You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/11/07 02:44:26 UTC
svn commit: r1905106 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1905106&r1=1905105&r2=1905106&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Mon Nov 7 02:44:26 2022
@@ -1,159 +1,191 @@
-# Using score set 0 logs for revision 1905061 from:
-# ham-ena-week0.r1905061.log ham-ena-week1.r1905061.log ham-ena-week2.r1905061.log ham-ena-week3.r1905061.log ham-ena-week4.r1905061.log ham-grenier.r1905061.log ham-hege.r1905061.log ham-jhardin.r1905061.log ham-llanga.r1905061.log ham-mmiroslaw-mails-ham.r1905061.log ham-mmiroslaw-mails-spam.r1905061.log ham-thendrikx.r1905061.log ham-tsz-spam-corpus.r1905061.log spam-ena-week0.r1905061.log spam-ena-week1.r1905061.log spam-ena-week2.r1905061.log spam-ena-week3.r1905061.log spam-ena-week4.r1905061.log spam-grenier.r1905061.log spam-hege.r1905061.log spam-jhardin.r1905061.log spam-llanga.r1905061.log spam-mmiroslaw-mails-ham.r1905061.log spam-mmiroslaw-mails-spam.r1905061.log spam-thendrikx.r1905061.log spam-tsz-spam-corpus.r1905061.log
+# Using score set 0 logs for revision 1905090 from:
+# ham-ena-week0.r1905090.log ham-ena-week1.r1905090.log ham-ena-week2.r1905090.log ham-ena-week3.r1905090.log ham-ena-week4.r1905090.log ham-giovanni-ham.r1905090.log ham-giovanni-spammy.r1905090.log ham-giovanni-spam.r1905090.log ham-grenier.r1905090.log ham-hege.r1905090.log ham-jhardin.r1905090.log ham-llanga.r1905090.log ham-mmiroslaw-mails-ham.r1905090.log ham-mmiroslaw-mails-spam.r1905090.log ham-thendrikx.r1905090.log ham-tsz-spam-corpus.r1905090.log spam-ena-week0.r1905090.log spam-ena-week1.r1905090.log spam-ena-week2.r1905090.log spam-ena-week3.r1905090.log spam-ena-week4.r1905090.log spam-giovanni-ham.r1905090.log spam-giovanni-spammy.r1905090.log spam-giovanni-spam.r1905090.log spam-grenier.r1905090.log spam-hege.r1905090.log spam-jhardin.r1905090.log spam-llanga.r1905090.log spam-mmiroslaw-mails-ham.r1905090.log spam-mmiroslaw-mails-spam.r1905090.log spam-thendrikx.r1905090.log spam-tsz-spam-corpus.r1905090.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_FROM_MANY_DOTS 2.499
-score AC_HTML_NONSENSE_TAGS 2.000
-score ADMITS_SPAM 2.599
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_MONEY 0.487
-score ADVANCE_FEE_4_NEW_MONEY 0.492
+score AC_FROM_MANY_DOTS 2.999
+score AC_HTML_NONSENSE_TAGS 1.999
+score ADMITS_SPAM 2.299
+score ADVANCE_FEE_2_NEW_MONEY 2.000
+score ADVANCE_FEE_3_NEW 3.500
+score ADVANCE_FEE_3_NEW_MONEY 1.895
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.791
+score ADVANCE_FEE_4_NEW_MONEY 2.589
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_5_NEW_MONEY 0.738
-score AD_PREFS 0.118
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499
+score ADVANCE_FEE_5_NEW_MONEY 0.001
+score AD_PREFS 0.499
+score AMAZON_IMG_NOT_RCVD_AMZN 1.848
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 3.199
-score BIGNUM_EMAILS_FREEM 0.997
-score BITCOIN_EXTORT_01 3.746
-score BITCOIN_MALF_HTML 3.500
-score BITCOIN_MALWARE 0.001
+score AXB_X_FF_SEZ_S 3.099
+score BAT_BDRY_TO_MALF 2.499
+score BIGNUM_EMAILS_FREEM 2.617
+score BIGNUM_EMAILS_MANY 2.459
+score BITCOIN_EXTORT_01 2.112
+score BITCOIN_MALF_HTML 3.499
+score BITCOIN_MALWARE 1.215
score BITCOIN_ONAN 2.999
score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_09 1.499
-score BITCOIN_XPRIO 2.499
-score BITCOIN_YOUR_INFO 2.147
-score BODY_URI_ONLY 2.597
-score BOGUS_MSM_HDRS 0.740
-score BULK_RE_SUSP_NTLD 0.344
-score CK_HELO_GENERIC 0.249
+score BITCOIN_XPRIO 0.554
+score BITCOIN_YOUR_INFO 0.787
+score BODY_URI_ONLY 2.599
+score BOGUS_MSM_HDRS 1.416
+score BULK_RE_SUSP_NTLD 0.586
+score CK_HELO_GENERIC 0.250
+score COMPENSATION 0.001
score CTE_8BIT_MISMATCH 0.999
-score DEAR_BENEFICIARY 3.399
-score DX_TEXT_03 1.499
+score DEAR_BENEFICIARY 3.299
+score DX_TEXT_03 1.299
score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 2.499
-score FBI_MONEY 1.285
-score FBI_SPOOF 1.301
-score FILL_THIS_FORM 0.479
-score FONT_INVIS_DIRECT 0.001
-score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_POSTEXTRAS 0.765
+score FBI_MONEY 1.999
+score FBI_SPOOF 0.556
+score FILL_THIS_FORM 0.997
+score FONT_INVIS_DIRECT 1.086
+score FONT_INVIS_MSGID 2.500
+score FONT_INVIS_NORDNS 1.887
+score FONT_INVIS_POSTEXTRAS 0.006
score FORM_FRAUD 0.999
-score FORM_FRAUD_5 0.001
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_2_EMAILS_SHORT 1.023
-score FROM_MISSPACED 0.975
-score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_FREEMAIL 1.294
+score FORM_FRAUD_3 2.399
+score FORM_FRAUD_5 2.420
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_2_EMAILS_SHORT 0.115
+score FROM_ADDR_WS 2.999
+score FROM_MISSPACED 1.999
+score FROM_MISSP_DYNIP 2.253
+score FROM_MISSP_EH_MATCH 1.999
+score FROM_MISSP_FREEMAIL 1.684
score FROM_MISSP_MSFT 3.199
score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 3.701
-score FROM_SUSPICIOUS_NTLD 0.500
+score FROM_MULTI_NORDNS 1.350
+score FROM_NTLD_REPLY_FREEMAIL 1.391
+score FROM_SUSPICIOUS_NTLD 0.499
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FSL_CTYPE_WIN1251 0.001
-score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.900
-score GB_FAKE_RF_SHORT 1.003
+score FSL_NEW_HELO_USER 0.001 # force non-zero
+score FUZZY_AMAZON 2.799
+score FUZZY_IMPORTANT 2.499
+score FUZZY_SECURITY 2.800
+score GB_FAKE_RF_SHORT 1.999
+score GB_GOOGLE_OBFUR 0.750
+score GB_URI_FLEEK_STO_HTM 0.999
score GOOG_REDIR_NORDNS 2.500
score GOOG_STO_IMG_NOHTML 2.499
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 1.003
+score HAS_X_OUTGOING_SPAM_STAT 1.611
score HDRS_LCASE_IMGONLY 0.100
score HDRS_MISSP 2.499
-score HDR_ORDER_FTSDMCXX_DIRECT 0.001 # force non-zero
+score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 2.351
score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
-score HK_LOTTO 1.000
-score HK_NAME_MR_MRS 0.999
+score HK_LOTTO 0.999
+score HK_NAME_MR_MRS 1.000
score HK_RANDOM_ENVFROM 1.000
score HK_RANDOM_FROM 0.999
score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 1.999
-score HOSTED_IMG_DIRECT_MX 3.022
-score HTML_OFF_PAGE 2.604
-score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 3.599
-score HTML_TEXT_INVISIBLE_FONT 1.019
-score HTML_TEXT_INVISIBLE_STYLE 1.875
-score KHOP_HELO_FCRDNS 0.399
+score HOSTED_IMG_DIRECT_MX 0.750
+score HOSTED_IMG_FREEM 3.500
+score HTML_ENTITY_ASCII 2.999
+score HTML_OFF_PAGE 2.999
+score HTML_SINGLET_MANY 2.500
+score HTML_TAG_BALANCE_CENTER 3.499
+score HTML_TEXT_INVISIBLE_FONT 1.681
+score HTML_TEXT_INVISIBLE_STYLE 1.883
+score IMG_DIRECT_TO_MX 0.084
+score JH_SPAMMY_HEADERS 3.499
+score KHOP_FAKE_EBAY 0.899
+score KHOP_HELO_FCRDNS 0.400
score LONG_HEX_URI 2.999
-score LONG_IMG_URI 2.653
-score LONG_INVISIBLE_TEXT 2.602
+score LONG_IMG_URI 2.654
+score LONG_INVISIBLE_TEXT 2.287
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 1.499
-score MALWARE_NORDNS 0.001 # force non-zero
+score MALWARE_NORDNS 0.501
score MILLION_HUNDRED 0.001
score MILLION_USD 1.999
-score MIMEOLE_DIRECT_TO_MX 1.461
-score MIXED_ES 2.099
-score MIXED_HREF_CASE 1.409
-score MONEY_ATM_CARD 0.726
+score MIMEOLE_DIRECT_TO_MX 1.074
+score MIXED_ES 2.399
+score MIXED_HREF_CASE 1.707
+score MONEY_ATM_CARD 1.971
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
score MONEY_FRAUD_3 0.001
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 1.083
-score MONEY_FREEMAIL_REPTO 2.999
-score MONEY_FROM_MISSP 0.887
-score MSMAIL_PRI_ABNORMAL 0.169
-score NA_DOLLARS 0.001
-score NICE_REPLY_A -1.425
+score MONEY_FRAUD_8 0.001
+score MONEY_FREEMAIL_REPTO 3.000
+score MONEY_FROM_41 1.721
+score MONEY_FROM_MISSP 1.451
+score MSMAIL_PRI_ABNORMAL 0.290
+score NA_DOLLARS 0.001 # force non-zero
+score NICE_REPLY_A -1.510
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 1.653
-score OBFU_TEXT_ATTACH 1.006
+score NSL_RCVD_HELO_USER 2.389
+score OBFU_TEXT_ATTACH 0.001
score ODD_FREEM_REPTO 2.999
score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.001
-score PDS_BTC_NTLD 0.001
-score PDS_OTHER_BAD_TLD 2.000
+score PDS_BTC_MSGID 0.622
+score PDS_BTC_NTLD 1.081
+score PDS_DBL_URL_TNB_RUNON 1.999
+score PDS_FROM_2_EMAILS 3.499
+score PDS_OTHER_BAD_TLD 1.999
score PDS_RDNS_DYNAMIC_FP 0.001 # force non-zero
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
+score PHP_ORIG_SCRIPT 2.499
score PHP_SCRIPT 2.499
-score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 2.630
-score RISK_FREE 1.132
-score SCC_CANSPAM_2 1.401
+score PP_MIME_FAKE_ASCII_TEXT 1.000
+score RAND_MKTG_HEADER 2.000
+score RATWARE_NO_RDNS 1.193
+score RISK_FREE 1.170
+score SCC_CANSPAM_2 2.899
+score SCC_ISEMM_LID_1A 3.178
score SCC_ISEMM_LID_1B 1.499
-score SENDGRID_REDIR 0.001
-score SERGIO_SUBJECT_VIAGRA01 0.399
-score SHOPIFY_IMG_NOT_RCVD_SFY 2.036
+score SENDGRID_REDIR 1.500
+score SERGIO_SUBJECT_VIAGRA01 0.401
+score SHOPIFY_IMG_NOT_RCVD_SFY 2.037
score SHORTENER_SHORT_IMG 0.001
score SHORT_SHORTNER 1.999
-score SPOOFED_FREEMAIL_NO_RDNS 0.998
-score STATIC_XPRIO_OLE 1.922
-score SUBJ_ATTENTION 0.240
-score THIS_AD 0.699
+score SPOOFED_FREEMAIL_NO_RDNS 0.583
+score SPOOF_GMAIL_MID 1.499
+score STATIC_XPRIO_OLE 0.682
+score SUBJ_ATTENTION 0.499
+score THIS_AD 0.499
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 1.759
-score TO_NO_BRKTS_MSFT 1.352
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.190
-score TVD_RCVD_SPACE_BRACKET 3.075
+score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_MSFT 1.350
+score TO_NO_BRKTS_NORDNS_HTML 1.999
+score TO_NO_BRKTS_PCNT 1.511
+score TVD_RCVD_SPACE_BRACKET 2.036
score TVD_SPACE_ENCODED 2.050
score TVD_SPACE_RATIO_MINFP 2.499
-score TVD_SUBJ_NUM_OBFU_MINFP 2.399
-score UNDISC_FREEM 2.799
-score UNDISC_MONEY 3.499
+score TVD_SUBJ_NUM_OBFU_MINFP 2.499
+score UNDISC_FREEM 2.999
+score UNDISC_MONEY 3.399
+score UNICODE_OBFU_ASC 2.499
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.099
+score URI_FIREBASEAPP 2.999
+score URI_GOOGLE_PROXY 2.199
score URI_ONLY_MSGID_MALF 0.001
-score URI_TRY_3LD 1.948
+score URI_PHISH 3.999
+score URI_TRY_3LD 1.949
+score URI_WPADMIN 2.499
+score URI_WP_HACKED 3.500
score URI_WP_HACKED_2 2.499
-score WORD_INVIS 1.583
+score VFY_ACCT_NORDNS 2.464
+score WORD_INVIS 0.001
score WORD_INVIS_MANY 2.999
score XFER_LOTSA_MONEY 0.999
score XM_RANDOM 2.499
-score XPRIO 1.401
-score XPRIO_SHORT_SUBJ 1.343
-score XPRIO_URL_SHORTNER 0.504
-score YOU_INHERIT 0.661
+score XM_RECPTID 3.000
+score XPRIO 2.249
+score XPRIO_SHORT_SUBJ 0.223
+score XPRIO_URL_SHORTNER 0.966
+score YOU_INHERIT 0.929
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -171,7 +203,6 @@ score ALIBABA_IMG_NOT_RCVD_ALI 1.0
score APP_DEVELOPMENT_FREEM 1.000
score APP_DEVELOPMENT_NORDNS 1.000
score BEBEE_IMG_NOT_RCVD_BB 1.000
-score BIGNUM_EMAILS_MANY 1.000
score BITCOIN_BOMB 1.000
score BITCOIN_DEADLINE 1.000
score BITCOIN_EXTORT_02 1.000
@@ -205,20 +236,15 @@ score FACEBOOK_IMG_NOT_RCVD_FB 1.0
score FONT_INVIS_DOTGOV 1.000
score FONT_INVIS_HTML_NOHTML 1.000
score FONT_INVIS_LONG_LINE 1.000
-score FONT_INVIS_NORDNS 1.000
score FOUND_YOU 1.000
score FREEM_FRNUM_UNICD_EMPTY 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
-score FROM_ADDR_WS 1.000
score FROM_NTLD_LINKBAIT 1.000
-score FROM_NTLD_REPLY_FREEMAIL 1.000
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_CUSTOM_HTM_URI 1.000
score GB_FORGED_MUA_POSTFIX 1.000
score GB_FREEMAIL_DISPTO 0.500
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500
-score GB_GOOGLE_OBFUR 0.750
-score GB_URI_FLEEK_STO_HTM 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
score GOOGLE_DOC_SUSP 1.000
@@ -233,14 +259,11 @@ score HEXHASH_WORD 1.0
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
-score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HOSTED_IMG_MULTI_PUB_01 1.000
-score HTML_ENTITY_ASCII 1.000
score HTML_ENTITY_ASCII_TINY 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score IMG_ONLY_FM_DOM_INFO 1.000
-score JH_SPAMMY_HEADERS 1.000
score JH_SPAMMY_PATTERN01 1.000
score JH_SPAMMY_PATTERN02 1.000
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
@@ -249,6 +272,7 @@ score LIST_PRTL_SAME_USER 1.0
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
score MALWARE_PASSWORD 1.000
+score MANY_HDRS_LCASE 0.100
score MIME_NO_TEXT 1.000
score MIXED_AREA_CASE 1.000
score MIXED_CENTER_CASE 1.000
@@ -258,7 +282,6 @@ score MONERO_DEADLINE 1.0
score MONERO_EXTORT_01 1.000
score MONERO_MALWARE 1.000
score MONERO_PAY_ME 1.000
-score MONEY_FROM_41 1.000
score MSGID_DOLLARS_URI_IMG 1.000
score MSGID_HDR_MALF 1.000
score MSM_PRIO_REPTO 1.000
@@ -266,7 +289,6 @@ score NEWEGG_IMG_NOT_RCVD_NEGG 1.0
score NEW_PRODUCTS 1.000
score NUMBERONLY_BITCOIN_EXP 1.000
score OBFU_BITCOIN 1.000
-score PDS_DBL_URL_TNB_RUNON 1.000
score PDS_NAKED_TO_NUMERO 1.000
score PDS_NO_FULL_NAME_SPOOFED_URL 0.750
score PDS_PHPEXP_BOT 1.000
@@ -275,7 +297,6 @@ score PDS_TINYSUBJ_URISHRT 1.0
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
-score PHP_ORIG_SCRIPT 1.000
score PHP_ORIG_SCRIPT_EVAL 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
@@ -305,11 +326,9 @@ score REPTO_419_FRAUD_YJ 1.0
score REPTO_419_FRAUD_YN 1.000
score REPTO_INFONUMSCOM 1.000
score SCC_ISEMM_LID_1 1.000
-score SCC_ISEMM_LID_1A 1.000
score SENDGRID_REDIR_PHISH 1.000
score SEO_SUSP_NTLD 1.000
score SHORT_IMG_SUSP_NTLD 1.000
-score SPOOF_GMAIL_MID 1.000
score STOCK_TIP 1.000
score SUBJ_BRKN_WORDNUMS 1.000
score SUSP_UTF8_WORD_FROM 1.000
@@ -321,10 +340,8 @@ score TONLINE_FAKE_DKIM 1.0
score TO_EQ_FM_DIRECT_MX 1.000
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 1.000
-score TO_NO_BRKTS_HTML_ONLY 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
-score UNICODE_OBFU_ASC 1.000
score UNICODE_OBFU_ZW 1.000
score UNSUB_GOOG_FORM 1.000
score URI_ADOBESPARK 1.000
@@ -332,24 +349,19 @@ score URI_AZURE_CLOUDAPP 1.0
score URI_DASHGOVEDU 1.000
score URI_DATA 1.000
score URI_DOTEDU_ENTITY 1.000
-score URI_FIREBASEAPP 1.000
score URI_GOOG_STO_SPAMMY 3.000
score URI_HEX_IP 1.000
score URI_IMG_WP_REDIR 1.000
score URI_LONG_REPEAT 1.000
score URI_OPTOUT_3LD 1.000
-score URI_PHISH 1.000
score URI_PHP_REDIR 1.000
score URI_TRY_USME 1.000
score URI_WP_DIRINDEX 1.000
-score URI_WP_HACKED 1.000
score USB_DRIVES 1.000
-score VFY_ACCT_NORDNS 1.000
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
score WANT_TO_ORDER 1.000
score XM_DIGITS_ONLY 1.000
-score XM_RECPTID 1.000
score YOUR_DELIVERY_ADDRESS 1.000
# in active.list but have no hits in recent corpus
score ARC_SIGNED 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1905106&r1=1905105&r2=1905106&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Mon Nov 7 02:44:26 2022
@@ -12,83 +12,83 @@ score ADVANCE_FEE_3_NEW_MONEY 0.0
score ADVANCE_FEE_4_NEW_MONEY 2.699
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AD_PREFS 0.001
-score AMAZON_IMG_NOT_RCVD_AMZN 1.667
+score AD_PREFS 0.001 # force non-zero
+score AMAZON_IMG_NOT_RCVD_AMZN 1.644
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 2.310
-score BAT_BDRY_TO_MALF 1.620
-score BIGNUM_EMAILS_FREEM 2.999
-score BIGNUM_EMAILS_MANY 0.391
+score AXB_X_FF_SEZ_S 2.312
+score BAT_BDRY_TO_MALF 0.637
+score BIGNUM_EMAILS_FREEM 2.011
+score BIGNUM_EMAILS_MANY 1.066
score BITCOIN_EXTORT_01 3.013
-score BITCOIN_MALF_HTML 2.431
-score BITCOIN_MALWARE 0.001 # force non-zero
-score BITCOIN_ONAN 2.045
-score BITCOIN_SPAM_02 0.981
-score BITCOIN_SPAM_05 0.642
-score BITCOIN_SPAM_09 1.499
+score BITCOIN_MALF_HTML 2.824
+score BITCOIN_MALWARE 0.001
+score BITCOIN_ONAN 2.524
+score BITCOIN_SPAM_02 0.779
+score BITCOIN_SPAM_05 0.349
+score BITCOIN_SPAM_09 1.500
score BITCOIN_XPRIO 0.001
-score BITCOIN_YOUR_INFO 0.001
-score BODY_URI_ONLY 2.999
-score BOGUS_MSM_HDRS 0.199
+score BITCOIN_YOUR_INFO 0.001 # force non-zero
+score BODY_URI_ONLY 3.000
+score BOGUS_MSM_HDRS 1.562
score CK_HELO_GENERIC 0.250
score CTE_8BIT_MISMATCH 0.001
score DEAR_BENEFICIARY 3.199
-score DKIMWL_BL 2.663
+score DKIMWL_BL 2.664
score DKIMWL_WL_HIGH -0.001
-score DKIMWL_WL_MED -0.001 # force non-zero
-score DKIMWL_WL_MEDHI -0.256
-score DX_TEXT_03 1.500
-score ENCRYPTED_MESSAGE -0.661
-score FBI_MONEY 0.804
-score FBI_SPOOF 1.999
+score DKIMWL_WL_MED -0.001
+score DKIMWL_WL_MEDHI -0.259
+score DX_TEXT_03 1.499
+score ENCRYPTED_MESSAGE -0.798
+score FBI_MONEY 0.653
+score FBI_SPOOF 1.157
score FILL_THIS_FORM 0.999
-score FONT_INVIS_DIRECT 0.525
+score FONT_INVIS_DIRECT 0.756
score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 1.946
-score FONT_INVIS_NORDNS 2.499
-score FONT_INVIS_POSTEXTRAS 2.030
-score FORGED_SPF_HELO 0.753
-score FORM_FRAUD 0.171
-score FORM_FRAUD_5 1.702
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_2_EMAILS_SHORT 2.562
-score FROM_FMBLA_NEWDOM 1.499
-score FROM_FMBLA_NEWDOM14 0.001
-score FROM_FMBLA_NEWDOM28 0.799
-score FROM_GOV_DKIM_AU -0.999
+score FONT_INVIS_MSGID 1.951
+score FONT_INVIS_NORDNS 2.500
+score FONT_INVIS_POSTEXTRAS 1.944
+score FORGED_SPF_HELO 0.743
+score FORM_FRAUD 0.176
+score FORM_FRAUD_5 2.175
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
+score FROM_2_EMAILS_SHORT 2.723
+score FROM_FMBLA_NEWDOM 1.226
+score FROM_FMBLA_NEWDOM14 0.001 # force non-zero
+score FROM_FMBLA_NEWDOM28 0.800
+score FROM_GOV_DKIM_AU -0.394
score FROM_MISSPACED 1.999
score FROM_MISSP_DYNIP 2.499
-score FROM_MISSP_EH_MATCH 1.402
-score FROM_MISSP_FREEMAIL 0.001
+score FROM_MISSP_EH_MATCH 1.406
+score FROM_MISSP_FREEMAIL 0.001 # force non-zero
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_REPLYTO 1.664
+score FROM_MISSP_REPLYTO 1.665
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 1.894
-score FROM_PAYPAL_SPOOF 0.298
+score FROM_MULTI_NORDNS 1.882
+score FROM_PAYPAL_SPOOF 0.942
score FROM_SUSPICIOUS_NTLD 0.001
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FSL_BULK_SIG 0.811
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.485
+score FUZZY_AMAZON 2.351
score FUZZY_IMPORTANT 2.499
score FUZZY_SECURITY 2.799
score GB_FAKE_RF_SHORT 1.999
score GB_FREEMAIL_DISPTO 0.499
-score GB_GOOGLE_OBFUR 0.749
-score GB_HASHBL_BTC 2.767
-score GB_URI_FLEEK_STO_HTM 1.000
+score GB_GOOGLE_OBFUR 0.750
+score GB_HASHBL_BTC 2.679
+score GB_URI_FLEEK_STO_HTM 0.999
score GOOG_REDIR_NORDNS 3.099
score GOOG_STO_IMG_NOHTML 2.499
-score GOOG_STO_NOIMG_HTML 2.950
+score GOOG_STO_NOIMG_HTML 2.949
score HAS_X_OUTGOING_SPAM_STAT 0.001
-score HDRS_LCASE_IMGONLY 0.099
-score HDRS_MISSP 2.500
+score HDRS_LCASE_IMGONLY 0.100
+score HDRS_MISSP 2.499
score HDR_ORDER_FTSDMCXX_DIRECT 0.001
-score HDR_ORDER_FTSDMCXX_NORDNS 1.479
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
-score HELO_NO_DOMAIN 0.001
+score HDR_ORDER_FTSDMCXX_NORDNS 1.474
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
+score HELO_NO_DOMAIN 0.001 # force non-zero
score HK_LOTTO 0.999
score HK_NAME_MR_MRS 1.000
score HK_RANDOM_ENVFROM 0.999
@@ -96,84 +96,84 @@ score HK_RANDOM_FROM 0.9
score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 1.999
score HOSTED_IMG_DIRECT_MX 0.001
-score HOSTED_IMG_FREEM 2.427
-score HTML_ENTITY_ASCII 2.999
+score HOSTED_IMG_FREEM 2.423
+score HTML_ENTITY_ASCII 2.774
score HTML_OFF_PAGE 2.999
score HTML_TAG_BALANCE_CENTER 3.299
-score HTML_TEXT_INVISIBLE_FONT 0.505
-score HTML_TEXT_INVISIBLE_STYLE 3.287
-score IMG_DIRECT_TO_MX 1.399
-score JH_SPAMMY_HEADERS 3.499
+score HTML_TEXT_INVISIBLE_FONT 0.502
+score HTML_TEXT_INVISIBLE_STYLE 3.289
+score IMG_DIRECT_TO_MX 1.401
+score JH_SPAMMY_HEADERS 3.500
score KHOP_HELO_FCRDNS 0.001
-score LONG_HEX_URI 2.666
+score LONG_HEX_URI 2.667
score LONG_IMG_URI 1.351
score LONG_INVISIBLE_TEXT 2.999
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
+score LOTTO_AGENT 1.500
score MALWARE_NORDNS 0.126
-score MALW_ATTACH 2.300
-score MILLION_HUNDRED 2.395
-score MILLION_USD 1.254
+score MALW_ATTACH 2.299
+score MILLION_HUNDRED 2.434
+score MILLION_USD 1.211
score MIMEOLE_DIRECT_TO_MX 0.001
score MIXED_ES 2.499
-score MONEY_ATM_CARD 1.544
+score MONEY_ATM_CARD 0.991
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 0.708
+score MONEY_FRAUD_3 2.432
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 0.001 # force non-zero
-score MONEY_FREEMAIL_REPTO 1.988
-score MONEY_FROM_41 0.971
-score MONEY_FROM_MISSP 1.496
-score MSMAIL_PRI_ABNORMAL 0.915
+score MONEY_FRAUD_8 0.001
+score MONEY_FREEMAIL_REPTO 1.982
+score MONEY_FROM_41 0.683
+score MONEY_FROM_MISSP 0.721
+score MSMAIL_PRI_ABNORMAL 0.645
score NA_DOLLARS 1.499
score NICE_REPLY_A -0.001
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 0.001
score NUMBERONLY_BITCOIN_EXP 0.001
-score OBFU_TEXT_ATTACH 1.012
+score OBFU_TEXT_ATTACH 0.599
score ODD_FREEM_REPTO 2.999
-score PDS_BTC_ID 0.001
+score PDS_BTC_ID 0.001 # force non-zero
score PDS_BTC_MSGID 0.001 # force non-zero
-score PDS_BTC_NTLD 1.999
-score PDS_FROM_2_EMAILS 2.598
+score PDS_BTC_NTLD 1.598
+score PDS_FROM_2_EMAILS 2.600
score PDS_NAKED_TO_NUMERO 1.999
score PDS_OTHER_BAD_TLD 1.999
score PDS_RDNS_DYNAMIC_FP 0.001 # force non-zero
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHP_ORIG_SCRIPT 2.410
-score PHP_SCRIPT 2.348
-score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RAND_MKTG_HEADER 2.000
-score RATWARE_NO_RDNS 3.000
+score PHP_ORIG_SCRIPT 2.499
+score PHP_SCRIPT 2.349
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
+score RAND_MKTG_HEADER 1.999
+score RATWARE_NO_RDNS 2.999
score RCVD_IN_MSPIKE_H2 -0.001
score RISK_FREE 2.399
score SCC_ISEMM_LID_1A 3.499
-score SCC_ISEMM_LID_1B 1.500
-score SENDGRID_REDIR 1.034
-score SERGIO_SUBJECT_VIAGRA01 3.289
-score SHOPIFY_IMG_NOT_RCVD_SFY 0.768
+score SCC_ISEMM_LID_1B 1.499
+score SENDGRID_REDIR 1.035
+score SERGIO_SUBJECT_VIAGRA01 1.108
+score SHOPIFY_IMG_NOT_RCVD_SFY 0.780
score SHORT_SHORTNER 1.999
score SPOOFED_FREEMAIL 0.001
-score SPOOFED_FREEMAIL_NO_RDNS 0.001
+score SPOOFED_FREEMAIL_NO_RDNS 0.001 # force non-zero
score SPOOFED_FREEM_REPTO 0.001
score SPOOF_GMAIL_MID 0.001
score STATIC_XPRIO_OLE 1.865
score SUBJ_ATTENTION 0.499
score THIS_AD 0.699
score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_SPF_FAIL 0.001
-score TO_NAME_SUBJ_NO_RDNS 2.885
+score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score TO_NAME_SUBJ_NO_RDNS 2.830
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 1.055
-score TVD_RCVD_SPACE_BRACKET 1.371
-score TVD_SPACE_ENCODED 0.001
+score TO_NO_BRKTS_PCNT 1.864
+score TVD_RCVD_SPACE_BRACKET 2.997
+score TVD_SPACE_ENCODED 0.001 # force non-zero
score TVD_SPACE_RATIO_MINFP 0.001
score TVD_SUBJ_NUM_OBFU_MINFP 2.399
score UNDISC_FREEM 2.899
@@ -181,22 +181,22 @@ score UNDISC_MONEY 3.3
score UNICODE_OBFU_ASC 2.499
score URI_DOTEDU 1.999
score URI_FIREBASEAPP 2.999
-score URI_GOOGLE_PROXY 2.399
-score URI_PHISH 3.595
+score URI_GOOGLE_PROXY 2.400
+score URI_PHISH 3.600
score URI_PHP_REDIR 3.499
-score URI_TRY_3LD 0.958
+score URI_TRY_3LD 0.957
score URI_WPADMIN 2.499
score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.636
+score VFY_ACCT_NORDNS 2.825
score WORD_INVIS 0.001
score WORD_INVIS_MANY 2.999
score XFER_LOTSA_MONEY 0.001
-score XM_RANDOM 0.036
-score XM_RECPTID 2.067
+score XM_RANDOM 0.127
+score XM_RECPTID 2.068
score XPRIO 0.001
-score XPRIO_SHORT_SUBJ 0.386
-score XPRIO_URL_SHORTNER 0.999
-score YOU_INHERIT 1.084
+score XPRIO_SHORT_SUBJ 0.701
+score XPRIO_URL_SHORTNER 1.000
+score YOU_INHERIT 1.290
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1905106&r1=1905105&r2=1905106&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Mon Nov 7 02:44:26 2022
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 326131 75.436% (99.780% of non-spam corpus)
-# Correctly spam: 89400 20.679% (84.759% of spam corpus)
-# False positives: 719 0.166% (0.220% of nonspam, 6948 weighted)
-# False negatives: 16076 3.718% (15.241% of spam, 23434 weighted)
-# Average score for spam: 12.4 nonspam: 0.5
-# Average for false-pos: 6.0 false-neg: 1.5
-# TOTAL: 432326 100.00%
+# Correctly non-spam: 341798 72.063% (99.668% of non-spam corpus)
+# Correctly spam: 98662 20.801% (75.103% of spam corpus)
+# False positives: 1138 0.240% (0.332% of nonspam, 14874 weighted)
+# False negatives: 32707 6.896% (24.897% of spam, 50479 weighted)
+# Average score for spam: 11.2 nonspam: 0.5
+# Average for false-pos: 6.8 false-neg: 1.5
+# TOTAL: 474305 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 40639 99.77%
-# Correctly spam: 11259 84.56%
-# False positives: 94 0.23%
-# False negatives: 2056 15.44%
-# TCR(l=50): 1.970841 SpamRecall: 84.559% SpamPrec: 99.172%
+# Correctly non-spam: 42610 99.69%
+# Correctly spam: 12438 75.46%
+# False positives: 133 0.31%
+# False negatives: 4044 24.54%
+# TCR(l=50): 1.541238 SpamRecall: 75.464% SpamPrec: 98.942%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 320597 98.09%
-# Correctly spam: 77080 73.08%
-# False positives: 6253 1.91%
-# False negatives: 28396 26.92%
-# TCR(l=50): 0.309272 SpamRecall: 73.078% SpamPrec: 92.496%
+# Correctly non-spam: 336031 97.99%
+# Correctly spam: 84018 63.96%
+# False positives: 6905 2.01%
+# False negatives: 47351 36.04%
+# TCR(l=50): 0.334612 SpamRecall: 63.956% SpamPrec: 92.406%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 39965 98.11%
-# Correctly spam: 9696 72.82%
-# False positives: 768 1.89%
-# False negatives: 3619 27.18%
-# TCR(l=50): 0.316880 SpamRecall: 72.820% SpamPrec: 92.661%
+# Correctly non-spam: 41896 98.02%
+# Correctly spam: 10626 64.47%
+# False positives: 847 1.98%
+# False negatives: 5856 35.53%
+# TCR(l=50): 0.341908 SpamRecall: 64.470% SpamPrec: 92.617%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1905106&r1=1905105&r2=1905106&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Mon Nov 7 02:44:26 2022
@@ -1,11 +1,11 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 302050 77.656% (99.407% of non-spam corpus)
-# Correctly spam: 60505 15.556% (71.092% of spam corpus)
-# False positives: 1801 0.463% (0.593% of nonspam, 33657 weighted)
-# False negatives: 24603 6.325% (28.908% of spam, 46427 weighted)
-# Average score for spam: 16.0 nonspam: -0.2
+# Correctly non-spam: 302049 77.656% (99.407% of non-spam corpus)
+# Correctly spam: 60462 15.545% (71.042% of spam corpus)
+# False positives: 1802 0.463% (0.593% of nonspam, 33672 weighted)
+# False negatives: 24646 6.336% (28.958% of spam, 46644 weighted)
+# Average score for spam: 15.8 nonspam: -0.2
# Average for false-pos: 6.7 false-neg: 1.9
# TOTAL: 388959 100.00%
@@ -13,11 +13,11 @@ Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 37697 99.39%
-# Correctly spam: 7632 71.06%
-# False positives: 231 0.61%
-# False negatives: 3108 28.94%
-# TCR(l=50): 0.732706 SpamRecall: 71.061% SpamPrec: 97.062%
+# Correctly non-spam: 37695 99.39%
+# Correctly spam: 7633 71.07%
+# False positives: 233 0.61%
+# False negatives: 3107 28.93%
+# TCR(l=50): 0.727790 SpamRecall: 71.071% SpamPrec: 97.038%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...