You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2023/01/09 02:39:14 UTC

svn commit: r1906473 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Author: spamassassin_role
Date: Mon Jan  9 02:39:14 2023
New Revision: 1906473

URL: http://svn.apache.org/viewvc?rev=1906473&view=rev
Log:
updated scores for revision 1906455 active rules added since last mass-check

Modified:
    spamassassin/trunk/rulesrc/scores/72_scores.cf
    spamassassin/trunk/rulesrc/scores/scores-set0
    spamassassin/trunk/rulesrc/scores/scores-set1
    spamassassin/trunk/rulesrc/scores/scores-set2
    spamassassin/trunk/rulesrc/scores/scores-set3
    spamassassin/trunk/rulesrc/scores/stats-set0
    spamassassin/trunk/rulesrc/scores/stats-set1

Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1906473&r1=1906472&r2=1906473&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Mon Jan  9 02:39:14 2023
@@ -1,6 +1,6 @@
 score AC_BR_BONANZA                         0.001 0.001 0.001 0.001
 score AC_DIV_BONANZA                        0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS                     1.000 2.999 1.000 2.999
+score AC_FROM_MANY_DOTS                     2.999 2.999 2.999 2.999
 score AC_HTML_NONSENSE_TAGS                 1.999 1.999 1.999 1.999
 score AC_POST_EXTRAS                        1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS1               1.000 1.000 1.000 1.000
@@ -16,38 +16,40 @@ score ADMITS_SPAM
 score ADULT_DATING_COMPANY                  10.000 10.000 10.000 10.000
 score ADVANCE_FEE_2_NEW_FORM                1.000 1.000 1.000 1.000
 score ADVANCE_FEE_2_NEW_FRM_MNY             1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_MONEY               1.999 1.999 1.999 1.999
+score ADVANCE_FEE_2_NEW_MONEY               2.000 1.999 2.000 1.999
 score ADVANCE_FEE_3_NEW                     3.499 3.499 3.499 3.499
-score ADVANCE_FEE_3_NEW_MONEY               0.292 2.500 0.292 2.500
-score ADVANCE_FEE_4_NEW                     0.001 2.299 0.001 2.299
+score ADVANCE_FEE_3_NEW_MONEY               2.233 2.500 2.233 2.500
+score ADVANCE_FEE_4_NEW                     2.399 2.299 2.399 2.299
 score ADVANCE_FEE_4_NEW_MONEY               0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY             0.553 1.216 0.553 1.216
-score ADVANCE_FEE_5_NEW_MONEY               1.183 2.531 1.183 2.531
-score AD_PREFS                              0.067 0.080 0.067 0.080
+score ADVANCE_FEE_5_NEW_FRM_MNY             1.492 0.464 1.492 0.464
+score ADVANCE_FEE_5_NEW_MONEY               1.324 2.528 1.324 2.528
+score AD_PREFS                              0.242 0.272 0.242 0.272
 score ALIBABA_IMG_NOT_RCVD_ALI              1.000 1.000 1.000 1.000
-score AMAZON_IMG_NOT_RCVD_AMZN              1.632 1.666 1.632 1.666
+score AMAZON_IMG_NOT_RCVD_AMZN              2.499 1.667 2.499 1.667
 score APP_DEVELOPMENT_FREEM                 1.000 1.000 1.000 1.000
 score APP_DEVELOPMENT_NORDNS                1.000 1.000 1.000 1.000
+score ARC_SIGNED                            0.001 0.001 0.001 0.001
+score ARC_VALID                             0.001 0.001 0.001 0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2          0.001 0.001 0.001 0.001
-score BAT_BDRY_TO_MALF                      2.499 1.879 2.499 1.879
+score BAT_BDRY_TO_MALF                      2.499 1.524 2.499 1.524
 score BEBEE_IMG_NOT_RCVD_BB                 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM                   0.001 0.903 0.001 0.903
+score BIGNUM_EMAILS_FREEM                   0.404 0.894 0.404 0.894
 score BIGNUM_EMAILS_MANY                    2.999 2.999 2.999 2.999
 score BITCOIN_BOMB                          1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE                      1.502 0.024 1.502 0.024
-score BITCOIN_EXTORT_01                     4.513 4.767 4.513 4.767
+score BITCOIN_DEADLINE                      1.502 0.179 1.502 0.179
+score BITCOIN_EXTORT_01                     4.679 4.999 4.679 4.999
 score BITCOIN_EXTORT_02                     1.000 1.000 1.000 1.000
 score BITCOIN_IMGUR                         1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML                     3.499 2.716 3.499 2.716
+score BITCOIN_MALF_HTML                     2.553 2.668 2.553 2.668
 score BITCOIN_MALWARE                       1.000 1.000 1.000 1.000
 score BITCOIN_OBFU_SUBJ                     1.000 1.000 1.000 1.000
 score BITCOIN_ONAN                          1.000 1.000 1.000 1.000
 score BITCOIN_PAY_ME                        1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_01                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02                       0.073 2.425 0.073 2.425
-score BITCOIN_SPAM_03                       0.751 1.201 0.751 1.201
+score BITCOIN_SPAM_02                       0.863 2.082 0.863 2.082
+score BITCOIN_SPAM_03                       0.001 1.249 0.001 1.249
 score BITCOIN_SPAM_04                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05                       0.001 1.474 0.001 1.474
+score BITCOIN_SPAM_05                       0.001 1.262 0.001 1.262
 score BITCOIN_SPAM_06                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_07                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_08                       1.000 1.000 1.000 1.000
@@ -56,9 +58,9 @@ score BITCOIN_SPAM_10
 score BITCOIN_SPAM_11                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_12                       1.000 1.000 1.000 1.000
 score BITCOIN_SPF_ONLYALL                   0.001 1.000 0.001 1.000
-score BITCOIN_XPRIO                         2.149 0.001 2.149 0.001
+score BITCOIN_XPRIO                         2.223 0.001 2.223 0.001
 score BITCOIN_YOUR_INFO                     2.999 2.999 2.999 2.999
-score BODY_URI_ONLY                         1.156 0.848 1.156 0.848
+score BODY_URI_ONLY                         1.154 0.849 1.154 0.849
 score BOGUS_MIME_VERSION                    1.000 1.000 1.000 1.000
 score BOGUS_MSM_HDRS                        1.000 1.000 1.000 1.000
 score BOMB_FREEM                            1.000 1.000 1.000 1.000
@@ -66,13 +68,14 @@ score BOMB_MONEY
 score BTC_ORG                               1.000 1.000 1.000 1.000
 score BULK_RE_SUSP_NTLD                     1.000 1.000 1.000 1.000
 score CANT_SEE_AD                           1.000 1.000 1.000 1.000
-score CK_HELO_GENERIC                       0.249 0.003 0.249 0.003
+score CK_HELO_GENERIC                       0.250 0.005 0.250 0.005
 score COMMENT_GIBBERISH                     1.000 1.000 1.000 1.000
+score COMPENSATION                          1.000 0.001 1.000 0.001
 score CONTENT_AFTER_HTML                    1.000 1.000 1.000 1.000
 score CONTENT_AFTER_HTML_WEAK               1.000 1.000 1.000 1.000
-score CTE_8BIT_MISMATCH                     0.999 0.838 0.999 0.838
+score CTE_8BIT_MISMATCH                     0.999 0.840 0.999 0.840
 score DAY_I_EARNED                          1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY                      2.290 2.699 2.290 2.699
+score DEAR_BENEFICIARY                      2.668 2.699 2.668 2.699
 score DKIMWL_BL                             0.001 1.000 0.001 1.000
 score DKIMWL_BLOCKED                        0.001 0.001 0.001 0.001
 score DKIMWL_WL_HIGH                        0.001 -0.001 0.001 -0.001
@@ -87,20 +90,19 @@ score ENVFROM_GOOG_TRIX
 score FACEBOOK_IMG_NOT_RCVD_FB              1.000 1.000 1.000 1.000
 score FBI_MONEY                             1.000 1.000 1.000 1.000
 score FBI_SPOOF                             1.000 1.000 1.000 1.000
-score FILL_THIS_FORM                        0.800 1.222 0.800 1.222
-score FONT_INVIS_DIRECT                     0.001 0.501 0.001 0.501
+score FILL_THIS_FORM                        0.801 1.209 0.801 1.209
+score FONT_INVIS_DIRECT                     0.678 0.292 0.678 0.292
 score FONT_INVIS_DOTGOV                     1.000 1.000 1.000 1.000
 score FONT_INVIS_HTML_NOHTML                1.000 1.000 1.000 1.000
-score FONT_INVIS_LONG_LINE                  1.995 2.999 1.995 2.999
-score FONT_INVIS_MSGID                      1.942 1.852 1.942 1.852
-score FONT_INVIS_NORDNS                     2.344 1.918 2.344 1.918
-score FONT_INVIS_POSTEXTRAS                 0.152 0.138 0.152 0.138
-score FORGED_SPF_HELO                       0.001 0.364 0.001 0.364
+score FONT_INVIS_LONG_LINE                  2.001 2.989 2.001 2.989
+score FONT_INVIS_MSGID                      1.940 1.871 1.940 1.871
+score FONT_INVIS_NORDNS                     1.885 1.922 1.885 1.922
+score FONT_INVIS_POSTEXTRAS                 0.153 0.139 0.153 0.139
 score FORM_FRAUD                            0.999 0.001 0.999 0.001
-score FORM_FRAUD_3                          1.300 1.751 1.300 1.751
+score FORM_FRAUD_3                          1.237 1.033 1.237 1.033
 score FORM_FRAUD_5                          0.001 0.001 0.001 0.001
 score FOUND_YOU                             1.000 1.000 1.000 1.000
-score FREEMAIL_FORGED_FROMDOMAIN            0.249 0.107 0.249 0.107
+score FREEMAIL_FORGED_FROMDOMAIN            0.250 0.096 0.250 0.096
 score FREEM_FRNUM_UNICD_EMPTY               1.000 1.000 1.000 1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB            1.000 1.000 1.000 1.000
 score FROM_ADDR_WS                          1.000 1.000 1.000 1.000
@@ -112,8 +114,8 @@ score FROM_FMBLA_NEWDOM28
 score FROM_GOV_DKIM_AU                      0.001 -0.001 0.001 -0.001
 score FROM_GOV_REPLYTO_FREEMAIL             0.001 1.000 0.001 1.000
 score FROM_GOV_SPOOF                        0.001 1.000 0.001 1.000
-score FROM_MISSPACED                        0.030 0.001 0.030 0.001
-score FROM_MISSP_EH_MATCH                   0.276 0.001 0.276 0.001
+score FROM_MISSPACED                        0.001 0.001 0.001 0.001
+score FROM_MISSP_EH_MATCH                   0.001 0.001 0.001 0.001
 score FROM_MISSP_FREEMAIL                   2.499 0.001 2.499 0.001
 score FROM_MISSP_MSFT                       0.001 0.001 0.001 0.001
 score FROM_MISSP_REPLYTO                    0.001 0.001 0.001 0.001
@@ -123,143 +125,142 @@ score FROM_NEWDOM_BTC
 score FROM_NTLD_LINKBAIT                    1.000 1.000 1.000 1.000
 score FROM_NTLD_REPLY_FREEMAIL              1.000 1.000 1.000 1.000
 score FROM_NUMBERO_NEWDOMAIN                0.001 1.000 0.001 1.000
-score FROM_PAYPAL_SPOOF                     0.001 1.146 0.001 1.146
-score FROM_SUSPICIOUS_NTLD                  0.499 0.499 0.499 0.499
+score FROM_PAYPAL_SPOOF                     0.001 0.807 0.001 0.807
+score FROM_SUSPICIOUS_NTLD                  0.500 0.499 0.500 0.499
 score FROM_SUSPICIOUS_NTLD_FP               1.999 1.999 1.999 1.999
-score FSL_BULK_SIG                          0.001 0.165 0.001 0.165
+score FSL_BULK_SIG                          0.001 0.170 0.001 0.170
 score FSL_CTYPE_WIN1251                     0.001 0.001 0.001 0.001
-score FSL_HAS_TINYURL                       2.899 2.700 2.899 2.700
+score FSL_HAS_TINYURL                       2.899 2.699 2.899 2.699
 score FSL_NEW_HELO_USER                     0.001 0.001 0.001 0.001
-score FUZZY_AMAZON                          1.887 2.599 1.887 2.599
-score FUZZY_BITCOIN                         0.773 1.801 0.773 1.801
-score FUZZY_CLICK_HERE                      3.299 3.099 3.299 3.099
-score FUZZY_IMPORTANT                       0.001 2.199 0.001 2.199
-score FUZZY_UNSUBSCRIBE                     2.611 2.682 2.611 2.682
-score FUZZY_WALLET                          0.001 1.800 0.001 1.800
+score FUZZY_AMAZON                          2.699 2.599 2.699 2.599
+score FUZZY_CLICK_HERE                      3.199 3.099 3.199 3.099
+score FUZZY_IMPORTANT                       2.199 2.200 2.199 2.200
+score FUZZY_UNSUBSCRIBE                     2.608 2.840 2.608 2.840
+score FUZZY_WALLET                          1.785 1.799 1.785 1.799
 score GAPPY_SALES_LEADS_FREEM               1.000 1.000 1.000 1.000
-score GB_BITCOIN_NH                         1.318 2.241 1.318 2.241
-score GB_CUSTOM_HTM_URI                     1.499 0.001 1.499 0.001
-score GB_FAKE_RF_SHORT                      0.001 1.835 0.001 1.835
+score GB_BITCOIN_NH                         2.011 0.574 2.011 0.574
+score GB_CUSTOM_HTM_URI                     1.333 0.001 1.333 0.001
+score GB_FAKE_RF_SHORT                      0.001 1.822 0.001 1.822
 score GB_FORGED_MUA_POSTFIX                 1.000 1.000 1.000 1.000
-score GB_FREEMAIL_DISPTO                    0.500 0.001 0.500 0.001
+score GB_FREEMAIL_DISPTO                    0.001 0.001 0.001 0.001
 score GB_FREEMAIL_DISPTO_NOTFREEM           0.500 0.500 0.500 0.500
 score GB_GOOGLE_OBFUR                       0.750 0.750 0.750 0.750
-score GB_HASHBL_BTC                         0.001 0.418 0.001 0.418
+score GB_HASHBL_BTC                         0.001 0.447 0.001 0.447
 score GB_URI_FLEEK_STO_HTM                  0.999 0.999 0.999 0.999
 score GOOGLE_DOCS_PHISH                     1.000 1.000 1.000 1.000
 score GOOGLE_DOCS_PHISH_MANY                1.000 1.000 1.000 1.000
 score GOOGLE_DOC_SUSP                       1.000 1.000 1.000 1.000
 score GOOGLE_DRIVE_REPLY_BAD_NTLD           1.000 1.000 1.000 1.000
 score GOOG_MALWARE_DNLD                     1.000 1.000 1.000 1.000
-score GOOG_REDIR_NORDNS                     2.500 2.699 2.500 2.699
+score GOOG_REDIR_NORDNS                     2.250 2.699 2.250 2.699
 score GOOG_STO_EMAIL_PHISH                  1.000 1.000 1.000 1.000
 score GOOG_STO_HTML_PHISH                   1.000 1.000 1.000 1.000
 score GOOG_STO_HTML_PHISH_MANY              1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_HTML                     1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_NOHTML                   1.000 1.000 1.000 1.000
-score GOOG_STO_NOIMG_HTML                   2.803 2.948 2.803 2.948
+score GOOG_STO_NOIMG_HTML                   2.695 2.947 2.695 2.947
 score HAS_X_NO_RELAY                        1.000 1.000 1.000 1.000
-score HAS_X_OUTGOING_SPAM_STAT              0.502 1.209 0.502 1.209
-score HDRS_LCASE_IMGONLY                    0.100 0.100 0.100 0.100
+score HAS_X_OUTGOING_SPAM_STAT              0.509 1.042 0.509 1.042
+score HDRS_LCASE                            0.100 0.001 0.100 0.001
+score HDRS_LCASE_IMGONLY                    0.099 0.099 0.099 0.099
 score HDRS_MISSP                            2.499 2.499 2.499 2.499
 score HDR_ORDER_FTSDMCXX_DIRECT             1.999 1.999 1.999 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS             1.850 0.973 1.850 0.973
+score HDR_ORDER_FTSDMCXX_NORDNS             3.092 0.972 3.092 0.972
 score HEADER_FROM_DIFFERENT_DOMAINS         0.250 0.250 0.250 0.250
 score HELO_NO_DOMAIN                        0.001 0.001 0.001 0.001
-score HEXHASH_WORD                          1.000 2.636 1.000 2.636
+score HEXHASH_WORD                          2.255 2.175 2.255 2.175
 score HK_CTE_RAW                            1.000 1.000 1.000 1.000
 score HK_LOTTO                              0.001 0.001 0.001 0.001
-score HK_NAME_FROM                          0.999 0.999 0.999 0.999
-score HK_RANDOM_ENVFROM                     1.000 0.001 1.000 0.001
+score HK_NAME_FROM                          1.000 1.000 1.000 1.000
+score HK_RANDOM_ENVFROM                     0.999 0.001 0.999 0.001
 score HK_RANDOM_FROM                        0.999 0.999 0.999 0.999
 score HK_RANDOM_REPLYTO                     1.000 0.999 1.000 0.999
 score HK_RCVD_IP_MULTICAST                  1.000 1.000 1.000 1.000
 score HK_SCAM                               1.999 1.999 1.999 1.999
 score HK_WIN                                0.001 0.001 0.001 0.001
-score HOSTED_IMG_DIRECT_MX                  0.965 3.499 0.965 3.499
+score HOSTED_IMG_DIRECT_MX                  3.499 3.499 3.499 3.499
 score HOSTED_IMG_DQ_UNSUB                   1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM                      3.499 3.358 3.499 3.358
+score HOSTED_IMG_FREEM                      3.499 3.369 3.499 3.369
 score HOSTED_IMG_MULTI                      1.000 1.000 1.000 1.000
 score HOSTED_IMG_MULTI_PUB_01               2.999 2.337 2.999 2.337
-score HTML_ENTITY_ASCII                     2.999 2.711 2.999 2.711
+score HTML_ENTITY_ASCII                     3.000 2.774 3.000 2.774
 score HTML_ENTITY_ASCII_TINY                1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE                         2.502 2.999 2.502 2.999
+score HTML_OFF_PAGE                         2.999 2.999 2.999 2.999
 score HTML_SHRT_CMNT_OBFU_MANY              1.000 1.000 1.000 1.000
 score HTML_SINGLET_MANY                     2.499 1.000 2.499 1.000
-score HTML_TAG_BALANCE_CENTER               3.299 3.099 3.299 3.099
-score HTML_TEXT_INVISIBLE_FONT              1.999 0.600 1.999 0.600
-score HTML_TEXT_INVISIBLE_STYLE             0.886 3.499 0.886 3.499
+score HTML_TAG_BALANCE_CENTER               3.499 3.099 3.499 3.099
+score HTML_TEXT_INVISIBLE_FONT              1.738 0.581 1.738 0.581
+score HTML_TEXT_INVISIBLE_STYLE             0.686 3.499 0.686 3.499
 score IMG_ONLY_FM_DOM_INFO                  1.000 1.000 1.000 1.000
 score JH_SPAMMY_HEADERS                     3.499 3.499 3.499 3.499
 score JH_SPAMMY_PATTERN01                   1.000 1.000 1.000 1.000
 score JH_SPAMMY_PATTERN02                   1.000 1.000 1.000 1.000
-score KHOP_FAKE_EBAY                        0.699 1.799 0.699 1.799
-score KHOP_HELO_FCRDNS                      0.400 0.399 0.400 0.399
-score KHOP_JS_OBFUSCATION                   3.399 3.099 3.399 3.099
+score KHOP_FAKE_EBAY                        0.699 0.597 0.699 0.597
+score KHOP_HELO_FCRDNS                      0.399 0.399 0.399 0.399
+score KHOP_JS_OBFUSCATION                   3.299 3.100 3.299 3.100
 score LINKEDIN_IMG_NOT_RCVD_LNKN            1.000 1.000 1.000 1.000
 score LIST_PRTL_PUMPDUMP                    1.000 1.000 1.000 1.000
 score LIST_PRTL_SAME_USER                   1.000 1.000 1.000 1.000
 score LONG_HEX_URI                          2.999 1.618 2.999 1.618
-score LONG_IMG_URI                          0.093 0.936 0.093 0.936
-score LONG_INVISIBLE_TEXT                   2.999 1.989 2.999 1.989
+score LONG_IMG_URI                          1.934 0.936 1.934 0.936
+score LONG_INVISIBLE_TEXT                   2.999 1.999 2.999 1.999
 score LOTS_OF_MONEY                         0.010 0.010 0.010 0.010
-score LOTTO_DEPT                            1.999 1.970 1.999 1.970
+score LOTTO_DEPT                            1.483 1.489 1.483 1.489
 score LUCRATIVE                             1.000 1.000 1.000 1.000
 score MALF_HTML_B64                         1.000 1.000 1.000 1.000
 score MALWARE_NORDNS                        1.000 1.000 1.000 1.000
 score MALWARE_PASSWORD                      1.000 1.000 1.000 1.000
 score MANY_HDRS_LCASE                       0.100 0.100 0.100 0.100
-score MILLION_HUNDRED                       0.498 0.001 0.498 0.001
-score MILLION_USD                           1.309 1.999 1.309 1.999
-score MIMEOLE_DIRECT_TO_MX                  0.001 0.397 0.001 0.397
+score MILLION_HUNDRED                       0.001 0.001 0.001 0.001
+score MILLION_USD                           1.999 1.999 1.999 1.999
+score MIMEOLE_DIRECT_TO_MX                  1.612 0.397 1.612 0.397
 score MIME_NO_TEXT                          1.000 1.000 1.000 1.000
 score MIXED_AREA_CASE                       1.000 1.000 1.000 1.000
 score MIXED_CENTER_CASE                     1.000 1.000 1.000 1.000
-score MIXED_ES                              2.199 0.001 2.199 0.001
+score MIXED_ES                              2.101 0.001 2.101 0.001
 score MIXED_FONT_CASE                       1.000 1.000 1.000 1.000
-score MIXED_HREF_CASE                       1.000 1.000 1.000 1.000
-score MIXED_IMG_CASE                        1.000 2.999 1.000 2.999
+score MIXED_HREF_CASE                       0.650 1.000 0.650 1.000
+score MIXED_IMG_CASE                        2.999 2.999 2.999 2.999
 score MONERO_DEADLINE                       1.000 1.000 1.000 1.000
 score MONERO_EXTORT_01                      1.000 1.000 1.000 1.000
 score MONERO_MALWARE                        1.000 1.000 1.000 1.000
 score MONERO_PAY_ME                         1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD                        2.699 2.169 2.699 2.169
+score MONEY_ATM_CARD                        2.292 2.040 2.292 2.040
 score MONEY_FORM                            0.001 0.001 0.001 0.001
 score MONEY_FORM_SHORT                      0.001 0.001 0.001 0.001
-score MONEY_FRAUD_3                         2.699 2.499 2.699 2.499
+score MONEY_FRAUD_3                         2.700 2.499 2.700 2.499
 score MONEY_FRAUD_5                         0.001 0.001 0.001 0.001
-score MONEY_FRAUD_8                         0.141 0.001 0.141 0.001
-score MONEY_FREEMAIL_REPTO                  2.999 0.256 2.999 0.256
+score MONEY_FRAUD_8                         0.001 0.001 0.001 0.001
+score MONEY_FREEMAIL_REPTO                  2.999 0.252 2.999 0.252
 score MONEY_FROM_MISSP                      0.001 0.001 0.001 0.001
 score MSGID_DOLLARS_URI_IMG                 1.000 1.000 1.000 1.000
 score MSGID_HDR_MALF                        1.000 1.000 1.000 1.000
-score MSMAIL_PRI_ABNORMAL                   0.416 1.499 0.416 1.499
+score MSMAIL_PRI_ABNORMAL                   1.499 0.848 1.499 0.848
 score MSM_PRIO_REPTO                        1.000 1.000 1.000 1.000
-score NA_DOLLARS                            1.500 0.001 1.500 0.001
+score NA_DOLLARS                            0.001 0.001 0.001 0.001
 score NEWEGG_IMG_NOT_RCVD_NEGG              1.000 1.000 1.000 1.000
 score NEW_PRODUCTS                          1.000 1.000 1.000 1.000
-score NICE_REPLY_A                          -2.661 -0.001 -2.661 -0.001
+score NICE_REPLY_A                          -3.899 -0.001 -3.899 -0.001
 score NO_FM_NAME_IP_HOSTN                   0.001 0.001 0.001 0.001
 score NSL_RCVD_FROM_USER                    0.001 0.001 0.001 0.001
 score NSL_RCVD_HELO_USER                    0.001 0.001 0.001 0.001
-score OBFU_BITCOIN                          1.402 2.999 1.402 2.999
-score OBFU_TEXT_ATTACH                      0.861 1.599 0.861 1.599
-score ODD_FREEM_REPTO                       2.999 2.581 2.999 2.581
-score PDS_BTC_ID                            0.499 0.286 0.499 0.286
-score PDS_BTC_MSGID                         0.999 0.001 0.999 0.001
+score OBFU_BITCOIN                          1.000 2.999 1.000 2.999
+score OBFU_TEXT_ATTACH                      0.298 0.099 0.298 0.099
+score ODD_FREEM_REPTO                       2.999 2.523 2.999 2.523
+score PDS_BTC_ID                            0.499 0.110 0.499 0.110
+score PDS_BTC_MSGID                         0.609 0.001 0.609 0.001
 score PDS_DBL_URL_TNB_RUNON                 1.999 1.000 1.999 1.000
-score PDS_FROM_2_EMAILS                     2.433 1.288 2.433 1.288
 score PDS_HELO_SPF_FAIL                     0.001 1.000 0.001 1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL          0.750 0.749 0.750 0.749
+score PDS_NO_FULL_NAME_SPOOFED_URL          0.749 0.750 0.749 0.750
 score PDS_RDNS_DYNAMIC_FP                   0.001 0.001 0.001 0.001
 score PDS_SHORT_SPOOFED_URL                 1.999 1.999 1.999 1.999
 score PHISH_AZURE_CLOUDAPP                  3.500 3.500 3.500 3.500
 score PHISH_FBASEAPP                        1.000 1.000 1.000 1.000
 score PHP_NOVER_MUA                         1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT                       1.000 1.000 1.000 1.000
-score PHP_SCRIPT                            2.499 1.227 2.499 1.227
+score PHP_ORIG_SCRIPT                       1.996 1.000 1.996 1.000
+score PHP_SCRIPT                            2.499 1.411 2.499 1.411
 score PHP_SCRIPT_MUA                        1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT               0.751 0.001 0.751 0.001
+score PP_MIME_FAKE_ASCII_TEXT               0.999 0.001 0.999 0.001
 score PP_TOO_MUCH_UNICODE02                 0.500 0.500 0.500 0.500
 score PP_TOO_MUCH_UNICODE05                 1.000 1.000 1.000 1.000
 score PUMPDUMP                              1.000 1.000 1.000 1.000
@@ -270,10 +271,20 @@ score RAND_MKTG_HEADER
 score RATWARE_NO_RDNS                       0.001 0.001 0.001 0.001
 score RCVD_DOTEDU_SHORT                     1.000 1.000 1.000 1.000
 score RCVD_DOTEDU_SUSP_URI                  1.000 1.000 1.000 1.000
+score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
 score RCVD_IN_MSPIKE_H2                     0.001 -0.001 0.001 -0.001
+score RCVD_IN_MSPIKE_H3                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_H4                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_H5                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_L2                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_L3                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_L4                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_L5                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_WL                     0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_ZBI                    0.001 0.001 0.001 0.001
 score RDNS_NUM_TLD_ATCHNX                   1.000 1.000 1.000 1.000
-score RDNS_NUM_TLD_XM                       2.349 2.999 2.349 2.999
-score REPTO_419_FRAUD                       1.000 2.069 1.000 2.069
+score RDNS_NUM_TLD_XM                       2.057 2.999 2.057 2.999
+score REPTO_419_FRAUD                       2.553 1.895 2.553 1.895
 score REPTO_419_FRAUD_AOL                   1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_AOL_LOOSE             1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_CNS                   1.000 1.000 1.000 1.000
@@ -288,16 +299,16 @@ score REPTO_419_FRAUD_YH_LOOSE
 score REPTO_419_FRAUD_YJ                    1.000 1.000 1.000 1.000
 score REPTO_419_FRAUD_YN                    1.000 1.000 1.000 1.000
 score REPTO_INFONUMSCOM                     1.000 1.000 1.000 1.000
-score SCC_CANSPAM_1                         0.001 2.199 0.001 2.199
+score SCC_CANSPAM_1                         2.299 2.199 2.299 2.199
 score SCC_ISEMM_LID_1                       1.000 1.000 1.000 1.000
-score SCC_ISEMM_LID_1B                      1.499 1.273 1.499 1.273
-score SENDGRID_REDIR                        1.499 0.871 1.499 0.871
+score SCC_ISEMM_LID_1B                      1.499 1.272 1.499 1.272
+score SENDGRID_REDIR                        1.499 0.876 1.499 0.876
 score SENDGRID_REDIR_PHISH                  1.000 1.000 1.000 1.000
 score SEO_SUSP_NTLD                         1.000 1.000 1.000 1.000
-score SERGIO_SUBJECT_VIAGRA01               2.135 2.205 2.135 2.205
-score SHOPIFY_IMG_NOT_RCVD_SFY              2.499 1.192 2.499 1.192
-score SHORTENED_URL_SRC                     2.199 2.199 2.199 2.199
-score SHORTENER_SHORT_IMG                   0.001 1.019 0.001 1.019
+score SERGIO_SUBJECT_VIAGRA01               1.505 1.121 1.505 1.121
+score SHOPIFY_IMG_NOT_RCVD_SFY              2.499 1.193 2.499 1.193
+score SHORTENED_URL_SRC                     2.091 2.199 2.091 2.199
+score SHORTENER_SHORT_IMG                   0.001 0.681 0.001 0.681
 score SHORT_IMG_SUSP_NTLD                   1.000 1.000 1.000 1.000
 score SHORT_SHORTNER                        1.999 1.999 1.999 1.999
 score SPOOFED_FREEMAIL                      0.001 0.001 0.001 0.001
@@ -305,40 +316,42 @@ score SPOOFED_FREEMAIL_NO_RDNS
 score SPOOFED_FREEM_REPTO                   0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_CHN               0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_RUS               0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID                       1.500 0.001 1.500 0.001
+score SPOOF_GMAIL_MID                       1.499 0.001 1.499 0.001
 score STATIC_XPRIO_OLE                      0.001 0.001 0.001 0.001
 score STOCK_TIP                             1.000 1.000 1.000 1.000
-score STOX_BOUND_090909_B                   2.059 0.001 2.059 0.001
+score STOX_BOUND_090909_B                   1.295 0.001 1.295 0.001
 score SUBJ_BRKN_WORDNUMS                    1.000 1.000 1.000 1.000
-score SUSP_UTF8_WORD_COMBO                  2.327 0.267 2.327 0.267
-score SUSP_UTF8_WORD_MANY                   0.673 1.149 0.673 1.149
-score SUSP_UTF8_WORD_SUBJ                   1.999 2.000 1.999 2.000
+score SURBL_BLOCKED                         0.001 0.001 0.001 0.001
+score SUSP_UTF8_WORD_COMBO                  2.288 0.269 2.288 0.269
+score SUSP_UTF8_WORD_MANY                   0.712 1.242 0.712 1.242
+score SUSP_UTF8_WORD_SUBJ                   1.999 1.999 1.999 1.999
 score SYSADMIN                              1.000 1.000 1.000 1.000
 score TAGSTAT_IMG_NOT_RCVD_TGST             1.000 1.000 1.000 1.000
 score TARINGANET_IMG_NOT_RCVD_TN            1.000 1.000 1.000 1.000
-score THIS_AD                               1.099 1.199 1.099 1.199
+score THIS_AD                               1.100 1.199 1.100 1.199
 score THIS_IS_ADV_SUSP_NTLD                 1.000 1.000 1.000 1.000
 score TONLINE_FAKE_DKIM                     1.000 1.000 1.000 1.000
 score TO_EQ_FM_DIRECT_MX                    1.000 1.000 1.000 1.000
 score TO_EQ_FM_DOM_SPF_FAIL                 0.001 0.001 0.001 0.001
 score TO_EQ_FM_SPF_FAIL                     0.001 0.001 0.001 0.001
 score TO_IN_SUBJ                            0.100 0.100 0.100 0.100
-score TO_NAME_SUBJ_NO_RDNS                  2.381 2.999 2.381 2.999
-score TO_NO_BRKTS_HTML_IMG                  1.999 1.999 1.999 1.999
+score TO_NAME_SUBJ_NO_RDNS                  2.370 2.999 2.370 2.999
+score TO_NO_BRKTS_HTML_IMG                  1.698 1.999 1.698 1.999
 score TO_NO_BRKTS_HTML_ONLY                 1.999 1.999 1.999 1.999
 score TO_NO_BRKTS_MSFT                      0.001 0.001 0.001 0.001
-score TO_NO_BRKTS_NORDNS_HTML               1.999 1.822 1.999 1.822
-score TO_NO_BRKTS_PCNT                      2.499 2.499 2.499 2.499
-score TVD_ENHANCE                           1.990 0.864 1.990 0.864
+score TO_NO_BRKTS_NORDNS_HTML               1.999 1.823 1.999 1.823
+score TO_NO_BRKTS_PCNT                      2.500 2.500 2.500 2.500
+score TVD_ENHANCE                           0.778 0.866 0.778 0.866
 score TVD_GET_STOCK                         2.599 2.599 2.599 2.599
-score TVD_IP_HEX                            2.050 3.016 2.050 3.016
-score TVD_IP_OCT                            2.504 1.415 2.504 1.415
-score TVD_RCVD_SPACE_BRACKET                2.247 0.262 2.247 0.262
-score TVD_SPACE_RATIO_MINFP                 1.635 0.001 1.635 0.001
+score TVD_IP_HEX                            2.058 3.068 2.058 3.068
+score TVD_IP_OCT                            2.571 2.649 2.571 2.649
+score TVD_RCVD_SPACE_BRACKET                1.666 0.760 1.666 0.760
+score TVD_SPACE_ENCODED                     1.995 0.001 1.995 0.001
+score TVD_SPACE_RATIO_MINFP                 2.500 0.001 2.500 0.001
 score TW_GIBBERISH_MANY                     1.000 1.000 1.000 1.000
 score UC_GIBBERISH_OBFU                     1.000 1.000 1.000 1.000
-score UNDISC_FREEM                          2.700 2.699 2.700 2.699
-score UNDISC_MONEY                          2.800 2.699 2.800 2.699
+score UNDISC_FREEM                          2.799 2.699 2.799 2.699
+score UNDISC_MONEY                          2.900 2.699 2.900 2.699
 score UNICODE_OBFU_ASC                      2.499 2.499 2.499 2.499
 score UNICODE_OBFU_ZW                       1.000 1.000 1.000 1.000
 score UNSUB_GOOG_FORM                       1.000 1.000 1.000 1.000
@@ -346,33 +359,33 @@ score URI_ADOBESPARK
 score URI_AZURE_CLOUDAPP                    1.000 1.000 1.000 1.000
 score URI_DASHGOVEDU                        1.000 1.000 1.000 1.000
 score URI_DATA                              1.000 1.000 1.000 1.000
-score URI_DOTEDU                            1.999 1.999 1.999 1.999
+score URI_DOTEDU                            0.305 1.999 0.305 1.999
 score URI_DOTEDU_ENTITY                     1.000 1.000 1.000 1.000
-score URI_FIREBASEAPP                       1.000 1.000 1.000 1.000
+score URI_FIREBASEAPP                       2.999 1.000 2.999 1.000
 score URI_GOOGLE_PROXY                      2.099 1.999 2.099 1.999
 score URI_GOOG_STO_SPAMMY                   3.000 3.000 3.000 3.000
 score URI_HEX_IP                            1.000 1.000 1.000 1.000
 score URI_IMG_WP_REDIR                      1.000 1.000 1.000 1.000
 score URI_LONG_REPEAT                       1.000 1.000 1.000 1.000
-score URI_ONLY_MSGID_MALF                   0.001 1.887 0.001 1.887
+score URI_ONLY_MSGID_MALF                   0.746 0.613 0.746 0.613
 score URI_OPTOUT_3LD                        1.000 1.000 1.000 1.000
-score URI_PHISH                             3.999 3.102 3.999 3.102
-score URI_PHP_REDIR                         1.000 2.875 1.000 2.875
-score URI_TRY_3LD                           1.999 1.164 1.999 1.164
+score URI_PHISH                             3.999 3.100 3.999 3.100
+score URI_PHP_REDIR                         3.499 2.875 3.499 2.875
+score URI_TRY_3LD                           1.999 1.167 1.999 1.167
 score URI_TRY_USME                          1.000 1.000 1.000 1.000
 score URI_WP_DIRINDEX                       1.000 1.000 1.000 1.000
-score URI_WP_HACKED                         3.499 3.499 3.499 3.499
+score URI_WP_HACKED                         3.499 3.500 3.499 3.500
 score URI_WP_HACKED_2                       2.499 2.499 2.499 2.499
 score USB_DRIVES                            1.000 1.000 1.000 1.000
-score VFY_ACCT_NORDNS                       2.630 2.657 2.630 2.657
+score VFY_ACCT_NORDNS                       2.894 2.499 2.894 2.499
 score VPS_NO_NTLD                           1.000 1.000 1.000 1.000
 score WALMART_IMG_NOT_RCVD_WAL              1.000 1.000 1.000 1.000
-score WORD_INVIS                            0.795 0.088 0.795 0.088
-score WORD_INVIS_MANY                       1.000 2.999 1.000 2.999
-score XFER_LOTSA_MONEY                      0.999 0.999 0.999 0.999
+score WORD_INVIS                            0.542 0.068 0.542 0.068
+score WORD_INVIS_MANY                       3.000 2.999 3.000 2.999
+score XFER_LOTSA_MONEY                      1.000 0.999 1.000 0.999
 score XM_DIGITS_ONLY                        1.000 1.000 1.000 1.000
-score XM_RANDOM                             2.499 2.499 2.499 2.499
+score XM_RANDOM                             2.500 2.499 2.500 2.499
 score XPRIO                                 0.001 0.001 0.001 0.001
 score XPRIO_SHORT_SUBJ                      1.000 1.000 1.000 1.000
-score XPRIO_URL_SHORTNER                    0.001 0.943 0.001 0.943
-score YOU_INHERIT                           0.001 2.031 0.001 2.031
+score XPRIO_URL_SHORTNER                    0.995 0.532 0.995 0.532
+score YOU_INHERIT                           0.959 2.199 0.959 2.199

Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1906473&r1=1906472&r2=1906473&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Mon Jan  9 02:39:14 2023
@@ -1,175 +1,187 @@
-# Using score set 0 logs for revision 1906418 from:
-# ham-ena-week0.r1906418.log ham-ena-week1.r1906418.log ham-ena-week2.r1906418.log ham-ena-week3.r1906418.log ham-ena-week4.r1906418.log ham-giovanni-ham.r1906418.log ham-giovanni-spammy.r1906418.log ham-giovanni-spam.r1906418.log ham-grenier.r1906418.log ham-hege.r1906418.log ham-jhardin.r1906418.log ham-llanga.r1906418.log ham-mmiroslaw-mails-ham.r1906418.log ham-mmiroslaw-mails-spam.r1906418.log ham-spamsponge.r1906418.log ham-thendrikx.r1906418.log ham-tsz-spam-corpus.r1906418.log spam-ena-week0.r1906418.log spam-ena-week1.r1906418.log spam-ena-week2.r1906418.log spam-ena-week3.r1906418.log spam-ena-week4.r1906418.log spam-giovanni-ham.r1906418.log spam-giovanni-spammy.r1906418.log spam-giovanni-spam.r1906418.log spam-grenier.r1906418.log spam-hege.r1906418.log spam-jhardin.r1906418.log spam-llanga.r1906418.log spam-mmiroslaw-mails-ham.r1906418.log spam-mmiroslaw-mails-spam.r1906418.log spam-spamsponge.r1906418.log spam-thendrikx.r1906418.log spam-tsz-spam-corpus.r1906418.log
+# Using score set 0 logs for revision 1906455 from:
+# ham-ena-week0.r1906455.log ham-ena-week1.r1906455.log ham-ena-week2.r1906455.log ham-ena-week3.r1906455.log ham-ena-week4.r1906455.log ham-giovanni-ham.r1906455.log ham-giovanni-spammy.r1906455.log ham-giovanni-spam.r1906455.log ham-grenier.r1906455.log ham-hege.r1906455.log ham-jhardin.r1906455.log ham-mmiroslaw-mails-ham.r1906455.log ham-mmiroslaw-mails-spam.r1906455.log ham-spamsponge.r1906455.log ham-thendrikx.r1906455.log ham-tsz-spam-corpus.r1906455.log spam-ena-week0.r1906455.log spam-ena-week1.r1906455.log spam-ena-week2.r1906455.log spam-ena-week3.r1906455.log spam-ena-week4.r1906455.log spam-giovanni-ham.r1906455.log spam-giovanni-spammy.r1906455.log spam-giovanni-spam.r1906455.log spam-grenier.r1906455.log spam-hege.r1906455.log spam-jhardin.r1906455.log spam-mmiroslaw-mails-ham.r1906455.log spam-mmiroslaw-mails-spam.r1906455.log spam-spamsponge.r1906455.log spam-thendrikx.r1906455.log spam-tsz-spam-corpus.r1906455.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001 # force non-zero
+score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
 score ADMITS_SPAM                    2.199
-score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_2_NEW_MONEY        2.000
 score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        0.292
+score ADVANCE_FEE_3_NEW_MONEY        2.233
+score ADVANCE_FEE_4_NEW              2.399
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.553
-score ADVANCE_FEE_5_NEW_MONEY        1.183
-score AD_PREFS                       0.067
-score AMAZON_IMG_NOT_RCVD_AMZN       1.632
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.492
+score ADVANCE_FEE_5_NEW_MONEY        1.324
+score AD_PREFS                       0.242
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.001 # force non-zero
 score BAT_BDRY_TO_MALF               2.499
-score BIGNUM_EMAILS_FREEM            0.001
+score BIGNUM_EMAILS_FREEM            0.404
 score BIGNUM_EMAILS_MANY             2.999
 score BITCOIN_DEADLINE               1.502
-score BITCOIN_EXTORT_01              4.513
-score BITCOIN_MALF_HTML              3.499
-score BITCOIN_SPAM_02                0.073
-score BITCOIN_SPAM_03                0.751
-score BITCOIN_XPRIO                  2.149
+score BITCOIN_EXTORT_01              4.679
+score BITCOIN_MALF_HTML              2.553
+score BITCOIN_SPAM_02                0.863
+score BITCOIN_SPAM_03                0.001
+score BITCOIN_XPRIO                  2.223
 score BITCOIN_YOUR_INFO              2.999
-score BODY_URI_ONLY                  1.156
-score BULK_RE_SUSP_NTLD              1.000
-score CK_HELO_GENERIC                0.249
+score BODY_URI_ONLY                  1.154
+score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              0.999
-score DEAR_BENEFICIARY               2.290
+score DEAR_BENEFICIARY               2.668
 score ENCRYPTED_MESSAGE              -0.999
 score END_FUTURE_EMAILS              2.499
-score FILL_THIS_FORM                 0.800
-score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           1.995
-score FONT_INVIS_MSGID               1.942
-score FONT_INVIS_NORDNS              2.344
-score FONT_INVIS_POSTEXTRAS          0.152
+score FILL_THIS_FORM                 0.801
+score FONT_INVIS_DIRECT              0.678
+score FONT_INVIS_LONG_LINE           2.001
+score FONT_INVIS_MSGID               1.940
+score FONT_INVIS_NORDNS              1.885
+score FONT_INVIS_POSTEXTRAS          0.153
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   1.300
+score FORM_FRAUD_3                   1.237
 score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROM_MISSPACED                 0.030
-score FROM_MISSP_EH_MATCH            0.276
+score FREEMAIL_FORGED_FROMDOMAIN     0.250
+score FROM_MISSPACED                 0.001
+score FROM_MISSP_EH_MATCH            0.001 # force non-zero
 score FROM_MISSP_FREEMAIL            2.499
-score FROM_MISSP_MSFT                0.001 # force non-zero
-score FROM_MISSP_REPLYTO             0.001 # force non-zero
+score FROM_MISSP_MSFT                0.001
+score FROM_MISSP_REPLYTO             0.001
 score FROM_MISSP_USER                0.001
-score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_SUSPICIOUS_NTLD           0.500
 score FROM_SUSPICIOUS_NTLD_FP        1.999
 score FSL_CTYPE_WIN1251              0.001
 score FSL_HAS_TINYURL                2.899
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   1.887
-score FUZZY_BITCOIN                  0.773
-score FUZZY_CLICK_HERE               3.299
-score FUZZY_UNSUBSCRIBE              2.611
-score GB_BITCOIN_NH                  1.318
-score GB_CUSTOM_HTM_URI              1.499
+score FUZZY_AMAZON                   2.699
+score FUZZY_CLICK_HERE               3.199
+score FUZZY_IMPORTANT                2.199
+score FUZZY_UNSUBSCRIBE              2.608
+score FUZZY_WALLET                   1.785
+score GB_BITCOIN_NH                  2.011
+score GB_CUSTOM_HTM_URI              1.333
 score GB_FAKE_RF_SHORT               0.001
+score GB_FREEMAIL_DISPTO             0.001
 score GB_URI_FLEEK_STO_HTM           0.999
-score GOOG_REDIR_NORDNS              2.500
-score GOOG_STO_NOIMG_HTML            2.803
-score HAS_X_OUTGOING_SPAM_STAT       0.502
-score HDRS_LCASE_IMGONLY             0.100
+score GOOG_REDIR_NORDNS              2.250
+score GOOG_STO_NOIMG_HTML            2.695
+score HAS_X_OUTGOING_SPAM_STAT       0.509
+score HDRS_LCASE_IMGONLY             0.099
 score HDRS_MISSP                     2.499
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
-score HDR_ORDER_FTSDMCXX_NORDNS      1.850
+score HDR_ORDER_FTSDMCXX_NORDNS      3.092
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
-score HK_LOTTO                       0.001
-score HK_NAME_FROM                   0.999
-score HK_RANDOM_ENVFROM              1.000
+score HEXHASH_WORD                   2.255
+score HK_LOTTO                       0.001 # force non-zero
+score HK_NAME_FROM                   1.000
+score HK_RANDOM_ENVFROM              0.999
 score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              1.000
 score HK_SCAM                        1.999
 score HK_WIN                         0.001
-score HOSTED_IMG_DIRECT_MX           0.965
+score HOSTED_IMG_DIRECT_MX           3.499
 score HOSTED_IMG_FREEM               3.499
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HTML_ENTITY_ASCII              2.999
-score HTML_OFF_PAGE                  2.502
+score HTML_ENTITY_ASCII              3.000
+score HTML_OFF_PAGE                  2.999
 score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        3.299
-score HTML_TEXT_INVISIBLE_FONT       1.999
-score HTML_TEXT_INVISIBLE_STYLE      0.886
+score HTML_TAG_BALANCE_CENTER        3.499
+score HTML_TEXT_INVISIBLE_FONT       1.738
+score HTML_TEXT_INVISIBLE_STYLE      0.686
 score JH_SPAMMY_HEADERS              3.499
 score KHOP_FAKE_EBAY                 0.699
-score KHOP_HELO_FCRDNS               0.400
-score KHOP_JS_OBFUSCATION            3.399
+score KHOP_HELO_FCRDNS               0.399
+score KHOP_JS_OBFUSCATION            3.299
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   0.093
+score LONG_IMG_URI                   1.934
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
-score LOTTO_DEPT                     1.999
-score MILLION_HUNDRED                0.498
-score MILLION_USD                    1.309
-score MIMEOLE_DIRECT_TO_MX           0.001 # force non-zero
-score MIXED_ES                       2.199
-score MONEY_ATM_CARD                 2.699
+score LOTTO_DEPT                     1.483
+score MILLION_HUNDRED                0.001 # force non-zero
+score MILLION_USD                    1.999
+score MIMEOLE_DIRECT_TO_MX           1.612
+score MIXED_ES                       2.101
+score MIXED_HREF_CASE                0.650
+score MIXED_IMG_CASE                 2.999
+score MONEY_ATM_CARD                 2.292
 score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               0.001 # force non-zero
-score MONEY_FRAUD_3                  2.699
-score MONEY_FRAUD_5                  0.001 # force non-zero
-score MONEY_FRAUD_8                  0.141
+score MONEY_FRAUD_3                  2.700
+score MONEY_FRAUD_5                  0.001
+score MONEY_FRAUD_8                  0.001
 score MONEY_FREEMAIL_REPTO           2.999
 score MONEY_FROM_MISSP               0.001
-score MSMAIL_PRI_ABNORMAL            0.416
-score NA_DOLLARS                     1.500
-score NICE_REPLY_A                   -2.661
+score MSMAIL_PRI_ABNORMAL            1.499
+score NA_DOLLARS                     0.001
+score NICE_REPLY_A                   -3.899
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.001 # force non-zero
-score NSL_RCVD_HELO_USER             0.001 # force non-zero
-score OBFU_BITCOIN                   1.402
-score OBFU_TEXT_ATTACH               0.861
+score NSL_RCVD_FROM_USER             0.001
+score NSL_RCVD_HELO_USER             0.001
+score OBFU_TEXT_ATTACH               0.298
 score ODD_FREEM_REPTO                2.999
 score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.999
+score PDS_BTC_MSGID                  0.609
 score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_FROM_2_EMAILS              2.433
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_SHORT_SPOOFED_URL          1.999
+score PHP_ORIG_SCRIPT                1.996
 score PHP_SCRIPT                     2.499
-score PP_MIME_FAKE_ASCII_TEXT        0.751
+score PP_MIME_FAKE_ASCII_TEXT        0.999
 score RAND_MKTG_HEADER               1.999
 score RATWARE_NO_RDNS                0.001
-score RDNS_NUM_TLD_XM                2.349
+score RDNS_NUM_TLD_XM                2.057
+score REPTO_419_FRAUD                2.553
+score SCC_CANSPAM_1                  2.299
 score SCC_ISEMM_LID_1B               1.499
 score SENDGRID_REDIR                 1.499
-score SERGIO_SUBJECT_VIAGRA01        2.135
+score SERGIO_SUBJECT_VIAGRA01        1.505
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORTENED_URL_SRC              2.199
+score SHORTENED_URL_SRC              2.091
 score SHORTENER_SHORT_IMG            0.001
 score SHORT_SHORTNER                 1.999
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOF_GMAIL_MID                1.500
+score SPOOF_GMAIL_MID                1.499
 score STATIC_XPRIO_OLE               0.001
-score STOX_BOUND_090909_B            2.059
-score SUSP_UTF8_WORD_COMBO           2.327
-score SUSP_UTF8_WORD_MANY            0.673
+score STOX_BOUND_090909_B            1.295
+score SUSP_UTF8_WORD_COMBO           2.288
+score SUSP_UTF8_WORD_MANY            0.712
 score SUSP_UTF8_WORD_SUBJ            1.999
-score THIS_AD                        1.099
-score TO_NAME_SUBJ_NO_RDNS           2.381
-score TO_NO_BRKTS_HTML_IMG           1.999
+score THIS_AD                        1.100
+score TO_NAME_SUBJ_NO_RDNS           2.370
+score TO_NO_BRKTS_HTML_IMG           1.698
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.001
+score TO_NO_BRKTS_MSFT               0.001 # force non-zero
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.499
-score TVD_ENHANCE                    1.990
+score TO_NO_BRKTS_PCNT               2.500
+score TVD_ENHANCE                    0.778
 score TVD_GET_STOCK                  2.599
-score TVD_IP_HEX                     2.050
-score TVD_IP_OCT                     2.504
-score TVD_RCVD_SPACE_BRACKET         2.247
-score TVD_SPACE_RATIO_MINFP          1.635
-score UNDISC_FREEM                   2.700
-score UNDISC_MONEY                   2.800
+score TVD_IP_HEX                     2.058
+score TVD_IP_OCT                     2.571
+score TVD_RCVD_SPACE_BRACKET         1.666
+score TVD_SPACE_ENCODED              1.995
+score TVD_SPACE_RATIO_MINFP          2.500
+score UNDISC_FREEM                   2.799
+score UNDISC_MONEY                   2.900
 score UNICODE_OBFU_ASC               2.499
-score URI_DOTEDU                     1.999
+score URI_DOTEDU                     0.305
+score URI_FIREBASEAPP                2.999
 score URI_GOOGLE_PROXY               2.099
-score URI_ONLY_MSGID_MALF            0.001
+score URI_ONLY_MSGID_MALF            0.746
 score URI_PHISH                      3.999
+score URI_PHP_REDIR                  3.499
 score URI_TRY_3LD                    1.999
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.630
-score WORD_INVIS                     0.795
-score XFER_LOTSA_MONEY               0.999
-score XM_RANDOM                      2.499
+score VFY_ACCT_NORDNS                2.894
+score WORD_INVIS                     0.542
+score WORD_INVIS_MANY                3.000
+score XFER_LOTSA_MONEY               1.000
+score XM_RANDOM                      2.500
 score XPRIO                          0.001
-score XPRIO_URL_SHORTNER             0.001
-score AC_FROM_MANY_DOTS              1.000
+score XPRIO_URL_SHORTNER             0.995
+score YOU_INHERIT                    0.959
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -208,8 +220,10 @@ score BOGUS_MSM_HDRS                 1.0
 score BOMB_FREEM                     1.000
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
+score BULK_RE_SUSP_NTLD              1.000
 score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
+score COMPENSATION                   1.000
 score CONTENT_AFTER_HTML             1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
@@ -230,7 +244,6 @@ score FROM_NTLD_LINKBAIT             1.0
 score FROM_NTLD_REPLY_FREEMAIL       1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
-score GB_FREEMAIL_DISPTO             0.500
 score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
 score GOOGLE_DOCS_PHISH              1.000
@@ -244,7 +257,7 @@ score GOOG_STO_HTML_PHISH_MANY       1.0
 score GOOG_STO_IMG_HTML              1.000
 score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
-score HEXHASH_WORD                   1.000
+score HDRS_LCASE                     0.100
 score HK_CTE_RAW                     1.000
 score HK_RCVD_IP_MULTICAST           1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
@@ -266,8 +279,6 @@ score MIME_NO_TEXT                   1.0
 score MIXED_AREA_CASE                1.000
 score MIXED_CENTER_CASE              1.000
 score MIXED_FONT_CASE                1.000
-score MIXED_HREF_CASE                1.000
-score MIXED_IMG_CASE                 1.000
 score MONERO_DEADLINE                1.000
 score MONERO_EXTORT_01               1.000
 score MONERO_MALWARE                 1.000
@@ -277,11 +288,10 @@ score MSGID_HDR_MALF                 1.0
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
+score OBFU_BITCOIN                   1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000
 score PHP_NOVER_MUA                  1.000
-score PHP_ORIG_SCRIPT                1.000
 score PHP_SCRIPT_MUA                 1.000
 score PP_TOO_MUCH_UNICODE02          0.500
 score PP_TOO_MUCH_UNICODE05          1.000
@@ -292,7 +302,6 @@ score RAND_HEADER_MANY               1.0
 score RCVD_DOTEDU_SHORT              1.000
 score RCVD_DOTEDU_SUSP_URI           1.000
 score RDNS_NUM_TLD_ATCHNX            1.000
-score REPTO_419_FRAUD                1.000
 score REPTO_419_FRAUD_AOL            1.000
 score REPTO_419_FRAUD_AOL_LOOSE      1.000
 score REPTO_419_FRAUD_CNS            1.000
@@ -329,19 +338,16 @@ score URI_AZURE_CLOUDAPP             1.0
 score URI_DASHGOVEDU                 1.000
 score URI_DATA                       1.000
 score URI_DOTEDU_ENTITY              1.000
-score URI_FIREBASEAPP                1.000
 score URI_GOOG_STO_SPAMMY            3.000
 score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_LONG_REPEAT                1.000
 score URI_OPTOUT_3LD                 1.000
-score URI_PHP_REDIR                  1.000
 score URI_TRY_USME                   1.000
 score URI_WP_DIRINDEX                1.000
 score USB_DRIVES                     1.000
 score VPS_NO_NTLD                    1.000
 score WALMART_IMG_NOT_RCVD_WAL       1.000
-score WORD_INVIS_MANY                1.000
 score XM_DIGITS_ONLY                 1.000
 score XPRIO_SHORT_SUBJ               1.000
 # in active.list but have no hits in recent corpus

Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1906473&r1=1906472&r2=1906473&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Mon Jan  9 02:39:14 2023
@@ -11,41 +11,41 @@ score ADVANCE_FEE_3_NEW              3.4
 score ADVANCE_FEE_3_NEW_MONEY        2.500
 score ADVANCE_FEE_4_NEW              2.299
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.216
-score ADVANCE_FEE_5_NEW_MONEY        2.531
-score AD_PREFS                       0.080
-score AMAZON_IMG_NOT_RCVD_AMZN       1.666
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.001 # force non-zero
-score BAT_BDRY_TO_MALF               1.879
-score BIGNUM_EMAILS_FREEM            0.903
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.464
+score ADVANCE_FEE_5_NEW_MONEY        2.528
+score AD_PREFS                       0.272
+score AMAZON_IMG_NOT_RCVD_AMZN       1.667
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
+score BAT_BDRY_TO_MALF               1.524
+score BIGNUM_EMAILS_FREEM            0.894
 score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_DEADLINE               0.024
-score BITCOIN_EXTORT_01              4.767
-score BITCOIN_MALF_HTML              2.716
-score BITCOIN_SPAM_02                2.425
-score BITCOIN_SPAM_03                1.201
-score BITCOIN_SPAM_05                1.474
+score BITCOIN_DEADLINE               0.179
+score BITCOIN_EXTORT_01              4.999
+score BITCOIN_MALF_HTML              2.668
+score BITCOIN_SPAM_02                2.082
+score BITCOIN_SPAM_03                1.249
+score BITCOIN_SPAM_05                1.262
 score BITCOIN_XPRIO                  0.001
 score BITCOIN_YOUR_INFO              2.999
-score BODY_URI_ONLY                  0.848
-score CK_HELO_GENERIC                0.003
-score CTE_8BIT_MISMATCH              0.838
+score BODY_URI_ONLY                  0.849
+score CK_HELO_GENERIC                0.005
+score CTE_8BIT_MISMATCH              0.840
 score DEAR_BENEFICIARY               2.699
-score DKIMWL_WL_HIGH                 -0.001 # force non-zero
-score DKIMWL_WL_MED                  -0.001
+score DKIMWL_WL_HIGH                 -0.001
+score DKIMWL_WL_MED                  -0.001 # force non-zero
 score DKIMWL_WL_MEDHI                -0.001
 score ENCRYPTED_MESSAGE              -0.999
-score FILL_THIS_FORM                 1.222
-score FONT_INVIS_DIRECT              0.501
-score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               1.852
-score FONT_INVIS_NORDNS              1.918
-score FONT_INVIS_POSTEXTRAS          0.138
-score FORGED_SPF_HELO                0.364
+score FILL_THIS_FORM                 1.209
+score FONT_INVIS_DIRECT              0.292
+score FONT_INVIS_LONG_LINE           2.989
+score FONT_INVIS_MSGID               1.871
+score FONT_INVIS_NORDNS              1.922
+score FONT_INVIS_POSTEXTRAS          0.139
+score FORGED_SPF_HELO                0.357
 score FORM_FRAUD                     0.001
-score FORM_FRAUD_3                   1.751
-score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.107
+score FORM_FRAUD_3                   1.033
+score FORM_FRAUD_5                   0.001 # force non-zero
+score FREEMAIL_FORGED_FROMDOMAIN     0.096
 score FROM_FMBLA_NEWDOM              0.001
 score FROM_FMBLA_NEWDOM28            0.001
 score FROM_GOV_DKIM_AU               -0.001
@@ -56,144 +56,143 @@ score FROM_MISSP_MSFT                0.0
 score FROM_MISSP_REPLYTO             0.001
 score FROM_MISSP_SPF_FAIL            1.999
 score FROM_MISSP_USER                0.001
-score FROM_PAYPAL_SPOOF              1.146
+score FROM_PAYPAL_SPOOF              0.807
 score FROM_SUSPICIOUS_NTLD           0.499
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FSL_BULK_SIG                   0.165
-score FSL_CTYPE_WIN1251              0.001
-score FSL_HAS_TINYURL                2.700
+score FSL_BULK_SIG                   0.170
+score FSL_CTYPE_WIN1251              0.001 # force non-zero
+score FSL_HAS_TINYURL                2.699
 score FSL_NEW_HELO_USER              0.001
 score FUZZY_AMAZON                   2.599
-score FUZZY_BITCOIN                  1.801
+score FUZZY_BITCOIN                  1.550
 score FUZZY_CLICK_HERE               3.099
-score FUZZY_IMPORTANT                2.199
-score FUZZY_UNSUBSCRIBE              2.682
-score FUZZY_WALLET                   1.800
-score GB_BITCOIN_NH                  2.241
+score FUZZY_IMPORTANT                2.200
+score FUZZY_UNSUBSCRIBE              2.840
+score FUZZY_WALLET                   1.799
+score GB_BITCOIN_NH                  0.574
 score GB_CUSTOM_HTM_URI              0.001
-score GB_FAKE_RF_SHORT               1.835
+score GB_FAKE_RF_SHORT               1.822
 score GB_FREEMAIL_DISPTO             0.001
-score GB_HASHBL_BTC                  0.418
+score GB_HASHBL_BTC                  0.447
 score GB_URI_FLEEK_STO_HTM           0.999
 score GOOG_REDIR_NORDNS              2.699
-score GOOG_STO_NOIMG_HTML            2.948
-score HAS_X_OUTGOING_SPAM_STAT       1.209
-score HDRS_LCASE_IMGONLY             0.100
+score GOOG_STO_NOIMG_HTML            2.947
+score HAS_X_OUTGOING_SPAM_STAT       1.042
+score HDRS_LCASE_IMGONLY             0.099
 score HDRS_MISSP                     2.499
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
-score HDR_ORDER_FTSDMCXX_NORDNS      0.973
+score HDR_ORDER_FTSDMCXX_NORDNS      0.972
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
-score HEXHASH_WORD                   2.636
+score HEXHASH_WORD                   2.175
 score HK_LOTTO                       0.001
-score HK_NAME_FROM                   0.999
+score HK_NAME_FROM                   1.000
 score HK_RANDOM_ENVFROM              0.001
 score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              0.999
 score HK_SCAM                        1.999
 score HK_WIN                         0.001
 score HOSTED_IMG_DIRECT_MX           3.499
-score HOSTED_IMG_FREEM               3.358
+score HOSTED_IMG_FREEM               3.369
 score HOSTED_IMG_MULTI_PUB_01        2.337
-score HTML_ENTITY_ASCII              2.711
+score HTML_ENTITY_ASCII              2.774
 score HTML_OFF_PAGE                  2.999
 score HTML_TAG_BALANCE_CENTER        3.099
-score HTML_TEXT_INVISIBLE_FONT       0.600
+score HTML_TEXT_INVISIBLE_FONT       0.581
 score HTML_TEXT_INVISIBLE_STYLE      3.499
 score JH_SPAMMY_HEADERS              3.499
-score KHOP_FAKE_EBAY                 1.799
+score KHOP_FAKE_EBAY                 0.597
 score KHOP_HELO_FCRDNS               0.399
-score KHOP_JS_OBFUSCATION            3.099
+score KHOP_JS_OBFUSCATION            3.100
 score LONG_HEX_URI                   1.618
 score LONG_IMG_URI                   0.936
-score LONG_INVISIBLE_TEXT            1.989
+score LONG_INVISIBLE_TEXT            1.999
 score LOTS_OF_MONEY                  0.010
-score LOTTO_DEPT                     1.970
+score LOTTO_DEPT                     1.489
 score MILLION_HUNDRED                0.001
 score MILLION_USD                    1.999
 score MIMEOLE_DIRECT_TO_MX           0.397
-score MIXED_ES                       0.001 # force non-zero
+score MIXED_ES                       0.001
 score MIXED_IMG_CASE                 2.999
-score MONEY_ATM_CARD                 2.169
+score MONEY_ATM_CARD                 2.040
 score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               0.001
 score MONEY_FRAUD_3                  2.499
-score MONEY_FRAUD_5                  0.001
+score MONEY_FRAUD_5                  0.001 # force non-zero
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           0.256
+score MONEY_FREEMAIL_REPTO           0.252
 score MONEY_FROM_MISSP               0.001
-score MSMAIL_PRI_ABNORMAL            1.499
+score MSMAIL_PRI_ABNORMAL            0.848
 score NA_DOLLARS                     0.001
 score NICE_REPLY_A                   -0.001
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
 score NSL_RCVD_HELO_USER             0.001
 score OBFU_BITCOIN                   2.999
-score OBFU_TEXT_ATTACH               1.599
-score ODD_FREEM_REPTO                2.581
-score PDS_BTC_ID                     0.286
+score OBFU_TEXT_ATTACH               0.099
+score ODD_FREEM_REPTO                2.523
+score PDS_BTC_ID                     0.110
 score PDS_BTC_MSGID                  0.001
-score PDS_FROM_2_EMAILS              1.288
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
-score PDS_RDNS_DYNAMIC_FP            0.001
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
+score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_SHORT_SPOOFED_URL          1.999
-score PHP_SCRIPT                     1.227
+score PHP_SCRIPT                     1.411
 score PP_MIME_FAKE_ASCII_TEXT        0.001
 score RAND_MKTG_HEADER               1.999
 score RATWARE_NO_RDNS                0.001
-score RCVD_IN_MSPIKE_H2              -0.001 # force non-zero
+score RCVD_IN_MSPIKE_H2              -0.001
 score RDNS_NUM_TLD_XM                2.999
-score REPTO_419_FRAUD                2.069
+score REPTO_419_FRAUD                1.895
 score SCC_CANSPAM_1                  2.199
-score SCC_ISEMM_LID_1B               1.273
-score SENDGRID_REDIR                 0.871
-score SERGIO_SUBJECT_VIAGRA01        2.205
-score SHOPIFY_IMG_NOT_RCVD_SFY       1.192
+score SCC_ISEMM_LID_1B               1.272
+score SENDGRID_REDIR                 0.876
+score SERGIO_SUBJECT_VIAGRA01        1.121
+score SHOPIFY_IMG_NOT_RCVD_SFY       1.193
 score SHORTENED_URL_SRC              2.199
-score SHORTENER_SHORT_IMG            1.019
+score SHORTENER_SHORT_IMG            0.681
 score SHORT_SHORTNER                 1.999
 score SPOOFED_FREEMAIL               0.001
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
 score SPOOF_GMAIL_MID                0.001
 score STATIC_XPRIO_OLE               0.001
-score STOX_BOUND_090909_B            0.001 # force non-zero
-score SUSP_UTF8_WORD_COMBO           0.267
-score SUSP_UTF8_WORD_MANY            1.149
-score SUSP_UTF8_WORD_SUBJ            2.000
+score STOX_BOUND_090909_B            0.001
+score SUSP_UTF8_WORD_COMBO           0.269
+score SUSP_UTF8_WORD_MANY            1.242
+score SUSP_UTF8_WORD_SUBJ            1.999
 score THIS_AD                        1.199
-score TO_EQ_FM_DOM_SPF_FAIL          0.001 # force non-zero
+score TO_EQ_FM_DOM_SPF_FAIL          0.001
 score TO_EQ_FM_SPF_FAIL              0.001
 score TO_NAME_SUBJ_NO_RDNS           2.999
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.001
-score TO_NO_BRKTS_NORDNS_HTML        1.822
-score TO_NO_BRKTS_PCNT               2.499
-score TVD_ENHANCE                    0.864
+score TO_NO_BRKTS_MSFT               0.001 # force non-zero
+score TO_NO_BRKTS_NORDNS_HTML        1.823
+score TO_NO_BRKTS_PCNT               2.500
+score TVD_ENHANCE                    0.866
 score TVD_GET_STOCK                  2.599
-score TVD_IP_HEX                     3.016
-score TVD_IP_OCT                     1.415
-score TVD_RCVD_SPACE_BRACKET         0.262
+score TVD_IP_HEX                     3.068
+score TVD_IP_OCT                     2.649
+score TVD_RCVD_SPACE_BRACKET         0.760
 score TVD_SPACE_RATIO_MINFP          0.001
 score UNDISC_FREEM                   2.699
 score UNDISC_MONEY                   2.699
 score UNICODE_OBFU_ASC               2.499
 score URI_DOTEDU                     1.999
 score URI_GOOGLE_PROXY               1.999
-score URI_ONLY_MSGID_MALF            1.887
-score URI_PHISH                      3.102
+score URI_ONLY_MSGID_MALF            0.613
+score URI_PHISH                      3.100
 score URI_PHP_REDIR                  2.875
-score URI_TRY_3LD                    1.164
-score URI_WP_HACKED                  3.499
+score URI_TRY_3LD                    1.167
+score URI_WP_HACKED                  3.500
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.657
-score WORD_INVIS                     0.088
+score VFY_ACCT_NORDNS                2.499
+score WORD_INVIS                     0.068
 score WORD_INVIS_MANY                2.999
 score XFER_LOTSA_MONEY               0.999
 score XM_RANDOM                      2.499
 score XPRIO                          0.001
-score XPRIO_URL_SHORTNER             0.943
-score YOU_INHERIT                    2.031
+score XPRIO_URL_SHORTNER             0.532
+score YOU_INHERIT                    2.199
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1906473&r1=1906472&r2=1906473&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Mon Jan  9 02:39:14 2023
@@ -1,175 +1,187 @@
-# Using score set 0 logs for revision 1906418 from:
-# ham-ena-week0.r1906418.log ham-ena-week1.r1906418.log ham-ena-week2.r1906418.log ham-ena-week3.r1906418.log ham-ena-week4.r1906418.log ham-giovanni-ham.r1906418.log ham-giovanni-spammy.r1906418.log ham-giovanni-spam.r1906418.log ham-grenier.r1906418.log ham-hege.r1906418.log ham-jhardin.r1906418.log ham-llanga.r1906418.log ham-mmiroslaw-mails-ham.r1906418.log ham-mmiroslaw-mails-spam.r1906418.log ham-spamsponge.r1906418.log ham-thendrikx.r1906418.log ham-tsz-spam-corpus.r1906418.log spam-ena-week0.r1906418.log spam-ena-week1.r1906418.log spam-ena-week2.r1906418.log spam-ena-week3.r1906418.log spam-ena-week4.r1906418.log spam-giovanni-ham.r1906418.log spam-giovanni-spammy.r1906418.log spam-giovanni-spam.r1906418.log spam-grenier.r1906418.log spam-hege.r1906418.log spam-jhardin.r1906418.log spam-llanga.r1906418.log spam-mmiroslaw-mails-ham.r1906418.log spam-mmiroslaw-mails-spam.r1906418.log spam-spamsponge.r1906418.log spam-thendrikx.r1906418.log spam-tsz-spam-corpus.r1906418.log
+# Using score set 0 logs for revision 1906455 from:
+# ham-ena-week0.r1906455.log ham-ena-week1.r1906455.log ham-ena-week2.r1906455.log ham-ena-week3.r1906455.log ham-ena-week4.r1906455.log ham-giovanni-ham.r1906455.log ham-giovanni-spammy.r1906455.log ham-giovanni-spam.r1906455.log ham-grenier.r1906455.log ham-hege.r1906455.log ham-jhardin.r1906455.log ham-mmiroslaw-mails-ham.r1906455.log ham-mmiroslaw-mails-spam.r1906455.log ham-spamsponge.r1906455.log ham-thendrikx.r1906455.log ham-tsz-spam-corpus.r1906455.log spam-ena-week0.r1906455.log spam-ena-week1.r1906455.log spam-ena-week2.r1906455.log spam-ena-week3.r1906455.log spam-ena-week4.r1906455.log spam-giovanni-ham.r1906455.log spam-giovanni-spammy.r1906455.log spam-giovanni-spam.r1906455.log spam-grenier.r1906455.log spam-hege.r1906455.log spam-jhardin.r1906455.log spam-mmiroslaw-mails-ham.r1906455.log spam-mmiroslaw-mails-spam.r1906455.log spam-spamsponge.r1906455.log spam-thendrikx.r1906455.log spam-tsz-spam-corpus.r1906455.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001 # force non-zero
+score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
 score ADMITS_SPAM                    2.199
-score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_2_NEW_MONEY        2.000
 score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        0.292
+score ADVANCE_FEE_3_NEW_MONEY        2.233
+score ADVANCE_FEE_4_NEW              2.399
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.553
-score ADVANCE_FEE_5_NEW_MONEY        1.183
-score AD_PREFS                       0.067
-score AMAZON_IMG_NOT_RCVD_AMZN       1.632
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.492
+score ADVANCE_FEE_5_NEW_MONEY        1.324
+score AD_PREFS                       0.242
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.001 # force non-zero
 score BAT_BDRY_TO_MALF               2.499
-score BIGNUM_EMAILS_FREEM            0.001
+score BIGNUM_EMAILS_FREEM            0.404
 score BIGNUM_EMAILS_MANY             2.999
 score BITCOIN_DEADLINE               1.502
-score BITCOIN_EXTORT_01              4.513
-score BITCOIN_MALF_HTML              3.499
-score BITCOIN_SPAM_02                0.073
-score BITCOIN_SPAM_03                0.751
-score BITCOIN_XPRIO                  2.149
+score BITCOIN_EXTORT_01              4.679
+score BITCOIN_MALF_HTML              2.553
+score BITCOIN_SPAM_02                0.863
+score BITCOIN_SPAM_03                0.001
+score BITCOIN_XPRIO                  2.223
 score BITCOIN_YOUR_INFO              2.999
-score BODY_URI_ONLY                  1.156
-score BULK_RE_SUSP_NTLD              1.000
-score CK_HELO_GENERIC                0.249
+score BODY_URI_ONLY                  1.154
+score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              0.999
-score DEAR_BENEFICIARY               2.290
+score DEAR_BENEFICIARY               2.668
 score ENCRYPTED_MESSAGE              -0.999
 score END_FUTURE_EMAILS              2.499
-score FILL_THIS_FORM                 0.800
-score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           1.995
-score FONT_INVIS_MSGID               1.942
-score FONT_INVIS_NORDNS              2.344
-score FONT_INVIS_POSTEXTRAS          0.152
+score FILL_THIS_FORM                 0.801
+score FONT_INVIS_DIRECT              0.678
+score FONT_INVIS_LONG_LINE           2.001
+score FONT_INVIS_MSGID               1.940
+score FONT_INVIS_NORDNS              1.885
+score FONT_INVIS_POSTEXTRAS          0.153
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   1.300
+score FORM_FRAUD_3                   1.237
 score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROM_MISSPACED                 0.030
-score FROM_MISSP_EH_MATCH            0.276
+score FREEMAIL_FORGED_FROMDOMAIN     0.250
+score FROM_MISSPACED                 0.001
+score FROM_MISSP_EH_MATCH            0.001 # force non-zero
 score FROM_MISSP_FREEMAIL            2.499
-score FROM_MISSP_MSFT                0.001 # force non-zero
-score FROM_MISSP_REPLYTO             0.001 # force non-zero
+score FROM_MISSP_MSFT                0.001
+score FROM_MISSP_REPLYTO             0.001
 score FROM_MISSP_USER                0.001
-score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_SUSPICIOUS_NTLD           0.500
 score FROM_SUSPICIOUS_NTLD_FP        1.999
 score FSL_CTYPE_WIN1251              0.001
 score FSL_HAS_TINYURL                2.899
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   1.887
-score FUZZY_BITCOIN                  0.773
-score FUZZY_CLICK_HERE               3.299
-score FUZZY_UNSUBSCRIBE              2.611
-score GB_BITCOIN_NH                  1.318
-score GB_CUSTOM_HTM_URI              1.499
+score FUZZY_AMAZON                   2.699
+score FUZZY_CLICK_HERE               3.199
+score FUZZY_IMPORTANT                2.199
+score FUZZY_UNSUBSCRIBE              2.608
+score FUZZY_WALLET                   1.785
+score GB_BITCOIN_NH                  2.011
+score GB_CUSTOM_HTM_URI              1.333
 score GB_FAKE_RF_SHORT               0.001
+score GB_FREEMAIL_DISPTO             0.001
 score GB_URI_FLEEK_STO_HTM           0.999
-score GOOG_REDIR_NORDNS              2.500
-score GOOG_STO_NOIMG_HTML            2.803
-score HAS_X_OUTGOING_SPAM_STAT       0.502
-score HDRS_LCASE_IMGONLY             0.100
+score GOOG_REDIR_NORDNS              2.250
+score GOOG_STO_NOIMG_HTML            2.695
+score HAS_X_OUTGOING_SPAM_STAT       0.509
+score HDRS_LCASE_IMGONLY             0.099
 score HDRS_MISSP                     2.499
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
-score HDR_ORDER_FTSDMCXX_NORDNS      1.850
+score HDR_ORDER_FTSDMCXX_NORDNS      3.092
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
-score HK_LOTTO                       0.001
-score HK_NAME_FROM                   0.999
-score HK_RANDOM_ENVFROM              1.000
+score HEXHASH_WORD                   2.255
+score HK_LOTTO                       0.001 # force non-zero
+score HK_NAME_FROM                   1.000
+score HK_RANDOM_ENVFROM              0.999
 score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              1.000
 score HK_SCAM                        1.999
 score HK_WIN                         0.001
-score HOSTED_IMG_DIRECT_MX           0.965
+score HOSTED_IMG_DIRECT_MX           3.499
 score HOSTED_IMG_FREEM               3.499
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HTML_ENTITY_ASCII              2.999
-score HTML_OFF_PAGE                  2.502
+score HTML_ENTITY_ASCII              3.000
+score HTML_OFF_PAGE                  2.999
 score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        3.299
-score HTML_TEXT_INVISIBLE_FONT       1.999
-score HTML_TEXT_INVISIBLE_STYLE      0.886
+score HTML_TAG_BALANCE_CENTER        3.499
+score HTML_TEXT_INVISIBLE_FONT       1.738
+score HTML_TEXT_INVISIBLE_STYLE      0.686
 score JH_SPAMMY_HEADERS              3.499
 score KHOP_FAKE_EBAY                 0.699
-score KHOP_HELO_FCRDNS               0.400
-score KHOP_JS_OBFUSCATION            3.399
+score KHOP_HELO_FCRDNS               0.399
+score KHOP_JS_OBFUSCATION            3.299
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   0.093
+score LONG_IMG_URI                   1.934
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
-score LOTTO_DEPT                     1.999
-score MILLION_HUNDRED                0.498
-score MILLION_USD                    1.309
-score MIMEOLE_DIRECT_TO_MX           0.001 # force non-zero
-score MIXED_ES                       2.199
-score MONEY_ATM_CARD                 2.699
+score LOTTO_DEPT                     1.483
+score MILLION_HUNDRED                0.001 # force non-zero
+score MILLION_USD                    1.999
+score MIMEOLE_DIRECT_TO_MX           1.612
+score MIXED_ES                       2.101
+score MIXED_HREF_CASE                0.650
+score MIXED_IMG_CASE                 2.999
+score MONEY_ATM_CARD                 2.292
 score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               0.001 # force non-zero
-score MONEY_FRAUD_3                  2.699
-score MONEY_FRAUD_5                  0.001 # force non-zero
-score MONEY_FRAUD_8                  0.141
+score MONEY_FRAUD_3                  2.700
+score MONEY_FRAUD_5                  0.001
+score MONEY_FRAUD_8                  0.001
 score MONEY_FREEMAIL_REPTO           2.999
 score MONEY_FROM_MISSP               0.001
-score MSMAIL_PRI_ABNORMAL            0.416
-score NA_DOLLARS                     1.500
-score NICE_REPLY_A                   -2.661
+score MSMAIL_PRI_ABNORMAL            1.499
+score NA_DOLLARS                     0.001
+score NICE_REPLY_A                   -3.899
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.001 # force non-zero
-score NSL_RCVD_HELO_USER             0.001 # force non-zero
-score OBFU_BITCOIN                   1.402
-score OBFU_TEXT_ATTACH               0.861
+score NSL_RCVD_FROM_USER             0.001
+score NSL_RCVD_HELO_USER             0.001
+score OBFU_TEXT_ATTACH               0.298
 score ODD_FREEM_REPTO                2.999
 score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.999
+score PDS_BTC_MSGID                  0.609
 score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_FROM_2_EMAILS              2.433
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_SHORT_SPOOFED_URL          1.999
+score PHP_ORIG_SCRIPT                1.996
 score PHP_SCRIPT                     2.499
-score PP_MIME_FAKE_ASCII_TEXT        0.751
+score PP_MIME_FAKE_ASCII_TEXT        0.999
 score RAND_MKTG_HEADER               1.999
 score RATWARE_NO_RDNS                0.001
-score RDNS_NUM_TLD_XM                2.349
+score RDNS_NUM_TLD_XM                2.057
+score REPTO_419_FRAUD                2.553
+score SCC_CANSPAM_1                  2.299
 score SCC_ISEMM_LID_1B               1.499
 score SENDGRID_REDIR                 1.499
-score SERGIO_SUBJECT_VIAGRA01        2.135
+score SERGIO_SUBJECT_VIAGRA01        1.505
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORTENED_URL_SRC              2.199
+score SHORTENED_URL_SRC              2.091
 score SHORTENER_SHORT_IMG            0.001
 score SHORT_SHORTNER                 1.999
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOF_GMAIL_MID                1.500
+score SPOOF_GMAIL_MID                1.499
 score STATIC_XPRIO_OLE               0.001
-score STOX_BOUND_090909_B            2.059
-score SUSP_UTF8_WORD_COMBO           2.327
-score SUSP_UTF8_WORD_MANY            0.673
+score STOX_BOUND_090909_B            1.295
+score SUSP_UTF8_WORD_COMBO           2.288
+score SUSP_UTF8_WORD_MANY            0.712
 score SUSP_UTF8_WORD_SUBJ            1.999
-score THIS_AD                        1.099
-score TO_NAME_SUBJ_NO_RDNS           2.381
-score TO_NO_BRKTS_HTML_IMG           1.999
+score THIS_AD                        1.100
+score TO_NAME_SUBJ_NO_RDNS           2.370
+score TO_NO_BRKTS_HTML_IMG           1.698
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.001
+score TO_NO_BRKTS_MSFT               0.001 # force non-zero
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.499
-score TVD_ENHANCE                    1.990
+score TO_NO_BRKTS_PCNT               2.500
+score TVD_ENHANCE                    0.778
 score TVD_GET_STOCK                  2.599
-score TVD_IP_HEX                     2.050
-score TVD_IP_OCT                     2.504
-score TVD_RCVD_SPACE_BRACKET         2.247
-score TVD_SPACE_RATIO_MINFP          1.635
-score UNDISC_FREEM                   2.700
-score UNDISC_MONEY                   2.800
+score TVD_IP_HEX                     2.058
+score TVD_IP_OCT                     2.571
+score TVD_RCVD_SPACE_BRACKET         1.666
+score TVD_SPACE_ENCODED              1.995
+score TVD_SPACE_RATIO_MINFP          2.500
+score UNDISC_FREEM                   2.799
+score UNDISC_MONEY                   2.900
 score UNICODE_OBFU_ASC               2.499
-score URI_DOTEDU                     1.999
+score URI_DOTEDU                     0.305
+score URI_FIREBASEAPP                2.999
 score URI_GOOGLE_PROXY               2.099
-score URI_ONLY_MSGID_MALF            0.001
+score URI_ONLY_MSGID_MALF            0.746
 score URI_PHISH                      3.999
+score URI_PHP_REDIR                  3.499
 score URI_TRY_3LD                    1.999
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.630
-score WORD_INVIS                     0.795
-score XFER_LOTSA_MONEY               0.999
-score XM_RANDOM                      2.499
+score VFY_ACCT_NORDNS                2.894
+score WORD_INVIS                     0.542
+score WORD_INVIS_MANY                3.000
+score XFER_LOTSA_MONEY               1.000
+score XM_RANDOM                      2.500
 score XPRIO                          0.001
-score XPRIO_URL_SHORTNER             0.001
-score AC_FROM_MANY_DOTS              1.000
+score XPRIO_URL_SHORTNER             0.995
+score YOU_INHERIT                    0.959
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -208,8 +220,10 @@ score BOGUS_MSM_HDRS                 1.0
 score BOMB_FREEM                     1.000
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
+score BULK_RE_SUSP_NTLD              1.000
 score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
+score COMPENSATION                   1.000
 score CONTENT_AFTER_HTML             1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
@@ -230,7 +244,6 @@ score FROM_NTLD_LINKBAIT             1.0
 score FROM_NTLD_REPLY_FREEMAIL       1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
-score GB_FREEMAIL_DISPTO             0.500
 score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
 score GOOGLE_DOCS_PHISH              1.000
@@ -244,7 +257,7 @@ score GOOG_STO_HTML_PHISH_MANY       1.0
 score GOOG_STO_IMG_HTML              1.000
 score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
-score HEXHASH_WORD                   1.000
+score HDRS_LCASE                     0.100
 score HK_CTE_RAW                     1.000
 score HK_RCVD_IP_MULTICAST           1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
@@ -266,8 +279,6 @@ score MIME_NO_TEXT                   1.0
 score MIXED_AREA_CASE                1.000
 score MIXED_CENTER_CASE              1.000
 score MIXED_FONT_CASE                1.000
-score MIXED_HREF_CASE                1.000
-score MIXED_IMG_CASE                 1.000
 score MONERO_DEADLINE                1.000
 score MONERO_EXTORT_01               1.000
 score MONERO_MALWARE                 1.000
@@ -277,11 +288,10 @@ score MSGID_HDR_MALF                 1.0
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
+score OBFU_BITCOIN                   1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000
 score PHP_NOVER_MUA                  1.000
-score PHP_ORIG_SCRIPT                1.000
 score PHP_SCRIPT_MUA                 1.000
 score PP_TOO_MUCH_UNICODE02          0.500
 score PP_TOO_MUCH_UNICODE05          1.000
@@ -292,7 +302,6 @@ score RAND_HEADER_MANY               1.0
 score RCVD_DOTEDU_SHORT              1.000
 score RCVD_DOTEDU_SUSP_URI           1.000
 score RDNS_NUM_TLD_ATCHNX            1.000
-score REPTO_419_FRAUD                1.000
 score REPTO_419_FRAUD_AOL            1.000
 score REPTO_419_FRAUD_AOL_LOOSE      1.000
 score REPTO_419_FRAUD_CNS            1.000
@@ -329,19 +338,16 @@ score URI_AZURE_CLOUDAPP             1.0
 score URI_DASHGOVEDU                 1.000
 score URI_DATA                       1.000
 score URI_DOTEDU_ENTITY              1.000
-score URI_FIREBASEAPP                1.000
 score URI_GOOG_STO_SPAMMY            3.000
 score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_LONG_REPEAT                1.000
 score URI_OPTOUT_3LD                 1.000
-score URI_PHP_REDIR                  1.000
 score URI_TRY_USME                   1.000
 score URI_WP_DIRINDEX                1.000
 score USB_DRIVES                     1.000
 score VPS_NO_NTLD                    1.000
 score WALMART_IMG_NOT_RCVD_WAL       1.000
-score WORD_INVIS_MANY                1.000
 score XM_DIGITS_ONLY                 1.000
 score XPRIO_SHORT_SUBJ               1.000
 # in active.list but have no hits in recent corpus