You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2017/12/27 02:48:58 UTC
svn commit: r1819313 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Wed Dec 27 02:48:58 2017
New Revision: 1819313
URL: http://svn.apache.org/viewvc?rev=1819313&view=rev
Log:
updated scores for revision 1819277 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Wed Dec 27 02:48:58 2017
@@ -11,89 +11,95 @@ score AC_SPAMMY_URI_PATTERNS4
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
-score ADVANCE_FEE_3_NEW 3.001 3.468 3.001 3.468
-score ADVANCE_FEE_3_NEW_MONEY 2.799 2.600 2.799 2.600
-score ADVANCE_FEE_4_NEW 2.699 2.499 2.699 2.499
-score ADVANCE_FEE_4_NEW_MONEY 2.799 2.699 2.799 2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.429 0.001 2.429 0.001
-score ADVANCE_FEE_5_NEW_MONEY 2.234 1.942 2.234 1.942
-score AD_PREFS 1.303 0.738 1.303 0.738
+score ADVANCE_FEE_2_NEW_MONEY 1.999 2.000 1.999 2.000
+score ADVANCE_FEE_3_NEW 3.001 3.470 3.001 3.470
+score ADVANCE_FEE_3_NEW_FRM_MNY 1.983 1.889 1.983 1.889
+score ADVANCE_FEE_3_NEW_MONEY 2.799 2.599 2.799 2.599
+score ADVANCE_FEE_4_NEW 2.899 2.499 2.899 2.499
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.900 1.376 2.900 1.376
+score ADVANCE_FEE_4_NEW_MONEY 2.899 2.699 2.899 2.699
+score ADVANCE_FEE_5_NEW 2.499 0.001 2.499 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.526 0.001 1.526 0.001
+score ADVANCE_FEE_5_NEW_MONEY 3.299 1.936 3.299 1.936
+score AD_PREFS 1.000 0.738 1.000 0.738
score APOSTROPHE_TOCC 3.099 2.899 3.099 2.899
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.400 2.896 2.400 2.896
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.299 0.001 2.299 0.001
-score BODY_SINGLE_URI 2.499 0.001 2.499 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.399 0.793 0.399 0.793
+score AXB_X_FF_SEZ_S 3.599 3.299 3.599 3.299
+score BODY_EMPTY 1.999 1.999 1.999 1.999
score BODY_SINGLE_WORD 2.499 2.499 2.499 2.499
score BODY_URI_ONLY 0.999 1.000 0.999 1.000
-score BOGUS_MSM_HDRS 0.793 2.956 0.793 2.956
-score CANT_SEE_AD 2.089 2.460 2.089 2.460
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499 0.001 1.499 0.001
+score BOGUS_MSM_HDRS 1.690 2.999 1.690 2.999
+score CANT_SEE_AD 0.965 2.460 0.965 2.460
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500 0.001 1.500 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 3.199 2.999 3.199 2.999
+score COMPENSATION 1.000 1.000 1.000 1.000
+score DEAR_BENEFICIARY 3.299 2.999 3.299 2.999
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
-score FILL_THIS_FORM 0.959 0.148 0.959 0.148
-score FORM_FRAUD 0.999 0.090 0.999 0.090
-score FORM_FRAUD_3 2.899 1.724 2.899 1.724
-score FORM_FRAUD_5 0.537 2.446 0.537 2.446
+score FILL_THIS_FORM 0.195 0.008 0.195 0.008
+score FORM_FRAUD 0.999 0.999 0.999 0.999
+score FORM_FRAUD_3 2.999 0.328 2.999 0.328
+score FORM_FRAUD_5 0.001 2.092 0.001 2.092
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 3.249 3.249 3.249 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.249 0.250 0.249
-score FROM_IN_TO_AND_SUBJ 1.299 1.100 1.299 1.100
+score FOUND_YOU 3.250 3.249 3.250 3.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.250 0.249 0.250
+score FROM_IN_TO_AND_SUBJ 1.199 1.100 1.199 1.100
score FROM_MISSPACED 0.001 0.001 0.001 0.001
-score FROM_MISSP_DYNIP 1.700 2.799 1.700 2.799
-score FROM_MISSP_EH_MATCH 1.999 0.769 1.999 0.769
-score FROM_MISSP_FREEMAIL 3.300 3.099 3.300 3.099
-score FROM_MISSP_MSFT 0.001 1.910 0.001 1.910
-score FROM_MISSP_PHISH 3.499 1.000 3.499 1.000
-score FROM_MISSP_REPLYTO 2.499 2.500 2.499 2.500
+score FROM_MISSP_DYNIP 2.459 2.799 2.459 2.799
+score FROM_MISSP_EH_MATCH 1.401 0.001 1.401 0.001
+score FROM_MISSP_FREEMAIL 3.051 3.099 3.051 3.099
+score FROM_MISSP_MSFT 0.001 1.807 0.001 1.807
+score FROM_MISSP_PHISH 3.032 1.547 3.032 1.547
+score FROM_MISSP_REPLYTO 2.499 2.499 2.499 2.499
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_TO_UNDISC 2.899 2.699 2.899 2.699
-score FROM_MISSP_USER 0.001 3.234 0.001 3.234
-score FROM_MISSP_XPRIO 0.001 2.499 0.001 2.499
-score FROM_WORDY 2.499 2.500 2.499 2.500
+score FROM_MISSP_USER 0.001 2.547 0.001 2.547
+score FROM_MISSP_XPRIO 1.468 2.499 1.468 2.499
+score FROM_WORDY 2.500 2.500 2.500 2.500
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
-score FSL_CTYPE_WIN1251 0.001 2.824 0.001 2.824
+score FSL_CTYPE_WIN1251 0.001 0.069 0.001 0.069
score FSL_HELO_FAKE 4.000 3.899 4.000 3.899
-score FSL_MIME_NO_TEXT 3.003 1.815 3.003 1.815
-score FSL_NEW_HELO_USER 0.001 0.750 0.001 0.750
-score FUZZY_UNSUBSCRIBE 0.514 1.492 0.514 1.492
+score FSL_MIME_NO_TEXT 2.699 1.729 2.699 1.729
+score FSL_NEW_HELO_USER 0.001 0.756 0.001 0.756
+score FUZZY_CLICK_HERE 2.500 2.599 2.500 2.599
+score FUZZY_UNSUBSCRIBE 1.080 2.926 1.080 2.926
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score HDRS_MISSP 1.999 1.999 1.999 1.999
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.249 0.001 0.249
+score HDRS_MISSP 2.000 1.999 2.000 1.999
+score HEADER_FROM_DIFFERENT_DOMAINS 0.229 0.250 0.229 0.250
score HELO_MISC_IP 0.250 0.001 0.250 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
-score HK_SCAM_N2 1.069 0.632 1.069 0.632
-score HTML_OFF_PAGE 1.000 1.000 1.000 1.000
-score IMG_ALT_HSPACE_CID_ALIGN 2.806 0.500 2.806 0.500
-score IMG_DIRECT_TO_MX 2.600 2.372 2.600 2.372
-score LIST_PARTIAL_SHORT_MSG 2.499 0.001 2.499 0.001
+score HK_SCAM_N2 0.900 0.486 0.900 0.486
+score HK_SCAM_S7 2.600 0.001 2.600 0.001
+score HTML_OFF_PAGE 1.999 1.000 1.999 1.000
+score IMG_ALT_HSPACE_CID_ALIGN 2.620 2.388 2.620 2.388
+score IMG_DIRECT_TO_MX 2.601 2.606 2.601 2.606
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
-score LIST_PRTL_SAME_USER 0.001 0.179 0.001 0.179
-score LONG_HEX_URI 2.086 2.248 2.086 2.248
-score LONG_IMG_URI 0.554 1.835 0.554 1.835
+score LIST_PRTL_SAME_USER 0.001 0.001 0.001 0.001
+score LONG_HEX_URI 2.086 2.134 2.086 2.134
+score LONG_IMG_URI 0.326 1.833 0.326 1.833
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
-score LOTTO_AGENT 0.001 0.001 0.001 0.001
score LUCRATIVE 1.000 1.000 1.000 1.000
-score MILLION_USD 2.000 1.999 2.000 1.999
-score MIME_NO_TEXT 1.999 1.912 1.999 1.912
-score MONEY_ATM_CARD 2.999 2.799 2.999 2.799
-score MONEY_FORM 1.684 0.001 1.684 0.001
-score MONEY_FORM_SHORT 2.499 2.499 2.499 2.499
-score MONEY_FRAUD_3 2.999 2.699 2.999 2.699
+score MILLION_USD 1.999 1.999 1.999 1.999
+score MIMEOLE_DIRECT_TO_MX 1.999 0.737 1.999 0.737
+score MIME_NO_TEXT 1.999 1.999 1.999 1.999
+score MONEY_ATM_CARD 3.099 2.700 3.099 2.700
+score MONEY_BARRISTER 0.001 0.999 0.001 0.999
+score MONEY_FORM_SHORT 2.500 2.500 2.500 2.500
+score MONEY_FRAUD_3 2.739 2.699 2.739 2.699
score MONEY_FRAUD_5 3.299 3.099 3.299 3.099
-score MONEY_FRAUD_8 1.941 0.415 1.941 0.415
+score MONEY_FRAUD_8 0.191 0.578 0.191 0.578
score MONEY_FROM_41 1.999 1.999 1.999 1.999
-score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
-score MSM_PRIO_REPTO 1.176 1.000 1.176 1.000
-score NSL_RCVD_FROM_USER 0.001 3.257 0.001 3.257
-score NSL_RCVD_HELO_USER 2.601 2.178 2.601 2.178
+score MSGID_NOFQDN1 2.394 2.185 2.394 2.185
+score MSM_PRIO_REPTO 0.104 1.000 0.104 1.000
+score NSL_RCVD_FROM_USER 0.001 2.077 0.001 2.077
+score NSL_RCVD_HELO_USER 2.600 2.599 2.600 2.599
+score OBFU_DOC_ATTACH 2.963 0.001 2.963 0.001
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 2.499 2.499 2.499 2.499
+score PHP_ORIG_SCRIPT 2.395 2.499 2.395 2.499
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
@@ -107,52 +113,54 @@ score RCVD_IN_MSPIKE_H3
score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 1.121 0.001 1.121
-score RCVD_IN_MSPIKE_L4 0.001 1.820 0.001 1.820
+score RCVD_IN_MSPIKE_L3 0.001 1.120 0.001 1.120
+score RCVD_IN_MSPIKE_L4 0.001 1.974 0.001 1.974
score RCVD_IN_MSPIKE_L5 0.001 2.099 0.001 2.099
score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
-score RCVD_IN_MSPIKE_ZBI 0.001 3.060 0.001 3.060
-score S25R_4 3.699 0.540 3.699 0.540
-score SERGIO_SUBJECT_VIAGRA01 1.021 0.886 1.021 0.886
-score SHORTENED_URL_SRC 2.499 2.600 2.499 2.600
-score SPELLED_OUT_NUMBER 1.000 2.878 1.000 2.878
-score SPOOFED_FREEM_REPTO 2.499 2.499 2.499 2.499
+score RCVD_IN_MSPIKE_ZBI 0.001 2.898 0.001 2.898
+score S25R_4 3.700 1.504 3.700 1.504
+score SERGIO_SUBJECT_VIAGRA01 1.021 0.398 1.021 0.398
+score SHORTENED_URL_SRC 2.499 2.599 2.499 2.599
+score SPELLED_OUT_NUMBER 1.000 0.870 1.000 0.870
+score SPOOFED_FREEM_REPTO 2.499 2.500 2.499 2.500
score SPOOFED_FREEM_REPTO_CHN 1.000 1.000 1.000 1.000
score SPOOFED_FREEM_REPTO_RUS 1.000 1.000 1.000 1.000
score STATIC_XPRIO_OLE 1.999 1.999 1.999 1.999
score STOCK_LOW_CONTRAST 1.000 1.000 1.000 1.000
score STOCK_TIP 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 2.789 2.755 2.789 2.755
+score STYLE_GIBBERISH 2.639 3.257 2.639 3.257
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
score THIS_AD 0.001 0.001 0.001 0.001
score THREAD_INDEX_HEX 3.099 2.799 3.099 2.799
-score TO_EQ_FM_DIRECT_MX 2.499 2.499 2.499 2.499
+score TO_EQ_FM_DIRECT_MX 2.499 2.500 2.499 2.500
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
-score TO_NO_BRKTS_DYNIP 0.256 1.295 0.256 1.295
-score TO_NO_BRKTS_HTML_IMG 0.001 1.216 0.001 1.216
-score TO_NO_BRKTS_HTML_ONLY 1.999 1.866 1.999 1.866
-score TO_NO_BRKTS_MSFT 2.081 2.499 2.081 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.399 0.647 0.399 0.647
-score TO_NO_BRKTS_PCNT 2.500 2.499 2.500 2.499
-score TVD_SPACE_ENCODED 2.499 2.500 2.499 2.500
+score TO_NO_BRKTS_DYNIP 0.165 1.510 0.165 1.510
+score TO_NO_BRKTS_FROM_MSSP 0.870 1.394 0.870 1.394
+score TO_NO_BRKTS_HTML_IMG 1.658 1.218 1.658 1.218
+score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
+score TO_NO_BRKTS_MSFT 2.078 2.500 2.078 2.500
+score TO_NO_BRKTS_NORDNS_HTML 0.400 0.646 0.400 0.646
+score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
+score TVD_SPACE_ENCODED 2.499 2.499 2.499 2.499
score TVD_SPACE_ENC_FM_MIME 1.999 1.999 1.999 1.999
-score TVD_SPACE_RATIO_MINFP 2.499 2.500 2.499 2.500
+score TVD_SPACE_RATIO_MINFP 2.499 2.499 2.499 2.499
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_DQ_UNSUB 2.499 0.001 2.499 0.001
-score URI_GOOGLE_PROXY 2.196 0.001 2.196 0.001
-score URI_ONLY_MSGID_MALF 1.999 1.840 1.999 1.840
+score URI_DQ_UNSUB 2.500 0.001 2.500 0.001
+score URI_GOOGLE_PROXY 2.087 0.001 2.087 0.001
+score URI_HIDDEN_2 2.601 0.001 2.601 0.001
+score URI_ONLY_MSGID_MALF 1.999 1.958 1.999 1.958
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.696 3.791 3.696 3.791
-score URI_TRY_3LD 1.999 2.000 1.999 2.000
-score URI_WPADMIN 2.699 1.500 2.699 1.500
-score URI_WP_DIRINDEX 2.813 1.648 2.813 1.648
-score URI_WP_HACKED 3.499 3.500 3.499 3.500
-score URI_WP_HACKED_2 2.184 2.499 2.184 2.499
-score XPRIO 1.486 1.945 1.486 1.945
+score URI_PHISH 3.999 3.793 3.999 3.793
+score URI_TRY_3LD 1.999 1.999 1.999 1.999
+score URI_WPADMIN 2.699 1.501 2.699 1.501
+score URI_WP_DIRINDEX 1.000 2.159 1.000 2.159
+score URI_WP_HACKED 3.499 3.499 3.499 3.499
+score URI_WP_HACKED_2 1.956 2.349 1.956 2.349
+score XPRIO 1.257 1.945 1.257 1.945
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000
-score YOU_INHERIT 2.041 2.197 2.041 2.197
+score YOU_INHERIT 1.354 2.294 1.354 2.294
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Wed Dec 27 02:48:58 2017
@@ -1,4 +1,4 @@
-# Using score set 0 logs for revision 1819233 from:
+# Using score set 0 logs for revision 1819277 from:
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-giovanni.log ham-grenier.log ham-jarif.log ham-jbrooks.log ham-mmiroslaw-mails-ham.log ham-mmiroslaw-mails-spam.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-giovanni.log spam-grenier.log spam-jarif.log spam-jbrooks.log spam-mmiroslaw-mails-ham.log spam-mmiroslaw-mails-spam.log spam-thendrikx.log
score AC_BR_BONANZA 0.001
@@ -6,103 +6,110 @@ score AC_DIV_BONANZA 0.0
score AC_HTML_NONSENSE_TAGS 1.999
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 3.001
+score ADVANCE_FEE_3_NEW_FRM_MNY 1.983
score ADVANCE_FEE_3_NEW_MONEY 2.799
-score ADVANCE_FEE_4_NEW 2.699
-score ADVANCE_FEE_4_NEW_MONEY 2.799
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.429
-score ADVANCE_FEE_5_NEW_MONEY 2.234
-score AD_PREFS 1.303
+score ADVANCE_FEE_4_NEW 2.899
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.900
+score ADVANCE_FEE_4_NEW_MONEY 2.899
+score ADVANCE_FEE_5_NEW 2.499
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.526
+score ADVANCE_FEE_5_NEW_MONEY 3.299
+score AD_PREFS 1.000
score APOSTROPHE_TOCC 3.099
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.400
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.299
-score BODY_SINGLE_URI 2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.399
+score AXB_X_FF_SEZ_S 3.599
+score BODY_EMPTY 1.999
score BODY_SINGLE_WORD 2.499
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 0.793
-score CANT_SEE_AD 2.089
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score DEAR_BENEFICIARY 3.199
-score FILL_THIS_FORM 0.959
+score BOGUS_MSM_HDRS 1.690
+score CANT_SEE_AD 0.965
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500
+score DEAR_BENEFICIARY 3.299
+score FILL_THIS_FORM 0.195
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.899
-score FORM_FRAUD_5 0.537
-score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_IN_TO_AND_SUBJ 1.299
+score FORM_FRAUD_3 2.999
+score FORM_FRAUD_5 0.001
+score FOUND_YOU 3.250
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_IN_TO_AND_SUBJ 1.199
score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 1.700
-score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 3.300
+score FROM_MISSP_DYNIP 2.459
+score FROM_MISSP_EH_MATCH 1.401
+score FROM_MISSP_FREEMAIL 3.051
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 3.499
+score FROM_MISSP_PHISH 3.032
score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_TO_UNDISC 2.899
-score FROM_MISSP_USER 0.001 # force non-zero
-score FROM_MISSP_XPRIO 0.001 # force non-zero
-score FROM_WORDY 2.499
+score FROM_MISSP_USER 0.001
+score FROM_MISSP_XPRIO 1.468
+score FROM_WORDY 2.500
score FSL_BULK_SIG 0.001
score FSL_CTYPE_WIN1251 0.001
score FSL_HELO_FAKE 4.000
-score FSL_MIME_NO_TEXT 3.003
+score FSL_MIME_NO_TEXT 2.699
score FSL_NEW_HELO_USER 0.001
-score FUZZY_UNSUBSCRIBE 0.514
-score HDRS_MISSP 1.999
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
+score FUZZY_CLICK_HERE 2.500
+score FUZZY_UNSUBSCRIBE 1.080
+score HDRS_MISSP 2.000
+score HEADER_FROM_DIFFERENT_DOMAINS 0.229
score HELO_MISC_IP 0.250
-score HK_SCAM_N2 1.069
-score IMG_ALT_HSPACE_CID_ALIGN 2.806
-score IMG_DIRECT_TO_MX 2.600
-score LIST_PARTIAL_SHORT_MSG 2.499
+score HK_SCAM_N2 0.900
+score HK_SCAM_S7 2.600
+score HTML_OFF_PAGE 1.999
+score IMG_ALT_HSPACE_CID_ALIGN 2.620
+score IMG_DIRECT_TO_MX 2.601
score LIST_PRTL_SAME_USER 0.001
score LONG_HEX_URI 2.086
-score LONG_IMG_URI 0.554
+score LONG_IMG_URI 0.326
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 0.001
-score MILLION_USD 2.000
+score MILLION_USD 1.999
+score MIMEOLE_DIRECT_TO_MX 1.999
score MIME_NO_TEXT 1.999
-score MONEY_ATM_CARD 2.999
-score MONEY_FORM 1.684
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.999
+score MONEY_ATM_CARD 3.099
+score MONEY_BARRISTER 0.001
+score MONEY_FORM_SHORT 2.500
+score MONEY_FRAUD_3 2.739
score MONEY_FRAUD_5 3.299
-score MONEY_FRAUD_8 1.941
+score MONEY_FRAUD_8 0.191
score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 0.001
-score MSM_PRIO_REPTO 1.176
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 2.601
-score PHP_ORIG_SCRIPT 2.499
+score MSGID_NOFQDN1 2.394
+score MSM_PRIO_REPTO 0.104
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 2.600
+score OBFU_DOC_ATTACH 2.963
+score PHP_ORIG_SCRIPT 2.395
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score S25R_4 3.699
+score S25R_4 3.700
score SERGIO_SUBJECT_VIAGRA01 1.021
score SHORTENED_URL_SRC 2.499
score SPOOFED_FREEM_REPTO 2.499
score STATIC_XPRIO_OLE 1.999
-score STYLE_GIBBERISH 2.789
-score THIS_AD 0.001
+score STYLE_GIBBERISH 2.639
+score THIS_AD 0.001 # force non-zero
score THREAD_INDEX_HEX 3.099
score TO_EQ_FM_DIRECT_MX 2.499
score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_DYNIP 0.256
-score TO_NO_BRKTS_HTML_IMG 0.001
+score TO_NO_BRKTS_DYNIP 0.165
+score TO_NO_BRKTS_FROM_MSSP 0.870
+score TO_NO_BRKTS_HTML_IMG 1.658
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 2.081
-score TO_NO_BRKTS_NORDNS_HTML 0.399
-score TO_NO_BRKTS_PCNT 2.500
+score TO_NO_BRKTS_MSFT 2.078
+score TO_NO_BRKTS_NORDNS_HTML 0.400
+score TO_NO_BRKTS_PCNT 2.499
score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_ENC_FM_MIME 1.999
score TVD_SPACE_RATIO_MINFP 2.499
-score URI_DQ_UNSUB 2.499
-score URI_GOOGLE_PROXY 2.196
+score URI_DQ_UNSUB 2.500
+score URI_GOOGLE_PROXY 2.087
+score URI_HIDDEN_2 2.601
score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.696
+score URI_PHISH 3.999
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.699
-score URI_WP_DIRINDEX 2.813
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.184
-score XPRIO 1.486
-score YOU_INHERIT 2.041
+score URI_WP_HACKED_2 1.956
+score XPRIO 1.257
+score YOU_INHERIT 1.354
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -114,6 +121,7 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score COMMENT_GIBBERISH 1.000
+score COMPENSATION 1.000
score ENCRYPTED_MESSAGE -1.000
score FBI_MONEY 1.000
score FBI_SPOOF 1.000
@@ -123,7 +131,6 @@ score GOOGLE_DOCS_PHISH 1.0
score GOOGLE_DOCS_PHISH_MANY 1.000
score GOOG_MALWARE_DNLD 1.000
score HEXHASH_WORD 1.000
-score HTML_OFF_PAGE 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
score PHP_NOVER_MUA 1.000
@@ -143,6 +150,7 @@ score TW_GIBBERISH_MANY 1.0
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
+score URI_WP_DIRINDEX 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Wed Dec 27 02:48:58 2017
@@ -4,108 +4,117 @@
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.999
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.468
-score ADVANCE_FEE_3_NEW_MONEY 2.600
+score ADVANCE_FEE_2_NEW_MONEY 2.000
+score ADVANCE_FEE_3_NEW 3.470
+score ADVANCE_FEE_3_NEW_FRM_MNY 1.889
+score ADVANCE_FEE_3_NEW_MONEY 2.599
score ADVANCE_FEE_4_NEW 2.499
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.376
score ADVANCE_FEE_4_NEW_MONEY 2.699
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_5_NEW_MONEY 1.942
+score ADVANCE_FEE_5_NEW_MONEY 1.936
score AD_PREFS 0.738
score APOSTROPHE_TOCC 2.899
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.896
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.793
+score AXB_X_FF_SEZ_S 3.299
+score BODY_EMPTY 1.999
score BODY_SINGLE_WORD 2.499
score BODY_URI_ONLY 1.000
-score BOGUS_MSM_HDRS 2.956
+score BOGUS_MSM_HDRS 2.999
score CANT_SEE_AD 2.460
-score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score DEAR_BENEFICIARY 2.999
-score FILL_THIS_FORM 0.148
-score FORM_FRAUD 0.090
-score FORM_FRAUD_3 1.724
-score FORM_FRAUD_5 2.446
+score FILL_THIS_FORM 0.008
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 0.328
+score FORM_FRAUD_5 2.092
score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
score FROM_IN_TO_AND_SUBJ 1.100
score FROM_MISSPACED 0.001
score FROM_MISSP_DYNIP 2.799
-score FROM_MISSP_EH_MATCH 0.769
+score FROM_MISSP_EH_MATCH 0.001
score FROM_MISSP_FREEMAIL 3.099
-score FROM_MISSP_MSFT 1.910
-score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_MSFT 1.807
+score FROM_MISSP_PHISH 1.547
+score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_TO_UNDISC 2.699
-score FROM_MISSP_USER 3.234
+score FROM_MISSP_USER 2.547
score FROM_MISSP_XPRIO 2.499
score FROM_WORDY 2.500
-score FSL_BULK_SIG 0.001
-score FSL_CTYPE_WIN1251 2.824
+score FSL_BULK_SIG 0.001 # force non-zero
+score FSL_CTYPE_WIN1251 0.069
score FSL_HELO_FAKE 3.899
-score FSL_MIME_NO_TEXT 1.815
-score FSL_NEW_HELO_USER 0.750
+score FSL_MIME_NO_TEXT 1.729
+score FSL_NEW_HELO_USER 0.756
score FUZZY_CLICK_HERE 2.599
-score FUZZY_UNSUBSCRIBE 1.492
+score FUZZY_UNSUBSCRIBE 2.926
score HDRS_MISSP 1.999
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_MISC_IP 0.001 # force non-zero
-score HK_SCAM_N2 0.632
-score IMG_ALT_HSPACE_CID_ALIGN 0.500
-score IMG_DIRECT_TO_MX 2.372
-score LIST_PRTL_SAME_USER 0.179
-score LONG_HEX_URI 2.248
-score LONG_IMG_URI 1.835
+score HK_SCAM_N2 0.486
+score IMG_ALT_HSPACE_CID_ALIGN 2.388
+score IMG_DIRECT_TO_MX 2.606
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 2.134
+score LONG_IMG_URI 1.833
score LOTS_OF_MONEY 0.010
score MANY_SPAN_IN_TEXT 0.001
score MILLION_USD 1.999
-score MIME_NO_TEXT 1.912
-score MONEY_ATM_CARD 2.799
-score MONEY_FORM_SHORT 2.499
+score MIMEOLE_DIRECT_TO_MX 0.737
+score MIME_NO_TEXT 1.999
+score MONEY_ATM_CARD 2.700
+score MONEY_BARRISTER 0.999
+score MONEY_FORM_SHORT 2.500
score MONEY_FRAUD_3 2.699
score MONEY_FRAUD_5 3.099
-score MONEY_FRAUD_8 0.415
+score MONEY_FRAUD_8 0.578
score MONEY_FROM_41 1.999
-score NSL_RCVD_FROM_USER 3.257
-score NSL_RCVD_HELO_USER 2.178
+score MSGID_NOFQDN1 2.185
+score NSL_RCVD_FROM_USER 2.077
+score NSL_RCVD_HELO_USER 2.599
score PHP_ORIG_SCRIPT 2.499
-score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score RCVD_IN_MSPIKE_L3 1.121
-score RCVD_IN_MSPIKE_L4 1.820
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
+score RCVD_IN_MSPIKE_H2 -0.001
+score RCVD_IN_MSPIKE_L3 1.120
+score RCVD_IN_MSPIKE_L4 1.974
score RCVD_IN_MSPIKE_L5 2.099
-score RCVD_IN_MSPIKE_ZBI 3.060
-score S25R_4 0.540
-score SERGIO_SUBJECT_VIAGRA01 0.886
-score SHORTENED_URL_SRC 2.600
+score RCVD_IN_MSPIKE_ZBI 2.898
+score S25R_4 1.504
+score SERGIO_SUBJECT_VIAGRA01 0.398
+score SHORTENED_URL_SRC 2.599
score SINGLETS_LOW_CONTRAST 3.799
-score SPELLED_OUT_NUMBER 2.878
-score SPOOFED_FREEM_REPTO 2.499
+score SPELLED_OUT_NUMBER 0.870
+score SPOOFED_FREEM_REPTO 2.500
score STATIC_XPRIO_OLE 1.999
-score STYLE_GIBBERISH 2.755
-score THIS_AD 0.001 # force non-zero
+score STYLE_GIBBERISH 3.257
+score THIS_AD 0.001
score THREAD_INDEX_HEX 2.799
-score TO_EQ_FM_DIRECT_MX 2.499
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 # force non-zero
+score TO_EQ_FM_DIRECT_MX 2.500
+score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_DYNIP 1.295
-score TO_NO_BRKTS_HTML_IMG 1.216
-score TO_NO_BRKTS_HTML_ONLY 1.866
-score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.647
+score TO_NO_BRKTS_DYNIP 1.510
+score TO_NO_BRKTS_FROM_MSSP 1.394
+score TO_NO_BRKTS_HTML_IMG 1.218
+score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_MSFT 2.500
+score TO_NO_BRKTS_NORDNS_HTML 0.646
score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_ENCODED 2.500
+score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_ENC_FM_MIME 1.999
-score TVD_SPACE_RATIO_MINFP 2.500
+score TVD_SPACE_RATIO_MINFP 2.499
score URI_GOOGLE_PROXY 0.001
-score URI_ONLY_MSGID_MALF 1.840
-score URI_PHISH 3.791
-score URI_TRY_3LD 2.000
-score URI_WPADMIN 1.500
-score URI_WP_DIRINDEX 1.648
-score URI_WP_HACKED 3.500
-score URI_WP_HACKED_2 2.499
+score URI_ONLY_MSGID_MALF 1.958
+score URI_PHISH 3.793
+score URI_TRY_3LD 1.999
+score URI_WPADMIN 1.501
+score URI_WP_DIRINDEX 2.159
+score URI_WP_HACKED 3.499
+score URI_WP_HACKED_2 2.349
score XPRIO 1.945
-score YOU_INHERIT 2.197
+score YOU_INHERIT 2.294
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -117,11 +126,11 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score COMMENT_GIBBERISH 1.000
+score COMPENSATION 1.000
score ENCRYPTED_MESSAGE -1.000
score FBI_MONEY 1.000
score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
-score FROM_MISSP_PHISH 1.000
score FROM_WORDY_SHORT 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Wed Dec 27 02:48:58 2017
@@ -1,4 +1,4 @@
-# Using score set 0 logs for revision 1819233 from:
+# Using score set 0 logs for revision 1819277 from:
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-giovanni.log ham-grenier.log ham-jarif.log ham-jbrooks.log ham-mmiroslaw-mails-ham.log ham-mmiroslaw-mails-spam.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-giovanni.log spam-grenier.log spam-jarif.log spam-jbrooks.log spam-mmiroslaw-mails-ham.log spam-mmiroslaw-mails-spam.log spam-thendrikx.log
score AC_BR_BONANZA 0.001
@@ -6,103 +6,110 @@ score AC_DIV_BONANZA 0.0
score AC_HTML_NONSENSE_TAGS 1.999
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 3.001
+score ADVANCE_FEE_3_NEW_FRM_MNY 1.983
score ADVANCE_FEE_3_NEW_MONEY 2.799
-score ADVANCE_FEE_4_NEW 2.699
-score ADVANCE_FEE_4_NEW_MONEY 2.799
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.429
-score ADVANCE_FEE_5_NEW_MONEY 2.234
-score AD_PREFS 1.303
+score ADVANCE_FEE_4_NEW 2.899
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.900
+score ADVANCE_FEE_4_NEW_MONEY 2.899
+score ADVANCE_FEE_5_NEW 2.499
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.526
+score ADVANCE_FEE_5_NEW_MONEY 3.299
+score AD_PREFS 1.000
score APOSTROPHE_TOCC 3.099
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.400
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.299
-score BODY_SINGLE_URI 2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.399
+score AXB_X_FF_SEZ_S 3.599
+score BODY_EMPTY 1.999
score BODY_SINGLE_WORD 2.499
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 0.793
-score CANT_SEE_AD 2.089
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score DEAR_BENEFICIARY 3.199
-score FILL_THIS_FORM 0.959
+score BOGUS_MSM_HDRS 1.690
+score CANT_SEE_AD 0.965
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500
+score DEAR_BENEFICIARY 3.299
+score FILL_THIS_FORM 0.195
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.899
-score FORM_FRAUD_5 0.537
-score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_IN_TO_AND_SUBJ 1.299
+score FORM_FRAUD_3 2.999
+score FORM_FRAUD_5 0.001
+score FOUND_YOU 3.250
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_IN_TO_AND_SUBJ 1.199
score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 1.700
-score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 3.300
+score FROM_MISSP_DYNIP 2.459
+score FROM_MISSP_EH_MATCH 1.401
+score FROM_MISSP_FREEMAIL 3.051
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 3.499
+score FROM_MISSP_PHISH 3.032
score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_TO_UNDISC 2.899
-score FROM_MISSP_USER 0.001 # force non-zero
-score FROM_MISSP_XPRIO 0.001 # force non-zero
-score FROM_WORDY 2.499
+score FROM_MISSP_USER 0.001
+score FROM_MISSP_XPRIO 1.468
+score FROM_WORDY 2.500
score FSL_BULK_SIG 0.001
score FSL_CTYPE_WIN1251 0.001
score FSL_HELO_FAKE 4.000
-score FSL_MIME_NO_TEXT 3.003
+score FSL_MIME_NO_TEXT 2.699
score FSL_NEW_HELO_USER 0.001
-score FUZZY_UNSUBSCRIBE 0.514
-score HDRS_MISSP 1.999
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
+score FUZZY_CLICK_HERE 2.500
+score FUZZY_UNSUBSCRIBE 1.080
+score HDRS_MISSP 2.000
+score HEADER_FROM_DIFFERENT_DOMAINS 0.229
score HELO_MISC_IP 0.250
-score HK_SCAM_N2 1.069
-score IMG_ALT_HSPACE_CID_ALIGN 2.806
-score IMG_DIRECT_TO_MX 2.600
-score LIST_PARTIAL_SHORT_MSG 2.499
+score HK_SCAM_N2 0.900
+score HK_SCAM_S7 2.600
+score HTML_OFF_PAGE 1.999
+score IMG_ALT_HSPACE_CID_ALIGN 2.620
+score IMG_DIRECT_TO_MX 2.601
score LIST_PRTL_SAME_USER 0.001
score LONG_HEX_URI 2.086
-score LONG_IMG_URI 0.554
+score LONG_IMG_URI 0.326
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 0.001
-score MILLION_USD 2.000
+score MILLION_USD 1.999
+score MIMEOLE_DIRECT_TO_MX 1.999
score MIME_NO_TEXT 1.999
-score MONEY_ATM_CARD 2.999
-score MONEY_FORM 1.684
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.999
+score MONEY_ATM_CARD 3.099
+score MONEY_BARRISTER 0.001
+score MONEY_FORM_SHORT 2.500
+score MONEY_FRAUD_3 2.739
score MONEY_FRAUD_5 3.299
-score MONEY_FRAUD_8 1.941
+score MONEY_FRAUD_8 0.191
score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 0.001
-score MSM_PRIO_REPTO 1.176
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 2.601
-score PHP_ORIG_SCRIPT 2.499
+score MSGID_NOFQDN1 2.394
+score MSM_PRIO_REPTO 0.104
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
+score NSL_RCVD_HELO_USER 2.600
+score OBFU_DOC_ATTACH 2.963
+score PHP_ORIG_SCRIPT 2.395
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score S25R_4 3.699
+score S25R_4 3.700
score SERGIO_SUBJECT_VIAGRA01 1.021
score SHORTENED_URL_SRC 2.499
score SPOOFED_FREEM_REPTO 2.499
score STATIC_XPRIO_OLE 1.999
-score STYLE_GIBBERISH 2.789
-score THIS_AD 0.001
+score STYLE_GIBBERISH 2.639
+score THIS_AD 0.001 # force non-zero
score THREAD_INDEX_HEX 3.099
score TO_EQ_FM_DIRECT_MX 2.499
score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_DYNIP 0.256
-score TO_NO_BRKTS_HTML_IMG 0.001
+score TO_NO_BRKTS_DYNIP 0.165
+score TO_NO_BRKTS_FROM_MSSP 0.870
+score TO_NO_BRKTS_HTML_IMG 1.658
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 2.081
-score TO_NO_BRKTS_NORDNS_HTML 0.399
-score TO_NO_BRKTS_PCNT 2.500
+score TO_NO_BRKTS_MSFT 2.078
+score TO_NO_BRKTS_NORDNS_HTML 0.400
+score TO_NO_BRKTS_PCNT 2.499
score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_ENC_FM_MIME 1.999
score TVD_SPACE_RATIO_MINFP 2.499
-score URI_DQ_UNSUB 2.499
-score URI_GOOGLE_PROXY 2.196
+score URI_DQ_UNSUB 2.500
+score URI_GOOGLE_PROXY 2.087
+score URI_HIDDEN_2 2.601
score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.696
+score URI_PHISH 3.999
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.699
-score URI_WP_DIRINDEX 2.813
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.184
-score XPRIO 1.486
-score YOU_INHERIT 2.041
+score URI_WP_HACKED_2 1.956
+score XPRIO 1.257
+score YOU_INHERIT 1.354
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -114,6 +121,7 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score COMMENT_GIBBERISH 1.000
+score COMPENSATION 1.000
score ENCRYPTED_MESSAGE -1.000
score FBI_MONEY 1.000
score FBI_SPOOF 1.000
@@ -123,7 +131,6 @@ score GOOGLE_DOCS_PHISH 1.0
score GOOGLE_DOCS_PHISH_MANY 1.000
score GOOG_MALWARE_DNLD 1.000
score HEXHASH_WORD 1.000
-score HTML_OFF_PAGE 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
score PHP_NOVER_MUA 1.000
@@ -143,6 +150,7 @@ score TW_GIBBERISH_MANY 1.0
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
+score URI_WP_DIRINDEX 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Wed Dec 27 02:48:58 2017
@@ -4,108 +4,117 @@
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.999
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.468
-score ADVANCE_FEE_3_NEW_MONEY 2.600
+score ADVANCE_FEE_2_NEW_MONEY 2.000
+score ADVANCE_FEE_3_NEW 3.470
+score ADVANCE_FEE_3_NEW_FRM_MNY 1.889
+score ADVANCE_FEE_3_NEW_MONEY 2.599
score ADVANCE_FEE_4_NEW 2.499
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.376
score ADVANCE_FEE_4_NEW_MONEY 2.699
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_5_NEW_MONEY 1.942
+score ADVANCE_FEE_5_NEW_MONEY 1.936
score AD_PREFS 0.738
score APOSTROPHE_TOCC 2.899
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.896
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.793
+score AXB_X_FF_SEZ_S 3.299
+score BODY_EMPTY 1.999
score BODY_SINGLE_WORD 2.499
score BODY_URI_ONLY 1.000
-score BOGUS_MSM_HDRS 2.956
+score BOGUS_MSM_HDRS 2.999
score CANT_SEE_AD 2.460
-score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score DEAR_BENEFICIARY 2.999
-score FILL_THIS_FORM 0.148
-score FORM_FRAUD 0.090
-score FORM_FRAUD_3 1.724
-score FORM_FRAUD_5 2.446
+score FILL_THIS_FORM 0.008
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 0.328
+score FORM_FRAUD_5 2.092
score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
score FROM_IN_TO_AND_SUBJ 1.100
score FROM_MISSPACED 0.001
score FROM_MISSP_DYNIP 2.799
-score FROM_MISSP_EH_MATCH 0.769
+score FROM_MISSP_EH_MATCH 0.001
score FROM_MISSP_FREEMAIL 3.099
-score FROM_MISSP_MSFT 1.910
-score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_MSFT 1.807
+score FROM_MISSP_PHISH 1.547
+score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_TO_UNDISC 2.699
-score FROM_MISSP_USER 3.234
+score FROM_MISSP_USER 2.547
score FROM_MISSP_XPRIO 2.499
score FROM_WORDY 2.500
-score FSL_BULK_SIG 0.001
-score FSL_CTYPE_WIN1251 2.824
+score FSL_BULK_SIG 0.001 # force non-zero
+score FSL_CTYPE_WIN1251 0.069
score FSL_HELO_FAKE 3.899
-score FSL_MIME_NO_TEXT 1.815
-score FSL_NEW_HELO_USER 0.750
+score FSL_MIME_NO_TEXT 1.729
+score FSL_NEW_HELO_USER 0.756
score FUZZY_CLICK_HERE 2.599
-score FUZZY_UNSUBSCRIBE 1.492
+score FUZZY_UNSUBSCRIBE 2.926
score HDRS_MISSP 1.999
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_MISC_IP 0.001 # force non-zero
-score HK_SCAM_N2 0.632
-score IMG_ALT_HSPACE_CID_ALIGN 0.500
-score IMG_DIRECT_TO_MX 2.372
-score LIST_PRTL_SAME_USER 0.179
-score LONG_HEX_URI 2.248
-score LONG_IMG_URI 1.835
+score HK_SCAM_N2 0.486
+score IMG_ALT_HSPACE_CID_ALIGN 2.388
+score IMG_DIRECT_TO_MX 2.606
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 2.134
+score LONG_IMG_URI 1.833
score LOTS_OF_MONEY 0.010
score MANY_SPAN_IN_TEXT 0.001
score MILLION_USD 1.999
-score MIME_NO_TEXT 1.912
-score MONEY_ATM_CARD 2.799
-score MONEY_FORM_SHORT 2.499
+score MIMEOLE_DIRECT_TO_MX 0.737
+score MIME_NO_TEXT 1.999
+score MONEY_ATM_CARD 2.700
+score MONEY_BARRISTER 0.999
+score MONEY_FORM_SHORT 2.500
score MONEY_FRAUD_3 2.699
score MONEY_FRAUD_5 3.099
-score MONEY_FRAUD_8 0.415
+score MONEY_FRAUD_8 0.578
score MONEY_FROM_41 1.999
-score NSL_RCVD_FROM_USER 3.257
-score NSL_RCVD_HELO_USER 2.178
+score MSGID_NOFQDN1 2.185
+score NSL_RCVD_FROM_USER 2.077
+score NSL_RCVD_HELO_USER 2.599
score PHP_ORIG_SCRIPT 2.499
-score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score RCVD_IN_MSPIKE_L3 1.121
-score RCVD_IN_MSPIKE_L4 1.820
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
+score RCVD_IN_MSPIKE_H2 -0.001
+score RCVD_IN_MSPIKE_L3 1.120
+score RCVD_IN_MSPIKE_L4 1.974
score RCVD_IN_MSPIKE_L5 2.099
-score RCVD_IN_MSPIKE_ZBI 3.060
-score S25R_4 0.540
-score SERGIO_SUBJECT_VIAGRA01 0.886
-score SHORTENED_URL_SRC 2.600
+score RCVD_IN_MSPIKE_ZBI 2.898
+score S25R_4 1.504
+score SERGIO_SUBJECT_VIAGRA01 0.398
+score SHORTENED_URL_SRC 2.599
score SINGLETS_LOW_CONTRAST 3.799
-score SPELLED_OUT_NUMBER 2.878
-score SPOOFED_FREEM_REPTO 2.499
+score SPELLED_OUT_NUMBER 0.870
+score SPOOFED_FREEM_REPTO 2.500
score STATIC_XPRIO_OLE 1.999
-score STYLE_GIBBERISH 2.755
-score THIS_AD 0.001 # force non-zero
+score STYLE_GIBBERISH 3.257
+score THIS_AD 0.001
score THREAD_INDEX_HEX 2.799
-score TO_EQ_FM_DIRECT_MX 2.499
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 # force non-zero
+score TO_EQ_FM_DIRECT_MX 2.500
+score TO_EQ_FM_DOM_SPF_FAIL 0.001
score TO_EQ_FM_SPF_FAIL 0.001
score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_DYNIP 1.295
-score TO_NO_BRKTS_HTML_IMG 1.216
-score TO_NO_BRKTS_HTML_ONLY 1.866
-score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.647
+score TO_NO_BRKTS_DYNIP 1.510
+score TO_NO_BRKTS_FROM_MSSP 1.394
+score TO_NO_BRKTS_HTML_IMG 1.218
+score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_MSFT 2.500
+score TO_NO_BRKTS_NORDNS_HTML 0.646
score TO_NO_BRKTS_PCNT 2.499
-score TVD_SPACE_ENCODED 2.500
+score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_ENC_FM_MIME 1.999
-score TVD_SPACE_RATIO_MINFP 2.500
+score TVD_SPACE_RATIO_MINFP 2.499
score URI_GOOGLE_PROXY 0.001
-score URI_ONLY_MSGID_MALF 1.840
-score URI_PHISH 3.791
-score URI_TRY_3LD 2.000
-score URI_WPADMIN 1.500
-score URI_WP_DIRINDEX 1.648
-score URI_WP_HACKED 3.500
-score URI_WP_HACKED_2 2.499
+score URI_ONLY_MSGID_MALF 1.958
+score URI_PHISH 3.793
+score URI_TRY_3LD 1.999
+score URI_WPADMIN 1.501
+score URI_WP_DIRINDEX 2.159
+score URI_WP_HACKED 3.499
+score URI_WP_HACKED_2 2.349
score XPRIO 1.945
-score YOU_INHERIT 2.197
+score YOU_INHERIT 2.294
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -117,11 +126,11 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score COMMENT_GIBBERISH 1.000
+score COMPENSATION 1.000
score ENCRYPTED_MESSAGE -1.000
score FBI_MONEY 1.000
score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
-score FROM_MISSP_PHISH 1.000
score FROM_WORDY_SHORT 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Wed Dec 27 02:48:58 2017
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 305597 53.122% (95.047% of non-spam corpus)
-# Correctly spam: 97326 16.918% (38.354% of spam corpus)
-# False positives: 15924 2.768% (4.953% of nonspam, 371437 weighted)
-# False negatives: 156428 27.192% (61.646% of spam, 374141 weighted)
-# Average score for spam: 4.6 nonspam: 1.5
+# Correctly non-spam: 266109 54.322% (95.258% of non-spam corpus)
+# Correctly spam: 68117 13.905% (32.358% of spam corpus)
+# False positives: 13248 2.704% (4.742% of nonspam, 294331 weighted)
+# False negatives: 142396 29.068% (67.642% of spam, 340744 weighted)
+# Average score for spam: 4.3 nonspam: 1.5
# Average for false-pos: 5.9 false-neg: 2.4
-# TOTAL: 575275 100.00%
+# TOTAL: 489870 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 37887 94.63%
-# Correctly spam: 12390 39.10%
-# False positives: 2149 5.37%
-# False negatives: 19296 60.90%
-# TCR(l=50): 0.249996 SpamRecall: 39.102% SpamPrec: 85.219%
+# Correctly non-spam: 33148 94.84%
+# Correctly spam: 8552 32.45%
+# False positives: 1803 5.16%
+# False negatives: 17803 67.55%
+# TCR(l=50): 0.244134 SpamRecall: 32.449% SpamPrec: 82.588%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 305887 95.14%
-# Correctly spam: 60777 23.95%
-# False positives: 15634 4.86%
-# False negatives: 192977 76.05%
-# TCR(l=50): 0.260347 SpamRecall: 23.951% SpamPrec: 79.540%
+# Correctly non-spam: 266970 95.57%
+# Correctly spam: 53135 25.24%
+# False positives: 12387 4.43%
+# False negatives: 157378 74.76%
+# TCR(l=50): 0.271025 SpamRecall: 25.241% SpamPrec: 81.095%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 38083 95.12%
-# Correctly spam: 7733 24.41%
-# False positives: 1953 4.88%
-# False negatives: 23953 75.59%
-# TCR(l=50): 0.260569 SpamRecall: 24.405% SpamPrec: 79.837%
+# Correctly non-spam: 33383 95.51%
+# Correctly spam: 6652 25.24%
+# False positives: 1568 4.49%
+# False negatives: 19703 74.76%
+# TCR(l=50): 0.268646 SpamRecall: 25.240% SpamPrec: 80.925%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1819313&r1=1819312&r2=1819313&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Wed Dec 27 02:48:58 2017
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 353009 55.303% (99.409% of non-spam corpus)
-# Correctly spam: 201388 31.550% (71.109% of spam corpus)
-# False positives: 2099 0.329% (0.591% of nonspam, 96053 weighted)
-# False negatives: 81821 12.818% (28.891% of spam, 159565 weighted)
+# Correctly non-spam: 352996 55.303% (99.405% of non-spam corpus)
+# Correctly spam: 201738 31.606% (71.237% of spam corpus)
+# False positives: 2112 0.331% (0.595% of nonspam, 96568 weighted)
+# False negatives: 81453 12.761% (28.763% of spam, 158831 weighted)
# Average score for spam: 8.9 nonspam: 0.4
-# Average for false-pos: 5.7 false-neg: 2.0
-# TOTAL: 638317 100.00%
+# Average for false-pos: 5.7 false-neg: 1.9
+# TOTAL: 638299 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 43985 99.36%
-# Correctly spam: 25227 71.22%
-# False positives: 285 0.64%
-# False negatives: 10195 28.78%
-# TCR(l=50): 1.449049 SpamRecall: 71.218% SpamPrec: 98.883%
+# Correctly non-spam: 43982 99.35%
+# Correctly spam: 25392 71.69%
+# False positives: 288 0.65%
+# False negatives: 10026 28.31%
+# TCR(l=50): 1.450012 SpamRecall: 71.692% SpamPrec: 98.879%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 353789 99.63%
-# Correctly spam: 109520 38.67%
+# Correctly spam: 109494 38.66%
# False positives: 1319 0.37%
-# False negatives: 173689 61.33%
-# TCR(l=50): 1.181815 SpamRecall: 38.671% SpamPrec: 98.810%
+# False negatives: 173697 61.34%
+# TCR(l=50): 1.181701 SpamRecall: 38.664% SpamPrec: 98.810%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 44097 99.61%
-# Correctly spam: 13615 38.44%
+# Correctly spam: 13718 38.73%
# False positives: 173 0.39%
-# False negatives: 21807 61.56%
-# TCR(l=50): 1.163017 SpamRecall: 38.437% SpamPrec: 98.745%
+# False negatives: 21700 61.27%
+# TCR(l=50): 1.166985 SpamRecall: 38.732% SpamPrec: 98.755%