You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2024/12/15 02:50:12 UTC
svn commit: r1922503 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1922503&r1=1922502&r2=1922503&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Sun Dec 15 02:50:12 2024
@@ -1,281 +1,287 @@
-# Using score set 1 logs for revision 1922358 from:
-# ham-net-ena-week0.r1922358.log ham-net-ena-week1.r1922358.log ham-net-ena-week4.r1922358.log ham-net-giovanni-ham.r1922358.log ham-net-giovanni-spammy.r1922358.log ham-net-giovanni-spam.r1922358.log ham-net-grenier.r1922358.log ham-net-jhardin.r1922358.log ham-net-llanga.r1922358.log ham-net-mmiroslaw-mails-ham.r1922358.log ham-net-mmiroslaw-mails-spam.r1922358.log ham-net-spamsponge.r1922358.log ham-net-tsz-corpus.r1922358.log ham-net-whyscream.r1922358.log spam-net-ena-week0.r1922358.log spam-net-ena-week1.r1922358.log spam-net-ena-week4.r1922358.log spam-net-giovanni-ham.r1922358.log spam-net-giovanni-spammy.r1922358.log spam-net-giovanni-spam.r1922358.log spam-net-grenier.r1922358.log spam-net-jhardin.r1922358.log spam-net-llanga.r1922358.log spam-net-mmiroslaw-mails-ham.r1922358.log spam-net-mmiroslaw-mails-spam.r1922358.log spam-net-spamsponge.r1922358.log spam-net-tsz-corpus.r1922358.log spam-net-whyscream.r1922358.log
+# Using score set 1 logs for revision 1922485 from:
+# ham-net-ena-week0.r1922485.log ham-net-ena-week1.r1922485.log ham-net-ena-week4.r1922485.log ham-net-giovanni-ham.r1922485.log ham-net-giovanni-spammy.r1922485.log ham-net-giovanni-spam.r1922485.log ham-net-grenier.r1922485.log ham-net-jhardin.r1922485.log ham-net-llanga.r1922485.log ham-net-mmiroslaw-mails-ham.r1922485.log ham-net-mmiroslaw-mails-spam.r1922485.log ham-net-spamsponge.r1922485.log ham-net-tsz-corpus.r1922485.log ham-net-whyscream.r1922485.log spam-net-ena-week0.r1922485.log spam-net-ena-week1.r1922485.log spam-net-ena-week4.r1922485.log spam-net-giovanni-ham.r1922485.log spam-net-giovanni-spammy.r1922485.log spam-net-giovanni-spam.r1922485.log spam-net-grenier.r1922485.log spam-net-jhardin.r1922485.log spam-net-llanga.r1922485.log spam-net-mmiroslaw-mails-ham.r1922485.log spam-net-mmiroslaw-mails-spam.r1922485.log spam-net-spamsponge.r1922485.log spam-net-tsz-corpus.r1922485.log spam-net-whyscream.r1922485.log
-score ACCT_PHISHING_MANY 1.897
+score ACCT_PHISHING_MANY 2.937
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.499
score AC_HTML_NONSENSE_TAGS 1.999
-score AC_POST_EXTRAS 1.999
-score ADMITS_SPAM 3.199
+score ADMITS_SPAM 3.812
score ADVANCE_FEE_2_NEW_FORM 1.999
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.287
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.514
-score ADVANCE_FEE_3_NEW_FRM_MNY 1.086
-score ADVANCE_FEE_3_NEW_MONEY 0.001
-score ADVANCE_FEE_4_NEW 2.999
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.222
-score ADVANCE_FEE_4_NEW_MONEY 2.699
-score ADVANCE_FEE_5_NEW 1.847
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.077
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.278
+score ADVANCE_FEE_3_NEW_MONEY 0.337
+score ADVANCE_FEE_4_NEW 2.465
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 1.170
+score ADVANCE_FEE_5_NEW 2.299
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.193
score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AD_PREFS 0.116
-score ALIBABA_IMG_NOT_RCVD_ALI 2.499
+score AD_PREFS 0.407
+score ALIBABA_IMG_NOT_RCVD_ALI 2.500
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BIGNUM_EMAILS_FREEM 2.054
+score BIGNUM_EMAILS_FREEM 2.543
score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_DEADLINE 1.077
-score BITCOIN_EXTORT_01 4.099
-score BITCOIN_ONAN 0.985
-score BITCOIN_SPAM_02 0.687
-score BITCOIN_SPAM_03 1.525
-score BITCOIN_SPAM_05 1.452
-score BITCOIN_SPAM_07 3.101
-score BITCOIN_SPAM_08 2.499
+score BITCOIN_EXTORT_01 4.851
+score BITCOIN_EXTORT_02 2.402
+score BITCOIN_MALWARE 0.969
+score BITCOIN_ONAN 0.817
+score BITCOIN_SPAM_02 2.499
+score BITCOIN_SPAM_03 2.499
+score BITCOIN_SPAM_05 1.486
+score BITCOIN_SPAM_07 3.151
+score BITCOIN_SPAM_08 2.254
score BITCOIN_SPAM_09 1.499
-score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 2.472
-score BITCOIN_XPRIO 1.515
-score BITCOIN_YOUR_INFO 0.001
+score BITCOIN_TOEQFM 0.989
+score BITCOIN_VISTA 1.755
+score BITCOIN_XPRIO 2.292
+score BITCOIN_YOUR_INFO 2.464
score BODY_URI_ONLY 0.001
score BOGUS_MIME_VERSION 3.499
-score BOGUS_MSM_HDRS 2.204
-score BULK_RE_SUSP_NTLD 0.182
-score CN_B2B_SPAMMER 2.461
-score COMPENSATION 1.499
-score CONTENT_AFTER_HTML 2.063
+score BULK_RE_SUSP_NTLD 0.839
+score CN_B2B_SPAMMER 2.699
+score COMPENSATION 1.385
+score CONTENT_AFTER_HTML 1.608
score CONTENT_AFTER_HTML_WEAK 0.001
-score CTE_8BIT_MISMATCH 0.640
-score DATE_IN_FUTURE_96_Q 2.612
-score DATE_IN_FUTURE_Q_PLUS 3.256
-score DEAR_BENEFICIARY 1.129
-score DKIMWL_BL 2.999
-score DKIMWL_WL_HIGH -0.292
+score CTE_8BIT_MISMATCH 0.635
+score DATE_IN_FUTURE_96_Q 3.368
+score DATE_IN_FUTURE_Q_PLUS 3.138
+score DEAR_BENEFICIARY 3.099
+score DKIMWL_WL_HIGH -0.001 # force non-zero
score DKIMWL_WL_MED -0.001
-score DKIMWL_WL_MEDHI -0.001 # force non-zero
-score DOS_BODY_HIGH_NO_MID 3.399
+score DKIMWL_WL_MEDHI -0.001
+score DOS_BODY_HIGH_NO_MID 3.699
score DSN_NO_MIMEVERSION 1.999
score DYNAMIC_IMGUR 3.999
score ENCRYPTED_MESSAGE -0.999
score END_FUTURE_EMAILS 2.499
score FACEBOOK_IMG_NOT_RCVD_FB 1.999
-score FBI_MONEY 1.999
-score FBI_SPOOF 1.670
-score FILL_THIS_FORM 0.149
-score FONT_INVIS_LONG_LINE 1.847
+score FILL_THIS_FORM 0.999
+score FONT_INVIS_LONG_LINE 1.852
score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 1.224
-score FONT_INVIS_POSTEXTRAS 1.395
+score FONT_INVIS_NORDNS 1.215
+score FONT_INVIS_POSTEXTRAS 1.382
score FORGED_SPF_HELO 2.099
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.541
-score FORM_FRAUD_5 1.870
-score FOUND_YOU 3.249
+score FORM_FRAUD_3 2.699
+score FORM_FRAUD_5 0.001
+score FOUND_YOU 2.579
score FREEMAIL_FORGED_FROMDOMAIN 0.001
score FROM_ADDR_WS 0.001
score FROM_FMBLA_NEWDOM 0.001
score FROM_FMBLA_NEWDOM14 0.999
-score FROM_FMBLA_NEWDOM28 0.799
-score FROM_GOV_DKIM_AU -0.975
-score FROM_GOV_SPOOF 0.999
+score FROM_FMBLA_NEWDOM28 0.800
+score FROM_GOV_DKIM_AU -0.845
score FROM_IN_TO_AND_SUBJ 2.699
-score FROM_LONG_DOM 0.428
+score FROM_LONG_DOM 0.001
score FROM_LONG_DOM_MINFP 2.499
-score FROM_MISSP_FREEMAIL 1.877
+score FROM_MISSP_FREEMAIL 1.884
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_PHISH 3.499
-score FROM_MISSP_REPLYTO 1.709
+score FROM_MISSP_REPLYTO 1.702
score FROM_MISSP_SPF_FAIL 0.001
-score FROM_MISSP_TO_UNDISC 2.199
+score FROM_MISSP_TO_UNDISC 2.099
score FROM_MISSP_USER 0.001
-score FROM_NTLD_LINKBAIT 0.001
-score FROM_NTLD_REPLY_FREEMAIL 0.023
-score FROM_SUSPICIOUS_NTLD 0.499
-score FROM_SUSPICIOUS_NTLD_FP 1.078
+score FROM_NTLD_LINKBAIT 1.357
+score FROM_NTLD_REPLY_FREEMAIL 0.256
+score FROM_SUSPICIOUS_NTLD 0.500
+score FROM_SUSPICIOUS_NTLD_FP 0.570
score FROM_UNBAL2 2.399
-score FROM_WSP_LEAD 0.001
-score FSL_BULK_SIG 0.001
-score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_BULK_SIG 0.001 # force non-zero
+score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.112
-score FUZZY_BITCOIN 3.199
-score FUZZY_BTC_WALLET 0.783
-score FUZZY_DR_OZ 0.067
-score FUZZY_FACEBOOK 2.199
-score FUZZY_PRIVACY 2.599
-score FUZZY_SECURITY 1.999
-score FUZZY_WALLET 0.243
+score FUZZY_AMAZON 3.115
+score FUZZY_BITCOIN 0.001 # force non-zero
+score FUZZY_BTC_WALLET 1.136
+score FUZZY_DR_OZ 0.001
+score FUZZY_FACEBOOK 2.102
+score FUZZY_PRIVACY 0.001 # force non-zero
+score FUZZY_SECURITY 2.299
+score FUZZY_TRUMP 2.226
+score FUZZY_WALLET 2.499
+score GAPPY_HTML 2.099
+score GB_BITCOIN_CP 2.969
score GB_CUSTOM_HTM_URI 1.499
score GB_FAKE_RF_SHORT 1.999
score GB_FREEMAIL_DISPTO 0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_HASHBL_BTC 4.168
-score GOOG_MALWARE_DNLD 0.001
-score GOOG_STO_EMAIL_PHISH 2.530
-score GOOG_STO_HTML_PHISH 1.379
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.001
+score GB_GOOGLE_AMP 0.499
+score GB_HASHBL_BTC 4.161
+score GOOG_STO_EMAIL_PHISH 2.531
+score GOOG_STO_HTML_PHISH 1.423
score GOOG_STO_IMG_HTML 2.999
score GOOG_STO_NOIMG_HTML 2.999
score HDRS_LCASE 0.099
-score HDRS_MISSP 2.499
-score HDR_ORDER_FTSDMCXX_DIRECT 0.756
-score HDR_ORDER_FTSDMCXX_NORDNS 1.080
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HDRS_MISSP 2.197
+score HDR_ORDER_FTSDMCXX_DIRECT 1.884
+score HDR_ORDER_FTSDMCXX_NORDNS 1.897
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
-score HEXHASH_WORD 2.745
+score HEXHASH_WORD 2.125
score HK_LOTTO 0.999
-score HK_NAME_FM_MR_MRS 0.001 # force non-zero
-score HK_NAME_MR_MRS 0.999
+score HK_NAME_FM_MR_MRS 0.001
+score HK_NAME_MR_MRS 0.001
score HK_RANDOM_ENVFROM 0.001
score HK_RANDOM_FROM 0.999
score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 0.001
-score HOSTED_IMG_DIRECT_MX 1.823
-score HOSTED_IMG_FREEM 1.040
+score HOSTED_IMG_DIRECT_MX 3.499
score HOSTED_IMG_MULTI_PUB_01 0.001
-score HREF_EMPTY_NORDNS 0.913
+score HREF_EMPTY_NORDNS 1.475
score HREF_EMPTY_XANTIABUSE 0.001
score HREF_EMPTY_XAUTHED 0.001
+score HTML_BADATTR 0.999
score HTML_ENTITY_ASCII 2.999
-score HTML_ENTITY_ASCII_TINY 0.603
+score HTML_ENTITY_ASCII_TINY 1.067
score HTML_FONT_TINY_NORDNS 0.001
-score HTML_SINGLET_MANY 1.312
+score HTML_SINGLET_MANY 0.795
score HTML_TEXT_INVISIBLE_FONT 0.001
-score HTML_TEXT_INVISIBLE_STYLE 2.710
-score IMG_DIRECT_TO_MX 3.299
-score IMG_ONLY_FM_DOM_INFO 0.778
-score JH_SPAMMY_HEADERS 3.199
-score KHOP_HELO_FCRDNS 0.400
+score HTML_TEXT_INVISIBLE_STYLE 2.724
+score IMG_DIRECT_TO_MX 3.300
+score IMG_ONLY_FM_DOM_INFO 0.776
+score JH_SPAMMY_HEADERS 3.195
+score KHOP_HELO_FCRDNS 0.399
score LONGLN_LOW_CONTRAST 2.499
score LONG_HEX_URI 2.251
score LONG_IMG_URI 2.999
-score LONG_INVISIBLE_TEXT 2.195
+score LONG_INVISIBLE_TEXT 2.415
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
-score LOTTO_DEPT 1.999
-score MALFORMED_FREEMAIL 2.195
-score MALW_ATTACH 2.099
-score MANY_SPAN_IN_TEXT 1.753
+score LOTTO_AGENT 0.001
+score LOTTO_DEPT 0.001
+score MALFORMED_FREEMAIL 2.055
+score MALW_ATTACH 2.199
+score MANY_SPAN_IN_TEXT 1.739
score MANY_SUBDOM 3.099
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.001
-score MIMEOLE_DIRECT_TO_MX 1.999
+score MILLION_USD 1.999
+score MIMEOLE_DIRECT_TO_MX 1.216
score MIME_NO_TEXT 1.999
-score MIXED_ES 2.699
-score MIXED_HREF_CASE 1.738
-score MIXED_IMG_CASE 2.980
-score MONEY_ATM_CARD 1.611
-score MONEY_FORM 3.099
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.899
-score MONEY_FRAUD_5 2.999
+score MIXED_CENTER_CASE 2.499
+score MIXED_CTYPE_CASE 3.399
+score MIXED_ES 2.799
+score MIXED_HREF_CASE 1.797
+score MIXED_IMG_CASE 2.999
+score MONEY_ATM_CARD 0.001
+score MONEY_FORM 0.001
+score MONEY_FORM_SHORT 1.205
+score MONEY_FRAUD_3 2.799
+score MONEY_FRAUD_5 2.899
score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 0.990
-score MONEY_FROM_41 1.999
+score MONEY_FREEMAIL_REPTO 1.232
+score MONEY_FROM_41 1.041
score MONEY_FROM_MISSP 0.001
-score MONEY_NOHTML 0.845
-score MSM_PRIO_REPTO 0.539
-score NA_DOLLARS 1.499
-score NICE_REPLY_A -0.348
+score MONEY_NOHTML 0.720
+score MSM_PRIO_REPTO 1.662
+score NA_DOLLARS 0.001
+score NEW_PRODUCTS 1.249
+score NICE_REPLY_A -0.641
score NORDNS_LOW_CONTRAST 0.001
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 1.216
-score OBFU_BITCOIN 2.999
-score ODD_FREEM_REPTO 2.625
+score NSL_RCVD_HELO_USER 0.305
+score OBFU_BITCOIN 2.472
+score ODD_FREEM_REPTO 2.999
score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.999
-score PDS_DBL_URL_LINKBAIT 2.499
-score PDS_FRNOM_TODOM_DBL_URL 0.262
-score PDS_FRNOM_TODOM_NAKED_TO 0.804
-score PDS_FROM_2_EMAILS 2.060
-score PDS_FROM_NAME_TO_DOMAIN 0.885
-score PDS_HELO_SPF_FAIL 1.084
-score PDS_OTHER_BAD_TLD 2.000
-score PDS_PRO_TLD 0.999
-score PHP_ORIG_SCRIPT 1.390
+score PDS_BTC_MSGID 0.647
+score PDS_DBL_URL_LINKBAIT 0.001
+score PDS_FRNOM_TODOM_DBL_URL 0.001
+score PDS_FRNOM_TODOM_NAKED_TO 1.451
+score PDS_FROM_NAME_TO_DOMAIN 1.628
+score PDS_HELO_SPF_FAIL 1.999
+score PDS_OTHER_BAD_TLD 1.999
+score PDS_PHP_EVAL 1.499
+score PDS_PRO_TLD 0.001
+score PHP_ORIG_SCRIPT 1.606
+score PHP_ORIG_SCRIPT_EVAL 2.999
score PHP_SCRIPT 2.499
-score POSSIBLE_PAYPAL_PHISH_02 0.626
-score PP_MIME_FAKE_ASCII_TEXT 0.233
+score POSSIBLE_PAYPAL_PHISH_02 0.778
+score POSSIBLE_PAYPAL_PHISH_03 0.001 # force non-zero
+score POSSIBLE_PAYPAL_PHISH_04 0.044
+score POSSIBLE_PAYPAL_PHISH_05 0.301
+score PP_MIME_FAKE_ASCII_TEXT 0.239
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 2.286
-score RCVD_DOTEDU_SHORT 0.001
+score RATWARE_NO_RDNS 2.999
+score RCVD_DOTEDU_SHORT 1.499
score RCVD_IN_IADB_DMARC -0.001
-score RCVD_IN_IADB_ESP -0.001 # force non-zero
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RCVD_IN_IADB_ESP -0.556
+score RCVD_IN_MSPIKE_H2 -1.168
score REPTO_419_FRAUD 2.999
-score REPTO_419_FRAUD_GM 0.093
-score REPTO_419_FRAUD_HM 2.290
-score SCC_CANSPAM_2 2.591
+score REPTO_419_FRAUD_GM 0.001
+score REPTO_419_FRAUD_GM_LOOSE 0.999
+score REPTO_419_FRAUD_HM 2.269
+score SCC_CANSPAM_2 0.146
score SCC_ISEMM_LID_1B 1.499
-score SHOPIFY_IMG_NOT_RCVD_SFY 2.500
-score SHORTENED_URL_SRC 2.899
+score SCC_SPAMMERMID4 0.999
+score SCC_THREE_WORD_MONTY 2.299
+score SERGIO_SUBJECT_PORN011 2.399
+score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
+score SHORTENED_URL_SRC 2.299
score SHORTENER_SHORT_IMG 2.499
-score SHORT_IMG_SUSP_NTLD 0.001
+score SHORT_IMG_SUSP_NTLD 1.397
score SHY_OBFU_PASSWORD 3.999
-score SPOOFED_FREEMAIL 0.989
+score SPOOFED_FREEMAIL 0.952
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 2.499
+score SPOOFED_FREEM_REPTO 1.532
score SPOOF_GMAIL_MID 1.499
score STATIC_XPRIO_OLE 1.999
-score SUSP_UTF8_WORD_COMBO 2.360
-score SUSP_UTF8_WORD_FROM 1.290
-score SUSP_UTF8_WORD_SUBJ 0.958
-score TEQF_USR_MSGID_HEX 0.708
-score THIS_AD 0.001
-score TO_EQ_FM_DIRECT_MX 0.001 # force non-zero
-score TO_EQ_FM_DOM_HTML_IMG 1.097
-score TO_EQ_FM_DOM_HTML_ONLY 0.636
-score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_HTML_ONLY 0.086
+score SUSP_UTF8_WORD_COMBO 2.999
+score SUSP_UTF8_WORD_FROM 0.815
+score SUSP_UTF8_WORD_SUBJ 1.756
+score TEQF_USR_MSGID_HEX 1.416
+score THIS_AD 0.399
+score TO_EQ_FM_DIRECT_MX 0.001
+score TO_EQ_FM_DOM_HTML_IMG 3.099
+score TO_EQ_FM_DOM_SPF_FAIL 0.862
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_IN_SUBJ 0.099
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_IN_SUBJ 0.100
+score TO_NAME_SUBJ_NO_RDNS 2.950
+score TO_NO_BRKTS_HTML_IMG 1.802
score TO_NO_BRKTS_HTML_ONLY 2.000
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.499
-score TVD_RCVD_SPACE_BRACKET 1.974
+score TO_NO_BRKTS_PCNT 2.500
+score TVD_RCVD_SPACE_BRACKET 2.332
score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_RATIO_MINFP 0.001
score UNDISC_FREEM 2.799
-score UNDISC_MONEY 1.379
+score UNDISC_MONEY 1.496
score UNICODE_OBFU_ASC 2.499
score UNICODE_OBFU_ZW 3.499
-score UNICODE_OBFU_ZW_MANY 0.001
-score UNICODE_RTL_OBFU 1.499
-score UPPERCASE_URI 2.699
-score URIBL_CT_SURBL 1.624
+score UNICODE_OBFU_ZW_MANY 0.494
+score UPPERCASE_URI 3.099
+score URIBL_CT_SURBL 1.800
score URI_BUFFLY 1.999
-score URI_CLOUDFLAREIPFS 0.001
score URI_DOTEDU 1.999
-score URI_DOTTY_HEX 0.001
-score URI_DWEBIPFS 2.117
+score URI_DOTTY_HEX 0.727
+score URI_DWEBIPFS 1.410
score URI_EXCESS_SLASHES 2.499
-score URI_FIREBASEAPP 2.999
score URI_FLKIPFSXYZIPFS 3.499
score URI_GOOGDRAWPREVIEW_MINFP 3.499
score URI_GOOGLE_PROXY 0.001
score URI_GOOG_STO_SPAMMY 2.999
-score URI_IMG_CWINDOWSNET 1.123
-score URI_IPFS 1.086
-score URI_IPFSIO 1.486
-score URI_PHISH 1.230
-score URI_PHP_REDIR 0.001
+score URI_IMG_CWINDOWSNET 1.648
+score URI_IPFS 0.001
+score URI_IPFSIO 3.237
+score URI_OPTOUT_3LD 1.303
+score URI_PHISH 0.001
+score URI_PHP_REDIR 2.705
score URI_TRY_3LD 1.999
-score URI_WPADMIN 2.399
-score URI_WP_HACKED 0.001
+score URI_WPADMIN 2.499
+score URI_WP_HACKED 3.499
score URI_WP_HACKED_2 0.001
-score VFY_ACCT_NORDNS 3.000
+score VFY_ACCT_NORDNS 2.999
score VISTA_COST 2.499
score VISTA_TONOM_EQ_TOLOC 2.499
+score WIKI_IMG 1.566
score WORD_INVIS_MANY 2.999
-score XFER_LOTSA_MONEY 0.001
+score XFER_LOTSA_MONEY 1.000
score XM_RANDOM 2.499
-score XPRIO 2.249
-score YOUR_PERMISSION 2.399
+score XPRIO 2.250
+score YOUR_PERMISSION 1.092
score YOU_INHERIT 2.399
+score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -286,13 +292,13 @@ score AC_SPAMMY_URI_PATTERNS4 1.0
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADULT_DATING_COMPANY 10.000
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.000
score APP_DEVELOPMENT_FREEM 1.000
score APP_DEVELOPMENT_NORDNS 1.000
score BEBEE_IMG_NOT_RCVD_BB 1.000
score BITCOIN_BOMB 1.000
-score BITCOIN_EXTORT_02 1.000
+score BITCOIN_DEADLINE 1.000
score BITCOIN_IMGUR 1.000
-score BITCOIN_MALWARE 1.000
score BITCOIN_OBFU_SUBJ 1.000
score BITCOIN_PAY_ME 1.000
score BITCOIN_SPAM_01 1.000
@@ -302,16 +308,20 @@ score BITCOIN_SPAM_10 1.0
score BITCOIN_SPAM_11 1.000
score BITCOIN_SPAM_12 1.000
score BITCOIN_SPF_ONLYALL 1.000
+score BOGUS_MSM_HDRS 1.000
score BOMB_FREEM 1.000
score BOMB_MONEY 1.000
score BTC_ORG 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
score DAY_I_EARNED 1.000
+score DKIMWL_BL 1.000
score DKIMWL_BLOCKED 0.001
score DOTGOV_IMAGE 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000
score ENVFROM_GOOG_TRIX 1.000
+score FBI_MONEY 1.000
+score FBI_SPOOF 1.000
score FONT_INVIS_DIRECT 1.000
score FONT_INVIS_DOTGOV 1.000
score FONT_INVIS_HTML_NOHTML 1.000
@@ -320,6 +330,7 @@ score FRNAME_IN_MSG_XPRIO_NO_SUB 1.0
score FROM_BANK_NOAUTH 1.000
score FROM_FMBLA_NDBLOCKED 0.001
score FROM_GOV_REPLYTO_FREEMAIL 1.000
+score FROM_GOV_SPOOF 1.000
score FROM_NEWDOM_BTC 1.000
score FROM_NUMBERO_NEWDOMAIN 1.000
score FROM_PAYPAL_SPOOF 1.000
@@ -330,6 +341,7 @@ score GOOGLE_DOCS_PHISH 1.0
score GOOGLE_DOCS_PHISH_MANY 1.000
score GOOGLE_DOC_SUSP 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000
+score GOOG_MALWARE_DNLD 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
@@ -337,9 +349,9 @@ score HAS_X_OUTGOING_SPAM_STAT 1.0
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HREF_EMPTY_PHPMAIL 1.000
-score HTML_BADATTR 1.000
score HTML_OFF_PAGE 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score JH_SPAMMY_PATTERN01 1.000
@@ -352,7 +364,6 @@ score MALF_HTML_B64 1.0
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
score MIXED_AREA_CASE 1.000
-score MIXED_CENTER_CASE 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
score MONERO_EXTORT_01 1.000
@@ -361,7 +372,6 @@ score MONERO_PAY_ME 1.0
score MSGID_DOLLARS_URI_IMG 1.000
score MSGID_HDR_MALF 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
-score NEW_PRODUCTS 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -378,7 +388,6 @@ score RDNS_NUM_TLD_XM 1.0
score REPTO_419_FRAUD_AOL 1.000
score REPTO_419_FRAUD_AOL_LOOSE 1.000
score REPTO_419_FRAUD_CNS 1.000
-score REPTO_419_FRAUD_GM_LOOSE 1.000
score REPTO_419_FRAUD_OL 1.000
score REPTO_419_FRAUD_PM 1.000
score REPTO_419_FRAUD_QQ 1.000
@@ -400,21 +409,22 @@ score TAGSTAT_IMG_NOT_RCVD_TGST 1.0
score TARINGANET_IMG_NOT_RCVD_TN 1.000
score THIS_IS_ADV_SUSP_NTLD 1.000
score TONLINE_FAKE_DKIM 1.000
-score TO_NAME_SUBJ_NO_RDNS 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
+score UNICODE_RTL_OBFU 1.000
score UNSUB_GOOG_FORM 1.000
score URI_ADOBESPARK 1.000
score URI_AZURE_CLOUDAPP 1.000
+score URI_CLOUDFLAREIPFS 1.000
score URI_DASHGOVEDU 1.000
score URI_DATA 1.000
score URI_DOTEDU_ENTITY 1.000
+score URI_FIREBASEAPP 1.000
score URI_GOOGDRAWPREVIEW 1.000
score URI_HEX_IP 1.000
score URI_IMG_WP_REDIR 1.000
score URI_LONG_REPEAT 1.000
score URI_ONLY_MSGID_MALF 1.000
-score URI_OPTOUT_3LD 1.000
score URI_TRY_USME 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1922503&r1=1922502&r2=1922503&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Dec 15 02:50:12 2024
@@ -1,143 +1,143 @@
# Using score set 0 logs for revision 1922462 from:
# ham-ena-week0.r1922462.log ham-ena-week1.r1922462.log ham-ena-week2.r1922462.log ham-ena-week3.r1922462.log ham-ena-week4.r1922462.log ham-giovanni-ham.r1922462.log ham-giovanni-spammy.r1922462.log ham-giovanni-spam.r1922462.log ham-grenier.r1922462.log ham-jhardin.r1922462.log ham-llanga.r1922462.log ham-mmiroslaw-mails-ham.r1922462.log ham-mmiroslaw-mails-spam.r1922462.log ham-spamsponge.r1922462.log ham-tsz-corpus.r1922462.log ham-whyscream.r1922462.log spam-ena-week0.r1922462.log spam-ena-week1.r1922462.log spam-ena-week2.r1922462.log spam-ena-week3.r1922462.log spam-ena-week4.r1922462.log spam-giovanni-ham.r1922462.log spam-giovanni-spammy.r1922462.log spam-giovanni-spam.r1922462.log spam-grenier.r1922462.log spam-jhardin.r1922462.log spam-llanga.r1922462.log spam-mmiroslaw-mails-ham.r1922462.log spam-mmiroslaw-mails-spam.r1922462.log spam-spamsponge.r1922462.log spam-tsz-corpus.r1922462.log spam-whyscream.r1922462.log
-score ACCT_PHISHING_MANY 2.568
+score ACCT_PHISHING_MANY 2.553
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_FROM_MANY_DOTS 1.997
-score AC_HTML_NONSENSE_TAGS 2.000
+score AC_FROM_MANY_DOTS 2.003
+score AC_HTML_NONSENSE_TAGS 1.999
score ADMITS_SPAM 4.299
score ADVANCE_FEE_2_NEW_FORM 1.999
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.586
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.001
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.604
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.758
-score ADVANCE_FEE_3_NEW_MONEY 0.001
+score ADVANCE_FEE_3_NEW 2.602
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.371
+score ADVANCE_FEE_3_NEW_MONEY 0.001 # force non-zero
score ADVANCE_FEE_4_NEW 0.001
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_4_NEW_MONEY 1.614
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 # force non-zero
+score ADVANCE_FEE_4_NEW_MONEY 1.666
score ADVANCE_FEE_5_NEW 2.499
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.695
-score ADVANCE_FEE_5_NEW_MONEY 0.509
-score AD_PREFS 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.714
+score ADVANCE_FEE_5_NEW_MONEY 1.739
+score AD_PREFS 0.354
score ALIBABA_IMG_NOT_RCVD_ALI 2.499
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BIGNUM_EMAILS_FREEM 1.935
+score BIGNUM_EMAILS_FREEM 2.109
score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_EXTORT_01 2.099
-score BITCOIN_EXTORT_02 1.838
-score BITCOIN_MALWARE 1.376
+score BITCOIN_EXTORT_01 2.104
+score BITCOIN_EXTORT_02 2.235
+score BITCOIN_MALWARE 0.556
score BITCOIN_ONAN 2.999
score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_03 2.499
score BITCOIN_SPAM_07 3.499
-score BITCOIN_SPAM_08 0.643
-score BITCOIN_SPAM_09 1.499
+score BITCOIN_SPAM_08 1.544
+score BITCOIN_SPAM_09 1.500
score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 0.006
+score BITCOIN_VISTA 0.001
score BITCOIN_XPRIO 2.499
-score BITCOIN_YOUR_INFO 0.657
-score BODY_URI_ONLY 2.339
+score BITCOIN_YOUR_INFO 0.670
+score BODY_URI_ONLY 2.342
score BOGUS_MIME_VERSION 3.499
-score BOGUS_MSM_HDRS 2.279
-score BULK_RE_SUSP_NTLD 0.006
+score BOGUS_MSM_HDRS 1.925
+score BULK_RE_SUSP_NTLD 0.880
score CN_B2B_SPAMMER 2.699
score COMPENSATION 1.499
-score CONTENT_AFTER_HTML_WEAK 1.500
+score CONTENT_AFTER_HTML_WEAK 1.499
score CTE_8BIT_MISMATCH 0.999
-score DATE_IN_FUTURE_96_Q 3.915
-score DATE_IN_FUTURE_Q_PLUS 4.064
+score DATE_IN_FUTURE_96_Q 2.989
+score DATE_IN_FUTURE_Q_PLUS 3.368
score DEAR_BENEFICIARY 3.299
score DOS_BODY_HIGH_NO_MID 3.599
score DSN_NO_MIMEVERSION 1.999
score DYNAMIC_IMGUR 3.999
score ENCRYPTED_MESSAGE -0.999
-score END_FUTURE_EMAILS 2.500
+score END_FUTURE_EMAILS 2.499
score FACEBOOK_IMG_NOT_RCVD_FB 1.999
-score FBI_MONEY 1.331
-score FBI_SPOOF 1.277
-score FILL_THIS_FORM 0.798
-score FONT_INVIS_LONG_LINE 0.787
+score FBI_MONEY 0.833
+score FBI_SPOOF 1.871
+score FILL_THIS_FORM 0.799
+score FONT_INVIS_LONG_LINE 0.786
score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 0.274
+score FONT_INVIS_NORDNS 2.499
score FONT_INVIS_POSTEXTRAS 0.001
-score FORM_FRAUD 1.000
+score FORM_FRAUD 0.999
score FORM_FRAUD_3 2.999
score FORM_FRAUD_5 0.001
score FOUND_YOU 3.249
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_ADDR_WS 0.242
+score FROM_ADDR_WS 0.236
score FROM_IN_TO_AND_SUBJ 2.799
score FROM_LONG_DOM 1.499
score FROM_LONG_DOM_MINFP 2.499
-score FROM_MISSP_FREEMAIL 2.007
-score FROM_MISSP_MSFT 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 2.008
+score FROM_MISSP_MSFT 0.001
score FROM_MISSP_PHISH 3.499
score FROM_MISSP_REPLYTO 2.499
score FROM_MISSP_TO_UNDISC 2.299
score FROM_MISSP_USER 0.001
-score FROM_NTLD_LINKBAIT 1.270
-score FROM_NTLD_REPLY_FREEMAIL 1.613
+score FROM_NTLD_LINKBAIT 0.873
+score FROM_NTLD_REPLY_FREEMAIL 1.999
score FROM_SUSPICIOUS_NTLD 0.499
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FROM_UNBAL2 2.399
-score FROM_WSP_LEAD 1.254
+score FROM_WSP_LEAD 1.256
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
score FUZZY_AMAZON 3.599
-score FUZZY_BITCOIN 3.137
-score FUZZY_BTC_WALLET 0.652
-score FUZZY_DR_OZ 0.761
-score FUZZY_FACEBOOK 2.004
+score FUZZY_BITCOIN 3.091
+score FUZZY_BTC_WALLET 0.857
+score FUZZY_DR_OZ 0.451
+score FUZZY_FACEBOOK 2.000
score FUZZY_PRIVACY 2.899
score FUZZY_SECURITY 2.199
-score FUZZY_TRUMP 1.628
-score FUZZY_WALLET 1.288
+score FUZZY_TRUMP 3.017
+score FUZZY_WALLET 1.290
score GAPPY_HTML 2.299
score GB_BITCOIN_CP 2.999
score GB_CUSTOM_HTM_URI 1.499
score GB_FAKE_RF_SHORT 1.999
-score GB_FREEMAIL_DISPTO 0.235
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.278
+score GB_FREEMAIL_DISPTO 0.001
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.001
score GB_GOOGLE_AMP 0.499
-score GOOG_MALWARE_DNLD 0.500
-score GOOG_STO_EMAIL_PHISH 2.360
-score GOOG_STO_HTML_PHISH 2.512
+score GOOG_MALWARE_DNLD 0.499
+score GOOG_STO_EMAIL_PHISH 2.319
+score GOOG_STO_HTML_PHISH 2.554
score GOOG_STO_IMG_HTML 3.000
score GOOG_STO_IMG_NOHTML 2.499
-score GOOG_STO_NOIMG_HTML 2.650
+score GOOG_STO_NOIMG_HTML 2.654
score HDRS_LCASE 0.100
score HDRS_MISSP 2.499
score HDR_ORDER_FTSDMCXX_DIRECT 0.001
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
-score HEXHASH_WORD 2.263
+score HEXHASH_WORD 2.287
score HK_LOTTO 0.999
score HK_NAME_FM_MR_MRS 1.499
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 0.999
score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 1.000
-score HK_SCAM 0.908
+score HK_RANDOM_REPLYTO 0.999
+score HK_SCAM 0.488
score HOSTED_IMG_DIRECT_MX 3.499
-score HOSTED_IMG_FREEM 0.500
-score HOSTED_IMG_MULTI_PUB_01 0.499
+score HOSTED_IMG_FREEM 0.499
+score HOSTED_IMG_MULTI_PUB_01 0.498
score HREF_EMPTY_NORDNS 1.501
-score HREF_EMPTY_XANTIABUSE 0.905
-score HTML_BADATTR 0.526
+score HREF_EMPTY_XANTIABUSE 0.904
+score HTML_BADATTR 0.999
score HTML_ENTITY_ASCII 2.999
-score HTML_ENTITY_ASCII_TINY 1.024
+score HTML_ENTITY_ASCII_TINY 1.145
score HTML_FONT_TINY_NORDNS 1.999
-score HTML_SINGLET_MANY 0.001
-score HTML_TEXT_INVISIBLE_FONT 1.117
-score HTML_TEXT_INVISIBLE_STYLE 0.351
-score IMG_DIRECT_TO_MX 2.604
-score IMG_ONLY_FM_DOM_INFO 2.493
+score HTML_SINGLET_MANY 0.261
+score HTML_TEXT_INVISIBLE_FONT 1.315
+score HTML_TEXT_INVISIBLE_STYLE 0.342
+score IMG_DIRECT_TO_MX 2.603
+score IMG_ONLY_FM_DOM_INFO 2.491
score JH_SPAMMY_HEADERS 3.499
-score KHOP_FAKE_EBAY 0.197
-score KHOP_HELO_FCRDNS 0.400
+score KHOP_FAKE_EBAY 0.201
+score KHOP_HELO_FCRDNS 0.399
score LONGLN_LOW_CONTRAST 2.499
score LONG_HEX_URI 2.999
score LONG_IMG_URI 2.999
@@ -146,98 +146,98 @@ score LOTS_OF_MONEY 0.0
score LOTTO_AGENT 0.001
score LOTTO_DEPT 1.999
score MALFORMED_FREEMAIL 3.099
-score MALWARE_NORDNS 1.839
-score MALWARE_PASSWORD 1.813
-score MANY_SPAN_IN_TEXT 1.215
+score MALWARE_NORDNS 0.688
+score MALWARE_PASSWORD 1.531
+score MALW_ATTACH 2.199
+score MANY_SPAN_IN_TEXT 0.583
score MANY_SUBDOM 3.399
score MILLION_HUNDRED 0.001
-score MILLION_USD 1.693
+score MILLION_USD 1.796
score MIMEOLE_DIRECT_TO_MX 0.001
-score MIME_NO_TEXT 0.001 # force non-zero
+score MIME_NO_TEXT 0.001
+score MIXED_CENTER_CASE 2.499
score MIXED_CTYPE_CASE 3.399
score MIXED_ES 2.799
-score MIXED_HREF_CASE 2.000
-score MIXED_IMG_CASE 2.451
+score MIXED_HREF_CASE 1.999
+score MIXED_IMG_CASE 2.730
score MONEY_ATM_CARD 0.001
-score MONEY_FORM 2.292
+score MONEY_FORM 0.890
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 3.099
-score MONEY_FRAUD_5 2.979
+score MONEY_FRAUD_3 3.100
+score MONEY_FRAUD_5 2.925
score MONEY_FRAUD_8 0.001
score MONEY_FREEMAIL_REPTO 2.999
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
-score MONEY_NOHTML 2.102
-score MSM_PRIO_REPTO 2.406
-score NA_DOLLARS 1.499
-score NICE_REPLY_A -2.918
+score MONEY_NOHTML 2.015
+score MSM_PRIO_REPTO 2.410
+score NA_DOLLARS 1.500
+score NICE_REPLY_A -1.002
score NORDNS_LOW_CONTRAST 0.001
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score OBFU_BITCOIN 2.417
-score ODD_FREEM_REPTO 2.999
+score OBFU_BITCOIN 1.552
+score ODD_FREEM_REPTO 3.000
score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.001
-score PDS_DBL_URL_LINKBAIT 1.410
-score PDS_FRNOM_TODOM_DBL_URL 1.001
+score PDS_BTC_MSGID 0.001 # force non-zero
+score PDS_DBL_URL_LINKBAIT 1.420
+score PDS_FRNOM_TODOM_DBL_URL 1.002
score PDS_FRNOM_TODOM_NAKED_TO 1.499
score PDS_FROM_NAME_TO_DOMAIN 1.999
score PDS_OTHER_BAD_TLD 1.999
score PDS_PHP_EVAL 1.499
-score PDS_PRO_TLD 0.999
-score PHP_ORIG_SCRIPT 2.093
+score PDS_PRO_TLD 1.000
+score PHP_ORIG_SCRIPT 2.095
score PHP_ORIG_SCRIPT_EVAL 2.999
-score PHP_SCRIPT 2.499
-score POSSIBLE_PAYPAL_PHISH_02 0.616
-score POSSIBLE_PAYPAL_PHISH_03 1.020
-score POSSIBLE_PAYPAL_PHISH_04 0.116
-score POSSIBLE_PAYPAL_PHISH_05 0.611
+score PHP_SCRIPT 2.500
+score POSSIBLE_PAYPAL_PHISH_02 0.492
+score POSSIBLE_PAYPAL_PHISH_03 0.494
+score POSSIBLE_PAYPAL_PHISH_04 0.764
+score POSSIBLE_PAYPAL_PHISH_05 0.493
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 1.754
+score RATWARE_NO_RDNS 1.686
score RCVD_DOTEDU_SHORT 0.803
score REPTO_419_FRAUD 2.999
-score REPTO_419_FRAUD_GM 0.458
+score REPTO_419_FRAUD_GM 0.457
score REPTO_419_FRAUD_GM_LOOSE 0.999
-score REPTO_419_FRAUD_HM 3.000
-score SCC_CANSPAM_2 0.671
+score REPTO_419_FRAUD_HM 2.999
+score SCC_CANSPAM_2 1.594
score SCC_ISEMM_LID_1B 1.499
score SCC_SPAMMERMID4 0.999
-score SCC_THREE_WORD_MONTY 2.386
+score SCC_THREE_WORD_MONTY 2.399
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
score SHORTENED_URL_SRC 2.499
-score SHORTENER_SHORT_IMG 2.499
-score SHORT_IMG_SUSP_NTLD 1.409
+score SHORTENER_SHORT_IMG 1.601
+score SHORT_IMG_SUSP_NTLD 0.623
score SHY_OBFU_PASSWORD 3.999
score SPOOFED_FREEMAIL_NO_RDNS 0.001
score SPOOF_GMAIL_MID 1.499
score STATIC_XPRIO_OLE 1.999
score SUSP_UTF8_WORD_COMBO 2.999
score SUSP_UTF8_WORD_FROM 1.999
-score SUSP_UTF8_WORD_SUBJ 1.111
-score THIS_AD 0.500
+score SUSP_UTF8_WORD_SUBJ 1.157
+score THIS_AD 0.399
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_IMG 3.099
-score TO_EQ_FM_DOM_HTML_ONLY 0.001
-score TO_EQ_FM_HTML_ONLY 0.001
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.544
+score TO_NAME_SUBJ_NO_RDNS 2.517
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 1.244
+score TO_NO_BRKTS_MSFT 1.249
score TO_NO_BRKTS_NORDNS_HTML 1.999
score TO_NO_BRKTS_PCNT 2.499
-score TVD_RCVD_SPACE_BRACKET 2.404
+score TVD_RCVD_SPACE_BRACKET 2.391
score TVD_SPACE_ENCODED 2.352
score TVD_SPACE_RATIO_MINFP 2.499
score UNDISC_FREEM 2.999
-score UNDISC_MONEY 1.987
+score UNDISC_MONEY 2.075
score UNICODE_OBFU_ASC 2.499
score UNICODE_OBFU_ZW 3.499
-score UNICODE_OBFU_ZW_MANY 0.007
-score UNICODE_RTL_OBFU 1.499
-score UPPERCASE_URI 3.099
+score UNICODE_OBFU_ZW_MANY 0.004
+score UNICODE_RTL_OBFU 1.500
+score UPPERCASE_URI 3.100
score URI_BUFFLY 1.999
score URI_DOTEDU 1.999
score URI_DOTTY_HEX 3.699
@@ -249,21 +249,21 @@ score URI_GOOGLE_PROXY 0.0
score URI_GOOG_STO_SPAMMY 2.999
score URI_IMG_CWINDOWSNET 3.499
score URI_IPFS 0.151
-score URI_IPFSIO 3.250
-score URI_PHISH 0.602
+score URI_IPFSIO 3.251
+score URI_PHISH 0.604
score URI_PHP_REDIR 0.001
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.799
score URI_WP_HACKED 3.499
score VFY_ACCT_NORDNS 2.500
-score VISTA_COST 2.094
-score VISTA_TONOM_EQ_TOLOC 2.500
-score WIKI_IMG 3.299
-score WORD_INVIS_MANY 2.016
-score XFER_LOTSA_MONEY 1.000
+score VISTA_COST 2.098
+score VISTA_TONOM_EQ_TOLOC 2.499
+score WIKI_IMG 3.200
+score WORD_INVIS_MANY 2.191
+score XFER_LOTSA_MONEY 0.999
score XM_RANDOM 2.499
score XPRIO 0.001
-score YOUR_PERMISSION 2.070
+score YOUR_PERMISSION 2.258
score YOU_INHERIT 2.699
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -330,9 +330,7 @@ score LIST_PRTL_PUMPDUMP 1.0
score LIST_PRTL_SAME_USER 1.000
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
-score MANY_HDRS_LCASE 0.100
score MIXED_AREA_CASE 1.000
-score MIXED_CENTER_CASE 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
score MONERO_EXTORT_01 1.000
@@ -342,7 +340,6 @@ score MSGID_DOLLARS_URI_IMG 1.0
score MSGID_HDR_MALF 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
-score PDS_FROM_2_EMAILS 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1922503&r1=1922502&r2=1922503&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Dec 15 02:50:12 2024
@@ -1,281 +1,287 @@
-# Using score set 1 logs for revision 1922358 from:
-# ham-net-ena-week0.r1922358.log ham-net-ena-week1.r1922358.log ham-net-ena-week4.r1922358.log ham-net-giovanni-ham.r1922358.log ham-net-giovanni-spammy.r1922358.log ham-net-giovanni-spam.r1922358.log ham-net-grenier.r1922358.log ham-net-jhardin.r1922358.log ham-net-llanga.r1922358.log ham-net-mmiroslaw-mails-ham.r1922358.log ham-net-mmiroslaw-mails-spam.r1922358.log ham-net-spamsponge.r1922358.log ham-net-tsz-corpus.r1922358.log ham-net-whyscream.r1922358.log spam-net-ena-week0.r1922358.log spam-net-ena-week1.r1922358.log spam-net-ena-week4.r1922358.log spam-net-giovanni-ham.r1922358.log spam-net-giovanni-spammy.r1922358.log spam-net-giovanni-spam.r1922358.log spam-net-grenier.r1922358.log spam-net-jhardin.r1922358.log spam-net-llanga.r1922358.log spam-net-mmiroslaw-mails-ham.r1922358.log spam-net-mmiroslaw-mails-spam.r1922358.log spam-net-spamsponge.r1922358.log spam-net-tsz-corpus.r1922358.log spam-net-whyscream.r1922358.log
+# Using score set 1 logs for revision 1922485 from:
+# ham-net-ena-week0.r1922485.log ham-net-ena-week1.r1922485.log ham-net-ena-week4.r1922485.log ham-net-giovanni-ham.r1922485.log ham-net-giovanni-spammy.r1922485.log ham-net-giovanni-spam.r1922485.log ham-net-grenier.r1922485.log ham-net-jhardin.r1922485.log ham-net-llanga.r1922485.log ham-net-mmiroslaw-mails-ham.r1922485.log ham-net-mmiroslaw-mails-spam.r1922485.log ham-net-spamsponge.r1922485.log ham-net-tsz-corpus.r1922485.log ham-net-whyscream.r1922485.log spam-net-ena-week0.r1922485.log spam-net-ena-week1.r1922485.log spam-net-ena-week4.r1922485.log spam-net-giovanni-ham.r1922485.log spam-net-giovanni-spammy.r1922485.log spam-net-giovanni-spam.r1922485.log spam-net-grenier.r1922485.log spam-net-jhardin.r1922485.log spam-net-llanga.r1922485.log spam-net-mmiroslaw-mails-ham.r1922485.log spam-net-mmiroslaw-mails-spam.r1922485.log spam-net-spamsponge.r1922485.log spam-net-tsz-corpus.r1922485.log spam-net-whyscream.r1922485.log
-score ACCT_PHISHING_MANY 1.897
+score ACCT_PHISHING_MANY 2.937
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.499
score AC_HTML_NONSENSE_TAGS 1.999
-score AC_POST_EXTRAS 1.999
-score ADMITS_SPAM 3.199
+score ADMITS_SPAM 3.812
score ADVANCE_FEE_2_NEW_FORM 1.999
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.287
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.514
-score ADVANCE_FEE_3_NEW_FRM_MNY 1.086
-score ADVANCE_FEE_3_NEW_MONEY 0.001
-score ADVANCE_FEE_4_NEW 2.999
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.222
-score ADVANCE_FEE_4_NEW_MONEY 2.699
-score ADVANCE_FEE_5_NEW 1.847
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.077
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.278
+score ADVANCE_FEE_3_NEW_MONEY 0.337
+score ADVANCE_FEE_4_NEW 2.465
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 1.170
+score ADVANCE_FEE_5_NEW 2.299
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.193
score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AD_PREFS 0.116
-score ALIBABA_IMG_NOT_RCVD_ALI 2.499
+score AD_PREFS 0.407
+score ALIBABA_IMG_NOT_RCVD_ALI 2.500
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score BIGNUM_EMAILS_FREEM 2.054
+score BIGNUM_EMAILS_FREEM 2.543
score BIGNUM_EMAILS_MANY 2.999
-score BITCOIN_DEADLINE 1.077
-score BITCOIN_EXTORT_01 4.099
-score BITCOIN_ONAN 0.985
-score BITCOIN_SPAM_02 0.687
-score BITCOIN_SPAM_03 1.525
-score BITCOIN_SPAM_05 1.452
-score BITCOIN_SPAM_07 3.101
-score BITCOIN_SPAM_08 2.499
+score BITCOIN_EXTORT_01 4.851
+score BITCOIN_EXTORT_02 2.402
+score BITCOIN_MALWARE 0.969
+score BITCOIN_ONAN 0.817
+score BITCOIN_SPAM_02 2.499
+score BITCOIN_SPAM_03 2.499
+score BITCOIN_SPAM_05 1.486
+score BITCOIN_SPAM_07 3.151
+score BITCOIN_SPAM_08 2.254
score BITCOIN_SPAM_09 1.499
-score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 2.472
-score BITCOIN_XPRIO 1.515
-score BITCOIN_YOUR_INFO 0.001
+score BITCOIN_TOEQFM 0.989
+score BITCOIN_VISTA 1.755
+score BITCOIN_XPRIO 2.292
+score BITCOIN_YOUR_INFO 2.464
score BODY_URI_ONLY 0.001
score BOGUS_MIME_VERSION 3.499
-score BOGUS_MSM_HDRS 2.204
-score BULK_RE_SUSP_NTLD 0.182
-score CN_B2B_SPAMMER 2.461
-score COMPENSATION 1.499
-score CONTENT_AFTER_HTML 2.063
+score BULK_RE_SUSP_NTLD 0.839
+score CN_B2B_SPAMMER 2.699
+score COMPENSATION 1.385
+score CONTENT_AFTER_HTML 1.608
score CONTENT_AFTER_HTML_WEAK 0.001
-score CTE_8BIT_MISMATCH 0.640
-score DATE_IN_FUTURE_96_Q 2.612
-score DATE_IN_FUTURE_Q_PLUS 3.256
-score DEAR_BENEFICIARY 1.129
-score DKIMWL_BL 2.999
-score DKIMWL_WL_HIGH -0.292
+score CTE_8BIT_MISMATCH 0.635
+score DATE_IN_FUTURE_96_Q 3.368
+score DATE_IN_FUTURE_Q_PLUS 3.138
+score DEAR_BENEFICIARY 3.099
+score DKIMWL_WL_HIGH -0.001 # force non-zero
score DKIMWL_WL_MED -0.001
-score DKIMWL_WL_MEDHI -0.001 # force non-zero
-score DOS_BODY_HIGH_NO_MID 3.399
+score DKIMWL_WL_MEDHI -0.001
+score DOS_BODY_HIGH_NO_MID 3.699
score DSN_NO_MIMEVERSION 1.999
score DYNAMIC_IMGUR 3.999
score ENCRYPTED_MESSAGE -0.999
score END_FUTURE_EMAILS 2.499
score FACEBOOK_IMG_NOT_RCVD_FB 1.999
-score FBI_MONEY 1.999
-score FBI_SPOOF 1.670
-score FILL_THIS_FORM 0.149
-score FONT_INVIS_LONG_LINE 1.847
+score FILL_THIS_FORM 0.999
+score FONT_INVIS_LONG_LINE 1.852
score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 1.224
-score FONT_INVIS_POSTEXTRAS 1.395
+score FONT_INVIS_NORDNS 1.215
+score FONT_INVIS_POSTEXTRAS 1.382
score FORGED_SPF_HELO 2.099
score FORM_FRAUD 0.999
-score FORM_FRAUD_3 2.541
-score FORM_FRAUD_5 1.870
-score FOUND_YOU 3.249
+score FORM_FRAUD_3 2.699
+score FORM_FRAUD_5 0.001
+score FOUND_YOU 2.579
score FREEMAIL_FORGED_FROMDOMAIN 0.001
score FROM_ADDR_WS 0.001
score FROM_FMBLA_NEWDOM 0.001
score FROM_FMBLA_NEWDOM14 0.999
-score FROM_FMBLA_NEWDOM28 0.799
-score FROM_GOV_DKIM_AU -0.975
-score FROM_GOV_SPOOF 0.999
+score FROM_FMBLA_NEWDOM28 0.800
+score FROM_GOV_DKIM_AU -0.845
score FROM_IN_TO_AND_SUBJ 2.699
-score FROM_LONG_DOM 0.428
+score FROM_LONG_DOM 0.001
score FROM_LONG_DOM_MINFP 2.499
-score FROM_MISSP_FREEMAIL 1.877
+score FROM_MISSP_FREEMAIL 1.884
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_PHISH 3.499
-score FROM_MISSP_REPLYTO 1.709
+score FROM_MISSP_REPLYTO 1.702
score FROM_MISSP_SPF_FAIL 0.001
-score FROM_MISSP_TO_UNDISC 2.199
+score FROM_MISSP_TO_UNDISC 2.099
score FROM_MISSP_USER 0.001
-score FROM_NTLD_LINKBAIT 0.001
-score FROM_NTLD_REPLY_FREEMAIL 0.023
-score FROM_SUSPICIOUS_NTLD 0.499
-score FROM_SUSPICIOUS_NTLD_FP 1.078
+score FROM_NTLD_LINKBAIT 1.357
+score FROM_NTLD_REPLY_FREEMAIL 0.256
+score FROM_SUSPICIOUS_NTLD 0.500
+score FROM_SUSPICIOUS_NTLD_FP 0.570
score FROM_UNBAL2 2.399
-score FROM_WSP_LEAD 0.001
-score FSL_BULK_SIG 0.001
-score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_BULK_SIG 0.001 # force non-zero
+score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.112
-score FUZZY_BITCOIN 3.199
-score FUZZY_BTC_WALLET 0.783
-score FUZZY_DR_OZ 0.067
-score FUZZY_FACEBOOK 2.199
-score FUZZY_PRIVACY 2.599
-score FUZZY_SECURITY 1.999
-score FUZZY_WALLET 0.243
+score FUZZY_AMAZON 3.115
+score FUZZY_BITCOIN 0.001 # force non-zero
+score FUZZY_BTC_WALLET 1.136
+score FUZZY_DR_OZ 0.001
+score FUZZY_FACEBOOK 2.102
+score FUZZY_PRIVACY 0.001 # force non-zero
+score FUZZY_SECURITY 2.299
+score FUZZY_TRUMP 2.226
+score FUZZY_WALLET 2.499
+score GAPPY_HTML 2.099
+score GB_BITCOIN_CP 2.969
score GB_CUSTOM_HTM_URI 1.499
score GB_FAKE_RF_SHORT 1.999
score GB_FREEMAIL_DISPTO 0.001
-score GB_FREEMAIL_DISPTO_NOTFREEM 0.499
-score GB_HASHBL_BTC 4.168
-score GOOG_MALWARE_DNLD 0.001
-score GOOG_STO_EMAIL_PHISH 2.530
-score GOOG_STO_HTML_PHISH 1.379
+score GB_FREEMAIL_DISPTO_NOTFREEM 0.001
+score GB_GOOGLE_AMP 0.499
+score GB_HASHBL_BTC 4.161
+score GOOG_STO_EMAIL_PHISH 2.531
+score GOOG_STO_HTML_PHISH 1.423
score GOOG_STO_IMG_HTML 2.999
score GOOG_STO_NOIMG_HTML 2.999
score HDRS_LCASE 0.099
-score HDRS_MISSP 2.499
-score HDR_ORDER_FTSDMCXX_DIRECT 0.756
-score HDR_ORDER_FTSDMCXX_NORDNS 1.080
-score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HDRS_MISSP 2.197
+score HDR_ORDER_FTSDMCXX_DIRECT 1.884
+score HDR_ORDER_FTSDMCXX_NORDNS 1.897
+score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_NO_DOMAIN 0.001
-score HEXHASH_WORD 2.745
+score HEXHASH_WORD 2.125
score HK_LOTTO 0.999
-score HK_NAME_FM_MR_MRS 0.001 # force non-zero
-score HK_NAME_MR_MRS 0.999
+score HK_NAME_FM_MR_MRS 0.001
+score HK_NAME_MR_MRS 0.001
score HK_RANDOM_ENVFROM 0.001
score HK_RANDOM_FROM 0.999
score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 0.001
-score HOSTED_IMG_DIRECT_MX 1.823
-score HOSTED_IMG_FREEM 1.040
+score HOSTED_IMG_DIRECT_MX 3.499
score HOSTED_IMG_MULTI_PUB_01 0.001
-score HREF_EMPTY_NORDNS 0.913
+score HREF_EMPTY_NORDNS 1.475
score HREF_EMPTY_XANTIABUSE 0.001
score HREF_EMPTY_XAUTHED 0.001
+score HTML_BADATTR 0.999
score HTML_ENTITY_ASCII 2.999
-score HTML_ENTITY_ASCII_TINY 0.603
+score HTML_ENTITY_ASCII_TINY 1.067
score HTML_FONT_TINY_NORDNS 0.001
-score HTML_SINGLET_MANY 1.312
+score HTML_SINGLET_MANY 0.795
score HTML_TEXT_INVISIBLE_FONT 0.001
-score HTML_TEXT_INVISIBLE_STYLE 2.710
-score IMG_DIRECT_TO_MX 3.299
-score IMG_ONLY_FM_DOM_INFO 0.778
-score JH_SPAMMY_HEADERS 3.199
-score KHOP_HELO_FCRDNS 0.400
+score HTML_TEXT_INVISIBLE_STYLE 2.724
+score IMG_DIRECT_TO_MX 3.300
+score IMG_ONLY_FM_DOM_INFO 0.776
+score JH_SPAMMY_HEADERS 3.195
+score KHOP_HELO_FCRDNS 0.399
score LONGLN_LOW_CONTRAST 2.499
score LONG_HEX_URI 2.251
score LONG_IMG_URI 2.999
-score LONG_INVISIBLE_TEXT 2.195
+score LONG_INVISIBLE_TEXT 2.415
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
-score LOTTO_DEPT 1.999
-score MALFORMED_FREEMAIL 2.195
-score MALW_ATTACH 2.099
-score MANY_SPAN_IN_TEXT 1.753
+score LOTTO_AGENT 0.001
+score LOTTO_DEPT 0.001
+score MALFORMED_FREEMAIL 2.055
+score MALW_ATTACH 2.199
+score MANY_SPAN_IN_TEXT 1.739
score MANY_SUBDOM 3.099
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.001
-score MIMEOLE_DIRECT_TO_MX 1.999
+score MILLION_USD 1.999
+score MIMEOLE_DIRECT_TO_MX 1.216
score MIME_NO_TEXT 1.999
-score MIXED_ES 2.699
-score MIXED_HREF_CASE 1.738
-score MIXED_IMG_CASE 2.980
-score MONEY_ATM_CARD 1.611
-score MONEY_FORM 3.099
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.899
-score MONEY_FRAUD_5 2.999
+score MIXED_CENTER_CASE 2.499
+score MIXED_CTYPE_CASE 3.399
+score MIXED_ES 2.799
+score MIXED_HREF_CASE 1.797
+score MIXED_IMG_CASE 2.999
+score MONEY_ATM_CARD 0.001
+score MONEY_FORM 0.001
+score MONEY_FORM_SHORT 1.205
+score MONEY_FRAUD_3 2.799
+score MONEY_FRAUD_5 2.899
score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 0.990
-score MONEY_FROM_41 1.999
+score MONEY_FREEMAIL_REPTO 1.232
+score MONEY_FROM_41 1.041
score MONEY_FROM_MISSP 0.001
-score MONEY_NOHTML 0.845
-score MSM_PRIO_REPTO 0.539
-score NA_DOLLARS 1.499
-score NICE_REPLY_A -0.348
+score MONEY_NOHTML 0.720
+score MSM_PRIO_REPTO 1.662
+score NA_DOLLARS 0.001
+score NEW_PRODUCTS 1.249
+score NICE_REPLY_A -0.641
score NORDNS_LOW_CONTRAST 0.001
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 1.216
-score OBFU_BITCOIN 2.999
-score ODD_FREEM_REPTO 2.625
+score NSL_RCVD_HELO_USER 0.305
+score OBFU_BITCOIN 2.472
+score ODD_FREEM_REPTO 2.999
score PDS_BTC_ID 0.499
-score PDS_BTC_MSGID 0.999
-score PDS_DBL_URL_LINKBAIT 2.499
-score PDS_FRNOM_TODOM_DBL_URL 0.262
-score PDS_FRNOM_TODOM_NAKED_TO 0.804
-score PDS_FROM_2_EMAILS 2.060
-score PDS_FROM_NAME_TO_DOMAIN 0.885
-score PDS_HELO_SPF_FAIL 1.084
-score PDS_OTHER_BAD_TLD 2.000
-score PDS_PRO_TLD 0.999
-score PHP_ORIG_SCRIPT 1.390
+score PDS_BTC_MSGID 0.647
+score PDS_DBL_URL_LINKBAIT 0.001
+score PDS_FRNOM_TODOM_DBL_URL 0.001
+score PDS_FRNOM_TODOM_NAKED_TO 1.451
+score PDS_FROM_NAME_TO_DOMAIN 1.628
+score PDS_HELO_SPF_FAIL 1.999
+score PDS_OTHER_BAD_TLD 1.999
+score PDS_PHP_EVAL 1.499
+score PDS_PRO_TLD 0.001
+score PHP_ORIG_SCRIPT 1.606
+score PHP_ORIG_SCRIPT_EVAL 2.999
score PHP_SCRIPT 2.499
-score POSSIBLE_PAYPAL_PHISH_02 0.626
-score PP_MIME_FAKE_ASCII_TEXT 0.233
+score POSSIBLE_PAYPAL_PHISH_02 0.778
+score POSSIBLE_PAYPAL_PHISH_03 0.001 # force non-zero
+score POSSIBLE_PAYPAL_PHISH_04 0.044
+score POSSIBLE_PAYPAL_PHISH_05 0.301
+score PP_MIME_FAKE_ASCII_TEXT 0.239
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 2.286
-score RCVD_DOTEDU_SHORT 0.001
+score RATWARE_NO_RDNS 2.999
+score RCVD_DOTEDU_SHORT 1.499
score RCVD_IN_IADB_DMARC -0.001
-score RCVD_IN_IADB_ESP -0.001 # force non-zero
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RCVD_IN_IADB_ESP -0.556
+score RCVD_IN_MSPIKE_H2 -1.168
score REPTO_419_FRAUD 2.999
-score REPTO_419_FRAUD_GM 0.093
-score REPTO_419_FRAUD_HM 2.290
-score SCC_CANSPAM_2 2.591
+score REPTO_419_FRAUD_GM 0.001
+score REPTO_419_FRAUD_GM_LOOSE 0.999
+score REPTO_419_FRAUD_HM 2.269
+score SCC_CANSPAM_2 0.146
score SCC_ISEMM_LID_1B 1.499
-score SHOPIFY_IMG_NOT_RCVD_SFY 2.500
-score SHORTENED_URL_SRC 2.899
+score SCC_SPAMMERMID4 0.999
+score SCC_THREE_WORD_MONTY 2.299
+score SERGIO_SUBJECT_PORN011 2.399
+score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
+score SHORTENED_URL_SRC 2.299
score SHORTENER_SHORT_IMG 2.499
-score SHORT_IMG_SUSP_NTLD 0.001
+score SHORT_IMG_SUSP_NTLD 1.397
score SHY_OBFU_PASSWORD 3.999
-score SPOOFED_FREEMAIL 0.989
+score SPOOFED_FREEMAIL 0.952
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 2.499
+score SPOOFED_FREEM_REPTO 1.532
score SPOOF_GMAIL_MID 1.499
score STATIC_XPRIO_OLE 1.999
-score SUSP_UTF8_WORD_COMBO 2.360
-score SUSP_UTF8_WORD_FROM 1.290
-score SUSP_UTF8_WORD_SUBJ 0.958
-score TEQF_USR_MSGID_HEX 0.708
-score THIS_AD 0.001
-score TO_EQ_FM_DIRECT_MX 0.001 # force non-zero
-score TO_EQ_FM_DOM_HTML_IMG 1.097
-score TO_EQ_FM_DOM_HTML_ONLY 0.636
-score TO_EQ_FM_DOM_SPF_FAIL 0.001
-score TO_EQ_FM_HTML_ONLY 0.086
+score SUSP_UTF8_WORD_COMBO 2.999
+score SUSP_UTF8_WORD_FROM 0.815
+score SUSP_UTF8_WORD_SUBJ 1.756
+score TEQF_USR_MSGID_HEX 1.416
+score THIS_AD 0.399
+score TO_EQ_FM_DIRECT_MX 0.001
+score TO_EQ_FM_DOM_HTML_IMG 3.099
+score TO_EQ_FM_DOM_SPF_FAIL 0.862
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_IN_SUBJ 0.099
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_IN_SUBJ 0.100
+score TO_NAME_SUBJ_NO_RDNS 2.950
+score TO_NO_BRKTS_HTML_IMG 1.802
score TO_NO_BRKTS_HTML_ONLY 2.000
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.499
-score TVD_RCVD_SPACE_BRACKET 1.974
+score TO_NO_BRKTS_PCNT 2.500
+score TVD_RCVD_SPACE_BRACKET 2.332
score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_RATIO_MINFP 0.001
score UNDISC_FREEM 2.799
-score UNDISC_MONEY 1.379
+score UNDISC_MONEY 1.496
score UNICODE_OBFU_ASC 2.499
score UNICODE_OBFU_ZW 3.499
-score UNICODE_OBFU_ZW_MANY 0.001
-score UNICODE_RTL_OBFU 1.499
-score UPPERCASE_URI 2.699
-score URIBL_CT_SURBL 1.624
+score UNICODE_OBFU_ZW_MANY 0.494
+score UPPERCASE_URI 3.099
+score URIBL_CT_SURBL 1.800
score URI_BUFFLY 1.999
-score URI_CLOUDFLAREIPFS 0.001
score URI_DOTEDU 1.999
-score URI_DOTTY_HEX 0.001
-score URI_DWEBIPFS 2.117
+score URI_DOTTY_HEX 0.727
+score URI_DWEBIPFS 1.410
score URI_EXCESS_SLASHES 2.499
-score URI_FIREBASEAPP 2.999
score URI_FLKIPFSXYZIPFS 3.499
score URI_GOOGDRAWPREVIEW_MINFP 3.499
score URI_GOOGLE_PROXY 0.001
score URI_GOOG_STO_SPAMMY 2.999
-score URI_IMG_CWINDOWSNET 1.123
-score URI_IPFS 1.086
-score URI_IPFSIO 1.486
-score URI_PHISH 1.230
-score URI_PHP_REDIR 0.001
+score URI_IMG_CWINDOWSNET 1.648
+score URI_IPFS 0.001
+score URI_IPFSIO 3.237
+score URI_OPTOUT_3LD 1.303
+score URI_PHISH 0.001
+score URI_PHP_REDIR 2.705
score URI_TRY_3LD 1.999
-score URI_WPADMIN 2.399
-score URI_WP_HACKED 0.001
+score URI_WPADMIN 2.499
+score URI_WP_HACKED 3.499
score URI_WP_HACKED_2 0.001
-score VFY_ACCT_NORDNS 3.000
+score VFY_ACCT_NORDNS 2.999
score VISTA_COST 2.499
score VISTA_TONOM_EQ_TOLOC 2.499
+score WIKI_IMG 1.566
score WORD_INVIS_MANY 2.999
-score XFER_LOTSA_MONEY 0.001
+score XFER_LOTSA_MONEY 1.000
score XM_RANDOM 2.499
-score XPRIO 2.249
-score YOUR_PERMISSION 2.399
+score XPRIO 2.250
+score YOUR_PERMISSION 1.092
score YOU_INHERIT 2.399
+score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -286,13 +292,13 @@ score AC_SPAMMY_URI_PATTERNS4 1.0
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADULT_DATING_COMPANY 10.000
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.000
score APP_DEVELOPMENT_FREEM 1.000
score APP_DEVELOPMENT_NORDNS 1.000
score BEBEE_IMG_NOT_RCVD_BB 1.000
score BITCOIN_BOMB 1.000
-score BITCOIN_EXTORT_02 1.000
+score BITCOIN_DEADLINE 1.000
score BITCOIN_IMGUR 1.000
-score BITCOIN_MALWARE 1.000
score BITCOIN_OBFU_SUBJ 1.000
score BITCOIN_PAY_ME 1.000
score BITCOIN_SPAM_01 1.000
@@ -302,16 +308,20 @@ score BITCOIN_SPAM_10 1.0
score BITCOIN_SPAM_11 1.000
score BITCOIN_SPAM_12 1.000
score BITCOIN_SPF_ONLYALL 1.000
+score BOGUS_MSM_HDRS 1.000
score BOMB_FREEM 1.000
score BOMB_MONEY 1.000
score BTC_ORG 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
score DAY_I_EARNED 1.000
+score DKIMWL_BL 1.000
score DKIMWL_BLOCKED 0.001
score DOTGOV_IMAGE 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000
score ENVFROM_GOOG_TRIX 1.000
+score FBI_MONEY 1.000
+score FBI_SPOOF 1.000
score FONT_INVIS_DIRECT 1.000
score FONT_INVIS_DOTGOV 1.000
score FONT_INVIS_HTML_NOHTML 1.000
@@ -320,6 +330,7 @@ score FRNAME_IN_MSG_XPRIO_NO_SUB 1.0
score FROM_BANK_NOAUTH 1.000
score FROM_FMBLA_NDBLOCKED 0.001
score FROM_GOV_REPLYTO_FREEMAIL 1.000
+score FROM_GOV_SPOOF 1.000
score FROM_NEWDOM_BTC 1.000
score FROM_NUMBERO_NEWDOMAIN 1.000
score FROM_PAYPAL_SPOOF 1.000
@@ -330,6 +341,7 @@ score GOOGLE_DOCS_PHISH 1.0
score GOOGLE_DOCS_PHISH_MANY 1.000
score GOOGLE_DOC_SUSP 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000
+score GOOG_MALWARE_DNLD 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
@@ -337,9 +349,9 @@ score HAS_X_OUTGOING_SPAM_STAT 1.0
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HREF_EMPTY_PHPMAIL 1.000
-score HTML_BADATTR 1.000
score HTML_OFF_PAGE 1.000
score HTML_SHRT_CMNT_OBFU_MANY 1.000
score JH_SPAMMY_PATTERN01 1.000
@@ -352,7 +364,6 @@ score MALF_HTML_B64 1.0
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
score MIXED_AREA_CASE 1.000
-score MIXED_CENTER_CASE 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
score MONERO_EXTORT_01 1.000
@@ -361,7 +372,6 @@ score MONERO_PAY_ME 1.0
score MSGID_DOLLARS_URI_IMG 1.000
score MSGID_HDR_MALF 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
-score NEW_PRODUCTS 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -378,7 +388,6 @@ score RDNS_NUM_TLD_XM 1.0
score REPTO_419_FRAUD_AOL 1.000
score REPTO_419_FRAUD_AOL_LOOSE 1.000
score REPTO_419_FRAUD_CNS 1.000
-score REPTO_419_FRAUD_GM_LOOSE 1.000
score REPTO_419_FRAUD_OL 1.000
score REPTO_419_FRAUD_PM 1.000
score REPTO_419_FRAUD_QQ 1.000
@@ -400,21 +409,22 @@ score TAGSTAT_IMG_NOT_RCVD_TGST 1.0
score TARINGANET_IMG_NOT_RCVD_TN 1.000
score THIS_IS_ADV_SUSP_NTLD 1.000
score TONLINE_FAKE_DKIM 1.000
-score TO_NAME_SUBJ_NO_RDNS 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
+score UNICODE_RTL_OBFU 1.000
score UNSUB_GOOG_FORM 1.000
score URI_ADOBESPARK 1.000
score URI_AZURE_CLOUDAPP 1.000
+score URI_CLOUDFLAREIPFS 1.000
score URI_DASHGOVEDU 1.000
score URI_DATA 1.000
score URI_DOTEDU_ENTITY 1.000
+score URI_FIREBASEAPP 1.000
score URI_GOOGDRAWPREVIEW 1.000
score URI_HEX_IP 1.000
score URI_IMG_WP_REDIR 1.000
score URI_LONG_REPEAT 1.000
score URI_ONLY_MSGID_MALF 1.000
-score URI_OPTOUT_3LD 1.000
score URI_TRY_USME 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1922503&r1=1922502&r2=1922503&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Dec 15 02:50:12 2024
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 260565 35.375% (99.249% of non-spam corpus)
-# Correctly spam: 336512 45.686% (70.989% of spam corpus)
-# False positives: 1971 0.268% (0.751% of nonspam, 108090 weighted)
-# False negatives: 137525 18.671% (29.011% of spam, 328195 weighted)
+# Correctly non-spam: 260550 35.373% (99.244% of non-spam corpus)
+# Correctly spam: 336661 45.706% (71.020% of spam corpus)
+# False positives: 1986 0.270% (0.756% of nonspam, 108727 weighted)
+# False negatives: 137375 18.651% (28.980% of spam, 326414 weighted)
# Average score for spam: 8.3 nonspam: 0.7
# Average for false-pos: 6.1 false-neg: 2.4
-# TOTAL: 736573 100.00%
+# TOTAL: 736572 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 32593 99.31%
-# Correctly spam: 42064 71.12%
-# False positives: 225 0.69%
-# False negatives: 17085 28.88%
-# TCR(l=50): 2.087489 SpamRecall: 71.115% SpamPrec: 99.468%
+# Correctly non-spam: 32592 99.31%
+# Correctly spam: 42121 71.21%
+# False positives: 226 0.69%
+# False negatives: 17028 28.79%
+# TCR(l=50): 2.088005 SpamRecall: 71.212% SpamPrec: 99.466%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 256417 97.67%
-# Correctly spam: 178515 37.66%
+# Correctly spam: 178464 37.65%
# False positives: 6119 2.33%
-# False negatives: 295522 62.34%
-# TCR(l=50): 0.788128 SpamRecall: 37.658% SpamPrec: 96.686%
+# False negatives: 295572 62.35%
+# TCR(l=50): 0.788061 SpamRecall: 37.648% SpamPrec: 96.685%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 32095 97.80%
-# Correctly spam: 22283 37.67%
+# Correctly spam: 22309 37.72%
# False positives: 723 2.20%
-# False negatives: 36866 62.33%
-# TCR(l=50): 0.810083 SpamRecall: 37.673% SpamPrec: 96.857%
+# False negatives: 36840 62.28%
+# TCR(l=50): 0.810371 SpamRecall: 37.717% SpamPrec: 96.861%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1922503&r1=1922502&r2=1922503&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Dec 15 02:50:12 2024
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 230242 40.046% (99.191% of non-spam corpus)
-# Correctly spam: 287835 50.063% (83.959% of spam corpus)
-# False positives: 1877 0.326% (0.809% of nonspam, 222236 weighted)
-# False negatives: 54993 9.565% (16.041% of spam, 125227 weighted)
-# Average score for spam: 12.0 nonspam: -0.5
-# Average for false-pos: 8.0 false-neg: 2.3
-# TOTAL: 574947 100.00%
+# Correctly non-spam: 227254 37.245% (99.307% of non-spam corpus)
+# Correctly spam: 312607 51.234% (81.981% of spam corpus)
+# False positives: 1585 0.260% (0.693% of nonspam, 223254 weighted)
+# False negatives: 68710 11.261% (18.019% of spam, 162849 weighted)
+# Average score for spam: 11.5 nonspam: -0.6
+# Average for false-pos: 8.5 false-neg: 2.4
+# TOTAL: 610156 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 28827 99.14%
-# Correctly spam: 35869 83.95%
-# False positives: 250 0.86%
-# False negatives: 6856 16.05%
-# TCR(l=50): 2.207326 SpamRecall: 83.953% SpamPrec: 99.308%
+# Correctly non-spam: 28473 99.31%
+# Correctly spam: 39031 82.11%
+# False positives: 198 0.69%
+# False negatives: 8502 17.89%
+# TCR(l=50): 2.583034 SpamRecall: 82.113% SpamPrec: 99.495%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 230689 99.38%
-# Correctly spam: 176882 51.59%
-# False positives: 1430 0.62%
-# False negatives: 165946 48.41%
-# TCR(l=50): 1.443815 SpamRecall: 51.595% SpamPrec: 99.198%
+# Correctly non-spam: 227654 99.48%
+# Correctly spam: 185227 48.58%
+# False positives: 1185 0.52%
+# False negatives: 196090 51.42%
+# TCR(l=50): 1.493370 SpamRecall: 48.576% SpamPrec: 99.364%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 28890 99.36%
-# Correctly spam: 22013 51.52%
-# False positives: 187 0.64%
-# False negatives: 20712 48.48%
-# TCR(l=50): 1.421229 SpamRecall: 51.523% SpamPrec: 99.158%
+# Correctly non-spam: 28530 99.51%
+# Correctly spam: 23124 48.65%
+# False positives: 141 0.49%
+# False negatives: 24409 51.35%
+# TCR(l=50): 1.510951 SpamRecall: 48.648% SpamPrec: 99.394%