You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2019/11/06 05:12:17 UTC
svn commit: r1869435 [1/2] - in /spamassassin/trunk/rulesrc/scores:
72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0
stats-set1
Author: spamassassin_role
Date: Wed Nov 6 05:12:17 2019
New Revision: 1869435
URL: http://svn.apache.org/viewvc?rev=1869435&view=rev
Log:
updated scores for revision 1869386 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1869435&r1=1869434&r2=1869435&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Wed Nov 6 05:12:17 2019
@@ -11,227 +11,228 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
-score ADMITS_SPAM 3.100 2.231 3.100 2.231
+score ADMITS_SPAM 2.671 2.218 2.671 2.218
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
score ADVANCE_FEE_3_NEW 2.601 3.469 2.601 3.469
-score ADVANCE_FEE_3_NEW_MONEY 2.143 2.146 2.143 2.146
+score ADVANCE_FEE_3_NEW_MONEY 2.202 2.161 2.202 2.161
score ADVANCE_FEE_4_NEW 2.699 2.599 2.699 2.599
-score ADVANCE_FEE_4_NEW_MONEY 2.699 2.699 2.699 2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 1.454 0.001 1.454
-score ADVANCE_FEE_5_NEW_MONEY 0.161 1.550 0.161 1.550
+score ADVANCE_FEE_4_NEW_MONEY 2.699 2.607 2.699 2.607
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 1.240 0.001 1.240
+score ADVANCE_FEE_5_NEW_MONEY 0.758 1.515 0.758 1.515
score AD_PREFS 0.499 0.499 0.499 0.499
-score ALIBABA_IMG_NOT_RCVD_ALI 2.499 2.272 2.499 2.272
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499 2.055 2.499 2.055
-score ANY_PILL_PRICE 2.699 0.627 2.699 0.627
+score ALIBABA_IMG_NOT_RCVD_ALI 2.499 0.349 2.499 0.349
+score AMAZON_IMG_NOT_RCVD_AMZN 2.245 2.050 2.245 2.050
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
-score AXB_XMAILER_MIMEOLE_OL_024C2 3.999 0.833 3.999 0.833
-score AXB_XM_FORGED_OL2600 2.406 0.102 2.406 0.102
-score AXB_X_AOL_SEZ_S 3.099 2.999 3.099 2.999
-score BIGNUM_EMAILS 2.999 1.971 2.999 1.971
+score AXB_XMAILER_MIMEOLE_OL_024C2 3.899 0.692 3.899 0.692
+score AXB_XM_FORGED_OL2600 1.384 2.079 1.384 2.079
+score AXB_X_AOL_SEZ_S 2.999 2.999 2.999 2.999
+score BIGNUM_EMAILS 2.999 2.160 2.999 2.160
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE 2.000 2.262 2.000 2.262
-score BITCOIN_EXTORT_01 2.902 2.347 2.902 2.347
+score BITCOIN_DEADLINE 3.000 2.268 3.000 2.268
+score BITCOIN_EXTORT_01 2.904 2.792 2.904 2.792
score BITCOIN_MALWARE 1.000 1.000 1.000 1.000
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_01 1.112 0.001 1.112 0.001
+score BITCOIN_SPAM_01 1.000 0.001 1.000 0.001
score BITCOIN_SPAM_02 2.499 2.499 2.499 2.499
score BITCOIN_SPAM_03 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05 0.001 1.078 0.001 1.078
+score BITCOIN_SPAM_05 0.001 1.058 0.001 1.058
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07 3.499 2.904 3.499 2.904
-score BITCOIN_SPAM_08 1.864 0.746 1.864 0.746
-score BITCOIN_SPAM_09 1.499 1.499 1.499 1.499
+score BITCOIN_SPAM_07 3.499 2.895 3.499 2.895
+score BITCOIN_SPAM_08 1.861 0.763 1.861 0.763
+score BITCOIN_SPAM_09 1.500 1.499 1.500 1.499
score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
-score BODY_EMPTY 1.999 0.060 1.999 0.060
-score BODY_URI_ONLY 0.999 0.999 0.999 0.999
+score BODY_EMPTY 1.999 0.067 1.999 0.067
+score BODY_URI_ONLY 0.999 1.000 0.999 1.000
score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000
-score BOGUS_MSM_HDRS 2.845 2.586 2.845 2.586
+score BOGUS_MSM_HDRS 1.005 0.137 1.005 0.137
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score BTC_ORG 1.000 1.000 1.000 1.000
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000
score CK_HELO_DYNAMIC_SPLIT_IP 1.499 0.001 1.499 0.001
-score CK_HELO_GENERIC 0.249 0.001 0.249 0.001
+score CK_HELO_GENERIC 0.250 0.001 0.250 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score COMPENSATION 1.499 1.000 1.499 1.000
-score DATE_IN_FUTURE_96_Q 0.703 2.574 0.703 2.574
+score COMPENSATION 1.000 1.000 1.000 1.000
+score DATE_IN_FUTURE_96_Q 1.233 2.094 1.233 2.094
score DAY_I_EARNED 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 2.375 2.041 2.375 2.041
-score DKIMWL_BL 0.001 1.775 0.001 1.775
+score DEAR_BENEFICIARY 2.941 2.218 2.941 2.218
+score DKIMWL_BL 0.001 1.774 0.001 1.774
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
score DKIMWL_WL_MEDHI 0.001 -1.000 0.001 -1.000
-score DOS_OUTLOOK_TO_MX_IMAGE 2.799 0.914 2.799 0.914
-score DOS_RCVD_IP_TWICE_B 2.699 1.760 2.699 1.760
-score DRUGS_ERECTILE_SHORT_SHORTNER 1.499 0.773 1.499 0.773
-score DUP_SUSP_HDR 2.500 2.499 2.500 2.499
-score DX_TEXT_03 0.001 1.384 0.001 1.384
-score EBAY_IMG_NOT_RCVD_EBAY 0.998 2.485 0.998 2.485
+score DOS_OUTLOOK_TO_MX_IMAGE 2.700 2.190 2.700 2.190
+score DOS_RCVD_IP_TWICE_B 2.599 1.785 2.599 1.785
+score DRUGS_ERECTILE_SHORT_SHORTNER 1.499 0.001 1.499 0.001
+score DUP_SUSP_HDR 2.499 2.500 2.499 2.500
+score DX_TEXT_03 1.396 1.367 1.396 1.367
+score EBAY_IMG_NOT_RCVD_EBAY 2.223 1.887 2.223 1.887
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
-score END_FUTURE_EMAILS 2.499 1.354 2.499 1.354
+score END_FUTURE_EMAILS 2.100 0.610 2.100 0.610
score FAKE_REPLY_A1 3.099 3.199 3.099 3.199
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
-score FILL_THIS_FORM 0.791 0.001 0.791 0.001
-score FORGED_RELAY_MUA_TO_MX 2.301 1.769 2.301 1.769
-score FORM_FRAUD 1.000 1.000 1.000 1.000
-score FORM_FRAUD_3 2.699 0.001 2.699 0.001
-score FORM_FRAUD_5 1.211 0.001 1.211 0.001
+score FILL_THIS_FORM 0.001 0.001 0.001 0.001
+score FORGED_RELAY_MUA_TO_MX 2.401 1.655 2.401 1.655
+score FORM_FRAUD 0.999 0.999 0.999 0.999
+score FORM_FRAUD_3 2.091 0.001 2.091 0.001
+score FORM_FRAUD_5 1.730 0.001 1.730 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 3.249 3.249 3.249 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.195 0.082 0.195 0.082
+score FOUND_YOU 1.000 3.249 1.000 3.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.038 0.118 0.038 0.118
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
-score FROMSPACE 2.602 0.001 2.602 0.001
-score FROM_2_EMAILS_SHORT 1.999 0.001 1.999 0.001
-score FROM_ADDR_WS 2.672 0.001 2.672 0.001
+score FROMSPACE 2.253 0.001 2.253 0.001
+score FROM_2_EMAILS_SHORT 0.601 0.001 0.601 0.001
+score FROM_ADDR_WS 2.699 0.001 2.699 0.001
score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
score FROM_FMBLA_NEWDOM 0.001 1.499 0.001 1.499
score FROM_FMBLA_NEWDOM14 0.001 0.999 0.001 0.999
-score FROM_FMBLA_NEWDOM28 0.001 0.799 0.001 0.799
+score FROM_FMBLA_NEWDOM28 0.001 0.800 0.001 0.800
score FROM_GOV_DKIM_AU 0.001 -0.001 0.001 -0.001
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
score FROM_GOV_SPOOF 0.001 0.001 0.001 0.001
-score FROM_IN_TO_AND_SUBJ 1.491 0.001 1.491 0.001
score FROM_MISSPACED 1.999 1.999 1.999 1.999
-score FROM_MISSP_DYNIP 2.029 1.154 2.029 1.154
-score FROM_MISSP_EH_MATCH 1.999 1.227 1.999 1.227
-score FROM_MISSP_FREEMAIL 3.399 1.644 3.399 1.644
-score FROM_MISSP_MSFT 3.075 2.967 3.075 2.967
-score FROM_MISSP_REPLYTO 2.500 2.397 2.500 2.397
+score FROM_MISSP_DYNIP 2.286 2.615 2.286 2.615
+score FROM_MISSP_EH_MATCH 1.999 1.226 1.999 1.226
+score FROM_MISSP_FREEMAIL 3.299 1.533 3.299 1.533
+score FROM_MISSP_MSFT 1.802 0.060 1.802 0.060
+score FROM_MISSP_REPLYTO 0.001 2.499 0.001 2.499
score FROM_MISSP_SPF_FAIL 0.001 1.999 0.001 1.999
-score FROM_MISSP_TO_UNDISC 0.866 2.179 0.866 2.179
-score FROM_MISSP_USER 2.234 1.236 2.234 1.236
+score FROM_MISSP_TO_UNDISC 2.542 1.793 2.542 1.793
+score FROM_MISSP_USER 1.387 1.689 1.387 1.689
score FROM_MISSP_XPRIO 2.499 2.499 2.499 2.499
score FROM_NAME_EQ_TO_G_DRIVE 0.001 0.001 0.001 0.001
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
score FROM_NTLD_LINKBAIT 1.000 1.000 1.000 1.000
-score FROM_NTLD_REPLY_FREEMAIL 1.999 1.751 1.999 1.751
+score FROM_NTLD_REPLY_FREEMAIL 1.734 1.198 1.734 1.198
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
score FROM_NUMERIC_TLD 1.000 1.000 1.000 1.000
-score FROM_PAYPAL_SPOOF 0.001 1.599 0.001 1.599
-score FROM_SUSPICIOUS_NTLD 0.499 0.499 0.499 0.499
+score FROM_PAYPAL_SPOOF 0.001 1.584 0.001 1.584
+score FROM_SUSPICIOUS_NTLD 0.499 0.500 0.499 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999
-score FROM_UNBAL1 2.499 2.500 2.499 2.500
+score FROM_UNBAL1 2.499 2.499 2.499 2.499
score FROM_WEBSITE 2.699 0.001 2.699 0.001
-score FROM_WORDY 1.000 1.000 1.000 1.000
+score FROM_WORDY 0.001 1.000 0.001 1.000
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
-score FROM_WSP_TRAIL 2.327 0.001 2.327 0.001
+score FROM_WSP_TRAIL 2.299 0.001 2.299 0.001
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
-score FSL_CTYPE_WIN1251 3.899 3.699 3.899 3.699
-score FSL_HELO_FAKE 3.199 3.046 3.199 3.046
-score FSL_NEW_HELO_USER 1.999 1.744 1.999 1.744
-score FSL_THIS_IS_ADV 2.380 0.870 2.380 0.870
-score FUZZY_CLICK_HERE 3.099 2.999 3.099 2.999
+score FSL_CTYPE_WIN1251 3.799 3.700 3.799 3.700
+score FSL_HELO_FAKE 3.199 3.259 3.199 3.259
+score FSL_NEW_HELO_USER 1.999 1.426 1.999 1.426
+score FSL_THIS_IS_ADV 1.615 0.882 1.615 0.882
+score FUZZY_CLICK_HERE 2.613 2.999 2.613 2.999
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
-score GB_BITCOIN_CP 2.999 3.000 2.999 3.000
-score GB_BITCOIN_NH 1.868 2.253 1.868 2.253
+score GB_BITCOIN_CP 2.999 2.999 2.999 2.999
+score GB_BITCOIN_NH 1.863 1.808 1.863 1.808
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
-score GB_FREEMAIL_DISPTO 0.500 0.499 0.500 0.499
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.499 0.500 0.499 0.500
-score GB_GOOGLE_OBFU 0.750 0.750 0.750 0.750
-score GB_LINKED_IMG_NOT_RCVD_LINK 1.000 0.164 1.000 0.164
-score GB_MONERO_CP 0.001 0.001 0.001 0.001
+score GB_FREEMAIL_DISPTO 0.500 0.500 0.500 0.500
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.499 0.499 0.499 0.499
+score GB_GOOGLE_OBFU 0.749 0.749 0.749 0.749
+score GB_LINKED_IMG_NOT_RCVD_LINK 1.000 1.742 1.000 1.742
+score GB_MONERO_CP 1.001 1.968 1.001 1.968
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
score GOOG_REDIR_HTML_ONLY 1.999 1.999 1.999 1.999
-score GOOG_REDIR_NORDNS 2.601 3.199 2.601 3.199
-score HDRS_LCASE 0.100 0.100 0.100 0.100
+score GOOG_REDIR_NORDNS 2.596 3.199 2.596 3.199
+score HDRS_LCASE 0.099 0.100 0.099 0.100
score HDRS_LCASE_IMGONLY 0.099 0.100 0.099 0.100
score HDRS_MISSP 1.000 1.000 1.000 1.000
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999 0.272 1.999 0.272
-score HDR_ORDER_FTSDMCXX_NORDNS 3.038 3.499 3.038 3.499
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250 0.250 0.250 0.250
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.215 1.999 1.215
+score HDR_ORDER_FTSDMCXX_NORDNS 3.049 3.499 3.049 3.499
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.249 0.249 0.249
score HELO_MISC_IP 0.249 0.001 0.249 0.001
-score HELO_NO_DOMAIN 0.239 1.037 0.239 1.037
-score HEXHASH_WORD 2.999 1.000 2.999 1.000
-score HK_LOTTO 1.000 0.477 1.000 0.477
+score HELO_NO_DOMAIN 0.001 1.039 0.001 1.039
+score HEXHASH_WORD 1.000 1.000 1.000 1.000
+score HK_CTE_RAW 0.999 0.001 0.999 0.001
+score HK_LOTTO 0.999 0.338 0.999 0.338
score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
score HK_RANDOM_FROM 0.999 0.999 0.999 0.999
-score HK_RANDOM_REPLYTO 0.999 1.000 0.999 1.000
-score HK_RCVD_IP_MULTICAST 1.500 0.495 1.500 0.495
-score HK_SCAM 1.683 1.999 1.683 1.999
-score HK_WIN 0.999 0.999 0.999 0.999
-score HOSTED_IMG_DIRECT_MX 3.277 1.030 3.277 1.030
+score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
+score HK_RCVD_IP_MULTICAST 1.036 0.491 1.036 0.491
+score HK_SCAM 1.543 1.999 1.543 1.999
+score HK_WIN 0.999 0.875 0.999 0.875
+score HOSTED_IMG_DIRECT_MX 2.784 1.488 2.784 1.488
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM 0.551 1.000 0.551 1.000
-score HOSTED_IMG_MULTI 2.234 2.236 2.234 2.236
+score HOSTED_IMG_FREEM 1.000 1.000 1.000 1.000
+score HOSTED_IMG_MULTI 2.274 1.391 2.274 1.391
score HTML_ENTITY_ASCII 1.000 1.000 1.000 1.000
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE 2.999 1.998 2.999 1.998
+score HTML_OFF_PAGE 2.999 1.993 2.999 1.993
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
-score HTML_SINGLET_MANY 1.891 1.928 1.891 1.928
+score HTML_SINGLET_MANY 1.887 1.963 1.887 1.963
score HTML_TEXT_INVISIBLE_FONT 1.000 1.000 1.000 1.000
-score HTML_TEXT_INVISIBLE_STYLE 0.001 2.017 0.001 2.017
-score IMG_ONLY_FM_DOM_INFO 1.631 2.499 1.631 2.499
-score KB_FORGED_MOZ4 4.099 0.001 4.099 0.001
-score KHOP_FAKE_EBAY 0.001 0.038 0.001 0.038
-score KHOP_HELO_FCRDNS 0.400 0.399 0.400 0.399
+score HTML_TEXT_INVISIBLE_STYLE 0.099 2.052 0.099 2.052
+score IMG_DIRECT_TO_MX 0.356 0.001 0.356 0.001
+score IMG_ONLY_FM_DOM_INFO 1.732 2.499 1.732 2.499
+score KB_FORGED_MOZ4 3.999 0.001 3.999 0.001
+score KHOP_FAKE_EBAY 0.001 0.001 0.001 0.001
+score KHOP_HELO_FCRDNS 0.400 0.400 0.400 0.400
score LIST_PARTIAL_SHORT_MSG 1.000 1.000 1.000 1.000
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 0.001 0.001 0.001 0.001
-score LONG_HEX_URI 2.999 1.606 2.999 1.606
-score LONG_IMG_URI 1.785 2.553 1.785 2.553
+score LONG_HEX_URI 2.999 1.617 2.999 1.617
+score LONG_IMG_URI 1.329 2.538 1.329 2.538
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
-score LOTTO_AGENT 1.499 1.499 1.499 1.499
+score LOTTO_AGENT 1.437 1.236 1.437 1.236
score LUCRATIVE 1.000 1.000 1.000 1.000
-score MALFORMED_FREEMAIL 2.228 1.310 2.228 1.310
-score MALF_HTML_B64 3.489 2.744 3.489 2.744
-score MALWARE_NORDNS 2.448 2.003 2.448 2.003
-score MALWARE_PASSWORD 3.055 3.205 3.055 3.205
+score MALFORMED_FREEMAIL 1.802 1.278 1.802 1.278
+score MALF_HTML_B64 2.519 2.160 2.519 2.160
+score MALWARE_NORDNS 2.454 3.450 2.454 3.450
+score MALWARE_PASSWORD 3.228 3.333 3.228 3.333
score MANY_HDRS_LCASE 0.100 0.100 0.100 0.100
-score MAY_BE_FORGED 1.400 0.001 1.400 0.001
-score MILLION_HUNDRED 0.001 2.799 0.001 2.799
-score MIMEOLE_DIRECT_TO_MX 1.999 0.460 1.999 0.460
-score MIME_NO_TEXT 1.999 1.999 1.999 1.999
-score MIXED_ES 2.699 2.399 2.699 2.399
-score MONERO_EXTORT_01 3.345 3.299 3.345 3.299
-score MONEY_ATM_CARD 1.635 2.599 1.635 2.599
-score MONEY_FORM 0.854 0.333 0.854 0.333
-score MONEY_FORM_SHORT 2.118 1.161 2.118 1.161
-score MONEY_FRAUD_3 2.699 2.254 2.699 2.254
-score MONEY_FRAUD_5 1.002 0.001 1.002 0.001
-score MONEY_FRAUD_8 3.799 3.211 3.799 3.211
-score MONEY_FROM_41 2.000 1.999 2.000 1.999
-score MSM_PRIO_REPTO 2.416 1.288 2.416 1.288
+score MAY_BE_FORGED 1.299 0.001 1.299 0.001
+score MILLION_HUNDRED 0.026 2.800 0.026 2.800
+score MIMEOLE_DIRECT_TO_MX 1.999 1.085 1.999 1.085
+score MIME_NO_TEXT 1.000 1.999 1.000 1.999
+score MIXED_ES 2.599 2.399 2.599 2.399
+score MONERO_EXTORT_01 3.970 3.159 3.970 3.159
+score MONEY_ATM_CARD 2.397 2.599 2.397 2.599
+score MONEY_FORM 0.001 0.335 0.001 0.335
+score MONEY_FORM_SHORT 2.499 1.136 2.499 1.136
+score MONEY_FRAUD_3 2.699 2.255 2.699 2.255
+score MONEY_FRAUD_5 0.912 0.001 0.912 0.001
+score MONEY_FRAUD_8 3.699 3.556 3.699 3.556
+score MONEY_FROM_41 1.999 1.999 1.999 1.999
+score MSM_PRIO_REPTO 1.603 1.155 1.603 1.155
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
-score NORDNS_LOW_CONTRAST 1.886 1.694 1.886 1.694
+score NORDNS_LOW_CONTRAST 1.787 1.659 1.787 1.659
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
-score NSL_RCVD_FROM_USER 0.317 0.041 0.317 0.041
-score NSL_RCVD_HELO_USER 0.001 1.042 0.001 1.042
-score NUMBERONLY_BITCOIN_EXP 1.088 1.371 1.088 1.371
-score OBFU_BITCOIN 3.000 2.861 3.000 2.861
-score ONLINE_MKTG_CNSLT 2.899 2.699 2.899 2.699
-score PDS_BTC_ID 0.500 0.499 0.500 0.499
-score PDS_BTC_NTLD 1.999 1.858 1.999 1.858
-score PDS_DBL_URL_ILLEGAL_CHARS 1.460 1.702 1.460 1.702
-score PDS_DBL_URL_TNB_RUNON 1.999 1.999 1.999 1.999
+score NSL_RCVD_FROM_USER 0.787 3.261 0.787 3.261
+score NSL_RCVD_HELO_USER 0.150 1.998 0.150 1.998
+score NUMBERONLY_BITCOIN_EXP 0.208 1.376 0.208 1.376
+score OBFU_BITCOIN 2.999 1.849 2.999 1.849
+score OBFU_TEXT_ATTACH 0.238 0.001 0.238 0.001
+score ONLINE_MKTG_CNSLT 2.799 2.699 2.799 2.699
+score PDS_BTC_ID 0.499 0.499 0.499 0.499
+score PDS_BTC_NTLD 1.999 1.999 1.999 1.999
+score PDS_DBL_URL_ILLEGAL_CHARS 0.628 1.279 0.628 1.279
+score PDS_DBL_URL_TNB_RUNON 1.999 1.728 1.999 1.728
score PDS_FRNOM_TODOM_NAKED_TO 1.499 1.499 1.499 1.499
-score PDS_FROM_2_EMAILS 1.999 1.799 1.999 1.799
+score PDS_FROM_2_EMAILS 2.099 1.799 2.099 1.799
score PDS_FROM_NAME_TO_DOMAIN 0.999 0.999 0.999 0.999
-score PDS_HELO_SPF_FAIL 0.001 1.430 0.001 1.430
-score PDS_HP_HELO_NORDNS 0.550 0.001 0.550 0.001
+score PDS_HELO_SPF_FAIL 0.001 0.467 0.001 0.467
+score PDS_HP_HELO_NORDNS 0.001 0.001 0.001 0.001
score PDS_NAKED_TO_NUMERO 1.999 1.999 1.999 1.999
score PDS_PHPEXP_BOT 1.499 1.499 1.499 1.499
score PDS_PHPE_SHORT_URL 1.999 1.000 1.999 1.000
-score PDS_PHPE_URISHORTENER 2.000 1.999 2.000 1.999
-score PDS_PHP_EVAL 1.499 1.500 1.499 1.500
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.000 1.999 2.000 1.999
-score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999 1.490 1.999 1.490
+score PDS_PHPE_URISHORTENER 1.999 1.999 1.999 1.999
+score PDS_PHP_EVAL 1.499 1.499 1.499 1.499
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999 1.999 1.999 1.999
+score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999 1.151 1.999 1.151
score PDS_TONAME_EQ_TOLOCAL_SHORT 1.999 1.999 1.999 1.999
score PDS_TONAME_EQ_TOLOCAL_VSHORT 0.999 0.999 0.999 0.999
-score PDS_TO_EQ_FROM_NAME 3.299 3.055 3.299 3.055
+score PDS_TO_EQ_FROM_NAME 3.399 3.054 3.399 3.054
score PDS_X_PHP_WELLKNOWN 1.000 1.000 1.000 1.000
score PDS_X_PHP_WP_EXP 1.499 1.499 1.499 1.499
score PHOTO_EDITING_DIRECT 1.000 1.000 1.000 1.000
@@ -239,13 +240,13 @@ score PHOTO_EDITING_FREEM
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
score PHP_ORIG_SCRIPT 2.499 2.499 2.499 2.499
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT 1.000 0.999 1.000 0.999
+score PP_MIME_FAKE_ASCII_TEXT 0.999 0.999 0.999 0.999
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS 2.797 1.563 2.797 1.563
+score RATWARE_NO_RDNS 2.642 1.907 2.642 1.907
score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
@@ -257,80 +258,78 @@ score RCVD_IN_MSPIKE_L4
score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
-score RDNS_NUM_TLD_ATCHNX 2.596 1.000 2.596 1.000
-score RDNS_NUM_TLD_XM 2.999 1.000 2.999 1.000
+score RDNS_NUM_TLD_ATCHNX 1.957 1.000 1.957 1.000
+score RDNS_NUM_TLD_XM 2.999 2.743 2.999 2.743
score SEO_SUSP_NTLD 1.199 1.199 1.199 1.199
-score SERGIO_SUBJECT_PORN014 2.101 3.099 2.101 3.099
-score SERGIO_SUBJECT_VIAGRA01 0.300 0.001 0.300 0.001
+score SERGIO_SUBJECT_PORN014 3.399 3.099 3.399 3.099
+score SERGIO_SUBJECT_VIAGRA01 1.410 0.001 1.410 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499 1.000 2.499 1.000
-score SHORT_BODY_G_DRIVE_DYN 1.499 1.499 1.499 1.499
+score SHORT_BODY_G_DRIVE_DYN 1.500 1.499 1.500 1.499
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
score SHORT_SHORTNER 1.999 1.999 1.999 1.999
score SINGLETS_LOW_CONTRAST 0.001 0.001 0.001 0.001
score SPOOFED_FREEMAIL 0.001 1.999 0.001 1.999
score SPOOFED_FREEMAIL_NO_RDNS 1.499 0.001 1.499 0.001
-score SPOOFED_FREEM_REPTO 0.001 2.000 0.001 2.000
+score SPOOFED_FREEM_REPTO 0.001 1.999 0.001 1.999
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
-score STATIC_XPRIO_OLE 1.999 1.999 1.999 1.999
-score STOCK_LOW_CONTRAST 2.185 1.827 2.185 1.827
+score STATIC_XPRIO_OLE 1.999 0.001 1.999 0.001
+score STOCK_LOW_CONTRAST 1.930 1.859 1.930 1.859
score STOCK_TIP 1.000 1.000 1.000 1.000
-score SUBJ_OBFU_PUNCT_FEW 0.749 0.749 0.749 0.749
-score SUBJ_OBFU_PUNCT_MANY 1.749 1.749 1.749 1.749
+score SUBJ_OBFU_PUNCT_FEW 0.236 0.749 0.236 0.749
+score SUBJ_OBFU_PUNCT_MANY 0.001 1.749 0.001 1.749
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
-score SUSPNTLD_EXPIRATION_EXTORT 2.000 1.000 2.000 1.000
+score SUSPNTLD_EXPIRATION_EXTORT 1.999 1.000 1.999 1.000
score SYSADMIN 1.000 1.000 1.000 1.000
-score TAB_IN_FROM 0.499 0.170 0.499 0.170
-score TEQF_USR_IMAGE 1.993 0.001 1.993 0.001
-score TEQF_USR_MSGID_HEX 2.599 0.001 2.599 0.001
-score TEQF_USR_MSGID_MALF 2.016 2.158 2.016 2.158
-score TEQF_USR_POLITE 0.695 1.000 0.695 1.000
-score THIS_AD 2.099 1.899 2.099 1.899
-score THIS_IS_ADV_SUSP_NTLD 1.499 1.461 1.499 1.461
-score TONOM_EQ_TOLOC_SHRT_PSHRTNER 1.499 0.513 1.499 0.513
+score TAB_IN_FROM 0.500 0.035 0.500 0.035
+score TEQF_USR_IMAGE 1.263 0.001 1.263 0.001
+score TEQF_USR_MSGID_MALF 1.586 2.329 1.586 2.329
+score TEQF_USR_POLITE 0.022 1.000 0.022 1.000
+score THIS_AD 1.899 1.899 1.899 1.899
+score THIS_IS_ADV_SUSP_NTLD 1.000 0.126 1.000 0.126
+score TONOM_EQ_TOLOC_SHRT_PSHRTNER 1.499 1.125 1.499 1.125
score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.499 1.499 1.499 1.499
-score TO_EQ_FM_DIRECT_MX 1.340 2.499 1.340 2.499
+score TO_EQ_FM_DIRECT_MX 1.785 2.499 1.785 2.499
score TO_EQ_FM_DOM_HTML_IMG 0.001 0.001 0.001 0.001
-score TO_EQ_FM_DOM_HTML_ONLY 0.001 1.288 0.001 1.288
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.035 0.001 0.035
-score TO_EQ_FM_HTML_ONLY 0.001 0.001 0.001 0.001
-score TO_EQ_FM_SPF_FAIL 0.001 1.542 0.001 1.542
+score TO_EQ_FM_DOM_HTML_ONLY 0.001 1.267 0.001 1.267
+score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.514 0.001 0.514
+score TO_EQ_FM_HTML_ONLY 0.001 0.014 0.001 0.014
+score TO_EQ_FM_SPF_FAIL 0.001 1.061 0.001 1.061
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.498 0.768 2.498 0.768
-score TO_NO_BRKTS_DYNIP 1.860 2.310 1.860 2.310
+score TO_NAME_SUBJ_NO_RDNS 1.945 0.768 1.945 0.768
+score TO_NO_BRKTS_DYNIP 1.961 2.315 1.961 2.315
score TO_NO_BRKTS_FROM_MSSP 2.499 2.499 2.499 2.499
-score TO_NO_BRKTS_HTML_IMG 1.999 0.834 1.999 0.834
-score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
+score TO_NO_BRKTS_HTML_IMG 1.999 0.836 1.999 0.836
+score TO_NO_BRKTS_HTML_ONLY 2.000 1.999 2.000 1.999
score TO_NO_BRKTS_MSFT 2.499 2.499 2.499 2.499
-score TO_NO_BRKTS_NORDNS_HTML 1.999 1.829 1.999 1.829
+score TO_NO_BRKTS_NORDNS_HTML 1.999 1.857 1.999 1.857
score TO_NO_BRKTS_PCNT 2.499 1.000 2.499 1.000
-score TVD_IP_HEX 1.247 1.364 1.247 1.364
-score TVD_IP_SING_HEX 1.256 1.975 1.256 1.975
+score TVD_IP_HEX 0.656 2.094 0.656 2.094
+score TVD_IP_SING_HEX 1.633 1.024 1.633 1.024
score TVD_SPACE_ENCODED 0.001 0.001 0.001 0.001
score TVD_SPACE_RATIO_MINFP 2.499 2.499 2.499 2.499
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
score UNICODE_OBFU_ASC 2.500 2.499 2.500 2.499
-score UNICODE_OBFU_DOM_NO_BODY 2.660 3.749 2.660 3.749
+score UNICODE_OBFU_DOM_NO_BODY 3.114 3.750 3.114 3.750
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
-score UPGRADE_MAILBOX 1.499 1.799 1.499 1.799
+score UPGRADE_MAILBOX 1.299 1.699 1.299 1.699
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_GOOGLE_PROXY 2.599 2.399 2.599 2.399
-score URI_HEX_IP 1.025 1.793 1.025 1.793
+score URI_GOOGLE_PROXY 2.399 2.399 2.399 2.399
+score URI_HEX_IP 2.004 1.716 2.004 1.716
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
-score URI_ONLY_MSGID_MALF 1.999 0.059 1.999 0.059
+score URI_ONLY_MSGID_MALF 0.303 0.059 0.303 0.059
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 2.252 2.802 2.252 2.802
+score URI_PHISH 2.254 2.901 2.254 2.901
score URI_PHP_REDIR 3.499 3.499 3.499 3.499
-score URI_TRY_3LD 1.939 0.712 1.939 0.712
-score URI_WPADMIN 2.499 0.001 2.499 0.001
+score URI_TRY_3LD 1.404 0.710 1.404 0.710
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
-score URI_WP_HACKED 3.500 2.002 3.500 2.002
-score URI_WP_HACKED_2 2.500 2.499 2.500 2.499
+score URI_WP_HACKED 3.499 1.997 3.499 1.997
+score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
score USB_DRIVES 1.000 1.000 1.000 1.000
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
-score WALMART_IMG_NOT_RCVD_WAL 0.613 1.000 0.613 1.000
-score XPRIO 2.250 1.000 2.250 1.000
+score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
+score XPRIO 2.249 1.000 2.249 1.000
score XPRIO_SHORT_SUBJ 2.499 2.499 2.499 2.499
-score XPRIO_URL_SHORTNER 0.118 0.253 0.118 0.253
-score YOU_INHERIT 1.932 2.291 1.932 2.291
+score XPRIO_URL_SHORTNER 0.502 0.256 0.502 0.256
+score YOU_INHERIT 2.599 2.031 2.599 2.031
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1869435&r1=1869434&r2=1869435&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Wed Nov 6 05:12:17 2019
@@ -1,224 +1,214 @@
-# Using score set 0 logs for revision 1869357 from:
-# ham-axb-coi-bulk.r1869357.log ham-axb-generic.r1869357.log ham-axb-ham-misc.r1869357.log ham-darxus.r1869357.log ham-ena-week3.r1869357.log ham-ena-week4.r1869357.log ham-giovanni-ham.r1869357.log ham-giovanni-spammy.r1869357.log ham-giovanni-spam.r1869357.log ham-grenier.r1869357.log ham-hege.r1869357.log ham-jarif.r1869357.log ham-jbrooks.r1869357.log ham-llanga.r1869357.log ham-mmiroslaw-mails-ham.r1869357.log ham-mmiroslaw-mails-spam.r1869357.log ham-npiazzi.r1869357.log ham-pds.r1869357.log ham-sihde.r1869357.log ham-spamsponge.r1869357.log ham-thendrikx.r1869357.log spam-axb-coi-bulk.r1869357.log spam-axb-generic.r1869357.log spam-axb-ham-misc.r1869357.log spam-darxus.r1869357.log spam-ena-week3.r1869357.log spam-ena-week4.r1869357.log spam-giovanni-ham.r1869357.log spam-giovanni-spammy.r1869357.log spam-giovanni-spam.r1869357.log spam-grenier.r1869357.log spam-hege.r1869357.log spam-jarif.r1869357.log spam-jbrooks.r1869357.log spam-llanga.r1869357.log spam-mmiroslaw-mails-h
am.r1869357.log spam-mmiroslaw-mails-spam.r1869357.log spam-npiazzi.r1869357.log spam-pds.r1869357.log spam-sihde.r1869357.log spam-spamsponge.r1869357.log spam-thendrikx.r1869357.log
+# Using score set 0 logs for revision 1869386 from:
+# ham-axb-coi-bulk.r1869386.log ham-axb-generic.r1869386.log ham-axb-ham-misc.r1869386.log ham-darxus.r1869386.log ham-ena-week0.r1869386.log ham-ena-week1.r1869386.log ham-ena-week2.r1869386.log ham-ena-week3.r1869386.log ham-ena-week4.r1869386.log ham-giovanni-ham.r1869386.log ham-giovanni-spammy.r1869386.log ham-giovanni-spam.r1869386.log ham-grenier.r1869386.log ham-hege.r1869386.log ham-jarif.r1869386.log ham-jbrooks.r1869386.log ham-llanga.r1869386.log ham-mmiroslaw-mails-ham.r1869386.log ham-mmiroslaw-mails-spam.r1869386.log ham-npiazzi.r1869386.log ham-pds.r1869386.log ham-sihde.r1869386.log ham-spamsponge.r1869386.log ham-thendrikx.r1869386.log spam-axb-coi-bulk.r1869386.log spam-axb-generic.r1869386.log spam-axb-ham-misc.r1869386.log spam-darxus.r1869386.log spam-ena-week0.r1869386.log spam-ena-week1.r1869386.log spam-ena-week2.r1869386.log spam-ena-week3.r1869386.log spam-ena-week4.r1869386.log spam-giovanni-ham.r1869386.log spam-giovanni-spammy.r1869386.log spam-giovanni
-spam.r1869386.log spam-grenier.r1869386.log spam-hege.r1869386.log spam-jarif.r1869386.log spam-jbrooks.r1869386.log spam-llanga.r1869386.log spam-mmiroslaw-mails-ham.r1869386.log spam-mmiroslaw-mails-spam.r1869386.log spam-npiazzi.r1869386.log spam-pds.r1869386.log spam-sihde.r1869386.log spam-spamsponge.r1869386.log spam-thendrikx.r1869386.log
+score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.999
-score ADMITS_SPAM 3.100
+score ADMITS_SPAM 2.671
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 2.601
-score ADVANCE_FEE_3_NEW_MONEY 2.143
+score ADVANCE_FEE_3_NEW_MONEY 2.202
score ADVANCE_FEE_4_NEW 2.699
score ADVANCE_FEE_4_NEW_MONEY 2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY 0.161
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.758
score AD_PREFS 0.499
score ALIBABA_IMG_NOT_RCVD_ALI 2.499
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499
-score ANY_PILL_PRICE 2.699
-score AXB_XMAILER_MIMEOLE_OL_024C2 3.999
-score AXB_XM_FORGED_OL2600 2.406
-score AXB_X_AOL_SEZ_S 3.099
+score AMAZON_IMG_NOT_RCVD_AMZN 2.245
+score AXB_XMAILER_MIMEOLE_OL_024C2 3.899
+score AXB_XM_FORGED_OL2600 1.384
+score AXB_X_AOL_SEZ_S 2.999
score BIGNUM_EMAILS 2.999
-score BITCOIN_DEADLINE 2.000
-score BITCOIN_EXTORT_01 2.902
-score BITCOIN_SPAM_01 1.112
+score BITCOIN_DEADLINE 3.000
+score BITCOIN_EXTORT_01 2.904
score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_07 3.499
-score BITCOIN_SPAM_08 1.864
-score BITCOIN_SPAM_09 1.499
+score BITCOIN_SPAM_08 1.861
+score BITCOIN_SPAM_09 1.500
score BODY_EMPTY 1.999
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 2.845
+score BOGUS_MSM_HDRS 1.005
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.249
-score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 0.703
-score DEAR_BENEFICIARY 2.375
-score DOS_OUTLOOK_TO_MX_IMAGE 2.799
-score DOS_RCVD_IP_TWICE_B 2.699
+score CK_HELO_GENERIC 0.250
+score DATE_IN_FUTURE_96_Q 1.233
+score DEAR_BENEFICIARY 2.941
+score DOS_OUTLOOK_TO_MX_IMAGE 2.700
+score DOS_RCVD_IP_TWICE_B 2.599
score DRUGS_ERECTILE_SHORT_SHORTNER 1.499
-score DUP_SUSP_HDR 2.500
-score DX_TEXT_03 0.001
-score EBAY_IMG_NOT_RCVD_EBAY 0.998
-score END_FUTURE_EMAILS 2.499
+score DUP_SUSP_HDR 2.499
+score DX_TEXT_03 1.396
+score EBAY_IMG_NOT_RCVD_EBAY 2.223
+score END_FUTURE_EMAILS 2.100
score FAKE_REPLY_A1 3.099
-score FILL_THIS_FORM 0.791
-score FORGED_RELAY_MUA_TO_MX 2.301
-score FORM_FRAUD 1.000
-score FORM_FRAUD_3 2.699
-score FORM_FRAUD_5 1.211
-score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.195
-score FROMSPACE 2.602
-score FROM_2_EMAILS_SHORT 1.999
-score FROM_ADDR_WS 2.672
-score FROM_IN_TO_AND_SUBJ 1.491
+score FILL_THIS_FORM 0.001
+score FORGED_RELAY_MUA_TO_MX 2.401
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 2.091
+score FORM_FRAUD_5 1.730
+score FREEMAIL_FORGED_FROMDOMAIN 0.038
+score FROMSPACE 2.253
+score FROM_2_EMAILS_SHORT 0.601
+score FROM_ADDR_WS 2.699
score FROM_MISSPACED 1.999
-score FROM_MISSP_DYNIP 2.029
+score FROM_MISSP_DYNIP 2.286
score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 3.399
-score FROM_MISSP_MSFT 3.075
-score FROM_MISSP_REPLYTO 2.500
-score FROM_MISSP_TO_UNDISC 0.866
-score FROM_MISSP_USER 2.234
+score FROM_MISSP_FREEMAIL 3.299
+score FROM_MISSP_MSFT 1.802
+score FROM_MISSP_REPLYTO 0.001
+score FROM_MISSP_TO_UNDISC 2.542
+score FROM_MISSP_USER 1.387
score FROM_MISSP_XPRIO 2.499
score FROM_NAME_EQ_TO_G_DRIVE 0.001 # force non-zero
-score FROM_NTLD_REPLY_FREEMAIL 1.999
+score FROM_NTLD_REPLY_FREEMAIL 1.734
score FROM_SUSPICIOUS_NTLD 0.499
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FROM_UNBAL1 2.499
score FROM_WEBSITE 2.699
-score FROM_WSP_TRAIL 2.327
-score FSL_CTYPE_WIN1251 3.899
+score FROM_WORDY 0.001
+score FROM_WSP_TRAIL 2.299
+score FSL_CTYPE_WIN1251 3.799
score FSL_HELO_FAKE 3.199
score FSL_NEW_HELO_USER 1.999
-score FSL_THIS_IS_ADV 2.380
-score FUZZY_CLICK_HERE 3.099
+score FSL_THIS_IS_ADV 1.615
+score FUZZY_CLICK_HERE 2.613
score GB_BITCOIN_CP 2.999
-score GB_BITCOIN_NH 1.868
+score GB_BITCOIN_NH 1.863
score GB_FREEMAIL_DISPTO 0.500
score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_GOOGLE_OBFU 0.750
-score GB_MONERO_CP 0.001
+score GB_GOOGLE_OBFU 0.749
+score GB_MONERO_CP 1.001
score GOOG_REDIR_HTML_ONLY 1.999
-score GOOG_REDIR_NORDNS 2.601
-score HDRS_LCASE 0.100
+score GOOG_REDIR_NORDNS 2.596
+score HDRS_LCASE 0.099
score HDRS_LCASE_IMGONLY 0.099
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.038
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250
+score HDR_ORDER_FTSDMCXX_NORDNS 3.049
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249
score HELO_MISC_IP 0.249
-score HELO_NO_DOMAIN 0.239
-score HEXHASH_WORD 2.999
-score HK_LOTTO 1.000
+score HELO_NO_DOMAIN 0.001
+score HK_CTE_RAW 0.999
+score HK_LOTTO 0.999
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_FROM 0.999
score HK_RANDOM_REPLYTO 0.999
-score HK_RCVD_IP_MULTICAST 1.500
-score HK_SCAM 1.683
+score HK_RCVD_IP_MULTICAST 1.036
+score HK_SCAM 1.543
score HK_WIN 0.999
-score HOSTED_IMG_DIRECT_MX 3.277
-score HOSTED_IMG_FREEM 0.551
-score HOSTED_IMG_MULTI 2.234
+score HOSTED_IMG_DIRECT_MX 2.784
+score HOSTED_IMG_MULTI 2.274
score HTML_OFF_PAGE 2.999
-score HTML_SINGLET_MANY 1.891
-score HTML_TEXT_INVISIBLE_STYLE 0.001
-score IMG_ONLY_FM_DOM_INFO 1.631
-score KB_FORGED_MOZ4 4.099
+score HTML_SINGLET_MANY 1.887
+score HTML_TEXT_INVISIBLE_STYLE 0.099
+score IMG_DIRECT_TO_MX 0.356
+score IMG_ONLY_FM_DOM_INFO 1.732
+score KB_FORGED_MOZ4 3.999
score KHOP_FAKE_EBAY 0.001
score KHOP_HELO_FCRDNS 0.400
score LIST_PRTL_SAME_USER 0.001
score LONG_HEX_URI 2.999
-score LONG_IMG_URI 1.785
+score LONG_IMG_URI 1.329
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
-score MALFORMED_FREEMAIL 2.228
-score MALF_HTML_B64 3.489
-score MALWARE_NORDNS 2.448
-score MALWARE_PASSWORD 3.055
-score MAY_BE_FORGED 1.400
-score MILLION_HUNDRED 0.001
+score LOTTO_AGENT 1.437
+score MALFORMED_FREEMAIL 1.802
+score MALF_HTML_B64 2.519
+score MALWARE_NORDNS 2.454
+score MALWARE_PASSWORD 3.228
+score MAY_BE_FORGED 1.299
+score MILLION_HUNDRED 0.026
score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.999
-score MIXED_ES 2.699
-score MONERO_EXTORT_01 3.345
-score MONEY_ATM_CARD 1.635
-score MONEY_FORM 0.854
-score MONEY_FORM_SHORT 2.118
+score MIXED_ES 2.599
+score MONERO_EXTORT_01 3.970
+score MONEY_ATM_CARD 2.397
+score MONEY_FORM 0.001
+score MONEY_FORM_SHORT 2.499
score MONEY_FRAUD_3 2.699
-score MONEY_FRAUD_5 1.002
-score MONEY_FRAUD_8 3.799
-score MONEY_FROM_41 2.000
-score MSM_PRIO_REPTO 2.416
-score NORDNS_LOW_CONTRAST 1.886
+score MONEY_FRAUD_5 0.912
+score MONEY_FRAUD_8 3.699
+score MONEY_FROM_41 1.999
+score MSM_PRIO_REPTO 1.603
+score NORDNS_LOW_CONTRAST 1.787
score NO_FM_NAME_IP_HOSTN 0.001
-score NSL_RCVD_FROM_USER 0.317
-score NSL_RCVD_HELO_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 1.088
-score OBFU_BITCOIN 3.000
-score ONLINE_MKTG_CNSLT 2.899
-score PDS_BTC_ID 0.500
+score NSL_RCVD_FROM_USER 0.787
+score NSL_RCVD_HELO_USER 0.150
+score NUMBERONLY_BITCOIN_EXP 0.208
+score OBFU_BITCOIN 2.999
+score OBFU_TEXT_ATTACH 0.238
+score ONLINE_MKTG_CNSLT 2.799
+score PDS_BTC_ID 0.499
score PDS_BTC_NTLD 1.999
-score PDS_DBL_URL_ILLEGAL_CHARS 1.460
+score PDS_DBL_URL_ILLEGAL_CHARS 0.628
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_FRNOM_TODOM_NAKED_TO 1.499
-score PDS_FROM_2_EMAILS 1.999
+score PDS_FROM_2_EMAILS 2.099
score PDS_FROM_NAME_TO_DOMAIN 0.999
-score PDS_HP_HELO_NORDNS 0.550
+score PDS_HP_HELO_NORDNS 0.001
score PDS_NAKED_TO_NUMERO 1.999
score PDS_PHPEXP_BOT 1.499
score PDS_PHPE_SHORT_URL 1.999
-score PDS_PHPE_URISHORTENER 2.000
+score PDS_PHPE_URISHORTENER 1.999
score PDS_PHP_EVAL 1.499
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.000
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999
score PDS_TONAME_EQ_TOLOCAL_SHORT 1.999
score PDS_TONAME_EQ_TOLOCAL_VSHORT 0.999
-score PDS_TO_EQ_FROM_NAME 3.299
-score PDS_X_PHP_WELLKNOWN 1.000
+score PDS_TO_EQ_FROM_NAME 3.399
score PDS_X_PHP_WP_EXP 1.499
score PHP_ORIG_SCRIPT 2.499
-score PP_MIME_FAKE_ASCII_TEXT 1.000
-score RATWARE_NO_RDNS 2.797
-score RDNS_NUM_TLD_ATCHNX 2.596
+score PP_MIME_FAKE_ASCII_TEXT 0.999
+score RATWARE_NO_RDNS 2.642
+score RDNS_NUM_TLD_ATCHNX 1.957
score RDNS_NUM_TLD_XM 2.999
score SEO_SUSP_NTLD 1.199
-score SERGIO_SUBJECT_PORN014 2.101
-score SERGIO_SUBJECT_VIAGRA01 0.300
+score SERGIO_SUBJECT_PORN014 3.399
+score SERGIO_SUBJECT_VIAGRA01 1.410
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
-score SHORT_BODY_G_DRIVE_DYN 1.499
+score SHORT_BODY_G_DRIVE_DYN 1.500
score SHORT_SHORTNER 1.999
-score SINGLETS_LOW_CONTRAST 0.001
+score SINGLETS_LOW_CONTRAST 0.001 # force non-zero
score SPOOFED_FREEMAIL_NO_RDNS 1.499
score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 2.185
-score SUBJ_OBFU_PUNCT_FEW 0.749
-score SUBJ_OBFU_PUNCT_MANY 1.749
-score SUSPNTLD_EXPIRATION_EXTORT 2.000
-score TAB_IN_FROM 0.499
-score TEQF_USR_IMAGE 1.993
-score TEQF_USR_MSGID_HEX 2.599
-score TEQF_USR_MSGID_MALF 2.016
-score TEQF_USR_POLITE 0.695
-score THIS_AD 2.099
-score THIS_IS_ADV_SUSP_NTLD 1.499
+score STOCK_LOW_CONTRAST 1.930
+score SUBJ_OBFU_PUNCT_FEW 0.236
+score SUBJ_OBFU_PUNCT_MANY 0.001
+score SUSPNTLD_EXPIRATION_EXTORT 1.999
+score TEQF_USR_IMAGE 1.263
+score TEQF_USR_MSGID_MALF 1.586
+score TEQF_USR_POLITE 0.022
+score THIS_AD 1.899
score TONOM_EQ_TOLOC_SHRT_PSHRTNER 1.499
score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.499
-score TO_EQ_FM_DIRECT_MX 1.340
+score TO_EQ_FM_DIRECT_MX 1.785
score TO_EQ_FM_DOM_HTML_IMG 0.001
score TO_EQ_FM_DOM_HTML_ONLY 0.001
-score TO_EQ_FM_HTML_ONLY 0.001
+score TO_EQ_FM_HTML_ONLY 0.001 # force non-zero
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.498
-score TO_NO_BRKTS_DYNIP 1.860
+score TO_NAME_SUBJ_NO_RDNS 1.945
+score TO_NO_BRKTS_DYNIP 1.961
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_HTML_ONLY 2.000
score TO_NO_BRKTS_MSFT 2.499
score TO_NO_BRKTS_NORDNS_HTML 1.999
score TO_NO_BRKTS_PCNT 2.499
-score TVD_IP_HEX 1.247
-score TVD_IP_SING_HEX 1.256
+score TVD_IP_HEX 0.656
+score TVD_IP_SING_HEX 1.633
score TVD_SPACE_ENCODED 0.001
score TVD_SPACE_RATIO_MINFP 2.499
score UNICODE_OBFU_ASC 2.500
-score UNICODE_OBFU_DOM_NO_BODY 2.660
-score UPGRADE_MAILBOX 1.499
-score URI_GOOGLE_PROXY 2.599
-score URI_HEX_IP 1.025
-score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 2.252
+score UNICODE_OBFU_DOM_NO_BODY 3.114
+score UPGRADE_MAILBOX 1.299
+score URI_GOOGLE_PROXY 2.399
+score URI_HEX_IP 2.004
+score URI_ONLY_MSGID_MALF 0.303
+score URI_PHISH 2.254
score URI_PHP_REDIR 3.499
-score URI_TRY_3LD 1.939
-score URI_WPADMIN 2.499
-score URI_WP_HACKED 3.500
-score URI_WP_HACKED_2 2.500
-score WALMART_IMG_NOT_RCVD_WAL 0.613
-score XPRIO 2.250
+score URI_TRY_3LD 1.404
+score URI_WP_HACKED 3.499
+score URI_WP_HACKED_2 2.499
+score XPRIO 2.249
score XPRIO_SHORT_SUBJ 2.499
-score XPRIO_URL_SHORTNER 0.118
-score YOU_INHERIT 1.932
-score AC_BR_BONANZA 0.001
+score XPRIO_URL_SHORTNER 0.502
+score YOU_INHERIT 2.599
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -235,6 +225,7 @@ score APP_DEVELOPMENT_NORDNS 1.0
score BITCOIN_BOMB 1.000
score BITCOIN_MALWARE 1.000
score BITCOIN_PAY_ME 1.000
+score BITCOIN_SPAM_01 1.000
score BITCOIN_SPAM_03 1.000
score BITCOIN_SPAM_04 1.000
score BITCOIN_SPAM_06 1.000
@@ -248,16 +239,17 @@ score BTC_ORG 1.0
score BULK_RE_SUSP_NTLD 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
+score COMPENSATION 1.000
score DAY_I_EARNED 1.000
score ENCRYPTED_MESSAGE -1.000
score FBI_MONEY 1.000
score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
+score FOUND_YOU 1.000
score FREEM_FRNUM_UNICD_EMPTY 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
score FROM_NTLD_LINKBAIT 1.000
score FROM_NUMERIC_TLD 1.000
-score FROM_WORDY 1.000
score FROM_WORDY_SHORT 1.000
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_FORGED_MUA_POSTFIX 1.000
@@ -267,7 +259,9 @@ score GOOGLE_DOCS_PHISH_MANY 1.0
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000
score GOOG_MALWARE_DNLD 1.000
score HDRS_MISSP 1.000
+score HEXHASH_WORD 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HTML_ENTITY_ASCII 1.000
score HTML_ENTITY_ASCII_TINY 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
@@ -276,7 +270,9 @@ score LIST_PARTIAL_SHORT_MSG 1.0
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
score MANY_HDRS_LCASE 0.100
+score MIME_NO_TEXT 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
+score PDS_X_PHP_WELLKNOWN 1.000
score PHOTO_EDITING_DIRECT 1.000
score PHOTO_EDITING_FREEM 1.000
score PHP_NOVER_MUA 1.000
@@ -289,6 +285,8 @@ score RAND_HEADER_MANY 1.0
score SHORT_IMG_SUSP_NTLD 1.000
score STOCK_TIP 1.000
score SYSADMIN 1.000
+score TAB_IN_FROM 0.500
+score THIS_IS_ADV_SUSP_NTLD 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
score UNICODE_OBFU_ZW 1.000
@@ -298,6 +296,7 @@ score URI_OPTOUT_3LD 1.0
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
score VPS_NO_NTLD 1.000
+score WALMART_IMG_NOT_RCVD_WAL 1.000
# in active.list but have no hits in recent corpus
score BITCOIN_SPAM_05 0.001 # force non-zero
score BITCOIN_SPF_ONLYALL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1869435&r1=1869434&r2=1869435&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Wed Nov 6 05:12:17 2019
@@ -3,224 +3,224 @@
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.999
-score ADMITS_SPAM 2.231
+score ADMITS_SPAM 2.218
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 3.469
-score ADVANCE_FEE_3_NEW_MONEY 2.146
+score ADVANCE_FEE_3_NEW_MONEY 2.161
score ADVANCE_FEE_4_NEW 2.599
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.499
-score ADVANCE_FEE_4_NEW_MONEY 2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.454
-score ADVANCE_FEE_5_NEW_MONEY 1.550
+score ADVANCE_FEE_4_NEW_MONEY 2.607
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.240
+score ADVANCE_FEE_5_NEW_MONEY 1.515
score AD_PREFS 0.499
-score ALIBABA_IMG_NOT_RCVD_ALI 2.272
-score AMAZON_IMG_NOT_RCVD_AMZN 2.055
-score ANY_PILL_PRICE 0.627
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.833
-score AXB_XM_FORGED_OL2600 0.102
+score ALIBABA_IMG_NOT_RCVD_ALI 0.349
+score AMAZON_IMG_NOT_RCVD_AMZN 2.050
+score ANY_PILL_PRICE 1.471
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.692
+score AXB_XM_FORGED_OL2600 2.079
score AXB_X_AOL_SEZ_S 2.999
-score BIGNUM_EMAILS 1.971
-score BITCOIN_DEADLINE 2.262
-score BITCOIN_EXTORT_01 2.347
+score BIGNUM_EMAILS 2.160
+score BITCOIN_DEADLINE 2.268
+score BITCOIN_EXTORT_01 2.792
score BITCOIN_SPAM_01 0.001
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_05 1.078
-score BITCOIN_SPAM_07 2.904
-score BITCOIN_SPAM_08 0.746
+score BITCOIN_SPAM_05 1.058
+score BITCOIN_SPAM_07 2.895
+score BITCOIN_SPAM_08 0.763
score BITCOIN_SPAM_09 1.499
-score BODY_EMPTY 0.060
-score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 2.586
+score BODY_EMPTY 0.067
+score BODY_URI_ONLY 1.000
+score BOGUS_MSM_HDRS 0.137
score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score CK_HELO_GENERIC 0.001
-score DATE_IN_FUTURE_96_Q 2.574
-score DEAR_BENEFICIARY 2.041
-score DKIMWL_BL 1.775
+score DATE_IN_FUTURE_96_Q 2.094
+score DEAR_BENEFICIARY 2.218
+score DKIMWL_BL 1.774
score DKIMWL_WL_HIGH -0.001
-score DKIMWL_WL_MED -0.001
-score DOS_OUTLOOK_TO_MX_IMAGE 0.914
-score DOS_RCVD_IP_TWICE_B 1.760
-score DRUGS_ERECTILE_SHORT_SHORTNER 0.773
-score DUP_SUSP_HDR 2.499
-score DX_TEXT_03 1.384
-score EBAY_IMG_NOT_RCVD_EBAY 2.485
-score END_FUTURE_EMAILS 1.354
+score DKIMWL_WL_MED -0.001 # force non-zero
+score DOS_OUTLOOK_TO_MX_IMAGE 2.190
+score DOS_RCVD_IP_TWICE_B 1.785
+score DRUGS_ERECTILE_SHORT_SHORTNER 0.001
+score DUP_SUSP_HDR 2.500
+score DX_TEXT_03 1.367
+score EBAY_IMG_NOT_RCVD_EBAY 1.887
+score END_FUTURE_EMAILS 0.610
score FAKE_REPLY_A1 3.199
score FILL_THIS_FORM 0.001
-score FORGED_RELAY_MUA_TO_MX 1.769
-score FORGED_SPF_HELO 0.842
-score FORM_FRAUD 1.000
-score FORM_FRAUD_5 0.001 # force non-zero
+score FORGED_RELAY_MUA_TO_MX 1.655
+score FORGED_SPF_HELO 0.931
+score FORM_FRAUD 0.999
+score FORM_FRAUD_5 0.001
score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.082
+score FREEMAIL_FORGED_FROMDOMAIN 0.118
score FROMSPACE 0.001
score FROM_2_EMAILS_SHORT 0.001
score FROM_ADDR_WS 0.001
score FROM_FMBLA_NEWDOM 1.499
score FROM_FMBLA_NEWDOM14 0.999
-score FROM_FMBLA_NEWDOM28 0.799
+score FROM_FMBLA_NEWDOM28 0.800
score FROM_GOV_DKIM_AU -0.001
-score FROM_GOV_SPOOF 0.001 # force non-zero
+score FROM_GOV_SPOOF 0.001
score FROM_MISSPACED 1.999
-score FROM_MISSP_DYNIP 1.154
-score FROM_MISSP_EH_MATCH 1.227
-score FROM_MISSP_FREEMAIL 1.644
-score FROM_MISSP_MSFT 2.967
-score FROM_MISSP_REPLYTO 2.397
+score FROM_MISSP_DYNIP 2.615
+score FROM_MISSP_EH_MATCH 1.226
+score FROM_MISSP_FREEMAIL 1.533
+score FROM_MISSP_MSFT 0.060
+score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_SPF_FAIL 1.999
-score FROM_MISSP_TO_UNDISC 2.179
-score FROM_MISSP_USER 1.236
+score FROM_MISSP_TO_UNDISC 1.793
+score FROM_MISSP_USER 1.689
score FROM_MISSP_XPRIO 2.499
score FROM_NAME_EQ_TO_G_DRIVE 0.001
-score FROM_NTLD_REPLY_FREEMAIL 1.751
-score FROM_PAYPAL_SPOOF 1.599
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_NTLD_REPLY_FREEMAIL 1.198
+score FROM_PAYPAL_SPOOF 1.584
+score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_UNBAL1 2.500
+score FROM_UNBAL1 2.499
score FSL_BULK_SIG 0.001
-score FSL_CTYPE_WIN1251 3.699
-score FSL_HELO_FAKE 3.046
-score FSL_NEW_HELO_USER 1.744
-score FSL_THIS_IS_ADV 0.870
+score FSL_CTYPE_WIN1251 3.700
+score FSL_HELO_FAKE 3.259
+score FSL_NEW_HELO_USER 1.426
+score FSL_THIS_IS_ADV 0.882
score FUZZY_BITCOIN 2.499
score FUZZY_CLICK_HERE 2.999
-score FUZZY_WALLET 1.129
-score GB_BITCOIN_CP 3.000
-score GB_BITCOIN_NH 2.253
-score GB_FREEMAIL_DISPTO 0.499
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.500
-score GB_GOOGLE_OBFU 0.750
-score GB_LINKED_IMG_NOT_RCVD_LINK 0.164
-score GB_MONERO_CP 0.001
+score FUZZY_WALLET 2.218
+score GB_BITCOIN_CP 2.999
+score GB_BITCOIN_NH 1.808
+score GB_FREEMAIL_DISPTO 0.500
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
+score GB_GOOGLE_OBFU 0.749
+score GB_LINKED_IMG_NOT_RCVD_LINK 1.742
+score GB_MONERO_CP 1.968
score GOOG_REDIR_HTML_ONLY 1.999
score GOOG_REDIR_NORDNS 3.199
score HDRS_LCASE 0.100
score HDRS_LCASE_IMGONLY 0.100
-score HDR_ORDER_FTSDMCXX_DIRECT 0.272
+score HDR_ORDER_FTSDMCXX_DIRECT 1.215
score HDR_ORDER_FTSDMCXX_NORDNS 3.499
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249
score HELO_MISC_IP 0.001
-score HELO_NO_DOMAIN 1.037
-score HK_LOTTO 0.477
+score HELO_NO_DOMAIN 1.039
+score HK_LOTTO 0.338
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 1.000
-score HK_RCVD_IP_MULTICAST 0.495
+score HK_RANDOM_REPLYTO 0.999
+score HK_RCVD_IP_MULTICAST 0.491
score HK_SCAM 1.999
-score HK_WIN 0.999
-score HOSTED_IMG_DIRECT_MX 1.030
-score HOSTED_IMG_MULTI 2.236
-score HTML_OFF_PAGE 1.998
-score HTML_SINGLET_MANY 1.928
-score HTML_TEXT_INVISIBLE_STYLE 2.017
+score HK_WIN 0.875
+score HOSTED_IMG_DIRECT_MX 1.488
+score HOSTED_IMG_MULTI 1.391
+score HTML_OFF_PAGE 1.993
+score HTML_SINGLET_MANY 1.963
+score HTML_TEXT_INVISIBLE_STYLE 2.052
score IMG_ONLY_FM_DOM_INFO 2.499
score KB_FORGED_MOZ4 0.001
-score KHOP_FAKE_EBAY 0.038
-score KHOP_HELO_FCRDNS 0.399
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
-score LONG_HEX_URI 1.606
-score LONG_IMG_URI 2.553
+score KHOP_FAKE_EBAY 0.001
+score KHOP_HELO_FCRDNS 0.400
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 1.617
+score LONG_IMG_URI 2.538
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
-score MALFORMED_FREEMAIL 1.310
-score MALF_HTML_B64 2.744
-score MALWARE_NORDNS 2.003
-score MALWARE_PASSWORD 3.205
-score MAY_BE_FORGED 0.001 # force non-zero
-score MILLION_HUNDRED 2.799
-score MIMEOLE_DIRECT_TO_MX 0.460
+score LOTTO_AGENT 1.236
+score MALFORMED_FREEMAIL 1.278
+score MALF_HTML_B64 2.160
+score MALWARE_NORDNS 3.450
+score MALWARE_PASSWORD 3.333
+score MAY_BE_FORGED 0.001
+score MILLION_HUNDRED 2.800
+score MIMEOLE_DIRECT_TO_MX 1.085
score MIME_NO_TEXT 1.999
score MIXED_ES 2.399
-score MONERO_EXTORT_01 3.299
+score MONERO_EXTORT_01 3.159
score MONEY_ATM_CARD 2.599
-score MONEY_FORM 0.333
-score MONEY_FORM_SHORT 1.161
-score MONEY_FRAUD_3 2.254
-score MONEY_FRAUD_5 0.001 # force non-zero
-score MONEY_FRAUD_8 3.211
+score MONEY_FORM 0.335
+score MONEY_FORM_SHORT 1.136
+score MONEY_FRAUD_3 2.255
+score MONEY_FRAUD_5 0.001
+score MONEY_FRAUD_8 3.556
score MONEY_FROM_41 1.999
-score MSM_PRIO_REPTO 1.288
-score NORDNS_LOW_CONTRAST 1.694
+score MSM_PRIO_REPTO 1.155
+score NORDNS_LOW_CONTRAST 1.659
score NO_FM_NAME_IP_HOSTN 0.001
-score NSL_RCVD_FROM_USER 0.041
-score NSL_RCVD_HELO_USER 1.042
-score NUMBERONLY_BITCOIN_EXP 1.371
-score OBFU_BITCOIN 2.861
+score NSL_RCVD_FROM_USER 3.261
+score NSL_RCVD_HELO_USER 1.998
+score NUMBERONLY_BITCOIN_EXP 1.376
+score OBFU_BITCOIN 1.849
score ONLINE_MKTG_CNSLT 2.699
score PDS_BTC_ID 0.499
-score PDS_BTC_NTLD 1.858
-score PDS_DBL_URL_ILLEGAL_CHARS 1.702
-score PDS_DBL_URL_TNB_RUNON 1.999
+score PDS_BTC_NTLD 1.999
+score PDS_DBL_URL_ILLEGAL_CHARS 1.279
+score PDS_DBL_URL_TNB_RUNON 1.728
score PDS_FRNOM_TODOM_NAKED_TO 1.499
score PDS_FROM_2_EMAILS 1.799
score PDS_FROM_NAME_TO_DOMAIN 0.999
-score PDS_HELO_SPF_FAIL 1.430
+score PDS_HELO_SPF_FAIL 0.467
score PDS_HP_HELO_NORDNS 0.001
score PDS_NAKED_TO_NUMERO 1.999
score PDS_PHPEXP_BOT 1.499
score PDS_PHPE_URISHORTENER 1.999
-score PDS_PHP_EVAL 1.500
+score PDS_PHP_EVAL 1.499
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.490
+score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.151
score PDS_TONAME_EQ_TOLOCAL_SHORT 1.999
score PDS_TONAME_EQ_TOLOCAL_VSHORT 0.999
-score PDS_TO_EQ_FROM_NAME 3.055
+score PDS_TO_EQ_FROM_NAME 3.054
score PDS_X_PHP_WP_EXP 1.499
score PHP_ORIG_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 1.563
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RATWARE_NO_RDNS 1.907
+score RCVD_IN_MSPIKE_H2 -0.001
+score RDNS_NUM_TLD_XM 2.743
score SEO_SUSP_NTLD 1.199
score SERGIO_SUBJECT_PORN014 3.099
-score SERGIO_SUBJECT_VIAGRA01 0.001 # force non-zero
+score SERGIO_SUBJECT_VIAGRA01 0.001
score SHORT_BODY_G_DRIVE_DYN 1.499
score SHORT_SHORTNER 1.999
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEMAIL 1.999
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 2.000
-score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 1.827
+score SPOOFED_FREEM_REPTO 1.999
+score STATIC_XPRIO_OLE 0.001
+score STOCK_LOW_CONTRAST 1.859
score SUBJ_OBFU_PUNCT_FEW 0.749
score SUBJ_OBFU_PUNCT_MANY 1.749
-score TAB_IN_FROM 0.170
-score TEQF_USR_MSGID_MALF 2.158
+score TAB_IN_FROM 0.035
+score TEQF_USR_MSGID_MALF 2.329
score THIS_AD 1.899
-score THIS_IS_ADV_SUSP_NTLD 1.461
-score TONOM_EQ_TOLOC_SHRT_PSHRTNER 0.513
+score THIS_IS_ADV_SUSP_NTLD 0.126
+score TONOM_EQ_TOLOC_SHRT_PSHRTNER 1.125
score TONOM_EQ_TOLOC_SHRT_SHRTNER 1.499
score TO_EQ_FM_DIRECT_MX 2.499
score TO_EQ_FM_DOM_HTML_IMG 0.001
-score TO_EQ_FM_DOM_HTML_ONLY 1.288
-score TO_EQ_FM_DOM_SPF_FAIL 0.035
-score TO_EQ_FM_HTML_ONLY 0.001
-score TO_EQ_FM_SPF_FAIL 1.542
+score TO_EQ_FM_DOM_HTML_ONLY 1.267
+score TO_EQ_FM_DOM_SPF_FAIL 0.514
+score TO_EQ_FM_HTML_ONLY 0.014
+score TO_EQ_FM_SPF_FAIL 1.061
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 0.768
-score TO_NO_BRKTS_DYNIP 2.310
+score TO_NO_BRKTS_DYNIP 2.315
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 0.834
+score TO_NO_BRKTS_HTML_IMG 0.836
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 1.829
-score TVD_IP_HEX 1.364
-score TVD_IP_SING_HEX 1.975
+score TO_NO_BRKTS_NORDNS_HTML 1.857
+score TVD_IP_HEX 2.094
+score TVD_IP_SING_HEX 1.024
score TVD_SPACE_ENCODED 0.001
score TVD_SPACE_RATIO_MINFP 2.499
score UNICODE_OBFU_ASC 2.499
-score UNICODE_OBFU_DOM_NO_BODY 3.749
-score UPGRADE_MAILBOX 1.799
+score UNICODE_OBFU_DOM_NO_BODY 3.750
+score UPGRADE_MAILBOX 1.699
score URI_GOOGLE_PROXY 2.399
-score URI_HEX_IP 1.793
+score URI_HEX_IP 1.716
score URI_ONLY_MSGID_MALF 0.059
-score URI_PHISH 2.802
+score URI_PHISH 2.901
score URI_PHP_REDIR 3.499
-score URI_TRY_3LD 0.712
-score URI_WP_HACKED 2.002
+score URI_TRY_3LD 0.710
+score URI_WP_HACKED 1.997
score URI_WP_HACKED_2 2.499
score XPRIO_SHORT_SUBJ 2.499
-score XPRIO_URL_SHORTNER 0.253
-score YOU_INHERIT 2.291
+score XPRIO_URL_SHORTNER 0.256
+score YOU_INHERIT 2.031
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -302,7 +302,6 @@ score PUMPDUMP 1.0
score PUMPDUMP_MULTI 1.000
score RAND_HEADER_MANY 1.000
score RDNS_NUM_TLD_ATCHNX 1.000
-score RDNS_NUM_TLD_XM 1.000
score SHOPIFY_IMG_NOT_RCVD_SFY 1.000
score SHORT_IMG_SUSP_NTLD 1.000
score SPOOFED_FREEM_REPTO_CHN 1.000