You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2023/09/30 02:37:47 UTC

svn commit: r1912619 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1912619&r1=1912618&r2=1912619&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sat Sep 30 02:37:47 2023
@@ -1,54 +1,53 @@
-# Using score set 0 logs for revision 1912572 from:
-# ham-ena-week0.r1912572.log ham-ena-week1.r1912572.log ham-ena-week2.r1912572.log ham-ena-week3.r1912572.log ham-ena-week4.r1912572.log ham-giovanni-ham.r1912572.log ham-giovanni-spammy.r1912572.log ham-giovanni-spam.r1912572.log ham-grenier.r1912572.log ham-hege.r1912572.log ham-jbrooks.r1912572.log ham-jhardin.r1912572.log ham-llanga.r1912572.log ham-mmiroslaw-mails-ham.r1912572.log ham-mmiroslaw-mails-spam.r1912572.log ham-spamsponge.r1912572.log ham-tsz-corpus.r1912572.log ham-whyscream.r1912572.log spam-ena-week0.r1912572.log spam-ena-week1.r1912572.log spam-ena-week2.r1912572.log spam-ena-week3.r1912572.log spam-ena-week4.r1912572.log spam-giovanni-ham.r1912572.log spam-giovanni-spammy.r1912572.log spam-giovanni-spam.r1912572.log spam-grenier.r1912572.log spam-hege.r1912572.log spam-jbrooks.r1912572.log spam-jhardin.r1912572.log spam-llanga.r1912572.log spam-mmiroslaw-mails-ham.r1912572.log spam-mmiroslaw-mails-spam.r1912572.log spam-spamsponge.r1912572.log spam-tsz-corpus.r1
 912572.log spam-whyscream.r1912572.log
+# Using score set 0 logs for revision 1912601 from:
+# ham-ena-week0.r1912601.log ham-ena-week1.r1912601.log ham-ena-week2.r1912601.log ham-ena-week3.r1912601.log ham-ena-week4.r1912601.log ham-giovanni-ham.r1912601.log ham-giovanni-spammy.r1912601.log ham-giovanni-spam.r1912601.log ham-grenier.r1912601.log ham-hege.r1912601.log ham-jbrooks.r1912601.log ham-jhardin.r1912601.log ham-llanga.r1912601.log ham-mmiroslaw-mails-ham.r1912601.log ham-mmiroslaw-mails-spam.r1912601.log ham-spamsponge.r1912601.log ham-tsz-corpus.r1912601.log ham-whyscream.r1912601.log spam-ena-week0.r1912601.log spam-ena-week1.r1912601.log spam-ena-week2.r1912601.log spam-ena-week3.r1912601.log spam-ena-week4.r1912601.log spam-giovanni-ham.r1912601.log spam-giovanni-spammy.r1912601.log spam-giovanni-spam.r1912601.log spam-grenier.r1912601.log spam-hege.r1912601.log spam-jbrooks.r1912601.log spam-jhardin.r1912601.log spam-llanga.r1912601.log spam-mmiroslaw-mails-ham.r1912601.log spam-mmiroslaw-mails-spam.r1912601.log spam-spamsponge.r1912601.log spam-tsz-corpus.r1
 912601.log spam-whyscream.r1912601.log
 
 score ACCT_PHISHING_MANY             2.999
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
-score ADMITS_SPAM                    2.900
+score ADMITS_SPAM                    2.899
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              2.602
+score ADVANCE_FEE_3_NEW              2.601
 score ADVANCE_FEE_3_NEW_MONEY        2.599
-score ADVANCE_FEE_4_NEW              2.200
-score ADVANCE_FEE_4_NEW_MONEY        2.392
-score ADVANCE_FEE_5_NEW              2.200
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.999
-score ADVANCE_FEE_5_NEW_MONEY        1.533
-score AD_PREFS                       0.112
-score AMAZON_IMG_NOT_RCVD_AMZN       2.500
-score AXB_XMAILER_MIMEOLE_OL_024C2   1.772
+score ADVANCE_FEE_4_NEW              2.299
+score ADVANCE_FEE_4_NEW_MONEY        2.386
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.174
+score ADVANCE_FEE_5_NEW_MONEY        1.570
+score AD_PREFS                       0.001
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2   2.499
 score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_DEADLINE               0.001
-score BITCOIN_EXTORT_01              1.848
-score BITCOIN_MALF_HTML              3.352
-score BITCOIN_MALWARE                2.929
-score BITCOIN_ONAN                   2.802
-score BITCOIN_SPAM_02                2.283
-score BITCOIN_SPAM_07                3.445
-score BITCOIN_TOEQFM                 1.288
-score BITCOIN_VISTA                  1.009
-score BITCOIN_XPRIO                  1.809
-score BITCOIN_YOUR_INFO              2.999
-score BODY_SINGLE_URI                0.352
+score BITCOIN_DEADLINE               0.244
+score BITCOIN_EXTORT_01              1.827
+score BITCOIN_MALF_HTML              3.499
+score BITCOIN_MALWARE                0.512
+score BITCOIN_ONAN                   1.151
+score BITCOIN_SPAM_02                2.499
+score BITCOIN_SPAM_07                1.832
+score BITCOIN_TOEQFM                 2.903
+score BITCOIN_VISTA                  3.353
+score BITCOIN_XPRIO                  2.159
+score BITCOIN_YOUR_INFO              2.002
+score BODY_SINGLE_URI                0.348
 score BODY_URI_ONLY                  2.999
 score BOGUS_MIME_VERSION             3.499
-score CK_HELO_GENERIC                0.249
+score CK_HELO_GENERIC                0.250
 score COMPENSATION                   1.499
-score CTE_8BIT_MISMATCH              1.000
+score CTE_8BIT_MISMATCH              0.999
 score DEAR_BENEFICIARY               2.599
-score DEAR_EMAIL_USER                1.593
+score DEAR_EMAIL_USER                2.197
 score DEAR_NOBODY                    3.599
 score DSN_NO_MIMEVERSION             1.999
 score ENCRYPTED_MESSAGE              -0.999
 score END_FUTURE_EMAILS              2.499
 score FACEBOOK_IMG_NOT_RCVD_FB       1.999
-score FILL_THIS_FORM                 0.600
-score FONT_INVIS_DIRECT              0.001
+score FILL_THIS_FORM                 0.599
+score FONT_INVIS_DIRECT              0.001 # force non-zero
 score FONT_INVIS_MSGID               2.499
-score FORGED_RELAY_MUA_TO_MX         2.899
+score FORGED_RELAY_MUA_TO_MX         2.900
 score FORM_FRAUD                     1.000
 score FORM_FRAUD_3                   2.299
-score FORM_FRAUD_5                   1.998
+score FORM_FRAUD_5                   2.499
 score FREEMAIL_FORGED_FROMDOMAIN     0.249
 score FROMSPACE                      2.600
 score FROM_ADDR_WS                   2.999
@@ -59,149 +58,151 @@ score FROM_MISSP_EH_MATCH            1.9
 score FROM_MISSP_FREEMAIL            2.999
 score FROM_MISSP_MSFT                3.199
 score FROM_MISSP_REPLYTO             2.499
-score FROM_MISSP_USER                2.546
+score FROM_MISSP_USER                0.651
 score FROM_MISSP_XPRIO               2.499
-score FROM_NTLD_LINKBAIT             0.817
-score FROM_NTLD_REPLY_FREEMAIL       0.001
-score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_NTLD_LINKBAIT             1.053
+score FROM_NTLD_REPLY_FREEMAIL       0.723
+score FROM_SUSPICIOUS_NTLD           0.500
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FSL_CTYPE_WIN1251              0.203
-score FSL_HELO_FAKE                  2.699
-score FSL_NEW_HELO_USER              1.891
-score FUZZY_WALLET                   1.533
-score GB_BITCOIN_CP                  2.904
-score GB_CUSTOM_HTM_URI              0.729
-score GB_FAKE_RF_SHORT               1.575
+score FSL_CTYPE_WIN1251              2.992
+score FSL_NEW_HELO_USER              0.001
+score FUZZY_WALLET                   1.799
+score GB_BITCOIN_CP                  2.496
+score GB_CUSTOM_HTM_URI              0.750
+score GB_FAKE_RF_SHORT               1.281
 score GB_FREEMAIL_DISPTO             0.499
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
-score GOOG_REDIR_NORDNS              2.501
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
+score GOOG_REDIR_NORDNS              2.600
 score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       0.001
+score HAS_X_OUTGOING_SPAM_STAT       0.500
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
-score HDR_ORDER_FTSDMCXX_NORDNS      1.108
+score HDR_ORDER_FTSDMCXX_NORDNS      0.219
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
 score HK_NAME_FM_MR_MRS              1.499
-score HK_NAME_MR_MRS                 0.999
+score HK_NAME_MR_MRS                 1.000
 score HK_RANDOM_ENVFROM              0.999
-score HK_RANDOM_FROM                 0.999
-score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        0.904
-score HOSTED_IMG_DIRECT_MX           3.282
+score HK_RANDOM_FROM                 1.000
+score HK_RANDOM_REPLYTO              1.000
+score HK_SCAM                        0.890
+score HOSTED_IMG_DIRECT_MX           3.499
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HREF_EMPTY_NORDNS              0.195
-score HREF_EMPTY_PHPMAIL             2.405
+score HREF_EMPTY_NORDNS              0.136
+score HREF_EMPTY_PHPMAIL             2.465
 score HTML_ENTITY_ASCII              2.999
-score HTML_FONT_TINY_NORDNS          1.637
-score HTML_OFF_PAGE                  2.999
-score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        3.199
+score HTML_FONT_TINY_NORDNS          1.887
+score HTML_OFF_PAGE                  3.000
+score HTML_SINGLET_MANY              2.500
+score HTML_TAG_BALANCE_CENTER        3.299
 score HTML_TEXT_INVISIBLE_FONT       1.187
 score HTML_TEXT_INVISIBLE_STYLE      0.001
-score KHOP_FAKE_EBAY                 0.999
-score KHOP_HELO_FCRDNS               0.399
+score KHOP_FAKE_EBAY                 0.899
+score KHOP_HELO_FCRDNS               0.400
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   1.700
-score LONG_INVISIBLE_TEXT            2.712
+score LONG_IMG_URI                   1.651
+score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
-score MALWARE_NORDNS                 2.562
-score MALWARE_PASSWORD               2.489
+score MALWARE_NORDNS                 1.653
+score MALWARE_PASSWORD               1.693
 score MALW_ATTACH                    2.399
 score MAY_BE_FORGED                  1.899
-score MILLION_HUNDRED                0.946
-score MILLION_USD                    1.762
-score MIMEOLE_DIRECT_TO_MX           1.679
+score MILLION_HUNDRED                2.699
+score MILLION_USD                    1.742
+score MIMEOLE_DIRECT_TO_MX           1.999
 score MIXED_ES                       2.499
 score MONEY_ATM_CARD                 0.001
-score MONEY_FORM_SHORT               2.499
-score MONEY_FRAUD_3                  0.130
+score MONEY_FORM_SHORT               2.451
+score MONEY_FRAUD_3                  1.583
 score MONEY_FRAUD_5                  2.499
-score MONEY_FRAUD_8                  2.699
+score MONEY_FRAUD_8                  2.635
 score MONEY_FREEMAIL_REPTO           2.999
 score MONEY_FROM_41                  1.999
-score MONEY_FROM_MISSP               1.999
-score MSGID_DOLLARS_URI_IMG          1.903
-score MSMAIL_PRI_ABNORMAL            1.361
-score NA_DOLLARS                     1.500
-score NICE_REPLY_A                   -4.038
-score NORDNS_LOW_CONTRAST            0.248
-score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             1.136
-score NSL_RCVD_HELO_USER             1.339
+score MONEY_FROM_MISSP               2.000
+score MSGID_DOLLARS_URI_IMG          0.917
+score MSMAIL_PRI_ABNORMAL            0.001
+score MSM_PRIO_REPTO                 2.499
+score NA_DOLLARS                     1.499
+score NICE_REPLY_A                   -1.475
+score NORDNS_LOW_CONTRAST            0.001
+score NO_FM_NAME_IP_HOSTN            0.001 # force non-zero
+score NSL_RCVD_FROM_USER             0.424
+score NSL_RCVD_HELO_USER             1.064
 score NUMBERONLY_BITCOIN_EXP         1.999
-score OBFU_TEXT_ATTACH               1.020
+score OBFU_TEXT_ATTACH               0.164
 score ODD_FREEM_REPTO                2.999
-score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.944
+score PDS_BTC_ID                     0.500
+score PDS_BTC_MSGID                  0.001
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_EMPTYSUBJ_URISHRT          1.499
 score PDS_FRNOM_TODOM_DBL_URL        1.499
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              0.352
+score PDS_FROM_2_EMAILS              0.354
 score PDS_FROM_NAME_TO_DOMAIN        1.999
 score PDS_HP_HELO_NORDNS             0.999
-score PDS_NAKED_TO_NUMERO            2.000
-score PDS_OTHER_BAD_TLD              1.999
+score PDS_NAKED_TO_NUMERO            1.999
+score PDS_OTHER_BAD_TLD              2.000
 score PDS_PRO_TLD                    0.999
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
+score PDS_SHORTFWD_URISHRT_FP        1.499
 score PDS_TINYSUBJ_URISHRT           1.499
-score PHP_ORIG_SCRIPT                1.038
-score PHP_SCRIPT                     2.500
+score PHP_ORIG_SCRIPT                1.040
+score PHP_SCRIPT                     2.499
 score PP_MIME_FAKE_ASCII_TEXT        0.999
-score RAND_MKTG_HEADER               2.000
-score RATWARE_NO_RDNS                0.429
+score RAND_MKTG_HEADER               1.999
+score RATWARE_NO_RDNS                2.580
 score REPTO_419_FRAUD                2.999
-score RISK_FREE                      1.172
+score RISK_FREE                      1.565
 score SCC_CANSPAM_2                  3.399
 score SCC_ISEMM_LID_1B               1.499
-score SCC_SPAMMER_ADDR_2             2.899
+score SCC_SPAMMER_ADDR_2             1.375
 score SENDGRID_REDIR                 1.499
-score SHOPIFY_IMG_NOT_RCVD_SFY       2.030
-score SHORTENER_SHORT_IMG            1.401
-score SHORT_SHORTNER                 1.999
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.036
+score SHORTENED_URL_SRC              2.199
+score SHORT_SHORTNER                 2.000
 score SPOOFED_FREEMAIL_NO_RDNS       1.500
 score SPOOF_GMAIL_MID                1.499
 score STATIC_XPRIO_OLE               0.001
-score STY_INVIS_DIRECT               2.500
+score STY_INVIS_DIRECT               2.499
 score SUSP_UTF8_WORD_COMBO           2.999
 score SUSP_UTF8_WORD_FROM            1.999
-score SUSP_UTF8_WORD_SUBJ            1.999
+score SUSP_UTF8_WORD_SUBJ            2.000
 score TEQF_USR_POLITE                1.999
 score THIS_AD                        1.799
-score THIS_IS_ADV_SUSP_NTLD          0.432
+score THIS_IS_ADV_SUSP_NTLD          1.278
 score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
 score TO_EQ_FM_DIRECT_MX             0.001
-score TO_EQ_FM_DOM_HTML_IMG          2.599
-score TO_EQ_FM_HTML_ONLY             0.001
-score TO_IN_SUBJ                     0.099
+score TO_EQ_FM_DOM_HTML_IMG          2.197
+score TO_EQ_FM_DOM_HTML_ONLY         0.001 # force non-zero
+score TO_IN_SUBJ                     0.100
 score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           2.000
+score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               2.499
+score TO_NO_BRKTS_MSFT               2.500
 score TO_NO_BRKTS_NORDNS_HTML        1.999
 score TO_NO_BRKTS_PCNT               2.499
 score TVD_IP_HEX                     2.499
-score TVD_LONG_WORD5                 3.600
+score TVD_LONG_WORD5                 3.599
 score TVD_PH_SUBJ_META1              1.249
-score TVD_RATWARE_MSGID_01           3.099
+score TVD_RATWARE_MSGID_01           3.100
 score TVD_SPACE_ENCODED              2.499
 score TVD_SPACE_RATIO_MINFP          2.499
 score UNDISC_FREEM                   3.499
-score UNDISC_MONEY                   2.999
-score UNICODE_OBFU_ASC               2.500
+score UNDISC_MONEY                   3.000
+score UNICODE_OBFU_ASC               2.499
 score URI_AZURE_CLOUDAPP             2.999
-score URI_GOOGLE_PROXY               2.399
+score URI_DOTEDU                     1.999
+score URI_GOOGLE_PROXY               2.299
 score URI_GOOG_STO_SPAMMY            2.999
 score URI_ONLY_MSGID_MALF            0.001
 score URI_PHISH                      3.999
 score URI_PHP_REDIR                  3.499
 score URI_TRY_3LD                    1.999
 score URI_WP_HACKED                  3.499
-score URI_WP_HACKED_2                2.500
-score VFY_ACCT_NORDNS                1.798
+score URI_WP_HACKED_2                2.499
+score VFY_ACCT_NORDNS                1.800
 score VISTA_COST                     2.499
 score VISTA_TONOM_EQ_TOLOC           2.499
-score WORD_INVIS                     1.579
+score WORD_INVIS                     1.581
 score WORD_INVIS_MANY                2.999
 score XM_LIGHT_HEAVY                 2.499
 score XM_RANDOM                      2.499
@@ -299,7 +300,6 @@ score LIST_PRTL_PUMPDUMP             1.0
 score LIST_PRTL_SAME_USER            1.000
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
-score MANY_HDRS_LCASE                0.100
 score MIME_NO_TEXT                   1.000
 score MIXED_AREA_CASE                1.000
 score MIXED_CENTER_CASE              1.000
@@ -311,7 +311,6 @@ score MONERO_EXTORT_01               1.0
 score MONERO_MALWARE                 1.000
 score MONERO_PAY_ME                  1.000
 score MSGID_HDR_MALF                 1.000
-score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
 score OBFU_BITCOIN                   1.000
@@ -348,6 +347,7 @@ score SCC_ISEMM_LID_1A               1.0
 score SCC_SPAMMERMID4                1.000
 score SENDGRID_REDIR_PHISH           1.000
 score SEO_SUSP_NTLD                  1.000
+score SHORTENER_SHORT_IMG            1.000
 score SHORT_IMG_SUSP_NTLD            1.000
 score STOCK_TIP                      1.000
 score SUBJ_ATTENTION                 0.500
@@ -364,7 +364,6 @@ score UNSUB_GOOG_FORM                1.0
 score URI_ADOBESPARK                 1.000
 score URI_DASHGOVEDU                 1.000
 score URI_DATA                       1.000
-score URI_DOTEDU                     1.000
 score URI_DOTEDU_ENTITY              1.000
 score URI_FIREBASEAPP                1.000
 score URI_HEX_IP                     1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1912619&r1=1912618&r2=1912619&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sat Sep 30 02:37:47 2023
@@ -1,179 +1,178 @@
 # Using score set 1 logs for revision 1912488 from:
 # ham-net-ena-week0.r1912488.log ham-net-ena-week1.r1912488.log ham-net-ena-week2.r1912488.log ham-net-ena-week3.r1912488.log ham-net-ena-week4.r1912488.log ham-net-giovanni-ham.r1912488.log ham-net-giovanni-spammy.r1912488.log ham-net-giovanni-spam.r1912488.log ham-net-grenier.r1912488.log ham-net-hege.r1912488.log ham-net-jbrooks.r1912488.log ham-net-jhardin.r1912488.log ham-net-llanga.r1912488.log ham-net-mmiroslaw-mails-ham.r1912488.log ham-net-mmiroslaw-mails-spam.r1912488.log ham-net-spamsponge.r1912488.log ham-net-whyscream.r1912488.log spam-net-ena-week0.r1912488.log spam-net-ena-week1.r1912488.log spam-net-ena-week2.r1912488.log spam-net-ena-week3.r1912488.log spam-net-ena-week4.r1912488.log spam-net-giovanni-ham.r1912488.log spam-net-giovanni-spammy.r1912488.log spam-net-giovanni-spam.r1912488.log spam-net-grenier.r1912488.log spam-net-hege.r1912488.log spam-net-jbrooks.r1912488.log spam-net-jhardin.r1912488.log spam-net-llanga.r1912488.log spam-net-mmiroslaw-mails-ham.r19
 12488.log spam-net-mmiroslaw-mails-spam.r1912488.log spam-net-spamsponge.r1912488.log spam-net-whyscream.r1912488.log
 
-score ACCT_PHISHING_MANY             2.996
+score ACCT_PHISHING_MANY             2.999
 score AC_DIV_BONANZA                 0.001
-score AC_HTML_NONSENSE_TAGS          1.997
-score ADVANCE_FEE_2_NEW_MONEY        1.998
-score ADVANCE_FEE_3_NEW              3.117
-score ADVANCE_FEE_3_NEW_MONEY        2.397
-score ADVANCE_FEE_4_NEW_MONEY        2.398
-score ADVANCE_FEE_5_NEW_MONEY        1.382
-score AD_PREFS                       0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2   1.305
-score BIGNUM_EMAILS_MANY             2.996
-score BITCOIN_DEADLINE               2.401
-score BITCOIN_EXTORT_01              4.886
-score BITCOIN_MALF_HTML              0.692
-score BITCOIN_MALWARE                1.595
-score BITCOIN_ONAN                   2.306
-score BITCOIN_SPAM_02                1.832
-score BITCOIN_SPAM_07                2.978
-score BITCOIN_TOEQFM                 2.941
-score BITCOIN_VISTA                  2.241
-score BITCOIN_XPRIO                  1.510
-score BITCOIN_YOUR_INFO              1.551
+score AC_HTML_NONSENSE_TAGS          1.999
+score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_3_NEW              3.109
+score ADVANCE_FEE_3_NEW_MONEY        2.399
+score ADVANCE_FEE_4_NEW_MONEY        2.399
+score ADVANCE_FEE_5_NEW_MONEY        1.958
+score AD_PREFS                       0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_024C2   1.780
+score BIGNUM_EMAILS_MANY             2.999
+score BITCOIN_DEADLINE               1.699
+score BITCOIN_EXTORT_01              2.478
+score BITCOIN_MALF_HTML              1.455
+score BITCOIN_MALWARE                2.192
+score BITCOIN_ONAN                   1.722
+score BITCOIN_SPAM_02                2.499
+score BITCOIN_SPAM_07                1.370
+score BITCOIN_TOEQFM                 2.486
+score BITCOIN_VISTA                  2.056
+score BITCOIN_XPRIO                  0.001
+score BITCOIN_YOUR_INFO              2.247
 score BODY_SINGLE_URI                0.097
-score BODY_URI_ONLY                  2.386
+score BODY_URI_ONLY                  2.374
 score CK_HELO_GENERIC                0.249
-score CTE_8BIT_MISMATCH              0.001
-score DEAR_BENEFICIARY               2.397
-score DEAR_EMAIL_USER                1.595
-score DEAR_NOBODY                    2.298
+score CTE_8BIT_MISMATCH              0.001 # force non-zero
+score DEAR_BENEFICIARY               2.399
+score DEAR_EMAIL_USER                1.608
+score DEAR_NOBODY                    2.299
 score DKIMWL_WL_HIGH                 -0.001
-score DKIMWL_WL_MED                  -0.001
-score DKIMWL_WL_MEDHI                -0.001 # force non-zero
-score END_FUTURE_EMAILS              2.498
-score FACEBOOK_IMG_NOT_RCVD_FB       1.997
-score FILL_THIS_FORM                 0.398
+score DKIMWL_WL_MED                  -0.001 # force non-zero
+score DKIMWL_WL_MEDHI                -0.001
+score END_FUTURE_EMAILS              2.500
+score FACEBOOK_IMG_NOT_RCVD_FB       1.999
+score FILL_THIS_FORM                 0.399
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           2.996
-score FONT_INVIS_MSGID               0.766
-score FORGED_SPF_HELO                0.798
+score FONT_INVIS_LONG_LINE           2.999
+score FONT_INVIS_MSGID               0.860
+score FORGED_SPF_HELO                0.799
 score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROM_ADDR_WS                   1.546
-score FROM_FMBLA_NEWDOM28            0.311
-score FROM_GOV_DKIM_AU               -0.672
-score FROM_IN_TO_AND_SUBJ            2.397
-score FROM_MISSPACED                 1.997
-score FROM_MISSP_EH_MATCH            1.997
-score FROM_MISSP_FREEMAIL            2.467
-score FROM_MISSP_MSFT                2.796
-score FROM_MISSP_REPLYTO             2.497
-score FROM_MISSP_USER                1.208
-score FROM_MISSP_XPRIO               2.497
-score FROM_PAYPAL_SPOOF              1.302
+score FROM_ADDR_WS                   1.550
+score FROM_FMBLA_NEWDOM28            0.202
+score FROM_GOV_DKIM_AU               -0.844
+score FROM_IN_TO_AND_SUBJ            2.399
+score FROM_MISSPACED                 1.999
+score FROM_MISSP_EH_MATCH            1.999
+score FROM_MISSP_FREEMAIL            1.938
+score FROM_MISSP_MSFT                2.799
+score FROM_MISSP_REPLYTO             2.499
+score FROM_MISSP_USER                2.334
+score FROM_MISSP_XPRIO               2.499
+score FROM_PAYPAL_SPOOF              0.260
 score FROM_SUSPICIOUS_NTLD           0.001
-score FSL_BULK_SIG                   1.329
-score FSL_CTYPE_WIN1251              1.997
-score FSL_HELO_FAKE                  1.797
-score FSL_NEW_HELO_USER              0.001
-score FUZZY_WALLET                   1.997
-score GB_BITCOIN_CP                  1.994
+score FSL_BULK_SIG                   1.370
+score FSL_CTYPE_WIN1251              2.330
+score FSL_NEW_HELO_USER              1.948
+score FUZZY_WALLET                   1.999
+score GB_BITCOIN_CP                  1.630
 score GB_CUSTOM_HTM_URI              0.001
-score GB_FAKE_RF_SHORT               1.997
+score GB_FAKE_RF_SHORT               0.833
 score GB_FREEMAIL_DISPTO             0.499
-score GB_HASHBL_BTC                  0.706
-score GOOG_REDIR_NORDNS              2.622
-score GOOG_STO_NOIMG_HTML            2.997
-score HAS_X_OUTGOING_SPAM_STAT       0.094
-score HDR_ORDER_FTSDMCXX_DIRECT      1.997
-score HDR_ORDER_FTSDMCXX_NORDNS      2.506
+score GB_HASHBL_BTC                  1.302
+score GOOG_REDIR_NORDNS              2.647
+score GOOG_STO_NOIMG_HTML            2.999
+score HAS_X_OUTGOING_SPAM_STAT       0.001 # force non-zero
+score HDR_ORDER_FTSDMCXX_DIRECT      1.999
+score HDR_ORDER_FTSDMCXX_NORDNS      2.715
 score HEADER_FROM_DIFFERENT_DOMAINS  0.249
 score HELO_NO_DOMAIN                 0.001
-score HK_NAME_FM_MR_MRS              1.498
-score HK_NAME_MR_MRS                 0.998
-score HK_RANDOM_ENVFROM              0.998
-score HK_RANDOM_FROM                 0.998
-score HK_RANDOM_REPLYTO              0.998
-score HK_SCAM                        1.242
-score HOSTED_IMG_DIRECT_MX           3.069
+score HK_NAME_FM_MR_MRS              1.499
+score HK_NAME_MR_MRS                 0.999
+score HK_RANDOM_ENVFROM              0.999
+score HK_RANDOM_FROM                 1.000
+score HK_RANDOM_REPLYTO              0.999
+score HK_SCAM                        1.390
+score HOSTED_IMG_DIRECT_MX           3.024
 score HREF_EMPTY_NORDNS              0.129
-score HREF_EMPTY_PHPMAIL             2.497
-score HTML_ENTITY_ASCII              2.478
-score HTML_FONT_TINY_NORDNS          1.997
-score HTML_SINGLET_MANY              2.497
-score HTML_TAG_BALANCE_CENTER        2.696
-score HTML_TEXT_INVISIBLE_FONT       1.668
-score HTML_TEXT_INVISIBLE_STYLE      1.471
-score KHOP_HELO_FCRDNS               0.001
-score LONG_HEX_URI                   2.996
-score LONG_IMG_URI                   0.312
-score LONG_INVISIBLE_TEXT            1.818
+score HREF_EMPTY_PHPMAIL             2.499
+score HTML_ENTITY_ASCII              2.672
+score HTML_FONT_TINY_NORDNS          1.927
+score HTML_SINGLET_MANY              2.499
+score HTML_TAG_BALANCE_CENTER        2.700
+score HTML_TEXT_INVISIBLE_FONT       1.567
+score HTML_TEXT_INVISIBLE_STYLE      1.474
+score KHOP_HELO_FCRDNS               0.001 # force non-zero
+score LONG_HEX_URI                   2.999
+score LONG_IMG_URI                   0.665
+score LONG_INVISIBLE_TEXT            1.819
 score LOTS_OF_MONEY                  0.010
-score MALWARE_NORDNS                 0.001
-score MALWARE_PASSWORD               0.843
-score MAY_BE_FORGED                  2.297
-score MILLION_HUNDRED                1.430
-score MILLION_USD                    1.963
-score MIMEOLE_DIRECT_TO_MX           0.257
-score MIXED_ES                       2.696
-score MONEY_FORM_SHORT               2.497
-score MONEY_FRAUD_3                  0.789
-score MONEY_FRAUD_5                  2.397
-score MONEY_FRAUD_8                  2.497
+score MALWARE_NORDNS                 0.842
+score MALWARE_PASSWORD               0.386
+score MAY_BE_FORGED                  2.298
+score MILLION_HUNDRED                0.525
+score MILLION_USD                    1.244
+score MIMEOLE_DIRECT_TO_MX           1.096
+score MIXED_ES                       2.699
+score MONEY_FORM_SHORT               2.499
+score MONEY_FRAUD_3                  0.557
+score MONEY_FRAUD_5                  2.399
+score MONEY_FRAUD_8                  2.040
 score MONEY_FREEMAIL_REPTO           2.233
-score MONEY_FROM_MISSP               0.312
-score NA_DOLLARS                     1.498
-score NICE_REPLY_A                   -3.295
-score NORDNS_LOW_CONTRAST            2.497
-score NO_FM_NAME_IP_HOSTN            0.930
-score NSL_RCVD_FROM_USER             1.286
-score NUMBERONLY_BITCOIN_EXP         1.997
+score MONEY_FROM_MISSP               1.382
+score NA_DOLLARS                     1.499
+score NICE_REPLY_A                   -2.587
+score NORDNS_LOW_CONTRAST            2.441
+score NO_FM_NAME_IP_HOSTN            0.932
+score NSL_RCVD_FROM_USER             2.156
+score NUMBERONLY_BITCOIN_EXP         1.999
 score OBFU_TEXT_ATTACH               0.001
-score PDS_BTC_ID                     0.401
-score PDS_BTC_MSGID                  0.529
-score PDS_EMPTYSUBJ_URISHRT          1.498
+score PDS_BTC_ID                     0.043
+score PDS_BTC_MSGID                  0.963
+score PDS_EMPTYSUBJ_URISHRT          1.500
 score PDS_FRNOM_TODOM_DBL_URL        1.494
-score PDS_FRNOM_TODOM_NAKED_TO       1.498
-score PDS_FROM_2_EMAILS              3.097
-score PDS_FROM_NAME_TO_DOMAIN        1.997
-score PDS_HELO_SPF_FAIL              1.521
-score PDS_HP_HELO_NORDNS             0.690
-score PDS_NAKED_TO_NUMERO            1.997
-score PDS_OTHER_BAD_TLD              1.997
+score PDS_FRNOM_TODOM_NAKED_TO       1.499
+score PDS_FROM_2_EMAILS              3.101
+score PDS_FROM_NAME_TO_DOMAIN        1.999
+score PDS_HELO_SPF_FAIL              0.097
+score PDS_HP_HELO_NORDNS             0.999
+score PDS_NAKED_TO_NUMERO            1.999
+score PDS_OTHER_BAD_TLD              2.000
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
-score PDS_TINYSUBJ_URISHRT           1.498
-score PHP_ORIG_SCRIPT                2.165
-score PHP_SCRIPT                     1.586
-score PP_MIME_FAKE_ASCII_TEXT        0.001 # force non-zero
-score RAND_MKTG_HEADER               1.997
-score RATWARE_NO_RDNS                0.302
-score RCVD_IN_MSPIKE_H2              -0.775
-score SCC_ISEMM_LID_1B               1.498
-score SENDGRID_REDIR                 1.498
-score SHOPIFY_IMG_NOT_RCVD_SFY       2.281
-score SHORT_SHORTNER                 1.997
-score SPOOFED_FREEMAIL               0.613
+score PDS_TINYSUBJ_URISHRT           1.499
+score PHP_ORIG_SCRIPT                2.168
+score PHP_SCRIPT                     1.485
+score PP_MIME_FAKE_ASCII_TEXT        0.001
+score RAND_MKTG_HEADER               2.000
+score RATWARE_NO_RDNS                0.976
+score RCVD_IN_MSPIKE_H2              -0.708
+score SCC_ISEMM_LID_1B               1.500
+score SENDGRID_REDIR                 1.499
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.213
+score SHORT_SHORTNER                 2.000
+score SPOOFED_FREEMAIL               1.633
 score SPOOFED_FREEMAIL_NO_RDNS       1.499
-score STATIC_XPRIO_OLE               1.265
-score STY_INVIS_DIRECT               2.497
-score SUSP_UTF8_WORD_COMBO           2.996
-score TEQF_USR_POLITE                1.997
-score THIS_AD                        1.724
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.384
-score TO_EQ_FM_DIRECT_MX             2.497
+score STATIC_XPRIO_OLE               1.267
+score STY_INVIS_DIRECT               2.499
+score SUSP_UTF8_WORD_COMBO           2.999
+score TEQF_USR_POLITE                1.999
+score THIS_AD                        1.260
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    0.746
+score TO_EQ_FM_DIRECT_MX             2.499
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
 score TO_EQ_FM_SPF_FAIL              0.001
 score TO_IN_SUBJ                     0.099
-score TO_NO_BRKTS_FROM_MSSP          2.497
-score TO_NO_BRKTS_HTML_IMG           1.997
-score TO_NO_BRKTS_HTML_ONLY          1.997
-score TO_NO_BRKTS_MSFT               2.497
-score TO_NO_BRKTS_NORDNS_HTML        1.998
-score TO_NO_BRKTS_PCNT               2.497
-score TVD_LONG_WORD5                 2.010
+score TO_NO_BRKTS_FROM_MSSP          2.500
+score TO_NO_BRKTS_HTML_IMG           1.999
+score TO_NO_BRKTS_HTML_ONLY          1.999
+score TO_NO_BRKTS_MSFT               2.499
+score TO_NO_BRKTS_NORDNS_HTML        2.000
+score TO_NO_BRKTS_PCNT               2.500
+score TVD_LONG_WORD5                 2.487
 score TVD_PH_SUBJ_META1              1.249
-score TVD_RATWARE_MSGID_01           1.298
+score TVD_RATWARE_MSGID_01           1.299
 score TVD_SPACE_ENCODED              0.001
-score TVD_SPACE_RATIO_MINFP          1.291
-score UNDISC_FREEM                   2.696
-score UNDISC_MONEY                   2.796
-score UNICODE_OBFU_ASC               2.497
-score URI_GOOGLE_PROXY               2.297
-score URI_OPTOUT_3LD                 1.997
-score URI_PHISH                      3.794
-score URI_PHP_REDIR                  3.496
-score URI_TRY_3LD                    1.997
-score URI_WP_HACKED                  3.496
-score URI_WP_HACKED_2                2.498
-score VFY_ACCT_NORDNS                2.621
-score VISTA_COST                     2.497
-score VISTA_TONOM_EQ_TOLOC           2.497
-score WORD_INVIS                     2.997
-score WORD_INVIS_MANY                2.911
-score XM_DIGITS_ONLY                 1.570
-score XM_RANDOM                      2.498
+score TVD_SPACE_RATIO_MINFP          1.251
+score UNDISC_FREEM                   2.699
+score UNDISC_MONEY                   2.799
+score UNICODE_OBFU_ASC               2.499
+score URI_GOOGLE_PROXY               2.200
+score URI_OPTOUT_3LD                 1.999
+score URI_PHISH                      3.797
+score URI_PHP_REDIR                  3.499
+score URI_TRY_3LD                    2.000
+score URI_WP_HACKED                  3.499
+score URI_WP_HACKED_2                2.499
+score VFY_ACCT_NORDNS                2.570
+score VISTA_COST                     2.500
+score VISTA_TONOM_EQ_TOLOC           2.499
+score WORD_INVIS                     2.999
+score WORD_INVIS_MANY                2.999
+score XM_DIGITS_ONLY                 2.467
+score XM_RANDOM                      2.499
 score AC_BR_BONANZA                  0.001
 score AC_FROM_MANY_DOTS              1.000
 score AC_POST_EXTRAS                 1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1912619&r1=1912618&r2=1912619&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sat Sep 30 02:37:47 2023
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 276642  62.239%  (99.606% of non-spam corpus)
-# Correctly spam:      92009  20.700%  (55.178% of spam corpus)
-# False positives:      1093  0.246%  (0.394% of nonspam,  19533 weighted)
-# False negatives:     74739  16.815%  (44.822% of spam, 174512 weighted)
-# Average score for spam:  9.4    nonspam: 0.5
-# Average for false-pos:   6.0  false-neg: 2.3
-# TOTAL:              444483  100.00%
+# Correctly non-spam: 278028  63.539%  (99.592% of non-spam corpus)
+# Correctly spam:      85739  19.594%  (54.127% of spam corpus)
+# False positives:      1138  0.260%  (0.408% of nonspam,  19136 weighted)
+# False negatives:     72663  16.606%  (45.873% of spam, 170774 weighted)
+# Average score for spam:  9.2    nonspam: 0.6
+# Average for false-pos:   5.9  false-neg: 2.4
+# TOTAL:              437568  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  34581  99.54%
-# Correctly spam:      11573  55.11%
+# Correctly non-spam:  34764  99.54%
+# Correctly spam:      10853  54.41%
 # False positives:       161  0.46%
-# False negatives:      9427  44.89%
-# TCR(l=50): 1.201579  SpamRecall: 55.110%  SpamPrec: 98.628%
+# False negatives:      9095  45.59%
+# TCR(l=50): 1.163488  SpamRecall: 54.406%  SpamPrec: 98.538%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 271574  97.78%
-# Correctly spam:      50022  30.00%
-# False positives:      6161  2.22%
-# False negatives:    116726  70.00%
-# TCR(l=50): 0.392555  SpamRecall: 29.999%  SpamPrec: 89.034%
+# Correctly non-spam: 273027  97.80%
+# Correctly spam:      47366  29.90%
+# False positives:      6139  2.20%
+# False negatives:    111036  70.10%
+# TCR(l=50): 0.378965  SpamRecall: 29.902%  SpamPrec: 88.526%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  33967  97.77%
-# Correctly spam:       6296  29.98%
-# False positives:       775  2.23%
-# False negatives:     14704  70.02%
-# TCR(l=50): 0.392861  SpamRecall: 29.981%  SpamPrec: 89.040%
+# Correctly non-spam:  34124  97.71%
+# Correctly spam:       6082  30.49%
+# False positives:       801  2.29%
+# False negatives:     13866  69.51%
+# TCR(l=50): 0.369983  SpamRecall: 30.489%  SpamPrec: 88.363%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1912619&r1=1912618&r2=1912619&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sat Sep 30 02:37:47 2023
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 244624  84.249%  (99.526% of non-spam corpus)
-# Correctly spam:      21111  7.271%  (47.368% of spam corpus)
-# False positives:      1166  0.402%  (0.474% of nonspam,  11794 weighted)
-# False negatives:     23457  8.079%  (52.632% of spam,  42558 weighted)
-# Average score for spam:  12.0    nonspam: -0.6
+# Correctly non-spam: 244547  84.223%  (99.496% of non-spam corpus)
+# Correctly spam:      21122  7.275%  (47.393% of spam corpus)
+# False positives:      1240  0.427%  (0.505% of nonspam,  12531 weighted)
+# False negatives:     23446  8.075%  (52.607% of spam,  42491 weighted)
+# Average score for spam:  11.5    nonspam: -0.6
 # Average for false-pos:   5.6  false-neg: 1.8
-# TOTAL:              290358  100.00%
+# TOTAL:              290355  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  30530  99.50%
-# Correctly spam:       2682  47.85%
-# False positives:       153  0.50%
-# False negatives:      2923  52.15%
-# TCR(l=50): 0.530124  SpamRecall: 47.850%  SpamPrec: 94.603%
+# Correctly non-spam:  30546  99.55%
+# Correctly spam:       2694  48.06%
+# False positives:       137  0.45%
+# False negatives:      2911  51.94%
+# TCR(l=50): 0.574224  SpamRecall: 48.064%  SpamPrec: 95.161%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 244916  99.64%
+# Correctly non-spam: 244888  99.63%
 # Correctly spam:      12893  28.93%
-# False positives:       874  0.36%
+# False positives:       899  0.37%
 # False negatives:     31675  71.07%
-# TCR(l=50): 0.591284  SpamRecall: 28.929%  SpamPrec: 93.651%
+# TCR(l=50): 0.581638  SpamRecall: 28.929%  SpamPrec: 93.482%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  30568  99.63%
+# Correctly non-spam:  30580  99.66%
 # Correctly spam:       1635  29.17%
-# False positives:       115  0.37%
+# False positives:       103  0.34%
 # False negatives:      3970  70.83%
-# TCR(l=50): 0.576646  SpamRecall: 29.170%  SpamPrec: 93.429%
+# TCR(l=50): 0.614583  SpamRecall: 29.170%  SpamPrec: 94.074%