You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2020/12/27 03:07:55 UTC

svn commit: r1884832 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1884832&r1=1884831&r2=1884832&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Dec 27 03:07:55 2020
@@ -2,58 +2,57 @@
 # ham-axb-coi-bulk.r1884793.log ham-axb-generic.r1884793.log ham-axb-ham-misc.r1884793.log ham-darxus.r1884793.log ham-ena-week0.r1884793.log ham-ena-week1.r1884793.log ham-ena-week2.r1884793.log ham-ena-week3.r1884793.log ham-ena-week4.r1884793.log ham-giovanni-ham.r1884793.log ham-giovanni-spammy.r1884793.log ham-giovanni-spam.r1884793.log ham-grenier.r1884793.log ham-llanga.r1884793.log ham-mmiroslaw-mails-ham.r1884793.log ham-mmiroslaw-mails-spam.r1884793.log ham-npiazzi.r1884793.log ham-pds.r1884793.log ham-sihde.r1884793.log ham-spamsponge.r1884793.log ham-thendrikx.r1884793.log spam-axb-coi-bulk.r1884793.log spam-axb-generic.r1884793.log spam-axb-ham-misc.r1884793.log spam-darxus.r1884793.log spam-ena-week0.r1884793.log spam-ena-week1.r1884793.log spam-ena-week2.r1884793.log spam-ena-week3.r1884793.log spam-ena-week4.r1884793.log spam-giovanni-ham.r1884793.log spam-giovanni-spammy.r1884793.log spam-giovanni-spam.r1884793.log spam-grenier.r1884793.log spam-llanga.r1884793.log 
 spam-mmiroslaw-mails-ham.r1884793.log spam-mmiroslaw-mails-spam.r1884793.log spam-npiazzi.r1884793.log spam-pds.r1884793.log spam-sihde.r1884793.log spam-spamsponge.r1884793.log spam-thendrikx.r1884793.log
 
 score AC_BR_BONANZA                  0.001
-score AC_DIV_BONANZA                 0.001 # force non-zero
+score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.194
+score ADVANCE_FEE_2_NEW_FRM_MNY      0.464
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              1.997
+score ADVANCE_FEE_3_NEW              0.749
 score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_3_NEW_MONEY        0.918
-score ADVANCE_FEE_4_NEW              4.399
-score ADVANCE_FEE_4_NEW_FRM_MNY      1.225
-score ADVANCE_FEE_4_NEW_MONEY        3.799
-score ADVANCE_FEE_5_NEW              2.499
+score ADVANCE_FEE_3_NEW_MONEY        1.557
+score ADVANCE_FEE_4_NEW              4.328
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.062
+score ADVANCE_FEE_4_NEW_MONEY        0.153
+score ADVANCE_FEE_5_NEW              2.498
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        0.001
+score ADVANCE_FEE_5_NEW_MONEY        0.001 # force non-zero
 score ALIBABA_IMG_NOT_RCVD_ALI       2.499
-score AMAZON_IMG_NOT_RCVD_AMZN       2.500
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
 score APP_DEVELOPMENT_NORDNS         1.999
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.518
-score BIGNUM_EMAILS                  2.186
-score BITCOIN_DEADLINE               1.781
-score BITCOIN_EXTORT_01              4.597
-score BITCOIN_MALF_HTML              0.911
-score BITCOIN_SPAM_02                2.010
-score BITCOIN_SPAM_03                0.952
+score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.620
+score BIGNUM_EMAILS                  2.138
+score BITCOIN_DEADLINE               0.896
+score BITCOIN_EXTORT_01              4.661
+score BITCOIN_MALF_HTML              1.448
+score BITCOIN_SPAM_02                2.389
+score BITCOIN_SPAM_03                0.415
 score BITCOIN_SPAM_07                3.499
-score BITCOIN_XPRIO                  1.017
-score BITCOIN_YOUR_INFO              0.709
+score BITCOIN_XPRIO                  1.107
+score BITCOIN_YOUR_INFO              1.213
 score BODY_EMPTY                     1.999
-score BODY_SINGLE_URI                1.452
+score BODY_SINGLE_URI                1.192
 score BODY_SINGLE_WORD               0.001
 score BODY_URI_ONLY                  2.999
 score BOGUS_MIME_VERSION             3.499
 score CK_HELO_GENERIC                0.249
 score CTE_8BIT_MISMATCH              0.999
-score DATE_IN_FUTURE_96_Q            2.399
-score DEAR_BENEFICIARY               0.252
+score DEAR_BENEFICIARY               0.001
 score DSN_NO_MIMEVERSION             1.999
 score DX_TEXT_03                     0.399
-score END_FUTURE_EMAILS              2.100
-score FAKE_REPLY_A1                  3.400
+score END_FUTURE_EMAILS              2.099
+score FAKE_REPLY_A1                  3.499
 score FAKE_REPLY_B                   3.099
 score FILL_THIS_FORM                 0.001
-score FONT_INVIS_DIRECT              2.409
-score FONT_INVIS_LONG_LINE           0.001
-score FONT_INVIS_MSGID               2.487
-score FONT_INVIS_NORDNS              0.136
+score FONT_INVIS_DIRECT              2.383
+score FONT_INVIS_LONG_LINE           0.249
+score FONT_INVIS_MSGID               2.499
+score FONT_INVIS_NORDNS              0.100
 score FORGED_RELAY_MUA_TO_MX         3.799
 score FORM_FRAUD                     0.001
-score FORM_FRAUD_3                   2.799
+score FORM_FRAUD_3                   2.800
 score FORM_FRAUD_5                   0.001
-score FOUND_YOU                      3.249
+score FOUND_YOU                      2.601
 score FREEMAIL_FORGED_FROMDOMAIN     0.249
 score FROMSPACE                      3.299
 score FROM_2_EMAILS_SHORT            1.999
@@ -63,113 +62,111 @@ score FROM_MISSP_EH_MATCH            0.0
 score FROM_MISSP_FREEMAIL            4.199
 score FROM_MISSP_MSFT                0.001
 score FROM_MISSP_REPLYTO             0.001
-score FROM_MISSP_TO_UNDISC           1.097
-score FROM_MISSP_USER                0.001
+score FROM_MISSP_TO_UNDISC           0.300
+score FROM_MISSP_USER                0.001 # force non-zero
 score FROM_MISSP_XPRIO               0.001
-score FROM_MULTI_NORDNS              2.603
-score FROM_NTLD_LINKBAIT             1.999
-score FROM_NTLD_REPLY_FREEMAIL       1.999
-score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_MULTI_NORDNS              2.596
+score FROM_NTLD_LINKBAIT             1.232
+score FROM_NTLD_REPLY_FREEMAIL       1.555
+score FROM_SUSPICIOUS_NTLD           0.499
 score FROM_SUSPICIOUS_NTLD_FP        1.999
 score FROM_WSP_TRAIL                 2.499
 score FSL_CTYPE_WIN1251              0.001
-score FSL_HAS_TINYURL                1.553
+score FSL_HAS_TINYURL                2.389
 score FSL_NEW_HELO_USER              0.001
 score FSL_THIS_IS_ADV                3.099
-score GB_BITCOIN_CP                  1.411
-score GB_FREEMAIL_DISPTO             0.346
+score GB_BITCOIN_CP                  1.140
+score GB_FREEMAIL_DISPTO             0.347
 score GB_GOOGLE_OBFUS                0.749
 score GOOGLE_DOCS_PHISH              0.001
 score GOOGLE_DOC_SUSP                2.999
 score GOOG_REDIR_NORDNS              2.499
-score GOOG_STO_IMG_HTML              1.867
+score GOOG_STO_IMG_HTML              2.292
 score GOOG_STO_IMG_NOHTML            2.499
 score GOOG_STO_NOIMG_HTML            2.999
-score HDRS_LCASE                     0.100
-score HDRS_LCASE_IMGONLY             0.100
+score HDRS_LCASE                     0.099
+score HDRS_LCASE_IMGONLY             0.099
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.249
+score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
 score HK_NAME_FM_MR_MRS              1.499
 score HK_NAME_MR_MRS                 0.999
 score HK_RANDOM_FROM                 1.000
 score HK_RANDOM_REPLYTO              0.999
 score HK_RCVD_IP_MULTICAST           1.999
-score HK_SCAM                        0.001
+score HK_SCAM                        0.422
 score HK_WIN                         0.999
-score HOSTED_IMG_DIRECT_MX           1.000
+score HOSTED_IMG_DIRECT_MX           0.481
 score HOSTED_IMG_FREEM               3.499
-score HOSTED_IMG_MULTI               1.670
+score HOSTED_IMG_MULTI               1.716
 score HTML_OFF_PAGE                  2.999
-score HTML_SINGLET_MANY              0.001
-score HTML_TEXT_INVISIBLE_FONT       1.999
-score HTML_TEXT_INVISIBLE_STYLE      0.213
-score IMG_ONLY_FM_DOM_INFO           1.432
-score KHOP_FAKE_EBAY                 0.376
-score KHOP_HELO_FCRDNS               0.399
-score LIST_PRTL_SAME_USER            0.177
-score LONG_HEX_URI                   2.500
+score HTML_SINGLET_MANY              0.240
+score HTML_TEXT_INVISIBLE_FONT       2.000
+score HTML_TEXT_INVISIBLE_STYLE      0.247
+score IMG_ONLY_FM_DOM_INFO           1.480
+score KHOP_FAKE_EBAY                 0.372
+score KHOP_HELO_FCRDNS               0.400
+score LIST_PRTL_SAME_USER            0.005
+score LONG_HEX_URI                   2.502
 score LONG_IMG_URI                   0.487
 score LONG_INVISIBLE_TEXT            0.001
-score LOTS_OF_MONEY                  0.010
+score LOTS_OF_MONEY                  0.009
 score LOTTO_AGENT                    1.499
 score LOTTO_DEPT                     1.999
-score LUCRATIVE                      1.999
-score MANY_HDRS_LCASE                0.099
+score LUCRATIVE                      1.567
+score MANY_HDRS_LCASE                0.100
 score MANY_SPAN_IN_TEXT              2.499
-score MAY_BE_FORGED                  1.090
+score MAY_BE_FORGED                  1.093
 score MILLION_HUNDRED                0.001
-score MILLION_USD                    1.006
+score MILLION_USD                    0.367
 score MIMEOLE_DIRECT_TO_MX           0.001
 score MIME_NO_TEXT                   1.999
-score MIXED_ES                       2.599
+score MIXED_ES                       2.699
 score MONEY_ATM_CARD                 2.999
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               0.048
-score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  0.096
+score MONEY_FORM_SHORT               0.113
+score MONEY_FRAUD_3                  0.001 # force non-zero
+score MONEY_FRAUD_5                  0.001
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           1.390
+score MONEY_FREEMAIL_REPTO           1.392
 score MONEY_FROM_41                  1.999
 score MONEY_FROM_MISSP               0.001
 score MONEY_NOHTML                   2.499
 score MSGID_DOLLARS_URI_IMG          2.999
-score MSGID_NOFQDN1                  0.250
-score MSMAIL_PRI_ABNORMAL            0.712
+score MSGID_NOFQDN1                  0.899
+score MSMAIL_PRI_ABNORMAL            0.683
 score NA_DOLLARS                     1.499
-score NICE_REPLY_A                   -2.196
-score NORDNS_LOW_CONTRAST            1.538
-score NO_FM_NAME_IP_HOSTN            0.142
-score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             2.321
-score NUMBEREND_LINKBAIT             0.999
-score OFFER_ONLY_AMERICA             0.505
-score ORDER_TODAY                    1.488
+score NICE_REPLY_A                   -2.021
+score NORDNS_LOW_CONTRAST            1.539
+score NO_FM_NAME_IP_HOSTN            0.001
+score NSL_RCVD_FROM_USER             0.001 # force non-zero
+score NSL_RCVD_HELO_USER             1.901
+score NUMBEREND_LINKBAIT             1.000
+score OFFER_ONLY_AMERICA             0.499
+score ORDER_TODAY                    1.772
 score PDS_BTC_ID                     0.500
 score PDS_BTC_MSGID                  0.001
-score PDS_BTC_NTLD                   1.350
-score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_EMPTYSUBJ_URISHRT          1.499
+score PDS_BTC_NTLD                   1.814
+score PDS_DBL_URL_TNB_RUNON          2.000
+score PDS_EMPTYSUBJ_URISHRT          1.024
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              1.583
+score PDS_FROM_2_EMAILS              1.581
 score PDS_FROM_NAME_TO_DOMAIN        0.999
 score PDS_LITECOIN_ID                0.500
 score PDS_NAKED_TO_NUMERO            1.999
 score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
-score PDS_OTHER_BAD_TLD              1.999
-score PDS_PHP_EVAL                   1.499
+score PDS_OTHER_BAD_TLD              2.000
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_SHORT_SPOOFED_URL          1.999
-score PDS_TINYSUBJ_URISHRT           1.499
+score PDS_TINYSUBJ_URISHRT           0.777
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999
-score PDS_TONAME_EQ_TOLOCAL_SHORT    2.000
+score PDS_TONAME_EQ_TOLOCAL_SHORT    1.999
 score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.999
-score PDS_TO_EQ_FROM_NAME            2.813
-score PHP_ORIG_SCRIPT_EVAL           2.999
-score PHP_SCRIPT                     2.499
-score PP_MIME_FAKE_ASCII_TEXT        1.000
+score PDS_TO_EQ_FROM_NAME            2.857
+score PHP_SCRIPT                     2.352
+score PP_MIME_FAKE_ASCII_TEXT        0.999
 score RATWARE_NO_RDNS                0.001
 score RDNS_NUM_TLD_XM                2.999
 score REPTO_419_FRAUD                2.999
@@ -178,60 +175,60 @@ score RISK_FREE                      3.8
 score SENDGRID_REDIR                 1.499
 score SENDGRID_REDIR_PHISH           3.499
 score SERGIO_SUBJECT_PORN014         2.799
-score SERGIO_SUBJECT_VIAGRA01        0.120
-score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
+score SERGIO_SUBJECT_VIAGRA01        0.126
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.500
 score SHORTENED_URL_HREF             0.999
 score SHORTENED_URL_SRC              3.199
-score SHORTENER_SHORT_IMG            2.195
+score SHORTENER_SHORT_IMG            1.256
 score SHORTENER_SHORT_SUBJ           2.999
-score SHORT_IMG_SUSP_NTLD            1.499
-score SHORT_SHORTNER                 1.999
+score SHORT_IMG_SUSP_NTLD            0.130
+score SHORT_SHORTNER                 2.000
 score SINGLETS_LOW_CONTRAST          0.001
 score SPOOFED_FREEMAIL_NO_RDNS       1.499
 score STATIC_XPRIO_OLE               1.999
-score STOCK_LOW_CONTRAST             1.599
-score STOX_BOUND_090909_B            3.599
-score SUBJ_OBFU_PUNCT_FEW            0.137
-score SUBJ_OBFU_PUNCT_MANY           0.001
+score STOCK_LOW_CONTRAST             1.603
+score STOX_BOUND_090909_B            2.598
+score SUBJ_OBFU_PUNCT_FEW            0.102
+score SUBJ_OBFU_PUNCT_MANY           0.037
 score SUSP_UTF8_WORD_SUBJ            1.999
-score THIS_AD                        0.101
+score THIS_AD                        0.098
 score THIS_IS_ADV_SUSP_NTLD          0.001
 score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
-score TO_EQ_FM_DIRECT_MX             1.000
+score TO_EQ_FM_DIRECT_MX             0.750
 score TO_EQ_FM_DOM_HTML_IMG          0.001
-score TO_EQ_FM_DOM_HTML_ONLY         1.595
+score TO_EQ_FM_DOM_HTML_ONLY         1.587
 score TO_EQ_FM_HTML_DIRECT           0.001
-score TO_EQ_FM_HTML_ONLY             0.001
-score TO_IN_SUBJ                     0.100
-score TO_NAME_SUBJ_NO_RDNS           2.496
-score TO_NO_BRKTS_FROM_MSSP          0.095
-score TO_NO_BRKTS_HTML_IMG           2.000
+score TO_EQ_FM_HTML_ONLY             0.194
+score TO_IN_SUBJ                     0.099
+score TO_NAME_SUBJ_NO_RDNS           2.494
+score TO_NO_BRKTS_FROM_MSSP          1.701
+score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.001 # force non-zero
-score TO_NO_BRKTS_NORDNS_HTML        0.252
-score TO_NO_BRKTS_PCNT               2.400
+score TO_NO_BRKTS_MSFT               0.204
+score TO_NO_BRKTS_NORDNS_HTML        0.256
+score TO_NO_BRKTS_PCNT               2.405
 score TRANSFORM_LIFE                 2.499
-score TVD_IP_HEX                     1.412
-score TVD_IP_SING_HEX                3.499
+score TVD_IP_HEX                     3.499
+score TVD_IP_SING_HEX                2.421
 score TVD_RCVD_SPACE_BRACKET         3.199
 score TVD_SPACE_ENCODED              2.499
-score TVD_SPACE_RATIO_MINFP          2.499
-score TVD_SUBJ_NUM_OBFU_MINFP        3.288
-score UPGRADE_MAILBOX                0.899
-score URI_DOTEDU                     1.449
+score TVD_SPACE_RATIO_MINFP          2.500
+score TVD_SUBJ_NUM_OBFU_MINFP        3.013
+score UPGRADE_MAILBOX                0.900
+score URI_DOTEDU                     1.446
 score URI_GOOGLE_PROXY               2.399
-score URI_HEX_IP                     2.073
+score URI_HEX_IP                     1.106
 score URI_MYSP_AC                    3.099
 score URI_ONLY_MSGID_MALF            1.999
-score URI_PHISH                      1.938
+score URI_PHISH                      1.944
 score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    1.938
+score URI_TRY_3LD                    1.939
 score URI_WPADMIN                    2.699
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.500
-score VFY_ACCT_NORDNS                2.499
-score XFER_LOTSA_MONEY               0.242
-score XPRIO                          0.989
+score VFY_ACCT_NORDNS                2.500
+score XFER_LOTSA_MONEY               0.244
+score XPRIO                          1.036
 score XPRIO_URL_SHORTNER             1.000
 score YOU_INHERIT                    2.699
 score AC_POST_EXTRAS                 1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1884832&r1=1884831&r2=1884832&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Dec 27 03:07:55 2020
@@ -1,252 +1,254 @@
-# Using score set 1 logs for revision 1884622 from:
-# ham-net-axb-coi-bulk.r1884622.log ham-net-axb-generic.r1884622.log ham-net-axb-ham-misc.r1884622.log ham-net-darxus.r1884622.log ham-net-ena-week0.r1884622.log ham-net-ena-week1.r1884622.log ham-net-ena-week2.r1884622.log ham-net-ena-week3.r1884622.log ham-net-ena-week4.r1884622.log ham-net-giovanni-ham.r1884622.log ham-net-giovanni-spammy.r1884622.log ham-net-giovanni-spam.r1884622.log ham-net-grenier.r1884622.log ham-net-llanga.r1884622.log ham-net-mmiroslaw-mails-ham.r1884622.log ham-net-mmiroslaw-mails-spam.r1884622.log ham-net-npiazzi.r1884622.log ham-net-pds.r1884622.log ham-net-sihde.r1884622.log ham-net-spamsponge.r1884622.log ham-net-thendrikx.r1884622.log spam-net-axb-coi-bulk.r1884622.log spam-net-axb-generic.r1884622.log spam-net-axb-ham-misc.r1884622.log spam-net-darxus.r1884622.log spam-net-ena-week0.r1884622.log spam-net-ena-week1.r1884622.log spam-net-ena-week2.r1884622.log spam-net-ena-week3.r1884622.log spam-net-ena-week4.r1884622.log spam-net-giovanni-ham.r18846
 22.log spam-net-giovanni-spammy.r1884622.log spam-net-giovanni-spam.r1884622.log spam-net-grenier.r1884622.log spam-net-llanga.r1884622.log spam-net-mmiroslaw-mails-ham.r1884622.log spam-net-mmiroslaw-mails-spam.r1884622.log spam-net-npiazzi.r1884622.log spam-net-pds.r1884622.log spam-net-sihde.r1884622.log spam-net-spamsponge.r1884622.log spam-net-thendrikx.r1884622.log
+# Using score set 1 logs for revision 1884812 from:
+# ham-net-axb-coi-bulk.r1884812.log ham-net-axb-generic.r1884812.log ham-net-axb-ham-misc.r1884812.log ham-net-darxus.r1884812.log ham-net-ena-week0.r1884812.log ham-net-ena-week1.r1884812.log ham-net-ena-week2.r1884812.log ham-net-ena-week3.r1884812.log ham-net-ena-week4.r1884812.log ham-net-giovanni-ham.r1884812.log ham-net-giovanni-spammy.r1884812.log ham-net-giovanni-spam.r1884812.log ham-net-grenier.r1884812.log ham-net-llanga.r1884812.log ham-net-mmiroslaw-mails-ham.r1884812.log ham-net-mmiroslaw-mails-spam.r1884812.log ham-net-npiazzi.r1884812.log ham-net-pds.r1884812.log ham-net-sihde.r1884812.log ham-net-spamsponge.r1884812.log ham-net-thendrikx.r1884812.log spam-net-axb-coi-bulk.r1884812.log spam-net-axb-generic.r1884812.log spam-net-axb-ham-misc.r1884812.log spam-net-darxus.r1884812.log spam-net-ena-week0.r1884812.log spam-net-ena-week1.r1884812.log spam-net-ena-week2.r1884812.log spam-net-ena-week3.r1884812.log spam-net-ena-week4.r1884812.log spam-net-giovanni-ham.r18848
 12.log spam-net-giovanni-spammy.r1884812.log spam-net-giovanni-spam.r1884812.log spam-net-grenier.r1884812.log spam-net-llanga.r1884812.log spam-net-mmiroslaw-mails-ham.r1884812.log spam-net-mmiroslaw-mails-spam.r1884812.log spam-net-npiazzi.r1884812.log spam-net-pds.r1884812.log spam-net-sihde.r1884812.log spam-net-spamsponge.r1884812.log spam-net-thendrikx.r1884812.log
 
 score AC_BR_BONANZA                  0.001
-score AC_DIV_BONANZA                 0.001
-score AC_FROM_MANY_DOTS              2.142
-score AC_HTML_NONSENSE_TAGS          1.999
-score ADVANCE_FEE_2_NEW_FORM         1.999
-score ADVANCE_FEE_2_NEW_FRM_MNY      2.499
-score ADVANCE_FEE_2_NEW_MONEY        1.600
-score ADVANCE_FEE_3_NEW              0.520
+score AC_DIV_BONANZA                 0.001 # force non-zero
+score AC_FROM_MANY_DOTS              1.328
+score AC_HTML_NONSENSE_TAGS          1.997
+score ADMITS_SPAM                    2.603
+score ADVANCE_FEE_2_NEW_FORM         0.596
+score ADVANCE_FEE_2_NEW_FRM_MNY      0.791
+score ADVANCE_FEE_2_NEW_MONEY        0.784
+score ADVANCE_FEE_3_NEW              0.870
 score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_3_NEW_MONEY        1.400
-score ADVANCE_FEE_4_NEW              4.399
-score ADVANCE_FEE_4_NEW_FRM_MNY      2.499
-score ADVANCE_FEE_4_NEW_MONEY        0.407
-score ADVANCE_FEE_5_NEW              2.899
+score ADVANCE_FEE_3_NEW_MONEY        0.507
+score ADVANCE_FEE_4_NEW              4.295
+score ADVANCE_FEE_4_NEW_FRM_MNY      1.858
+score ADVANCE_FEE_4_NEW_MONEY        0.001
+score ADVANCE_FEE_5_NEW              2.896
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_5_NEW_MONEY        0.001
-score ALIBABA_IMG_NOT_RCVD_ALI       2.499
-score AMAZON_IMG_NOT_RCVD_AMZN       2.500
-score APP_DEVELOPMENT_NORDNS         1.999
+score ALIBABA_IMG_NOT_RCVD_ALI       2.497
+score AMAZON_IMG_NOT_RCVD_AMZN       2.497
+score APP_DEVELOPMENT_NORDNS         1.997
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5   0.234
-score BIGNUM_EMAILS                  2.756
-score BITCOIN_DEADLINE               0.366
-score BITCOIN_EXTORT_01              3.125
-score BITCOIN_MALF_HTML              0.900
-score BITCOIN_SPAM_02                1.457
-score BITCOIN_SPAM_03                0.479
-score BITCOIN_SPAM_05                2.499
-score BITCOIN_SPAM_07                3.499
-score BITCOIN_XPRIO                  0.724
-score BITCOIN_YOUR_INFO              1.411
-score BODY_EMPTY                     1.999
-score BODY_SINGLE_URI                2.499
-score BODY_SINGLE_WORD               0.001
-score BODY_URI_ONLY                  2.999
-score BOGUS_MIME_VERSION             3.499
-score CK_HELO_GENERIC                0.249
-score CTE_8BIT_MISMATCH              0.999
-score DATE_IN_FUTURE_96_Q            2.284
+score AXB_XMAILER_MIMEOLE_OL_1ECD5   1.134
+score BIGNUM_EMAILS                  1.751
+score BITCOIN_DEADLINE               0.001
+score BITCOIN_EXTORT_01              3.745
+score BITCOIN_MALF_HTML              0.996
+score BITCOIN_SPAM_02                1.850
+score BITCOIN_SPAM_03                0.482
+score BITCOIN_SPAM_05                2.497
+score BITCOIN_SPAM_07                3.496
+score BITCOIN_XPRIO                  1.110
+score BITCOIN_YOUR_INFO              1.011
+score BODY_EMPTY                     1.997
+score BODY_SINGLE_URI                2.497
+score BODY_SINGLE_WORD               0.001 # force non-zero
+score BODY_URI_ONLY                  2.996
+score BOGUS_MIME_VERSION             3.496
+score CK_HELO_GENERIC                0.248
+score CTE_8BIT_MISMATCH              0.998
 score DEAR_BENEFICIARY               0.001
-score DKIMWL_BL                      2.999
-score DKIMWL_WL_HIGH                 -0.001
+score DKIMWL_BL                      2.997
+score DKIMWL_WL_HIGH                 -0.041
 score DKIMWL_WL_MED                  -0.001
-score DKIMWL_WL_MEDHI                -0.001
-score DSN_NO_MIMEVERSION             1.999
-score END_FUTURE_EMAILS              0.808
-score FAKE_REPLY_A1                  3.399
-score FAKE_REPLY_B                   2.999
+score DSN_NO_MIMEVERSION             1.997
+score DX_TEXT_03                     0.198
+score END_FUTURE_EMAILS              0.959
+score FAKE_REPLY_A1                  2.696
+score FAKE_REPLY_B                   2.197
 score FILL_THIS_FORM                 0.001
-score FONT_INVIS_DIRECT              0.001
+score FONT_INVIS_DIRECT              0.898
 score FONT_INVIS_LONG_LINE           0.001
-score FONT_INVIS_MSGID               2.500
-score FONT_INVIS_NORDNS              2.009
-score FORGED_RELAY_MUA_TO_MX         3.717
-score FORGED_SPF_HELO                0.999
-score FORM_FRAUD                     0.001
-score FORM_FRAUD_3                   2.499
-score FORM_FRAUD_5                   0.001
-score FOUND_YOU                      3.249
+score FONT_INVIS_MSGID               0.472
+score FONT_INVIS_NORDNS              2.497
+score FORGED_RELAY_MUA_TO_MX         3.795
+score FORGED_SPF_HELO                1.697
+score FORM_FRAUD                     0.386
+score FORM_FRAUD_3                   2.254
+score FORM_FRAUD_5                   0.183
+score FOUND_YOU                      3.246
 score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROMSPACE                      0.570
-score FROM_2_EMAILS_SHORT            1.999
-score FROM_ADDR_WS                   2.999
-score FROM_FMBLA_NEWDOM              1.110
-score FROM_FMBLA_NEWDOM14            0.999
-score FROM_FMBLA_NEWDOM28            0.799
-score FROM_GOV_DKIM_AU               -0.001 # force non-zero
-score FROM_GOV_SPOOF                 0.999
+score FROMSPACE                      0.539
+score FROM_2_EMAILS_SHORT            2.638
+score FROM_ADDR_WS                   2.996
+score FROM_FMBLA_NEWDOM              1.498
+score FROM_FMBLA_NEWDOM14            0.998
+score FROM_FMBLA_NEWDOM28            0.798
+score FROM_GOV_DKIM_AU               -0.704
+score FROM_GOV_SPOOF                 0.998
 score FROM_MISSPACED                 0.001
 score FROM_MISSP_EH_MATCH            0.001
-score FROM_MISSP_FREEMAIL            1.782
+score FROM_MISSP_FREEMAIL            3.319
 score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_REPLYTO             1.392
+score FROM_MISSP_REPLYTO             0.001
 score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_TO_UNDISC           1.187
+score FROM_MISSP_TO_UNDISC           1.654
 score FROM_MISSP_USER                0.001
 score FROM_MISSP_XPRIO               0.001
-score FROM_MULTI_NORDNS              3.518
-score FROM_NTLD_LINKBAIT             0.814
-score FROM_NTLD_REPLY_FREEMAIL       1.114
-score FROM_PAYPAL_SPOOF              0.001
-score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        1.233
-score FROM_WSP_TRAIL                 2.299
+score FROM_MULTI_NORDNS              3.514
+score FROM_NTLD_LINKBAIT             1.158
+score FROM_NTLD_REPLY_FREEMAIL       1.091
+score FROM_PAYPAL_SPOOF              0.127
+score FROM_SUSPICIOUS_NTLD           0.498
+score FROM_SUSPICIOUS_NTLD_FP        0.436
 score FSL_BULK_SIG                   0.001
-score FSL_CTYPE_WIN1251              0.001 # force non-zero
-score FSL_HAS_TINYURL                1.078
+score FSL_CTYPE_WIN1251              0.001
+score FSL_HAS_TINYURL                0.141
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_WALLET                   0.001
-score GB_BITCOIN_CP                  0.979
+score FSL_THIS_IS_ADV                0.001
+score FUZZY_WALLET                   0.705
+score GB_BITCOIN_CP                  0.825
 score GB_FREEMAIL_DISPTO             0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
-score GB_GOOGLE_OBFUS                0.749
+score GB_GOOGLE_OBFUS                0.748
 score GOOGLE_DOCS_PHISH              0.001
-score GOOGLE_DOC_SUSP                2.999
-score GOOG_REDIR_NORDNS              1.618
-score GOOG_STO_IMG_HTML              1.013
-score GOOG_STO_IMG_NOHTML            2.499
-score GOOG_STO_NOIMG_HTML            2.999
+score GOOGLE_DOC_SUSP                2.996
+score GOOG_REDIR_NORDNS              2.718
+score GOOG_STO_IMG_HTML              1.989
+score GOOG_STO_IMG_NOHTML            2.497
+score GOOG_STO_NOIMG_HTML            2.997
 score HDRS_LCASE                     0.099
-score HDRS_LCASE_IMGONLY             0.100
-score HDR_ORDER_FTSDMCXX_DIRECT      1.818
+score HDRS_LCASE_IMGONLY             0.098
+score HDR_ORDER_FTSDMCXX_DIRECT      1.810
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001 # force non-zero
-score HEADER_FROM_DIFFERENT_DOMAINS  0.249
+score HEADER_FROM_DIFFERENT_DOMAINS  0.248
 score HELO_NO_DOMAIN                 0.001
-score HK_NAME_FM_MR_MRS              1.499
-score HK_NAME_MR_MRS                 0.001
-score HK_RANDOM_FROM                 0.001
-score HK_RANDOM_REPLYTO              1.000
-score HK_RCVD_IP_MULTICAST           1.999
+score HK_NAME_FM_MR_MRS              1.498
+score HK_NAME_MR_MRS                 0.998
+score HK_RANDOM_FROM                 0.998
+score HK_RANDOM_REPLYTO              0.998
+score HK_RCVD_IP_MULTICAST           1.997
 score HK_SCAM                        0.001
-score HK_WIN                         0.999
-score HOSTED_IMG_DIRECT_MX           2.848
-score HOSTED_IMG_FREEM               2.893
-score HOSTED_IMG_MULTI               0.178
-score HTML_OFF_PAGE                  1.331
-score HTML_SINGLET_MANY              1.705
-score HTML_TEXT_INVISIBLE_FONT       2.000
-score HTML_TEXT_INVISIBLE_STYLE      1.916
-score IMG_ONLY_FM_DOM_INFO           1.588
-score KHOP_FAKE_EBAY                 0.799
-score KHOP_HELO_FCRDNS               0.400
-score LIST_PRTL_SAME_USER            1.503
-score LONG_HEX_URI                   2.959
-score LONG_IMG_URI                   1.433
-score LONG_INVISIBLE_TEXT            0.409
-score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    1.410
-score LUCRATIVE                      1.999
-score MANY_SPAN_IN_TEXT              2.299
+score HK_WIN                         0.998
+score HOSTED_IMG_DIRECT_MX           2.313
+score HOSTED_IMG_FREEM               3.401
+score HOSTED_IMG_MULTI               0.655
+score HTML_OFF_PAGE                  2.996
+score HTML_SINGLET_MANY              2.239
+score HTML_TEXT_INVISIBLE_FONT       0.629
+score HTML_TEXT_INVISIBLE_STYLE      1.465
+score IMG_ONLY_FM_DOM_INFO           1.586
+score KHOP_FAKE_EBAY                 0.898
+score KHOP_HELO_FCRDNS               0.398
+score LIST_PRTL_SAME_USER            0.986
+score LONG_HEX_URI                   1.194
+score LONG_IMG_URI                   2.446
+score LONG_INVISIBLE_TEXT            0.950
+score LOTS_OF_MONEY                  0.009
+score LOTTO_AGENT                    1.498
+score LOTTO_DEPT                     1.997
+score LUCRATIVE                      1.974
+score MALFORMED_FREEMAIL             1.391
+score MANY_HDRS_LCASE                0.098
+score MANY_SPAN_IN_TEXT              2.297
 score MAY_BE_FORGED                  0.001
 score MILLION_HUNDRED                0.001
-score MILLION_USD                    0.502
+score MILLION_USD                    0.636
 score MIMEOLE_DIRECT_TO_MX           0.001
-score MIME_NO_TEXT                   0.001
-score MIXED_ES                       2.499
-score MONEY_ATM_CARD                 0.327
+score MIME_NO_TEXT                   0.670
+score MIXED_ES                       2.397
+score MONEY_ATM_CARD                 2.796
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               0.159
-score MONEY_FRAUD_3                  0.001 # force non-zero
+score MONEY_FORM_SHORT               0.536
+score MONEY_FRAUD_3                  0.001
 score MONEY_FRAUD_5                  0.001
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           0.203
-score MONEY_FROM_41                  1.999
+score MONEY_FREEMAIL_REPTO           0.327
+score MONEY_FROM_41                  1.997
 score MONEY_FROM_MISSP               0.001
-score MONEY_NOHTML                   1.888
-score MSGID_DOLLARS_URI_IMG          3.000
-score MSGID_NOFQDN1                  1.499
+score MONEY_NOHTML                   1.484
+score MSGID_DOLLARS_URI_IMG          2.996
+score MSGID_NOFQDN1                  1.427
 score MSMAIL_PRI_ABNORMAL            0.001
-score NA_DOLLARS                     1.500
-score NICE_REPLY_A                   -1.619
-score NORDNS_LOW_CONTRAST            1.917
-score NO_FM_NAME_IP_HOSTN            1.574
+score NA_DOLLARS                     1.498
+score NICE_REPLY_A                   -0.829
+score NORDNS_LOW_CONTRAST            1.377
+score NO_FM_NAME_IP_HOSTN            0.934
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             2.389
-score NUMBEREND_LINKBAIT             0.999
-score NUMBERONLY_BITCOIN_EXP         1.007
+score NSL_RCVD_HELO_USER             1.260
+score NUMBEREND_LINKBAIT             0.998
 score OFFER_ONLY_AMERICA             0.001
-score ORDER_TODAY                    1.397
-score PDS_BTC_ID                     0.500
+score ORDER_TODAY                    0.299
+score PDS_BTC_ID                     0.498
 score PDS_BTC_MSGID                  0.001
-score PDS_BTC_NTLD                   1.053
-score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_EMPTYSUBJ_URISHRT          1.444
-score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              1.477
-score PDS_FROM_NAME_TO_DOMAIN        0.999
-score PDS_LITECOIN_ID                0.499
-score PDS_NAKED_TO_NUMERO            1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.362
-score PDS_OTHER_BAD_TLD              2.000
-score PDS_PHP_EVAL                   1.500
+score PDS_BTC_NTLD                   0.799
+score PDS_DBL_URL_TNB_RUNON          1.997
+score PDS_EMPTYSUBJ_URISHRT          0.001
+score PDS_FRNOM_TODOM_NAKED_TO       1.498
+score PDS_FROM_2_EMAILS              0.941
+score PDS_FROM_NAME_TO_DOMAIN        0.998
+score PDS_LITECOIN_ID                0.498
+score PDS_NAKED_TO_NUMERO            1.545
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.748
+score PDS_OTHER_BAD_TLD              1.997
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
-score PDS_SHORT_SPOOFED_URL          1.999
+score PDS_SHORT_SPOOFED_URL          1.997
 score PDS_TINYSUBJ_URISHRT           0.001
-score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999
-score PDS_TONAME_EQ_TOLOCAL_SHORT    1.999
-score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.999
-score PDS_TO_EQ_FROM_NAME            3.197
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.997
+score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.997
+score PDS_TONAME_EQ_TOLOCAL_SHORT    1.997
+score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.998
+score PDS_TO_EQ_FROM_NAME            0.685
 score PHP_ORIG_SCRIPT                0.001
-score PHP_ORIG_SCRIPT_EVAL           2.999
-score PHP_SCRIPT                     2.500
-score PP_MIME_FAKE_ASCII_TEXT        0.320
+score PHP_SCRIPT                     2.497
+score PP_MIME_FAKE_ASCII_TEXT        0.499
 score RATWARE_NO_RDNS                0.001
 score RCVD_IN_MSPIKE_H2              -0.001
-score RDNS_NUM_TLD_XM                2.999
-score RISK_FREE                      3.100
-score SENDGRID_REDIR                 1.057
-score SENDGRID_REDIR_PHISH           3.255
-score SERGIO_SUBJECT_VIAGRA01        0.293
-score SHOPIFY_IMG_NOT_RCVD_SFY       2.499
-score SHORTENED_URL_HREF             0.999
-score SHORTENED_URL_SRC              2.999
-score SHORTENER_SHORT_IMG            1.169
-score SHORTENER_SHORT_SUBJ           2.999
-score SHORT_SHORTNER                 1.999
+score RDNS_NUM_TLD_XM                2.194
+score REPTO_419_FRAUD                2.996
+score RISK_FREE                      3.795
+score SENDGRID_REDIR                 0.880
+score SENDGRID_REDIR_PHISH           0.431
+score SERGIO_SUBJECT_PORN014         2.696
+score SERGIO_SUBJECT_VIAGRA01        1.495
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.497
+score SHORTENED_URL_HREF             0.998
+score SHORTENED_URL_SRC              3.096
+score SHORTENER_SHORT_IMG            1.716
+score SHORTENER_SHORT_SUBJ           1.370
+score SHORT_SHORTNER                 1.997
 score SINGLETS_LOW_CONTRAST          0.001
-score SPOOFED_FREEMAIL               1.956
+score SPOOFED_FREEMAIL               1.609
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOFED_FREEM_REPTO            2.041
-score SPOOFED_FREEM_REPTO_CHN        3.411
-score STATIC_XPRIO_OLE               1.384
-score SUBJ_OBFU_PUNCT_FEW            0.001
-score SUBJ_OBFU_PUNCT_MANY           0.001 # force non-zero
-score THIS_AD                        0.699
+score SPOOFED_FREEM_REPTO            2.383
+score STATIC_XPRIO_OLE               1.997
+score STOX_BOUND_090909_B            2.651
+score SUBJ_OBFU_PUNCT_FEW            0.117
+score SUBJ_OBFU_PUNCT_MANY           0.016
+score SUSP_UTF8_WORD_SUBJ            1.997
+score THIS_AD                        0.498
 score THIS_IS_ADV_SUSP_NTLD          0.001
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
-score TO_EQ_FM_DIRECT_MX             2.459
-score TO_EQ_FM_DOM_HTML_IMG          0.619
-score TO_EQ_FM_DOM_HTML_ONLY         1.499
-score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_HTML_DIRECT           0.568
-score TO_EQ_FM_HTML_ONLY             0.001
-score TO_EQ_FM_SPF_FAIL              0.001
-score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.155
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.498
+score TO_EQ_FM_DIRECT_MX             0.274
+score TO_EQ_FM_DOM_HTML_IMG          0.001
+score TO_EQ_FM_DOM_HTML_ONLY         1.498
+score TO_EQ_FM_DOM_SPF_FAIL          0.498
+score TO_EQ_FM_HTML_DIRECT           0.001
+score TO_EQ_FM_HTML_ONLY             0.648
+score TO_EQ_FM_SPF_FAIL              0.227
+score TO_IN_SUBJ                     0.098
+score TO_NAME_SUBJ_NO_RDNS           2.240
 score TO_NO_BRKTS_FROM_MSSP          0.001
-score TO_NO_BRKTS_HTML_IMG           1.999
-score TO_NO_BRKTS_HTML_ONLY          1.999
+score TO_NO_BRKTS_HTML_IMG           1.997
+score TO_NO_BRKTS_HTML_ONLY          1.997
 score TO_NO_BRKTS_MSFT               0.001
-score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.397
-score TRANSFORM_LIFE                 2.499
-score TVD_IP_HEX                     2.548
-score TVD_IP_SING_HEX                1.920
-score TVD_RCVD_SPACE_BRACKET         0.528
-score TVD_SPACE_ENCODED              2.499
-score TVD_SPACE_RATIO_MINFP          2.499
-score TVD_SUBJ_NUM_OBFU_MINFP        2.361
-score UPGRADE_MAILBOX                1.299
-score URI_DOTEDU                     1.999
-score URI_GOOGLE_PROXY               1.699
-score URI_HEX_IP                     0.445
-score URI_MYSP_AC                    2.754
-score URI_ONLY_MSGID_MALF            2.000
-score URI_PHISH                      1.020
-score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    2.000
-score URI_WPADMIN                    2.399
-score URI_WP_DIRINDEX                3.499
-score URI_WP_HACKED                  3.499
-score URI_WP_HACKED_2                2.499
-score XFER_LOTSA_MONEY               0.999
-score XPRIO_URL_SHORTNER             0.964
-score YOU_INHERIT                    0.001
+score TO_NO_BRKTS_NORDNS_HTML        1.997
+score TO_NO_BRKTS_PCNT               2.420
+score TRANSFORM_LIFE                 2.497
+score TVD_IP_HEX                     2.400
+score TVD_IP_SING_HEX                1.474
+score TVD_RCVD_SPACE_BRACKET         2.999
+score TVD_SPACE_ENCODED              2.497
+score TVD_SPACE_RATIO_MINFP          1.027
+score TVD_SUBJ_NUM_OBFU_MINFP        2.315
+score UPGRADE_MAILBOX                0.001
+score URI_DOTEDU                     1.997
+score URI_GOOGLE_PROXY               1.538
+score URI_HEX_IP                     1.208
+score URI_MYSP_AC                    1.181
+score URI_ONLY_MSGID_MALF            1.997
+score URI_PHISH                      2.860
+score URI_PHP_REDIR                  3.496
+score URI_TRY_3LD                    1.997
+score URI_WPADMIN                    2.497
+score URI_WP_HACKED                  3.496
+score URI_WP_HACKED_2                2.497
+score VFY_ACCT_NORDNS                2.996
+score XFER_LOTSA_MONEY               0.001
+score XPRIO_URL_SHORTNER             0.826
+score YOU_INHERIT                    2.497
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -259,6 +261,7 @@ score AC_SPAMMY_URI_PATTERNS8        1.0
 score AC_SPAMMY_URI_PATTERNS9        1.000
 score AD_PREFS                       0.250
 score APP_DEVELOPMENT_FREEM          1.000
+score BIGNUM_EMAILS_MANY             1.000
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_MALWARE                1.000
@@ -282,9 +285,11 @@ score COMMENT_GIBBERISH              1.0
 score COMPENSATION                   1.000
 score DAY_I_EARNED                   1.000
 score DKIMWL_BLOCKED                 0.001
+score DKIMWL_WL_MEDHI                -1.000
 score DOTGOV_IMAGE                   1.000
 score EBAY_IMG_NOT_RCVD_EBAY         1.000
 score ENCRYPTED_MESSAGE              -1.000
+score ENVFROM_GOOG_TRIX              1.000
 score FBI_MONEY                      1.000
 score FBI_SPOOF                      1.000
 score FONT_INVIS_DOTGOV              1.000
@@ -300,6 +305,7 @@ score FROM_NUMBERO_NEWDOMAIN         1.0
 score FROM_NUMERIC_TLD               1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
 score GB_LINKED_IMG_NOT_RCVD_LINK    1.000
 score GB_WP_FILELINK                 1.000
@@ -319,13 +325,13 @@ score LIST_PRTL_PUMPDUMP             1.0
 score MALF_HTML_B64                  1.000
 score MALWARE_NORDNS                 1.000
 score MALWARE_PASSWORD               1.000
-score MANY_HDRS_LCASE                0.100
 score MONERO_DEADLINE                1.000
 score MONERO_EXTORT_01               1.000
 score MONERO_MALWARE                 1.000
 score MONERO_PAY_ME                  1.000
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
+score NUMBERONLY_BITCOIN_EXP         1.000
 score OBFU_BITCOIN                   1.000
 score PDS_HELO_SPF_FAIL              1.000
 score PHOTO_EDITING_DIRECT           1.000
@@ -340,8 +346,11 @@ score RAND_HEADER_MANY               1.0
 score RCVD_DOTEDU_SHORT              1.000
 score RCVD_DOTEDU_SUSP_URI           1.000
 score RDNS_NUM_TLD_ATCHNX            1.000
+score REPTO_419_FRAUD_GM             1.000
+score REPTO_419_FRAUD_QQ             1.000
 score SEO_SUSP_NTLD                  1.000
 score SHORT_IMG_SUSP_NTLD            1.000
+score SPOOFED_FREEM_REPTO_CHN        1.000
 score SPOOFED_FREEM_REPTO_RUS        1.000
 score STOCK_LOW_CONTRAST             1.000
 score STOCK_TIP                      1.000
@@ -356,6 +365,7 @@ score URI_DATA                       1.0
 score URI_DOTEDU_ENTITY              1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_OPTOUT_3LD                 1.000
+score URI_WP_DIRINDEX                1.000
 score USB_DRIVES                     1.000
 score VPS_NO_NTLD                    1.000
 score WALMART_IMG_NOT_RCVD_WAL       1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1884832&r1=1884831&r2=1884832&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Dec 27 03:07:55 2020
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 203114  22.096%  (99.603% of non-spam corpus)
-# Correctly spam:     615119  66.916%  (85.992% of spam corpus)
-# False positives:       809  0.088%  (0.397% of nonspam,  89185 weighted)
-# False negatives:    100200  10.900%  (14.008% of spam, 238839 weighted)
-# Average score for spam:  15.5    nonspam: 0.6
+# Correctly non-spam: 203104  22.095%  (99.600% of non-spam corpus)
+# Correctly spam:     614867  66.891%  (85.960% of spam corpus)
+# False positives:       815  0.089%  (0.400% of nonspam,  89855 weighted)
+# False negatives:    100426  10.925%  (14.040% of spam, 240198 weighted)
+# Average score for spam:  15.9    nonspam: 0.6
 # Average for false-pos:   6.3  false-neg: 2.4
-# TOTAL:              919242  100.00%
+# TOTAL:              919212  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  25344  99.34%
-# Correctly spam:      76839  86.10%
-# False positives:       169  0.66%
-# False negatives:     12406  13.90%
-# TCR(l=50): 4.279104  SpamRecall: 86.099%  SpamPrec: 99.781%
+# Correctly non-spam:  25399  99.55%
+# Correctly spam:      76832  86.09%
+# False positives:       114  0.45%
+# False negatives:     12411  13.91%
+# TCR(l=50): 4.927558  SpamRecall: 86.093%  SpamPrec: 99.852%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 194424  95.34%
-# Correctly spam:     505919  70.73%
-# False positives:      9499  4.66%
-# False negatives:    209400  29.27%
-# TCR(l=50): 1.045253  SpamRecall: 70.726%  SpamPrec: 98.157%
+# Correctly non-spam: 194475  95.37%
+# Correctly spam:     506136  70.76%
+# False positives:      9444  4.63%
+# False negatives:    209157  29.24%
+# TCR(l=50): 1.049806  SpamRecall: 70.759%  SpamPrec: 98.168%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24385  95.58%
-# Correctly spam:      63300  70.93%
-# False positives:      1128  4.42%
-# False negatives:     25945  29.07%
-# TCR(l=50): 1.083794  SpamRecall: 70.928%  SpamPrec: 98.249%
+# Correctly non-spam:  24359  95.48%
+# Correctly spam:      63183  70.80%
+# False positives:      1154  4.52%
+# False negatives:     26060  29.20%
+# TCR(l=50): 1.065461  SpamRecall: 70.799%  SpamPrec: 98.206%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1884832&r1=1884831&r2=1884832&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Dec 27 03:07:55 2020
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 199526  23.799%  (99.556% of non-spam corpus)
-# Correctly spam:     571895  68.213%  (89.641% of spam corpus)
-# False positives:       889  0.106%  (0.444% of nonspam, 190998 weighted)
-# False negatives:     66086  7.882%  (10.359% of spam, 126427 weighted)
-# Average score for spam:  19.0    nonspam: -0.7
-# Average for false-pos:   6.7  false-neg: 1.9
-# TOTAL:              838396  100.00%
+# Correctly non-spam: 187418  20.896%  (99.697% of non-spam corpus)
+# Correctly spam:     648179  72.266%  (91.429% of spam corpus)
+# False positives:       570  0.064%  (0.303% of nonspam, 146941 weighted)
+# False negatives:     60762  6.774%  (8.571% of spam, 135792 weighted)
+# Average score for spam:  18.7    nonspam: -0.8
+# Average for false-pos:   6.8  false-neg: 2.2
+# TOTAL:              896929  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24926  99.45%
-# Correctly spam:      71443  89.72%
-# False positives:       137  0.55%
-# False negatives:      8187  10.28%
-# TCR(l=50): 5.295604  SpamRecall: 89.719%  SpamPrec: 99.809%
+# Correctly non-spam:  23505  99.68%
+# Correctly spam:      80941  91.52%
+# False positives:        76  0.32%
+# False negatives:      7498  8.48%
+# TCR(l=50): 7.827846  SpamRecall: 91.522%  SpamPrec: 99.906%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 197815  98.70%
-# Correctly spam:     446174  69.94%
-# False positives:      2600  1.30%
-# False negatives:    191807  30.06%
-# TCR(l=50): 1.982496  SpamRecall: 69.935%  SpamPrec: 99.421%
+# Correctly non-spam: 185638  98.75%
+# Correctly spam:     520365  73.40%
+# False positives:      2350  1.25%
+# False negatives:    188576  26.60%
+# TCR(l=50): 2.316225  SpamRecall: 73.400%  SpamPrec: 99.550%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24736  98.70%
-# Correctly spam:      55540  69.75%
-# False positives:       327  1.30%
-# False negatives:     24090  30.25%
-# TCR(l=50): 1.969090  SpamRecall: 69.748%  SpamPrec: 99.415%
+# Correctly non-spam:  23302  98.82%
+# Correctly spam:      65050  73.55%
+# False positives:       279  1.18%
+# False negatives:     23389  26.45%
+# TCR(l=50): 2.368542  SpamRecall: 73.554%  SpamPrec: 99.573%