You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2024/04/29 02:49:02 UTC
svn commit: r1917408 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1917408&r1=1917407&r2=1917408&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Mon Apr 29 02:49:02 2024
@@ -1,273 +1,258 @@
# Using score set 1 logs for revision 1917378 from:
-# ham-net-ena-week0.r1917378.log ham-net-ena-week1.r1917378.log ham-net-ena-week2.r1917378.log ham-net-ena-week3.r1917378.log ham-net-ena-week4.r1917378.log ham-net-grenier.r1917378.log ham-net-hege.r1917378.log ham-net-jhardin.r1917378.log ham-net-mmiroslaw-mails-ham.r1917378.log ham-net-mmiroslaw-mails-spam.r1917378.log ham-net-spamsponge.r1917378.log ham-net-tsz-corpus.r1917378.log ham-net-whyscream.r1917378.log spam-net-ena-week0.r1917378.log spam-net-ena-week1.r1917378.log spam-net-ena-week2.r1917378.log spam-net-ena-week3.r1917378.log spam-net-ena-week4.r1917378.log spam-net-grenier.r1917378.log spam-net-hege.r1917378.log spam-net-jhardin.r1917378.log spam-net-mmiroslaw-mails-ham.r1917378.log spam-net-mmiroslaw-mails-spam.r1917378.log spam-net-spamsponge.r1917378.log spam-net-tsz-corpus.r1917378.log spam-net-whyscream.r1917378.log
+# ham-net-ena-week0.r1917378.log ham-net-ena-week1.r1917378.log ham-net-ena-week2.r1917378.log ham-net-ena-week3.r1917378.log ham-net-ena-week4.r1917378.log ham-net-grenier.r1917378.log ham-net-hege.r1917378.log ham-net-jhardin.r1917378.log ham-net-llanga.r1917378.log ham-net-mmiroslaw-mails-ham.r1917378.log ham-net-mmiroslaw-mails-spam.r1917378.log ham-net-spamsponge.r1917378.log ham-net-tsz-corpus.r1917378.log ham-net-whyscream.r1917378.log spam-net-ena-week0.r1917378.log spam-net-ena-week1.r1917378.log spam-net-ena-week2.r1917378.log spam-net-ena-week3.r1917378.log spam-net-ena-week4.r1917378.log spam-net-grenier.r1917378.log spam-net-hege.r1917378.log spam-net-jhardin.r1917378.log spam-net-llanga.r1917378.log spam-net-mmiroslaw-mails-ham.r1917378.log spam-net-mmiroslaw-mails-spam.r1917378.log spam-net-spamsponge.r1917378.log spam-net-tsz-corpus.r1917378.log spam-net-whyscream.r1917378.log
-score ACCT_PHISHING_MANY 3.000
-score AC_BR_BONANZA 0.001 # force non-zero
+score ACCT_PHISHING_MANY 2.996
+score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 0.001
-score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 3.099
+score AC_HTML_NONSENSE_TAGS 1.997
+score ADMITS_SPAM 3.296
score ADVANCE_FEE_2_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 0.199
+score ADVANCE_FEE_2_NEW_MONEY 1.997
+score ADVANCE_FEE_3_NEW 1.307
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_3_NEW_MONEY 1.447
-score ADVANCE_FEE_4_NEW 3.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_MONEY 0.395
+score ADVANCE_FEE_4_NEW 3.407
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 2.299
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.861
-score ADVANCE_FEE_5_NEW_MONEY 3.057
-score AD_PREFS 0.197
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499
+score ADVANCE_FEE_5_NEW 2.497
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.998
+score ADVANCE_FEE_5_NEW_MONEY 1.002
+score AD_PREFS 0.499
+score AMAZON_IMG_NOT_RCVD_AMZN 2.497
score APOSTROPHE_TOCC 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
-score AXB_X_FF_SEZ_S 2.799
-score BIGNUM_EMAILS_FREEM 0.342
-score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_DEADLINE 2.726
-score BITCOIN_EXTORT_01 1.801
-score BITCOIN_ONAN 0.956
-score BITCOIN_PAY_ME 2.708
-score BITCOIN_SPAM_02 1.091
-score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_05 1.534
-score BITCOIN_SPAM_07 0.192
-score BITCOIN_SPAM_08 0.365
-score BITCOIN_SPAM_09 0.665
-score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 2.543
-score BITCOIN_XPRIO 2.499
-score BITCOIN_YOUR_INFO 2.999
-score BODY_SINGLE_URI 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score AXB_X_FF_SEZ_S 2.896
+score BIGNUM_EMAILS_FREEM 2.181
+score BITCOIN_DEADLINE 1.114
+score BITCOIN_EXTORT_01 2.840
+score BITCOIN_ONAN 1.901
+score BITCOIN_PAY_ME 0.358
+score BITCOIN_SPAM_02 1.531
+score BITCOIN_SPAM_03 2.497
+score BITCOIN_SPAM_05 1.715
+score BITCOIN_SPAM_07 1.456
+score BITCOIN_SPAM_08 0.832
+score BITCOIN_SPAM_09 1.499
+score BITCOIN_TOEQFM 2.269
+score BITCOIN_VISTA 2.220
+score BITCOIN_XPRIO 2.497
+score BITCOIN_YOUR_INFO 2.996
+score BODY_SINGLE_URI 0.328
score BODY_URI_ONLY 0.001
-score BOGUS_MIME_VERSION 0.001
-score BOGUS_MSM_HDRS 2.538
-score CANT_SEE_AD 2.499
+score BOGUS_MIME_VERSION 2.384
+score BOGUS_MSM_HDRS 0.705
+score CANT_SEE_AD 2.497
score CK_HELO_GENERIC 0.249
-score COMPENSATION 0.390
-score CONTENT_AFTER_HTML_WEAK 1.499
-score CTE_8BIT_MISMATCH 0.955
+score COMPENSATION 0.479
+score CTE_8BIT_MISMATCH 0.001
score DEAR_BENEFICIARY 0.001
-score DKIMWL_WL_HIGH -0.114
-score DKIMWL_WL_MED -0.001 # force non-zero
-score DKIMWL_WL_MEDHI -0.677
-score DSN_NO_MIMEVERSION 1.999
-score DYNAMIC_IMGUR 3.040
+score DKIMWL_WL_HIGH -0.987
+score DKIMWL_WL_MED -0.001
+score DKIMWL_WL_MEDHI -0.773
+score DSN_NO_MIMEVERSION 1.997
+score DYNAMIC_IMGUR 3.913
score ENCRYPTED_MESSAGE -0.999
-score END_FUTURE_EMAILS 2.499
-score FBI_MONEY 1.877
-score FBI_SPOOF 1.442
+score END_FUTURE_EMAILS 2.497
+score FBI_MONEY 1.631
+score FBI_SPOOF 1.890
score FILL_THIS_FORM 0.001
score FONT_INVIS_DIRECT 0.001
-score FONT_INVIS_HTML_NOHTML 2.271
-score FONT_INVIS_LONG_LINE 2.712
-score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 2.499
-score FORGED_SPF_HELO 0.001
-score FORM_FRAUD 0.999
-score FORM_FRAUD_3 0.001
+score FONT_INVIS_HTML_NOHTML 1.831
+score FONT_INVIS_LONG_LINE 2.982
+score FONT_INVIS_MSGID 2.497
+score FONT_INVIS_NORDNS 2.497
+score FORGED_SPF_HELO 0.708
+score FORM_FRAUD 0.998
+score FORM_FRAUD_3 2.996
score FORM_FRAUD_5 0.001
-score FOUND_YOU 0.376
+score FOUND_YOU 2.668
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FROM_ADDR_WS 0.001
-score FROM_BANK_NOAUTH 0.001
-score FROM_FMBLA_NEWDOM 1.499
-score FROM_FMBLA_NEWDOM14 0.872
+score FROM_ADDR_WS 0.719
+score FROM_FMBLA_NEWDOM 1.498
+score FROM_FMBLA_NEWDOM14 0.998
score FROM_FMBLA_NEWDOM28 0.799
score FROM_GOV_DKIM_AU -0.999
-score FROM_GOV_SPOOF 0.999
-score FROM_IN_TO_AND_SUBJ 1.856
+score FROM_GOV_SPOOF 0.998
+score FROM_IN_TO_AND_SUBJ 1.997
score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 2.999
+score FROM_MISSP_DYNIP 2.717
score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_FREEMAIL 0.488
+score FROM_MISSP_FREEMAIL 0.167
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 2.619
-score FROM_MISSP_REPLYTO 0.300
+score FROM_MISSP_REPLYTO 2.246
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.001 # force non-zero
-score FROM_NTLD_REPLY_FREEMAIL 0.732
-score FROM_PAYPAL_SPOOF 1.599
-score FROM_SUSPICIOUS_NTLD 0.001
-score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_UNBAL2 3.099
-score FROM_WSP_LEAD 0.502
-score FROM_WSP_TRAIL 2.800
+score FROM_MISSP_XPRIO 0.001
+score FROM_PAYPAL_SPOOF 1.597
+score FROM_SUSPICIOUS_NTLD 0.381
+score FROM_SUSPICIOUS_NTLD_FP 1.997
+score FROM_UNBAL2 3.196
+score FROM_WSP_LEAD 0.687
+score FROM_WSP_TRAIL 2.996
score FSL_BULK_SIG 0.001
score FSL_CTYPE_WIN1251 0.001 # force non-zero
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 0.001
-score FUZZY_CLICK_HERE 0.627
-score FUZZY_IMPORTANT 2.400
-score GAPPY_LOW_CONTRAST 0.001
-score GB_BITCOIN_CP 2.247
-score GB_CUSTOM_HTM_URI 0.001
-score GB_FAKE_RF_SHORT 0.932
+score FUZZY_AMAZON 0.001 # force non-zero
+score FUZZY_CLICK_HERE 1.849
+score FUZZY_IMPORTANT 2.596
+score GB_BITCOIN_CP 2.842
+score GB_CUSTOM_HTM_URI 0.034
+score GB_FAKE_RF_SHORT 1.997
score GB_FREEMAIL_DISPTO 0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_HASHBL_BTC 4.646
-score GOOG_MALWARE_DNLD 3.334
-score GOOG_REDIR_NORDNS 1.066
-score GOOG_STO_IMG_HTML 2.999
-score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 0.302
-score HDRS_LCASE_IMGONLY 0.099
-score HDRS_MISSP 2.499
+score GB_HASHBL_BTC 4.748
+score GOOG_MALWARE_DNLD 1.233
+score GOOG_REDIR_NORDNS 1.673
+score GOOG_STO_IMG_HTML 2.835
+score GOOG_STO_NOIMG_HTML 2.996
+score HDRS_LCASE_IMGONLY 0.098
+score HDRS_MISSP 2.334
score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
-score HELO_NO_DOMAIN 0.001
-score HK_LOTTO 0.999
-score HK_NAME_FM_MR_MRS 0.001
-score HK_NAME_MR_MRS 0.638
+score HEADER_FROM_DIFFERENT_DOMAINS 0.248
+score HELO_NO_DOMAIN 0.459
+score HK_LOTTO 0.732
+score HK_NAME_FM_MR_MRS 1.012
+score HK_NAME_MR_MRS 0.943
score HK_RANDOM_ENVFROM 0.001
-score HK_RANDOM_FROM 0.001
-score HK_RANDOM_REPLYTO 0.999
+score HK_RANDOM_FROM 0.998
+score HK_RANDOM_REPLYTO 0.998
score HK_SCAM 0.001
score HK_WIN 0.001
score HOSTED_IMG_DIRECT_MX 0.001
score HOSTED_IMG_FREEM 3.048
-score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 1.913
-score HTML_BADATTR 0.999
-score HTML_ENTITY_ASCII 2.999
-score HTML_FONT_TINY_NORDNS 0.001
-score HTML_OFF_PAGE 1.784
-score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 2.399
-score HTML_TEXT_INVISIBLE_FONT 0.001
-score HTML_TEXT_INVISIBLE_STYLE 2.241
-score IMG_ONLY_FM_DOM_INFO 2.499
-score KHOP_HELO_FCRDNS 0.399
-score LONGLN_LOW_CONTRAST 1.885
-score LONG_HEX_URI 0.756
+score HOSTED_IMG_MULTI_PUB_01 2.996
+score HREF_EMPTY_NORDNS 1.091
+score HTML_BADATTR 0.998
+score HTML_ENTITY_ASCII 2.996
+score HTML_FONT_TINY_NORDNS 0.828
+score HTML_OFF_PAGE 2.902
+score HTML_SINGLET_MANY 2.497
+score HTML_TAG_BALANCE_CENTER 2.665
+score HTML_TEXT_INVISIBLE_FONT 0.048
+score HTML_TEXT_INVISIBLE_STYLE 1.413
+score IMG_ONLY_FM_DOM_INFO 2.497
+score KHOP_HELO_FCRDNS 0.001
+score LONGLN_LOW_CONTRAST 2.208
+score LONG_HEX_URI 1.515
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 0.001
score LOTTO_DEPT 0.001
-score MALFORMED_FREEMAIL 1.255
-score MANY_SUBDOM 2.699
+score MALFORMED_FREEMAIL 1.785
+score MANY_SUBDOM 2.896
score MILLION_HUNDRED 0.001
score MILLION_USD 0.001
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIME_NO_TEXT 2.000
-score MIXED_CTYPE_CASE 1.912
-score MIXED_ES 2.399
-score MIXED_HREF_CASE 0.446
+score MIME_NO_TEXT 1.997
+score MIXED_CTYPE_CASE 2.272
+score MIXED_ES 1.897
+score MIXED_HREF_CASE 1.166
score MONEY_ATM_CARD 0.001
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 0.590
+score MONEY_FORM_SHORT 0.001
score MONEY_FRAUD_3 0.001
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 2.797
-score MONEY_FREEMAIL_REPTO 0.010
-score MONEY_FROM_41 1.999
+score MONEY_FRAUD_8 3.216
+score MONEY_FREEMAIL_REPTO 1.066
+score MONEY_FROM_41 1.997
score MONEY_FROM_MISSP 0.001
-score MONEY_NOHTML 2.499
-score MSGID_NOFQDN1 1.161
-score NA_DOLLARS 0.001
-score NICE_REPLY_A -2.702
+score MONEY_NOHTML 2.497
+score MSGID_NOFQDN1 0.330
+score NA_DOLLARS 1.498
+score NICE_REPLY_A -1.127
score NORDNS_LOW_CONTRAST 0.001
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001 # force non-zero
-score NSL_RCVD_HELO_USER 2.012
-score OBFU_TEXT_ATTACH 0.966
-score ODD_FREEM_REPTO 1.415
-score PDS_BAD_THREAD_QP_64 1.000
-score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.999
-score PDS_BTC_NTLD 1.031
-score PDS_DBL_URL_TNB_RUNON 1.999
-score PDS_FRNOM_TODOM_DBL_URL 1.499
-score PDS_FRNOM_TODOM_NAKED_TO 0.811
-score PDS_FROM_2_EMAILS 3.499
-score PDS_FROM_NAME_TO_DOMAIN 0.411
-score PDS_HELO_SPF_FAIL 1.999
+score NSL_RCVD_HELO_USER 0.001
+score PDS_BAD_THREAD_QP_64 0.998
+score PDS_BTC_ID 0.498
+score PDS_BTC_MSGID 0.712
+score PDS_BTC_NTLD 0.069
+score PDS_DBL_URL_TNB_RUNON 1.997
+score PDS_FRNOM_TODOM_DBL_URL 1.498
+score PDS_FRNOM_TODOM_NAKED_TO 0.849
+score PDS_FROM_NAME_TO_DOMAIN 0.108
+score PDS_HELO_SPF_FAIL 1.998
score PDS_HP_HELO_NORDNS 0.001
-score PDS_OTHER_BAD_TLD 1.874
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PDS_X_PHP_WELLKNOWN 0.999
-score PHP_ORIG_SCRIPT 1.858
-score PHP_SCRIPT 2.493
-score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RAND_MKTG_HEADER 1.494
-score RATWARE_NO_RDNS 0.789
-score RCVD_IN_IADB_COURT -0.001 # force non-zero
+score PDS_OTHER_BAD_TLD 1.997
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.989
+score PHP_ORIG_SCRIPT 2.120
+score PHP_SCRIPT 2.497
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RAND_MKTG_HEADER 1.997
+score RATWARE_NO_RDNS 2.433
+score RCVD_IN_IADB_COURT -0.001
score RCVD_IN_IADB_LEG_MAND -0.001
score RCVD_IN_MSPIKE_H2 -0.001
-score READY_TO_SHIP 1.250
-score REPTO_419_FRAUD 2.999
-score REPTO_419_FRAUD_GM 2.879
-score REPTO_419_FRAUD_GM_LOOSE 1.000
-score RISK_FREE 0.348
-score SCC_BOGUS_CTE_1 3.069
+score READY_TO_SHIP 1.249
+score REPTO_419_FRAUD 2.996
+score REPTO_419_FRAUD_GM 2.938
+score REPTO_419_FRAUD_GM_LOOSE 0.668
+score RISK_FREE 0.001
+score SCC_BOGUS_CTE_1 3.066
score SCC_CANSPAM_1 0.001
score SCC_CANSPAM_2 0.001
-score SCC_ISEMM_LID_1B 1.499
-score SCC_SPAMMER_ADDR_2 2.199
-score SERGIO_SUBJECT_VIAGRA01 2.111
-score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
-score SHORTENER_SHORT_IMG 1.595
-score SHORT_SHORTNER 0.001
+score SCC_ISEMM_LID_1B 1.498
+score SERGIO_SUBJECT_VIAGRA01 1.435
+score SHOPIFY_IMG_NOT_RCVD_SFY 2.497
+score SHORTENER_SHORT_IMG 1.234
+score SHORT_SHORTNER 0.251
score SPOOFED_FREEMAIL 0.001
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 1.477
-score SPOOF_GMAIL_MID 1.499
-score STATIC_XPRIO_OLE 1.863
+score SPOOFED_FREEM_REPTO 1.273
+score SPOOF_GMAIL_MID 1.498
+score STATIC_XPRIO_OLE 1.774
score SUBJ_ATTENTION 0.499
-score SUSP_UTF8_WORD_FROM 2.000
-score TEQF_USR_POLITE 1.992
-score THIS_AD 0.826
-score THIS_IS_ADV_SUSP_NTLD 0.572
-score TINY_FLOAT 2.899
+score SUSP_UTF8_WORD_FROM 1.997
+score TEQF_USR_POLITE 1.815
+score THIS_AD 1.042
+score THIS_IS_ADV_SUSP_NTLD 1.499
+score TINY_FLOAT 3.096
score TO_EQ_FM_DIRECT_MX 0.001
-score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_HTML_ONLY 2.799
-score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score TO_EQ_FM_DOM_SPF_FAIL 0.036
+score TO_EQ_FM_SPF_FAIL 0.345
score TO_IN_SUBJ 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.907
-score TO_NO_BRKTS_FROM_MSSP 0.981
-score TO_NO_BRKTS_HTML_IMG 2.000
-score TO_NO_BRKTS_HTML_ONLY 0.001
+score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NO_BRKTS_FROM_MSSP 1.461
+score TO_NO_BRKTS_HTML_IMG 1.997
+score TO_NO_BRKTS_HTML_ONLY 1.998
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.500
-score TRANSFORM_LIFE 2.499
-score TVD_APPROVED 2.700
-score TVD_PH_7 0.368
-score TVD_SPACE_ENCODED 0.001
-score TVD_SPACE_RATIO_MINFP 0.001
-score UNDISC_FREEM 2.799
-score UNDISC_MONEY 3.299
-score UNICODE_OBFU_ASC 2.098
-score UNICODE_OBFU_ZW_MANY 2.999
-score URI_CLOUDFLAREIPFS 0.858
-score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.199
+score TO_NO_BRKTS_PCNT 2.497
+score TRANSFORM_LIFE 2.497
+score TVD_APPROVED 2.896
+score TVD_PH_7 1.518
+score TVD_SPACE_ENCODED 1.817
+score TVD_SPACE_RATIO_MINFP 0.001 # force non-zero
+score UNDISC_FREEM 2.996
+score UNDISC_MONEY 3.396
+score UNICODE_OBFU_ASC 2.353
+score UNICODE_OBFU_ZW_MANY 2.956
+score URI_CLOUDFLAREIPFS 1.930
+score URI_DOTEDU 1.997
+score URI_GOOGLE_PROXY 2.497
score URI_IMG_CWINDOWSNET 0.001
-score URI_OBFU_TLD 1.231
-score URI_ONLY_LOW_CONTRAST 1.727
-score URI_PHISH 2.701
-score URI_TRY_3LD 1.999
-score URI_WP_HACKED_2 2.500
-score VFY_ACCT_NORDNS 2.999
-score VISTA_COST 2.500
-score VISTA_TONOM_EQ_TOLOC 0.306
-score WIKI_IMG 2.999
-score WORD_INVIS 0.803
-score WORD_INVIS_MANY 2.999
+score URI_OBFU_TLD 2.588
+score URI_ONLY_LOW_CONTRAST 2.304
+score URI_PHISH 3.995
+score URI_TRY_3LD 1.997
+score URI_WP_HACKED_2 2.497
+score VFY_ACCT_NORDNS 2.996
+score VISTA_COST 2.497
+score VISTA_TONOM_EQ_TOLOC 0.001
+score WIKI_IMG 3.096
+score WORD_INVIS_MANY 2.996
score XFER_LOTSA_MONEY 0.001
-score XM_LIGHT_HEAVY 2.499
-score XM_ONE_WORD 0.820
-score XM_RANDOM 2.499
-score XM_RECPTID 2.999
-score XM_UC_ONLY 2.499
+score XM_LIGHT_HEAVY 2.497
+score XM_ONE_WORD 1.790
+score XM_RANDOM 2.498
+score XM_RECPTID 2.996
+score XM_UC_ONLY 2.498
score XPRIO 0.001
-score XPRIO_VISTA 0.001 # force non-zero
-score YOUR_DELIVERY_ADDRESS 1.250
-score YOU_INHERIT 2.799
+score XPRIO_VISTA 0.001
+score YOUR_DELIVERY_ADDRESS 1.248
+score YOU_INHERIT 2.999
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -284,6 +269,7 @@ score ALIBABA_IMG_NOT_RCVD_ALI 1.0
score APP_DEVELOPMENT_FREEM 1.000
score APP_DEVELOPMENT_NORDNS 1.000
score BEBEE_IMG_NOT_RCVD_BB 1.000
+score BIGNUM_EMAILS_MANY 1.000
score BITCOIN_BOMB 1.000
score BITCOIN_EXTORT_02 1.000
score BITCOIN_IMGUR 1.000
@@ -302,6 +288,7 @@ score BTC_ORG 1.0
score BULK_RE_SUSP_NTLD 1.000
score COMMENT_GIBBERISH 1.000
score CONTENT_AFTER_HTML 1.000
+score CONTENT_AFTER_HTML_WEAK 1.000
score DAY_I_EARNED 1.000
score DKIMWL_BL 1.000
score DKIMWL_BLOCKED 0.001
@@ -313,13 +300,18 @@ score FONT_INVIS_DOTGOV 1.0
score FONT_INVIS_POSTEXTRAS 1.000
score FREEM_FRNUM_UNICD_EMPTY 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
+score FROM_BANK_NOAUTH 1.000
score FROM_FMBLA_NDBLOCKED 0.001
score FROM_GOV_REPLYTO_FREEMAIL 1.000
+score FROM_MISSP_PHISH 1.000
score FROM_NEWDOM_BTC 1.000
score FROM_NTLD_LINKBAIT 1.000
+score FROM_NTLD_REPLY_FREEMAIL 1.000
score FROM_NUMBERO_NEWDOMAIN 1.000
+score GAPPY_LOW_CONTRAST 1.000
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_FORGED_MUA_POSTFIX 1.000
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.500
score GB_GOOGLE_OBFUR 0.750
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
@@ -330,6 +322,7 @@ score GOOG_STO_HTML_PHISH 1.0
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
+score HAS_X_OUTGOING_SPAM_STAT 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
@@ -365,6 +358,8 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
+score ODD_FREEM_REPTO 1.000
+score PDS_X_PHP_WELLKNOWN 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -430,6 +425,7 @@ score URI_WP_HACKED 1.0
score USB_DRIVES 1.000
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
+score WORD_INVIS 1.000
score XM_DIGITS_ONLY 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1917408&r1=1917407&r2=1917408&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Mon Apr 29 02:49:02 2024
@@ -1,242 +1,260 @@
-# Using score set 0 logs for revision 1917348 from:
-# ham-ena-week0.r1917348.log ham-ena-week1.r1917348.log ham-ena-week2.r1917348.log ham-ena-week3.r1917348.log ham-ena-week4.r1917348.log ham-giovanni-ham.r1917348.log ham-giovanni-spammy.r1917348.log ham-giovanni-spam.r1917348.log ham-grenier.r1917348.log ham-hege.r1917348.log ham-jhardin.r1917348.log ham-llanga.r1917348.log ham-mmiroslaw-mails-ham.r1917348.log ham-mmiroslaw-mails-spam.r1917348.log ham-spamsponge.r1917348.log ham-tsz-corpus.r1917348.log ham-whyscream.r1917348.log spam-ena-week0.r1917348.log spam-ena-week1.r1917348.log spam-ena-week2.r1917348.log spam-ena-week3.r1917348.log spam-ena-week4.r1917348.log spam-giovanni-ham.r1917348.log spam-giovanni-spammy.r1917348.log spam-giovanni-spam.r1917348.log spam-grenier.r1917348.log spam-hege.r1917348.log spam-jhardin.r1917348.log spam-llanga.r1917348.log spam-mmiroslaw-mails-ham.r1917348.log spam-mmiroslaw-mails-spam.r1917348.log spam-spamsponge.r1917348.log spam-tsz-corpus.r1917348.log spam-whyscream.r1917348.log
+# Using score set 0 logs for revision 1917401 from:
+# ham-ena-week0.r1917401.log ham-ena-week1.r1917401.log ham-ena-week2.r1917401.log ham-ena-week3.r1917401.log ham-ena-week4.r1917401.log ham-giovanni-ham.r1917401.log ham-giovanni-spammy.r1917401.log ham-giovanni-spam.r1917401.log ham-grenier.r1917401.log ham-hege.r1917401.log ham-jhardin.r1917401.log ham-mmiroslaw-mails-ham.r1917401.log ham-mmiroslaw-mails-spam.r1917401.log ham-spamsponge.r1917401.log ham-tsz-corpus.r1917401.log ham-whyscream.r1917401.log spam-ena-week0.r1917401.log spam-ena-week1.r1917401.log spam-ena-week2.r1917401.log spam-ena-week3.r1917401.log spam-ena-week4.r1917401.log spam-giovanni-ham.r1917401.log spam-giovanni-spammy.r1917401.log spam-giovanni-spam.r1917401.log spam-grenier.r1917401.log spam-hege.r1917401.log spam-jhardin.r1917401.log spam-mmiroslaw-mails-ham.r1917401.log spam-mmiroslaw-mails-spam.r1917401.log spam-spamsponge.r1917401.log spam-tsz-corpus.r1917401.log spam-whyscream.r1917401.log
-score ACCT_PHISHING_MANY 2.495
+score ACCT_PHISHING_MANY 2.517
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_FROM_MANY_DOTS 0.150
-score AC_HTML_NONSENSE_TAGS 2.000
-score AC_POST_EXTRAS 1.206
+score AC_FROM_MANY_DOTS 0.424
+score AC_HTML_NONSENSE_TAGS 1.999
+score AC_POST_EXTRAS 0.056
score ADMITS_SPAM 3.299
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.985
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.001
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW 2.997
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_3_NEW_MONEY 0.001 # force non-zero
-score ADVANCE_FEE_4_NEW 2.550
+score ADVANCE_FEE_3_NEW_MONEY 0.001
+score ADVANCE_FEE_4_NEW 2.502
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 3.399
+score ADVANCE_FEE_5_NEW 2.299
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_5_NEW_MONEY 1.053
-score AD_PREFS 0.260
-score AMAZON_IMG_NOT_RCVD_AMZN 2.249
-score APOSTROPHE_TOCC 0.500
+score ADVANCE_FEE_5_NEW_MONEY 3.208
+score AD_PREFS 0.018
+score AMAZON_IMG_NOT_RCVD_AMZN 2.157
+score APOSTROPHE_TOCC 0.705
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 2.799
-score BIGNUM_EMAILS_FREEM 2.715
-score BITCOIN_DEADLINE 2.734
-score BITCOIN_EXTORT_01 4.399
-score BITCOIN_ONAN 1.135
+score AXB_X_FF_SEZ_S 2.899
+score BIGNUM_EMAILS_FREEM 0.649
+score BIGNUM_EMAILS_MANY 3.000
+score BITCOIN_DEADLINE 1.998
+score BITCOIN_EXTORT_01 4.945
+score BITCOIN_ONAN 1.124
score BITCOIN_PAY_ME 2.999
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_07 1.810
+score BITCOIN_SPAM_03 2.500
+score BITCOIN_SPAM_07 0.772
+score BITCOIN_SPAM_08 1.451
score BITCOIN_SPAM_09 1.499
-score BITCOIN_TOEQFM 2.689
-score BITCOIN_VISTA 0.741
-score BITCOIN_XPRIO 2.499
+score BITCOIN_TOEQFM 3.499
+score BITCOIN_VISTA 0.001
+score BITCOIN_XPRIO 1.445
score BITCOIN_YOUR_INFO 2.999
score BODY_SINGLE_URI 2.499
-score BODY_URI_ONLY 2.340
+score BODY_URI_ONLY 1.840
score BOGUS_MIME_VERSION 3.499
-score BOGUS_MSM_HDRS 2.084
-score CANT_SEE_AD 0.129
-score CK_HELO_GENERIC 0.250
-score COMPENSATION 0.896
-score CTE_8BIT_MISMATCH 1.000
-score DEAR_BENEFICIARY 2.857
-score DSN_NO_MIMEVERSION 2.000
-score DYNAMIC_IMGUR 2.580
+score BOGUS_MSM_HDRS 2.690
+score CANT_SEE_AD 0.001
+score CK_HELO_GENERIC 0.249
+score CN_B2B_SPAMMER 2.200
+score COMPENSATION 1.076
+score CONTENT_AFTER_HTML_WEAK 1.499
+score CTE_8BIT_MISMATCH 0.999
+score DEAR_BENEFICIARY 0.153
+score DSN_NO_MIMEVERSION 1.999
+score DYNAMIC_IMGUR 3.455
score ENCRYPTED_MESSAGE -0.999
score END_FUTURE_EMAILS 2.499
score FBI_MONEY 1.999
-score FBI_SPOOF 0.689
-score FILL_THIS_FORM 0.264
+score FBI_SPOOF 1.120
+score FILL_THIS_FORM 0.001
score FONT_INVIS_DIRECT 0.001
-score FONT_INVIS_HTML_NOHTML 2.520
-score FONT_INVIS_LONG_LINE 2.999
+score FONT_INVIS_HTML_NOHTML 2.398
+score FONT_INVIS_LONG_LINE 1.800
score FONT_INVIS_MSGID 2.499
score FONT_INVIS_NORDNS 0.001
-score FONT_INVIS_POSTEXTRAS 1.382
-score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.999
+score FONT_INVIS_POSTEXTRAS 2.525
+score FORM_FRAUD 0.356
+score FORM_FRAUD_3 2.899
score FORM_FRAUD_5 0.001
score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FROM_ADDR_WS 1.527
-score FROM_IN_TO_AND_SUBJ 1.699
+score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
+score FROM_ADDR_WS 0.654
+score FROM_IN_TO_AND_SUBJ 2.499
score FROM_MISSPACED 0.001
score FROM_MISSP_DYNIP 0.001
-score FROM_MISSP_EH_MATCH 1.999
+score FROM_MISSP_EH_MATCH 0.001
score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_PHISH 3.499
+score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_NTLD_REPLY_FREEMAIL 1.744
+score FROM_NTLD_REPLY_FREEMAIL 0.612
score FROM_SUSPICIOUS_NTLD 0.499
-score FROM_SUSPICIOUS_NTLD_FP 2.000
+score FROM_SUSPICIOUS_NTLD_FP 1.999
score FROM_UNBAL2 3.199
-score FROM_WSP_LEAD 2.599
-score FROM_WSP_TRAIL 3.099
+score FROM_WSP_LEAD 2.499
+score FROM_WSP_TRAIL 2.899
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
+score FUZZY_AMAZON 1.739
score FUZZY_CLICK_HERE 3.599
-score FUZZY_IMPORTANT 2.599
+score FUZZY_IMPORTANT 2.499
score FUZZY_PRIVACY 2.699
-score GB_BITCOIN_CP 1.004
-score GB_CUSTOM_HTM_URI 1.499
-score GB_FAKE_RF_SHORT 1.925
+score FUZZY_WALLET 1.025
+score GAPPY_LOW_CONTRAST 1.145
+score GB_BITCOIN_CP 2.858
+score GB_CUSTOM_HTM_URI 1.037
+score GB_FAKE_RF_SHORT 1.799
score GB_FREEMAIL_DISPTO 0.001
score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
score GOOG_MALWARE_DNLD 4.999
-score GOOG_REDIR_NORDNS 1.997
-score GOOG_STO_IMG_HTML 2.502
+score GOOG_REDIR_NORDNS 0.601
+score GOOG_STO_IMG_HTML 2.501
score GOOG_STO_NOIMG_HTML 2.999
-score HDRS_LCASE_IMGONLY 0.099
+score HAS_X_OUTGOING_SPAM_STAT 0.745
+score HDRS_LCASE_IMGONLY 0.100
score HDRS_MISSP 2.499
-score HDR_ORDER_FTSDMCXX_DIRECT 1.094
-score HDR_ORDER_FTSDMCXX_NORDNS 0.665
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HDR_ORDER_FTSDMCXX_DIRECT 0.001
+score HDR_ORDER_FTSDMCXX_NORDNS 0.001
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
-score HK_LOTTO 0.999
-score HK_NAME_FM_MR_MRS 1.105
-score HK_NAME_MR_MRS 0.999
-score HK_RANDOM_ENVFROM 0.231
+score HK_LOTTO 0.605
+score HK_NAME_FM_MR_MRS 1.395
+score HK_NAME_MR_MRS 1.000
+score HK_RANDOM_ENVFROM 0.001
score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 1.000
-score HK_SCAM 1.589
+score HK_RANDOM_REPLYTO 0.999
+score HK_SCAM 0.001
score HK_WIN 0.001
-score HOSTED_IMG_DIRECT_MX 0.001
-score HOSTED_IMG_FREEM 0.730
+score HOSTED_IMG_DIRECT_MX 0.108
+score HOSTED_IMG_FREEM 0.364
score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 0.048
+score HREF_EMPTY_NORDNS 0.088
+score HREF_EMPTY_PHPMAIL 1.211
score HTML_BADATTR 0.999
score HTML_ENTITY_ASCII 2.999
-score HTML_FONT_TINY_NORDNS 1.999
+score HTML_FONT_TINY_NORDNS 1.788
score HTML_OFF_PAGE 2.999
-score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 2.403
-score HTML_TEXT_INVISIBLE_FONT 1.347
+score HTML_SINGLET_MANY 2.500
+score HTML_TAG_BALANCE_CENTER 2.401
+score HTML_TEXT_INVISIBLE_FONT 0.001
score HTML_TEXT_INVISIBLE_STYLE 0.001
score IMG_ONLY_FM_DOM_INFO 2.499
-score KHOP_HELO_FCRDNS 0.400
+score JH_SPAMMY_HEADERS 3.499
+score KHOP_HELO_FCRDNS 0.399
score LONGLN_LOW_CONTRAST 2.499
-score LONG_HEX_URI 2.999
+score LONG_HEX_URI 3.000
score LONG_IMG_URI 0.001
+score LONG_INVISIBLE_TEXT 0.001
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 0.001
score LOTTO_DEPT 1.999
-score MALFORMED_FREEMAIL 2.451
-score MANY_SUBDOM 2.699
+score MALFORMED_FREEMAIL 1.340
+score MALW_ATTACH 2.199
+score MANY_SUBDOM 2.799
score MILLION_HUNDRED 0.001
score MILLION_USD 0.001
-score MIMEOLE_DIRECT_TO_MX 1.999
+score MIMEOLE_DIRECT_TO_MX 0.909
score MIME_NO_TEXT 1.999
-score MIXED_ES 1.899
-score MIXED_HREF_CASE 1.946
+score MIXED_CTYPE_CASE 1.069
+score MIXED_ES 2.700
+score MIXED_HREF_CASE 1.690
score MONEY_ATM_CARD 0.001
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 1.891
+score MONEY_FORM_SHORT 1.889
score MONEY_FRAUD_3 0.001
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 0.494
-score MONEY_FREEMAIL_REPTO 2.999
+score MONEY_FRAUD_8 0.001
+score MONEY_FREEMAIL_REPTO 2.490
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
score MONEY_NOHTML 2.499
-score MSGID_NOFQDN1 0.001
+score MSGID_NOFQDN1 0.001 # force non-zero
score NA_DOLLARS 1.499
-score NICE_REPLY_A -3.022
-score NORDNS_LOW_CONTRAST 0.001
+score NICE_REPLY_A -0.434
+score NORDNS_LOW_CONTRAST 0.001 # force non-zero
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.001
+score NSL_RCVD_HELO_USER 2.017
+score OBFU_TEXT_ATTACH 0.001
score ODD_FREEM_REPTO 2.999
score PDS_BAD_THREAD_QP_64 0.999
-score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.518
-score PDS_BTC_NTLD 1.231
+score PDS_BTC_ID 0.500
+score PDS_BTC_MSGID 0.001
+score PDS_BTC_NTLD 0.205
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_FRNOM_TODOM_DBL_URL 0.001
-score PDS_FRNOM_TODOM_NAKED_TO 1.129
-score PDS_FROM_2_EMAILS 0.730
-score PDS_FROM_NAME_TO_DOMAIN 1.267
-score PDS_HP_HELO_NORDNS 0.752
+score PDS_FRNOM_TODOM_NAKED_TO 0.667
+score PDS_FROM_NAME_TO_DOMAIN 0.485
+score PDS_HP_HELO_NORDNS 0.865
score PDS_OTHER_BAD_TLD 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHP_ORIG_SCRIPT 0.811
+score PDS_X_PHP_WELLKNOWN 0.999
+score PHP_ORIG_SCRIPT 1.315
score PHP_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 2.586
+score RATWARE_NO_RDNS 2.571
score READY_TO_SHIP 1.249
score REPTO_419_FRAUD 2.999
score REPTO_419_FRAUD_GM 2.999
score REPTO_419_FRAUD_GM_LOOSE 0.999
-score RISK_FREE 2.499
+score RISK_FREE 0.001 # force non-zero
score SCC_BOGUS_CTE_1 0.001
-score SCC_CANSPAM_1 1.959
-score SCC_CANSPAM_2 2.501
-score SCC_ISEMM_LID_1B 1.499
+score SCC_CANSPAM_1 1.992
+score SCC_CANSPAM_2 2.481
+score SCC_ISEMM_LID_1B 1.500
+score SCC_SPAMMER_ADDR_2 2.299
score SERGIO_SUBJECT_VIAGRA01 2.599
-score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
+score SHOPIFY_IMG_NOT_RCVD_SFY 2.500
score SHORTENER_SHORT_IMG 0.001
score SHORT_SHORTNER 1.999
-score SPOOFED_FREEMAIL_NO_RDNS 0.497
-score SPOOF_GMAIL_MID 1.499
+score SPOOFED_FREEMAIL_NO_RDNS 0.236
+score SPOOF_GMAIL_MID 1.500
score STATIC_XPRIO_OLE 0.001
-score SUBJ_ATTENTION 0.499
+score SUBJ_ATTENTION 0.500
score SUSP_UTF8_WORD_FROM 1.999
-score TEQF_USR_POLITE 2.000
-score THIS_AD 1.941
+score TEQF_USR_POLITE 1.900
+score THIS_AD 1.899
score THIS_IS_ADV_SUSP_NTLD 1.499
-score TINY_FLOAT 3.099
+score TINY_FLOAT 2.999
score TO_EQ_FM_DIRECT_MX 0.001
-score TO_EQ_FM_DOM_HTML_IMG 2.099
-score TO_EQ_FM_HTML_ONLY 0.001
+score TO_EQ_FM_DOM_HTML_IMG 2.499
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.956
+score TO_NAME_SUBJ_NO_RDNS 2.773
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_HTML_IMG 1.593
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 1.592
-score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.499
-score TRANSFORM_LIFE 2.500
-score TVD_APPROVED 2.899
-score TVD_PH_7 2.799
+score TO_NO_BRKTS_MSFT 0.001
+score TO_NO_BRKTS_NORDNS_HTML 1.353
+score TO_NO_BRKTS_PCNT 2.492
+score TRANSFORM_LIFE 2.499
+score TVD_APPROVED 2.799
+score TVD_PH_7 2.486
score TVD_SPACE_ENCODED 2.499
-score TVD_SPACE_RATIO_MINFP 2.106
-score UNDISC_FREEM 2.999
-score UNDISC_MONEY 3.399
+score TVD_SPACE_RATIO_MINFP 1.240
+score UNDISC_FREEM 2.899
+score UNDISC_MONEY 3.299
score UNICODE_OBFU_ASC 2.499
score UNICODE_OBFU_ZW_MANY 0.001
-score URI_CLOUDFLAREIPFS 2.499
-score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.099
-score URI_IMG_CWINDOWSNET 1.608
-score URI_OBFU_TLD 1.207
+score URI_CLOUDFLAREIPFS 2.500
+score URI_DOTEDU 2.000
+score URI_GOOGLE_PROXY 1.900
+score URI_IMG_CWINDOWSNET 1.327
+score URI_OBFU_TLD 1.120
score URI_ONLY_LOW_CONTRAST 2.499
-score URI_PHISH 3.785
+score URI_PHISH 2.100
+score URI_PHP_REDIR 0.547
score URI_TRY_3LD 1.999
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.618
-score VISTA_COST 0.541
+score URI_WP_HACKED_2 2.402
+score VFY_ACCT_NORDNS 2.906
+score VISTA_COST 0.810
score VISTA_TONOM_EQ_TOLOC 2.499
-score WIKI_IMG 3.100
+score WIKI_IMG 3.099
+score WORD_INVIS 1.583
score WORD_INVIS_MANY 2.999
-score XFER_LOTSA_MONEY 0.001
+score XFER_LOTSA_MONEY 0.001 # force non-zero
score XM_LIGHT_HEAVY 2.499
score XM_ONE_WORD 1.999
score XM_RANDOM 2.499
-score XM_RECPTID 2.999
+score XM_RECPTID 3.000
score XM_UC_ONLY 2.499
-score XPRIO 0.006
+score XPRIO 0.001
score XPRIO_VISTA 0.001
score YOUR_DELIVERY_ADDRESS 1.249
-score YOU_INHERIT 2.999
+score YOU_INHERIT 1.465
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -252,7 +270,6 @@ score ALIBABA_IMG_NOT_RCVD_ALI 1.0
score APP_DEVELOPMENT_FREEM 1.000
score APP_DEVELOPMENT_NORDNS 1.000
score BEBEE_IMG_NOT_RCVD_BB 1.000
-score BIGNUM_EMAILS_MANY 1.000
score BITCOIN_BOMB 1.000
score BITCOIN_EXTORT_02 1.000
score BITCOIN_IMGUR 1.000
@@ -261,7 +278,6 @@ score BITCOIN_OBFU_SUBJ 1.0
score BITCOIN_SPAM_01 1.000
score BITCOIN_SPAM_04 1.000
score BITCOIN_SPAM_06 1.000
-score BITCOIN_SPAM_08 1.000
score BITCOIN_SPAM_10 1.000
score BITCOIN_SPAM_11 1.000
score BITCOIN_SPAM_12 1.000
@@ -271,7 +287,6 @@ score BTC_ORG 1.0
score BULK_RE_SUSP_NTLD 1.000
score COMMENT_GIBBERISH 1.000
score CONTENT_AFTER_HTML 1.000
-score CONTENT_AFTER_HTML_WEAK 1.000
score DAY_I_EARNED 1.000
score DOTGOV_IMAGE 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000
@@ -280,7 +295,6 @@ score FACEBOOK_IMG_NOT_RCVD_FB 1.0
score FONT_INVIS_DOTGOV 1.000
score FREEM_FRNUM_UNICD_EMPTY 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
-score FROM_MISSP_PHISH 1.000
score FROM_NTLD_LINKBAIT 1.000
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_FORGED_MUA_POSTFIX 1.000
@@ -294,28 +308,25 @@ score GOOG_STO_HTML_PHISH 1.0
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
-score HAS_X_OUTGOING_SPAM_STAT 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
score HOSTED_IMG_MULTI 1.000
-score HREF_EMPTY_PHPMAIL 1.000
score HREF_EMPTY_XANTIABUSE 1.000
score HREF_EMPTY_XAUTHED 1.000
score HTML_ENTITY_ASCII_TINY 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
-score JH_SPAMMY_HEADERS 1.000
score JH_SPAMMY_PATTERN01 1.000
score JH_SPAMMY_PATTERN02 1.000
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
-score LONG_INVISIBLE_TEXT 1.000
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
+score MANY_HDRS_LCASE 0.100
score MIXED_AREA_CASE 1.000
score MIXED_CENTER_CASE 1.000
score MIXED_FONT_CASE 1.000
@@ -330,7 +341,6 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
-score PDS_X_PHP_WELLKNOWN 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -387,13 +397,11 @@ score URI_IMG_WP_REDIR 1.0
score URI_LONG_REPEAT 1.000
score URI_ONLY_MSGID_MALF 1.000
score URI_OPTOUT_3LD 1.000
-score URI_PHP_REDIR 1.000
score URI_TRY_USME 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
-score WORD_INVIS 1.000
score XM_DIGITS_ONLY 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1917408&r1=1917407&r2=1917408&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Mon Apr 29 02:49:02 2024
@@ -1,273 +1,258 @@
# Using score set 1 logs for revision 1917378 from:
-# ham-net-ena-week0.r1917378.log ham-net-ena-week1.r1917378.log ham-net-ena-week2.r1917378.log ham-net-ena-week3.r1917378.log ham-net-ena-week4.r1917378.log ham-net-grenier.r1917378.log ham-net-hege.r1917378.log ham-net-jhardin.r1917378.log ham-net-mmiroslaw-mails-ham.r1917378.log ham-net-mmiroslaw-mails-spam.r1917378.log ham-net-spamsponge.r1917378.log ham-net-tsz-corpus.r1917378.log ham-net-whyscream.r1917378.log spam-net-ena-week0.r1917378.log spam-net-ena-week1.r1917378.log spam-net-ena-week2.r1917378.log spam-net-ena-week3.r1917378.log spam-net-ena-week4.r1917378.log spam-net-grenier.r1917378.log spam-net-hege.r1917378.log spam-net-jhardin.r1917378.log spam-net-mmiroslaw-mails-ham.r1917378.log spam-net-mmiroslaw-mails-spam.r1917378.log spam-net-spamsponge.r1917378.log spam-net-tsz-corpus.r1917378.log spam-net-whyscream.r1917378.log
+# ham-net-ena-week0.r1917378.log ham-net-ena-week1.r1917378.log ham-net-ena-week2.r1917378.log ham-net-ena-week3.r1917378.log ham-net-ena-week4.r1917378.log ham-net-grenier.r1917378.log ham-net-hege.r1917378.log ham-net-jhardin.r1917378.log ham-net-llanga.r1917378.log ham-net-mmiroslaw-mails-ham.r1917378.log ham-net-mmiroslaw-mails-spam.r1917378.log ham-net-spamsponge.r1917378.log ham-net-tsz-corpus.r1917378.log ham-net-whyscream.r1917378.log spam-net-ena-week0.r1917378.log spam-net-ena-week1.r1917378.log spam-net-ena-week2.r1917378.log spam-net-ena-week3.r1917378.log spam-net-ena-week4.r1917378.log spam-net-grenier.r1917378.log spam-net-hege.r1917378.log spam-net-jhardin.r1917378.log spam-net-llanga.r1917378.log spam-net-mmiroslaw-mails-ham.r1917378.log spam-net-mmiroslaw-mails-spam.r1917378.log spam-net-spamsponge.r1917378.log spam-net-tsz-corpus.r1917378.log spam-net-whyscream.r1917378.log
-score ACCT_PHISHING_MANY 3.000
-score AC_BR_BONANZA 0.001 # force non-zero
+score ACCT_PHISHING_MANY 2.996
+score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 0.001
-score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 3.099
+score AC_HTML_NONSENSE_TAGS 1.997
+score ADMITS_SPAM 3.296
score ADVANCE_FEE_2_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 0.199
+score ADVANCE_FEE_2_NEW_MONEY 1.997
+score ADVANCE_FEE_3_NEW 1.307
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_3_NEW_MONEY 1.447
-score ADVANCE_FEE_4_NEW 3.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_MONEY 0.395
+score ADVANCE_FEE_4_NEW 3.407
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 2.299
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.861
-score ADVANCE_FEE_5_NEW_MONEY 3.057
-score AD_PREFS 0.197
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499
+score ADVANCE_FEE_5_NEW 2.497
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.998
+score ADVANCE_FEE_5_NEW_MONEY 1.002
+score AD_PREFS 0.499
+score AMAZON_IMG_NOT_RCVD_AMZN 2.497
score APOSTROPHE_TOCC 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
-score AXB_X_FF_SEZ_S 2.799
-score BIGNUM_EMAILS_FREEM 0.342
-score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_DEADLINE 2.726
-score BITCOIN_EXTORT_01 1.801
-score BITCOIN_ONAN 0.956
-score BITCOIN_PAY_ME 2.708
-score BITCOIN_SPAM_02 1.091
-score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_05 1.534
-score BITCOIN_SPAM_07 0.192
-score BITCOIN_SPAM_08 0.365
-score BITCOIN_SPAM_09 0.665
-score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 2.543
-score BITCOIN_XPRIO 2.499
-score BITCOIN_YOUR_INFO 2.999
-score BODY_SINGLE_URI 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score AXB_X_FF_SEZ_S 2.896
+score BIGNUM_EMAILS_FREEM 2.181
+score BITCOIN_DEADLINE 1.114
+score BITCOIN_EXTORT_01 2.840
+score BITCOIN_ONAN 1.901
+score BITCOIN_PAY_ME 0.358
+score BITCOIN_SPAM_02 1.531
+score BITCOIN_SPAM_03 2.497
+score BITCOIN_SPAM_05 1.715
+score BITCOIN_SPAM_07 1.456
+score BITCOIN_SPAM_08 0.832
+score BITCOIN_SPAM_09 1.499
+score BITCOIN_TOEQFM 2.269
+score BITCOIN_VISTA 2.220
+score BITCOIN_XPRIO 2.497
+score BITCOIN_YOUR_INFO 2.996
+score BODY_SINGLE_URI 0.328
score BODY_URI_ONLY 0.001
-score BOGUS_MIME_VERSION 0.001
-score BOGUS_MSM_HDRS 2.538
-score CANT_SEE_AD 2.499
+score BOGUS_MIME_VERSION 2.384
+score BOGUS_MSM_HDRS 0.705
+score CANT_SEE_AD 2.497
score CK_HELO_GENERIC 0.249
-score COMPENSATION 0.390
-score CONTENT_AFTER_HTML_WEAK 1.499
-score CTE_8BIT_MISMATCH 0.955
+score COMPENSATION 0.479
+score CTE_8BIT_MISMATCH 0.001
score DEAR_BENEFICIARY 0.001
-score DKIMWL_WL_HIGH -0.114
-score DKIMWL_WL_MED -0.001 # force non-zero
-score DKIMWL_WL_MEDHI -0.677
-score DSN_NO_MIMEVERSION 1.999
-score DYNAMIC_IMGUR 3.040
+score DKIMWL_WL_HIGH -0.987
+score DKIMWL_WL_MED -0.001
+score DKIMWL_WL_MEDHI -0.773
+score DSN_NO_MIMEVERSION 1.997
+score DYNAMIC_IMGUR 3.913
score ENCRYPTED_MESSAGE -0.999
-score END_FUTURE_EMAILS 2.499
-score FBI_MONEY 1.877
-score FBI_SPOOF 1.442
+score END_FUTURE_EMAILS 2.497
+score FBI_MONEY 1.631
+score FBI_SPOOF 1.890
score FILL_THIS_FORM 0.001
score FONT_INVIS_DIRECT 0.001
-score FONT_INVIS_HTML_NOHTML 2.271
-score FONT_INVIS_LONG_LINE 2.712
-score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 2.499
-score FORGED_SPF_HELO 0.001
-score FORM_FRAUD 0.999
-score FORM_FRAUD_3 0.001
+score FONT_INVIS_HTML_NOHTML 1.831
+score FONT_INVIS_LONG_LINE 2.982
+score FONT_INVIS_MSGID 2.497
+score FONT_INVIS_NORDNS 2.497
+score FORGED_SPF_HELO 0.708
+score FORM_FRAUD 0.998
+score FORM_FRAUD_3 2.996
score FORM_FRAUD_5 0.001
-score FOUND_YOU 0.376
+score FOUND_YOU 2.668
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FROM_ADDR_WS 0.001
-score FROM_BANK_NOAUTH 0.001
-score FROM_FMBLA_NEWDOM 1.499
-score FROM_FMBLA_NEWDOM14 0.872
+score FROM_ADDR_WS 0.719
+score FROM_FMBLA_NEWDOM 1.498
+score FROM_FMBLA_NEWDOM14 0.998
score FROM_FMBLA_NEWDOM28 0.799
score FROM_GOV_DKIM_AU -0.999
-score FROM_GOV_SPOOF 0.999
-score FROM_IN_TO_AND_SUBJ 1.856
+score FROM_GOV_SPOOF 0.998
+score FROM_IN_TO_AND_SUBJ 1.997
score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 2.999
+score FROM_MISSP_DYNIP 2.717
score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_FREEMAIL 0.488
+score FROM_MISSP_FREEMAIL 0.167
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 2.619
-score FROM_MISSP_REPLYTO 0.300
+score FROM_MISSP_REPLYTO 2.246
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.001 # force non-zero
-score FROM_NTLD_REPLY_FREEMAIL 0.732
-score FROM_PAYPAL_SPOOF 1.599
-score FROM_SUSPICIOUS_NTLD 0.001
-score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_UNBAL2 3.099
-score FROM_WSP_LEAD 0.502
-score FROM_WSP_TRAIL 2.800
+score FROM_MISSP_XPRIO 0.001
+score FROM_PAYPAL_SPOOF 1.597
+score FROM_SUSPICIOUS_NTLD 0.381
+score FROM_SUSPICIOUS_NTLD_FP 1.997
+score FROM_UNBAL2 3.196
+score FROM_WSP_LEAD 0.687
+score FROM_WSP_TRAIL 2.996
score FSL_BULK_SIG 0.001
score FSL_CTYPE_WIN1251 0.001 # force non-zero
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 0.001
-score FUZZY_CLICK_HERE 0.627
-score FUZZY_IMPORTANT 2.400
-score GAPPY_LOW_CONTRAST 0.001
-score GB_BITCOIN_CP 2.247
-score GB_CUSTOM_HTM_URI 0.001
-score GB_FAKE_RF_SHORT 0.932
+score FUZZY_AMAZON 0.001 # force non-zero
+score FUZZY_CLICK_HERE 1.849
+score FUZZY_IMPORTANT 2.596
+score GB_BITCOIN_CP 2.842
+score GB_CUSTOM_HTM_URI 0.034
+score GB_FAKE_RF_SHORT 1.997
score GB_FREEMAIL_DISPTO 0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_HASHBL_BTC 4.646
-score GOOG_MALWARE_DNLD 3.334
-score GOOG_REDIR_NORDNS 1.066
-score GOOG_STO_IMG_HTML 2.999
-score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 0.302
-score HDRS_LCASE_IMGONLY 0.099
-score HDRS_MISSP 2.499
+score GB_HASHBL_BTC 4.748
+score GOOG_MALWARE_DNLD 1.233
+score GOOG_REDIR_NORDNS 1.673
+score GOOG_STO_IMG_HTML 2.835
+score GOOG_STO_NOIMG_HTML 2.996
+score HDRS_LCASE_IMGONLY 0.098
+score HDRS_MISSP 2.334
score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
-score HELO_NO_DOMAIN 0.001
-score HK_LOTTO 0.999
-score HK_NAME_FM_MR_MRS 0.001
-score HK_NAME_MR_MRS 0.638
+score HEADER_FROM_DIFFERENT_DOMAINS 0.248
+score HELO_NO_DOMAIN 0.459
+score HK_LOTTO 0.732
+score HK_NAME_FM_MR_MRS 1.012
+score HK_NAME_MR_MRS 0.943
score HK_RANDOM_ENVFROM 0.001
-score HK_RANDOM_FROM 0.001
-score HK_RANDOM_REPLYTO 0.999
+score HK_RANDOM_FROM 0.998
+score HK_RANDOM_REPLYTO 0.998
score HK_SCAM 0.001
score HK_WIN 0.001
score HOSTED_IMG_DIRECT_MX 0.001
score HOSTED_IMG_FREEM 3.048
-score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 1.913
-score HTML_BADATTR 0.999
-score HTML_ENTITY_ASCII 2.999
-score HTML_FONT_TINY_NORDNS 0.001
-score HTML_OFF_PAGE 1.784
-score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 2.399
-score HTML_TEXT_INVISIBLE_FONT 0.001
-score HTML_TEXT_INVISIBLE_STYLE 2.241
-score IMG_ONLY_FM_DOM_INFO 2.499
-score KHOP_HELO_FCRDNS 0.399
-score LONGLN_LOW_CONTRAST 1.885
-score LONG_HEX_URI 0.756
+score HOSTED_IMG_MULTI_PUB_01 2.996
+score HREF_EMPTY_NORDNS 1.091
+score HTML_BADATTR 0.998
+score HTML_ENTITY_ASCII 2.996
+score HTML_FONT_TINY_NORDNS 0.828
+score HTML_OFF_PAGE 2.902
+score HTML_SINGLET_MANY 2.497
+score HTML_TAG_BALANCE_CENTER 2.665
+score HTML_TEXT_INVISIBLE_FONT 0.048
+score HTML_TEXT_INVISIBLE_STYLE 1.413
+score IMG_ONLY_FM_DOM_INFO 2.497
+score KHOP_HELO_FCRDNS 0.001
+score LONGLN_LOW_CONTRAST 2.208
+score LONG_HEX_URI 1.515
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 0.001
score LOTTO_DEPT 0.001
-score MALFORMED_FREEMAIL 1.255
-score MANY_SUBDOM 2.699
+score MALFORMED_FREEMAIL 1.785
+score MANY_SUBDOM 2.896
score MILLION_HUNDRED 0.001
score MILLION_USD 0.001
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIME_NO_TEXT 2.000
-score MIXED_CTYPE_CASE 1.912
-score MIXED_ES 2.399
-score MIXED_HREF_CASE 0.446
+score MIME_NO_TEXT 1.997
+score MIXED_CTYPE_CASE 2.272
+score MIXED_ES 1.897
+score MIXED_HREF_CASE 1.166
score MONEY_ATM_CARD 0.001
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 0.590
+score MONEY_FORM_SHORT 0.001
score MONEY_FRAUD_3 0.001
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 2.797
-score MONEY_FREEMAIL_REPTO 0.010
-score MONEY_FROM_41 1.999
+score MONEY_FRAUD_8 3.216
+score MONEY_FREEMAIL_REPTO 1.066
+score MONEY_FROM_41 1.997
score MONEY_FROM_MISSP 0.001
-score MONEY_NOHTML 2.499
-score MSGID_NOFQDN1 1.161
-score NA_DOLLARS 0.001
-score NICE_REPLY_A -2.702
+score MONEY_NOHTML 2.497
+score MSGID_NOFQDN1 0.330
+score NA_DOLLARS 1.498
+score NICE_REPLY_A -1.127
score NORDNS_LOW_CONTRAST 0.001
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001 # force non-zero
-score NSL_RCVD_HELO_USER 2.012
-score OBFU_TEXT_ATTACH 0.966
-score ODD_FREEM_REPTO 1.415
-score PDS_BAD_THREAD_QP_64 1.000
-score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.999
-score PDS_BTC_NTLD 1.031
-score PDS_DBL_URL_TNB_RUNON 1.999
-score PDS_FRNOM_TODOM_DBL_URL 1.499
-score PDS_FRNOM_TODOM_NAKED_TO 0.811
-score PDS_FROM_2_EMAILS 3.499
-score PDS_FROM_NAME_TO_DOMAIN 0.411
-score PDS_HELO_SPF_FAIL 1.999
+score NSL_RCVD_HELO_USER 0.001
+score PDS_BAD_THREAD_QP_64 0.998
+score PDS_BTC_ID 0.498
+score PDS_BTC_MSGID 0.712
+score PDS_BTC_NTLD 0.069
+score PDS_DBL_URL_TNB_RUNON 1.997
+score PDS_FRNOM_TODOM_DBL_URL 1.498
+score PDS_FRNOM_TODOM_NAKED_TO 0.849
+score PDS_FROM_NAME_TO_DOMAIN 0.108
+score PDS_HELO_SPF_FAIL 1.998
score PDS_HP_HELO_NORDNS 0.001
-score PDS_OTHER_BAD_TLD 1.874
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PDS_X_PHP_WELLKNOWN 0.999
-score PHP_ORIG_SCRIPT 1.858
-score PHP_SCRIPT 2.493
-score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RAND_MKTG_HEADER 1.494
-score RATWARE_NO_RDNS 0.789
-score RCVD_IN_IADB_COURT -0.001 # force non-zero
+score PDS_OTHER_BAD_TLD 1.997
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.989
+score PHP_ORIG_SCRIPT 2.120
+score PHP_SCRIPT 2.497
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RAND_MKTG_HEADER 1.997
+score RATWARE_NO_RDNS 2.433
+score RCVD_IN_IADB_COURT -0.001
score RCVD_IN_IADB_LEG_MAND -0.001
score RCVD_IN_MSPIKE_H2 -0.001
-score READY_TO_SHIP 1.250
-score REPTO_419_FRAUD 2.999
-score REPTO_419_FRAUD_GM 2.879
-score REPTO_419_FRAUD_GM_LOOSE 1.000
-score RISK_FREE 0.348
-score SCC_BOGUS_CTE_1 3.069
+score READY_TO_SHIP 1.249
+score REPTO_419_FRAUD 2.996
+score REPTO_419_FRAUD_GM 2.938
+score REPTO_419_FRAUD_GM_LOOSE 0.668
+score RISK_FREE 0.001
+score SCC_BOGUS_CTE_1 3.066
score SCC_CANSPAM_1 0.001
score SCC_CANSPAM_2 0.001
-score SCC_ISEMM_LID_1B 1.499
-score SCC_SPAMMER_ADDR_2 2.199
-score SERGIO_SUBJECT_VIAGRA01 2.111
-score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
-score SHORTENER_SHORT_IMG 1.595
-score SHORT_SHORTNER 0.001
+score SCC_ISEMM_LID_1B 1.498
+score SERGIO_SUBJECT_VIAGRA01 1.435
+score SHOPIFY_IMG_NOT_RCVD_SFY 2.497
+score SHORTENER_SHORT_IMG 1.234
+score SHORT_SHORTNER 0.251
score SPOOFED_FREEMAIL 0.001
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 1.477
-score SPOOF_GMAIL_MID 1.499
-score STATIC_XPRIO_OLE 1.863
+score SPOOFED_FREEM_REPTO 1.273
+score SPOOF_GMAIL_MID 1.498
+score STATIC_XPRIO_OLE 1.774
score SUBJ_ATTENTION 0.499
-score SUSP_UTF8_WORD_FROM 2.000
-score TEQF_USR_POLITE 1.992
-score THIS_AD 0.826
-score THIS_IS_ADV_SUSP_NTLD 0.572
-score TINY_FLOAT 2.899
+score SUSP_UTF8_WORD_FROM 1.997
+score TEQF_USR_POLITE 1.815
+score THIS_AD 1.042
+score THIS_IS_ADV_SUSP_NTLD 1.499
+score TINY_FLOAT 3.096
score TO_EQ_FM_DIRECT_MX 0.001
-score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_HTML_ONLY 2.799
-score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score TO_EQ_FM_DOM_SPF_FAIL 0.036
+score TO_EQ_FM_SPF_FAIL 0.345
score TO_IN_SUBJ 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.907
-score TO_NO_BRKTS_FROM_MSSP 0.981
-score TO_NO_BRKTS_HTML_IMG 2.000
-score TO_NO_BRKTS_HTML_ONLY 0.001
+score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NO_BRKTS_FROM_MSSP 1.461
+score TO_NO_BRKTS_HTML_IMG 1.997
+score TO_NO_BRKTS_HTML_ONLY 1.998
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.500
-score TRANSFORM_LIFE 2.499
-score TVD_APPROVED 2.700
-score TVD_PH_7 0.368
-score TVD_SPACE_ENCODED 0.001
-score TVD_SPACE_RATIO_MINFP 0.001
-score UNDISC_FREEM 2.799
-score UNDISC_MONEY 3.299
-score UNICODE_OBFU_ASC 2.098
-score UNICODE_OBFU_ZW_MANY 2.999
-score URI_CLOUDFLAREIPFS 0.858
-score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.199
+score TO_NO_BRKTS_PCNT 2.497
+score TRANSFORM_LIFE 2.497
+score TVD_APPROVED 2.896
+score TVD_PH_7 1.518
+score TVD_SPACE_ENCODED 1.817
+score TVD_SPACE_RATIO_MINFP 0.001 # force non-zero
+score UNDISC_FREEM 2.996
+score UNDISC_MONEY 3.396
+score UNICODE_OBFU_ASC 2.353
+score UNICODE_OBFU_ZW_MANY 2.956
+score URI_CLOUDFLAREIPFS 1.930
+score URI_DOTEDU 1.997
+score URI_GOOGLE_PROXY 2.497
score URI_IMG_CWINDOWSNET 0.001
-score URI_OBFU_TLD 1.231
-score URI_ONLY_LOW_CONTRAST 1.727
-score URI_PHISH 2.701
-score URI_TRY_3LD 1.999
-score URI_WP_HACKED_2 2.500
-score VFY_ACCT_NORDNS 2.999
-score VISTA_COST 2.500
-score VISTA_TONOM_EQ_TOLOC 0.306
-score WIKI_IMG 2.999
-score WORD_INVIS 0.803
-score WORD_INVIS_MANY 2.999
+score URI_OBFU_TLD 2.588
+score URI_ONLY_LOW_CONTRAST 2.304
+score URI_PHISH 3.995
+score URI_TRY_3LD 1.997
+score URI_WP_HACKED_2 2.497
+score VFY_ACCT_NORDNS 2.996
+score VISTA_COST 2.497
+score VISTA_TONOM_EQ_TOLOC 0.001
+score WIKI_IMG 3.096
+score WORD_INVIS_MANY 2.996
score XFER_LOTSA_MONEY 0.001
-score XM_LIGHT_HEAVY 2.499
-score XM_ONE_WORD 0.820
-score XM_RANDOM 2.499
-score XM_RECPTID 2.999
-score XM_UC_ONLY 2.499
+score XM_LIGHT_HEAVY 2.497
+score XM_ONE_WORD 1.790
+score XM_RANDOM 2.498
+score XM_RECPTID 2.996
+score XM_UC_ONLY 2.498
score XPRIO 0.001
-score XPRIO_VISTA 0.001 # force non-zero
-score YOUR_DELIVERY_ADDRESS 1.250
-score YOU_INHERIT 2.799
+score XPRIO_VISTA 0.001
+score YOUR_DELIVERY_ADDRESS 1.248
+score YOU_INHERIT 2.999
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -284,6 +269,7 @@ score ALIBABA_IMG_NOT_RCVD_ALI 1.0
score APP_DEVELOPMENT_FREEM 1.000
score APP_DEVELOPMENT_NORDNS 1.000
score BEBEE_IMG_NOT_RCVD_BB 1.000
+score BIGNUM_EMAILS_MANY 1.000
score BITCOIN_BOMB 1.000
score BITCOIN_EXTORT_02 1.000
score BITCOIN_IMGUR 1.000
@@ -302,6 +288,7 @@ score BTC_ORG 1.0
score BULK_RE_SUSP_NTLD 1.000
score COMMENT_GIBBERISH 1.000
score CONTENT_AFTER_HTML 1.000
+score CONTENT_AFTER_HTML_WEAK 1.000
score DAY_I_EARNED 1.000
score DKIMWL_BL 1.000
score DKIMWL_BLOCKED 0.001
@@ -313,13 +300,18 @@ score FONT_INVIS_DOTGOV 1.0
score FONT_INVIS_POSTEXTRAS 1.000
score FREEM_FRNUM_UNICD_EMPTY 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
+score FROM_BANK_NOAUTH 1.000
score FROM_FMBLA_NDBLOCKED 0.001
score FROM_GOV_REPLYTO_FREEMAIL 1.000
+score FROM_MISSP_PHISH 1.000
score FROM_NEWDOM_BTC 1.000
score FROM_NTLD_LINKBAIT 1.000
+score FROM_NTLD_REPLY_FREEMAIL 1.000
score FROM_NUMBERO_NEWDOMAIN 1.000
+score GAPPY_LOW_CONTRAST 1.000
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_FORGED_MUA_POSTFIX 1.000
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.500
score GB_GOOGLE_OBFUR 0.750
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
@@ -330,6 +322,7 @@ score GOOG_STO_HTML_PHISH 1.0
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
+score HAS_X_OUTGOING_SPAM_STAT 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
@@ -365,6 +358,8 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
+score ODD_FREEM_REPTO 1.000
+score PDS_X_PHP_WELLKNOWN 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -430,6 +425,7 @@ score URI_WP_HACKED 1.0
score USB_DRIVES 1.000
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
+score WORD_INVIS 1.000
score XM_DIGITS_ONLY 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1917408&r1=1917407&r2=1917408&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Mon Apr 29 02:49:02 2024
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 573684 63.315% (99.410% of non-spam corpus)
-# Correctly spam: 253191 27.944% (76.961% of spam corpus)
-# False positives: 3403 0.376% (0.590% of nonspam, 58115 weighted)
-# False negatives: 75795 8.365% (23.039% of spam, 138763 weighted)
-# Average score for spam: 7.6 nonspam: 0.4
+# Correctly non-spam: 224313 40.922% (98.771% of non-spam corpus)
+# Correctly spam: 242613 44.261% (75.571% of spam corpus)
+# False positives: 2790 0.509% (1.229% of nonspam, 117467 weighted)
+# False negatives: 78425 14.307% (24.429% of spam, 145028 weighted)
+# Average score for spam: 7.2 nonspam: 0.9
# Average for false-pos: 6.0 false-neg: 1.8
-# TOTAL: 906073 100.00%
+# TOTAL: 548141 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 71575 99.38%
-# Correctly spam: 31572 76.97%
-# False positives: 450 0.62%
-# False negatives: 9446 23.03%
-# TCR(l=50): 1.283979 SpamRecall: 76.971% SpamPrec: 98.595%
+# Correctly non-spam: 28063 98.72%
+# Correctly spam: 30320 75.85%
+# False positives: 363 1.28%
+# False negatives: 9655 24.15%
+# TCR(l=50): 1.437691 SpamRecall: 75.847% SpamPrec: 98.817%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 567369 98.32%
-# Correctly spam: 125644 38.19%
-# False positives: 9718 1.68%
-# False negatives: 203342 61.81%
-# TCR(l=50): 0.477316 SpamRecall: 38.191% SpamPrec: 92.821%
+# Correctly non-spam: 217244 95.66%
+# Correctly spam: 121277 37.78%
+# False positives: 9859 4.34%
+# False negatives: 199761 62.22%
+# TCR(l=50): 0.463452 SpamRecall: 37.777% SpamPrec: 92.482%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 70795 98.29%
-# Correctly spam: 15686 38.24%
-# False positives: 1230 1.71%
-# False negatives: 25332 61.76%
-# TCR(l=50): 0.472383 SpamRecall: 38.242% SpamPrec: 92.729%
+# Correctly non-spam: 27207 95.71%
+# Correctly spam: 15275 38.21%
+# False positives: 1219 4.29%
+# False negatives: 24700 61.79%
+# TCR(l=50): 0.466725 SpamRecall: 38.211% SpamPrec: 92.609%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1917408&r1=1917407&r2=1917408&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Mon Apr 29 02:49:02 2024
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 211366 40.541% (99.197% of non-spam corpus)
-# Correctly spam: 267820 51.370% (86.875% of spam corpus)
-# False positives: 1711 0.328% (0.803% of nonspam, 204754 weighted)
-# False negatives: 40462 7.761% (13.125% of spam, 55824 weighted)
-# Average score for spam: 12.4 nonspam: -0.6
-# Average for false-pos: 8.3 false-neg: 1.4
-# TOTAL: 521359 100.00%
+# Correctly non-spam: 561954 64.348% (99.535% of non-spam corpus)
+# Correctly spam: 269376 30.846% (87.255% of spam corpus)
+# False positives: 2626 0.301% (0.465% of nonspam, 106503 weighted)
+# False negatives: 39347 4.506% (12.745% of spam, 53400 weighted)
+# Average score for spam: 13.0 nonspam: -1.2
+# Average for false-pos: 7.4 false-neg: 1.4
+# TOTAL: 873303 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 26433 99.10%
-# Correctly spam: 33345 86.70%
-# False positives: 241 0.90%
-# False negatives: 5115 13.30%
-# TCR(l=50): 2.240606 SpamRecall: 86.700% SpamPrec: 99.282%
+# Correctly non-spam: 70127 99.48%
+# Correctly spam: 33661 87.39%
+# False positives: 368 0.52%
+# False negatives: 4859 12.61%
+# TCR(l=50): 1.656133 SpamRecall: 87.386% SpamPrec: 98.919%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 211756 99.38%
-# Correctly spam: 168354 54.61%
-# False positives: 1321 0.62%
-# False negatives: 139928 45.39%
-# TCR(l=50): 1.496674 SpamRecall: 54.610% SpamPrec: 99.221%
+# Correctly non-spam: 562454 99.62%
+# Correctly spam: 168680 54.64%
+# False positives: 2126 0.38%
+# False negatives: 140043 45.36%
+# TCR(l=50): 1.253224 SpamRecall: 54.638% SpamPrec: 98.755%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 26484 99.29%
-# Correctly spam: 21004 54.61%
-# False positives: 190 0.71%
-# False negatives: 17456 45.39%
-# TCR(l=50): 1.426770 SpamRecall: 54.613% SpamPrec: 99.104%
+# Correctly non-spam: 70207 99.59%
+# Correctly spam: 21043 54.63%
+# False positives: 288 0.41%
+# False negatives: 17477 45.37%
+# TCR(l=50): 1.208395 SpamRecall: 54.629% SpamPrec: 98.650%