You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2023/05/18 02:42:22 UTC

svn commit: r1909892 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Author: spamassassin_role
Date: Thu May 18 02:42:22 2023
New Revision: 1909892

URL: http://svn.apache.org/viewvc?rev=1909892&view=rev
Log:
updated scores for revision 1909869 active rules added since last mass-check

Modified:
    spamassassin/trunk/rulesrc/scores/72_scores.cf
    spamassassin/trunk/rulesrc/scores/scores-set0
    spamassassin/trunk/rulesrc/scores/scores-set1
    spamassassin/trunk/rulesrc/scores/scores-set2
    spamassassin/trunk/rulesrc/scores/scores-set3
    spamassassin/trunk/rulesrc/scores/stats-set0
    spamassassin/trunk/rulesrc/scores/stats-set1

Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1909892&r1=1909891&r2=1909892&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Thu May 18 02:42:22 2023
@@ -1,8 +1,8 @@
-score ACCT_PHISHING_MANY                    2.881 2.999 2.881 2.999
+score ACCT_PHISHING_MANY                    2.758 2.999 2.758 2.999
 score AC_BR_BONANZA                         0.001 0.001 0.001 0.001
 score AC_DIV_BONANZA                        0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS                     2.999 2.999 2.999 2.999
-score AC_HTML_NONSENSE_TAGS                 1.999 2.000 1.999 2.000
+score AC_FROM_MANY_DOTS                     2.999 2.924 2.999 2.924
+score AC_HTML_NONSENSE_TAGS                 1.999 1.999 1.999 1.999
 score AC_POST_EXTRAS                        1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS1               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS10              1.000 1.000 1.000 1.000
@@ -13,18 +13,20 @@ score AC_SPAMMY_URI_PATTERNS3
 score AC_SPAMMY_URI_PATTERNS4               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS8               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS9               1.000 1.000 1.000 1.000
-score ADMITS_SPAM                           2.699 0.001 2.699 0.001
+score ADMITS_SPAM                           2.999 0.001 2.999 0.001
 score ADULT_DATING_COMPANY                  10.000 10.000 10.000 10.000
 score ADVANCE_FEE_2_NEW_FORM                1.000 1.000 1.000 1.000
 score ADVANCE_FEE_2_NEW_FRM_MNY             1.000 1.000 1.000 1.000
 score ADVANCE_FEE_2_NEW_MONEY               1.999 1.999 1.999 1.999
 score ADVANCE_FEE_3_NEW                     3.499 1.000 3.499 1.000
-score ADVANCE_FEE_3_NEW_MONEY               2.599 2.399 2.599 2.399
-score ADVANCE_FEE_4_NEW                     0.985 0.001 0.985 0.001
-score ADVANCE_FEE_4_NEW_MONEY               1.287 1.273 1.287 1.273
-score ADVANCE_FEE_5_NEW_FRM_MNY             0.107 1.930 0.107 1.930
-score ADVANCE_FEE_5_NEW_MONEY               0.001 0.001 0.001 0.001
-score AD_PREFS                              0.449 0.001 0.449 0.001
+score ADVANCE_FEE_3_NEW_FRM_MNY             0.001 0.909 0.001 0.909
+score ADVANCE_FEE_3_NEW_MONEY               2.578 2.399 2.578 2.399
+score ADVANCE_FEE_4_NEW                     2.299 0.001 2.299 0.001
+score ADVANCE_FEE_4_NEW_MONEY               1.923 1.280 1.923 1.280
+score ADVANCE_FEE_5_NEW                     0.993 0.001 0.993 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY             1.060 0.055 1.060 0.055
+score ADVANCE_FEE_5_NEW_MONEY               1.355 0.001 1.355 0.001
+score AD_PREFS                              0.499 0.001 0.499 0.001
 score ALIBABA_IMG_NOT_RCVD_ALI              1.000 1.000 1.000 1.000
 score AMAZON_IMG_NOT_RCVD_AMZN              0.001 0.001 0.001 0.001
 score APP_DEVELOPMENT_FREEM                 1.000 1.000 1.000 1.000
@@ -33,190 +35,195 @@ score ARC_SIGNED
 score ARC_VALID                             0.001 0.001 0.001 0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2          0.001 0.001 0.001 0.001
 score BEBEE_IMG_NOT_RCVD_BB                 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM                   0.404 1.640 0.404 1.640
+score BIGNUM_EMAILS_FREEM                   0.759 1.725 0.759 1.725
 score BIGNUM_EMAILS_MANY                    2.999 1.000 2.999 1.000
 score BITCOIN_BOMB                          1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE                      1.899 2.543 1.899 2.543
-score BITCOIN_EXTORT_01                     3.546 3.995 3.546 3.995
+score BITCOIN_DEADLINE                      2.238 2.527 2.238 2.527
+score BITCOIN_EXTORT_01                     3.131 3.999 3.131 3.999
 score BITCOIN_EXTORT_02                     1.000 1.000 1.000 1.000
 score BITCOIN_IMGUR                         1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML                     2.597 2.562 2.597 2.562
-score BITCOIN_MALWARE                       1.811 1.226 1.811 1.226
-score BITCOIN_OBFU_SUBJ                     3.499 1.000 3.499 1.000
+score BITCOIN_MALF_HTML                     2.311 3.365 2.311 3.365
+score BITCOIN_MALWARE                       3.499 1.403 3.499 1.403
+score BITCOIN_OBFU_SUBJ                     3.500 1.000 3.500 1.000
 score BITCOIN_ONAN                          1.000 1.000 1.000 1.000
 score BITCOIN_PAY_ME                        1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_01                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02                       2.214 2.499 2.214 2.499
+score BITCOIN_SPAM_02                       2.203 2.170 2.203 2.170
 score BITCOIN_SPAM_03                       0.001 1.000 0.001 1.000
 score BITCOIN_SPAM_04                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_05                       0.001 1.000 0.001 1.000
 score BITCOIN_SPAM_06                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07                       1.791 2.285 1.791 2.285
+score BITCOIN_SPAM_07                       3.499 1.482 3.499 1.482
 score BITCOIN_SPAM_08                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_09                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_10                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_11                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_12                       1.000 1.000 1.000 1.000
 score BITCOIN_SPF_ONLYALL                   0.001 1.000 0.001 1.000
-score BITCOIN_XPRIO                         1.762 2.499 1.762 2.499
-score BITCOIN_YOUR_INFO                     2.999 3.000 2.999 3.000
-score BODY_SINGLE_URI                       2.099 0.300 2.099 0.300
+score BITCOIN_XPRIO                         0.001 0.293 0.001 0.293
+score BITCOIN_YOUR_INFO                     2.999 2.999 2.999 2.999
+score BODY_SINGLE_URI                       2.500 0.415 2.500 0.415
 score BODY_SINGLE_WORD                      0.001 0.001 0.001 0.001
-score BODY_URI_ONLY                         1.178 1.855 1.178 1.855
+score BODY_URI_ONLY                         1.392 1.484 1.392 1.484
 score BOGUS_MIME_VERSION                    1.000 1.000 1.000 1.000
 score BOGUS_MSM_HDRS                        1.000 1.000 1.000 1.000
 score BOMB_FREEM                            1.000 1.000 1.000 1.000
 score BOMB_MONEY                            1.000 1.000 1.000 1.000
 score BTC_ORG                               1.000 1.000 1.000 1.000
 score BULK_RE_SUSP_NTLD                     1.000 1.000 1.000 1.000
-score CANT_SEE_AD                           1.000 1.000 1.000 1.000
-score CK_HELO_GENERIC                       0.249 0.249 0.249 0.249
+score CANT_SEE_AD                           1.020 1.000 1.020 1.000
+score CK_HELO_GENERIC                       0.250 0.250 0.250 0.250
 score COMMENT_GIBBERISH                     1.000 1.000 1.000 1.000
+score COMPENSATION                          1.000 0.001 1.000 0.001
 score CONTENT_AFTER_HTML                    1.000 1.000 1.000 1.000
 score CONTENT_AFTER_HTML_WEAK               1.000 1.000 1.000 1.000
 score CTE_8BIT_MISMATCH                     0.999 0.001 0.999 0.001
-score DATE_IN_FUTURE_Q_PLUS                 3.499 2.699 3.499 2.699
+score DATE_IN_FUTURE_Q_PLUS                 3.599 2.699 3.599 2.699
 score DAY_I_EARNED                          1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY                      2.467 1.650 2.467 1.650
+score DEAR_BENEFICIARY                      2.699 1.797 2.699 1.797
 score DKIMWL_BL                             0.001 1.000 0.001 1.000
 score DKIMWL_BLOCKED                        0.001 0.001 0.001 0.001
 score DKIMWL_WL_HIGH                        0.001 -0.001 0.001 -0.001
 score DKIMWL_WL_MED                         0.001 -0.001 0.001 -0.001
 score DKIMWL_WL_MEDHI                       0.001 -0.001 0.001 -0.001
 score DOTGOV_IMAGE                          1.000 1.000 1.000 1.000
-score DSN_NO_MIMEVERSION                    1.999 0.752 1.999 0.752
+score DSN_NO_MIMEVERSION                    1.999 0.747 1.999 0.747
 score DYNAMIC_IMGUR                         1.000 1.000 1.000 1.000
 score EBAY_IMG_NOT_RCVD_EBAY                1.000 1.000 1.000 1.000
-score ENCRYPTED_MESSAGE                     -0.999 -0.999 -0.999 -0.999
+score ENCRYPTED_MESSAGE                     -1.000 -0.999 -1.000 -0.999
 score END_FUTURE_EMAILS                     2.499 2.500 2.499 2.500
 score ENVFROM_GOOG_TRIX                     1.000 1.000 1.000 1.000
 score FACEBOOK_IMG_NOT_RCVD_FB              1.000 1.000 1.000 1.000
-score FAKE_REPLY_A1                         2.434 0.001 2.434 0.001
-score FAKE_REPLY_B                          1.722 0.001 1.722 0.001
+score FAKE_REPLY_A1                         1.108 0.001 1.108 0.001
+score FAKE_REPLY_B                          1.110 0.001 1.110 0.001
 score FBI_MONEY                             1.000 1.000 1.000 1.000
 score FBI_SPOOF                             1.000 1.000 1.000 1.000
-score FILL_THIS_FORM                        0.600 0.499 0.600 0.499
+score FILL_THIS_FORM                        0.699 0.499 0.699 0.499
 score FONT_INVIS_DIRECT                     0.001 0.001 0.001 0.001
 score FONT_INVIS_DOTGOV                     1.000 1.000 1.000 1.000
 score FONT_INVIS_HTML_NOHTML                1.000 1.000 1.000 1.000
 score FONT_INVIS_LONG_LINE                  2.999 2.999 2.999 2.999
-score FONT_INVIS_MSGID                      1.183 0.396 1.183 0.396
+score FONT_INVIS_MSGID                      1.434 0.481 1.434 0.481
 score FONT_INVIS_NORDNS                     1.000 1.000 1.000 1.000
-score FONT_INVIS_POSTEXTRAS                 0.001 1.389 0.001 1.389
+score FONT_INVIS_POSTEXTRAS                 0.148 0.534 0.148 0.534
 score FORM_FRAUD                            0.999 0.999 0.999 0.999
-score FORM_FRAUD_3                          2.267 0.001 2.267 0.001
+score FORM_FRAUD_3                          1.669 0.001 1.669 0.001
 score FORM_FRAUD_5                          0.001 0.001 0.001 0.001
 score FOUND_YOU                             1.000 1.000 1.000 1.000
-score FREEMAIL_FORGED_FROMDOMAIN            0.250 0.250 0.250 0.250
+score FREEMAIL_FORGED_FROMDOMAIN            0.249 0.249 0.249 0.249
 score FREEM_FRNUM_UNICD_EMPTY               1.000 1.000 1.000 1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB            1.000 1.000 1.000 1.000
-score FROM_2_EMAILS_SHORT                   1.197 1.000 1.197 1.000
-score FROM_ADDR_WS                          2.999 2.129 2.999 2.129
+score FROM_2_EMAILS_SHORT                   1.501 1.000 1.501 1.000
+score FROM_ADDR_WS                          2.999 2.126 2.999 2.126
 score FROM_BANK_NOAUTH                      0.001 1.000 0.001 1.000
 score FROM_FMBLA_NDBLOCKED                  0.001 0.001 0.001 0.001
 score FROM_FMBLA_NEWDOM                     0.001 1.000 0.001 1.000
 score FROM_FMBLA_NEWDOM14                   0.001 1.000 0.001 1.000
 score FROM_FMBLA_NEWDOM28                   0.001 0.799 0.001 0.799
-score FROM_GOV_DKIM_AU                      0.001 -0.042 0.001 -0.042
+score FROM_GOV_DKIM_AU                      0.001 -0.783 0.001 -0.783
 score FROM_GOV_REPLYTO_FREEMAIL             0.001 1.000 0.001 1.000
 score FROM_GOV_SPOOF                        0.001 1.000 0.001 1.000
 score FROM_IN_TO_AND_SUBJ                   1.799 1.899 1.799 1.899
-score FROM_MISSPACED                        1.801 0.847 1.801 0.847
-score FROM_MISSP_DYNIP                      1.152 0.001 1.152 0.001
-score FROM_MISSP_EH_MATCH                   1.785 1.549 1.785 1.549
-score FROM_MISSP_FREEMAIL                   1.380 2.999 1.380 2.999
+score FROM_MISSPACED                        1.207 1.209 1.207 1.209
+score FROM_MISSP_DYNIP                      2.005 0.001 2.005 0.001
+score FROM_MISSP_EH_MATCH                   1.193 1.604 1.193 1.604
+score FROM_MISSP_FREEMAIL                   1.957 2.999 1.957 2.999
 score FROM_MISSP_MSFT                       0.001 0.001 0.001 0.001
-score FROM_MISSP_REPLYTO                    2.499 2.134 2.499 2.134
+score FROM_MISSP_REPLYTO                    2.499 2.144 2.499 2.144
 score FROM_MISSP_SPF_FAIL                   0.001 0.001 0.001 0.001
 score FROM_MISSP_USER                       0.001 0.001 0.001 0.001
 score FROM_NEWDOM_BTC                       0.001 1.000 0.001 1.000
 score FROM_NTLD_LINKBAIT                    1.000 1.000 1.000 1.000
 score FROM_NTLD_REPLY_FREEMAIL              1.000 1.000 1.000 1.000
 score FROM_NUMBERO_NEWDOMAIN                0.001 1.000 0.001 1.000
-score FROM_PAYPAL_SPOOF                     0.001 1.599 0.001 1.599
-score FROM_SUSPICIOUS_NTLD                  0.500 0.195 0.500 0.195
+score FROM_PAYPAL_SPOOF                     0.001 1.130 0.001 1.130
+score FROM_SUSPICIOUS_NTLD                  0.499 0.192 0.499 0.192
 score FROM_SUSPICIOUS_NTLD_FP               1.999 1.999 1.999 1.999
+score FROM_WSP_TRAIL                        2.299 0.001 2.299 0.001
 score FSL_BULK_SIG                          0.001 0.001 0.001 0.001
 score FSL_CTYPE_WIN1251                     0.001 0.001 0.001 0.001
 score FSL_NEW_HELO_USER                     0.001 0.001 0.001 0.001
-score FUZZY_AMAZON                          1.699 0.001 1.699 0.001
+score FUZZY_AMAZON                          1.599 0.001 1.599 0.001
 score GAPPY_LOW_CONTRAST                    1.000 1.000 1.000 1.000
 score GAPPY_SALES_LEADS_FREEM               1.000 1.000 1.000 1.000
-score GB_BITCOIN_NH                         0.956 1.000 0.956 1.000
+score GB_BITCOIN_NH                         1.372 1.000 1.372 1.000
 score GB_CUSTOM_HTM_URI                     1.500 1.499 1.500 1.499
-score GB_FAKE_RF_SHORT                      1.999 1.999 1.999 1.999
+score GB_FAKE_RF_SHORT                      1.939 1.999 1.939 1.999
 score GB_FORGED_MUA_POSTFIX                 1.000 1.000 1.000 1.000
 score GB_FREEMAIL_DISPTO                    0.001 0.001 0.001 0.001
 score GB_FREEMAIL_DISPTO_NOTFREEM           0.500 0.500 0.500 0.500
 score GB_GOOGLE_OBFUR                       0.750 0.750 0.750 0.750
-score GB_GOOGLE_TRANSL                      0.749 0.749 0.749 0.749
-score GB_HASHBL_BTC                         0.001 4.524 0.001 4.524
+score GB_GOOGLE_TRANSL                      0.750 0.749 0.750 0.749
+score GB_HASHBL_BTC                         0.001 4.658 0.001 4.658
 score GB_STORAGE_GOOGLE_EMAIL               1.000 1.000 1.000 1.000
 score GOOGLE_DOCS_PHISH                     1.000 1.000 1.000 1.000
 score GOOGLE_DOCS_PHISH_MANY                1.000 1.000 1.000 1.000
 score GOOGLE_DOC_SUSP                       1.000 1.000 1.000 1.000
 score GOOGLE_DRIVE_REPLY_BAD_NTLD           1.000 1.000 1.000 1.000
-score GOOG_MALWARE_DNLD                     4.163 3.286 4.163 3.286
+score GOOG_MALWARE_DNLD                     2.682 1.346 2.682 1.346
 score GOOG_REDIR_HTML_ONLY                  1.999 1.999 1.999 1.999
-score GOOG_REDIR_NORDNS                     2.600 3.099 2.600 3.099
+score GOOG_REDIR_NORDNS                     2.598 3.099 2.598 3.099
 score GOOG_STO_EMAIL_PHISH                  1.000 1.000 1.000 1.000
 score GOOG_STO_HTML_PHISH                   1.000 1.000 1.000 1.000
 score GOOG_STO_HTML_PHISH_MANY              1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_HTML                     1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_NOHTML                   1.000 1.000 1.000 1.000
-score GOOG_STO_NOIMG_HTML                   2.999 2.938 2.999 2.938
+score GOOG_STO_NOIMG_HTML                   2.999 2.950 2.999 2.950
 score HAS_X_NO_RELAY                        1.000 1.000 1.000 1.000
-score HAS_X_OUTGOING_SPAM_STAT              1.611 0.796 1.611 0.796
-score HDRS_MISSP                            2.499 0.725 2.499 0.725
+score HAS_X_OUTGOING_SPAM_STAT              0.506 0.797 0.506 0.797
+score HDRS_LCASE                            0.100 0.100 0.100 0.100
+score HDRS_MISSP                            2.499 0.722 2.499 0.722
 score HDR_ORDER_FTSDMCXX_DIRECT             0.001 0.001 0.001 0.001
 score HDR_ORDER_FTSDMCXX_NORDNS             0.001 0.001 0.001 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS         0.250 0.250 0.250 0.250
-score HELO_NO_DOMAIN                        0.001 0.161 0.001 0.161
+score HEADER_FROM_DIFFERENT_DOMAINS         0.249 0.250 0.249 0.250
+score HELO_NO_DOMAIN                        0.001 0.164 0.001 0.164
 score HEXHASH_WORD                          1.000 1.000 1.000 1.000
 score HK_CTE_RAW                            1.000 1.000 1.000 1.000
 score HK_LOTTO                              1.000 1.000 1.000 1.000
-score HK_NAME_MR_MRS                        1.000 0.999 1.000 0.999
+score HK_NAME_MR_MRS                        0.999 0.999 0.999 0.999
 score HK_RANDOM_ENVFROM                     0.001 0.001 0.001 0.001
-score HK_RANDOM_FROM                        1.000 0.001 1.000 0.001
-score HK_RANDOM_REPLYTO                     0.999 0.999 0.999 0.999
+score HK_RANDOM_FROM                        0.999 0.001 0.999 0.001
+score HK_RANDOM_REPLYTO                     0.999 1.000 0.999 1.000
 score HK_RCVD_IP_MULTICAST                  1.000 1.000 1.000 1.000
-score HK_SCAM                               1.186 0.001 1.186 0.001
+score HK_SCAM                               0.180 0.001 0.180 0.001
 score HOSTED_IMG_DIRECT_MX                  0.001 0.001 0.001 0.001
 score HOSTED_IMG_DQ_UNSUB                   1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM                      1.285 0.001 1.285 0.001
+score HOSTED_IMG_FREEM                      1.341 0.001 1.341 0.001
 score HOSTED_IMG_MULTI                      1.000 1.000 1.000 1.000
-score HOSTED_IMG_MULTI_PUB_01               3.000 2.999 3.000 2.999
-score HTML_ENTITY_ASCII                     2.639 2.999 2.639 2.999
-score HTML_ENTITY_ASCII_TINY                2.316 2.600 2.316 2.600
+score HOSTED_IMG_MULTI_PUB_01               2.999 3.000 2.999 3.000
+score HTML_ENTITY_ASCII                     2.705 2.999 2.705 2.999
+score HTML_ENTITY_ASCII_TINY                0.964 2.921 0.964 2.921
 score HTML_OFF_PAGE                         0.404 0.001 0.404 0.001
 score HTML_SHRT_CMNT_OBFU_MANY              1.000 1.000 1.000 1.000
 score HTML_SINGLET_MANY                     2.499 1.000 2.499 1.000
-score HTML_TAG_BALANCE_CENTER               3.199 2.700 3.199 2.700
-score HTML_TEXT_INVISIBLE_FONT              1.686 1.573 1.686 1.573
-score HTML_TEXT_INVISIBLE_STYLE             1.886 1.387 1.886 1.387
+score HTML_TAG_BALANCE_CENTER               3.099 2.709 3.099 2.709
+score HTML_TEXT_INVISIBLE_FONT              1.181 1.961 1.181 1.961
+score HTML_TEXT_INVISIBLE_STYLE             1.887 1.385 1.887 1.385
 score IMG_ONLY_FM_DOM_INFO                  1.000 1.000 1.000 1.000
 score JH_SPAMMY_HEADERS                     3.499 3.499 3.499 3.499
 score JH_SPAMMY_PATTERN01                   1.000 1.000 1.000 1.000
 score JH_SPAMMY_PATTERN02                   1.000 1.000 1.000 1.000
-score KHOP_HELO_FCRDNS                      0.400 0.001 0.400 0.001
+score KHOP_HELO_FCRDNS                      0.399 0.001 0.399 0.001
 score LINKEDIN_IMG_NOT_RCVD_LNKN            1.000 1.000 1.000 1.000
 score LIST_PRTL_PUMPDUMP                    1.000 1.000 1.000 1.000
 score LIST_PRTL_SAME_USER                   1.000 1.000 1.000 1.000
 score LONG_HEX_URI                          2.999 2.999 2.999 2.999
 score LONG_IMG_URI                          0.001 0.001 0.001 0.001
-score LONG_INVISIBLE_TEXT                   2.999 1.839 2.999 1.839
+score LONG_INVISIBLE_TEXT                   2.999 1.832 2.999 1.832
 score LOTS_OF_MONEY                         0.010 0.010 0.010 0.010
 score LUCRATIVE                             1.000 1.000 1.000 1.000
 score MALF_HTML_B64                         1.000 1.000 1.000 1.000
-score MALWARE_NORDNS                        1.812 1.728 1.812 1.728
-score MALWARE_PASSWORD                      2.804 1.977 2.804 1.977
+score MALWARE_NORDNS                        1.338 1.874 1.338 1.874
+score MALWARE_PASSWORD                      1.390 1.630 1.390 1.630
+score MANY_HDRS_LCASE                       0.001 0.001 0.001 0.001
+score MAY_BE_FORGED                         1.399 0.001 1.399 0.001
 score MILLION_HUNDRED                       0.001 0.001 0.001 0.001
 score MILLION_USD                           1.999 1.999 1.999 1.999
 score MIMEOLE_DIRECT_TO_MX                  0.001 0.001 0.001 0.001
 score MIME_NO_TEXT                          1.999 1.999 1.999 1.999
 score MIXED_AREA_CASE                       1.000 1.000 1.000 1.000
-score MIXED_CENTER_CASE                     1.843 0.333 1.843 0.333
-score MIXED_ES                              2.299 1.699 2.299 1.699
+score MIXED_CENTER_CASE                     2.500 1.820 2.500 1.820
+score MIXED_ES                              2.300 1.699 2.300 1.699
 score MIXED_FONT_CASE                       1.000 1.000 1.000 1.000
 score MIXED_HREF_CASE                       1.999 1.000 1.999 1.000
 score MIXED_IMG_CASE                        1.000 1.000 1.000 1.000
@@ -224,61 +231,61 @@ score MONERO_DEADLINE
 score MONERO_EXTORT_01                      1.000 1.000 1.000 1.000
 score MONERO_MALWARE                        1.000 1.000 1.000 1.000
 score MONERO_PAY_ME                         1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD                        1.700 0.884 1.700 0.884
+score MONEY_ATM_CARD                        0.600 1.324 0.600 1.324
 score MONEY_FORM                            0.001 0.001 0.001 0.001
 score MONEY_FORM_SHORT                      0.001 0.001 0.001 0.001
-score MONEY_FRAUD_3                         0.001 0.292 0.001 0.292
-score MONEY_FRAUD_5                         2.699 2.667 2.699 2.667
-score MONEY_FRAUD_8                         1.637 0.001 1.637 0.001
-score MONEY_FREEMAIL_REPTO                  2.999 2.236 2.999 2.236
-score MONEY_FROM_MISSP                      0.798 0.001 0.798 0.001
+score MONEY_FRAUD_3                         0.001 0.291 0.001 0.291
+score MONEY_FRAUD_5                         2.449 2.699 2.449 2.699
+score MONEY_FRAUD_8                         1.285 0.001 1.285 0.001
+score MONEY_FREEMAIL_REPTO                  2.999 2.233 2.999 2.233
+score MONEY_FROM_MISSP                      0.790 0.001 0.790 0.001
 score MSGID_DOLLARS_URI_IMG                 1.000 1.000 1.000 1.000
 score MSGID_HDR_MALF                        1.000 1.000 1.000 1.000
-score MSMAIL_PRI_ABNORMAL                   1.499 0.570 1.499 0.570
+score MSMAIL_PRI_ABNORMAL                   0.493 0.745 0.493 0.745
 score MSM_PRIO_REPTO                        1.000 1.000 1.000 1.000
-score NA_DOLLARS                            0.001 0.084 0.001 0.084
+score NA_DOLLARS                            0.042 0.001 0.042 0.001
 score NEWEGG_IMG_NOT_RCVD_NEGG              1.000 1.000 1.000 1.000
 score NEW_PRODUCTS                          1.000 1.000 1.000 1.000
-score NICE_REPLY_A                          -2.938 -1.412 -2.938 -1.412
+score NICE_REPLY_A                          -1.473 -2.544 -1.473 -2.544
 score NO_FM_NAME_IP_HOSTN                   0.001 0.001 0.001 0.001
 score NSL_RCVD_FROM_USER                    0.001 0.001 0.001 0.001
 score NSL_RCVD_HELO_USER                    0.001 0.001 0.001 0.001
 score OBFU_BITCOIN                          1.000 1.000 1.000 1.000
-score OBFU_TEXT_ATTACH                      1.395 0.075 1.395 0.075
+score OBFU_TEXT_ATTACH                      0.001 1.190 0.001 1.190
 score ODD_FREEM_REPTO                       1.000 1.000 1.000 1.000
 score PDS_BRAND_SUBJ_NAKED_TO               0.999 0.999 0.999 0.999
-score PDS_BTC_ID                            0.499 0.374 0.499 0.374
-score PDS_BTC_MSGID                         0.171 0.260 0.171 0.260
+score PDS_BTC_ID                            0.500 0.243 0.500 0.243
+score PDS_BTC_MSGID                         0.125 0.935 0.125 0.935
 score PDS_DBL_URL_TNB_RUNON                 1.999 1.000 1.999 1.000
-score PDS_EMPTYSUBJ_URISHRT                 1.499 1.197 1.499 1.197
-score PDS_FRNOM_TODOM_DBL_URL               0.001 1.499 0.001 1.499
-score PDS_FRNOM_TODOM_NAKED_TO              1.499 1.499 1.499 1.499
-score PDS_FROM_2_EMAILS_SHRTNER             1.494 0.926 1.494 0.926
-score PDS_FROM_NAME_TO_DOMAIN               1.999 1.907 1.999 1.907
+score PDS_EMPTYSUBJ_URISHRT                 1.499 1.082 1.499 1.082
+score PDS_FRNOM_TODOM_DBL_URL               0.353 1.499 0.353 1.499
+score PDS_FRNOM_TODOM_NAKED_TO              1.499 1.496 1.499 1.496
+score PDS_FROM_2_EMAILS                     2.597 0.001 2.597 0.001
+score PDS_FROM_2_EMAILS_SHRTNER             0.868 0.591 0.868 0.591
+score PDS_FROM_NAME_TO_DOMAIN               1.999 1.909 1.999 1.909
 score PDS_HELO_SPF_FAIL                     0.001 1.000 0.001 1.000
 score PDS_NO_FULL_NAME_SPOOFED_URL          0.750 0.749 0.750 0.749
 score PDS_PHPEXP_BOT                        1.000 1.000 1.000 1.000
-score PDS_SHORTFWD_URISHRT                  1.028 1.000 1.028 1.000
-score PDS_SHORT_SPOOFED_URL                 2.000 1.999 2.000 1.999
+score PDS_SHORTFWD_URISHRT                  1.319 1.000 1.319 1.000
+score PDS_SHORT_SPOOFED_URL                 1.999 1.999 1.999 1.999
 score PDS_TINYSUBJ_URISHRT                  1.499 1.499 1.499 1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE     1.999 0.001 1.999 0.001
-score PHISH_ATTACH                          2.299 2.299 2.299 2.299
 score PHISH_AZURE_CLOUDAPP                  3.500 3.500 3.500 3.500
 score PHISH_FBASEAPP                        1.000 1.000 1.000 1.000
 score PHP_NOVER_MUA                         1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT                       1.401 1.547 1.401 1.547
+score PHP_ORIG_SCRIPT                       1.406 1.919 1.406 1.919
 score PHP_SCRIPT                            2.499 2.499 2.499 2.499
 score PHP_SCRIPT_MUA                        1.000 1.000 1.000 1.000
-score POSSIBLE_GMAIL_PHISHER                2.799 2.799 2.799 2.799
+score POSSIBLE_GMAIL_PHISHER                2.699 2.799 2.699 2.799
 score PP_MIME_FAKE_ASCII_TEXT               0.999 0.001 0.999 0.001
 score PP_TOO_MUCH_UNICODE02                 0.500 0.500 0.500 0.500
 score PP_TOO_MUCH_UNICODE05                 1.000 1.000 1.000 1.000
 score PUMPDUMP                              1.000 1.000 1.000 1.000
 score PUMPDUMP_MULTI                        1.000 1.000 1.000 1.000
 score RAND_HEADER_LIST_SPOOF                1.000 1.000 1.000 1.000
-score RAND_HEADER_MANY                      2.999 1.604 2.999 1.604
-score RAND_MKTG_HEADER                      1.999 1.999 1.999 1.999
-score RATWARE_NO_RDNS                       0.001 0.630 0.001 0.630
+score RAND_HEADER_MANY                      2.999 1.480 2.999 1.480
+score RAND_MKTG_HEADER                      1.999 2.000 1.999 2.000
+score RATWARE_NO_RDNS                       0.001 0.629 0.001 0.629
 score RCVD_DOTEDU_SHORT                     1.000 1.000 1.000 1.000
 score RCVD_DOTEDU_SUSP_URI                  1.000 1.000 1.000 1.000
 score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
@@ -312,21 +319,21 @@ score REPTO_INFONUMSCOM
 score SCC_BODY_SINGLE_WORD                  0.001 0.001 0.001 0.001
 score SCC_ISEMM_LID_1                       1.000 1.000 1.000 1.000
 score SCC_ISEMM_LID_1B                      1.499 1.499 1.499 1.499
-score SENDGRID_REDIR                        1.499 1.065 1.499 1.065
+score SENDGRID_REDIR                        1.499 1.068 1.499 1.068
 score SENDGRID_REDIR_PHISH                  1.000 1.000 1.000 1.000
 score SEO_SUSP_NTLD                         1.000 1.000 1.000 1.000
 score SERGIO_SUBJECT_VIAGRA01               0.001 0.001 0.001 0.001
 score SHOPIFY_IMG_NOT_RCVD_SFY              2.499 2.499 2.499 2.499
-score SHORTENER_SHORT_IMG                   1.000 1.000 1.000 1.000
+score SHORTENER_SHORT_IMG                   0.001 1.000 0.001 1.000
 score SHORT_IMG_SUSP_NTLD                   1.000 1.000 1.000 1.000
-score SHORT_SHORTNER                        2.000 1.999 2.000 1.999
+score SHORT_SHORTNER                        1.999 1.999 1.999 1.999
 score SPOOFED_FREEMAIL                      0.001 0.001 0.001 0.001
-score SPOOFED_FREEMAIL_NO_RDNS              1.100 0.001 1.100 0.001
+score SPOOFED_FREEMAIL_NO_RDNS              1.102 0.001 1.102 0.001
 score SPOOFED_FREEM_REPTO                   0.001 0.001 0.001 0.001
 score SPOOFED_FREEM_REPTO_CHN               0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_RUS               0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID                       1.500 0.001 1.500 0.001
-score STATIC_XPRIO_OLE                      0.692 1.846 0.692 1.846
+score SPOOF_GMAIL_MID                       1.499 0.001 1.499 0.001
+score STATIC_XPRIO_OLE                      1.927 1.842 1.927 1.842
 score STOCK_TIP                             1.000 1.000 1.000 1.000
 score SUBJ_BRKN_WORDNUMS                    1.000 1.000 1.000 1.000
 score SURBL_BLOCKED                         0.001 0.001 0.001 0.001
@@ -335,36 +342,38 @@ score SUSP_UTF8_WORD_SUBJ
 score SYSADMIN                              1.000 1.000 1.000 1.000
 score TAGSTAT_IMG_NOT_RCVD_TGST             1.000 1.000 1.000 1.000
 score TARINGANET_IMG_NOT_RCVD_TN            1.000 1.000 1.000 1.000
-score THIS_AD                               0.900 0.900 0.900 0.900
+score THIS_AD                               0.899 0.899 0.899 0.899
 score THIS_IS_ADV_SUSP_NTLD                 1.000 1.000 1.000 1.000
 score TONLINE_FAKE_DKIM                     1.000 1.000 1.000 1.000
-score TONOM_EQ_TOLOC_SHRT_SHRTNER           1.252 0.161 1.252 0.161
+score TONOM_EQ_TOLOC_SHRT_SHRTNER           1.499 0.151 1.499 0.151
 score TO_EQ_FM_DIRECT_MX                    0.001 0.001 0.001 0.001
+score TO_EQ_FM_DOM_HTML_IMG                 2.199 0.001 2.199 0.001
+score TO_EQ_FM_DOM_HTML_ONLY                0.001 0.001 0.001 0.001
 score TO_EQ_FM_DOM_SPF_FAIL                 0.001 0.001 0.001 0.001
-score TO_EQ_FM_HTML_ONLY                    0.001 1.899 0.001 1.899
 score TO_EQ_FM_SPF_FAIL                     0.001 0.001 0.001 0.001
-score TO_IN_SUBJ                            0.099 0.100 0.099 0.100
-score TO_NAME_SUBJ_NO_RDNS                  2.811 2.999 2.811 2.999
-score TO_NO_BRKTS_FROM_MSSP                 2.499 2.499 2.499 2.499
+score TO_IN_SUBJ                            0.100 0.100 0.100 0.100
+score TO_NAME_SUBJ_NO_RDNS                  2.716 3.000 2.716 3.000
+score TO_NO_BRKTS_FROM_MSSP                 2.499 2.082 2.499 2.082
 score TO_NO_BRKTS_HTML_IMG                  1.999 1.999 1.999 1.999
 score TO_NO_BRKTS_HTML_ONLY                 1.999 1.999 1.999 1.999
-score TO_NO_BRKTS_MSFT                      0.050 0.001 0.050 0.001
-score TO_NO_BRKTS_NORDNS_HTML               2.000 1.999 2.000 1.999
+score TO_NO_BRKTS_MSFT                      0.001 0.001 0.001 0.001
+score TO_NO_BRKTS_NORDNS_HTML               1.999 1.999 1.999 1.999
 score TO_NO_BRKTS_PCNT                      2.499 2.499 2.499 2.499
-score TVD_PH_SUBJ_META                      2.799 2.899 2.799 2.899
-score TVD_SPACE_RATIO_MINFP                 2.499 0.001 2.499 0.001
+score TVD_PH_SUBJ_META                      2.899 2.899 2.899 2.899
+score TVD_SPACE_ENCODED                     2.499 0.001 2.499 0.001
+score TVD_SPACE_RATIO_MINFP                 1.103 0.001 1.103 0.001
 score TW_GIBBERISH_MANY                     1.000 1.000 1.000 1.000
 score UC_GIBBERISH_OBFU                     1.000 1.000 1.000 1.000
-score UNDISC_FREEM                          2.799 2.699 2.799 2.699
-score UNDISC_MONEY                          2.700 2.699 2.700 2.699
-score UNICODE_OBFU_ASC                      2.499 2.499 2.499 2.499
+score UNDISC_FREEM                          2.699 2.699 2.699 2.699
+score UNDISC_MONEY                          2.699 2.699 2.699 2.699
+score UNICODE_OBFU_ASC                      2.500 2.499 2.500 2.499
 score UNICODE_OBFU_ZW                       1.000 1.000 1.000 1.000
 score UNSUB_GOOG_FORM                       1.000 1.000 1.000 1.000
 score URI_ADOBESPARK                        1.000 1.000 1.000 1.000
 score URI_AZURE_CLOUDAPP                    1.000 1.000 1.000 1.000
 score URI_DASHGOVEDU                        1.000 1.000 1.000 1.000
 score URI_DATA                              1.000 1.000 1.000 1.000
-score URI_DOTEDU                            2.000 1.999 2.000 1.999
+score URI_DOTEDU                            1.999 1.999 1.999 1.999
 score URI_DOTEDU_ENTITY                     1.000 1.000 1.000 1.000
 score URI_FIREBASEAPP                       1.000 1.000 1.000 1.000
 score URI_GOOGLE_PROXY                      2.499 2.599 2.499 2.599
@@ -372,27 +381,27 @@ score URI_GOOG_STO_SPAMMY
 score URI_HEX_IP                            1.000 1.000 1.000 1.000
 score URI_IMG_WP_REDIR                      1.000 1.000 1.000 1.000
 score URI_LONG_REPEAT                       1.000 1.000 1.000 1.000
-score URI_MALWARE_BH                        0.001 0.999 0.001 0.999
-score URI_ONLY_MSGID_MALF                   0.015 1.999 0.015 1.999
+score URI_MALWARE_BH                        1.000 0.999 1.000 0.999
+score URI_ONLY_MSGID_MALF                   0.001 1.999 0.001 1.999
 score URI_OPTOUT_3LD                        1.000 1.000 1.000 1.000
-score URI_PHISH                             3.999 3.993 3.999 3.993
+score URI_PHISH                             3.999 3.992 3.999 3.992
 score URI_PHP_REDIR                         1.000 1.000 1.000 1.000
-score URI_TRY_3LD                           1.999 1.999 1.999 1.999
+score URI_TRY_3LD                           1.999 2.000 1.999 2.000
 score URI_TRY_USME                          1.000 1.000 1.000 1.000
-score URI_WPADMIN                           2.299 0.001 2.299 0.001
-score URI_WP_DIRINDEX                       3.499 1.000 3.499 1.000
-score URI_WP_HACKED                         3.499 1.456 3.499 1.456
+score URI_WPADMIN                           2.199 0.001 2.199 0.001
+score URI_WP_DIRINDEX                       2.586 1.000 2.586 1.000
+score URI_WP_HACKED                         3.499 1.586 3.499 1.586
 score URI_WP_HACKED_2                       2.499 2.499 2.499 2.499
 score USB_DRIVES                            1.000 1.000 1.000 1.000
 score VFY_ACCT_NORDNS                       0.001 0.001 0.001 0.001
 score VPS_NO_NTLD                           1.000 1.000 1.000 1.000
 score WALMART_IMG_NOT_RCVD_WAL              1.000 1.000 1.000 1.000
-score WORD_INVIS                            1.304 1.549 1.304 1.549
-score WORD_INVIS_MANY                       2.499 2.999 2.499 2.999
-score XFER_LOTSA_MONEY                      0.042 0.001 0.042 0.001
+score WORD_INVIS                            1.302 1.461 1.302 1.461
+score WORD_INVIS_MANY                       2.999 2.999 2.999 2.999
+score XFER_LOTSA_MONEY                      0.294 0.001 0.294 0.001
 score XM_DIGITS_ONLY                        1.000 1.000 1.000 1.000
-score XM_RANDOM                             0.101 0.001 0.101 0.001
-score XPRIO                                 2.249 0.001 2.249 0.001
+score XM_RANDOM                             0.291 0.001 0.291 0.001
+score XPRIO                                 2.250 0.001 2.250 0.001
 score XPRIO_SHORT_SUBJ                      1.000 1.000 1.000 1.000
-score YOUR_PERMISSION                       2.599 2.251 2.599 2.251
-score YOU_INHERIT                           2.567 2.225 2.567 2.225
+score YOUR_PERMISSION                       2.165 2.352 2.165 2.352
+score YOU_INHERIT                           1.375 1.682 1.375 1.682

Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1909892&r1=1909891&r2=1909892&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Thu May 18 02:42:22 2023
@@ -1,197 +1,205 @@
-# Using score set 0 logs for revision 1909855 from:
-# ham-ena-week0.r1909855.log ham-ena-week1.r1909855.log ham-ena-week2.r1909855.log ham-ena-week3.r1909855.log ham-ena-week4.r1909855.log ham-giovanni-ham.r1909855.log ham-giovanni-spammy.r1909855.log ham-giovanni-spam.r1909855.log ham-grenier.r1909855.log ham-hege.r1909855.log ham-jhardin.r1909855.log ham-llanga.r1909855.log ham-mmiroslaw-mails-ham.r1909855.log ham-mmiroslaw-mails-spam.r1909855.log ham-spamsponge.r1909855.log ham-thendrikx.r1909855.log ham-tsz-corpus.r1909855.log spam-ena-week0.r1909855.log spam-ena-week1.r1909855.log spam-ena-week2.r1909855.log spam-ena-week3.r1909855.log spam-ena-week4.r1909855.log spam-giovanni-ham.r1909855.log spam-giovanni-spammy.r1909855.log spam-giovanni-spam.r1909855.log spam-grenier.r1909855.log spam-hege.r1909855.log spam-jhardin.r1909855.log spam-llanga.r1909855.log spam-mmiroslaw-mails-ham.r1909855.log spam-mmiroslaw-mails-spam.r1909855.log spam-spamsponge.r1909855.log spam-thendrikx.r1909855.log spam-tsz-corpus.r1909855.log
+# Using score set 0 logs for revision 1909869 from:
+# ham-ena-week0.r1909869.log ham-ena-week1.r1909869.log ham-ena-week2.r1909869.log ham-ena-week3.r1909869.log ham-ena-week4.r1909869.log ham-giovanni-ham.r1909869.log ham-giovanni-spammy.r1909869.log ham-giovanni-spam.r1909869.log ham-grenier.r1909869.log ham-hege.r1909869.log ham-jhardin.r1909869.log ham-llanga.r1909869.log ham-mmiroslaw-mails-ham.r1909869.log ham-mmiroslaw-mails-spam.r1909869.log ham-spamsponge.r1909869.log ham-thendrikx.r1909869.log ham-tsz-corpus.r1909869.log spam-ena-week0.r1909869.log spam-ena-week1.r1909869.log spam-ena-week2.r1909869.log spam-ena-week3.r1909869.log spam-ena-week4.r1909869.log spam-giovanni-ham.r1909869.log spam-giovanni-spammy.r1909869.log spam-giovanni-spam.r1909869.log spam-grenier.r1909869.log spam-hege.r1909869.log spam-jhardin.r1909869.log spam-llanga.r1909869.log spam-mmiroslaw-mails-ham.r1909869.log spam-mmiroslaw-mails-spam.r1909869.log spam-spamsponge.r1909869.log spam-thendrikx.r1909869.log spam-tsz-corpus.r1909869.log
 
-score ACCT_PHISHING_MANY             2.881
+score ACCT_PHISHING_MANY             2.758
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
-score ADMITS_SPAM                    2.699
+score ADMITS_SPAM                    2.999
 score ADVANCE_FEE_2_NEW_MONEY        1.999
 score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        2.599
-score ADVANCE_FEE_4_NEW              0.985
-score ADVANCE_FEE_4_NEW_MONEY        1.287
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.107
-score ADVANCE_FEE_5_NEW_MONEY        0.001
-score AD_PREFS                       0.449
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_3_NEW_MONEY        2.578
+score ADVANCE_FEE_4_NEW              2.299
+score ADVANCE_FEE_4_NEW_MONEY        1.923
+score ADVANCE_FEE_5_NEW              0.993
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.060
+score ADVANCE_FEE_5_NEW_MONEY        1.355
+score AD_PREFS                       0.499
 score AMAZON_IMG_NOT_RCVD_AMZN       0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            0.404
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.001 # force non-zero
+score BIGNUM_EMAILS_FREEM            0.759
 score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_DEADLINE               1.899
-score BITCOIN_EXTORT_01              3.546
-score BITCOIN_MALF_HTML              2.597
-score BITCOIN_MALWARE                1.811
-score BITCOIN_OBFU_SUBJ              3.499
-score BITCOIN_SPAM_02                2.214
-score BITCOIN_SPAM_03                0.001 # force non-zero
-score BITCOIN_SPAM_07                1.791
-score BITCOIN_XPRIO                  1.762
+score BITCOIN_DEADLINE               2.238
+score BITCOIN_EXTORT_01              3.131
+score BITCOIN_MALF_HTML              2.311
+score BITCOIN_MALWARE                3.499
+score BITCOIN_OBFU_SUBJ              3.500
+score BITCOIN_SPAM_02                2.203
+score BITCOIN_SPAM_03                0.001
+score BITCOIN_SPAM_07                3.499
+score BITCOIN_XPRIO                  0.001
 score BITCOIN_YOUR_INFO              2.999
-score BODY_SINGLE_URI                2.099
+score BODY_SINGLE_URI                2.500
 score BODY_SINGLE_WORD               0.001
-score BODY_URI_ONLY                  1.178
-score CK_HELO_GENERIC                0.249
+score BODY_URI_ONLY                  1.392
+score CANT_SEE_AD                    1.020
+score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              0.999
-score DATE_IN_FUTURE_Q_PLUS          3.499
-score DEAR_BENEFICIARY               2.467
+score DATE_IN_FUTURE_Q_PLUS          3.599
+score DEAR_BENEFICIARY               2.699
 score DSN_NO_MIMEVERSION             1.999
-score ENCRYPTED_MESSAGE              -0.999
+score ENCRYPTED_MESSAGE              -1.000
 score END_FUTURE_EMAILS              2.499
-score FAKE_REPLY_A1                  2.434
-score FAKE_REPLY_B                   1.722
-score FILL_THIS_FORM                 0.600
+score FAKE_REPLY_A1                  1.108
+score FAKE_REPLY_B                   1.110
+score FILL_THIS_FORM                 0.699
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               1.183
-score FONT_INVIS_POSTEXTRAS          0.001
+score FONT_INVIS_MSGID               1.434
+score FONT_INVIS_POSTEXTRAS          0.148
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   2.267
+score FORM_FRAUD_3                   1.669
 score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
-score FROM_2_EMAILS_SHORT            1.197
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FROM_2_EMAILS_SHORT            1.501
 score FROM_ADDR_WS                   2.999
 score FROM_IN_TO_AND_SUBJ            1.799
-score FROM_MISSPACED                 1.801
-score FROM_MISSP_DYNIP               1.152
-score FROM_MISSP_EH_MATCH            1.785
-score FROM_MISSP_FREEMAIL            1.380
+score FROM_MISSPACED                 1.207
+score FROM_MISSP_DYNIP               2.005
+score FROM_MISSP_EH_MATCH            1.193
+score FROM_MISSP_FREEMAIL            1.957
 score FROM_MISSP_MSFT                0.001
 score FROM_MISSP_REPLYTO             2.499
 score FROM_MISSP_USER                0.001
-score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_SUSPICIOUS_NTLD           0.499
 score FROM_SUSPICIOUS_NTLD_FP        1.999
+score FROM_WSP_TRAIL                 2.299
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   1.699
-score GB_BITCOIN_NH                  0.956
+score FUZZY_AMAZON                   1.599
+score GB_BITCOIN_NH                  1.372
 score GB_CUSTOM_HTM_URI              1.500
-score GB_FAKE_RF_SHORT               1.999
+score GB_FAKE_RF_SHORT               1.939
 score GB_FREEMAIL_DISPTO             0.001 # force non-zero
-score GB_GOOGLE_TRANSL               0.749
-score GOOG_MALWARE_DNLD              4.163
+score GB_GOOGLE_TRANSL               0.750
+score GOOG_MALWARE_DNLD              2.682
 score GOOG_REDIR_HTML_ONLY           1.999
-score GOOG_REDIR_NORDNS              2.600
+score GOOG_REDIR_NORDNS              2.598
 score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       1.611
+score HAS_X_OUTGOING_SPAM_STAT       0.506
 score HDRS_MISSP                     2.499
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.250
+score HEADER_FROM_DIFFERENT_DOMAINS  0.249
 score HELO_NO_DOMAIN                 0.001
-score HK_NAME_MR_MRS                 1.000
-score HK_RANDOM_ENVFROM              0.001
-score HK_RANDOM_FROM                 1.000
+score HK_NAME_MR_MRS                 0.999
+score HK_RANDOM_ENVFROM              0.001 # force non-zero
+score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        1.186
+score HK_SCAM                        0.180
 score HOSTED_IMG_DIRECT_MX           0.001
-score HOSTED_IMG_FREEM               1.285
-score HOSTED_IMG_MULTI_PUB_01        3.000
-score HTML_ENTITY_ASCII              2.639
-score HTML_ENTITY_ASCII_TINY         2.316
+score HOSTED_IMG_FREEM               1.341
+score HOSTED_IMG_MULTI_PUB_01        2.999
+score HTML_ENTITY_ASCII              2.705
+score HTML_ENTITY_ASCII_TINY         0.964
 score HTML_OFF_PAGE                  0.404
 score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        3.199
-score HTML_TEXT_INVISIBLE_FONT       1.686
-score HTML_TEXT_INVISIBLE_STYLE      1.886
+score HTML_TAG_BALANCE_CENTER        3.099
+score HTML_TEXT_INVISIBLE_FONT       1.181
+score HTML_TEXT_INVISIBLE_STYLE      1.887
 score JH_SPAMMY_HEADERS              3.499
-score KHOP_HELO_FCRDNS               0.400
+score KHOP_HELO_FCRDNS               0.399
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   0.001 # force non-zero
+score LONG_IMG_URI                   0.001
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
-score MALWARE_NORDNS                 1.812
-score MALWARE_PASSWORD               2.804
+score MALWARE_NORDNS                 1.338
+score MALWARE_PASSWORD               1.390
+score MANY_HDRS_LCASE                0.001
+score MAY_BE_FORGED                  1.399
 score MILLION_HUNDRED                0.001
 score MILLION_USD                    1.999
 score MIMEOLE_DIRECT_TO_MX           0.001
 score MIME_NO_TEXT                   1.999
-score MIXED_CENTER_CASE              1.843
-score MIXED_ES                       2.299
+score MIXED_CENTER_CASE              2.500
+score MIXED_ES                       2.300
 score MIXED_HREF_CASE                1.999
-score MONEY_ATM_CARD                 1.700
-score MONEY_FORM                     0.001
+score MONEY_ATM_CARD                 0.600
+score MONEY_FORM                     0.001 # force non-zero
 score MONEY_FORM_SHORT               0.001
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  2.699
-score MONEY_FRAUD_8                  1.637
+score MONEY_FRAUD_5                  2.449
+score MONEY_FRAUD_8                  1.285
 score MONEY_FREEMAIL_REPTO           2.999
-score MONEY_FROM_MISSP               0.798
-score MSMAIL_PRI_ABNORMAL            1.499
-score NA_DOLLARS                     0.001
-score NICE_REPLY_A                   -2.938
+score MONEY_FROM_MISSP               0.790
+score MSMAIL_PRI_ABNORMAL            0.493
+score NA_DOLLARS                     0.042
+score NICE_REPLY_A                   -1.473
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
 score NSL_RCVD_HELO_USER             0.001
-score OBFU_TEXT_ATTACH               1.395
+score OBFU_TEXT_ATTACH               0.001
 score PDS_BRAND_SUBJ_NAKED_TO        0.999
-score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.171
+score PDS_BTC_ID                     0.500
+score PDS_BTC_MSGID                  0.125
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_EMPTYSUBJ_URISHRT          1.499
-score PDS_FRNOM_TODOM_DBL_URL        0.001
+score PDS_FRNOM_TODOM_DBL_URL        0.353
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS_SHRTNER      1.494
+score PDS_FROM_2_EMAILS              2.597
+score PDS_FROM_2_EMAILS_SHRTNER      0.868
 score PDS_FROM_NAME_TO_DOMAIN        1.999
-score PDS_SHORTFWD_URISHRT           1.028
-score PDS_SHORT_SPOOFED_URL          2.000
+score PDS_SHORTFWD_URISHRT           1.319
+score PDS_SHORT_SPOOFED_URL          1.999
 score PDS_TINYSUBJ_URISHRT           1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHISH_ATTACH                   2.299
-score PHP_ORIG_SCRIPT                1.401
+score PHP_ORIG_SCRIPT                1.406
 score PHP_SCRIPT                     2.499
-score POSSIBLE_GMAIL_PHISHER         2.799
+score POSSIBLE_GMAIL_PHISHER         2.699
 score PP_MIME_FAKE_ASCII_TEXT        0.999
 score RAND_HEADER_MANY               2.999
 score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                0.001 # force non-zero
+score RATWARE_NO_RDNS                0.001
 score SCC_BODY_SINGLE_WORD           0.001
 score SCC_ISEMM_LID_1B               1.499
 score SENDGRID_REDIR                 1.499
 score SERGIO_SUBJECT_VIAGRA01        0.001
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORT_SHORTNER                 2.000
-score SPOOFED_FREEMAIL_NO_RDNS       1.100
-score SPOOF_GMAIL_MID                1.500
-score STATIC_XPRIO_OLE               0.692
+score SHORTENER_SHORT_IMG            0.001 # force non-zero
+score SHORT_SHORTNER                 1.999
+score SPOOFED_FREEMAIL_NO_RDNS       1.102
+score SPOOF_GMAIL_MID                1.499
+score STATIC_XPRIO_OLE               1.927
 score SUSP_UTF8_WORD_COMBO           3.000
 score SUSP_UTF8_WORD_SUBJ            1.999
-score THIS_AD                        0.900
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.252
+score THIS_AD                        0.899
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
 score TO_EQ_FM_DIRECT_MX             0.001
-score TO_EQ_FM_HTML_ONLY             0.001
-score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.811
+score TO_EQ_FM_DOM_HTML_IMG          2.199
+score TO_EQ_FM_DOM_HTML_ONLY         0.001
+score TO_IN_SUBJ                     0.100
+score TO_NAME_SUBJ_NO_RDNS           2.716
 score TO_NO_BRKTS_FROM_MSSP          2.499
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.050
-score TO_NO_BRKTS_NORDNS_HTML        2.000
+score TO_NO_BRKTS_MSFT               0.001
+score TO_NO_BRKTS_NORDNS_HTML        1.999
 score TO_NO_BRKTS_PCNT               2.499
-score TVD_PH_SUBJ_META               2.799
-score TVD_SPACE_RATIO_MINFP          2.499
-score UNDISC_FREEM                   2.799
-score UNDISC_MONEY                   2.700
-score UNICODE_OBFU_ASC               2.499
-score URI_DOTEDU                     2.000
+score TVD_PH_SUBJ_META               2.899
+score TVD_SPACE_ENCODED              2.499
+score TVD_SPACE_RATIO_MINFP          1.103
+score UNDISC_FREEM                   2.699
+score UNDISC_MONEY                   2.699
+score UNICODE_OBFU_ASC               2.500
+score URI_DOTEDU                     1.999
 score URI_GOOGLE_PROXY               2.499
-score URI_MALWARE_BH                 0.001
-score URI_ONLY_MSGID_MALF            0.015
+score URI_ONLY_MSGID_MALF            0.001
 score URI_PHISH                      3.999
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.299
-score URI_WP_DIRINDEX                3.499
+score URI_WPADMIN                    2.199
+score URI_WP_DIRINDEX                2.586
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
 score VFY_ACCT_NORDNS                0.001
-score WORD_INVIS                     1.304
-score WORD_INVIS_MANY                2.499
-score XFER_LOTSA_MONEY               0.042
-score XM_RANDOM                      0.101
-score XPRIO                          2.249
-score YOUR_PERMISSION                2.599
-score YOU_INHERIT                    2.567
+score WORD_INVIS                     1.302
+score WORD_INVIS_MANY                2.999
+score XFER_LOTSA_MONEY               0.294
+score XM_RANDOM                      0.291
+score XPRIO                          2.250
+score YOUR_PERMISSION                2.165
+score YOU_INHERIT                    1.375
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -228,8 +236,8 @@ score BOMB_FREEM                     1.0
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
 score BULK_RE_SUSP_NTLD              1.000
-score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
+score COMPENSATION                   1.000
 score CONTENT_AFTER_HTML             1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
@@ -264,6 +272,7 @@ score GOOG_STO_HTML_PHISH_MANY       1.0
 score GOOG_STO_IMG_HTML              1.000
 score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
+score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
 score HK_LOTTO                       1.000
@@ -326,7 +335,6 @@ score REPTO_INFONUMSCOM              1.0
 score SCC_ISEMM_LID_1                1.000
 score SENDGRID_REDIR_PHISH           1.000
 score SEO_SUSP_NTLD                  1.000
-score SHORTENER_SHORT_IMG            1.000
 score SHORT_IMG_SUSP_NTLD            1.000
 score STOCK_TIP                      1.000
 score SUBJ_BRKN_WORDNUMS             1.000
@@ -349,6 +357,7 @@ score URI_GOOG_STO_SPAMMY            3.0
 score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_LONG_REPEAT                1.000
+score URI_MALWARE_BH                 1.000
 score URI_OPTOUT_3LD                 1.000
 score URI_PHP_REDIR                  1.000
 score URI_TRY_USME                   1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1909892&r1=1909891&r2=1909892&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Thu May 18 02:42:22 2023
@@ -4,38 +4,38 @@
 score ACCT_PHISHING_MANY             2.999
 score AC_BR_BONANZA                  0.001 # force non-zero
 score AC_DIV_BONANZA                 0.001
-score AC_FROM_MANY_DOTS              2.999
-score AC_HTML_NONSENSE_TAGS          2.000
+score AC_FROM_MANY_DOTS              2.924
+score AC_HTML_NONSENSE_TAGS          1.999
 score ADMITS_SPAM                    0.001
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW_FRM_MNY      1.104
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.909
 score ADVANCE_FEE_3_NEW_MONEY        2.399
-score ADVANCE_FEE_4_NEW_MONEY        1.273
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.930
+score ADVANCE_FEE_4_NEW_MONEY        1.280
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.055
 score ADVANCE_FEE_5_NEW_MONEY        0.001
 score AD_PREFS                       0.001
 score AMAZON_IMG_NOT_RCVD_AMZN       0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            1.640
-score BITCOIN_DEADLINE               2.543
-score BITCOIN_EXTORT_01              3.995
-score BITCOIN_MALF_HTML              2.562
-score BITCOIN_MALWARE                1.226
-score BITCOIN_SPAM_02                2.499
-score BITCOIN_SPAM_07                2.285
-score BITCOIN_XPRIO                  2.499
-score BITCOIN_YOUR_INFO              3.000
-score BODY_SINGLE_URI                0.300
+score BIGNUM_EMAILS_FREEM            1.725
+score BITCOIN_DEADLINE               2.527
+score BITCOIN_EXTORT_01              3.999
+score BITCOIN_MALF_HTML              3.365
+score BITCOIN_MALWARE                1.403
+score BITCOIN_SPAM_02                2.170
+score BITCOIN_SPAM_07                1.482
+score BITCOIN_XPRIO                  0.293
+score BITCOIN_YOUR_INFO              2.999
+score BODY_SINGLE_URI                0.415
 score BODY_SINGLE_WORD               0.001
-score BODY_URI_ONLY                  1.855
-score CK_HELO_GENERIC                0.249
+score BODY_URI_ONLY                  1.484
+score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              0.001
 score DATE_IN_FUTURE_Q_PLUS          2.699
-score DEAR_BENEFICIARY               1.650
-score DKIMWL_WL_HIGH                 -0.001
+score DEAR_BENEFICIARY               1.797
+score DKIMWL_WL_HIGH                 -0.001 # force non-zero
 score DKIMWL_WL_MED                  -0.001
 score DKIMWL_WL_MEDHI                -0.001
-score DSN_NO_MIMEVERSION             0.752
+score DSN_NO_MIMEVERSION             0.747
 score ENCRYPTED_MESSAGE              -0.999
 score END_FUTURE_EMAILS              2.500
 score FAKE_REPLY_A1                  0.001
@@ -43,131 +43,130 @@ score FAKE_REPLY_B                   0.0
 score FILL_THIS_FORM                 0.499
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               0.396
-score FONT_INVIS_POSTEXTRAS          1.389
-score FORGED_SPF_HELO                0.749
+score FONT_INVIS_MSGID               0.481
+score FONT_INVIS_POSTEXTRAS          0.534
+score FORGED_SPF_HELO                0.755
 score FORM_FRAUD                     0.999
 score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
-score FROM_ADDR_WS                   2.129
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FROM_ADDR_WS                   2.126
 score FROM_FMBLA_NEWDOM28            0.799
-score FROM_GOV_DKIM_AU               -0.042
+score FROM_GOV_DKIM_AU               -0.783
 score FROM_IN_TO_AND_SUBJ            1.899
-score FROM_MISSPACED                 0.847
-score FROM_MISSP_EH_MATCH            1.549
+score FROM_MISSPACED                 1.209
+score FROM_MISSP_EH_MATCH            1.604
 score FROM_MISSP_FREEMAIL            2.999
 score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_REPLYTO             2.134
-score FROM_MISSP_SPF_FAIL            0.001
+score FROM_MISSP_REPLYTO             2.144
+score FROM_MISSP_SPF_FAIL            0.001 # force non-zero
 score FROM_MISSP_USER                0.001
-score FROM_PAYPAL_SPOOF              1.599
-score FROM_SUSPICIOUS_NTLD           0.195
+score FROM_PAYPAL_SPOOF              1.130
+score FROM_SUSPICIOUS_NTLD           0.192
 score FROM_SUSPICIOUS_NTLD_FP        1.999
 score FSL_BULK_SIG                   0.001
-score FSL_CTYPE_WIN1251              0.001
-score FSL_NEW_HELO_USER              0.001 # force non-zero
+score FSL_CTYPE_WIN1251              0.001 # force non-zero
+score FSL_NEW_HELO_USER              0.001
 score FUZZY_AMAZON                   0.001
 score GB_CUSTOM_HTM_URI              1.499
 score GB_FAKE_RF_SHORT               1.999
 score GB_FREEMAIL_DISPTO             0.001
 score GB_GOOGLE_TRANSL               0.749
-score GB_HASHBL_BTC                  4.524
-score GOOG_MALWARE_DNLD              3.286
+score GB_HASHBL_BTC                  4.658
+score GOOG_MALWARE_DNLD              1.346
 score GOOG_REDIR_HTML_ONLY           1.999
 score GOOG_REDIR_NORDNS              3.099
-score GOOG_STO_NOIMG_HTML            2.938
-score HAS_X_OUTGOING_SPAM_STAT       0.796
-score HDRS_MISSP                     0.725
+score GOOG_STO_NOIMG_HTML            2.950
+score HAS_X_OUTGOING_SPAM_STAT       0.797
+score HDRS_MISSP                     0.722
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
-score HELO_NO_DOMAIN                 0.161
+score HELO_NO_DOMAIN                 0.164
 score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_ENVFROM              0.001
-score HK_RANDOM_FROM                 0.001 # force non-zero
-score HK_RANDOM_REPLYTO              0.999
+score HK_RANDOM_ENVFROM              0.001 # force non-zero
+score HK_RANDOM_FROM                 0.001
+score HK_RANDOM_REPLYTO              1.000
 score HK_SCAM                        0.001
 score HOSTED_IMG_DIRECT_MX           0.001
 score HOSTED_IMG_FREEM               0.001 # force non-zero
-score HOSTED_IMG_MULTI_PUB_01        2.999
+score HOSTED_IMG_MULTI_PUB_01        3.000
 score HTML_ENTITY_ASCII              2.999
-score HTML_ENTITY_ASCII_TINY         2.600
-score HTML_OFF_PAGE                  0.001 # force non-zero
-score HTML_TAG_BALANCE_CENTER        2.700
-score HTML_TEXT_INVISIBLE_FONT       1.573
-score HTML_TEXT_INVISIBLE_STYLE      1.387
+score HTML_ENTITY_ASCII_TINY         2.921
+score HTML_OFF_PAGE                  0.001
+score HTML_TAG_BALANCE_CENTER        2.709
+score HTML_TEXT_INVISIBLE_FONT       1.961
+score HTML_TEXT_INVISIBLE_STYLE      1.385
 score JH_SPAMMY_HEADERS              3.499
 score KHOP_HELO_FCRDNS               0.001
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   0.001
-score LONG_INVISIBLE_TEXT            1.839
+score LONG_IMG_URI                   0.001 # force non-zero
+score LONG_INVISIBLE_TEXT            1.832
 score LOTS_OF_MONEY                  0.010
-score MALWARE_NORDNS                 1.728
-score MALWARE_PASSWORD               1.977
-score MILLION_HUNDRED                0.001
+score MALWARE_NORDNS                 1.874
+score MALWARE_PASSWORD               1.630
+score MILLION_HUNDRED                0.001 # force non-zero
 score MILLION_USD                    1.999
 score MIMEOLE_DIRECT_TO_MX           0.001
 score MIME_NO_TEXT                   1.999
-score MIXED_CENTER_CASE              0.333
+score MIXED_CENTER_CASE              1.820
 score MIXED_ES                       1.699
-score MONEY_ATM_CARD                 0.884
+score MONEY_ATM_CARD                 1.324
 score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               0.001
-score MONEY_FRAUD_3                  0.292
-score MONEY_FRAUD_5                  2.667
-score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           2.236
+score MONEY_FRAUD_3                  0.291
+score MONEY_FRAUD_5                  2.699
+score MONEY_FRAUD_8                  0.001 # force non-zero
+score MONEY_FREEMAIL_REPTO           2.233
 score MONEY_FROM_MISSP               0.001
-score MSMAIL_PRI_ABNORMAL            0.570
-score NA_DOLLARS                     0.084
-score NICE_REPLY_A                   -1.412
+score MSMAIL_PRI_ABNORMAL            0.745
+score NA_DOLLARS                     0.001
+score NICE_REPLY_A                   -2.544
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             0.001
-score OBFU_TEXT_ATTACH               0.075
+score NSL_RCVD_HELO_USER             0.001 # force non-zero
+score OBFU_TEXT_ATTACH               1.190
 score PDS_BRAND_SUBJ_NAKED_TO        0.999
-score PDS_BTC_ID                     0.374
-score PDS_BTC_MSGID                  0.260
-score PDS_EMPTYSUBJ_URISHRT          1.197
+score PDS_BTC_ID                     0.243
+score PDS_BTC_MSGID                  0.935
+score PDS_EMPTYSUBJ_URISHRT          1.082
 score PDS_FRNOM_TODOM_DBL_URL        1.499
-score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS_SHRTNER      0.926
-score PDS_FROM_NAME_TO_DOMAIN        1.907
+score PDS_FRNOM_TODOM_NAKED_TO       1.496
+score PDS_FROM_2_EMAILS_SHRTNER      0.591
+score PDS_FROM_NAME_TO_DOMAIN        1.909
 score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
 score PDS_SHORT_SPOOFED_URL          1.999
 score PDS_TINYSUBJ_URISHRT           1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 0.001
 score PHISH_ATTACH                   2.299
-score PHP_ORIG_SCRIPT                1.547
+score PHP_ORIG_SCRIPT                1.919
 score PHP_SCRIPT                     2.499
 score POSSIBLE_GMAIL_PHISHER         2.799
 score PP_MIME_FAKE_ASCII_TEXT        0.001
-score RAND_HEADER_MANY               1.604
-score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                0.630
+score RAND_HEADER_MANY               1.480
+score RAND_MKTG_HEADER               2.000
+score RATWARE_NO_RDNS                0.629
 score RCVD_IN_MSPIKE_H2              -0.001
 score SCC_BODY_SINGLE_WORD           0.001
 score SCC_ISEMM_LID_1B               1.499
-score SENDGRID_REDIR                 1.065
-score SERGIO_SUBJECT_VIAGRA01        0.001
+score SENDGRID_REDIR                 1.068
+score SERGIO_SUBJECT_VIAGRA01        0.001 # force non-zero
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
 score SHORT_SHORTNER                 1.999
 score SPOOFED_FREEMAIL               0.001
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
 score SPOOFED_FREEM_REPTO            0.001
 score SPOOF_GMAIL_MID                0.001
-score STATIC_XPRIO_OLE               1.846
+score STATIC_XPRIO_OLE               1.842
 score SUSP_UTF8_WORD_COMBO           2.999
 score SUSP_UTF8_WORD_SUBJ            0.001
-score THIS_AD                        0.900
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    0.161
+score THIS_AD                        0.899
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    0.151
 score TO_EQ_FM_DIRECT_MX             0.001
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_HTML_ONLY             1.899
 score TO_EQ_FM_SPF_FAIL              0.001
 score TO_IN_SUBJ                     0.100
-score TO_NAME_SUBJ_NO_RDNS           2.999
-score TO_NO_BRKTS_FROM_MSSP          2.499
+score TO_NAME_SUBJ_NO_RDNS           3.000
+score TO_NO_BRKTS_FROM_MSSP          2.082
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_MSFT               0.001
@@ -175,6 +174,7 @@ score TO_NO_BRKTS_NORDNS_HTML        1.9
 score TO_NO_BRKTS_PCNT               2.499
 score TR_JS_REDIRECTION_0            2.299
 score TVD_PH_SUBJ_META               2.899
+score TVD_SPACE_ENCODED              0.001
 score TVD_SPACE_RATIO_MINFP          0.001
 score UNDISC_FREEM                   2.699
 score UNDISC_MONEY                   2.699
@@ -183,18 +183,18 @@ score URI_DOTEDU                     1.9
 score URI_GOOGLE_PROXY               2.599
 score URI_MALWARE_BH                 0.999
 score URI_ONLY_MSGID_MALF            1.999
-score URI_PHISH                      3.993
-score URI_TRY_3LD                    1.999
-score URI_WP_HACKED                  1.456
+score URI_PHISH                      3.992
+score URI_TRY_3LD                    2.000
+score URI_WP_HACKED                  1.586
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                0.001 # force non-zero
-score WORD_INVIS                     1.549
+score VFY_ACCT_NORDNS                0.001
+score WORD_INVIS                     1.461
 score WORD_INVIS_MANY                2.999
 score XFER_LOTSA_MONEY               0.001
 score XM_RANDOM                      0.001
-score XPRIO                          0.001
-score YOUR_PERMISSION                2.251
-score YOU_INHERIT                    2.225
+score XPRIO                          0.001 # force non-zero
+score YOUR_PERMISSION                2.352
+score YOU_INHERIT                    1.682
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -285,6 +285,7 @@ score GOOG_STO_HTML_PHISH_MANY       1.0
 score GOOG_STO_IMG_HTML              1.000
 score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
+score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
 score HK_LOTTO                       1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1909892&r1=1909891&r2=1909892&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Thu May 18 02:42:22 2023
@@ -1,197 +1,205 @@
-# Using score set 0 logs for revision 1909855 from:
-# ham-ena-week0.r1909855.log ham-ena-week1.r1909855.log ham-ena-week2.r1909855.log ham-ena-week3.r1909855.log ham-ena-week4.r1909855.log ham-giovanni-ham.r1909855.log ham-giovanni-spammy.r1909855.log ham-giovanni-spam.r1909855.log ham-grenier.r1909855.log ham-hege.r1909855.log ham-jhardin.r1909855.log ham-llanga.r1909855.log ham-mmiroslaw-mails-ham.r1909855.log ham-mmiroslaw-mails-spam.r1909855.log ham-spamsponge.r1909855.log ham-thendrikx.r1909855.log ham-tsz-corpus.r1909855.log spam-ena-week0.r1909855.log spam-ena-week1.r1909855.log spam-ena-week2.r1909855.log spam-ena-week3.r1909855.log spam-ena-week4.r1909855.log spam-giovanni-ham.r1909855.log spam-giovanni-spammy.r1909855.log spam-giovanni-spam.r1909855.log spam-grenier.r1909855.log spam-hege.r1909855.log spam-jhardin.r1909855.log spam-llanga.r1909855.log spam-mmiroslaw-mails-ham.r1909855.log spam-mmiroslaw-mails-spam.r1909855.log spam-spamsponge.r1909855.log spam-thendrikx.r1909855.log spam-tsz-corpus.r1909855.log
+# Using score set 0 logs for revision 1909869 from:
+# ham-ena-week0.r1909869.log ham-ena-week1.r1909869.log ham-ena-week2.r1909869.log ham-ena-week3.r1909869.log ham-ena-week4.r1909869.log ham-giovanni-ham.r1909869.log ham-giovanni-spammy.r1909869.log ham-giovanni-spam.r1909869.log ham-grenier.r1909869.log ham-hege.r1909869.log ham-jhardin.r1909869.log ham-llanga.r1909869.log ham-mmiroslaw-mails-ham.r1909869.log ham-mmiroslaw-mails-spam.r1909869.log ham-spamsponge.r1909869.log ham-thendrikx.r1909869.log ham-tsz-corpus.r1909869.log spam-ena-week0.r1909869.log spam-ena-week1.r1909869.log spam-ena-week2.r1909869.log spam-ena-week3.r1909869.log spam-ena-week4.r1909869.log spam-giovanni-ham.r1909869.log spam-giovanni-spammy.r1909869.log spam-giovanni-spam.r1909869.log spam-grenier.r1909869.log spam-hege.r1909869.log spam-jhardin.r1909869.log spam-llanga.r1909869.log spam-mmiroslaw-mails-ham.r1909869.log spam-mmiroslaw-mails-spam.r1909869.log spam-spamsponge.r1909869.log spam-thendrikx.r1909869.log spam-tsz-corpus.r1909869.log
 
-score ACCT_PHISHING_MANY             2.881
+score ACCT_PHISHING_MANY             2.758
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
-score ADMITS_SPAM                    2.699
+score ADMITS_SPAM                    2.999
 score ADVANCE_FEE_2_NEW_MONEY        1.999
 score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        2.599
-score ADVANCE_FEE_4_NEW              0.985
-score ADVANCE_FEE_4_NEW_MONEY        1.287
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.107
-score ADVANCE_FEE_5_NEW_MONEY        0.001
-score AD_PREFS                       0.449
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_3_NEW_MONEY        2.578
+score ADVANCE_FEE_4_NEW              2.299
+score ADVANCE_FEE_4_NEW_MONEY        1.923
+score ADVANCE_FEE_5_NEW              0.993
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.060
+score ADVANCE_FEE_5_NEW_MONEY        1.355
+score AD_PREFS                       0.499
 score AMAZON_IMG_NOT_RCVD_AMZN       0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            0.404
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.001 # force non-zero
+score BIGNUM_EMAILS_FREEM            0.759
 score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_DEADLINE               1.899
-score BITCOIN_EXTORT_01              3.546
-score BITCOIN_MALF_HTML              2.597
-score BITCOIN_MALWARE                1.811
-score BITCOIN_OBFU_SUBJ              3.499
-score BITCOIN_SPAM_02                2.214
-score BITCOIN_SPAM_03                0.001 # force non-zero
-score BITCOIN_SPAM_07                1.791
-score BITCOIN_XPRIO                  1.762
+score BITCOIN_DEADLINE               2.238
+score BITCOIN_EXTORT_01              3.131
+score BITCOIN_MALF_HTML              2.311
+score BITCOIN_MALWARE                3.499
+score BITCOIN_OBFU_SUBJ              3.500
+score BITCOIN_SPAM_02                2.203
+score BITCOIN_SPAM_03                0.001
+score BITCOIN_SPAM_07                3.499
+score BITCOIN_XPRIO                  0.001
 score BITCOIN_YOUR_INFO              2.999
-score BODY_SINGLE_URI                2.099
+score BODY_SINGLE_URI                2.500
 score BODY_SINGLE_WORD               0.001
-score BODY_URI_ONLY                  1.178
-score CK_HELO_GENERIC                0.249
+score BODY_URI_ONLY                  1.392
+score CANT_SEE_AD                    1.020
+score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              0.999
-score DATE_IN_FUTURE_Q_PLUS          3.499
-score DEAR_BENEFICIARY               2.467
+score DATE_IN_FUTURE_Q_PLUS          3.599
+score DEAR_BENEFICIARY               2.699
 score DSN_NO_MIMEVERSION             1.999
-score ENCRYPTED_MESSAGE              -0.999
+score ENCRYPTED_MESSAGE              -1.000
 score END_FUTURE_EMAILS              2.499
-score FAKE_REPLY_A1                  2.434
-score FAKE_REPLY_B                   1.722
-score FILL_THIS_FORM                 0.600
+score FAKE_REPLY_A1                  1.108
+score FAKE_REPLY_B                   1.110
+score FILL_THIS_FORM                 0.699
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               1.183
-score FONT_INVIS_POSTEXTRAS          0.001
+score FONT_INVIS_MSGID               1.434
+score FONT_INVIS_POSTEXTRAS          0.148
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   2.267
+score FORM_FRAUD_3                   1.669
 score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
-score FROM_2_EMAILS_SHORT            1.197
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FROM_2_EMAILS_SHORT            1.501
 score FROM_ADDR_WS                   2.999
 score FROM_IN_TO_AND_SUBJ            1.799
-score FROM_MISSPACED                 1.801
-score FROM_MISSP_DYNIP               1.152
-score FROM_MISSP_EH_MATCH            1.785
-score FROM_MISSP_FREEMAIL            1.380
+score FROM_MISSPACED                 1.207
+score FROM_MISSP_DYNIP               2.005
+score FROM_MISSP_EH_MATCH            1.193
+score FROM_MISSP_FREEMAIL            1.957
 score FROM_MISSP_MSFT                0.001
 score FROM_MISSP_REPLYTO             2.499
 score FROM_MISSP_USER                0.001
-score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_SUSPICIOUS_NTLD           0.499
 score FROM_SUSPICIOUS_NTLD_FP        1.999
+score FROM_WSP_TRAIL                 2.299
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   1.699
-score GB_BITCOIN_NH                  0.956
+score FUZZY_AMAZON                   1.599
+score GB_BITCOIN_NH                  1.372
 score GB_CUSTOM_HTM_URI              1.500
-score GB_FAKE_RF_SHORT               1.999
+score GB_FAKE_RF_SHORT               1.939
 score GB_FREEMAIL_DISPTO             0.001 # force non-zero
-score GB_GOOGLE_TRANSL               0.749
-score GOOG_MALWARE_DNLD              4.163
+score GB_GOOGLE_TRANSL               0.750
+score GOOG_MALWARE_DNLD              2.682
 score GOOG_REDIR_HTML_ONLY           1.999
-score GOOG_REDIR_NORDNS              2.600
+score GOOG_REDIR_NORDNS              2.598
 score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       1.611
+score HAS_X_OUTGOING_SPAM_STAT       0.506
 score HDRS_MISSP                     2.499
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.250
+score HEADER_FROM_DIFFERENT_DOMAINS  0.249
 score HELO_NO_DOMAIN                 0.001
-score HK_NAME_MR_MRS                 1.000
-score HK_RANDOM_ENVFROM              0.001
-score HK_RANDOM_FROM                 1.000
+score HK_NAME_MR_MRS                 0.999
+score HK_RANDOM_ENVFROM              0.001 # force non-zero
+score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        1.186
+score HK_SCAM                        0.180
 score HOSTED_IMG_DIRECT_MX           0.001
-score HOSTED_IMG_FREEM               1.285
-score HOSTED_IMG_MULTI_PUB_01        3.000
-score HTML_ENTITY_ASCII              2.639
-score HTML_ENTITY_ASCII_TINY         2.316
+score HOSTED_IMG_FREEM               1.341
+score HOSTED_IMG_MULTI_PUB_01        2.999
+score HTML_ENTITY_ASCII              2.705
+score HTML_ENTITY_ASCII_TINY         0.964
 score HTML_OFF_PAGE                  0.404
 score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        3.199
-score HTML_TEXT_INVISIBLE_FONT       1.686
-score HTML_TEXT_INVISIBLE_STYLE      1.886
+score HTML_TAG_BALANCE_CENTER        3.099
+score HTML_TEXT_INVISIBLE_FONT       1.181
+score HTML_TEXT_INVISIBLE_STYLE      1.887
 score JH_SPAMMY_HEADERS              3.499
-score KHOP_HELO_FCRDNS               0.400
+score KHOP_HELO_FCRDNS               0.399
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   0.001 # force non-zero
+score LONG_IMG_URI                   0.001
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
-score MALWARE_NORDNS                 1.812
-score MALWARE_PASSWORD               2.804
+score MALWARE_NORDNS                 1.338
+score MALWARE_PASSWORD               1.390
+score MANY_HDRS_LCASE                0.001
+score MAY_BE_FORGED                  1.399
 score MILLION_HUNDRED                0.001
 score MILLION_USD                    1.999
 score MIMEOLE_DIRECT_TO_MX           0.001
 score MIME_NO_TEXT                   1.999
-score MIXED_CENTER_CASE              1.843
-score MIXED_ES                       2.299
+score MIXED_CENTER_CASE              2.500
+score MIXED_ES                       2.300
 score MIXED_HREF_CASE                1.999
-score MONEY_ATM_CARD                 1.700
-score MONEY_FORM                     0.001
+score MONEY_ATM_CARD                 0.600
+score MONEY_FORM                     0.001 # force non-zero
 score MONEY_FORM_SHORT               0.001
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  2.699
-score MONEY_FRAUD_8                  1.637
+score MONEY_FRAUD_5                  2.449
+score MONEY_FRAUD_8                  1.285
 score MONEY_FREEMAIL_REPTO           2.999
-score MONEY_FROM_MISSP               0.798
-score MSMAIL_PRI_ABNORMAL            1.499
-score NA_DOLLARS                     0.001
-score NICE_REPLY_A                   -2.938
+score MONEY_FROM_MISSP               0.790
+score MSMAIL_PRI_ABNORMAL            0.493
+score NA_DOLLARS                     0.042
+score NICE_REPLY_A                   -1.473
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
 score NSL_RCVD_HELO_USER             0.001
-score OBFU_TEXT_ATTACH               1.395
+score OBFU_TEXT_ATTACH               0.001
 score PDS_BRAND_SUBJ_NAKED_TO        0.999
-score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.171
+score PDS_BTC_ID                     0.500
+score PDS_BTC_MSGID                  0.125
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_EMPTYSUBJ_URISHRT          1.499
-score PDS_FRNOM_TODOM_DBL_URL        0.001
+score PDS_FRNOM_TODOM_DBL_URL        0.353
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS_SHRTNER      1.494
+score PDS_FROM_2_EMAILS              2.597
+score PDS_FROM_2_EMAILS_SHRTNER      0.868
 score PDS_FROM_NAME_TO_DOMAIN        1.999
-score PDS_SHORTFWD_URISHRT           1.028
-score PDS_SHORT_SPOOFED_URL          2.000
+score PDS_SHORTFWD_URISHRT           1.319
+score PDS_SHORT_SPOOFED_URL          1.999
 score PDS_TINYSUBJ_URISHRT           1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHISH_ATTACH                   2.299
-score PHP_ORIG_SCRIPT                1.401
+score PHP_ORIG_SCRIPT                1.406
 score PHP_SCRIPT                     2.499
-score POSSIBLE_GMAIL_PHISHER         2.799
+score POSSIBLE_GMAIL_PHISHER         2.699
 score PP_MIME_FAKE_ASCII_TEXT        0.999
 score RAND_HEADER_MANY               2.999
 score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                0.001 # force non-zero
+score RATWARE_NO_RDNS                0.001
 score SCC_BODY_SINGLE_WORD           0.001
 score SCC_ISEMM_LID_1B               1.499
 score SENDGRID_REDIR                 1.499
 score SERGIO_SUBJECT_VIAGRA01        0.001
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORT_SHORTNER                 2.000
-score SPOOFED_FREEMAIL_NO_RDNS       1.100
-score SPOOF_GMAIL_MID                1.500
-score STATIC_XPRIO_OLE               0.692
+score SHORTENER_SHORT_IMG            0.001 # force non-zero
+score SHORT_SHORTNER                 1.999
+score SPOOFED_FREEMAIL_NO_RDNS       1.102
+score SPOOF_GMAIL_MID                1.499
+score STATIC_XPRIO_OLE               1.927
 score SUSP_UTF8_WORD_COMBO           3.000
 score SUSP_UTF8_WORD_SUBJ            1.999
-score THIS_AD                        0.900
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.252
+score THIS_AD                        0.899
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
 score TO_EQ_FM_DIRECT_MX             0.001
-score TO_EQ_FM_HTML_ONLY             0.001
-score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.811
+score TO_EQ_FM_DOM_HTML_IMG          2.199
+score TO_EQ_FM_DOM_HTML_ONLY         0.001
+score TO_IN_SUBJ                     0.100
+score TO_NAME_SUBJ_NO_RDNS           2.716
 score TO_NO_BRKTS_FROM_MSSP          2.499
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.050
-score TO_NO_BRKTS_NORDNS_HTML        2.000
+score TO_NO_BRKTS_MSFT               0.001
+score TO_NO_BRKTS_NORDNS_HTML        1.999
 score TO_NO_BRKTS_PCNT               2.499
-score TVD_PH_SUBJ_META               2.799
-score TVD_SPACE_RATIO_MINFP          2.499
-score UNDISC_FREEM                   2.799
-score UNDISC_MONEY                   2.700
-score UNICODE_OBFU_ASC               2.499
-score URI_DOTEDU                     2.000
+score TVD_PH_SUBJ_META               2.899
+score TVD_SPACE_ENCODED              2.499
+score TVD_SPACE_RATIO_MINFP          1.103
+score UNDISC_FREEM                   2.699
+score UNDISC_MONEY                   2.699
+score UNICODE_OBFU_ASC               2.500
+score URI_DOTEDU                     1.999
 score URI_GOOGLE_PROXY               2.499
-score URI_MALWARE_BH                 0.001
-score URI_ONLY_MSGID_MALF            0.015
+score URI_ONLY_MSGID_MALF            0.001
 score URI_PHISH                      3.999
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.299
-score URI_WP_DIRINDEX                3.499
+score URI_WPADMIN                    2.199
+score URI_WP_DIRINDEX                2.586
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
 score VFY_ACCT_NORDNS                0.001
-score WORD_INVIS                     1.304
-score WORD_INVIS_MANY                2.499
-score XFER_LOTSA_MONEY               0.042
-score XM_RANDOM                      0.101
-score XPRIO                          2.249
-score YOUR_PERMISSION                2.599
-score YOU_INHERIT                    2.567
+score WORD_INVIS                     1.302
+score WORD_INVIS_MANY                2.999
+score XFER_LOTSA_MONEY               0.294
+score XM_RANDOM                      0.291
+score XPRIO                          2.250
+score YOUR_PERMISSION                2.165
+score YOU_INHERIT                    1.375
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -228,8 +236,8 @@ score BOMB_FREEM                     1.0
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
 score BULK_RE_SUSP_NTLD              1.000
-score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
+score COMPENSATION                   1.000
 score CONTENT_AFTER_HTML             1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
@@ -264,6 +272,7 @@ score GOOG_STO_HTML_PHISH_MANY       1.0
 score GOOG_STO_IMG_HTML              1.000
 score GOOG_STO_IMG_NOHTML            1.000
 score HAS_X_NO_RELAY                 1.000
+score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
 score HK_LOTTO                       1.000
@@ -326,7 +335,6 @@ score REPTO_INFONUMSCOM              1.0
 score SCC_ISEMM_LID_1                1.000
 score SENDGRID_REDIR_PHISH           1.000
 score SEO_SUSP_NTLD                  1.000
-score SHORTENER_SHORT_IMG            1.000
 score SHORT_IMG_SUSP_NTLD            1.000
 score STOCK_TIP                      1.000
 score SUBJ_BRKN_WORDNUMS             1.000
@@ -349,6 +357,7 @@ score URI_GOOG_STO_SPAMMY            3.0
 score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_LONG_REPEAT                1.000
+score URI_MALWARE_BH                 1.000
 score URI_OPTOUT_3LD                 1.000
 score URI_PHP_REDIR                  1.000
 score URI_TRY_USME                   1.000