Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Jan 7 02:41:51 2024
@@ -6,196 +6,194 @@ score AC_BR_BONANZA 0.0
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.499
score AC_HTML_NONSENSE_TAGS 1.999
-score AC_POST_EXTRAS 0.720
+score AC_POST_EXTRAS 0.408
score ADMITS_SPAM 2.699
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.999
-score ADVANCE_FEE_3_NEW_MONEY 1.084
-score ADVANCE_FEE_4_NEW 2.249
+score ADVANCE_FEE_3_NEW 2.997
+score ADVANCE_FEE_3_NEW_MONEY 0.796
+score ADVANCE_FEE_4_NEW 2.245
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY 0.344
-score AD_PREFS 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.340
+score AD_PREFS 0.001 # force non-zero
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 2.900
-score BIGNUM_EMAILS_MANY 3.000
-score BITCOIN_EXTORT_01 4.494
-score BITCOIN_MALF_HTML 2.549
-score BITCOIN_SPAM_02 2.212
-score BITCOIN_SPAM_07 0.001 # force non-zero
-score BITCOIN_SPAM_08 0.305
-score BITCOIN_TOEQFM 3.055
+score AXB_X_FF_SEZ_S 2.899
+score BIGNUM_EMAILS_MANY 2.999
+score BITCOIN_EXTORT_01 4.501
+score BITCOIN_MALF_HTML 2.585
+score BITCOIN_SPAM_02 2.299
+score BITCOIN_SPAM_07 0.001
+score BITCOIN_SPAM_08 0.707
+score BITCOIN_TOEQFM 3.051
score BITCOIN_VISTA 0.001
-score BITCOIN_XPRIO 2.430
+score BITCOIN_XPRIO 2.481
score BITCOIN_YOUR_INFO 2.999
score BODY_SINGLE_URI 1.963
score BODY_SINGLE_WORD 0.001
-score BODY_URI_ONLY 1.813
-score BOGUS_MIME_VERSION 3.499
+score BODY_URI_ONLY 1.793
+score BOGUS_MIME_VERSION 3.500
score CK_HELO_GENERIC 0.250
score COMPENSATION 1.499
-score CTE_8BIT_MISMATCH 1.000
-score DEAR_BENEFICIARY 0.773
-score DSN_NO_MIMEVERSION 2.000
-score DYNAMIC_IMGUR 1.895
-score ENCRYPTED_MESSAGE -0.999
+score CTE_8BIT_MISMATCH 0.999
+score DEAR_BENEFICIARY 0.780
+score DSN_NO_MIMEVERSION 1.999
+score DYNAMIC_IMGUR 2.901
+score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 2.499
score FACEBOOK_IMG_NOT_RCVD_FB 1.999
-score FILL_THIS_FORM 0.001
-score FONT_INVIS_DIRECT 0.232
-score FONT_INVIS_LONG_LINE 1.788
+score FILL_THIS_FORM 0.385
+score FONT_INVIS_DIRECT 0.257
+score FONT_INVIS_LONG_LINE 1.787
score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 1.763
-score FONT_INVIS_POSTEXTRAS 2.579
+score FONT_INVIS_NORDNS 1.764
+score FONT_INVIS_POSTEXTRAS 2.891
score FORM_FRAUD 0.999
score FORM_FRAUD_3 0.001
-score FORM_FRAUD_5 0.775
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FORM_FRAUD_5 0.222
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
score FROMSPACE 2.699
-score FROM_ADDR_WS 2.350
-score FROM_IN_TO_AND_SUBJ 0.639
+score FROM_ADDR_WS 2.351
+score FROM_IN_TO_AND_SUBJ 1.058
score FROM_MISSPACED 1.999
score FROM_MISSP_DYNIP 0.001
-score FROM_MISSP_EH_MATCH 0.410
-score FROM_MISSP_FREEMAIL 1.815
-score FROM_MISSP_MSFT 1.049
-score FROM_MISSP_REPLYTO 2.499
-score FROM_MISSP_TO_UNDISC 3.405
-score FROM_MISSP_USER 0.001 # force non-zero
+score FROM_MISSP_EH_MATCH 0.187
+score FROM_MISSP_FREEMAIL 1.816
+score FROM_MISSP_MSFT 1.187
+score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_TO_UNDISC 1.531
+score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 2.499
score FROM_NTLD_REPLY_FREEMAIL 0.001
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FROM_UNBAL1 2.399
score FROM_WSP_TRAIL 2.499
-score FSL_CTYPE_WIN1251 0.001
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.005
-score FUZZY_BITCOIN 2.953
+score FUZZY_AMAZON 2.060
+score FUZZY_BITCOIN 3.330
score FUZZY_IMPORTANT 2.599
-score FUZZY_WALLET 1.899
-score GB_BITCOIN_CP 1.011
-score GB_CUSTOM_HTM_URI 1.500
-score GB_FAKE_RF_SHORT 1.999
-score GB_FREEMAIL_DISPTO 0.001
-score GOOG_REDIR_NORDNS 2.339
+score FUZZY_WALLET 1.799
+score GB_BITCOIN_CP 2.155
+score GB_CUSTOM_HTM_URI 1.499
+score GB_FAKE_RF_SHORT 2.000
+score GB_FREEMAIL_DISPTO 0.001 # force non-zero
+score GOOG_REDIR_NORDNS 2.152
score GOOG_STO_IMG_HTML 2.500
score GOOG_STO_NOIMG_HTML 2.999
-score HDRS_LCASE_IMGONLY 0.100
-score HDRS_MISSP 2.500
-score HDR_ORDER_FTSDMCXX_DIRECT 1.009
+score HDRS_LCASE_IMGONLY 0.099
+score HDRS_MISSP 2.499
+score HDR_ORDER_FTSDMCXX_DIRECT 1.301
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_MISC_IP 0.249
-score HELO_NO_DOMAIN 0.001 # force non-zero
+score HELO_NO_DOMAIN 0.001
score HK_LOTTO 0.999
score HK_NAME_FM_MR_MRS 1.499
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 0.999
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 0.793
-score HK_SCAM 1.999
-score HOSTED_IMG_DIRECT_MX 2.902
-score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 1.859
+score HK_RANDOM_FROM 0.999
+score HK_RANDOM_REPLYTO 0.792
+score HK_SCAM 2.000
+score HOSTED_IMG_DIRECT_MX 2.903
+score HOSTED_IMG_MULTI_PUB_01 3.000
+score HREF_EMPTY_NORDNS 1.783
score HTML_ENTITY_ASCII 2.999
-score HTML_FONT_TINY_NORDNS 0.736
+score HTML_FONT_TINY_NORDNS 0.735
score HTML_SINGLET_MANY 2.499
-score HTML_TEXT_INVISIBLE_FONT 1.189
+score HTML_TEXT_INVISIBLE_FONT 1.188
score HTML_TEXT_INVISIBLE_STYLE 1.253
score JH_SPAMMY_HEADERS 3.499
-score KHOP_FAKE_EBAY 0.900
score KHOP_HELO_FCRDNS 0.400
score LIST_PARTIAL_SHORT_MSG 2.499
score LONGLN_LOW_CONTRAST 2.499
score LONG_HEX_URI 2.999
score LONG_IMG_URI 0.001
-score LONG_INVISIBLE_TEXT 1.786
+score LONG_INVISIBLE_TEXT 1.789
score LOTS_OF_MONEY 0.010
score LOTTO_DEPT 1.999
score MALFORMED_FREEMAIL 2.799
score MANY_SUBDOM 2.699
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.333
-score MIMEOLE_DIRECT_TO_MX 0.497
-score MIXED_AREA_CASE 0.001 # force non-zero
+score MILLION_USD 0.349
+score MIMEOLE_DIRECT_TO_MX 0.001 # force non-zero
+score MIXED_AREA_CASE 0.001
score MIXED_CENTER_CASE 2.499
score MIXED_ES 2.099
-score MIXED_HREF_CASE 1.941
+score MIXED_HREF_CASE 1.939
score MIXED_IMG_CASE 0.001
-score MONEY_ATM_CARD 2.544
+score MONEY_ATM_CARD 1.241
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.337
+score MONEY_FRAUD_3 2.251
score MONEY_FRAUD_5 2.799
-score MONEY_FRAUD_8 3.008
+score MONEY_FRAUD_8 3.032
score MONEY_FREEMAIL_REPTO 2.999
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
score NA_DOLLARS 1.499
-score NICE_REPLY_A -0.922
+score NICE_REPLY_A -0.001
score NOT_SPAM 2.399
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.368
-score OBFU_BITCOIN 2.103
-score OBFU_TEXT_ATTACH 1.449
-score PDS_BAD_THREAD_QP_64 1.000
-score PDS_BTC_ID 0.500
+score OBFU_BITCOIN 2.691
+score OBFU_TEXT_ATTACH 1.499
+score PDS_BAD_THREAD_QP_64 0.999
+score PDS_BTC_ID 0.499
score PDS_BTC_MSGID 0.001
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_FRNOM_TODOM_DBL_URL 0.001
-score PDS_FRNOM_TODOM_NAKED_TO 0.505
-score PDS_FROM_NAME_TO_DOMAIN 0.001
+score PDS_FRNOM_TODOM_NAKED_TO 0.391
+score PDS_FROM_NAME_TO_DOMAIN 0.115
score PDS_HP_HELO_NORDNS 0.999
score PDS_NAKED_TO_NUMERO 1.999
score PDS_PHP_EVAL 1.499
score PDS_TINYSUBJ_URISHRT 1.499
-score PHP_ORIG_SCRIPT 0.228
+score PHP_ORIG_SCRIPT 0.229
score PHP_ORIG_SCRIPT_EVAL 2.999
-score PHP_SCRIPT 2.500
+score PHP_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 2.630
-score RCVD_DOTEDU_SUSP 0.658
-score RCVD_DOTEDU_SUSP_URI 1.014
+score RATWARE_NO_RDNS 2.903
+score RCVD_DOTEDU_SUSP 1.720
+score RCVD_DOTEDU_SUSP_URI 2.354
score REPTO_419_FRAUD_GM_LOOSE 0.999
score RISK_FREE 0.001
score SCC_BODY_SINGLE_WORD 0.001
score SCC_BODY_URI_ONLY 1.701
-score SCC_CANSPAM_1 2.399
+score SCC_CANSPAM_1 2.400
score SCC_CANSPAM_2 3.799
score SCC_ISEMM_LID_1B 1.499
-score SCC_SPAMMER_ADDR_2 1.160
+score SCC_SPAMMER_ADDR_2 2.080
score SENDGRID_REDIR 1.499
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
score SHORTENED_URL_SRC 3.099
score SHORT_SHORTNER 1.999
-score SPOOFED_FREEMAIL_NO_RDNS 1.069
-score SPOOF_GMAIL_MID 1.500
-score STATIC_XPRIO_OLE 1.999
+score SPOOFED_FREEMAIL_NO_RDNS 1.064
+score SPOOF_GMAIL_MID 1.499
+score STATIC_XPRIO_OLE 1.700
score SUSP_UTF8_WORD_FROM 1.999
score TEQF_USR_POLITE 1.999
-score THIS_AD 1.400
+score THIS_AD 1.399
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_IMG 2.499
-score TO_EQ_FM_HTML_ONLY 0.001
-score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.557
+score TO_IN_SUBJ 0.099
+score TO_NAME_SUBJ_NO_RDNS 2.729
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 0.544
+score TO_NO_BRKTS_HTML_IMG 0.543
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 1.350
+score TO_NO_BRKTS_MSFT 1.212
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.259
+score TO_NO_BRKTS_PCNT 2.236
+score TVD_IP_HEX 2.300
score TVD_RCVD_SPACE_BRACKET 2.899
-score TVD_SPACE_ENCODED 2.498
+score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_RATIO_MINFP 2.499
score UNDISC_FREEM 2.699
score UNDISC_MONEY 2.899
-score UNICODE_OBFU_ZW_MANY 0.001 # force non-zero
+score UNICODE_OBFU_ZW_MANY 0.001
score URI_AZURE_CLOUDAPP 2.999
score URI_DOTEDU 1.999
score URI_GOOGLE_PROXY 2.499
@@ -205,16 +203,15 @@ score URI_PHISH 3.9
score URI_TRY_3LD 1.999
score URI_WP_HACKED 3.499
score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.999
+score VFY_ACCT_NORDNS 2.617
score VISTA_TONOM_EQ_TOLOC 2.499
score WIKI_IMG 3.299
-score WORD_INVIS 1.582
-score WORD_INVIS_MANY 3.000
-score XFER_LOTSA_MONEY 0.001
-score XM_LIGHT_HEAVY 2.499
-score XM_RANDOM 2.499
+score WORD_INVIS 1.583
+score WORD_INVIS_MANY 2.999
+score XFER_LOTSA_MONEY 0.542
+score XM_RANDOM 2.500
score XM_RECPTID 2.999
-score XPRIO 1.516
+score XPRIO 1.467
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -308,7 +305,6 @@ score LUCRATIVE 1.0
score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
-score MANY_HDRS_LCASE 0.100
score MIME_NO_TEXT 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
@@ -320,6 +316,7 @@ score MSGID_HDR_MALF 1.0
score MSM_PRIO_REPTO 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
+score NUMBERONLY_BITCOIN_EXP 1.000
score ODD_FREEM_REPTO 1.000
score PDS_EMPTYSUBJ_URISHRT 1.000
score PDS_X_PHP_WELLKNOWN 1.000
@@ -388,6 +385,7 @@ score VISTA_COST 1.0
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
score XM_DIGITS_ONLY 1.000
+score XM_LIGHT_HEAVY 1.000
score XPRIO_SHORT_SUBJ 1.000
score XPRIO_VISTA 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Jan 7 02:41:51 2024
@@ -1,196 +1,203 @@
-# Using score set 1 logs for revision 1914985 from:
-# ham-net-ena-week0.r1914985.log ham-net-ena-week1.r1914985.log ham-net-ena-week2.r1914985.log ham-net-ena-week3.r1914985.log ham-net-ena-week4.r1914985.log ham-net-giovanni-ham.r1914985.log ham-net-giovanni-spammy.r1914985.log ham-net-giovanni-spam.r1914985.log ham-net-grenier.r1914985.log ham-net-hege.r1914985.log ham-net-jhardin.r1914985.log ham-net-llanga.r1914985.log ham-net-mmiroslaw-mails-ham.r1914985.log ham-net-mmiroslaw-mails-spam.r1914985.log ham-net-spamsponge.r1914985.log ham-net-whyscream.r1914985.log spam-net-ena-week0.r1914985.log spam-net-ena-week1.r1914985.log spam-net-ena-week2.r1914985.log spam-net-ena-week3.r1914985.log spam-net-ena-week4.r1914985.log spam-net-giovanni-ham.r1914985.log spam-net-giovanni-spammy.r1914985.log spam-net-giovanni-spam.r1914985.log spam-net-grenier.r1914985.log spam-net-hege.r1914985.log spam-net-jhardin.r1914985.log spam-net-llanga.r1914985.log spam-net-mmiroslaw-mails-ham.r1914985.log spam-net-mmiroslaw-mails-spam.r1914985.log spam-n
et-spamsponge.r1914985.log spam-net-whyscream.r1914985.log
+# Using score set 1 logs for revision 1915102 from:
+# ham-net-ena-week0.r1915102.log ham-net-ena-week1.r1915102.log ham-net-ena-week2.r1915102.log ham-net-ena-week3.r1915102.log ham-net-ena-week4.r1915102.log ham-net-giovanni-ham.r1915102.log ham-net-giovanni-spammy.r1915102.log ham-net-giovanni-spam.r1915102.log ham-net-grenier.r1915102.log ham-net-hege.r1915102.log ham-net-jhardin.r1915102.log ham-net-llanga.r1915102.log ham-net-mmiroslaw-mails-ham.r1915102.log ham-net-mmiroslaw-mails-spam.r1915102.log ham-net-spamsponge.r1915102.log ham-net-whyscream.r1915102.log spam-net-ena-week0.r1915102.log spam-net-ena-week1.r1915102.log spam-net-ena-week2.r1915102.log spam-net-ena-week3.r1915102.log spam-net-ena-week4.r1915102.log spam-net-giovanni-ham.r1915102.log spam-net-giovanni-spammy.r1915102.log spam-net-giovanni-spam.r1915102.log spam-net-grenier.r1915102.log spam-net-hege.r1915102.log spam-net-jhardin.r1915102.log spam-net-llanga.r1915102.log spam-net-mmiroslaw-mails-ham.r1915102.log spam-net-mmiroslaw-mails-spam.r1915102.log spam-n
et-spamsponge.r1915102.log spam-net-whyscream.r1915102.log
score ACCT_PHISHING_MANY 2.996
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.997
-score AC_POST_EXTRAS 1.337
-score ADMITS_SPAM 1.697
-score ADVANCE_FEE_2_NEW_MONEY 1.997
+score AC_POST_EXTRAS 1.992
+score ADMITS_SPAM 1.797
+score ADVANCE_FEE_2_NEW_MONEY 1.995
score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_MONEY 0.938
-score ADVANCE_FEE_4_NEW_MONEY 2.397
+score ADVANCE_FEE_3_NEW_MONEY 0.591
+score ADVANCE_FEE_4_NEW_MONEY 0.001
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_5_NEW_MONEY 1.687
-score AD_PREFS 0.016
+score ADVANCE_FEE_5_NEW_MONEY 0.032
+score AD_PREFS 0.001
score AMAZON_IMG_NOT_RCVD_AMZN 2.497
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 2.996
-score BITCOIN_EXTORT_01 2.005
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_X_FF_SEZ_S 3.096
+score BITCOIN_DEADLINE 1.063
+score BITCOIN_EXTORT_01 2.479
score BITCOIN_MALF_HTML 0.001
+score BITCOIN_PAY_ME 1.796
score BITCOIN_SPAM_02 2.497
-score BITCOIN_SPAM_05 2.271
-score BITCOIN_SPAM_07 0.830
-score BITCOIN_SPAM_08 0.473
+score BITCOIN_SPAM_05 1.533
+score BITCOIN_SPAM_07 0.910
+score BITCOIN_SPAM_08 0.235
score BITCOIN_TOEQFM 0.001
score BITCOIN_VISTA 0.001
-score BITCOIN_XPRIO 0.948
-score BITCOIN_YOUR_INFO 2.996
-score BODY_SINGLE_URI 0.067
-score BODY_SINGLE_WORD 0.001
-score BODY_URI_ONLY 0.001
-score CK_HELO_GENERIC 0.249
+score BITCOIN_XPRIO 2.497
+score BITCOIN_YOUR_INFO 2.886
+score BODY_SINGLE_URI 0.001
+score BODY_SINGLE_WORD 0.047
+score BODY_URI_ONLY 1.360
+score CK_HELO_GENERIC 0.248
score CTE_8BIT_MISMATCH 0.001
-score DEAR_BENEFICIARY 2.896
-score DKIMWL_WL_HIGH -2.540
+score DEAR_BENEFICIARY 1.735
+score DKIMWL_WL_HIGH -2.098
score DKIMWL_WL_MED -0.001
score DKIMWL_WL_MEDHI -0.001
-score DYNAMIC_IMGUR 2.331
+score DYNAMIC_IMGUR 2.943
score END_FUTURE_EMAILS 2.497
-score FILL_THIS_FORM 0.071
-score FONT_INVIS_DIRECT 0.001 # force non-zero
-score FONT_INVIS_LONG_LINE 2.996
-score FONT_INVIS_MSGID 1.039
-score FONT_INVIS_NORDNS 0.739
-score FONT_INVIS_POSTEXTRAS 2.473
+score FILL_THIS_FORM 0.457
+score FONT_INVIS_DIRECT 0.001
+score FONT_INVIS_LONG_LINE 2.844
+score FONT_INVIS_MSGID 1.648
+score FONT_INVIS_NORDNS 0.169
+score FONT_INVIS_POSTEXTRAS 1.800
score FORGED_SPF_HELO 3.096
score FORM_FRAUD 0.998
-score FORM_FRAUD_5 0.888
-score FREEMAIL_FORGED_FROMDOMAIN 0.248
-score FROM_ADDR_WS 2.996
+score FORM_FRAUD_5 1.598
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_ADDR_WS 2.309
+score FROM_FMBLA_NEWDOM 1.498
score FROM_FMBLA_NEWDOM28 0.798
-score FROM_GOV_DKIM_AU -0.244
-score FROM_IN_TO_AND_SUBJ 0.001
+score FROM_GOV_DKIM_AU -0.766
+score FROM_IN_TO_AND_SUBJ 0.502
score FROM_MISSPACED 1.997
-score FROM_MISSP_DYNIP 0.434
+score FROM_MISSP_DYNIP 0.447
score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_FREEMAIL 1.493
-score FROM_MISSP_MSFT 1.350
-score FROM_MISSP_REPLYTO 1.296
-score FROM_MISSP_SPF_FAIL 1.997
-score FROM_MISSP_TO_UNDISC 4.099
+score FROM_MISSP_FREEMAIL 2.501
+score FROM_MISSP_MSFT 1.339
+score FROM_MISSP_REPLYTO 1.097
+score FROM_MISSP_SPF_FAIL 1.999
+score FROM_MISSP_TO_UNDISC 2.009
score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.938
-score FROM_PAYPAL_SPOOF 0.001
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_MISSP_XPRIO 2.086
+score FROM_PAYPAL_SPOOF 0.791
+score FROM_SUSPICIOUS_NTLD 0.498
score FROM_SUSPICIOUS_NTLD_FP 1.997
-score FSL_BULK_SIG 0.001
+score FSL_BULK_SIG 1.506
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.498
-score FUZZY_BITCOIN 1.728
-score FUZZY_IMPORTANT 1.145
+score FUZZY_AMAZON 2.361
+score FUZZY_BITCOIN 2.750
+score FUZZY_IMPORTANT 1.364
score FUZZY_WALLET 1.897
-score GB_BITCOIN_CP 1.922
+score GB_BITCOIN_CP 2.479
score GB_CUSTOM_HTM_URI 1.498
-score GB_FAKE_RF_SHORT 1.124
+score GB_FAKE_RF_SHORT 1.997
score GB_FREEMAIL_DISPTO 0.001
-score GB_HASHBL_BTC 1.473
-score GOOG_REDIR_NORDNS 0.115
+score GB_HASHBL_BTC 1.206
+score GOOG_REDIR_NORDNS 0.269
score GOOG_STO_IMG_HTML 2.996
-score GOOG_STO_NOIMG_HTML 2.740
-score HDRS_LCASE_IMGONLY 0.099
+score GOOG_STO_NOIMG_HTML 2.996
+score HDRS_LCASE_IMGONLY 0.098
score HDRS_MISSP 2.497
-score HDR_ORDER_FTSDMCXX_DIRECT 0.001
+score HDR_ORDER_FTSDMCXX_DIRECT 0.034
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.248
score HELO_MISC_IP 0.248
-score HELO_NO_DOMAIN 0.001
-score HK_NAME_FM_MR_MRS 1.498
+score HELO_NO_DOMAIN 0.442
score HK_NAME_MR_MRS 0.998
score HK_RANDOM_ENVFROM 0.998
-score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 0.951
+score HK_RANDOM_FROM 0.998
+score HK_RANDOM_REPLYTO 0.970
score HK_SCAM 1.997
score HOSTED_IMG_DIRECT_MX 3.496
-score HOSTED_IMG_FREEM 3.011
-score HOSTED_IMG_MULTI_PUB_01 2.997
-score HTML_BADATTR 0.999
+score HOSTED_IMG_MULTI_PUB_01 2.996
+score HTML_BADATTR 0.998
score HTML_FONT_TINY_NORDNS 0.001
score HTML_SINGLET_MANY 2.497
-score HTML_TEXT_INVISIBLE_FONT 1.547
-score HTML_TEXT_INVISIBLE_STYLE 1.789
+score HTML_TEXT_INVISIBLE_FONT 1.997
+score HTML_TEXT_INVISIBLE_STYLE 2.266
score JH_SPAMMY_HEADERS 3.496
-score KHOP_HELO_FCRDNS 0.001 # force non-zero
-score LONG_HEX_URI 2.996
-score LONG_IMG_URI 2.996
-score LONG_INVISIBLE_TEXT 2.694
+score KHOP_HELO_FCRDNS 0.001
+score LIST_PARTIAL_SHORT_MSG 2.497
+score LONGLN_LOW_CONTRAST 2.474
+score LONG_HEX_URI 2.768
+score LONG_IMG_URI 2.278
+score LONG_INVISIBLE_TEXT 1.818
score LOTS_OF_MONEY 0.010
-score LOTTO_DEPT 1.997
score MALFORMED_FREEMAIL 2.297
-score MILLION_HUNDRED 0.001 # force non-zero
-score MILLION_USD 0.446
+score MILLION_HUNDRED 0.001
+score MILLION_USD 0.024
score MIMEOLE_DIRECT_TO_MX 0.001
score MIXED_AREA_CASE 0.001
-score MIXED_CENTER_CASE 2.447
+score MIXED_CENTER_CASE 2.098
score MIXED_ES 2.097
score MIXED_HREF_CASE 1.997
score MIXED_IMG_CASE 0.001
-score MONEY_ATM_CARD 0.872
+score MONEY_ATM_CARD 1.255
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 2.497
-score MONEY_FRAUD_3 0.884
-score MONEY_FRAUD_5 2.596
-score MONEY_FRAUD_8 0.984
-score MONEY_FREEMAIL_REPTO 1.792
+score MONEY_FORM_SHORT 2.152
+score MONEY_FRAUD_3 2.121
+score MONEY_FRAUD_5 2.163
+score MONEY_FRAUD_8 1.974
+score MONEY_FREEMAIL_REPTO 1.118
score MONEY_FROM_MISSP 0.001
+score MONEY_NOHTML 1.234
score NA_DOLLARS 1.498
-score NICE_REPLY_A -2.919
-score NO_FM_NAME_IP_HOSTN 0.472
+score NICE_REPLY_A -3.511
+score NO_FM_NAME_IP_HOSTN 0.580
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.383
-score OBFU_BITCOIN 1.092
+score NSL_RCVD_HELO_USER 0.197
+score OBFU_BITCOIN 1.687
score OBFU_TEXT_ATTACH 1.597
-score PDS_BAD_THREAD_QP_64 0.999
-score PDS_BTC_ID 0.001 # force non-zero
+score PDS_BAD_THREAD_QP_64 0.998
+score PDS_BTC_ID 0.035
score PDS_BTC_MSGID 0.001
score PDS_EMPTYSUBJ_URISHRT 1.498
-score PDS_FRNOM_TODOM_DBL_URL 0.001
-score PDS_FRNOM_TODOM_NAKED_TO 1.313
-score PDS_FROM_NAME_TO_DOMAIN 0.990
-score PDS_HELO_SPF_FAIL 1.997
+score PDS_FRNOM_TODOM_DBL_URL 0.260
+score PDS_FRNOM_TODOM_NAKED_TO 0.863
+score PDS_FROM_NAME_TO_DOMAIN 1.027
+score PDS_HELO_SPF_FAIL 1.991
score PDS_HP_HELO_NORDNS 0.001
score PDS_NAKED_TO_NUMERO 1.997
score PDS_TINYSUBJ_URISHRT 1.498
-score PHP_SCRIPT 1.847
-score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RAND_MKTG_HEADER 1.997
-score RATWARE_NO_RDNS 1.087
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score PHP_SCRIPT 2.206
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
+score RAND_MKTG_HEADER 1.998
+score RATWARE_NO_RDNS 1.627
+score RCVD_DOTEDU_SUSP 1.856
+score RCVD_DOTEDU_SUSP_URI 0.616
+score RCVD_IN_IADB_COURT -0.001
+score RCVD_IN_IADB_LEG_MAND -0.001
+score RCVD_IN_MSPIKE_H2 -0.001
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 2.316
-score SCC_CANSPAM_2 3.097
-score SCC_ISEMM_LID_1B 0.937
-score SCC_SPAMMER_ADDR_2 2.491
-score SENDGRID_REDIR 0.341
+score SCC_BODY_URI_ONLY 2.183
+score SCC_CANSPAM_2 3.296
+score SCC_ISEMM_LID_1B 1.119
+score SCC_SPAMMER_ADDR_2 0.949
+score SENDGRID_REDIR 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.497
-score SHORTENED_URL_SRC 2.397
-score SHORT_SHORTNER 1.997
-score SPOOFED_FREEMAIL 0.001
+score SHORTENED_URL_SRC 1.747
+score SHORT_SHORTNER 1.998
+score SPOOFED_FREEMAIL 0.001 # force non-zero
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 1.123
-score STATIC_XPRIO_OLE 1.266
+score SPOOFED_FREEM_REPTO 0.001
+score STATIC_XPRIO_OLE 1.270
score SUBJ_ATTENTION 0.499
-score THIS_AD 0.598
-score TO_EQ_FM_DIRECT_MX 1.245
-score TO_EQ_FM_DOM_SPF_FAIL 0.744
-score TO_EQ_FM_HTML_ONLY 0.815
-score TO_EQ_FM_SPF_FAIL 0.058
-score TO_IN_SUBJ 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.974
+score THIS_AD 0.798
+score TO_EQ_FM_DIRECT_MX 1.506
+score TO_EQ_FM_DOM_SPF_FAIL 0.120
+score TO_EQ_FM_SPF_FAIL 0.200
+score TO_IN_SUBJ 0.098
+score TO_NAME_SUBJ_NO_RDNS 0.271
score TO_NO_BRKTS_FROM_MSSP 2.497
-score TO_NO_BRKTS_HTML_IMG 1.888
+score TO_NO_BRKTS_HTML_IMG 1.770
score TO_NO_BRKTS_HTML_ONLY 1.997
-score TO_NO_BRKTS_MSFT 2.173
-score TO_NO_BRKTS_NORDNS_HTML 1.419
-score TO_NO_BRKTS_PCNT 2.346
-score TVD_SPACE_RATIO_MINFP 0.157
-score UNDISC_FREEM 2.596
+score TO_NO_BRKTS_MSFT 2.224
+score TO_NO_BRKTS_NORDNS_HTML 1.728
+score TO_NO_BRKTS_PCNT 1.441
+score TVD_SPACE_RATIO_MINFP 0.001
+score UNDISC_FREEM 2.497
score UNDISC_MONEY 2.796
score UNICODE_OBFU_ZW_MANY 0.472
-score URI_DOTEDU 0.834
-score URI_GOOGLE_PROXY 1.698
+score URI_DOTEDU 1.997
+score URI_GOOGLE_PROXY 1.797
score URI_PHISH 3.995
score URI_TRY_3LD 1.997
score URI_WP_HACKED 3.496
score URI_WP_HACKED_2 2.497
-score VISTA_TONOM_EQ_TOLOC 2.498
-score WIKI_IMG 1.897
-score WORD_INVIS 2.048
+score VFY_ACCT_NORDNS 2.070
+score VISTA_TONOM_EQ_TOLOC 2.497
+score WIKI_IMG 2.098
+score WORD_INVIS 1.897
score WORD_INVIS_MANY 2.996
-score XFER_LOTSA_MONEY 0.001 # force non-zero
-score XM_RANDOM 2.498
+score XFER_LOTSA_MONEY 0.001
+score XM_RANDOM 2.497
score XPRIO 0.001
score AC_FROM_MANY_DOTS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -212,13 +219,11 @@ score BEBEE_IMG_NOT_RCVD_BB 1.0
score BIGNUM_EMAILS_FREEM 1.000
score BIGNUM_EMAILS_MANY 1.000
score BITCOIN_BOMB 1.000
-score BITCOIN_DEADLINE 1.000
score BITCOIN_EXTORT_02 1.000
score BITCOIN_IMGUR 1.000
score BITCOIN_MALWARE 1.000
score BITCOIN_OBFU_SUBJ 1.000
score BITCOIN_ONAN 1.000
-score BITCOIN_PAY_ME 1.000
score BITCOIN_SPAM_01 1.000
score BITCOIN_SPAM_03 1.000
score BITCOIN_SPAM_04 1.000
@@ -257,7 +262,6 @@ score FREEM_FRNUM_UNICD_EMPTY 1.0
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
score FROM_BANK_NOAUTH 1.000
score FROM_FMBLA_NDBLOCKED 0.001
-score FROM_FMBLA_NEWDOM 1.000
score FROM_FMBLA_NEWDOM14 1.000
score FROM_GOV_REPLYTO_FREEMAIL 1.000
score FROM_GOV_SPOOF 1.000
@@ -281,11 +285,14 @@ score GOOG_STO_HTML_PHISH_MANY 1.0
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
score HAS_X_OUTGOING_SPAM_STAT 1.000
+score HDRS_LCASE 0.100
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_LOTTO 1.000
+score HK_NAME_FM_MR_MRS 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HREF_EMPTY_NORDNS 1.000
score HREF_EMPTY_PHPMAIL 1.000
@@ -301,11 +308,11 @@ score JH_SPAMMY_PATTERN02 1.0
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
+score LOTTO_DEPT 1.000
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
-score MANY_HDRS_LCASE 0.100
score MIME_NO_TEXT 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
@@ -336,7 +343,6 @@ score PUMPDUMP_MULTI 1.0
score RAND_HEADER_LIST_SPOOF 1.000
score RAND_HEADER_MANY 1.000
score RCVD_DOTEDU_SHORT 1.000
-score RCVD_DOTEDU_SUSP_URI 1.000
score RDNS_NUM_TLD_ATCHNX 1.000
score RDNS_NUM_TLD_XM 1.000
score REPTO_419_FRAUD 1.000
@@ -396,7 +402,6 @@ score URI_PHP_REDIR 1.0
score URI_TRY_USME 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
-score VFY_ACCT_NORDNS 1.000
score VISTA_COST 1.000
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Jan 7 02:41:51 2024
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 442890 63.414% (99.185% of non-spam corpus)
-# Correctly spam: 173995 24.913% (69.078% of spam corpus)
-# False positives: 3639 0.521% (0.815% of nonspam, 63496 weighted)
-# False negatives: 77886 11.152% (30.922% of spam, 132919 weighted)
-# Average score for spam: 6.7 nonspam: 0.6
-# Average for false-pos: 6.2 false-neg: 1.7
-# TOTAL: 698410 100.00%
+# Correctly non-spam: 443237 63.464% (99.263% of non-spam corpus)
+# Correctly spam: 173731 24.875% (68.974% of spam corpus)
+# False positives: 3292 0.471% (0.737% of nonspam, 58584 weighted)
+# False negatives: 78148 11.189% (31.026% of spam, 134320 weighted)
+# Average score for spam: 6.7 nonspam: 0.7
+# Average for false-pos: 6.3 false-neg: 1.7
+# TOTAL: 698408 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 55262 99.25%
-# Correctly spam: 20295 64.55%
-# False positives: 418 0.75%
-# False negatives: 11148 35.45%
-# TCR(l=50): 0.981122 SpamRecall: 64.545% SpamPrec: 97.982%
+# Correctly non-spam: 55260 99.25%
+# Correctly spam: 20160 64.12%
+# False positives: 420 0.75%
+# False negatives: 11283 35.88%
+# TCR(l=50): 0.973980 SpamRecall: 64.116% SpamPrec: 97.959%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 434897 97.40%
-# Correctly spam: 119828 47.57%
+# Correctly spam: 119756 47.55%
# False positives: 11632 2.60%
-# False negatives: 132053 52.43%
-# TCR(l=50): 0.352946 SpamRecall: 47.573% SpamPrec: 91.152%
+# False negatives: 132123 52.45%
+# TCR(l=50): 0.352909 SpamRecall: 47.545% SpamPrec: 91.147%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 54211 97.36%
-# Correctly spam: 14964 47.59%
+# Correctly spam: 15059 47.89%
# False positives: 1469 2.64%
-# False negatives: 16479 52.41%
-# TCR(l=50): 0.349642 SpamRecall: 47.591% SpamPrec: 91.061%
+# False negatives: 16384 52.11%
+# TCR(l=50): 0.350012 SpamRecall: 47.893% SpamPrec: 91.112%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Jan 7 02:41:51 2024
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 434925 80.806% (99.340% of non-spam corpus)
-# Correctly spam: 61478 11.422% (61.222% of spam corpus)
-# False positives: 2888 0.537% (0.660% of nonspam, 42616 weighted)
-# False negatives: 38940 7.235% (38.778% of spam, 64474 weighted)
-# Average score for spam: 7.0 nonspam: -1.6
-# Average for false-pos: 6.4 false-neg: 1.7
-# TOTAL: 538231 100.00%
+# Correctly non-spam: 421440 79.228% (99.390% of non-spam corpus)
+# Correctly spam: 71003 13.348% (65.802% of spam corpus)
+# False positives: 2587 0.486% (0.610% of nonspam, 43094 weighted)
+# False negatives: 36901 6.937% (34.198% of spam, 65608 weighted)
+# Average score for spam: 8.0 nonspam: -1.4
+# Average for false-pos: 6.5 false-neg: 1.8
+# TOTAL: 531931 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 54262 99.39%
-# Correctly spam: 7733 60.95%
-# False positives: 331 0.61%
-# False negatives: 4954 39.05%
-# TCR(l=50): 0.589983 SpamRecall: 60.952% SpamPrec: 95.895%
+# Correctly non-spam: 52540 99.42%
+# Correctly spam: 9112 66.85%
+# False positives: 306 0.58%
+# False negatives: 4519 33.15%
+# TCR(l=50): 0.687774 SpamRecall: 66.848% SpamPrec: 96.751%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 436003 99.59%
-# Correctly spam: 20766 20.68%
-# False positives: 1810 0.41%
-# False negatives: 79652 79.32%
-# TCR(l=50): 0.590166 SpamRecall: 20.680% SpamPrec: 91.983%
+# Correctly non-spam: 422120 99.55%
+# Correctly spam: 27940 25.89%
+# False positives: 1907 0.45%
+# False negatives: 79964 74.11%
+# TCR(l=50): 0.615490 SpamRecall: 25.893% SpamPrec: 93.611%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 54399 99.64%
-# Correctly spam: 2593 20.44%
-# False positives: 194 0.36%
-# False negatives: 10094 79.56%
-# TCR(l=50): 0.640952 SpamRecall: 20.438% SpamPrec: 93.039%
+# Correctly non-spam: 52625 99.58%
+# Correctly spam: 3624 26.59%
+# False positives: 221 0.42%
+# False negatives: 10007 73.41%
+# TCR(l=50): 0.647338 SpamRecall: 26.586% SpamPrec: 94.252%
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Jan 7 02:41:51 2024
@@ -6,196 +6,194 @@ score AC_BR_BONANZA 0.0
score AC_DIV_BONANZA 0.001
score AC_FROM_MANY_DOTS 2.499
score AC_HTML_NONSENSE_TAGS 1.999
-score AC_POST_EXTRAS 0.720
+score AC_POST_EXTRAS 0.408
score ADMITS_SPAM 2.699
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.999
-score ADVANCE_FEE_3_NEW_MONEY 1.084
-score ADVANCE_FEE_4_NEW 2.249
+score ADVANCE_FEE_3_NEW 2.997
+score ADVANCE_FEE_3_NEW_MONEY 0.796
+score ADVANCE_FEE_4_NEW 2.245
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_MONEY 0.344
-score AD_PREFS 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_5_NEW_MONEY 0.340
+score AD_PREFS 0.001 # force non-zero
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 2.900
-score BIGNUM_EMAILS_MANY 3.000
-score BITCOIN_EXTORT_01 4.494
-score BITCOIN_MALF_HTML 2.549
-score BITCOIN_SPAM_02 2.212
-score BITCOIN_SPAM_07 0.001 # force non-zero
-score BITCOIN_SPAM_08 0.305
-score BITCOIN_TOEQFM 3.055
+score AXB_X_FF_SEZ_S 2.899
+score BIGNUM_EMAILS_MANY 2.999
+score BITCOIN_EXTORT_01 4.501
+score BITCOIN_MALF_HTML 2.585
+score BITCOIN_SPAM_02 2.299
+score BITCOIN_SPAM_07 0.001
+score BITCOIN_SPAM_08 0.707
+score BITCOIN_TOEQFM 3.051
score BITCOIN_VISTA 0.001
-score BITCOIN_XPRIO 2.430
+score BITCOIN_XPRIO 2.481
score BITCOIN_YOUR_INFO 2.999
score BODY_SINGLE_URI 1.963
score BODY_SINGLE_WORD 0.001
-score BODY_URI_ONLY 1.813
-score BOGUS_MIME_VERSION 3.499
+score BODY_URI_ONLY 1.793
+score BOGUS_MIME_VERSION 3.500
score CK_HELO_GENERIC 0.250
score COMPENSATION 1.499
-score CTE_8BIT_MISMATCH 1.000
-score DEAR_BENEFICIARY 0.773
-score DSN_NO_MIMEVERSION 2.000
-score DYNAMIC_IMGUR 1.895
-score ENCRYPTED_MESSAGE -0.999
+score CTE_8BIT_MISMATCH 0.999
+score DEAR_BENEFICIARY 0.780
+score DSN_NO_MIMEVERSION 1.999
+score DYNAMIC_IMGUR 2.901
+score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 2.499
score FACEBOOK_IMG_NOT_RCVD_FB 1.999
-score FILL_THIS_FORM 0.001
-score FONT_INVIS_DIRECT 0.232
-score FONT_INVIS_LONG_LINE 1.788
+score FILL_THIS_FORM 0.385
+score FONT_INVIS_DIRECT 0.257
+score FONT_INVIS_LONG_LINE 1.787
score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 1.763
-score FONT_INVIS_POSTEXTRAS 2.579
+score FONT_INVIS_NORDNS 1.764
+score FONT_INVIS_POSTEXTRAS 2.891
score FORM_FRAUD 0.999
score FORM_FRAUD_3 0.001
-score FORM_FRAUD_5 0.775
-score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FORM_FRAUD_5 0.222
+score FREEMAIL_FORGED_FROMDOMAIN 0.250
score FROMSPACE 2.699
-score FROM_ADDR_WS 2.350
-score FROM_IN_TO_AND_SUBJ 0.639
+score FROM_ADDR_WS 2.351
+score FROM_IN_TO_AND_SUBJ 1.058
score FROM_MISSPACED 1.999
score FROM_MISSP_DYNIP 0.001
-score FROM_MISSP_EH_MATCH 0.410
-score FROM_MISSP_FREEMAIL 1.815
-score FROM_MISSP_MSFT 1.049
-score FROM_MISSP_REPLYTO 2.499
-score FROM_MISSP_TO_UNDISC 3.405
-score FROM_MISSP_USER 0.001 # force non-zero
+score FROM_MISSP_EH_MATCH 0.187
+score FROM_MISSP_FREEMAIL 1.816
+score FROM_MISSP_MSFT 1.187
+score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_TO_UNDISC 1.531
+score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 2.499
score FROM_NTLD_REPLY_FREEMAIL 0.001
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
score FROM_UNBAL1 2.399
score FROM_WSP_TRAIL 2.499
-score FSL_CTYPE_WIN1251 0.001
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.005
-score FUZZY_BITCOIN 2.953
+score FUZZY_AMAZON 2.060
+score FUZZY_BITCOIN 3.330
score FUZZY_IMPORTANT 2.599
-score FUZZY_WALLET 1.899
-score GB_BITCOIN_CP 1.011
-score GB_CUSTOM_HTM_URI 1.500
-score GB_FAKE_RF_SHORT 1.999
-score GB_FREEMAIL_DISPTO 0.001
-score GOOG_REDIR_NORDNS 2.339
+score FUZZY_WALLET 1.799
+score GB_BITCOIN_CP 2.155
+score GB_CUSTOM_HTM_URI 1.499
+score GB_FAKE_RF_SHORT 2.000
+score GB_FREEMAIL_DISPTO 0.001 # force non-zero
+score GOOG_REDIR_NORDNS 2.152
score GOOG_STO_IMG_HTML 2.500
score GOOG_STO_NOIMG_HTML 2.999
-score HDRS_LCASE_IMGONLY 0.100
-score HDRS_MISSP 2.500
-score HDR_ORDER_FTSDMCXX_DIRECT 1.009
+score HDRS_LCASE_IMGONLY 0.099
+score HDRS_MISSP 2.499
+score HDR_ORDER_FTSDMCXX_DIRECT 1.301
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.250
score HELO_MISC_IP 0.249
-score HELO_NO_DOMAIN 0.001 # force non-zero
+score HELO_NO_DOMAIN 0.001
score HK_LOTTO 0.999
score HK_NAME_FM_MR_MRS 1.499
score HK_NAME_MR_MRS 0.999
score HK_RANDOM_ENVFROM 0.999
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 0.793
-score HK_SCAM 1.999
-score HOSTED_IMG_DIRECT_MX 2.902
-score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 1.859
+score HK_RANDOM_FROM 0.999
+score HK_RANDOM_REPLYTO 0.792
+score HK_SCAM 2.000
+score HOSTED_IMG_DIRECT_MX 2.903
+score HOSTED_IMG_MULTI_PUB_01 3.000
+score HREF_EMPTY_NORDNS 1.783
score HTML_ENTITY_ASCII 2.999
-score HTML_FONT_TINY_NORDNS 0.736
+score HTML_FONT_TINY_NORDNS 0.735
score HTML_SINGLET_MANY 2.499
-score HTML_TEXT_INVISIBLE_FONT 1.189
+score HTML_TEXT_INVISIBLE_FONT 1.188
score HTML_TEXT_INVISIBLE_STYLE 1.253
score JH_SPAMMY_HEADERS 3.499
-score KHOP_FAKE_EBAY 0.900
score KHOP_HELO_FCRDNS 0.400
score LIST_PARTIAL_SHORT_MSG 2.499
score LONGLN_LOW_CONTRAST 2.499
score LONG_HEX_URI 2.999
score LONG_IMG_URI 0.001
-score LONG_INVISIBLE_TEXT 1.786
+score LONG_INVISIBLE_TEXT 1.789
score LOTS_OF_MONEY 0.010
score LOTTO_DEPT 1.999
score MALFORMED_FREEMAIL 2.799
score MANY_SUBDOM 2.699
score MILLION_HUNDRED 0.001
-score MILLION_USD 0.333
-score MIMEOLE_DIRECT_TO_MX 0.497
-score MIXED_AREA_CASE 0.001 # force non-zero
+score MILLION_USD 0.349
+score MIMEOLE_DIRECT_TO_MX 0.001 # force non-zero
+score MIXED_AREA_CASE 0.001
score MIXED_CENTER_CASE 2.499
score MIXED_ES 2.099
-score MIXED_HREF_CASE 1.941
+score MIXED_HREF_CASE 1.939
score MIXED_IMG_CASE 0.001
-score MONEY_ATM_CARD 2.544
+score MONEY_ATM_CARD 1.241
score MONEY_FORM 0.001
score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.337
+score MONEY_FRAUD_3 2.251
score MONEY_FRAUD_5 2.799
-score MONEY_FRAUD_8 3.008
+score MONEY_FRAUD_8 3.032
score MONEY_FREEMAIL_REPTO 2.999
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
score NA_DOLLARS 1.499
-score NICE_REPLY_A -0.922
+score NICE_REPLY_A -0.001
score NOT_SPAM 2.399
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
score NSL_RCVD_HELO_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.368
-score OBFU_BITCOIN 2.103
-score OBFU_TEXT_ATTACH 1.449
-score PDS_BAD_THREAD_QP_64 1.000
-score PDS_BTC_ID 0.500
+score OBFU_BITCOIN 2.691
+score OBFU_TEXT_ATTACH 1.499
+score PDS_BAD_THREAD_QP_64 0.999
+score PDS_BTC_ID 0.499
score PDS_BTC_MSGID 0.001
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_FRNOM_TODOM_DBL_URL 0.001
-score PDS_FRNOM_TODOM_NAKED_TO 0.505
-score PDS_FROM_NAME_TO_DOMAIN 0.001
+score PDS_FRNOM_TODOM_NAKED_TO 0.391
+score PDS_FROM_NAME_TO_DOMAIN 0.115
score PDS_HP_HELO_NORDNS 0.999
score PDS_NAKED_TO_NUMERO 1.999
score PDS_PHP_EVAL 1.499
score PDS_TINYSUBJ_URISHRT 1.499
-score PHP_ORIG_SCRIPT 0.228
+score PHP_ORIG_SCRIPT 0.229
score PHP_ORIG_SCRIPT_EVAL 2.999
-score PHP_SCRIPT 2.500
+score PHP_SCRIPT 2.499
score PP_MIME_FAKE_ASCII_TEXT 0.999
score RAND_MKTG_HEADER 1.999
-score RATWARE_NO_RDNS 2.630
-score RCVD_DOTEDU_SUSP 0.658
-score RCVD_DOTEDU_SUSP_URI 1.014
+score RATWARE_NO_RDNS 2.903
+score RCVD_DOTEDU_SUSP 1.720
+score RCVD_DOTEDU_SUSP_URI 2.354
score REPTO_419_FRAUD_GM_LOOSE 0.999
score RISK_FREE 0.001
score SCC_BODY_SINGLE_WORD 0.001
score SCC_BODY_URI_ONLY 1.701
-score SCC_CANSPAM_1 2.399
+score SCC_CANSPAM_1 2.400
score SCC_CANSPAM_2 3.799
score SCC_ISEMM_LID_1B 1.499
-score SCC_SPAMMER_ADDR_2 1.160
+score SCC_SPAMMER_ADDR_2 2.080
score SENDGRID_REDIR 1.499
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499
score SHORTENED_URL_SRC 3.099
score SHORT_SHORTNER 1.999
-score SPOOFED_FREEMAIL_NO_RDNS 1.069
-score SPOOF_GMAIL_MID 1.500
-score STATIC_XPRIO_OLE 1.999
+score SPOOFED_FREEMAIL_NO_RDNS 1.064
+score SPOOF_GMAIL_MID 1.499
+score STATIC_XPRIO_OLE 1.700
score SUSP_UTF8_WORD_FROM 1.999
score TEQF_USR_POLITE 1.999
-score THIS_AD 1.400
+score THIS_AD 1.399
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_IMG 2.499
-score TO_EQ_FM_HTML_ONLY 0.001
-score TO_IN_SUBJ 0.100
-score TO_NAME_SUBJ_NO_RDNS 2.557
+score TO_IN_SUBJ 0.099
+score TO_NAME_SUBJ_NO_RDNS 2.729
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 0.544
+score TO_NO_BRKTS_HTML_IMG 0.543
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 1.350
+score TO_NO_BRKTS_MSFT 1.212
score TO_NO_BRKTS_NORDNS_HTML 1.999
-score TO_NO_BRKTS_PCNT 2.259
+score TO_NO_BRKTS_PCNT 2.236
+score TVD_IP_HEX 2.300
score TVD_RCVD_SPACE_BRACKET 2.899
-score TVD_SPACE_ENCODED 2.498
+score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_RATIO_MINFP 2.499
score UNDISC_FREEM 2.699
score UNDISC_MONEY 2.899
-score UNICODE_OBFU_ZW_MANY 0.001 # force non-zero
+score UNICODE_OBFU_ZW_MANY 0.001
score URI_AZURE_CLOUDAPP 2.999
score URI_DOTEDU 1.999
score URI_GOOGLE_PROXY 2.499
@@ -205,16 +203,15 @@ score URI_PHISH 3.9
score URI_TRY_3LD 1.999
score URI_WP_HACKED 3.499
score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.999
+score VFY_ACCT_NORDNS 2.617
score VISTA_TONOM_EQ_TOLOC 2.499
score WIKI_IMG 3.299
-score WORD_INVIS 1.582
-score WORD_INVIS_MANY 3.000
-score XFER_LOTSA_MONEY 0.001
-score XM_LIGHT_HEAVY 2.499
-score XM_RANDOM 2.499
+score WORD_INVIS 1.583
+score WORD_INVIS_MANY 2.999
+score XFER_LOTSA_MONEY 0.542
+score XM_RANDOM 2.500
score XM_RECPTID 2.999
-score XPRIO 1.516
+score XPRIO 1.467
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -308,7 +305,6 @@ score LUCRATIVE 1.0
score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
-score MANY_HDRS_LCASE 0.100
score MIME_NO_TEXT 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
@@ -320,6 +316,7 @@ score MSGID_HDR_MALF 1.0
score MSM_PRIO_REPTO 1.000
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000
score NEW_PRODUCTS 1.000
+score NUMBERONLY_BITCOIN_EXP 1.000
score ODD_FREEM_REPTO 1.000
score PDS_EMPTYSUBJ_URISHRT 1.000
score PDS_X_PHP_WELLKNOWN 1.000
@@ -388,6 +385,7 @@ score VISTA_COST 1.0
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
score XM_DIGITS_ONLY 1.000
+score XM_LIGHT_HEAVY 1.000
score XPRIO_SHORT_SUBJ 1.000
score XPRIO_VISTA 1.000
# in active.list but have no hits in recent corpus
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Jan 7 02:41:51 2024
@@ -1,196 +1,203 @@
-# Using score set 1 logs for revision 1914985 from:
-# ham-net-ena-week0.r1914985.log ham-net-ena-week1.r1914985.log ham-net-ena-week2.r1914985.log ham-net-ena-week3.r1914985.log ham-net-ena-week4.r1914985.log ham-net-giovanni-ham.r1914985.log ham-net-giovanni-spammy.r1914985.log ham-net-giovanni-spam.r1914985.log ham-net-grenier.r1914985.log ham-net-hege.r1914985.log ham-net-jhardin.r1914985.log ham-net-llanga.r1914985.log ham-net-mmiroslaw-mails-ham.r1914985.log ham-net-mmiroslaw-mails-spam.r1914985.log ham-net-spamsponge.r1914985.log ham-net-whyscream.r1914985.log spam-net-ena-week0.r1914985.log spam-net-ena-week1.r1914985.log spam-net-ena-week2.r1914985.log spam-net-ena-week3.r1914985.log spam-net-ena-week4.r1914985.log spam-net-giovanni-ham.r1914985.log spam-net-giovanni-spammy.r1914985.log spam-net-giovanni-spam.r1914985.log spam-net-grenier.r1914985.log spam-net-hege.r1914985.log spam-net-jhardin.r1914985.log spam-net-llanga.r1914985.log spam-net-mmiroslaw-mails-ham.r1914985.log spam-net-mmiroslaw-mails-spam.r1914985.log spam-n
et-spamsponge.r1914985.log spam-net-whyscream.r1914985.log
+# Using score set 1 logs for revision 1915102 from:
+# ham-net-ena-week0.r1915102.log ham-net-ena-week1.r1915102.log ham-net-ena-week2.r1915102.log ham-net-ena-week3.r1915102.log ham-net-ena-week4.r1915102.log ham-net-giovanni-ham.r1915102.log ham-net-giovanni-spammy.r1915102.log ham-net-giovanni-spam.r1915102.log ham-net-grenier.r1915102.log ham-net-hege.r1915102.log ham-net-jhardin.r1915102.log ham-net-llanga.r1915102.log ham-net-mmiroslaw-mails-ham.r1915102.log ham-net-mmiroslaw-mails-spam.r1915102.log ham-net-spamsponge.r1915102.log ham-net-whyscream.r1915102.log spam-net-ena-week0.r1915102.log spam-net-ena-week1.r1915102.log spam-net-ena-week2.r1915102.log spam-net-ena-week3.r1915102.log spam-net-ena-week4.r1915102.log spam-net-giovanni-ham.r1915102.log spam-net-giovanni-spammy.r1915102.log spam-net-giovanni-spam.r1915102.log spam-net-grenier.r1915102.log spam-net-hege.r1915102.log spam-net-jhardin.r1915102.log spam-net-llanga.r1915102.log spam-net-mmiroslaw-mails-ham.r1915102.log spam-net-mmiroslaw-mails-spam.r1915102.log spam-n
et-spamsponge.r1915102.log spam-net-whyscream.r1915102.log
score ACCT_PHISHING_MANY 2.996
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.997
-score AC_POST_EXTRAS 1.337
-score ADMITS_SPAM 1.697
-score ADVANCE_FEE_2_NEW_MONEY 1.997
+score AC_POST_EXTRAS 1.992
+score ADMITS_SPAM 1.797
+score ADVANCE_FEE_2_NEW_MONEY 1.995
score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_MONEY 0.938
-score ADVANCE_FEE_4_NEW_MONEY 2.397
+score ADVANCE_FEE_3_NEW_MONEY 0.591
+score ADVANCE_FEE_4_NEW_MONEY 0.001
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_5_NEW_MONEY 1.687
-score AD_PREFS 0.016
+score ADVANCE_FEE_5_NEW_MONEY 0.032
+score AD_PREFS 0.001
score AMAZON_IMG_NOT_RCVD_AMZN 2.497
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_X_FF_SEZ_S 2.996
-score BITCOIN_EXTORT_01 2.005
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_X_FF_SEZ_S 3.096
+score BITCOIN_DEADLINE 1.063
+score BITCOIN_EXTORT_01 2.479
score BITCOIN_MALF_HTML 0.001
+score BITCOIN_PAY_ME 1.796
score BITCOIN_SPAM_02 2.497
-score BITCOIN_SPAM_05 2.271
-score BITCOIN_SPAM_07 0.830
-score BITCOIN_SPAM_08 0.473
+score BITCOIN_SPAM_05 1.533
+score BITCOIN_SPAM_07 0.910
+score BITCOIN_SPAM_08 0.235
score BITCOIN_TOEQFM 0.001
score BITCOIN_VISTA 0.001
-score BITCOIN_XPRIO 0.948
-score BITCOIN_YOUR_INFO 2.996
-score BODY_SINGLE_URI 0.067
-score BODY_SINGLE_WORD 0.001
-score BODY_URI_ONLY 0.001
-score CK_HELO_GENERIC 0.249
+score BITCOIN_XPRIO 2.497
+score BITCOIN_YOUR_INFO 2.886
+score BODY_SINGLE_URI 0.001
+score BODY_SINGLE_WORD 0.047
+score BODY_URI_ONLY 1.360
+score CK_HELO_GENERIC 0.248
score CTE_8BIT_MISMATCH 0.001
-score DEAR_BENEFICIARY 2.896
-score DKIMWL_WL_HIGH -2.540
+score DEAR_BENEFICIARY 1.735
+score DKIMWL_WL_HIGH -2.098
score DKIMWL_WL_MED -0.001
score DKIMWL_WL_MEDHI -0.001
-score DYNAMIC_IMGUR 2.331
+score DYNAMIC_IMGUR 2.943
score END_FUTURE_EMAILS 2.497
-score FILL_THIS_FORM 0.071
-score FONT_INVIS_DIRECT 0.001 # force non-zero
-score FONT_INVIS_LONG_LINE 2.996
-score FONT_INVIS_MSGID 1.039
-score FONT_INVIS_NORDNS 0.739
-score FONT_INVIS_POSTEXTRAS 2.473
+score FILL_THIS_FORM 0.457
+score FONT_INVIS_DIRECT 0.001
+score FONT_INVIS_LONG_LINE 2.844
+score FONT_INVIS_MSGID 1.648
+score FONT_INVIS_NORDNS 0.169
+score FONT_INVIS_POSTEXTRAS 1.800
score FORGED_SPF_HELO 3.096
score FORM_FRAUD 0.998
-score FORM_FRAUD_5 0.888
-score FREEMAIL_FORGED_FROMDOMAIN 0.248
-score FROM_ADDR_WS 2.996
+score FORM_FRAUD_5 1.598
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
+score FROM_ADDR_WS 2.309
+score FROM_FMBLA_NEWDOM 1.498
score FROM_FMBLA_NEWDOM28 0.798
-score FROM_GOV_DKIM_AU -0.244
-score FROM_IN_TO_AND_SUBJ 0.001
+score FROM_GOV_DKIM_AU -0.766
+score FROM_IN_TO_AND_SUBJ 0.502
score FROM_MISSPACED 1.997
-score FROM_MISSP_DYNIP 0.434
+score FROM_MISSP_DYNIP 0.447
score FROM_MISSP_EH_MATCH 0.001
-score FROM_MISSP_FREEMAIL 1.493
-score FROM_MISSP_MSFT 1.350
-score FROM_MISSP_REPLYTO 1.296
-score FROM_MISSP_SPF_FAIL 1.997
-score FROM_MISSP_TO_UNDISC 4.099
+score FROM_MISSP_FREEMAIL 2.501
+score FROM_MISSP_MSFT 1.339
+score FROM_MISSP_REPLYTO 1.097
+score FROM_MISSP_SPF_FAIL 1.999
+score FROM_MISSP_TO_UNDISC 2.009
score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.938
-score FROM_PAYPAL_SPOOF 0.001
-score FROM_SUSPICIOUS_NTLD 0.499
+score FROM_MISSP_XPRIO 2.086
+score FROM_PAYPAL_SPOOF 0.791
+score FROM_SUSPICIOUS_NTLD 0.498
score FROM_SUSPICIOUS_NTLD_FP 1.997
-score FSL_BULK_SIG 0.001
+score FSL_BULK_SIG 1.506
score FSL_CTYPE_WIN1251 0.001
score FSL_NEW_HELO_USER 0.001
-score FUZZY_AMAZON 2.498
-score FUZZY_BITCOIN 1.728
-score FUZZY_IMPORTANT 1.145
+score FUZZY_AMAZON 2.361
+score FUZZY_BITCOIN 2.750
+score FUZZY_IMPORTANT 1.364
score FUZZY_WALLET 1.897
-score GB_BITCOIN_CP 1.922
+score GB_BITCOIN_CP 2.479
score GB_CUSTOM_HTM_URI 1.498
-score GB_FAKE_RF_SHORT 1.124
+score GB_FAKE_RF_SHORT 1.997
score GB_FREEMAIL_DISPTO 0.001
-score GB_HASHBL_BTC 1.473
-score GOOG_REDIR_NORDNS 0.115
+score GB_HASHBL_BTC 1.206
+score GOOG_REDIR_NORDNS 0.269
score GOOG_STO_IMG_HTML 2.996
-score GOOG_STO_NOIMG_HTML 2.740
-score HDRS_LCASE_IMGONLY 0.099
+score GOOG_STO_NOIMG_HTML 2.996
+score HDRS_LCASE_IMGONLY 0.098
score HDRS_MISSP 2.497
-score HDR_ORDER_FTSDMCXX_DIRECT 0.001
+score HDR_ORDER_FTSDMCXX_DIRECT 0.034
score HDR_ORDER_FTSDMCXX_NORDNS 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.248
score HELO_MISC_IP 0.248
-score HELO_NO_DOMAIN 0.001
-score HK_NAME_FM_MR_MRS 1.498
+score HELO_NO_DOMAIN 0.442
score HK_NAME_MR_MRS 0.998
score HK_RANDOM_ENVFROM 0.998
-score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 0.951
+score HK_RANDOM_FROM 0.998
+score HK_RANDOM_REPLYTO 0.970
score HK_SCAM 1.997
score HOSTED_IMG_DIRECT_MX 3.496
-score HOSTED_IMG_FREEM 3.011
-score HOSTED_IMG_MULTI_PUB_01 2.997
-score HTML_BADATTR 0.999
+score HOSTED_IMG_MULTI_PUB_01 2.996
+score HTML_BADATTR 0.998
score HTML_FONT_TINY_NORDNS 0.001
score HTML_SINGLET_MANY 2.497
-score HTML_TEXT_INVISIBLE_FONT 1.547
-score HTML_TEXT_INVISIBLE_STYLE 1.789
+score HTML_TEXT_INVISIBLE_FONT 1.997
+score HTML_TEXT_INVISIBLE_STYLE 2.266
score JH_SPAMMY_HEADERS 3.496
-score KHOP_HELO_FCRDNS 0.001 # force non-zero
-score LONG_HEX_URI 2.996
-score LONG_IMG_URI 2.996
-score LONG_INVISIBLE_TEXT 2.694
+score KHOP_HELO_FCRDNS 0.001
+score LIST_PARTIAL_SHORT_MSG 2.497
+score LONGLN_LOW_CONTRAST 2.474
+score LONG_HEX_URI 2.768
+score LONG_IMG_URI 2.278
+score LONG_INVISIBLE_TEXT 1.818
score LOTS_OF_MONEY 0.010
-score LOTTO_DEPT 1.997
score MALFORMED_FREEMAIL 2.297
-score MILLION_HUNDRED 0.001 # force non-zero
-score MILLION_USD 0.446
+score MILLION_HUNDRED 0.001
+score MILLION_USD 0.024
score MIMEOLE_DIRECT_TO_MX 0.001
score MIXED_AREA_CASE 0.001
-score MIXED_CENTER_CASE 2.447
+score MIXED_CENTER_CASE 2.098
score MIXED_ES 2.097
score MIXED_HREF_CASE 1.997
score MIXED_IMG_CASE 0.001
-score MONEY_ATM_CARD 0.872
+score MONEY_ATM_CARD 1.255
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 2.497
-score MONEY_FRAUD_3 0.884
-score MONEY_FRAUD_5 2.596
-score MONEY_FRAUD_8 0.984
-score MONEY_FREEMAIL_REPTO 1.792
+score MONEY_FORM_SHORT 2.152
+score MONEY_FRAUD_3 2.121
+score MONEY_FRAUD_5 2.163
+score MONEY_FRAUD_8 1.974
+score MONEY_FREEMAIL_REPTO 1.118
score MONEY_FROM_MISSP 0.001
+score MONEY_NOHTML 1.234
score NA_DOLLARS 1.498
-score NICE_REPLY_A -2.919
-score NO_FM_NAME_IP_HOSTN 0.472
+score NICE_REPLY_A -3.511
+score NO_FM_NAME_IP_HOSTN 0.580
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.383
-score OBFU_BITCOIN 1.092
+score NSL_RCVD_HELO_USER 0.197
+score OBFU_BITCOIN 1.687
score OBFU_TEXT_ATTACH 1.597
-score PDS_BAD_THREAD_QP_64 0.999
-score PDS_BTC_ID 0.001 # force non-zero
+score PDS_BAD_THREAD_QP_64 0.998
+score PDS_BTC_ID 0.035
score PDS_BTC_MSGID 0.001
score PDS_EMPTYSUBJ_URISHRT 1.498
-score PDS_FRNOM_TODOM_DBL_URL 0.001
-score PDS_FRNOM_TODOM_NAKED_TO 1.313
-score PDS_FROM_NAME_TO_DOMAIN 0.990
-score PDS_HELO_SPF_FAIL 1.997
+score PDS_FRNOM_TODOM_DBL_URL 0.260
+score PDS_FRNOM_TODOM_NAKED_TO 0.863
+score PDS_FROM_NAME_TO_DOMAIN 1.027
+score PDS_HELO_SPF_FAIL 1.991
score PDS_HP_HELO_NORDNS 0.001
score PDS_NAKED_TO_NUMERO 1.997
score PDS_TINYSUBJ_URISHRT 1.498
-score PHP_SCRIPT 1.847
-score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RAND_MKTG_HEADER 1.997
-score RATWARE_NO_RDNS 1.087
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score PHP_SCRIPT 2.206
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
+score RAND_MKTG_HEADER 1.998
+score RATWARE_NO_RDNS 1.627
+score RCVD_DOTEDU_SUSP 1.856
+score RCVD_DOTEDU_SUSP_URI 0.616
+score RCVD_IN_IADB_COURT -0.001
+score RCVD_IN_IADB_LEG_MAND -0.001
+score RCVD_IN_MSPIKE_H2 -0.001
score SCC_BODY_SINGLE_WORD 0.001
-score SCC_BODY_URI_ONLY 2.316
-score SCC_CANSPAM_2 3.097
-score SCC_ISEMM_LID_1B 0.937
-score SCC_SPAMMER_ADDR_2 2.491
-score SENDGRID_REDIR 0.341
+score SCC_BODY_URI_ONLY 2.183
+score SCC_CANSPAM_2 3.296
+score SCC_ISEMM_LID_1B 1.119
+score SCC_SPAMMER_ADDR_2 0.949
+score SENDGRID_REDIR 0.001
score SHOPIFY_IMG_NOT_RCVD_SFY 2.497
-score SHORTENED_URL_SRC 2.397
-score SHORT_SHORTNER 1.997
-score SPOOFED_FREEMAIL 0.001
+score SHORTENED_URL_SRC 1.747
+score SHORT_SHORTNER 1.998
+score SPOOFED_FREEMAIL 0.001 # force non-zero
score SPOOFED_FREEMAIL_NO_RDNS 0.001
-score SPOOFED_FREEM_REPTO 1.123
-score STATIC_XPRIO_OLE 1.266
+score SPOOFED_FREEM_REPTO 0.001
+score STATIC_XPRIO_OLE 1.270
score SUBJ_ATTENTION 0.499
-score THIS_AD 0.598
-score TO_EQ_FM_DIRECT_MX 1.245
-score TO_EQ_FM_DOM_SPF_FAIL 0.744
-score TO_EQ_FM_HTML_ONLY 0.815
-score TO_EQ_FM_SPF_FAIL 0.058
-score TO_IN_SUBJ 0.099
-score TO_NAME_SUBJ_NO_RDNS 2.974
+score THIS_AD 0.798
+score TO_EQ_FM_DIRECT_MX 1.506
+score TO_EQ_FM_DOM_SPF_FAIL 0.120
+score TO_EQ_FM_SPF_FAIL 0.200
+score TO_IN_SUBJ 0.098
+score TO_NAME_SUBJ_NO_RDNS 0.271
score TO_NO_BRKTS_FROM_MSSP 2.497
-score TO_NO_BRKTS_HTML_IMG 1.888
+score TO_NO_BRKTS_HTML_IMG 1.770
score TO_NO_BRKTS_HTML_ONLY 1.997
-score TO_NO_BRKTS_MSFT 2.173
-score TO_NO_BRKTS_NORDNS_HTML 1.419
-score TO_NO_BRKTS_PCNT 2.346
-score TVD_SPACE_RATIO_MINFP 0.157
-score UNDISC_FREEM 2.596
+score TO_NO_BRKTS_MSFT 2.224
+score TO_NO_BRKTS_NORDNS_HTML 1.728
+score TO_NO_BRKTS_PCNT 1.441
+score TVD_SPACE_RATIO_MINFP 0.001
+score UNDISC_FREEM 2.497
score UNDISC_MONEY 2.796
score UNICODE_OBFU_ZW_MANY 0.472
-score URI_DOTEDU 0.834
-score URI_GOOGLE_PROXY 1.698
+score URI_DOTEDU 1.997
+score URI_GOOGLE_PROXY 1.797
score URI_PHISH 3.995
score URI_TRY_3LD 1.997
score URI_WP_HACKED 3.496
score URI_WP_HACKED_2 2.497
-score VISTA_TONOM_EQ_TOLOC 2.498
-score WIKI_IMG 1.897
-score WORD_INVIS 2.048
+score VFY_ACCT_NORDNS 2.070
+score VISTA_TONOM_EQ_TOLOC 2.497
+score WIKI_IMG 2.098
+score WORD_INVIS 1.897
score WORD_INVIS_MANY 2.996
-score XFER_LOTSA_MONEY 0.001 # force non-zero
-score XM_RANDOM 2.498
+score XFER_LOTSA_MONEY 0.001
+score XM_RANDOM 2.497
score XPRIO 0.001
score AC_FROM_MANY_DOTS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -212,13 +219,11 @@ score BEBEE_IMG_NOT_RCVD_BB 1.0
score BIGNUM_EMAILS_FREEM 1.000
score BIGNUM_EMAILS_MANY 1.000
score BITCOIN_BOMB 1.000
-score BITCOIN_DEADLINE 1.000
score BITCOIN_EXTORT_02 1.000
score BITCOIN_IMGUR 1.000
score BITCOIN_MALWARE 1.000
score BITCOIN_OBFU_SUBJ 1.000
score BITCOIN_ONAN 1.000
-score BITCOIN_PAY_ME 1.000
score BITCOIN_SPAM_01 1.000
score BITCOIN_SPAM_03 1.000
score BITCOIN_SPAM_04 1.000
@@ -257,7 +262,6 @@ score FREEM_FRNUM_UNICD_EMPTY 1.0
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000
score FROM_BANK_NOAUTH 1.000
score FROM_FMBLA_NDBLOCKED 0.001
-score FROM_FMBLA_NEWDOM 1.000
score FROM_FMBLA_NEWDOM14 1.000
score FROM_GOV_REPLYTO_FREEMAIL 1.000
score FROM_GOV_SPOOF 1.000
@@ -281,11 +285,14 @@ score GOOG_STO_HTML_PHISH_MANY 1.0
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
score HAS_X_OUTGOING_SPAM_STAT 1.000
+score HDRS_LCASE 0.100
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
score HK_LOTTO 1.000
+score HK_NAME_FM_MR_MRS 1.000
score HK_RCVD_IP_MULTICAST 1.000
score HOSTED_IMG_DQ_UNSUB 1.000
+score HOSTED_IMG_FREEM 1.000
score HOSTED_IMG_MULTI 1.000
score HREF_EMPTY_NORDNS 1.000
score HREF_EMPTY_PHPMAIL 1.000
@@ -301,11 +308,11 @@ score JH_SPAMMY_PATTERN02 1.0
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
+score LOTTO_DEPT 1.000
score LUCRATIVE 1.000
score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
-score MANY_HDRS_LCASE 0.100
score MIME_NO_TEXT 1.000
score MIXED_FONT_CASE 1.000
score MONERO_DEADLINE 1.000
@@ -336,7 +343,6 @@ score PUMPDUMP_MULTI 1.0
score RAND_HEADER_LIST_SPOOF 1.000
score RAND_HEADER_MANY 1.000
score RCVD_DOTEDU_SHORT 1.000
-score RCVD_DOTEDU_SUSP_URI 1.000
score RDNS_NUM_TLD_ATCHNX 1.000
score RDNS_NUM_TLD_XM 1.000
score REPTO_419_FRAUD 1.000
@@ -396,7 +402,6 @@ score URI_PHP_REDIR 1.0
score URI_TRY_USME 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
-score VFY_ACCT_NORDNS 1.000
score VISTA_COST 1.000
score VPS_NO_NTLD 1.000
score WALMART_IMG_NOT_RCVD_WAL 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Jan 7 02:41:51 2024
@@ -1,23 +1,23 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 442890 63.414% (99.185% of non-spam corpus)
-# Correctly spam: 173995 24.913% (69.078% of spam corpus)
-# False positives: 3639 0.521% (0.815% of nonspam, 63496 weighted)
-# False negatives: 77886 11.152% (30.922% of spam, 132919 weighted)
-# Average score for spam: 6.7 nonspam: 0.6
-# Average for false-pos: 6.2 false-neg: 1.7
-# TOTAL: 698410 100.00%
+# Correctly non-spam: 443237 63.464% (99.263% of non-spam corpus)
+# Correctly spam: 173731 24.875% (68.974% of spam corpus)
+# False positives: 3292 0.471% (0.737% of nonspam, 58584 weighted)
+# False negatives: 78148 11.189% (31.026% of spam, 134320 weighted)
+# Average score for spam: 6.7 nonspam: 0.7
+# Average for false-pos: 6.3 false-neg: 1.7
+# TOTAL: 698408 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 55262 99.25%
-# Correctly spam: 20295 64.55%
-# False positives: 418 0.75%
-# False negatives: 11148 35.45%
-# TCR(l=50): 0.981122 SpamRecall: 64.545% SpamPrec: 97.982%
+# Correctly non-spam: 55260 99.25%
+# Correctly spam: 20160 64.12%
+# False positives: 420 0.75%
+# False negatives: 11283 35.88%
+# TCR(l=50): 0.973980 SpamRecall: 64.116% SpamPrec: 97.959%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
@@ -25,16 +25,16 @@ Reading per-message hit stat logs and sc
# SUMMARY for threshold 5.0:
# Correctly non-spam: 434897 97.40%
-# Correctly spam: 119828 47.57%
+# Correctly spam: 119756 47.55%
# False positives: 11632 2.60%
-# False negatives: 132053 52.43%
-# TCR(l=50): 0.352946 SpamRecall: 47.573% SpamPrec: 91.152%
+# False negatives: 132123 52.45%
+# TCR(l=50): 0.352909 SpamRecall: 47.545% SpamPrec: 91.147%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
# Correctly non-spam: 54211 97.36%
-# Correctly spam: 14964 47.59%
+# Correctly spam: 15059 47.89%
# False positives: 1469 2.64%
-# False negatives: 16479 52.41%
-# TCR(l=50): 0.349642 SpamRecall: 47.591% SpamPrec: 91.061%
+# False negatives: 16384 52.11%
+# TCR(l=50): 0.350012 SpamRecall: 47.893% SpamPrec: 91.112%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1915107&r1=1915106&r2=1915107&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Jan 7 02:41:51 2024
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 434925 80.806% (99.340% of non-spam corpus)
-# Correctly spam: 61478 11.422% (61.222% of spam corpus)
-# False positives: 2888 0.537% (0.660% of nonspam, 42616 weighted)
-# False negatives: 38940 7.235% (38.778% of spam, 64474 weighted)
-# Average score for spam: 7.0 nonspam: -1.6
-# Average for false-pos: 6.4 false-neg: 1.7
-# TOTAL: 538231 100.00%
+# Correctly non-spam: 421440 79.228% (99.390% of non-spam corpus)
+# Correctly spam: 71003 13.348% (65.802% of spam corpus)
+# False positives: 2587 0.486% (0.610% of nonspam, 43094 weighted)
+# False negatives: 36901 6.937% (34.198% of spam, 65608 weighted)
+# Average score for spam: 8.0 nonspam: -1.4
+# Average for false-pos: 6.5 false-neg: 1.8
+# TOTAL: 531931 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 54262 99.39%
-# Correctly spam: 7733 60.95%
-# False positives: 331 0.61%
-# False negatives: 4954 39.05%
-# TCR(l=50): 0.589983 SpamRecall: 60.952% SpamPrec: 95.895%
+# Correctly non-spam: 52540 99.42%
+# Correctly spam: 9112 66.85%
+# False positives: 306 0.58%
+# False negatives: 4519 33.15%
+# TCR(l=50): 0.687774 SpamRecall: 66.848% SpamPrec: 96.751%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 436003 99.59%
-# Correctly spam: 20766 20.68%
-# False positives: 1810 0.41%
-# False negatives: 79652 79.32%
-# TCR(l=50): 0.590166 SpamRecall: 20.680% SpamPrec: 91.983%
+# Correctly non-spam: 422120 99.55%
+# Correctly spam: 27940 25.89%
+# False positives: 1907 0.45%
+# False negatives: 79964 74.11%
+# TCR(l=50): 0.615490 SpamRecall: 25.893% SpamPrec: 93.611%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 54399 99.64%
-# Correctly spam: 2593 20.44%
-# False positives: 194 0.36%
-# False negatives: 10094 79.56%
-# TCR(l=50): 0.640952 SpamRecall: 20.438% SpamPrec: 93.039%
+# Correctly non-spam: 52625 99.58%
+# Correctly spam: 3624 26.59%
+# False positives: 221 0.42%
+# False negatives: 10007 73.41%
+# TCR(l=50): 0.647338 SpamRecall: 26.586% SpamPrec: 94.252%