You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/10/25 02:42:35 UTC

svn commit: r1904821 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1904821&r1=1904820&r2=1904821&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Tue Oct 25 02:42:35 2022
@@ -1,171 +1,164 @@
-# Using score set 0 logs for revision 1904786 from:
-# ham-ena-week0.r1904786.log ham-ena-week1.r1904786.log ham-ena-week2.r1904786.log ham-ena-week3.r1904786.log ham-ena-week4.r1904786.log ham-giovanni-ham.r1904786.log ham-giovanni-spammy.r1904786.log ham-giovanni-spam.r1904786.log ham-grenier.r1904786.log ham-hege.r1904786.log ham-jhardin.r1904786.log ham-llanga.r1904786.log ham-mmiroslaw-mails-ham.r1904786.log ham-mmiroslaw-mails-spam.r1904786.log ham-thendrikx.r1904786.log ham-tsz-spam-corpus.r1904786.log spam-ena-week0.r1904786.log spam-ena-week1.r1904786.log spam-ena-week2.r1904786.log spam-ena-week3.r1904786.log spam-ena-week4.r1904786.log spam-giovanni-ham.r1904786.log spam-giovanni-spammy.r1904786.log spam-giovanni-spam.r1904786.log spam-grenier.r1904786.log spam-hege.r1904786.log spam-jhardin.r1904786.log spam-llanga.r1904786.log spam-mmiroslaw-mails-ham.r1904786.log spam-mmiroslaw-mails-spam.r1904786.log spam-thendrikx.r1904786.log spam-tsz-spam-corpus.r1904786.log
+# Using score set 0 logs for revision 1904799 from:
+# ham-ena-week0.r1904799.log ham-ena-week1.r1904799.log ham-ena-week2.r1904799.log ham-ena-week3.r1904799.log ham-ena-week4.r1904799.log ham-giovanni-ham.r1904799.log ham-giovanni-spammy.r1904799.log ham-giovanni-spam.r1904799.log ham-grenier.r1904799.log ham-hege.r1904799.log ham-jhardin.r1904799.log ham-llanga.r1904799.log ham-mmiroslaw-mails-ham.r1904799.log ham-mmiroslaw-mails-spam.r1904799.log ham-thendrikx.r1904799.log ham-tsz-spam-corpus.r1904799.log spam-ena-week0.r1904799.log spam-ena-week1.r1904799.log spam-ena-week2.r1904799.log spam-ena-week3.r1904799.log spam-ena-week4.r1904799.log spam-giovanni-ham.r1904799.log spam-giovanni-spammy.r1904799.log spam-giovanni-spam.r1904799.log spam-grenier.r1904799.log spam-hege.r1904799.log spam-jhardin.r1904799.log spam-llanga.r1904799.log spam-mmiroslaw-mails-ham.r1904799.log spam-mmiroslaw-mails-spam.r1904799.log spam-thendrikx.r1904799.log spam-tsz-spam-corpus.r1904799.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.498
-score AC_HTML_NONSENSE_TAGS          1.999
-score ADMITS_SPAM                    2.499
-score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        2.075
-score ADVANCE_FEE_4_NEW              2.299
-score ADVANCE_FEE_4_NEW_FRM_MNY      0.001 # force non-zero
+score AC_HTML_NONSENSE_TAGS          1.997
+score ADMITS_SPAM                    2.497
+score ADVANCE_FEE_2_NEW_MONEY        1.997
+score ADVANCE_FEE_3_NEW              3.496
+score ADVANCE_FEE_3_NEW_MONEY        2.796
+score ADVANCE_FEE_4_NEW              2.297
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_4_NEW_MONEY        0.001
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        0.192
-score AD_PREFS                       0.500
-score AMAZON_IMG_NOT_RCVD_AMZN       2.485
+score ADVANCE_FEE_5_NEW_MONEY        0.001
+score AD_PREFS                       0.430
+score AMAZON_IMG_NOT_RCVD_AMZN       2.497
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            1.839
-score BIGNUM_EMAILS_MANY             2.999
-score BITCOIN_EXTORT_01              2.707
-score BITCOIN_MALF_HTML              3.499
-score BITCOIN_ONAN                   1.058
-score BITCOIN_SPAM_02                2.499
-score BITCOIN_SPAM_03                2.499
-score BITCOIN_SPAM_09                1.499
-score BITCOIN_XPRIO                  2.499
-score BITCOIN_YOUR_INFO              2.999
-score BOGUS_MIME_VERSION             3.499
-score BOGUS_MSM_HDRS                 2.057
-score CK_HELO_GENERIC                0.250
-score CONTENT_AFTER_HTML             2.499
-score CTE_8BIT_MISMATCH              0.999
-score DEAR_BENEFICIARY               2.999
-score DX_TEXT_03                     1.999
-score ENCRYPTED_MESSAGE              -1.000
-score FILL_THIS_FORM                 1.399
+score BIGNUM_EMAILS_FREEM            2.999
+score BIGNUM_EMAILS_MANY             2.527
+score BITCOIN_EXTORT_01              2.680
+score BITCOIN_MALF_HTML              3.496
+score BITCOIN_ONAN                   1.653
+score BITCOIN_SPAM_02                2.497
+score BITCOIN_SPAM_03                2.497
+score BITCOIN_SPAM_09                1.498
+score BITCOIN_XPRIO                  2.497
+score BITCOIN_YOUR_INFO              2.996
+score BOGUS_MIME_VERSION             3.496
+score BOGUS_MSM_HDRS                 2.304
+score BULK_RE_SUSP_NTLD              0.623
+score CK_HELO_GENERIC                0.249
+score CONTENT_AFTER_HTML             2.497
+score CTE_8BIT_MISMATCH              0.998
+score DEAR_BENEFICIARY               1.982
+score DX_TEXT_03                     1.897
+score ENCRYPTED_MESSAGE              -0.999
+score FILL_THIS_FORM                 1.298
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               2.499
+score FONT_INVIS_LONG_LINE           2.813
+score FONT_INVIS_MSGID               2.497
 score FONT_INVIS_NORDNS              0.001
 score FONT_INVIS_POSTEXTRAS          1.650
-score FORM_FRAUD_5                   2.799
+score FORM_FRAUD_5                   2.896
 score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROM_2_EMAILS_SHORT            1.457
-score FROM_MISSPACED                 1.999
-score FROM_MISSP_DYNIP               1.344
-score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            1.690
-score FROM_MISSP_MSFT                0.001
+score FROM_2_EMAILS_SHORT            2.001
+score FROM_MISSPACED                 1.997
+score FROM_MISSP_DYNIP               0.516
+score FROM_MISSP_EH_MATCH            1.997
+score FROM_MISSP_FREEMAIL            2.291
+score FROM_MISSP_MSFT                0.001 # force non-zero
 score FROM_MISSP_USER                0.001
-score FROM_MULTI_NORDNS              1.219
-score FROM_NTLD_REPLY_FREEMAIL       1.709
-score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        1.999
+score FROM_MULTI_NORDNS              1.883
+score FROM_NTLD_REPLY_FREEMAIL       1.440
+score FROM_SUSPICIOUS_NTLD           0.498
+score FROM_SUSPICIOUS_NTLD_FP        1.998
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   2.699
-score FUZZY_SECURITY                 2.299
-score GB_FAKE_RF_SHORT               1.999
+score FUZZY_AMAZON                   2.796
+score FUZZY_SECURITY                 2.596
+score GB_FAKE_RF_SHORT               1.996
 score GB_FREEMAIL_DISPTO             0.499
-score GB_GOOGLE_OBFUR                0.749
 score GB_URI_FLEEK_STO_HTM           0.999
-score GOOG_REDIR_NORDNS              2.597
-score GOOG_STO_IMG_NOHTML            2.499
-score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       1.610
-score HDRS_MISSP                     2.499
-score HDR_ORDER_FTSDMCXX_DIRECT      0.137
+score GOOG_REDIR_NORDNS              2.594
+score GOOG_STO_IMG_NOHTML            2.497
+score GOOG_STO_NOIMG_HTML            2.996
+score HAS_X_OUTGOING_SPAM_STAT       0.999
+score HDRS_MISSP                     2.497
+score HDR_ORDER_FTSDMCXX_DIRECT      0.011
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.250
-score HELO_NO_DOMAIN                 0.001
-score HK_LOTTO                       0.878
-score HK_NAME_MR_MRS                 1.000
+score HEADER_FROM_DIFFERENT_DOMAINS  0.248
+score HELO_NO_DOMAIN                 0.001 # force non-zero
+score HK_LOTTO                       0.998
+score HK_NAME_MR_MRS                 0.998
 score HK_RANDOM_ENVFROM              0.999
-score HK_RANDOM_FROM                 1.000
-score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        1.999
-score HOSTED_IMG_DIRECT_MX           3.499
-score HOSTED_IMG_FREEM               2.509
-score HTML_ENTITY_ASCII              2.999
-score HTML_FONT_TINY_NORDNS          1.999
-score HTML_OFF_PAGE                  2.999
-score HTML_TAG_BALANCE_CENTER        3.899
-score HTML_TEXT_INVISIBLE_STYLE      1.874
-score JH_SPAMMY_HEADERS              3.499
-score LIST_PARTIAL_SHORT_MSG         2.499
-score LONGLN_LOW_CONTRAST            0.621
-score LONG_HEX_URI                   3.000
-score LONG_IMG_URI                   1.938
-score LONG_INVISIBLE_TEXT            2.999
+score HK_RANDOM_FROM                 0.998
+score HK_RANDOM_REPLYTO              0.998
+score HK_SCAM                        1.998
+score HOSTED_IMG_DIRECT_MX           3.496
+score HTML_FONT_TINY_NORDNS          1.997
+score HTML_OFF_PAGE                  2.996
+score HTML_TAG_BALANCE_CENTER        3.895
+score HTML_TEXT_INVISIBLE_STYLE      1.875
+score JH_SPAMMY_HEADERS              3.496
+score LIST_PARTIAL_SHORT_MSG         2.497
+score LONGLN_LOW_CONTRAST            0.938
+score LONG_HEX_URI                   2.996
+score LONG_IMG_URI                   1.941
+score LONG_INVISIBLE_TEXT            2.996
 score LOTS_OF_MONEY                  0.010
-score LOTTO_DEPT                     1.671
-score MALWARE_NORDNS                 2.791
+score LOTTO_DEPT                     0.001
+score MALWARE_NORDNS                 0.001
 score MILLION_HUNDRED                0.001
-score MIMEOLE_DIRECT_TO_MX           1.866
-score MIXED_ES                       2.099
-score MIXED_HREF_CASE                1.854
-score MONEY_ATM_CARD                 0.001
-score MONEY_FORM_SHORT               2.499
+score MIMEOLE_DIRECT_TO_MX           1.988
+score MIXED_ES                       1.997
+score MIXED_HREF_CASE                1.870
+score MONEY_ATM_CARD                 0.236
+score MONEY_FORM_SHORT               2.497
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  2.999
-score MONEY_FRAUD_8                  0.055
-score MONEY_FREEMAIL_REPTO           2.790
-score MONEY_FROM_MISSP               0.001 # force non-zero
-score MSMAIL_PRI_ABNORMAL            1.417
+score MONEY_FRAUD_5                  3.097
+score MONEY_FRAUD_8                  1.988
+score MONEY_FREEMAIL_REPTO           1.553
+score MONEY_FROM_MISSP               1.134
+score MSMAIL_PRI_ABNORMAL            0.001 # force non-zero
 score NA_DOLLARS                     0.001
-score NICE_REPLY_A                   -2.706
+score NICE_REPLY_A                   -2.680
 score NORDNS_LOW_CONTRAST            0.001
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.710
-score NUMBERONLY_BITCOIN_EXP         1.422
+score NSL_RCVD_HELO_USER             0.872
 score OBFU_TEXT_ATTACH               1.699
-score ODD_FREEM_REPTO                2.999
+score ODD_FREEM_REPTO                2.996
 score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.001
-score PDS_DBL_URL_TNB_RUNON          2.000
-score PDS_NAKED_TO_NUMERO            1.974
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
-score PDS_OTHER_BAD_TLD              1.999
+score PDS_BTC_MSGID                  0.001 # force non-zero
+score PDS_DBL_URL_TNB_RUNON          1.997
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
+score PDS_OTHER_BAD_TLD              1.997
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
-score PDS_SHORT_SPOOFED_URL          1.999
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHP_ORIG_SCRIPT                2.499
-score PHP_SCRIPT                     2.499
-score PP_MIME_FAKE_ASCII_TEXT        1.000
-score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                2.664
-score RDNS_NUM_TLD_XM                2.155
-score REPTO_419_FRAUD_GM             1.001
-score SCC_ISEMM_LID_1A               1.352
-score SCC_ISEMM_LID_1B               1.500
-score SCC_THREE_WORD_MONTY           2.699
-score SENDGRID_REDIR                 1.499
-score SERGIO_SUBJECT_VIAGRA01        0.347
-score SHARE_50_50                    0.505
-score SHOPIFY_IMG_NOT_RCVD_SFY       1.987
+score PDS_SHORT_SPOOFED_URL          1.997
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.997
+score PHP_ORIG_SCRIPT                2.497
+score PHP_SCRIPT                     2.497
+score PP_MIME_FAKE_ASCII_TEXT        0.998
+score RAND_MKTG_HEADER               1.997
+score RATWARE_NO_RDNS                1.233
+score RDNS_NUM_TLD_XM                2.278
+score SCC_ISEMM_LID_1A               3.231
+score SCC_ISEMM_LID_1B               1.498
+score SCC_THREE_WORD_MONTY           2.696
+score SENDGRID_REDIR                 1.498
+score SERGIO_SUBJECT_VIAGRA01        0.394
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.034
 score SHORTENER_SHORT_IMG            0.001
-score STATIC_XPRIO_OLE               0.014
-score THIS_AD                        0.599
-score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           1.999
-score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               0.342
-score TVD_APPROVED                   2.200
-score TVD_RCVD_SPACE_BRACKET         2.799
-score UNDISC_FREEM                   3.099
-score UNDISC_MONEY                   3.299
-score UNICODE_OBFU_ASC               2.499
-score URI_DOTEDU                     1.999
-score URI_FIREBASEAPP                2.999
-score URI_GOOGLE_PROXY               2.200
-score URI_PHISH                      3.999
-score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.600
-score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.801
-score WORD_INVIS                     0.236
-score WORD_INVIS_MANY                2.999
+score STATIC_XPRIO_OLE               0.001
+score THIS_AD                        0.698
+score TO_NO_BRKTS_FROM_MSSP          2.497
+score TO_NO_BRKTS_HTML_IMG           1.997
+score TO_NO_BRKTS_HTML_ONLY          1.997
+score TO_NO_BRKTS_NORDNS_HTML        1.997
+score TO_NO_BRKTS_PCNT               1.036
+score TVD_APPROVED                   2.490
+score TVD_RCVD_SPACE_BRACKET         2.896
+score UNDISC_FREEM                   3.096
+score UNDISC_MONEY                   3.296
+score UNICODE_OBFU_ASC               2.497
+score URI_DOTEDU                     1.997
+score URI_FIREBASEAPP                2.996
+score URI_GOOGLE_PROXY               2.297
+score URI_PHISH                      3.995
+score URI_PHP_REDIR                  3.496
+score URI_TRY_3LD                    1.998
+score URI_WPADMIN                    2.596
+score URI_WP_HACKED_2                2.497
+score VFY_ACCT_NORDNS                2.840
+score WORD_INVIS                     0.233
+score WORD_INVIS_MANY                2.997
 score XFER_LOTSA_MONEY               0.999
-score XM_RANDOM                      2.499
-score XM_RECPTID                     2.999
-score XPRIO_SHORT_SUBJ               0.561
-score YOU_INHERIT                    0.001
+score XM_RANDOM                      2.497
+score XM_RECPTID                     2.997
+score XPRIO_SHORT_SUBJ               1.874
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -202,7 +195,6 @@ score BODY_URI_ONLY                  1.0
 score BOMB_FREEM                     1.000
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
-score BULK_RE_SUSP_NTLD              1.000
 score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
@@ -228,6 +220,7 @@ score GB_BITCOIN_CP                  1.0
 score GB_CUSTOM_HTM_URI              1.000
 score GB_FORGED_MUA_POSTFIX          1.000
 score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
+score GB_GOOGLE_OBFUR                0.750
 score GB_STORAGE_GOOGLE_EMAIL        1.000
 score GOOGLE_DOCS_PHISH              1.000
 score GOOGLE_DOCS_PHISH_MANY         1.000
@@ -239,13 +232,14 @@ score GOOG_STO_HTML_PHISH            1.0
 score GOOG_STO_HTML_PHISH_MANY       1.000
 score GOOG_STO_IMG_HTML              1.000
 score HAS_X_NO_RELAY                 1.000
-score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
 score HK_RCVD_IP_MULTICAST           1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
+score HOSTED_IMG_FREEM               1.000
 score HOSTED_IMG_MULTI               1.000
 score HOSTED_IMG_MULTI_PUB_01        1.000
+score HTML_ENTITY_ASCII              1.000
 score HTML_ENTITY_ASCII_TINY         1.000
 score HTML_SHRT_CMNT_OBFU_MANY       1.000
 score HTML_SINGLET_MANY              1.000
@@ -261,7 +255,6 @@ score LOTTO_AGENT                    1.0
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
 score MALWARE_PASSWORD               1.000
-score MANY_HDRS_LCASE                0.100
 score MIME_NO_TEXT                   1.000
 score MIXED_AREA_CASE                1.000
 score MIXED_CENTER_CASE              1.000
@@ -277,8 +270,10 @@ score MSGID_HDR_MALF                 1.0
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
+score NUMBERONLY_BITCOIN_EXP         1.000
 score OBFU_BITCOIN                   1.000
-score PDS_PHPEXP_BOT                 1.000
+score PDS_FROM_2_EMAILS              1.000
+score PDS_NAKED_TO_NUMERO            1.000
 score PDS_PHP_EVAL                   1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000
@@ -299,6 +294,7 @@ score REPTO_419_FRAUD                1.0
 score REPTO_419_FRAUD_AOL            1.000
 score REPTO_419_FRAUD_AOL_LOOSE      1.000
 score REPTO_419_FRAUD_CNS            1.000
+score REPTO_419_FRAUD_GM             1.000
 score REPTO_419_FRAUD_GM_LOOSE       1.000
 score REPTO_419_FRAUD_HM             1.000
 score REPTO_419_FRAUD_OL             1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1904821&r1=1904820&r2=1904821&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Tue Oct 25 02:42:35 2022
@@ -3,180 +3,180 @@
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
-score AC_FROM_MANY_DOTS              2.290
-score AC_HTML_NONSENSE_TAGS          1.997
-score ADMITS_SPAM                    1.816
-score ADVANCE_FEE_2_NEW_MONEY        1.997
-score ADVANCE_FEE_3_NEW              3.496
-score ADVANCE_FEE_3_NEW_MONEY        2.699
-score ADVANCE_FEE_4_NEW_FRM_MNY      1.975
-score ADVANCE_FEE_4_NEW_MONEY        0.392
+score AC_FROM_MANY_DOTS              2.286
+score AC_HTML_NONSENSE_TAGS          1.999
+score ADMITS_SPAM                    1.814
+score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_3_NEW              3.499
+score ADVANCE_FEE_3_NEW_MONEY        2.474
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.976
+score ADVANCE_FEE_4_NEW_MONEY        0.326
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_5_NEW_MONEY        0.001
-score AD_PREFS                       0.498
-score AMAZON_IMG_NOT_RCVD_AMZN       0.001 # force non-zero
+score AD_PREFS                       0.499
+score AMAZON_IMG_NOT_RCVD_AMZN       0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            0.491
-score BIGNUM_EMAILS_MANY             2.996
-score BITCOIN_EXTORT_01              4.773
-score BITCOIN_MALF_HTML              3.304
-score BITCOIN_MALWARE                1.957
-score BITCOIN_ONAN                   2.134
-score BITCOIN_SPAM_02                0.385
-score BITCOIN_SPAM_03                2.497
-score BITCOIN_SPAM_05                0.649
-score BITCOIN_SPAM_09                1.498
+score BIGNUM_EMAILS_FREEM            0.886
+score BIGNUM_EMAILS_MANY             2.999
+score BITCOIN_EXTORT_01              4.597
+score BITCOIN_MALF_HTML              3.499
+score BITCOIN_MALWARE                3.428
+score BITCOIN_ONAN                   2.133
+score BITCOIN_SPAM_02                0.370
+score BITCOIN_SPAM_03                2.499
+score BITCOIN_SPAM_05                1.847
+score BITCOIN_SPAM_09                1.499
 score BITCOIN_XPRIO                  0.001
-score BITCOIN_YOUR_INFO              2.171
-score BODY_URI_ONLY                  1.957
-score BOGUS_MIME_VERSION             3.496
-score BOGUS_MSM_HDRS                 1.571
+score BITCOIN_YOUR_INFO              2.190
+score BODY_URI_ONLY                  2.178
+score BOGUS_MIME_VERSION             3.499
+score BOGUS_MSM_HDRS                 2.210
 score CK_HELO_GENERIC                0.001 # force non-zero
-score CONTENT_AFTER_HTML             2.497
+score CONTENT_AFTER_HTML             2.499
 score CTE_8BIT_MISMATCH              0.001
-score DEAR_BENEFICIARY               2.796
-score DKIMWL_WL_HIGH                 -0.503
-score DKIMWL_WL_MED                  -0.001
-score DKIMWL_WL_MEDHI                -0.001
-score DX_TEXT_03                     1.897
-score ENCRYPTED_MESSAGE              -1.000
-score FILL_THIS_FORM                 1.098
+score DEAR_BENEFICIARY               2.799
+score DKIMWL_WL_HIGH                 -0.517
+score DKIMWL_WL_MED                  -0.001 # force non-zero
+score DKIMWL_WL_MEDHI                -0.001 # force non-zero
+score DX_TEXT_03                     1.899
+score ENCRYPTED_MESSAGE              -0.999
+score FILL_THIS_FORM                 1.099
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_MSGID               2.107
-score FONT_INVIS_NORDNS              1.250
-score FONT_INVIS_POSTEXTRAS          2.181
-score FORGED_SPF_HELO                0.357
-score FORM_FRAUD_5                   2.796
+score FONT_INVIS_MSGID               2.135
+score FONT_INVIS_NORDNS              1.418
+score FONT_INVIS_POSTEXTRAS          2.184
+score FORGED_SPF_HELO                0.358
+score FORM_FRAUD_5                   2.799
 score FREEMAIL_FORGED_FROMDOMAIN     0.001
-score FROM_2_EMAILS_SHORT            1.503
+score FROM_2_EMAILS_SHORT            1.646
 score FROM_FMBLA_NEWDOM              0.001
 score FROM_FMBLA_NEWDOM14            0.001
-score FROM_FMBLA_NEWDOM28            0.798
-score FROM_GOV_DKIM_AU               -0.536
-score FROM_MISSPACED                 1.997
-score FROM_MISSP_DYNIP               1.440
-score FROM_MISSP_EH_MATCH            1.997
-score FROM_MISSP_FREEMAIL            0.899
+score FROM_FMBLA_NEWDOM28            0.799
+score FROM_GOV_DKIM_AU               -0.967
+score FROM_MISSPACED                 1.999
+score FROM_MISSP_DYNIP               2.399
+score FROM_MISSP_EH_MATCH            2.000
+score FROM_MISSP_FREEMAIL            0.866
 score FROM_MISSP_MSFT                0.001
 score FROM_MISSP_SPF_FAIL            0.001
 score FROM_MISSP_USER                0.001
-score FROM_MULTI_NORDNS              0.996
-score FROM_PAYPAL_SPOOF              1.280
-score FROM_SUSPICIOUS_NTLD           0.001
-score FROM_SUSPICIOUS_NTLD_FP        1.763
+score FROM_MULTI_NORDNS              1.001
+score FROM_PAYPAL_SPOOF              1.225
+score FROM_SUSPICIOUS_NTLD           0.001 # force non-zero
+score FROM_SUSPICIOUS_NTLD_FP        1.766
 score FSL_BULK_SIG                   0.001
 score FSL_CTYPE_WIN1251              0.001
-score FSL_NEW_HELO_USER              0.001 # force non-zero
-score FUZZY_AMAZON                   2.699
-score GB_FAKE_RF_SHORT               0.936
-score GB_FREEMAIL_DISPTO             0.498
-score GB_HASHBL_BTC                  1.507
-score GB_URI_FLEEK_STO_HTM           0.998
-score GOOG_REDIR_NORDNS              3.196
-score GOOG_STO_IMG_NOHTML            2.497
-score GOOG_STO_NOIMG_HTML            2.996
-score HAS_X_OUTGOING_SPAM_STAT       1.335
-score HDRS_MISSP                     2.497
+score FSL_NEW_HELO_USER              0.001
+score FUZZY_AMAZON                   2.356
+score GB_FAKE_RF_SHORT               1.255
+score GB_FREEMAIL_DISPTO             0.500
+score GB_HASHBL_BTC                  1.480
+score GB_URI_FLEEK_STO_HTM           1.000
+score GOOG_REDIR_NORDNS              3.200
+score GOOG_STO_IMG_NOHTML            2.500
+score GOOG_STO_NOIMG_HTML            2.999
+score HAS_X_OUTGOING_SPAM_STAT       1.258
+score HDRS_MISSP                     2.499
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.249
-score HELO_NO_DOMAIN                 0.250
+score HEADER_FROM_DIFFERENT_DOMAINS  0.250
+score HELO_NO_DOMAIN                 0.251
 score HK_LOTTO                       0.999
-score HK_NAME_MR_MRS                 0.998
-score HK_RANDOM_ENVFROM              0.998
-score HK_RANDOM_FROM                 0.998
-score HK_RANDOM_REPLYTO              0.998
-score HK_SCAM                        1.144
-score HOSTED_IMG_DIRECT_MX           2.140
-score HTML_FONT_TINY_NORDNS          1.997
-score HTML_OFF_PAGE                  2.996
-score HTML_TAG_BALANCE_CENTER        3.795
-score HTML_TEXT_INVISIBLE_FONT       0.343
-score HTML_TEXT_INVISIBLE_STYLE      3.440
-score JH_SPAMMY_HEADERS              3.496
-score KHOP_HELO_FCRDNS               0.398
-score LIST_PARTIAL_SHORT_MSG         2.497
-score LONGLN_LOW_CONTRAST            0.378
-score LONG_HEX_URI                   1.610
-score LONG_IMG_URI                   0.001
-score LONG_INVISIBLE_TEXT            2.883
+score HK_NAME_MR_MRS                 0.999
+score HK_RANDOM_ENVFROM              0.999
+score HK_RANDOM_FROM                 0.999
+score HK_RANDOM_REPLYTO              0.999
+score HK_SCAM                        1.114
+score HOSTED_IMG_DIRECT_MX           0.790
+score HTML_FONT_TINY_NORDNS          1.999
+score HTML_OFF_PAGE                  2.999
+score HTML_TAG_BALANCE_CENTER        3.799
+score HTML_TEXT_INVISIBLE_FONT       0.318
+score HTML_TEXT_INVISIBLE_STYLE      3.439
+score JH_SPAMMY_HEADERS              3.499
+score KHOP_HELO_FCRDNS               0.400
+score LIST_PARTIAL_SHORT_MSG         2.499
+score LONGLN_LOW_CONTRAST            0.542
+score LONG_HEX_URI                   1.605
+score LONG_IMG_URI                   0.001 # force non-zero
+score LONG_INVISIBLE_TEXT            2.570
 score LOTS_OF_MONEY                  0.010
-score LOTTO_DEPT                     0.001
-score MALWARE_NORDNS                 2.179
+score LOTTO_DEPT                     0.001 # force non-zero
+score MALWARE_NORDNS                 2.146
 score MILLION_HUNDRED                0.001
 score MIMEOLE_DIRECT_TO_MX           0.001
-score MIXED_ES                       1.154
-score MIXED_HREF_CASE                1.950
-score MONEY_ATM_CARD                 0.232
-score MONEY_FORM_SHORT               2.498
+score MIXED_ES                       1.159
+score MIXED_HREF_CASE                1.382
+score MONEY_ATM_CARD                 0.451
+score MONEY_FORM_SHORT               2.500
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  2.896
-score MONEY_FRAUD_8                  1.048
-score MONEY_FREEMAIL_REPTO           0.789
+score MONEY_FRAUD_5                  2.899
+score MONEY_FRAUD_8                  1.018
+score MONEY_FREEMAIL_REPTO           0.820
 score MONEY_FROM_MISSP               0.001
-score MSMAIL_PRI_ABNORMAL            0.001 # force non-zero
+score MSMAIL_PRI_ABNORMAL            0.001
 score NA_DOLLARS                     0.001
 score NICE_REPLY_A                   -0.001
-score NORDNS_LOW_CONTRAST            0.470
+score NORDNS_LOW_CONTRAST            0.309
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.401
-score OBFU_TEXT_ATTACH               0.435
-score ODD_FREEM_REPTO                2.940
-score PDS_BTC_ID                     0.216
-score PDS_BTC_MSGID                  0.001
-score PDS_HELO_SPF_FAIL              0.343
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.748
-score PDS_OTHER_BAD_TLD              1.997
-score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
-score PDS_SHORT_SPOOFED_URL          1.997
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.997
-score PHP_SCRIPT                     2.206
-score PP_MIME_FAKE_ASCII_TEXT        0.001 # force non-zero
-score RAND_MKTG_HEADER               1.998
-score RATWARE_NO_RDNS                0.682
-score RCVD_IN_MSPIKE_H2              -0.001 # force non-zero
-score RDNS_NUM_TLD_XM                1.146
-score REPTO_419_FRAUD_GM             0.001
-score SCC_ISEMM_LID_1A               3.028
-score SCC_ISEMM_LID_1B               1.498
-score SCC_THREE_WORD_MONTY           2.596
-score SENDGRID_REDIR                 1.066
-score SERGIO_SUBJECT_VIAGRA01        1.355
-score SHOPIFY_IMG_NOT_RCVD_SFY       0.547
-score SHORTENER_SHORT_IMG            0.873
+score NSL_RCVD_FROM_USER             0.001 # force non-zero
+score NSL_RCVD_HELO_USER             2.385
+score OBFU_TEXT_ATTACH               0.312
+score ODD_FREEM_REPTO                2.944
+score PDS_BTC_ID                     0.238
+score PDS_BTC_MSGID                  0.001 # force non-zero
+score PDS_HELO_SPF_FAIL              0.001
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
+score PDS_OTHER_BAD_TLD              1.999
+score PDS_RDNS_DYNAMIC_FP            0.001
+score PDS_SHORT_SPOOFED_URL          1.999
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
+score PHP_SCRIPT                     2.287
+score PP_MIME_FAKE_ASCII_TEXT        0.001
+score RAND_MKTG_HEADER               1.999
+score RATWARE_NO_RDNS                2.372
+score RCVD_IN_MSPIKE_H2              -0.001
+score RDNS_NUM_TLD_XM                2.270
+score REPTO_419_FRAUD_GM             0.038
+score SCC_ISEMM_LID_1A               1.973
+score SCC_ISEMM_LID_1B               1.500
+score SCC_THREE_WORD_MONTY           2.599
+score SENDGRID_REDIR                 1.069
+score SERGIO_SUBJECT_VIAGRA01        1.291
+score SHOPIFY_IMG_NOT_RCVD_SFY       0.548
+score SHORTENER_SHORT_IMG            0.984
 score SPOOFED_FREEMAIL               0.001
-score SPOOFED_FREEMAIL_NO_RDNS       0.001
+score SPOOFED_FREEMAIL_NO_RDNS       0.001 # force non-zero
 score SPOOFED_FREEM_REPTO            0.001
-score SPOOF_GMAIL_MID                0.001
+score SPOOF_GMAIL_MID                0.001 # force non-zero
 score STATIC_XPRIO_OLE               0.001
-score THIS_AD                        0.698
-score TO_EQ_FM_DOM_SPF_FAIL          0.001
+score THIS_AD                        0.699
+score TO_EQ_FM_DOM_SPF_FAIL          0.001 # force non-zero
 score TO_EQ_FM_SPF_FAIL              0.001
-score TO_NO_BRKTS_FROM_MSSP          2.497
-score TO_NO_BRKTS_HTML_IMG           1.997
-score TO_NO_BRKTS_HTML_ONLY          1.997
-score TO_NO_BRKTS_NORDNS_HTML        1.997
-score TO_NO_BRKTS_PCNT               0.080
+score TO_NO_BRKTS_FROM_MSSP          2.499
+score TO_NO_BRKTS_HTML_IMG           1.999
+score TO_NO_BRKTS_HTML_ONLY          1.999
+score TO_NO_BRKTS_NORDNS_HTML        1.999
+score TO_NO_BRKTS_PCNT               1.202
 score TVD_APPROVED                   2.570
-score TVD_RCVD_SPACE_BRACKET         2.643
-score UNDISC_FREEM                   2.996
-score UNDISC_MONEY                   2.780
-score UNICODE_OBFU_ASC               2.497
-score URI_DOTEDU                     1.997
-score URI_FIREBASEAPP                2.996
+score TVD_RCVD_SPACE_BRACKET         0.053
+score UNDISC_FREEM                   2.999
+score UNDISC_MONEY                   2.788
+score UNICODE_OBFU_ASC               2.499
+score URI_DOTEDU                     1.999
+score URI_FIREBASEAPP                2.999
 score URI_GOOGLE_PROXY               0.001
-score URI_PHISH                      3.410
-score URI_PHP_REDIR                  3.478
-score URI_TRY_3LD                    1.679
-score URI_WPADMIN                    2.497
-score URI_WP_HACKED_2                2.497
-score VFY_ACCT_NORDNS                2.458
+score URI_PHISH                      3.404
+score URI_PHP_REDIR                  3.486
+score URI_TRY_3LD                    1.682
+score URI_WPADMIN                    2.499
+score URI_WP_HACKED_2                2.499
+score VFY_ACCT_NORDNS                2.300
 score WORD_INVIS                     0.001 # force non-zero
-score WORD_INVIS_MANY                2.996
-score XFER_LOTSA_MONEY               0.998
-score XM_RANDOM                      2.497
-score XM_RECPTID                     1.946
+score WORD_INVIS_MANY                3.000
+score XFER_LOTSA_MONEY               0.999
+score XM_RANDOM                      2.499
+score XM_RECPTID                     1.944
 score XPRIO                          0.001
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
@@ -261,7 +261,6 @@ score GOOG_STO_HTML_PHISH            1.0
 score GOOG_STO_HTML_PHISH_MANY       1.000
 score GOOG_STO_IMG_HTML              1.000
 score HAS_X_NO_RELAY                 1.000
-score HDRS_LCASE                     0.100
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
 score HK_RCVD_IP_MULTICAST           1.000
@@ -302,7 +301,6 @@ score NUMBERONLY_BITCOIN_EXP         1.0
 score OBFU_BITCOIN                   1.000
 score PDS_DBL_URL_TNB_RUNON          1.000
 score PDS_NAKED_TO_NUMERO            1.000
-score PDS_PHPEXP_BOT                 1.000
 score PDS_PHP_EVAL                   1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1904821&r1=1904820&r2=1904821&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Tue Oct 25 02:42:35 2022
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 230401  68.240%  (99.591% of non-spam corpus)
-# Correctly spam:      78992  23.396%  (74.322% of spam corpus)
-# False positives:       947  0.280%  (0.409% of nonspam,  15082 weighted)
-# False negatives:     27292  8.083%  (25.678% of spam,  43634 weighted)
-# Average score for spam:  10.9    nonspam: 0.6
-# Average for false-pos:   6.9  false-neg: 1.6
-# TOTAL:              337632  100.00%
+# Correctly non-spam: 321753  74.992%  (99.700% of non-spam corpus)
+# Correctly spam:      77990  18.177%  (73.350% of spam corpus)
+# False positives:       969  0.226%  (0.300% of nonspam,   9385 weighted)
+# False negatives:     28336  6.604%  (26.650% of spam,  46099 weighted)
+# Average score for spam:  10.1    nonspam: 0.4
+# Average for false-pos:   5.9  false-neg: 1.6
+# TOTAL:              429048  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  28881  99.65%
-# Correctly spam:      10005  74.51%
-# False positives:       102  0.35%
-# False negatives:      3422  25.49%
-# TCR(l=50): 1.575569  SpamRecall: 74.514%  SpamPrec: 98.991%
+# Correctly non-spam:  40074  99.73%
+# Correctly spam:       9813  73.07%
+# False positives:       108  0.27%
+# False negatives:      3617  26.93%
+# TCR(l=50): 1.489409  SpamRecall: 73.068%  SpamPrec: 98.911%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 225109  97.30%
-# Correctly spam:      67644  63.64%
-# False positives:      6239  2.70%
-# False negatives:     38640  36.36%
-# TCR(l=50): 0.303158  SpamRecall: 63.645%  SpamPrec: 91.556%
+# Correctly non-spam: 316394  98.04%
+# Correctly spam:      66711  62.74%
+# False positives:      6328  1.96%
+# False negatives:     39615  37.26%
+# TCR(l=50): 0.298656  SpamRecall: 62.742%  SpamPrec: 91.336%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  28143  97.10%
-# Correctly spam:       8532  63.54%
-# False positives:       840  2.90%
-# False negatives:      4895  36.46%
-# TCR(l=50): 0.286321  SpamRecall: 63.544%  SpamPrec: 91.037%
+# Correctly non-spam:  39425  98.12%
+# Correctly spam:       8396  62.52%
+# False positives:       757  1.88%
+# False negatives:      5034  37.48%
+# TCR(l=50): 0.313170  SpamRecall: 62.517%  SpamPrec: 91.729%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1904821&r1=1904820&r2=1904821&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Tue Oct 25 02:42:35 2022
@@ -1,11 +1,11 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 341264  75.349%  (99.570% of non-spam corpus)
-# Correctly spam:      86530  19.105%  (78.541% of spam corpus)
-# False positives:      1474  0.325%  (0.430% of nonspam,  32325 weighted)
-# False negatives:     23642  5.220%  (21.459% of spam,  45902 weighted)
-# Average score for spam:  16.6    nonspam: -0.8
+# Correctly non-spam: 341227  75.341%  (99.559% of non-spam corpus)
+# Correctly spam:      86590  19.119%  (78.595% of spam corpus)
+# False positives:      1511  0.334%  (0.441% of nonspam,  32923 weighted)
+# False negatives:     23582  5.207%  (21.405% of spam,  45612 weighted)
+# Average score for spam:  16.7    nonspam: -0.8
 # Average for false-pos:   6.8  false-neg: 1.9
 # TOTAL:              452910  100.00%
 
@@ -13,11 +13,11 @@ Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  42519  99.55%
-# Correctly spam:      10967  78.72%
-# False positives:       192  0.45%
-# False negatives:      2964  21.28%
-# TCR(l=50): 1.108803  SpamRecall: 78.724%  SpamPrec: 98.279%
+# Correctly non-spam:  42518  99.55%
+# Correctly spam:      10970  78.75%
+# False positives:       193  0.45%
+# False negatives:      2961  21.25%
+# TCR(l=50): 1.104671  SpamRecall: 78.745%  SpamPrec: 98.271%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...