You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/04/08 02:43:21 UTC

svn commit: r1899656 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Author: spamassassin_role
Date: Fri Apr  8 02:43:21 2022
New Revision: 1899656

URL: http://svn.apache.org/viewvc?rev=1899656&view=rev
Log:
updated scores for revision 1899644 active rules added since last mass-check

Modified:
    spamassassin/trunk/rulesrc/scores/72_scores.cf
    spamassassin/trunk/rulesrc/scores/scores-set0
    spamassassin/trunk/rulesrc/scores/scores-set1
    spamassassin/trunk/rulesrc/scores/scores-set2
    spamassassin/trunk/rulesrc/scores/scores-set3
    spamassassin/trunk/rulesrc/scores/stats-set0
    spamassassin/trunk/rulesrc/scores/stats-set1

Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1899656&r1=1899655&r2=1899656&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Fri Apr  8 02:43:21 2022
@@ -1,7 +1,7 @@
 score AC_BR_BONANZA                         0.001 0.001 0.001 0.001
 score AC_DIV_BONANZA                        0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS                     2.999 2.996 2.999 2.996
-score AC_HTML_NONSENSE_TAGS                 1.999 1.997 1.999 1.997
+score AC_FROM_MANY_DOTS                     2.999 2.999 2.999 2.999
+score AC_HTML_NONSENSE_TAGS                 1.999 1.999 1.999 1.999
 score AC_POST_EXTRAS                        1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS1               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS10              1.000 1.000 1.000 1.000
@@ -12,293 +12,296 @@ score AC_SPAMMY_URI_PATTERNS3
 score AC_SPAMMY_URI_PATTERNS4               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS8               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS9               1.000 1.000 1.000 1.000
-score ADMITS_SPAM                           3.799 3.356 3.799 3.356
+score ADMITS_SPAM                           3.799 2.773 3.799 2.773
 score ADULT_DATING_COMPANY                  10.001 10.001 10.001 10.001
 score ADVANCE_FEE_2_NEW_FORM                1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_FRM_MNY             0.547 1.284 0.547 1.284
-score ADVANCE_FEE_2_NEW_MONEY               1.999 1.997 1.999 1.997
-score ADVANCE_FEE_3_NEW                     3.300 3.067 3.300 3.067
-score ADVANCE_FEE_3_NEW_FRM_MNY             1.336 0.001 1.336 0.001
-score ADVANCE_FEE_3_NEW_MONEY               2.999 1.544 2.999 1.544
-score ADVANCE_FEE_4_NEW                     2.499 2.397 2.499 2.397
-score ADVANCE_FEE_4_NEW_FRM_MNY             2.502 1.924 2.502 1.924
-score ADVANCE_FEE_4_NEW_MONEY               1.047 0.001 1.047 0.001
-score ADVANCE_FEE_5_NEW                     2.499 0.996 2.499 0.996
+score ADVANCE_FEE_2_NEW_FRM_MNY             2.499 1.222 2.499 1.222
+score ADVANCE_FEE_2_NEW_MONEY               1.999 1.999 1.999 1.999
+score ADVANCE_FEE_3_NEW                     3.307 2.992 3.307 2.992
+score ADVANCE_FEE_3_NEW_FRM_MNY             0.001 0.001 0.001 0.001
+score ADVANCE_FEE_3_NEW_MONEY               2.899 1.546 2.899 1.546
+score ADVANCE_FEE_4_NEW                     2.399 2.399 2.399 2.399
+score ADVANCE_FEE_4_NEW_FRM_MNY             0.668 2.499 0.668 2.499
+score ADVANCE_FEE_4_NEW_MONEY               1.808 0.001 1.808 0.001
+score ADVANCE_FEE_5_NEW                     2.399 1.175 2.399 1.175
 score ADVANCE_FEE_5_NEW_FRM_MNY             0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_MONEY               0.465 0.001 0.465 0.001
-score AD_PREFS                              0.244 0.159 0.244 0.159
+score ADVANCE_FEE_5_NEW_MONEY               0.770 0.001 0.770 0.001
+score AD_PREFS                              0.001 0.094 0.001 0.094
 score ALIBABA_IMG_NOT_RCVD_ALI              1.000 1.000 1.000 1.000
-score AMAZON_IMG_NOT_RCVD_AMZN              2.499 2.497 2.499 2.497
+score AMAZON_IMG_NOT_RCVD_AMZN              2.499 2.499 2.499 2.499
 score APP_DEVELOPMENT_FREEM                 1.000 1.000 1.000 1.000
-score APP_DEVELOPMENT_NORDNS                1.999 0.195 1.999 0.195
+score APP_DEVELOPMENT_NORDNS                1.999 0.001 1.999 0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2          0.001 0.001 0.001 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5          1.180 1.180 1.180 1.180
-score AXB_XM_FORGED_OL2600                  1.909 0.193 1.909 0.193
-score AXB_X_FF_SEZ_S                        2.999 2.796 2.999 2.796
+score AXB_XMAILER_MIMEOLE_OL_1ECD5          1.808 1.702 1.808 1.702
+score AXB_XM_FORGED_OL2600                  0.994 1.755 0.994 1.755
 score BEBEE_IMG_NOT_RCVD_BB                 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM                   0.087 0.373 0.087 0.373
-score BIGNUM_EMAILS_MANY                    2.999 2.996 2.999 2.996
-score BILLION_OVERLAP                       -0.367 -0.712 -0.367 -0.712
+score BIGNUM_EMAILS_FREEM                   2.914 0.602 2.914 0.602
+score BIGNUM_EMAILS_MANY                    2.999 2.999 2.999 2.999
+score BILLION_OVERLAP                       -0.573 -0.232 -0.573 -0.232
 score BITCOIN_BOMB                          1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE                      1.863 0.837 1.863 0.837
-score BITCOIN_EXTORT_01                     4.498 4.755 4.498 4.755
+score BITCOIN_DEADLINE                      1.924 1.922 1.924 1.922
+score BITCOIN_EXTORT_01                     4.492 4.999 4.492 4.999
 score BITCOIN_EXTORT_02                     1.000 1.000 1.000 1.000
 score BITCOIN_IMGUR                         1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML                     3.500 2.977 3.500 2.977
-score BITCOIN_MALWARE                       1.000 1.000 1.000 1.000
-score BITCOIN_OBFU_SUBJ                     2.140 1.750 2.140 1.750
+score BITCOIN_MALF_HTML                     3.499 3.316 3.499 3.316
+score BITCOIN_MALWARE                       1.000 2.979 1.000 2.979
+score BITCOIN_OBFU_SUBJ                     3.499 0.668 3.499 0.668
 score BITCOIN_ONAN                          1.000 1.000 1.000 1.000
 score BITCOIN_PAY_ME                        1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_01                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02                       2.499 2.497 2.499 2.497
+score BITCOIN_SPAM_02                       2.499 2.499 2.499 2.499
 score BITCOIN_SPAM_03                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_04                       1.499 1.499 1.499 1.499
 score BITCOIN_SPAM_05                       0.001 1.000 0.001 1.000
 score BITCOIN_SPAM_06                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_07                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_08                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_09                       1.499 1.498 1.499 1.498
+score BITCOIN_SPAM_09                       1.499 1.499 1.499 1.499
 score BITCOIN_SPAM_10                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_11                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_12                       1.000 1.000 1.000 1.000
 score BITCOIN_SPF_ONLYALL                   0.001 1.000 0.001 1.000
-score BITCOIN_XPRIO                         2.499 2.497 2.499 2.497
-score BITCOIN_YOUR_INFO                     2.999 2.996 2.999 2.996
-score BODY_EMPTY                            1.904 0.001 1.904 0.001
-score BODY_SINGLE_URI                       2.499 0.631 2.499 0.631
+score BITCOIN_XPRIO                         2.500 2.499 2.500 2.499
+score BITCOIN_YOUR_INFO                     2.999 2.999 2.999 2.999
+score BODY_EMAIL_419_FRAUD_GM               1.000 0.001 1.000 0.001
+score BODY_EMPTY                            1.896 0.001 1.896 0.001
+score BODY_SINGLE_URI                       2.500 0.539 2.500 0.539
 score BODY_URI_ONLY                         1.000 2.999 1.000 2.999
-score BOGUS_MIME_VERSION                    3.500 3.267 3.500 3.267
-score BOGUS_MSM_HDRS                        2.243 1.000 2.243 1.000
+score BOGUS_MIME_VERSION                    2.853 3.267 2.853 3.267
+score BOGUS_MSM_HDRS                        1.000 1.000 1.000 1.000
 score BOMB_FREEM                            1.000 1.000 1.000 1.000
 score BOMB_MONEY                            1.000 1.000 1.000 1.000
 score BTC_ORG                               1.000 1.000 1.000 1.000
 score BULK_RE_SUSP_NTLD                     1.000 1.000 1.000 1.000
-score CANT_SEE_AD                           2.500 1.000 2.500 1.000
-score CK_HELO_GENERIC                       0.250 0.001 0.250 0.001
+score CANT_SEE_AD                           2.499 2.300 2.499 2.300
+score CK_HELO_GENERIC                       0.249 0.001 0.249 0.001
 score COMMENT_GIBBERISH                     1.000 1.000 1.000 1.000
 score COMPENSATION                          1.000 1.000 1.000 1.000
-score CONTENT_AFTER_HTML                    2.499 2.497 2.499 2.497
-score CONTENT_AFTER_HTML_WEAK               1.499 1.498 1.499 1.498
+score CONTENT_AFTER_HTML                    2.499 2.499 2.499 2.499
+score CONTENT_AFTER_HTML_WEAK               1.499 1.499 1.499 1.499
 score CTE_8BIT_MISMATCH                     0.999 0.001 0.999 0.001
-score DATE_IN_FUTURE_96_Q                   0.426 1.575 0.426 1.575
+score DATE_IN_FUTURE_96_Q                   0.001 0.227 0.001 0.227
 score DAY_I_EARNED                          1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY                      3.399 1.908 3.399 1.908
-score DKIMWL_BL                             0.001 2.996 0.001 2.996
+score DEAR_BENEFICIARY                      3.256 1.667 3.256 1.667
+score DKIMWL_BL                             0.001 2.999 0.001 2.999
 score DKIMWL_BLOCKED                        0.001 0.001 0.001 0.001
 score DKIMWL_WL_HIGH                        0.001 -0.001 0.001 -0.001
 score DKIMWL_WL_MED                         0.001 -0.001 0.001 -0.001
-score DKIMWL_WL_MEDHI                       0.001 -0.545 0.001 -0.545
-score DOS_RCVD_IP_TWICE_B                   3.299 3.196 3.299 3.196
+score DKIMWL_WL_MEDHI                       0.001 -0.483 0.001 -0.483
+score DOS_RCVD_IP_TWICE_B                   3.300 3.199 3.300 3.199
 score DOTGOV_IMAGE                          1.000 1.000 1.000 1.000
 score DYNAMIC_IMGUR                         1.000 1.000 1.000 1.000
 score EBAY_IMG_NOT_RCVD_EBAY                1.000 1.000 1.000 1.000
 score ENCRYPTED_MESSAGE                     -1.000 -1.000 -1.000 -1.000
-score END_FUTURE_EMAILS                     1.000 2.244 1.000 2.244
+score END_FUTURE_EMAILS                     1.000 2.247 1.000 2.247
 score ENVFROM_GOOG_TRIX                     1.000 1.000 1.000 1.000
 score FACEBOOK_IMG_NOT_RCVD_FB              1.000 1.000 1.000 1.000
-score FAKE_REPLY_A1                         3.109 1.544 3.109 1.544
-score FAKE_REPLY_B                          2.029 2.061 2.029 2.061
+score FAKE_REPLY_A1                         0.001 1.303 0.001 1.303
+score FAKE_REPLY_B                          2.990 1.235 2.990 1.235
 score FBI_MONEY                             1.000 1.000 1.000 1.000
 score FBI_SPOOF                             1.000 1.000 1.000 1.000
-score FILL_THIS_FORM                        1.899 0.231 1.899 0.231
+score FILL_THIS_FORM                        1.800 0.225 1.800 0.225
 score FONT_INVIS_DIRECT                     0.001 0.001 0.001 0.001
 score FONT_INVIS_DOTGOV                     1.000 1.000 1.000 1.000
-score FONT_INVIS_HTML_NOHTML                2.999 2.996 2.999 2.996
-score FONT_INVIS_LONG_LINE                  1.439 1.088 1.439 1.088
-score FONT_INVIS_MSGID                      0.001 1.304 0.001 1.304
-score FONT_INVIS_NORDNS                     1.557 1.566 1.557 1.566
+score FONT_INVIS_HTML_NOHTML                2.999 2.999 2.999 2.999
+score FONT_INVIS_LONG_LINE                  1.686 1.094 1.686 1.094
+score FONT_INVIS_MSGID                      0.001 1.280 0.001 1.280
+score FONT_INVIS_NORDNS                     2.300 0.800 2.300 0.800
 score FONT_INVIS_POSTEXTRAS                 1.000 1.000 1.000 1.000
-score FORM_FRAUD                            1.000 0.998 1.000 0.998
-score FORM_FRAUD_5                          3.299 3.196 3.299 3.196
+score FORM_FRAUD                            1.000 0.999 1.000 0.999
+score FORM_FRAUD_5                          3.299 3.199 3.299 3.199
 score FOUND_YOU                             3.249 3.249 3.249 3.249
-score FREEMAIL_FORGED_FROMDOMAIN            0.250 0.248 0.250 0.248
+score FREEMAIL_FORGED_FROMDOMAIN            0.249 0.249 0.249 0.249
 score FREEM_FRNUM_UNICD_EMPTY               1.000 1.000 1.000 1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB            1.000 1.000 1.000 1.000
-score FROMSPACE                             3.399 3.196 3.399 3.196
-score FROM_2_EMAILS_SHORT                   1.290 0.568 1.290 0.568
-score FROM_ADDR_WS                          2.999 2.996 2.999 2.996
+score FROMSPACE                             3.400 3.199 3.400 3.199
+score FROM_2_EMAILS_SHORT                   1.395 0.840 1.395 0.840
+score FROM_ADDR_WS                          2.999 2.999 2.999 2.999
 score FROM_BANK_NOAUTH                      0.001 1.000 0.001 1.000
 score FROM_FMBLA_NDBLOCKED                  0.001 0.001 0.001 0.001
-score FROM_FMBLA_NEWDOM                     0.001 1.498 0.001 1.498
-score FROM_FMBLA_NEWDOM14                   0.001 0.998 0.001 0.998
-score FROM_FMBLA_NEWDOM28                   0.001 0.798 0.001 0.798
+score FROM_FMBLA_NEWDOM                     0.001 1.499 0.001 1.499
+score FROM_FMBLA_NEWDOM14                   0.001 0.999 0.001 0.999
+score FROM_FMBLA_NEWDOM28                   0.001 0.799 0.001 0.799
 score FROM_GOV_DKIM_AU                      0.001 -1.000 0.001 -1.000
 score FROM_GOV_REPLYTO_FREEMAIL             0.001 1.000 0.001 1.000
 score FROM_GOV_SPOOF                        0.001 1.000 0.001 1.000
-score FROM_MISSPACED                        1.999 1.997 1.999 1.997
-score FROM_MISSP_DYNIP                      2.119 2.178 2.119 2.178
-score FROM_MISSP_EH_MATCH                   1.999 1.997 1.999 1.997
-score FROM_MISSP_FREEMAIL                   2.407 0.001 2.407 0.001
-score FROM_MISSP_MSFT                       0.001 0.001 0.001 0.001
-score FROM_MISSP_PHISH                      3.499 2.407 3.499 2.407
+score FROM_MISSPACED                        1.999 1.999 1.999 1.999
+score FROM_MISSP_DYNIP                      0.965 0.001 0.965 0.001
+score FROM_MISSP_EH_MATCH                   1.999 1.999 1.999 1.999
+score FROM_MISSP_FREEMAIL                   3.199 0.001 3.199 0.001
+score FROM_MISSP_MSFT                       0.429 0.001 0.429 0.001
+score FROM_MISSP_PHISH                      2.708 2.018 2.708 2.018
+score FROM_MISSP_REPLYTO                    1.000 0.001 1.000 0.001
 score FROM_MISSP_SPF_FAIL                   0.001 0.001 0.001 0.001
-score FROM_MISSP_TO_UNDISC                  1.281 1.165 1.281 1.165
+score FROM_MISSP_TO_UNDISC                  0.863 0.456 0.863 0.456
 score FROM_MISSP_USER                       0.001 0.001 0.001 0.001
-score FROM_MISSP_XPRIO                      0.396 0.001 0.396 0.001
-score FROM_MULTI_NORDNS                     1.220 1.594 1.220 1.594
+score FROM_MISSP_XPRIO                      0.401 0.001 0.401 0.001
+score FROM_MULTI_NORDNS                     2.249 1.604 2.249 1.604
 score FROM_NEWDOM_BTC                       0.001 1.000 0.001 1.000
 score FROM_NTLD_LINKBAIT                    1.000 1.000 1.000 1.000
-score FROM_NTLD_REPLY_FREEMAIL              1.999 1.000 1.999 1.000
+score FROM_NTLD_REPLY_FREEMAIL              1.676 1.000 1.676 1.000
 score FROM_NUMBERO_NEWDOMAIN                0.001 1.000 0.001 1.000
 score FROM_NUMERIC_TLD                      1.000 1.000 1.000 1.000
-score FROM_PAYPAL_SPOOF                     0.001 1.597 0.001 1.597
-score FROM_SUSPICIOUS_NTLD                  0.500 0.499 0.500 0.499
-score FROM_SUSPICIOUS_NTLD_FP               2.000 0.725 2.000 0.725
-score FROM_UNBAL1                           2.299 2.197 2.299 2.197
-score FROM_WSP_TRAIL                        2.499 0.001 2.499 0.001
-score FSL_BULK_SIG                          0.001 1.104 0.001 1.104
-score FSL_CTYPE_WIN1251                     1.917 1.269 1.917 1.269
+score FROM_PAYPAL_SPOOF                     0.001 1.599 0.001 1.599
+score FROM_SUSPICIOUS_NTLD                  0.499 0.499 0.499 0.499
+score FROM_SUSPICIOUS_NTLD_FP               1.999 0.732 1.999 0.732
+score FROM_UNBAL1                           2.079 2.199 2.079 2.199
+score FROM_WSP_TRAIL                        2.399 0.001 2.399 0.001
+score FSL_BULK_SIG                          0.001 1.043 0.001 1.043
+score FSL_CTYPE_WIN1251                     1.871 2.577 1.871 2.577
 score FSL_NEW_HELO_USER                     0.001 0.001 0.001 0.001
-score FUZZY_AMAZON                          2.399 2.331 2.399 2.331
-score FUZZY_CLICK_HERE                      2.399 2.297 2.399 2.297
-score FUZZY_WALLET                          3.200 2.398 3.200 2.398
-score GAPPY_GENITALIA                       1.643 0.654 1.643 0.654
+score FUZZY_AMAZON                          2.299 1.957 2.299 1.957
+score FUZZY_CLICK_HERE                      2.199 2.399 2.199 2.399
+score FUZZY_WALLET                          3.199 2.398 3.199 2.398
+score GAPPY_GENITALIA                       1.879 0.550 1.879 0.550
 score GAPPY_SALES_LEADS_FREEM               1.000 1.000 1.000 1.000
-score GB_BITCOIN_CP                         0.692 1.425 0.692 1.425
-score GB_FAKE_RF_SHORT                      2.000 0.001 2.000 0.001
+score GB_BITCOIN_CP                         0.591 1.254 0.591 1.254
+score GB_FAKE_RF_SHORT                      1.999 0.010 1.999 0.010
 score GB_FORGED_MUA_POSTFIX                 1.000 1.000 1.000 1.000
 score GB_FREEMAIL_DISPTO                    0.499 0.499 0.499 0.499
-score GB_FREEMAIL_DISPTO_NOTFREEM           0.499 0.498 0.499 0.498
+score GB_FREEMAIL_DISPTO_NOTFREEM           0.499 0.499 0.499 0.499
 score GB_GOOGLE_OBFUR                       0.750 0.750 0.750 0.750
+score GB_GOOG_IMG_NOT_RCVD_GOOG             2.316 1.254 2.316 1.254
 score GOOGLE_DOCS_PHISH                     1.000 1.000 1.000 1.000
 score GOOGLE_DOCS_PHISH_MANY                1.000 1.000 1.000 1.000
 score GOOGLE_DOC_SUSP                       1.000 1.000 1.000 1.000
 score GOOGLE_DRIVE_REPLY_BAD_NTLD           1.000 1.000 1.000 1.000
 score GOOG_MALWARE_DNLD                     1.000 1.000 1.000 1.000
-score GOOG_REDIR_HTML_ONLY                  1.999 1.997 1.999 1.997
-score GOOG_REDIR_NORDNS                     2.602 3.120 2.602 3.120
-score GOOG_STO_EMAIL_PHISH                  2.219 1.500 2.219 1.500
-score GOOG_STO_HTML_PHISH                   1.392 2.724 1.392 2.724
+score GOOG_REDIR_HTML_ONLY                  1.999 1.999 1.999 1.999
+score GOOG_REDIR_NORDNS                     2.602 3.127 2.602 3.127
+score GOOG_STO_EMAIL_PHISH                  2.415 2.959 2.415 2.959
+score GOOG_STO_HTML_PHISH                   2.685 0.684 2.685 0.684
 score GOOG_STO_HTML_PHISH_MANY              1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_HTML                     1.000 1.000 1.000 1.000
-score GOOG_STO_IMG_NOHTML                   2.499 0.729 2.499 0.729
-score GOOG_STO_NOIMG_HTML                   2.999 2.941 2.999 2.941
-score HAS_X_NO_RELAY                        2.499 1.766 2.499 1.766
-score HAS_X_OUTGOING_SPAM_STAT              1.999 1.730 1.999 1.730
-score HDRS_LCASE_IMGONLY                    0.100 0.098 0.100 0.098
-score HDRS_MISSP                            2.499 2.146 2.499 2.146
-score HDR_ORDER_FTSDMCXX_DIRECT             1.999 0.466 1.999 0.466
-score HDR_ORDER_FTSDMCXX_NORDNS             2.155 3.120 2.155 3.120
-score HEADER_FROM_DIFFERENT_DOMAINS         0.250 0.248 0.250 0.248
+score GOOG_STO_IMG_NOHTML                   2.499 0.150 2.499 0.150
+score GOOG_STO_NOIMG_HTML                   2.999 2.949 2.999 2.949
+score HAS_X_NO_RELAY                        2.499 1.719 2.499 1.719
+score HAS_X_OUTGOING_SPAM_STAT              1.999 1.063 1.999 1.063
+score HDRS_LCASE_IMGONLY                    0.100 0.100 0.100 0.100
+score HDRS_MISSP                            2.500 1.713 2.500 1.713
+score HDR_ORDER_FTSDMCXX_DIRECT             1.999 0.578 1.999 0.578
+score HDR_ORDER_FTSDMCXX_NORDNS             2.595 3.206 2.595 3.206
+score HEADER_FROM_DIFFERENT_DOMAINS         0.250 0.250 0.250 0.250
 score HELO_NO_DOMAIN                        0.001 0.001 0.001 0.001
 score HEXHASH_WORD                          1.000 1.000 1.000 1.000
 score HK_CTE_RAW                            1.000 1.000 1.000 1.000
-score HK_LOTTO                              0.546 0.999 0.546 0.999
-score HK_NAME_FROM                          0.999 0.509 0.999 0.509
-score HK_NAME_MR_MRS                        0.999 0.998 0.999 0.998
-score HK_RANDOM_ENVFROM                     1.000 0.998 1.000 0.998
-score HK_RANDOM_FROM                        0.999 0.998 0.999 0.998
-score HK_RANDOM_REPLYTO                     1.000 0.998 1.000 0.998
+score HK_LOTTO                              0.426 0.999 0.426 0.999
+score HK_NAME_FROM                          0.999 0.894 0.999 0.894
+score HK_NAME_MR_MRS                        0.999 1.000 0.999 1.000
+score HK_RANDOM_ENVFROM                     1.000 0.999 1.000 0.999
+score HK_RANDOM_FROM                        1.000 0.999 1.000 0.999
+score HK_RANDOM_REPLYTO                     0.999 0.999 0.999 0.999
 score HK_RCVD_IP_MULTICAST                  1.000 1.000 1.000 1.000
-score HK_SCAM                               1.999 0.001 1.999 0.001
-score HK_WIN                                0.443 0.105 0.443 0.105
-score HOSTED_IMG_DIRECT_MX                  3.499 1.164 3.499 1.164
+score HK_SCAM                               1.970 0.001 1.970 0.001
+score HK_WIN                                0.358 0.537 0.358 0.537
+score HOSTED_IMG_DIRECT_MX                  3.500 1.437 3.500 1.437
 score HOSTED_IMG_DQ_UNSUB                   1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM                      2.565 1.842 2.565 1.842
+score HOSTED_IMG_FREEM                      2.311 1.971 2.311 1.971
 score HOSTED_IMG_MULTI                      1.000 1.000 1.000 1.000
-score HOSTED_IMG_MULTI_PUB_01               2.999 2.720 2.999 2.720
-score HTML_ENTITY_ASCII                     2.225 2.162 2.225 2.162
+score HOSTED_IMG_MULTI_PUB_01               2.999 2.945 2.999 2.945
+score HTML_ENTITY_ASCII                     0.685 0.611 0.685 0.611
 score HTML_ENTITY_ASCII_TINY                1.000 1.000 1.000 1.000
-score HTML_FONT_TINY_NORDNS                 1.999 1.448 1.999 1.448
-score HTML_OFF_PAGE                         2.999 2.555 2.999 2.555
+score HTML_FONT_TINY_NORDNS                 2.000 1.354 2.000 1.354
+score HTML_OFF_PAGE                         2.999 2.374 2.999 2.374
 score HTML_SHRT_CMNT_OBFU_MANY              1.000 1.000 1.000 1.000
-score HTML_SINGLET_MANY                     1.000 1.603 1.000 1.603
-score HTML_TAG_BALANCE_CENTER               4.099 2.390 4.099 2.390
-score HTML_TEXT_INVISIBLE_FONT              1.000 1.244 1.000 1.244
+score HTML_SINGLET_MANY                     1.000 1.585 1.000 1.585
+score HTML_TAG_BALANCE_CENTER               4.099 2.392 4.099 2.392
+score HTML_TEXT_INVISIBLE_FONT              1.000 1.271 1.000 1.271
 score HTML_TEXT_INVISIBLE_STYLE             3.499 2.803 3.499 2.803
-score IMG_ONLY_FM_DOM_INFO                  1.618 0.475 1.618 0.475
-score JH_SPAMMY_HEADERS                     3.499 3.496 3.499 3.496
+score IMG_ONLY_FM_DOM_INFO                  1.621 0.481 1.621 0.481
+score JH_SPAMMY_HEADERS                     3.499 3.499 3.499 3.499
 score JH_SPAMMY_PATTERN01                   1.000 1.000 1.000 1.000
 score JH_SPAMMY_PATTERN02                   1.000 1.000 1.000 1.000
-score KHOP_HELO_FCRDNS                      0.400 0.333 0.400 0.333
+score KHOP_HELO_FCRDNS                      0.400 0.396 0.400 0.396
 score LINKEDIN_IMG_NOT_RCVD_LNKN            1.000 1.000 1.000 1.000
 score LIST_PRTL_PUMPDUMP                    1.000 1.000 1.000 1.000
 score LIST_PRTL_SAME_USER                   1.000 1.000 1.000 1.000
-score LONGLN_LOW_CONTRAST                   2.499 2.497 2.499 2.497
-score LONG_HEX_URI                          2.602 0.001 2.602 0.001
-score LONG_IMG_URI                          1.937 0.828 1.937 0.828
-score LONG_INVISIBLE_TEXT                   0.310 1.451 0.310 1.451
+score LONGLN_LOW_CONTRAST                   2.499 2.499 2.499 2.499
+score LONG_HEX_URI                          2.618 0.001 2.618 0.001
+score LONG_IMG_URI                          1.932 0.931 1.932 0.931
+score LONG_INVISIBLE_TEXT                   0.001 1.547 0.001 1.547
 score LOTS_OF_MONEY                         0.010 0.010 0.010 0.010
-score LOTTO_AGENT                           1.499 0.896 1.499 0.896
-score LOTTO_DEPT                            1.999 0.562 1.999 0.562
+score LOTTO_AGENT                           1.499 0.987 1.499 0.987
+score LOTTO_DEPT                            0.192 0.662 0.192 0.662
 score LUCRATIVE                             1.000 1.000 1.000 1.000
 score MALF_HTML_B64                         1.000 1.000 1.000 1.000
-score MALWARE_NORDNS                        2.467 2.383 2.467 2.383
+score MALWARE_NORDNS                        0.942 2.280 0.942 2.280
 score MALWARE_PASSWORD                      1.000 1.000 1.000 1.000
-score MALW_ATTACH                           2.500 2.397 2.500 2.397
-score MANY_SPAN_IN_TEXT                     2.599 1.134 2.599 1.134
-score MILLION_HUNDRED                       1.245 0.109 1.245 0.109
-score MILLION_USD                           1.029 0.218 1.029 0.218
+score MALW_ATTACH                           2.499 2.500 2.499 2.500
+score MANY_HDRS_LCASE                       0.100 0.100 0.100 0.100
+score MANY_SPAN_IN_TEXT                     2.400 1.130 2.400 1.130
+score MILLION_HUNDRED                       0.001 0.192 0.001 0.192
+score MILLION_USD                           1.237 0.231 1.237 0.231
 score MIMEOLE_DIRECT_TO_MX                  1.999 1.999 1.999 1.999
 score MIME_NO_TEXT                          1.000 1.000 1.000 1.000
-score MIXED_AREA_CASE                       1.375 0.989 1.375 0.989
-score MIXED_CENTER_CASE                     2.500 2.498 2.500 2.498
-score MIXED_CTYPE_CASE                      0.140 0.987 0.140 0.987
-score MIXED_ES                              2.900 0.259 2.900 0.259
-score MIXED_FONT_CASE                       1.825 1.223 1.825 1.223
-score MIXED_HREF_CASE                       1.999 1.999 1.999 1.999
-score MIXED_IMG_CASE                        0.001 1.569 0.001 1.569
+score MIXED_AREA_CASE                       0.777 1.218 0.777 1.218
+score MIXED_CENTER_CASE                     2.499 2.150 2.499 2.150
+score MIXED_CTYPE_CASE                      1.744 1.220 1.744 1.220
+score MIXED_ES                              2.800 0.259 2.800 0.259
+score MIXED_FONT_CASE                       1.504 2.093 1.504 2.093
+score MIXED_HREF_CASE                       1.999 1.934 1.999 1.934
+score MIXED_IMG_CASE                        0.934 0.999 0.934 0.999
 score MONERO_DEADLINE                       1.000 1.000 1.000 1.000
 score MONERO_EXTORT_01                      1.000 1.000 1.000 1.000
 score MONERO_MALWARE                        1.000 1.000 1.000 1.000
 score MONERO_PAY_ME                         1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD                        1.289 0.001 1.289 0.001
+score MONEY_ATM_CARD                        1.681 0.289 1.681 0.289
 score MONEY_FORM                            0.001 0.001 0.001 0.001
-score MONEY_FORM_SHORT                      2.499 2.497 2.499 2.497
-score MONEY_FRAUD_3                         1.335 1.290 1.335 1.290
-score MONEY_FRAUD_5                         3.299 3.096 3.299 3.096
-score MONEY_FRAUD_8                         3.399 3.396 3.399 3.396
-score MONEY_FREEMAIL_REPTO                  2.999 0.163 2.999 0.163
-score MONEY_FROM_41                         1.999 1.539 1.999 1.539
-score MONEY_FROM_MISSP                      0.888 1.997 0.888 1.997
+score MONEY_FORM_SHORT                      2.500 2.499 2.500 2.499
+score MONEY_FRAUD_3                         2.249 2.550 2.249 2.550
+score MONEY_FRAUD_5                         3.149 3.099 3.149 3.099
+score MONEY_FRAUD_8                         3.408 3.399 3.408 3.399
+score MONEY_FREEMAIL_REPTO                  2.999 0.073 2.999 0.073
+score MONEY_FROM_41                         1.999 1.810 1.999 1.810
+score MONEY_FROM_MISSP                      1.999 1.999 1.999 1.999
 score MSGID_DOLLARS_URI_IMG                 1.000 1.000 1.000 1.000
 score MSGID_HDR_MALF                        1.000 1.000 1.000 1.000
 score MSM_PRIO_REPTO                        1.000 1.000 1.000 1.000
-score NAME_EMAIL_DIFF                       3.699 3.795 3.699 3.795
-score NA_DOLLARS                            1.401 0.001 1.401 0.001
+score NAME_EMAIL_DIFF                       3.599 3.800 3.599 3.800
+score NA_DOLLARS                            0.488 0.001 0.488 0.001
 score NEWEGG_IMG_NOT_RCVD_NEGG              1.000 1.000 1.000 1.000
 score NEW_PRODUCTS                          1.000 1.000 1.000 1.000
-score NICE_REPLY_A                          -4.199 -1.849 -4.199 -1.849
-score NORDNS_LOW_CONTRAST                   1.888 1.102 1.888 1.102
+score NICE_REPLY_A                          -4.199 -2.750 -4.199 -2.750
+score NORDNS_LOW_CONTRAST                   1.888 1.185 1.888 1.185
 score NO_FM_NAME_IP_HOSTN                   0.001 0.001 0.001 0.001
 score NSL_RCVD_FROM_USER                    0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER                    2.289 2.414 2.289 2.414
+score NSL_RCVD_HELO_USER                    2.005 1.250 2.005 1.250
 score OBFU_BITCOIN                          1.000 1.000 1.000 1.000
-score OBFU_TEXT_ATTACH                      1.500 1.597 1.500 1.597
-score ODD_FREEM_REPTO                       2.999 2.807 2.999 2.807
-score PDS_BTC_ID                            0.500 0.498 0.500 0.498
-score PDS_BTC_MSGID                         0.999 0.232 0.999 0.232
-score PDS_BTC_NTLD                          1.975 1.997 1.975 1.997
-score PDS_DBL_URL_TNB_RUNON                 1.999 1.997 1.999 1.997
-score PDS_FROM_2_EMAILS                     1.000 0.494 1.000 0.494
+score OBFU_TEXT_ATTACH                      1.062 1.600 1.062 1.600
+score ODD_FREEM_REPTO                       2.999 1.216 2.999 1.216
+score PDS_BTC_ID                            0.499 0.499 0.499 0.499
+score PDS_BTC_MSGID                         1.000 0.124 1.000 0.124
+score PDS_BTC_NTLD                          1.144 1.999 1.144 1.999
+score PDS_DBL_URL_TNB_RUNON                 1.999 1.999 1.999 1.999
+score PDS_FROM_2_EMAILS                     1.000 0.491 1.000 0.491
 score PDS_HELO_SPF_FAIL                     0.001 1.000 0.001 1.000
-score PDS_HP_HELO_NORDNS                    0.999 0.998 0.999 0.998
-score PDS_OTHER_BAD_TLD                     2.000 1.997 2.000 1.997
-score PDS_PHPEXP_BOT                        1.499 1.498 1.499 1.498
-score PDS_PHP_EVAL                          1.499 1.498 1.499 1.498
+score PDS_HP_HELO_NORDNS                    0.999 0.999 0.999 0.999
+score PDS_NAKED_TO_NUMERO                   1.614 1.000 1.614 1.000
+score PDS_OTHER_BAD_TLD                     1.999 1.999 1.999 1.999
+score PDS_PHPEXP_BOT                        1.499 1.499 1.499 1.499
+score PDS_PHP_EVAL                          1.499 1.499 1.499 1.499
 score PDS_PHP_RUNTIME_FUNC                  1.000 1.000 1.000 1.000
-score PDS_PRO_TLD                           1.000 0.086 1.000 0.086
 score PDS_RDNS_DYNAMIC_FP                   0.001 0.001 0.001 0.001
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE     1.999 1.997 1.999 1.997
-score PHISH_ATTACH                          2.399 2.297 2.399 2.297
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE     1.999 1.999 1.999 1.999
+score PHISH_ATTACH                          2.299 2.299 2.299 2.299
 score PHISH_AZURE_CLOUDAPP                  3.500 3.500 3.500 3.500
 score PHISH_FBASEAPP                        1.000 1.000 1.000 1.000
 score PHOTO_EDITING_DIRECT                  1.000 1.000 1.000 1.000
 score PHOTO_EDITING_FREEM                   1.000 1.000 1.000 1.000
 score PHP_NOVER_MUA                         1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT                       2.499 2.497 2.499 2.497
-score PHP_ORIG_SCRIPT_EVAL                  2.999 2.996 2.999 2.996
-score PHP_SCRIPT                            2.499 0.534 2.499 0.534
+score PHP_ORIG_SCRIPT                       2.499 2.499 2.499 2.499
+score PHP_ORIG_SCRIPT_EVAL                  2.999 2.999 2.999 2.999
+score PHP_SCRIPT                            2.500 0.637 2.500 0.637
 score PHP_SCRIPT_MUA                        1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT               0.999 0.998 0.999 0.998
+score PP_MIME_FAKE_ASCII_TEXT               1.000 0.999 1.000 0.999
 score PP_TOO_MUCH_UNICODE02                 0.500 0.500 0.500 0.500
 score PP_TOO_MUCH_UNICODE05                 1.000 1.000 1.000 1.000
 score PUMPDUMP                              1.000 1.000 1.000 1.000
 score PUMPDUMP_MULTI                        1.000 1.000 1.000 1.000
-score RAND_HEADER_LIST_SPOOF                2.999 2.984 2.999 2.984
-score RAND_HEADER_MANY                      2.999 2.999 2.999 2.999
-score RAND_MKTG_HEADER                      1.999 1.495 1.999 1.495
-score RATWARE_NO_RDNS                       2.999 2.996 2.999 2.996
+score RAND_HEADER_LIST_SPOOF                2.999 2.971 2.999 2.971
+score RAND_HEADER_MANY                      2.999 2.625 2.999 2.625
+score RAND_MKTG_HEADER                      1.999 1.497 1.999 1.497
+score RATWARE_NO_RDNS                       2.687 2.999 2.687 2.999
 score RCVD_DOTEDU_SHORT                     1.000 1.000 1.000 1.000
 score RCVD_DOTEDU_SUSP_URI                  1.000 1.000 1.000 1.000
 score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
@@ -313,15 +316,15 @@ score RCVD_IN_MSPIKE_L5
 score RCVD_IN_MSPIKE_WL                     0.001 0.001 0.001 0.001
 score RCVD_IN_MSPIKE_ZBI                    0.001 0.001 0.001 0.001
 score RDNS_NUM_TLD_ATCHNX                   1.000 1.000 1.000 1.000
-score RDNS_NUM_TLD_XM                       2.739 2.683 2.739 2.683
+score RDNS_NUM_TLD_XM                       2.881 1.044 2.881 1.044
 score READY_TO_SHIP                         1.000 1.000 1.000 1.000
-score REPLYTO_EMPTY                         1.939 2.796 1.939 2.796
+score REPLYTO_EMPTY                         2.151 2.799 2.151 2.799
 score REPTO_419_FRAUD                       1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_AOL                   1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_AOL_LOOSE             1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_CNS                   1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_GM                    2.999 0.001 2.999 0.001
-score REPTO_419_FRAUD_GM_LOOSE              1.000 1.000 1.000 1.000
+score REPTO_419_FRAUD_GM_LOOSE              0.618 1.000 0.618 1.000
 score REPTO_419_FRAUD_HM                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_OL                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_PM                    1.000 1.000 1.000 1.000
@@ -330,97 +333,100 @@ score REPTO_419_FRAUD_YH
 score REPTO_419_FRAUD_YH_LOOSE              1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YJ                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YN                    1.000 1.000 1.000 1.000
-score SCC_BODY_URI_ONLY                     2.999 0.046 2.999 0.046
-score SCC_ISEMM_LID_1                       1.806 0.598 1.806 0.598
-score SCC_THREE_WORD_MONTY                  2.199 2.197 2.199 2.197
-score SCRIPT_GIBBERISH                      2.399 2.397 2.399 2.397
-score SENDGRID_REDIR                        1.499 0.001 1.499 0.001
+score SCC_BODY_URI_ONLY                     2.999 0.136 2.999 0.136
+score SCC_ISEMM_LID_1                       1.908 1.107 1.908 1.107
+score SCC_THREE_WORD_MONTY                  2.199 2.199 2.199 2.199
+score SCRIPT_GIBBERISH                      2.299 2.399 2.299 2.399
+score SENDGRID_REDIR                        1.500 0.001 1.500 0.001
 score SENDGRID_REDIR_PHISH                  1.000 1.000 1.000 1.000
 score SEO_SUSP_NTLD                         1.000 1.000 1.000 1.000
-score SERGIO_SUBJECT_VIAGRA01               3.472 3.482 3.472 3.482
-score SHOPIFY_IMG_NOT_RCVD_SFY              1.932 0.927 1.932 0.927
-score SHORTENED_URL_SRC                     0.053 1.848 0.053 1.848
-score SHORTENER_SHORT_IMG                   0.001 0.510 0.001 0.510
+score SERGIO_SUBJECT_VIAGRA01               2.185 3.599 2.185 3.599
+score SHOPIFY_IMG_NOT_RCVD_SFY              2.187 1.280 2.187 1.280
+score SHORTENED_URL_SRC                     1.131 1.158 1.131 1.158
+score SHORTENER_SHORT_IMG                   0.001 0.001 0.001 0.001
 score SHORT_IMG_SUSP_NTLD                   1.000 1.000 1.000 1.000
-score SHORT_SHORTNER                        1.999 1.997 1.999 1.997
-score SPOOFED_FREEMAIL                      0.001 1.997 0.001 1.997
+score SHORT_SHORTNER                        1.999 1.999 1.999 1.999
+score SPOOFED_FREEMAIL                      0.001 1.999 0.001 1.999
 score SPOOFED_FREEMAIL_NO_RDNS              1.000 0.001 1.000 0.001
-score SPOOFED_FREEM_REPTO                   0.001 0.463 0.001 0.463
+score SPOOFED_FREEM_REPTO                   0.001 0.381 0.001 0.381
 score SPOOFED_FREEM_REPTO_CHN               0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_RUS               0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID                       1.000 0.388 1.000 0.388
-score STATIC_XPRIO_OLE                      0.001 1.863 0.001 1.863
+score SPOOF_GMAIL_MID                       1.000 0.329 1.000 0.329
+score STATIC_XPRIO_OLE                      0.147 1.865 0.147 1.865
 score STOCK_TIP                             1.000 1.000 1.000 1.000
-score STOX_BOUND_090909_B                   2.347 1.421 2.347 1.421
-score STY_INVIS_DIRECT                      2.499 2.497 2.499 2.497
-score SUBJ_ATTENTION                        0.499 0.498 0.499 0.498
+score STOX_BOUND_090909_B                   2.292 0.422 2.292 0.422
+score STY_INVIS_DIRECT                      2.499 2.499 2.499 2.499
+score SUBJ_ATTENTION                        0.500 0.499 0.500 0.499
 score SUBJ_BRKN_WORDNUMS                    1.000 1.000 1.000 1.000
 score SURBL_BLOCKED                         0.001 0.001 0.001 0.001
 score SUSPNTLD_EXPIRATION_EXTORT            1.000 1.000 1.000 1.000
-score SUSP_UTF8_WORD_FROM                   1.999 1.999 1.999 1.999
+score SUSP_UTF8_WORD_FROM                   1.999 0.513 1.999 0.513
 score SYSADMIN                              1.000 1.000 1.000 1.000
 score TAGSTAT_IMG_NOT_RCVD_TGST             1.000 1.000 1.000 1.000
 score TARINGANET_IMG_NOT_RCVD_TN            1.000 1.000 1.000 1.000
-score THIS_AD                               1.675 1.397 1.675 1.397
-score THIS_IS_ADV_SUSP_NTLD                 1.499 1.000 1.499 1.000
+score THIS_AD                               1.599 1.332 1.599 1.332
+score THIS_IS_ADV_SUSP_NTLD                 0.001 1.000 0.001 1.000
 score TONLINE_FAKE_DKIM                     1.000 1.000 1.000 1.000
 score TO_EQ_FM_DIRECT_MX                    1.000 1.000 1.000 1.000
 score TO_EQ_FM_DOM_SPF_FAIL                 0.001 0.001 0.001 0.001
 score TO_EQ_FM_SPF_FAIL                     0.001 0.001 0.001 0.001
 score TO_IN_SUBJ                            0.100 0.100 0.100 0.100
-score TO_NAME_SUBJ_NO_RDNS                  2.999 1.673 2.999 1.673
-score TO_NO_BRKTS_FROM_MSSP                 2.500 2.497 2.500 2.497
-score TO_NO_BRKTS_HTML_IMG                  1.999 0.985 1.999 0.985
-score TO_NO_BRKTS_HTML_ONLY                 1.999 1.997 1.999 1.997
+score TO_NAME_SUBJ_NO_RDNS                  2.912 2.294 2.912 2.294
+score TO_NO_BRKTS_FROM_MSSP                 2.499 2.499 2.499 2.499
+score TO_NO_BRKTS_HTML_IMG                  1.999 1.255 1.999 1.255
+score TO_NO_BRKTS_HTML_ONLY                 1.999 1.999 1.999 1.999
+score TO_NO_BRKTS_MSFT                      1.000 0.001 1.000 0.001
 score TO_NO_BRKTS_NORDNS_HTML               1.999 1.204 1.999 1.204
-score TO_NO_BRKTS_PCNT                      2.500 2.372 2.500 2.372
-score TRANSFORM_LIFE                        2.500 2.497 2.500 2.497
+score TO_NO_BRKTS_PCNT                      0.854 2.239 0.854 2.239
+score TRANSFORM_LIFE                        2.499 2.499 2.499 2.499
 score TUMBLR_IMG_NOT_RCVD_TUMB              1.000 1.000 1.000 1.000
 score TVD_PH_BODY_META                      3.099 0.001 3.099 0.001
-score TVD_PH_SUBJ_META                      1.500 0.001 1.500 0.001
+score TVD_SPACE_ENCODED                     1.000 0.001 1.000 0.001
+score TVD_SPACE_RATIO_MINFP                 1.000 0.001 1.000 0.001
 score TW_GIBBERISH_MANY                     1.000 1.000 1.000 1.000
 score UC_GIBBERISH_OBFU                     1.000 1.000 1.000 1.000
-score UNDISC_FREEM                          3.899 3.696 3.899 3.696
-score UNDISC_MONEY                          3.799 3.695 3.799 3.695
-score UNICODE_OBFU_ASC                      2.499 2.497 2.499 2.497
+score UNDISC_FREEM                          3.899 3.799 3.899 3.799
+score UNDISC_MONEY                          3.799 3.538 3.799 3.538
+score UNICODE_OBFU_ASC                      2.499 2.499 2.499 2.499
 score UNICODE_OBFU_ZW                       1.000 1.000 1.000 1.000
-score UNSUB_GOOG_FORM                       2.499 2.497 2.499 2.497
+score UNSUB_GOOG_FORM                       2.500 2.499 2.500 2.499
 score URI_ADOBESPARK                        1.000 1.000 1.000 1.000
 score URI_AZURE_CLOUDAPP                    1.000 1.000 1.000 1.000
 score URI_DASHGOVEDU                        1.000 1.000 1.000 1.000
 score URI_DATA                              1.000 1.000 1.000 1.000
 score URI_DOTEDU                            1.000 1.000 1.000 1.000
 score URI_DOTEDU_ENTITY                     1.000 1.000 1.000 1.000
-score URI_FIREBASEAPP                       2.999 2.996 2.999 2.996
-score URI_GOOGLE_PROXY                      2.900 2.796 2.900 2.796
-score URI_GOOG_STO_SPAMMY                   2.999 2.996 2.999 2.996
+score URI_FIREBASEAPP                       2.999 2.999 2.999 2.999
+score URI_GOOGLE_PROXY                      2.799 2.799 2.799 2.799
+score URI_GOOG_STO_SPAMMY                   2.999 2.999 2.999 2.999
 score URI_HEX_IP                            1.000 1.000 1.000 1.000
 score URI_IMG_WP_REDIR                      1.000 1.000 1.000 1.000
 score URI_IN_URI_10                         3.699 2.877 3.699 2.877
 score URI_LONG_REPEAT                       1.000 1.000 1.000 1.000
-score URI_ONLY_MSGID_MALF                   1.000 0.001 1.000 0.001
+score URI_OBFU_DOM                          2.199 0.001 2.199 0.001
+score URI_ONLY_MSGID_MALF                   1.000 1.608 1.000 1.608
 score URI_OPTOUT_3LD                        1.000 1.000 1.000 1.000
-score URI_PHISH                             3.999 3.697 3.999 3.697
-score URI_PHP_REDIR                         3.499 2.838 3.499 2.838
-score URI_TRY_3LD                           1.581 1.997 1.581 1.997
+score URI_PHISH                             3.999 3.794 3.999 3.794
+score URI_PHP_REDIR                         3.499 2.776 3.499 2.776
+score URI_TRY_3LD                           1.445 1.999 1.445 1.999
 score URI_TRY_USME                          1.000 1.000 1.000 1.000
-score URI_WPADMIN                           2.699 2.596 2.699 2.596
+score URI_WPADMIN                           2.699 2.699 2.699 2.699
 score URI_WP_DIRINDEX                       1.000 1.000 1.000 1.000
-score URI_WP_HACKED                         1.000 3.496 1.000 3.496
-score URI_WP_HACKED_2                       2.500 1.203 2.500 1.203
+score URI_WP_HACKED                         1.000 3.499 1.000 3.499
+score URI_WP_HACKED_2                       2.499 1.265 2.499 1.265
 score USB_DRIVES                            1.000 1.000 1.000 1.000
 score USER_IN_DKIM_WELCOMELIST              0.001 0.001 0.001 0.001
-score VFY_ACCT_NORDNS                       2.825 2.999 2.825 2.999
+score VFY_ACCT_NORDNS                       2.999 2.778 2.999 2.778
 score VPS_NO_NTLD                           1.000 1.000 1.000 1.000
 score WALMART_IMG_NOT_RCVD_WAL              1.000 1.000 1.000 1.000
 score WANT_TO_ORDER                         1.000 1.000 1.000 1.000
-score WORD_INVIS                            1.983 0.589 1.983 0.589
-score WORD_INVIS_MANY                       2.999 2.774 2.999 2.774
-score XFER_LOTSA_MONEY                      0.999 0.998 0.999 0.998
+score WORD_INVIS                            1.985 0.589 1.985 0.589
+score WORD_INVIS_MANY                       3.000 2.130 3.000 2.130
+score XFER_LOTSA_MONEY                      1.000 1.000 1.000 1.000
 score XM_DIGITS_ONLY                        1.000 1.000 1.000 1.000
-score XM_LIGHT_HEAVY                        2.499 2.497 2.499 2.497
-score XM_RANDOM                             2.499 2.499 2.499 2.499
-score XM_RECPTID                            2.999 2.996 2.999 2.996
-score XPRIO                                 1.000 1.336 1.000 1.336
+score XM_LIGHT_HEAVY                        2.499 2.499 2.499 2.499
+score XM_RANDOM                             2.500 2.499 2.500 2.499
+score XM_RECPTID                            2.999 2.999 2.999 2.999
+score XPRIO                                 1.000 1.646 1.000 1.646
 score XPRIO_SHORT_SUBJ                      1.000 1.000 1.000 1.000
-score YOU_INHERIT                           2.184 1.928 2.184 1.928
+score YOU_INHERIT                           2.410 1.678 2.410 1.678

Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1899656&r1=1899655&r2=1899656&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Fri Apr  8 02:43:21 2022
@@ -1,232 +1,232 @@
-# Using score set 0 logs for revision 1899578 from:
-# ham-darxus.r1899578.log ham-ena-week0.r1899578.log ham-ena-week1.r1899578.log ham-ena-week2.r1899578.log ham-ena-week3.r1899578.log ham-ena-week4.r1899578.log ham-giovanni-ham.r1899578.log ham-giovanni-spammy.r1899578.log ham-giovanni-spam.r1899578.log ham-grenier.r1899578.log ham-hege.r1899578.log ham-jhardin.r1899578.log ham-llanga.r1899578.log ham-mmiroslaw-mails-ham.r1899578.log ham-mmiroslaw-mails-spam.r1899578.log ham-pds.r1899578.log ham-thendrikx.r1899578.log spam-darxus.r1899578.log spam-ena-week0.r1899578.log spam-ena-week1.r1899578.log spam-ena-week2.r1899578.log spam-ena-week3.r1899578.log spam-ena-week4.r1899578.log spam-giovanni-ham.r1899578.log spam-giovanni-spammy.r1899578.log spam-giovanni-spam.r1899578.log spam-grenier.r1899578.log spam-hege.r1899578.log spam-jhardin.r1899578.log spam-llanga.r1899578.log spam-mmiroslaw-mails-ham.r1899578.log spam-mmiroslaw-mails-spam.r1899578.log spam-pds.r1899578.log spam-thendrikx.r1899578.log
+# Using score set 0 logs for revision 1899644 from:
+# ham-darxus.r1899644.log ham-ena-week0.r1899644.log ham-ena-week1.r1899644.log ham-ena-week2.r1899644.log ham-ena-week3.r1899644.log ham-ena-week4.r1899644.log ham-giovanni-ham.r1899644.log ham-giovanni-spammy.r1899644.log ham-giovanni-spam.r1899644.log ham-grenier.r1899644.log ham-hege.r1899644.log ham-jhardin.r1899644.log ham-llanga.r1899644.log ham-mmiroslaw-mails-ham.r1899644.log ham-mmiroslaw-mails-spam.r1899644.log ham-pds.r1899644.log ham-thendrikx.r1899644.log spam-darxus.r1899644.log spam-ena-week0.r1899644.log spam-ena-week1.r1899644.log spam-ena-week2.r1899644.log spam-ena-week3.r1899644.log spam-ena-week4.r1899644.log spam-giovanni-ham.r1899644.log spam-giovanni-spammy.r1899644.log spam-giovanni-spam.r1899644.log spam-grenier.r1899644.log spam-hege.r1899644.log spam-jhardin.r1899644.log spam-llanga.r1899644.log spam-mmiroslaw-mails-ham.r1899644.log spam-mmiroslaw-mails-spam.r1899644.log spam-pds.r1899644.log spam-thendrikx.r1899644.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
 score ADMITS_SPAM                    3.799
-score ADVANCE_FEE_2_NEW_FRM_MNY      0.547
+score ADVANCE_FEE_2_NEW_FRM_MNY      2.499
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              3.300
-score ADVANCE_FEE_3_NEW_FRM_MNY      1.336
-score ADVANCE_FEE_3_NEW_MONEY        2.999
-score ADVANCE_FEE_4_NEW              2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY      2.502
-score ADVANCE_FEE_4_NEW_MONEY        1.047
-score ADVANCE_FEE_5_NEW              2.499
+score ADVANCE_FEE_3_NEW              3.307
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_3_NEW_MONEY        2.899
+score ADVANCE_FEE_4_NEW              2.399
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.668
+score ADVANCE_FEE_4_NEW_MONEY        1.808
+score ADVANCE_FEE_5_NEW              2.399
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        0.465
-score AD_PREFS                       0.244
+score ADVANCE_FEE_5_NEW_MONEY        0.770
+score AD_PREFS                       0.001
 score AMAZON_IMG_NOT_RCVD_AMZN       2.499
 score APP_DEVELOPMENT_NORDNS         1.999
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.180
-score AXB_XM_FORGED_OL2600           1.909
-score AXB_X_FF_SEZ_S                 2.999
-score BIGNUM_EMAILS_FREEM            0.087
+score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.808
+score AXB_XM_FORGED_OL2600           0.994
+score BIGNUM_EMAILS_FREEM            2.914
 score BIGNUM_EMAILS_MANY             2.999
-score BILLION_OVERLAP                -0.367
-score BITCOIN_DEADLINE               1.863
-score BITCOIN_EXTORT_01              4.498
-score BITCOIN_MALF_HTML              3.500
-score BITCOIN_OBFU_SUBJ              2.140
+score BILLION_OVERLAP                -0.573
+score BITCOIN_DEADLINE               1.924
+score BITCOIN_EXTORT_01              4.492
+score BITCOIN_MALF_HTML              3.499
+score BITCOIN_OBFU_SUBJ              3.499
 score BITCOIN_SPAM_02                2.499
 score BITCOIN_SPAM_04                1.499
 score BITCOIN_SPAM_09                1.499
-score BITCOIN_XPRIO                  2.499
+score BITCOIN_XPRIO                  2.500
 score BITCOIN_YOUR_INFO              2.999
-score BODY_EMPTY                     1.904
-score BODY_SINGLE_URI                2.499
-score BOGUS_MIME_VERSION             3.500
-score BOGUS_MSM_HDRS                 2.243
-score CANT_SEE_AD                    2.500
-score CK_HELO_GENERIC                0.250
+score BODY_EMPTY                     1.896
+score BODY_SINGLE_URI                2.500
+score BOGUS_MIME_VERSION             2.853
+score CANT_SEE_AD                    2.499
+score CK_HELO_GENERIC                0.249
 score CONTENT_AFTER_HTML             2.499
 score CONTENT_AFTER_HTML_WEAK        1.499
 score CTE_8BIT_MISMATCH              0.999
-score DATE_IN_FUTURE_96_Q            0.426
-score DEAR_BENEFICIARY               3.399
-score DOS_RCVD_IP_TWICE_B            3.299
-score FAKE_REPLY_A1                  3.109
-score FAKE_REPLY_B                   2.029
-score FILL_THIS_FORM                 1.899
+score DATE_IN_FUTURE_96_Q            0.001
+score DEAR_BENEFICIARY               3.256
+score DOS_RCVD_IP_TWICE_B            3.300
+score FAKE_REPLY_A1                  0.001
+score FAKE_REPLY_B                   2.990
+score FILL_THIS_FORM                 1.800
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_HTML_NOHTML         2.999
-score FONT_INVIS_LONG_LINE           1.439
+score FONT_INVIS_LONG_LINE           1.686
 score FONT_INVIS_MSGID               0.001
-score FONT_INVIS_NORDNS              1.557
+score FONT_INVIS_NORDNS              2.300
 score FORM_FRAUD_5                   3.299
 score FOUND_YOU                      3.249
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
-score FROMSPACE                      3.399
-score FROM_2_EMAILS_SHORT            1.290
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FROMSPACE                      3.400
+score FROM_2_EMAILS_SHORT            1.395
 score FROM_ADDR_WS                   2.999
 score FROM_MISSPACED                 1.999
-score FROM_MISSP_DYNIP               2.119
+score FROM_MISSP_DYNIP               0.965
 score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            2.407
-score FROM_MISSP_MSFT                0.001 # force non-zero
-score FROM_MISSP_PHISH               3.499
-score FROM_MISSP_TO_UNDISC           1.281
+score FROM_MISSP_FREEMAIL            3.199
+score FROM_MISSP_MSFT                0.429
+score FROM_MISSP_PHISH               2.708
+score FROM_MISSP_TO_UNDISC           0.863
 score FROM_MISSP_USER                0.001
-score FROM_MISSP_XPRIO               0.396
-score FROM_MULTI_NORDNS              1.220
-score FROM_NTLD_REPLY_FREEMAIL       1.999
-score FROM_SUSPICIOUS_NTLD           0.500
-score FROM_SUSPICIOUS_NTLD_FP        2.000
-score FROM_UNBAL1                    2.299
-score FROM_WSP_TRAIL                 2.499
-score FSL_CTYPE_WIN1251              1.917
+score FROM_MISSP_XPRIO               0.401
+score FROM_MULTI_NORDNS              2.249
+score FROM_NTLD_REPLY_FREEMAIL       1.676
+score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_SUSPICIOUS_NTLD_FP        1.999
+score FROM_UNBAL1                    2.079
+score FROM_WSP_TRAIL                 2.399
+score FSL_CTYPE_WIN1251              1.871
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   2.399
-score FUZZY_CLICK_HERE               2.399
-score FUZZY_WALLET                   3.200
-score GAPPY_GENITALIA                1.643
-score GB_BITCOIN_CP                  0.692
-score GB_FAKE_RF_SHORT               2.000
+score FUZZY_AMAZON                   2.299
+score FUZZY_CLICK_HERE               2.199
+score FUZZY_WALLET                   3.199
+score GAPPY_GENITALIA                1.879
+score GB_BITCOIN_CP                  0.591
+score GB_FAKE_RF_SHORT               1.999
 score GB_FREEMAIL_DISPTO             0.499
 score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
+score GB_GOOG_IMG_NOT_RCVD_GOOG      2.316
 score GOOG_REDIR_HTML_ONLY           1.999
 score GOOG_REDIR_NORDNS              2.602
-score GOOG_STO_EMAIL_PHISH           2.219
-score GOOG_STO_HTML_PHISH            1.392
+score GOOG_STO_EMAIL_PHISH           2.415
+score GOOG_STO_HTML_PHISH            2.685
 score GOOG_STO_IMG_NOHTML            2.499
 score GOOG_STO_NOIMG_HTML            2.999
 score HAS_X_NO_RELAY                 2.499
 score HAS_X_OUTGOING_SPAM_STAT       1.999
 score HDRS_LCASE_IMGONLY             0.100
-score HDRS_MISSP                     2.499
+score HDRS_MISSP                     2.500
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
-score HDR_ORDER_FTSDMCXX_NORDNS      2.155
+score HDR_ORDER_FTSDMCXX_NORDNS      2.595
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
-score HELO_NO_DOMAIN                 0.001 # force non-zero
-score HK_LOTTO                       0.546
+score HELO_NO_DOMAIN                 0.001
+score HK_LOTTO                       0.426
 score HK_NAME_FROM                   0.999
 score HK_NAME_MR_MRS                 0.999
 score HK_RANDOM_ENVFROM              1.000
-score HK_RANDOM_FROM                 0.999
-score HK_RANDOM_REPLYTO              1.000
-score HK_SCAM                        1.999
-score HK_WIN                         0.443
-score HOSTED_IMG_DIRECT_MX           3.499
-score HOSTED_IMG_FREEM               2.565
+score HK_RANDOM_FROM                 1.000
+score HK_RANDOM_REPLYTO              0.999
+score HK_SCAM                        1.970
+score HK_WIN                         0.358
+score HOSTED_IMG_DIRECT_MX           3.500
+score HOSTED_IMG_FREEM               2.311
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HTML_ENTITY_ASCII              2.225
-score HTML_FONT_TINY_NORDNS          1.999
+score HTML_ENTITY_ASCII              0.685
+score HTML_FONT_TINY_NORDNS          2.000
 score HTML_OFF_PAGE                  2.999
 score HTML_TAG_BALANCE_CENTER        4.099
 score HTML_TEXT_INVISIBLE_STYLE      3.499
-score IMG_ONLY_FM_DOM_INFO           1.618
+score IMG_ONLY_FM_DOM_INFO           1.621
 score JH_SPAMMY_HEADERS              3.499
 score LONGLN_LOW_CONTRAST            2.499
-score LONG_HEX_URI                   2.602
-score LONG_IMG_URI                   1.937
-score LONG_INVISIBLE_TEXT            0.310
+score LONG_HEX_URI                   2.618
+score LONG_IMG_URI                   1.932
+score LONG_INVISIBLE_TEXT            0.001
 score LOTS_OF_MONEY                  0.010
 score LOTTO_AGENT                    1.499
-score LOTTO_DEPT                     1.999
-score MALWARE_NORDNS                 2.467
-score MALW_ATTACH                    2.500
-score MANY_SPAN_IN_TEXT              2.599
-score MILLION_HUNDRED                1.245
-score MILLION_USD                    1.029
+score LOTTO_DEPT                     0.192
+score MALWARE_NORDNS                 0.942
+score MALW_ATTACH                    2.499
+score MANY_SPAN_IN_TEXT              2.400
+score MILLION_HUNDRED                0.001
+score MILLION_USD                    1.237
 score MIMEOLE_DIRECT_TO_MX           1.999
-score MIXED_AREA_CASE                1.375
-score MIXED_CENTER_CASE              2.500
-score MIXED_CTYPE_CASE               0.140
-score MIXED_ES                       2.900
-score MIXED_FONT_CASE                1.825
+score MIXED_AREA_CASE                0.777
+score MIXED_CENTER_CASE              2.499
+score MIXED_CTYPE_CASE               1.744
+score MIXED_ES                       2.800
+score MIXED_FONT_CASE                1.504
 score MIXED_HREF_CASE                1.999
-score MIXED_IMG_CASE                 0.001
-score MONEY_ATM_CARD                 1.289
+score MIXED_IMG_CASE                 0.934
+score MONEY_ATM_CARD                 1.681
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               2.499
-score MONEY_FRAUD_3                  1.335
-score MONEY_FRAUD_5                  3.299
-score MONEY_FRAUD_8                  3.399
+score MONEY_FORM_SHORT               2.500
+score MONEY_FRAUD_3                  2.249
+score MONEY_FRAUD_5                  3.149
+score MONEY_FRAUD_8                  3.408
 score MONEY_FREEMAIL_REPTO           2.999
 score MONEY_FROM_41                  1.999
-score MONEY_FROM_MISSP               0.888
-score NAME_EMAIL_DIFF                3.699
-score NA_DOLLARS                     1.401
+score MONEY_FROM_MISSP               1.999
+score NAME_EMAIL_DIFF                3.599
+score NA_DOLLARS                     0.488
 score NICE_REPLY_A                   -4.199
 score NORDNS_LOW_CONTRAST            1.888
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             2.289
-score OBFU_TEXT_ATTACH               1.500
+score NSL_RCVD_HELO_USER             2.005
+score OBFU_TEXT_ATTACH               1.062
 score ODD_FREEM_REPTO                2.999
-score PDS_BTC_ID                     0.500
-score PDS_BTC_MSGID                  0.999
-score PDS_BTC_NTLD                   1.975
+score PDS_BTC_ID                     0.499
+score PDS_BTC_MSGID                  1.000
+score PDS_BTC_NTLD                   1.144
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_HP_HELO_NORDNS             0.999
-score PDS_OTHER_BAD_TLD              2.000
+score PDS_NAKED_TO_NUMERO            1.614
+score PDS_OTHER_BAD_TLD              1.999
 score PDS_PHPEXP_BOT                 1.499
 score PDS_PHP_EVAL                   1.499
-score PDS_PRO_TLD                    1.000
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHISH_ATTACH                   2.399
+score PHISH_ATTACH                   2.299
 score PHP_ORIG_SCRIPT                2.499
 score PHP_ORIG_SCRIPT_EVAL           2.999
-score PHP_SCRIPT                     2.499
-score PP_MIME_FAKE_ASCII_TEXT        0.999
+score PHP_SCRIPT                     2.500
+score PP_MIME_FAKE_ASCII_TEXT        1.000
 score RAND_HEADER_LIST_SPOOF         2.999
 score RAND_HEADER_MANY               2.999
 score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                2.999
-score RDNS_NUM_TLD_XM                2.739
-score REPLYTO_EMPTY                  1.939
+score RATWARE_NO_RDNS                2.687
+score RDNS_NUM_TLD_XM                2.881
+score REPLYTO_EMPTY                  2.151
 score REPTO_419_FRAUD_GM             2.999
+score REPTO_419_FRAUD_GM_LOOSE       0.618
 score SCC_BODY_URI_ONLY              2.999
-score SCC_ISEMM_LID_1                1.806
+score SCC_ISEMM_LID_1                1.908
 score SCC_THREE_WORD_MONTY           2.199
-score SCRIPT_GIBBERISH               2.399
-score SENDGRID_REDIR                 1.499
-score SERGIO_SUBJECT_VIAGRA01        3.472
-score SHOPIFY_IMG_NOT_RCVD_SFY       1.932
-score SHORTENED_URL_SRC              0.053
+score SCRIPT_GIBBERISH               2.299
+score SENDGRID_REDIR                 1.500
+score SERGIO_SUBJECT_VIAGRA01        2.185
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.187
+score SHORTENED_URL_SRC              1.131
 score SHORTENER_SHORT_IMG            0.001
 score SHORT_SHORTNER                 1.999
-score STATIC_XPRIO_OLE               0.001
-score STOX_BOUND_090909_B            2.347
+score STATIC_XPRIO_OLE               0.147
+score STOX_BOUND_090909_B            2.292
 score STY_INVIS_DIRECT               2.499
-score SUBJ_ATTENTION                 0.499
+score SUBJ_ATTENTION                 0.500
 score SUSP_UTF8_WORD_FROM            1.999
-score THIS_AD                        1.675
-score THIS_IS_ADV_SUSP_NTLD          1.499
-score TO_NAME_SUBJ_NO_RDNS           2.999
-score TO_NO_BRKTS_FROM_MSSP          2.500
+score THIS_AD                        1.599
+score THIS_IS_ADV_SUSP_NTLD          0.001
+score TO_NAME_SUBJ_NO_RDNS           2.912
+score TO_NO_BRKTS_FROM_MSSP          2.499
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.500
-score TRANSFORM_LIFE                 2.500
+score TO_NO_BRKTS_PCNT               0.854
+score TRANSFORM_LIFE                 2.499
 score TVD_PH_BODY_META               3.099
-score TVD_PH_SUBJ_META               1.500
 score UNDISC_FREEM                   3.899
 score UNDISC_MONEY                   3.799
 score UNICODE_OBFU_ASC               2.499
-score UNSUB_GOOG_FORM                2.499
+score UNSUB_GOOG_FORM                2.500
 score URI_FIREBASEAPP                2.999
-score URI_GOOGLE_PROXY               2.900
+score URI_GOOGLE_PROXY               2.799
 score URI_GOOG_STO_SPAMMY            2.999
 score URI_IN_URI_10                  3.699
+score URI_OBFU_DOM                   2.199
 score URI_PHISH                      3.999
 score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    1.581
+score URI_TRY_3LD                    1.445
 score URI_WPADMIN                    2.699
-score URI_WP_HACKED_2                2.500
-score VFY_ACCT_NORDNS                2.825
-score WORD_INVIS                     1.983
-score WORD_INVIS_MANY                2.999
-score XFER_LOTSA_MONEY               0.999
+score URI_WP_HACKED_2                2.499
+score VFY_ACCT_NORDNS                2.999
+score WORD_INVIS                     1.985
+score WORD_INVIS_MANY                3.000
+score XFER_LOTSA_MONEY               1.000
 score XM_LIGHT_HEAVY                 2.499
-score XM_RANDOM                      2.499
+score XM_RANDOM                      2.500
 score XM_RECPTID                     2.999
-score YOU_INHERIT                    2.184
+score YOU_INHERIT                    2.410
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -256,7 +256,9 @@ score BITCOIN_SPAM_08                1.0
 score BITCOIN_SPAM_10                1.000
 score BITCOIN_SPAM_11                1.000
 score BITCOIN_SPAM_12                1.000
+score BODY_EMAIL_419_FRAUD_GM        1.000
 score BODY_URI_ONLY                  1.000
+score BOGUS_MSM_HDRS                 1.000
 score BOMB_FREEM                     1.000
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
@@ -278,6 +280,7 @@ score FONT_INVIS_POSTEXTRAS          1.0
 score FORM_FRAUD                     1.000
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
+score FROM_MISSP_REPLYTO             1.000
 score FROM_NTLD_LINKBAIT             1.000
 score FROM_NUMERIC_TLD               1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
@@ -308,6 +311,7 @@ score LIST_PRTL_SAME_USER            1.0
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
 score MALWARE_PASSWORD               1.000
+score MANY_HDRS_LCASE                0.100
 score MIME_NO_TEXT                   1.000
 score MONERO_DEADLINE                1.000
 score MONERO_EXTORT_01               1.000
@@ -339,7 +343,6 @@ score REPTO_419_FRAUD                1.0
 score REPTO_419_FRAUD_AOL            1.000
 score REPTO_419_FRAUD_AOL_LOOSE      1.000
 score REPTO_419_FRAUD_CNS            1.000
-score REPTO_419_FRAUD_GM_LOOSE       1.000
 score REPTO_419_FRAUD_HM             1.000
 score REPTO_419_FRAUD_OL             1.000
 score REPTO_419_FRAUD_PM             1.000
@@ -362,7 +365,10 @@ score TARINGANET_IMG_NOT_RCVD_TN     1.0
 score TONLINE_FAKE_DKIM              1.000
 score TO_EQ_FM_DIRECT_MX             1.000
 score TO_IN_SUBJ                     0.100
+score TO_NO_BRKTS_MSFT               1.000
 score TUMBLR_IMG_NOT_RCVD_TUMB       1.000
+score TVD_SPACE_ENCODED              1.000
+score TVD_SPACE_RATIO_MINFP          1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ZW                1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1899656&r1=1899655&r2=1899656&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Fri Apr  8 02:43:21 2022
@@ -3,255 +3,256 @@
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001 # force non-zero
-score AC_FROM_MANY_DOTS              2.996
-score AC_HTML_NONSENSE_TAGS          1.997
-score ADMITS_SPAM                    3.356
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.284
-score ADVANCE_FEE_2_NEW_MONEY        1.997
-score ADVANCE_FEE_3_NEW              3.067
-score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_3_NEW_MONEY        1.544
-score ADVANCE_FEE_4_NEW              2.397
-score ADVANCE_FEE_4_NEW_FRM_MNY      1.924
+score AC_FROM_MANY_DOTS              2.999
+score AC_HTML_NONSENSE_TAGS          1.999
+score ADMITS_SPAM                    2.773
+score ADVANCE_FEE_2_NEW_FRM_MNY      1.222
+score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_3_NEW              2.992
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_MONEY        1.546
+score ADVANCE_FEE_4_NEW              2.399
+score ADVANCE_FEE_4_NEW_FRM_MNY      2.499
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW              0.996
+score ADVANCE_FEE_5_NEW              1.175
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_5_NEW_MONEY        0.001
-score AD_PREFS                       0.159
-score AMAZON_IMG_NOT_RCVD_AMZN       2.497
-score APP_DEVELOPMENT_NORDNS         0.195
+score AD_PREFS                       0.094
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score APP_DEVELOPMENT_NORDNS         0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.180
-score AXB_XM_FORGED_OL2600           0.193
-score AXB_X_FF_SEZ_S                 2.796
-score BIGNUM_EMAILS_FREEM            0.373
-score BIGNUM_EMAILS_MANY             2.996
-score BILLION_OVERLAP                -0.712
-score BITCOIN_DEADLINE               0.837
-score BITCOIN_EXTORT_01              4.755
-score BITCOIN_MALF_HTML              2.977
-score BITCOIN_OBFU_SUBJ              1.750
-score BITCOIN_SPAM_02                2.497
+score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.702
+score AXB_XM_FORGED_OL2600           1.755
+score BIGNUM_EMAILS_FREEM            0.602
+score BIGNUM_EMAILS_MANY             2.999
+score BILLION_OVERLAP                -0.232
+score BITCOIN_DEADLINE               1.922
+score BITCOIN_EXTORT_01              4.999
+score BITCOIN_MALF_HTML              3.316
+score BITCOIN_MALWARE                2.979
+score BITCOIN_OBFU_SUBJ              0.668
+score BITCOIN_SPAM_02                2.499
 score BITCOIN_SPAM_04                1.499
-score BITCOIN_SPAM_09                1.498
-score BITCOIN_XPRIO                  2.497
-score BITCOIN_YOUR_INFO              2.996
+score BITCOIN_SPAM_09                1.499
+score BITCOIN_XPRIO                  2.499
+score BITCOIN_YOUR_INFO              2.999
 score BODY_EMPTY                     0.001
-score BODY_SINGLE_URI                0.631
+score BODY_SINGLE_URI                0.539
 score BODY_URI_ONLY                  2.999
 score BOGUS_MIME_VERSION             3.267
-score CK_HELO_GENERIC                0.001
-score CONTENT_AFTER_HTML             2.497
-score CONTENT_AFTER_HTML_WEAK        1.498
+score CANT_SEE_AD                    2.300
+score CK_HELO_GENERIC                0.001 # force non-zero
+score CONTENT_AFTER_HTML             2.499
+score CONTENT_AFTER_HTML_WEAK        1.499
 score CTE_8BIT_MISMATCH              0.001
-score DATE_IN_FUTURE_96_Q            1.575
-score DEAR_BENEFICIARY               1.908
-score DKIMWL_BL                      2.996
+score DATE_IN_FUTURE_96_Q            0.227
+score DEAR_BENEFICIARY               1.667
+score DKIMWL_BL                      2.999
 score DKIMWL_WL_HIGH                 -0.001
-score DKIMWL_WL_MED                  -0.001
-score DKIMWL_WL_MEDHI                -0.545
-score DOS_RCVD_IP_TWICE_B            3.196
-score END_FUTURE_EMAILS              2.244
-score FAKE_REPLY_A1                  1.544
-score FAKE_REPLY_B                   2.061
-score FILL_THIS_FORM                 0.231
+score DKIMWL_WL_MED                  -0.001 # force non-zero
+score DKIMWL_WL_MEDHI                -0.483
+score DOS_RCVD_IP_TWICE_B            3.199
+score END_FUTURE_EMAILS              2.247
+score FAKE_REPLY_A1                  1.303
+score FAKE_REPLY_B                   1.235
+score FILL_THIS_FORM                 0.225
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_HTML_NOHTML         2.996
-score FONT_INVIS_LONG_LINE           1.088
-score FONT_INVIS_MSGID               1.304
-score FONT_INVIS_NORDNS              1.566
-score FORGED_SPF_HELO                0.372
-score FORM_FRAUD                     0.998
-score FORM_FRAUD_3                   0.799
-score FORM_FRAUD_5                   3.196
+score FONT_INVIS_HTML_NOHTML         2.999
+score FONT_INVIS_LONG_LINE           1.094
+score FONT_INVIS_MSGID               1.280
+score FONT_INVIS_NORDNS              0.800
+score FORGED_SPF_HELO                0.359
+score FORM_FRAUD                     0.999
+score FORM_FRAUD_3                   1.370
+score FORM_FRAUD_5                   3.199
 score FOUND_YOU                      3.249
-score FREEMAIL_FORGED_FROMDOMAIN     0.248
-score FROMSPACE                      3.196
-score FROM_2_EMAILS_SHORT            0.568
-score FROM_ADDR_WS                   2.996
-score FROM_FMBLA_NEWDOM              1.498
-score FROM_FMBLA_NEWDOM14            0.998
-score FROM_FMBLA_NEWDOM28            0.798
-score FROM_MISSPACED                 1.997
-score FROM_MISSP_DYNIP               2.178
-score FROM_MISSP_EH_MATCH            1.997
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FROMSPACE                      3.199
+score FROM_2_EMAILS_SHORT            0.840
+score FROM_ADDR_WS                   2.999
+score FROM_FMBLA_NEWDOM              1.499
+score FROM_FMBLA_NEWDOM14            0.999
+score FROM_FMBLA_NEWDOM28            0.799
+score FROM_MISSPACED                 1.999
+score FROM_MISSP_DYNIP               0.001
+score FROM_MISSP_EH_MATCH            1.999
 score FROM_MISSP_FREEMAIL            0.001
 score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_PHISH               2.407
+score FROM_MISSP_PHISH               2.018
 score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_TO_UNDISC           1.165
+score FROM_MISSP_TO_UNDISC           0.456
 score FROM_MISSP_USER                0.001
 score FROM_MISSP_XPRIO               0.001
-score FROM_MULTI_NORDNS              1.594
-score FROM_PAYPAL_SPOOF              1.597
+score FROM_MULTI_NORDNS              1.604
+score FROM_PAYPAL_SPOOF              1.599
 score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        0.725
-score FROM_UNBAL1                    2.197
+score FROM_SUSPICIOUS_NTLD_FP        0.732
+score FROM_UNBAL1                    2.199
 score FROM_WSP_TRAIL                 0.001
-score FSL_BULK_SIG                   1.104
-score FSL_CTYPE_WIN1251              1.269
+score FSL_BULK_SIG                   1.043
+score FSL_CTYPE_WIN1251              2.577
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   2.331
-score FUZZY_CLICK_HERE               2.297
+score FUZZY_AMAZON                   1.957
+score FUZZY_CLICK_HERE               2.399
 score FUZZY_WALLET                   2.398
-score GAPPY_GENITALIA                0.654
-score GB_BITCOIN_CP                  1.425
-score GB_FAKE_RF_SHORT               0.001
+score GAPPY_GENITALIA                0.550
+score GB_BITCOIN_CP                  1.254
+score GB_FAKE_RF_SHORT               0.010
 score GB_FREEMAIL_DISPTO             0.499
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.498
-score GOOG_REDIR_HTML_ONLY           1.997
-score GOOG_REDIR_NORDNS              3.120
-score GOOG_STO_EMAIL_PHISH           1.500
-score GOOG_STO_HTML_PHISH            2.724
-score GOOG_STO_IMG_NOHTML            0.729
-score GOOG_STO_NOIMG_HTML            2.941
-score HAS_X_NO_RELAY                 1.766
-score HAS_X_OUTGOING_SPAM_STAT       1.730
-score HDRS_LCASE_IMGONLY             0.098
-score HDRS_MISSP                     2.146
-score HDR_ORDER_FTSDMCXX_DIRECT      0.466
-score HDR_ORDER_FTSDMCXX_NORDNS      3.120
-score HEADER_FROM_DIFFERENT_DOMAINS  0.248
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
+score GB_GOOG_IMG_NOT_RCVD_GOOG      1.254
+score GOOG_REDIR_HTML_ONLY           1.999
+score GOOG_REDIR_NORDNS              3.127
+score GOOG_STO_EMAIL_PHISH           2.959
+score GOOG_STO_HTML_PHISH            0.684
+score GOOG_STO_IMG_NOHTML            0.150
+score GOOG_STO_NOIMG_HTML            2.949
+score HAS_X_NO_RELAY                 1.719
+score HAS_X_OUTGOING_SPAM_STAT       1.063
+score HDRS_LCASE_IMGONLY             0.100
+score HDRS_MISSP                     1.713
+score HDR_ORDER_FTSDMCXX_DIRECT      0.578
+score HDR_ORDER_FTSDMCXX_NORDNS      3.206
+score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
 score HK_LOTTO                       0.999
-score HK_NAME_FROM                   0.509
-score HK_NAME_MR_MRS                 0.998
-score HK_RANDOM_ENVFROM              0.998
-score HK_RANDOM_FROM                 0.998
-score HK_RANDOM_REPLYTO              0.998
+score HK_NAME_FROM                   0.894
+score HK_NAME_MR_MRS                 1.000
+score HK_RANDOM_ENVFROM              0.999
+score HK_RANDOM_FROM                 0.999
+score HK_RANDOM_REPLYTO              0.999
 score HK_SCAM                        0.001
-score HK_WIN                         0.105
-score HOSTED_IMG_DIRECT_MX           1.164
-score HOSTED_IMG_FREEM               1.842
-score HOSTED_IMG_MULTI_PUB_01        2.720
-score HTML_ENTITY_ASCII              2.162
-score HTML_FONT_TINY_NORDNS          1.448
-score HTML_OFF_PAGE                  2.555
-score HTML_SINGLET_MANY              1.603
-score HTML_TAG_BALANCE_CENTER        2.390
-score HTML_TEXT_INVISIBLE_FONT       1.244
+score HK_WIN                         0.537
+score HOSTED_IMG_DIRECT_MX           1.437
+score HOSTED_IMG_FREEM               1.971
+score HOSTED_IMG_MULTI_PUB_01        2.945
+score HTML_ENTITY_ASCII              0.611
+score HTML_FONT_TINY_NORDNS          1.354
+score HTML_OFF_PAGE                  2.374
+score HTML_SINGLET_MANY              1.585
+score HTML_TAG_BALANCE_CENTER        2.392
+score HTML_TEXT_INVISIBLE_FONT       1.271
 score HTML_TEXT_INVISIBLE_STYLE      2.803
-score IMG_ONLY_FM_DOM_INFO           0.475
-score JH_SPAMMY_HEADERS              3.496
-score KHOP_HELO_FCRDNS               0.333
-score LONGLN_LOW_CONTRAST            2.497
+score IMG_ONLY_FM_DOM_INFO           0.481
+score JH_SPAMMY_HEADERS              3.499
+score KHOP_HELO_FCRDNS               0.396
+score LONGLN_LOW_CONTRAST            2.499
 score LONG_HEX_URI                   0.001
-score LONG_IMG_URI                   0.828
-score LONG_INVISIBLE_TEXT            1.451
+score LONG_IMG_URI                   0.931
+score LONG_INVISIBLE_TEXT            1.547
 score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    0.896
-score LOTTO_DEPT                     0.562
-score MALWARE_NORDNS                 2.383
-score MALW_ATTACH                    2.397
-score MANY_SPAN_IN_TEXT              1.134
-score MILLION_HUNDRED                0.109
-score MILLION_USD                    0.218
+score LOTTO_AGENT                    0.987
+score LOTTO_DEPT                     0.662
+score MALWARE_NORDNS                 2.280
+score MALW_ATTACH                    2.500
+score MANY_SPAN_IN_TEXT              1.130
+score MILLION_HUNDRED                0.192
+score MILLION_USD                    0.231
 score MIMEOLE_DIRECT_TO_MX           1.999
-score MIXED_AREA_CASE                0.989
-score MIXED_CENTER_CASE              2.498
-score MIXED_CTYPE_CASE               0.987
+score MIXED_AREA_CASE                1.218
+score MIXED_CENTER_CASE              2.150
+score MIXED_CTYPE_CASE               1.220
 score MIXED_ES                       0.259
-score MIXED_FONT_CASE                1.223
-score MIXED_HREF_CASE                1.999
-score MIXED_IMG_CASE                 1.569
-score MONEY_ATM_CARD                 0.001
+score MIXED_FONT_CASE                2.093
+score MIXED_HREF_CASE                1.934
+score MIXED_IMG_CASE                 0.999
+score MONEY_ATM_CARD                 0.289
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               2.497
-score MONEY_FRAUD_3                  1.290
-score MONEY_FRAUD_5                  3.096
-score MONEY_FRAUD_8                  3.396
-score MONEY_FREEMAIL_REPTO           0.163
-score MONEY_FROM_41                  1.539
-score MONEY_FROM_MISSP               1.997
-score NAME_EMAIL_DIFF                3.795
+score MONEY_FORM_SHORT               2.499
+score MONEY_FRAUD_3                  2.550
+score MONEY_FRAUD_5                  3.099
+score MONEY_FRAUD_8                  3.399
+score MONEY_FREEMAIL_REPTO           0.073
+score MONEY_FROM_41                  1.810
+score MONEY_FROM_MISSP               1.999
+score NAME_EMAIL_DIFF                3.800
 score NA_DOLLARS                     0.001
-score NICE_REPLY_A                   -1.849
-score NORDNS_LOW_CONTRAST            1.102
+score NICE_REPLY_A                   -2.750
+score NORDNS_LOW_CONTRAST            1.185
 score NO_FM_NAME_IP_HOSTN            0.001 # force non-zero
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             2.414
-score OBFU_TEXT_ATTACH               1.597
-score ODD_FREEM_REPTO                2.807
-score PDS_BTC_ID                     0.498
-score PDS_BTC_MSGID                  0.232
-score PDS_BTC_NTLD                   1.997
-score PDS_DBL_URL_TNB_RUNON          1.997
-score PDS_FROM_2_EMAILS              0.494
-score PDS_HP_HELO_NORDNS             0.998
-score PDS_OTHER_BAD_TLD              1.997
-score PDS_PHPEXP_BOT                 1.498
-score PDS_PHP_EVAL                   1.498
-score PDS_PRO_TLD                    0.086
+score NSL_RCVD_HELO_USER             1.250
+score OBFU_TEXT_ATTACH               1.600
+score ODD_FREEM_REPTO                1.216
+score PDS_BTC_ID                     0.499
+score PDS_BTC_MSGID                  0.124
+score PDS_BTC_NTLD                   1.999
+score PDS_DBL_URL_TNB_RUNON          1.999
+score PDS_FROM_2_EMAILS              0.491
+score PDS_HP_HELO_NORDNS             0.999
+score PDS_OTHER_BAD_TLD              1.999
+score PDS_PHPEXP_BOT                 1.499
+score PDS_PHP_EVAL                   1.499
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.997
-score PHISH_ATTACH                   2.297
-score PHP_ORIG_SCRIPT                2.497
-score PHP_ORIG_SCRIPT_EVAL           2.996
-score PHP_SCRIPT                     0.534
-score PP_MIME_FAKE_ASCII_TEXT        0.998
-score RAND_HEADER_LIST_SPOOF         2.984
-score RAND_HEADER_MANY               2.999
-score RAND_MKTG_HEADER               1.495
-score RATWARE_NO_RDNS                2.996
-score RCVD_IN_MSPIKE_H2              -0.001
-score RDNS_NUM_TLD_XM                2.683
-score REPLYTO_EMPTY                  2.796
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
+score PHISH_ATTACH                   2.299
+score PHP_ORIG_SCRIPT                2.499
+score PHP_ORIG_SCRIPT_EVAL           2.999
+score PHP_SCRIPT                     0.637
+score PP_MIME_FAKE_ASCII_TEXT        0.999
+score RAND_HEADER_LIST_SPOOF         2.971
+score RAND_HEADER_MANY               2.625
+score RAND_MKTG_HEADER               1.497
+score RATWARE_NO_RDNS                2.999
+score RCVD_IN_MSPIKE_H2              -0.001 # force non-zero
+score RDNS_NUM_TLD_XM                1.044
+score REPLYTO_EMPTY                  2.799
 score REPTO_419_FRAUD_GM             0.001
-score SCC_BODY_URI_ONLY              0.046
-score SCC_ISEMM_LID_1                0.598
-score SCC_THREE_WORD_MONTY           2.197
-score SCRIPT_GIBBERISH               2.397
+score SCC_BODY_URI_ONLY              0.136
+score SCC_ISEMM_LID_1                1.107
+score SCC_THREE_WORD_MONTY           2.199
+score SCRIPT_GIBBERISH               2.399
 score SENDGRID_REDIR                 0.001
-score SERGIO_SUBJECT_VIAGRA01        3.482
-score SHOPIFY_IMG_NOT_RCVD_SFY       0.927
-score SHORTENED_URL_SRC              1.848
-score SHORTENER_SHORT_IMG            0.510
-score SHORT_SHORTNER                 1.997
-score SPOOFED_FREEMAIL               1.997
+score SERGIO_SUBJECT_VIAGRA01        3.599
+score SHOPIFY_IMG_NOT_RCVD_SFY       1.280
+score SHORTENED_URL_SRC              1.158
+score SHORTENER_SHORT_IMG            0.001
+score SHORT_SHORTNER                 1.999
+score SPOOFED_FREEMAIL               1.999
 score SPOOFED_FREEMAIL_NO_RDNS       0.001 # force non-zero
-score SPOOFED_FREEM_REPTO            0.463
-score SPOOF_GMAIL_MID                0.388
-score STATIC_XPRIO_OLE               1.863
-score STOX_BOUND_090909_B            1.421
-score STY_INVIS_DIRECT               2.497
-score SUBJ_ATTENTION                 0.498
-score SUSP_UTF8_WORD_FROM            1.999
-score THIS_AD                        1.397
+score SPOOFED_FREEM_REPTO            0.381
+score SPOOF_GMAIL_MID                0.329
+score STATIC_XPRIO_OLE               1.865
+score STOX_BOUND_090909_B            0.422
+score STY_INVIS_DIRECT               2.499
+score SUBJ_ATTENTION                 0.499
+score SUSP_UTF8_WORD_FROM            0.513
+score THIS_AD                        1.332
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
 score TO_EQ_FM_SPF_FAIL              0.001
-score TO_NAME_SUBJ_NO_RDNS           1.673
-score TO_NO_BRKTS_FROM_MSSP          2.497
-score TO_NO_BRKTS_HTML_IMG           0.985
-score TO_NO_BRKTS_HTML_ONLY          1.997
+score TO_NAME_SUBJ_NO_RDNS           2.294
+score TO_NO_BRKTS_FROM_MSSP          2.499
+score TO_NO_BRKTS_HTML_IMG           1.255
+score TO_NO_BRKTS_HTML_ONLY          1.999
+score TO_NO_BRKTS_MSFT               0.001
 score TO_NO_BRKTS_NORDNS_HTML        1.204
-score TO_NO_BRKTS_PCNT               2.372
-score TRANSFORM_LIFE                 2.497
+score TO_NO_BRKTS_PCNT               2.239
+score TRANSFORM_LIFE                 2.499
 score TVD_PH_BODY_META               0.001
-score TVD_PH_SUBJ_META               0.001
-score UNDISC_FREEM                   3.696
-score UNDISC_MONEY                   3.695
-score UNICODE_OBFU_ASC               2.497
-score UNSUB_GOOG_FORM                2.497
-score URI_FIREBASEAPP                2.996
-score URI_GOOGLE_PROXY               2.796
-score URI_GOOG_STO_SPAMMY            2.996
+score UNDISC_FREEM                   3.799
+score UNDISC_MONEY                   3.538
+score UNICODE_OBFU_ASC               2.499
+score UNSUB_GOOG_FORM                2.499
+score URI_FIREBASEAPP                2.999
+score URI_GOOGLE_PROXY               2.799
+score URI_GOOG_STO_SPAMMY            2.999
 score URI_IN_URI_10                  2.877
-score URI_ONLY_MSGID_MALF            0.001
-score URI_PHISH                      3.697
-score URI_PHP_REDIR                  2.838
-score URI_TRY_3LD                    1.997
-score URI_WPADMIN                    2.596
-score URI_WP_HACKED                  3.496
-score URI_WP_HACKED_2                1.203
-score VFY_ACCT_NORDNS                2.999
+score URI_ONLY_MSGID_MALF            1.608
+score URI_PHISH                      3.794
+score URI_PHP_REDIR                  2.776
+score URI_TRY_3LD                    1.999
+score URI_WPADMIN                    2.699
+score URI_WP_HACKED                  3.499
+score URI_WP_HACKED_2                1.265
+score VFY_ACCT_NORDNS                2.778
 score WORD_INVIS                     0.589
-score WORD_INVIS_MANY                2.774
-score XFER_LOTSA_MONEY               0.998
-score XM_LIGHT_HEAVY                 2.497
+score WORD_INVIS_MANY                2.130
+score XFER_LOTSA_MONEY               1.000
+score XM_LIGHT_HEAVY                 2.499
 score XM_RANDOM                      2.499
-score XM_RECPTID                     2.996
-score XPRIO                          1.336
-score YOU_INHERIT                    1.928
+score XM_RECPTID                     2.999
+score XPRIO                          1.646
+score YOU_INHERIT                    1.678
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -270,7 +271,6 @@ score BEBEE_IMG_NOT_RCVD_BB          1.0
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
-score BITCOIN_MALWARE                1.000
 score BITCOIN_ONAN                   1.000
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
@@ -288,7 +288,6 @@ score BOMB_FREEM                     1.0
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
 score BULK_RE_SUSP_NTLD              1.000
-score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
 score COMPENSATION                   1.000
 score DAY_I_EARNED                   1.000
@@ -353,6 +352,7 @@ score NEWEGG_IMG_NOT_RCVD_NEGG       1.0
 score NEW_PRODUCTS                   1.000
 score OBFU_BITCOIN                   1.000
 score PDS_HELO_SPF_FAIL              1.000
+score PDS_NAKED_TO_NUMERO            1.000
 score PDS_PHP_RUNTIME_FUNC           1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000