You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2018/11/09 03:59:41 UTC
svn commit: r1846208 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Fri Nov 9 03:59:41 2018
New Revision: 1846208
URL: http://svn.apache.org/viewvc?rev=1846208&view=rev
Log:
updated scores for revision 1846103 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Fri Nov 9 03:59:41 2018
@@ -10,108 +10,116 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
+score ADMITS_SPAM 0.001 0.001 0.001 0.001
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_MONEY 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_3_NEW 3.500 3.499 3.500 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 1.603 0.001 1.603 0.001
-score ADVANCE_FEE_3_NEW_MONEY 1.404 2.239 1.404 2.239
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.123 0.001 0.123 0.001
+score ADVANCE_FEE_2_NEW_MONEY 1.377 0.001 1.377 0.001
+score ADVANCE_FEE_3_NEW 3.499 3.496 3.499 3.496
+score ADVANCE_FEE_3_NEW_MONEY 2.829 2.077 2.829 2.077
+score ADVANCE_FEE_4_NEW 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.660 0.001 0.660 0.001
+score ADVANCE_FEE_5_NEW_MONEY 1.843 2.525 1.843 2.525
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
-score APP_DEVELOPMENT_NORDNS 1.885 1.999 1.885 1.999
+score APP_DEVELOPMENT_NORDNS 1.885 1.997 1.885 1.997
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
+score BIGNUM_EMAILS 2.999 0.001 2.999 0.001
score BITCOIN_EXTORT_01 4.999 0.001 4.999 0.001
-score BITCOIN_MALWARE 2.999 2.999 2.999 2.999
-score BITCOIN_PAY_ME 2.499 2.499 2.499 2.499
-score BITCOIN_SPAM_01 0.577 1.262 0.577 1.262
-score BITCOIN_SPAM_02 2.499 2.500 2.499 2.500
-score BITCOIN_SPAM_03 1.499 1.499 1.499 1.499
-score BITCOIN_SPAM_04 1.499 1.500 1.499 1.500
+score BITCOIN_MALWARE 2.999 2.996 2.999 2.996
+score BITCOIN_PAY_ME 2.499 2.497 2.499 2.497
+score BITCOIN_SPAM_01 0.001 1.260 0.001 1.260
+score BITCOIN_SPAM_02 2.500 2.497 2.500 2.497
+score BITCOIN_SPAM_03 1.500 1.498 1.500 1.498
+score BITCOIN_SPAM_04 1.499 1.498 1.499 1.498
score BITCOIN_SPAM_05 2.499 1.000 2.499 1.000
-score BITCOIN_SPAM_06 1.011 0.973 1.011 0.973
-score BITCOIN_SPAM_07 1.499 0.001 1.499 0.001
-score BITCOIN_SPAM_08 1.500 0.001 1.500 0.001
-score BODY_SINGLE_WORD 0.400 2.389 0.400 2.389
-score BODY_URI_ONLY 0.001 0.999 0.001 0.999
-score BOGUS_MSM_HDRS 1.000 1.000 1.000 1.000
+score BITCOIN_SPAM_06 0.644 1.336 0.644 1.336
+score BITCOIN_SPAM_07 1.500 0.001 1.500 0.001
+score BITCOIN_SPAM_08 1.499 0.001 1.499 0.001
+score BITCOIN_SPAM_09 1.195 0.001 1.195 0.001
+score BODY_SINGLE_URI 0.001 1.309 0.001 1.309
+score BODY_SINGLE_WORD 1.982 1.078 1.982 1.078
+score BODY_URI_ONLY 0.001 0.998 0.001 0.998
+score BOGUS_MSM_HDRS 2.875 1.000 2.875 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000
-score CK_HELO_DYNAMIC_SPLIT_IP 0.355 0.001 0.355 0.001
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500 0.001 1.500 0.001
score CK_HELO_GENERIC 0.250 0.001 0.250 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 3.399 0.001 3.399 0.001
-score DKIMWL_BL 1.583 0.001 1.583 0.001
-score DKIMWL_WL_HIGH 0.001 -0.972 0.001 -0.972
-score DKIMWL_WL_MED 0.001 -0.127 0.001 -0.127
+score DATE_IN_FUTURE_96_Q 3.099 2.896 3.099 2.896
+score DKIMWL_BL 1.388 0.001 1.388 0.001
+score DKIMWL_WL_HIGH 0.001 -1.133 0.001 -1.133
+score DKIMWL_WL_MED 0.001 -0.140 0.001 -0.140
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
-score FBI_MONEY 1.756 0.904 1.756 0.904
-score FBI_SPOOF 0.121 1.168 0.121 1.168
+score FBI_MONEY 1.167 1.075 1.167 1.075
+score FBI_SPOOF 0.365 1.979 0.365 1.979
score FILL_THIS_FORM 0.001 0.001 0.001 0.001
-score FORM_FRAUD 0.001 1.000 0.001 1.000
-score FORM_FRAUD_3 2.699 0.001 2.699 0.001
+score FORM_FRAUD 0.090 1.000 0.090 1.000
+score FORM_FRAUD_3 1.542 0.001 1.542 0.001
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 3.250 3.249 3.250 3.249
-score FREEMAIL_DISPTO 0.250 0.249 0.250 0.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.249 0.001 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749 3.749 3.749 3.749
+score FOUND_YOU 3.249 3.246 3.249 3.246
+score FREEMAIL_DISPTO 0.250 0.248 0.250 0.248
+score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.249 0.249 0.249
+score FREEM_FRNUM_UNICD_EMPTY 3.621 3.203 3.621 3.203
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499 2.499 2.499 2.499
-score FROM_ADDR_WS 2.798 2.999 2.798 2.999
-score FROM_IN_TO_AND_SUBJ 2.784 3.231 2.784 3.231
-score FROM_MISSP_FREEMAIL 3.399 3.400 3.399 3.400
+score FROM_ADDR_WS 3.000 2.996 3.000 2.996
+score FROM_IN_TO_AND_SUBJ 1.139 3.799 1.139 3.799
+score FROM_MISSPACED 0.001 0.001 0.001 0.001
+score FROM_MISSP_FREEMAIL 0.321 3.396 0.321 3.396
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
score FROM_MISSP_REPLYTO 2.499 0.001 2.499 0.001
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
-score FROM_MISSP_TO_UNDISC 0.001 0.001 0.001 0.001
+score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001
-score FROM_WORDY 2.499 2.499 2.499 2.499
+score FROM_WORDY 0.310 2.498 0.310 2.498
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
-score FSL_HELO_FAKE 4.100 3.899 4.100 3.899
+score FSL_HELO_FAKE 4.099 3.895 4.099 3.895
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_CLICK_HERE 3.300 2.405 3.300 2.405
+score FUZZY_CLICK_HERE 3.200 1.212 3.200 1.212
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score HDR_ORDER_FTSDMCXX_DIRECT 2.000 1.999 2.000 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 2.667 2.986 2.667 2.986
+score HDRS_LCASE 0.100 0.099 0.100 0.099
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.997 1.999 1.997
+score HDR_ORDER_FTSDMCXX_NORDNS 2.133 3.324 2.133 3.324
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
score HELO_MISC_IP 0.003 0.001 0.003 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE 2.600 2.999 2.600 2.999
-score IMG_ONLY_FM_DOM_INFO 0.001 2.499 0.001 2.499
-score KB_FORGED_MOZ4 2.843 2.068 2.843 2.068
-score KHOP_DYNAMIC 1.012 0.718 1.012 0.718
+score HK_RANDOM_FROM 0.001 0.999 0.001 0.999
+score HTML_OFF_PAGE 2.600 2.996 2.600 2.996
+score IMG_ONLY_FM_DOM_INFO 0.001 2.497 0.001 2.497
+score KB_FORGED_MOZ4 3.150 3.587 3.150 3.587
+score KHOP_DYNAMIC 1.999 0.728 1.999 0.728
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
-score LIST_PRTL_SAME_USER 0.001 0.275 0.001 0.275
-score LONG_HEX_URI 0.001 0.474 0.001 0.474
+score LIST_PRTL_SAME_USER 0.001 0.270 0.001 0.270
+score LONG_HEX_URI 0.001 0.473 0.001 0.473
score LONG_IMG_URI 0.001 0.001 0.001 0.001
score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
+score LOTTO_AGENT 1.499 0.001 1.499 0.001
score LUCRATIVE 1.000 1.000 1.000 1.000
-score MALF_HTML_B64 2.919 2.344 2.919 2.344
-score MANY_HDRS_LCASE 0.100 0.100 0.100 0.100
-score MIMEOLE_DIRECT_TO_MX 1.999 0.001 1.999 0.001
+score MALF_HTML_B64 3.290 3.059 3.290 3.059
+score MANY_HDRS_LCASE 0.100 0.099 0.100 0.099
+score MIMEOLE_DIRECT_TO_MX 0.001 0.001 0.001 0.001
score MIME_NO_TEXT 1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD 0.001 0.001 0.001 0.001
-score MONEY_FORM 1.037 0.228 1.037 0.228
-score MONEY_FORM_SHORT 2.499 0.001 2.499 0.001
-score MONEY_FRAUD_3 3.099 0.835 3.099 0.835
-score MONEY_FRAUD_5 3.199 0.735 3.199 0.735
-score MONEY_FRAUD_8 3.399 1.516 3.399 1.516
-score MONEY_FROM_MISSP 1.999 0.001 1.999 0.001
-score MSM_PRIO_REPTO 1.000 1.124 1.000 1.124
-score NO_FM_NAME_IP_HOSTN 2.499 2.499 2.499 2.499
-score OBFU_BITCOIN 3.000 2.356 3.000 2.356
-score PHOTO_EDITING_FREEM 3.749 3.749 3.749 3.749
+score MONEY_FORM 0.800 0.756 0.800 0.756
+score MONEY_FORM_SHORT 2.083 0.001 2.083 0.001
+score MONEY_FRAUD_3 2.749 0.204 2.749 0.204
+score MONEY_FRAUD_5 2.173 0.205 2.173 0.205
+score MONEY_FRAUD_8 1.958 0.001 1.958 0.001
+score MSM_PRIO_REPTO 1.000 1.476 1.000 1.476
+score NO_FM_NAME_IP_HOSTN 2.499 2.497 2.499 2.497
+score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
+score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
+score OBFU_BITCOIN 2.999 2.293 2.999 2.293
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 1.000 2.289 1.000 2.289
+score PHP_ORIG_SCRIPT 2.398 2.285 2.398 2.285
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT 0.900 0.001 0.900 0.001
+score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS 1.584 2.999 1.584 2.999
+score RATWARE_NO_RDNS 2.001 2.996 2.001 2.996
score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
@@ -126,40 +134,42 @@ score RCVD_IN_MSPIKE_ZBI
score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000
score RDNS_NUM_TLD_XM 1.000 1.000 1.000 1.000
score SINGLETS_LOW_CONTRAST 0.001 0.001 0.001 0.001
-score SPOOFED_FREEM_REPTO 2.499 2.499 2.499 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.497 1.000 1.497 1.000
+score SPOOFED_FREEM_REPTO 2.499 2.498 2.499 2.498
+score SPOOFED_FREEM_REPTO_CHN 1.516 1.000 1.516 1.000
score SPOOFED_FREEM_REPTO_RUS 1.000 1.000 1.000 1.000
-score STATIC_XPRIO_OLE 2.000 1.999 2.000 1.999
-score STOCK_LOW_CONTRAST 2.087 2.499 2.087 2.499
+score STATIC_XPRIO_OLE 1.999 1.440 1.999 1.440
+score STOCK_LOW_CONTRAST 2.500 2.497 2.500 2.497
score STOCK_TIP 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 3.500 3.499 3.500 3.499
-score SUBJ_OBFU_PUNCT_FEW 0.749 0.750 0.749 0.750
-score SUBJ_UNNEEDED_HTML 3.299 2.799 3.299 2.799
+score STYLE_GIBBERISH 3.500 3.496 3.500 3.496
+score SUBJ_UNNEEDED_HTML 2.585 0.911 2.585 0.911
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
-score THIS_AD 0.001 0.058 0.001 0.058
+score THIS_AD 0.001 0.057 0.001 0.057
score TO_EQ_FM_DIRECT_MX 2.499 0.001 2.499 0.001
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_IN_SUBJ 0.100 0.100 0.100 0.100
-score TO_NAME_SUBJ_NO_RDNS 1.000 1.000 1.000 1.000
-score TO_NO_BRKTS_HTML_IMG 0.406 1.999 0.406 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.999 1.954 1.999 1.954
-score TO_NO_BRKTS_MSFT 0.001 0.655 0.001 0.655
-score TO_NO_BRKTS_NORDNS_HTML 0.001 0.680 0.001 0.680
-score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
-score TVD_SPACE_ENCODED 2.500 2.499 2.500 2.499
+score TO_IN_SUBJ 0.100 0.099 0.100 0.099
+score TO_NAME_SUBJ_NO_RDNS 2.983 1.000 2.983 1.000
+score TO_NO_BRKTS_FROM_MSSP 0.001 0.001 0.001 0.001
+score TO_NO_BRKTS_HTML_IMG 1.999 1.997 1.999 1.997
+score TO_NO_BRKTS_HTML_ONLY 1.999 1.951 1.999 1.951
+score TO_NO_BRKTS_MSFT 0.001 0.314 0.001 0.314
+score TO_NO_BRKTS_NORDNS_HTML 0.400 0.679 0.400 0.679
+score TO_NO_BRKTS_PCNT 2.246 2.498 2.246 2.498
+score TVD_SPACE_ENCODED 2.499 2.497 2.499 2.497
+score TVD_SPACE_RATIO_MINFP 2.499 2.497 2.499 2.497
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score UNICODE_OBFU_DOM_NO_BODY 3.703 2.907 3.703 2.907
+score UNICODE_OBFU_DOM_NO_BODY 2.328 0.553 2.328 0.553
score URI_DATA 1.000 1.000 1.000 1.000
+score URI_GOOGLE_PROXY 0.001 0.311 0.001 0.311
score URI_ONLY_MSGID_MALF 1.999 1.999 1.999 1.999
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 1.000 3.434 1.000 3.434
-score URI_TRY_3LD 0.554 0.507 0.554 0.507
+score URI_PHISH 4.000 3.439 4.000 3.439
+score URI_TRY_3LD 0.308 0.519 0.308 0.519
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
-score URI_WP_HACKED 3.499 1.000 3.499 1.000
-score URI_WP_HACKED_2 0.604 1.114 0.604 1.114
+score URI_WP_HACKED 3.500 1.000 3.500 1.000
+score URI_WP_HACKED_2 2.192 1.113 2.192 1.113
score USB_DRIVES 1.000 1.000 1.000 1.000
-score XPRIO 2.250 2.249 2.250 2.249
-score XPRIO_SHORT_SUBJ 2.499 2.499 2.499 2.499
+score XPRIO 2.249 2.248 2.249 2.248
+score XPRIO_SHORT_SUBJ 2.499 2.497 2.499 2.497
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Fri Nov 9 03:59:41 2018
@@ -1,104 +1,118 @@
-# Using score set 0 logs for revision 1845992 from:
-# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week2.log ham-ena-week3.log ham-giovanni.log ham-grenier.log ham-hege.log ham-jarif.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week2.log spam-ena-week3.log spam-giovanni.log spam-grenier.log spam-hege.log spam-jarif.log spam-sihde.log spam-thendrikx.log
+# Using score set 0 logs for revision 1846103 from:
+# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-grenier.log ham-hege.log ham-jarif.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-grenier.log spam-hege.log spam-jarif.log spam-sihde.log spam-thendrikx.log
score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 3.500
-score ADVANCE_FEE_3_NEW_FRM_MNY 1.603
-score ADVANCE_FEE_3_NEW_MONEY 1.404
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.123
+score ADMITS_SPAM 0.001
+score ADVANCE_FEE_2_NEW_MONEY 1.377
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_MONEY 2.829
+score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.660
+score ADVANCE_FEE_5_NEW_MONEY 1.843
score APP_DEVELOPMENT_NORDNS 1.885
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score BIGNUM_EMAILS 2.999
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
score BITCOIN_PAY_ME 2.499
-score BITCOIN_SPAM_01 0.577
-score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 1.499
+score BITCOIN_SPAM_01 0.001
+score BITCOIN_SPAM_02 2.500
+score BITCOIN_SPAM_03 1.500
score BITCOIN_SPAM_04 1.499
score BITCOIN_SPAM_05 2.499
-score BITCOIN_SPAM_06 1.011
-score BITCOIN_SPAM_07 1.499
-score BITCOIN_SPAM_08 1.500
-score BODY_SINGLE_WORD 0.400
-score BODY_URI_ONLY 0.001 # force non-zero
-score CK_HELO_DYNAMIC_SPLIT_IP 0.355
+score BITCOIN_SPAM_06 0.644
+score BITCOIN_SPAM_07 1.500
+score BITCOIN_SPAM_08 1.499
+score BITCOIN_SPAM_09 1.195
+score BODY_SINGLE_URI 0.001
+score BODY_SINGLE_WORD 1.982
+score BODY_URI_ONLY 0.001
+score BOGUS_MSM_HDRS 2.875
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500
score CK_HELO_GENERIC 0.250
-score DEAR_BENEFICIARY 3.399
-score DKIMWL_BL 1.583
-score FBI_MONEY 1.756
-score FBI_SPOOF 0.121
+score DATE_IN_FUTURE_96_Q 3.099
+score DKIMWL_BL 1.388
+score FBI_MONEY 1.167
+score FBI_SPOOF 0.365
score FILL_THIS_FORM 0.001
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 2.699
+score FORM_FRAUD 0.090
+score FORM_FRAUD_3 1.542
score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.250
+score FOUND_YOU 3.249
score FREEMAIL_DISPTO 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FREEM_FRNUM_UNICD_EMPTY 3.621
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
-score FROM_ADDR_WS 2.798
-score FROM_IN_TO_AND_SUBJ 2.784
-score FROM_MISSP_FREEMAIL 3.399
+score FROM_ADDR_WS 3.000
+score FROM_IN_TO_AND_SUBJ 1.139
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 0.321
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_REPLYTO 2.499
-score FROM_MISSP_TO_UNDISC 0.001
+score FROM_MISSP_USER 0.001 # force non-zero
score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 2.499
+score FROM_WORDY 0.310
score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 4.100
-score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 3.300
-score HDR_ORDER_FTSDMCXX_DIRECT 2.000
-score HDR_ORDER_FTSDMCXX_NORDNS 2.667
+score FSL_HELO_FAKE 4.099
+score FSL_NEW_HELO_USER 0.001 # force non-zero
+score FUZZY_CLICK_HERE 3.200
+score HDRS_LCASE 0.100
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999
+score HDR_ORDER_FTSDMCXX_NORDNS 2.133
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HELO_MISC_IP 0.003
+score HK_RANDOM_FROM 0.001
score HTML_OFF_PAGE 2.600
score IMG_ONLY_FM_DOM_INFO 0.001
-score KB_FORGED_MOZ4 2.843
-score KHOP_DYNAMIC 1.012
-score LIST_PRTL_SAME_USER 0.001
+score KB_FORGED_MOZ4 3.150
+score KHOP_DYNAMIC 1.999
+score LIST_PRTL_SAME_USER 0.001 # force non-zero
score LONG_HEX_URI 0.001
-score LONG_IMG_URI 0.001
+score LONG_IMG_URI 0.001 # force non-zero
score LOTS_OF_MONEY 0.001 # force non-zero
-score MALF_HTML_B64 2.919
+score LOTTO_AGENT 1.499
+score MALF_HTML_B64 3.290
score MANY_HDRS_LCASE 0.100
-score MIMEOLE_DIRECT_TO_MX 1.999
-score MONEY_ATM_CARD 0.001 # force non-zero
-score MONEY_FORM 1.037
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 3.099
-score MONEY_FRAUD_5 3.199
-score MONEY_FRAUD_8 3.399
-score MONEY_FROM_MISSP 1.999
+score MIMEOLE_DIRECT_TO_MX 0.001
+score MONEY_FORM 0.800
+score MONEY_FORM_SHORT 2.083
+score MONEY_FRAUD_3 2.749
+score MONEY_FRAUD_5 2.173
+score MONEY_FRAUD_8 1.958
score NO_FM_NAME_IP_HOSTN 2.499
-score OBFU_BITCOIN 3.000
-score PHOTO_EDITING_FREEM 3.749
-score PP_MIME_FAKE_ASCII_TEXT 0.900
-score RATWARE_NO_RDNS 1.584
-score SINGLETS_LOW_CONTRAST 0.001
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 0.001
+score OBFU_BITCOIN 2.999
+score PHP_ORIG_SCRIPT 2.398
+score PP_MIME_FAKE_ASCII_TEXT 0.999
+score RATWARE_NO_RDNS 2.001
+score SINGLETS_LOW_CONTRAST 0.001 # force non-zero
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.497
-score STATIC_XPRIO_OLE 2.000
-score STOCK_LOW_CONTRAST 2.087
+score SPOOFED_FREEM_REPTO_CHN 1.516
+score STATIC_XPRIO_OLE 1.999
+score STOCK_LOW_CONTRAST 2.500
score STYLE_GIBBERISH 3.500
-score SUBJ_OBFU_PUNCT_FEW 0.749
-score SUBJ_UNNEEDED_HTML 3.299
-score THIS_AD 0.001
+score SUBJ_UNNEEDED_HTML 2.585
+score THIS_AD 0.001 # force non-zero
score TO_EQ_FM_DIRECT_MX 2.499
score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_HTML_IMG 0.406
+score TO_NAME_SUBJ_NO_RDNS 2.983
+score TO_NO_BRKTS_FROM_MSSP 0.001
+score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001 # force non-zero
-score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
-score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_ENCODED 2.500
-score UNICODE_OBFU_DOM_NO_BODY 3.703
+score TO_NO_BRKTS_NORDNS_HTML 0.400
+score TO_NO_BRKTS_PCNT 2.246
+score TVD_SPACE_ENCODED 2.499
+score TVD_SPACE_RATIO_MINFP 2.499
+score UNICODE_OBFU_DOM_NO_BODY 2.328
+score URI_GOOGLE_PROXY 0.001
score URI_ONLY_MSGID_MALF 1.999
-score URI_TRY_3LD 0.554
-score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 0.604
-score XPRIO 2.250
+score URI_PHISH 4.000
+score URI_TRY_3LD 0.308
+score URI_WP_HACKED 3.500
+score URI_WP_HACKED_2 2.192
+score XPRIO 2.249
score XPRIO_SHORT_SUBJ 2.499
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
@@ -113,7 +127,6 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score APP_DEVELOPMENT_FREEM 1.000
-score BOGUS_MSM_HDRS 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
score ENCRYPTED_MESSAGE -1.000
@@ -128,7 +141,6 @@ score LUCRATIVE 1.0
score MIME_NO_TEXT 1.000
score MSM_PRIO_REPTO 1.000
score PHP_NOVER_MUA 1.000
-score PHP_ORIG_SCRIPT 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
score PP_TOO_MUCH_UNICODE05 1.000
@@ -140,12 +152,10 @@ score RDNS_NUM_TLD_XM 1.0
score SPOOFED_FREEM_REPTO_RUS 1.000
score STOCK_TIP 1.000
score SYSADMIN 1.000
-score TO_NAME_SUBJ_NO_RDNS 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
-score URI_PHISH 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Fri Nov 9 03:59:41 2018
@@ -3,99 +3,107 @@
score AC_DIV_BONANZA 0.001
score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_MONEY 2.239
+score ADVANCE_FEE_3_NEW 3.496
+score ADVANCE_FEE_3_NEW_MONEY 2.077
score ADVANCE_FEE_4_NEW 0.001
-score APP_DEVELOPMENT_NORDNS 1.999
+score ADVANCE_FEE_5_NEW_MONEY 2.525
+score APP_DEVELOPMENT_NORDNS 1.997
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.499
-score BITCOIN_SPAM_01 1.262
-score BITCOIN_SPAM_02 2.500
-score BITCOIN_SPAM_03 1.499
-score BITCOIN_SPAM_04 1.500
-score BITCOIN_SPAM_06 0.973
-score BODY_SINGLE_WORD 2.389
-score BODY_URI_ONLY 0.999
-score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
+score BITCOIN_MALWARE 2.996
+score BITCOIN_PAY_ME 2.497
+score BITCOIN_SPAM_01 1.260
+score BITCOIN_SPAM_02 2.497
+score BITCOIN_SPAM_03 1.498
+score BITCOIN_SPAM_04 1.498
+score BITCOIN_SPAM_06 1.336
+score BODY_SINGLE_URI 1.309
+score BODY_SINGLE_WORD 1.078
+score BODY_URI_ONLY 0.998
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score CK_HELO_GENERIC 0.001 # force non-zero
-score DKIMWL_BL 0.001 # force non-zero
-score DKIMWL_WL_HIGH -0.972
-score DKIMWL_WL_MED -0.127
-score FBI_MONEY 0.904
-score FBI_SPOOF 1.168
+score DATE_IN_FUTURE_96_Q 2.896
+score DKIMWL_BL 0.001
+score DKIMWL_WL_HIGH -1.133
+score DKIMWL_WL_MED -0.140
+score FBI_MONEY 1.075
+score FBI_SPOOF 1.979
score FILL_THIS_FORM 0.001
score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.249
+score FOUND_YOU 3.246
+score FREEMAIL_DISPTO 0.248
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FREEM_FRNUM_UNICD_EMPTY 3.203
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
-score FROM_ADDR_WS 2.999
-score FROM_IN_TO_AND_SUBJ 3.231
-score FROM_MISSP_FREEMAIL 3.400
-score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_REPLYTO 0.001
+score FROM_ADDR_WS 2.996
+score FROM_IN_TO_AND_SUBJ 3.799
+score FROM_MISSPACED 0.001
+score FROM_MISSP_FREEMAIL 3.396
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_REPLYTO 0.001 # force non-zero
+score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 2.499
+score FROM_WORDY 2.498
score FSL_BULK_SIG 0.001 # force non-zero
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 3.899
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_FAKE 3.895
score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.405
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 2.986
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
+score FUZZY_CLICK_HERE 1.212
+score HDRS_LCASE 0.099
+score HDR_ORDER_FTSDMCXX_DIRECT 1.997
+score HDR_ORDER_FTSDMCXX_NORDNS 3.324
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
score HELO_MISC_IP 0.001
-score HTML_OFF_PAGE 2.999
-score IMG_ONLY_FM_DOM_INFO 2.499
-score KB_FORGED_MOZ4 2.068
-score KHOP_DYNAMIC 0.718
-score LIST_PRTL_SAME_USER 0.275
-score LONG_HEX_URI 0.474
+score HK_RANDOM_FROM 0.999
+score HTML_OFF_PAGE 2.996
+score IMG_ONLY_FM_DOM_INFO 2.497
+score KB_FORGED_MOZ4 3.587
+score KHOP_DYNAMIC 0.728
+score LIST_PRTL_SAME_USER 0.270
+score LONG_HEX_URI 0.473
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
-score MALF_HTML_B64 2.344
-score MANY_HDRS_LCASE 0.100
-score MANY_SPAN_IN_TEXT 1.967
+score MALF_HTML_B64 3.059
+score MANY_HDRS_LCASE 0.099
+score MANY_SPAN_IN_TEXT 0.750
score MIMEOLE_DIRECT_TO_MX 0.001
-score MONEY_FORM 0.228
+score MONEY_FORM 0.756
score MONEY_FORM_SHORT 0.001
-score MONEY_FRAUD_3 0.835
-score MONEY_FRAUD_5 0.735
-score MONEY_FRAUD_8 1.516
-score MSM_PRIO_REPTO 1.124
-score NO_FM_NAME_IP_HOSTN 2.499
-score OBFU_BITCOIN 2.356
-score PHOTO_EDITING_FREEM 3.749
-score PHP_ORIG_SCRIPT 2.289
+score MONEY_FRAUD_3 0.204
+score MONEY_FRAUD_5 0.205
+score MONEY_FRAUD_8 0.001
+score MSM_PRIO_REPTO 1.476
+score NO_FM_NAME_IP_HOSTN 2.497
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score OBFU_BITCOIN 2.293
+score PHP_ORIG_SCRIPT 2.285
score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RATWARE_NO_RDNS 2.999
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score SPOOFED_FREEM_REPTO 2.499
-score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 2.499
-score STYLE_GIBBERISH 3.499
-score SUBJ_OBFU_PUNCT_FEW 0.750
-score SUBJ_UNNEEDED_HTML 2.799
-score THIS_AD 0.058
+score RATWARE_NO_RDNS 2.996
+score RCVD_IN_MSPIKE_H2 -0.001
+score SPOOFED_FREEM_REPTO 2.498
+score STATIC_XPRIO_OLE 1.440
+score STOCK_LOW_CONTRAST 2.497
+score STYLE_GIBBERISH 3.496
+score SUBJ_UNNEEDED_HTML 0.911
+score THIS_AD 0.057
score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_HTML_IMG 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.954
-score TO_NO_BRKTS_MSFT 0.655
-score TO_NO_BRKTS_NORDNS_HTML 0.680
-score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_ENCODED 2.499
-score UNICODE_OBFU_DOM_NO_BODY 2.907
-score URI_GOOGLE_PROXY 0.313
+score TO_IN_SUBJ 0.099
+score TO_NO_BRKTS_FROM_MSSP 0.001
+score TO_NO_BRKTS_HTML_IMG 1.997
+score TO_NO_BRKTS_HTML_ONLY 1.951
+score TO_NO_BRKTS_MSFT 0.314
+score TO_NO_BRKTS_NORDNS_HTML 0.679
+score TO_NO_BRKTS_PCNT 2.498
+score TVD_SPACE_ENCODED 2.497
+score TVD_SPACE_RATIO_MINFP 2.497
+score UNICODE_OBFU_DOM_NO_BODY 0.553
+score URI_GOOGLE_PROXY 0.311
score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.434
-score URI_TRY_3LD 0.507
-score URI_WP_HACKED_2 1.114
-score XPRIO 2.249
-score XPRIO_SHORT_SUBJ 2.499
+score URI_PHISH 3.439
+score URI_TRY_3LD 0.519
+score URI_WP_HACKED_2 1.113
+score XPRIO 2.248
+score XPRIO_SHORT_SUBJ 2.497
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Fri Nov 9 03:59:41 2018
@@ -1,104 +1,118 @@
-# Using score set 0 logs for revision 1845992 from:
-# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week2.log ham-ena-week3.log ham-giovanni.log ham-grenier.log ham-hege.log ham-jarif.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week2.log spam-ena-week3.log spam-giovanni.log spam-grenier.log spam-hege.log spam-jarif.log spam-sihde.log spam-thendrikx.log
+# Using score set 0 logs for revision 1846103 from:
+# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-grenier.log ham-hege.log ham-jarif.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-grenier.log spam-hege.log spam-jarif.log spam-sihde.log spam-thendrikx.log
score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 3.500
-score ADVANCE_FEE_3_NEW_FRM_MNY 1.603
-score ADVANCE_FEE_3_NEW_MONEY 1.404
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.123
+score ADMITS_SPAM 0.001
+score ADVANCE_FEE_2_NEW_MONEY 1.377
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_MONEY 2.829
+score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.660
+score ADVANCE_FEE_5_NEW_MONEY 1.843
score APP_DEVELOPMENT_NORDNS 1.885
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score BIGNUM_EMAILS 2.999
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
score BITCOIN_PAY_ME 2.499
-score BITCOIN_SPAM_01 0.577
-score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 1.499
+score BITCOIN_SPAM_01 0.001
+score BITCOIN_SPAM_02 2.500
+score BITCOIN_SPAM_03 1.500
score BITCOIN_SPAM_04 1.499
score BITCOIN_SPAM_05 2.499
-score BITCOIN_SPAM_06 1.011
-score BITCOIN_SPAM_07 1.499
-score BITCOIN_SPAM_08 1.500
-score BODY_SINGLE_WORD 0.400
-score BODY_URI_ONLY 0.001 # force non-zero
-score CK_HELO_DYNAMIC_SPLIT_IP 0.355
+score BITCOIN_SPAM_06 0.644
+score BITCOIN_SPAM_07 1.500
+score BITCOIN_SPAM_08 1.499
+score BITCOIN_SPAM_09 1.195
+score BODY_SINGLE_URI 0.001
+score BODY_SINGLE_WORD 1.982
+score BODY_URI_ONLY 0.001
+score BOGUS_MSM_HDRS 2.875
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500
score CK_HELO_GENERIC 0.250
-score DEAR_BENEFICIARY 3.399
-score DKIMWL_BL 1.583
-score FBI_MONEY 1.756
-score FBI_SPOOF 0.121
+score DATE_IN_FUTURE_96_Q 3.099
+score DKIMWL_BL 1.388
+score FBI_MONEY 1.167
+score FBI_SPOOF 0.365
score FILL_THIS_FORM 0.001
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 2.699
+score FORM_FRAUD 0.090
+score FORM_FRAUD_3 1.542
score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.250
+score FOUND_YOU 3.249
score FREEMAIL_DISPTO 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FREEM_FRNUM_UNICD_EMPTY 3.621
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
-score FROM_ADDR_WS 2.798
-score FROM_IN_TO_AND_SUBJ 2.784
-score FROM_MISSP_FREEMAIL 3.399
+score FROM_ADDR_WS 3.000
+score FROM_IN_TO_AND_SUBJ 1.139
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 0.321
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_REPLYTO 2.499
-score FROM_MISSP_TO_UNDISC 0.001
+score FROM_MISSP_USER 0.001 # force non-zero
score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 2.499
+score FROM_WORDY 0.310
score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 4.100
-score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 3.300
-score HDR_ORDER_FTSDMCXX_DIRECT 2.000
-score HDR_ORDER_FTSDMCXX_NORDNS 2.667
+score FSL_HELO_FAKE 4.099
+score FSL_NEW_HELO_USER 0.001 # force non-zero
+score FUZZY_CLICK_HERE 3.200
+score HDRS_LCASE 0.100
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999
+score HDR_ORDER_FTSDMCXX_NORDNS 2.133
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HELO_MISC_IP 0.003
+score HK_RANDOM_FROM 0.001
score HTML_OFF_PAGE 2.600
score IMG_ONLY_FM_DOM_INFO 0.001
-score KB_FORGED_MOZ4 2.843
-score KHOP_DYNAMIC 1.012
-score LIST_PRTL_SAME_USER 0.001
+score KB_FORGED_MOZ4 3.150
+score KHOP_DYNAMIC 1.999
+score LIST_PRTL_SAME_USER 0.001 # force non-zero
score LONG_HEX_URI 0.001
-score LONG_IMG_URI 0.001
+score LONG_IMG_URI 0.001 # force non-zero
score LOTS_OF_MONEY 0.001 # force non-zero
-score MALF_HTML_B64 2.919
+score LOTTO_AGENT 1.499
+score MALF_HTML_B64 3.290
score MANY_HDRS_LCASE 0.100
-score MIMEOLE_DIRECT_TO_MX 1.999
-score MONEY_ATM_CARD 0.001 # force non-zero
-score MONEY_FORM 1.037
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 3.099
-score MONEY_FRAUD_5 3.199
-score MONEY_FRAUD_8 3.399
-score MONEY_FROM_MISSP 1.999
+score MIMEOLE_DIRECT_TO_MX 0.001
+score MONEY_FORM 0.800
+score MONEY_FORM_SHORT 2.083
+score MONEY_FRAUD_3 2.749
+score MONEY_FRAUD_5 2.173
+score MONEY_FRAUD_8 1.958
score NO_FM_NAME_IP_HOSTN 2.499
-score OBFU_BITCOIN 3.000
-score PHOTO_EDITING_FREEM 3.749
-score PP_MIME_FAKE_ASCII_TEXT 0.900
-score RATWARE_NO_RDNS 1.584
-score SINGLETS_LOW_CONTRAST 0.001
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 0.001
+score OBFU_BITCOIN 2.999
+score PHP_ORIG_SCRIPT 2.398
+score PP_MIME_FAKE_ASCII_TEXT 0.999
+score RATWARE_NO_RDNS 2.001
+score SINGLETS_LOW_CONTRAST 0.001 # force non-zero
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.497
-score STATIC_XPRIO_OLE 2.000
-score STOCK_LOW_CONTRAST 2.087
+score SPOOFED_FREEM_REPTO_CHN 1.516
+score STATIC_XPRIO_OLE 1.999
+score STOCK_LOW_CONTRAST 2.500
score STYLE_GIBBERISH 3.500
-score SUBJ_OBFU_PUNCT_FEW 0.749
-score SUBJ_UNNEEDED_HTML 3.299
-score THIS_AD 0.001
+score SUBJ_UNNEEDED_HTML 2.585
+score THIS_AD 0.001 # force non-zero
score TO_EQ_FM_DIRECT_MX 2.499
score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_HTML_IMG 0.406
+score TO_NAME_SUBJ_NO_RDNS 2.983
+score TO_NO_BRKTS_FROM_MSSP 0.001
+score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001 # force non-zero
-score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
-score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_ENCODED 2.500
-score UNICODE_OBFU_DOM_NO_BODY 3.703
+score TO_NO_BRKTS_NORDNS_HTML 0.400
+score TO_NO_BRKTS_PCNT 2.246
+score TVD_SPACE_ENCODED 2.499
+score TVD_SPACE_RATIO_MINFP 2.499
+score UNICODE_OBFU_DOM_NO_BODY 2.328
+score URI_GOOGLE_PROXY 0.001
score URI_ONLY_MSGID_MALF 1.999
-score URI_TRY_3LD 0.554
-score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 0.604
-score XPRIO 2.250
+score URI_PHISH 4.000
+score URI_TRY_3LD 0.308
+score URI_WP_HACKED 3.500
+score URI_WP_HACKED_2 2.192
+score XPRIO 2.249
score XPRIO_SHORT_SUBJ 2.499
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
@@ -113,7 +127,6 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score APP_DEVELOPMENT_FREEM 1.000
-score BOGUS_MSM_HDRS 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
score ENCRYPTED_MESSAGE -1.000
@@ -128,7 +141,6 @@ score LUCRATIVE 1.0
score MIME_NO_TEXT 1.000
score MSM_PRIO_REPTO 1.000
score PHP_NOVER_MUA 1.000
-score PHP_ORIG_SCRIPT 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
score PP_TOO_MUCH_UNICODE05 1.000
@@ -140,12 +152,10 @@ score RDNS_NUM_TLD_XM 1.0
score SPOOFED_FREEM_REPTO_RUS 1.000
score STOCK_TIP 1.000
score SYSADMIN 1.000
-score TO_NAME_SUBJ_NO_RDNS 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
-score URI_PHISH 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Fri Nov 9 03:59:41 2018
@@ -3,99 +3,107 @@
score AC_DIV_BONANZA 0.001
score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_MONEY 2.239
+score ADVANCE_FEE_3_NEW 3.496
+score ADVANCE_FEE_3_NEW_MONEY 2.077
score ADVANCE_FEE_4_NEW 0.001
-score APP_DEVELOPMENT_NORDNS 1.999
+score ADVANCE_FEE_5_NEW_MONEY 2.525
+score APP_DEVELOPMENT_NORDNS 1.997
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.499
-score BITCOIN_SPAM_01 1.262
-score BITCOIN_SPAM_02 2.500
-score BITCOIN_SPAM_03 1.499
-score BITCOIN_SPAM_04 1.500
-score BITCOIN_SPAM_06 0.973
-score BODY_SINGLE_WORD 2.389
-score BODY_URI_ONLY 0.999
-score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
+score BITCOIN_MALWARE 2.996
+score BITCOIN_PAY_ME 2.497
+score BITCOIN_SPAM_01 1.260
+score BITCOIN_SPAM_02 2.497
+score BITCOIN_SPAM_03 1.498
+score BITCOIN_SPAM_04 1.498
+score BITCOIN_SPAM_06 1.336
+score BODY_SINGLE_URI 1.309
+score BODY_SINGLE_WORD 1.078
+score BODY_URI_ONLY 0.998
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score CK_HELO_GENERIC 0.001 # force non-zero
-score DKIMWL_BL 0.001 # force non-zero
-score DKIMWL_WL_HIGH -0.972
-score DKIMWL_WL_MED -0.127
-score FBI_MONEY 0.904
-score FBI_SPOOF 1.168
+score DATE_IN_FUTURE_96_Q 2.896
+score DKIMWL_BL 0.001
+score DKIMWL_WL_HIGH -1.133
+score DKIMWL_WL_MED -0.140
+score FBI_MONEY 1.075
+score FBI_SPOOF 1.979
score FILL_THIS_FORM 0.001
score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.249
+score FOUND_YOU 3.246
+score FREEMAIL_DISPTO 0.248
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FREEM_FRNUM_UNICD_EMPTY 3.203
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
-score FROM_ADDR_WS 2.999
-score FROM_IN_TO_AND_SUBJ 3.231
-score FROM_MISSP_FREEMAIL 3.400
-score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_REPLYTO 0.001
+score FROM_ADDR_WS 2.996
+score FROM_IN_TO_AND_SUBJ 3.799
+score FROM_MISSPACED 0.001
+score FROM_MISSP_FREEMAIL 3.396
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_REPLYTO 0.001 # force non-zero
+score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 2.499
+score FROM_WORDY 2.498
score FSL_BULK_SIG 0.001 # force non-zero
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 3.899
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_FAKE 3.895
score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.405
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 2.986
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
+score FUZZY_CLICK_HERE 1.212
+score HDRS_LCASE 0.099
+score HDR_ORDER_FTSDMCXX_DIRECT 1.997
+score HDR_ORDER_FTSDMCXX_NORDNS 3.324
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
score HELO_MISC_IP 0.001
-score HTML_OFF_PAGE 2.999
-score IMG_ONLY_FM_DOM_INFO 2.499
-score KB_FORGED_MOZ4 2.068
-score KHOP_DYNAMIC 0.718
-score LIST_PRTL_SAME_USER 0.275
-score LONG_HEX_URI 0.474
+score HK_RANDOM_FROM 0.999
+score HTML_OFF_PAGE 2.996
+score IMG_ONLY_FM_DOM_INFO 2.497
+score KB_FORGED_MOZ4 3.587
+score KHOP_DYNAMIC 0.728
+score LIST_PRTL_SAME_USER 0.270
+score LONG_HEX_URI 0.473
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
-score MALF_HTML_B64 2.344
-score MANY_HDRS_LCASE 0.100
-score MANY_SPAN_IN_TEXT 1.967
+score MALF_HTML_B64 3.059
+score MANY_HDRS_LCASE 0.099
+score MANY_SPAN_IN_TEXT 0.750
score MIMEOLE_DIRECT_TO_MX 0.001
-score MONEY_FORM 0.228
+score MONEY_FORM 0.756
score MONEY_FORM_SHORT 0.001
-score MONEY_FRAUD_3 0.835
-score MONEY_FRAUD_5 0.735
-score MONEY_FRAUD_8 1.516
-score MSM_PRIO_REPTO 1.124
-score NO_FM_NAME_IP_HOSTN 2.499
-score OBFU_BITCOIN 2.356
-score PHOTO_EDITING_FREEM 3.749
-score PHP_ORIG_SCRIPT 2.289
+score MONEY_FRAUD_3 0.204
+score MONEY_FRAUD_5 0.205
+score MONEY_FRAUD_8 0.001
+score MSM_PRIO_REPTO 1.476
+score NO_FM_NAME_IP_HOSTN 2.497
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score OBFU_BITCOIN 2.293
+score PHP_ORIG_SCRIPT 2.285
score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RATWARE_NO_RDNS 2.999
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score SPOOFED_FREEM_REPTO 2.499
-score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 2.499
-score STYLE_GIBBERISH 3.499
-score SUBJ_OBFU_PUNCT_FEW 0.750
-score SUBJ_UNNEEDED_HTML 2.799
-score THIS_AD 0.058
+score RATWARE_NO_RDNS 2.996
+score RCVD_IN_MSPIKE_H2 -0.001
+score SPOOFED_FREEM_REPTO 2.498
+score STATIC_XPRIO_OLE 1.440
+score STOCK_LOW_CONTRAST 2.497
+score STYLE_GIBBERISH 3.496
+score SUBJ_UNNEEDED_HTML 0.911
+score THIS_AD 0.057
score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_HTML_IMG 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.954
-score TO_NO_BRKTS_MSFT 0.655
-score TO_NO_BRKTS_NORDNS_HTML 0.680
-score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_ENCODED 2.499
-score UNICODE_OBFU_DOM_NO_BODY 2.907
-score URI_GOOGLE_PROXY 0.313
+score TO_IN_SUBJ 0.099
+score TO_NO_BRKTS_FROM_MSSP 0.001
+score TO_NO_BRKTS_HTML_IMG 1.997
+score TO_NO_BRKTS_HTML_ONLY 1.951
+score TO_NO_BRKTS_MSFT 0.314
+score TO_NO_BRKTS_NORDNS_HTML 0.679
+score TO_NO_BRKTS_PCNT 2.498
+score TVD_SPACE_ENCODED 2.497
+score TVD_SPACE_RATIO_MINFP 2.497
+score UNICODE_OBFU_DOM_NO_BODY 0.553
+score URI_GOOGLE_PROXY 0.311
score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.434
-score URI_TRY_3LD 0.507
-score URI_WP_HACKED_2 1.114
-score XPRIO 2.249
-score XPRIO_SHORT_SUBJ 2.499
+score URI_PHISH 3.439
+score URI_TRY_3LD 0.519
+score URI_WP_HACKED_2 1.113
+score XPRIO 2.248
+score XPRIO_SHORT_SUBJ 2.497
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Fri Nov 9 03:59:41 2018
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 162469 16.411% (96.317% of non-spam corpus)
-# Correctly spam: 675812 68.263% (82.283% of spam corpus)
-# False positives: 6213 0.628% (3.683% of nonspam, 864136 weighted)
-# False negatives: 145517 14.699% (17.717% of spam, 378910 weighted)
-# Average score for spam: 12.1 nonspam: 1.3
-# Average for false-pos: 5.7 false-neg: 2.6
-# TOTAL: 990011 100.00%
+# Correctly non-spam: 235386 21.521% (95.829% of non-spam corpus)
+# Correctly spam: 685870 62.709% (80.870% of spam corpus)
+# False positives: 10245 0.937% (4.171% of nonspam, 1017128 weighted)
+# False negatives: 162241 14.834% (19.130% of spam, 415655 weighted)
+# Average score for spam: 10.8 nonspam: 1.4
+# Average for false-pos: 5.8 false-neg: 2.6
+# TOTAL: 1093742 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 20474 96.33%
-# Correctly spam: 84339 82.35%
-# False positives: 780 3.67%
-# False negatives: 18076 17.65%
-# TCR(l=50): 1.794362 SpamRecall: 82.350% SpamPrec: 99.084%
+# Correctly non-spam: 29344 95.68%
+# Correctly spam: 85480 80.84%
+# False positives: 1326 4.32%
+# False negatives: 20262 19.16%
+# TCR(l=50): 1.221575 SpamRecall: 80.838% SpamPrec: 98.472%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 162129 96.12%
-# Correctly spam: 332909 40.53%
-# False positives: 6553 3.88%
-# False negatives: 488420 59.47%
-# TCR(l=50): 1.006444 SpamRecall: 40.533% SpamPrec: 98.070%
+# Correctly non-spam: 234943 95.65%
+# Correctly spam: 360449 42.50%
+# False positives: 10688 4.35%
+# False negatives: 487662 57.50%
+# TCR(l=50): 0.829804 SpamRecall: 42.500% SpamPrec: 97.120%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 20412 96.04%
-# Correctly spam: 41276 40.30%
-# False positives: 842 3.96%
-# False negatives: 61139 59.70%
-# TCR(l=50): 0.992019 SpamRecall: 40.303% SpamPrec: 98.001%
+# Correctly non-spam: 29314 95.58%
+# Correctly spam: 44989 42.55%
+# False positives: 1356 4.42%
+# False negatives: 60753 57.45%
+# TCR(l=50): 0.822556 SpamRecall: 42.546% SpamPrec: 97.074%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1846208&r1=1846207&r2=1846208&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Fri Nov 9 03:59:41 2018
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 247642 23.258% (99.679% of non-spam corpus)
-# Correctly spam: 744068 69.881% (91.149% of spam corpus)
-# False positives: 797 0.075% (0.321% of nonspam, 195582 weighted)
-# False negatives: 72251 6.786% (8.851% of spam, 183909 weighted)
-# Average score for spam: 13.8 nonspam: -2.2
-# Average for false-pos: 7.5 false-neg: 2.5
-# TOTAL: 1064758 100.00%
+# Correctly non-spam: 247652 23.260% (99.683% of non-spam corpus)
+# Correctly spam: 750094 70.452% (91.894% of spam corpus)
+# False positives: 787 0.074% (0.317% of nonspam, 193770 weighted)
+# False negatives: 66162 6.214% (8.106% of spam, 175294 weighted)
+# Average score for spam: 14.0 nonspam: -2.2
+# Average for false-pos: 7.5 false-neg: 2.6
+# TOTAL: 1064695 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 30893 99.70%
-# Correctly spam: 92778 91.16%
-# False positives: 94 0.30%
-# False negatives: 8998 8.84%
-# TCR(l=50): 7.429990 SpamRecall: 91.159% SpamPrec: 99.899%
+# Correctly non-spam: 30892 99.69%
+# Correctly spam: 93545 91.92%
+# False positives: 95 0.31%
+# False negatives: 8222 8.08%
+# TCR(l=50): 7.845128 SpamRecall: 91.921% SpamPrec: 99.899%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 246986 99.42%
-# Correctly spam: 511358 62.64%
+# Correctly spam: 511197 62.63%
# False positives: 1453 0.58%
-# False negatives: 304961 37.36%
-# TCR(l=50): 2.161799 SpamRecall: 62.642% SpamPrec: 99.717%
+# False negatives: 305059 37.37%
+# TCR(l=50): 2.161071 SpamRecall: 62.627% SpamPrec: 99.717%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 30806 99.42%
-# Correctly spam: 63610 62.50%
+# Correctly spam: 63651 62.55%
# False positives: 181 0.58%
-# False negatives: 38166 37.50%
-# TCR(l=50): 2.155540 SpamRecall: 62.500% SpamPrec: 99.716%
+# False negatives: 38116 37.45%
+# TCR(l=50): 2.157635 SpamRecall: 62.546% SpamPrec: 99.716%