You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2018/11/28 03:24:31 UTC
svn commit: r1847604 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Wed Nov 28 03:24:31 2018
New Revision: 1847604
URL: http://svn.apache.org/viewvc?rev=1847604&view=rev
Log:
updated scores for revision 1847520 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Wed Nov 28 03:24:31 2018
@@ -1,6 +1,6 @@
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_HTML_NONSENSE_TAGS 1.999 1.999 1.999 1.999
+score AC_HTML_NONSENSE_TAGS 1.999 2.000 1.999 2.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000
@@ -12,103 +12,106 @@ score AC_SPAMMY_URI_PATTERNS8
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_MONEY 1.999 0.001 1.999 0.001
-score ADVANCE_FEE_3_NEW 3.000 2.968 3.000 2.968
-score ADVANCE_FEE_3_NEW_MONEY 2.802 1.785 2.802 1.785
+score ADVANCE_FEE_3_NEW 2.318 2.966 2.318 2.966
+score ADVANCE_FEE_3_NEW_MONEY 3.144 1.483 3.144 1.483
score ADVANCE_FEE_4_NEW 2.799 0.001 2.799 0.001
+score ADVANCE_FEE_4_NEW_MONEY 1.999 0.001 1.999 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.348 0.001 0.348 0.001
score AD_PREFS 0.001 0.001 0.001 0.001
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
+score BIGNUM_EMAILS 1.023 0.001 1.023 0.001
score BITCOIN_EXTORT_01 4.999 4.999 4.999 4.999
score BITCOIN_MALWARE 2.999 2.999 2.999 2.999
-score BITCOIN_PAY_ME 2.500 2.499 2.500 2.499
-score BITCOIN_SPAM_01 0.001 1.263 0.001 1.263
-score BITCOIN_SPAM_02 2.499 2.228 2.499 2.228
+score BITCOIN_PAY_ME 2.499 2.499 2.499 2.499
+score BITCOIN_SPAM_01 0.001 1.261 0.001 1.261
+score BITCOIN_SPAM_02 2.499 2.499 2.499 2.499
score BITCOIN_SPAM_03 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_04 1.499 1.499 1.499 1.499
+score BITCOIN_SPAM_04 1.500 1.499 1.500 1.499
score BITCOIN_SPAM_05 2.499 1.000 2.499 1.000
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07 1.499 1.499 1.499 1.499
+score BITCOIN_SPAM_07 1.499 1.500 1.499 1.500
score BITCOIN_SPAM_08 1.499 1.499 1.499 1.499
-score BITCOIN_SPAM_09 1.291 0.735 1.291 0.735
-score BODY_EMPTY 1.999 0.001 1.999 0.001
-score BODY_SINGLE_WORD 2.499 2.390 2.499 2.390
-score BODY_URI_ONLY 1.000 0.999 1.000 0.999
-score BOGUS_MSM_HDRS 1.717 1.980 1.717 1.980
+score BITCOIN_SPAM_09 1.499 0.506 1.499 0.506
+score BODY_SINGLE_URI 0.897 0.001 0.897 0.001
+score BODY_SINGLE_WORD 2.499 2.389 2.499 2.389
+score BODY_URI_ONLY 0.999 0.999 0.999 0.999
+score BOGUS_MSM_HDRS 1.440 0.381 1.440 0.381
score CANT_SEE_AD 1.000 1.000 1.000 1.000
score CK_HELO_DYNAMIC_SPLIT_IP 1.499 0.001 1.499 0.001
score CK_HELO_GENERIC 0.250 0.250 0.250 0.250
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score DKIMWL_BL 0.875 2.157 0.875 2.157
-score DKIMWL_WL_HIGH 0.001 -1.460 0.001 -1.460
+score DATE_IN_FUTURE_96_Q 2.899 2.900 2.899 2.900
+score DKIMWL_BL 1.868 2.159 1.868 2.159
+score DKIMWL_WL_HIGH 0.001 -1.459 0.001 -1.459
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
-score DX_TEXT_03 1.683 1.699 1.683 1.699
+score DX_TEXT_03 1.683 1.700 1.683 1.700
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
-score FBI_MONEY 1.814 1.617 1.814 1.617
-score FBI_SPOOF 1.477 1.413 1.477 1.413
-score FILL_THIS_FORM 0.307 0.001 0.307 0.001
-score FORM_FRAUD 0.445 0.804 0.445 0.804
-score FORM_FRAUD_3 1.505 0.001 1.505 0.001
-score FORM_FRAUD_5 0.846 0.001 0.846 0.001
+score FBI_MONEY 0.608 0.813 0.608 0.813
+score FBI_SPOOF 1.883 0.293 1.883 0.293
+score FILL_THIS_FORM 0.001 0.001 0.001 0.001
+score FORM_FRAUD 0.515 0.881 0.515 0.881
+score FORM_FRAUD_3 1.343 0.001 1.343 0.001
+score FORM_FRAUD_5 0.702 0.001 0.702 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 0.633 0.001 0.633 0.001
-score FREEMAIL_DISPTO 0.250 0.250 0.250 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.249 0.249 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749 3.749 3.749 3.749
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499 2.500 2.499 2.500
-score FROM_ADDR_WS 2.600 2.156 2.600 2.156
-score FROM_IN_TO_AND_SUBJ 3.509 1.849 3.509 1.849
-score FROM_MISSP_FREEMAIL 2.797 1.580 2.797 1.580
+score FOUND_YOU 0.401 0.001 0.401 0.001
+score FREEMAIL_DISPTO 0.249 0.250 0.249 0.250
+score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.250 0.249 0.250
+score FREEM_FRNUM_UNICD_EMPTY 3.309 3.140 3.309 3.140
+score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499 2.499 2.499 2.499
+score FROM_ADDR_WS 1.742 2.092 1.742 2.092
+score FROM_IN_TO_AND_SUBJ 3.138 0.630 3.138 0.630
+score FROM_MISSP_FREEMAIL 2.799 1.580 2.799 1.580
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
-score FROM_MISSP_TO_UNDISC 0.001 0.001 0.001 0.001
+score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001
score FROM_WORDY 1.000 1.000 1.000 1.000
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
-score FROM_WSP_LEAD 0.001 0.001 0.001 0.001
-score FROM_WSP_TRAIL 2.553 2.899 2.553 2.899
+score FROM_WSP_LEAD 0.644 0.001 0.644 0.001
+score FROM_WSP_TRAIL 2.613 2.899 2.613 2.899
score FSL_BULK_SIG 0.001 0.842 0.001 0.842
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
-score FSL_HELO_FAKE 3.999 3.799 3.999 3.799
+score FSL_HELO_FAKE 3.799 3.800 3.799 3.800
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_CLICK_HERE 3.599 2.315 3.599 2.315
+score FUZZY_CLICK_HERE 3.599 0.686 3.599 0.686
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.999 1.999 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.124 3.017 3.124 3.017
+score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.164 1.999 1.164
+score HDR_ORDER_FTSDMCXX_NORDNS 2.619 3.258 2.619 3.258
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
-score HELO_MISC_IP 0.249 0.001 0.249 0.001
+score HELO_MISC_IP 0.250 0.001 0.250 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
-score HK_CTE_RAW 1.000 0.001 1.000 0.001
-score HK_SCAM_N2 1.147 0.001 1.147 0.001
-score HK_SCAM_S7 2.087 3.099 2.087 3.099
+score HK_SCAM_N3 2.999 2.899 2.999 2.899
+score HK_SCAM_S7 2.086 3.073 2.086 3.073
score HTML_ENTITY_ASCII 2.999 2.954 2.999 2.954
-score HTML_ENTITY_ASCII_TINY 2.003 2.912 2.003 2.912
-score HTML_OFF_PAGE 2.803 2.999 2.803 2.999
-score IMG_ONLY_FM_DOM_INFO 2.198 0.500 2.198 0.500
-score KB_FORGED_MOZ4 3.207 2.703 3.207 2.703
+score HTML_ENTITY_ASCII_TINY 2.001 2.140 2.001 2.140
+score HTML_OFF_PAGE 2.804 2.999 2.804 2.999
+score IMG_ONLY_FM_DOM_INFO 2.199 0.498 2.199 0.498
+score KB_FORGED_MOZ4 3.309 2.672 3.309 2.672
+score LIST_PARTIAL_SHORT_MSG 2.499 2.499 2.499 2.499
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
-score LIST_PRTL_SAME_USER 0.001 0.274 0.001 0.274
-score LONG_HEX_URI 1.801 1.484 1.801 1.484
+score LIST_PRTL_SAME_USER 0.001 0.273 0.001 0.273
+score LONG_HEX_URI 1.799 1.485 1.799 1.485
score LONG_IMG_URI 0.001 0.001 0.001 0.001
score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
score LUCRATIVE 1.000 1.000 1.000 1.000
-score MALF_HTML_B64 2.871 2.182 2.871 2.182
-score MILLION_USD 0.400 0.001 0.400 0.001
+score MALF_HTML_B64 3.279 2.460 3.279 2.460
score MIMEOLE_DIRECT_TO_MX 1.999 1.999 1.999 1.999
-score MIME_NO_TEXT 1.782 1.999 1.782 1.999
-score MONEY_FORM_SHORT 2.499 2.091 2.499 2.091
+score MIME_NO_TEXT 1.783 1.999 1.783 1.999
+score MONEY_FORM_SHORT 2.499 2.089 2.499 2.089
score MONEY_FRAUD_3 3.099 2.999 3.099 2.999
-score MONEY_FRAUD_5 1.838 0.001 1.838 0.001
-score MONEY_FRAUD_8 3.493 1.037 3.493 1.037
-score MONEY_FROM_MISSP 0.252 0.001 0.252 0.001
-score MSM_PRIO_REPTO 2.252 1.941 2.252 1.941
-score NO_FM_NAME_IP_HOSTN 2.499 2.500 2.499 2.500
-score NSL_RCVD_HELO_USER 2.013 0.001 2.013 0.001
-score OBFU_BITCOIN 2.999 2.999 2.999 2.999
+score MONEY_FRAUD_5 1.552 0.301 1.552 0.301
+score MONEY_FRAUD_8 3.452 0.643 3.452 0.643
+score MONEY_FROM_41 1.999 1.999 1.999 1.999
+score MSM_PRIO_REPTO 1.630 1.405 1.630 1.405
+score NO_FM_NAME_IP_HOSTN 2.499 2.126 2.499 2.126
+score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
+score OBFU_BITCOIN 3.000 2.999 3.000 2.999
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 2.499 2.287 2.499 2.287
+score PHP_ORIG_SCRIPT 2.399 2.286 2.399 2.286
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
@@ -127,49 +130,52 @@ score RCVD_IN_MSPIKE_L4
score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
-score RDNS_NUM_TLD_ATCHNX 2.492 0.785 2.492 0.785
-score RDNS_NUM_TLD_XM 2.999 0.809 2.999 0.809
+score RDNS_NUM_TLD_ATCHNX 2.966 1.831 2.966 1.831
+score RDNS_NUM_TLD_XM 2.999 0.266 2.999 0.266
+score SERGIO_SUBJECT_PORN014 2.087 0.001 2.087 0.001
+score SERGIO_SUBJECT_VIAGRA01 3.215 0.001 3.215 0.001
score SINGLETS_LOW_CONTRAST 0.001 0.001 0.001 0.001
score SPOOFED_FREEM_REPTO 2.499 2.499 2.499 2.499
-score SPOOFED_FREEM_REPTO_CHN 2.489 1.000 2.489 1.000
+score SPOOFED_FREEM_REPTO_CHN 1.964 1.000 1.964 1.000
score SPOOFED_FREEM_REPTO_RUS 1.000 1.000 1.000 1.000
-score STATIC_XPRIO_OLE 1.999 0.843 1.999 0.843
-score STOCK_LOW_CONTRAST 2.083 2.499 2.083 2.499
+score STATIC_XPRIO_OLE 1.999 1.892 1.999 1.892
+score STOCK_LOW_CONTRAST 2.082 2.499 2.082 2.499
score STOCK_TIP 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 2.798 0.001 2.798 0.001
-score SUBJ_OBFU_PUNCT_FEW 0.750 0.001 0.750 0.001
-score SUBJ_OBFU_PUNCT_MANY 1.450 1.749 1.450 1.749
+score STYLE_GIBBERISH 2.797 0.001 2.797 0.001
+score SUBJ_OBFU_PUNCT_FEW 0.749 0.001 0.749 0.001
+score SUBJ_OBFU_PUNCT_MANY 1.289 1.749 1.289 1.749
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
-score TEQF_USR_IMAGE 1.523 0.001 1.523 0.001
-score THIS_AD 1.885 1.119 1.885 1.119
-score TO_EQ_FM_DIRECT_MX 2.499 2.499 2.499 2.499
+score TEQF_USR_IMAGE 2.273 0.001 2.273 0.001
+score THIS_AD 1.886 1.183 1.886 1.183
+score TO_EQ_FM_DIRECT_MX 2.499 1.660 2.499 1.660
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.685 2.999 2.685 2.999
+score TO_NAME_SUBJ_NO_RDNS 2.915 2.999 2.915 2.999
+score TO_NO_BRKTS_FROM_MSSP 1.552 0.001 1.552 0.001
score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_MSFT 0.001 2.499 0.001 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.400 0.650 0.400 0.650
+score TO_NO_BRKTS_NORDNS_HTML 0.400 0.649 0.400 0.649
score TO_NO_BRKTS_PCNT 2.499 1.000 2.499 1.000
-score TVD_SPACE_ENCODED 2.499 2.500 2.499 2.500
+score TVD_SPACE_ENCODED 2.499 2.499 2.499 2.499
+score TVD_SPACE_RATIO_MINFP 2.500 2.500 2.500 2.500
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score UNICODE_OBFU_DOM_NO_BODY 3.730 0.001 3.730 0.001
-score UNICODE_OBFU_ZW 1.241 1.189 1.241 1.189
+score UNICODE_OBFU_ZW 2.847 2.682 2.847 2.682
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_GOOGLE_PROXY 1.530 2.299 1.530 2.299
-score URI_ONLY_MSGID_MALF 1.999 1.999 1.999 1.999
+score URI_GOOGLE_PROXY 1.456 2.299 1.456 2.299
+score URI_ONLY_MSGID_MALF 1.999 2.000 1.999 2.000
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.999 3.894 3.999 3.894
-score URI_TRY_3LD 0.001 0.465 0.001 0.465
-score URI_WPADMIN 2.500 2.400 2.500 2.400
-score URI_WP_DIRINDEX 2.804 1.000 2.804 1.000
+score URI_PHISH 3.999 3.892 3.999 3.892
+score URI_TRY_3LD 0.001 0.464 0.001 0.464
+score URI_WPADMIN 2.599 2.400 2.599 2.400
+score URI_WP_DIRINDEX 2.991 1.000 2.991 1.000
score URI_WP_HACKED 3.499 1.000 3.499 1.000
-score URI_WP_HACKED_2 2.194 1.856 2.194 1.856
+score URI_WP_HACKED_2 2.192 1.856 2.192 1.856
score USB_DRIVES 1.000 1.000 1.000 1.000
-score XPRIO 2.250 2.246 2.250 2.246
-score XPRIO_SHORT_SUBJ 2.499 2.500 2.499 2.500
-score ZW_OBFU_BITCOIN 2.131 1.896 2.131 1.896
-score ZW_OBFU_FROMTOSUBJ 1.370 1.999 1.370 1.999
+score XPRIO 2.249 2.246 2.249 2.246
+score XPRIO_SHORT_SUBJ 2.348 2.499 2.348 2.499
+score ZW_OBFU_BITCOIN 1.747 2.179 1.747 2.179
+score ZW_OBFU_FROMTOSUBJ 0.516 0.339 0.516 0.339
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Wed Nov 28 03:24:31 2018
@@ -1,122 +1,128 @@
-# Using score set 0 logs for revision 1847456 from:
+# Using score set 0 logs for revision 1847520 from:
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-giovanni-ham.log ham-giovanni-spam.log ham-giovanni-spammy.log ham-grenier.log ham-hege.log ham-jarif.log ham-jbrooks.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-giovanni-ham.log spam-giovanni-spam.log spam-giovanni-spammy.log spam-grenier.log spam-hege.log spam-jarif.log spam-jbrooks.log spam-sihde.log spam-thendrikx.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.999
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.000
-score ADVANCE_FEE_3_NEW_MONEY 2.802
+score ADVANCE_FEE_3_NEW 2.318
+score ADVANCE_FEE_3_NEW_MONEY 3.144
score ADVANCE_FEE_4_NEW 2.799
-score AD_PREFS 0.001 # force non-zero
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score ADVANCE_FEE_4_NEW_MONEY 1.999
+score ADVANCE_FEE_5_NEW_MONEY 0.348
+score AD_PREFS 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score BIGNUM_EMAILS 1.023
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.500
-score BITCOIN_SPAM_01 0.001 # force non-zero
+score BITCOIN_PAY_ME 2.499
+score BITCOIN_SPAM_01 0.001
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_04 1.499
+score BITCOIN_SPAM_04 1.500
score BITCOIN_SPAM_05 2.499
score BITCOIN_SPAM_07 1.499
score BITCOIN_SPAM_08 1.499
-score BITCOIN_SPAM_09 1.291
-score BODY_EMPTY 1.999
+score BITCOIN_SPAM_09 1.499
+score BODY_SINGLE_URI 0.897
score BODY_SINGLE_WORD 2.499
-score BODY_URI_ONLY 1.000
-score BOGUS_MSM_HDRS 1.717
+score BODY_URI_ONLY 0.999
+score BOGUS_MSM_HDRS 1.440
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
score CK_HELO_GENERIC 0.250
-score DKIMWL_BL 0.875
+score DATE_IN_FUTURE_96_Q 2.899
+score DKIMWL_BL 1.868
score DX_TEXT_03 1.683
-score FBI_MONEY 1.814
-score FBI_SPOOF 1.477
-score FILL_THIS_FORM 0.307
-score FORM_FRAUD 0.445
-score FORM_FRAUD_3 1.505
-score FORM_FRAUD_5 0.846
-score FOUND_YOU 0.633
-score FREEMAIL_DISPTO 0.250
+score FBI_MONEY 0.608
+score FBI_SPOOF 1.883
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD 0.515
+score FORM_FRAUD_3 1.343
+score FORM_FRAUD_5 0.702
+score FOUND_YOU 0.401
+score FREEMAIL_DISPTO 0.249
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FREEM_FRNUM_UNICD_EMPTY 3.309
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
-score FROM_ADDR_WS 2.600
-score FROM_IN_TO_AND_SUBJ 3.509
-score FROM_MISSP_FREEMAIL 2.797
+score FROM_ADDR_WS 1.742
+score FROM_IN_TO_AND_SUBJ 3.138
+score FROM_MISSP_FREEMAIL 2.799
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_TO_UNDISC 0.001
+score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_WSP_LEAD 0.001
-score FROM_WSP_TRAIL 2.553
+score FROM_WSP_LEAD 0.644
+score FROM_WSP_TRAIL 2.613
score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 3.999
+score FSL_HELO_FAKE 3.799
score FSL_NEW_HELO_USER 0.001
score FUZZY_CLICK_HERE 3.599
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.124
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HELO_MISC_IP 0.249
-score HK_CTE_RAW 1.000
-score HK_SCAM_N2 1.147
-score HK_SCAM_S7 2.087
+score HDR_ORDER_FTSDMCXX_NORDNS 2.619
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HELO_MISC_IP 0.250
+score HK_SCAM_N3 2.999
+score HK_SCAM_S7 2.086
score HTML_ENTITY_ASCII 2.999
-score HTML_ENTITY_ASCII_TINY 2.003
-score HTML_OFF_PAGE 2.803
-score IMG_ONLY_FM_DOM_INFO 2.198
-score KB_FORGED_MOZ4 3.207
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
-score LONG_HEX_URI 1.801
+score HTML_ENTITY_ASCII_TINY 2.001
+score HTML_OFF_PAGE 2.804
+score IMG_ONLY_FM_DOM_INFO 2.199
+score KB_FORGED_MOZ4 3.309
+score LIST_PARTIAL_SHORT_MSG 2.499
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 1.799
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.001 # force non-zero
-score MALF_HTML_B64 2.871
-score MILLION_USD 0.400
+score MALF_HTML_B64 3.279
score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.782
+score MIME_NO_TEXT 1.783
score MONEY_FORM_SHORT 2.499
score MONEY_FRAUD_3 3.099
-score MONEY_FRAUD_5 1.838
-score MONEY_FRAUD_8 3.493
-score MONEY_FROM_MISSP 0.252
-score MSM_PRIO_REPTO 2.252
+score MONEY_FRAUD_5 1.552
+score MONEY_FRAUD_8 3.452
+score MONEY_FROM_41 1.999
+score MSM_PRIO_REPTO 1.630
score NO_FM_NAME_IP_HOSTN 2.499
-score NSL_RCVD_HELO_USER 2.013
-score OBFU_BITCOIN 2.999
-score PHP_ORIG_SCRIPT 2.499
+score NSL_RCVD_FROM_USER 0.001
+score OBFU_BITCOIN 3.000
+score PHP_ORIG_SCRIPT 2.399
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RDNS_NUM_TLD_ATCHNX 2.492
+score RDNS_NUM_TLD_ATCHNX 2.966
score RDNS_NUM_TLD_XM 2.999
+score SERGIO_SUBJECT_PORN014 2.087
+score SERGIO_SUBJECT_VIAGRA01 3.215
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 2.489
+score SPOOFED_FREEM_REPTO_CHN 1.964
score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 2.083
-score STYLE_GIBBERISH 2.798
-score SUBJ_OBFU_PUNCT_FEW 0.750
-score SUBJ_OBFU_PUNCT_MANY 1.450
-score TEQF_USR_IMAGE 1.523
-score THIS_AD 1.885
+score STOCK_LOW_CONTRAST 2.082
+score STYLE_GIBBERISH 2.797
+score SUBJ_OBFU_PUNCT_FEW 0.749
+score SUBJ_OBFU_PUNCT_MANY 1.289
+score TEQF_USR_IMAGE 2.273
+score THIS_AD 1.886
score TO_EQ_FM_DIRECT_MX 2.499
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.685
+score TO_NAME_SUBJ_NO_RDNS 2.915
+score TO_NO_BRKTS_FROM_MSSP 1.552
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 0.400
score TO_NO_BRKTS_PCNT 2.499
score TVD_SPACE_ENCODED 2.499
-score UNICODE_OBFU_DOM_NO_BODY 3.730
-score UNICODE_OBFU_ZW 1.241
-score URI_GOOGLE_PROXY 1.530
+score TVD_SPACE_RATIO_MINFP 2.500
+score UNICODE_OBFU_ZW 2.847
+score URI_GOOGLE_PROXY 1.456
score URI_ONLY_MSGID_MALF 1.999
score URI_PHISH 3.999
score URI_TRY_3LD 0.001
-score URI_WPADMIN 2.500
-score URI_WP_DIRINDEX 2.804
+score URI_WPADMIN 2.599
+score URI_WP_DIRINDEX 2.991
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.194
-score XPRIO 2.250
-score XPRIO_SHORT_SUBJ 2.499
-score ZW_OBFU_BITCOIN 2.131
-score ZW_OBFU_FROMTOSUBJ 1.370
+score URI_WP_HACKED_2 2.192
+score XPRIO 2.249
+score XPRIO_SHORT_SUBJ 2.348
+score ZW_OBFU_BITCOIN 1.747
+score ZW_OBFU_FROMTOSUBJ 0.516
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Wed Nov 28 03:24:31 2018
@@ -2,109 +2,121 @@
# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-darxus.log ham-net-ena-week0.log ham-net-ena-week1.log ham-net-ena-week2.log ham-net-ena-week3.log ham-net-ena-week4.log ham-net-giovanni-ham.log ham-net-giovanni-spam.log ham-net-giovanni-spammy.log ham-net-grenier.log ham-net-hege.log ham-net-jarif.log ham-net-sihde.log ham-net-thendrikx.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-darxus.log spam-net-ena-week0.log spam-net-ena-week1.log spam-net-ena-week2.log spam-net-ena-week3.log spam-net-ena-week4.log spam-net-giovanni-ham.log spam-net-giovanni-spam.log spam-net-giovanni-spammy.log spam-net-grenier.log spam-net-hege.log spam-net-jarif.log spam-net-sihde.log spam-net-thendrikx.log
score AC_DIV_BONANZA 0.001
-score AC_HTML_NONSENSE_TAGS 1.999
+score AC_HTML_NONSENSE_TAGS 2.000
score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 2.968
-score ADVANCE_FEE_3_NEW_MONEY 1.785
+score ADVANCE_FEE_3_NEW 2.966
+score ADVANCE_FEE_3_NEW_MONEY 1.483
score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.001
score AD_PREFS 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score BIGNUM_EMAILS 0.001
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
score BITCOIN_PAY_ME 2.499
-score BITCOIN_SPAM_01 1.263
-score BITCOIN_SPAM_02 2.228
+score BITCOIN_SPAM_01 1.261
+score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_04 1.499
-score BITCOIN_SPAM_07 1.499
+score BITCOIN_SPAM_07 1.500
score BITCOIN_SPAM_08 1.499
-score BITCOIN_SPAM_09 0.735
-score BODY_SINGLE_WORD 2.390
+score BITCOIN_SPAM_09 0.506
+score BODY_SINGLE_URI 0.001
+score BODY_SINGLE_WORD 2.389
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 1.980
+score BOGUS_MSM_HDRS 0.381
score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score CK_HELO_GENERIC 0.250
-score DKIMWL_BL 2.157
-score DKIMWL_WL_HIGH -1.460
+score DATE_IN_FUTURE_96_Q 2.900
+score DKIMWL_BL 2.159
+score DKIMWL_WL_HIGH -1.459
score DKIMWL_WL_MED -0.001
-score DX_TEXT_03 1.699
-score FBI_MONEY 1.617
-score FBI_SPOOF 1.413
+score DX_TEXT_03 1.700
+score FBI_MONEY 0.813
+score FBI_SPOOF 0.293
score FILL_THIS_FORM 0.001
-score FORM_FRAUD 0.804
+score FORM_FRAUD 0.881
score FORM_FRAUD_5 0.001
score FOUND_YOU 0.001
score FREEMAIL_DISPTO 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.500
-score FROM_ADDR_WS 2.156
-score FROM_IN_TO_AND_SUBJ 1.849
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
+score FREEM_FRNUM_UNICD_EMPTY 3.140
+score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
+score FROM_ADDR_WS 2.092
+score FROM_IN_TO_AND_SUBJ 0.630
score FROM_MISSP_FREEMAIL 1.580
score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_USER 0.001 # force non-zero
score FROM_MISSP_XPRIO 0.001
score FROM_WSP_TRAIL 2.899
score FSL_BULK_SIG 0.842
score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 3.799
-score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.315
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.017
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score FSL_HELO_FAKE 3.800
+score FSL_NEW_HELO_USER 0.001 # force non-zero
+score FUZZY_CLICK_HERE 0.686
+score HDR_ORDER_FTSDMCXX_DIRECT 1.164
+score HDR_ORDER_FTSDMCXX_NORDNS 3.258
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HELO_MISC_IP 0.001
-score HK_SCAM_S7 3.099
+score HK_SCAM_N3 2.899
+score HK_SCAM_S7 3.073
score HTML_ENTITY_ASCII 2.954
-score HTML_ENTITY_ASCII_TINY 2.912
+score HTML_ENTITY_ASCII_TINY 2.140
score HTML_OFF_PAGE 2.999
-score IMG_ONLY_FM_DOM_INFO 0.500
-score KB_FORGED_MOZ4 2.703
-score LIST_PRTL_SAME_USER 0.274
-score LONG_HEX_URI 1.484
+score IMG_ONLY_FM_DOM_INFO 0.498
+score KB_FORGED_MOZ4 2.672
+score LIST_PARTIAL_SHORT_MSG 2.499
+score LIST_PRTL_SAME_USER 0.273
+score LONG_HEX_URI 1.485
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
-score MALF_HTML_B64 2.182
+score MALF_HTML_B64 2.460
score MIMEOLE_DIRECT_TO_MX 1.999
score MIME_NO_TEXT 1.999
-score MONEY_FORM_SHORT 2.091
+score MONEY_FORM_SHORT 2.089
score MONEY_FRAUD_3 2.999
-score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 1.037
-score MSM_PRIO_REPTO 1.941
-score NO_FM_NAME_IP_HOSTN 2.500
+score MONEY_FRAUD_5 0.301
+score MONEY_FRAUD_8 0.643
+score MONEY_FROM_41 1.999
+score MSM_PRIO_REPTO 1.405
+score NO_FM_NAME_IP_HOSTN 2.126
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
score OBFU_BITCOIN 2.999
-score PHP_ORIG_SCRIPT 2.287
+score PHP_ORIG_SCRIPT 2.286
score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
-score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_ATCHNX 0.785
-score RDNS_NUM_TLD_XM 0.809
+score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RDNS_NUM_TLD_ATCHNX 1.831
+score RDNS_NUM_TLD_XM 0.266
+score SERGIO_SUBJECT_VIAGRA01 0.001
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEM_REPTO 2.499
-score STATIC_XPRIO_OLE 0.843
+score STATIC_XPRIO_OLE 1.892
score STOCK_LOW_CONTRAST 2.499
-score STYLE_GIBBERISH 0.001 # force non-zero
+score STYLE_GIBBERISH 0.001
score SUBJ_OBFU_PUNCT_MANY 1.749
-score THIS_AD 1.119
-score TO_EQ_FM_DIRECT_MX 2.499
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 # force non-zero
-score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score THIS_AD 1.183
+score TO_EQ_FM_DIRECT_MX 1.660
+score TO_EQ_FM_DOM_SPF_FAIL 0.001
+score TO_EQ_FM_SPF_FAIL 0.001
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NO_BRKTS_FROM_MSSP 0.001 # force non-zero
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.650
-score TVD_SPACE_ENCODED 2.500
-score UNICODE_OBFU_ZW 1.189
+score TO_NO_BRKTS_NORDNS_HTML 0.649
+score TVD_SPACE_ENCODED 2.499
+score TVD_SPACE_RATIO_MINFP 2.500
+score UNICODE_OBFU_ZW 2.682
score URI_GOOGLE_PROXY 2.299
-score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.894
-score URI_TRY_3LD 0.465
+score URI_ONLY_MSGID_MALF 2.000
+score URI_PHISH 3.892
+score URI_TRY_3LD 0.464
score URI_WPADMIN 2.400
score URI_WP_HACKED_2 1.856
score XPRIO 2.246
-score XPRIO_SHORT_SUBJ 2.500
-score ZW_OBFU_BITCOIN 1.896
-score ZW_OBFU_FROMTOSUBJ 1.999
+score XPRIO_SHORT_SUBJ 2.499
+score ZW_OBFU_BITCOIN 2.179
+score ZW_OBFU_FROMTOSUBJ 0.339
score AC_BR_BONANZA 0.001
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Wed Nov 28 03:24:31 2018
@@ -1,122 +1,128 @@
-# Using score set 0 logs for revision 1847456 from:
+# Using score set 0 logs for revision 1847520 from:
# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-darxus.log ham-ena-week0.log ham-ena-week1.log ham-ena-week2.log ham-ena-week3.log ham-ena-week4.log ham-giovanni-ham.log ham-giovanni-spam.log ham-giovanni-spammy.log ham-grenier.log ham-hege.log ham-jarif.log ham-jbrooks.log ham-sihde.log ham-thendrikx.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-darxus.log spam-ena-week0.log spam-ena-week1.log spam-ena-week2.log spam-ena-week3.log spam-ena-week4.log spam-giovanni-ham.log spam-giovanni-spam.log spam-giovanni-spammy.log spam-grenier.log spam-hege.log spam-jarif.log spam-jbrooks.log spam-sihde.log spam-thendrikx.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.999
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 3.000
-score ADVANCE_FEE_3_NEW_MONEY 2.802
+score ADVANCE_FEE_3_NEW 2.318
+score ADVANCE_FEE_3_NEW_MONEY 3.144
score ADVANCE_FEE_4_NEW 2.799
-score AD_PREFS 0.001 # force non-zero
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score ADVANCE_FEE_4_NEW_MONEY 1.999
+score ADVANCE_FEE_5_NEW_MONEY 0.348
+score AD_PREFS 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score BIGNUM_EMAILS 1.023
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
-score BITCOIN_PAY_ME 2.500
-score BITCOIN_SPAM_01 0.001 # force non-zero
+score BITCOIN_PAY_ME 2.499
+score BITCOIN_SPAM_01 0.001
score BITCOIN_SPAM_02 2.499
-score BITCOIN_SPAM_04 1.499
+score BITCOIN_SPAM_04 1.500
score BITCOIN_SPAM_05 2.499
score BITCOIN_SPAM_07 1.499
score BITCOIN_SPAM_08 1.499
-score BITCOIN_SPAM_09 1.291
-score BODY_EMPTY 1.999
+score BITCOIN_SPAM_09 1.499
+score BODY_SINGLE_URI 0.897
score BODY_SINGLE_WORD 2.499
-score BODY_URI_ONLY 1.000
-score BOGUS_MSM_HDRS 1.717
+score BODY_URI_ONLY 0.999
+score BOGUS_MSM_HDRS 1.440
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
score CK_HELO_GENERIC 0.250
-score DKIMWL_BL 0.875
+score DATE_IN_FUTURE_96_Q 2.899
+score DKIMWL_BL 1.868
score DX_TEXT_03 1.683
-score FBI_MONEY 1.814
-score FBI_SPOOF 1.477
-score FILL_THIS_FORM 0.307
-score FORM_FRAUD 0.445
-score FORM_FRAUD_3 1.505
-score FORM_FRAUD_5 0.846
-score FOUND_YOU 0.633
-score FREEMAIL_DISPTO 0.250
+score FBI_MONEY 0.608
+score FBI_SPOOF 1.883
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD 0.515
+score FORM_FRAUD_3 1.343
+score FORM_FRAUD_5 0.702
+score FOUND_YOU 0.401
+score FREEMAIL_DISPTO 0.249
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749
+score FREEM_FRNUM_UNICD_EMPTY 3.309
score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
-score FROM_ADDR_WS 2.600
-score FROM_IN_TO_AND_SUBJ 3.509
-score FROM_MISSP_FREEMAIL 2.797
+score FROM_ADDR_WS 1.742
+score FROM_IN_TO_AND_SUBJ 3.138
+score FROM_MISSP_FREEMAIL 2.799
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_TO_UNDISC 0.001
+score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_WSP_LEAD 0.001
-score FROM_WSP_TRAIL 2.553
+score FROM_WSP_LEAD 0.644
+score FROM_WSP_TRAIL 2.613
score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 3.999
+score FSL_HELO_FAKE 3.799
score FSL_NEW_HELO_USER 0.001
score FUZZY_CLICK_HERE 3.599
score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.124
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HELO_MISC_IP 0.249
-score HK_CTE_RAW 1.000
-score HK_SCAM_N2 1.147
-score HK_SCAM_S7 2.087
+score HDR_ORDER_FTSDMCXX_NORDNS 2.619
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HELO_MISC_IP 0.250
+score HK_SCAM_N3 2.999
+score HK_SCAM_S7 2.086
score HTML_ENTITY_ASCII 2.999
-score HTML_ENTITY_ASCII_TINY 2.003
-score HTML_OFF_PAGE 2.803
-score IMG_ONLY_FM_DOM_INFO 2.198
-score KB_FORGED_MOZ4 3.207
-score LIST_PRTL_SAME_USER 0.001 # force non-zero
-score LONG_HEX_URI 1.801
+score HTML_ENTITY_ASCII_TINY 2.001
+score HTML_OFF_PAGE 2.804
+score IMG_ONLY_FM_DOM_INFO 2.199
+score KB_FORGED_MOZ4 3.309
+score LIST_PARTIAL_SHORT_MSG 2.499
+score LIST_PRTL_SAME_USER 0.001
+score LONG_HEX_URI 1.799
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.001 # force non-zero
-score MALF_HTML_B64 2.871
-score MILLION_USD 0.400
+score MALF_HTML_B64 3.279
score MIMEOLE_DIRECT_TO_MX 1.999
-score MIME_NO_TEXT 1.782
+score MIME_NO_TEXT 1.783
score MONEY_FORM_SHORT 2.499
score MONEY_FRAUD_3 3.099
-score MONEY_FRAUD_5 1.838
-score MONEY_FRAUD_8 3.493
-score MONEY_FROM_MISSP 0.252
-score MSM_PRIO_REPTO 2.252
+score MONEY_FRAUD_5 1.552
+score MONEY_FRAUD_8 3.452
+score MONEY_FROM_41 1.999
+score MSM_PRIO_REPTO 1.630
score NO_FM_NAME_IP_HOSTN 2.499
-score NSL_RCVD_HELO_USER 2.013
-score OBFU_BITCOIN 2.999
-score PHP_ORIG_SCRIPT 2.499
+score NSL_RCVD_FROM_USER 0.001
+score OBFU_BITCOIN 3.000
+score PHP_ORIG_SCRIPT 2.399
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RDNS_NUM_TLD_ATCHNX 2.492
+score RDNS_NUM_TLD_ATCHNX 2.966
score RDNS_NUM_TLD_XM 2.999
+score SERGIO_SUBJECT_PORN014 2.087
+score SERGIO_SUBJECT_VIAGRA01 3.215
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 2.489
+score SPOOFED_FREEM_REPTO_CHN 1.964
score STATIC_XPRIO_OLE 1.999
-score STOCK_LOW_CONTRAST 2.083
-score STYLE_GIBBERISH 2.798
-score SUBJ_OBFU_PUNCT_FEW 0.750
-score SUBJ_OBFU_PUNCT_MANY 1.450
-score TEQF_USR_IMAGE 1.523
-score THIS_AD 1.885
+score STOCK_LOW_CONTRAST 2.082
+score STYLE_GIBBERISH 2.797
+score SUBJ_OBFU_PUNCT_FEW 0.749
+score SUBJ_OBFU_PUNCT_MANY 1.289
+score TEQF_USR_IMAGE 2.273
+score THIS_AD 1.886
score TO_EQ_FM_DIRECT_MX 2.499
score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.685
+score TO_NAME_SUBJ_NO_RDNS 2.915
+score TO_NO_BRKTS_FROM_MSSP 1.552
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 0.001
score TO_NO_BRKTS_NORDNS_HTML 0.400
score TO_NO_BRKTS_PCNT 2.499
score TVD_SPACE_ENCODED 2.499
-score UNICODE_OBFU_DOM_NO_BODY 3.730
-score UNICODE_OBFU_ZW 1.241
-score URI_GOOGLE_PROXY 1.530
+score TVD_SPACE_RATIO_MINFP 2.500
+score UNICODE_OBFU_ZW 2.847
+score URI_GOOGLE_PROXY 1.456
score URI_ONLY_MSGID_MALF 1.999
score URI_PHISH 3.999
score URI_TRY_3LD 0.001
-score URI_WPADMIN 2.500
-score URI_WP_DIRINDEX 2.804
+score URI_WPADMIN 2.599
+score URI_WP_DIRINDEX 2.991
score URI_WP_HACKED 3.499
-score URI_WP_HACKED_2 2.194
-score XPRIO 2.250
-score XPRIO_SHORT_SUBJ 2.499
-score ZW_OBFU_BITCOIN 2.131
-score ZW_OBFU_FROMTOSUBJ 1.370
+score URI_WP_HACKED_2 2.192
+score XPRIO 2.249
+score XPRIO_SHORT_SUBJ 2.348
+score ZW_OBFU_BITCOIN 1.747
+score ZW_OBFU_FROMTOSUBJ 0.516
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Wed Nov 28 03:24:31 2018
@@ -2,109 +2,121 @@
# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-darxus.log ham-net-ena-week0.log ham-net-ena-week1.log ham-net-ena-week2.log ham-net-ena-week3.log ham-net-ena-week4.log ham-net-giovanni-ham.log ham-net-giovanni-spam.log ham-net-giovanni-spammy.log ham-net-grenier.log ham-net-hege.log ham-net-jarif.log ham-net-sihde.log ham-net-thendrikx.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-darxus.log spam-net-ena-week0.log spam-net-ena-week1.log spam-net-ena-week2.log spam-net-ena-week3.log spam-net-ena-week4.log spam-net-giovanni-ham.log spam-net-giovanni-spam.log spam-net-giovanni-spammy.log spam-net-grenier.log spam-net-hege.log spam-net-jarif.log spam-net-sihde.log spam-net-thendrikx.log
score AC_DIV_BONANZA 0.001
-score AC_HTML_NONSENSE_TAGS 1.999
+score AC_HTML_NONSENSE_TAGS 2.000
score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 2.968
-score ADVANCE_FEE_3_NEW_MONEY 1.785
+score ADVANCE_FEE_3_NEW 2.966
+score ADVANCE_FEE_3_NEW_MONEY 1.483
score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.001
score AD_PREFS 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score BIGNUM_EMAILS 0.001
score BITCOIN_EXTORT_01 4.999
score BITCOIN_MALWARE 2.999
score BITCOIN_PAY_ME 2.499
-score BITCOIN_SPAM_01 1.263
-score BITCOIN_SPAM_02 2.228
+score BITCOIN_SPAM_01 1.261
+score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_04 1.499
-score BITCOIN_SPAM_07 1.499
+score BITCOIN_SPAM_07 1.500
score BITCOIN_SPAM_08 1.499
-score BITCOIN_SPAM_09 0.735
-score BODY_SINGLE_WORD 2.390
+score BITCOIN_SPAM_09 0.506
+score BODY_SINGLE_URI 0.001
+score BODY_SINGLE_WORD 2.389
score BODY_URI_ONLY 0.999
-score BOGUS_MSM_HDRS 1.980
+score BOGUS_MSM_HDRS 0.381
score CK_HELO_DYNAMIC_SPLIT_IP 0.001
score CK_HELO_GENERIC 0.250
-score DKIMWL_BL 2.157
-score DKIMWL_WL_HIGH -1.460
+score DATE_IN_FUTURE_96_Q 2.900
+score DKIMWL_BL 2.159
+score DKIMWL_WL_HIGH -1.459
score DKIMWL_WL_MED -0.001
-score DX_TEXT_03 1.699
-score FBI_MONEY 1.617
-score FBI_SPOOF 1.413
+score DX_TEXT_03 1.700
+score FBI_MONEY 0.813
+score FBI_SPOOF 0.293
score FILL_THIS_FORM 0.001
-score FORM_FRAUD 0.804
+score FORM_FRAUD 0.881
score FORM_FRAUD_5 0.001
score FOUND_YOU 0.001
score FREEMAIL_DISPTO 0.250
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FREEM_FRNUM_UNICD_EMPTY 3.749
-score FRNAME_IN_MSG_XPRIO_NO_SUB 2.500
-score FROM_ADDR_WS 2.156
-score FROM_IN_TO_AND_SUBJ 1.849
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
+score FREEM_FRNUM_UNICD_EMPTY 3.140
+score FRNAME_IN_MSG_XPRIO_NO_SUB 2.499
+score FROM_ADDR_WS 2.092
+score FROM_IN_TO_AND_SUBJ 0.630
score FROM_MISSP_FREEMAIL 1.580
score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_USER 0.001 # force non-zero
score FROM_MISSP_XPRIO 0.001
score FROM_WSP_TRAIL 2.899
score FSL_BULK_SIG 0.842
score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_FAKE 3.799
-score FSL_NEW_HELO_USER 0.001
-score FUZZY_CLICK_HERE 2.315
-score HDR_ORDER_FTSDMCXX_DIRECT 1.999
-score HDR_ORDER_FTSDMCXX_NORDNS 3.017
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score FSL_HELO_FAKE 3.800
+score FSL_NEW_HELO_USER 0.001 # force non-zero
+score FUZZY_CLICK_HERE 0.686
+score HDR_ORDER_FTSDMCXX_DIRECT 1.164
+score HDR_ORDER_FTSDMCXX_NORDNS 3.258
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HELO_MISC_IP 0.001
-score HK_SCAM_S7 3.099
+score HK_SCAM_N3 2.899
+score HK_SCAM_S7 3.073
score HTML_ENTITY_ASCII 2.954
-score HTML_ENTITY_ASCII_TINY 2.912
+score HTML_ENTITY_ASCII_TINY 2.140
score HTML_OFF_PAGE 2.999
-score IMG_ONLY_FM_DOM_INFO 0.500
-score KB_FORGED_MOZ4 2.703
-score LIST_PRTL_SAME_USER 0.274
-score LONG_HEX_URI 1.484
+score IMG_ONLY_FM_DOM_INFO 0.498
+score KB_FORGED_MOZ4 2.672
+score LIST_PARTIAL_SHORT_MSG 2.499
+score LIST_PRTL_SAME_USER 0.273
+score LONG_HEX_URI 1.485
score LONG_IMG_URI 0.001
score LOTS_OF_MONEY 0.010
-score MALF_HTML_B64 2.182
+score MALF_HTML_B64 2.460
score MIMEOLE_DIRECT_TO_MX 1.999
score MIME_NO_TEXT 1.999
-score MONEY_FORM_SHORT 2.091
+score MONEY_FORM_SHORT 2.089
score MONEY_FRAUD_3 2.999
-score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 1.037
-score MSM_PRIO_REPTO 1.941
-score NO_FM_NAME_IP_HOSTN 2.500
+score MONEY_FRAUD_5 0.301
+score MONEY_FRAUD_8 0.643
+score MONEY_FROM_41 1.999
+score MSM_PRIO_REPTO 1.405
+score NO_FM_NAME_IP_HOSTN 2.126
+score NSL_RCVD_FROM_USER 0.001 # force non-zero
score OBFU_BITCOIN 2.999
-score PHP_ORIG_SCRIPT 2.287
+score PHP_ORIG_SCRIPT 2.286
score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
-score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_ATCHNX 0.785
-score RDNS_NUM_TLD_XM 0.809
+score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RDNS_NUM_TLD_ATCHNX 1.831
+score RDNS_NUM_TLD_XM 0.266
+score SERGIO_SUBJECT_VIAGRA01 0.001
score SINGLETS_LOW_CONTRAST 0.001
score SPOOFED_FREEM_REPTO 2.499
-score STATIC_XPRIO_OLE 0.843
+score STATIC_XPRIO_OLE 1.892
score STOCK_LOW_CONTRAST 2.499
-score STYLE_GIBBERISH 0.001 # force non-zero
+score STYLE_GIBBERISH 0.001
score SUBJ_OBFU_PUNCT_MANY 1.749
-score THIS_AD 1.119
-score TO_EQ_FM_DIRECT_MX 2.499
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 # force non-zero
-score TO_EQ_FM_SPF_FAIL 0.001 # force non-zero
+score THIS_AD 1.183
+score TO_EQ_FM_DIRECT_MX 1.660
+score TO_EQ_FM_DOM_SPF_FAIL 0.001
+score TO_EQ_FM_SPF_FAIL 0.001
score TO_IN_SUBJ 0.100
score TO_NAME_SUBJ_NO_RDNS 2.999
+score TO_NO_BRKTS_FROM_MSSP 0.001 # force non-zero
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.650
-score TVD_SPACE_ENCODED 2.500
-score UNICODE_OBFU_ZW 1.189
+score TO_NO_BRKTS_NORDNS_HTML 0.649
+score TVD_SPACE_ENCODED 2.499
+score TVD_SPACE_RATIO_MINFP 2.500
+score UNICODE_OBFU_ZW 2.682
score URI_GOOGLE_PROXY 2.299
-score URI_ONLY_MSGID_MALF 1.999
-score URI_PHISH 3.894
-score URI_TRY_3LD 0.465
+score URI_ONLY_MSGID_MALF 2.000
+score URI_PHISH 3.892
+score URI_TRY_3LD 0.464
score URI_WPADMIN 2.400
score URI_WP_HACKED_2 1.856
score XPRIO 2.246
-score XPRIO_SHORT_SUBJ 2.500
-score ZW_OBFU_BITCOIN 1.896
-score ZW_OBFU_FROMTOSUBJ 1.999
+score XPRIO_SHORT_SUBJ 2.499
+score ZW_OBFU_BITCOIN 2.179
+score ZW_OBFU_FROMTOSUBJ 0.339
score AC_BR_BONANZA 0.001
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Wed Nov 28 03:24:31 2018
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 255054 37.122% (95.238% of non-spam corpus)
-# Correctly spam: 277378 40.371% (66.158% of spam corpus)
-# False positives: 12753 1.856% (4.762% of nonspam, 579516 weighted)
-# False negatives: 141891 20.651% (33.842% of spam, 403822 weighted)
-# Average score for spam: 8.8 nonspam: 1.4
-# Average for false-pos: 5.8 false-neg: 2.8
-# TOTAL: 687076 100.00%
+# Correctly non-spam: 259336 38.724% (95.193% of non-spam corpus)
+# Correctly spam: 271914 40.602% (68.444% of spam corpus)
+# False positives: 13096 1.955% (4.807% of nonspam, 554535 weighted)
+# False negatives: 125366 18.719% (31.556% of spam, 343621 weighted)
+# Average score for spam: 8.0 nonspam: 1.4
+# Average for false-pos: 5.8 false-neg: 2.7
+# TOTAL: 669712 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 31842 95.10%
-# Correctly spam: 34647 66.31%
-# False positives: 1640 4.90%
-# False negatives: 17606 33.69%
-# TCR(l=50): 0.524597 SpamRecall: 66.306% SpamPrec: 95.480%
+# Correctly non-spam: 32285 94.82%
+# Correctly spam: 34153 68.92%
+# False positives: 1764 5.18%
+# False negatives: 15405 31.08%
+# TCR(l=50): 0.478336 SpamRecall: 68.915% SpamPrec: 95.089%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 254882 95.17%
-# Correctly spam: 179564 42.83%
-# False positives: 12925 4.83%
-# False negatives: 239705 57.17%
-# TCR(l=50): 0.473240 SpamRecall: 42.828% SpamPrec: 93.285%
+# Correctly non-spam: 259002 95.07%
+# Correctly spam: 166998 42.04%
+# False positives: 13430 4.93%
+# False negatives: 230282 57.96%
+# TCR(l=50): 0.440550 SpamRecall: 42.035% SpamPrec: 92.557%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 31848 95.12%
-# Correctly spam: 22364 42.80%
-# False positives: 1634 4.88%
-# False negatives: 29889 57.20%
-# TCR(l=50): 0.468263 SpamRecall: 42.799% SpamPrec: 93.191%
+# Correctly non-spam: 32285 94.82%
+# Correctly spam: 20924 42.22%
+# False positives: 1764 5.18%
+# False negatives: 28634 57.78%
+# TCR(l=50): 0.424174 SpamRecall: 42.221% SpamPrec: 92.225%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1847604&r1=1847603&r2=1847604&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Wed Nov 28 03:24:31 2018
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 254943 31.739% (99.704% of non-spam corpus)
-# Correctly spam: 488712 60.842% (89.256% of spam corpus)
-# False positives: 758 0.094% (0.296% of nonspam, 120363 weighted)
-# False negatives: 58829 7.324% (10.744% of spam, 137139 weighted)
-# Average score for spam: 14.0 nonspam: -2.4
-# Average for false-pos: 7.4 false-neg: 2.3
-# TOTAL: 803242 100.00%
+# Correctly non-spam: 254948 31.741% (99.706% of non-spam corpus)
+# Correctly spam: 491069 61.138% (89.692% of spam corpus)
+# False positives: 753 0.094% (0.294% of nonspam, 119832 weighted)
+# False negatives: 56439 7.027% (10.308% of spam, 146633 weighted)
+# Average score for spam: 13.8 nonspam: -2.4
+# Average for false-pos: 7.4 false-neg: 2.6
+# TOTAL: 803209 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 31831 99.64%
-# Correctly spam: 61078 89.30%
-# False positives: 114 0.36%
-# False negatives: 7317 10.70%
-# TCR(l=50): 5.254283 SpamRecall: 89.302% SpamPrec: 99.814%
+# Correctly non-spam: 31830 99.64%
+# Correctly spam: 61327 89.68%
+# False positives: 115 0.36%
+# False negatives: 7061 10.32%
+# TCR(l=50): 5.338225 SpamRecall: 89.675% SpamPrec: 99.813%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 254378 99.48%
-# Correctly spam: 342370 62.53%
+# Correctly spam: 342312 62.52%
# False positives: 1323 0.52%
-# False negatives: 205171 37.47%
-# TCR(l=50): 2.018056 SpamRecall: 62.529% SpamPrec: 99.615%
+# False negatives: 205196 37.48%
+# TCR(l=50): 2.017749 SpamRecall: 62.522% SpamPrec: 99.615%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 31769 99.45%
-# Correctly spam: 42686 62.41%
+# Correctly spam: 42735 62.49%
# False positives: 176 0.55%
-# False negatives: 25709 37.59%
-# TCR(l=50): 1.981947 SpamRecall: 62.411% SpamPrec: 99.589%
+# False negatives: 25653 37.51%
+# TCR(l=50): 1.984965 SpamRecall: 62.489% SpamPrec: 99.590%