You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2020/10/29 03:19:16 UTC

svn commit: r1882957 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1882957&r1=1882956&r2=1882957&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Thu Oct 29 03:19:16 2020
@@ -1,219 +1,219 @@
-# Using score set 0 logs for revision 1882870 from:
-# ham-axb-coi-bulk.r1882870.log ham-axb-generic.r1882870.log ham-axb-ham-misc.r1882870.log ham-darxus.r1882870.log ham-ena-week0.r1882870.log ham-ena-week1.r1882870.log ham-ena-week2.r1882870.log ham-ena-week3.r1882870.log ham-ena-week4.r1882870.log ham-giovanni-ham.r1882870.log ham-giovanni-spammy.r1882870.log ham-giovanni-spam.r1882870.log ham-grenier.r1882870.log ham-jbrooks.r1882870.log ham-llanga.r1882870.log ham-mmiroslaw-mails-ham.r1882870.log ham-mmiroslaw-mails-spam.r1882870.log ham-npiazzi.r1882870.log ham-pds.r1882870.log ham-sihde.r1882870.log ham-spamsponge.r1882870.log ham-thendrikx.r1882870.log spam-axb-coi-bulk.r1882870.log spam-axb-generic.r1882870.log spam-axb-ham-misc.r1882870.log spam-darxus.r1882870.log spam-ena-week0.r1882870.log spam-ena-week1.r1882870.log spam-ena-week2.r1882870.log spam-ena-week3.r1882870.log spam-ena-week4.r1882870.log spam-giovanni-ham.r1882870.log spam-giovanni-spammy.r1882870.log spam-giovanni-spam.r1882870.log spam-grenier.r1882870.log 
 spam-jbrooks.r1882870.log spam-llanga.r1882870.log spam-mmiroslaw-mails-ham.r1882870.log spam-mmiroslaw-mails-spam.r1882870.log spam-npiazzi.r1882870.log spam-pds.r1882870.log spam-sihde.r1882870.log spam-spamsponge.r1882870.log spam-thendrikx.r1882870.log
+# Using score set 0 logs for revision 1882909 from:
+# ham-axb-coi-bulk.r1882909.log ham-axb-generic.r1882909.log ham-axb-ham-misc.r1882909.log ham-darxus.r1882909.log ham-ena-week0.r1882909.log ham-ena-week1.r1882909.log ham-ena-week2.r1882909.log ham-ena-week3.r1882909.log ham-ena-week4.r1882909.log ham-giovanni-ham.r1882909.log ham-giovanni-spammy.r1882909.log ham-giovanni-spam.r1882909.log ham-grenier.r1882909.log ham-jbrooks.r1882909.log ham-llanga.r1882909.log ham-mmiroslaw-mails-ham.r1882909.log ham-mmiroslaw-mails-spam.r1882909.log ham-npiazzi.r1882909.log ham-pds.r1882909.log ham-sihde.r1882909.log ham-spamsponge.r1882909.log ham-thendrikx.r1882909.log spam-axb-coi-bulk.r1882909.log spam-axb-generic.r1882909.log spam-axb-ham-misc.r1882909.log spam-darxus.r1882909.log spam-ena-week0.r1882909.log spam-ena-week1.r1882909.log spam-ena-week2.r1882909.log spam-ena-week3.r1882909.log spam-ena-week4.r1882909.log spam-giovanni-ham.r1882909.log spam-giovanni-spammy.r1882909.log spam-giovanni-spam.r1882909.log spam-grenier.r1882909.log 
 spam-jbrooks.r1882909.log spam-llanga.r1882909.log spam-mmiroslaw-mails-ham.r1882909.log spam-mmiroslaw-mails-spam.r1882909.log spam-npiazzi.r1882909.log spam-pds.r1882909.log spam-sihde.r1882909.log spam-spamsponge.r1882909.log spam-thendrikx.r1882909.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
-score AC_FROM_MANY_DOTS              2.999
+score AC_FROM_MANY_DOTS              3.000
 score AC_HTML_NONSENSE_TAGS          1.999
 score AC_POST_EXTRAS                 2.499
-score ADMITS_SPAM                    1.794
-score ADVANCE_FEE_2_NEW_FRM_MNY      2.347
+score ADMITS_SPAM                    2.010
+score ADVANCE_FEE_2_NEW_FRM_MNY      0.270
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              2.601
-score ADVANCE_FEE_3_NEW_FRM_MNY      0.793
-score ADVANCE_FEE_3_NEW_MONEY        2.900
+score ADVANCE_FEE_3_NEW              2.600
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.268
+score ADVANCE_FEE_3_NEW_MONEY        2.899
 score ADVANCE_FEE_4_NEW              2.699
-score ADVANCE_FEE_4_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_4_NEW_MONEY        2.999
-score ADVANCE_FEE_5_NEW              2.130
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        1.172
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.032
+score ADVANCE_FEE_4_NEW_MONEY        3.099
+score ADVANCE_FEE_5_NEW              1.849
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.001 # force non-zero
 score AMAZON_IMG_NOT_RCVD_AMZN       2.499
-score AXB_XMAILER_MIMEOLE_OL_024C2   2.043
-score BITCOIN_DEADLINE               1.901
-score BITCOIN_EXTORT_01              4.503
-score BITCOIN_MALF_HTML              3.500
-score BITCOIN_SPAM_02                2.097
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.982
+score BITCOIN_DEADLINE               2.999
+score BITCOIN_EXTORT_01              4.500
+score BITCOIN_MALF_HTML              3.499
+score BITCOIN_SPAM_02                1.900
 score BITCOIN_SPAM_07                3.499
 score BITCOIN_SPAM_09                1.499
 score BITCOIN_XPRIO                  2.499
-score BITCOIN_YOUR_INFO              2.890
+score BITCOIN_YOUR_INFO              2.786
 score BODY_SINGLE_URI                2.499
 score BODY_URI_ONLY                  0.999
-score BOGUS_MIME_VERSION             3.378
+score BOGUS_MIME_VERSION             3.499
 score BULK_RE_SUSP_NTLD              0.999
-score CK_HELO_DYNAMIC_SPLIT_IP       1.500
-score CK_HELO_GENERIC                0.249
+score CK_HELO_DYNAMIC_SPLIT_IP       1.499
+score CK_HELO_GENERIC                0.250
 score COMPENSATION                   1.499
-score CTE_8BIT_MISMATCH              0.999
+score CTE_8BIT_MISMATCH              1.000
 score CTYPE_NULL                     2.999
 score DATE_IN_FUTURE_96_Q            2.699
-score DEAR_BENEFICIARY               1.713
-score DSN_NO_MIMEVERSION             1.999
-score DX_TEXT_03                     0.699
-score END_FUTURE_EMAILS              2.099
+score DEAR_BENEFICIARY               1.431
+score DSN_NO_MIMEVERSION             2.000
+score DX_TEXT_03                     0.799
+score END_FUTURE_EMAILS              2.098
 score FILL_THIS_FORM                 1.799
-score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           1.284
-score FONT_INVIS_MSGID               0.001
-score FONT_INVIS_POSTEXTRAS          0.001
-score FORGED_RELAY_MUA_TO_MX         4.099
+score FONT_INVIS_DIRECT              0.096
+score FONT_INVIS_LONG_LINE           0.001
+score FONT_INVIS_MSGID               2.499
+score FONT_INVIS_POSTEXTRAS          2.059
+score FORGED_RELAY_MUA_TO_MX         4.100
 score FORM_FRAUD                     0.999
 score FORM_FRAUD_3                   3.099
-score FORM_FRAUD_5                   1.463
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
+score FORM_FRAUD_5                   1.043
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
 score FROM_2_EMAILS_SHORT            1.999
 score FROM_ADDR_WS                   2.999
-score FROM_MISSPACED                 2.000
-score FROM_MISSP_DYNIP               1.512
-score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            2.891
+score FROM_MISSPACED                 1.999
+score FROM_MISSP_DYNIP               1.513
+score FROM_MISSP_EH_MATCH            2.000
+score FROM_MISSP_FREEMAIL            3.099
 score FROM_MISSP_MSFT                3.599
-score FROM_MISSP_PHISH               1.402
-score FROM_MISSP_REPLYTO             1.608
-score FROM_MISSP_TO_UNDISC           2.659
-score FROM_MISSP_USER                3.005
-score FROM_MISSP_XPRIO               2.499
+score FROM_MISSP_REPLYTO             0.625
+score FROM_MISSP_TO_UNDISC           0.941
+score FROM_MISSP_USER                0.001
+score FROM_MISSP_XPRIO               2.126
 score FROM_NAME_EQ_TO_G_DRIVE        0.001
 score FROM_NTLD_LINKBAIT             1.999
-score FROM_NTLD_REPLY_FREEMAIL       1.304
-score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_NTLD_REPLY_FREEMAIL       1.303
+score FROM_SUSPICIOUS_NTLD           0.499
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FSL_CTYPE_WIN1251              3.375
-score FSL_NEW_HELO_USER              1.999
-score FSL_THIS_IS_ADV                3.105
-score FUZZY_WALLET                   2.547
-score GB_BITCOIN_CP                  1.303
-score GB_FREEMAIL_DISPTO             0.246
-score GB_GOOGLE_OBFUS                0.750
-score GOOG_REDIR_HTML_ONLY           2.000
+score FROM_WSP_TRAIL                 1.430
+score FSL_CTYPE_WIN1251              0.001
+score FSL_NEW_HELO_USER              0.001
+score FSL_THIS_IS_ADV                2.889
+score FUZZY_WALLET                   2.505
+score GB_BITCOIN_CP                  0.428
+score GB_FREEMAIL_DISPTO             0.499
+score GB_GOOGLE_OBFUS                0.749
+score GOOG_REDIR_HTML_ONLY           1.999
 score GOOG_REDIR_NORDNS              2.498
 score GOOG_REDIR_SHORT               2.699
-score HDRS_LCASE                     0.099
-score HDRS_LCASE_IMGONLY             0.100
-score HDR_ORDER_FTSDMCXX_DIRECT      1.999
-score HDR_ORDER_FTSDMCXX_NORDNS      0.101
+score HDRS_LCASE                     0.100
+score HDRS_LCASE_IMGONLY             0.099
+score HDR_ORDER_FTSDMCXX_DIRECT      2.000
+score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.249
-score HELO_MISC_IP                   0.250
-score HELO_NO_DOMAIN                 0.140
-score HK_LOTTO                       0.999
+score HELO_MISC_IP                   0.249
+score HELO_NO_DOMAIN                 0.001 # force non-zero
+score HK_LOTTO                       1.000
 score HK_NAME_MR_MRS                 0.999
 score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              0.999
-score HK_RCVD_IP_MULTICAST           1.999
-score HK_SCAM                        0.377
+score HK_RCVD_IP_MULTICAST           1.037
+score HK_SCAM                        1.325
 score HTML_OFF_PAGE                  0.001
 score HTML_SINGLET_MANY              2.499
 score HTML_TEXT_INVISIBLE_FONT       1.999
-score HTML_TEXT_INVISIBLE_STYLE      2.148
+score HTML_TEXT_INVISIBLE_STYLE      1.891
 score IMG_ONLY_FM_DOM_INFO           2.499
-score KB_FORGED_MOZ4                 4.099
+score KB_FORGED_MOZ4                 3.999
 score KHOP_FAKE_EBAY                 0.001
 score KHOP_HELO_FCRDNS               0.400
-score LIST_PRTL_SAME_USER            1.641
-score LONG_HEX_URI                   3.000
-score LONG_IMG_URI                   1.692
-score LONG_INVISIBLE_TEXT            2.999
+score LIST_PRTL_SAME_USER            1.555
+score LONG_HEX_URI                   2.999
+score LONG_IMG_URI                   1.685
+score LONG_INVISIBLE_TEXT            2.733
 score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    1.499
 score LUCRATIVE                      1.999
 score MAY_BE_FORGED                  2.599
 score MILLION_HUNDRED                0.001
-score MILLION_USD                    0.001
-score MIMEOLE_DIRECT_TO_MX           0.001
+score MILLION_USD                    0.051
+score MIMEOLE_DIRECT_TO_MX           0.001 # force non-zero
 score MIME_NO_TEXT                   0.001 # force non-zero
-score MIXED_ES                       3.100
-score MONEY_ATM_CARD                 0.929
-score MONEY_FORM                     1.060
+score MIXED_ES                       3.199
+score MONEY_ATM_CARD                 0.776
+score MONEY_FORM                     1.026
 score MONEY_FORM_SHORT               2.499
-score MONEY_FRAUD_3                  2.991
-score MONEY_FRAUD_5                  2.137
-score MONEY_FRAUD_8                  2.697
+score MONEY_FRAUD_3                  2.989
+score MONEY_FRAUD_5                  2.090
+score MONEY_FRAUD_8                  3.099
 score MONEY_FROM_MISSP               1.999
-score MSGID_DOLLARS_URI_IMG          3.000
+score MSGID_DOLLARS_URI_IMG          2.999
 score MSGID_NOFQDN1                  2.146
-score NICE_REPLY_A                   -0.253
+score NICE_REPLY_A                   -0.376
 score NORDNS_LOW_CONTRAST            1.885
-score NO_FM_NAME_IP_HOSTN            1.960
-score NSL_RCVD_FROM_USER             1.738
-score NSL_RCVD_HELO_USER             0.500
-score NUMBERONLY_BITCOIN_EXP         0.001
-score OFFER_ONLY_AMERICA             1.736
+score NO_FM_NAME_IP_HOSTN            1.959
+score NSL_RCVD_FROM_USER             0.001
+score NSL_RCVD_HELO_USER             0.261
+score NUMBERONLY_BITCOIN_EXP         1.999
+score OBFU_TEXT_ATTACH               0.001
+score OFFER_ONLY_AMERICA             1.999
 score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  1.000
-score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_EMPTYSUBJ_URISHRT          1.500
-score PDS_FREEMAIL_REPLYTO_URISHRT   1.500
+score PDS_BTC_MSGID                  0.999
+score PDS_DBL_URL_TNB_RUNON          2.000
+score PDS_EMPTYSUBJ_URISHRT          1.499
+score PDS_FREEMAIL_REPLYTO_URISHRT   1.499
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              2.399
-score PDS_FROM_NAME_TO_DOMAIN        0.999
-score PDS_HP_HELO_NORDNS             1.000
+score PDS_FROM_2_EMAILS              2.499
+score PDS_FROM_NAME_TO_DOMAIN        1.000
+score PDS_HP_HELO_NORDNS             0.999
 score PDS_NAKED_TO_NUMERO            1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
 score PDS_OTHER_BAD_TLD              1.999
 score PDS_SHORTFWD_URISHRT           1.499
 score PDS_SHORT_SPOOFED_URL          1.999
 score PDS_TINYSUBJ_URISHRT           1.499
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.000
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999
-score PDS_TONAME_EQ_TOLOCAL_SHORT    2.000
-score PDS_TONAME_EQ_TOLOCAL_VSHORT   1.000
-score PDS_TO_EQ_FROM_NAME            1.240
+score PDS_TONAME_EQ_TOLOCAL_SHORT    1.999
+score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.999
+score PDS_TO_EQ_FROM_NAME            0.373
 score PHP_ORIG_SCRIPT                2.499
 score PP_MIME_FAKE_ASCII_TEXT        0.999
-score RATWARE_NO_RDNS                1.537
+score RATWARE_NO_RDNS                1.804
 score RCVD_DOTEDU_SHORT              0.001
 score RCVD_DOTEDU_SUSP               1.999
 score RDNS_NUM_TLD_XM                2.999
-score RISK_FREE                      3.199
+score RISK_FREE                      3.299
 score SENDGRID_REDIR                 1.499
-score SENDGRID_REDIR_PHISH           3.047
-score SERGIO_SUBJECT_VIAGRA01        2.524
+score SENDGRID_REDIR_PHISH           2.551
+score SERGIO_SUBJECT_VIAGRA01        0.727
 score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORTENED_URL_HREF             1.000
-score SHORTENED_URL_SRC              3.099
+score SHORTENED_URL_HREF             0.999
+score SHORTENED_URL_SRC              3.100
 score SHORTENER_SHORT_IMG            0.001
 score SHORT_BODY_G_DRIVE_DYN         1.499
-score SHORT_IMG_SUSP_NTLD            1.118
+score SHORT_IMG_SUSP_NTLD            0.210
 score SHORT_SHORTNER                 1.999
 score SINGLETS_LOW_CONTRAST          0.001
 score SPOOFED_FREEMAIL_NO_RDNS       1.499
-score STATIC_XPRIO_OLE               0.160
-score STOCK_LOW_CONTRAST             0.502
-score STOX_BOUND_090909_B            1.891
-score SUBJ_OBFU_PUNCT_FEW            0.750
-score SUBJ_OBFU_PUNCT_MANY           1.599
+score STATIC_XPRIO_OLE               1.483
+score STOCK_LOW_CONTRAST             1.555
+score STOX_BOUND_090909_B            2.013
+score SUBJ_OBFU_PUNCT_FEW            0.749
+score SUBJ_OBFU_PUNCT_MANY           0.642
 score SUSP_UTF8_WORD_FROM            1.999
-score SUSP_UTF8_WORD_SUBJ            1.999
+score SUSP_UTF8_WORD_SUBJ            2.000
+score TEQF_USR_POLITE                1.999
 score THIS_AD                        1.599
 score THIS_IS_ADV_SUSP_NTLD          0.001
 score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
-score TO_EQ_FM_DIRECT_MX             0.501
-score TO_EQ_FM_DOM_HTML_IMG          0.351
-score TO_EQ_FM_DOM_HTML_ONLY         1.999
-score TO_EQ_FM_HTML_ONLY             0.094
+score TO_EQ_FM_DIRECT_MX             0.751
+score TO_EQ_FM_DOM_HTML_IMG          0.463
+score TO_EQ_FM_DOM_HTML_ONLY         1.469
+score TO_EQ_FM_HTML_ONLY             0.683
 score TO_IN_SUBJ                     0.100
-score TO_NAME_SUBJ_NO_RDNS           2.497
+score TO_NAME_SUBJ_NO_RDNS           2.357
 score TO_NO_BRKTS_FROM_MSSP          2.500
-score TO_NO_BRKTS_HTML_IMG           2.000
+score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_MSFT               2.499
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.499
+score TO_NO_BRKTS_PCNT               2.396
 score TRANSFORM_LIFE                 2.499
 score TVD_RCVD_SPACE_BRACKET         3.999
 score TVD_SPACE_ENCODED              0.001
-score TVD_SPACE_RATIO_MINFP          2.499
-score TVD_SUBJ_NUM_OBFU_MINFP        2.670
-score UPGRADE_MAILBOX                1.399
-score URI_BUFFLY                     1.999
-score URI_DOTEDU                     0.001
+score TVD_SPACE_RATIO_MINFP          2.500
+score TVD_SUBJ_NUM_OBFU_MINFP        3.099
+score UPGRADE_MAILBOX                1.499
+score URI_BUFFLY                     2.000
+score URI_DOTEDU                     1.999
 score URI_GOOGLE_PROXY               2.099
-score URI_IN_URI_10                  2.269
-score URI_IN_URI_5                   2.629
-score URI_ONLY_MSGID_MALF            1.099
-score URI_PHISH                      2.437
-score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    1.936
-score URI_WPADMIN                    3.199
+score URI_IN_URI_10                  1.904
+score URI_IN_URI_5                   2.999
+score URI_ONLY_MSGID_MALF            0.001
+score URI_PHISH                      2.398
+score URI_PHP_REDIR                  3.500
+score URI_TRY_3LD                    1.937
+score URI_WPADMIN                    3.200
 score URI_WP_DIRINDEX                3.499
 score URI_WP_HACKED                  3.499
-score URI_WP_HACKED_2                2.499
-score WIKI_IMG                       3.099
+score URI_WP_HACKED_2                2.500
+score WIKI_IMG                       3.100
 score XPRIO                          2.249
-score XPRIO_SHORT_SUBJ               2.499
-score XPRIO_URL_SHORTNER             0.509
-score YOU_INHERIT                    2.899
+score XPRIO_SHORT_SUBJ               2.357
+score XPRIO_URL_SHORTNER             0.999
+score YOU_INHERIT                    2.799
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
 score AC_SPAMMY_URI_PATTERNS11       1.000
@@ -284,6 +284,7 @@ score HTML_ENTITY_ASCII_TINY         1.0
 score HTML_SHRT_CMNT_OBFU_MANY       1.000
 score LIST_PARTIAL_SHORT_MSG         1.000
 score LIST_PRTL_PUMPDUMP             1.000
+score LOTTO_AGENT                    1.000
 score MALF_HTML_B64                  1.000
 score MALWARE_NORDNS                 1.000
 score MALWARE_PASSWORD               1.000
@@ -311,7 +312,6 @@ score RDNS_NUM_TLD_ATCHNX            1.0
 score SEO_SUSP_NTLD                  1.000
 score STOCK_TIP                      1.000
 score SYSADMIN                       1.000
-score TEQF_USR_POLITE                1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ASC               1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1882957&r1=1882956&r2=1882957&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Thu Oct 29 03:19:16 2020
@@ -1,258 +1,232 @@
 # Using score set 1 logs for revision 1882801 from:
-# ham-net-axb-coi-bulk.r1882801.log ham-net-axb-generic.r1882801.log ham-net-axb-ham-misc.r1882801.log ham-net-darxus.r1882801.log ham-net-ena-week0.r1882801.log ham-net-ena-week1.r1882801.log ham-net-ena-week2.r1882801.log ham-net-ena-week3.r1882801.log ham-net-ena-week4.r1882801.log ham-net-giovanni-ham.r1882801.log ham-net-giovanni-spammy.r1882801.log ham-net-giovanni-spam.r1882801.log ham-net-grenier.r1882801.log ham-net-jbrooks.r1882801.log ham-net-npiazzi.r1882801.log ham-net-pds.r1882801.log ham-net-sihde.r1882801.log ham-net-spamsponge.r1882801.log ham-net-thendrikx.r1882801.log spam-net-axb-coi-bulk.r1882801.log spam-net-axb-generic.r1882801.log spam-net-axb-ham-misc.r1882801.log spam-net-darxus.r1882801.log spam-net-ena-week0.r1882801.log spam-net-ena-week1.r1882801.log spam-net-ena-week2.r1882801.log spam-net-ena-week3.r1882801.log spam-net-ena-week4.r1882801.log spam-net-giovanni-ham.r1882801.log spam-net-giovanni-spammy.r1882801.log spam-net-giovanni-spam.r1882801.log s
 pam-net-grenier.r1882801.log spam-net-jbrooks.r1882801.log spam-net-npiazzi.r1882801.log spam-net-pds.r1882801.log spam-net-sihde.r1882801.log spam-net-spamsponge.r1882801.log spam-net-thendrikx.r1882801.log
+# ham-net-axb-coi-bulk.r1882801.log ham-net-axb-generic.r1882801.log ham-net-axb-ham-misc.r1882801.log ham-net-darxus.r1882801.log ham-net-ena-week0.r1882801.log ham-net-ena-week1.r1882801.log ham-net-ena-week2.r1882801.log ham-net-ena-week3.r1882801.log ham-net-ena-week4.r1882801.log ham-net-giovanni-ham.r1882801.log ham-net-giovanni-spammy.r1882801.log ham-net-giovanni-spam.r1882801.log ham-net-grenier.r1882801.log ham-net-jbrooks.r1882801.log ham-net-llanga.r1882801.log ham-net-npiazzi.r1882801.log ham-net-pds.r1882801.log ham-net-sihde.r1882801.log ham-net-spamsponge.r1882801.log ham-net-thendrikx.r1882801.log spam-net-axb-coi-bulk.r1882801.log spam-net-axb-generic.r1882801.log spam-net-axb-ham-misc.r1882801.log spam-net-darxus.r1882801.log spam-net-ena-week0.r1882801.log spam-net-ena-week1.r1882801.log spam-net-ena-week2.r1882801.log spam-net-ena-week3.r1882801.log spam-net-ena-week4.r1882801.log spam-net-giovanni-ham.r1882801.log spam-net-giovanni-spammy.r1882801.log spam-net-
 giovanni-spam.r1882801.log spam-net-grenier.r1882801.log spam-net-jbrooks.r1882801.log spam-net-llanga.r1882801.log spam-net-npiazzi.r1882801.log spam-net-pds.r1882801.log spam-net-sihde.r1882801.log spam-net-spamsponge.r1882801.log spam-net-thendrikx.r1882801.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
-score AC_FROM_MANY_DOTS              1.924
+score AC_FROM_MANY_DOTS              2.436
 score AC_HTML_NONSENSE_TAGS          1.999
 score AC_POST_EXTRAS                 0.001
-score ADMITS_SPAM                    1.058
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.565
+score ADMITS_SPAM                    1.060
+score ADVANCE_FEE_2_NEW_FRM_MNY      2.456
 score ADVANCE_FEE_2_NEW_MONEY        1.999
 score ADVANCE_FEE_3_NEW              3.469
-score ADVANCE_FEE_3_NEW_FRM_MNY      1.430
-score ADVANCE_FEE_3_NEW_MONEY        0.001
-score ADVANCE_FEE_4_NEW              2.399
-score ADVANCE_FEE_4_NEW_FRM_MNY      1.767
-score ADVANCE_FEE_4_NEW_MONEY        2.699
-score ADVANCE_FEE_5_NEW              2.699
+score ADVANCE_FEE_3_NEW_FRM_MNY      1.260
+score ADVANCE_FEE_3_NEW_MONEY        1.739
+score ADVANCE_FEE_4_NEW              2.599
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_4_NEW_MONEY        2.899
+score ADVANCE_FEE_5_NEW              2.799
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        2.731
-score AMAZON_IMG_NOT_RCVD_AMZN       2.499
-score APP_DEVELOPMENT_NORDNS         1.999
+score AMAZON_IMG_NOT_RCVD_AMZN       2.055
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5   0.463
-score BITCOIN_DEADLINE               1.457
-score BITCOIN_EXTORT_01              1.873
+score BITCOIN_DEADLINE               2.666
+score BITCOIN_EXTORT_01              2.326
 score BITCOIN_MALF_HTML              3.499
-score BITCOIN_SPAM_02                0.001
-score BITCOIN_SPAM_05                2.230
-score BITCOIN_SPAM_07                3.499
+score BITCOIN_SPAM_02                0.100
+score BITCOIN_SPAM_05                1.670
+score BITCOIN_SPAM_07                3.500
 score BITCOIN_SPAM_09                1.499
-score BITCOIN_XPRIO                  1.014
-score BITCOIN_YOUR_INFO              1.774
-score BODY_SINGLE_URI                2.427
+score BITCOIN_XPRIO                  1.000
+score BITCOIN_YOUR_INFO              1.735
+score BODY_SINGLE_URI                1.237
 score BODY_URI_ONLY                  0.001
 score BOGUS_MIME_VERSION             3.499
-score CK_HELO_DYNAMIC_SPLIT_IP       0.001 # force non-zero
+score CK_HELO_DYNAMIC_SPLIT_IP       1.499
 score CK_HELO_GENERIC                0.249
 score CTE_8BIT_MISMATCH              0.999
-score CTYPE_NULL                     2.699
-score DATE_IN_FUTURE_96_Q            2.399
-score DATE_IN_FUTURE_Q_PLUS          2.199
-score DEAR_BENEFICIARY               0.001
+score CTYPE_NULL                     2.827
+score DATE_IN_FUTURE_96_Q            2.192
+score DEAR_BENEFICIARY               1.374
 score DKIMWL_BL                      2.999
 score DKIMWL_WL_HIGH                 -0.001
-score DKIMWL_WL_MED                  -0.001
+score DKIMWL_WL_MED                  -0.001 # force non-zero
 score DSN_NO_MIMEVERSION             1.999
-score DX_TEXT_03                     0.100
-score END_FUTURE_EMAILS              0.964
-score FBI_MONEY                      1.679
-score FBI_SPOOF                      0.677
+score DX_TEXT_03                     0.899
 score FILL_THIS_FORM                 0.001
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           2.299
-score FONT_INVIS_MSGID               0.001
-score FONT_INVIS_POSTEXTRAS          0.001
-score FORGED_RELAY_MUA_TO_MX         3.827
-score FORGED_SPF_HELO                1.499
-score FORM_FRAUD                     0.001
-score FORM_FRAUD_3                   2.699
-score FORM_FRAUD_5                   3.199
-score FOUND_YOU                      3.249
+score FONT_INVIS_LONG_LINE           0.001
+score FONT_INVIS_MSGID               0.570
+score FONT_INVIS_POSTEXTRAS          0.001 # force non-zero
+score FORGED_RELAY_MUA_TO_MX         4.000
+score FORGED_SPF_HELO                2.000
+score FORM_FRAUD                     0.545
+score FORM_FRAUD_3                   2.899
+score FORM_FRAUD_5                   1.768
 score FREEMAIL_FORGED_FROMDOMAIN     0.250
-score FROM_2_EMAILS_SHORT            1.999
-score FROM_ADDR_WS                   2.579
-score FROM_FMBLA_NEWDOM              1.499
+score FROM_2_EMAILS_SHORT            1.011
+score FROM_ADDR_WS                   0.642
+score FROM_FMBLA_NEWDOM              1.500
 score FROM_FMBLA_NEWDOM14            0.999
 score FROM_FMBLA_NEWDOM28            0.799
 score FROM_GOV_DKIM_AU               -0.001
-score FROM_GOV_SPOOF                 0.999
+score FROM_GOV_SPOOF                 1.000
 score FROM_MISSPACED                 0.001
-score FROM_MISSP_DYNIP               1.235
+score FROM_MISSP_DYNIP               0.032
 score FROM_MISSP_EH_MATCH            0.001
-score FROM_MISSP_FREEMAIL            2.999
-score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_PHISH               1.264
-score FROM_MISSP_REPLYTO             0.001
-score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_TO_UNDISC           0.917
+score FROM_MISSP_FREEMAIL            2.710
+score FROM_MISSP_MSFT                0.632
+score FROM_MISSP_REPLYTO             0.001 # force non-zero
+score FROM_MISSP_SPF_FAIL            0.735
+score FROM_MISSP_TO_UNDISC           1.835
 score FROM_MISSP_USER                0.001
-score FROM_MISSP_XPRIO               0.001 # force non-zero
-score FROM_NAME_EQ_TO_G_DRIVE        1.296
-score FROM_NEWDOM_BTC                1.573
-score FROM_NTLD_LINKBAIT             0.355
-score FROM_NTLD_REPLY_FREEMAIL       0.005
-score FROM_PAYPAL_SPOOF              0.073
-score FROM_SUSPICIOUS_NTLD           0.500
-score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FROM_WORDY                     1.442
-score FROM_WSP_TRAIL                 2.199
-score FSL_BULK_SIG                   0.001 # force non-zero
+score FROM_MISSP_XPRIO               2.499
+score FROM_NAME_EQ_TO_G_DRIVE        0.001
+score FROM_NTLD_LINKBAIT             1.739
+score FROM_NTLD_REPLY_FREEMAIL       1.999
+score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_SUSPICIOUS_NTLD_FP        0.001 # force non-zero
+score FSL_BULK_SIG                   0.001
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
-score FSL_THIS_IS_ADV                0.001
-score FUZZY_BITCOIN                  1.899
-score FUZZY_CLICK_HERE               2.199
-score FUZZY_WALLET                   2.399
-score GB_BITCOIN_CP                  2.980
+score FSL_THIS_IS_ADV                0.536
+score FUZZY_WALLET                   2.699
+score GB_BITCOIN_CP                  2.039
 score GB_FREEMAIL_DISPTO             0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
-score GB_GOOGLE_OBFUS                0.621
+score GB_GOOGLE_OBFUS                0.630
 score GOOG_REDIR_HTML_ONLY           1.999
-score GOOG_REDIR_NORDNS              0.827
-score GOOG_REDIR_SHORT               2.299
+score GOOG_REDIR_NORDNS              1.997
+score GOOG_REDIR_SHORT               2.600
 score HDRS_LCASE                     0.100
-score HDRS_LCASE_IMGONLY             0.100
-score HDR_ORDER_FTSDMCXX_DIRECT      1.711
+score HDRS_LCASE_IMGONLY             0.099
+score HDR_ORDER_FTSDMCXX_DIRECT      1.816
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.250
+score HEADER_FROM_DIFFERENT_DOMAINS  0.249
 score HELO_MISC_IP                   0.001
-score HELO_NO_DOMAIN                 0.166
+score HELO_NO_DOMAIN                 1.228
 score HK_LOTTO                       0.999
 score HK_NAME_MR_MRS                 1.000
-score HK_RANDOM_FROM                 0.001
+score HK_RANDOM_FROM                 0.021
 score HK_RANDOM_REPLYTO              0.999
-score HK_RCVD_IP_MULTICAST           1.999
-score HK_SCAM                        1.999
-score HK_WIN                         0.001
-score HOSTED_IMG_DIRECT_MX           1.724
-score HOSTED_IMG_FREEM               3.449
+score HK_RCVD_IP_MULTICAST           0.490
+score HK_SCAM                        1.202
+score HOSTED_IMG_DIRECT_MX           2.632
 score HTML_OFF_PAGE                  0.001
-score HTML_SINGLET_MANY              2.371
+score HTML_SINGLET_MANY              0.447
 score HTML_TEXT_INVISIBLE_FONT       1.999
-score HTML_TEXT_INVISIBLE_STYLE      2.628
-score IMG_ONLY_FM_DOM_INFO           2.445
-score KB_FORGED_MOZ4                 1.964
-score KHOP_FAKE_EBAY                 0.572
-score KHOP_HELO_FCRDNS               0.400
-score LIST_PARTIAL_SHORT_MSG         0.329
-score LIST_PRTL_SAME_USER            1.675
-score LONG_HEX_URI                   1.583
-score LONG_IMG_URI                   0.017
-score LONG_INVISIBLE_TEXT            1.936
+score HTML_TEXT_INVISIBLE_STYLE      3.499
+score IMG_ONLY_FM_DOM_INFO           2.499
+score KB_FORGED_MOZ4                 3.733
+score KHOP_FAKE_EBAY                 0.471
+score KHOP_HELO_FCRDNS               0.276
+score LIST_PRTL_SAME_USER            2.999
+score LONG_HEX_URI                   2.693
+score LONG_IMG_URI                   0.001
+score LONG_INVISIBLE_TEXT            1.536
 score LOTS_OF_MONEY                  0.010
 score LOTTO_AGENT                    1.499
 score LUCRATIVE                      1.999
-score MANY_SPAN_IN_TEXT              2.199
-score MAY_BE_FORGED                  0.001 # force non-zero
-score MILLION_HUNDRED                0.001
-score MILLION_USD                    0.001
-score MIMEOLE_DIRECT_TO_MX           0.001
+score MILLION_HUNDRED                0.197
+score MILLION_USD                    0.395
+score MIMEOLE_DIRECT_TO_MX           0.001 # force non-zero
 score MIME_NO_TEXT                   0.001
-score MIXED_ES                       0.652
-score MONEY_ATM_CARD                 2.799
-score MONEY_FORM                     2.485
-score MONEY_FORM_SHORT               0.001
-score MONEY_FRAUD_3                  1.968
-score MONEY_FRAUD_5                  0.001
-score MONEY_FRAUD_8                  0.001
-score MONEY_FROM_MISSP               0.001
+score MIXED_ES                       2.644
+score MONEY_ATM_CARD                 0.415
+score MONEY_FORM                     1.937
+score MONEY_FORM_SHORT               2.499
+score MONEY_FRAUD_3                  1.973
+score MONEY_FRAUD_5                  0.236
+score MONEY_FRAUD_8                  2.338
+score MONEY_FROM_MISSP               1.999
 score MSGID_DOLLARS_URI_IMG          2.999
-score MSGID_NOFQDN1                  1.528
-score NICE_REPLY_A                   -0.921
-score NORDNS_LOW_CONTRAST            1.251
-score NO_FM_NAME_IP_HOSTN            0.600
+score MSGID_NOFQDN1                  1.715
+score NICE_REPLY_A                   -0.261
+score NORDNS_LOW_CONTRAST            1.887
+score NO_FM_NAME_IP_HOSTN            1.908
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.155
-score NUMBERONLY_BITCOIN_EXP         0.117
+score NSL_RCVD_HELO_USER             2.184
+score NUMBERONLY_BITCOIN_EXP         0.001
 score OFFER_ONLY_AMERICA             0.001
-score PDS_BTC_ID                     0.500
-score PDS_BTC_MSGID                  0.001 # force non-zero
-score PDS_BTC_NTLD                   1.847
+score PDS_BTC_ID                     0.499
+score PDS_BTC_MSGID                  0.001
 score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_EMPTYSUBJ_URISHRT          0.018
+score PDS_EMPTYSUBJ_URISHRT          0.001
 score PDS_FREEMAIL_REPLYTO_URISHRT   1.499
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              2.099
+score PDS_FROM_2_EMAILS              2.499
 score PDS_FROM_NAME_TO_DOMAIN        0.999
 score PDS_HP_HELO_NORDNS             0.001
-score PDS_NAKED_TO_NUMERO            1.778
+score PDS_NAKED_TO_NUMERO            1.999
 score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
-score PDS_OTHER_BAD_TLD              1.999
+score PDS_OTHER_BAD_TLD              1.559
 score PDS_SHORTFWD_URISHRT           1.499
 score PDS_SHORT_SPOOFED_URL          1.999
-score PDS_TINYSUBJ_URISHRT           1.412
+score PDS_TINYSUBJ_URISHRT           1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999
 score PDS_TONAME_EQ_TOLOCAL_SHORT    1.999
 score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.999
-score PDS_TO_EQ_FROM_NAME            3.157
-score PHP_ORIG_SCRIPT                1.626
-score PP_MIME_FAKE_ASCII_TEXT        0.313
-score RAND_HEADER_MANY               2.312
-score RATWARE_NO_RDNS                2.701
-score RCVD_DOTEDU_SHORT              0.001
-score RCVD_DOTEDU_SUSP               0.001
-score RCVD_DOTEDU_SUSP_URI           0.001
+score PDS_TO_EQ_FROM_NAME            0.001
+score PHP_ORIG_SCRIPT                2.499
+score PP_MIME_FAKE_ASCII_TEXT        0.999
+score RATWARE_NO_RDNS                1.242
+score RCVD_DOTEDU_SHORT              0.001 # force non-zero
+score RCVD_DOTEDU_SUSP               1.999
 score RCVD_IN_MSPIKE_H2              -0.001
-score RDNS_NUM_TLD_ATCHNX            2.079
-score RDNS_NUM_TLD_XM                1.797
-score RISK_FREE                      2.899
+score RDNS_NUM_TLD_XM                1.573
+score RISK_FREE                      3.099
 score SENDGRID_REDIR                 1.499
-score SENDGRID_REDIR_PHISH           2.341
-score SERGIO_SUBJECT_VIAGRA01        2.726
-score SHOPIFY_IMG_NOT_RCVD_SFY       0.001 # force non-zero
-score SHORTENED_URL_HREF             1.000
-score SHORTENED_URL_SRC              2.799
-score SHORTENER_SHORT_IMG            1.300
-score SHORT_BODY_G_DRIVE_DYN         0.767
-score SHORT_IMG_SUSP_NTLD            0.375
+score SENDGRID_REDIR_PHISH           1.528
+score SERGIO_SUBJECT_VIAGRA01        2.041
+score SHOPIFY_IMG_NOT_RCVD_SFY       0.001
+score SHORTENED_URL_HREF             0.999
+score SHORTENED_URL_SRC              3.000
+score SHORTENER_SHORT_IMG            1.614
+score SHORT_BODY_G_DRIVE_DYN         0.672
+score SHORT_IMG_SUSP_NTLD            1.328
 score SHORT_SHORTNER                 1.999
 score SINGLETS_LOW_CONTRAST          0.001
-score SPOOFED_FREEMAIL               1.664
-score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOFED_FREEM_REPTO            2.332
-score SPOOFED_FREEM_REPTO_CHN        1.433
-score STATIC_XPRIO_OLE               1.939
+score SPOOFED_FREEMAIL               1.999
+score SPOOFED_FREEMAIL_NO_RDNS       0.523
+score SPOOFED_FREEM_REPTO            2.001
+score SPOOFED_FREEM_REPTO_CHN        1.891
+score STATIC_XPRIO_OLE               1.992
 score STOCK_LOW_CONTRAST             0.001
-score STOX_BOUND_090909_B            2.200
-score SUBJ_OBFU_PUNCT_FEW            0.749
-score SUBJ_OBFU_PUNCT_MANY           0.438
-score SUSP_UTF8_WORD_FROM            0.001
+score STOX_BOUND_090909_B            1.826
+score SUBJ_OBFU_PUNCT_FEW            0.750
+score SUBJ_OBFU_PUNCT_MANY           0.276
+score SUSP_UTF8_WORD_FROM            2.000
 score SUSP_UTF8_WORD_SUBJ            1.999
-score TEQF_USR_POLITE                0.765
-score THIS_AD                        1.299
+score THIS_AD                        1.599
 score THIS_IS_ADV_SUSP_NTLD          0.001
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    0.001
-score TO_EQ_FM_DIRECT_MX             2.080
-score TO_EQ_FM_DOM_HTML_IMG          0.300
-score TO_EQ_FM_DOM_HTML_ONLY         1.078
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    0.205
+score TO_EQ_FM_DIRECT_MX             0.001
+score TO_EQ_FM_DOM_HTML_IMG          0.001
+score TO_EQ_FM_DOM_HTML_ONLY         1.704
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_HTML_ONLY             0.570
-score TO_EQ_FM_SPF_FAIL              0.293
+score TO_EQ_FM_HTML_ONLY             0.001
+score TO_EQ_FM_SPF_FAIL              0.834
 score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.922
-score TO_NO_BRKTS_FROM_MSSP          2.500
-score TO_NO_BRKTS_HTML_IMG           1.284
-score TO_NO_BRKTS_HTML_ONLY          1.999
+score TO_NAME_SUBJ_NO_RDNS           1.866
+score TO_NO_BRKTS_FROM_MSSP          2.499
+score TO_NO_BRKTS_HTML_IMG           1.387
+score TO_NO_BRKTS_HTML_ONLY          2.000
 score TO_NO_BRKTS_MSFT               2.499
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.398
-score TRANSFORM_LIFE                 2.500
-score TVD_RCVD_SPACE_BRACKET         2.408
-score TVD_SPACE_ENCODED              1.081
-score TVD_SPACE_RATIO_MINFP          1.320
-score TVD_SUBJ_NUM_OBFU_MINFP        1.687
-score UPGRADE_MAILBOX                0.001
+score TO_NO_BRKTS_PCNT               2.399
+score TRANSFORM_LIFE                 0.461
+score TVD_RCVD_SPACE_BRACKET         3.229
+score TVD_SPACE_ENCODED              0.001
+score TVD_SPACE_RATIO_MINFP          2.499
+score TVD_SUBJ_NUM_OBFU_MINFP        2.524
+score UPGRADE_MAILBOX                1.629
 score URI_BUFFLY                     1.999
 score URI_DOTEDU                     0.001
-score URI_GOOGLE_PROXY               0.627
-score URI_IN_URI_10                  3.930
-score URI_IN_URI_5                   2.546
+score URI_GOOGLE_PROXY               2.099
+score URI_IN_URI_10                  3.006
+score URI_IN_URI_5                   1.761
 score URI_ONLY_MSGID_MALF            0.001
-score URI_PHISH                      2.999
-score URI_PHP_REDIR                  3.499
+score URI_PHISH                      3.370
+score URI_PHP_REDIR                  3.500
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.405
-score URI_WP_DIRINDEX                1.152
+score URI_WPADMIN                    2.505
+score URI_WP_DIRINDEX                3.499
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score WIKI_IMG                       2.999
-score XPRIO                          1.853
-score XPRIO_SHORT_SUBJ               0.009
+score WIKI_IMG                       2.215
+score XPRIO                          1.161
+score XPRIO_SHORT_SUBJ               0.001
 score XPRIO_URL_SHORTNER             0.999
-score YOU_INHERIT                    2.699
+score YOU_INHERIT                    2.799
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
 score AC_SPAMMY_URI_PATTERNS11       1.000
@@ -266,6 +240,7 @@ score ADVANCE_FEE_2_NEW_FORM         1.0
 score AD_PREFS                       0.250
 score ALIBABA_IMG_NOT_RCVD_ALI       1.000
 score APP_DEVELOPMENT_FREEM          1.000
+score APP_DEVELOPMENT_NORDNS         1.000
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_MALWARE                1.000
@@ -294,18 +269,26 @@ score DKIMWL_WL_MEDHI                -1.
 score DOTGOV_IMAGE                   1.000
 score EBAY_IMG_NOT_RCVD_EBAY         1.000
 score ENCRYPTED_MESSAGE              -1.000
+score END_FUTURE_EMAILS              1.000
+score FBI_MONEY                      1.000
+score FBI_SPOOF                      1.000
 score FONT_INVIS_DOTGOV              1.000
 score FORM_LOW_CONTRAST              1.000
+score FOUND_YOU                      1.000
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
 score FROM_BANK_NOAUTH               1.000
 score FROM_FMBLA_NDBLOCKED           0.001
 score FROM_GOV_REPLYTO_FREEMAIL      1.000
+score FROM_NEWDOM_BTC                1.000
 score FROM_NUMBERO_NEWDOMAIN         1.000
 score FROM_NUMERIC_TLD               1.000
+score FROM_PAYPAL_SPOOF              1.000
+score FROM_WORDY                     1.000
 score FROM_WORDY_SHORT               1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
 score GB_LINKED_IMG_NOT_RCVD_LINK    1.000
 score GB_WP_FILELINK                 1.000
@@ -316,11 +299,14 @@ score GOOG_MALWARE_DNLD              1.0
 score HDRS_MISSP                     1.000
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
+score HK_WIN                         1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
+score HOSTED_IMG_FREEM               1.000
 score HOSTED_IMG_MULTI               1.000
 score HTML_ENTITY_ASCII              1.000
 score HTML_ENTITY_ASCII_TINY         1.000
 score HTML_SHRT_CMNT_OBFU_MANY       1.000
+score LIST_PARTIAL_SHORT_MSG         1.000
 score LIST_PRTL_PUMPDUMP             1.000
 score MALF_HTML_B64                  1.000
 score MALWARE_NORDNS                 1.000
@@ -334,6 +320,7 @@ score MONEY_FROM_41                  1.0
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score OBFU_BITCOIN                   1.000
+score PDS_BTC_NTLD                   1.000
 score PDS_HELO_SPF_FAIL              1.000
 score PHOTO_EDITING_DIRECT           1.000
 score PHOTO_EDITING_FREEM            1.000
@@ -343,10 +330,14 @@ score PP_TOO_MUCH_UNICODE02          0.5
 score PP_TOO_MUCH_UNICODE05          1.000
 score PUMPDUMP                       1.000
 score PUMPDUMP_MULTI                 1.000
+score RAND_HEADER_MANY               1.000
+score RCVD_DOTEDU_SUSP_URI           1.000
+score RDNS_NUM_TLD_ATCHNX            1.000
 score SEO_SUSP_NTLD                  1.000
 score SPOOFED_FREEM_REPTO_RUS        1.000
 score STOCK_TIP                      1.000
 score SYSADMIN                       1.000
+score TEQF_USR_POLITE                1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ASC               1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1882957&r1=1882956&r2=1882957&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Thu Oct 29 03:19:16 2020
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 844122  64.384%  (99.735% of non-spam corpus)
-# Correctly spam:     350552  26.738%  (75.434% of spam corpus)
-# False positives:      2240  0.171%  (0.265% of nonspam,  40054 weighted)
-# False negatives:    114163  8.708%  (24.566% of spam, 260134 weighted)
-# Average score for spam:  11.8    nonspam: 0.5
-# Average for false-pos:   6.5  false-neg: 2.3
-# TOTAL:              1311077  100.00%
+# Correctly non-spam: 861729  64.279%  (99.780% of non-spam corpus)
+# Correctly spam:     362614  27.049%  (76.023% of spam corpus)
+# False positives:      1897  0.142%  (0.220% of nonspam,  34648 weighted)
+# False negatives:    114364  8.531%  (23.977% of spam, 258142 weighted)
+# Average score for spam:  11.6    nonspam: 0.5
+# Average for false-pos:   6.6  false-neg: 2.3
+# TOTAL:              1340604  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 105218  99.72%
-# Correctly spam:      43953  75.82%
-# False positives:       294  0.28%
-# False negatives:     14016  24.18%
-# TCR(l=50): 2.018700  SpamRecall: 75.822%  SpamPrec: 99.336%
+# Correctly non-spam: 107493  99.75%
+# Correctly spam:      45445  76.37%
+# False positives:       270  0.25%
+# False negatives:     14060  23.63%
+# TCR(l=50): 2.159107  SpamRecall: 76.372%  SpamPrec: 99.409%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 836725  98.86%
-# Correctly spam:     229861  49.46%
-# False positives:      9637  1.14%
-# False negatives:    234854  50.54%
-# TCR(l=50): 0.648406  SpamRecall: 49.463%  SpamPrec: 95.976%
+# Correctly non-spam: 853656  98.85%
+# Correctly spam:     230291  48.28%
+# False positives:      9970  1.15%
+# False negatives:    246687  51.72%
+# TCR(l=50): 0.640078  SpamRecall: 48.281%  SpamPrec: 95.850%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 104265  98.82%
-# Correctly spam:      28545  49.24%
-# False positives:      1247  1.18%
-# False negatives:     29424  50.76%
-# TCR(l=50): 0.631649  SpamRecall: 49.242%  SpamPrec: 95.814%
+# Correctly non-spam: 106507  98.83%
+# Correctly spam:      28785  48.37%
+# False positives:      1256  1.17%
+# False negatives:     30720  51.63%
+# TCR(l=50): 0.636281  SpamRecall: 48.374%  SpamPrec: 95.819%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1882957&r1=1882956&r2=1882957&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Thu Oct 29 03:19:16 2020
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 193935  30.057%  (99.365% of non-spam corpus)
-# Correctly spam:     388104  60.150%  (86.234% of spam corpus)
-# False positives:      1240  0.192%  (0.635% of nonspam, 214783 weighted)
-# False negatives:     61953  9.602%  (13.766% of spam,  94843 weighted)
-# Average score for spam:  15.3    nonspam: -0.6
-# Average for false-pos:   7.5  false-neg: 1.5
-# TOTAL:              645232  100.00%
+# Correctly non-spam: 865821  65.554%  (99.784% of non-spam corpus)
+# Correctly spam:     391151  29.615%  (86.330% of spam corpus)
+# False positives:      1873  0.142%  (0.216% of nonspam,  69322 weighted)
+# False negatives:     61936  4.689%  (13.670% of spam,  96014 weighted)
+# Average score for spam:  15.4    nonspam: -1.1
+# Average for false-pos:   7.1  false-neg: 1.6
+# TOTAL:              1320781  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24277  99.37%
-# Correctly spam:      48399  86.24%
-# False positives:       153  0.63%
-# False negatives:      7720  13.76%
-# TCR(l=50): 3.651204  SpamRecall: 86.244%  SpamPrec: 99.685%
+# Correctly non-spam: 107160  98.95%
+# Correctly spam:      48683  86.19%
+# False positives:      1132  1.05%
+# False negatives:      7802  13.81%
+# TCR(l=50): 0.877069  SpamRecall: 86.187%  SpamPrec: 97.728%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 192724  98.74%
-# Correctly spam:     276879  61.52%
-# False positives:      2451  1.26%
-# False negatives:    173178  38.48%
-# TCR(l=50): 1.521861  SpamRecall: 61.521%  SpamPrec: 99.123%
+# Correctly non-spam: 864965  99.69%
+# Correctly spam:     277912  61.34%
+# False positives:      2729  0.31%
+# False negatives:    175175  38.66%
+# TCR(l=50): 1.453949  SpamRecall: 61.337%  SpamPrec: 99.028%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24127  98.76%
-# Correctly spam:      34470  61.42%
-# False positives:       303  1.24%
-# False negatives:     21649  38.58%
-# TCR(l=50): 1.525014  SpamRecall: 61.423%  SpamPrec: 99.129%
+# Correctly non-spam: 107955  99.69%
+# Correctly spam:      34485  61.05%
+# False positives:       337  0.31%
+# False negatives:     22000  38.95%
+# TCR(l=50): 1.453925  SpamRecall: 61.052%  SpamPrec: 99.032%