You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2023/05/03 02:41:25 UTC

svn commit: r1909583 [2/2] - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1909583&r1=1909582&r2=1909583&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Wed May  3 02:41:25 2023
@@ -1,203 +1,198 @@
-# Using score set 0 logs for revision 1909377 from:
-# ham-ena-week0.r1909377.log ham-ena-week1.r1909377.log ham-ena-week2.r1909377.log ham-ena-week3.r1909377.log ham-ena-week4.r1909377.log ham-giovanni-ham.r1909377.log ham-giovanni-spammy.r1909377.log ham-giovanni-spam.r1909377.log ham-grenier.r1909377.log ham-hege.r1909377.log ham-jhardin.r1909377.log ham-llanga.r1909377.log ham-mmiroslaw-mails-ham.r1909377.log ham-mmiroslaw-mails-spam.r1909377.log ham-spamsponge.r1909377.log ham-thendrikx.r1909377.log ham-tsz-spam-corpus.r1909377.log spam-ena-week0.r1909377.log spam-ena-week1.r1909377.log spam-ena-week2.r1909377.log spam-ena-week3.r1909377.log spam-ena-week4.r1909377.log spam-giovanni-ham.r1909377.log spam-giovanni-spammy.r1909377.log spam-giovanni-spam.r1909377.log spam-grenier.r1909377.log spam-hege.r1909377.log spam-jhardin.r1909377.log spam-llanga.r1909377.log spam-mmiroslaw-mails-ham.r1909377.log spam-mmiroslaw-mails-spam.r1909377.log spam-spamsponge.r1909377.log spam-thendrikx.r1909377.log spam-tsz-spam-corpus.r1909377.log
+# Using score set 0 logs for revision 1909428 from:
+# ham-ena-week0.r1909428.log ham-ena-week1.r1909428.log ham-ena-week2.r1909428.log ham-ena-week3.r1909428.log ham-ena-week4.r1909428.log ham-giovanni-ham.r1909428.log ham-giovanni-spammy.r1909428.log ham-giovanni-spam.r1909428.log ham-grenier.r1909428.log ham-hege.r1909428.log ham-jhardin.r1909428.log ham-llanga.r1909428.log ham-mmiroslaw-mails-ham.r1909428.log ham-mmiroslaw-mails-spam.r1909428.log ham-spamsponge.r1909428.log ham-thendrikx.r1909428.log ham-tsz-spam-corpus.r1909428.log spam-ena-week0.r1909428.log spam-ena-week1.r1909428.log spam-ena-week2.r1909428.log spam-ena-week3.r1909428.log spam-ena-week4.r1909428.log spam-giovanni-ham.r1909428.log spam-giovanni-spammy.r1909428.log spam-giovanni-spam.r1909428.log spam-grenier.r1909428.log spam-hege.r1909428.log spam-jhardin.r1909428.log spam-llanga.r1909428.log spam-mmiroslaw-mails-ham.r1909428.log spam-mmiroslaw-mails-spam.r1909428.log spam-spamsponge.r1909428.log spam-thendrikx.r1909428.log spam-tsz-spam-corpus.r1909428.log
 
 score ACCT_PHISHING_MANY             2.999
+score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
 score AC_HTML_NONSENSE_TAGS          1.999
-score ADMITS_SPAM                    2.799
-score ADVANCE_FEE_2_NEW_MONEY        2.000
-score ADVANCE_FEE_3_NEW              2.999
+score ADMITS_SPAM                    2.499
+score ADVANCE_FEE_2_NEW_MONEY        1.999
+score ADVANCE_FEE_3_NEW              3.499
 score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_3_NEW_MONEY        2.172
+score ADVANCE_FEE_3_NEW_MONEY        2.343
 score ADVANCE_FEE_4_NEW_FRM_MNY      0.001
-score ADVANCE_FEE_4_NEW_MONEY        0.583
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.615
+score ADVANCE_FEE_4_NEW_MONEY        0.237
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.258
 score ADVANCE_FEE_5_NEW_MONEY        0.001
-score AD_PREFS                       0.001
-score AMAZON_IMG_NOT_RCVD_AMZN       0.001
+score AD_PREFS                       0.346
+score AMAZON_IMG_NOT_RCVD_AMZN       0.001 # force non-zero
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            0.001 # force non-zero
+score BIGNUM_EMAILS_FREEM            0.606
 score BIGNUM_EMAILS_MANY             2.999
 score BITCOIN_DEADLINE               2.999
-score BITCOIN_EXTORT_01              4.503
-score BITCOIN_MALF_HTML              2.599
+score BITCOIN_EXTORT_01              4.486
+score BITCOIN_MALF_HTML              2.361
 score BITCOIN_MALWARE                0.001
-score BITCOIN_OBFU_SUBJ              3.499
-score BITCOIN_SPAM_02                2.281
+score BITCOIN_SPAM_02                1.403
 score BITCOIN_SPAM_07                3.499
-score BITCOIN_XPRIO                  0.099
-score BITCOIN_YOUR_INFO              2.999
-score BODY_SINGLE_URI                2.499
-score BODY_SINGLE_WORD               0.001 # force non-zero
-score BODY_URI_ONLY                  2.632
-score CK_HELO_GENERIC                0.250
-score CTE_8BIT_MISMATCH              0.999
-score DEAR_BENEFICIARY               2.768
+score BITCOIN_XPRIO                  0.001
+score BITCOIN_YOUR_INFO              1.938
+score BODY_SINGLE_URI                1.898
+score BODY_SINGLE_WORD               0.001
+score BODY_URI_ONLY                  2.439
+score CK_HELO_GENERIC                0.249
+score CTE_8BIT_MISMATCH              1.000
+score DEAR_BENEFICIARY               2.553
 score DSN_NO_MIMEVERSION             1.999
 score ENCRYPTED_MESSAGE              -0.999
-score END_FUTURE_EMAILS              2.500
-score FILL_THIS_FORM                 0.899
+score END_FUTURE_EMAILS              2.499
+score FILL_THIS_FORM                 0.799
 score FONT_INVIS_DIRECT              0.001
 score FONT_INVIS_LONG_LINE           2.999
-score FONT_INVIS_MSGID               0.001
-score FONT_INVIS_POSTEXTRAS          0.144
+score FONT_INVIS_MSGID               1.643
+score FONT_INVIS_POSTEXTRAS          0.153
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   2.399
+score FORM_FRAUD_3                   1.538
 score FORM_FRAUD_5                   0.001
-score FREEMAIL_FORGED_FROMDOMAIN     0.250
+score FREEMAIL_FORGED_FROMDOMAIN     0.249
 score FROM_ADDR_WS                   2.999
 score FROM_IN_TO_AND_SUBJ            1.799
 score FROM_MISSPACED                 1.999
-score FROM_MISSP_EH_MATCH            1.283
-score FROM_MISSP_FREEMAIL            3.099
-score FROM_MISSP_MSFT                1.743
+score FROM_MISSP_EH_MATCH            0.401
+score FROM_MISSP_FREEMAIL            2.999
+score FROM_MISSP_MSFT                1.741
 score FROM_MISSP_REPLYTO             2.499
 score FROM_MISSP_USER                0.001
-score FROM_NTLD_LINKBAIT             0.590
-score FROM_NTLD_REPLY_FREEMAIL       0.950
+score FROM_NTLD_LINKBAIT             1.293
+score FROM_NTLD_REPLY_FREEMAIL       0.503
 score FROM_SUSPICIOUS_NTLD           0.499
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FROM_WSP_TRAIL                 2.399
+score FROM_WSP_TRAIL                 2.400
 score FSL_CTYPE_WIN1251              0.001
-score FSL_HELO_FAKE                  1.101
 score FSL_NEW_HELO_USER              0.001
-score FUZZY_AMAZON                   1.387
-score GB_BITCOIN_CP                  1.122
+score FUZZY_AMAZON                   1.799
 score GB_CUSTOM_HTM_URI              1.499
-score GB_FAKE_RF_SHORT               1.999
+score GB_FAKE_RF_SHORT               1.943
 score GB_FREEMAIL_DISPTO             0.001
 score GB_GOOGLE_TRANSL               0.750
-score GOOG_REDIR_NORDNS              2.501
+score GOOG_REDIR_NORDNS              2.599
 score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       0.499
-score HDRS_MISSP                     2.499
+score HAS_X_OUTGOING_SPAM_STAT       0.503
+score HDRS_MISSP                     2.085
 score HDR_ORDER_FTSDMCXX_DIRECT      1.999
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
 score HELO_NO_DOMAIN                 0.001
-score HK_LOTTO                       0.001
+score HK_LOTTO                       0.999
 score HK_NAME_MR_MRS                 0.999
 score HK_RANDOM_ENVFROM              0.001 # force non-zero
 score HK_RANDOM_FROM                 0.999
 score HK_RANDOM_REPLYTO              0.999
-score HK_SCAM                        1.188
+score HK_SCAM                        1.186
 score HOSTED_IMG_DIRECT_MX           0.001
-score HOSTED_IMG_FREEM               2.749
+score HOSTED_IMG_FREEM               3.499
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HTML_ENTITY_ASCII_TINY         2.444
-score HTML_OFF_PAGE                  0.097
-score HTML_SINGLET_MANY              2.500
-score HTML_TEXT_INVISIBLE_FONT       1.999
-score HTML_TEXT_INVISIBLE_STYLE      1.538
+score HTML_ENTITY_ASCII_TINY         2.695
+score HTML_OFF_PAGE                  0.095
+score HTML_SINGLET_MANY              2.499
+score HTML_TEXT_INVISIBLE_FONT       1.186
+score HTML_TEXT_INVISIBLE_STYLE      0.443
 score JH_SPAMMY_HEADERS              3.499
-score KHOP_FAKE_EBAY                 0.899
-score KHOP_HELO_FCRDNS               0.400
+score KHOP_HELO_FCRDNS               0.399
 score LONG_HEX_URI                   2.999
-score LONG_IMG_URI                   0.101
+score LONG_IMG_URI                   0.001
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
-score MALWARE_NORDNS                 0.001
+score MALWARE_NORDNS                 0.001 # force non-zero
 score MALWARE_PASSWORD               0.001
 score MANY_HDRS_LCASE                0.099
-score MANY_SPAN_IN_TEXT              3.099
-score MANY_SUBDOM                    0.001
-score MAY_BE_FORGED                  1.499
+score MANY_SPAN_IN_TEXT              2.799
 score MILLION_HUNDRED                0.001
 score MILLION_USD                    1.999
 score MIMEOLE_DIRECT_TO_MX           0.001
-score MIXED_ES                       1.799
-score MONEY_ATM_CARD                 1.269
-score MONEY_FORM                     0.001 # force non-zero
+score MIME_NO_TEXT                   1.999
+score MIXED_CENTER_CASE              2.095
+score MIXED_ES                       1.699
+score MIXED_HREF_CASE                1.999
+score MONEY_ATM_CARD                 0.745
+score MONEY_FORM                     0.001
 score MONEY_FORM_SHORT               2.499
 score MONEY_FRAUD_3                  0.001
-score MONEY_FRAUD_5                  0.001
+score MONEY_FRAUD_5                  2.647
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           3.000
-score MONEY_FROM_MISSP               0.001
+score MONEY_FREEMAIL_REPTO           2.999
+score MONEY_FROM_MISSP               0.001 # force non-zero
 score MSMAIL_PRI_ABNORMAL            1.499
-score NA_DOLLARS                     0.802
-score NICE_REPLY_A                   -1.128
-score NO_FM_NAME_IP_HOSTN            0.202
+score NA_DOLLARS                     0.196
+score NICE_REPLY_A                   -4.036
+score NO_FM_NAME_IP_HOSTN            0.346
 score NSL_RCVD_FROM_USER             0.001
-score NSL_RCVD_HELO_USER             1.147
-score NUMBERONLY_BITCOIN_EXP         0.616
-score OBFU_TEXT_ATTACH               1.499
-score OBFU_UNSUB_UL                  3.099
-score ODD_FREEM_REPTO                2.999
+score NSL_RCVD_HELO_USER             0.001
+score OBFU_TEXT_ATTACH               0.596
+score OBFU_UNSUB_UL                  2.999
 score PDS_BAD_THREAD_QP_64           0.999
 score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.001 # force non-zero
-score PDS_BTC_NTLD                   0.172
+score PDS_BTC_MSGID                  0.001
+score PDS_BTC_NTLD                   1.999
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_EMPTYSUBJ_URISHRT          1.499
 score PDS_FRNOM_TODOM_DBL_URL        1.499
-score PDS_FRNOM_TODOM_NAKED_TO       1.499
-score PDS_FROM_2_EMAILS_SHRTNER      1.500
-score PDS_FROM_NAME_TO_DOMAIN        2.000
-score PDS_NAKED_TO_NUMERO            0.001
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
+score PDS_FRNOM_TODOM_NAKED_TO       1.500
+score PDS_FROM_2_EMAILS              2.426
+score PDS_FROM_2_EMAILS_SHRTNER      1.499
+score PDS_FROM_NAME_TO_DOMAIN        1.999
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
 score PDS_SHORTFWD_URISHRT           1.499
 score PDS_SHORT_SPOOFED_URL          1.999
-score PHP_ORIG_SCRIPT                0.521
+score PDS_TINYSUBJ_URISHRT           1.499
+score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.401
+score PHP_ORIG_SCRIPT                0.715
 score PHP_SCRIPT                     2.499
 score POSSIBLE_AMAZON_PHISH_02       2.399
-score POSSIBLE_GMAIL_PHISHER         2.799
-score PP_MIME_FAKE_ASCII_TEXT        0.999
+score POSSIBLE_GMAIL_PHISHER         2.035
+score PP_MIME_FAKE_ASCII_TEXT        1.000
 score RAND_MKTG_HEADER               1.999
-score RATWARE_NO_RDNS                0.001 # force non-zero
-score RISK_FREE                      1.173
-score SCC_BODY_SINGLE_WORD           0.001
-score SCC_CANSPAM_2                  2.800
+score RATWARE_NO_RDNS                0.001
+score SCC_BODY_SINGLE_WORD           0.001 # force non-zero
 score SCC_ISEMM_LID_1B               1.499
 score SENDGRID_REDIR                 1.499
 score SERGIO_SUBJECT_VIAGRA01        0.001
-score SHOPIFY_IMG_NOT_RCVD_SFY       1.997
-score SPOOFED_FREEMAIL_NO_RDNS       0.001
+score SHOPIFY_IMG_NOT_RCVD_SFY       1.641
+score SPOOFED_FREEMAIL_NO_RDNS       1.100
 score SPOOF_GMAIL_MID                1.499
-score STATIC_XPRIO_OLE               0.644
-score STOX_BOUND_090909_B            3.499
-score THIS_AD                        1.299
+score STATIC_XPRIO_OLE               0.689
+score STOX_BOUND_090909_B            3.599
+score THIS_AD                        1.099
+score TONOM_EQ_TOLOC_SHRT_SHRTNER    1.499
 score TO_EQ_FM_DIRECT_MX             0.001
-score TO_EQ_FM_DOM_HTML_ONLY         0.001
-score TO_IN_SUBJ                     0.099
-score TO_NAME_SUBJ_NO_RDNS           2.881
+score TO_IN_SUBJ                     0.100
+score TO_NAME_SUBJ_NO_RDNS           2.678
 score TO_NO_BRKTS_FROM_MSSP          2.499
 score TO_NO_BRKTS_HTML_IMG           1.999
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_MSFT               0.001
-score TO_NO_BRKTS_NORDNS_HTML        1.999
+score TO_NO_BRKTS_NORDNS_HTML        2.000
 score TO_NO_BRKTS_PCNT               2.499
-score TR_JS_REDIRECTION_0            2.199
-score TVD_DOLLARS_US                 2.502
-score TVD_IP_HEX                     0.922
-score TVD_IP_SING_HEX                2.465
-score TVD_SPACE_ENCODED              2.445
-score TVD_SPACE_RATIO_MINFP          1.157
-score UNDISC_FREEM                   2.999
+score TR_JS_REDIRECTION_0            2.168
+score TVD_DOLLARS_US                 2.501
+score TVD_IP_HEX                     2.287
+score TVD_IP_SING_HEX                0.704
+score TVD_SPACE_ENCODED              2.157
+score TVD_SPACE_RATIO_MINFP          1.444
+score UNDISC_FREEM                   3.000
 score UNDISC_MONEY                   3.099
 score UNICODE_OBFU_ASC               2.499
 score URI_AZURE_CLOUDAPP             2.999
-score URI_BUFFLY                     1.999
 score URI_DOTEDU                     1.999
-score URI_GIBB_NO_PROTO              2.950
+score URI_GIBB_NO_PROTO              2.602
 score URI_GOOGLE_PROXY               2.199
-score URI_HEX_IP                     2.357
+score URI_HEX_IP                     1.881
+score URI_MALWARE_BH                 0.999
 score URI_ONLY_MSGID_MALF            0.001
 score URI_PHISH                      3.999
-score URI_PHP_REDIR                  3.300
-score URI_TRY_3LD                    1.999
+score URI_PHP_REDIR                  3.499
+score URI_TRY_3LD                    2.000
 score URI_WPADMIN                    2.799
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                0.001 # force non-zero
-score WORD_INVIS                     1.583
-score WORD_INVIS_MANY                2.184
-score XFER_LOTSA_MONEY               0.140
-score XM_RANDOM                      2.399
+score VFY_ACCT_NORDNS                0.001
+score WORD_INVIS                     0.844
+score WORD_INVIS_MANY                2.999
+score XFER_LOTSA_MONEY               0.001
+score XM_RANDOM                      2.254
 score XPRIO                          2.249
-score YOU_INHERIT                    2.299
-score AC_BR_BONANZA                  0.001
+score YOU_INHERIT                    2.490
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -218,6 +213,7 @@ score BEBEE_IMG_NOT_RCVD_BB          1.0
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
+score BITCOIN_OBFU_SUBJ              1.000
 score BITCOIN_ONAN                   1.000
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
@@ -237,7 +233,6 @@ score BTC_ORG                        1.0
 score BULK_RE_SUSP_NTLD              1.000
 score CANT_SEE_AD                    1.000
 score COMMENT_GIBBERISH              1.000
-score COMPENSATION                   1.000
 score CONTENT_AFTER_HTML             1.000
 score CONTENT_AFTER_HTML_WEAK        1.000
 score DAY_I_EARNED                   1.000
@@ -255,6 +250,7 @@ score FOUND_YOU                      1.0
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
+score GB_BITCOIN_CP                  1.000
 score GB_FORGED_MUA_POSTFIX          1.000
 score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
@@ -285,11 +281,8 @@ score LIST_PRTL_PUMPDUMP             1.0
 score LIST_PRTL_SAME_USER            1.000
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
-score MIME_NO_TEXT                   1.000
 score MIXED_AREA_CASE                1.000
-score MIXED_CENTER_CASE              1.000
 score MIXED_FONT_CASE                1.000
-score MIXED_HREF_CASE                1.000
 score MIXED_IMG_CASE                 1.000
 score MONERO_DEADLINE                1.000
 score MONERO_EXTORT_01               1.000
@@ -300,7 +293,10 @@ score MSGID_HDR_MALF                 1.0
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
+score NUMBERONLY_BITCOIN_EXP         1.000
 score OBFU_BITCOIN                   1.000
+score ODD_FREEM_REPTO                1.000
+score PDS_NAKED_TO_NUMERO            1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000
 score PHP_NOVER_MUA                  1.000
@@ -349,6 +345,7 @@ score UC_GIBBERISH_OBFU              1.0
 score UNICODE_OBFU_ZW                1.000
 score UNSUB_GOOG_FORM                1.000
 score URI_ADOBESPARK                 1.000
+score URI_BUFFLY                     1.000
 score URI_DASHGOVEDU                 1.000
 score URI_DATA                       1.000
 score URI_DOTEDU_ENTITY              1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1909583&r1=1909582&r2=1909583&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Wed May  3 02:41:25 2023
@@ -1,228 +1,192 @@
 # Using score set 1 logs for revision 1909347 from:
-# ham-net-ena-week0.r1909347.log ham-net-ena-week1.r1909347.log ham-net-ena-week2.r1909347.log ham-net-ena-week3.r1909347.log ham-net-ena-week4.r1909347.log ham-net-giovanni-ham.r1909347.log ham-net-giovanni-spammy.r1909347.log ham-net-giovanni-spam.r1909347.log ham-net-grenier.r1909347.log ham-net-hege.r1909347.log ham-net-jhardin.r1909347.log ham-net-mmiroslaw-mails-ham.r1909347.log ham-net-mmiroslaw-mails-spam.r1909347.log ham-net-spamsponge.r1909347.log ham-net-thendrikx.r1909347.log ham-net-tsz-spam-corpus.r1909347.log spam-net-ena-week0.r1909347.log spam-net-ena-week1.r1909347.log spam-net-ena-week2.r1909347.log spam-net-ena-week3.r1909347.log spam-net-ena-week4.r1909347.log spam-net-giovanni-ham.r1909347.log spam-net-giovanni-spammy.r1909347.log spam-net-giovanni-spam.r1909347.log spam-net-grenier.r1909347.log spam-net-hege.r1909347.log spam-net-jhardin.r1909347.log spam-net-mmiroslaw-mails-ham.r1909347.log spam-net-mmiroslaw-mails-spam.r1909347.log spam-net-spamsponge.r19093
 47.log spam-net-thendrikx.r1909347.log spam-net-tsz-spam-corpus.r1909347.log
+# ham-net-ena-week0.r1909347.log ham-net-ena-week1.r1909347.log ham-net-ena-week2.r1909347.log ham-net-ena-week3.r1909347.log ham-net-ena-week4.r1909347.log ham-net-giovanni-ham.r1909347.log ham-net-giovanni-spammy.r1909347.log ham-net-giovanni-spam.r1909347.log ham-net-grenier.r1909347.log ham-net-hege.r1909347.log ham-net-jhardin.r1909347.log ham-net-llanga.r1909347.log ham-net-mmiroslaw-mails-ham.r1909347.log ham-net-mmiroslaw-mails-spam.r1909347.log ham-net-spamsponge.r1909347.log ham-net-thendrikx.r1909347.log spam-net-ena-week0.r1909347.log spam-net-ena-week1.r1909347.log spam-net-ena-week2.r1909347.log spam-net-ena-week3.r1909347.log spam-net-ena-week4.r1909347.log spam-net-giovanni-ham.r1909347.log spam-net-giovanni-spammy.r1909347.log spam-net-giovanni-spam.r1909347.log spam-net-grenier.r1909347.log spam-net-hege.r1909347.log spam-net-jhardin.r1909347.log spam-net-llanga.r1909347.log spam-net-mmiroslaw-mails-ham.r1909347.log spam-net-mmiroslaw-mails-spam.r1909347.log spam-n
 et-spamsponge.r1909347.log spam-net-thendrikx.r1909347.log
 
 score ACCT_PHISHING_MANY             2.999
+score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001
 score AC_FROM_MANY_DOTS              2.999
-score AC_HTML_NONSENSE_TAGS          1.473
-score ADMITS_SPAM                    2.799
-score ADVANCE_FEE_2_NEW_FRM_MNY      1.474
-score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              3.499
-score ADVANCE_FEE_3_NEW_FRM_MNY      1.168
-score ADVANCE_FEE_3_NEW_MONEY        0.001
-score ADVANCE_FEE_4_NEW              1.405
-score ADVANCE_FEE_4_NEW_FRM_MNY      1.934
-score ADVANCE_FEE_4_NEW_MONEY        0.997
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.737
+score AC_HTML_NONSENSE_TAGS          1.469
+score ADMITS_SPAM                    0.001
+score ADVANCE_FEE_2_NEW_MONEY        1.893
+score ADVANCE_FEE_3_NEW              2.705
+score ADVANCE_FEE_3_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_3_NEW_MONEY        2.399
+score ADVANCE_FEE_4_NEW_FRM_MNY      0.001
+score ADVANCE_FEE_4_NEW_MONEY        0.529
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.465
 score ADVANCE_FEE_5_NEW_MONEY        0.001
-score AD_PREFS                       0.063
-score AMAZON_IMG_NOT_RCVD_AMZN       1.849
+score AD_PREFS                       0.288
+score AMAZON_IMG_NOT_RCVD_AMZN       0.001
 score AXB_XMAILER_MIMEOLE_OL_024C2   0.001
-score BIGNUM_EMAILS_FREEM            1.724
-score BIGNUM_EMAILS_MANY             0.858
-score BITCOIN_DEADLINE               2.439
+score BITCOIN_DEADLINE               2.999
 score BITCOIN_EXTORT_01              4.999
-score BITCOIN_MALF_HTML              3.499
-score BITCOIN_MALWARE                0.001
-score BITCOIN_OBFU_SUBJ              3.499
-score BITCOIN_SPAM_02                2.499
-score BITCOIN_SPAM_05                1.952
+score BITCOIN_MALF_HTML              1.487
+score BITCOIN_MALWARE                0.001 # force non-zero
+score BITCOIN_OBFU_SUBJ              1.767
+score BITCOIN_SPAM_02                1.423
+score BITCOIN_SPAM_05                2.061
 score BITCOIN_SPAM_07                3.499
-score BITCOIN_XPRIO                  0.001 # force non-zero
+score BITCOIN_XPRIO                  0.001
 score BITCOIN_YOUR_INFO              2.999
-score BODY_SINGLE_URI                0.298
+score BODY_SINGLE_URI                2.002
 score BODY_SINGLE_WORD               0.001
-score BODY_URI_ONLY                  1.659
+score BODY_URI_ONLY                  2.255
 score CK_HELO_GENERIC                0.249
-score COMPENSATION                   1.064
-score CTE_8BIT_MISMATCH              0.035
-score DATE_IN_FUTURE_Q_PLUS          1.856
-score DEAR_BENEFICIARY               2.588
-score DKIMWL_WL_HIGH                 -0.170
-score DKIMWL_WL_MED                  -0.001 # force non-zero
-score DKIMWL_WL_MEDHI                -0.428
-score DSN_NO_MIMEVERSION             1.999
-score DX_TEXT_03                     1.900
-score ENCRYPTED_MESSAGE              -0.999
+score CTE_8BIT_MISMATCH              0.001 # force non-zero
+score DEAR_BENEFICIARY               2.799
+score DKIMWL_WL_HIGH                 -0.161
+score DKIMWL_WL_MED                  -0.001
+score DKIMWL_WL_MEDHI                -0.264
+score DX_TEXT_03                     1.999
 score END_FUTURE_EMAILS              2.499
-score FILL_THIS_FORM                 0.885
+score FILL_THIS_FORM                 0.599
 score FONT_INVIS_DIRECT              0.001
-score FONT_INVIS_LONG_LINE           2.807
-score FONT_INVIS_MSGID               1.656
-score FONT_INVIS_POSTEXTRAS          2.792
-score FORGED_SPF_HELO                0.358
+score FONT_INVIS_LONG_LINE           2.999
+score FONT_INVIS_MSGID               0.001
+score FONT_INVIS_POSTEXTRAS          0.556
+score FORGED_SPF_HELO                0.029
 score FORM_FRAUD                     0.999
-score FORM_FRAUD_3                   0.410
 score FORM_FRAUD_5                   0.001
 score FREEMAIL_FORGED_FROMDOMAIN     0.249
-score FROM_ADDR_WS                   2.239
-score FROM_FMBLA_NEWDOM14            1.000
+score FROM_ADDR_WS                   2.999
+score FROM_FMBLA_NEWDOM14            0.999
 score FROM_FMBLA_NEWDOM28            0.799
-score FROM_GOV_DKIM_AU               -0.583
-score FROM_IN_TO_AND_SUBJ            2.199
+score FROM_GOV_DKIM_AU               -0.190
+score FROM_IN_TO_AND_SUBJ            1.799
 score FROM_MISSPACED                 1.999
-score FROM_MISSP_EH_MATCH            0.209
-score FROM_MISSP_FREEMAIL            2.999
-score FROM_MISSP_MSFT                3.199
-score FROM_MISSP_REPLYTO             2.499
+score FROM_MISSP_EH_MATCH            0.001
+score FROM_MISSP_FREEMAIL            0.001
+score FROM_MISSP_MSFT                0.001
+score FROM_MISSP_REPLYTO             1.565
 score FROM_MISSP_SPF_FAIL            0.001
-score FROM_MISSP_USER                1.404
-score FROM_NTLD_LINKBAIT             1.256
-score FROM_NTLD_REPLY_FREEMAIL       0.522
-score FROM_PAYPAL_SPOOF              1.599
-score FROM_SUSPICIOUS_NTLD           0.500
+score FROM_MISSP_USER                0.001
+score FROM_PAYPAL_SPOOF              0.014
+score FROM_SUSPICIOUS_NTLD           0.291
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FROM_WSP_TRAIL                 2.399
+score FROM_WSP_TRAIL                 2.299
 score FSL_BULK_SIG                   0.001
-score FSL_CTYPE_WIN1251              2.406
-score FSL_HELO_FAKE                  3.157
-score FSL_NEW_HELO_USER              1.999
-score FUZZY_AMAZON                   1.894
-score FUZZY_PAYPAL                   1.799
-score FUZZY_WALLET                   0.001
-score GB_BITCOIN_CP                  1.550
-score GB_CUSTOM_HTM_URI              0.001
-score GB_FAKE_RF_SHORT               1.730
-score GB_FREEMAIL_DISPTO             0.001 # force non-zero
-score GB_GOOGLE_TRANSL               0.590
-score GB_HASHBL_BTC                  1.562
-score GOOG_REDIR_NORDNS              2.422
-score GOOG_STO_NOIMG_HTML            2.999
-score HAS_X_OUTGOING_SPAM_STAT       0.001
-score HDRS_LCASE                     0.100
-score HDRS_MISSP                     1.284
+score FSL_CTYPE_WIN1251              0.001
+score FSL_NEW_HELO_USER              0.001
+score FUZZY_AMAZON                   0.001
+score GB_CUSTOM_HTM_URI              1.355
+score GB_FAKE_RF_SHORT               1.999
+score GB_FREEMAIL_DISPTO             0.001
+score GB_GOOGLE_TRANSL               0.749
+score GB_HASHBL_BTC                  4.427
+score GOOG_REDIR_NORDNS              2.899
+score GOOG_STO_NOIMG_HTML            2.950
+score HAS_X_OUTGOING_SPAM_STAT       0.796
+score HDRS_MISSP                     0.001
 score HDR_ORDER_FTSDMCXX_DIRECT      0.001
 score HDR_ORDER_FTSDMCXX_NORDNS      0.001
 score HEADER_FROM_DIFFERENT_DOMAINS  0.250
-score HELO_NO_DOMAIN                 0.105
-score HK_LOTTO                       0.999
+score HELO_NO_DOMAIN                 0.001
 score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_ENVFROM              0.267
-score HK_RANDOM_FROM                 1.000
-score HK_RANDOM_REPLYTO              1.000
-score HK_SCAM                        1.378
-score HOSTED_IMG_DIRECT_MX           3.499
-score HOSTED_IMG_FREEM               3.499
-score HOSTED_IMG_MULTI_PUB_01        3.000
+score HK_RANDOM_ENVFROM              0.001
+score HK_RANDOM_FROM                 0.001
+score HK_RANDOM_REPLYTO              0.999
+score HK_SCAM                        1.465
+score HOSTED_IMG_DIRECT_MX           0.001
+score HOSTED_IMG_FREEM               3.210
 score HTML_ENTITY_ASCII_TINY         2.999
-score HTML_TEXT_INVISIBLE_FONT       0.461
-score HTML_TEXT_INVISIBLE_STYLE      1.335
+score HTML_OFF_PAGE                  0.001
+score HTML_TEXT_INVISIBLE_FONT       0.175
+score HTML_TEXT_INVISIBLE_STYLE      0.001
 score JH_SPAMMY_HEADERS              3.499
-score KHOP_HELO_FCRDNS               0.399
-score LONG_HEX_URI                   0.373
-score LONG_IMG_URI                   0.638
-score LONG_INVISIBLE_TEXT            2.187
+score KHOP_HELO_FCRDNS               0.001
+score LONG_HEX_URI                   1.939
+score LONG_IMG_URI                   0.001
+score LONG_INVISIBLE_TEXT            2.646
 score LOTS_OF_MONEY                  0.010
 score MALWARE_NORDNS                 0.001
 score MALWARE_PASSWORD               0.001
-score MALW_ATTACH                    2.100
-score MANY_HDRS_LCASE                0.099
-score MANY_SPAN_IN_TEXT              2.999
-score MANY_SUBDOM                    2.199
-score MILLION_HUNDRED                2.599
+score MANY_SPAN_IN_TEXT              3.099
+score MILLION_HUNDRED                0.001
 score MILLION_USD                    1.999
-score MIMEOLE_DIRECT_TO_MX           0.001
-score MIXED_ES                       1.999
-score MONEY_ATM_CARD                 2.179
+score MIMEOLE_DIRECT_TO_MX           0.001 # force non-zero
+score MIME_NO_TEXT                   1.999
+score MIXED_CENTER_CASE              2.499
+score MIXED_ES                       0.932
+score MONEY_ATM_CARD                 0.965
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               2.407
-score MONEY_FRAUD_3                  2.094
-score MONEY_FRAUD_5                  0.001
+score MONEY_FORM_SHORT               0.452
+score MONEY_FRAUD_3                  0.001
+score MONEY_FRAUD_5                  1.123
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           2.089
-score MONEY_FROM_MISSP               0.903
+score MONEY_FREEMAIL_REPTO           2.234
+score MONEY_FROM_MISSP               0.001
 score MSMAIL_PRI_ABNORMAL            1.499
-score NA_DOLLARS                     1.499
-score NICE_REPLY_A                   -3.155
+score NA_DOLLARS                     0.493
+score NICE_REPLY_A                   -4.280
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.636
-score NSL_RCVD_HELO_USER             1.354
-score NUMBERONLY_BITCOIN_EXP         1.816
-score OBFU_TEXT_ATTACH               0.016
-score OBFU_UNSUB_UL                  2.899
-score ODD_FREEM_REPTO                2.804
-score PDS_BAD_THREAD_QP_64           1.000
-score PDS_BTC_ID                     0.252
-score PDS_BTC_MSGID                  0.001
-score PDS_BTC_NTLD                   1.766
+score NSL_RCVD_FROM_USER             0.001
+score NSL_RCVD_HELO_USER             0.001
+score OBFU_TEXT_ATTACH               1.072
+score PDS_BAD_THREAD_QP_64           0.999
+score PDS_BTC_ID                     0.475
+score PDS_BTC_MSGID                  0.001 # force non-zero
+score PDS_BTC_NTLD                   1.999
 score PDS_EMPTYSUBJ_URISHRT          1.499
-score PDS_FRNOM_TODOM_DBL_URL        1.500
-score PDS_FRNOM_TODOM_NAKED_TO       1.258
+score PDS_FRNOM_TODOM_DBL_URL        1.499
+score PDS_FRNOM_TODOM_NAKED_TO       1.499
 score PDS_FROM_2_EMAILS_SHRTNER      1.499
-score PDS_FROM_NAME_TO_DOMAIN        1.832
-score PDS_HELO_SPF_FAIL              1.727
-score PDS_NAKED_TO_NUMERO            1.848
-score PDS_NO_FULL_NAME_SPOOFED_URL   0.749
+score PDS_FROM_NAME_TO_DOMAIN        1.999
+score PDS_HELO_SPF_FAIL              0.958
+score PDS_NO_FULL_NAME_SPOOFED_URL   0.750
 score PDS_SHORT_SPOOFED_URL          1.999
-score PHP_ORIG_SCRIPT                0.315
 score PHP_SCRIPT                     2.499
-score POSSIBLE_AMAZON_PHISH_02       2.299
-score POSSIBLE_GMAIL_PHISHER         2.699
-score PP_MIME_FAKE_ASCII_TEXT        0.387
+score POSSIBLE_AMAZON_PHISH_02       2.399
+score POSSIBLE_GMAIL_PHISHER         2.799
+score PP_MIME_FAKE_ASCII_TEXT        0.001
 score RAND_MKTG_HEADER               1.999
 score RATWARE_NO_RDNS                0.001
 score RCVD_IN_MSPIKE_H2              -0.001
-score REPTO_419_FRAUD                2.820
-score REPTO_419_FRAUD_GM             2.615
-score REPTO_419_FRAUD_GM_LOOSE       0.999
-score RISK_FREE                      1.404
 score SCC_BODY_SINGLE_WORD           0.001
-score SCC_CANSPAM_2                  2.699
+score SCC_CANSPAM_2                  2.800
 score SCC_ISEMM_LID_1B               1.499
-score SENDGRID_REDIR                 1.061
-score SERGIO_SUBJECT_VIAGRA01        1.822
-score SHOPIFY_IMG_NOT_RCVD_SFY       0.295
-score SPOOFED_FREEMAIL               0.351
+score SENDGRID_REDIR                 1.067
+score SERGIO_SUBJECT_VIAGRA01        0.346
+score SHOPIFY_IMG_NOT_RCVD_SFY       2.355
+score SPOOFED_FREEMAIL               0.001
 score SPOOFED_FREEMAIL_NO_RDNS       0.001
-score SPOOFED_FREEM_REPTO            2.499
+score SPOOFED_FREEM_REPTO            0.001
 score SPOOF_GMAIL_MID                0.001
-score STATIC_XPRIO_OLE               1.867
-score STOX_BOUND_090909_B            1.851
-score THIS_AD                        1.299
-score TO_EQ_FM_DIRECT_MX             0.001
+score STATIC_XPRIO_OLE               1.999
+score STOX_BOUND_090909_B            2.497
+score THIS_AD                        0.800
+score TO_EQ_FM_DIRECT_MX             0.253
 score TO_EQ_FM_DOM_SPF_FAIL          0.001
-score TO_EQ_FM_HTML_ONLY             1.799
 score TO_EQ_FM_SPF_FAIL              0.001
-score TO_IN_SUBJ                     0.099
+score TO_IN_SUBJ                     0.100
 score TO_NAME_SUBJ_NO_RDNS           2.999
-score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           1.999
-score TO_NO_BRKTS_HTML_ONLY          1.999
+score TO_NO_BRKTS_FROM_MSSP          2.500
+score TO_NO_BRKTS_HTML_IMG           2.000
+score TO_NO_BRKTS_HTML_ONLY          1.569
 score TO_NO_BRKTS_MSFT               0.001
-score TO_NO_BRKTS_NORDNS_HTML        1.205
-score TO_NO_BRKTS_PCNT               2.499
+score TO_NO_BRKTS_NORDNS_HTML        1.825
+score TO_NO_BRKTS_PCNT               2.500
 score TR_JS_REDIRECTION_0            2.200
-score TVD_DOLLARS_US                 2.627
-score TVD_IP_HEX                     1.234
-score TVD_IP_SING_HEX                2.399
-score TVD_SPACE_ENCODED              2.499
-score TVD_SPACE_ENC_FM_MIME          0.001
+score TVD_DOLLARS_US                 1.999
+score TVD_SPACE_ENCODED              0.001
 score TVD_SPACE_RATIO_MINFP          0.001
-score UNDISC_FREEM                   2.899
+score UNDISC_FREEM                   2.799
 score UNDISC_MONEY                   3.099
 score UNICODE_OBFU_ASC               2.499
-score URI_AZURE_CLOUDAPP             2.999
-score URI_BUFFLY                     1.999
 score URI_DOTEDU                     1.999
-score URI_GIBB_NO_PROTO              0.573
+score URI_GIBB_NO_PROTO              0.950
 score URI_GOOGLE_PROXY               2.199
-score URI_HEX_IP                     1.214
 score URI_ONLY_MSGID_MALF            0.001
-score URI_PHISH                      3.625
-score URI_PHP_REDIR                  2.772
+score URI_PHISH                      3.999
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.799
 score URI_WP_HACKED                  3.499
 score URI_WP_HACKED_2                2.499
 score VFY_ACCT_NORDNS                0.001
-score WORD_INVIS                     0.039
-score WORD_INVIS_MANY                1.069
+score WORD_INVIS                     1.943
+score WORD_INVIS_MANY                2.999
 score XFER_LOTSA_MONEY               0.001
-score XM_RANDOM                      2.499
-score XPRIO                          1.892
-score YOU_INHERIT                    1.594
-score AC_BR_BONANZA                  0.001
+score XM_RANDOM                      0.001
+score XPRIO                          0.001
+score YOU_INHERIT                    0.880
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
 score AC_SPAMMY_URI_PATTERNS10       1.000
@@ -235,10 +199,13 @@ score AC_SPAMMY_URI_PATTERNS8        1.0
 score AC_SPAMMY_URI_PATTERNS9        1.000
 score ADULT_DATING_COMPANY           10.000
 score ADVANCE_FEE_2_NEW_FORM         1.000
+score ADVANCE_FEE_2_NEW_FRM_MNY      1.000
 score ALIBABA_IMG_NOT_RCVD_ALI       1.000
 score APP_DEVELOPMENT_FREEM          1.000
 score APP_DEVELOPMENT_NORDNS         1.000
 score BEBEE_IMG_NOT_RCVD_BB          1.000
+score BIGNUM_EMAILS_FREEM            1.000
+score BIGNUM_EMAILS_MANY             1.000
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
@@ -268,8 +235,10 @@ score DAY_I_EARNED                   1.0
 score DKIMWL_BL                      1.000
 score DKIMWL_BLOCKED                 0.001
 score DOTGOV_IMAGE                   1.000
+score DSN_NO_MIMEVERSION             1.000
 score DYNAMIC_IMGUR                  1.000
 score EBAY_IMG_NOT_RCVD_EBAY         1.000
+score ENCRYPTED_MESSAGE              -1.000
 score ENVFROM_GOOG_TRIX              1.000
 score FACEBOOK_IMG_NOT_RCVD_FB       1.000
 score FBI_MONEY                      1.000
@@ -286,8 +255,11 @@ score FROM_FMBLA_NEWDOM              1.0
 score FROM_GOV_REPLYTO_FREEMAIL      1.000
 score FROM_GOV_SPOOF                 1.000
 score FROM_NEWDOM_BTC                1.000
+score FROM_NTLD_LINKBAIT             1.000
+score FROM_NTLD_REPLY_FREEMAIL       1.000
 score FROM_NUMBERO_NEWDOMAIN         1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
+score GB_BITCOIN_CP                  1.000
 score GB_FORGED_MUA_POSTFIX          1.000
 score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GB_GOOGLE_OBFUR                0.750
@@ -305,11 +277,12 @@ score GOOG_STO_IMG_NOHTML            1.0
 score HAS_X_NO_RELAY                 1.000
 score HEXHASH_WORD                   1.000
 score HK_CTE_RAW                     1.000
+score HK_LOTTO                       1.000
 score HK_RCVD_IP_MULTICAST           1.000
 score HOSTED_IMG_DQ_UNSUB            1.000
 score HOSTED_IMG_MULTI               1.000
+score HOSTED_IMG_MULTI_PUB_01        1.000
 score HTML_ENTITY_ASCII              1.000
-score HTML_OFF_PAGE                  1.000
 score HTML_SHRT_CMNT_OBFU_MANY       1.000
 score HTML_SINGLET_MANY              1.000
 score IMG_ONLY_FM_DOM_INFO           1.000
@@ -320,9 +293,8 @@ score LIST_PRTL_PUMPDUMP             1.0
 score LIST_PRTL_SAME_USER            1.000
 score LUCRATIVE                      1.000
 score MALF_HTML_B64                  1.000
-score MIME_NO_TEXT                   1.000
+score MANY_HDRS_LCASE                0.100
 score MIXED_AREA_CASE                1.000
-score MIXED_CENTER_CASE              1.000
 score MIXED_FONT_CASE                1.000
 score MIXED_HREF_CASE                1.000
 score MIXED_IMG_CASE                 1.000
@@ -335,12 +307,16 @@ score MSGID_HDR_MALF                 1.0
 score MSM_PRIO_REPTO                 1.000
 score NEWEGG_IMG_NOT_RCVD_NEGG       1.000
 score NEW_PRODUCTS                   1.000
+score NUMBERONLY_BITCOIN_EXP         1.000
 score OBFU_BITCOIN                   1.000
+score ODD_FREEM_REPTO                1.000
 score PDS_DBL_URL_TNB_RUNON          1.000
+score PDS_NAKED_TO_NUMERO            1.000
 score PDS_SHORTFWD_URISHRT           1.000
 score PHISH_AZURE_CLOUDAPP           3.500
 score PHISH_FBASEAPP                 1.000
 score PHP_NOVER_MUA                  1.000
+score PHP_ORIG_SCRIPT                1.000
 score PHP_SCRIPT_MUA                 1.000
 score PP_TOO_MUCH_UNICODE02          0.500
 score PP_TOO_MUCH_UNICODE05          1.000
@@ -352,9 +328,12 @@ score RCVD_DOTEDU_SHORT              1.0
 score RCVD_DOTEDU_SUSP_URI           1.000
 score RDNS_NUM_TLD_ATCHNX            1.000
 score RDNS_NUM_TLD_XM                1.000
+score REPTO_419_FRAUD                1.000
 score REPTO_419_FRAUD_AOL            1.000
 score REPTO_419_FRAUD_AOL_LOOSE      1.000
 score REPTO_419_FRAUD_CNS            1.000
+score REPTO_419_FRAUD_GM             1.000
+score REPTO_419_FRAUD_GM_LOOSE       1.000
 score REPTO_419_FRAUD_HM             1.000
 score REPTO_419_FRAUD_OL             1.000
 score REPTO_419_FRAUD_PM             1.000
@@ -379,19 +358,24 @@ score TAGSTAT_IMG_NOT_RCVD_TGST      1.0
 score TARINGANET_IMG_NOT_RCVD_TN     1.000
 score THIS_IS_ADV_SUSP_NTLD          1.000
 score TONLINE_FAKE_DKIM              1.000
+score TVD_SPACE_ENC_FM_MIME          1.000
 score TW_GIBBERISH_MANY              1.000
 score UC_GIBBERISH_OBFU              1.000
 score UNICODE_OBFU_ZW                1.000
 score UNSUB_GOOG_FORM                1.000
 score URI_ADOBESPARK                 1.000
+score URI_AZURE_CLOUDAPP             1.000
+score URI_BUFFLY                     1.000
 score URI_DASHGOVEDU                 1.000
 score URI_DATA                       1.000
 score URI_DOTEDU_ENTITY              1.000
 score URI_FIREBASEAPP                1.000
 score URI_GOOG_STO_SPAMMY            3.000
+score URI_HEX_IP                     1.000
 score URI_IMG_WP_REDIR               1.000
 score URI_LONG_REPEAT                1.000
 score URI_OPTOUT_3LD                 1.000
+score URI_PHP_REDIR                  1.000
 score URI_TRY_USME                   1.000
 score URI_WP_DIRINDEX                1.000
 score USB_DRIVES                     1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1909583&r1=1909582&r2=1909583&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Wed May  3 02:41:25 2023
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 320873  67.525%  (99.365% of non-spam corpus)
-# Correctly spam:      92857  19.541%  (60.982% of spam corpus)
-# False positives:      2052  0.432%  (0.635% of nonspam,  30598 weighted)
-# False negatives:     59412  12.503%  (39.018% of spam, 116433 weighted)
-# Average score for spam:  8.4    nonspam: 0.7
-# Average for false-pos:   6.3  false-neg: 2.0
-# TOTAL:              475194  100.00%
+# Correctly non-spam: 330998  68.248%  (99.343% of non-spam corpus)
+# Correctly spam:      87973  18.139%  (57.952% of spam corpus)
+# False positives:      2189  0.451%  (0.657% of nonspam,  32230 weighted)
+# False negatives:     63831  13.161%  (42.048% of spam, 132993 weighted)
+# Average score for spam:  8.1    nonspam: 0.5
+# Average for false-pos:   6.5  false-neg: 2.1
+# TOTAL:              484991  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  39928  99.32%
-# Correctly spam:      11416  59.62%
-# False positives:       275  0.68%
-# False negatives:      7731  40.38%
-# TCR(l=50): 0.891346  SpamRecall: 59.623%  SpamPrec: 97.648%
+# Correctly non-spam:  41248  99.35%
+# Correctly spam:      10986  57.53%
+# False positives:       269  0.65%
+# False negatives:      8111  42.47%
+# TCR(l=50): 0.885720  SpamRecall: 57.527%  SpamPrec: 97.610%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 315626  97.74%
-# Correctly spam:      61218  40.20%
-# False positives:      7299  2.26%
-# False negatives:     91051  59.80%
-# TCR(l=50): 0.333923  SpamRecall: 40.204%  SpamPrec: 89.347%
+# Correctly non-spam: 325824  97.79%
+# Correctly spam:      63136  41.59%
+# False positives:      7363  2.21%
+# False negatives:     88668  58.41%
+# TCR(l=50): 0.332307  SpamRecall: 41.590%  SpamPrec: 89.556%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  39269  97.68%
-# Correctly spam:       7692  40.17%
-# False positives:       934  2.32%
-# False negatives:     11455  59.83%
-# TCR(l=50): 0.329241  SpamRecall: 40.173%  SpamPrec: 89.172%
+# Correctly non-spam:  40590  97.77%
+# Correctly spam:       8000  41.89%
+# False positives:       927  2.23%
+# False negatives:     11097  58.11%
+# TCR(l=50): 0.332428  SpamRecall: 41.891%  SpamPrec: 89.616%

Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1909583&r1=1909582&r2=1909583&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Wed May  3 02:41:25 2023
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 198317  56.053%  (99.402% of non-spam corpus)
-# Correctly spam:     111346  31.471%  (72.165% of spam corpus)
-# False positives:      1193  0.337%  (0.598% of nonspam,  71153 weighted)
-# False negatives:     42947  12.139%  (27.835% of spam,  85502 weighted)
-# Average score for spam:  12.5    nonspam: -0.2
-# Average for false-pos:   7.7  false-neg: 2.0
-# TOTAL:              353803  100.00%
+# Correctly non-spam: 304062  76.893%  (98.893% of non-spam corpus)
+# Correctly spam:      57864  14.633%  (65.778% of spam corpus)
+# False positives:      3404  0.861%  (1.107% of nonspam, 111239 weighted)
+# False negatives:     30104  7.613%  (34.222% of spam,  53479 weighted)
+# Average score for spam:  14.3    nonspam: -0.4
+# Average for false-pos:   11.4  false-neg: 1.8
+# TOTAL:              395434  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24794  99.43%
-# Correctly spam:      13919  71.72%
-# False positives:       143  0.57%
-# False negatives:      5489  28.28%
-# TCR(l=50): 1.535565  SpamRecall: 71.718%  SpamPrec: 98.983%
+# Correctly non-spam:  37928  98.91%
+# Correctly spam:       7389  66.43%
+# False positives:       419  1.09%
+# False negatives:      3734  33.57%
+# TCR(l=50): 0.450616  SpamRecall: 66.430%  SpamPrec: 94.634%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 198439  99.46%
-# Correctly spam:      64621  41.88%
-# False positives:      1071  0.54%
-# False negatives:     89672  58.12%
-# TCR(l=50): 1.077300  SpamRecall: 41.882%  SpamPrec: 98.370%
+# Correctly non-spam: 304502  99.04%
+# Correctly spam:      51062  58.05%
+# False positives:      2964  0.96%
+# False negatives:     36906  41.95%
+# TCR(l=50): 0.475230  SpamRecall: 58.046%  SpamPrec: 94.514%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  24812  99.50%
-# Correctly spam:       8161  42.05%
-# False positives:       125  0.50%
-# False negatives:     11247  57.95%
-# TCR(l=50): 1.109219  SpamRecall: 42.050%  SpamPrec: 98.491%
+# Correctly non-spam:  38003  99.10%
+# Correctly spam:       6452  58.01%
+# False positives:       344  0.90%
+# False negatives:      4671  41.99%
+# TCR(l=50): 0.508573  SpamRecall: 58.006%  SpamPrec: 94.938%