You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2018/12/27 04:07:53 UTC
svn commit: r1849785 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Thu Dec 27 04:07:52 2018
New Revision: 1849785
URL: http://svn.apache.org/viewvc?rev=1849785&view=rev
Log:
updated scores for revision 1849740 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Thu Dec 27 04:07:52 2018
@@ -1,6 +1,6 @@
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_HTML_NONSENSE_TAGS 1.999 1.997 1.999 1.997
+score AC_HTML_NONSENSE_TAGS 1.999 2.000 1.999 2.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000
@@ -10,113 +10,126 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
+score ADMITS_SPAM 0.001 0.001 0.001 0.001
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_MONEY 1.999 1.997 1.999 1.997
-score ADVANCE_FEE_3_NEW 3.000 3.496 3.000 3.496
-score ADVANCE_FEE_3_NEW_MONEY 2.673 1.276 2.673 1.276
-score ADVANCE_FEE_4_NEW 2.082 2.099 2.082 2.099
+score ADVANCE_FEE_2_NEW_MONEY 1.802 1.973 1.802 1.973
+score ADVANCE_FEE_3_NEW 2.547 3.499 2.547 3.499
+score ADVANCE_FEE_3_NEW_MONEY 2.549 1.285 2.549 1.285
+score ADVANCE_FEE_4_NEW 2.083 2.102 2.083 2.102
score AD_PREFS 0.001 0.001 0.001 0.001
+score ANY_PILL_PRICE 2.599 0.001 2.599 0.001
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
+score AXB_XMAILER_MIMEOLE_OL_024C2 2.600 0.001 2.600 0.001
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
-score BITCOIN_EXTORT_01 4.999 4.994 4.999 4.994
-score BITCOIN_MALWARE 2.999 2.996 2.999 2.996
-score BITCOIN_PAY_ME 2.499 2.497 2.499 2.497
-score BITCOIN_SPAM_01 0.001 0.204 0.001 0.204
-score BITCOIN_SPAM_02 2.002 0.726 2.002 0.726
-score BITCOIN_SPAM_03 1.460 1.498 1.460 1.498
-score BITCOIN_SPAM_04 1.499 1.498 1.499 1.498
-score BITCOIN_SPAM_05 2.499 2.498 2.499 2.498
-score BITCOIN_SPAM_06 1.208 0.391 1.208 0.391
-score BITCOIN_SPAM_07 1.499 1.498 1.499 1.498
-score BITCOIN_SPAM_08 1.499 1.498 1.499 1.498
-score BITCOIN_SPAM_09 1.500 1.498 1.500 1.498
+score BITCOIN_EXTORT_01 4.999 4.999 4.999 4.999
+score BITCOIN_MALWARE 2.999 2.999 2.999 2.999
+score BITCOIN_PAY_ME 2.499 2.499 2.499 2.499
+score BITCOIN_SPAM_01 0.001 0.202 0.001 0.202
+score BITCOIN_SPAM_02 2.499 0.730 2.499 0.730
+score BITCOIN_SPAM_03 1.499 1.499 1.499 1.499
+score BITCOIN_SPAM_04 1.499 1.499 1.499 1.499
+score BITCOIN_SPAM_05 2.499 2.499 2.499 2.499
+score BITCOIN_SPAM_06 0.862 0.089 0.862 0.089
+score BITCOIN_SPAM_07 1.499 1.499 1.499 1.499
+score BITCOIN_SPAM_08 1.499 1.500 1.499 1.500
+score BITCOIN_SPAM_09 1.499 1.500 1.499 1.500
score BODY_SINGLE_WORD 2.499 0.001 2.499 0.001
-score BODY_URI_ONLY 0.700 0.999 0.700 0.999
-score BOGUS_MSM_HDRS 2.999 2.219 2.999 2.219
+score BODY_URI_ONLY 0.553 0.999 0.553 0.999
+score BOGUS_MSM_HDRS 2.999 2.999 2.999 2.999
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000
+score CK_HELO_DYNAMIC_SPLIT_IP 1.499 0.001 1.499 0.001
+score CK_HELO_GENERIC 0.250 0.001 0.250 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score DKIMWL_BL 0.574 1.840 0.574 1.840
-score DKIMWL_WL_HIGH 0.001 -1.074 0.001 -1.074
+score DKIMWL_BL 1.950 1.840 1.950 1.840
+score DKIMWL_WL_HIGH 0.001 -1.047 0.001 -1.047
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
-score DX_TEXT_03 1.500 1.398 1.500 1.398
+score DX_TEXT_03 1.499 1.400 1.499 1.400
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
-score FBI_MONEY 1.000 1.000 1.000 1.000
-score FBI_SPOOF 1.000 0.702 1.000 0.702
-score FILL_THIS_FORM 0.001 0.301 0.001 0.301
-score FORM_FRAUD 0.001 1.000 0.001 1.000
-score FORM_FRAUD_3 0.001 0.001 0.001 0.001
-score FORM_FRAUD_5 1.049 0.001 1.049 0.001
+score FBI_MONEY 1.000 1.615 1.000 1.615
+score FBI_SPOOF 1.000 0.921 1.000 0.921
+score FILL_THIS_FORM 0.001 0.298 0.001 0.298
+score FORM_FRAUD 0.999 1.000 0.999 1.000
+score FORM_FRAUD_3 1.898 0.001 1.898 0.001
+score FORM_FRAUD_5 1.397 0.001 1.397 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 3.249 3.246 3.249 3.246
-score FREEMAIL_DISPTO 0.250 0.249 0.250 0.249
+score FOUND_YOU 3.249 3.249 3.249 3.249
+score FREEMAIL_DISPTO 0.249 0.250 0.249 0.250
score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.001 0.249 0.001
-score FREEM_FRNUM_UNICD_EMPTY 3.749 3.745 3.749 3.745
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.343 2.497 2.343 2.497
-score FROM_ADDR_WS 2.999 2.996 2.999 2.996
-score FROM_IN_TO_AND_SUBJ 2.532 2.397 2.532 2.397
-score FROM_MISSP_EH_MATCH 0.004 0.001 0.004 0.001
+score FREEM_FRNUM_UNICD_EMPTY 3.749 3.749 3.749 3.749
+score FRNAME_IN_MSG_XPRIO_NO_SUB 1.718 2.500 1.718 2.500
+score FROM_ADDR_WS 2.999 2.999 2.999 2.999
+score FROM_IN_TO_AND_SUBJ 1.103 3.320 1.103 3.320
+score FROM_MISSP_EH_MATCH 0.402 0.001 0.402 0.001
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
score FROM_WORDY 2.499 1.845 2.499 1.845
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
-score FSL_HELO_FAKE 4.499 0.001 4.499 0.001
+score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
+score FSL_HELO_FAKE 4.399 0.001 4.399 0.001
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
score FSL_THIS_IS_ADV 1.553 0.001 1.553 0.001
-score FUZZY_CLICK_HERE 2.999 2.996 2.999 2.996
+score FUZZY_CLICK_HERE 2.600 2.999 2.600 2.999
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
-score GOOGLE_OBFU 2.878 2.997 2.878 2.997
+score GOOGLE_OBFU 2.676 2.999 2.676 2.999
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score GOOG_REDIR_HTML_ONLY 1.607 0.001 1.607 0.001
-score GOOG_REDIR_NORDNS 2.696 0.001 2.696 0.001
+score GOOG_REDIR_HTML_ONLY 0.766 0.001 0.766 0.001
+score GOOG_REDIR_NORDNS 2.599 0.001 2.599 0.001
score HDRS_LCASE_IMGONLY 0.100 0.001 0.100 0.001
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.830 1.999 1.830
-score HDR_ORDER_FTSDMCXX_NORDNS 3.499 3.354 3.499 3.354
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.999 1.999 1.999
+score HDR_ORDER_FTSDMCXX_NORDNS 3.241 2.547 3.241 2.547
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
+score HELO_MISC_IP 0.249 0.001 0.249 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
+score HK_NAME_FM_MR_MRS 1.499 0.001 1.499 0.001
score HK_PNIS 0.999 0.001 0.999 0.001
-score HK_SCAM_N8 0.151 0.001 0.151 0.001
+score HK_SCAM_N2 1.250 0.001 1.250 0.001
+score HK_SCAM_N8 2.553 0.001 2.553 0.001
score HTML_ENTITY_ASCII 1.000 1.000 1.000 1.000
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE 2.602 1.953 2.602 1.953
+score HTML_OFF_PAGE 2.600 1.787 2.600 1.787
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
score HTML_SINGLET_MANY 0.001 0.001 0.001 0.001
-score IMG_ONLY_FM_DOM_INFO 2.499 2.497 2.499 2.497
-score KB_FORGED_MOZ4 3.041 0.001 3.041 0.001
+score IMG_ONLY_FM_DOM_INFO 2.499 2.500 2.499 2.500
+score KB_FORGED_MOZ4 3.496 0.001 3.496 0.001
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
-score LIST_PRTL_SAME_USER 0.001 0.276 0.001 0.276
-score LONG_HEX_URI 2.052 1.481 2.052 1.481
+score LIST_PRTL_SAME_USER 0.001 0.271 0.001 0.271
+score LONG_HEX_URI 1.585 1.484 1.585 1.484
score LONG_IMG_URI 0.001 0.001 0.001 0.001
score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
score LUCRATIVE 1.000 1.000 1.000 1.000
score L_8BIT_MISMATCH 0.010 0.010 0.010 0.010
-score MALFORMED_FREEMAIL 1.646 0.001 1.646 0.001
-score MALF_HTML_B64 3.062 3.499 3.062 3.499
-score MANY_SPAN_IN_TEXT 2.358 0.001 2.358 0.001
+score MALFORMED_FREEMAIL 1.531 0.001 1.531 0.001
+score MALF_HTML_B64 2.879 3.263 2.879 3.263
+score MANY_SPAN_IN_TEXT 0.401 0.001 0.401 0.001
+score MILLION_USD 1.999 0.001 1.999 0.001
score MIMEOLE_DIRECT_TO_MX 1.999 0.001 1.999 0.001
-score MIME_NO_TEXT 1.782 1.941 1.782 1.941
-score MONEY_FORM_SHORT 2.500 0.001 2.500 0.001
-score MONEY_FRAUD_3 3.199 2.989 3.199 2.989
-score MONEY_FRAUD_5 3.499 2.506 3.499 2.506
-score MONEY_FRAUD_8 1.773 1.213 1.773 1.213
-score MSM_PRIO_REPTO 1.000 0.215 1.000 0.215
-score NORDNS_LOW_CONTRAST 1.887 1.224 1.887 1.224
-score NO_FM_NAME_IP_HOSTN 2.499 1.294 2.499 1.294
-score OBFU_BITCOIN 3.000 2.996 3.000 2.996
+score MIME_NO_TEXT 1.780 1.943 1.780 1.943
+score MONEY_FORM_SHORT 2.499 0.001 2.499 0.001
+score MONEY_FRAUD_3 3.199 3.018 3.199 3.018
+score MONEY_FRAUD_5 3.499 2.501 3.499 2.501
+score MONEY_FRAUD_8 2.603 1.215 2.603 1.215
+score MSM_PRIO_REPTO 1.000 1.223 1.000 1.223
+score NORDNS_LOW_CONTRAST 1.886 1.224 1.886 1.224
+score NO_FM_NAME_IP_HOSTN 2.499 1.295 2.499 1.295
+score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
+score OBFU_BITCOIN 2.999 2.999 2.999 2.999
+score PHOTO_EDITING_DIRECT 2.796 0.703 2.796 0.703
+score PHOTO_EDITING_FREEM 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
score PHP_ORIG_SCRIPT 1.000 1.000 1.000 1.000
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT 0.999 0.999 0.999 0.999
+score PP_MIME_FAKE_ASCII_TEXT 0.999 1.000 0.999 1.000
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS 1.356 2.999 1.356 2.999
+score RATWARE_NO_RDNS 2.727 2.771 2.727 2.771
score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
@@ -128,44 +141,45 @@ score RCVD_IN_MSPIKE_L4
score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
-score RDNS_NUM_TLD_ATCHNX 2.819 1.421 2.819 1.421
-score RDNS_NUM_TLD_XM 2.999 1.152 2.999 1.152
-score RP_8BIT 3.557 0.001 3.557 0.001
-score SERGIO_SUBJECT_PORN014 2.199 1.441 2.199 1.441
+score RDNS_NUM_TLD_ATCHNX 2.554 1.610 2.554 1.610
+score RDNS_NUM_TLD_XM 2.999 1.067 2.999 1.067
+score RP_8BIT 2.892 0.001 2.892 0.001
+score SERGIO_SUBJECT_PORN014 2.196 1.442 2.196 1.442
score SINGLETS_LOW_CONTRAST 0.001 0.001 0.001 0.001
-score SPOOFED_FREEM_REPTO 2.499 2.497 2.499 2.497
-score SPOOFED_FREEM_REPTO_CHN 2.476 1.000 2.476 1.000
+score SPOOFED_FREEM_REPTO 2.499 2.499 2.499 2.499
+score SPOOFED_FREEM_REPTO_CHN 2.957 1.000 2.957 1.000
score SPOOFED_FREEM_REPTO_RUS 1.000 1.000 1.000 1.000
-score STATIC_XPRIO_OLE 1.999 1.997 1.999 1.997
+score STATIC_XPRIO_OLE 1.999 1.046 1.999 1.046
score STOCK_LOW_CONTRAST 0.001 1.000 0.001 1.000
score STOCK_TIP 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 0.001 0.390 0.001 0.390
+score STYLE_GIBBERISH 0.001 0.001 0.001 0.001
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
-score TEQF_USR_IMAGE 1.992 2.237 1.992 2.237
-score THIS_AD 0.001 0.275 0.001 0.275
-score TO_EQ_FM_DIRECT_MX 2.248 2.497 2.248 2.497
+score TEQF_USR_IMAGE 1.680 1.480 1.680 1.480
+score THIS_AD 0.001 0.270 0.001 0.270
+score TO_EQ_FM_DIRECT_MX 2.499 2.497 2.499 2.497
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_IN_SUBJ 0.100 0.099 0.100 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.999 2.682 2.999 2.682
-score TO_NO_BRKTS_HTML_IMG 1.999 1.997 1.999 1.997
-score TO_NO_BRKTS_HTML_ONLY 1.600 1.532 1.600 1.532
-score TO_NO_BRKTS_NORDNS_HTML 0.397 0.649 0.397 0.649
+score TO_IN_SUBJ 0.099 0.100 0.099 0.100
+score TO_NAME_SUBJ_NO_RDNS 2.721 2.553 2.721 2.553
+score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
+score TO_NO_BRKTS_HTML_ONLY 1.600 1.533 1.600 1.533
+score TO_NO_BRKTS_NORDNS_HTML 0.301 0.650 0.301 0.650
score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
+score TVD_SPACE_ENCODED 2.499 0.001 2.499 0.001
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score UNICODE_OBFU_ASC 2.499 2.498 2.499 2.498
+score UNICODE_OBFU_ASC 2.499 2.499 2.499 2.499
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_GOOGLE_PROXY 0.001 2.197 0.001 2.197
-score URI_ONLY_MSGID_MALF 1.999 1.997 1.999 1.997
+score URI_GOOGLE_PROXY 0.001 2.199 0.001 2.199
+score URI_ONLY_MSGID_MALF 1.999 2.000 1.999 2.000
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 1.000 1.000 1.000 1.000
-score URI_TRY_3LD 0.001 0.850 0.001 0.850
-score URI_WP_DIRINDEX 1.000 2.657 1.000 2.657
+score URI_PHISH 0.552 1.000 0.552 1.000
+score URI_TRY_3LD 0.001 0.852 0.001 0.852
+score URI_WP_DIRINDEX 1.000 2.660 1.000 2.660
score URI_WP_HACKED 3.499 1.000 3.499 1.000
-score URI_WP_HACKED_2 2.192 1.884 2.192 1.884
+score URI_WP_HACKED_2 2.187 1.878 2.187 1.878
score USB_DRIVES 1.000 1.000 1.000 1.000
-score XPRIO 2.249 2.248 2.249 2.248
-score XPRIO_SHORT_SUBJ 0.546 1.449 0.546 1.449
+score XPRIO 2.249 2.249 2.249 2.249
+score XPRIO_SHORT_SUBJ 1.836 1.450 1.836 1.450
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Thu Dec 27 04:07:52 2018
@@ -1,107 +1,121 @@
-# Using score set 0 logs for revision 1849714 from:
+# Using score set 0 logs for revision 1849740 from:
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-giovanni-ham.log ham-giovanni-spam.log ham-giovanni-spammy.log ham-grenier.log ham-hege.log ham-jarif.log ham-jbrooks.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-giovanni-ham.log spam-giovanni-spam.log spam-giovanni-spammy.log spam-grenier.log spam-hege.log spam-jarif.log spam-jbrooks.log spam-sihde.log spam-thendrikx.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.999
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.000
-score ADVANCE_FEE_3_NEW_MONEY 2.673
-score ADVANCE_FEE_4_NEW 2.082
-score AD_PREFS 0.001 # force non-zero
+score ADMITS_SPAM 0.001
+score ADVANCE_FEE_2_NEW_MONEY 1.802
+score ADVANCE_FEE_3_NEW 2.547
+score ADVANCE_FEE_3_NEW_MONEY 2.549
+score ADVANCE_FEE_4_NEW 2.083
+score AD_PREFS 0.001
+score ANY_PILL_PRICE 2.599
+score AXB_XMAILER_MIMEOLE_OL_024C2 2.600
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
score BITCOIN_PAY_ME 2.499
score BITCOIN_SPAM_01 0.001
-score BITCOIN_SPAM_02 2.002
-score BITCOIN_SPAM_03 1.460
+score BITCOIN_SPAM_02 2.499
+score BITCOIN_SPAM_03 1.499
score BITCOIN_SPAM_04 1.499
score BITCOIN_SPAM_05 2.499
-score BITCOIN_SPAM_06 1.208
+score BITCOIN_SPAM_06 0.862
score BITCOIN_SPAM_07 1.499
score BITCOIN_SPAM_08 1.499
-score BITCOIN_SPAM_09 1.500
+score BITCOIN_SPAM_09 1.499
score BODY_SINGLE_WORD 2.499
-score BODY_URI_ONLY 0.700
+score BODY_URI_ONLY 0.553
score BOGUS_MSM_HDRS 2.999
-score DKIMWL_BL 0.574
-score DX_TEXT_03 1.500
+score CK_HELO_DYNAMIC_SPLIT_IP 1.499
+score CK_HELO_GENERIC 0.250
+score DKIMWL_BL 1.950
+score DX_TEXT_03 1.499
score FILL_THIS_FORM 0.001
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 0.001
-score FORM_FRAUD_5 1.049
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 1.898
+score FORM_FRAUD_5 1.397
score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.250
+score FREEMAIL_DISPTO 0.249
score FREEMAIL_FORGED_FROMDOMAIN 0.249
score FREEM_FRNUM_UNICD_EMPTY 3.749
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.343
+score FRNAME_IN_MSG_XPRIO_NO_SUB 1.718
score FROM_ADDR_WS 2.999
-score FROM_IN_TO_AND_SUBJ 2.532
-score FROM_MISSP_EH_MATCH 0.004
+score FROM_IN_TO_AND_SUBJ 1.103
+score FROM_MISSP_EH_MATCH 0.402
score FROM_WORDY 2.499
-score FSL_HELO_FAKE 4.499
+score FSL_CTYPE_WIN1251 0.001
+score FSL_HELO_FAKE 4.399
score FSL_NEW_HELO_USER 0.001
score FSL_THIS_IS_ADV 1.553
-score FUZZY_CLICK_HERE 2.999
-score GOOGLE_OBFU 2.878
-score GOOG_REDIR_HTML_ONLY 1.607
-score GOOG_REDIR_NORDNS 2.696
+score FUZZY_CLICK_HERE 2.600
+score GOOGLE_OBFU 2.676
+score GOOG_REDIR_HTML_ONLY 0.766
+score GOOG_REDIR_NORDNS 2.599
score HDRS_LCASE_IMGONLY 0.100
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.499
+score HDR_ORDER_FTSDMCXX_NORDNS 3.241
score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HELO_MISC_IP 0.249
+score HK_NAME_FM_MR_MRS 1.499
score HK_PNIS 0.999
-score HK_SCAM_N8 0.151
-score HTML_OFF_PAGE 2.602
+score HK_SCAM_N2 1.250
+score HK_SCAM_N8 2.553
+score HTML_OFF_PAGE 2.600
score HTML_SINGLET_MANY 0.001
score IMG_ONLY_FM_DOM_INFO 2.499
-score KB_FORGED_MOZ4 3.041
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
-score LONG_HEX_URI 2.052
+score KB_FORGED_MOZ4 3.496
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 1.585
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.001 # force non-zero
score L_8BIT_MISMATCH 0.010
-score MALFORMED_FREEMAIL 1.646
-score MALF_HTML_B64 3.062
-score MANY_SPAN_IN_TEXT 2.358
+score MALFORMED_FREEMAIL 1.531
+score MALF_HTML_B64 2.879
+score MANY_SPAN_IN_TEXT 0.401
+score MILLION_USD 1.999
score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.782
-score MONEY_FORM_SHORT 2.500
+score MIME_NO_TEXT 1.780
+score MONEY_FORM_SHORT 2.499
score MONEY_FRAUD_3 3.199
score MONEY_FRAUD_5 3.499
-score MONEY_FRAUD_8 1.773
-score NORDNS_LOW_CONTRAST 1.887
+score MONEY_FRAUD_8 2.603
+score NORDNS_LOW_CONTRAST 1.886
score NO_FM_NAME_IP_HOSTN 2.499
-score OBFU_BITCOIN 3.000
+score NSL_RCVD_HELO_USER 0.001 # force non-zero
+score OBFU_BITCOIN 2.999
+score PHOTO_EDITING_DIRECT 2.796
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 1.356
-score RDNS_NUM_TLD_ATCHNX 2.819
+score RATWARE_NO_RDNS 2.727
+score RDNS_NUM_TLD_ATCHNX 2.554
score RDNS_NUM_TLD_XM 2.999
-score RP_8BIT 3.557
-score SERGIO_SUBJECT_PORN014 2.199
+score RP_8BIT 2.892
+score SERGIO_SUBJECT_PORN014 2.196
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 2.476
+score SPOOFED_FREEM_REPTO_CHN 2.957
score STATIC_XPRIO_OLE 1.999
score STOCK_LOW_CONTRAST 0.001
score STYLE_GIBBERISH 0.001
-score TEQF_USR_IMAGE 1.992
+score TEQF_USR_IMAGE 1.680
score THIS_AD 0.001
-score TO_EQ_FM_DIRECT_MX 2.248
-score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_EQ_FM_DIRECT_MX 2.499
+score TO_IN_SUBJ 0.099
+score TO_NAME_SUBJ_NO_RDNS 2.721
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.600
-score TO_NO_BRKTS_NORDNS_HTML 0.397
+score TO_NO_BRKTS_NORDNS_HTML 0.301
score TO_NO_BRKTS_PCNT 2.499
+score TVD_SPACE_ENCODED 2.499
score UNICODE_OBFU_ASC 2.499
score URI_GOOGLE_PROXY 0.001
score URI_ONLY_MSGID_MALF 1.999
-score URI_TRY_3LD 0.001
+score URI_PHISH 0.552
+score URI_TRY_3LD 0.001 # force non-zero
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.192
+score URI_WP_HACKED_2 2.187
score XPRIO 2.249
-score XPRIO_SHORT_SUBJ 0.546
+score XPRIO_SHORT_SUBJ 1.836
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -135,6 +149,7 @@ score HTML_SHRT_CMNT_OBFU_MANY 1.0
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
score MSM_PRIO_REPTO 1.000
+score PHOTO_EDITING_FREEM 1.000
score PHP_NOVER_MUA 1.000
score PHP_ORIG_SCRIPT 1.000
score PHP_SCRIPT_MUA 1.000
@@ -151,7 +166,6 @@ score UC_GIBBERISH_OBFU 1.0
score UNICODE_OBFU_ZW 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
-score URI_PHISH 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Thu Dec 27 04:07:52 2018
@@ -3,96 +3,97 @@
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_HTML_NONSENSE_TAGS 1.997
-score ADVANCE_FEE_2_NEW_MONEY 1.997
-score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_MONEY 1.276
-score ADVANCE_FEE_4_NEW 2.099
+score AC_HTML_NONSENSE_TAGS 2.000
+score ADVANCE_FEE_2_NEW_MONEY 1.973
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_MONEY 1.285
+score ADVANCE_FEE_4_NEW 2.102
score AD_PREFS 0.001
-score BITCOIN_EXTORT_01 4.994
-score BITCOIN_MALWARE 2.996
-score BITCOIN_PAY_ME 2.497
-score BITCOIN_SPAM_01 0.204
-score BITCOIN_SPAM_02 0.726
-score BITCOIN_SPAM_03 1.498
-score BITCOIN_SPAM_04 1.498
-score BITCOIN_SPAM_05 2.498
-score BITCOIN_SPAM_06 0.391
-score BITCOIN_SPAM_07 1.498
-score BITCOIN_SPAM_08 1.498
-score BITCOIN_SPAM_09 1.498
+score BITCOIN_EXTORT_01 4.999
+score BITCOIN_MALWARE 2.999
+score BITCOIN_PAY_ME 2.499
+score BITCOIN_SPAM_01 0.202
+score BITCOIN_SPAM_02 0.730
+score BITCOIN_SPAM_03 1.499
+score BITCOIN_SPAM_04 1.499
+score BITCOIN_SPAM_05 2.499
+score BITCOIN_SPAM_06 0.089
+score BITCOIN_SPAM_07 1.499
+score BITCOIN_SPAM_08 1.500
+score BITCOIN_SPAM_09 1.500
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 2.219
+score BOGUS_MSM_HDRS 2.999
score DKIMWL_BL 1.840
-score DKIMWL_WL_HIGH -1.074
+score DKIMWL_WL_HIGH -1.047
score DKIMWL_WL_MED -0.001
-score DX_TEXT_03 1.398
-score FBI_SPOOF 0.702
-score FILL_THIS_FORM 0.301
+score DX_TEXT_03 1.400
+score FBI_MONEY 1.615
+score FBI_SPOOF 0.921
+score FILL_THIS_FORM 0.298
score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.246
-score FREEMAIL_DISPTO 0.249
+score FOUND_YOU 3.249
+score FREEMAIL_DISPTO 0.250
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FREEM_FRNUM_UNICD_EMPTY 3.745
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.497
-score FROM_ADDR_WS 2.996
-score FROM_IN_TO_AND_SUBJ 2.397
+score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FRNAME_IN_MSG_XPRIO_NO_SUB 2.500
+score FROM_ADDR_WS 2.999
+score FROM_IN_TO_AND_SUBJ 3.320
score FROM_WORDY 1.845
-score FSL_BULK_SIG 0.001
+score FSL_BULK_SIG 0.001 # force non-zero
score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.996
-score GOOGLE_OBFU 2.997
-score HDR_ORDER_FTSDMCXX_DIRECT 1.830
-score HDR_ORDER_FTSDMCXX_NORDNS 3.354
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HTML_OFF_PAGE 1.953
+score FUZZY_CLICK_HERE 2.999
+score GOOGLE_OBFU 2.999
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999
+score HDR_ORDER_FTSDMCXX_NORDNS 2.547
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HTML_OFF_PAGE 1.787
score HTML_SINGLET_MANY 0.001
-score IMG_ONLY_FM_DOM_INFO 2.497
-score LIST_PRTL_SAME_USER 0.276
-score LONG_HEX_URI 1.481
-score LONG_IMG_URI 0.001 # force non-zero
+score IMG_ONLY_FM_DOM_INFO 2.500
+score LIST_PRTL_SAME_USER 0.271
+score LONG_HEX_URI 1.484
+score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
score L_8BIT_MISMATCH 0.010
-score MALF_HTML_B64 3.499
+score MALF_HTML_B64 3.263
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIME_NO_TEXT 1.941
-score MONEY_FRAUD_3 2.989
-score MONEY_FRAUD_5 2.506
-score MONEY_FRAUD_8 1.213
-score MSM_PRIO_REPTO 0.215
+score MIME_NO_TEXT 1.943
+score MONEY_FRAUD_3 3.018
+score MONEY_FRAUD_5 2.501
+score MONEY_FRAUD_8 1.215
+score MSM_PRIO_REPTO 1.223
score NORDNS_LOW_CONTRAST 1.224
-score NO_FM_NAME_IP_HOSTN 1.294
-score OBFU_BITCOIN 2.996
-score PHOTO_EDITING_DIRECT 1.284
-score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 2.999
+score NO_FM_NAME_IP_HOSTN 1.295
+score OBFU_BITCOIN 2.999
+score PHOTO_EDITING_DIRECT 0.703
+score PP_MIME_FAKE_ASCII_TEXT 1.000
+score RATWARE_NO_RDNS 2.771
score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_ATCHNX 1.421
-score RDNS_NUM_TLD_XM 1.152
-score SERGIO_SUBJECT_PORN014 1.441
+score RDNS_NUM_TLD_ATCHNX 1.610
+score RDNS_NUM_TLD_XM 1.067
+score SERGIO_SUBJECT_PORN014 1.442
score SINGLETS_LOW_CONTRAST 0.001
-score SPOOFED_FREEM_REPTO 2.497
-score STATIC_XPRIO_OLE 1.997
-score STYLE_GIBBERISH 0.390
-score TEQF_USR_IMAGE 2.237
-score THIS_AD 0.275
+score SPOOFED_FREEM_REPTO 2.499
+score STATIC_XPRIO_OLE 1.046
+score STYLE_GIBBERISH 0.001 # force non-zero
+score TEQF_USR_IMAGE 1.480
+score THIS_AD 0.270
score TO_EQ_FM_DIRECT_MX 2.497
score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_IN_SUBJ 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.682
-score TO_NO_BRKTS_HTML_IMG 1.997
-score TO_NO_BRKTS_HTML_ONLY 1.532
-score TO_NO_BRKTS_NORDNS_HTML 0.649
+score TO_IN_SUBJ 0.100
+score TO_NAME_SUBJ_NO_RDNS 2.553
+score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_HTML_ONLY 1.533
+score TO_NO_BRKTS_NORDNS_HTML 0.650
score TO_NO_BRKTS_PCNT 2.499
-score UNICODE_OBFU_ASC 2.498
-score URI_GOOGLE_PROXY 2.197
-score URI_ONLY_MSGID_MALF 1.997
-score URI_TRY_3LD 0.850
-score URI_WP_DIRINDEX 2.657
-score URI_WP_HACKED_2 1.884
-score XPRIO 2.248
-score XPRIO_SHORT_SUBJ 1.449
+score UNICODE_OBFU_ASC 2.499
+score URI_GOOGLE_PROXY 2.199
+score URI_ONLY_MSGID_MALF 2.000
+score URI_TRY_3LD 0.852
+score URI_WP_DIRINDEX 2.660
+score URI_WP_HACKED_2 1.878
+score XPRIO 2.249
+score XPRIO_SHORT_SUBJ 1.450
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -111,7 +112,6 @@ score BOMB_MONEY 1.0
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
score ENCRYPTED_MESSAGE -1.000
-score FBI_MONEY 1.000
score FORM_FRAUD 1.000
score FORM_LOW_CONTRAST 1.000
score FROM_MISSP_SPF_FAIL 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Thu Dec 27 04:07:52 2018
@@ -1,107 +1,121 @@
-# Using score set 0 logs for revision 1849714 from:
+# Using score set 0 logs for revision 1849740 from:
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-giovanni-ham.log ham-giovanni-spam.log ham-giovanni-spammy.log ham-grenier.log ham-hege.log ham-jarif.log ham-jbrooks.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-giovanni-ham.log spam-giovanni-spam.log spam-giovanni-spammy.log spam-grenier.log spam-hege.log spam-jarif.log spam-jbrooks.log spam-sihde.log spam-thendrikx.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.999
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.000
-score ADVANCE_FEE_3_NEW_MONEY 2.673
-score ADVANCE_FEE_4_NEW 2.082
-score AD_PREFS 0.001 # force non-zero
+score ADMITS_SPAM 0.001
+score ADVANCE_FEE_2_NEW_MONEY 1.802
+score ADVANCE_FEE_3_NEW 2.547
+score ADVANCE_FEE_3_NEW_MONEY 2.549
+score ADVANCE_FEE_4_NEW 2.083
+score AD_PREFS 0.001
+score ANY_PILL_PRICE 2.599
+score AXB_XMAILER_MIMEOLE_OL_024C2 2.600
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
score BITCOIN_PAY_ME 2.499
score BITCOIN_SPAM_01 0.001
-score BITCOIN_SPAM_02 2.002
-score BITCOIN_SPAM_03 1.460
+score BITCOIN_SPAM_02 2.499
+score BITCOIN_SPAM_03 1.499
score BITCOIN_SPAM_04 1.499
score BITCOIN_SPAM_05 2.499
-score BITCOIN_SPAM_06 1.208
+score BITCOIN_SPAM_06 0.862
score BITCOIN_SPAM_07 1.499
score BITCOIN_SPAM_08 1.499
-score BITCOIN_SPAM_09 1.500
+score BITCOIN_SPAM_09 1.499
score BODY_SINGLE_WORD 2.499
-score BODY_URI_ONLY 0.700
+score BODY_URI_ONLY 0.553
score BOGUS_MSM_HDRS 2.999
-score DKIMWL_BL 0.574
-score DX_TEXT_03 1.500
+score CK_HELO_DYNAMIC_SPLIT_IP 1.499
+score CK_HELO_GENERIC 0.250
+score DKIMWL_BL 1.950
+score DX_TEXT_03 1.499
score FILL_THIS_FORM 0.001
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 0.001
-score FORM_FRAUD_5 1.049
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 1.898
+score FORM_FRAUD_5 1.397
score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.250
+score FREEMAIL_DISPTO 0.249
score FREEMAIL_FORGED_FROMDOMAIN 0.249
score FREEM_FRNUM_UNICD_EMPTY 3.749
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.343
+score FRNAME_IN_MSG_XPRIO_NO_SUB 1.718
score FROM_ADDR_WS 2.999
-score FROM_IN_TO_AND_SUBJ 2.532
-score FROM_MISSP_EH_MATCH 0.004
+score FROM_IN_TO_AND_SUBJ 1.103
+score FROM_MISSP_EH_MATCH 0.402
score FROM_WORDY 2.499
-score FSL_HELO_FAKE 4.499
+score FSL_CTYPE_WIN1251 0.001
+score FSL_HELO_FAKE 4.399
score FSL_NEW_HELO_USER 0.001
score FSL_THIS_IS_ADV 1.553
-score FUZZY_CLICK_HERE 2.999
-score GOOGLE_OBFU 2.878
-score GOOG_REDIR_HTML_ONLY 1.607
-score GOOG_REDIR_NORDNS 2.696
+score FUZZY_CLICK_HERE 2.600
+score GOOGLE_OBFU 2.676
+score GOOG_REDIR_HTML_ONLY 0.766
+score GOOG_REDIR_NORDNS 2.599
score HDRS_LCASE_IMGONLY 0.100
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.499
+score HDR_ORDER_FTSDMCXX_NORDNS 3.241
score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HELO_MISC_IP 0.249
+score HK_NAME_FM_MR_MRS 1.499
score HK_PNIS 0.999
-score HK_SCAM_N8 0.151
-score HTML_OFF_PAGE 2.602
+score HK_SCAM_N2 1.250
+score HK_SCAM_N8 2.553
+score HTML_OFF_PAGE 2.600
score HTML_SINGLET_MANY 0.001
score IMG_ONLY_FM_DOM_INFO 2.499
-score KB_FORGED_MOZ4 3.041
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
-score LONG_HEX_URI 2.052
+score KB_FORGED_MOZ4 3.496
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 1.585
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.001 # force non-zero
score L_8BIT_MISMATCH 0.010
-score MALFORMED_FREEMAIL 1.646
-score MALF_HTML_B64 3.062
-score MANY_SPAN_IN_TEXT 2.358
+score MALFORMED_FREEMAIL 1.531
+score MALF_HTML_B64 2.879
+score MANY_SPAN_IN_TEXT 0.401
+score MILLION_USD 1.999
score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.782
-score MONEY_FORM_SHORT 2.500
+score MIME_NO_TEXT 1.780
+score MONEY_FORM_SHORT 2.499
score MONEY_FRAUD_3 3.199
score MONEY_FRAUD_5 3.499
-score MONEY_FRAUD_8 1.773
-score NORDNS_LOW_CONTRAST 1.887
+score MONEY_FRAUD_8 2.603
+score NORDNS_LOW_CONTRAST 1.886
score NO_FM_NAME_IP_HOSTN 2.499
-score OBFU_BITCOIN 3.000
+score NSL_RCVD_HELO_USER 0.001 # force non-zero
+score OBFU_BITCOIN 2.999
+score PHOTO_EDITING_DIRECT 2.796
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 1.356
-score RDNS_NUM_TLD_ATCHNX 2.819
+score RATWARE_NO_RDNS 2.727
+score RDNS_NUM_TLD_ATCHNX 2.554
score RDNS_NUM_TLD_XM 2.999
-score RP_8BIT 3.557
-score SERGIO_SUBJECT_PORN014 2.199
+score RP_8BIT 2.892
+score SERGIO_SUBJECT_PORN014 2.196
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 2.476
+score SPOOFED_FREEM_REPTO_CHN 2.957
score STATIC_XPRIO_OLE 1.999
score STOCK_LOW_CONTRAST 0.001
score STYLE_GIBBERISH 0.001
-score TEQF_USR_IMAGE 1.992
+score TEQF_USR_IMAGE 1.680
score THIS_AD 0.001
-score TO_EQ_FM_DIRECT_MX 2.248
-score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_EQ_FM_DIRECT_MX 2.499
+score TO_IN_SUBJ 0.099
+score TO_NAME_SUBJ_NO_RDNS 2.721
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.600
-score TO_NO_BRKTS_NORDNS_HTML 0.397
+score TO_NO_BRKTS_NORDNS_HTML 0.301
score TO_NO_BRKTS_PCNT 2.499
+score TVD_SPACE_ENCODED 2.499
score UNICODE_OBFU_ASC 2.499
score URI_GOOGLE_PROXY 0.001
score URI_ONLY_MSGID_MALF 1.999
-score URI_TRY_3LD 0.001
+score URI_PHISH 0.552
+score URI_TRY_3LD 0.001 # force non-zero
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.192
+score URI_WP_HACKED_2 2.187
score XPRIO 2.249
-score XPRIO_SHORT_SUBJ 0.546
+score XPRIO_SHORT_SUBJ 1.836
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -135,6 +149,7 @@ score HTML_SHRT_CMNT_OBFU_MANY 1.0
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
score MSM_PRIO_REPTO 1.000
+score PHOTO_EDITING_FREEM 1.000
score PHP_NOVER_MUA 1.000
score PHP_ORIG_SCRIPT 1.000
score PHP_SCRIPT_MUA 1.000
@@ -151,7 +166,6 @@ score UC_GIBBERISH_OBFU 1.0
score UNICODE_OBFU_ZW 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
-score URI_PHISH 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Thu Dec 27 04:07:52 2018
@@ -3,96 +3,97 @@
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_HTML_NONSENSE_TAGS 1.997
-score ADVANCE_FEE_2_NEW_MONEY 1.997
-score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_MONEY 1.276
-score ADVANCE_FEE_4_NEW 2.099
+score AC_HTML_NONSENSE_TAGS 2.000
+score ADVANCE_FEE_2_NEW_MONEY 1.973
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_MONEY 1.285
+score ADVANCE_FEE_4_NEW 2.102
score AD_PREFS 0.001
-score BITCOIN_EXTORT_01 4.994
-score BITCOIN_MALWARE 2.996
-score BITCOIN_PAY_ME 2.497
-score BITCOIN_SPAM_01 0.204
-score BITCOIN_SPAM_02 0.726
-score BITCOIN_SPAM_03 1.498
-score BITCOIN_SPAM_04 1.498
-score BITCOIN_SPAM_05 2.498
-score BITCOIN_SPAM_06 0.391
-score BITCOIN_SPAM_07 1.498
-score BITCOIN_SPAM_08 1.498
-score BITCOIN_SPAM_09 1.498
+score BITCOIN_EXTORT_01 4.999
+score BITCOIN_MALWARE 2.999
+score BITCOIN_PAY_ME 2.499
+score BITCOIN_SPAM_01 0.202
+score BITCOIN_SPAM_02 0.730
+score BITCOIN_SPAM_03 1.499
+score BITCOIN_SPAM_04 1.499
+score BITCOIN_SPAM_05 2.499
+score BITCOIN_SPAM_06 0.089
+score BITCOIN_SPAM_07 1.499
+score BITCOIN_SPAM_08 1.500
+score BITCOIN_SPAM_09 1.500
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 2.219
+score BOGUS_MSM_HDRS 2.999
score DKIMWL_BL 1.840
-score DKIMWL_WL_HIGH -1.074
+score DKIMWL_WL_HIGH -1.047
score DKIMWL_WL_MED -0.001
-score DX_TEXT_03 1.398
-score FBI_SPOOF 0.702
-score FILL_THIS_FORM 0.301
+score DX_TEXT_03 1.400
+score FBI_MONEY 1.615
+score FBI_SPOOF 0.921
+score FILL_THIS_FORM 0.298
score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.246
-score FREEMAIL_DISPTO 0.249
+score FOUND_YOU 3.249
+score FREEMAIL_DISPTO 0.250
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FREEM_FRNUM_UNICD_EMPTY 3.745
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.497
-score FROM_ADDR_WS 2.996
-score FROM_IN_TO_AND_SUBJ 2.397
+score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FRNAME_IN_MSG_XPRIO_NO_SUB 2.500
+score FROM_ADDR_WS 2.999
+score FROM_IN_TO_AND_SUBJ 3.320
score FROM_WORDY 1.845
-score FSL_BULK_SIG 0.001
+score FSL_BULK_SIG 0.001 # force non-zero
score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.996
-score GOOGLE_OBFU 2.997
-score HDR_ORDER_FTSDMCXX_DIRECT 1.830
-score HDR_ORDER_FTSDMCXX_NORDNS 3.354
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HTML_OFF_PAGE 1.953
+score FUZZY_CLICK_HERE 2.999
+score GOOGLE_OBFU 2.999
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999
+score HDR_ORDER_FTSDMCXX_NORDNS 2.547
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HTML_OFF_PAGE 1.787
score HTML_SINGLET_MANY 0.001
-score IMG_ONLY_FM_DOM_INFO 2.497
-score LIST_PRTL_SAME_USER 0.276
-score LONG_HEX_URI 1.481
-score LONG_IMG_URI 0.001 # force non-zero
+score IMG_ONLY_FM_DOM_INFO 2.500
+score LIST_PRTL_SAME_USER 0.271
+score LONG_HEX_URI 1.484
+score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
score L_8BIT_MISMATCH 0.010
-score MALF_HTML_B64 3.499
+score MALF_HTML_B64 3.263
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIME_NO_TEXT 1.941
-score MONEY_FRAUD_3 2.989
-score MONEY_FRAUD_5 2.506
-score MONEY_FRAUD_8 1.213
-score MSM_PRIO_REPTO 0.215
+score MIME_NO_TEXT 1.943
+score MONEY_FRAUD_3 3.018
+score MONEY_FRAUD_5 2.501
+score MONEY_FRAUD_8 1.215
+score MSM_PRIO_REPTO 1.223
score NORDNS_LOW_CONTRAST 1.224
-score NO_FM_NAME_IP_HOSTN 1.294
-score OBFU_BITCOIN 2.996
-score PHOTO_EDITING_DIRECT 1.284
-score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 2.999
+score NO_FM_NAME_IP_HOSTN 1.295
+score OBFU_BITCOIN 2.999
+score PHOTO_EDITING_DIRECT 0.703
+score PP_MIME_FAKE_ASCII_TEXT 1.000
+score RATWARE_NO_RDNS 2.771
score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_ATCHNX 1.421
-score RDNS_NUM_TLD_XM 1.152
-score SERGIO_SUBJECT_PORN014 1.441
+score RDNS_NUM_TLD_ATCHNX 1.610
+score RDNS_NUM_TLD_XM 1.067
+score SERGIO_SUBJECT_PORN014 1.442
score SINGLETS_LOW_CONTRAST 0.001
-score SPOOFED_FREEM_REPTO 2.497
-score STATIC_XPRIO_OLE 1.997
-score STYLE_GIBBERISH 0.390
-score TEQF_USR_IMAGE 2.237
-score THIS_AD 0.275
+score SPOOFED_FREEM_REPTO 2.499
+score STATIC_XPRIO_OLE 1.046
+score STYLE_GIBBERISH 0.001 # force non-zero
+score TEQF_USR_IMAGE 1.480
+score THIS_AD 0.270
score TO_EQ_FM_DIRECT_MX 2.497
score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_IN_SUBJ 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.682
-score TO_NO_BRKTS_HTML_IMG 1.997
-score TO_NO_BRKTS_HTML_ONLY 1.532
-score TO_NO_BRKTS_NORDNS_HTML 0.649
+score TO_IN_SUBJ 0.100
+score TO_NAME_SUBJ_NO_RDNS 2.553
+score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_HTML_ONLY 1.533
+score TO_NO_BRKTS_NORDNS_HTML 0.650
score TO_NO_BRKTS_PCNT 2.499
-score UNICODE_OBFU_ASC 2.498
-score URI_GOOGLE_PROXY 2.197
-score URI_ONLY_MSGID_MALF 1.997
-score URI_TRY_3LD 0.850
-score URI_WP_DIRINDEX 2.657
-score URI_WP_HACKED_2 1.884
-score XPRIO 2.248
-score XPRIO_SHORT_SUBJ 1.449
+score UNICODE_OBFU_ASC 2.499
+score URI_GOOGLE_PROXY 2.199
+score URI_ONLY_MSGID_MALF 2.000
+score URI_TRY_3LD 0.852
+score URI_WP_DIRINDEX 2.660
+score URI_WP_HACKED_2 1.878
+score XPRIO 2.249
+score XPRIO_SHORT_SUBJ 1.450
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -111,7 +112,6 @@ score BOMB_MONEY 1.0
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
score ENCRYPTED_MESSAGE -1.000
-score FBI_MONEY 1.000
score FORM_FRAUD 1.000
score FORM_LOW_CONTRAST 1.000
score FROM_MISSP_SPF_FAIL 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Thu Dec 27 04:07:52 2018
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 273254 30.848% (95.201% of non-spam corpus)
-# Correctly spam: 420263 47.444% (70.186% of spam corpus)
-# False positives: 13776 1.555% (4.799% of nonspam, 832409 weighted)
-# False negatives: 178523 20.154% (29.814% of spam, 505412 weighted)
-# Average score for spam: 8.2 nonspam: 1.4
+# Correctly non-spam: 270622 31.141% (95.266% of non-spam corpus)
+# Correctly spam: 410611 47.250% (70.196% of spam corpus)
+# False positives: 13449 1.548% (4.734% of nonspam, 799989 weighted)
+# False negatives: 174336 20.061% (29.804% of spam, 493404 weighted)
+# Average score for spam: 8.1 nonspam: 1.4
# Average for false-pos: 5.8 false-neg: 2.8
-# TOTAL: 885816 100.00%
+# TOTAL: 869018 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 33974 94.64%
-# Correctly spam: 53947 72.14%
-# False positives: 1924 5.36%
-# False negatives: 20829 27.86%
-# TCR(l=50): 0.638953 SpamRecall: 72.145% SpamPrec: 96.556%
+# Correctly non-spam: 33686 94.82%
+# Correctly spam: 51669 70.80%
+# False positives: 1842 5.18%
+# False negatives: 21311 29.20%
+# TCR(l=50): 0.643500 SpamRecall: 70.799% SpamPrec: 96.558%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 273197 95.18%
-# Correctly spam: 254915 42.57%
-# False positives: 13833 4.82%
-# False negatives: 343871 57.43%
-# TCR(l=50): 0.578246 SpamRecall: 42.572% SpamPrec: 94.853%
+# Correctly non-spam: 270460 95.21%
+# Correctly spam: 254234 43.46%
+# False positives: 13611 4.79%
+# False negatives: 330713 56.54%
+# TCR(l=50): 0.578432 SpamRecall: 43.463% SpamPrec: 94.918%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 34135 95.09%
-# Correctly spam: 31727 42.43%
-# False positives: 1763 4.91%
-# False negatives: 43049 57.57%
-# TCR(l=50): 0.569943 SpamRecall: 42.429% SpamPrec: 94.736%
+# Correctly non-spam: 33832 95.23%
+# Correctly spam: 31758 43.52%
+# False positives: 1696 4.77%
+# False negatives: 41222 56.48%
+# TCR(l=50): 0.579105 SpamRecall: 43.516% SpamPrec: 94.930%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1849785&r1=1849784&r2=1849785&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Thu Dec 27 04:07:52 2018
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 289916 33.009% (99.570% of non-spam corpus)
-# Correctly spam: 508348 57.879% (86.582% of spam corpus)
-# False positives: 1251 0.142% (0.430% of nonspam, 197166 weighted)
-# False negatives: 78783 8.970% (13.418% of spam, 211837 weighted)
+# Correctly non-spam: 289911 33.010% (99.569% of non-spam corpus)
+# Correctly spam: 508781 57.932% (86.664% of spam corpus)
+# False positives: 1256 0.143% (0.431% of nonspam, 197638 weighted)
+# False negatives: 78292 8.915% (13.336% of spam, 209675 weighted)
# Average score for spam: 15.1 nonspam: -2.4
# Average for false-pos: 7.8 false-neg: 2.7
-# TOTAL: 878298 100.00%
+# TOTAL: 878240 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 36207 99.55%
-# Correctly spam: 63380 86.50%
-# False positives: 162 0.45%
-# False negatives: 9893 13.50%
-# TCR(l=50): 4.072306 SpamRecall: 86.498% SpamPrec: 99.745%
+# Correctly non-spam: 36206 99.55%
+# Correctly spam: 63390 86.52%
+# False positives: 163 0.45%
+# False negatives: 9873 13.48%
+# TCR(l=50): 4.064973 SpamRecall: 86.524% SpamPrec: 99.744%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 290777 99.87%
-# Correctly spam: 384661 65.52%
+# Correctly spam: 384631 65.52%
# False positives: 390 0.13%
-# False negatives: 202470 34.48%
-# TCR(l=50): 2.645092 SpamRecall: 65.515% SpamPrec: 99.899%
+# False negatives: 202442 34.48%
+# TCR(l=50): 2.645164 SpamRecall: 65.517% SpamPrec: 99.899%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 36323 99.87%
-# Correctly spam: 47834 65.28%
+# Correctly spam: 47841 65.30%
# False positives: 46 0.13%
-# False negatives: 25439 34.72%
-# TCR(l=50): 2.641516 SpamRecall: 65.282% SpamPrec: 99.904%
+# False negatives: 25422 34.70%
+# TCR(l=50): 2.642775 SpamRecall: 65.300% SpamPrec: 99.904%