You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2020/10/01 03:22:43 UTC

svn commit: r1882170 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1882170&r1=1882169&r2=1882170&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Thu Oct  1 03:22:43 2020
@@ -1,133 +1,143 @@
-# Using score set 0 logs for revision 1882080 from:
-# ham-axb-coi-bulk.r1882080.log ham-axb-generic.r1882080.log ham-axb-ham-misc.r1882080.log ham-darxus.r1882080.log ham-ena-week0.r1882080.log ham-ena-week1.r1882080.log ham-ena-week2.r1882080.log ham-ena-week3.r1882080.log ham-ena-week4.r1882080.log ham-giovanni-ham.r1882080.log ham-giovanni-spammy.r1882080.log ham-giovanni-spam.r1882080.log ham-grenier.r1882080.log ham-jbrooks.r1882080.log ham-llanga.r1882080.log ham-mmiroslaw-mails-ham.r1882080.log ham-mmiroslaw-mails-spam.r1882080.log ham-npiazzi.r1882080.log ham-pds.r1882080.log ham-sihde.r1882080.log ham-spamsponge.r1882080.log ham-thendrikx.r1882080.log spam-axb-coi-bulk.r1882080.log spam-axb-generic.r1882080.log spam-axb-ham-misc.r1882080.log spam-darxus.r1882080.log spam-ena-week0.r1882080.log spam-ena-week1.r1882080.log spam-ena-week2.r1882080.log spam-ena-week3.r1882080.log spam-ena-week4.r1882080.log spam-giovanni-ham.r1882080.log spam-giovanni-spammy.r1882080.log spam-giovanni-spam.r1882080.log spam-grenier.r1882080.log 
 spam-jbrooks.r1882080.log spam-llanga.r1882080.log spam-mmiroslaw-mails-ham.r1882080.log spam-mmiroslaw-mails-spam.r1882080.log spam-npiazzi.r1882080.log spam-pds.r1882080.log spam-sihde.r1882080.log spam-spamsponge.r1882080.log spam-thendrikx.r1882080.log
+# Using score set 0 logs for revision 1882151 from:
+# ham-axb-coi-bulk.r1882151.log ham-axb-generic.r1882151.log ham-axb-ham-misc.r1882151.log ham-darxus.r1882151.log ham-ena-week0.r1882151.log ham-ena-week1.r1882151.log ham-ena-week2.r1882151.log ham-ena-week3.r1882151.log ham-ena-week4.r1882151.log ham-giovanni-ham.r1882151.log ham-giovanni-spammy.r1882151.log ham-giovanni-spam.r1882151.log ham-grenier.r1882151.log ham-jbrooks.r1882151.log ham-llanga.r1882151.log ham-mmiroslaw-mails-ham.r1882151.log ham-mmiroslaw-mails-spam.r1882151.log ham-npiazzi.r1882151.log ham-pds.r1882151.log ham-sihde.r1882151.log ham-spamsponge.r1882151.log ham-thendrikx.r1882151.log spam-axb-coi-bulk.r1882151.log spam-axb-generic.r1882151.log spam-axb-ham-misc.r1882151.log spam-darxus.r1882151.log spam-ena-week0.r1882151.log spam-ena-week1.r1882151.log spam-ena-week2.r1882151.log spam-ena-week3.r1882151.log spam-ena-week4.r1882151.log spam-giovanni-ham.r1882151.log spam-giovanni-spammy.r1882151.log spam-giovanni-spam.r1882151.log spam-grenier.r1882151.log 
 spam-jbrooks.r1882151.log spam-llanga.r1882151.log spam-mmiroslaw-mails-ham.r1882151.log spam-mmiroslaw-mails-spam.r1882151.log spam-npiazzi.r1882151.log spam-pds.r1882151.log spam-sihde.r1882151.log spam-spamsponge.r1882151.log spam-thendrikx.r1882151.log
 
 score AC_BR_BONANZA                  0.001
+score AC_DIV_BONANZA                 0.001 # force non-zero
 score AC_FROM_MANY_DOTS              2.999
-score AC_HTML_NONSENSE_TAGS          2.000
-score AC_POST_EXTRAS                 2.499
-score ADMITS_SPAM                    2.541
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.699
+score AC_HTML_NONSENSE_TAGS          1.999
+score AC_POST_EXTRAS                 2.500
+score ADMITS_SPAM                    3.199
+score ADVANCE_FEE_2_NEW_FRM_MNY      0.001
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              2.600
-score ADVANCE_FEE_3_NEW_MONEY        2.791
-score ADVANCE_FEE_4_NEW_MONEY        2.800
-score ADVANCE_FEE_5_NEW              2.799
+score ADVANCE_FEE_3_NEW              2.599
+score ADVANCE_FEE_3_NEW_MONEY        2.497
+score ADVANCE_FEE_4_NEW              2.699
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_4_NEW_MONEY        2.569
+score ADVANCE_FEE_5_NEW              2.496
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_5_NEW_MONEY        0.001
 score AMAZON_IMG_NOT_RCVD_AMZN       2.499
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BITCOIN_DEADLINE               2.230
-score BITCOIN_EXTORT_01              4.500
+score AXB_XMAILER_MIMEOLE_OL_1ECD5   2.699
+score BITCOIN_DEADLINE               2.217
+score BITCOIN_EXTORT_01              4.501
 score BITCOIN_MALF_HTML              3.499
 score BITCOIN_SPAM_02                0.001
-score BITCOIN_SPAM_04                1.499
-score BITCOIN_XPRIO                  0.852
-score BITCOIN_YOUR_INFO              2.271
+score BITCOIN_XPRIO                  0.001 # force non-zero
+score BITCOIN_YOUR_INFO              2.284
 score BODY_URI_ONLY                  0.999
 score BOGUS_MIME_VERSION             3.499
 score BULK_RE_SUSP_NTLD              0.999
 score CK_HELO_DYNAMIC_SPLIT_IP       1.499
 score CK_HELO_GENERIC                0.249
 score COMPENSATION                   1.499
-score CTE_8BIT_MISMATCH              0.999
-score CTYPE_NULL                     2.999
-score DEAR_BENEFICIARY               2.201
-score DOTGOV_IMAGE                   2.808
+score CTE_8BIT_MISMATCH              1.000
+score CTYPE_NULL                     2.629
+score DEAR_BENEFICIARY               0.759
+score DOTGOV_IMAGE                   2.644
 score DSN_NO_MIMEVERSION             1.999
 score DX_TEXT_03                     0.799
-score END_FUTURE_EMAILS              2.100
+score END_FUTURE_EMAILS              2.095
 score FILL_THIS_FORM                 1.799
-score FONT_INVIS_DIRECT              0.001
+score FONT_INVIS_DIRECT              0.166
 score FONT_INVIS_DOTGOV              3.499
-score FONT_INVIS_LONG_LINE           1.217
-score FONT_INVIS_MSGID               1.375
+score FONT_INVIS_LONG_LINE           1.211
+score FONT_INVIS_MSGID               1.221
 score FONT_INVIS_POSTEXTRAS          0.001
 score FORGED_RELAY_MUA_TO_MX         3.999
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   1.600
-score FORM_FRAUD_5                   2.449
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
+score FORM_FRAUD_3                   3.043
+score FORM_FRAUD_5                   0.865
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
 score FROM_2_EMAILS_SHORT            1.999
 score FROM_ADDR_WS                   2.999
 score FROM_MISSPACED                 1.999
-score FROM_MISSP_DYNIP               0.549
 score FROM_MISSP_EH_MATCH            1.999
 score FROM_MISSP_FREEMAIL            3.199
-score FROM_MISSP_MSFT                0.648
+score FROM_MISSP_MSFT                0.056
 score FROM_MISSP_REPLYTO             0.001
-score FROM_MISSP_TO_UNDISC           1.612
 score FROM_MISSP_USER                0.001
-score FROM_MISSP_XPRIO               0.494
+score FROM_MISSP_XPRIO               0.493
 score FROM_NAME_EQ_TO_G_DRIVE        0.001
-score FROM_NTLD_LINKBAIT             0.980
+score FROM_NTLD_LINKBAIT             0.670
 score FROM_NTLD_REPLY_FREEMAIL       1.305
 score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        2.000
-score FROM_UNBAL1                    1.998
+score FROM_SUSPICIOUS_NTLD_FP        1.999
+score FROM_UNBAL1                    2.294
+score FROM_WORDY                     0.001
 score FSL_CTYPE_WIN1251              0.001
+score FSL_MIME_NO_TEXT               2.899
 score FSL_NEW_HELO_USER              0.001
-score FSL_THIS_IS_ADV                2.195
-score GB_FREEMAIL_DISPTO             0.500
+score FSL_THIS_IS_ADV                1.405
+score GB_BITCOIN_CP                  0.970
+score GB_FREEMAIL_DISPTO             0.499
 score GB_GOOGLE_OBFUS                0.749
 score GOOG_REDIR_HTML_ONLY           1.999
-score GOOG_REDIR_NORDNS              2.252
+score GOOG_REDIR_NORDNS              2.255
 score HDRS_LCASE                     0.100
-score HDRS_LCASE_IMGONLY             0.100
+score HDRS_LCASE_IMGONLY             0.099
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
-score HELO_MISC_IP                   0.249
+score HELO_MISC_IP                   0.250
 score HELO_NO_DOMAIN                 0.001
+score HK_LOTTO                       0.999
 score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_FROM                 0.540
+score HK_RANDOM_FROM                 0.753
 score HK_RANDOM_REPLYTO              0.999
-score HK_RCVD_IP_MULTICAST           1.300
-score HK_SCAM                        1.539
+score HK_RCVD_IP_MULTICAST           1.294
+score HK_SCAM                        0.010
 score HOSTED_IMG_DIRECT_MX           3.499
-score HTML_OFF_PAGE                  0.001 # force non-zero
-score HTML_SINGLET_MANY              1.696
+score HTML_OFF_PAGE                  0.001
+score HTML_SINGLET_MANY              2.257
 score HTML_TEXT_INVISIBLE_FONT       2.999
-score HTML_TEXT_INVISIBLE_STYLE      2.252
+score HTML_TEXT_INVISIBLE_STYLE      2.350
 score IMG_ONLY_FM_DOM_INFO           2.499
-score KB_FORGED_MOZ4                 4.499
-score KHOP_FAKE_EBAY                 0.001
-score KHOP_HELO_FCRDNS               0.400
-score LH_URI_DOM_IN_PATH             2.699
-score LIST_PRTL_SAME_USER            2.200
-score LONG_HEX_URI                   2.750
-score LONG_IMG_URI                   1.502
+score KB_FORGED_MOZ4                 3.469
+score KHOP_FAKE_EBAY                 0.001 # force non-zero
+score KHOP_HELO_FCRDNS               0.399
+score LH_URI_DOM_IN_PATH             2.585
+score LIST_PRTL_SAME_USER            1.653
+score LONG_HEX_URI                   2.511
+score LONG_IMG_URI                   2.402
 score LONG_INVISIBLE_TEXT            2.501
 score LOTS_OF_MONEY                  0.010
 score LOTTO_AGENT                    1.499
+score LOTTO_DEPT                     1.426
 score MANY_SPAN_IN_TEXT              3.099
-score MAY_BE_FORGED                  2.700
-score MILLION_HUNDRED                0.246
+score MAY_BE_FORGED                  2.599
+score MILLION_HUNDRED                0.001
 score MIMEOLE_DIRECT_TO_MX           0.001
 score MIME_NO_TEXT                   0.001
-score MIXED_ES                       2.700
-score MONEY_FORM_SHORT               2.294
-score MONEY_FRAUD_3                  2.899
-score MONEY_FRAUD_5                  2.730
-score MONEY_FRAUD_8                  3.099
+score MIXED_ES                       2.699
+score MONEY_ATM_CARD                 1.483
+score MONEY_FORM                     0.001
+score MONEY_FORM_SHORT               2.499
+score MONEY_FRAUD_3                  1.562
+score MONEY_FRAUD_5                  2.353
+score MONEY_FRAUD_8                  2.313
+score MONEY_FROM_41                  1.999
 score MONEY_FROM_MISSP               1.999
 score MSGID_DOLLARS_URI_IMG          2.999
 score MSM_PRIO_REPTO                 2.499
-score NICE_REPLY_A                   -0.301
-score NORDNS_LOW_CONTRAST            1.884
-score NO_FM_NAME_IP_HOSTN            1.281
+score NICE_REPLY_A                   -0.296
+score NORDNS_LOW_CONTRAST            1.886
+score NO_FM_NAME_IP_HOSTN            1.290
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.396
-score OFFER_ONLY_AMERICA             0.731
+score NSL_RCVD_HELO_USER             2.458
+score OFFER_ONLY_AMERICA             0.482
 score PDS_BTC_ID                     0.499
 score PDS_BTC_MSGID                  0.001
-score PDS_DBL_URL_TNB_RUNON          2.000
+score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_EMPTYSUBJ_URISHRT          1.499
 score PDS_FREEMAIL_REPLYTO_URISHRT   1.499
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              1.999
-score PDS_FROM_NAME_TO_DOMAIN        1.000
+score PDS_FROM_2_EMAILS              2.399
+score PDS_FROM_NAME_TO_DOMAIN        0.999
 score PDS_HP_HELO_NORDNS             0.999
 score PDS_NAKED_TO_NUMERO            1.999
-score PDS_OTHER_BAD_TLD              1.999
+score PDS_OTHER_BAD_TLD              2.000
 score PDS_SHORTFWD_URISHRT           1.499
 score PDS_TINYSUBJ_URISHRT           1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
@@ -137,69 +147,76 @@ score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.9
 score PDS_TO_EQ_FROM_NAME            0.001
 score PHP_ORIG_SCRIPT                2.499
 score PP_MIME_FAKE_ASCII_TEXT        0.999
-score RATWARE_NO_RDNS                1.246
+score RATWARE_NO_RDNS                2.329
+score RCVD_DOTEDU_SHORT              2.201
 score RCVD_DOTEDU_SUSP               1.999
 score RDNS_NUM_TLD_XM                2.999
-score RISK_FREE                      2.799
+score RISK_FREE                      2.899
 score SENDGRID_REDIR                 1.499
-score SENDGRID_REDIR_PHISH           3.132
-score SERGIO_SUBJECT_VIAGRA01        2.870
-score SHORTENED_URL_SRC              3.100
-score SHORTENER_SHORT_IMG            0.001
-score SHORT_BODY_G_DRIVE_DYN         0.121
-score SHORT_IMG_SUSP_NTLD            0.770
+score SENDGRID_REDIR_PHISH           3.260
+score SERGIO_SUBJECT_VIAGRA01        2.862
+score SHORTENED_URL_HREF             0.999
+score SHORTENED_URL_SRC              3.099
+score SHORTENER_SHORT_IMG            0.001 # force non-zero
+score SHORT_BODY_G_DRIVE_DYN         0.493
+score SHORT_IMG_SUSP_NTLD            1.190
 score SHORT_SHORTNER                 1.999
 score SINGLETS_LOW_CONTRAST          0.001
 score SPOOFED_FREEMAIL_NO_RDNS       1.499
 score STATIC_XPRIO_OLE               1.999
-score STOCK_LOW_CONTRAST             1.788
+score STOCK_LOW_CONTRAST             2.499
 score STY_INVIS_DIRECT               2.499
-score SUBJ_OBFU_PUNCT_FEW            0.457
+score SUBJ_OBFU_PUNCT_FEW            0.241
 score SUBJ_OBFU_PUNCT_MANY           1.749
 score SUSP_UTF8_WORD_COMBO           0.001
 score SUSP_UTF8_WORD_FROM            1.999
-score SUSP_UTF8_WORD_SUBJ            1.999
-score TEQF_USR_POLITE                1.269
-score THIS_AD                        1.500
+score SUSP_UTF8_WORD_SUBJ            2.000
+score TEQF_USR_POLITE                0.906
+score THIS_AD                        1.399
 score THIS_IS_ADV_SUSP_NTLD          0.001
 score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
 score TO_EQ_FM_DOM_HTML_IMG          0.001
-score TO_EQ_FM_DOM_HTML_ONLY         0.733
-score TO_EQ_FM_HTML_ONLY             1.250
-score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.499
-score TO_NO_BRKTS_FROM_MSSP          2.500
+score TO_EQ_FM_DOM_HTML_ONLY         1.899
+score TO_EQ_FM_HTML_ONLY             0.531
+score TO_IN_SUBJ                     0.100
+score TO_NAME_SUBJ_NO_RDNS           1.926
+score TO_NO_BRKTS_FROM_MSSP          2.499
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               2.500
-score TO_NO_BRKTS_NORDNS_HTML        1.999
+score TO_NO_BRKTS_MSFT               2.499
+score TO_NO_BRKTS_NORDNS_HTML        2.000
 score TO_NO_BRKTS_PCNT               2.499
-score TVD_RCVD_SPACE_BRACKET         4.291
-score TVD_SPACE_ENCODED              0.802
-score TVD_SPACE_RATIO_MINFP          1.600
-score UNICODE_OBFU_ASC               2.500
-score UPGRADE_MAILBOX                1.384
-score URI_DASHGOVEDU                 3.023
-score URI_DOTEDU                     1.788
-score URI_DOTEDU_ENTITY              1.303
+score TRANSFORM_LIFE                 2.499
+score TVD_PH_BODY_META               0.001
+score TVD_PH_BODY_META_ALL           1.224
+score TVD_RCVD_SPACE_BRACKET         4.299
+score TVD_SPACE_ENCODED              0.249
+score TVD_SPACE_RATIO_MINFP          1.604
+score TVD_SUBJ_NUM_OBFU_MINFP        2.696
+score UNICODE_OBFU_ASC               2.499
+score UPGRADE_MAILBOX                1.386
+score URI_DASHGOVEDU                 3.184
+score URI_DOTEDU                     1.787
+score URI_DOTEDU_ENTITY              0.001
 score URI_DOTEDU_LONG                0.001
-score URI_GOOGLE_PROXY               0.107
-score URI_IN_URI_10                  2.458
-score URI_IN_URI_5                   2.291
+score URI_GOOGLE_PROXY               0.217
+score URI_IN_URI_10                  2.325
+score URI_IN_URI_5                   2.106
 score URI_ONLY_MSGID_MALF            1.999
-score URI_PHISH                      2.398
+score URI_PHISH                      2.256
 score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    1.937
-score URI_WPADMIN                    2.699
+score URI_TRY_3LD                    1.938
+score URI_WPADMIN                    2.799
 score URI_WP_DIRINDEX                3.499
-score URI_WP_HACKED                  3.500
+score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score WIKI_IMG                       2.252
-score XPRIO                          2.250
+score US_DOLLARS_3                   1.999
+score WIKI_IMG                       2.495
+score XFER_LOTSA_MONEY               0.998
+score XPRIO                          2.249
 score XPRIO_SHORT_SUBJ               2.499
 score XPRIO_URL_SHORTNER             1.000
-score YOU_INHERIT                    1.790
-score AC_DIV_BONANZA                 0.001
+score YOU_INHERIT                    1.276
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
 score AC_SPAMMY_URI_PATTERNS11       1.000
@@ -220,6 +237,7 @@ score BITCOIN_MALWARE                1.0
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
 score BITCOIN_SPAM_03                1.000
+score BITCOIN_SPAM_04                1.000
 score BITCOIN_SPAM_06                1.000
 score BITCOIN_SPAM_07                1.000
 score BITCOIN_SPAM_08                1.000
@@ -244,7 +262,6 @@ score FOUND_YOU                      1.0
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
 score FROM_NUMERIC_TLD               1.000
-score FROM_WORDY                     1.000
 score FROM_WORDY_SHORT               1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
@@ -259,6 +276,7 @@ score GOOG_MALWARE_DNLD              1.0
 score HDRS_MISSP                     1.000
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
+score HK_WIN                         1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
 score HOSTED_IMG_FREEM               1.000
 score HOSTED_IMG_MULTI               1.000
@@ -276,7 +294,6 @@ score MONERO_DEADLINE                1.0
 score MONERO_EXTORT_01               1.000
 score MONERO_MALWARE                 1.000
 score MONERO_PAY_ME                  1.000
-score MONEY_FROM_41                  1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score OBFU_BITCOIN                   1.000
 score PHOTO_EDITING_DIRECT           1.000
@@ -288,7 +305,6 @@ score PP_TOO_MUCH_UNICODE05          1.0
 score PUMPDUMP                       1.000
 score PUMPDUMP_MULTI                 1.000
 score RAND_HEADER_MANY               1.000
-score RCVD_DOTEDU_SHORT              1.000
 score RCVD_DOTEDU_SUSP_URI           1.000
 score RDNS_NUM_TLD_ATCHNX            1.000
 score SEO_SUSP_NTLD                  1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1882170&r1=1882169&r2=1882170&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Thu Oct  1 03:22:43 2020
@@ -1,227 +1,211 @@
 # Using score set 1 logs for revision 1882043 from:
-# ham-net-axb-coi-bulk.r1882043.log ham-net-axb-generic.r1882043.log ham-net-axb-ham-misc.r1882043.log ham-net-darxus.r1882043.log ham-net-ena-week0.r1882043.log ham-net-ena-week1.r1882043.log ham-net-ena-week2.r1882043.log ham-net-ena-week3.r1882043.log ham-net-ena-week4.r1882043.log ham-net-giovanni-ham.r1882043.log ham-net-giovanni-spammy.r1882043.log ham-net-giovanni-spam.r1882043.log ham-net-grenier.r1882043.log ham-net-jbrooks.r1882043.log ham-net-mmiroslaw-mails-ham.r1882043.log ham-net-mmiroslaw-mails-spam.r1882043.log ham-net-npiazzi.r1882043.log ham-net-pds.r1882043.log ham-net-sihde.r1882043.log ham-net-spamsponge.r1882043.log ham-net-thendrikx.r1882043.log spam-net-axb-coi-bulk.r1882043.log spam-net-axb-generic.r1882043.log spam-net-axb-ham-misc.r1882043.log spam-net-darxus.r1882043.log spam-net-ena-week0.r1882043.log spam-net-ena-week1.r1882043.log spam-net-ena-week2.r1882043.log spam-net-ena-week3.r1882043.log spam-net-ena-week4.r1882043.log spam-net-giovanni-ham.r1882
 043.log spam-net-giovanni-spammy.r1882043.log spam-net-giovanni-spam.r1882043.log spam-net-grenier.r1882043.log spam-net-jbrooks.r1882043.log spam-net-mmiroslaw-mails-ham.r1882043.log spam-net-mmiroslaw-mails-spam.r1882043.log spam-net-npiazzi.r1882043.log spam-net-pds.r1882043.log spam-net-sihde.r1882043.log spam-net-spamsponge.r1882043.log spam-net-thendrikx.r1882043.log
+# ham-net-axb-coi-bulk.r1882043.log ham-net-axb-generic.r1882043.log ham-net-axb-ham-misc.r1882043.log ham-net-darxus.r1882043.log ham-net-ena-week0.r1882043.log ham-net-ena-week1.r1882043.log ham-net-ena-week2.r1882043.log ham-net-ena-week3.r1882043.log ham-net-ena-week4.r1882043.log ham-net-giovanni-ham.r1882043.log ham-net-giovanni-spammy.r1882043.log ham-net-giovanni-spam.r1882043.log ham-net-grenier.r1882043.log ham-net-jbrooks.r1882043.log ham-net-llanga.r1882043.log ham-net-mmiroslaw-mails-ham.r1882043.log ham-net-mmiroslaw-mails-spam.r1882043.log ham-net-npiazzi.r1882043.log ham-net-pds.r1882043.log ham-net-sihde.r1882043.log ham-net-spamsponge.r1882043.log ham-net-thendrikx.r1882043.log spam-net-axb-coi-bulk.r1882043.log spam-net-axb-generic.r1882043.log spam-net-axb-ham-misc.r1882043.log spam-net-darxus.r1882043.log spam-net-ena-week0.r1882043.log spam-net-ena-week1.r1882043.log spam-net-ena-week2.r1882043.log spam-net-ena-week3.r1882043.log spam-net-ena-week4.r1882043.log
  spam-net-giovanni-ham.r1882043.log spam-net-giovanni-spammy.r1882043.log spam-net-giovanni-spam.r1882043.log spam-net-grenier.r1882043.log spam-net-jbrooks.r1882043.log spam-net-llanga.r1882043.log spam-net-mmiroslaw-mails-ham.r1882043.log spam-net-mmiroslaw-mails-spam.r1882043.log spam-net-npiazzi.r1882043.log spam-net-pds.r1882043.log spam-net-sihde.r1882043.log spam-net-spamsponge.r1882043.log spam-net-thendrikx.r1882043.log
 
 score AC_BR_BONANZA                  0.001
-score AC_DIV_BONANZA                 0.001 # force non-zero
-score AC_FROM_MANY_DOTS              1.399
+score AC_DIV_BONANZA                 0.001
+score AC_FROM_MANY_DOTS              2.364
 score AC_HTML_NONSENSE_TAGS          1.999
 score AC_POST_EXTRAS                 0.001
-score ADMITS_SPAM                    0.440
-score ADVANCE_FEE_2_NEW_FRM_MNY      2.321
-score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        0.001
-score ADVANCE_FEE_4_NEW              2.199
-score ADVANCE_FEE_4_NEW_MONEY        2.499
-score ADVANCE_FEE_5_NEW              2.599
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score ADMITS_SPAM                    0.435
+score ADVANCE_FEE_2_NEW_FRM_MNY      0.500
+score ADVANCE_FEE_2_NEW_MONEY        2.000
+score ADVANCE_FEE_3_NEW              3.154
+score ADVANCE_FEE_3_NEW_MONEY        1.485
+score ADVANCE_FEE_4_NEW_MONEY        2.799
+score ADVANCE_FEE_5_NEW              2.799
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.001 # force non-zero
+score AMAZON_IMG_NOT_RCVD_AMZN       2.020
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BITCOIN_DEADLINE               2.892
-score BITCOIN_EXTORT_01              1.433
-score BITCOIN_MALF_HTML              3.499
-score BITCOIN_SPAM_02                0.090
+score BITCOIN_DEADLINE               1.888
+score BITCOIN_EXTORT_01              3.225
+score BITCOIN_MALF_HTML              3.500
+score BITCOIN_SPAM_02                0.001
 score BITCOIN_SPAM_04                1.499
-score BITCOIN_SPAM_05                1.047
-score BITCOIN_SPAM_07                3.499
-score BITCOIN_XPRIO                  0.094
-score BITCOIN_YOUR_INFO              1.518
+score BITCOIN_SPAM_05                0.108
+score BITCOIN_XPRIO                  2.499
+score BITCOIN_YOUR_INFO              2.613
 score BODY_URI_ONLY                  0.001
-score BOGUS_MIME_VERSION             3.400
-score BOGUS_MSM_HDRS                 0.328
-score CK_HELO_DYNAMIC_SPLIT_IP       1.499
+score BOGUS_MIME_VERSION             3.499
+score CK_HELO_DYNAMIC_SPLIT_IP       0.621
 score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              0.999
-score CTYPE_NULL                     2.699
-score DEAR_BENEFICIARY               0.001
+score CTYPE_NULL                     2.899
+score DEAR_BENEFICIARY               2.019
 score DKIMWL_BL                      2.999
-score DKIMWL_WL_HIGH                 -0.469
-score DKIMWL_WL_MED                  -0.499
-score DOTGOV_IMAGE                   1.681
+score DKIMWL_WL_HIGH                 -0.001
+score DKIMWL_WL_MED                  -0.044
+score DOTGOV_IMAGE                   1.332
 score DSN_NO_MIMEVERSION             1.999
-score DX_TEXT_03                     0.199
-score END_FUTURE_EMAILS              1.268
-score FILL_THIS_FORM                 0.001 # force non-zero
+score DX_TEXT_03                     0.899
+score END_FUTURE_EMAILS              1.217
+score FILL_THIS_FORM                 0.514
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_DOTGOV              0.001
-score FONT_INVIS_LONG_LINE           2.610
+score FONT_INVIS_LONG_LINE           0.190
 score FONT_INVIS_MSGID               0.001
-score FONT_INVIS_POSTEXTRAS          0.001 # force non-zero
-score FORGED_RELAY_MUA_TO_MX         3.799
-score FORGED_SPF_HELO                1.299
+score FONT_INVIS_POSTEXTRAS          0.001
+score FORGED_RELAY_MUA_TO_MX         3.899
+score FORGED_SPF_HELO                1.799
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   1.602
-score FORM_FRAUD_5                   2.799
+score FORM_FRAUD_3                   1.228
+score FORM_FRAUD_5                   3.099
 score FOUND_YOU                      3.249
-score FREEMAIL_FORGED_FROMDOMAIN     0.249
+score FREEMAIL_FORGED_FROMDOMAIN     0.001
 score FROM_2_EMAILS_SHORT            0.001
-score FROM_ADDR_WS                   1.672
+score FROM_ADDR_WS                   2.087
 score FROM_FMBLA_NEWDOM              1.499
 score FROM_FMBLA_NEWDOM14            0.999
 score FROM_FMBLA_NEWDOM28            0.799
-score FROM_GOV_DKIM_AU               -0.001
-score FROM_GOV_SPOOF                 1.000
+score FROM_GOV_DKIM_AU               -0.430
+score FROM_GOV_SPOOF                 0.999
 score FROM_MISSPACED                 0.001
-score FROM_MISSP_DYNIP               2.599
+score FROM_MISSP_DYNIP               1.662
 score FROM_MISSP_EH_MATCH            0.001
-score FROM_MISSP_FREEMAIL            2.899
+score FROM_MISSP_FREEMAIL            3.077
 score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_REPLYTO             0.001 # force non-zero
-score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_TO_UNDISC           0.309
+score FROM_MISSP_REPLYTO             0.001
+score FROM_MISSP_SPF_FAIL            0.405
+score FROM_MISSP_TO_UNDISC           0.601
 score FROM_MISSP_USER                0.001
-score FROM_MISSP_XPRIO               1.476
-score FROM_NAME_EQ_TO_G_DRIVE        0.059
-score FROM_NEWDOM_BTC                0.883
-score FROM_NTLD_REPLY_FREEMAIL       0.363
-score FROM_SUSPICIOUS_NTLD           0.499
-score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FROM_UNBAL1                    2.279
-score FROM_WORDY                     1.961
-score FROM_WSP_TRAIL                 2.199
+score FROM_MISSP_XPRIO               1.058
+score FROM_NAME_EQ_TO_G_DRIVE        0.001
+score FROM_NTLD_REPLY_FREEMAIL       0.747
+score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_SUSPICIOUS_NTLD_FP        1.279
+score FROM_UNBAL1                    0.001
 score FSL_BULK_SIG                   0.001
 score FSL_CTYPE_WIN1251              0.001
-score FSL_NEW_HELO_USER              0.001
-score FSL_THIS_IS_ADV                0.106
-score FUZZY_WALLET                   2.199
+score FSL_NEW_HELO_USER              0.001 # force non-zero
+score FSL_THIS_IS_ADV                0.214
 score GB_FREEMAIL_DISPTO             0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
 score GB_GOOGLE_OBFUS                0.749
-score GOOG_REDIR_HTML_ONLY           1.999
-score GOOG_REDIR_NORDNS              2.699
-score HDRS_LCASE                     0.100
+score GOOG_REDIR_HTML_ONLY           1.252
+score GOOG_REDIR_NORDNS              1.701
+score HDRS_LCASE                     0.099
 score HDRS_LCASE_IMGONLY             0.099
-score HDR_ORDER_FTSDMCXX_DIRECT      0.001
-score HDR_ORDER_FTSDMCXX_NORDNS      0.001
-score HEADER_FROM_DIFFERENT_DOMAINS  0.001
-score HELO_MISC_IP                   0.001
+score HDR_ORDER_FTSDMCXX_DIRECT      1.810
+score HDR_ORDER_FTSDMCXX_NORDNS      0.001 # force non-zero
+score HEADER_FROM_DIFFERENT_DOMAINS  0.250
+score HELO_MISC_IP                   0.058
 score HELO_NO_DOMAIN                 0.001
 score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_FROM                 0.001 # force non-zero
+score HK_RANDOM_FROM                 0.553
 score HK_RANDOM_REPLYTO              0.999
-score HK_RCVD_IP_MULTICAST           1.487
-score HK_SCAM                        0.278
-score HOSTED_IMG_DIRECT_MX           0.502
-score HTML_OFF_PAGE                  1.066
-score HTML_SINGLET_MANY              2.499
-score HTML_TEXT_INVISIBLE_FONT       2.463
-score HTML_TEXT_INVISIBLE_STYLE      2.599
-score IMG_ONLY_FM_DOM_INFO           2.443
-score KB_FORGED_MOZ4                 4.399
-score KHOP_FAKE_EBAY                 0.899
-score KHOP_HELO_FCRDNS               0.399
-score LH_URI_DOM_IN_PATH             0.001
-score LIST_PARTIAL_SHORT_MSG         2.499
-score LIST_PRTL_SAME_USER            0.868
-score LONG_HEX_URI                   0.413
-score LONG_IMG_URI                   0.001 # force non-zero
-score LONG_INVISIBLE_TEXT            1.633
+score HK_RCVD_IP_MULTICAST           0.072
+score HK_SCAM                        1.445
+score HOSTED_IMG_DIRECT_MX           2.186
+score HTML_OFF_PAGE                  0.001
+score HTML_SINGLET_MANY              1.781
+score HTML_TEXT_INVISIBLE_FONT       2.999
+score HTML_TEXT_INVISIBLE_STYLE      3.147
+score IMG_ONLY_FM_DOM_INFO           2.499
+score KB_FORGED_MOZ4                 3.115
+score KHOP_FAKE_EBAY                 1.399
+score KHOP_HELO_FCRDNS               0.276
+score LH_URI_DOM_IN_PATH             2.121
+score LIST_PRTL_SAME_USER            0.265
+score LONG_HEX_URI                   2.196
+score LONG_IMG_URI                   1.014
+score LONG_INVISIBLE_TEXT            1.682
 score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    1.499
-score MANY_SPAN_IN_TEXT              0.001
-score MILLION_HUNDRED                0.001
+score MANY_SPAN_IN_TEXT              2.400
+score MILLION_HUNDRED                0.744
 score MIMEOLE_DIRECT_TO_MX           0.001
-score MIME_NO_TEXT                   1.398
-score MIXED_ES                       2.499
-score MONEY_FORM_SHORT               0.001
-score MONEY_FRAUD_3                  2.286
-score MONEY_FRAUD_5                  3.099
-score MONEY_FRAUD_8                  0.001
-score MONEY_FROM_MISSP               1.045
+score MIME_NO_TEXT                   1.322
+score MIXED_ES                       2.699
+score MONEY_FORM_SHORT               0.089
+score MONEY_FRAUD_3                  1.681
+score MONEY_FRAUD_5                  2.924
+score MONEY_FRAUD_8                  0.935
+score MONEY_FROM_MISSP               1.431
 score MSGID_DOLLARS_URI_IMG          2.999
 score MSM_PRIO_REPTO                 2.499
-score NICE_REPLY_A                   -0.001 # force non-zero
-score NORDNS_LOW_CONTRAST            0.912
-score NO_FM_NAME_IP_HOSTN            0.001
+score NICE_REPLY_A                   -0.260
+score NORDNS_LOW_CONTRAST            0.913
+score NO_FM_NAME_IP_HOSTN            0.407
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.872
+score NSL_RCVD_HELO_USER             2.853
 score PDS_BTC_ID                     0.499
 score PDS_BTC_MSGID                  0.001
-score PDS_DBL_URL_TNB_RUNON          1.999
-score PDS_EMPTYSUBJ_URISHRT          0.001
+score PDS_EMPTYSUBJ_URISHRT          0.001 # force non-zero
 score PDS_FREEMAIL_REPLYTO_URISHRT   1.499
 score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS              1.399
-score PDS_FROM_NAME_TO_DOMAIN        0.999
+score PDS_FROM_2_EMAILS              1.899
+score PDS_FROM_NAME_TO_DOMAIN        1.000
 score PDS_HP_HELO_NORDNS             0.001
 score PDS_NAKED_TO_NUMERO            1.999
-score PDS_SHORTFWD_URISHRT           1.499
-score PDS_TINYSUBJ_URISHRT           1.500
+score PDS_SHORTFWD_URISHRT           1.282
+score PDS_TINYSUBJ_URISHRT           1.499
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
 score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999
-score PDS_TONAME_EQ_TOLOCAL_SHORT    1.999
+score PDS_TONAME_EQ_TOLOCAL_SHORT    2.000
 score PDS_TONAME_EQ_TOLOCAL_VSHORT   0.999
-score PDS_TO_EQ_FROM_NAME            3.199
+score PDS_TO_EQ_FROM_NAME            0.001
 score PHP_ORIG_SCRIPT                2.499
-score PP_MIME_FAKE_ASCII_TEXT        0.569
-score RATWARE_NO_RDNS                2.329
-score RCVD_DOTEDU_SHORT              0.683
+score PP_MIME_FAKE_ASCII_TEXT        0.999
+score RATWARE_NO_RDNS                2.385
 score RCVD_DOTEDU_SUSP               1.999
 score RCVD_DOTEDU_SUSP_URI           0.001
-score RCVD_IN_MSPIKE_H2              -0.373
-score RDNS_NUM_TLD_ATCHNX            1.191
-score RDNS_NUM_TLD_XM                0.531
-score RISK_FREE                      2.499
+score RCVD_IN_MSPIKE_H2              -0.001
+score RDNS_NUM_TLD_XM                1.465
+score RISK_FREE                      2.799
 score SENDGRID_REDIR                 1.499
-score SENDGRID_REDIR_PHISH           3.499
-score SERGIO_SUBJECT_VIAGRA01        3.599
-score SHORTENED_URL_SRC              2.799
-score SHORTENER_SHORT_IMG            0.024
-score SHORT_BODY_G_DRIVE_DYN         0.527
-score SHORT_IMG_SUSP_NTLD            1.499
+score SENDGRID_REDIR_PHISH           1.440
+score SERGIO_SUBJECT_VIAGRA01        2.671
+score SHORTENED_URL_SRC              2.999
+score SHORTENER_SHORT_IMG            0.001
+score SHORT_BODY_G_DRIVE_DYN         0.929
+score SHORT_IMG_SUSP_NTLD            0.262
 score SHORT_SHORTNER                 1.999
-score SINGLETS_LOW_CONTRAST          0.208
+score SINGLETS_LOW_CONTRAST          0.001
 score SPOOFED_FREEMAIL               1.999
-score SPOOFED_FREEMAIL_NO_RDNS       0.001 # force non-zero
-score SPOOFED_FREEM_REPTO            2.169
-score SPOOFED_FREEM_REPTO_CHN        2.360
-score STATIC_XPRIO_OLE               2.000
-score STOCK_LOW_CONTRAST             0.001
+score SPOOFED_FREEMAIL_NO_RDNS       0.001
+score SPOOFED_FREEM_REPTO            1.896
+score SPOOFED_FREEM_REPTO_CHN        0.116
+score STATIC_XPRIO_OLE               1.999
+score STOCK_LOW_CONTRAST             0.038
 score STY_INVIS_DIRECT               0.001
 score SUBJ_OBFU_PUNCT_FEW            0.749
 score SUBJ_OBFU_PUNCT_MANY           1.749
 score SUSP_UTF8_WORD_COMBO           2.999
 score SUSP_UTF8_WORD_FROM            1.999
 score SUSP_UTF8_WORD_SUBJ            1.999
-score TEQF_USR_POLITE                0.001
-score THIS_AD                        0.899
+score TEQF_USR_POLITE                0.762
+score THIS_AD                        1.399
 score THIS_IS_ADV_SUSP_NTLD          0.001
-score TONOM_EQ_TOLOC_SHRT_SHRTNER    0.591
-score TO_EQ_FM_DIRECT_MX             1.535
-score TO_EQ_FM_DOM_HTML_IMG          0.293
-score TO_EQ_FM_DOM_HTML_ONLY         1.061
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
+score TO_EQ_FM_DOM_HTML_IMG          0.702
+score TO_EQ_FM_DOM_HTML_ONLY         1.902
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_HTML_ONLY             1.399
-score TO_EQ_FM_SPF_FAIL              0.519
+score TO_EQ_FM_HTML_ONLY             0.757
+score TO_EQ_FM_SPF_FAIL              0.522
 score TO_IN_SUBJ                     0.100
 score TO_NAME_SUBJ_NO_RDNS           2.240
-score TO_NO_BRKTS_FROM_MSSP          0.985
-score TO_NO_BRKTS_HTML_IMG           1.440
+score TO_NO_BRKTS_FROM_MSSP          2.499
+score TO_NO_BRKTS_HTML_IMG           1.786
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_MSFT               0.373
+score TO_NO_BRKTS_MSFT               2.499
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.500
-score TVD_RCVD_SPACE_BRACKET         4.499
-score TVD_SPACE_ENCODED              0.624
+score TVD_RCVD_SPACE_BRACKET         2.950
+score TVD_SPACE_ENCODED              0.001
 score TVD_SPACE_RATIO_MINFP          0.001
 score UNICODE_OBFU_ASC               2.499
-score UPGRADE_MAILBOX                0.211
+score UPGRADE_MAILBOX                1.999
 score URI_DASHGOVEDU                 3.499
 score URI_DOTEDU                     0.001
-score URI_DOTEDU_ENTITY              0.387
+score URI_DOTEDU_ENTITY              1.277
 score URI_DOTEDU_LONG                0.001
-score URI_GOOGLE_PROXY               0.500
-score URI_IN_URI_10                  2.504
-score URI_IN_URI_5                   2.783
-score URI_ONLY_MSGID_MALF            1.075
-score URI_PHISH                      3.999
+score URI_GOOGLE_PROXY               1.434
+score URI_IN_URI_10                  2.698
+score URI_IN_URI_5                   2.199
+score URI_ONLY_MSGID_MALF            1.680
+score URI_PHISH                      2.998
 score URI_PHP_REDIR                  3.499
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    1.298
-score URI_WP_DIRINDEX                2.506
+score URI_WPADMIN                    2.699
+score URI_WP_DIRINDEX                3.022
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score XPRIO                          2.249
 score XPRIO_SHORT_SUBJ               2.499
 score XPRIO_URL_SHORTNER             0.999
 score AC_SPAMMY_URI_PATTERNS1        1.000
@@ -245,6 +229,7 @@ score BITCOIN_PAY_ME                 1.0
 score BITCOIN_SPAM_01                1.000
 score BITCOIN_SPAM_03                1.000
 score BITCOIN_SPAM_06                1.000
+score BITCOIN_SPAM_07                1.000
 score BITCOIN_SPAM_08                1.000
 score BITCOIN_SPAM_09                1.000
 score BITCOIN_SPAM_10                1.000
@@ -252,6 +237,7 @@ score BITCOIN_SPAM_11                1.0
 score BITCOIN_SPAM_12                1.000
 score BITCOIN_SPF_ONLYALL            1.000
 score BODY_EMPTY                     1.000
+score BOGUS_MSM_HDRS                 1.000
 score BOMB_FREEM                     1.000
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
@@ -272,13 +258,16 @@ score FRNAME_IN_MSG_XPRIO_NO_SUB     1.0
 score FROM_BANK_NOAUTH               1.000
 score FROM_FMBLA_NDBLOCKED           0.001
 score FROM_GOV_REPLYTO_FREEMAIL      1.000
+score FROM_NEWDOM_BTC                1.000
 score FROM_NTLD_LINKBAIT             1.000
 score FROM_NUMBERO_NEWDOMAIN         1.000
 score FROM_NUMERIC_TLD               1.000
 score FROM_PAYPAL_SPOOF              1.000
+score FROM_WORDY                     1.000
 score FROM_WORDY_SHORT               1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FORGED_MUA_POSTFIX          1.000
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
 score GB_LINKED_IMG_NOT_RCVD_LINK    1.000
 score GB_WP_FILELINK                 1.000
@@ -289,13 +278,16 @@ score GOOG_MALWARE_DNLD              1.0
 score HDRS_MISSP                     1.000
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
+score HK_LOTTO                       1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
 score HOSTED_IMG_FREEM               1.000
 score HOSTED_IMG_MULTI               1.000
 score HTML_ENTITY_ASCII              1.000
 score HTML_ENTITY_ASCII_TINY         1.000
 score HTML_SHRT_CMNT_OBFU_MANY       1.000
+score LIST_PARTIAL_SHORT_MSG         1.000
 score LIST_PRTL_PUMPDUMP             1.000
+score LOTTO_AGENT                    1.000
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
 score MALWARE_NORDNS                 1.000
@@ -309,6 +301,7 @@ score MONEY_FROM_41                  1.0
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score OBFU_BITCOIN                   1.000
 score OFFER_ONLY_AMERICA             1.000
+score PDS_DBL_URL_TNB_RUNON          1.000
 score PDS_HELO_SPF_FAIL              1.000
 score PHOTO_EDITING_DIRECT           1.000
 score PHOTO_EDITING_FREEM            1.000
@@ -319,11 +312,15 @@ score PP_TOO_MUCH_UNICODE05          1.0
 score PUMPDUMP                       1.000
 score PUMPDUMP_MULTI                 1.000
 score RAND_HEADER_MANY               1.000
+score RCVD_DOTEDU_SHORT              1.000
+score RDNS_NUM_TLD_ATCHNX            1.000
 score SEO_SUSP_NTLD                  1.000
 score SHOPIFY_IMG_NOT_RCVD_SFY       1.000
 score SPOOFED_FREEM_REPTO_RUS        1.000
 score STOCK_TIP                      1.000
 score SYSADMIN                       1.000
+score TO_EQ_FM_DIRECT_MX             1.000
+score TO_NO_BRKTS_PCNT               1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ZW                1.000
@@ -334,3 +331,4 @@ score URI_OPTOUT_3LD                 1.0
 score USB_DRIVES                     1.000
 score VPS_NO_NTLD                    1.000
 score WALMART_IMG_NOT_RCVD_WAL       1.000
+score XPRIO                          1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1882170&r1=1882169&r2=1882170&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Thu Oct  1 03:22:43 2020
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 837528  57.113%  (99.644% of non-spam corpus)
-# Correctly spam:     489302  33.366%  (78.172% of spam corpus)
-# False positives:      2990  0.204%  (0.356% of nonspam,  82544 weighted)
-# False negatives:    136629  9.317%  (21.828% of spam, 344469 weighted)
-# Average score for spam:  10.9    nonspam: 0.5
-# Average for false-pos:   7.4  false-neg: 2.5
-# TOTAL:              1466449  100.00%
+# Correctly non-spam: 855266  62.151%  (99.550% of non-spam corpus)
+# Correctly spam:     391967  28.484%  (75.821% of spam corpus)
+# False positives:      3868  0.281%  (0.450% of nonspam,  81381 weighted)
+# False negatives:    125000  9.084%  (24.179% of spam, 307514 weighted)
+# Average score for spam:  11.9    nonspam: 0.5
+# Average for false-pos:   7.0  false-neg: 2.5
+# TOTAL:              1376101  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 104273  99.50%
-# Correctly spam:      61188  78.29%
-# False positives:       526  0.50%
-# False negatives:     16972  21.71%
-# TCR(l=50): 1.806249  SpamRecall: 78.286%  SpamPrec: 99.148%
+# Correctly non-spam: 106713  99.56%
+# Correctly spam:      49747  77.08%
+# False positives:       474  0.44%
+# False negatives:     14793  22.92%
+# TCR(l=50): 1.676668  SpamRecall: 77.079%  SpamPrec: 99.056%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 832070  98.99%
-# Correctly spam:     234212  37.42%
-# False positives:      8448  1.01%
-# False negatives:    391719  62.58%
-# TCR(l=50): 0.768845  SpamRecall: 37.418%  SpamPrec: 96.519%
+# Correctly non-spam: 850310  98.97%
+# Correctly spam:     203374  39.34%
+# False positives:      8824  1.03%
+# False negatives:    313593  60.66%
+# TCR(l=50): 0.684912  SpamRecall: 39.340%  SpamPrec: 95.842%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 103713  98.96%
-# Correctly spam:      29104  37.24%
-# False positives:      1086  1.04%
-# False negatives:     49056  62.76%
-# TCR(l=50): 0.756221  SpamRecall: 37.236%  SpamPrec: 96.403%
+# Correctly non-spam: 106118  99.00%
+# Correctly spam:      25577  39.63%
+# False positives:      1069  1.00%
+# False negatives:     38963  60.37%
+# TCR(l=50): 0.698387  SpamRecall: 39.630%  SpamPrec: 95.988%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1882170&r1=1882169&r2=1882170&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Thu Oct  1 03:22:43 2020
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 180246  20.038%  (98.695% of non-spam corpus)
-# Correctly spam:     649610  72.218%  (90.617% of spam corpus)
-# False positives:      2383  0.265%  (1.305% of nonspam, 669660 weighted)
-# False negatives:     67268  7.478%  (9.383% of spam, 127114 weighted)
-# Average score for spam:  14.0    nonspam: -0.8
-# Average for false-pos:   7.2  false-neg: 1.9
-# TOTAL:              899507  100.00%
+# Correctly non-spam: 851870  54.054%  (99.609% of non-spam corpus)
+# Correctly spam:     656921  41.683%  (91.143% of spam corpus)
+# False positives:      3344  0.212%  (0.391% of nonspam, 195143 weighted)
+# False negatives:     63839  4.051%  (8.857% of spam, 126654 weighted)
+# Average score for spam:  15.0    nonspam: -1.2
+# Average for false-pos:   6.9  false-neg: 2.0
+# TOTAL:              1575974  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  22624  98.61%
-# Correctly spam:      81041  90.61%
-# False positives:       320  1.39%
-# False negatives:      8394  9.39%
-# TCR(l=50): 3.666270  SpamRecall: 90.614%  SpamPrec: 99.607%
+# Correctly non-spam: 105325  98.73%
+# Correctly spam:      81799  90.99%
+# False positives:      1358  1.27%
+# False negatives:      8103  9.01%
+# TCR(l=50): 1.182874  SpamRecall: 90.987%  SpamPrec: 98.367%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 178709  97.85%
-# Correctly spam:     433951  60.53%
-# False positives:      3920  2.15%
-# False negatives:    282927  39.47%
-# TCR(l=50): 1.496842  SpamRecall: 60.533%  SpamPrec: 99.105%
+# Correctly non-spam: 851079  99.52%
+# Correctly spam:     435397  60.41%
+# False positives:      4135  0.48%
+# False negatives:    285363  39.59%
+# TCR(l=50): 1.464623  SpamRecall: 60.408%  SpamPrec: 99.059%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  22464  97.91%
-# Correctly spam:      54074  60.46%
-# False positives:       480  2.09%
-# False negatives:     35361  39.54%
-# TCR(l=50): 1.506629  SpamRecall: 60.462%  SpamPrec: 99.120%
+# Correctly non-spam: 106164  99.51%
+# Correctly spam:      54068  60.14%
+# False positives:       519  0.49%
+# False negatives:     35834  39.86%
+# TCR(l=50): 1.455102  SpamRecall: 60.141%  SpamPrec: 99.049%