You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/11/03 02:43:06 UTC

svn commit: r1905032 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1905032&r1=1905031&r2=1905032&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Thu Nov  3 02:43:06 2022
@@ -1,177 +1,186 @@
-# Using score set 0 logs for revision 1904965 from:
-# ham-ena-week0.r1904965.log ham-ena-week1.r1904965.log ham-ena-week2.r1904965.log ham-ena-week3.r1904965.log ham-ena-week4.r1904965.log ham-giovanni-ham.r1904965.log ham-giovanni-spammy.r1904965.log ham-giovanni-spam.r1904965.log ham-grenier.r1904965.log ham-hege.r1904965.log ham-jhardin.r1904965.log ham-mmiroslaw-mails-ham.r1904965.log ham-mmiroslaw-mails-spam.r1904965.log ham-thendrikx.r1904965.log ham-tsz-spam-corpus.r1904965.log spam-ena-week0.r1904965.log spam-ena-week1.r1904965.log spam-ena-week2.r1904965.log spam-ena-week3.r1904965.log spam-ena-week4.r1904965.log spam-giovanni-ham.r1904965.log spam-giovanni-spammy.r1904965.log spam-giovanni-spam.r1904965.log spam-grenier.r1904965.log spam-hege.r1904965.log spam-jhardin.r1904965.log spam-mmiroslaw-mails-ham.r1904965.log spam-mmiroslaw-mails-spam.r1904965.log spam-thendrikx.r1904965.log spam-tsz-spam-corpus.r1904965.log
+# Using score set 0 logs for revision 1904991 from:
+# ham-ena-week0.r1904991.log ham-ena-week1.r1904991.log ham-ena-week2.r1904991.log ham-ena-week3.r1904991.log ham-ena-week4.r1904991.log ham-giovanni-ham.r1904991.log ham-giovanni-spammy.r1904991.log ham-giovanni-spam.r1904991.log ham-grenier.r1904991.log ham-hege.r1904991.log ham-jhardin.r1904991.log ham-mmiroslaw-mails-ham.r1904991.log ham-mmiroslaw-mails-spam.r1904991.log ham-thendrikx.r1904991.log ham-tsz-spam-corpus.r1904991.log spam-ena-week0.r1904991.log spam-ena-week1.r1904991.log spam-ena-week2.r1904991.log spam-ena-week3.r1904991.log spam-ena-week4.r1904991.log spam-giovanni-ham.r1904991.log spam-giovanni-spammy.r1904991.log spam-giovanni-spam.r1904991.log spam-grenier.r1904991.log spam-hege.r1904991.log spam-jhardin.r1904991.log spam-mmiroslaw-mails-ham.r1904991.log spam-mmiroslaw-mails-spam.r1904991.log spam-thendrikx.r1904991.log spam-tsz-spam-corpus.r1904991.log
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.501
-score AC_HTML_NONSENSE_TAGS          2.000
+score AC_HTML_NONSENSE_TAGS          1.999
 score ADMITS_SPAM                    2.399
 score ADVANCE_FEE_2_NEW_MONEY        2.000
 score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_MONEY        2.229
+score ADVANCE_FEE_3_NEW_MONEY        0.733
 score ADVANCE_FEE_4_NEW_MONEY        2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY      0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY        1.825
+score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_5_NEW_MONEY        0.079
 score AD_PREFS                       0.499
-score AMAZON_IMG_NOT_RCVD_AMZN       2.249
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            2.032
-score BIGNUM_EMAILS_MANY             1.943
-score BITCOIN_EXTORT_01              4.550
-score BITCOIN_MALF_HTML              2.508
-score BITCOIN_ONAN                   1.222
+score BIGNUM_EMAILS_FREEM            1.323
+score BIGNUM_EMAILS_MANY             2.977
+score BITCOIN_EXTORT_01              3.292
+score BITCOIN_MALF_HTML              3.499
+score BITCOIN_MALWARE                0.001
+score BITCOIN_ONAN                   2.999
 score BITCOIN_SPAM_02                2.499
-score BITCOIN_SPAM_03                2.500
+score BITCOIN_SPAM_03                2.499
 score BITCOIN_SPAM_09                1.499
-score BITCOIN_XPRIO                  2.499
-score BITCOIN_YOUR_INFO              2.001
-score BOGUS_MIME_VERSION             3.499
-score BOGUS_MSM_HDRS                 0.967
-score CK_HELO_GENERIC                0.249
-score CONTENT_AFTER_HTML             2.499
+score BITCOIN_XPRIO                  0.870
+score BITCOIN_YOUR_INFO              2.102
+score BODY_URI_ONLY                  2.752
+score BOGUS_MSM_HDRS                 2.999
+score CK_HELO_GENERIC                0.250
 score CTE_8BIT_MISMATCH              1.000
 score DATE_IN_FUTURE_Q_PLUS          2.699
-score DEAR_BENEFICIARY               3.200
-score DX_TEXT_03                     1.300
+score DEAR_BENEFICIARY               3.199
+score DX_TEXT_03                     1.299
 score ENCRYPTED_MESSAGE              -0.999
-score FBI_MONEY                      0.001
-score FBI_SPOOF                      1.404
-score FILL_THIS_FORM                 2.499
-score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           2.999
+score END_FUTURE_EMAILS              2.499
+score FBI_MONEY                      1.167
+score FBI_SPOOF                      0.916
+score FILL_THIS_FORM                 1.099
+score FONT_INVIS_DIRECT              0.281
+score FONT_INVIS_LONG_LINE           3.000
 score FONT_INVIS_MSGID               2.499
-score FONT_INVIS_NORDNS              0.250
-score FONT_INVIS_POSTEXTRAS          0.185
-score FORM_FRAUD_5                   2.021
-score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROM_2_EMAILS_SHORT            1.686
+score FONT_INVIS_NORDNS              1.885
+score FONT_INVIS_POSTEXTRAS          0.835
+score FORM_FRAUD                     0.001
+score FORM_FRAUD_3                   2.399
+score FORM_FRAUD_5                   0.922
+score FREEMAIL_FORGED_FROMDOMAIN     0.250
+score FROM_2_EMAILS_SHORT            1.488
+score FROM_ADDR_WS                   2.999
 score FROM_MISSPACED                 1.999
-score FROM_MISSP_DYNIP               2.486
+score FROM_MISSP_DYNIP               1.873
 score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            1.655
-score FROM_MISSP_MSFT                2.648
-score FROM_MISSP_USER                0.001 # force non-zero
-score FROM_MULTI_NORDNS              1.352
-score FROM_NTLD_REPLY_FREEMAIL       1.620
-score FROM_SUSPICIOUS_NTLD           0.500
-score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FSL_CTYPE_WIN1251              0.747
-score FSL_NEW_HELO_USER              0.001
+score FROM_MISSP_FREEMAIL            2.214
+score FROM_MISSP_MSFT                3.199
+score FROM_MISSP_USER                0.001
+score FROM_MULTI_NORDNS              1.218
+score FROM_NTLD_REPLY_FREEMAIL       1.999
+score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_SUSPICIOUS_NTLD_FP        2.000
+score FSL_CTYPE_WIN1251              0.001
+score FSL_HELO_FAKE                  2.811
+score FSL_NEW_HELO_USER              0.038
 score FUZZY_AMAZON                   2.499
-score FUZZY_IMPORTANT                2.499
-score FUZZY_SECURITY                 2.800
-score GB_FAKE_RF_SHORT               1.997
-score GB_FREEMAIL_DISPTO             0.499
+score FUZZY_IMPORTANT                2.399
+score FUZZY_SECURITY                 2.799
+score GB_FAKE_RF_SHORT               1.998
+score GB_FREEMAIL_DISPTO             0.500
 score GB_GOOGLE_OBFUR                0.749
 score GB_URI_FLEEK_STO_HTM           1.000
-score GOOG_REDIR_NORDNS              2.601
+score GOOG_REDIR_NORDNS              2.501
 score GOOG_STO_IMG_NOHTML            2.499
-score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       1.505
-score HDRS_LCASE_IMGONLY             0.100
-score HDRS_MISSP                     2.500
-score HDR_ORDER_FTSDMCXX_DIRECT      0.135
+score GOOG_STO_NOIMG_HTML            3.000
+score HAS_X_OUTGOING_SPAM_STAT       0.995
+score HDRS_LCASE_IMGONLY             0.099
+score HDRS_MISSP                     2.499
+score HDR_ORDER_FTSDMCXX_DIRECT      0.064
 score HDR_ORDER_FTSDMCXX_NORDNS      2.353
-score HEADER_FROM_DIFFERENT_DOMAINS  0.250
-score HELO_NO_DOMAIN                 0.001
+score HEADER_FROM_DIFFERENT_DOMAINS  0.249
+score HELO_NO_DOMAIN                 0.001 # force non-zero
 score HK_LOTTO                       1.000
 score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_ENVFROM              1.000
+score HK_RANDOM_ENVFROM              0.999
 score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              0.999
 score HK_SCAM                        1.999
-score HOSTED_IMG_DIRECT_MX           3.499
-score HOSTED_IMG_FREEM               2.499
+score HOSTED_IMG_DIRECT_MX           0.976
 score HTML_ENTITY_ASCII              2.999
-score HTML_OFF_PAGE                  2.999
+score HTML_OFF_PAGE                  3.000
+score HTML_SINGLET_MANY              2.499
 score HTML_TAG_BALANCE_CENTER        3.599
-score HTML_TEXT_INVISIBLE_STYLE      0.240
-score IMG_DIRECT_TO_MX               0.086
+score HTML_TEXT_INVISIBLE_FONT       1.188
+score HTML_TEXT_INVISIBLE_STYLE      1.887
 score JH_SPAMMY_HEADERS              3.499
-score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   2.402
-score LONG_INVISIBLE_TEXT            2.999
+score KHOP_HELO_FCRDNS               0.400
+score LONG_HEX_URI                   3.000
+score LONG_IMG_URI                   2.005
+score LONG_INVISIBLE_TEXT            2.252
 score LOTS_OF_MONEY                  0.010
-score LOTTO_AGENT                    1.500
-score MALWARE_NORDNS                 0.502
-score MALW_ATTACH                    2.300
+score LOTTO_AGENT                    1.499
+score MALWARE_NORDNS                 0.501
+score MALW_ATTACH                    2.399
 score MILLION_HUNDRED                0.001
-score MIMEOLE_DIRECT_TO_MX           1.864
+score MIMEOLE_DIRECT_TO_MX           1.843
 score MIXED_ES                       2.499
-score MIXED_HREF_CASE                1.300
-score MONEY_ATM_CARD                 1.519
+score MIXED_HREF_CASE                0.715
+score MONEY_ATM_CARD                 2.258
 score MONEY_FORM_SHORT               2.499
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  0.124
+score MONEY_FRAUD_5                  0.695
 score MONEY_FRAUD_8                  0.001
 score MONEY_FREEMAIL_REPTO           2.999
-score MONEY_FROM_41                  1.211
-score MONEY_FROM_MISSP               1.679
-score MSMAIL_PRI_ABNORMAL            0.633
-score NA_DOLLARS                     0.001
-score NICE_REPLY_A                   -3.613
-score NORDNS_LOW_CONTRAST            1.637
+score MONEY_FROM_41                  1.137
+score MONEY_FROM_MISSP               1.680
+score MSMAIL_PRI_ABNORMAL            1.022
+score NA_DOLLARS                     0.001 # force non-zero
+score NICE_REPLY_A                   -2.693
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             0.169
-score NUMBERONLY_BITCOIN_EXP         1.686
-score OBFU_TEXT_ATTACH               0.291
-score ODD_FREEM_REPTO                2.999
-score PDS_BTC_ID                     0.500
+score NSL_RCVD_FROM_USER             0.208
+score NSL_RCVD_HELO_USER             1.484
+score NUMBERONLY_BITCOIN_EXP         0.755
+score OBFU_TEXT_ATTACH               1.092
+score ODD_FREEM_REPTO                3.000
+score PDS_BTC_ID                     0.499
 score PDS_BTC_MSGID                  0.001
 score PDS_DBL_URL_TNB_RUNON          1.999
+score PDS_FROM_2_EMAILS              3.499
 score PDS_NAKED_TO_NUMERO            1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
-score PDS_OTHER_BAD_TLD              1.999
+score PDS_OTHER_BAD_TLD              2.000
 score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
 score PDS_SHORT_SPOOFED_URL          2.000
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 2.000
-score PHP_ORIG_SCRIPT                2.499
+score PHP_ORIG_SCRIPT                2.500
 score PHP_SCRIPT                     2.499
 score PP_MIME_FAKE_ASCII_TEXT        0.999
 score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                2.607
-score RDNS_NUM_TLD_XM                0.689
+score RATWARE_NO_RDNS                2.616
 score REPTO_419_FRAUD_GM             2.999
-score SCC_CANSPAM_2                  0.797
-score SCC_ISEMM_LID_1A               2.841
+score RISK_FREE                      0.921
+score SCC_CANSPAM_2                  0.397
+score SCC_ISEMM_LID_1A               3.188
 score SCC_ISEMM_LID_1B               1.499
-score SCC_THREE_WORD_MONTY           2.699
-score SENDGRID_REDIR                 1.499
+score SCC_THREE_WORD_MONTY           2.299
+score SENDGRID_REDIR                 0.401
 score SERGIO_SUBJECT_VIAGRA01        0.398
-score SHARE_50_50                    1.012
-score SHOPIFY_IMG_NOT_RCVD_SFY       2.033
-score SHORTENER_SHORT_IMG            0.001 # force non-zero
-score SHORT_SHORTNER                 2.000
-score STATIC_XPRIO_OLE               0.692
-score THIS_AD                        0.500
-score TO_NAME_SUBJ_NO_RDNS           2.708
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.036
+score SHORTENER_SHORT_IMG            0.001
+score SHORT_SHORTNER                 1.999
+score SPOOFED_FREEMAIL_NO_RDNS       0.338
+score SPOOF_GMAIL_MID                1.499
+score STATIC_XPRIO_OLE               0.005
+score THIS_AD                        0.499
+score TO_NAME_SUBJ_NO_RDNS           2.855
 score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           1.999
+score TO_NO_BRKTS_HTML_IMG           1.784
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               0.689
-score TVD_RCVD_SPACE_BRACKET         3.199
+score TO_NO_BRKTS_PCNT               0.045
+score TVD_RCVD_SPACE_BRACKET         1.985
 score UNDISC_FREEM                   3.099
 score UNDISC_MONEY                   3.399
 score UNICODE_OBFU_ASC               2.499
 score URI_DOTEDU                     1.999
-score URI_FIREBASEAPP                2.999
-score URI_GOOGLE_PROXY               2.299
-score URI_PHISH                      3.999
+score URI_FIREBASEAPP                3.000
+score URI_GOOGLE_PROXY               2.399
+score URI_ONLY_MSGID_MALF            1.003
+score URI_PHISH                      3.895
 score URI_PHP_REDIR                  3.499
-score URI_TRY_3LD                    1.948
-score URI_WPADMIN                    2.699
+score URI_TRY_3LD                    1.950
+score URI_WPADMIN                    2.599
+score URI_WP_HACKED                  2.751
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.522
+score VFY_ACCT_NORDNS                2.999
 score WORD_INVIS                     0.001
-score WORD_INVIS_MANY                3.000
+score WORD_INVIS_MANY                2.999
 score XFER_LOTSA_MONEY               0.999
 score XM_RANDOM                      2.499
 score XM_RECPTID                     2.999
-score XPRIO_SHORT_SUBJ               1.914
+score XPRIO                          1.719
+score XPRIO_SHORT_SUBJ               1.294
 score XPRIO_URL_SHORTNER             0.999
-score YOU_INHERIT                    1.002
+score YOU_INHERIT                    1.766
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -193,7 +202,6 @@ score BITCOIN_BOMB                   1.0
 score BITCOIN_DEADLINE               1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
-score BITCOIN_MALWARE                1.000
 score BITCOIN_OBFU_SUBJ              1.000
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
@@ -205,29 +213,26 @@ score BITCOIN_SPAM_10                1.0
 score BITCOIN_SPAM_11                1.000
 score BITCOIN_SPAM_12                1.000
 score BODY_EMAIL_419_FRAUD_GM        1.000
-score BODY_URI_ONLY                  1.000
+score BOGUS_MIME_VERSION             1.000
 score BOMB_FREEM                     1.000
 score BOMB_MONEY                     1.000
 score BTC_ORG                        1.000
 score BULK_RE_SUSP_NTLD              1.000
 score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
+score CONTENT_AFTER_HTML             1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
 score DOTGOV_IMAGE                   1.000
 score DYNAMIC_IMGUR                  1.000
 score EBAY_IMG_NOT_RCVD_EBAY         1.000
-score END_FUTURE_EMAILS              1.000
 score ENVFROM_GOOG_TRIX              1.000
 score FACEBOOK_IMG_NOT_RCVD_FB       1.000
 score FONT_INVIS_DOTGOV              1.000
 score FONT_INVIS_HTML_NOHTML         1.000
-score FORM_FRAUD                     1.000
 score FOUND_YOU                      1.000
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
-score FROM_ADDR_WS                   1.000
-score FROM_MISSP_REPLYTO             1.000
 score FROM_NTLD_LINKBAIT             1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_CUSTOM_HTM_URI              1.000
@@ -248,16 +253,14 @@ score HEXHASH_WORD                   1.0
 score HK_CTE_RAW                     1.000
 score HK_RCVD_IP_MULTICAST           1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
+score HOSTED_IMG_FREEM               1.000
 score HOSTED_IMG_MULTI               1.000
 score HOSTED_IMG_MULTI_PUB_01        1.000
 score HTML_ENTITY_ASCII_TINY         1.000
 score HTML_SHRT_CMNT_OBFU_MANY       1.000
-score HTML_SINGLET_MANY              1.000
-score HTML_TEXT_INVISIBLE_FONT       1.000
 score IMG_ONLY_FM_DOM_INFO           1.000
 score JH_SPAMMY_PATTERN01            1.000
 score JH_SPAMMY_PATTERN02            1.000
-score KHOP_HELO_FCRDNS               0.400
 score LINKEDIN_IMG_NOT_RCVD_LNKN     1.000
 score LIST_PRTL_PUMPDUMP             1.000
 score LIST_PRTL_SAME_USER            1.000
@@ -279,6 +282,7 @@ score MSM_PRIO_REPTO                 1.0
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
 score OBFU_BITCOIN                   1.000
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
 score PDS_PHP_EVAL                   1.000
 score PDS_TINYSUBJ_URISHRT           1.000
 score PHISH_AZURE_CLOUDAPP           3.500
@@ -295,6 +299,7 @@ score RAND_HEADER_MANY               1.0
 score RCVD_DOTEDU_SHORT              1.000
 score RCVD_DOTEDU_SUSP_URI           1.000
 score RDNS_NUM_TLD_ATCHNX            1.000
+score RDNS_NUM_TLD_XM                1.000
 score READY_TO_SHIP                  1.000
 score REPTO_419_FRAUD                1.000
 score REPTO_419_FRAUD_AOL            1.000
@@ -314,8 +319,6 @@ score SCC_ISEMM_LID_1                1.0
 score SENDGRID_REDIR_PHISH           1.000
 score SEO_SUSP_NTLD                  1.000
 score SHORT_IMG_SUSP_NTLD            1.000
-score SPOOFED_FREEMAIL_NO_RDNS       1.000
-score SPOOF_GMAIL_MID                1.000
 score STOCK_TIP                      1.000
 score SUBJ_BRKN_WORDNUMS             1.000
 score SUSP_UTF8_WORD_FROM            1.000
@@ -326,8 +329,6 @@ score THIS_IS_ADV_SUSP_NTLD          1.0
 score TONLINE_FAKE_DKIM              1.000
 score TO_EQ_FM_DIRECT_MX             1.000
 score TO_IN_SUBJ                     0.100
-score TVD_SPACE_ENCODED              1.000
-score TVD_SPACE_RATIO_MINFP          1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ZW                1.000
@@ -341,17 +342,14 @@ score URI_GOOG_STO_SPAMMY            3.0
 score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_LONG_REPEAT                1.000
-score URI_ONLY_MSGID_MALF            1.000
 score URI_OPTOUT_3LD                 1.000
 score URI_TRY_USME                   1.000
 score URI_WP_DIRINDEX                1.000
-score URI_WP_HACKED                  1.000
 score USB_DRIVES                     1.000
 score VPS_NO_NTLD                    1.000
 score WALMART_IMG_NOT_RCVD_WAL       1.000
 score WANT_TO_ORDER                  1.000
 score XM_DIGITS_ONLY                 1.000
-score XPRIO                          1.000
 score YOUR_DELIVERY_ADDRESS          1.000
 # in active.list but have no hits in recent corpus
 score ARC_SIGNED                     0.001 # force non-zero

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1905032&r1=1905031&r2=1905032&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Thu Nov  3 02:43:06 2022
@@ -3,88 +3,87 @@
 
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
-score AC_FROM_MANY_DOTS              1.684
-score AC_HTML_NONSENSE_TAGS          2.000
+score AC_FROM_MANY_DOTS              1.665
+score AC_HTML_NONSENSE_TAGS          1.999
 score ADMITS_SPAM                    2.399
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              3.500
-score ADVANCE_FEE_3_NEW_MONEY        2.318
+score ADVANCE_FEE_3_NEW              3.499
+score ADVANCE_FEE_3_NEW_MONEY        2.682
 score ADVANCE_FEE_4_NEW_MONEY        0.001
 score ADVANCE_FEE_5_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_5_NEW_MONEY        0.008
-score AD_PREFS                       0.500
-score AMAZON_IMG_NOT_RCVD_AMZN       1.853
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            1.387
-score BIGNUM_EMAILS_MANY             1.207
-score BITCOIN_EXTORT_01              2.613
-score BITCOIN_MALF_HTML              2.497
-score BITCOIN_MALWARE                2.110
-score BITCOIN_ONAN                   1.352
-score BITCOIN_SPAM_02                0.356
+score ADVANCE_FEE_5_NEW_MONEY        0.024
+score AD_PREFS                       0.499
+score AMAZON_IMG_NOT_RCVD_AMZN       1.851
+score AXB_XMAILER_MIMEOLE_OL_024C2   0.001 # force non-zero
+score BIGNUM_EMAILS_FREEM            2.075
+score BIGNUM_EMAILS_MANY             2.244
+score BITCOIN_EXTORT_01              2.615
+score BITCOIN_MALF_HTML              2.544
+score BITCOIN_MALWARE                3.246
+score BITCOIN_ONAN                   2.097
+score BITCOIN_SPAM_02                0.363
 score BITCOIN_SPAM_03                2.499
-score BITCOIN_SPAM_05                1.997
+score BITCOIN_SPAM_05                0.851
 score BITCOIN_SPAM_09                1.499
 score BITCOIN_XPRIO                  0.001
 score BITCOIN_YOUR_INFO              2.999
 score BODY_URI_ONLY                  2.999
 score BOGUS_MIME_VERSION             3.499
-score BOGUS_MSM_HDRS                 0.316
-score CK_HELO_GENERIC                0.001
+score BOGUS_MSM_HDRS                 1.665
+score CK_HELO_GENERIC                0.001 # force non-zero
 score CONTENT_AFTER_HTML             2.499
-score CTE_8BIT_MISMATCH              0.001 # force non-zero
+score CTE_8BIT_MISMATCH              0.001
 score DATE_IN_FUTURE_Q_PLUS          2.699
 score DEAR_BENEFICIARY               2.999
-score DKIMWL_BL                      1.423
-score DKIMWL_WL_HIGH                 -1.048
+score DKIMWL_BL                      1.418
+score DKIMWL_WL_HIGH                 -1.047
 score DKIMWL_WL_MED                  -0.001 # force non-zero
 score DKIMWL_WL_MEDHI                -0.001
-score DX_TEXT_03                     1.400
+score DX_TEXT_03                     1.399
 score ENCRYPTED_MESSAGE              -0.999
-score FILL_THIS_FORM                 0.957
-score FONT_INVIS_DIRECT              0.001
+score FILL_THIS_FORM                 1.123
+score FONT_INVIS_DIRECT              0.148
 score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               2.279
-score FONT_INVIS_NORDNS              1.224
-score FONT_INVIS_POSTEXTRAS          1.788
-score FORGED_SPF_HELO                0.344
-score FORM_FRAUD                     0.176
-score FORM_FRAUD_5                   2.176
+score FONT_INVIS_MSGID               2.201
+score FONT_INVIS_NORDNS              2.499
+score FONT_INVIS_POSTEXTRAS          0.287
+score FORGED_SPF_HELO                0.357
+score FORM_FRAUD                     0.175
+score FORM_FRAUD_5                   2.368
 score FREEMAIL_FORGED_FROMDOMAIN     0.001 # force non-zero
-score FROM_2_EMAILS_SHORT            2.454
+score FROM_2_EMAILS_SHORT            2.264
 score FROM_FMBLA_NEWDOM              0.001
 score FROM_FMBLA_NEWDOM14            0.001
-score FROM_FMBLA_NEWDOM28            0.001
-score FROM_GOV_DKIM_AU               -0.110
+score FROM_FMBLA_NEWDOM28            0.001 # force non-zero
+score FROM_GOV_DKIM_AU               -0.773
 score FROM_MISSPACED                 1.999
-score FROM_MISSP_DYNIP               2.499
+score FROM_MISSP_DYNIP               2.497
 score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            0.942
+score FROM_MISSP_FREEMAIL            1.202
 score FROM_MISSP_MSFT                0.001
-score FROM_MISSP_REPLYTO             0.493
 score FROM_MISSP_SPF_FAIL            0.001
 score FROM_MISSP_USER                0.001
-score FROM_MULTI_NORDNS              1.327
-score FROM_PAYPAL_SPOOF              1.234
-score FROM_SUSPICIOUS_NTLD           0.432
-score FROM_SUSPICIOUS_NTLD_FP        1.036
-score FSL_BULK_SIG                   0.132
+score FROM_MULTI_NORDNS              1.906
+score FROM_PAYPAL_SPOOF              1.258
+score FROM_SUSPICIOUS_NTLD           0.403
+score FROM_SUSPICIOUS_NTLD_FP        1.063
+score FSL_BULK_SIG                   0.149
 score FSL_CTYPE_WIN1251              0.001
 score FSL_NEW_HELO_USER              0.001
 score FUZZY_AMAZON                   2.599
 score FUZZY_IMPORTANT                2.499
-score FUZZY_SECURITY                 2.699
-score FUZZY_WALLET                   0.001 # force non-zero
+score FUZZY_SECURITY                 2.700
+score FUZZY_WALLET                   0.001
 score GB_FAKE_RF_SHORT               2.000
-score GB_FREEMAIL_DISPTO             0.500
-score GB_GOOGLE_OBFUR                0.749
-score GB_HASHBL_BTC                  2.161
+score GB_FREEMAIL_DISPTO             0.499
+score GB_GOOGLE_OBFUR                0.750
+score GB_HASHBL_BTC                  2.169
 score GB_URI_FLEEK_STO_HTM           0.999
-score GOOG_REDIR_NORDNS              3.200
+score GOOG_REDIR_NORDNS              3.199
 score GOOG_STO_IMG_NOHTML            2.499
-score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       1.054
-score HDRS_MISSP                     2.499
+score GOOG_STO_NOIMG_HTML            3.000
+score HAS_X_OUTGOING_SPAM_STAT       1.112
+score HDRS_MISSP                     2.398
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
@@ -92,113 +91,108 @@ score HELO_NO_DOMAIN                 0.0
 score HK_LOTTO                       0.999
 score HK_NAME_MR_MRS                 1.000
 score HK_RANDOM_ENVFROM              0.999
-score HK_RANDOM_FROM                 0.999
+score HK_RANDOM_FROM                 1.000
 score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        2.000
-score HOSTED_IMG_DIRECT_MX           0.437
-score HTML_ENTITY_ASCII              2.791
+score HK_SCAM                        1.999
+score HOSTED_IMG_DIRECT_MX           1.890
+score HTML_ENTITY_ASCII              2.661
 score HTML_OFF_PAGE                  2.999
 score HTML_TAG_BALANCE_CENTER        3.499
-score HTML_TEXT_INVISIBLE_FONT       0.169
+score HTML_TEXT_INVISIBLE_FONT       0.247
 score HTML_TEXT_INVISIBLE_STYLE      3.499
-score IMG_DIRECT_TO_MX               0.833
-score JH_SPAMMY_HEADERS              3.499
+score JH_SPAMMY_HEADERS              3.500
 score KHOP_HELO_FCRDNS               0.399
-score LONG_HEX_URI                   1.614
-score LONG_IMG_URI                   0.076
-score LONG_INVISIBLE_TEXT            1.746
+score LONG_HEX_URI                   1.616
+score LONG_IMG_URI                   0.737
+score LONG_INVISIBLE_TEXT            1.737
 score LOTS_OF_MONEY                  0.010
 score LOTTO_AGENT                    1.499
-score MALWARE_NORDNS                 2.064
-score MALW_ATTACH                    2.299
+score MALWARE_NORDNS                 2.889
 score MILLION_HUNDRED                0.001
 score MIMEOLE_DIRECT_TO_MX           0.001
-score MIXED_ES                       0.771
-score MIXED_HREF_CASE                1.695
-score MONEY_ATM_CARD                 0.092
+score MIXED_ES                       0.769
+score MIXED_HREF_CASE                1.585
+score MONEY_ATM_CARD                 0.001
 score MONEY_FORM_SHORT               2.499
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  0.787
-score MONEY_FRAUD_8                  0.015
-score MONEY_FREEMAIL_REPTO           0.753
+score MONEY_FRAUD_5                  0.765
+score MONEY_FRAUD_8                  0.018
+score MONEY_FREEMAIL_REPTO           0.771
 score MONEY_FROM_41                  1.999
 score MONEY_FROM_MISSP               1.999
-score MSMAIL_PRI_ABNORMAL            0.303
-score NA_DOLLARS                     0.001
+score MSMAIL_PRI_ABNORMAL            0.736
+score NA_DOLLARS                     0.001 # force non-zero
 score NICE_REPLY_A                   -0.001
-score NORDNS_LOW_CONTRAST            2.499
 score NO_FM_NAME_IP_HOSTN            0.001
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             2.474
-score NUMBERONLY_BITCOIN_EXP         1.999
-score OBFU_TEXT_ATTACH               1.799
-score ODD_FREEM_REPTO                2.947
-score PDS_BTC_ID                     0.486
-score PDS_BTC_MSGID                  0.001
-score PDS_HELO_SPF_FAIL              1.023
-score PDS_NAKED_TO_NUMERO            1.999
+score NSL_RCVD_HELO_USER             0.467
+score NUMBERONLY_BITCOIN_EXP         1.192
+score OBFU_TEXT_ATTACH               0.189
+score ODD_FREEM_REPTO                2.945
+score PDS_BTC_ID                     0.478
+score PDS_BTC_MSGID                  0.001 # force non-zero
+score PDS_HELO_SPF_FAIL              0.771
+score PDS_NAKED_TO_NUMERO            2.000
 score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
-score PDS_OTHER_BAD_TLD              1.999
-score PDS_PHP_EVAL                   1.499
-score PDS_RDNS_DYNAMIC_FP            0.001 # force non-zero
+score PDS_OTHER_BAD_TLD              2.000
+score PDS_PHP_EVAL                   1.500
+score PDS_RDNS_DYNAMIC_FP            0.001
 score PDS_SHORT_SPOOFED_URL          1.999
 score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
-score PHP_ORIG_SCRIPT                2.037
-score PHP_ORIG_SCRIPT_EVAL           2.999
-score PHP_SCRIPT                     2.490
-score PP_MIME_FAKE_ASCII_TEXT        0.001 # force non-zero
+score PHP_ORIG_SCRIPT                1.864
+score PHP_ORIG_SCRIPT_EVAL           3.000
+score PHP_SCRIPT                     2.432
+score PP_MIME_FAKE_ASCII_TEXT        0.001
 score RAND_MKTG_HEADER               1.999
 score RATWARE_NO_RDNS                2.999
 score RCVD_IN_MSPIKE_H2              -0.001
-score RDNS_NUM_TLD_XM                1.149
-score SCC_CANSPAM_2                  0.004
-score SCC_ISEMM_LID_1A               3.443
-score SCC_ISEMM_LID_1B               0.719
+score RDNS_NUM_TLD_XM                0.975
+score SCC_CANSPAM_2                  0.002
+score SCC_ISEMM_LID_1A               2.313
+score SCC_ISEMM_LID_1B               0.742
 score SCC_THREE_WORD_MONTY           2.599
 score SENDGRID_REDIR                 1.067
-score SERGIO_SUBJECT_VIAGRA01        1.936
-score SHARE_50_50                    1.061
-score SHOPIFY_IMG_NOT_RCVD_SFY       0.641
-score SHORTENER_SHORT_IMG            1.155
+score SERGIO_SUBJECT_VIAGRA01        0.693
+score SHARE_50_50                    1.032
+score SHOPIFY_IMG_NOT_RCVD_SFY       0.645
+score SHORTENER_SHORT_IMG            1.153
 score SHORT_SHORTNER                 1.999
 score SPOOFED_FREEMAIL               0.001
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
 score SPOOFED_FREEM_REPTO            2.499
-score SPOOF_GMAIL_MID                0.001 # force non-zero
+score SPOOF_GMAIL_MID                0.001
 score STATIC_XPRIO_OLE               0.001
 score THIS_AD                        0.699
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_SPF_FAIL              0.001 # force non-zero
+score TO_EQ_FM_SPF_FAIL              0.001
 score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           2.000
+score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
-score TO_NO_BRKTS_NORDNS_HTML        1.825
-score TO_NO_BRKTS_PCNT               1.323
-score TVD_RCVD_SPACE_BRACKET         2.009
-score TVD_SPACE_ENCODED              0.001
-score TVD_SPACE_RATIO_MINFP          0.001
-score UNDISC_FREEM                   2.999
+score TO_NO_BRKTS_NORDNS_HTML        1.999
+score TO_NO_BRKTS_PCNT               1.290
+score TVD_RCVD_SPACE_BRACKET         1.003
+score UNDISC_FREEM                   2.899
 score UNDISC_MONEY                   3.199
-score UNICODE_OBFU_ASC               2.499
+score UNICODE_OBFU_ASC               2.500
 score URI_DOTEDU                     1.999
 score URI_FIREBASEAPP                2.999
-score URI_GOOGLE_PROXY               0.698
-score URI_PHISH                      3.398
-score URI_PHP_REDIR                  3.298
+score URI_GOOGLE_PROXY               0.692
+score URI_PHISH                      3.396
+score URI_PHP_REDIR                  3.300
 score URI_TRY_3LD                    0.001
 score URI_WPADMIN                    2.599
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.622
+score VFY_ACCT_NORDNS                2.718
 score WORD_INVIS                     0.001
 score WORD_INVIS_MANY                2.999
-score XFER_LOTSA_MONEY               0.506
+score XFER_LOTSA_MONEY               0.489
 score XM_RANDOM                      2.499
-score XM_RECPTID                     2.451
+score XM_RECPTID                     2.452
 score XPRIO                          0.001
-score XPRIO_SHORT_SUBJ               1.521
-score XPRIO_URL_SHORTNER             0.999
-score YOU_INHERIT                    0.338
+score XPRIO_SHORT_SUBJ               0.001
+score XPRIO_URL_SHORTNER             1.000
+score YOU_INHERIT                    0.127
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1905032&r1=1905031&r2=1905032&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Thu Nov  3 02:43:06 2022
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 219367  65.230%  (99.603% of non-spam corpus)
-# Correctly spam:      85425  25.402%  (73.606% of spam corpus)
-# False positives:       874  0.260%  (0.397% of nonspam,  16138 weighted)
-# False negatives:     30632  9.109%  (26.394% of spam,  47319 weighted)
-# Average score for spam:  10.0    nonspam: 0.6
+# Correctly non-spam: 223212  65.812%  (99.579% of non-spam corpus)
+# Correctly spam:      87124  25.688%  (75.753% of spam corpus)
+# False positives:       944  0.278%  (0.421% of nonspam,  16848 weighted)
+# False negatives:     27886  8.222%  (24.247% of spam,  42362 weighted)
+# Average score for spam:  11.3    nonspam: 0.7
 # Average for false-pos:   7.0  false-neg: 1.5
-# TOTAL:              336298  100.00%
+# TOTAL:              339166  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  27435  99.61%
-# Correctly spam:      10701  73.18%
-# False positives:       107  0.39%
-# False negatives:      3921  26.82%
-# TCR(l=50): 1.577176  SpamRecall: 73.184%  SpamPrec: 99.010%
+# Correctly non-spam:  27940  99.55%
+# Correctly spam:      10952  75.46%
+# False positives:       125  0.45%
+# False negatives:      3561  24.54%
+# TCR(l=50): 1.479258  SpamRecall: 75.463%  SpamPrec: 98.872%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 213842  97.09%
-# Correctly spam:      73406  63.25%
-# False positives:      6399  2.91%
-# False negatives:     42651  36.75%
-# TCR(l=50): 0.320068  SpamRecall: 63.250%  SpamPrec: 91.982%
+# Correctly non-spam: 217646  97.10%
+# Correctly spam:      74769  65.01%
+# False positives:      6510  2.90%
+# False negatives:     40241  34.99%
+# TCR(l=50): 0.314457  SpamRecall: 65.011%  SpamPrec: 91.991%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  26775  97.22%
-# Correctly spam:       9232  63.14%
-# False positives:       767  2.78%
-# False negatives:      5390  36.86%
-# TCR(l=50): 0.334294  SpamRecall: 63.138%  SpamPrec: 92.329%
+# Correctly non-spam:  27235  97.04%
+# Correctly spam:       9365  64.53%
+# False positives:       830  2.96%
+# False negatives:      5148  35.47%
+# TCR(l=50): 0.311117  SpamRecall: 64.528%  SpamPrec: 91.859%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1905032&r1=1905031&r2=1905032&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Thu Nov  3 02:43:06 2022
@@ -1,23 +1,23 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 244626  69.084%  (99.486% of non-spam corpus)
-# Correctly spam:      83654  23.624%  (77.309% of spam corpus)
-# False positives:      1265  0.357%  (0.514% of nonspam,  37486 weighted)
-# False negatives:     24554  6.934%  (22.691% of spam,  44464 weighted)
-# Average score for spam:  16.4    nonspam: -0.5
+# Correctly non-spam: 244626  69.085%  (99.486% of non-spam corpus)
+# Correctly spam:      83543  23.593%  (77.209% of spam corpus)
+# False positives:      1265  0.357%  (0.514% of nonspam,  37449 weighted)
+# False negatives:     24661  6.965%  (22.791% of spam,  44722 weighted)
+# Average score for spam:  16.5    nonspam: -0.5
 # Average for false-pos:   6.7  false-neg: 1.8
-# TOTAL:              354099  100.00%
+# TOTAL:              354095  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  30529  99.45%
+# Correctly non-spam:  30528  99.45%
 # Correctly spam:      10648  77.94%
-# False positives:       169  0.55%
+# False positives:       170  0.55%
 # False negatives:      3014  22.06%
-# TCR(l=50): 1.191731  SpamRecall: 77.939%  SpamPrec: 98.438%
+# TCR(l=50): 1.186555  SpamRecall: 77.939%  SpamPrec: 98.429%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
 
 # SUMMARY for threshold 5.0:
 # Correctly non-spam: 244711  99.52%
-# Correctly spam:      72713  67.20%
+# Correctly spam:      72742  67.23%
 # False positives:      1180  0.48%
-# False negatives:     35495  32.80%
-# TCR(l=50): 1.145119  SpamRecall: 67.197%  SpamPrec: 98.403%
+# False negatives:     35462  32.77%
+# TCR(l=50): 1.145476  SpamRecall: 67.227%  SpamPrec: 98.404%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
 # Correctly non-spam:  30548  99.51%
-# Correctly spam:       9286  67.97%
+# Correctly spam:       9274  67.88%
 # False positives:       150  0.49%
-# False negatives:      4376  32.03%
-# TCR(l=50): 1.150387  SpamRecall: 67.970%  SpamPrec: 98.410%
+# False negatives:      4388  32.12%
+# TCR(l=50): 1.149226  SpamRecall: 67.882%  SpamPrec: 98.408%