You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2026/07/31 02:38:27 UTC
svn commit: r1936751 - spamassassin/trunk/rulesrc/scores
Author: spamassassin_role
Date: Fri Jul 31 02:38:27 2026
New Revision: 1936751
Log:
updated scores for revision 1936716 active rules added since last mass-check [set1 carried forward r1936706: insufficient ham contributors]
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf Thu Jul 30 20:54:14 2026 (r1936750)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Fri Jul 31 02:38:27 2026 (r1936751)
@@ -1,7 +1,7 @@
-score ACCT_PHISHING_MANY 2.999 2.780 2.999 2.780
+score ACCT_PHISHING_MANY 2.552 2.780 2.552 2.780
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS 2.500 2.499 2.500 2.499
+score AC_FROM_MANY_DOTS 2.499 2.499 2.499 2.499
score AC_HTML_NONSENSE_TAGS 1.000 1.000 1.000 1.000
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
@@ -14,16 +14,16 @@ score AC_SPAMMY_URI_PATTERNS4
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
score ADMAIL 0.001 0.001 0.001 0.001
-score ADMITS_SPAM 2.000 1.999 2.000 1.999
+score ADMITS_SPAM 1.999 1.999 1.999 1.999
score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 2.499 1.000 2.499
score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
-score ADVANCE_FEE_3_NEW 2.499 3.499 2.499 3.499
-score ADVANCE_FEE_3_NEW_MONEY 3.200 2.911 3.200 2.911
-score ADVANCE_FEE_4_NEW 2.899 2.799 2.899 2.799
+score ADVANCE_FEE_3_NEW 2.504 3.499 2.504 3.499
+score ADVANCE_FEE_3_NEW_MONEY 1.676 2.911 1.676 2.911
+score ADVANCE_FEE_4_NEW 2.800 2.799 2.800 2.799
score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.043 0.150 1.043 0.150
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.536 0.150 1.536 0.150
score ADVANCE_FEE_5_NEW_MONEY 3.099 2.999 3.099 2.999
score AD_PREFS 0.001 0.001 0.001 0.001
score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000
@@ -33,28 +33,28 @@ score APP_DEVELOPMENT_NORDNS
score ARC_SIGNED 0.001 0.001 0.001 0.001
score ARC_TRUSTED 0.001 0.001 0.001 0.001
score ARC_VALID 0.001 0.001 0.001 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.923 1.435 2.923 1.435
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.978 1.435 1.978 1.435
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM 1.093 2.308 1.093 2.308
-score BIGNUM_EMAILS_MANY 2.652 3.000 2.652 3.000
+score BIGNUM_EMAILS_FREEM 0.650 2.308 0.650 2.308
+score BIGNUM_EMAILS_MANY 1.038 3.000 1.038 3.000
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE 2.177 1.834 2.177 1.834
+score BITCOIN_DEADLINE 1.913 1.834 1.913 1.834
score BITCOIN_DIRECT 3.499 0.001 3.499 0.001
-score BITCOIN_EXTORT_01 2.202 4.752 2.202 4.752
+score BITCOIN_EXTORT_01 2.573 4.752 2.573 4.752
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML 3.091 0.001 3.091 0.001
+score BITCOIN_MALF_HTML 3.499 0.001 3.499 0.001
score BITCOIN_MALWARE 3.499 1.000 3.499 1.000
score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000
-score BITCOIN_ONAN 2.999 2.186 2.999 2.186
+score BITCOIN_ONAN 1.557 2.186 1.557 2.186
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02 1.120 2.499 1.120 2.499
+score BITCOIN_SPAM_02 1.974 2.499 1.974 2.499
score BITCOIN_SPAM_03 2.499 1.000 2.499 1.000
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_05 0.001 2.499 0.001 2.499
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07 2.453 2.492 2.453 2.492
+score BITCOIN_SPAM_07 1.872 2.492 1.872 2.492
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_09 1.000 1.000 1.000 1.000
score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000
@@ -62,12 +62,12 @@ score BITCOIN_SPAM_11
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
score BITCOIN_TOEQFM 3.499 2.321 3.499 2.321
-score BITCOIN_VISTA 2.743 3.499 2.743 3.499
-score BITCOIN_XPRIO 2.499 2.499 2.499 2.499
-score BITCOIN_YOUR_INFO 2.497 2.716 2.497 2.716
-score BODY_URI_ONLY 2.353 0.235 2.353 0.235
+score BITCOIN_VISTA 1.273 3.499 1.273 3.499
+score BITCOIN_XPRIO 0.767 2.499 0.767 2.499
+score BITCOIN_YOUR_INFO 2.230 2.716 2.230 2.716
+score BODY_URI_ONLY 2.355 0.235 2.355 0.235
score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000
-score BOGUS_MSM_HDRS 1.390 0.479 1.390 0.479
+score BOGUS_MSM_HDRS 0.638 0.479 0.638 0.479
score BOMB_FREEM 1.000 1.000 1.000 1.000
score BOMB_MONEY 1.000 1.000 1.000 1.000
score BTC_ORG 1.000 1.000 1.000 1.000
@@ -76,18 +76,17 @@ score CANT_SEE_AD
score CN_PHISH_JP_01 1.000 1.000 1.000 1.000
score CN_PHISH_JP_02 2.499 2.499 2.499 2.499
score CN_PHISH_JP_03 1.000 1.000 1.000 1.000
-score CN_PHISH_JP_04 1.278 1.656 1.278 1.656
+score CN_PHISH_JP_04 1.690 1.656 1.690 1.656
score CN_PHISH_JP_06 1.000 1.000 1.000 1.000
score CN_PHISH_JP_07 1.000 1.000 1.000 1.000
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
-score COMPENSATION 0.712 1.499 0.712 1.499
+score COMPENSATION 1.499 1.499 1.499 1.499
score CONTENT_AFTER_HTML 0.001 0.001 0.001 0.001
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
-score CTE_8BIT_MISMATCH 0.351 0.001 0.351 0.001
+score CTE_8BIT_MISMATCH 0.001 0.001 0.001 0.001
score DATE_IN_FUTURE_96_Q 4.099 4.199 4.099 4.199
score DAY_I_EARNED 1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY 3.000 2.999 3.000 2.999
-score DEAR_EMAIL 1.499 1.499 1.499 1.499
+score DEAR_BENEFICIARY 3.099 2.999 3.099 2.999
score DKIMWL_BL 0.001 1.000 0.001 1.000
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
score DKIMWL_WL_HIGH 0.001 -1.580 0.001 -1.580
@@ -95,12 +94,12 @@ score DKIMWL_WL_MED
score DKIMWL_WL_MEDHI 0.001 -1.000 0.001 -1.000
score DMARC_PERMERROR 0.001 0.001 0.001 0.001
score DMARC_TEMPERROR 0.001 0.001 0.001 0.001
-score DOS_BODY_HIGH_NO_MID 3.900 4.000 3.900 4.000
+score DOS_BODY_HIGH_NO_MID 3.899 4.000 3.899 4.000
score DOTGOV_IMAGE 1.000 1.000 1.000 1.000
score DSN_NO_MIMEVERSION 1.999 1.999 1.999 1.999
score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
-score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999
+score ENCRYPTED_MESSAGE -1.000 -0.999 -1.000 -0.999
score END_FUTURE_EMAILS 1.999 0.743 1.999 0.743
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
@@ -110,11 +109,11 @@ score FILL_THIS_FORM
score FONT_INVIS_DIRECT 3.499 1.977 3.499 1.977
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000
-score FONT_INVIS_LONG_LINE 1.997 1.729 1.997 1.729
-score FONT_INVIS_MSGID 2.499 2.499 2.499 2.499
-score FONT_INVIS_NORDNS 0.598 0.001 0.598 0.001
+score FONT_INVIS_LONG_LINE 1.996 1.729 1.996 1.729
+score FONT_INVIS_MSGID 2.500 2.499 2.500 2.499
+score FONT_INVIS_NORDNS 0.594 0.001 0.594 0.001
score FONT_INVIS_POSTEXTRAS 1.000 1.000 1.000 1.000
-score FORM_FRAUD 1.000 0.999 1.000 0.999
+score FORM_FRAUD 0.999 0.999 0.999 0.999
score FORM_FRAUD_3 2.499 2.599 2.499 2.599
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
score FOUND_YOU 1.000 1.000 1.000 1.000
@@ -130,37 +129,37 @@ score FROM_FMBLA_NEWDOM28
score FROM_GOV_DKIM_AU 0.001 -1.000 0.001 -1.000
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
score FROM_GOV_SPOOF 0.001 0.999 0.001 0.999
-score FROM_IN_TO_AND_SUBJ 2.399 2.599 2.399 2.599
+score FROM_IN_TO_AND_SUBJ 2.499 2.599 2.499 2.599
score FROM_LONG_DOM 1.000 1.000 1.000 1.000
score FROM_LONG_DOM_MINFP 2.499 0.648 2.499 0.648
-score FROM_MISSPACED 1.304 0.037 1.304 0.037
+score FROM_MISSPACED 1.127 0.037 1.127 0.037
score FROM_MISSP_DYNIP 2.217 2.999 2.217 2.999
score FROM_MISSP_EH_MATCH 1.999 1.828 1.999 1.828
-score FROM_MISSP_FREEMAIL 0.694 3.299 0.694 3.299
-score FROM_MISSP_MSFT 1.684 0.794 1.684 0.794
-score FROM_MISSP_REPLYTO 2.499 2.359 2.499 2.359
+score FROM_MISSP_FREEMAIL 0.869 3.299 0.869 3.299
+score FROM_MISSP_MSFT 2.172 0.794 2.172 0.794
+score FROM_MISSP_REPLYTO 2.500 2.359 2.500 2.359
score FROM_MISSP_SPF_FAIL 0.001 1.181 0.001 1.181
-score FROM_MISSP_USER 0.575 0.094 0.575 0.094
-score FROM_MISSP_XPRIO 1.482 0.490 1.482 0.490
-score FROM_MULTI_NORDNS 2.822 3.902 2.822 3.902
+score FROM_MISSP_USER 2.859 0.094 2.859 0.094
+score FROM_MISSP_XPRIO 1.969 0.490 1.969 0.490
+score FROM_MULTI_NORDNS 2.999 3.902 2.999 3.902
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
-score FROM_NTLD_LINKBAIT 0.936 1.000 0.936 1.000
+score FROM_NTLD_LINKBAIT 1.240 1.000 1.240 1.000
score FROM_NTLD_REPLY_FREEMAIL 1.000 1.000 1.000 1.000
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
score FROM_PAYPAL_SPOOF 0.001 1.000 0.001 1.000
score FROM_SUSPICIOUS_NTLD 0.500 0.500 0.500 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999
-score FROM_WSP_LEAD 2.932 3.200 2.932 3.200
+score FROM_WSP_LEAD 3.299 3.200 3.299 3.200
score FROM_WSP_TRAIL 3.099 2.128 3.099 2.128
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
-score FSL_CTYPE_WIN1251 1.790 2.703 1.790 2.703
+score FSL_CTYPE_WIN1251 0.898 2.703 0.898 2.703
score FSL_HAS_TINYURL 2.499 3.699 2.499 3.699
-score FSL_HELO_BARE_IP_2 2.196 1.373 2.196 1.373
+score FSL_HELO_BARE_IP_2 1.600 1.373 1.600 1.373
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
-score FUZZY_BITCOIN 2.599 0.001 2.599 0.001
-score FUZZY_SECURITY 2.099 0.001 2.099 0.001
+score FUZZY_BITCOIN 2.699 0.001 2.699 0.001
+score FUZZY_SECURITY 2.100 0.001 2.100 0.001
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
-score GB_BITCOIN_CP 0.230 2.832 0.230 2.832
+score GB_BITCOIN_CP 2.757 2.832 2.757 2.832
score GB_CUSTOM_HTM_URI 0.001 0.001 0.001 0.001
score GB_FAKE_RF_SHORT 1.000 1.000 1.000 1.000
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
@@ -176,32 +175,31 @@ score GOOGLE_DRIVE_REPLY_BAD_NTLD
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
score GOOG_REDIR_FRAUD 1.000 1.000 1.000 1.000
score GOOG_REDIR_HTML_ONLY 1.499 1.500 1.499 1.500
-score GOOG_REDIR_NORDNS 1.500 1.500 1.500 1.500
-score GOOG_REDIR_NOTRDNS 0.396 0.641 0.396 0.641
+score GOOG_REDIR_NORDNS 1.499 1.500 1.499 1.500
+score GOOG_REDIR_NOTRDNS 0.001 0.641 0.001 0.641
score GOOG_REDIR_SHORT 1.000 1.000 1.000 1.000
score GOOG_REDIR_STATICRDNS 1.000 1.000 1.000 1.000
score GOOG_STO_EMAIL_PHISH 2.999 2.999 2.999 2.999
-score GOOG_STO_HTML_PHISH 1.892 1.682 1.892 1.682
+score GOOG_STO_HTML_PHISH 0.301 1.682 0.301 1.682
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000
score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000
score GOOG_STO_NOIMG_HTML 2.999 2.999 2.999 2.999
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
score HAS_X_OUTGOING_SPAM_STAT 1.000 1.000 1.000 1.000
-score HDRS_LCASE 0.100 0.001 0.100 0.001
score HDRS_MISSP 1.000 1.000 1.000 1.000
-score HDR_ORDER_FTSDMCXX_DIRECT 1.555 1.470 1.555 1.470
-score HDR_ORDER_FTSDMCXX_NORDNS 0.223 2.898 0.223 2.898
+score HDR_ORDER_FTSDMCXX_DIRECT 1.526 1.470 1.526 1.470
+score HDR_ORDER_FTSDMCXX_NORDNS 1.643 2.898 1.643 2.898
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.250 0.001 0.250
-score HELO_MISC_IP 0.250 0.249 0.250 0.249
+score HELO_MISC_IP 0.249 0.249 0.249 0.249
score HELO_NO_DOMAIN 0.001 0.434 0.001 0.434
score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_CTE_RAW 1.000 1.000 1.000 1.000
-score HK_NAME_FM_MR_MRS 1.052 0.001 1.052 0.001
+score HK_NAME_FM_MR_MRS 0.919 0.001 0.919 0.001
score HK_NAME_MR_MRS 1.000 0.999 1.000 0.999
-score HK_RANDOM_ENVFROM 1.000 0.001 1.000 0.001
-score HK_RANDOM_FROM 1.000 1.000 1.000 1.000
-score HK_RANDOM_REPLYTO 1.000 0.999 1.000 0.999
+score HK_RANDOM_ENVFROM 0.999 0.001 0.999 0.001
+score HK_RANDOM_FROM 0.999 1.000 0.999 1.000
+score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
score HK_SCAM 0.001 0.001 0.001 0.001
score HOSTED_IMG_DIRECT_MX 3.499 1.000 3.499 1.000
@@ -209,17 +207,17 @@ score HOSTED_IMG_DQ_UNSUB
score HOSTED_IMG_FREEM 1.000 1.000 1.000 1.000
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
score HOSTED_IMG_MULTI_PUB_01 2.999 2.999 2.999 2.999
-score HREF_EMPTY_NORDNS 0.502 1.379 0.502 1.379
+score HREF_EMPTY_NORDNS 0.500 1.379 0.500 1.379
score HREF_EMPTY_PHPMAIL 1.000 1.000 1.000 1.000
score HREF_EMPTY_XANTIABUSE 1.000 1.000 1.000 1.000
score HREF_EMPTY_XAUTHED 1.000 1.000 1.000 1.000
score HTML_ENTITY_ASCII 2.999 2.999 2.999 2.999
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
score HTML_FONT_TINY_NORDNS 1.999 1.999 1.999 1.999
-score HTML_OFF_PAGE 2.639 2.999 2.639 2.999
+score HTML_OFF_PAGE 2.667 2.999 2.667 2.999
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
score HTML_SINGLET_MANY 2.499 1.992 2.499 1.992
-score HTML_TAG_BALANCE_CENTER 2.900 2.387 2.900 2.387
+score HTML_TAG_BALANCE_CENTER 2.906 2.387 2.906 2.387
score HTML_TEXT_INVISIBLE_FONT 0.001 0.001 0.001 0.001
score HTML_TEXT_INVISIBLE_STYLE 1.000 1.000 1.000 1.000
score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
@@ -231,79 +229,79 @@ score LINKEDIN_IMG_NOT_RCVD_LNKN
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
score LONG_HEX_URI 1.000 1.000 1.000 1.000
-score LONG_IMG_URI 1.000 1.000 1.000 1.000
+score LONG_IMG_URI 0.001 1.000 0.001 1.000
score LONG_INVISIBLE_TEXT 2.999 2.999 2.999 2.999
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
score LOTTO_DEPT 1.999 1.999 1.999 1.999
score LUCRATIVE 0.001 0.001 0.001 0.001
score MALF_HTML_B64 1.000 1.000 1.000 1.000
-score MALWARE_NORDNS 0.053 1.000 0.053 1.000
+score MALWARE_NORDNS 2.055 1.000 2.055 1.000
score MALWARE_PASSWORD 1.000 1.000 1.000 1.000
-score MALW_ATTACH 2.399 2.699 2.399 2.699
-score MANY_HDRS_LCASE 0.100 0.001 0.100 0.001
+score MALW_ATTACH 2.499 2.699 2.499 2.699
score MAY_BE_FORGED 3.899 4.199 3.899 4.199
score MC_MSFT_LISTMGR 1.000 1.000 1.000 1.000
score MILLION_HUNDRED 2.699 2.329 2.699 2.329
score MILLION_USD 1.999 1.999 1.999 1.999
-score MIMEOLE_DIRECT_TO_MX 1.948 1.237 1.948 1.237
+score MIMEOLE_DIRECT_TO_MX 0.232 1.237 0.232 1.237
score MIME_NO_TEXT 0.001 0.001 0.001 0.001
score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
-score MIXED_CENTER_CASE 1.068 2.499 1.068 2.499
-score MIXED_ES 1.084 0.001 1.084 0.001
+score MIXED_CENTER_CASE 2.499 2.499 2.499 2.499
+score MIXED_ES 1.593 0.001 1.593 0.001
score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
-score MIXED_HREF_CASE 2.000 1.999 2.000 1.999
-score MIXED_IMG_CASE 2.999 1.695 2.999 1.695
+score MIXED_HREF_CASE 1.999 1.999 1.999 1.999
+score MIXED_IMG_CASE 0.315 1.695 0.315 1.695
score MONERO_DEADLINE 1.000 1.000 1.000 1.000
score MONERO_EXTORT_01 1.000 1.000 1.000 1.000
score MONERO_MALWARE 1.000 1.000 1.000 1.000
score MONERO_PAY_ME 1.000 1.000 1.000 1.000
score MONEY_FORM 0.001 0.001 0.001 0.001
score MONEY_FORM_SHORT 2.491 2.453 2.491 2.453
-score MONEY_FRAUD_3 2.188 2.697 2.188 2.697
-score MONEY_FRAUD_5 2.434 1.649 2.434 1.649
+score MONEY_FRAUD_3 2.520 2.697 2.520 2.697
+score MONEY_FRAUD_5 3.194 1.649 3.194 1.649
score MONEY_FRAUD_8 0.001 0.001 0.001 0.001
-score MONEY_FREEMAIL_REPTO 0.741 0.001 0.741 0.001
-score MONEY_FROM_41 1.942 1.999 1.942 1.999
+score MONEY_FREEMAIL_REPTO 0.739 0.001 0.739 0.001
+score MONEY_FROM_41 1.939 1.999 1.939 1.999
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
score MONEY_NOHTML 2.499 1.569 2.499 1.569
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
-score MSM_PRIO_REPTO 0.885 0.818 0.885 0.818
-score MXG_EMAIL_FRAG 0.100 0.100 0.100 0.100
-score MXG_SPOOFED_DOCUSIGN 0.099 0.100 0.099 0.100
-score NAME_EMAIL_DIFF 1.387 0.001 1.387 0.001
+score MSM_PRIO_REPTO 0.260 0.818 0.260 0.818
+score MXG_EMAIL_FRAG 0.099 0.100 0.099 0.100
+score MXG_SPOOFED_DOCUSIGN 0.100 0.100 0.100 0.100
+score NAME_EMAIL_DIFF 1.469 0.001 1.469 0.001
score NA_DOLLARS 1.499 1.499 1.499 1.499
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
score NEW_PRODUCTS 1.249 1.250 1.249 1.250
-score NICE_REPLY_A -1.202 -2.360 -1.202 -2.360
-score NORDNS_LOW_CONTRAST 1.887 2.499 1.887 2.499
+score NICE_REPLY_A -1.006 -2.360 -1.006 -2.360
+score NORDNS_LOW_CONTRAST 1.888 2.499 1.888 2.499
score NO_FM_NAME_IP_HOSTN 0.001 1.552 0.001 1.552
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
-score NUMBERONLY_BITCOIN_EXP 0.641 1.999 0.641 1.999
-score OBFU_BITCOIN 0.707 1.629 0.707 1.629
-score ODD_FREEM_REPTO 2.999 0.001 2.999 0.001
+score NUMBERONLY_BITCOIN_EXP 0.187 1.999 0.187 1.999
+score OBFU_BITCOIN 1.782 1.629 1.782 1.629
+score ODD_FREEM_REPTO 0.001 0.001 0.001 0.001
score PAYPAL_PHISH_07 1.000 1.000 1.000 1.000
-score PDS_BTC_ID 0.500 0.499 0.500 0.499
-score PDS_BTC_MSGID 0.609 0.414 0.609 0.414
+score PDS_BTC_ID 0.499 0.499 0.499 0.499
+score PDS_BTC_MSGID 0.001 0.414 0.001 0.414
score PDS_DBL_URL_TNB_RUNON 1.999 1.999 1.999 1.999
score PDS_FRNOM_TODOM_DBL_URL 1.499 1.499 1.499 1.499
-score PDS_FRNOM_TODOM_NAKED_TO 0.354 0.541 0.354 0.541
-score PDS_FROM_2_EMAILS 3.013 3.305 3.013 3.305
-score PDS_FROM_NAME_TO_DOMAIN 1.051 1.038 1.051 1.038
+score PDS_FRNOM_TODOM_NAKED_TO 0.874 0.541 0.874 0.541
+score PDS_FROM_2_EMAILS 3.080 3.305 3.080 3.305
+score PDS_FROM_NAME_TO_DOMAIN 0.531 1.038 0.531 1.038
score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000
score PDS_NAKED_TO_NUMERO 1.999 1.999 1.999 1.999
score PDS_OTHER_BAD_TLD 1.999 0.001 1.999 0.001
score PDS_RDNS_DYNAMIC_FP 0.010 0.010 0.010 0.010
+score PHISH_ATTACH 2.299 0.001 2.299 0.001
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
score PHONE_ORDERSCAM 1.000 1.000 1.000 1.000
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 1.404 0.800 1.404 0.800
-score PHP_SCRIPT 2.499 2.499 2.499 2.499
+score PHP_ORIG_SCRIPT 1.405 0.800 1.405 0.800
+score PHP_SCRIPT 0.644 2.499 0.644 2.499
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
score PMP_SPAM 1.000 1.000 1.000 1.000
score POSSIBLE_AMAZON_PHISH_03 1.000 1.000 1.000 1.000
-score POSSIBLE_GMAIL_PHISHER 1.275 3.799 1.275 3.799
+score POSSIBLE_GMAIL_PHISHER 0.659 3.799 0.659 3.799
score POSSIBLE_PAYPAL_PHISH_02 1.000 1.000 1.000 1.000
score PP_MIME_FAKE_ASCII_TEXT 0.001 0.239 0.001 0.239
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
@@ -313,7 +311,7 @@ score PUMPDUMP_MULTI
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
score RAND_MKTG_HEADER 1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS 2.057 1.060 2.057 1.060
+score RATWARE_NO_RDNS 0.297 1.060 0.297 1.060
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
score RCVD_IN_IADB_DMARC 0.001 0.001 0.001 0.001
@@ -355,16 +353,16 @@ score SENDGRID_REDIR
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
score SHOPIFY_IMG_NOT_RCVD_SFY 1.000 1.000 1.000 1.000
-score SHORTENER_SHORT_IMG 0.115 0.512 0.115 0.512
+score SHORTENER_SHORT_IMG 0.075 0.512 0.075 0.512
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
score SHY_OBFU_EXPIRE 1.000 1.000 1.000 1.000
score SHY_OBFU_PASSWORD 1.000 1.000 1.000 1.000
score SPOOFED_FREEMAIL 0.001 0.916 0.001 0.916
-score SPOOFED_FREEMAIL_NO_RDNS 1.405 1.150 1.405 1.150
+score SPOOFED_FREEMAIL_NO_RDNS 1.402 1.150 1.402 1.150
score SPOOFED_FREEM_REPTO 0.001 1.246 0.001 1.246
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID 1.252 0.001 1.252 0.001
+score SPOOF_GMAIL_MID 1.277 0.001 1.277 0.001
score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001
score STOCK_TIP 1.000 1.000 1.000 1.000
score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000
@@ -374,12 +372,12 @@ score SYSADMIN
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
score TEQF_USR_POLITE 1.999 0.971 1.999 0.971
-score THIS_IS_ADV_SUSP_NTLD 0.165 0.001 0.165 0.001
+score THIS_IS_ADV_SUSP_NTLD 0.003 0.001 0.003 0.001
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
score TO_EQ_FM_DIRECT_MX 0.001 0.001 0.001 0.001
score TO_EQ_FM_DOM_HTML_ONLY 0.001 0.077 0.001 0.077
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_EQ_FM_HTML_DIRECT 0.402 0.769 0.402 0.769
+score TO_EQ_FM_HTML_DIRECT 0.395 0.769 0.395 0.769
score TO_EQ_FM_HTML_ONLY 0.001 0.225 0.001 0.225
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
@@ -388,10 +386,11 @@ score TO_NO_BRKTS_DYNIP
score TO_NO_BRKTS_FROM_MSSP 2.499 2.499 2.499 2.499
score TO_NO_BRKTS_HTML_IMG 0.001 0.001 0.001 0.001
score TO_NO_BRKTS_HTML_ONLY 1.999 1.734 1.999 1.734
-score TO_NO_BRKTS_MSFT 2.499 0.266 2.499 0.266
+score TO_NO_BRKTS_MSFT 2.500 0.266 2.500 0.266
score TO_NO_BRKTS_NORDNS_HTML 1.999 2.000 1.999 2.000
score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499
-score TVD_DOLLARS_US 0.995 1.762 0.995 1.762
+score TVD_DOLLARS_US 0.251 1.762 0.251 1.762
+score TVD_FROM_1 1.000 0.001 1.000 0.001
score TVD_SPACE_ENCODED 2.499 2.499 2.499 2.499
score TVD_SPACE_RATIO_MINFP 0.001 0.001 0.001 0.001
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
@@ -400,7 +399,7 @@ score UNDISC_FREEM
score UNDISC_MONEY 2.999 2.429 2.999 2.429
score UNICODE_OBFU_ASC 2.499 1.000 2.499 1.000
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
-score UNICODE_OBFU_ZW_MANY 2.999 2.625 2.999 2.625
+score UNICODE_OBFU_ZW_MANY 2.490 2.625 2.490 2.625
score UNICODE_RTL_OBFU 1.000 1.000 1.000 1.000
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
score UPPERCASE_URI 2.749 2.749 2.749 2.749
@@ -411,13 +410,13 @@ score URI_AZURE_CLOUDAPP
score URI_CLOUDFLAREIPFS 1.000 1.000 1.000 1.000
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_DOTCN_LOGIN 1.499 1.499 1.499 1.499
-score URI_DOTCN_SPOOF 3.000 2.999 3.000 2.999
+score URI_DOTCN_LOGIN 1.500 1.499 1.500 1.499
+score URI_DOTCN_SPOOF 2.999 2.999 2.999 2.999
score URI_DOTEDU 1.000 1.000 1.000 1.000
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
score URI_DWEBIPFS 1.000 1.000 1.000 1.000
score URI_EXCESS_SLASHES 2.499 1.000 2.499 1.000
-score URI_FIREBASEAPP 3.000 2.999 3.000 2.999
+score URI_FIREBASEAPP 2.999 2.999 2.999 2.999
score URI_FLKIPFSXYZIPFS 1.000 1.000 1.000 1.000
score URI_GLITCHME 1.000 1.000 1.000 1.000
score URI_GOOGDRAWPREVIEW_MINFP 3.000 3.000 3.000 3.000
@@ -427,23 +426,22 @@ score URI_HEX_IP
score URI_IMG_CWINDOWSNET 1.000 1.000 1.000 1.000
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
score URI_INFURAIPFSIO 1.000 0.001 1.000 0.001
-score URI_IPFS 3.499 3.499 3.499 3.499
-score URI_IPFSIO 1.655 3.324 1.655 3.324
+score URI_IPFS 2.880 3.499 2.880 3.499
+score URI_IPFSIO 2.093 3.324 2.093 3.324
score URI_LONG_REPEAT 1.000 1.000 1.000 1.000
score URI_ONLY_MSGID_MALF 1.000 1.000 1.000 1.000
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.999 3.999 3.999 3.999
+score URI_PHISH 4.000 3.999 4.000 3.999
score URI_PHP_REDIR 1.000 1.000 1.000 1.000
score URI_REPLIT_DEV 1.000 1.000 1.000 1.000
score URI_TRY_3LD 1.999 1.894 1.999 1.894
score URI_TRY_USME 1.000 1.000 1.000 1.000
-score URI_W3SIPFS 1.000 1.000 1.000 1.000
score URI_WPADMIN 2.899 1.896 2.899 1.896
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
-score URI_WP_HACKED 2.100 2.104 2.100 2.104
-score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
+score URI_WP_HACKED 2.103 2.104 2.103 2.104
+score URI_WP_HACKED_2 2.500 2.499 2.500 2.499
score USB_DRIVES 1.000 1.000 1.000 1.000
-score VFY_ACCT_NORDNS 2.500 2.999 2.500 2.999
+score VFY_ACCT_NORDNS 2.499 2.999 2.499 2.999
score VISTA_COST 1.000 1.000 1.000 1.000
score VISTA_TONOM_EQ_TOLOC 1.000 1.000 1.000 1.000
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
@@ -454,7 +452,7 @@ score WORD_INVIS_MANY
score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
score XM_RANDOM 2.499 2.500 2.499 2.500
score XM_RECPTID 2.999 2.999 2.999 2.999
-score XPRIO 0.699 1.307 0.699 1.307
+score XPRIO 0.692 1.307 0.692 1.307
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000
score XPRIO_VISTA 1.000 1.000 1.000 1.000
score ZW_OBFU_FROMTOSUBJ 1.000 1.000 1.000 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 Thu Jul 30 20:54:14 2026 (r1936750)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Fri Jul 31 02:38:27 2026 (r1936751)
@@ -1,215 +1,217 @@
-# Using score set 0 logs for revision 1936693 from:
-# ham-giovanni-ham.r1936693.log ham-giovanni-spam.r1936693.log ham-grenier.r1936693.log ham-jhardin.r1936693.log ham-koyer.r1936693.log ham-llanga.r1936693.log ham-mmiroslaw-mails-ham.r1936693.log ham-mmiroslaw-mails-spam.r1936693.log ham-spamsponge.r1936693.log ham-tsz-corpus.r1936693.log ham-whyscream.r1936693.log spam-giovanni-ham.r1936693.log spam-giovanni-spam.r1936693.log spam-grenier.r1936693.log spam-jhardin.r1936693.log spam-koyer.r1936693.log spam-llanga.r1936693.log spam-mmiroslaw-mails-ham.r1936693.log spam-mmiroslaw-mails-spam.r1936693.log spam-spamsponge.r1936693.log spam-tsz-corpus.r1936693.log spam-whyscream.r1936693.log
+# Using score set 0 logs for revision 1936716 from:
+# ham-giovanni-ham.r1936716.log ham-giovanni-spam.r1936716.log ham-grenier.r1936716.log ham-jhardin.r1936716.log ham-koyer.r1936716.log ham-llanga.r1936716.log ham-mmiroslaw-mails-ham.r1936716.log ham-mmiroslaw-mails-spam.r1936716.log ham-spamsponge.r1936716.log ham-tsz-corpus.r1936716.log ham-whyscream.r1936716.log spam-giovanni-ham.r1936716.log spam-giovanni-spam.r1936716.log spam-grenier.r1936716.log spam-jhardin.r1936716.log spam-koyer.r1936716.log spam-llanga.r1936716.log spam-mmiroslaw-mails-ham.r1936716.log spam-mmiroslaw-mails-spam.r1936716.log spam-spamsponge.r1936716.log spam-tsz-corpus.r1936716.log spam-whyscream.r1936716.log
-score ACCT_PHISHING_MANY 2.999
+score ACCT_PHISHING_MANY 2.552
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_FROM_MANY_DOTS 2.500
+score AC_FROM_MANY_DOTS 2.499
score ADMAIL 0.001
-score ADMITS_SPAM 2.000
+score ADMITS_SPAM 1.999
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.499
-score ADVANCE_FEE_3_NEW_MONEY 3.200
-score ADVANCE_FEE_4_NEW 2.899
+score ADVANCE_FEE_3_NEW 2.504
+score ADVANCE_FEE_3_NEW_MONEY 1.676
+score ADVANCE_FEE_4_NEW 2.800
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.043
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.536
score ADVANCE_FEE_5_NEW_MONEY 3.099
score AD_PREFS 0.001
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.923
-score BIGNUM_EMAILS_FREEM 1.093
-score BIGNUM_EMAILS_MANY 2.652
-score BITCOIN_DEADLINE 2.177
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.978
+score BIGNUM_EMAILS_FREEM 0.650
+score BIGNUM_EMAILS_MANY 1.038
+score BITCOIN_DEADLINE 1.913
score BITCOIN_DIRECT 3.499
-score BITCOIN_EXTORT_01 2.202
-score BITCOIN_MALF_HTML 3.091
+score BITCOIN_EXTORT_01 2.573
+score BITCOIN_MALF_HTML 3.499
score BITCOIN_MALWARE 3.499
-score BITCOIN_ONAN 2.999
-score BITCOIN_SPAM_02 1.120
+score BITCOIN_ONAN 1.557
+score BITCOIN_SPAM_02 1.974
score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_07 2.453
+score BITCOIN_SPAM_07 1.872
score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 2.743
-score BITCOIN_XPRIO 2.499
-score BITCOIN_YOUR_INFO 2.497
-score BODY_URI_ONLY 2.353
-score BOGUS_MSM_HDRS 1.390
+score BITCOIN_VISTA 1.273
+score BITCOIN_XPRIO 0.767
+score BITCOIN_YOUR_INFO 2.230
+score BODY_URI_ONLY 2.355
+score BOGUS_MSM_HDRS 0.638
score CN_PHISH_JP_02 2.499
-score CN_PHISH_JP_04 1.278
-score COMPENSATION 0.712
-score CONTENT_AFTER_HTML 0.001
-score CTE_8BIT_MISMATCH 0.351
+score CN_PHISH_JP_04 1.690
+score COMPENSATION 1.499
+score CONTENT_AFTER_HTML 0.001 # force non-zero
+score CTE_8BIT_MISMATCH 0.001
score DATE_IN_FUTURE_96_Q 4.099
-score DEAR_BENEFICIARY 3.000
-score DEAR_EMAIL 1.499
-score DOS_BODY_HIGH_NO_MID 3.900
+score DEAR_BENEFICIARY 3.099
+score DOS_BODY_HIGH_NO_MID 3.899
score DSN_NO_MIMEVERSION 1.999
-score ENCRYPTED_MESSAGE -0.999
+score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 1.999
score FILL_THIS_FORM 0.001
score FONT_INVIS_DIRECT 3.499
-score FONT_INVIS_LONG_LINE 1.997
-score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 0.598
-score FORM_FRAUD 1.000
+score FONT_INVIS_LONG_LINE 1.996
+score FONT_INVIS_MSGID 2.500
+score FONT_INVIS_NORDNS 0.594
+score FORM_FRAUD 0.999
score FORM_FRAUD_3 2.499
score FORM_FRAUD_5 0.001
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
score FROM_ADDR_WS 2.999
-score FROM_IN_TO_AND_SUBJ 2.399
+score FROM_IN_TO_AND_SUBJ 2.499
score FROM_LONG_DOM_MINFP 2.499
-score FROM_MISSPACED 1.304
+score FROM_MISSPACED 1.127
score FROM_MISSP_DYNIP 2.217
score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 0.694
-score FROM_MISSP_MSFT 1.684
-score FROM_MISSP_REPLYTO 2.499
-score FROM_MISSP_USER 0.575
-score FROM_MISSP_XPRIO 1.482
-score FROM_MULTI_NORDNS 2.822
-score FROM_NTLD_LINKBAIT 0.936
+score FROM_MISSP_FREEMAIL 0.869
+score FROM_MISSP_MSFT 2.172
+score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_USER 2.859
+score FROM_MISSP_XPRIO 1.969
+score FROM_MULTI_NORDNS 2.999
+score FROM_NTLD_LINKBAIT 1.240
score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_WSP_LEAD 2.932
+score FROM_WSP_LEAD 3.299
score FROM_WSP_TRAIL 3.099
-score FSL_CTYPE_WIN1251 1.790
+score FSL_CTYPE_WIN1251 0.898
score FSL_HAS_TINYURL 2.499
-score FSL_HELO_BARE_IP_2 2.196
-score FSL_NEW_HELO_USER 0.001 # force non-zero
-score FUZZY_BITCOIN 2.599
-score FUZZY_SECURITY 2.099
-score GB_BITCOIN_CP 0.230
-score GB_CUSTOM_HTM_URI 0.001
+score FSL_HELO_BARE_IP_2 1.600
+score FSL_NEW_HELO_USER 0.001
+score FUZZY_BITCOIN 2.699
+score FUZZY_SECURITY 2.100
+score GB_BITCOIN_CP 2.757
+score GB_CUSTOM_HTM_URI 0.001 # force non-zero
score GB_FREEMAIL_DISPTO 0.500
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500
score GOOG_REDIR_HTML_ONLY 1.499
-score GOOG_REDIR_NORDNS 1.500
-score GOOG_REDIR_NOTRDNS 0.396
+score GOOG_REDIR_NORDNS 1.499
+score GOOG_REDIR_NOTRDNS 0.001
score GOOG_STO_EMAIL_PHISH 2.999
-score GOOG_STO_HTML_PHISH 1.892
+score GOOG_STO_HTML_PHISH 0.301
score GOOG_STO_NOIMG_HTML 2.999
-score HDR_ORDER_FTSDMCXX_DIRECT 1.555
-score HDR_ORDER_FTSDMCXX_NORDNS 0.223
+score HDR_ORDER_FTSDMCXX_DIRECT 1.526
+score HDR_ORDER_FTSDMCXX_NORDNS 1.643
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HELO_MISC_IP 0.250
+score HELO_MISC_IP 0.249
score HELO_NO_DOMAIN 0.001
-score HK_NAME_FM_MR_MRS 1.052
+score HK_NAME_FM_MR_MRS 0.919
score HK_NAME_MR_MRS 1.000
-score HK_RANDOM_ENVFROM 1.000
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 1.000
+score HK_RANDOM_ENVFROM 0.999
+score HK_RANDOM_FROM 0.999
+score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 0.001
score HOSTED_IMG_DIRECT_MX 3.499
score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 0.502
+score HREF_EMPTY_NORDNS 0.500
score HTML_ENTITY_ASCII 2.999
score HTML_FONT_TINY_NORDNS 1.999
-score HTML_OFF_PAGE 2.639
+score HTML_OFF_PAGE 2.667
score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 2.900
+score HTML_TAG_BALANCE_CENTER 2.906
score HTML_TEXT_INVISIBLE_FONT 0.001
score KHOP_HELO_FCRDNS 0.001 # force non-zero
+score LONG_IMG_URI 0.001
score LONG_INVISIBLE_TEXT 2.999
score LOTS_OF_MONEY 0.010
score LOTTO_DEPT 1.999
score LUCRATIVE 0.001
-score MALWARE_NORDNS 0.053
-score MALW_ATTACH 2.399
+score MALWARE_NORDNS 2.055
+score MALW_ATTACH 2.499
score MAY_BE_FORGED 3.899
score MILLION_HUNDRED 2.699
score MILLION_USD 1.999
-score MIMEOLE_DIRECT_TO_MX 1.948
+score MIMEOLE_DIRECT_TO_MX 0.232
score MIME_NO_TEXT 0.001
-score MIXED_CENTER_CASE 1.068
-score MIXED_ES 1.084
-score MIXED_HREF_CASE 2.000
-score MIXED_IMG_CASE 2.999
-score MONEY_FORM 0.001
+score MIXED_CENTER_CASE 2.499
+score MIXED_ES 1.593
+score MIXED_HREF_CASE 1.999
+score MIXED_IMG_CASE 0.315
+score MONEY_FORM 0.001 # force non-zero
score MONEY_FORM_SHORT 2.491
-score MONEY_FRAUD_3 2.188
-score MONEY_FRAUD_5 2.434
+score MONEY_FRAUD_3 2.520
+score MONEY_FRAUD_5 3.194
score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 0.741
-score MONEY_FROM_41 1.942
+score MONEY_FREEMAIL_REPTO 0.739
+score MONEY_FROM_41 1.939
score MONEY_FROM_MISSP 0.001
score MONEY_NOHTML 2.499
-score MSM_PRIO_REPTO 0.885
-score MXG_EMAIL_FRAG 0.100
-score MXG_SPOOFED_DOCUSIGN 0.099
-score NAME_EMAIL_DIFF 1.387
+score MSM_PRIO_REPTO 0.260
+score MXG_EMAIL_FRAG 0.099
+score MXG_SPOOFED_DOCUSIGN 0.100
+score NAME_EMAIL_DIFF 1.469
score NA_DOLLARS 1.499
score NEW_PRODUCTS 1.249
-score NICE_REPLY_A -1.202
-score NORDNS_LOW_CONTRAST 1.887
+score NICE_REPLY_A -1.006
+score NORDNS_LOW_CONTRAST 1.888
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.641
-score OBFU_BITCOIN 0.707
-score ODD_FREEM_REPTO 2.999
-score PDS_BTC_ID 0.500
-score PDS_BTC_MSGID 0.609
+score NUMBERONLY_BITCOIN_EXP 0.187
+score OBFU_BITCOIN 1.782
+score ODD_FREEM_REPTO 0.001 # force non-zero
+score PDS_BTC_ID 0.499
+score PDS_BTC_MSGID 0.001
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_FRNOM_TODOM_DBL_URL 1.499
-score PDS_FRNOM_TODOM_NAKED_TO 0.354
-score PDS_FROM_2_EMAILS 3.013
-score PDS_FROM_NAME_TO_DOMAIN 1.051
+score PDS_FRNOM_TODOM_NAKED_TO 0.874
+score PDS_FROM_2_EMAILS 3.080
+score PDS_FROM_NAME_TO_DOMAIN 0.531
score PDS_NAKED_TO_NUMERO 1.999
score PDS_OTHER_BAD_TLD 1.999
score PDS_RDNS_DYNAMIC_FP 0.010
-score PHP_ORIG_SCRIPT 1.404
-score PHP_SCRIPT 2.499
-score POSSIBLE_GMAIL_PHISHER 1.275
+score PHISH_ATTACH 2.299
+score PHP_ORIG_SCRIPT 1.405
+score PHP_SCRIPT 0.644
+score POSSIBLE_GMAIL_PHISHER 0.659
score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RATWARE_NO_RDNS 2.057
+score RATWARE_NO_RDNS 0.297
score REPTO_419_FRAUD_GM 0.001
score REPTO_419_FRAUD_HM_LOOSE 0.999
score RISK_FREE 2.599
-score SHORTENER_SHORT_IMG 0.115
-score SPOOFED_FREEMAIL_NO_RDNS 1.405
-score SPOOF_GMAIL_MID 1.252
+score SHORTENER_SHORT_IMG 0.075
+score SPOOFED_FREEMAIL_NO_RDNS 1.402
+score SPOOF_GMAIL_MID 1.277
score STATIC_XPRIO_OLE 0.001
score SUSP_UTF8_WORD_FROM 1.999
score TEQF_USR_POLITE 1.999
-score THIS_IS_ADV_SUSP_NTLD 0.165
+score THIS_IS_ADV_SUSP_NTLD 0.003
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_ONLY 0.001
-score TO_EQ_FM_HTML_DIRECT 0.402
+score TO_EQ_FM_HTML_DIRECT 0.395
score TO_EQ_FM_HTML_ONLY 0.001
score TO_IN_SUBJ 0.100
score TO_NO_BRKTS_DYNIP 2.250
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 0.001 # force non-zero
+score TO_NO_BRKTS_HTML_IMG 0.001
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 2.499
+score TO_NO_BRKTS_MSFT 2.500
score TO_NO_BRKTS_NORDNS_HTML 1.999
score TO_NO_BRKTS_PCNT 2.499
-score TVD_DOLLARS_US 0.995
+score TVD_DOLLARS_US 0.251
+score TVD_FROM_1 1.000
score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_RATIO_MINFP 0.001
score UNDISC_FREEM 2.699
score UNDISC_MONEY 2.999
score UNICODE_OBFU_ASC 2.499
-score UNICODE_OBFU_ZW_MANY 2.999
+score UNICODE_OBFU_ZW_MANY 2.490
score UPPERCASE_URI 2.749
-score URI_DOTCN_LOGIN 1.499
-score URI_DOTCN_SPOOF 3.000
+score URI_DOTCN_LOGIN 1.500
+score URI_DOTCN_SPOOF 2.999
score URI_EXCESS_SLASHES 2.499
-score URI_FIREBASEAPP 3.000
+score URI_FIREBASEAPP 2.999
score URI_GOOGLE_PROXY 2.699
-score URI_IPFS 3.499
-score URI_IPFSIO 1.655
-score URI_PHISH 3.999
+score URI_IPFS 2.880
+score URI_IPFSIO 2.093
+score URI_PHISH 4.000
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.899
-score URI_WP_HACKED 2.100
-score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.500
+score URI_WP_HACKED 2.103
+score URI_WP_HACKED_2 2.500
+score VFY_ACCT_NORDNS 2.499
score WIKI_IMG 2.499
score WORD_INVIS 2.999
score WORD_INVIS_MANY 2.999
score XM_RANDOM 2.499
score XM_RECPTID 2.999
-score XPRIO 0.699
+score XPRIO 0.692
score AC_HTML_NONSENSE_TAGS 1.000
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -288,7 +290,6 @@ score GOOG_STO_IMG_HTML 1.0
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
score HAS_X_OUTGOING_SPAM_STAT 1.000
-score HDRS_LCASE 0.100
score HDRS_MISSP 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
@@ -310,10 +311,8 @@ score LINKEDIN_IMG_NOT_RCVD_LNKN 1.0
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
score LONG_HEX_URI 1.000
-score LONG_IMG_URI 1.000
score MALF_HTML_B64 1.000
score MALWARE_PASSWORD 1.000
-score MANY_HDRS_LCASE 0.100
score MC_MSFT_LISTMGR 1.000
score MIXED_AREA_CASE 1.000
score MIXED_FONT_CASE 1.000
@@ -399,7 +398,6 @@ score URI_OPTOUT_3LD 1.0
score URI_PHP_REDIR 1.000
score URI_REPLIT_DEV 1.000
score URI_TRY_USME 1.000
-score URI_W3SIPFS 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
score VISTA_COST 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 Thu Jul 30 20:54:14 2026 (r1936750)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Fri Jul 31 02:38:27 2026 (r1936751)
@@ -158,6 +158,7 @@ score FSL_HAS_TINYURL 3.699
score FSL_HELO_BARE_IP_2 1.373
score FSL_NEW_HELO_USER 0.001
score FUZZY_BITCOIN 0.001
+score FUZZY_SECURITY 0.001
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_BITCOIN_CP 2.832
score GB_CUSTOM_HTM_URI 0.001
@@ -239,6 +240,7 @@ score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
score MALW_ATTACH 2.699
+score MANY_HDRS_LCASE 0.001
score MAY_BE_FORGED 4.199
score MC_MSFT_LISTMGR 1.000
score MILLION_HUNDRED 2.329
@@ -290,6 +292,7 @@ score PDS_FROM_2_EMAILS 3.305
score PDS_FROM_NAME_TO_DOMAIN 1.038
score PDS_HELO_SPF_FAIL 1.000
score PDS_NAKED_TO_NUMERO 1.999
+score PDS_OTHER_BAD_TLD 0.001
score PDS_RDNS_DYNAMIC_FP 0.010
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 Thu Jul 30 20:54:14 2026 (r1936750)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Fri Jul 31 02:38:27 2026 (r1936751)
@@ -1,215 +1,217 @@
-# Using score set 0 logs for revision 1936693 from:
-# ham-giovanni-ham.r1936693.log ham-giovanni-spam.r1936693.log ham-grenier.r1936693.log ham-jhardin.r1936693.log ham-koyer.r1936693.log ham-llanga.r1936693.log ham-mmiroslaw-mails-ham.r1936693.log ham-mmiroslaw-mails-spam.r1936693.log ham-spamsponge.r1936693.log ham-tsz-corpus.r1936693.log ham-whyscream.r1936693.log spam-giovanni-ham.r1936693.log spam-giovanni-spam.r1936693.log spam-grenier.r1936693.log spam-jhardin.r1936693.log spam-koyer.r1936693.log spam-llanga.r1936693.log spam-mmiroslaw-mails-ham.r1936693.log spam-mmiroslaw-mails-spam.r1936693.log spam-spamsponge.r1936693.log spam-tsz-corpus.r1936693.log spam-whyscream.r1936693.log
+# Using score set 0 logs for revision 1936716 from:
+# ham-giovanni-ham.r1936716.log ham-giovanni-spam.r1936716.log ham-grenier.r1936716.log ham-jhardin.r1936716.log ham-koyer.r1936716.log ham-llanga.r1936716.log ham-mmiroslaw-mails-ham.r1936716.log ham-mmiroslaw-mails-spam.r1936716.log ham-spamsponge.r1936716.log ham-tsz-corpus.r1936716.log ham-whyscream.r1936716.log spam-giovanni-ham.r1936716.log spam-giovanni-spam.r1936716.log spam-grenier.r1936716.log spam-jhardin.r1936716.log spam-koyer.r1936716.log spam-llanga.r1936716.log spam-mmiroslaw-mails-ham.r1936716.log spam-mmiroslaw-mails-spam.r1936716.log spam-spamsponge.r1936716.log spam-tsz-corpus.r1936716.log spam-whyscream.r1936716.log
-score ACCT_PHISHING_MANY 2.999
+score ACCT_PHISHING_MANY 2.552
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_FROM_MANY_DOTS 2.500
+score AC_FROM_MANY_DOTS 2.499
score ADMAIL 0.001
-score ADMITS_SPAM 2.000
+score ADMITS_SPAM 1.999
score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 2.499
-score ADVANCE_FEE_3_NEW_MONEY 3.200
-score ADVANCE_FEE_4_NEW 2.899
+score ADVANCE_FEE_3_NEW 2.504
+score ADVANCE_FEE_3_NEW_MONEY 1.676
+score ADVANCE_FEE_4_NEW 2.800
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.043
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.536
score ADVANCE_FEE_5_NEW_MONEY 3.099
score AD_PREFS 0.001
score AMAZON_IMG_NOT_RCVD_AMZN 2.499
-score AXB_XMAILER_MIMEOLE_OL_024C2 2.923
-score BIGNUM_EMAILS_FREEM 1.093
-score BIGNUM_EMAILS_MANY 2.652
-score BITCOIN_DEADLINE 2.177
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.978
+score BIGNUM_EMAILS_FREEM 0.650
+score BIGNUM_EMAILS_MANY 1.038
+score BITCOIN_DEADLINE 1.913
score BITCOIN_DIRECT 3.499
-score BITCOIN_EXTORT_01 2.202
-score BITCOIN_MALF_HTML 3.091
+score BITCOIN_EXTORT_01 2.573
+score BITCOIN_MALF_HTML 3.499
score BITCOIN_MALWARE 3.499
-score BITCOIN_ONAN 2.999
-score BITCOIN_SPAM_02 1.120
+score BITCOIN_ONAN 1.557
+score BITCOIN_SPAM_02 1.974
score BITCOIN_SPAM_03 2.499
-score BITCOIN_SPAM_07 2.453
+score BITCOIN_SPAM_07 1.872
score BITCOIN_TOEQFM 3.499
-score BITCOIN_VISTA 2.743
-score BITCOIN_XPRIO 2.499
-score BITCOIN_YOUR_INFO 2.497
-score BODY_URI_ONLY 2.353
-score BOGUS_MSM_HDRS 1.390
+score BITCOIN_VISTA 1.273
+score BITCOIN_XPRIO 0.767
+score BITCOIN_YOUR_INFO 2.230
+score BODY_URI_ONLY 2.355
+score BOGUS_MSM_HDRS 0.638
score CN_PHISH_JP_02 2.499
-score CN_PHISH_JP_04 1.278
-score COMPENSATION 0.712
-score CONTENT_AFTER_HTML 0.001
-score CTE_8BIT_MISMATCH 0.351
+score CN_PHISH_JP_04 1.690
+score COMPENSATION 1.499
+score CONTENT_AFTER_HTML 0.001 # force non-zero
+score CTE_8BIT_MISMATCH 0.001
score DATE_IN_FUTURE_96_Q 4.099
-score DEAR_BENEFICIARY 3.000
-score DEAR_EMAIL 1.499
-score DOS_BODY_HIGH_NO_MID 3.900
+score DEAR_BENEFICIARY 3.099
+score DOS_BODY_HIGH_NO_MID 3.899
score DSN_NO_MIMEVERSION 1.999
-score ENCRYPTED_MESSAGE -0.999
+score ENCRYPTED_MESSAGE -1.000
score END_FUTURE_EMAILS 1.999
score FILL_THIS_FORM 0.001
score FONT_INVIS_DIRECT 3.499
-score FONT_INVIS_LONG_LINE 1.997
-score FONT_INVIS_MSGID 2.499
-score FONT_INVIS_NORDNS 0.598
-score FORM_FRAUD 1.000
+score FONT_INVIS_LONG_LINE 1.996
+score FONT_INVIS_MSGID 2.500
+score FONT_INVIS_NORDNS 0.594
+score FORM_FRAUD 0.999
score FORM_FRAUD_3 2.499
score FORM_FRAUD_5 0.001
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
score FROM_ADDR_WS 2.999
-score FROM_IN_TO_AND_SUBJ 2.399
+score FROM_IN_TO_AND_SUBJ 2.499
score FROM_LONG_DOM_MINFP 2.499
-score FROM_MISSPACED 1.304
+score FROM_MISSPACED 1.127
score FROM_MISSP_DYNIP 2.217
score FROM_MISSP_EH_MATCH 1.999
-score FROM_MISSP_FREEMAIL 0.694
-score FROM_MISSP_MSFT 1.684
-score FROM_MISSP_REPLYTO 2.499
-score FROM_MISSP_USER 0.575
-score FROM_MISSP_XPRIO 1.482
-score FROM_MULTI_NORDNS 2.822
-score FROM_NTLD_LINKBAIT 0.936
+score FROM_MISSP_FREEMAIL 0.869
+score FROM_MISSP_MSFT 2.172
+score FROM_MISSP_REPLYTO 2.500
+score FROM_MISSP_USER 2.859
+score FROM_MISSP_XPRIO 1.969
+score FROM_MULTI_NORDNS 2.999
+score FROM_NTLD_LINKBAIT 1.240
score FROM_SUSPICIOUS_NTLD 0.500
score FROM_SUSPICIOUS_NTLD_FP 1.999
-score FROM_WSP_LEAD 2.932
+score FROM_WSP_LEAD 3.299
score FROM_WSP_TRAIL 3.099
-score FSL_CTYPE_WIN1251 1.790
+score FSL_CTYPE_WIN1251 0.898
score FSL_HAS_TINYURL 2.499
-score FSL_HELO_BARE_IP_2 2.196
-score FSL_NEW_HELO_USER 0.001 # force non-zero
-score FUZZY_BITCOIN 2.599
-score FUZZY_SECURITY 2.099
-score GB_BITCOIN_CP 0.230
-score GB_CUSTOM_HTM_URI 0.001
+score FSL_HELO_BARE_IP_2 1.600
+score FSL_NEW_HELO_USER 0.001
+score FUZZY_BITCOIN 2.699
+score FUZZY_SECURITY 2.100
+score GB_BITCOIN_CP 2.757
+score GB_CUSTOM_HTM_URI 0.001 # force non-zero
score GB_FREEMAIL_DISPTO 0.500
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500
score GOOG_REDIR_HTML_ONLY 1.499
-score GOOG_REDIR_NORDNS 1.500
-score GOOG_REDIR_NOTRDNS 0.396
+score GOOG_REDIR_NORDNS 1.499
+score GOOG_REDIR_NOTRDNS 0.001
score GOOG_STO_EMAIL_PHISH 2.999
-score GOOG_STO_HTML_PHISH 1.892
+score GOOG_STO_HTML_PHISH 0.301
score GOOG_STO_NOIMG_HTML 2.999
-score HDR_ORDER_FTSDMCXX_DIRECT 1.555
-score HDR_ORDER_FTSDMCXX_NORDNS 0.223
+score HDR_ORDER_FTSDMCXX_DIRECT 1.526
+score HDR_ORDER_FTSDMCXX_NORDNS 1.643
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HELO_MISC_IP 0.250
+score HELO_MISC_IP 0.249
score HELO_NO_DOMAIN 0.001
-score HK_NAME_FM_MR_MRS 1.052
+score HK_NAME_FM_MR_MRS 0.919
score HK_NAME_MR_MRS 1.000
-score HK_RANDOM_ENVFROM 1.000
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 1.000
+score HK_RANDOM_ENVFROM 0.999
+score HK_RANDOM_FROM 0.999
+score HK_RANDOM_REPLYTO 0.999
score HK_SCAM 0.001
score HOSTED_IMG_DIRECT_MX 3.499
score HOSTED_IMG_MULTI_PUB_01 2.999
-score HREF_EMPTY_NORDNS 0.502
+score HREF_EMPTY_NORDNS 0.500
score HTML_ENTITY_ASCII 2.999
score HTML_FONT_TINY_NORDNS 1.999
-score HTML_OFF_PAGE 2.639
+score HTML_OFF_PAGE 2.667
score HTML_SINGLET_MANY 2.499
-score HTML_TAG_BALANCE_CENTER 2.900
+score HTML_TAG_BALANCE_CENTER 2.906
score HTML_TEXT_INVISIBLE_FONT 0.001
score KHOP_HELO_FCRDNS 0.001 # force non-zero
+score LONG_IMG_URI 0.001
score LONG_INVISIBLE_TEXT 2.999
score LOTS_OF_MONEY 0.010
score LOTTO_DEPT 1.999
score LUCRATIVE 0.001
-score MALWARE_NORDNS 0.053
-score MALW_ATTACH 2.399
+score MALWARE_NORDNS 2.055
+score MALW_ATTACH 2.499
score MAY_BE_FORGED 3.899
score MILLION_HUNDRED 2.699
score MILLION_USD 1.999
-score MIMEOLE_DIRECT_TO_MX 1.948
+score MIMEOLE_DIRECT_TO_MX 0.232
score MIME_NO_TEXT 0.001
-score MIXED_CENTER_CASE 1.068
-score MIXED_ES 1.084
-score MIXED_HREF_CASE 2.000
-score MIXED_IMG_CASE 2.999
-score MONEY_FORM 0.001
+score MIXED_CENTER_CASE 2.499
+score MIXED_ES 1.593
+score MIXED_HREF_CASE 1.999
+score MIXED_IMG_CASE 0.315
+score MONEY_FORM 0.001 # force non-zero
score MONEY_FORM_SHORT 2.491
-score MONEY_FRAUD_3 2.188
-score MONEY_FRAUD_5 2.434
+score MONEY_FRAUD_3 2.520
+score MONEY_FRAUD_5 3.194
score MONEY_FRAUD_8 0.001
-score MONEY_FREEMAIL_REPTO 0.741
-score MONEY_FROM_41 1.942
+score MONEY_FREEMAIL_REPTO 0.739
+score MONEY_FROM_41 1.939
score MONEY_FROM_MISSP 0.001
score MONEY_NOHTML 2.499
-score MSM_PRIO_REPTO 0.885
-score MXG_EMAIL_FRAG 0.100
-score MXG_SPOOFED_DOCUSIGN 0.099
-score NAME_EMAIL_DIFF 1.387
+score MSM_PRIO_REPTO 0.260
+score MXG_EMAIL_FRAG 0.099
+score MXG_SPOOFED_DOCUSIGN 0.100
+score NAME_EMAIL_DIFF 1.469
score NA_DOLLARS 1.499
score NEW_PRODUCTS 1.249
-score NICE_REPLY_A -1.202
-score NORDNS_LOW_CONTRAST 1.887
+score NICE_REPLY_A -1.006
+score NORDNS_LOW_CONTRAST 1.888
score NO_FM_NAME_IP_HOSTN 0.001
score NSL_RCVD_FROM_USER 0.001
-score NUMBERONLY_BITCOIN_EXP 0.641
-score OBFU_BITCOIN 0.707
-score ODD_FREEM_REPTO 2.999
-score PDS_BTC_ID 0.500
-score PDS_BTC_MSGID 0.609
+score NUMBERONLY_BITCOIN_EXP 0.187
+score OBFU_BITCOIN 1.782
+score ODD_FREEM_REPTO 0.001 # force non-zero
+score PDS_BTC_ID 0.499
+score PDS_BTC_MSGID 0.001
score PDS_DBL_URL_TNB_RUNON 1.999
score PDS_FRNOM_TODOM_DBL_URL 1.499
-score PDS_FRNOM_TODOM_NAKED_TO 0.354
-score PDS_FROM_2_EMAILS 3.013
-score PDS_FROM_NAME_TO_DOMAIN 1.051
+score PDS_FRNOM_TODOM_NAKED_TO 0.874
+score PDS_FROM_2_EMAILS 3.080
+score PDS_FROM_NAME_TO_DOMAIN 0.531
score PDS_NAKED_TO_NUMERO 1.999
score PDS_OTHER_BAD_TLD 1.999
score PDS_RDNS_DYNAMIC_FP 0.010
-score PHP_ORIG_SCRIPT 1.404
-score PHP_SCRIPT 2.499
-score POSSIBLE_GMAIL_PHISHER 1.275
+score PHISH_ATTACH 2.299
+score PHP_ORIG_SCRIPT 1.405
+score PHP_SCRIPT 0.644
+score POSSIBLE_GMAIL_PHISHER 0.659
score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RATWARE_NO_RDNS 2.057
+score RATWARE_NO_RDNS 0.297
score REPTO_419_FRAUD_GM 0.001
score REPTO_419_FRAUD_HM_LOOSE 0.999
score RISK_FREE 2.599
-score SHORTENER_SHORT_IMG 0.115
-score SPOOFED_FREEMAIL_NO_RDNS 1.405
-score SPOOF_GMAIL_MID 1.252
+score SHORTENER_SHORT_IMG 0.075
+score SPOOFED_FREEMAIL_NO_RDNS 1.402
+score SPOOF_GMAIL_MID 1.277
score STATIC_XPRIO_OLE 0.001
score SUSP_UTF8_WORD_FROM 1.999
score TEQF_USR_POLITE 1.999
-score THIS_IS_ADV_SUSP_NTLD 0.165
+score THIS_IS_ADV_SUSP_NTLD 0.003
score TO_EQ_FM_DIRECT_MX 0.001
score TO_EQ_FM_DOM_HTML_ONLY 0.001
-score TO_EQ_FM_HTML_DIRECT 0.402
+score TO_EQ_FM_HTML_DIRECT 0.395
score TO_EQ_FM_HTML_ONLY 0.001
score TO_IN_SUBJ 0.100
score TO_NO_BRKTS_DYNIP 2.250
score TO_NO_BRKTS_FROM_MSSP 2.499
-score TO_NO_BRKTS_HTML_IMG 0.001 # force non-zero
+score TO_NO_BRKTS_HTML_IMG 0.001
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 2.499
+score TO_NO_BRKTS_MSFT 2.500
score TO_NO_BRKTS_NORDNS_HTML 1.999
score TO_NO_BRKTS_PCNT 2.499
-score TVD_DOLLARS_US 0.995
+score TVD_DOLLARS_US 0.251
+score TVD_FROM_1 1.000
score TVD_SPACE_ENCODED 2.499
score TVD_SPACE_RATIO_MINFP 0.001
score UNDISC_FREEM 2.699
score UNDISC_MONEY 2.999
score UNICODE_OBFU_ASC 2.499
-score UNICODE_OBFU_ZW_MANY 2.999
+score UNICODE_OBFU_ZW_MANY 2.490
score UPPERCASE_URI 2.749
-score URI_DOTCN_LOGIN 1.499
-score URI_DOTCN_SPOOF 3.000
+score URI_DOTCN_LOGIN 1.500
+score URI_DOTCN_SPOOF 2.999
score URI_EXCESS_SLASHES 2.499
-score URI_FIREBASEAPP 3.000
+score URI_FIREBASEAPP 2.999
score URI_GOOGLE_PROXY 2.699
-score URI_IPFS 3.499
-score URI_IPFSIO 1.655
-score URI_PHISH 3.999
+score URI_IPFS 2.880
+score URI_IPFSIO 2.093
+score URI_PHISH 4.000
score URI_TRY_3LD 1.999
score URI_WPADMIN 2.899
-score URI_WP_HACKED 2.100
-score URI_WP_HACKED_2 2.499
-score VFY_ACCT_NORDNS 2.500
+score URI_WP_HACKED 2.103
+score URI_WP_HACKED_2 2.500
+score VFY_ACCT_NORDNS 2.499
score WIKI_IMG 2.499
score WORD_INVIS 2.999
score WORD_INVIS_MANY 2.999
score XM_RANDOM 2.499
score XM_RECPTID 2.999
-score XPRIO 0.699
+score XPRIO 0.692
score AC_HTML_NONSENSE_TAGS 1.000
score AC_POST_EXTRAS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -288,7 +290,6 @@ score GOOG_STO_IMG_HTML 1.0
score GOOG_STO_IMG_NOHTML 1.000
score HAS_X_NO_RELAY 1.000
score HAS_X_OUTGOING_SPAM_STAT 1.000
-score HDRS_LCASE 0.100
score HDRS_MISSP 1.000
score HEXHASH_WORD 1.000
score HK_CTE_RAW 1.000
@@ -310,10 +311,8 @@ score LINKEDIN_IMG_NOT_RCVD_LNKN 1.0
score LIST_PRTL_PUMPDUMP 1.000
score LIST_PRTL_SAME_USER 1.000
score LONG_HEX_URI 1.000
-score LONG_IMG_URI 1.000
score MALF_HTML_B64 1.000
score MALWARE_PASSWORD 1.000
-score MANY_HDRS_LCASE 0.100
score MC_MSFT_LISTMGR 1.000
score MIXED_AREA_CASE 1.000
score MIXED_FONT_CASE 1.000
@@ -399,7 +398,6 @@ score URI_OPTOUT_3LD 1.0
score URI_PHP_REDIR 1.000
score URI_REPLIT_DEV 1.000
score URI_TRY_USME 1.000
-score URI_W3SIPFS 1.000
score URI_WP_DIRINDEX 1.000
score USB_DRIVES 1.000
score VISTA_COST 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 Thu Jul 30 20:54:14 2026 (r1936750)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Fri Jul 31 02:38:27 2026 (r1936751)
@@ -158,6 +158,7 @@ score FSL_HAS_TINYURL 3.699
score FSL_HELO_BARE_IP_2 1.373
score FSL_NEW_HELO_USER 0.001
score FUZZY_BITCOIN 0.001
+score FUZZY_SECURITY 0.001
score GAPPY_SALES_LEADS_FREEM 1.000
score GB_BITCOIN_CP 2.832
score GB_CUSTOM_HTM_URI 0.001
@@ -239,6 +240,7 @@ score MALF_HTML_B64 1.000
score MALWARE_NORDNS 1.000
score MALWARE_PASSWORD 1.000
score MALW_ATTACH 2.699
+score MANY_HDRS_LCASE 0.001
score MAY_BE_FORGED 4.199
score MC_MSFT_LISTMGR 1.000
score MILLION_HUNDRED 2.329
@@ -290,6 +292,7 @@ score PDS_FROM_2_EMAILS 3.305
score PDS_FROM_NAME_TO_DOMAIN 1.038
score PDS_HELO_SPF_FAIL 1.000
score PDS_NAKED_TO_NUMERO 1.999
+score PDS_OTHER_BAD_TLD 0.001
score PDS_RDNS_DYNAMIC_FP 0.010
score PHISH_AZURE_CLOUDAPP 3.500
score PHISH_FBASEAPP 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 Thu Jul 30 20:54:14 2026 (r1936750)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Fri Jul 31 02:38:27 2026 (r1936751)
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 167086 15.448% (93.318% of non-spam corpus)
-# Correctly spam: 687142 63.530% (76.134% of spam corpus)
-# False positives: 11964 1.106% (6.682% of nonspam, 1609140 weighted)
-# False negatives: 215405 19.915% (23.866% of spam, 344822 weighted)
+# Correctly non-spam: 157925 14.731% (92.971% of non-spam corpus)
+# Correctly spam: 698317 65.137% (77.400% of spam corpus)
+# False positives: 11939 1.114% (7.029% of nonspam, 1692404 weighted)
+# False negatives: 203896 19.019% (22.600% of spam, 338495 weighted)
# Average score for spam: 7.6 nonspam: 0.7
-# Average for false-pos: 5.3 false-neg: 1.6
-# TOTAL: 1081597 100.00%
+# Average for false-pos: 5.3 false-neg: 1.7
+# TOTAL: 1072077 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 21037 93.53%
-# Correctly spam: 86017 76.35%
-# False positives: 1456 6.47%
-# False negatives: 26649 23.65%
-# TCR(l=50): 1.132902 SpamRecall: 76.347% SpamPrec: 98.335%
+# Correctly non-spam: 19876 92.89%
+# Correctly spam: 86883 77.14%
+# False positives: 1521 7.11%
+# False negatives: 25747 22.86%
+# TCR(l=50): 1.106418 SpamRecall: 77.140% SpamPrec: 98.279%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 177221 98.98%
-# Correctly spam: 191105 21.17%
-# False positives: 1829 1.02%
-# False negatives: 711442 78.83%
-# TCR(l=50): 1.124120 SpamRecall: 21.174% SpamPrec: 99.052%
+# Correctly non-spam: 168028 98.92%
+# Correctly spam: 191760 21.25%
+# False positives: 1836 1.08%
+# False negatives: 710453 78.75%
+# TCR(l=50): 1.124599 SpamRecall: 21.254% SpamPrec: 99.052%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 22248 98.91%
-# Correctly spam: 23871 21.19%
-# False positives: 245 1.09%
-# False negatives: 88795 78.81%
-# TCR(l=50): 1.115008 SpamRecall: 21.187% SpamPrec: 98.984%
+# Correctly non-spam: 21151 98.85%
+# Correctly spam: 23719 21.06%
+# False positives: 246 1.15%
+# False negatives: 88911 78.94%
+# TCR(l=50): 1.112824 SpamRecall: 21.059% SpamPrec: 98.974%