You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2019/03/03 05:34:12 UTC
svn commit: r1854676 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Sun Mar 3 05:34:12 2019
New Revision: 1854676
URL: http://svn.apache.org/viewvc?rev=1854676&view=rev
Log:
updated scores for revision 1854625 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Sun Mar 3 05:34:12 2019
@@ -10,205 +10,191 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_FORM 2.000 1.712 2.000 1.712
-score ADVANCE_FEE_2_NEW_MONEY 1.573 1.999 1.573 1.999
-score ADVANCE_FEE_3_NEW 2.120 2.967 2.120 2.967
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.535 0.001 0.535 0.001
-score ADVANCE_FEE_3_NEW_MONEY 2.999 2.488 2.999 2.488
-score ADVANCE_FEE_4_NEW 2.799 2.799 2.799 2.799
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.329 0.001 2.329 0.001
-score ADVANCE_FEE_5_NEW 2.899 0.001 2.899 0.001
+score ADVANCE_FEE_2_NEW_FORM 1.999 1.999 1.999 1.999
+score ADVANCE_FEE_2_NEW_MONEY 1.544 1.242 1.544 1.242
+score ADVANCE_FEE_3_NEW 2.551 2.967 2.551 2.967
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.902 2.141 0.902 2.141
+score ADVANCE_FEE_3_NEW_MONEY 3.000 2.488 3.000 2.488
+score ADVANCE_FEE_4_NEW 2.799 2.699 2.799 2.699
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.754 0.001 1.754 0.001
+score ADVANCE_FEE_5_NEW 2.900 0.001 2.900 0.001
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_MONEY 3.299 0.001 3.299 0.001
+score ADVANCE_FEE_5_NEW_MONEY 3.299 2.491 3.299 2.491
score AD_PREFS 0.001 0.001 0.001 0.001
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
-score APP_DEVELOPMENT_NORDNS 0.001 1.000 0.001 1.000
-score BIGNUM_EMAILS 2.999 0.001 2.999 0.001
+score APP_DEVELOPMENT_NORDNS 0.001 1.999 0.001 1.999
+score BIGNUM_EMAILS 2.999 2.999 2.999 2.999
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE 2.999 2.722 2.999 2.722
-score BITCOIN_EXTORT_01 4.999 5.000 4.999 5.000
-score BITCOIN_MALWARE 2.999 2.999 2.999 2.999
-score BITCOIN_PAY_ME 2.808 2.999 2.808 2.999
-score BITCOIN_SPAM_01 1.798 0.001 1.798 0.001
+score BITCOIN_DEADLINE 2.999 0.204 2.999 0.204
+score BITCOIN_EXTORT_01 4.999 4.999 4.999 4.999
+score BITCOIN_MALWARE 2.991 2.999 2.991 2.999
+score BITCOIN_PAY_ME 2.804 2.290 2.804 2.290
+score BITCOIN_SPAM_01 0.780 0.001 0.780 0.001
score BITCOIN_SPAM_02 2.499 2.499 2.499 2.499
-score BITCOIN_SPAM_03 2.104 2.500 2.104 2.500
-score BITCOIN_SPAM_04 1.000 1.499 1.000 1.499
+score BITCOIN_SPAM_03 2.258 2.499 2.258 2.499
+score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_05 2.499 1.000 2.499 1.000
-score BITCOIN_SPAM_06 1.499 0.238 1.499 0.238
+score BITCOIN_SPAM_06 0.063 1.499 0.063 1.499
score BITCOIN_SPAM_07 2.999 2.999 2.999 2.999
-score BITCOIN_SPAM_08 2.499 2.402 2.499 2.402
-score BITCOIN_SPAM_09 0.911 1.319 0.911 1.319
-score BODY_SINGLE_WORD 2.499 2.497 2.499 2.497
-score BODY_URI_ONLY 0.551 0.999 0.551 0.999
-score BOGUS_MSM_HDRS 2.999 2.575 2.999 2.575
+score BITCOIN_SPAM_08 2.499 2.399 2.499 2.399
+score BITCOIN_SPAM_09 1.069 0.441 1.069 0.441
+score BODY_SINGLE_WORD 2.499 2.389 2.499 2.389
+score BODY_URI_ONLY 0.552 0.999 0.552 0.999
+score BOGUS_MSM_HDRS 2.999 1.299 2.999 1.299
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
score DEAR_BENEFICIARY 3.399 0.001 3.399 0.001
-score DKIMWL_BL 0.793 1.836 0.793 1.836
+score DKIMWL_BL 1.110 1.588 1.110 1.588
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
-score DX_TEXT_03 0.001 1.299 0.001 1.299
+score DX_TEXT_03 0.001 1.199 0.001 1.199
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
score FILL_THIS_FORM 0.001 0.001 0.001 0.001
score FORM_FRAUD 0.999 1.000 0.999 1.000
-score FORM_FRAUD_3 2.586 0.001 2.586 0.001
-score FORM_FRAUD_5 2.688 2.674 2.688 2.674
+score FORM_FRAUD_5 2.512 0.001 2.512 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
score FOUND_YOU 3.249 3.249 3.249 3.249
-score FREEMAIL_DISPTO 0.250 0.249 0.250 0.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.150 0.001 0.150 0.001
-score FREEM_FRNUM_UNICD_EMPTY 2.588 3.749 2.588 3.749
+score FREEMAIL_DISPTO 0.249 0.250 0.249 0.250
+score FREEMAIL_FORGED_FROMDOMAIN 0.149 0.249 0.149 0.249
+score FREEM_FRNUM_UNICD_EMPTY 3.298 3.136 3.298 3.136
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
-score FROM_ADDR_WS 1.212 2.639 1.212 2.639
-score FROM_IN_TO_AND_SUBJ 2.099 2.199 2.099 2.199
+score FROM_ADDR_WS 1.825 2.063 1.825 2.063
+score FROM_IN_TO_AND_SUBJ 2.099 0.960 2.099 0.960
score FROM_MISSPACED 0.001 0.001 0.001 0.001
-score FROM_MISSP_DYNIP 2.097 0.001 2.097 0.001
+score FROM_MISSP_DYNIP 2.556 2.662 2.556 2.662
score FROM_MISSP_EH_MATCH 0.001 0.001 0.001 0.001
score FROM_MISSP_FREEMAIL 2.048 0.001 2.048 0.001
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
-score FROM_MISSP_PHISH 1.649 0.085 1.649 0.085
-score FROM_MISSP_REPLYTO 0.001 0.001 0.001 0.001
+score FROM_MISSP_PHISH 1.448 0.001 1.448 0.001
+score FROM_MISSP_REPLYTO 0.001 1.000 0.001 1.000
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001
score FROM_WORDY 0.001 1.147 0.001 1.147
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
-score FROM_WSP_LEAD 1.587 2.444 1.587 2.444
-score FROM_WSP_TRAIL 2.483 0.001 2.483 0.001
-score FSL_BULK_SIG 0.001 0.834 0.001 0.834
-score FSL_HELO_FAKE 4.300 3.679 4.300 3.679
+score FROM_WSP_LEAD 0.974 1.208 0.974 1.208
+score FROM_WSP_TRAIL 2.248 1.910 2.248 1.910
+score FSL_BULK_SIG 0.001 0.821 0.001 0.821
+score FSL_HELO_FAKE 4.299 3.686 4.299 3.686
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_CLICK_HERE 2.699 2.900 2.699 2.900
+score FUZZY_CLICK_HERE 2.699 2.699 2.699 2.699
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score GOOG_REDIR_NORDNS 1.746 2.504 1.746 2.504
-score HDRS_LCASE 0.100 0.001 0.100 0.001
-score HDRS_LCASE_IMGONLY 0.001 0.100 0.001 0.100
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.999 1.999 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.172 3.499 3.172 3.499
+score GOOG_REDIR_NORDNS 2.465 3.099 2.465 3.099
+score HDRS_LCASE 0.100 0.100 0.100 0.100
+score HDRS_LCASE_IMGONLY 0.001 0.099 0.001 0.099
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999 2.000 1.999 2.000
+score HDR_ORDER_FTSDMCXX_NORDNS 2.877 3.499 2.877 3.499
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_NAME_MR_MRS 0.999 0.001 0.999 0.001
score HK_SCAM_N2 0.001 0.001 0.001 0.001
-score HK_SCAM_N8 0.001 0.886 0.001 0.886
+score HK_SCAM_N8 0.001 0.001 0.001 0.001
score HTML_ENTITY_ASCII 1.000 1.000 1.000 1.000
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE 2.999 2.999 2.999 2.999
+score HTML_OFF_PAGE 2.999 3.000 2.999 3.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
-score HTML_SINGLET_MANY 0.001 0.230 0.001 0.230
+score HTML_SINGLET_MANY 0.001 0.001 0.001 0.001
score HTML_TEXT_INVISIBLE_FONT 1.000 1.000 1.000 1.000
-score HTML_TEXT_INVISIBLE_STYLE 0.001 1.838 0.001 1.838
-score IMG_ONLY_FM_DOM_INFO 2.333 2.253 2.333 2.253
-score KB_CTYPE_SPACE 2.839 1.487 2.839 1.487
-score KB_CTYPE_SP_MOZ 1.412 0.955 1.412 0.955
-score KB_FORGED_MOZ4 3.255 0.528 3.255 0.528
-score KHOP_DYNAMIC 1.999 0.001 1.999 0.001
-score LIST_PARTIAL_SHORT_MSG 2.499 0.001 2.499 0.001
+score HTML_TEXT_INVISIBLE_STYLE 0.001 1.643 0.001 1.643
+score IMG_ONLY_FM_DOM_INFO 2.331 2.250 2.331 2.250
+score KB_CTYPE_SPACE 3.353 0.552 3.353 0.552
+score KB_CTYPE_SP_MOZ 3.086 2.844 3.086 2.844
+score KB_FORGED_MOZ4 3.965 2.278 3.965 2.278
+score KHOP_DYNAMIC 1.999 1.474 1.999 1.474
+score LIST_PARTIAL_SHORT_MSG 2.499 2.499 2.499 2.499
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
-score LIST_PRTL_SAME_USER 0.001 0.277 0.001 0.277
-score LONG_HEX_URI 0.111 0.939 0.111 0.939
-score LONG_IMG_URI 0.001 0.259 0.001 0.259
+score LIST_PRTL_SAME_USER 0.001 0.273 0.001 0.273
+score LONG_HEX_URI 0.111 1.484 0.111 1.484
+score LONG_IMG_URI 0.001 0.260 0.001 0.260
score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
-score LOTTO_AGENT 1.499 0.001 1.499 0.001
+score LOTTO_AGENT 1.499 1.500 1.499 1.500
score LUCRATIVE 1.000 1.000 1.000 1.000
-score L_8BIT_MISMATCH 0.010 0.001 0.010 0.001
-score MALFORMED_FREEMAIL 0.685 0.001 0.685 0.001
-score MALF_HTML_B64 3.469 3.445 3.469 3.445
-score MILLION_USD 1.822 0.001 1.822 0.001
-score MIMEOLE_DIRECT_TO_MX 1.999 1.999 1.999 1.999
-score MIME_NO_TEXT 1.782 1.943 1.782 1.943
-score MIXED_ES 3.999 3.280 3.999 3.280
-score MONEY_ATM_CARD 2.856 0.001 2.856 0.001
-score MONEY_BARRISTER 0.748 0.001 0.748 0.001
-score MONEY_FORM 0.729 0.001 0.729 0.001
-score MONEY_FORM_SHORT 2.499 2.180 2.499 2.180
-score MONEY_FRAUD_3 1.228 1.884 1.228 1.884
+score L_8BIT_MISMATCH 0.010 0.010 0.010 0.010
+score MALFORMED_FREEMAIL 0.685 0.544 0.685 0.544
+score MALF_HTML_B64 3.499 3.121 3.499 3.121
+score MILLION_USD 1.999 1.807 1.999 1.807
+score MIMEOLE_DIRECT_TO_MX 1.999 0.001 1.999 0.001
+score MIME_NO_TEXT 1.782 1.999 1.782 1.999
+score MIXED_ES 3.999 3.282 3.999 3.282
+score MONEY_ATM_CARD 3.042 3.199 3.042 3.199
+score MONEY_BARRISTER 0.747 0.001 0.747 0.001
+score MONEY_FORM 0.552 0.001 0.552 0.001
+score MONEY_FORM_SHORT 2.499 0.001 2.499 0.001
+score MONEY_FRAUD_3 1.257 2.640 1.257 2.640
score MONEY_FRAUD_5 0.001 0.001 0.001 0.001
-score MONEY_FRAUD_8 0.001 3.299 0.001 3.299
+score MONEY_FRAUD_8 0.001 0.001 0.001 0.001
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
-score MSM_PRIO_REPTO 2.499 2.384 2.499 2.384
-score NORDNS_LOW_CONTRAST 1.886 0.001 1.886 0.001
-score NO_FM_NAME_IP_HOSTN 2.198 0.001 2.198 0.001
+score MSM_PRIO_REPTO 2.420 2.279 2.420 2.279
+score NORDNS_LOW_CONTRAST 1.885 0.976 1.885 0.976
+score NO_FM_NAME_IP_HOSTN 2.200 0.001 2.200 0.001
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER 2.019 0.001 2.019 0.001
-score OBFU_BITCOIN 2.743 3.000 2.743 3.000
-score PHOTO_EDITING_DIRECT 1.403 2.242 1.403 2.242
-score PHOTO_EDITING_FREEM 1.000 2.799 1.000 2.799
+score NSL_RCVD_HELO_USER 0.732 2.906 0.732 2.906
+score OBFU_BITCOIN 0.739 2.999 0.739 2.999
+score PHOTO_EDITING_DIRECT 1.402 2.242 1.402 2.242
+score PHOTO_EDITING_FREEM 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 2.397 1.000 2.397 1.000
+score PHP_ORIG_SCRIPT 2.397 2.499 2.397 2.499
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT 0.999 0.998 0.999 0.998
+score PP_MIME_FAKE_ASCII_TEXT 0.999 0.917 0.999 0.917
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS 2.648 2.509 2.648 2.509
-score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
+score RATWARE_NO_RDNS 2.765 2.824 2.765 2.824
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
-score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H4 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_H5 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
-score RDNS_NUM_TLD_ATCHNX 2.585 0.944 2.585 0.944
-score RDNS_NUM_TLD_XM 2.999 2.636 2.999 2.636
-score RP_8BIT 3.499 1.336 3.499 1.336
-score SERGIO_SUBJECT_PORN014 2.198 3.768 2.198 3.768
-score SERGIO_SUBJECT_VIAGRA01 0.001 0.001 0.001 0.001
-score SHORTENED_URL_SRC 1.485 0.001 1.485 0.001
-score SHORTENER_SHORT_IMG 1.401 0.001 1.401 0.001
-score SINGLETS_LOW_CONTRAST 0.001 0.925 0.001 0.925
-score SPOOFED_FREEM_REPTO 2.499 2.500 2.499 2.500
-score SPOOFED_FREEM_REPTO_CHN 1.539 1.000 1.539 1.000
+score RDNS_NUM_TLD_ATCHNX 2.803 0.865 2.803 0.865
+score RDNS_NUM_TLD_XM 2.999 1.073 2.999 1.073
+score RP_8BIT 2.891 2.532 2.891 2.532
+score SERGIO_SUBJECT_PORN014 2.198 2.100 2.198 2.100
+score SERGIO_SUBJECT_VIAGRA01 0.001 2.131 0.001 2.131
+score SHORTENED_URL_SRC 1.484 1.953 1.484 1.953
+score SHORTENER_SHORT_IMG 1.166 2.499 1.166 2.499
+score SPOOFED_FREEM_REPTO 2.500 2.500 2.500 2.500
+score SPOOFED_FREEM_REPTO_CHN 1.529 1.000 1.529 1.000
score SPOOFED_FREEM_REPTO_RUS 1.000 1.000 1.000 1.000
score STATIC_XPRIO_OLE 1.999 1.999 1.999 1.999
-score STOCK_LOW_CONTRAST 1.926 1.000 1.926 1.000
+score STOCK_LOW_CONTRAST 1.925 1.000 1.925 1.000
score STOCK_TIP 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 1.679 0.001 1.679 0.001
-score SUBJ_UNNEEDED_HTML 3.099 0.001 3.099 0.001
-score SURBL_BLOCKED 0.001 0.001 0.001 0.001
+score STYLE_GIBBERISH 1.676 0.001 1.676 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
-score TEQF_USR_IMAGE 2.999 0.272 2.999 0.272
+score TEQF_USR_IMAGE 2.717 0.401 2.717 0.401
score THIS_AD 0.001 0.001 0.001 0.001
-score TO_EQ_FM_DIRECT_MX 2.046 2.499 2.046 2.499
+score TO_EQ_FM_DIRECT_MX 2.000 2.499 2.000 2.499
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_IN_SUBJ 0.100 0.100 0.100 0.100
+score TO_EQ_FM_SPF_FAIL 0.001 2.053 0.001 2.053
+score TO_IN_SUBJ 0.099 0.100 0.099 0.100
score TO_NAME_SUBJ_NO_RDNS 2.999 2.999 2.999 2.999
-score TO_NO_BRKTS_FROM_MSSP 0.883 0.001 0.883 0.001
-score TO_NO_BRKTS_HTML_IMG 1.999 2.000 1.999 2.000
-score TO_NO_BRKTS_HTML_ONLY 0.001 0.755 0.001 0.755
-score TO_NO_BRKTS_MSFT 0.001 0.001 0.001 0.001
+score TO_NO_BRKTS_FROM_MSSP 0.882 0.001 0.882 0.001
+score TO_NO_BRKTS_HTML_IMG 2.000 2.000 2.000 2.000
+score TO_NO_BRKTS_HTML_ONLY 0.001 0.760 0.001 0.760
+score TO_NO_BRKTS_MSFT 0.001 2.420 0.001 2.420
score TO_NO_BRKTS_NORDNS_HTML 0.001 0.648 0.001 0.648
-score TO_NO_BRKTS_PCNT 2.499 2.500 2.499 2.500
-score TVD_SPACE_RATIO_MINFP 2.499 0.001 2.499 0.001
+score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
+score TVD_SPACE_RATIO_MINFP 2.500 2.499 2.500 2.499
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score UNICODE_OBFU_ASC 2.500 2.499 2.500 2.499
-score UNICODE_OBFU_ZW 2.082 3.499 2.082 3.499
+score UNICODE_OBFU_ASC 2.499 2.499 2.499 2.499
+score UNICODE_OBFU_ZW 2.086 3.499 2.086 3.499
score URI_BUFFLY 2.000 1.999 2.000 1.999
score URI_DATA 1.000 1.000 1.000 1.000
score URI_GOOGLE_PROXY 0.001 2.185 0.001 2.185
score URI_ONLY_MSGID_MALF 1.999 1.999 1.999 1.999
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
score URI_PHISH 1.000 1.000 1.000 1.000
-score URI_TRY_3LD 0.001 0.899 0.001 0.899
+score URI_TRY_3LD 0.001 0.660 0.001 0.660
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
-score URI_WP_HACKED 3.500 1.000 3.500 1.000
-score URI_WP_HACKED_2 1.194 1.114 1.194 1.114
+score URI_WP_HACKED 3.499 1.000 3.499 1.000
+score URI_WP_HACKED_2 1.195 1.201 1.195 1.201
score USB_DRIVES 1.000 1.000 1.000 1.000
-score XPRIO 2.249 1.264 2.249 1.264
-score XPRIO_SHORT_SUBJ 0.298 2.497 0.298 2.497
-score YOU_INHERIT 0.741 2.374 0.741 2.374
+score XPRIO 2.249 2.070 2.249 2.070
+score XPRIO_SHORT_SUBJ 0.296 2.499 0.296 2.499
+score YOU_INHERIT 0.570 2.699 0.570 2.699
score ZW_OBFU_BITCOIN 2.499 2.499 2.499 2.499
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Sun Mar 3 05:34:12 2019
@@ -2,14 +2,14 @@
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-giovanni-ham.log ham-giovanni-spam.log ham-giovanni-spammy.log ham-grenier.log ham-hege.log ham-jarif.log ham-jbrooks.log ham-llanga.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-giovanni-ham.log spam-giovanni-spam.log spam-giovanni-spammy.log spam-grenier.log spam-hege.log spam-jarif.log spam-jbrooks.log spam-llanga.log spam-sihde.log spam-thendrikx.log
score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_FORM 2.000
-score ADVANCE_FEE_2_NEW_MONEY 1.573
-score ADVANCE_FEE_3_NEW 2.120
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.535
-score ADVANCE_FEE_3_NEW_MONEY 2.999
+score ADVANCE_FEE_2_NEW_FORM 1.999
+score ADVANCE_FEE_2_NEW_MONEY 1.544
+score ADVANCE_FEE_3_NEW 2.551
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.902
+score ADVANCE_FEE_3_NEW_MONEY 3.000
score ADVANCE_FEE_4_NEW 2.799
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.329
-score ADVANCE_FEE_5_NEW 2.899
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.754
+score ADVANCE_FEE_5_NEW 2.900
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
score ADVANCE_FEE_5_NEW_MONEY 3.299
score AD_PREFS 0.001
@@ -17,52 +17,52 @@ score APP_DEVELOPMENT_NORDNS 0.0
score BIGNUM_EMAILS 2.999
score BITCOIN_DEADLINE 2.999
score BITCOIN_EXTORT_01 4.999
-score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.808
-score BITCOIN_SPAM_01 1.798
+score BITCOIN_MALWARE 2.991
+score BITCOIN_PAY_ME 2.804
+score BITCOIN_SPAM_01 0.780
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 2.104
+score BITCOIN_SPAM_03 2.258
score BITCOIN_SPAM_05 2.499
-score BITCOIN_SPAM_06 1.499
+score BITCOIN_SPAM_06 0.063
score BITCOIN_SPAM_07 2.999
score BITCOIN_SPAM_08 2.499
-score BITCOIN_SPAM_09 0.911
+score BITCOIN_SPAM_09 1.069
score BODY_SINGLE_WORD 2.499
-score BODY_URI_ONLY 0.551
+score BODY_URI_ONLY 0.552
score BOGUS_MSM_HDRS 2.999
score DEAR_BENEFICIARY 3.399
-score DKIMWL_BL 0.793
+score DKIMWL_BL 1.110
score DX_TEXT_03 0.001
score FILL_THIS_FORM 0.001
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.586
-score FORM_FRAUD_5 2.688
+score FORM_FRAUD_3 2.101
+score FORM_FRAUD_5 2.512
score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.150
-score FREEM_FRNUM_UNICD_EMPTY 2.588
-score FROM_ADDR_WS 1.212
+score FREEMAIL_DISPTO 0.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.149
+score FREEM_FRNUM_UNICD_EMPTY 3.298
+score FROM_ADDR_WS 1.825
score FROM_IN_TO_AND_SUBJ 2.099
-score FROM_MISSPACED 0.001 # force non-zero
-score FROM_MISSP_DYNIP 2.097
+score FROM_MISSPACED 0.001
+score FROM_MISSP_DYNIP 2.556
score FROM_MISSP_EH_MATCH 0.001
score FROM_MISSP_FREEMAIL 2.048
-score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_PHISH 1.649
-score FROM_MISSP_REPLYTO 0.001 # force non-zero
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_PHISH 1.448
+score FROM_MISSP_REPLYTO 0.001
score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
score FROM_WORDY 0.001
-score FROM_WSP_LEAD 1.587
-score FROM_WSP_TRAIL 2.483
-score FSL_HELO_FAKE 4.300
+score FROM_WSP_LEAD 0.974
+score FROM_WSP_TRAIL 2.248
+score FSL_HELO_FAKE 4.299
score FSL_NEW_HELO_USER 0.001
score FUZZY_CLICK_HERE 2.699
-score GOOG_REDIR_NORDNS 1.746
+score GOOG_REDIR_NORDNS 2.465
score HDRS_LCASE 0.100
-score HDRS_LCASE_IMGONLY 0.001 # force non-zero
+score HDRS_LCASE_IMGONLY 0.001
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.172
+score HDR_ORDER_FTSDMCXX_NORDNS 2.877
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HK_NAME_MR_MRS 0.999
score HK_SCAM_N2 0.001
@@ -70,79 +70,79 @@ score HK_SCAM_N8 0.0
score HTML_OFF_PAGE 2.999
score HTML_SINGLET_MANY 0.001
score HTML_TEXT_INVISIBLE_STYLE 0.001
-score IMG_ONLY_FM_DOM_INFO 2.333
-score KB_CTYPE_SPACE 2.839
-score KB_CTYPE_SP_MOZ 1.412
-score KB_FORGED_MOZ4 3.255
+score IMG_ONLY_FM_DOM_INFO 2.331
+score KB_CTYPE_SPACE 3.353
+score KB_CTYPE_SP_MOZ 3.086
+score KB_FORGED_MOZ4 3.965
score KHOP_DYNAMIC 1.999
score LIST_PARTIAL_SHORT_MSG 2.499
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
+score LIST_PRTL_SAME_USER 0.001
score LONG_HEX_URI 0.111
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.001 # force non-zero
score LOTTO_AGENT 1.499
score L_8BIT_MISMATCH 0.010
score MALFORMED_FREEMAIL 0.685
-score MALF_HTML_B64 3.469
-score MILLION_USD 1.822
+score MALF_HTML_B64 3.499
+score MILLION_USD 1.999
score MIMEOLE_DIRECT_TO_MX 1.999
score MIME_NO_TEXT 1.782
score MIXED_ES 3.999
-score MONEY_ATM_CARD 2.856
-score MONEY_BARRISTER 0.748
-score MONEY_FORM 0.729
+score MONEY_ATM_CARD 3.042
+score MONEY_BARRISTER 0.747
+score MONEY_FORM 0.552
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 1.228
+score MONEY_FRAUD_3 1.257
score MONEY_FRAUD_5 0.001
score MONEY_FRAUD_8 0.001
-score MONEY_FROM_MISSP 0.001 # force non-zero
-score MSM_PRIO_REPTO 2.499
-score NORDNS_LOW_CONTRAST 1.886
-score NO_FM_NAME_IP_HOSTN 2.198
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 2.019
-score OBFU_BITCOIN 2.743
-score PHOTO_EDITING_DIRECT 1.403
+score MONEY_FROM_MISSP 0.001
+score MSM_PRIO_REPTO 2.420
+score NORDNS_LOW_CONTRAST 1.885
+score NO_FM_NAME_IP_HOSTN 2.200
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 0.732
+score OBFU_BITCOIN 0.739
+score PHOTO_EDITING_DIRECT 1.402
score PHP_ORIG_SCRIPT 2.397
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 2.648
-score RDNS_NUM_TLD_ATCHNX 2.585
+score RATWARE_NO_RDNS 2.765
+score RDNS_NUM_TLD_ATCHNX 2.803
score RDNS_NUM_TLD_XM 2.999
-score RP_8BIT 3.499
+score RP_8BIT 2.891
score SERGIO_SUBJECT_PORN014 2.198
score SERGIO_SUBJECT_VIAGRA01 0.001
-score SHORTENED_URL_SRC 1.485
-score SHORTENER_SHORT_IMG 1.401
+score SHORTENED_URL_SRC 1.484
+score SHORTENER_SHORT_IMG 1.166
score SINGLETS_LOW_CONTRAST 0.001
-score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.539
+score SPOOFED_FREEM_REPTO 2.500
+score SPOOFED_FREEM_REPTO_CHN 1.529
score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 1.926
-score STYLE_GIBBERISH 1.679
-score SUBJ_UNNEEDED_HTML 3.099
-score TEQF_USR_IMAGE 2.999
+score STOCK_LOW_CONTRAST 1.925
+score STYLE_GIBBERISH 1.676
+score SUBJ_UNNEEDED_HTML 3.100
+score TEQF_USR_IMAGE 2.717
score THIS_AD 0.001
-score TO_EQ_FM_DIRECT_MX 2.046
-score TO_IN_SUBJ 0.100
+score TO_EQ_FM_DIRECT_MX 2.000
+score TO_IN_SUBJ 0.099
score TO_NAME_SUBJ_NO_RDNS 2.999
-score TO_NO_BRKTS_FROM_MSSP 0.883
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_FROM_MSSP 0.882
+score TO_NO_BRKTS_HTML_IMG 2.000
score TO_NO_BRKTS_HTML_ONLY 0.001
score TO_NO_BRKTS_MSFT 0.001
-score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
+score TO_NO_BRKTS_NORDNS_HTML 0.001
score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_RATIO_MINFP 2.499
-score UNICODE_OBFU_ASC 2.500
-score UNICODE_OBFU_ZW 2.082
+score TVD_SPACE_RATIO_MINFP 2.500
+score UNICODE_OBFU_ASC 2.499
+score UNICODE_OBFU_ZW 2.086
score URI_BUFFLY 2.000
score URI_GOOGLE_PROXY 0.001
score URI_ONLY_MSGID_MALF 1.999
score URI_TRY_3LD 0.001
-score URI_WP_HACKED 3.500
-score URI_WP_HACKED_2 1.194
+score URI_WP_HACKED 3.499
+score URI_WP_HACKED_2 1.195
score XPRIO 2.249
-score XPRIO_SHORT_SUBJ 0.298
-score YOU_INHERIT 0.741
+score XPRIO_SHORT_SUBJ 0.296
+score YOU_INHERIT 0.570
score ZW_OBFU_BITCOIN 2.499
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Sun Mar 3 05:34:12 2019
@@ -1,111 +1,146 @@
-# Using score set 1 logs for revision 1854195 from:
-# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-darxus.log ham-net-ena-week0.log ham-net-ena-week1.log ham-net-ena-week2.log ham-net-ena-week3.log ham-net-ena-week4.log ham-net-giovanni-ham.log ham-net-giovanni-spam.log ham-net-giovanni-spammy.log ham-net-grenier.log ham-net-hege.log ham-net-jarif.log ham-net-jbrooks.log ham-net-llanga.log ham-net-sihde.log ham-net-spamsponge.log ham-net-thendrikx.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-darxus.log spam-net-ena-week0.log spam-net-ena-week1.log spam-net-ena-week2.log spam-net-ena-week3.log spam-net-ena-week4.log spam-net-giovanni-ham.log spam-net-giovanni-spam.log spam-net-giovanni-spammy.log spam-net-grenier.log spam-net-hege.log spam-net-jarif.log spam-net-jbrooks.log spam-net-llanga.log spam-net-sihde.log spam-net-spamsponge.log spam-net-thendrikx.log
+# Using score set 1 logs for revision 1854625 from:
+# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-darxus.log ham-net-ena-week0.log ham-net-ena-week1.log ham-net-ena-week2.log ham-net-ena-week3.log ham-net-ena-week4.log ham-net-giovanni-ham.log ham-net-giovanni-spam.log ham-net-giovanni-spammy.log ham-net-grenier.log ham-net-hege.log ham-net-jarif.log ham-net-jbrooks.log ham-net-llanga.log ham-net-sihde.log ham-net-thendrikx.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-darxus.log spam-net-ena-week0.log spam-net-ena-week1.log spam-net-ena-week2.log spam-net-ena-week3.log spam-net-ena-week4.log spam-net-giovanni-ham.log spam-net-giovanni-spam.log spam-net-giovanni-spammy.log spam-net-grenier.log spam-net-hege.log spam-net-jarif.log spam-net-jbrooks.log spam-net-llanga.log spam-net-sihde.log spam-net-thendrikx.log
-score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_FORM 1.712
-score ADVANCE_FEE_2_NEW_MONEY 1.999
+score AC_DIV_BONANZA 0.001 # force non-zero
+score ADVANCE_FEE_2_NEW_FORM 1.999
+score ADVANCE_FEE_2_NEW_MONEY 1.242
score ADVANCE_FEE_3_NEW 2.967
+score ADVANCE_FEE_3_NEW_FRM_MNY 2.141
score ADVANCE_FEE_3_NEW_MONEY 2.488
-score ADVANCE_FEE_4_NEW 2.799
+score ADVANCE_FEE_4_NEW 2.699
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 2.491
score AD_PREFS 0.001
-score BITCOIN_DEADLINE 2.722
-score BITCOIN_EXTORT_01 5.000
+score APP_DEVELOPMENT_NORDNS 1.999
+score BIGNUM_EMAILS 2.999
+score BITCOIN_DEADLINE 0.204
+score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.999
+score BITCOIN_PAY_ME 2.290
score BITCOIN_SPAM_01 0.001
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 2.500
-score BITCOIN_SPAM_04 1.499
-score BITCOIN_SPAM_06 0.238
+score BITCOIN_SPAM_03 2.499
+score BITCOIN_SPAM_06 1.499
score BITCOIN_SPAM_07 2.999
-score BITCOIN_SPAM_08 2.402
-score BITCOIN_SPAM_09 1.319
-score BODY_SINGLE_WORD 2.497
+score BITCOIN_SPAM_08 2.399
+score BITCOIN_SPAM_09 0.441
+score BODY_SINGLE_WORD 2.389
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 2.575
-score DKIMWL_BL 1.836
+score BOGUS_MSM_HDRS 1.299
+score DEAR_BENEFICIARY 0.001
+score DKIMWL_BL 1.588
score DKIMWL_WL_HIGH -0.001
-score DKIMWL_WL_MED -0.001
-score DX_TEXT_03 1.299
+score DKIMWL_WL_MED -0.001 # force non-zero
+score DX_TEXT_03 1.199
score FILL_THIS_FORM 0.001
-score FORM_FRAUD_5 2.674
+score FORM_FRAUD_5 0.001
score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FREEM_FRNUM_UNICD_EMPTY 3.749
-score FROM_ADDR_WS 2.639
-score FROM_IN_TO_AND_SUBJ 2.199
+score FREEMAIL_DISPTO 0.250
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FREEM_FRNUM_UNICD_EMPTY 3.136
+score FROM_ADDR_WS 2.063
+score FROM_IN_TO_AND_SUBJ 0.960
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_DYNIP 2.662
score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_PHISH 0.085
+score FROM_MISSP_FREEMAIL 0.001
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_PHISH 0.001
+score FROM_MISSP_REPLYTO 1.000
+score FROM_MISSP_USER 0.001
+score FROM_MISSP_XPRIO 0.001
score FROM_WORDY 1.147
-score FROM_WSP_LEAD 2.444
-score FSL_BULK_SIG 0.834
-score FSL_HELO_FAKE 3.679
+score FROM_WSP_LEAD 1.208
+score FROM_WSP_TRAIL 1.910
+score FSL_BULK_SIG 0.821
+score FSL_HELO_FAKE 3.686
score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.900
-score GOOG_REDIR_NORDNS 2.504
-score HDRS_LCASE_IMGONLY 0.100
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999
+score FUZZY_CLICK_HERE 2.699
+score GOOG_REDIR_NORDNS 3.099
+score HDRS_LCASE 0.100
+score HDRS_LCASE_IMGONLY 0.099
+score HDR_ORDER_FTSDMCXX_DIRECT 2.000
score HDR_ORDER_FTSDMCXX_NORDNS 3.499
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HK_SCAM_N8 0.886
-score HTML_OFF_PAGE 2.999
-score HTML_SINGLET_MANY 0.230
-score HTML_TEXT_INVISIBLE_STYLE 1.838
-score IMG_ONLY_FM_DOM_INFO 2.253
-score KB_CTYPE_SPACE 1.487
-score KB_CTYPE_SP_MOZ 0.955
-score KB_FORGED_MOZ4 0.528
-score LIST_PRTL_SAME_USER 0.277
-score LONG_HEX_URI 0.939
-score LONG_IMG_URI 0.259
+score HK_NAME_MR_MRS 0.001
+score HK_SCAM_N2 0.001
+score HK_SCAM_N8 0.001
+score HTML_OFF_PAGE 3.000
+score HTML_SINGLET_MANY 0.001
+score HTML_TEXT_INVISIBLE_STYLE 1.643
+score IMG_ONLY_FM_DOM_INFO 2.250
+score KB_CTYPE_SPACE 0.552
+score KB_CTYPE_SP_MOZ 2.844
+score KB_FORGED_MOZ4 2.278
+score KHOP_DYNAMIC 1.474
+score LIST_PARTIAL_SHORT_MSG 2.499
+score LIST_PRTL_SAME_USER 0.273
+score LONG_HEX_URI 1.484
+score LONG_IMG_URI 0.260
score LOTS_OF_MONEY 0.010
-score MALF_HTML_B64 3.445
-score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.943
-score MIXED_ES 3.280
-score MONEY_FORM_SHORT 2.180
-score MONEY_FRAUD_3 1.884
-score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 3.299
-score MSM_PRIO_REPTO 2.384
-score NORDNS_LOW_CONTRAST 0.001 # force non-zero
+score LOTTO_AGENT 1.500
+score L_8BIT_MISMATCH 0.010
+score MALFORMED_FREEMAIL 0.544
+score MALF_HTML_B64 3.121
+score MILLION_USD 1.807
+score MIMEOLE_DIRECT_TO_MX 0.001
+score MIME_NO_TEXT 1.999
+score MIXED_ES 3.282
+score MONEY_ATM_CARD 3.199
+score MONEY_BARRISTER 0.001 # force non-zero
+score MONEY_FORM 0.001
+score MONEY_FORM_SHORT 0.001 # force non-zero
+score MONEY_FRAUD_3 2.640
+score MONEY_FRAUD_5 0.001 # force non-zero
+score MONEY_FRAUD_8 0.001
+score MONEY_FROM_MISSP 0.001
+score MSM_PRIO_REPTO 2.279
+score NORDNS_LOW_CONTRAST 0.976
score NO_FM_NAME_IP_HOSTN 0.001
-score OBFU_BITCOIN 3.000
+score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_HELO_USER 2.906
+score OBFU_BITCOIN 2.999
score PHOTO_EDITING_DIRECT 2.242
-score PHOTO_EDITING_FREEM 2.799
-score PP_MIME_FAKE_ASCII_TEXT 0.998
-score RATWARE_NO_RDNS 2.509
+score PHP_ORIG_SCRIPT 2.499
+score PP_MIME_FAKE_ASCII_TEXT 0.917
+score RATWARE_NO_RDNS 2.824
score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_ATCHNX 0.944
-score RDNS_NUM_TLD_XM 2.636
-score RP_8BIT 1.336
-score SERGIO_SUBJECT_PORN014 3.768
-score SINGLETS_LOW_CONTRAST 0.925
+score RDNS_NUM_TLD_ATCHNX 0.865
+score RDNS_NUM_TLD_XM 1.073
+score RP_8BIT 2.532
+score SERGIO_SUBJECT_PORN014 2.100
+score SERGIO_SUBJECT_VIAGRA01 2.131
+score SHORTENED_URL_SRC 1.953
+score SHORTENER_SHORT_IMG 2.499
score SPOOFED_FREEM_REPTO 2.500
score STATIC_XPRIO_OLE 1.999
score STYLE_GIBBERISH 0.001
-score TEQF_USR_IMAGE 0.272
+score TEQF_USR_IMAGE 0.401
score THIS_AD 0.001
score TO_EQ_FM_DIRECT_MX 2.499
score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score TO_EQ_FM_SPF_FAIL 2.053
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NO_BRKTS_FROM_MSSP 0.001
score TO_NO_BRKTS_HTML_IMG 2.000
-score TO_NO_BRKTS_HTML_ONLY 0.755
+score TO_NO_BRKTS_HTML_ONLY 0.760
+score TO_NO_BRKTS_MSFT 2.420
score TO_NO_BRKTS_NORDNS_HTML 0.648
-score TO_NO_BRKTS_PCNT 2.500
+score TO_NO_BRKTS_PCNT 2.499
+score TVD_SPACE_RATIO_MINFP 2.499
score UNICODE_OBFU_ASC 2.499
score UNICODE_OBFU_ZW 3.499
score URI_BUFFLY 1.999
score URI_GOOGLE_PROXY 2.185
score URI_ONLY_MSGID_MALF 1.999
-score URI_TRY_3LD 0.899
-score URI_WP_HACKED_2 1.114
-score XPRIO 1.264
-score XPRIO_SHORT_SUBJ 2.497
-score YOU_INHERIT 2.374
+score URI_TRY_3LD 0.660
+score URI_WP_HACKED_2 1.201
+score XPRIO 2.070
+score XPRIO_SHORT_SUBJ 2.499
+score YOU_INHERIT 2.699
score ZW_OBFU_BITCOIN 2.499
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
@@ -119,8 +154,8 @@ score AC_SPAMMY_URI_PATTERNS4 1.0
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
score APP_DEVELOPMENT_FREEM 1.000
-score APP_DEVELOPMENT_NORDNS 1.000
score BITCOIN_BOMB 1.000
+score BITCOIN_SPAM_04 1.000
score BITCOIN_SPAM_05 1.000
score BOMB_FREEM 1.000
score BOMB_MONEY 1.000
@@ -145,8 +180,8 @@ score HTML_SHRT_CMNT_OBFU_MANY 1.0
score HTML_TEXT_INVISIBLE_FONT 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
+score PHOTO_EDITING_FREEM 1.000
score PHP_NOVER_MUA 1.000
-score PHP_ORIG_SCRIPT 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
score PP_TOO_MUCH_UNICODE05 1.000
@@ -166,5 +201,3 @@ score URI_PHISH 1.0
score URI_WP_DIRINDEX 1.000
score URI_WP_HACKED 1.000
score USB_DRIVES 1.000
-# in active.list but have no hits in recent corpus
-score SHORT_BUFFLY_IMG 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Mar 3 05:34:12 2019
@@ -2,14 +2,14 @@
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-giovanni-ham.log ham-giovanni-spam.log ham-giovanni-spammy.log ham-grenier.log ham-hege.log ham-jarif.log ham-jbrooks.log ham-llanga.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-giovanni-ham.log spam-giovanni-spam.log spam-giovanni-spammy.log spam-grenier.log spam-hege.log spam-jarif.log spam-jbrooks.log spam-llanga.log spam-sihde.log spam-thendrikx.log
score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_FORM 2.000
-score ADVANCE_FEE_2_NEW_MONEY 1.573
-score ADVANCE_FEE_3_NEW 2.120
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.535
-score ADVANCE_FEE_3_NEW_MONEY 2.999
+score ADVANCE_FEE_2_NEW_FORM 1.999
+score ADVANCE_FEE_2_NEW_MONEY 1.544
+score ADVANCE_FEE_3_NEW 2.551
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.902
+score ADVANCE_FEE_3_NEW_MONEY 3.000
score ADVANCE_FEE_4_NEW 2.799
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.329
-score ADVANCE_FEE_5_NEW 2.899
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.754
+score ADVANCE_FEE_5_NEW 2.900
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
score ADVANCE_FEE_5_NEW_MONEY 3.299
score AD_PREFS 0.001
@@ -17,52 +17,52 @@ score APP_DEVELOPMENT_NORDNS 0.0
score BIGNUM_EMAILS 2.999
score BITCOIN_DEADLINE 2.999
score BITCOIN_EXTORT_01 4.999
-score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.808
-score BITCOIN_SPAM_01 1.798
+score BITCOIN_MALWARE 2.991
+score BITCOIN_PAY_ME 2.804
+score BITCOIN_SPAM_01 0.780
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 2.104
+score BITCOIN_SPAM_03 2.258
score BITCOIN_SPAM_05 2.499
-score BITCOIN_SPAM_06 1.499
+score BITCOIN_SPAM_06 0.063
score BITCOIN_SPAM_07 2.999
score BITCOIN_SPAM_08 2.499
-score BITCOIN_SPAM_09 0.911
+score BITCOIN_SPAM_09 1.069
score BODY_SINGLE_WORD 2.499
-score BODY_URI_ONLY 0.551
+score BODY_URI_ONLY 0.552
score BOGUS_MSM_HDRS 2.999
score DEAR_BENEFICIARY 3.399
-score DKIMWL_BL 0.793
+score DKIMWL_BL 1.110
score DX_TEXT_03 0.001
score FILL_THIS_FORM 0.001
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.586
-score FORM_FRAUD_5 2.688
+score FORM_FRAUD_3 2.101
+score FORM_FRAUD_5 2.512
score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.150
-score FREEM_FRNUM_UNICD_EMPTY 2.588
-score FROM_ADDR_WS 1.212
+score FREEMAIL_DISPTO 0.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.149
+score FREEM_FRNUM_UNICD_EMPTY 3.298
+score FROM_ADDR_WS 1.825
score FROM_IN_TO_AND_SUBJ 2.099
-score FROM_MISSPACED 0.001 # force non-zero
-score FROM_MISSP_DYNIP 2.097
+score FROM_MISSPACED 0.001
+score FROM_MISSP_DYNIP 2.556
score FROM_MISSP_EH_MATCH 0.001
score FROM_MISSP_FREEMAIL 2.048
-score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_PHISH 1.649
-score FROM_MISSP_REPLYTO 0.001 # force non-zero
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_PHISH 1.448
+score FROM_MISSP_REPLYTO 0.001
score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
score FROM_WORDY 0.001
-score FROM_WSP_LEAD 1.587
-score FROM_WSP_TRAIL 2.483
-score FSL_HELO_FAKE 4.300
+score FROM_WSP_LEAD 0.974
+score FROM_WSP_TRAIL 2.248
+score FSL_HELO_FAKE 4.299
score FSL_NEW_HELO_USER 0.001
score FUZZY_CLICK_HERE 2.699
-score GOOG_REDIR_NORDNS 1.746
+score GOOG_REDIR_NORDNS 2.465
score HDRS_LCASE 0.100
-score HDRS_LCASE_IMGONLY 0.001 # force non-zero
+score HDRS_LCASE_IMGONLY 0.001
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.172
+score HDR_ORDER_FTSDMCXX_NORDNS 2.877
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HK_NAME_MR_MRS 0.999
score HK_SCAM_N2 0.001
@@ -70,79 +70,79 @@ score HK_SCAM_N8 0.0
score HTML_OFF_PAGE 2.999
score HTML_SINGLET_MANY 0.001
score HTML_TEXT_INVISIBLE_STYLE 0.001
-score IMG_ONLY_FM_DOM_INFO 2.333
-score KB_CTYPE_SPACE 2.839
-score KB_CTYPE_SP_MOZ 1.412
-score KB_FORGED_MOZ4 3.255
+score IMG_ONLY_FM_DOM_INFO 2.331
+score KB_CTYPE_SPACE 3.353
+score KB_CTYPE_SP_MOZ 3.086
+score KB_FORGED_MOZ4 3.965
score KHOP_DYNAMIC 1.999
score LIST_PARTIAL_SHORT_MSG 2.499
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
+score LIST_PRTL_SAME_USER 0.001
score LONG_HEX_URI 0.111
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.001 # force non-zero
score LOTTO_AGENT 1.499
score L_8BIT_MISMATCH 0.010
score MALFORMED_FREEMAIL 0.685
-score MALF_HTML_B64 3.469
-score MILLION_USD 1.822
+score MALF_HTML_B64 3.499
+score MILLION_USD 1.999
score MIMEOLE_DIRECT_TO_MX 1.999
score MIME_NO_TEXT 1.782
score MIXED_ES 3.999
-score MONEY_ATM_CARD 2.856
-score MONEY_BARRISTER 0.748
-score MONEY_FORM 0.729
+score MONEY_ATM_CARD 3.042
+score MONEY_BARRISTER 0.747
+score MONEY_FORM 0.552
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 1.228
+score MONEY_FRAUD_3 1.257
score MONEY_FRAUD_5 0.001
score MONEY_FRAUD_8 0.001
-score MONEY_FROM_MISSP 0.001 # force non-zero
-score MSM_PRIO_REPTO 2.499
-score NORDNS_LOW_CONTRAST 1.886
-score NO_FM_NAME_IP_HOSTN 2.198
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 2.019
-score OBFU_BITCOIN 2.743
-score PHOTO_EDITING_DIRECT 1.403
+score MONEY_FROM_MISSP 0.001
+score MSM_PRIO_REPTO 2.420
+score NORDNS_LOW_CONTRAST 1.885
+score NO_FM_NAME_IP_HOSTN 2.200
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 0.732
+score OBFU_BITCOIN 0.739
+score PHOTO_EDITING_DIRECT 1.402
score PHP_ORIG_SCRIPT 2.397
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RATWARE_NO_RDNS 2.648
-score RDNS_NUM_TLD_ATCHNX 2.585
+score RATWARE_NO_RDNS 2.765
+score RDNS_NUM_TLD_ATCHNX 2.803
score RDNS_NUM_TLD_XM 2.999
-score RP_8BIT 3.499
+score RP_8BIT 2.891
score SERGIO_SUBJECT_PORN014 2.198
score SERGIO_SUBJECT_VIAGRA01 0.001
-score SHORTENED_URL_SRC 1.485
-score SHORTENER_SHORT_IMG 1.401
+score SHORTENED_URL_SRC 1.484
+score SHORTENER_SHORT_IMG 1.166
score SINGLETS_LOW_CONTRAST 0.001
-score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.539
+score SPOOFED_FREEM_REPTO 2.500
+score SPOOFED_FREEM_REPTO_CHN 1.529
score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 1.926
-score STYLE_GIBBERISH 1.679
-score SUBJ_UNNEEDED_HTML 3.099
-score TEQF_USR_IMAGE 2.999
+score STOCK_LOW_CONTRAST 1.925
+score STYLE_GIBBERISH 1.676
+score SUBJ_UNNEEDED_HTML 3.100
+score TEQF_USR_IMAGE 2.717
score THIS_AD 0.001
-score TO_EQ_FM_DIRECT_MX 2.046
-score TO_IN_SUBJ 0.100
+score TO_EQ_FM_DIRECT_MX 2.000
+score TO_IN_SUBJ 0.099
score TO_NAME_SUBJ_NO_RDNS 2.999
-score TO_NO_BRKTS_FROM_MSSP 0.883
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_FROM_MSSP 0.882
+score TO_NO_BRKTS_HTML_IMG 2.000
score TO_NO_BRKTS_HTML_ONLY 0.001
score TO_NO_BRKTS_MSFT 0.001
-score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
+score TO_NO_BRKTS_NORDNS_HTML 0.001
score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_RATIO_MINFP 2.499
-score UNICODE_OBFU_ASC 2.500
-score UNICODE_OBFU_ZW 2.082
+score TVD_SPACE_RATIO_MINFP 2.500
+score UNICODE_OBFU_ASC 2.499
+score UNICODE_OBFU_ZW 2.086
score URI_BUFFLY 2.000
score URI_GOOGLE_PROXY 0.001
score URI_ONLY_MSGID_MALF 1.999
score URI_TRY_3LD 0.001
-score URI_WP_HACKED 3.500
-score URI_WP_HACKED_2 1.194
+score URI_WP_HACKED 3.499
+score URI_WP_HACKED_2 1.195
score XPRIO 2.249
-score XPRIO_SHORT_SUBJ 0.298
-score YOU_INHERIT 0.741
+score XPRIO_SHORT_SUBJ 0.296
+score YOU_INHERIT 0.570
score ZW_OBFU_BITCOIN 2.499
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Mar 3 05:34:12 2019
@@ -1,111 +1,146 @@
-# Using score set 1 logs for revision 1854195 from:
-# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-darxus.log ham-net-ena-week0.log ham-net-ena-week1.log ham-net-ena-week2.log ham-net-ena-week3.log ham-net-ena-week4.log ham-net-giovanni-ham.log ham-net-giovanni-spam.log ham-net-giovanni-spammy.log ham-net-grenier.log ham-net-hege.log ham-net-jarif.log ham-net-jbrooks.log ham-net-llanga.log ham-net-sihde.log ham-net-spamsponge.log ham-net-thendrikx.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-darxus.log spam-net-ena-week0.log spam-net-ena-week1.log spam-net-ena-week2.log spam-net-ena-week3.log spam-net-ena-week4.log spam-net-giovanni-ham.log spam-net-giovanni-spam.log spam-net-giovanni-spammy.log spam-net-grenier.log spam-net-hege.log spam-net-jarif.log spam-net-jbrooks.log spam-net-llanga.log spam-net-sihde.log spam-net-spamsponge.log spam-net-thendrikx.log
+# Using score set 1 logs for revision 1854625 from:
+# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-darxus.log ham-net-ena-week0.log ham-net-ena-week1.log ham-net-ena-week2.log ham-net-ena-week3.log ham-net-ena-week4.log ham-net-giovanni-ham.log ham-net-giovanni-spam.log ham-net-giovanni-spammy.log ham-net-grenier.log ham-net-hege.log ham-net-jarif.log ham-net-jbrooks.log ham-net-llanga.log ham-net-sihde.log ham-net-thendrikx.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-darxus.log spam-net-ena-week0.log spam-net-ena-week1.log spam-net-ena-week2.log spam-net-ena-week3.log spam-net-ena-week4.log spam-net-giovanni-ham.log spam-net-giovanni-spam.log spam-net-giovanni-spammy.log spam-net-grenier.log spam-net-hege.log spam-net-jarif.log spam-net-jbrooks.log spam-net-llanga.log spam-net-sihde.log spam-net-thendrikx.log
-score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_FORM 1.712
-score ADVANCE_FEE_2_NEW_MONEY 1.999
+score AC_DIV_BONANZA 0.001 # force non-zero
+score ADVANCE_FEE_2_NEW_FORM 1.999
+score ADVANCE_FEE_2_NEW_MONEY 1.242
score ADVANCE_FEE_3_NEW 2.967
+score ADVANCE_FEE_3_NEW_FRM_MNY 2.141
score ADVANCE_FEE_3_NEW_MONEY 2.488
-score ADVANCE_FEE_4_NEW 2.799
+score ADVANCE_FEE_4_NEW 2.699
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 2.491
score AD_PREFS 0.001
-score BITCOIN_DEADLINE 2.722
-score BITCOIN_EXTORT_01 5.000
+score APP_DEVELOPMENT_NORDNS 1.999
+score BIGNUM_EMAILS 2.999
+score BITCOIN_DEADLINE 0.204
+score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.999
+score BITCOIN_PAY_ME 2.290
score BITCOIN_SPAM_01 0.001
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_03 2.500
-score BITCOIN_SPAM_04 1.499
-score BITCOIN_SPAM_06 0.238
+score BITCOIN_SPAM_03 2.499
+score BITCOIN_SPAM_06 1.499
score BITCOIN_SPAM_07 2.999
-score BITCOIN_SPAM_08 2.402
-score BITCOIN_SPAM_09 1.319
-score BODY_SINGLE_WORD 2.497
+score BITCOIN_SPAM_08 2.399
+score BITCOIN_SPAM_09 0.441
+score BODY_SINGLE_WORD 2.389
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 2.575
-score DKIMWL_BL 1.836
+score BOGUS_MSM_HDRS 1.299
+score DEAR_BENEFICIARY 0.001
+score DKIMWL_BL 1.588
score DKIMWL_WL_HIGH -0.001
-score DKIMWL_WL_MED -0.001
-score DX_TEXT_03 1.299
+score DKIMWL_WL_MED -0.001 # force non-zero
+score DX_TEXT_03 1.199
score FILL_THIS_FORM 0.001
-score FORM_FRAUD_5 2.674
+score FORM_FRAUD_5 0.001
score FOUND_YOU 3.249
-score FREEMAIL_DISPTO 0.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FREEM_FRNUM_UNICD_EMPTY 3.749
-score FROM_ADDR_WS 2.639
-score FROM_IN_TO_AND_SUBJ 2.199
+score FREEMAIL_DISPTO 0.250
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FREEM_FRNUM_UNICD_EMPTY 3.136
+score FROM_ADDR_WS 2.063
+score FROM_IN_TO_AND_SUBJ 0.960
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_DYNIP 2.662
score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_PHISH 0.085
+score FROM_MISSP_FREEMAIL 0.001
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_PHISH 0.001
+score FROM_MISSP_REPLYTO 1.000
+score FROM_MISSP_USER 0.001
+score FROM_MISSP_XPRIO 0.001
score FROM_WORDY 1.147
-score FROM_WSP_LEAD 2.444
-score FSL_BULK_SIG 0.834
-score FSL_HELO_FAKE 3.679
+score FROM_WSP_LEAD 1.208
+score FROM_WSP_TRAIL 1.910
+score FSL_BULK_SIG 0.821
+score FSL_HELO_FAKE 3.686
score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.900
-score GOOG_REDIR_NORDNS 2.504
-score HDRS_LCASE_IMGONLY 0.100
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999
+score FUZZY_CLICK_HERE 2.699
+score GOOG_REDIR_NORDNS 3.099
+score HDRS_LCASE 0.100
+score HDRS_LCASE_IMGONLY 0.099
+score HDR_ORDER_FTSDMCXX_DIRECT 2.000
score HDR_ORDER_FTSDMCXX_NORDNS 3.499
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HK_SCAM_N8 0.886
-score HTML_OFF_PAGE 2.999
-score HTML_SINGLET_MANY 0.230
-score HTML_TEXT_INVISIBLE_STYLE 1.838
-score IMG_ONLY_FM_DOM_INFO 2.253
-score KB_CTYPE_SPACE 1.487
-score KB_CTYPE_SP_MOZ 0.955
-score KB_FORGED_MOZ4 0.528
-score LIST_PRTL_SAME_USER 0.277
-score LONG_HEX_URI 0.939
-score LONG_IMG_URI 0.259
+score HK_NAME_MR_MRS 0.001
+score HK_SCAM_N2 0.001
+score HK_SCAM_N8 0.001
+score HTML_OFF_PAGE 3.000
+score HTML_SINGLET_MANY 0.001
+score HTML_TEXT_INVISIBLE_STYLE 1.643
+score IMG_ONLY_FM_DOM_INFO 2.250
+score KB_CTYPE_SPACE 0.552
+score KB_CTYPE_SP_MOZ 2.844
+score KB_FORGED_MOZ4 2.278
+score KHOP_DYNAMIC 1.474
+score LIST_PARTIAL_SHORT_MSG 2.499
+score LIST_PRTL_SAME_USER 0.273
+score LONG_HEX_URI 1.484
+score LONG_IMG_URI 0.260
score LOTS_OF_MONEY 0.010
-score MALF_HTML_B64 3.445
-score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.943
-score MIXED_ES 3.280
-score MONEY_FORM_SHORT 2.180
-score MONEY_FRAUD_3 1.884
-score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 3.299
-score MSM_PRIO_REPTO 2.384
-score NORDNS_LOW_CONTRAST 0.001 # force non-zero
+score LOTTO_AGENT 1.500
+score L_8BIT_MISMATCH 0.010
+score MALFORMED_FREEMAIL 0.544
+score MALF_HTML_B64 3.121
+score MILLION_USD 1.807
+score MIMEOLE_DIRECT_TO_MX 0.001
+score MIME_NO_TEXT 1.999
+score MIXED_ES 3.282
+score MONEY_ATM_CARD 3.199
+score MONEY_BARRISTER 0.001 # force non-zero
+score MONEY_FORM 0.001
+score MONEY_FORM_SHORT 0.001 # force non-zero
+score MONEY_FRAUD_3 2.640
+score MONEY_FRAUD_5 0.001 # force non-zero
+score MONEY_FRAUD_8 0.001
+score MONEY_FROM_MISSP 0.001
+score MSM_PRIO_REPTO 2.279
+score NORDNS_LOW_CONTRAST 0.976
score NO_FM_NAME_IP_HOSTN 0.001
-score OBFU_BITCOIN 3.000
+score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_HELO_USER 2.906
+score OBFU_BITCOIN 2.999
score PHOTO_EDITING_DIRECT 2.242
-score PHOTO_EDITING_FREEM 2.799
-score PP_MIME_FAKE_ASCII_TEXT 0.998
-score RATWARE_NO_RDNS 2.509
+score PHP_ORIG_SCRIPT 2.499
+score PP_MIME_FAKE_ASCII_TEXT 0.917
+score RATWARE_NO_RDNS 2.824
score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_ATCHNX 0.944
-score RDNS_NUM_TLD_XM 2.636
-score RP_8BIT 1.336
-score SERGIO_SUBJECT_PORN014 3.768
-score SINGLETS_LOW_CONTRAST 0.925
+score RDNS_NUM_TLD_ATCHNX 0.865
+score RDNS_NUM_TLD_XM 1.073
+score RP_8BIT 2.532
+score SERGIO_SUBJECT_PORN014 2.100
+score SERGIO_SUBJECT_VIAGRA01 2.131
+score SHORTENED_URL_SRC 1.953
+score SHORTENER_SHORT_IMG 2.499
score SPOOFED_FREEM_REPTO 2.500
score STATIC_XPRIO_OLE 1.999
score STYLE_GIBBERISH 0.001
-score TEQF_USR_IMAGE 0.272
+score TEQF_USR_IMAGE 0.401
score THIS_AD 0.001
score TO_EQ_FM_DIRECT_MX 2.499
score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score TO_EQ_FM_SPF_FAIL 2.053
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NO_BRKTS_FROM_MSSP 0.001
score TO_NO_BRKTS_HTML_IMG 2.000
-score TO_NO_BRKTS_HTML_ONLY 0.755
+score TO_NO_BRKTS_HTML_ONLY 0.760
+score TO_NO_BRKTS_MSFT 2.420
score TO_NO_BRKTS_NORDNS_HTML 0.648
-score TO_NO_BRKTS_PCNT 2.500
+score TO_NO_BRKTS_PCNT 2.499
+score TVD_SPACE_RATIO_MINFP 2.499
score UNICODE_OBFU_ASC 2.499
score UNICODE_OBFU_ZW 3.499
score URI_BUFFLY 1.999
score URI_GOOGLE_PROXY 2.185
score URI_ONLY_MSGID_MALF 1.999
-score URI_TRY_3LD 0.899
-score URI_WP_HACKED_2 1.114
-score XPRIO 1.264
-score XPRIO_SHORT_SUBJ 2.497
-score YOU_INHERIT 2.374
+score URI_TRY_3LD 0.660
+score URI_WP_HACKED_2 1.201
+score XPRIO 2.070
+score XPRIO_SHORT_SUBJ 2.499
+score YOU_INHERIT 2.699
score ZW_OBFU_BITCOIN 2.499
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
@@ -119,8 +154,8 @@ score AC_SPAMMY_URI_PATTERNS4 1.0
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
score APP_DEVELOPMENT_FREEM 1.000
-score APP_DEVELOPMENT_NORDNS 1.000
score BITCOIN_BOMB 1.000
+score BITCOIN_SPAM_04 1.000
score BITCOIN_SPAM_05 1.000
score BOMB_FREEM 1.000
score BOMB_MONEY 1.000
@@ -145,8 +180,8 @@ score HTML_SHRT_CMNT_OBFU_MANY 1.0
score HTML_TEXT_INVISIBLE_FONT 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
+score PHOTO_EDITING_FREEM 1.000
score PHP_NOVER_MUA 1.000
-score PHP_ORIG_SCRIPT 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
score PP_TOO_MUCH_UNICODE05 1.000
@@ -166,5 +201,3 @@ score URI_PHISH 1.0
score URI_WP_DIRINDEX 1.000
score URI_WP_HACKED 1.000
score USB_DRIVES 1.000
-# in active.list but have no hits in recent corpus
-score SHORT_BUFFLY_IMG 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Mar 3 05:34:12 2019
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 281256 22.370% (95.982% of non-spam corpus)
-# Correctly spam: 824177 65.552% (85.473% of spam corpus)
-# False positives: 11773 0.936% (4.018% of nonspam, 1128729 weighted)
-# False negatives: 140080 11.141% (14.527% of spam, 386628 weighted)
-# Average score for spam: 10.7 nonspam: 1.3
+# Correctly non-spam: 281248 22.372% (95.980% of non-spam corpus)
+# Correctly spam: 824146 65.556% (85.481% of spam corpus)
+# False positives: 11781 0.937% (4.020% of nonspam, 1129225 weighted)
+# False negatives: 139983 11.135% (14.519% of spam, 386391 weighted)
+# Average score for spam: 10.6 nonspam: 1.3
# Average for false-pos: 5.8 false-neg: 2.8
-# TOTAL: 1257286 100.00%
+# TOTAL: 1257158 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 34939 95.50%
-# Correctly spam: 103489 85.92%
-# False positives: 1648 4.50%
-# False negatives: 16955 14.08%
-# TCR(l=50): 1.212259 SpamRecall: 85.923% SpamPrec: 98.433%
+# Correctly non-spam: 34998 95.66%
+# Correctly spam: 103019 85.54%
+# False positives: 1589 4.34%
+# False negatives: 17409 14.46%
+# TCR(l=50): 1.243333 SpamRecall: 85.544% SpamPrec: 98.481%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 280881 95.85%
-# Correctly spam: 587322 60.91%
+# Correctly spam: 587302 60.92%
# False positives: 12148 4.15%
-# False negatives: 376935 39.09%
-# TCR(l=50): 0.979602 SpamRecall: 60.909% SpamPrec: 97.974%
+# False negatives: 376827 39.08%
+# TCR(l=50): 0.979580 SpamRecall: 60.915% SpamPrec: 97.973%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 35050 95.80%
-# Correctly spam: 73512 61.03%
+# Correctly spam: 73404 60.95%
# False positives: 1537 4.20%
-# False negatives: 46932 38.97%
-# TCR(l=50): 0.973033 SpamRecall: 61.034% SpamPrec: 97.952%
+# False negatives: 47024 39.05%
+# TCR(l=50): 0.972181 SpamRecall: 60.953% SpamPrec: 97.949%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1854676&r1=1854675&r2=1854676&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Mar 3 05:34:12 2019
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 309649 23.496% (99.017% of non-spam corpus)
-# Correctly spam: 934896 70.939% (93.010% of spam corpus)
-# False positives: 3073 0.233% (0.983% of nonspam, 1041750 weighted)
-# False negatives: 70263 5.332% (6.990% of spam, 161650 weighted)
-# Average score for spam: 19.9 nonspam: -2.1
-# Average for false-pos: 10.5 false-neg: 2.3
-# TOTAL: 1317881 100.00%
+# Correctly non-spam: 297259 23.121% (99.836% of non-spam corpus)
+# Correctly spam: 904043 70.317% (91.510% of spam corpus)
+# False positives: 489 0.038% (0.164% of nonspam, 104145 weighted)
+# False negatives: 83872 6.524% (8.490% of spam, 225730 weighted)
+# Average score for spam: 15.8 nonspam: -2.2
+# Average for false-pos: 6.4 false-neg: 2.7
+# TOTAL: 1285663 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 38639 99.03%
-# Correctly spam: 116500 92.84%
-# False positives: 378 0.97%
-# False negatives: 8989 7.16%
-# TCR(l=50): 4.499588 SpamRecall: 92.837% SpamPrec: 99.677%
+# Correctly non-spam: 37094 99.83%
+# Correctly spam: 112835 91.53%
+# False positives: 63 0.17%
+# False negatives: 10436 8.47%
+# TCR(l=50): 9.073384 SpamRecall: 91.534% SpamPrec: 99.944%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 309456 98.96%
-# Correctly spam: 762787 75.89%
-# False positives: 3266 1.04%
-# False negatives: 242372 24.11%
-# TCR(l=50): 2.477763 SpamRecall: 75.887% SpamPrec: 99.574%
+# Correctly non-spam: 296228 99.49%
+# Correctly spam: 684950 69.33%
+# False positives: 1520 0.51%
+# False negatives: 302965 30.67%
+# TCR(l=50): 2.606877 SpamRecall: 69.333% SpamPrec: 99.779%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 38608 98.95%
-# Correctly spam: 95207 75.87%
-# False positives: 409 1.05%
-# False negatives: 30282 24.13%
-# TCR(l=50): 2.473567 SpamRecall: 75.869% SpamPrec: 99.572%
+# Correctly non-spam: 36972 99.50%
+# Correctly spam: 85450 69.32%
+# False positives: 185 0.50%
+# False negatives: 37821 30.68%
+# TCR(l=50): 2.618831 SpamRecall: 69.319% SpamPrec: 99.784%