.256 0.740 1.256
+score MONEY_ATM_CARD 0.738 1.257 0.738 1.257
score MONEY_FORM 0.001 0.001 0.001 0.001
score MONEY_FORM_SHORT 0.001 0.001 0.001 0.001
-score MONEY_FRAUD_3 0.001 0.001 0.001 0.001
-score MONEY_FRAUD_5 2.700 2.493 2.700 2.493
-score MONEY_FRAUD_8 0.001 0.001 0.001 0.001
-score MONEY_FREEMAIL_REPTO 3.000 1.839 3.000 1.839
-score MONEY_FROM_41 2.000 1.999 2.000 1.999
-score MONEY_FROM_MISSP 0.540 0.001 0.540 0.001
+score MONEY_FRAUD_3 1.214 0.001 1.214 0.001
+score MONEY_FRAUD_5 2.699 2.631 2.699 2.631
+score MONEY_FRAUD_8 0.335 0.001 0.335 0.001
+score MONEY_FREEMAIL_REPTO 2.999 1.844 2.999 1.844
+score MONEY_FROM_41 1.999 1.999 1.999 1.999
+score MONEY_FROM_MISSP 0.541 0.001 0.541 0.001
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
score MSMAIL_PRI_ABNORMAL 1.499 0.001 1.499 0.001
score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000
-score NA_DOLLARS 0.177 0.001 0.177 0.001
+score NA_DOLLARS 1.499 0.001 1.499 0.001
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
score NEW_PRODUCTS 1.000 1.000 1.000 1.000
-score NICE_REPLY_A -0.001 -0.091 -0.001 -0.091
+score NICE_REPLY_A -0.001 -0.089 -0.001 -0.089
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
score OBFU_BITCOIN 1.000 1.000 1.000 1.000
-score OBFU_TEXT_ATTACH 0.849 0.038 0.849 0.038
-score ODD_FREEM_REPTO 2.999 2.767 2.999 2.767
-score PDS_BRAND_SUBJ_NAKED_TO 1.000 0.999 1.000 0.999
-score PDS_BTC_ID 0.499 0.008 0.499 0.008
-score PDS_BTC_MSGID 0.726 0.224 0.726 0.224
-score PDS_DBL_URL_TNB_RUNON 1.999 1.999 1.999 1.999
-score PDS_EMPTYSUBJ_URISHRT 1.499 0.478 1.499 0.478
-score PDS_FRNOM_TODOM_DBL_URL 1.499 1.500 1.499 1.500
-score PDS_FRNOM_TODOM_NAKED_TO 1.499 1.499 1.499 1.499
-score PDS_FROM_2_EMAILS 2.598 2.576 2.598 2.576
-score PDS_FROM_2_EMAILS_SHRTNER 0.127 1.192 0.127 1.192
-score PDS_FROM_NAME_TO_DOMAIN 1.999 1.499 1.999 1.499
+score OBFU_TEXT_ATTACH 0.676 0.001 0.676 0.001
+score ODD_FREEM_REPTO 2.999 2.699 2.999 2.699
+score PDS_BRAND_SUBJ_NAKED_TO 1.000 1.000 1.000 1.000
+score PDS_BTC_ID 0.500 0.085 0.500 0.085
+score PDS_BTC_MSGID 0.999 0.327 0.999 0.327
+score PDS_DBL_URL_TNB_RUNON 1.999 1.807 1.999 1.807
+score PDS_EMPTYSUBJ_URISHRT 1.499 0.543 1.499 0.543
+score PDS_FRNOM_TODOM_DBL_URL 0.598 1.499 0.598 1.499
+score PDS_FRNOM_TODOM_NAKED_TO 1.499 1.102 1.499 1.102
+score PDS_FROM_2_EMAILS 2.600 2.578 2.600 2.578
+score PDS_FROM_2_EMAILS_SHRTNER 1.396 0.878 1.396 0.878
+score PDS_FROM_NAME_TO_DOMAIN 1.999 1.895 1.999 1.895
score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.750 0.750 0.750 0.750
-score PDS_PHPEXP_BOT 1.000 1.000 1.000 1.000
-score PDS_SHORTFWD_URISHRT 1.451 1.000 1.451 1.000
-score PDS_SHORT_SPOOFED_URL 1.999 2.000 1.999 2.000
+score PDS_SHORTFWD_URISHRT 1.284 1.000 1.284 1.000
+score PDS_SHORT_SPOOFED_URL 1.999 1.999 1.999 1.999
score PDS_TINYSUBJ_URISHRT 1.499 1.499 1.499 1.499
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999 0.815 1.999 0.815
-score PDS_TO_EQ_FROM_NAME 1.559 0.001 1.559 0.001
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999 0.717 1.999 0.717
+score PDS_TO_EQ_FROM_NAME 0.001 0.001 0.001 0.001
+score PHISH_ATTACH 2.299 2.199 2.299 2.199
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 1.398 0.001 1.398 0.001
-score PHP_SCRIPT 2.499 1.712 2.499 1.712
+score PHP_ORIG_SCRIPT 0.994 0.001 0.994 0.001
+score PHP_SCRIPT 2.499 1.784 2.499 1.784
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score POSSIBLE_GMAIL_PHISHER 2.599 2.499 2.599 2.499
+score POSSIBLE_GMAIL_PHISHER 2.600 2.499 2.600 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
-score RAND_HEADER_MANY 2.999 0.029 2.999 0.029
-score RAND_MKTG_HEADER 1.999 1.999 1.999 1.999
+score RAND_HEADER_MANY 2.999 0.046 2.999 0.046
+score RAND_MKTG_HEADER 2.000 1.999 2.000 1.999
score RATWARE_NO_RDNS 0.001 0.001 0.001 0.001
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
@@ -316,94 +317,100 @@ score REPTO_419_FRAUD_YJ
score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000
score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000
score SCC_BODY_SINGLE_WORD 0.001 0.001 0.001 0.001
-score SCC_BODY_URI_ONLY 1.401 1.170 1.401 1.170
-score SCC_CANSPAM_1 3.070 1.568 3.070 1.568
-score SCC_CANSPAM_2 3.299 2.899 3.299 2.899
+score SCC_BODY_URI_ONLY 1.404 1.172 1.404 1.172
+score SCC_CANSPAM_1 3.065 2.076 3.065 2.076
+score SCC_CANSPAM_2 3.200 2.899 3.200 2.899
score SCC_ISEMM_LID_1 1.000 1.000 1.000 1.000
score SCC_ISEMM_LID_1A 1.000 1.000 1.000 1.000
score SCC_ISEMM_LID_1B 1.499 1.499 1.499 1.499
-score SENDGRID_REDIR 1.499 1.068 1.499 1.068
+score SENDGRID_REDIR 1.499 1.069 1.499 1.069
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
score SERGIO_SUBJECT_VIAGRA01 0.001 0.001 0.001 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499 2.499 2.499 2.499
+score SHORTENED_URL_SRC 2.299 2.199 2.299 2.199
score SHORTENER_SHORT_IMG 0.001 0.001 0.001 0.001
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
-score SHORT_SHORTNER 1.999 1.025 1.999 1.025
+score SHORT_SHORTNER 1.999 1.000 1.999 1.000
score SPOOFED_FREEMAIL 0.001 0.001 0.001 0.001
-score SPOOFED_FREEMAIL_NO_RDNS 1.101 0.001 1.101 0.001
+score SPOOFED_FREEMAIL_NO_RDNS 1.100 0.001 1.100 0.001
score SPOOFED_FREEM_REPTO 0.001 2.499 0.001 2.499
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
score SPOOF_GMAIL_MID 1.500 0.001 1.500 0.001
-score STATIC_XPRIO_OLE 0.688 1.858 0.688 1.858
+score STATIC_XPRIO_OLE 1.606 1.850 1.606 1.850
score STOCK_TIP 1.000 1.000 1.000 1.000
score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
-score SUSP_UTF8_WORD_COMBO 2.999 2.263 2.999 2.263
-score SUSP_UTF8_WORD_SUBJ 1.999 0.951 1.999 0.951
+score SUSP_UTF8_WORD_COMBO 2.999 2.265 2.999 2.265
+score SUSP_UTF8_WORD_SUBJ 2.000 1.132 2.000 1.132
score SYSADMIN 1.000 1.000 1.000 1.000
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
-score THIS_AD 1.100 1.199 1.100 1.199
+score THIS_AD 1.099 1.199 1.099 1.199
score THIS_IS_ADV_SUSP_NTLD 1.000 1.000 1.000 1.000
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
-score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.250 0.001 1.250 0.001
+score TONOM_EQ_TOLOC_SHRT_SHRTNER 0.694 0.001 0.694 0.001
score TO_EQ_FM_DIRECT_MX 0.001 0.001 0.001 0.001
score TO_EQ_FM_DOM_HTML_IMG 2.299 2.299 2.299 2.299
+score TO_EQ_FM_DOM_HTML_ONLY 0.001 0.636 0.001 0.636
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
+score TO_EQ_FM_HTML_ONLY 0.001 1.496 0.001 1.496
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.100 0.099 0.100 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.999 2.999 2.999 2.999
-score TO_NO_BRKTS_FROM_MSSP 2.499 1.752 2.499 1.752
+score TO_NAME_SUBJ_NO_RDNS 2.924 2.999 2.924 2.999
+score TO_NO_BRKTS_FROM_MSSP 2.499 1.757 2.499 1.757
score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_MSFT 0.001 0.001 0.001 0.001
score TO_NO_BRKTS_NORDNS_HTML 1.999 1.999 1.999 1.999
-score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
+score TO_NO_BRKTS_PCNT 2.499 2.500 2.499 2.500
+score TVD_IP_HEX 1.519 0.001 1.519 0.001
+score TVD_IP_SING_HEX 2.127 0.001 2.127 0.001
score TVD_PH_SUBJ_META 2.799 2.799 2.799 2.799
-score TVD_SPACE_ENCODED 2.499 0.001 2.499 0.001
-score TVD_SPACE_RATIO_MINFP 1.100 0.001 1.100 0.001
+score TVD_SPACE_ENCODED 2.497 0.001 2.497 0.001
+score TVD_SPACE_RATIO_MINFP 1.104 0.001 1.104 0.001
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
score UNDISC_FREEM 2.799 2.799 2.799 2.799
score UNDISC_MONEY 2.799 2.699 2.799 2.699
-score UNICODE_OBFU_ASC 2.499 2.499 2.499 2.499
+score UNICODE_OBFU_ASC 2.499 2.500 2.499 2.500
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
score URI_ADOBESPARK 1.000 1.000 1.000 1.000
-score URI_AZURE_CLOUDAPP 2.999 1.000 2.999 1.000
+score URI_AZURE_CLOUDAPP 3.000 1.000 3.000 1.000
score URI_BUFFLY 1.000 1.000 1.000 1.000
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000
score URI_DOTEDU 1.999 1.999 1.999 1.999
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
score URI_FIREBASEAPP 1.000 1.000 1.000 1.000
-score URI_GOOGLE_PROXY 2.299 2.399 2.299 2.399
+score URI_GOOGLE_PROXY 2.300 2.400 2.300 2.400
score URI_GOOG_STO_SPAMMY 3.000 3.000 3.000 3.000
-score URI_HEX_IP 2.499 1.000 2.499 1.000
+score URI_HEX_IP 2.018 1.000 2.018 1.000
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
score URI_LONG_REPEAT 1.000 1.000 1.000 1.000
-score URI_ONLY_MSGID_MALF 1.999 1.999 1.999 1.999
+score URI_ONLY_MSGID_MALF 1.012 1.999 1.012 1.999
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.999 3.999 3.999 3.999
+score URI_PHISH 4.000 3.999 4.000 3.999
score URI_PHP_REDIR 1.000 1.000 1.000 1.000
score URI_TRY_3LD 1.999 1.999 1.999 1.999
score URI_TRY_USME 1.000 1.000 1.000 1.000
score URI_WPADMIN 2.299 2.199 2.299 2.199
-score URI_WP_DIRINDEX 3.500 3.499 3.500 3.499
-score URI_WP_HACKED 3.499 0.955 3.499 0.955
-score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
+score URI_WP_DIRINDEX 3.499 3.499 3.499 3.499
+score URI_WP_HACKED 3.499 1.122 3.499 1.122
+score URI_WP_HACKED_2 1.689 2.499 1.689 2.499
score USB_DRIVES 1.000 1.000 1.000 1.000
score VFY_ACCT_NORDNS 0.001 0.001 0.001 0.001
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
-score WORD_INVIS 0.001 0.334 0.001 0.334
-score WORD_INVIS_MANY 3.000 2.996 3.000 2.996
+score WORD_INVIS 0.001 0.520 0.001 0.520
+score WORD_INVIS_MANY 2.296 2.987 2.296 2.987
score XFER_LOTSA_MONEY 0.001 0.001 0.001 0.001
score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
-score XM_RANDOM 0.293 0.001 0.293 0.001
-score XPRIO 2.249 0.054 2.249 0.054
+score XM_RANDOM 0.537 0.001 0.537 0.001
+score XM_RECPTID 2.999 0.001 2.999 0.001
+score XPRIO 2.249 0.050 2.249 0.050
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000
-score YOUR_PERMISSION 2.520 2.005 2.520 2.005
-score YOU_INHERIT 2.499 2.499 2.499 2.499
+score YOUR_PERMISSION 2.499 2.185 2.499 2.185
+score YOU_INHERIT 1.626 2.499 1.626 2.499
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1910006&r1=1910005&r2=1910006&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Tue May 23 02:50:12 2023
@@ -1,5 +1,5 @@
-# Using score set 0 logs for revision 1909958 from:
-# ham-ena-week0.r1909958.log ham-ena-week1.r1909958.log ham-ena-week2.r1909958.log ham-ena-week3.r1909958.log ham-ena-week4.r1909958.log ham-giovanni-ham.r1909958.log ham-giovanni-spammy.r1909958.log ham-giovanni-spam.r1909958.log ham-grenier.r1909958.log ham-hege.r1909958.log ham-jhardin.r1909958.log ham-llanga.r1909958.log ham-mmiroslaw-mails-ham.r1909958.log ham-mmiroslaw-mails-spam.r1909958.log ham-spamsponge.r1909958.log ham-thendrikx.r1909958.log ham-tsz-corpus.r1909958.log spam-ena-week0.r1909958.log spam-ena-week1.r1909958.log spam-ena-week2.r1909958.log spam-ena-week3.r1909958.log spam-ena-week4.r1909958.log spam-giovanni-ham.r1909958.log spam-giovanni-spammy.r1909958.log spam-giovanni-spam.r1909958.log spam-grenier.r1909958.log spam-hege.r1909958.log spam-jhardin.r1909958.log spam-llanga.r1909958.log spam-mmiroslaw-mails-ham.r1909958.log spam-mmiroslaw-mails-spam.r1909958.log spam-spamsponge.r1909958.log spam-thendrikx.r1909958.log spam-tsz-corpus.r1909958.log
+# Using score set 0 logs for revision 1909974 from:
+# ham-ena-week0.r1909974.log ham-ena-week1.r1909974.log ham-ena-week2.r1909974.log ham-ena-week3.r1909974.log ham-ena-week4.r1909974.log ham-giovanni-ham.r1909974.log ham-giovanni-spammy.r1909974.log ham-giovanni-spam.r1909974.log ham-grenier.r1909974.log ham-hege.r1909974.log ham-jhardin.r1909974.log ham-llanga.r1909974.log ham-mmiroslaw-mails-ham.r1909974.log ham-mmiroslaw-mails-spam.r1909974.log ham-spamsponge.r1909974.log ham-thendrikx.r1909974.log ham-tsz-corpus.r1909974.log spam-ena-week0.r1909974.log spam-ena-week1.r1909974.log spam-ena-week2.r1909974.log spam-ena-week3.r1909974.log spam-ena-week4.r1909974.log spam-giovanni-ham.r1909974.log spam-giovanni-spammy.r1909974.log spam-giovanni-spam.r1909974.log spam-grenier.r1909974.log spam-hege.r1909974.log spam-jhardin.r1909974.log spam-llanga.r1909974.log spam-mmiroslaw-mails-ham.r1909974.log spam-mmiroslaw-mails-spam.r1909974.log spam-spamsponge.r1909974.log spam-thendrikx.r1909974.log spam-tsz-corpus.r1909974.log
score ACCT_PHISHING_MANY 2.999
score AC_BR_BONANZA 0.001
@@ -8,208 +8,216 @@ score AC_FROM_MANY_DOTS 2.9
score AC_HTML_NONSENSE_TAGS 1.999
score ADMITS_SPAM 3.099
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.003
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.304
-score ADVANCE_FEE_3_NEW_MONEY 2.334
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_MONEY 2.699
score ADVANCE_FEE_4_NEW 2.299
-score ADVANCE_FEE_4_NEW_MONEY 1.088
-score ADVANCE_FEE_5_NEW 2.280
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.972
+score ADVANCE_FEE_5_NEW 0.991
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.153
score AD_PREFS 0.499
score AMAZON_IMG_NOT_RCVD_AMZN 0.001
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BIGNUM_EMAILS_FREEM 0.766
-score BIGNUM_EMAILS_MANY 2.895
-score BITCOIN_DEADLINE 1.902
-score BITCOIN_EXTORT_01 3.925
-score BITCOIN_MALF_HTML 2.319
-score BITCOIN_MALWARE 2.682
+score AXB_XM_FORGED_OL2600 1.241
+score BIGNUM_EMAILS_FREEM 1.864
+score BIGNUM_EMAILS_MANY 2.259
+score BITCOIN_DEADLINE 1.972
+score BITCOIN_EXTORT_01 4.696
+score BITCOIN_MALF_HTML 2.060
+score BITCOIN_MALWARE 0.370
score BITCOIN_OBFU_SUBJ 3.499
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 0.001
-score BITCOIN_SPAM_07 2.176
-score BITCOIN_XPRIO 1.870
+score BITCOIN_SPAM_03 1.972
+score BITCOIN_SPAM_07 2.748
+score BITCOIN_XPRIO 0.066
score BITCOIN_YOUR_INFO 2.999
-score BODY_SINGLE_URI 2.142
-score BODY_SINGLE_WORD 0.001 # force non-zero
-score BODY_URI_ONLY 0.356
-score CANT_SEE_AD 1.019
+score BODY_SINGLE_URI 1.581
+score BODY_SINGLE_WORD 0.001
+score BODY_URI_ONLY 1.012
+score CANT_SEE_AD 1.025
score CK_HELO_GENERIC 0.250
-score COMPENSATION 1.499
-score CTE_8BIT_MISMATCH 0.999
-score DATE_IN_FUTURE_Q_PLUS 3.800
-score DEAR_BENEFICIARY 2.489
+score COMPENSATION 0.519
+score CTE_8BIT_MISMATCH 1.000
+score DATE_IN_FUTURE_Q_PLUS 3.799
+score DEAR_BENEFICIARY 2.699
score DSN_NO_MIMEVERSION 1.999
score ENCRYPTED_MESSAGE -0.999
-score END_FUTURE_EMAILS 2.500
-score FAKE_REPLY_A1 0.857
-score FAKE_REPLY_B 2.064
-score FILL_THIS_FORM 0.699
+score END_FUTURE_EMAILS 2.499
+score FAKE_REPLY_A1 1.002
+score FAKE_REPLY_B 1.013
+score FILL_THIS_FORM 0.700
score FONT_INVIS_DIRECT 0.001
score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 1.335
-score FONT_INVIS_POSTEXTRAS 0.153
+score FONT_INVIS_MSGID 1.339
+score FONT_INVIS_POSTEXTRAS 0.152
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.399
+score FORM_FRAUD_3 2.499
score FORM_FRAUD_5 0.001
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_2_EMAILS_SHORT 0.244
-score FROM_ADDR_WS 3.000
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_2_EMAILS_SHORT 0.001
+score FROM_ADDR_WS 2.999
score FROM_IN_TO_AND_SUBJ 1.799
-score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 2.399
-score FROM_MISSP_EH_MATCH 1.210
-score FROM_MISSP_FREEMAIL 1.939
+score FROM_MISSPACED 0.304
+score FROM_MISSP_DYNIP 1.396
+score FROM_MISSP_EH_MATCH 1.253
+score FROM_MISSP_FREEMAIL 1.895
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_REPLYTO 2.499
+score FROM_MISSP_REPLYTO 2.500
score FROM_MISSP_USER 0.001
-score FROM_NTLD_LINKBAIT 1.081
-score FROM_NTLD_REPLY_FREEMAIL 0.158
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_NTLD_LINKBAIT 0.598
+score FROM_NTLD_REPLY_FREEMAIL 0.162
+score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_WSP_TRAIL 3.299
+score FROM_WSP_TRAIL 3.300
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 1.594
-score GB_BITCOIN_NH 0.577
-score GB_CUSTOM_HTM_URI 1.500
+score FUZZY_AMAZON 1.350
+score GB_BITCOIN_NH 2.258
+score GB_CUSTOM_HTM_URI 1.499
score GB_FAKE_RF_SHORT 1.942
-score GB_FREEMAIL_DISPTO 0.001
+score GB_FREEMAIL_DISPTO 0.001 # force non-zero
score GB_GOOGLE_TRANSL 0.749
-score GOOG_MALWARE_DNLD 2.167
+score GOOG_MALWARE_DNLD 1.415
score GOOG_REDIR_HTML_ONLY 1.999
score GOOG_REDIR_NORDNS 2.597
-score GOOG_STO_IMG_NOHTML 2.059
+score GOOG_STO_IMG_HTML 1.975
+score GOOG_STO_IMG_NOHTML 2.052
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 0.501
-score HDRS_MISSP 2.091
-score HDR_ORDER_FTSDMCXX_DIRECT 0.001 # force non-zero
+score HDRS_LCASE 0.100
+score HDRS_MISSP 2.499
+score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 0.001
-score HK_RANDOM_FROM 0.999
+score HK_RANDOM_FROM 1.000
score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM 0.001
+score HK_SCAM 0.675
score HOSTED_IMG_DIRECT_MX 0.001
-score HOSTED_IMG_FREEM 0.001
score HOSTED_IMG_MULTI_PUB_01 2.999
-score HTML_ENTITY_ASCII 2.615
-score HTML_ENTITY_ASCII_TINY 0.001
-score HTML_OFF_PAGE 2.497
+score HTML_ENTITY_ASCII 2.999
+score HTML_ENTITY_ASCII_TINY 2.826
+score HTML_OFF_PAGE 2.153
score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 3.199
-score HTML_TEXT_INVISIBLE_FONT 0.895
-score HTML_TEXT_INVISIBLE_STYLE 1.889
+score HTML_TAG_BALANCE_CENTER 3.099
+score HTML_TEXT_INVISIBLE_FONT 1.889
+score HTML_TEXT_INVISIBLE_STYLE 1.887
score JH_SPAMMY_HEADERS 3.499
+score KHOP_FAKE_EBAY 0.699
score KHOP_HELO_FCRDNS 0.399
score LONG_HEX_URI 2.999
score LONG_IMG_URI 0.001
score LONG_INVISIBLE_TEXT 2.999
score LOTS_OF_MONEY 0.010
-score MALWARE_NORDNS 2.091
-score MALWARE_PASSWORD 1.513
-score MANY_HDRS_LCASE 0.099
-score MILLION_HUNDRED 0.438
-score MILLION_USD 2.000
+score MALWARE_NORDNS 1.000
+score MALWARE_PASSWORD 2.649
+score MANY_HDRS_LCASE 0.018
+score MILLION_HUNDRED 0.001
+score MILLION_USD 1.575
score MIMEOLE_DIRECT_TO_MX 0.001
score MIME_NO_TEXT 1.999
score MIXED_CENTER_CASE 2.499
-score MIXED_ES 2.500
-score MIXED_HREF_CASE 1.865
-score MONEY_ATM_CARD 0.740
+score MIXED_ES 2.399
+score MIXED_HREF_CASE 1.862
+score MONEY_ATM_CARD 0.738
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 0.001
-score MONEY_FRAUD_3 0.001
-score MONEY_FRAUD_5 2.700
-score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 3.000
-score MONEY_FROM_41 2.000
-score MONEY_FROM_MISSP 0.540
+score MONEY_FRAUD_3 1.214
+score MONEY_FRAUD_5 2.699
+score MONEY_FRAUD_8 0.335
+score MONEY_FREEMAIL_REPTO 2.999
+score MONEY_FROM_41 1.999
+score MONEY_FROM_MISSP 0.541
score MSMAIL_PRI_ABNORMAL 1.499
-score NA_DOLLARS 0.177
+score NA_DOLLARS 1.499
score NICE_REPLY_A -0.001
score NO_FM_NAME_IP_HOSTN 0.001
-score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
score NSL_RCVD_HELO_USER 0.001
-score OBFU_TEXT_ATTACH 0.849
+score OBFU_TEXT_ATTACH 0.676
score ODD_FREEM_REPTO 2.999
score PDS_BRAND_SUBJ_NAKED_TO 1.000
-score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.726
+score PDS_BTC_ID 0.500
+score PDS_BTC_MSGID 0.999
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_EMPTYSUBJ_URISHRT 1.499
-score PDS_FRNOM_TODOM_DBL_URL 1.499
+score PDS_FRNOM_TODOM_DBL_URL 0.598
score PDS_FRNOM_TODOM_NAKED_TO 1.499
-score PDS_FROM_2_EMAILS 2.598
-score PDS_FROM_2_EMAILS_SHRTNER 0.127
+score PDS_FROM_2_EMAILS 2.600
+score PDS_FROM_2_EMAILS_SHRTNER 1.396
score PDS_FROM_NAME_TO_DOMAIN 1.999
-score PDS_SHORTFWD_URISHRT 1.451
+score PDS_SHORTFWD_URISHRT 1.284
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TINYSUBJ_URISHRT 1.499
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PDS_TO_EQ_FROM_NAME 1.559
-score PHP_ORIG_SCRIPT 1.398
+score PDS_TO_EQ_FROM_NAME 0.001
+score PHISH_ATTACH 2.299
+score PHP_ORIG_SCRIPT 0.994
score PHP_SCRIPT 2.499
-score POSSIBLE_GMAIL_PHISHER 2.599
+score POSSIBLE_GMAIL_PHISHER 2.600
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_HEADER_MANY 2.999
-score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 0.001
+score RAND_MKTG_HEADER 2.000
+score RATWARE_NO_RDNS 0.001 # force non-zero
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 1.401
-score SCC_CANSPAM_1 3.070
-score SCC_CANSPAM_2 3.299
+score SCC_BODY_URI_ONLY 1.404
+score SCC_CANSPAM_1 3.065
+score SCC_CANSPAM_2 3.200
score SCC_ISEMM_LID_1B 1.499
score SENDGRID_REDIR 1.499
score SERGIO_SUBJECT_VIAGRA01 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
+score SHORTENED_URL_SRC 2.299
score SHORTENER_SHORT_IMG 0.001
score SHORT_SHORTNER 1.999
-score SPOOFED_FREEMAIL_NO_RDNS 1.101
+score SPOOFED_FREEMAIL_NO_RDNS 1.100
score SPOOF_GMAIL_MID 1.500
-score STATIC_XPRIO_OLE 0.688
+score STATIC_XPRIO_OLE 1.606
score SUSP_UTF8_WORD_COMBO 2.999
-score SUSP_UTF8_WORD_SUBJ 1.999
-score THIS_AD 1.100
-score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.250
+score SUSP_UTF8_WORD_SUBJ 2.000
+score THIS_AD 1.099
+score TONOM_EQ_TOLOC_SHRT_SHRTNER 0.694
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_IMG 2.299
+score TO_EQ_FM_DOM_HTML_ONLY 0.001
+score TO_EQ_FM_HTML_ONLY 0.001
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NAME_SUBJ_NO_RDNS 2.924
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 1.999
score TO_NO_BRKTS_PCNT 2.499
+score TVD_IP_HEX 1.519
+score TVD_IP_SING_HEX 2.127
score TVD_PH_SUBJ_META 2.799
-score TVD_SPACE_ENCODED 2.499
-score TVD_SPACE_RATIO_MINFP 1.100
+score TVD_SPACE_ENCODED 2.497
+score TVD_SPACE_RATIO_MINFP 1.104
score UNDISC_FREEM 2.799
score UNDISC_MONEY 2.799
score UNICODE_OBFU_ASC 2.499
-score URI_AZURE_CLOUDAPP 2.999
+score URI_AZURE_CLOUDAPP 3.000
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.299
-score URI_HEX_IP 2.499
-score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.999
+score URI_GOOGLE_PROXY 2.300
+score URI_HEX_IP 2.018
+score URI_ONLY_MSGID_MALF 1.012
+score URI_PHISH 4.000
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.299
-score URI_WP_DIRINDEX 3.500
+score URI_WP_DIRINDEX 3.499
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.499
+score URI_WP_HACKED_2 1.689
score VFY_ACCT_NORDNS 0.001
score WORD_INVIS 0.001
-score WORD_INVIS_MANY 3.000
+score WORD_INVIS_MANY 2.296
score XFER_LOTSA_MONEY 0.001
-score XM_RANDOM 0.293
+score XM_RANDOM 0.537
+score XM_RECPTID 2.999
score XPRIO 2.249
-score YOUR_PERMISSION 2.520
-score YOU_INHERIT 2.499
+score YOUR_PERMISSION 2.499
+score YOU_INHERIT 1.626
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -275,13 +283,14 @@ score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.0
score GOOG_STO_EMAIL_PHISH 1.000
score GOOG_STO_HTML_PHISH 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000
-score GOOG_STO_IMG_HTML 1.000
score HAS_X_NO_RELAY 1.000
+score HAS_X_OUTGOING_SPAM_STAT 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_LOTTO 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score IMG_ONLY_FM_DOM_INFO 1.000
@@ -305,8 +314,6 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.750
-score PDS_PHPEXP_BOT 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1910006&r1=1910005&r2=1910006&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Tue May 23 02:50:12 2023
@@ -4,227 +4,230 @@
score ACCT_PHISHING_MANY 2.999
score AC_BR_BONANZA 0.001 # force non-zero
score AC_DIV_BONANZA 0.001
-score AC_FROM_MANY_DOTS 0.306
+score AC_FROM_MANY_DOTS 0.304
score AC_HTML_NONSENSE_TAGS 1.999
score ADMITS_SPAM 0.001
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.265
+score ADVANCE_FEE_3_NEW 3.268
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
score ADVANCE_FEE_3_NEW_MONEY 2.599
-score ADVANCE_FEE_4_NEW 2.299
-score ADVANCE_FEE_4_NEW_MONEY 2.400
-score ADVANCE_FEE_5_NEW 1.321
+score ADVANCE_FEE_4_NEW 1.834
+score ADVANCE_FEE_4_NEW_MONEY 2.399
+score ADVANCE_FEE_5_NEW 1.247
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 # force non-zero
score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AD_PREFS 0.259
+score AD_PREFS 0.238
score AMAZON_IMG_NOT_RCVD_AMZN 0.001
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
score BIGNUM_EMAILS_FREEM 0.001
score BIGNUM_EMAILS_MANY 2.999
score BITCOIN_DEADLINE 2.999
-score BITCOIN_EXTORT_01 3.574
-score BITCOIN_MALF_HTML 2.498
-score BITCOIN_MALWARE 3.203
-score BITCOIN_OBFU_SUBJ 1.765
+score BITCOIN_EXTORT_01 3.606
+score BITCOIN_MALF_HTML 2.382
+score BITCOIN_MALWARE 2.595
+score BITCOIN_OBFU_SUBJ 1.768
score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_03 0.001
-score BITCOIN_SPAM_05 0.409
-score BITCOIN_SPAM_07 2.249
-score BITCOIN_XPRIO 0.651
+score BITCOIN_SPAM_05 1.412
+score BITCOIN_SPAM_07 2.366
+score BITCOIN_XPRIO 1.452
score BITCOIN_YOUR_INFO 2.999
-score BODY_SINGLE_URI 1.987
+score BODY_SINGLE_URI 1.953
score BODY_SINGLE_WORD 0.001
score BODY_URI_ONLY 0.001
-score CANT_SEE_AD 1.507
-score CK_HELO_GENERIC 0.249
-score COMPENSATION 1.348
+score CANT_SEE_AD 1.565
+score CK_HELO_GENERIC 0.250
+score COMPENSATION 1.467
score CTE_8BIT_MISMATCH 0.001
score DATE_IN_FUTURE_Q_PLUS 3.699
-score DEAR_BENEFICIARY 0.044
+score DEAR_BENEFICIARY 0.040
score DKIMWL_WL_HIGH -0.001
score DKIMWL_WL_MED -0.001 # force non-zero
score DKIMWL_WL_MEDHI -0.001
score DSN_NO_MIMEVERSION 1.999
-score ENCRYPTED_MESSAGE -0.999
+score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 2.499
score FAKE_REPLY_A1 0.001
score FAKE_REPLY_B 0.001
-score FILL_THIS_FORM 0.001 # force non-zero
+score FILL_THIS_FORM 0.001
score FONT_INVIS_DIRECT 0.001
-score FONT_INVIS_LONG_LINE 3.000
-score FONT_INVIS_MSGID 0.190
-score FONT_INVIS_POSTEXTRAS 1.388
-score FORGED_SPF_HELO 0.226
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 2.300
-score FORM_FRAUD_5 0.001 # force non-zero
+score FONT_INVIS_LONG_LINE 2.999
+score FONT_INVIS_MSGID 0.001
+score FONT_INVIS_POSTEXTRAS 1.385
+score FORGED_SPF_HELO 0.227
+score FORM_FRAUD 0.001 # force non-zero
+score FORM_FRAUD_3 2.299
+score FORM_FRAUD_5 0.001
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_2_EMAILS_SHORT 0.001
-score FROM_ADDR_WS 1.321
+score FROM_2_EMAILS_SHORT 0.098
+score FROM_ADDR_WS 1.327
score FROM_FMBLA_NEWDOM 0.001
-score FROM_FMBLA_NEWDOM14 0.966
+score FROM_FMBLA_NEWDOM14 0.967
score FROM_FMBLA_NEWDOM28 0.001
-score FROM_GOV_DKIM_AU -0.572
+score FROM_GOV_DKIM_AU -0.377
score FROM_IN_TO_AND_SUBJ 1.799
score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 0.915
-score FROM_MISSP_EH_MATCH 1.447
+score FROM_MISSP_DYNIP 0.916
+score FROM_MISSP_EH_MATCH 1.437
score FROM_MISSP_FREEMAIL 3.099
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_REPLYTO 0.697
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_USER 0.001
-score FROM_NTLD_LINKBAIT 1.999
-score FROM_PAYPAL_SPOOF 0.453
+score FROM_NTLD_LINKBAIT 0.001
+score FROM_PAYPAL_SPOOF 0.001
score FROM_SUSPICIOUS_NTLD 0.192
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FROM_WSP_TRAIL 2.999
-score FSL_BULK_SIG 0.001 # force non-zero
+score FSL_BULK_SIG 0.001
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 0.001 # force non-zero
-score GB_BITCOIN_NH 1.415
-score GB_CUSTOM_HTM_URI 0.106
+score FUZZY_AMAZON 0.001
+score GB_BITCOIN_NH 1.310
+score GB_CUSTOM_HTM_URI 0.092
score GB_FAKE_RF_SHORT 1.999
score GB_FREEMAIL_DISPTO 0.001
score GB_GOOGLE_TRANSL 0.749
-score GB_HASHBL_BTC 1.807
-score GOOG_MALWARE_DNLD 2.357
-score GOOG_REDIR_HTML_ONLY 1.999
+score GB_HASHBL_BTC 1.729
+score GOOG_MALWARE_DNLD 3.053
+score GOOG_REDIR_HTML_ONLY 2.000
score GOOG_REDIR_NORDNS 3.099
score GOOG_STO_IMG_NOHTML 2.499
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 1.585
-score HDRS_MISSP 0.270
-score HDR_ORDER_FTSDMCXX_DIRECT 0.001 # force non-zero
-score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250
+score HAS_X_OUTGOING_SPAM_STAT 1.515
+score HDRS_LCASE 0.100
+score HDRS_MISSP 0.269
+score HDR_ORDER_FTSDMCXX_DIRECT 0.001
+score HDR_ORDER_FTSDMCXX_NORDNS 0.001 # force non-zero
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249
score HELO_NO_DOMAIN 0.001
score HK_LOTTO 0.001
-score HK_NAME_MR_MRS 0.999
+score HK_NAME_MR_MRS 1.000
score HK_RANDOM_ENVFROM 0.001
score HK_RANDOM_FROM 0.001
score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM 0.001 # force non-zero
+score HK_SCAM 0.001
score HOSTED_IMG_DIRECT_MX 0.001
score HOSTED_IMG_FREEM 0.001 # force non-zero
score HOSTED_IMG_MULTI_PUB_01 2.999
score HTML_ENTITY_ASCII 2.999
-score HTML_ENTITY_ASCII_TINY 1.101
-score HTML_OFF_PAGE 0.001
-score HTML_TAG_BALANCE_CENTER 3.097
+score HTML_ENTITY_ASCII_TINY 1.200
+score HTML_OFF_PAGE 0.001 # force non-zero
+score HTML_TAG_BALANCE_CENTER 3.099
score HTML_TEXT_INVISIBLE_FONT 1.999
score HTML_TEXT_INVISIBLE_STYLE 0.001
score JH_SPAMMY_HEADERS 3.499
-score KHOP_HELO_FCRDNS 0.396
-score LONG_HEX_URI 2.946
-score LONG_IMG_URI 0.001 # force non-zero
-score LONG_INVISIBLE_TEXT 1.824
-score LOTS_OF_MONEY 0.010
-score MALWARE_NORDNS 2.185
-score MALWARE_PASSWORD 0.104
+score KHOP_HELO_FCRDNS 0.394
+score LONG_HEX_URI 2.957
+score LONG_IMG_URI 0.001
+score LONG_INVISIBLE_TEXT 1.826
+score LOTS_OF_MONEY 0.009
+score MALWARE_NORDNS 2.119
+score MALWARE_PASSWORD 2.980
score MANY_HDRS_LCASE 0.001
score MILLION_HUNDRED 0.001
-score MILLION_USD 1.215
+score MILLION_USD 1.218
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIME_NO_TEXT 1.999
+score MIME_NO_TEXT 1.604
score MIXED_CENTER_CASE 2.499
score MIXED_ES 2.499
-score MIXED_HREF_CASE 1.722
-score MONEY_ATM_CARD 1.256
+score MIXED_HREF_CASE 1.999
+score MONEY_ATM_CARD 1.257
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 0.001
score MONEY_FRAUD_3 0.001
-score MONEY_FRAUD_5 2.493
+score MONEY_FRAUD_5 2.631
score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 1.839
+score MONEY_FREEMAIL_REPTO 1.844
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
score MSMAIL_PRI_ABNORMAL 0.001
score NA_DOLLARS 0.001
-score NICE_REPLY_A -0.091
+score NICE_REPLY_A -0.089
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score OBFU_TEXT_ATTACH 0.038
-score ODD_FREEM_REPTO 2.767
-score PDS_BRAND_SUBJ_NAKED_TO 0.999
-score PDS_BTC_ID 0.008
-score PDS_BTC_MSGID 0.224
-score PDS_DBL_URL_TNB_RUNON 1.999
-score PDS_EMPTYSUBJ_URISHRT 0.478
-score PDS_FRNOM_TODOM_DBL_URL 1.500
-score PDS_FRNOM_TODOM_NAKED_TO 1.499
-score PDS_FROM_2_EMAILS 2.576
-score PDS_FROM_2_EMAILS_SHRTNER 1.192
-score PDS_FROM_NAME_TO_DOMAIN 1.499
-score PDS_SHORT_SPOOFED_URL 2.000
+score OBFU_TEXT_ATTACH 0.001
+score ODD_FREEM_REPTO 2.699
+score PDS_BRAND_SUBJ_NAKED_TO 1.000
+score PDS_BTC_ID 0.085
+score PDS_BTC_MSGID 0.327
+score PDS_DBL_URL_TNB_RUNON 1.807
+score PDS_EMPTYSUBJ_URISHRT 0.543
+score PDS_FRNOM_TODOM_DBL_URL 1.499
+score PDS_FRNOM_TODOM_NAKED_TO 1.102
+score PDS_FROM_2_EMAILS 2.578
+score PDS_FROM_2_EMAILS_SHRTNER 0.878
+score PDS_FROM_NAME_TO_DOMAIN 1.895
+score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TINYSUBJ_URISHRT 1.499
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 0.815
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 0.717
score PDS_TO_EQ_FROM_NAME 0.001
score PHISH_ATTACH 2.199
score PHP_ORIG_SCRIPT 0.001
-score PHP_SCRIPT 1.712
+score PHP_SCRIPT 1.784
score POSSIBLE_GMAIL_PHISHER 2.499
-score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
-score RAND_HEADER_MANY 0.029
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RAND_HEADER_MANY 0.046
score RAND_MKTG_HEADER 1.999
score RATWARE_NO_RDNS 0.001
score RCVD_IN_MSPIKE_H2 -0.001
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 1.170
-score SCC_CANSPAM_1 1.568
+score SCC_BODY_URI_ONLY 1.172
+score SCC_CANSPAM_1 2.076
score SCC_CANSPAM_2 2.899
score SCC_ISEMM_LID_1B 1.499
-score SENDGRID_REDIR 1.068
+score SENDGRID_REDIR 1.069
score SERGIO_SUBJECT_VIAGRA01 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
score SHORTENED_URL_SRC 2.199
score SHORTENER_SHORT_IMG 0.001
-score SHORT_SHORTNER 1.025
+score SHORT_SHORTNER 1.000
score SPOOFED_FREEMAIL 0.001
score SPOOFED_FREEMAIL_NO_RDNS 0.001
score SPOOFED_FREEM_REPTO 2.499
score SPOOF_GMAIL_MID 0.001
-score STATIC_XPRIO_OLE 1.858
-score SUSP_UTF8_WORD_COMBO 2.263
-score SUSP_UTF8_WORD_SUBJ 0.951
+score STATIC_XPRIO_OLE 1.850
+score SUSP_UTF8_WORD_COMBO 2.265
+score SUSP_UTF8_WORD_SUBJ 1.132
score THIS_AD 1.199
score TONOM_EQ_TOLOC_SHRT_SHRTNER 0.001
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_IMG 2.299
+score TO_EQ_FM_DOM_HTML_ONLY 0.636
score TO_EQ_FM_DOM_SPF_FAIL 0.001
+score TO_EQ_FM_HTML_ONLY 1.496
score TO_EQ_FM_SPF_FAIL 0.001
score TO_IN_SUBJ 0.099
score TO_NAME_SUBJ_NO_RDNS 2.999
-score TO_NO_BRKTS_FROM_MSSP 1.752
+score TO_NO_BRKTS_FROM_MSSP 1.757
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 0.001 # force non-zero
+score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.499
+score TO_NO_BRKTS_PCNT 2.500
score TVD_PH_SUBJ_META 2.799
score TVD_SPACE_ENCODED 0.001
-score TVD_SPACE_RATIO_MINFP 0.001 # force non-zero
+score TVD_SPACE_RATIO_MINFP 0.001
score UNDISC_FREEM 2.799
score UNDISC_MONEY 2.699
-score UNICODE_OBFU_ASC 2.499
+score UNICODE_OBFU_ASC 2.500
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.399
+score URI_GOOGLE_PROXY 2.400
score URI_ONLY_MSGID_MALF 1.999
score URI_PHISH 3.999
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.199
score URI_WP_DIRINDEX 3.499
-score URI_WP_HACKED 0.955
+score URI_WP_HACKED 1.122
score URI_WP_HACKED_2 2.499
score VFY_ACCT_NORDNS 0.001
-score WORD_INVIS 0.334
-score WORD_INVIS_MANY 2.996
+score WORD_INVIS 0.520
+score WORD_INVIS_MANY 2.987
score XFER_LOTSA_MONEY 0.001
-score XM_RANDOM 0.001 # force non-zero
-score XPRIO 0.054
-score YOUR_PERMISSION 2.005
+score XM_RANDOM 0.001
+score XPRIO 0.050
+score YOUR_PERMISSION 2.185
score YOU_INHERIT 2.499
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -332,8 +335,6 @@ score NEWEGG_IMG_NOT_RCVD_NEGG 1.0
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
score PDS_HELO_SPF_FAIL 1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.750
-score PDS_PHPEXP_BOT 1.000
score PDS_SHORTFWD_URISHRT 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1910006&r1=1910005&r2=1910006&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Tue May 23 02:50:12 2023
@@ -1,5 +1,5 @@
-# Using score set 0 logs for revision 1909958 from:
-# ham-ena-week0.r1909958.log ham-ena-week1.r1909958.log ham-ena-week2.r1909958.log ham-ena-week3.r1909958.log ham-ena-week4.r1909958.log ham-giovanni-ham.r1909958.log ham-giovanni-spammy.r1909958.log ham-giovanni-spam.r1909958.log ham-grenier.r1909958.log ham-hege.r1909958.log ham-jhardin.r1909958.log ham-llanga.r1909958.log ham-mmiroslaw-mails-ham.r1909958.log ham-mmiroslaw-mails-spam.r1909958.log ham-spamsponge.r1909958.log ham-thendrikx.r1909958.log ham-tsz-corpus.r1909958.log spam-ena-week0.r1909958.log spam-ena-week1.r1909958.log spam-ena-week2.r1909958.log spam-ena-week3.r1909958.log spam-ena-week4.r1909958.log spam-giovanni-ham.r1909958.log spam-giovanni-spammy.r1909958.log spam-giovanni-spam.r1909958.log spam-grenier.r1909958.log spam-hege.r1909958.log spam-jhardin.r1909958.log spam-llanga.r1909958.log spam-mmiroslaw-mails-ham.r1909958.log spam-mmiroslaw-mails-spam.r1909958.log spam-spamsponge.r1909958.log spam-thendrikx.r1909958.log spam-tsz-corpus.r1909958.log
+# Using score set 0 logs for revision 1909974 from:
+# ham-ena-week0.r1909974.log ham-ena-week1.r1909974.log ham-ena-week2.r1909974.log ham-ena-week3.r1909974.log ham-ena-week4.r1909974.log ham-giovanni-ham.r1909974.log ham-giovanni-spammy.r1909974.log ham-giovanni-spam.r1909974.log ham-grenier.r1909974.log ham-hege.r1909974.log ham-jhardin.r1909974.log ham-llanga.r1909974.log ham-mmiroslaw-mails-ham.r1909974.log ham-mmiroslaw-mails-spam.r1909974.log ham-spamsponge.r1909974.log ham-thendrikx.r1909974.log ham-tsz-corpus.r1909974.log spam-ena-week0.r1909974.log spam-ena-week1.r1909974.log spam-ena-week2.r1909974.log spam-ena-week3.r1909974.log spam-ena-week4.r1909974.log spam-giovanni-ham.r1909974.log spam-giovanni-spammy.r1909974.log spam-giovanni-spam.r1909974.log spam-grenier.r1909974.log spam-hege.r1909974.log spam-jhardin.r1909974.log spam-llanga.r1909974.log spam-mmiroslaw-mails-ham.r1909974.log spam-mmiroslaw-mails-spam.r1909974.log spam-spamsponge.r1909974.log spam-thendrikx.r1909974.log spam-tsz-corpus.r1909974.log
score ACCT_PHISHING_MANY 2.999
score AC_BR_BONANZA 0.001
@@ -8,208 +8,216 @@ score AC_FROM_MANY_DOTS 2.9
score AC_HTML_NONSENSE_TAGS 1.999
score ADMITS_SPAM 3.099
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.003
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.304
-score ADVANCE_FEE_3_NEW_MONEY 2.334
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_MONEY 2.699
score ADVANCE_FEE_4_NEW 2.299
-score ADVANCE_FEE_4_NEW_MONEY 1.088
-score ADVANCE_FEE_5_NEW 2.280
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.972
+score ADVANCE_FEE_5_NEW 0.991
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.153
score AD_PREFS 0.499
score AMAZON_IMG_NOT_RCVD_AMZN 0.001
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BIGNUM_EMAILS_FREEM 0.766
-score BIGNUM_EMAILS_MANY 2.895
-score BITCOIN_DEADLINE 1.902
-score BITCOIN_EXTORT_01 3.925
-score BITCOIN_MALF_HTML 2.319
-score BITCOIN_MALWARE 2.682
+score AXB_XM_FORGED_OL2600 1.241
+score BIGNUM_EMAILS_FREEM 1.864
+score BIGNUM_EMAILS_MANY 2.259
+score BITCOIN_DEADLINE 1.972
+score BITCOIN_EXTORT_01 4.696
+score BITCOIN_MALF_HTML 2.060
+score BITCOIN_MALWARE 0.370
score BITCOIN_OBFU_SUBJ 3.499
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 0.001
-score BITCOIN_SPAM_07 2.176
-score BITCOIN_XPRIO 1.870
+score BITCOIN_SPAM_03 1.972
+score BITCOIN_SPAM_07 2.748
+score BITCOIN_XPRIO 0.066
score BITCOIN_YOUR_INFO 2.999
-score BODY_SINGLE_URI 2.142
-score BODY_SINGLE_WORD 0.001 # force non-zero
-score BODY_URI_ONLY 0.356
-score CANT_SEE_AD 1.019
+score BODY_SINGLE_URI 1.581
+score BODY_SINGLE_WORD 0.001
+score BODY_URI_ONLY 1.012
+score CANT_SEE_AD 1.025
score CK_HELO_GENERIC 0.250
-score COMPENSATION 1.499
-score CTE_8BIT_MISMATCH 0.999
-score DATE_IN_FUTURE_Q_PLUS 3.800
-score DEAR_BENEFICIARY 2.489
+score COMPENSATION 0.519
+score CTE_8BIT_MISMATCH 1.000
+score DATE_IN_FUTURE_Q_PLUS 3.799
+score DEAR_BENEFICIARY 2.699
score DSN_NO_MIMEVERSION 1.999
score ENCRYPTED_MESSAGE -0.999
-score END_FUTURE_EMAILS 2.500
-score FAKE_REPLY_A1 0.857
-score FAKE_REPLY_B 2.064
-score FILL_THIS_FORM 0.699
+score END_FUTURE_EMAILS 2.499
+score FAKE_REPLY_A1 1.002
+score FAKE_REPLY_B 1.013
+score FILL_THIS_FORM 0.700
score FONT_INVIS_DIRECT 0.001
score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 1.335
-score FONT_INVIS_POSTEXTRAS 0.153
+score FONT_INVIS_MSGID 1.339
+score FONT_INVIS_POSTEXTRAS 0.152
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.399
+score FORM_FRAUD_3 2.499
score FORM_FRAUD_5 0.001
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_2_EMAILS_SHORT 0.244
-score FROM_ADDR_WS 3.000
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_2_EMAILS_SHORT 0.001
+score FROM_ADDR_WS 2.999
score FROM_IN_TO_AND_SUBJ 1.799
-score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 2.399
-score FROM_MISSP_EH_MATCH 1.210
-score FROM_MISSP_FREEMAIL 1.939
+score FROM_MISSPACED 0.304
+score FROM_MISSP_DYNIP 1.396
+score FROM_MISSP_EH_MATCH 1.253
+score FROM_MISSP_FREEMAIL 1.895
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_REPLYTO 2.499
+score FROM_MISSP_REPLYTO 2.500
score FROM_MISSP_USER 0.001
-score FROM_NTLD_LINKBAIT 1.081
-score FROM_NTLD_REPLY_FREEMAIL 0.158
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_NTLD_LINKBAIT 0.598
+score FROM_NTLD_REPLY_FREEMAIL 0.162
+score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_WSP_TRAIL 3.299
+score FROM_WSP_TRAIL 3.300
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 1.594
-score GB_BITCOIN_NH 0.577
-score GB_CUSTOM_HTM_URI 1.500
+score FUZZY_AMAZON 1.350
+score GB_BITCOIN_NH 2.258
+score GB_CUSTOM_HTM_URI 1.499
score GB_FAKE_RF_SHORT 1.942
-score GB_FREEMAIL_DISPTO 0.001
+score GB_FREEMAIL_DISPTO 0.001 # force non-zero
score GB_GOOGLE_TRANSL 0.749
-score GOOG_MALWARE_DNLD 2.167
+score GOOG_MALWARE_DNLD 1.415
score GOOG_REDIR_HTML_ONLY 1.999
score GOOG_REDIR_NORDNS 2.597
-score GOOG_STO_IMG_NOHTML 2.059
+score GOOG_STO_IMG_HTML 1.975
+score GOOG_STO_IMG_NOHTML 2.052
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 0.501
-score HDRS_MISSP 2.091
-score HDR_ORDER_FTSDMCXX_DIRECT 0.001 # force non-zero
+score HDRS_LCASE 0.100
+score HDRS_MISSP 2.499
+score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 0.001
-score HK_RANDOM_FROM 0.999
+score HK_RANDOM_FROM 1.000
score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM 0.001
+score HK_SCAM 0.675
score HOSTED_IMG_DIRECT_MX 0.001
-score HOSTED_IMG_FREEM 0.001
score HOSTED_IMG_MULTI_PUB_01 2.999
-score HTML_ENTITY_ASCII 2.615
-score HTML_ENTITY_ASCII_TINY 0.001
-score HTML_OFF_PAGE 2.497
+score HTML_ENTITY_ASCII 2.999
+score HTML_ENTITY_ASCII_TINY 2.826
+score HTML_OFF_PAGE 2.153
score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 3.199
-score HTML_TEXT_INVISIBLE_FONT 0.895
-score HTML_TEXT_INVISIBLE_STYLE 1.889
+score HTML_TAG_BALANCE_CENTER 3.099
+score HTML_TEXT_INVISIBLE_FONT 1.889
+score HTML_TEXT_INVISIBLE_STYLE 1.887
score JH_SPAMMY_HEADERS 3.499
+score KHOP_FAKE_EBAY 0.699
score KHOP_HELO_FCRDNS 0.399
score LONG_HEX_URI 2.999
score LONG_IMG_URI 0.001
score LONG_INVISIBLE_TEXT 2.999
score LOTS_OF_MONEY 0.010
-score MALWARE_NORDNS 2.091
-score MALWARE_PASSWORD 1.513
-score MANY_HDRS_LCASE 0.099
-score MILLION_HUNDRED 0.438
-score MILLION_USD 2.000
+score MALWARE_NORDNS 1.000
+score MALWARE_PASSWORD 2.649
+score MANY_HDRS_LCASE 0.018
+score MILLION_HUNDRED 0.001
+score MILLION_USD 1.575
score MIMEOLE_DIRECT_TO_MX 0.001
score MIME_NO_TEXT 1.999
score MIXED_CENTER_CASE 2.499
-score MIXED_ES 2.500
-score MIXED_HREF_CASE 1.865
-score MONEY_ATM_CARD 0.740
+score MIXED_ES 2.399
+score MIXED_HREF_CASE 1.862
+score MONEY_ATM_CARD 0.738
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 0.001
-score MONEY_FRAUD_3 0.001
-score MONEY_FRAUD_5 2.700
-score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 3.000
-score MONEY_FROM_41 2.000
-score MONEY_FROM_MISSP 0.540
+score MONEY_FRAUD_3 1.214
+score MONEY_FRAUD_5 2.699
+score MONEY_FRAUD_8 0.335
+score MONEY_FREEMAIL_REPTO 2.999
+score MONEY_FROM_41 1.999
+score MONEY_FROM_MISSP 0.541
score MSMAIL_PRI_ABNORMAL 1.499
-score NA_DOLLARS 0.177
+score NA_DOLLARS 1.499
score NICE_REPLY_A -0.001
score NO_FM_NAME_IP_HOSTN 0.001
-score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
score NSL_RCVD_HELO_USER 0.001
-score OBFU_TEXT_ATTACH 0.849
+score OBFU_TEXT_ATTACH 0.676
score ODD_FREEM_REPTO 2.999
score PDS_BRAND_SUBJ_NAKED_TO 1.000
-score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.726
+score PDS_BTC_ID 0.500
+score PDS_BTC_MSGID 0.999
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_EMPTYSUBJ_URISHRT 1.499
-score PDS_FRNOM_TODOM_DBL_URL 1.499
+score PDS_FRNOM_TODOM_DBL_URL 0.598
score PDS_FRNOM_TODOM_NAKED_TO 1.499
-score PDS_FROM_2_EMAILS 2.598
-score PDS_FROM_2_EMAILS_SHRTNER 0.127
+score PDS_FROM_2_EMAILS 2.600
+score PDS_FROM_2_EMAILS_SHRTNER 1.396
score PDS_FROM_NAME_TO_DOMAIN 1.999
-score PDS_SHORTFWD_URISHRT 1.451
+score PDS_SHORTFWD_URISHRT 1.284
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TINYSUBJ_URISHRT 1.499
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PDS_TO_EQ_FROM_NAME 1.559
-score PHP_ORIG_SCRIPT 1.398
+score PDS_TO_EQ_FROM_NAME 0.001
+score PHISH_ATTACH 2.299
+score PHP_ORIG_SCRIPT 0.994
score PHP_SCRIPT 2.499
-score POSSIBLE_GMAIL_PHISHER 2.599
+score POSSIBLE_GMAIL_PHISHER 2.600
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_HEADER_MANY 2.999
-score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 0.001
+score RAND_MKTG_HEADER 2.000
+score RATWARE_NO_RDNS 0.001 # force non-zero
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 1.401
-score SCC_CANSPAM_1 3.070
-score SCC_CANSPAM_2 3.299
+score SCC_BODY_URI_ONLY 1.404
+score SCC_CANSPAM_1 3.065
+score SCC_CANSPAM_2 3.200
score SCC_ISEMM_LID_1B 1.499
score SENDGRID_REDIR 1.499
score SERGIO_SUBJECT_VIAGRA01 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
+score SHORTENED_URL_SRC 2.299
score SHORTENER_SHORT_IMG 0.001
score SHORT_SHORTNER 1.999
-score SPOOFED_FREEMAIL_NO_RDNS 1.101
+score SPOOFED_FREEMAIL_NO_RDNS 1.100
score SPOOF_GMAIL_MID 1.500
-score STATIC_XPRIO_OLE 0.688
+score STATIC_XPRIO_OLE 1.606
score SUSP_UTF8_WORD_COMBO 2.999
-score SUSP_UTF8_WORD_SUBJ 1.999
-score THIS_AD 1.100
-score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.250
+score SUSP_UTF8_WORD_SUBJ 2.000
+score THIS_AD 1.099
+score TONOM_EQ_TOLOC_SHRT_SHRTNER 0.694
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_IMG 2.299
+score TO_EQ_FM_DOM_HTML_ONLY 0.001
+score TO_EQ_FM_HTML_ONLY 0.001
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NAME_SUBJ_NO_RDNS 2.924
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 1.999
score TO_NO_BRKTS_PCNT 2.499
+score TVD_IP_HEX 1.519
+score TVD_IP_SING_HEX 2.127
score TVD_PH_SUBJ_META 2.799
-score TVD_SPACE_ENCODED 2.499
-score TVD_SPACE_RATIO_MINFP 1.100
+score TVD_SPACE_ENCODED 2.497
+score TVD_SPACE_RATIO_MINFP 1.104
score UNDISC_FREEM 2.799
score UNDISC_MONEY 2.799
score UNICODE_OBFU_ASC 2.499
-score URI_AZURE_CLOUDAPP 2.999
+score URI_AZURE_CLOUDAPP 3.000
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.299
-score URI_HEX_IP 2.499
-score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.999
+score URI_GOOGLE_PROXY 2.300
+score URI_HEX_IP 2.018
+score URI_ONLY_MSGID_MALF 1.012
+score URI_PHISH 4.000
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.299
-score URI_WP_DIRINDEX 3.500
+score URI_WP_DIRINDEX 3.499
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.499
+score URI_WP_HACKED_2 1.689
score VFY_ACCT_NORDNS 0.001
score WORD_INVIS 0.001
-score WORD_INVIS_MANY 3.000
+score WORD_INVIS_MANY 2.296
score XFER_LOTSA_MONEY 0.001
-score XM_RANDOM 0.293
+score XM_RANDOM 0.537
+score XM_RECPTID 2.999
score XPRIO 2.249
-score YOUR_PERMISSION 2.520
-score YOU_INHERIT 2.499
+score YOUR_PERMISSION 2.499
+score YOU_INHERIT 1.626
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -275,13 +283,14 @@ score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.0
score GOOG_STO_EMAIL_PHISH 1.000
score GOOG_STO_HTML_PHISH 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000
-score GOOG_STO_IMG_HTML 1.000
score HAS_X_NO_RELAY 1.000
+score HAS_X_OUTGOING_SPAM_STAT 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_LOTTO 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score IMG_ONLY_FM_DOM_INFO 1.000
@@ -305,8 +314,6 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.750
-score PDS_PHPEXP_BOT 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000