You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2022/09/21 02:43:49 UTC
svn commit: r1904180 [1/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Wed Sep 21 02:43:49 2022
New Revision: 1904180
URL: http://svn.apache.org/viewvc?rev=1904180&view=rev
Log:
updated scores for revision 1904159 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1904180&r1=1904179&r2=1904180&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Wed Sep 21 02:43:49 2022
@@ -1,6 +1,6 @@
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS 2.999 3.000 2.999 3.000
+score AC_FROM_MANY_DOTS 2.999 2.999 2.999 2.999
score AC_HTML_NONSENSE_TAGS 1.999 1.999 1.999 1.999
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
@@ -12,22 +12,21 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
-score ADMITS_SPAM 2.200 1.158 2.200 1.158
+score ADMITS_SPAM 2.199 1.149 2.199 1.149
score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000
score ADVANCE_FEE_2_NEW_FORM 0.001 1.000 0.001 1.000
-score ADVANCE_FEE_2_NEW_FRM_MNY 0.706 0.814 0.706 0.814
-score ADVANCE_FEE_2_NEW_MONEY 1.999 0.070 1.999 0.070
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.852 2.499 0.852 2.499
+score ADVANCE_FEE_2_NEW_MONEY 1.999 0.075 1.999 0.075
score ADVANCE_FEE_3_NEW 3.499 3.499 3.499 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.660 0.719 0.660 0.719
-score ADVANCE_FEE_3_NEW_MONEY 2.499 2.499 2.499 2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.926 0.001 0.926
+score ADVANCE_FEE_3_NEW_MONEY 2.599 2.399 2.599 2.399
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.918 0.433 1.918 0.433
score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001
score ADVANCE_FEE_5_NEW 2.299 2.199 2.299 2.199
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.739 0.833 0.739 0.833
-score ADVANCE_FEE_5_NEW_MONEY 0.001 1.190 0.001 1.190
-score AD_PREFS 0.499 0.305 0.499 0.305
-score ALIBABA_IMG_NOT_RCVD_ALI 1.066 2.296 1.066 2.296
-score AMAZON_IMG_NOT_RCVD_AMZN 2.499 1.884 2.499 1.884
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.834 0.001 0.834
+score ADVANCE_FEE_5_NEW_MONEY 0.001 1.188 0.001 1.188
+score AD_PREFS 0.455 0.448 0.455 0.448
+score ALIBABA_IMG_NOT_RCVD_ALI 2.049 1.638 2.049 1.638
+score AMAZON_IMG_NOT_RCVD_AMZN 2.499 2.136 2.499 2.136
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
score ARC_SIGNED 0.001 0.001 0.001 0.001
@@ -35,23 +34,23 @@ score ARC_VALID
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
score AXB_X_FF_SEZ_S 3.299 2.537 3.299 2.537
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM 2.999 2.515 2.999 2.515
-score BIGNUM_EMAILS_MANY 2.597 0.076 2.597 0.076
+score BIGNUM_EMAILS_FREEM 3.000 1.515 3.000 1.515
+score BIGNUM_EMAILS_MANY 2.999 0.001 2.999 0.001
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
score BITCOIN_DEADLINE 1.000 1.000 1.000 1.000
-score BITCOIN_EXTORT_01 4.500 2.322 4.500 2.322
+score BITCOIN_EXTORT_01 4.540 2.329 4.540 2.329
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML 3.499 1.791 3.499 1.791
-score BITCOIN_MALWARE 1.000 2.149 1.000 2.149
+score BITCOIN_MALF_HTML 3.499 1.777 3.499 1.777
+score BITCOIN_MALWARE 1.000 1.912 1.000 1.912
score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000
-score BITCOIN_ONAN 2.521 1.993 2.521 1.993
+score BITCOIN_ONAN 2.273 1.490 2.273 1.490
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02 2.499 2.433 2.499 2.433
+score BITCOIN_SPAM_02 2.499 1.127 2.499 1.127
score BITCOIN_SPAM_03 2.499 2.499 2.499 2.499
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_05 0.001 1.791 0.001 1.791
+score BITCOIN_SPAM_05 0.001 2.422 0.001 2.422
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_07 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
@@ -60,26 +59,25 @@ score BITCOIN_SPAM_10
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
-score BITCOIN_XPRIO 2.489 1.393 2.489 1.393
-score BITCOIN_YOUR_INFO 2.011 1.416 2.011 1.416
-score BODY_SINGLE_URI 2.499 2.267 2.499 2.267
+score BITCOIN_XPRIO 2.351 2.103 2.351 2.103
+score BITCOIN_YOUR_INFO 2.142 1.411 2.142 1.411
+score BODY_SINGLE_URI 2.499 2.115 2.499 2.115
score BODY_URI_ONLY 1.000 2.999 1.000 2.999
score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000
-score BOGUS_MSM_HDRS 2.750 2.418 2.750 2.418
+score BOGUS_MSM_HDRS 2.999 2.470 2.999 2.470
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score BTC_ORG 1.000 1.000 1.000 1.000
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000
score CANT_SEE_AD 1.000 1.000 1.000 1.000
-score CK_HELO_GENERIC 0.249 0.001 0.249 0.001
+score CK_HELO_GENERIC 0.250 0.001 0.250 0.001
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score COMPENSATION 1.000 0.001 1.000 0.001
-score CONTENT_AFTER_HTML 1.585 2.070 1.585 2.070
+score CONTENT_AFTER_HTML 1.296 1.889 1.296 1.889
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
-score CTE_8BIT_MISMATCH 0.240 0.001 0.240 0.001
-score DATE_IN_FUTURE_Q_PLUS 2.600 2.499 2.600 2.499
+score CTE_8BIT_MISMATCH 0.241 0.001 0.241 0.001
+score DATE_IN_FUTURE_Q_PLUS 2.599 2.499 2.599 2.499
score DAY_I_EARNED 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 1.373 2.999 1.373 2.999
+score DEAR_BENEFICIARY 1.075 2.899 1.075 2.899
score DKIMWL_BL 0.001 1.000 0.001 1.000
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
@@ -87,135 +85,137 @@ score DKIMWL_WL_MED
score DKIMWL_WL_MEDHI 0.001 -0.001 0.001 -0.001
score DOTGOV_IMAGE 1.000 1.000 1.000 1.000
score DX_TEXT_03 0.200 0.200 0.200 0.200
-score DYNAMIC_IMGUR 3.399 3.556 3.399 3.556
+score DYNAMIC_IMGUR 3.411 0.432 3.411 0.432
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
-score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999
+score ENCRYPTED_MESSAGE -0.999 -1.000 -0.999 -1.000
score END_FUTURE_EMAILS 1.000 2.499 1.000 2.499
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
score FBI_MONEY 1.000 1.000 1.000 1.000
score FBI_SPOOF 1.000 1.000 1.000 1.000
-score FILL_THIS_FORM 1.200 1.399 1.200 1.399
-score FONT_INVIS_DIRECT 0.361 0.001 0.361 0.001
+score FILL_THIS_FORM 1.199 1.400 1.199 1.400
+score FONT_INVIS_DIRECT 0.685 0.001 0.685 0.001
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
-score FONT_INVIS_HTML_NOHTML 2.999 2.999 2.999 2.999
-score FONT_INVIS_LONG_LINE 2.999 2.999 2.999 2.999
-score FONT_INVIS_MSGID 0.471 0.919 0.471 0.919
-score FONT_INVIS_NORDNS 1.886 2.499 1.886 2.499
-score FONT_INVIS_POSTEXTRAS 1.615 2.184 1.615 2.184
+score FONT_INVIS_HTML_NOHTML 3.000 2.999 3.000 2.999
+score FONT_INVIS_LONG_LINE 2.999 3.000 2.999 3.000
+score FONT_INVIS_MSGID 1.482 0.965 1.482 0.965
+score FONT_INVIS_NORDNS 1.885 2.499 1.885 2.499
+score FONT_INVIS_POSTEXTRAS 1.650 2.183 1.650 2.183
score FORM_FRAUD 1.000 0.999 1.000 0.999
-score FORM_FRAUD_5 2.999 2.899 2.999 2.899
-score FOUND_YOU 3.249 2.972 3.249 2.972
-score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.250 0.249 0.250
+score FORM_FRAUD_5 2.999 2.858 2.999 2.858
+score FOUND_YOU 2.600 2.964 2.600 2.964
+score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.249 0.250 0.249
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
-score FROM_2_EMAILS_SHORT 1.491 2.999 1.491 2.999
+score FROM_2_EMAILS_SHORT 2.005 3.000 2.005 3.000
score FROM_ADDR_WS 1.000 1.000 1.000 1.000
score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
score FROM_FMBLA_NEWDOM 0.001 1.000 0.001 1.000
score FROM_FMBLA_NEWDOM14 0.001 0.001 0.001 0.001
score FROM_FMBLA_NEWDOM28 0.001 0.799 0.001 0.799
-score FROM_GOV_DKIM_AU 0.001 -0.916 0.001 -0.916
+score FROM_GOV_DKIM_AU 0.001 -0.134 0.001 -0.134
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000
score FROM_MISSPACED 1.999 1.999 1.999 1.999
-score FROM_MISSP_DYNIP 2.299 2.199 2.299 2.199
+score FROM_MISSP_DYNIP 2.299 2.200 2.299 2.200
score FROM_MISSP_EH_MATCH 1.999 0.001 1.999 0.001
score FROM_MISSP_FREEMAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
score FROM_MISSP_REPLYTO 1.000 0.001 1.000 0.001
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
-score FROM_MULTI_NORDNS 1.219 0.001 1.219 0.001
+score FROM_MULTI_NORDNS 1.231 0.940 1.231 0.940
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
score FROM_NTLD_LINKBAIT 1.000 1.000 1.000 1.000
-score FROM_NTLD_REPLY_FREEMAIL 1.429 1.000 1.429 1.000
+score FROM_NTLD_REPLY_FREEMAIL 1.869 1.000 1.869 1.000
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
-score FROM_ONE_CHAR 2.199 2.199 2.199 2.199
-score FROM_PAYPAL_SPOOF 0.001 0.014 0.001 0.014
+score FROM_ONE_CHAR 2.200 2.199 2.200 2.199
+score FROM_PAYPAL_SPOOF 0.001 1.267 0.001 1.267
score FROM_SUSPICIOUS_NTLD 0.500 0.001 0.500 0.001
score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_AMAZON 2.599 2.499 2.599 2.499
+score FUZZY_AMAZON 2.599 2.399 2.599 2.399
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
-score GB_BITCOIN_CP 1.101 2.857 1.101 2.857
-score GB_CUSTOM_HTM_URI 1.500 1.499 1.500 1.499
-score GB_FAKE_RF_SHORT 1.787 1.599 1.787 1.599
+score GB_BITCOIN_CP 1.409 2.960 1.409 2.960
+score GB_CUSTOM_HTM_URI 1.499 1.499 1.499 1.499
+score GB_FAKE_RF_SHORT 1.999 1.592 1.999 1.592
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
score GB_FREEMAIL_DISPTO 0.499 0.164 0.499 0.164
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.500 0.500 0.500
score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750
score GB_HASHBL_BTC 0.001 0.001 0.001 0.001
score GB_STORAGE_GOOGLE_EMAIL 1.000 1.000 1.000 1.000
-score GB_URI_FLEEK_STO_HTM 0.999 0.999 0.999 0.999
+score GB_URI_FLEEK_STO_HTM 0.999 1.000 0.999 1.000
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
score GOOG_REDIR_HTML_ONLY 1.999 1.999 1.999 1.999
-score GOOG_REDIR_NORDNS 2.596 3.127 2.596 3.127
+score GOOG_REDIR_NORDNS 2.596 3.125 2.596 3.125
score GOOG_STO_EMAIL_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000
-score GOOG_STO_NOIMG_HTML 2.903 2.999 2.903 2.999
+score GOOG_STO_NOIMG_HTML 2.999 2.999 2.999 2.999
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
-score HAS_X_OUTGOING_SPAM_STAT 1.999 1.109 1.999 1.109
+score HAS_X_OUTGOING_SPAM_STAT 1.999 1.023 1.999 1.023
+score HDRS_LCASE 0.100 0.100 0.100 0.100
score HDRS_LCASE_IMGONLY 0.100 0.100 0.100 0.100
score HDRS_MISSP 2.499 0.943 2.499 0.943
-score HDR_ORDER_FTSDMCXX_DIRECT 1.592 1.234 1.592 1.234
-score HDR_ORDER_FTSDMCXX_NORDNS 2.806 2.600 2.806 2.600
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250 0.250 0.250 0.250
+score HDR_ORDER_FTSDMCXX_DIRECT 0.168 1.128 0.168 1.128
+score HDR_ORDER_FTSDMCXX_NORDNS 0.001 3.219 0.001 3.219
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.249 0.249 0.249
score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001
score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_CTE_RAW 1.000 1.000 1.000 1.000
-score HK_NAME_MR_MRS 1.000 1.000 1.000 1.000
-score HK_RANDOM_ENVFROM 0.999 1.000 0.999 1.000
+score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
+score HK_RANDOM_ENVFROM 1.000 1.000 1.000 1.000
score HK_RANDOM_FROM 0.999 0.999 0.999 0.999
-score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
+score HK_RANDOM_REPLYTO 1.000 0.999 1.000 0.999
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
-score HK_SCAM 0.532 0.972 0.532 0.972
-score HOSTED_IMG_DIRECT_MX 3.499 3.411 3.499 3.411
+score HK_SCAM 0.387 0.976 0.387 0.976
+score HK_WIN 1.000 0.001 1.000 0.001
+score HOSTED_IMG_DIRECT_MX 3.499 3.155 3.499 3.155
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
-score HOSTED_IMG_FREEM 3.499 3.114 3.499 3.114
+score HOSTED_IMG_FREEM 3.499 2.862 3.499 2.862
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
-score HOSTED_IMG_MULTI_PUB_01 2.999 3.000 2.999 3.000
+score HOSTED_IMG_MULTI_PUB_01 2.999 2.999 2.999 2.999
score HTML_ENTITY_ASCII 2.999 2.999 2.999 2.999
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
-score HTML_OFF_PAGE 2.999 2.652 2.999 2.652
+score HTML_OFF_PAGE 2.999 2.650 2.999 2.650
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
score HTML_SINGLET_MANY 1.000 1.000 1.000 1.000
-score HTML_TEXT_INVISIBLE_FONT 1.000 0.001 1.000 0.001
-score HTML_TEXT_INVISIBLE_STYLE 1.878 2.812 1.878 2.812
+score HTML_TEXT_INVISIBLE_FONT 1.000 0.115 1.000 0.115
+score HTML_TEXT_INVISIBLE_STYLE 1.877 2.808 1.877 2.808
score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
-score JH_SPAMMY_HEADERS 3.499 3.500 3.499 3.500
+score JH_SPAMMY_HEADERS 3.499 3.499 3.499 3.499
score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000
score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000
-score KHOP_HELO_FCRDNS 0.400 0.399 0.400 0.399
+score KHOP_HELO_FCRDNS 0.400 0.400 0.400 0.400
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
-score LONG_HEX_URI 2.999 1.615 2.999 1.615
-score LONG_IMG_URI 1.940 0.995 1.940 0.995
-score LONG_INVISIBLE_TEXT 3.000 1.155 3.000 1.155
+score LONG_HEX_URI 2.999 1.616 2.999 1.616
+score LONG_IMG_URI 1.941 0.950 1.941 0.950
+score LONG_INVISIBLE_TEXT 3.000 1.156 3.000 1.156
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
-score LOTTO_AGENT 1.292 1.043 1.292 1.043
+score LOTTO_AGENT 1.000 0.790 1.000 0.790
score LUCRATIVE 1.000 1.000 1.000 1.000
score MALF_HTML_B64 1.000 1.000 1.000 1.000
-score MALWARE_NORDNS 2.986 2.637 2.986 2.637
+score MALWARE_NORDNS 2.101 0.270 2.101 0.270
score MALWARE_PASSWORD 1.000 1.000 1.000 1.000
-score MILLION_HUNDRED 0.001 1.984 0.001 1.984
-score MILLION_USD 0.001 0.001 0.001 0.001
-score MIMEOLE_DIRECT_TO_MX 1.894 1.419 1.894 1.419
-score MIME_NO_TEXT 1.999 0.203 1.999 0.203
+score MANY_HDRS_LCASE 0.100 0.001 0.100 0.001
+score MILLION_HUNDRED 0.001 1.985 0.001 1.985
+score MIMEOLE_DIRECT_TO_MX 1.875 1.999 1.875 1.999
+score MIME_NO_TEXT 1.999 0.001 1.999 0.001
score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
score MIXED_CENTER_CASE 1.000 1.000 1.000 1.000
-score MIXED_ES 2.100 2.099 2.100 2.099
+score MIXED_ES 2.199 2.100 2.199 2.100
score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
score MIXED_HREF_CASE 1.000 1.000 1.000 1.000
score MIXED_IMG_CASE 1.000 1.000 1.000 1.000
@@ -223,48 +223,49 @@ score MONERO_DEADLINE
score MONERO_EXTORT_01 1.000 1.000 1.000 1.000
score MONERO_MALWARE 1.000 1.000 1.000 1.000
score MONERO_PAY_ME 1.000 1.000 1.000 1.000
-score MONEY_ATM_CARD 0.421 0.636 0.421 0.636
+score MONEY_ATM_CARD 0.001 0.345 0.001 0.345
score MONEY_FORM 0.001 0.001 0.001 0.001
score MONEY_FORM_SHORT 2.499 2.499 2.499 2.499
-score MONEY_FRAUD_3 1.610 0.001 1.610 0.001
+score MONEY_FRAUD_3 1.891 0.001 1.891 0.001
score MONEY_FRAUD_5 2.999 0.001 2.999 0.001
-score MONEY_FRAUD_8 2.999 2.900 2.999 2.900
-score MONEY_FREEMAIL_REPTO 2.999 2.017 2.999 2.017
+score MONEY_FRAUD_8 1.537 2.899 1.537 2.899
+score MONEY_FREEMAIL_REPTO 2.999 2.010 2.999 2.010
score MONEY_FROM_41 1.000 1.000 1.000 1.000
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
score MSMAIL_PRI_ABNORMAL 0.001 0.001 0.001 0.001
score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000
-score NA_DOLLARS 0.802 1.499 0.802 1.499
+score NA_DOLLARS 0.802 1.224 0.802 1.224
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
score NEW_PRODUCTS 1.000 1.000 1.000 1.000
-score NICE_REPLY_A -4.299 -2.182 -4.299 -2.182
+score NICE_REPLY_A -1.495 -3.702 -1.495 -3.702
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER 0.001 2.121 0.001 2.121
-score NUMBERONLY_BITCOIN_EXP 0.596 1.999 0.596 1.999
+score NSL_RCVD_HELO_USER 0.001 1.211 0.001 1.211
+score NUMBERONLY_BITCOIN_EXP 0.151 1.480 0.151 1.480
score OBFU_BITCOIN 1.000 1.000 1.000 1.000
-score OBFU_TEXT_ATTACH 0.257 0.001 0.257 0.001
-score ODD_FREEM_REPTO 2.999 2.483 2.999 2.483
-score PDS_BTC_ID 0.500 0.500 0.500 0.500
-score PDS_BTC_MSGID 0.330 0.001 0.330 0.001
-score PDS_BTC_NTLD 1.999 1.648 1.999 1.648
+score OBFU_TEXT_ATTACH 0.739 0.134 0.739 0.134
+score ODD_FREEM_REPTO 2.999 2.370 2.999 2.370
+score PDS_BTC_ID 0.500 0.499 0.500 0.499
+score PDS_BTC_MSGID 0.001 0.398 0.001 0.398
+score PDS_BTC_NTLD 0.300 0.635 0.300 0.635
score PDS_DBL_URL_TNB_RUNON 1.999 1.000 1.999 1.000
-score PDS_HELO_SPF_FAIL 0.001 1.999 0.001 1.999
-score PDS_NAKED_TO_NUMERO 1.999 1.999 1.999 1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.749 0.750 0.749 0.750
+score PDS_FROM_2_EMAILS 1.000 0.001 1.000 0.001
+score PDS_HELO_SPF_FAIL 0.001 0.743 0.001 0.743
+score PDS_NAKED_TO_NUMERO 1.906 1.999 1.906 1.999
+score PDS_NO_FULL_NAME_SPOOFED_URL 0.749 0.749 0.749 0.749
score PDS_PHPEXP_BOT 1.499 1.499 1.499 1.499
-score PDS_PHP_EVAL 0.652 1.499 0.652 1.499
-score PDS_SHORT_BOGUS_MSM_HDRS 1.792 1.033 1.792 1.033
-score PDS_SHORT_SPOOFED_URL 1.999 2.000 1.999 2.000
+score PDS_PHP_EVAL 1.102 0.001 1.102 0.001
+score PDS_SHORT_BOGUS_MSM_HDRS 1.999 1.477 1.999 1.477
+score PDS_SHORT_SPOOFED_URL 1.999 1.999 1.999 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999 0.001 1.999 0.001
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
score PHP_ORIG_SCRIPT 2.499 2.499 2.499 2.499
-score PHP_ORIG_SCRIPT_EVAL 2.908 2.715 2.908 2.715
-score PHP_SCRIPT 2.499 1.188 2.499 1.188
+score PHP_ORIG_SCRIPT_EVAL 2.525 2.793 2.525 2.793
+score PHP_SCRIPT 2.499 1.275 2.499 1.275
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
@@ -273,8 +274,8 @@ score PUMPDUMP
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
-score RAND_MKTG_HEADER 2.000 2.000 2.000 2.000
-score RATWARE_NO_RDNS 1.863 1.634 1.863 1.634
+score RAND_MKTG_HEADER 1.999 1.999 1.999 1.999
+score RATWARE_NO_RDNS 0.968 1.589 0.968 1.589
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
@@ -289,7 +290,7 @@ score RCVD_IN_MSPIKE_L5
score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000
-score RDNS_NUM_TLD_XM 0.563 0.379 0.563 0.379
+score RDNS_NUM_TLD_XM 1.803 0.644 1.803 0.644
score READY_TO_SHIP 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD 0.001 0.001 0.001 0.001
score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000
@@ -306,19 +307,19 @@ score REPTO_419_FRAUD_YH_LOOSE
score REPTO_419_FRAUD_YJ 1.000 1.000 1.000 1.000
score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000
score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000
-score SCC_CANSPAM_2 0.500 0.867 0.500 0.867
+score SCC_CANSPAM_2 0.244 0.864 0.244 0.864
score SCC_ISEMM_LID_1 1.000 1.000 1.000 1.000
score SENDGRID_REDIR 1.499 1.499 1.499 1.499
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
-score SERGIO_SUBJECT_VIAGRA01 2.603 2.552 2.603 2.552
-score SHOPIFY_IMG_NOT_RCVD_SFY 1.189 0.183 1.189 0.183
+score SERGIO_SUBJECT_VIAGRA01 0.900 0.394 0.900 0.394
+score SHOPIFY_IMG_NOT_RCVD_SFY 0.748 0.436 0.748 0.436
score SHORTENER_SHORT_IMG 1.000 1.000 1.000 1.000
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
score SHORT_SHORTNER 1.999 1.999 1.999 1.999
score SPOOFED_FREEMAIL 0.001 0.001 0.001 0.001
score SPOOFED_FREEMAIL_NO_RDNS 1.000 0.001 1.000 0.001
-score SPOOFED_FREEM_REPTO 0.001 2.499 0.001 2.499
+score SPOOFED_FREEM_REPTO 0.001 1.989 0.001 1.989
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
score SPOOF_GMAIL_MID 1.000 0.001 1.000 0.001
@@ -329,7 +330,7 @@ score SURBL_BLOCKED
score SYSADMIN 1.000 1.000 1.000 1.000
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
-score THIS_AD 0.900 0.800 0.900 0.800
+score THIS_AD 0.799 0.799 0.799 0.799
score THIS_IS_ADV_SUSP_NTLD 1.000 1.000 1.000 1.000
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
score TO_EQ_FM_DIRECT_MX 1.000 1.000 1.000 1.000
@@ -337,21 +338,21 @@ score TO_EQ_FM_DOM_SPF_FAIL
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
score TO_NAME_SUBJ_NO_RDNS 1.000 1.000 1.000 1.000
-score TO_NO_BRKTS_FROM_MSSP 2.499 1.936 2.499 1.936
+score TO_NO_BRKTS_FROM_MSSP 2.499 1.933 2.499 1.933
score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
score TO_NO_BRKTS_MSFT 1.000 0.001 1.000 0.001
-score TO_NO_BRKTS_NORDNS_HTML 1.999 2.000 1.999 2.000
-score TO_NO_BRKTS_PCNT 2.486 1.802 2.486 1.802
-score TVD_RCVD_SPACE_BRACKET 1.329 2.000 1.329 2.000
+score TO_NO_BRKTS_NORDNS_HTML 1.999 1.999 1.999 1.999
+score TO_NO_BRKTS_PCNT 0.791 1.669 0.791 1.669
+score TVD_RCVD_SPACE_BRACKET 2.096 2.129 2.096 2.129
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score UNDISC_FREEM 3.199 3.099 3.199 3.099
-score UNDISC_MONEY 3.399 1.989 3.399 1.989
-score UNICODE_OBFU_ASC 2.499 2.500 2.499 2.500
+score UNDISC_FREEM 3.199 2.999 3.199 2.999
+score UNDISC_MONEY 2.380 1.991 2.380 1.991
+score UNICODE_OBFU_ASC 2.500 2.499 2.500 2.499
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
-score UPPERCASE_URI 3.099 2.874 3.099 2.874
+score UPPERCASE_URI 3.099 2.876 3.099 2.876
score URI_ADOBESPARK 1.000 1.000 1.000 1.000
score URI_AZURE_CLOUDAPP 1.000 1.000 1.000 1.000
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
@@ -359,7 +360,7 @@ score URI_DATA
score URI_DOTEDU 1.999 1.999 1.999 1.999
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
score URI_FIREBASEAPP 1.000 1.000 1.000 1.000
-score URI_GOOGLE_PROXY 2.199 1.097 2.199 1.097
+score URI_GOOGLE_PROXY 2.099 1.091 2.099 1.091
score URI_GOOG_STO_SPAMMY 3.000 3.000 3.000 3.000
score URI_HEX_IP 1.000 1.000 1.000 1.000
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
@@ -367,27 +368,27 @@ score URI_LONG_REPEAT
score URI_OBFU_DOM 2.299 2.200 2.299 2.200
score URI_ONLY_MSGID_MALF 1.000 1.000 1.000 1.000
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.999 2.899 3.999 2.899
-score URI_PHP_REDIR 3.499 3.391 3.499 3.391
-score URI_TRY_3LD 1.949 1.984 1.949 1.984
+score URI_PHISH 3.999 2.898 3.999 2.898
+score URI_PHP_REDIR 3.499 3.397 3.499 3.397
+score URI_TRY_3LD 1.950 1.984 1.950 1.984
score URI_TRY_USME 1.000 1.000 1.000 1.000
score URI_WPADMIN 2.199 2.199 2.199 2.199
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
score URI_WP_HACKED 1.000 3.499 1.000 3.499
score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
score USB_DRIVES 1.000 1.000 1.000 1.000
-score VFY_ACCT_NORDNS 2.691 2.999 2.691 2.999
+score VFY_ACCT_NORDNS 2.999 2.999 2.999 2.999
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
score WANT_TO_ORDER 1.000 1.000 1.000 1.000
-score WORD_INVIS 1.550 0.790 1.550 0.790
+score WORD_INVIS 1.000 0.807 1.000 0.807
score WORD_INVIS_MANY 1.000 1.000 1.000 1.000
score XFER_LOTSA_MONEY 0.999 0.999 0.999 0.999
score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
-score XM_RANDOM 2.499 2.484 2.499 2.484
-score XM_RECPTID 2.999 2.999 2.999 2.999
+score XM_RANDOM 2.499 2.480 2.499 2.480
+score XM_RECPTID 3.000 2.999 3.000 2.999
score XPRIO 1.000 0.001 1.000 0.001
-score XPRIO_SHORT_SUBJ 0.942 1.308 0.942 1.308
-score XPRIO_URL_SHORTNER 0.999 0.999 0.999 0.999
-score YOUR_DELIVERY_ADDRESS 1.249 1.249 1.249 1.249
-score YOU_INHERIT 2.199 2.199 2.199 2.199
+score XPRIO_SHORT_SUBJ 0.351 1.697 0.351 1.697
+score XPRIO_URL_SHORTNER 1.000 1.000 1.000 1.000
+score YOUR_DELIVERY_ADDRESS 1.249 1.250 1.249 1.250
+score YOU_INHERIT 0.551 2.199 0.551 2.199
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1904180&r1=1904179&r2=1904180&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Wed Sep 21 02:43:49 2022
@@ -1,179 +1,174 @@
-# Using score set 0 logs for revision 1904143 from:
-# ham-ena-week0.r1904143.log ham-ena-week1.r1904143.log ham-ena-week2.r1904143.log ham-ena-week3.r1904143.log ham-ena-week4.r1904143.log ham-giovanni-ham.r1904143.log ham-giovanni-spammy.r1904143.log ham-giovanni-spam.r1904143.log ham-grenier.r1904143.log ham-hege.r1904143.log ham-jhardin.r1904143.log ham-llanga.r1904143.log ham-mmiroslaw-mails-ham.r1904143.log ham-mmiroslaw-mails-spam.r1904143.log ham-spamsponge.r1904143.log ham-thendrikx.r1904143.log ham-tsz-spam-corpus.r1904143.log spam-ena-week0.r1904143.log spam-ena-week1.r1904143.log spam-ena-week2.r1904143.log spam-ena-week3.r1904143.log spam-ena-week4.r1904143.log spam-giovanni-ham.r1904143.log spam-giovanni-spammy.r1904143.log spam-giovanni-spam.r1904143.log spam-grenier.r1904143.log spam-hege.r1904143.log spam-jhardin.r1904143.log spam-llanga.r1904143.log spam-mmiroslaw-mails-ham.r1904143.log spam-mmiroslaw-mails-spam.r1904143.log spam-spamsponge.r1904143.log spam-thendrikx.r1904143.log spam-tsz-spam-corpus.r1904143.log
+# Using score set 0 logs for revision 1904159 from:
+# ham-ena-week0.r1904159.log ham-ena-week1.r1904159.log ham-ena-week2.r1904159.log ham-ena-week3.r1904159.log ham-ena-week4.r1904159.log ham-giovanni-ham.r1904159.log ham-giovanni-spammy.r1904159.log ham-giovanni-spam.r1904159.log ham-grenier.r1904159.log ham-hege.r1904159.log ham-jhardin.r1904159.log ham-llanga.r1904159.log ham-mmiroslaw-mails-ham.r1904159.log ham-mmiroslaw-mails-spam.r1904159.log ham-spamsponge.r1904159.log ham-thendrikx.r1904159.log ham-tsz-spam-corpus.r1904159.log spam-ena-week0.r1904159.log spam-ena-week1.r1904159.log spam-ena-week2.r1904159.log spam-ena-week3.r1904159.log spam-ena-week4.r1904159.log spam-giovanni-ham.r1904159.log spam-giovanni-spammy.r1904159.log spam-giovanni-spam.r1904159.log spam-grenier.r1904159.log spam-hege.r1904159.log spam-jhardin.r1904159.log spam-llanga.r1904159.log spam-mmiroslaw-mails-ham.r1904159.log spam-mmiroslaw-mails-spam.r1904159.log spam-spamsponge.r1904159.log spam-thendrikx.r1904159.log spam-tsz-spam-corpus.r1904159.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.999
score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 2.200
-score ADVANCE_FEE_2_NEW_FORM 0.001
-score ADVANCE_FEE_2_NEW_FRM_MNY 0.706
+score ADMITS_SPAM 2.199
+score ADVANCE_FEE_2_NEW_FORM 0.001 # force non-zero
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.852
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.660
-score ADVANCE_FEE_3_NEW_MONEY 2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_3_NEW_MONEY 2.599
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.918
score ADVANCE_FEE_4_NEW_MONEY 0.001
score ADVANCE_FEE_5_NEW 2.299
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.739
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AD_PREFS 0.499
-score ALIBABA_IMG_NOT_RCVD_ALI 1.066
+score AD_PREFS 0.455
+score ALIBABA_IMG_NOT_RCVD_ALI 2.049
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
score AXB_X_FF_SEZ_S 3.299
-score BIGNUM_EMAILS_FREEM 2.999
-score BIGNUM_EMAILS_MANY 2.597
-score BITCOIN_EXTORT_01 4.500
+score BIGNUM_EMAILS_FREEM 3.000
+score BIGNUM_EMAILS_MANY 2.999
+score BITCOIN_EXTORT_01 4.540
score BITCOIN_MALF_HTML 3.499
-score BITCOIN_ONAN 2.521
+score BITCOIN_ONAN 2.273
score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_03 2.499
-score BITCOIN_XPRIO 2.489
-score BITCOIN_YOUR_INFO 2.011
+score BITCOIN_XPRIO 2.351
+score BITCOIN_YOUR_INFO 2.142
score BODY_SINGLE_URI 2.499
-score BOGUS_MSM_HDRS 2.750
-score CK_HELO_GENERIC 0.249
-score CONTENT_AFTER_HTML 1.585
-score CTE_8BIT_MISMATCH 0.240
-score DATE_IN_FUTURE_Q_PLUS 2.600
-score DEAR_BENEFICIARY 1.373
+score BOGUS_MSM_HDRS 2.999
+score CK_HELO_GENERIC 0.250
+score CONTENT_AFTER_HTML 1.296
+score CTE_8BIT_MISMATCH 0.241
+score DATE_IN_FUTURE_Q_PLUS 2.599
+score DEAR_BENEFICIARY 1.075
score DX_TEXT_03 0.200
-score DYNAMIC_IMGUR 3.399
+score DYNAMIC_IMGUR 3.411
score ENCRYPTED_MESSAGE -0.999
-score FILL_THIS_FORM 1.200
-score FONT_INVIS_DIRECT 0.361
-score FONT_INVIS_HTML_NOHTML 2.999
+score FILL_THIS_FORM 1.199
+score FONT_INVIS_DIRECT 0.685
+score FONT_INVIS_HTML_NOHTML 3.000
score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 0.471
-score FONT_INVIS_NORDNS 1.886
-score FONT_INVIS_POSTEXTRAS 1.615
+score FONT_INVIS_MSGID 1.482
+score FONT_INVIS_NORDNS 1.885
+score FONT_INVIS_POSTEXTRAS 1.650
score FORM_FRAUD_5 2.999
-score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_2_EMAILS_SHORT 1.491
+score FOUND_YOU 2.600
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
+score FROM_2_EMAILS_SHORT 2.005
score FROM_MISSPACED 1.999
score FROM_MISSP_DYNIP 2.299
score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 0.001
-score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_MSFT 0.001 # force non-zero
score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 1.219
-score FROM_NTLD_REPLY_FREEMAIL 1.429
-score FROM_ONE_CHAR 2.199
+score FROM_MULTI_NORDNS 1.231
+score FROM_NTLD_REPLY_FREEMAIL 1.869
+score FROM_ONE_CHAR 2.200
score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
score FUZZY_AMAZON 2.599
-score GB_BITCOIN_CP 1.101
-score GB_CUSTOM_HTM_URI 1.500
-score GB_FAKE_RF_SHORT 1.787
+score GB_BITCOIN_CP 1.409
+score GB_CUSTOM_HTM_URI 1.499
+score GB_FAKE_RF_SHORT 1.999
score GB_FREEMAIL_DISPTO 0.499
score GB_URI_FLEEK_STO_HTM 0.999
score GOOG_REDIR_HTML_ONLY 1.999
score GOOG_REDIR_NORDNS 2.596
-score GOOG_STO_NOIMG_HTML 2.903
+score GOOG_STO_NOIMG_HTML 2.999
score HAS_X_OUTGOING_SPAM_STAT 1.999
score HDRS_LCASE_IMGONLY 0.100
score HDRS_MISSP 2.499
-score HDR_ORDER_FTSDMCXX_DIRECT 1.592
-score HDR_ORDER_FTSDMCXX_NORDNS 2.806
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250
-score HELO_NO_DOMAIN 0.001 # force non-zero
-score HK_NAME_MR_MRS 1.000
-score HK_RANDOM_ENVFROM 0.999
+score HDR_ORDER_FTSDMCXX_DIRECT 0.168
+score HDR_ORDER_FTSDMCXX_NORDNS 0.001
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HELO_NO_DOMAIN 0.001
+score HK_NAME_MR_MRS 0.999
+score HK_RANDOM_ENVFROM 1.000
score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM 0.532
+score HK_RANDOM_REPLYTO 1.000
+score HK_SCAM 0.387
score HOSTED_IMG_DIRECT_MX 3.499
score HOSTED_IMG_FREEM 3.499
score HOSTED_IMG_MULTI_PUB_01 2.999
score HTML_ENTITY_ASCII 2.999
score HTML_OFF_PAGE 2.999
-score HTML_TEXT_INVISIBLE_STYLE 1.878
+score HTML_TEXT_INVISIBLE_STYLE 1.877
score JH_SPAMMY_HEADERS 3.499
score LONG_HEX_URI 2.999
-score LONG_IMG_URI 1.940
+score LONG_IMG_URI 1.941
score LONG_INVISIBLE_TEXT 3.000
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.292
-score MALWARE_NORDNS 2.986
+score MALWARE_NORDNS 2.101
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.001
-score MIMEOLE_DIRECT_TO_MX 1.894
+score MIMEOLE_DIRECT_TO_MX 1.875
score MIME_NO_TEXT 1.999
-score MIXED_ES 2.100
-score MONEY_ATM_CARD 0.421
+score MIXED_ES 2.199
+score MONEY_ATM_CARD 0.001
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 1.610
+score MONEY_FRAUD_3 1.891
score MONEY_FRAUD_5 2.999
-score MONEY_FRAUD_8 2.999
+score MONEY_FRAUD_8 1.537
score MONEY_FREEMAIL_REPTO 2.999
score MONEY_FROM_MISSP 0.001
score MSMAIL_PRI_ABNORMAL 0.001
score NA_DOLLARS 0.802
-score NICE_REPLY_A -4.299
+score NICE_REPLY_A -1.495
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.596
-score OBFU_TEXT_ATTACH 0.257
+score NUMBERONLY_BITCOIN_EXP 0.151
+score OBFU_TEXT_ATTACH 0.739
score ODD_FREEM_REPTO 2.999
score PDS_BTC_ID 0.500
-score PDS_BTC_MSGID 0.330
-score PDS_BTC_NTLD 1.999
+score PDS_BTC_MSGID 0.001
+score PDS_BTC_NTLD 0.300
score PDS_DBL_URL_TNB_RUNON 1.999
-score PDS_NAKED_TO_NUMERO 1.999
+score PDS_NAKED_TO_NUMERO 1.906
score PDS_NO_FULL_NAME_SPOOFED_URL 0.749
score PDS_PHPEXP_BOT 1.499
-score PDS_PHP_EVAL 0.652
-score PDS_SHORT_BOGUS_MSM_HDRS 1.792
+score PDS_PHP_EVAL 1.102
+score PDS_SHORT_BOGUS_MSM_HDRS 1.999
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
score PHP_ORIG_SCRIPT 2.499
-score PHP_ORIG_SCRIPT_EVAL 2.908
+score PHP_ORIG_SCRIPT_EVAL 2.525
score PHP_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RAND_MKTG_HEADER 2.000
-score RATWARE_NO_RDNS 1.863
-score RDNS_NUM_TLD_XM 0.563
-score REPTO_419_FRAUD 0.001
-score SCC_CANSPAM_2 0.500
+score RAND_MKTG_HEADER 1.999
+score RATWARE_NO_RDNS 0.968
+score RDNS_NUM_TLD_XM 1.803
+score REPTO_419_FRAUD 0.001 # force non-zero
+score SCC_CANSPAM_2 0.244
score SENDGRID_REDIR 1.499
-score SERGIO_SUBJECT_VIAGRA01 2.603
-score SHOPIFY_IMG_NOT_RCVD_SFY 1.189
+score SERGIO_SUBJECT_VIAGRA01 0.900
+score SHOPIFY_IMG_NOT_RCVD_SFY 0.748
score SHORT_SHORTNER 1.999
score STATIC_XPRIO_OLE 0.001
-score THIS_AD 0.900
+score THIS_AD 0.799
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.486
-score TVD_RCVD_SPACE_BRACKET 1.329
+score TO_NO_BRKTS_PCNT 0.791
+score TVD_RCVD_SPACE_BRACKET 2.096
score UNDISC_FREEM 3.199
-score UNDISC_MONEY 3.399
-score UNICODE_OBFU_ASC 2.499
+score UNDISC_MONEY 2.380
+score UNICODE_OBFU_ASC 2.500
score UPPERCASE_URI 3.099
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.199
+score URI_GOOGLE_PROXY 2.099
score URI_OBFU_DOM 2.299
score URI_PHISH 3.999
score URI_PHP_REDIR 3.499
-score URI_TRY_3LD 1.949
+score URI_TRY_3LD 1.950
score URI_WPADMIN 2.199
score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.691
-score WORD_INVIS 1.550
+score VFY_ACCT_NORDNS 2.999
score XFER_LOTSA_MONEY 0.999
score XM_RANDOM 2.499
-score XM_RECPTID 2.999
-score XPRIO_SHORT_SUBJ 0.942
-score XPRIO_URL_SHORTNER 0.999
+score XM_RECPTID 3.000
+score XPRIO_SHORT_SUBJ 0.351
score YOUR_DELIVERY_ADDRESS 1.249
-score YOU_INHERIT 2.199
+score YOU_INHERIT 0.551
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -212,7 +207,6 @@ score BTC_ORG 1.0
score BULK_RE_SUSP_NTLD 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
-score COMPENSATION 1.000
score CONTENT_AFTER_HTML_WEAK 1.000
score DAY_I_EARNED 1.000
score DOTGOV_IMAGE 1.000
@@ -245,9 +239,11 @@ score GOOG_STO_HTML_PHISH_MANY 1.0
score GOOG_STO_IMG_HTML 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
+score HDRS_LCASE 0.100
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
+score HK_WIN 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
score HOSTED_IMG_MULTI 1.000
score HTML_ENTITY_ASCII_TINY 1.000
@@ -261,9 +257,11 @@ score KHOP_HELO_FCRDNS 0.4
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
+score LOTTO_AGENT 1.000
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
score MALWARE_PASSWORD 1.000
+score MANY_HDRS_LCASE 0.100
score MIXED_AREA_CASE 1.000
score MIXED_CENTER_CASE 1.000
score MIXED_FONT_CASE 1.000
@@ -280,6 +278,7 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
+score PDS_FROM_2_EMAILS 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -349,9 +348,11 @@ score USB_DRIVES 1.0
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
score WANT_TO_ORDER 1.000
+score WORD_INVIS 1.000
score WORD_INVIS_MANY 1.000
score XM_DIGITS_ONLY 1.000
score XPRIO 1.000
+score XPRIO_URL_SHORTNER 1.000
# in active.list but have no hits in recent corpus
score ARC_SIGNED 0.001 # force non-zero
score ARC_VALID 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1904180&r1=1904179&r2=1904180&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Wed Sep 21 02:43:49 2022
@@ -3,201 +3,200 @@
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_FROM_MANY_DOTS 3.000
+score AC_FROM_MANY_DOTS 2.999
score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 1.158
-score ADVANCE_FEE_2_NEW_FRM_MNY 0.814
-score ADVANCE_FEE_2_NEW_MONEY 0.070
+score ADMITS_SPAM 1.149
+score ADVANCE_FEE_2_NEW_FRM_MNY 2.499
+score ADVANCE_FEE_2_NEW_MONEY 0.075
score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.719
-score ADVANCE_FEE_3_NEW_MONEY 2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.926
-score ADVANCE_FEE_4_NEW_MONEY 0.001
+score ADVANCE_FEE_3_NEW_FRM_MNY 2.051
+score ADVANCE_FEE_3_NEW_MONEY 2.399
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.433
+score ADVANCE_FEE_4_NEW_MONEY 0.001 # force non-zero
score ADVANCE_FEE_5_NEW 2.199
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.833
-score ADVANCE_FEE_5_NEW_MONEY 1.190
-score AD_PREFS 0.305
-score ALIBABA_IMG_NOT_RCVD_ALI 2.296
-score AMAZON_IMG_NOT_RCVD_AMZN 1.884
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.834
+score ADVANCE_FEE_5_NEW_MONEY 1.188
+score AD_PREFS 0.448
+score ALIBABA_IMG_NOT_RCVD_ALI 1.638
+score AMAZON_IMG_NOT_RCVD_AMZN 2.136
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
score AXB_X_FF_SEZ_S 2.537
-score BIGNUM_EMAILS_FREEM 2.515
-score BIGNUM_EMAILS_MANY 0.076
-score BITCOIN_EXTORT_01 2.322
-score BITCOIN_MALF_HTML 1.791
-score BITCOIN_MALWARE 2.149
-score BITCOIN_ONAN 1.993
-score BITCOIN_SPAM_02 2.433
+score BIGNUM_EMAILS_FREEM 1.515
+score BIGNUM_EMAILS_MANY 0.001
+score BITCOIN_EXTORT_01 2.329
+score BITCOIN_MALF_HTML 1.777
+score BITCOIN_MALWARE 1.912
+score BITCOIN_ONAN 1.490
+score BITCOIN_SPAM_02 1.127
score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_05 1.791
-score BITCOIN_XPRIO 1.393
-score BITCOIN_YOUR_INFO 1.416
-score BODY_SINGLE_URI 2.267
+score BITCOIN_SPAM_05 2.422
+score BITCOIN_XPRIO 2.103
+score BITCOIN_YOUR_INFO 1.411
+score BODY_SINGLE_URI 2.115
score BODY_URI_ONLY 2.999
-score BOGUS_MSM_HDRS 2.418
+score BOGUS_MSM_HDRS 2.470
score CK_HELO_GENERIC 0.001 # force non-zero
-score CONTENT_AFTER_HTML 2.070
-score CTE_8BIT_MISMATCH 0.001
+score CONTENT_AFTER_HTML 1.889
+score CTE_8BIT_MISMATCH 0.001 # force non-zero
score DATE_IN_FUTURE_Q_PLUS 2.499
-score DEAR_BENEFICIARY 2.999
+score DEAR_BENEFICIARY 2.899
score DKIMWL_WL_HIGH -0.001
-score DKIMWL_WL_MED -0.001
+score DKIMWL_WL_MED -0.001 # force non-zero
score DKIMWL_WL_MEDHI -0.001
score DX_TEXT_03 0.200
-score DYNAMIC_IMGUR 3.556
-score ENCRYPTED_MESSAGE -0.999
+score DYNAMIC_IMGUR 0.432
+score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 2.499
-score FILL_THIS_FORM 1.399
+score FILL_THIS_FORM 1.400
score FONT_INVIS_DIRECT 0.001
score FONT_INVIS_HTML_NOHTML 2.999
-score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 0.919
+score FONT_INVIS_LONG_LINE 3.000
+score FONT_INVIS_MSGID 0.965
score FONT_INVIS_NORDNS 2.499
-score FONT_INVIS_POSTEXTRAS 2.184
-score FORGED_SPF_HELO 0.510
+score FONT_INVIS_POSTEXTRAS 2.183
+score FORGED_SPF_HELO 0.414
score FORM_FRAUD 0.999
-score FORM_FRAUD_5 2.899
-score FOUND_YOU 2.972
-score FREEMAIL_FORGED_FROMDOMAIN 0.250
-score FROM_2_EMAILS_SHORT 2.999
+score FORM_FRAUD_5 2.858
+score FOUND_YOU 2.964
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_2_EMAILS_SHORT 3.000
score FROM_FMBLA_NEWDOM14 0.001
score FROM_FMBLA_NEWDOM28 0.799
-score FROM_GOV_DKIM_AU -0.916
+score FROM_GOV_DKIM_AU -0.134
score FROM_MISSPACED 1.999
-score FROM_MISSP_DYNIP 2.199
-score FROM_MISSP_EH_MATCH 0.001 # force non-zero
-score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_DYNIP 2.200
+score FROM_MISSP_EH_MATCH 0.001
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001
score FROM_MISSP_SPF_FAIL 0.001
score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 0.001
+score FROM_MULTI_NORDNS 0.940
score FROM_ONE_CHAR 2.199
-score FROM_PAYPAL_SPOOF 0.014
+score FROM_PAYPAL_SPOOF 1.267
score FROM_SUSPICIOUS_NTLD 0.001
score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FSL_BULK_SIG 0.001 # force non-zero
+score FSL_BULK_SIG 0.001
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.499
-score GB_BITCOIN_CP 2.857
+score FUZZY_AMAZON 2.399
+score GB_BITCOIN_CP 2.960
score GB_CUSTOM_HTM_URI 1.499
-score GB_FAKE_RF_SHORT 1.599
+score GB_FAKE_RF_SHORT 1.592
score GB_FREEMAIL_DISPTO 0.164
score GB_HASHBL_BTC 0.001
-score GB_URI_FLEEK_STO_HTM 0.999
+score GB_URI_FLEEK_STO_HTM 1.000
score GOOG_REDIR_HTML_ONLY 1.999
-score GOOG_REDIR_NORDNS 3.127
+score GOOG_REDIR_NORDNS 3.125
score GOOG_STO_NOIMG_HTML 2.999
-score HAS_X_OUTGOING_SPAM_STAT 1.109
+score HAS_X_OUTGOING_SPAM_STAT 1.023
score HDRS_LCASE_IMGONLY 0.100
score HDRS_MISSP 0.943
-score HDR_ORDER_FTSDMCXX_DIRECT 1.234
-score HDR_ORDER_FTSDMCXX_NORDNS 2.600
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250
+score HDR_ORDER_FTSDMCXX_DIRECT 1.128
+score HDR_ORDER_FTSDMCXX_NORDNS 3.219
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249
score HELO_NO_DOMAIN 0.001
-score HK_NAME_MR_MRS 1.000
+score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 1.000
score HK_RANDOM_FROM 0.999
score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM 0.972
-score HOSTED_IMG_DIRECT_MX 3.411
-score HOSTED_IMG_FREEM 3.114
-score HOSTED_IMG_MULTI_PUB_01 3.000
+score HK_SCAM 0.976
+score HOSTED_IMG_DIRECT_MX 3.155
+score HOSTED_IMG_FREEM 2.862
+score HOSTED_IMG_MULTI_PUB_01 2.999
score HTML_ENTITY_ASCII 2.999
-score HTML_OFF_PAGE 2.652
-score HTML_TEXT_INVISIBLE_FONT 0.001
-score HTML_TEXT_INVISIBLE_STYLE 2.812
-score JH_SPAMMY_HEADERS 3.500
-score KHOP_HELO_FCRDNS 0.399
-score LONG_HEX_URI 1.615
-score LONG_IMG_URI 0.995
-score LONG_INVISIBLE_TEXT 1.155
+score HTML_OFF_PAGE 2.650
+score HTML_TEXT_INVISIBLE_FONT 0.115
+score HTML_TEXT_INVISIBLE_STYLE 2.808
+score JH_SPAMMY_HEADERS 3.499
+score KHOP_HELO_FCRDNS 0.400
+score LONG_HEX_URI 1.616
+score LONG_IMG_URI 0.950
+score LONG_INVISIBLE_TEXT 1.156
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.043
-score MALWARE_NORDNS 2.637
-score MILLION_HUNDRED 1.984
-score MILLION_USD 0.001
-score MIMEOLE_DIRECT_TO_MX 1.419
-score MIME_NO_TEXT 0.203
-score MIXED_ES 2.099
-score MONEY_ATM_CARD 0.636
+score LOTTO_AGENT 0.790
+score MALWARE_NORDNS 0.270
+score MILLION_HUNDRED 1.985
+score MIMEOLE_DIRECT_TO_MX 1.999
+score MIME_NO_TEXT 0.001
+score MIXED_ES 2.100
+score MONEY_ATM_CARD 0.345
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 0.001 # force non-zero
+score MONEY_FRAUD_3 0.001
score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 2.900
-score MONEY_FREEMAIL_REPTO 2.017
+score MONEY_FRAUD_8 2.899
+score MONEY_FREEMAIL_REPTO 2.010
score MONEY_FROM_MISSP 0.001
-score MSMAIL_PRI_ABNORMAL 0.001
-score NA_DOLLARS 1.499
-score NICE_REPLY_A -2.182
+score MSMAIL_PRI_ABNORMAL 0.001 # force non-zero
+score NA_DOLLARS 1.224
+score NICE_REPLY_A -3.702
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 2.121
-score NUMBERONLY_BITCOIN_EXP 1.999
-score OBFU_TEXT_ATTACH 0.001
-score ODD_FREEM_REPTO 2.483
-score PDS_BTC_ID 0.500
-score PDS_BTC_MSGID 0.001
-score PDS_BTC_NTLD 1.648
-score PDS_HELO_SPF_FAIL 1.999
+score NSL_RCVD_HELO_USER 1.211
+score NUMBERONLY_BITCOIN_EXP 1.480
+score OBFU_TEXT_ATTACH 0.134
+score ODD_FREEM_REPTO 2.370
+score PDS_BTC_ID 0.499
+score PDS_BTC_MSGID 0.398
+score PDS_BTC_NTLD 0.635
+score PDS_HELO_SPF_FAIL 0.743
score PDS_NAKED_TO_NUMERO 1.999
-score PDS_NO_FULL_NAME_SPOOFED_URL 0.750
+score PDS_NO_FULL_NAME_SPOOFED_URL 0.749
score PDS_PHPEXP_BOT 1.499
-score PDS_PHP_EVAL 1.499
-score PDS_SHORT_BOGUS_MSM_HDRS 1.033
-score PDS_SHORT_SPOOFED_URL 2.000
+score PDS_PHP_EVAL 0.001
+score PDS_SHORT_BOGUS_MSM_HDRS 1.477
+score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 0.001
score PHP_ORIG_SCRIPT 2.499
-score PHP_ORIG_SCRIPT_EVAL 2.715
-score PHP_SCRIPT 1.188
+score PHP_ORIG_SCRIPT_EVAL 2.793
+score PHP_SCRIPT 1.275
score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
-score RAND_MKTG_HEADER 2.000
-score RATWARE_NO_RDNS 1.634
+score RAND_MKTG_HEADER 1.999
+score RATWARE_NO_RDNS 1.589
score RCVD_IN_MSPIKE_H2 -0.001
-score RDNS_NUM_TLD_XM 0.379
+score RDNS_NUM_TLD_XM 0.644
score REPTO_419_FRAUD 0.001
-score SCC_CANSPAM_2 0.867
+score SCC_CANSPAM_2 0.864
score SENDGRID_REDIR 1.499
-score SERGIO_SUBJECT_VIAGRA01 2.552
-score SHOPIFY_IMG_NOT_RCVD_SFY 0.183
+score SERGIO_SUBJECT_VIAGRA01 0.394
+score SHOPIFY_IMG_NOT_RCVD_SFY 0.436
score SHORT_SHORTNER 1.999
score SPOOFED_FREEMAIL 0.001
-score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 2.499
-score SPOOF_GMAIL_MID 0.001
+score SPOOFED_FREEMAIL_NO_RDNS 0.001 # force non-zero
+score SPOOFED_FREEM_REPTO 1.989
+score SPOOF_GMAIL_MID 0.001 # force non-zero
score STATIC_XPRIO_OLE 0.001
-score THIS_AD 0.800
-score TO_EQ_FM_DOM_SPF_FAIL 0.001
+score THIS_AD 0.799
+score TO_EQ_FM_DOM_SPF_FAIL 0.001 # force non-zero
score TO_EQ_FM_SPF_FAIL 0.001
-score TO_NO_BRKTS_FROM_MSSP 1.936
+score TO_NO_BRKTS_FROM_MSSP 1.933
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_NORDNS_HTML 2.000
-score TO_NO_BRKTS_PCNT 1.802
-score TVD_RCVD_SPACE_BRACKET 2.000
-score UNDISC_FREEM 3.099
-score UNDISC_MONEY 1.989
-score UNICODE_OBFU_ASC 2.500
-score UPPERCASE_URI 2.874
+score TO_NO_BRKTS_NORDNS_HTML 1.999
+score TO_NO_BRKTS_PCNT 1.669
+score TVD_RCVD_SPACE_BRACKET 2.129
+score UNDISC_FREEM 2.999
+score UNDISC_MONEY 1.991
+score UNICODE_OBFU_ASC 2.499
+score UPPERCASE_URI 2.876
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 1.097
+score URI_GOOGLE_PROXY 1.091
score URI_OBFU_DOM 2.200
-score URI_PHISH 2.899
-score URI_PHP_REDIR 3.391
+score URI_PHISH 2.898
+score URI_PHP_REDIR 3.397
score URI_TRY_3LD 1.984
score URI_WPADMIN 2.199
score URI_WP_HACKED 3.499
score URI_WP_HACKED_2 2.499
score VFY_ACCT_NORDNS 2.999
-score WORD_INVIS 0.790
+score WORD_INVIS 0.807
score XFER_LOTSA_MONEY 0.999
-score XM_RANDOM 2.484
+score XM_RANDOM 2.480
score XM_RECPTID 2.999
score XPRIO 0.001
-score XPRIO_SHORT_SUBJ 1.308
-score XPRIO_URL_SHORTNER 0.999
-score YOUR_DELIVERY_ADDRESS 1.249
+score XPRIO_SHORT_SUBJ 1.697
+score XPRIO_URL_SHORTNER 1.000
+score YOUR_DELIVERY_ADDRESS 1.250
score YOU_INHERIT 2.199
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -276,6 +275,7 @@ score GOOG_STO_HTML_PHISH_MANY 1.0
score GOOG_STO_IMG_HTML 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
+score HDRS_LCASE 0.100
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1904180&r1=1904179&r2=1904180&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Wed Sep 21 02:43:49 2022
@@ -1,179 +1,174 @@
-# Using score set 0 logs for revision 1904143 from:
-# ham-ena-week0.r1904143.log ham-ena-week1.r1904143.log ham-ena-week2.r1904143.log ham-ena-week3.r1904143.log ham-ena-week4.r1904143.log ham-giovanni-ham.r1904143.log ham-giovanni-spammy.r1904143.log ham-giovanni-spam.r1904143.log ham-grenier.r1904143.log ham-hege.r1904143.log ham-jhardin.r1904143.log ham-llanga.r1904143.log ham-mmiroslaw-mails-ham.r1904143.log ham-mmiroslaw-mails-spam.r1904143.log ham-spamsponge.r1904143.log ham-thendrikx.r1904143.log ham-tsz-spam-corpus.r1904143.log spam-ena-week0.r1904143.log spam-ena-week1.r1904143.log spam-ena-week2.r1904143.log spam-ena-week3.r1904143.log spam-ena-week4.r1904143.log spam-giovanni-ham.r1904143.log spam-giovanni-spammy.r1904143.log spam-giovanni-spam.r1904143.log spam-grenier.r1904143.log spam-hege.r1904143.log spam-jhardin.r1904143.log spam-llanga.r1904143.log spam-mmiroslaw-mails-ham.r1904143.log spam-mmiroslaw-mails-spam.r1904143.log spam-spamsponge.r1904143.log spam-thendrikx.r1904143.log spam-tsz-spam-corpus.r1904143.log
+# Using score set 0 logs for revision 1904159 from:
+# ham-ena-week0.r1904159.log ham-ena-week1.r1904159.log ham-ena-week2.r1904159.log ham-ena-week3.r1904159.log ham-ena-week4.r1904159.log ham-giovanni-ham.r1904159.log ham-giovanni-spammy.r1904159.log ham-giovanni-spam.r1904159.log ham-grenier.r1904159.log ham-hege.r1904159.log ham-jhardin.r1904159.log ham-llanga.r1904159.log ham-mmiroslaw-mails-ham.r1904159.log ham-mmiroslaw-mails-spam.r1904159.log ham-spamsponge.r1904159.log ham-thendrikx.r1904159.log ham-tsz-spam-corpus.r1904159.log spam-ena-week0.r1904159.log spam-ena-week1.r1904159.log spam-ena-week2.r1904159.log spam-ena-week3.r1904159.log spam-ena-week4.r1904159.log spam-giovanni-ham.r1904159.log spam-giovanni-spammy.r1904159.log spam-giovanni-spam.r1904159.log spam-grenier.r1904159.log spam-hege.r1904159.log spam-jhardin.r1904159.log spam-llanga.r1904159.log spam-mmiroslaw-mails-ham.r1904159.log spam-mmiroslaw-mails-spam.r1904159.log spam-spamsponge.r1904159.log spam-thendrikx.r1904159.log spam-tsz-spam-corpus.r1904159.log
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.999
score AC_HTML_NONSENSE_TAGS 1.999
-score ADMITS_SPAM 2.200
-score ADVANCE_FEE_2_NEW_FORM 0.001
-score ADVANCE_FEE_2_NEW_FRM_MNY 0.706
+score ADMITS_SPAM 2.199
+score ADVANCE_FEE_2_NEW_FORM 0.001 # force non-zero
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.852
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.660
-score ADVANCE_FEE_3_NEW_MONEY 2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_3_NEW_MONEY 2.599
+score ADVANCE_FEE_4_NEW_FRM_MNY 1.918
score ADVANCE_FEE_4_NEW_MONEY 0.001
score ADVANCE_FEE_5_NEW 2.299
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.739
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AD_PREFS 0.499
-score ALIBABA_IMG_NOT_RCVD_ALI 1.066
+score AD_PREFS 0.455
+score ALIBABA_IMG_NOT_RCVD_ALI 2.049
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
score AXB_X_FF_SEZ_S 3.299
-score BIGNUM_EMAILS_FREEM 2.999
-score BIGNUM_EMAILS_MANY 2.597
-score BITCOIN_EXTORT_01 4.500
+score BIGNUM_EMAILS_FREEM 3.000
+score BIGNUM_EMAILS_MANY 2.999
+score BITCOIN_EXTORT_01 4.540
score BITCOIN_MALF_HTML 3.499
-score BITCOIN_ONAN 2.521
+score BITCOIN_ONAN 2.273
score BITCOIN_SPAM_02 2.499
score BITCOIN_SPAM_03 2.499
-score BITCOIN_XPRIO 2.489
-score BITCOIN_YOUR_INFO 2.011
+score BITCOIN_XPRIO 2.351
+score BITCOIN_YOUR_INFO 2.142
score BODY_SINGLE_URI 2.499
-score BOGUS_MSM_HDRS 2.750
-score CK_HELO_GENERIC 0.249
-score CONTENT_AFTER_HTML 1.585
-score CTE_8BIT_MISMATCH 0.240
-score DATE_IN_FUTURE_Q_PLUS 2.600
-score DEAR_BENEFICIARY 1.373
+score BOGUS_MSM_HDRS 2.999
+score CK_HELO_GENERIC 0.250
+score CONTENT_AFTER_HTML 1.296
+score CTE_8BIT_MISMATCH 0.241
+score DATE_IN_FUTURE_Q_PLUS 2.599
+score DEAR_BENEFICIARY 1.075
score DX_TEXT_03 0.200
-score DYNAMIC_IMGUR 3.399
+score DYNAMIC_IMGUR 3.411
score ENCRYPTED_MESSAGE -0.999
-score FILL_THIS_FORM 1.200
-score FONT_INVIS_DIRECT 0.361
-score FONT_INVIS_HTML_NOHTML 2.999
+score FILL_THIS_FORM 1.199
+score FONT_INVIS_DIRECT 0.685
+score FONT_INVIS_HTML_NOHTML 3.000
score FONT_INVIS_LONG_LINE 2.999
-score FONT_INVIS_MSGID 0.471
-score FONT_INVIS_NORDNS 1.886
-score FONT_INVIS_POSTEXTRAS 1.615
+score FONT_INVIS_MSGID 1.482
+score FONT_INVIS_NORDNS 1.885
+score FONT_INVIS_POSTEXTRAS 1.650
score FORM_FRAUD_5 2.999
-score FOUND_YOU 3.249
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_2_EMAILS_SHORT 1.491
+score FOUND_YOU 2.600
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
+score FROM_2_EMAILS_SHORT 2.005
score FROM_MISSPACED 1.999
score FROM_MISSP_DYNIP 2.299
score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 0.001
-score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_MSFT 0.001 # force non-zero
score FROM_MISSP_USER 0.001
-score FROM_MULTI_NORDNS 1.219
-score FROM_NTLD_REPLY_FREEMAIL 1.429
-score FROM_ONE_CHAR 2.199
+score FROM_MULTI_NORDNS 1.231
+score FROM_NTLD_REPLY_FREEMAIL 1.869
+score FROM_ONE_CHAR 2.200
score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
score FUZZY_AMAZON 2.599
-score GB_BITCOIN_CP 1.101
-score GB_CUSTOM_HTM_URI 1.500
-score GB_FAKE_RF_SHORT 1.787
+score GB_BITCOIN_CP 1.409
+score GB_CUSTOM_HTM_URI 1.499
+score GB_FAKE_RF_SHORT 1.999
score GB_FREEMAIL_DISPTO 0.499
score GB_URI_FLEEK_STO_HTM 0.999
score GOOG_REDIR_HTML_ONLY 1.999
score GOOG_REDIR_NORDNS 2.596
-score GOOG_STO_NOIMG_HTML 2.903
+score GOOG_STO_NOIMG_HTML 2.999
score HAS_X_OUTGOING_SPAM_STAT 1.999
score HDRS_LCASE_IMGONLY 0.100
score HDRS_MISSP 2.499
-score HDR_ORDER_FTSDMCXX_DIRECT 1.592
-score HDR_ORDER_FTSDMCXX_NORDNS 2.806
-score HEADER_FROM_DIFFERENT_DOMAINS 0.250
-score HELO_NO_DOMAIN 0.001 # force non-zero
-score HK_NAME_MR_MRS 1.000
-score HK_RANDOM_ENVFROM 0.999
+score HDR_ORDER_FTSDMCXX_DIRECT 0.168
+score HDR_ORDER_FTSDMCXX_NORDNS 0.001
+score HEADER_FROM_DIFFERENT_DOMAINS 0.249
+score HELO_NO_DOMAIN 0.001
+score HK_NAME_MR_MRS 0.999
+score HK_RANDOM_ENVFROM 1.000
score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM 0.532
+score HK_RANDOM_REPLYTO 1.000
+score HK_SCAM 0.387
score HOSTED_IMG_DIRECT_MX 3.499
score HOSTED_IMG_FREEM 3.499
score HOSTED_IMG_MULTI_PUB_01 2.999
score HTML_ENTITY_ASCII 2.999
score HTML_OFF_PAGE 2.999
-score HTML_TEXT_INVISIBLE_STYLE 1.878
+score HTML_TEXT_INVISIBLE_STYLE 1.877
score JH_SPAMMY_HEADERS 3.499
score LONG_HEX_URI 2.999
-score LONG_IMG_URI 1.940
+score LONG_IMG_URI 1.941
score LONG_INVISIBLE_TEXT 3.000
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.292
-score MALWARE_NORDNS 2.986
+score MALWARE_NORDNS 2.101
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.001
-score MIMEOLE_DIRECT_TO_MX 1.894
+score MIMEOLE_DIRECT_TO_MX 1.875
score MIME_NO_TEXT 1.999
-score MIXED_ES 2.100
-score MONEY_ATM_CARD 0.421
+score MIXED_ES 2.199
+score MONEY_ATM_CARD 0.001
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 1.610
+score MONEY_FRAUD_3 1.891
score MONEY_FRAUD_5 2.999
-score MONEY_FRAUD_8 2.999
+score MONEY_FRAUD_8 1.537
score MONEY_FREEMAIL_REPTO 2.999
score MONEY_FROM_MISSP 0.001
score MSMAIL_PRI_ABNORMAL 0.001
score NA_DOLLARS 0.802
-score NICE_REPLY_A -4.299
+score NICE_REPLY_A -1.495
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.596
-score OBFU_TEXT_ATTACH 0.257
+score NUMBERONLY_BITCOIN_EXP 0.151
+score OBFU_TEXT_ATTACH 0.739
score ODD_FREEM_REPTO 2.999
score PDS_BTC_ID 0.500
-score PDS_BTC_MSGID 0.330
-score PDS_BTC_NTLD 1.999
+score PDS_BTC_MSGID 0.001
+score PDS_BTC_NTLD 0.300
score PDS_DBL_URL_TNB_RUNON 1.999
-score PDS_NAKED_TO_NUMERO 1.999
+score PDS_NAKED_TO_NUMERO 1.906
score PDS_NO_FULL_NAME_SPOOFED_URL 0.749
score PDS_PHPEXP_BOT 1.499
-score PDS_PHP_EVAL 0.652
-score PDS_SHORT_BOGUS_MSM_HDRS 1.792
+score PDS_PHP_EVAL 1.102
+score PDS_SHORT_BOGUS_MSM_HDRS 1.999
score PDS_SHORT_SPOOFED_URL 1.999
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.999
score PHP_ORIG_SCRIPT 2.499
-score PHP_ORIG_SCRIPT_EVAL 2.908
+score PHP_ORIG_SCRIPT_EVAL 2.525
score PHP_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RAND_MKTG_HEADER 2.000
-score RATWARE_NO_RDNS 1.863
-score RDNS_NUM_TLD_XM 0.563
-score REPTO_419_FRAUD 0.001
-score SCC_CANSPAM_2 0.500
+score RAND_MKTG_HEADER 1.999
+score RATWARE_NO_RDNS 0.968
+score RDNS_NUM_TLD_XM 1.803
+score REPTO_419_FRAUD 0.001 # force non-zero
+score SCC_CANSPAM_2 0.244
score SENDGRID_REDIR 1.499
-score SERGIO_SUBJECT_VIAGRA01 2.603
-score SHOPIFY_IMG_NOT_RCVD_SFY 1.189
+score SERGIO_SUBJECT_VIAGRA01 0.900
+score SHOPIFY_IMG_NOT_RCVD_SFY 0.748
score SHORT_SHORTNER 1.999
score STATIC_XPRIO_OLE 0.001
-score THIS_AD 0.900
+score THIS_AD 0.799
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_HTML_IMG 1.999
score TO_NO_BRKTS_HTML_ONLY 1.999
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.486
-score TVD_RCVD_SPACE_BRACKET 1.329
+score TO_NO_BRKTS_PCNT 0.791
+score TVD_RCVD_SPACE_BRACKET 2.096
score UNDISC_FREEM 3.199
-score UNDISC_MONEY 3.399
-score UNICODE_OBFU_ASC 2.499
+score UNDISC_MONEY 2.380
+score UNICODE_OBFU_ASC 2.500
score UPPERCASE_URI 3.099
score URI_DOTEDU 1.999
-score URI_GOOGLE_PROXY 2.199
+score URI_GOOGLE_PROXY 2.099
score URI_OBFU_DOM 2.299
score URI_PHISH 3.999
score URI_PHP_REDIR 3.499
-score URI_TRY_3LD 1.949
+score URI_TRY_3LD 1.950
score URI_WPADMIN 2.199
score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.691
-score WORD_INVIS 1.550
+score VFY_ACCT_NORDNS 2.999
score XFER_LOTSA_MONEY 0.999
score XM_RANDOM 2.499
-score XM_RECPTID 2.999
-score XPRIO_SHORT_SUBJ 0.942
-score XPRIO_URL_SHORTNER 0.999
+score XM_RECPTID 3.000
+score XPRIO_SHORT_SUBJ 0.351
score YOUR_DELIVERY_ADDRESS 1.249
-score YOU_INHERIT 2.199
+score YOU_INHERIT 0.551
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
@@ -212,7 +207,6 @@ score BTC_ORG 1.0
score BULK_RE_SUSP_NTLD 1.000
score CANT_SEE_AD 1.000
score COMMENT_GIBBERISH 1.000
-score COMPENSATION 1.000
score CONTENT_AFTER_HTML_WEAK 1.000
score DAY_I_EARNED 1.000
score DOTGOV_IMAGE 1.000
@@ -245,9 +239,11 @@ score GOOG_STO_HTML_PHISH_MANY 1.0
score GOOG_STO_IMG_HTML 1.000
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
+score HDRS_LCASE 0.100
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_RCVD_IP_MULTICAST 1.000
+score HK_WIN 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
score HOSTED_IMG_MULTI 1.000
score HTML_ENTITY_ASCII_TINY 1.000
@@ -261,9 +257,11 @@ score KHOP_HELO_FCRDNS 0.4
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
+score LOTTO_AGENT 1.000
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
score MALWARE_PASSWORD 1.000
+score MANY_HDRS_LCASE 0.100
score MIXED_AREA_CASE 1.000
score MIXED_CENTER_CASE 1.000
score MIXED_FONT_CASE 1.000
@@ -280,6 +278,7 @@ score MSM_PRIO_REPTO 1.0
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
score OBFU_BITCOIN 1.000
+score PDS_FROM_2_EMAILS 1.000
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
score PHP_NOVER_MUA 1.000
@@ -349,9 +348,11 @@ score USB_DRIVES 1.0
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
score WANT_TO_ORDER 1.000
+score WORD_INVIS 1.000
score WORD_INVIS_MANY 1.000
score XM_DIGITS_ONLY 1.000
score XPRIO 1.000
+score XPRIO_URL_SHORTNER 1.000
# in active.list but have no hits in recent corpus
score ARC_SIGNED 0.001 # force non-zero
score ARC_VALID 0.001 # force non-zero