svn commit: r1936706 - spamassassin/trunk/rulesrc/scores

[email protected] Thu, 30 Jul 2026 02:47:47 -0000
Newsgroups gmane.mail.spam.spamassassin.cvs
Message-ID <178537966747.78567.4262704407531704277@svn03-he-fi>
Author: spamassassin_role
Date: Thu Jul 30 02:47:47 2026
New Revision: 1936706

Log:
updated scores for revision 1936693 active rules added since last mass-check [set1 carried forward r1936684: insufficient ham contributors]

Modified:
   spamassassin/trunk/rulesrc/scores/72_scores.cf
   spamassassin/trunk/rulesrc/scores/scores-set0
   spamassassin/trunk/rulesrc/scores/scores-set1
   spamassassin/trunk/rulesrc/scores/scores-set2
   spamassassin/trunk/rulesrc/scores/scores-set3
   spamassassin/trunk/rulesrc/scores/stats-set0

Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf	Thu Jul 30 00:45:03 2026	(r1936705)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf	Thu Jul 30 02:47:47 2026	(r1936706)
@@ -1,7 +1,7 @@
 score ACCT_PHISHING_MANY                    2.999 2.780 2.999 2.780
 score AC_BR_BONANZA                         0.001 0.001 0.001 0.001
 score AC_DIV_BONANZA                        0.001 0.001 0.001 0.001
-score AC_FROM_MANY_DOTS                     2.499 2.499 2.499 2.499
+score AC_FROM_MANY_DOTS                     2.500 2.499 2.500 2.499
 score AC_HTML_NONSENSE_TAGS                 1.000 1.000 1.000 1.000
 score AC_POST_EXTRAS                        1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS1               1.000 1.000 1.000 1.000
@@ -14,47 +14,47 @@ score AC_SPAMMY_URI_PATTERNS4
 score AC_SPAMMY_URI_PATTERNS8               1.000 1.000 1.000 1.000
 score AC_SPAMMY_URI_PATTERNS9               1.000 1.000 1.000 1.000
 score ADMAIL                                0.001 0.001 0.001 0.001
-score ADMITS_SPAM                           1.999 1.999 1.999 1.999
+score ADMITS_SPAM                           2.000 1.999 2.000 1.999
 score ADULT_DATING_COMPANY                  10.000 10.000 10.000 10.000
 score ADVANCE_FEE_2_NEW_FORM                1.000 1.000 1.000 1.000
 score ADVANCE_FEE_2_NEW_FRM_MNY             1.000 2.499 1.000 2.499
 score ADVANCE_FEE_2_NEW_MONEY               1.999 1.999 1.999 1.999
-score ADVANCE_FEE_3_NEW                     2.500 3.499 2.500 3.499
-score ADVANCE_FEE_3_NEW_MONEY               3.199 2.911 3.199 2.911
-score ADVANCE_FEE_4_NEW                     2.799 2.799 2.799 2.799
+score ADVANCE_FEE_3_NEW                     2.499 3.499 2.499 3.499
+score ADVANCE_FEE_3_NEW_MONEY               3.200 2.911 3.200 2.911
+score ADVANCE_FEE_4_NEW                     2.899 2.799 2.899 2.799
 score ADVANCE_FEE_4_NEW_MONEY               0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY             1.019 0.150 1.019 0.150
-score ADVANCE_FEE_5_NEW_MONEY               2.899 2.999 2.899 2.999
+score ADVANCE_FEE_5_NEW_FRM_MNY             1.043 0.150 1.043 0.150
+score ADVANCE_FEE_5_NEW_MONEY               3.099 2.999 3.099 2.999
 score AD_PREFS                              0.001 0.001 0.001 0.001
 score ALIBABA_IMG_NOT_RCVD_ALI              1.000 1.000 1.000 1.000
-score AMAZON_IMG_NOT_RCVD_AMZN              2.500 2.499 2.500 2.499
+score AMAZON_IMG_NOT_RCVD_AMZN              2.499 2.499 2.499 2.499
 score APP_DEVELOPMENT_FREEM                 1.000 1.000 1.000 1.000
 score APP_DEVELOPMENT_NORDNS                1.000 1.000 1.000 1.000
 score ARC_SIGNED                            0.001 0.001 0.001 0.001
 score ARC_TRUSTED                           0.001 0.001 0.001 0.001
 score ARC_VALID                             0.001 0.001 0.001 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2          0.537 1.435 0.537 1.435
+score AXB_XMAILER_MIMEOLE_OL_024C2          2.923 1.435 2.923 1.435
 score BEBEE_IMG_NOT_RCVD_BB                 1.000 1.000 1.000 1.000
-score BIGNUM_EMAILS_FREEM                   1.996 2.308 1.996 2.308
-score BIGNUM_EMAILS_MANY                    2.202 3.000 2.202 3.000
+score BIGNUM_EMAILS_FREEM                   1.093 2.308 1.093 2.308
+score BIGNUM_EMAILS_MANY                    2.652 3.000 2.652 3.000
 score BITCOIN_BOMB                          1.000 1.000 1.000 1.000
-score BITCOIN_DEADLINE                      2.197 1.834 2.197 1.834
+score BITCOIN_DEADLINE                      2.177 1.834 2.177 1.834
 score BITCOIN_DIRECT                        3.499 0.001 3.499 0.001
-score BITCOIN_EXTORT_01                     4.470 4.752 4.470 4.752
+score BITCOIN_EXTORT_01                     2.202 4.752 2.202 4.752
 score BITCOIN_EXTORT_02                     1.000 1.000 1.000 1.000
 score BITCOIN_IMGUR                         1.000 1.000 1.000 1.000
-score BITCOIN_MALF_HTML                     2.037 0.001 2.037 0.001
-score BITCOIN_MALWARE                       1.000 1.000 1.000 1.000
+score BITCOIN_MALF_HTML                     3.091 0.001 3.091 0.001
+score BITCOIN_MALWARE                       3.499 1.000 3.499 1.000
 score BITCOIN_OBFU_SUBJ                     1.000 1.000 1.000 1.000
-score BITCOIN_ONAN                          1.340 2.186 1.340 2.186
+score BITCOIN_ONAN                          2.999 2.186 2.999 2.186
 score BITCOIN_PAY_ME                        1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_01                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_02                       1.519 2.499 1.519 2.499
-score BITCOIN_SPAM_03                       1.000 1.000 1.000 1.000
+score BITCOIN_SPAM_02                       1.120 2.499 1.120 2.499
+score BITCOIN_SPAM_03                       2.499 1.000 2.499 1.000
 score BITCOIN_SPAM_04                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_05                       0.001 2.499 0.001 2.499
 score BITCOIN_SPAM_06                       1.000 1.000 1.000 1.000
-score BITCOIN_SPAM_07                       1.338 2.492 1.338 2.492
+score BITCOIN_SPAM_07                       2.453 2.492 2.453 2.492
 score BITCOIN_SPAM_08                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_09                       1.000 1.000 1.000 1.000
 score BITCOIN_SPAM_10                       1.000 1.000 1.000 1.000
@@ -62,12 +62,12 @@ score BITCOIN_SPAM_11
 score BITCOIN_SPAM_12                       1.000 1.000 1.000 1.000
 score BITCOIN_SPF_ONLYALL                   0.001 1.000 0.001 1.000
 score BITCOIN_TOEQFM                        3.499 2.321 3.499 2.321
-score BITCOIN_VISTA                         2.042 3.499 2.042 3.499
-score BITCOIN_XPRIO                         0.459 2.499 0.459 2.499
-score BITCOIN_YOUR_INFO                     2.999 2.716 2.999 2.716
-score BODY_URI_ONLY                         2.352 0.235 2.352 0.235
+score BITCOIN_VISTA                         2.743 3.499 2.743 3.499
+score BITCOIN_XPRIO                         2.499 2.499 2.499 2.499
+score BITCOIN_YOUR_INFO                     2.497 2.716 2.497 2.716
+score BODY_URI_ONLY                         2.353 0.235 2.353 0.235
 score BOGUS_MIME_VERSION                    1.000 1.000 1.000 1.000
-score BOGUS_MSM_HDRS                        2.019 0.479 2.019 0.479
+score BOGUS_MSM_HDRS                        1.390 0.479 1.390 0.479
 score BOMB_FREEM                            1.000 1.000 1.000 1.000
 score BOMB_MONEY                            1.000 1.000 1.000 1.000
 score BTC_ORG                               1.000 1.000 1.000 1.000
@@ -76,18 +76,18 @@ score CANT_SEE_AD
 score CN_PHISH_JP_01                        1.000 1.000 1.000 1.000
 score CN_PHISH_JP_02                        2.499 2.499 2.499 2.499
 score CN_PHISH_JP_03                        1.000 1.000 1.000 1.000
-score CN_PHISH_JP_04                        1.645 1.656 1.645 1.656
+score CN_PHISH_JP_04                        1.278 1.656 1.278 1.656
 score CN_PHISH_JP_06                        1.000 1.000 1.000 1.000
 score CN_PHISH_JP_07                        1.000 1.000 1.000 1.000
 score COMMENT_GIBBERISH                     1.000 1.000 1.000 1.000
-score COMPENSATION                          1.499 1.499 1.499 1.499
+score COMPENSATION                          0.712 1.499 0.712 1.499
 score CONTENT_AFTER_HTML                    0.001 0.001 0.001 0.001
 score CONTENT_AFTER_HTML_WEAK               1.000 1.000 1.000 1.000
-score CTE_8BIT_MISMATCH                     0.350 0.001 0.350 0.001
+score CTE_8BIT_MISMATCH                     0.351 0.001 0.351 0.001
 score DATE_IN_FUTURE_96_Q                   4.099 4.199 4.099 4.199
 score DAY_I_EARNED                          1.000 1.000 1.000 1.000
-score DEAR_BENEFICIARY                      2.899 2.999 2.899 2.999
-score DEAR_EMAIL                            1.500 1.499 1.500 1.499
+score DEAR_BENEFICIARY                      3.000 2.999 3.000 2.999
+score DEAR_EMAIL                            1.499 1.499 1.499 1.499
 score DKIMWL_BL                             0.001 1.000 0.001 1.000
 score DKIMWL_BLOCKED                        0.001 0.001 0.001 0.001
 score DKIMWL_WL_HIGH                        0.001 -1.580 0.001 -1.580
@@ -95,7 +95,7 @@ score DKIMWL_WL_MED
 score DKIMWL_WL_MEDHI                       0.001 -1.000 0.001 -1.000
 score DMARC_PERMERROR                       0.001 0.001 0.001 0.001
 score DMARC_TEMPERROR                       0.001 0.001 0.001 0.001
-score DOS_BODY_HIGH_NO_MID                  3.899 4.000 3.899 4.000
+score DOS_BODY_HIGH_NO_MID                  3.900 4.000 3.900 4.000
 score DOTGOV_IMAGE                          1.000 1.000 1.000 1.000
 score DSN_NO_MIMEVERSION                    1.999 1.999 1.999 1.999
 score DYNAMIC_IMGUR                         1.000 1.000 1.000 1.000
@@ -110,9 +110,9 @@ score FILL_THIS_FORM
 score FONT_INVIS_DIRECT                     3.499 1.977 3.499 1.977
 score FONT_INVIS_DOTGOV                     1.000 1.000 1.000 1.000
 score FONT_INVIS_HTML_NOHTML                1.000 1.000 1.000 1.000
-score FONT_INVIS_LONG_LINE                  1.995 1.729 1.995 1.729
+score FONT_INVIS_LONG_LINE                  1.997 1.729 1.997 1.729
 score FONT_INVIS_MSGID                      2.499 2.499 2.499 2.499
-score FONT_INVIS_NORDNS                     0.589 0.001 0.589 0.001
+score FONT_INVIS_NORDNS                     0.598 0.001 0.598 0.001
 score FONT_INVIS_POSTEXTRAS                 1.000 1.000 1.000 1.000
 score FORM_FRAUD                            1.000 0.999 1.000 0.999
 score FORM_FRAUD_3                          2.499 2.599 2.499 2.599
@@ -121,7 +121,7 @@ score FOUND_YOU
 score FREEMAIL_FORGED_FROMDOMAIN            0.001 0.001 0.001 0.001
 score FREEM_FRNUM_UNICD_EMPTY               1.000 1.000 1.000 1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB            1.000 1.000 1.000 1.000
-score FROM_ADDR_WS                          2.675 2.999 2.675 2.999
+score FROM_ADDR_WS                          2.999 2.999 2.999 2.999
 score FROM_BANK_NOAUTH                      0.001 0.999 0.001 0.999
 score FROM_FMBLA_NDBLOCKED                  0.001 0.001 0.001 0.001
 score FROM_FMBLA_NEWDOM                     0.001 1.289 0.001 1.289
@@ -133,38 +133,39 @@ score FROM_GOV_SPOOF
 score FROM_IN_TO_AND_SUBJ                   2.399 2.599 2.399 2.599
 score FROM_LONG_DOM                         1.000 1.000 1.000 1.000
 score FROM_LONG_DOM_MINFP                   2.499 0.648 2.499 0.648
-score FROM_MISSPACED                        0.775 0.037 0.775 0.037
-score FROM_MISSP_DYNIP                      1.936 2.999 1.936 2.999
+score FROM_MISSPACED                        1.304 0.037 1.304 0.037
+score FROM_MISSP_DYNIP                      2.217 2.999 2.217 2.999
 score FROM_MISSP_EH_MATCH                   1.999 1.828 1.999 1.828
-score FROM_MISSP_FREEMAIL                   1.218 3.299 1.218 3.299
-score FROM_MISSP_MSFT                       3.085 0.794 3.085 0.794
+score FROM_MISSP_FREEMAIL                   0.694 3.299 0.694 3.299
+score FROM_MISSP_MSFT                       1.684 0.794 1.684 0.794
 score FROM_MISSP_REPLYTO                    2.499 2.359 2.499 2.359
 score FROM_MISSP_SPF_FAIL                   0.001 1.181 0.001 1.181
-score FROM_MISSP_USER                       3.004 0.094 3.004 0.094
-score FROM_MISSP_XPRIO                      0.919 0.490 0.919 0.490
-score FROM_MULTI_NORDNS                     3.039 3.902 3.039 3.902
+score FROM_MISSP_USER                       0.575 0.094 0.575 0.094
+score FROM_MISSP_XPRIO                      1.482 0.490 1.482 0.490
+score FROM_MULTI_NORDNS                     2.822 3.902 2.822 3.902
 score FROM_NEWDOM_BTC                       0.001 1.000 0.001 1.000
-score FROM_NTLD_LINKBAIT                    1.000 1.000 1.000 1.000
+score FROM_NTLD_LINKBAIT                    0.936 1.000 0.936 1.000
 score FROM_NTLD_REPLY_FREEMAIL              1.000 1.000 1.000 1.000
 score FROM_NUMBERO_NEWDOMAIN                0.001 1.000 0.001 1.000
 score FROM_PAYPAL_SPOOF                     0.001 1.000 0.001 1.000
-score FROM_SUSPICIOUS_NTLD                  0.499 0.500 0.499 0.500
+score FROM_SUSPICIOUS_NTLD                  0.500 0.500 0.500 0.500
 score FROM_SUSPICIOUS_NTLD_FP               1.999 1.999 1.999 1.999
-score FROM_WSP_LEAD                         2.520 3.200 2.520 3.200
-score FROM_WSP_TRAIL                        3.100 2.128 3.100 2.128
+score FROM_WSP_LEAD                         2.932 3.200 2.932 3.200
+score FROM_WSP_TRAIL                        3.099 2.128 3.099 2.128
 score FSL_BULK_SIG                          0.001 0.001 0.001 0.001
-score FSL_CTYPE_WIN1251                     0.541 2.703 0.541 2.703
-score FSL_HAS_TINYURL                       2.498 3.699 2.498 3.699
-score FSL_HELO_BARE_IP_2                    1.599 1.373 1.599 1.373
+score FSL_CTYPE_WIN1251                     1.790 2.703 1.790 2.703
+score FSL_HAS_TINYURL                       2.499 3.699 2.499 3.699
+score FSL_HELO_BARE_IP_2                    2.196 1.373 2.196 1.373
 score FSL_NEW_HELO_USER                     0.001 0.001 0.001 0.001
 score FUZZY_BITCOIN                         2.599 0.001 2.599 0.001
+score FUZZY_SECURITY                        2.099 0.001 2.099 0.001
 score GAPPY_SALES_LEADS_FREEM               1.000 1.000 1.000 1.000
-score GB_BITCOIN_CP                         0.730 2.832 0.730 2.832
+score GB_BITCOIN_CP                         0.230 2.832 0.230 2.832
 score GB_CUSTOM_HTM_URI                     0.001 0.001 0.001 0.001
 score GB_FAKE_RF_SHORT                      1.000 1.000 1.000 1.000
 score GB_FORGED_MUA_POSTFIX                 1.000 1.000 1.000 1.000
 score GB_FREEMAIL_DISPTO                    0.500 0.499 0.500 0.499
-score GB_FREEMAIL_DISPTO_NOTFREEM           0.499 0.500 0.499 0.500
+score GB_FREEMAIL_DISPTO_NOTFREEM           0.500 0.500 0.500 0.500
 score GB_FROM_METAMASK                      1.000 1.000 1.000 1.000
 score GB_GOOGLE_OBFUR                       0.750 0.750 0.750 0.750
 score GB_HASHBL_BTC                         1.000 3.721 1.000 3.721
@@ -175,12 +176,12 @@ score GOOGLE_DRIVE_REPLY_BAD_NTLD
 score GOOG_MALWARE_DNLD                     1.000 1.000 1.000 1.000
 score GOOG_REDIR_FRAUD                      1.000 1.000 1.000 1.000
 score GOOG_REDIR_HTML_ONLY                  1.499 1.500 1.499 1.500
-score GOOG_REDIR_NORDNS                     1.499 1.500 1.499 1.500
-score GOOG_REDIR_NOTRDNS                    0.400 0.641 0.400 0.641
+score GOOG_REDIR_NORDNS                     1.500 1.500 1.500 1.500
+score GOOG_REDIR_NOTRDNS                    0.396 0.641 0.396 0.641
 score GOOG_REDIR_SHORT                      1.000 1.000 1.000 1.000
 score GOOG_REDIR_STATICRDNS                 1.000 1.000 1.000 1.000
 score GOOG_STO_EMAIL_PHISH                  2.999 2.999 2.999 2.999
-score GOOG_STO_HTML_PHISH                   2.318 1.682 2.318 1.682
+score GOOG_STO_HTML_PHISH                   1.892 1.682 1.892 1.682
 score GOOG_STO_HTML_PHISH_MANY              1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_HTML                     1.000 1.000 1.000 1.000
 score GOOG_STO_IMG_NOHTML                   1.000 1.000 1.000 1.000
@@ -189,18 +190,18 @@ score HAS_X_NO_RELAY
 score HAS_X_OUTGOING_SPAM_STAT              1.000 1.000 1.000 1.000
 score HDRS_LCASE                            0.100 0.001 0.100 0.001
 score HDRS_MISSP                            1.000 1.000 1.000 1.000
-score HDR_ORDER_FTSDMCXX_DIRECT             1.782 1.470 1.782 1.470
-score HDR_ORDER_FTSDMCXX_NORDNS             1.447 2.898 1.447 2.898
+score HDR_ORDER_FTSDMCXX_DIRECT             1.555 1.470 1.555 1.470
+score HDR_ORDER_FTSDMCXX_NORDNS             0.223 2.898 0.223 2.898
 score HEADER_FROM_DIFFERENT_DOMAINS         0.001 0.250 0.001 0.250
 score HELO_MISC_IP                          0.250 0.249 0.250 0.249
 score HELO_NO_DOMAIN                        0.001 0.434 0.001 0.434
 score HEXHASH_WORD                          1.000 1.000 1.000 1.000
 score HK_CTE_RAW                            1.000 1.000 1.000 1.000
-score HK_NAME_FM_MR_MRS                     1.047 0.001 1.047 0.001
-score HK_NAME_MR_MRS                        0.999 0.999 0.999 0.999
-score HK_RANDOM_ENVFROM                     0.999 0.001 0.999 0.001
-score HK_RANDOM_FROM                        0.999 1.000 0.999 1.000
-score HK_RANDOM_REPLYTO                     0.999 0.999 0.999 0.999
+score HK_NAME_FM_MR_MRS                     1.052 0.001 1.052 0.001
+score HK_NAME_MR_MRS                        1.000 0.999 1.000 0.999
+score HK_RANDOM_ENVFROM                     1.000 0.001 1.000 0.001
+score HK_RANDOM_FROM                        1.000 1.000 1.000 1.000
+score HK_RANDOM_REPLYTO                     1.000 0.999 1.000 0.999
 score HK_RCVD_IP_MULTICAST                  1.000 1.000 1.000 1.000
 score HK_SCAM                               0.001 0.001 0.001 0.001
 score HOSTED_IMG_DIRECT_MX                  3.499 1.000 3.499 1.000
@@ -208,17 +209,17 @@ score HOSTED_IMG_DQ_UNSUB
 score HOSTED_IMG_FREEM                      1.000 1.000 1.000 1.000
 score HOSTED_IMG_MULTI                      1.000 1.000 1.000 1.000
 score HOSTED_IMG_MULTI_PUB_01               2.999 2.999 2.999 2.999
-score HREF_EMPTY_NORDNS                     0.600 1.379 0.600 1.379
+score HREF_EMPTY_NORDNS                     0.502 1.379 0.502 1.379
 score HREF_EMPTY_PHPMAIL                    1.000 1.000 1.000 1.000
 score HREF_EMPTY_XANTIABUSE                 1.000 1.000 1.000 1.000
 score HREF_EMPTY_XAUTHED                    1.000 1.000 1.000 1.000
 score HTML_ENTITY_ASCII                     2.999 2.999 2.999 2.999
 score HTML_ENTITY_ASCII_TINY                1.000 1.000 1.000 1.000
-score HTML_FONT_TINY_NORDNS                 2.000 1.999 2.000 1.999
-score HTML_OFF_PAGE                         2.729 2.999 2.729 2.999
+score HTML_FONT_TINY_NORDNS                 1.999 1.999 1.999 1.999
+score HTML_OFF_PAGE                         2.639 2.999 2.639 2.999
 score HTML_SHRT_CMNT_OBFU_MANY              1.000 1.000 1.000 1.000
 score HTML_SINGLET_MANY                     2.499 1.992 2.499 1.992
-score HTML_TAG_BALANCE_CENTER               4.199 2.387 4.199 2.387
+score HTML_TAG_BALANCE_CENTER               2.900 2.387 2.900 2.387
 score HTML_TEXT_INVISIBLE_FONT              0.001 0.001 0.001 0.001
 score HTML_TEXT_INVISIBLE_STYLE             1.000 1.000 1.000 1.000
 score IMG_ONLY_FM_DOM_INFO                  1.000 1.000 1.000 1.000
@@ -236,71 +237,73 @@ score LOTS_OF_MONEY
 score LOTTO_DEPT                            1.999 1.999 1.999 1.999
 score LUCRATIVE                             0.001 0.001 0.001 0.001
 score MALF_HTML_B64                         1.000 1.000 1.000 1.000
-score MALWARE_NORDNS                        1.000 1.000 1.000 1.000
+score MALWARE_NORDNS                        0.053 1.000 0.053 1.000
 score MALWARE_PASSWORD                      1.000 1.000 1.000 1.000
-score MALW_ATTACH                           2.499 2.699 2.499 2.699
+score MALW_ATTACH                           2.399 2.699 2.399 2.699
+score MANY_HDRS_LCASE                       0.100 0.001 0.100 0.001
 score MAY_BE_FORGED                         3.899 4.199 3.899 4.199
 score MC_MSFT_LISTMGR                       1.000 1.000 1.000 1.000
-score MILLION_HUNDRED                       2.700 2.329 2.700 2.329
+score MILLION_HUNDRED                       2.699 2.329 2.699 2.329
 score MILLION_USD                           1.999 1.999 1.999 1.999
-score MIMEOLE_DIRECT_TO_MX                  1.715 1.237 1.715 1.237
+score MIMEOLE_DIRECT_TO_MX                  1.948 1.237 1.948 1.237
 score MIME_NO_TEXT                          0.001 0.001 0.001 0.001
 score MIXED_AREA_CASE                       1.000 1.000 1.000 1.000
-score MIXED_CENTER_CASE                     1.729 2.499 1.729 2.499
-score MIXED_ES                              1.083 0.001 1.083 0.001
+score MIXED_CENTER_CASE                     1.068 2.499 1.068 2.499
+score MIXED_ES                              1.084 0.001 1.084 0.001
 score MIXED_FONT_CASE                       1.000 1.000 1.000 1.000
-score MIXED_HREF_CASE                       1.999 1.999 1.999 1.999
-score MIXED_IMG_CASE                        0.611 1.695 0.611 1.695
+score MIXED_HREF_CASE                       2.000 1.999 2.000 1.999
+score MIXED_IMG_CASE                        2.999 1.695 2.999 1.695
 score MONERO_DEADLINE                       1.000 1.000 1.000 1.000
 score MONERO_EXTORT_01                      1.000 1.000 1.000 1.000
 score MONERO_MALWARE                        1.000 1.000 1.000 1.000
 score MONERO_PAY_ME                         1.000 1.000 1.000 1.000
 score MONEY_FORM                            0.001 0.001 0.001 0.001
-score MONEY_FORM_SHORT                      2.495 2.453 2.495 2.453
-score MONEY_FRAUD_3                         1.982 2.697 1.982 2.697
-score MONEY_FRAUD_5                         2.674 1.649 2.674 1.649
+score MONEY_FORM_SHORT                      2.491 2.453 2.491 2.453
+score MONEY_FRAUD_3                         2.188 2.697 2.188 2.697
+score MONEY_FRAUD_5                         2.434 1.649 2.434 1.649
 score MONEY_FRAUD_8                         0.001 0.001 0.001 0.001
-score MONEY_FREEMAIL_REPTO                  0.740 0.001 0.740 0.001
-score MONEY_FROM_41                         0.564 1.999 0.564 1.999
+score MONEY_FREEMAIL_REPTO                  0.741 0.001 0.741 0.001
+score MONEY_FROM_41                         1.942 1.999 1.942 1.999
 score MONEY_FROM_MISSP                      0.001 0.001 0.001 0.001
-score MONEY_NOHTML                          2.500 1.569 2.500 1.569
+score MONEY_NOHTML                          2.499 1.569 2.499 1.569
 score MSGID_DOLLARS_URI_IMG                 1.000 1.000 1.000 1.000
 score MSGID_HDR_MALF                        1.000 1.000 1.000 1.000
-score MSM_PRIO_REPTO                        1.625 0.818 1.625 0.818
+score MSM_PRIO_REPTO                        0.885 0.818 0.885 0.818
 score MXG_EMAIL_FRAG                        0.100 0.100 0.100 0.100
 score MXG_SPOOFED_DOCUSIGN                  0.099 0.100 0.099 0.100
-score NAME_EMAIL_DIFF                       1.051 0.001 1.051 0.001
+score NAME_EMAIL_DIFF                       1.387 0.001 1.387 0.001
 score NA_DOLLARS                            1.499 1.499 1.499 1.499
 score NEWEGG_IMG_NOT_RCVD_NEGG              1.000 1.000 1.000 1.000
 score NEW_PRODUCTS                          1.249 1.250 1.249 1.250
-score NICE_REPLY_A                          -2.147 -2.360 -2.147 -2.360
-score NORDNS_LOW_CONTRAST                   1.886 2.499 1.886 2.499
+score NICE_REPLY_A                          -1.202 -2.360 -1.202 -2.360
+score NORDNS_LOW_CONTRAST                   1.887 2.499 1.887 2.499
 score NO_FM_NAME_IP_HOSTN                   0.001 1.552 0.001 1.552
 score NSL_RCVD_FROM_USER                    0.001 0.001 0.001 0.001
-score NUMBERONLY_BITCOIN_EXP                1.038 1.999 1.038 1.999
-score OBFU_BITCOIN                          1.547 1.629 1.547 1.629
-score ODD_FREEM_REPTO                       0.001 0.001 0.001 0.001
+score NUMBERONLY_BITCOIN_EXP                0.641 1.999 0.641 1.999
+score OBFU_BITCOIN                          0.707 1.629 0.707 1.629
+score ODD_FREEM_REPTO                       2.999 0.001 2.999 0.001
 score PAYPAL_PHISH_07                       1.000 1.000 1.000 1.000
-score PDS_BTC_ID                            0.499 0.499 0.499 0.499
-score PDS_BTC_MSGID                         0.001 0.414 0.001 0.414
+score PDS_BTC_ID                            0.500 0.499 0.500 0.499
+score PDS_BTC_MSGID                         0.609 0.414 0.609 0.414
 score PDS_DBL_URL_TNB_RUNON                 1.999 1.999 1.999 1.999
 score PDS_FRNOM_TODOM_DBL_URL               1.499 1.499 1.499 1.499
-score PDS_FRNOM_TODOM_NAKED_TO              0.508 0.541 0.508 0.541
-score PDS_FROM_2_EMAILS                     2.668 3.305 2.668 3.305
-score PDS_FROM_NAME_TO_DOMAIN               0.896 1.038 0.896 1.038
+score PDS_FRNOM_TODOM_NAKED_TO              0.354 0.541 0.354 0.541
+score PDS_FROM_2_EMAILS                     3.013 3.305 3.013 3.305
+score PDS_FROM_NAME_TO_DOMAIN               1.051 1.038 1.051 1.038
 score PDS_HELO_SPF_FAIL                     0.001 1.000 0.001 1.000
 score PDS_NAKED_TO_NUMERO                   1.999 1.999 1.999 1.999
+score PDS_OTHER_BAD_TLD                     1.999 0.001 1.999 0.001
 score PDS_RDNS_DYNAMIC_FP                   0.010 0.010 0.010 0.010
 score PHISH_AZURE_CLOUDAPP                  3.500 3.500 3.500 3.500
 score PHISH_FBASEAPP                        1.000 1.000 1.000 1.000
 score PHONE_ORDERSCAM                       1.000 1.000 1.000 1.000
 score PHP_NOVER_MUA                         1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT                       1.400 0.800 1.400 0.800
-score PHP_SCRIPT                            0.643 2.499 0.643 2.499
+score PHP_ORIG_SCRIPT                       1.404 0.800 1.404 0.800
+score PHP_SCRIPT                            2.499 2.499 2.499 2.499
 score PHP_SCRIPT_MUA                        1.000 1.000 1.000 1.000
 score PMP_SPAM                              1.000 1.000 1.000 1.000
 score POSSIBLE_AMAZON_PHISH_03              1.000 1.000 1.000 1.000
-score POSSIBLE_GMAIL_PHISHER                1.491 3.799 1.491 3.799
+score POSSIBLE_GMAIL_PHISHER                1.275 3.799 1.275 3.799
 score POSSIBLE_PAYPAL_PHISH_02              1.000 1.000 1.000 1.000
 score PP_MIME_FAKE_ASCII_TEXT               0.001 0.239 0.001 0.239
 score PP_TOO_MUCH_UNICODE02                 0.500 0.500 0.500 0.500
@@ -310,7 +313,7 @@ score PUMPDUMP_MULTI
 score RAND_HEADER_LIST_SPOOF                1.000 1.000 1.000 1.000
 score RAND_HEADER_MANY                      1.000 1.000 1.000 1.000
 score RAND_MKTG_HEADER                      1.000 1.000 1.000 1.000
-score RATWARE_NO_RDNS                       2.073 1.060 2.073 1.060
+score RATWARE_NO_RDNS                       2.057 1.060 2.057 1.060
 score RCVD_DOTEDU_SHORT                     1.000 1.000 1.000 1.000
 score RCVD_DOTEDU_SUSP_URI                  1.000 1.000 1.000 1.000
 score RCVD_IN_IADB_DMARC                    0.001 0.001 0.001 0.001
@@ -352,17 +355,17 @@ score SENDGRID_REDIR
 score SENDGRID_REDIR_PHISH                  1.000 1.000 1.000 1.000
 score SEO_SUSP_NTLD                         1.000 1.000 1.000 1.000
 score SHOPIFY_IMG_NOT_RCVD_SFY              1.000 1.000 1.000 1.000
-score SHORTENER_SHORT_IMG                   0.121 0.512 0.121 0.512
+score SHORTENER_SHORT_IMG                   0.115 0.512 0.115 0.512
 score SHORT_IMG_SUSP_NTLD                   1.000 1.000 1.000 1.000
 score SHY_OBFU_EXPIRE                       1.000 1.000 1.000 1.000
 score SHY_OBFU_PASSWORD                     1.000 1.000 1.000 1.000
 score SPOOFED_FREEMAIL                      0.001 0.916 0.001 0.916
-score SPOOFED_FREEMAIL_NO_RDNS              1.401 1.150 1.401 1.150
+score SPOOFED_FREEMAIL_NO_RDNS              1.405 1.150 1.405 1.150
 score SPOOFED_FREEM_REPTO                   0.001 1.246 0.001 1.246
 score SPOOFED_FREEM_REPTO_CHN               0.001 1.000 0.001 1.000
 score SPOOFED_FREEM_REPTO_RUS               0.001 1.000 0.001 1.000
-score SPOOF_GMAIL_MID                       1.370 0.001 1.370 0.001
-score STATIC_XPRIO_OLE                      0.003 0.001 0.003 0.001
+score SPOOF_GMAIL_MID                       1.252 0.001 1.252 0.001
+score STATIC_XPRIO_OLE                      0.001 0.001 0.001 0.001
 score STOCK_TIP                             1.000 1.000 1.000 1.000
 score SUBJ_BRKN_WORDNUMS                    1.000 1.000 1.000 1.000
 score SURBL_BLOCKED                         0.001 0.001 0.001 0.001
@@ -371,30 +374,30 @@ score SYSADMIN
 score TAGSTAT_IMG_NOT_RCVD_TGST             1.000 1.000 1.000 1.000
 score TARINGANET_IMG_NOT_RCVD_TN            1.000 1.000 1.000 1.000
 score TEQF_USR_POLITE                       1.999 0.971 1.999 0.971
-score THIS_IS_ADV_SUSP_NTLD                 0.001 0.001 0.001 0.001
+score THIS_IS_ADV_SUSP_NTLD                 0.165 0.001 0.165 0.001
 score TONLINE_FAKE_DKIM                     1.000 1.000 1.000 1.000
 score TO_EQ_FM_DIRECT_MX                    0.001 0.001 0.001 0.001
 score TO_EQ_FM_DOM_HTML_ONLY                0.001 0.077 0.001 0.077
 score TO_EQ_FM_DOM_SPF_FAIL                 0.001 0.001 0.001 0.001
-score TO_EQ_FM_HTML_DIRECT                  2.398 0.769 2.398 0.769
+score TO_EQ_FM_HTML_DIRECT                  0.402 0.769 0.402 0.769
 score TO_EQ_FM_HTML_ONLY                    0.001 0.225 0.001 0.225
 score TO_EQ_FM_SPF_FAIL                     0.001 0.001 0.001 0.001
-score TO_IN_SUBJ                            0.099 0.100 0.099 0.100
+score TO_IN_SUBJ                            0.100 0.100 0.100 0.100
 score TO_NAME_SUBJ_NO_RDNS                  1.000 1.000 1.000 1.000
-score TO_NO_BRKTS_DYNIP                     2.249 3.066 2.249 3.066
+score TO_NO_BRKTS_DYNIP                     2.250 3.066 2.250 3.066
 score TO_NO_BRKTS_FROM_MSSP                 2.499 2.499 2.499 2.499
 score TO_NO_BRKTS_HTML_IMG                  0.001 0.001 0.001 0.001
 score TO_NO_BRKTS_HTML_ONLY                 1.999 1.734 1.999 1.734
 score TO_NO_BRKTS_MSFT                      2.499 0.266 2.499 0.266
 score TO_NO_BRKTS_NORDNS_HTML               1.999 2.000 1.999 2.000
-score TO_NO_BRKTS_PCNT                      2.443 2.499 2.443 2.499
-score TVD_DOLLARS_US                        1.522 1.762 1.522 1.762
+score TO_NO_BRKTS_PCNT                      2.499 2.499 2.499 2.499
+score TVD_DOLLARS_US                        0.995 1.762 0.995 1.762
 score TVD_SPACE_ENCODED                     2.499 2.499 2.499 2.499
 score TVD_SPACE_RATIO_MINFP                 0.001 0.001 0.001 0.001
 score TW_GIBBERISH_MANY                     1.000 1.000 1.000 1.000
 score UC_GIBBERISH_OBFU                     1.000 1.000 1.000 1.000
 score UNDISC_FREEM                          2.699 2.899 2.699 2.899
-score UNDISC_MONEY                          3.099 2.429 3.099 2.429
+score UNDISC_MONEY                          2.999 2.429 2.999 2.429
 score UNICODE_OBFU_ASC                      2.499 1.000 2.499 1.000
 score UNICODE_OBFU_ZW                       1.000 1.000 1.000 1.000
 score UNICODE_OBFU_ZW_MANY                  2.999 2.625 2.999 2.625
@@ -409,23 +412,23 @@ score URI_CLOUDFLAREIPFS
 score URI_DASHGOVEDU                        1.000 1.000 1.000 1.000
 score URI_DATA                              1.000 1.000 1.000 1.000
 score URI_DOTCN_LOGIN                       1.499 1.499 1.499 1.499
-score URI_DOTCN_SPOOF                       2.999 2.999 2.999 2.999
+score URI_DOTCN_SPOOF                       3.000 2.999 3.000 2.999
 score URI_DOTEDU                            1.000 1.000 1.000 1.000
 score URI_DOTEDU_ENTITY                     1.000 1.000 1.000 1.000
 score URI_DWEBIPFS                          1.000 1.000 1.000 1.000
 score URI_EXCESS_SLASHES                    2.499 1.000 2.499 1.000
-score URI_FIREBASEAPP                       2.999 2.999 2.999 2.999
+score URI_FIREBASEAPP                       3.000 2.999 3.000 2.999
 score URI_FLKIPFSXYZIPFS                    1.000 1.000 1.000 1.000
 score URI_GLITCHME                          1.000 1.000 1.000 1.000
 score URI_GOOGDRAWPREVIEW_MINFP             3.000 3.000 3.000 3.000
-score URI_GOOGLE_PROXY                      2.700 2.699 2.700 2.699
+score URI_GOOGLE_PROXY                      2.699 2.699 2.699 2.699
 score URI_GOOG_STO_SPAMMY                   1.000 1.000 1.000 1.000
 score URI_HEX_IP                            1.000 1.000 1.000 1.000
 score URI_IMG_CWINDOWSNET                   1.000 1.000 1.000 1.000
 score URI_IMG_WP_REDIR                      1.000 1.000 1.000 1.000
 score URI_INFURAIPFSIO                      1.000 0.001 1.000 0.001
 score URI_IPFS                              3.499 3.499 3.499 3.499
-score URI_IPFSIO                            2.219 3.324 2.219 3.324
+score URI_IPFSIO                            1.655 3.324 1.655 3.324
 score URI_LONG_REPEAT                       1.000 1.000 1.000 1.000
 score URI_ONLY_MSGID_MALF                   1.000 1.000 1.000 1.000
 score URI_OPTOUT_3LD                        1.000 1.000 1.000 1.000
@@ -435,23 +438,23 @@ score URI_REPLIT_DEV
 score URI_TRY_3LD                           1.999 1.894 1.999 1.894
 score URI_TRY_USME                          1.000 1.000 1.000 1.000
 score URI_W3SIPFS                           1.000 1.000 1.000 1.000
-score URI_WPADMIN                           2.799 1.896 2.799 1.896
+score URI_WPADMIN                           2.899 1.896 2.899 1.896
 score URI_WP_DIRINDEX                       1.000 1.000 1.000 1.000
-score URI_WP_HACKED                         2.201 2.104 2.201 2.104
+score URI_WP_HACKED                         2.100 2.104 2.100 2.104
 score URI_WP_HACKED_2                       2.499 2.499 2.499 2.499
 score USB_DRIVES                            1.000 1.000 1.000 1.000
-score VFY_ACCT_NORDNS                       2.495 2.999 2.495 2.999
+score VFY_ACCT_NORDNS                       2.500 2.999 2.500 2.999
 score VISTA_COST                            1.000 1.000 1.000 1.000
 score VISTA_TONOM_EQ_TOLOC                  1.000 1.000 1.000 1.000
 score VPS_NO_NTLD                           1.000 1.000 1.000 1.000
 score WALMART_IMG_NOT_RCVD_WAL              1.000 1.000 1.000 1.000
 score WIKI_IMG                              2.499 2.500 2.499 2.500
 score WORD_INVIS                            2.999 2.999 2.999 2.999
-score WORD_INVIS_MANY                       3.000 2.072 3.000 2.072
+score WORD_INVIS_MANY                       2.999 2.072 2.999 2.072
 score XM_DIGITS_ONLY                        1.000 1.000 1.000 1.000
 score XM_RANDOM                             2.499 2.500 2.499 2.500
 score XM_RECPTID                            2.999 2.999 2.999 2.999
-score XPRIO                                 2.249 1.307 2.249 1.307
+score XPRIO                                 0.699 1.307 0.699 1.307
 score XPRIO_SHORT_SUBJ                      1.000 1.000 1.000 1.000
 score XPRIO_VISTA                           1.000 1.000 1.000 1.000
 score ZW_OBFU_FROMTOSUBJ                    1.000 1.000 1.000 1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set0
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0	Thu Jul 30 00:45:03 2026	(r1936705)
+++ spamassassin/trunk/rulesrc/scores/scores-set0	Thu Jul 30 02:47:47 2026	(r1936706)
@@ -1,209 +1,215 @@
-# Using score set 0 logs for revision 1936660 from:
-# ham-giovanni-ham.r1936660.log ham-giovanni-spam.r1936660.log ham-grenier.r1936660.log ham-jhardin.r1936660.log ham-koyer.r1936660.log ham-llanga.r1936660.log ham-mmiroslaw-mails-ham.r1936660.log ham-mmiroslaw-mails-spam.r1936660.log ham-spamsponge.r1936660.log ham-tsz-corpus.r1936660.log ham-whyscream.r1936660.log spam-giovanni-ham.r1936660.log spam-giovanni-spam.r1936660.log spam-grenier.r1936660.log spam-jhardin.r1936660.log spam-koyer.r1936660.log spam-llanga.r1936660.log spam-mmiroslaw-mails-ham.r1936660.log spam-mmiroslaw-mails-spam.r1936660.log spam-spamsponge.r1936660.log spam-tsz-corpus.r1936660.log spam-whyscream.r1936660.log
+# Using score set 0 logs for revision 1936693 from:
+# ham-giovanni-ham.r1936693.log ham-giovanni-spam.r1936693.log ham-grenier.r1936693.log ham-jhardin.r1936693.log ham-koyer.r1936693.log ham-llanga.r1936693.log ham-mmiroslaw-mails-ham.r1936693.log ham-mmiroslaw-mails-spam.r1936693.log ham-spamsponge.r1936693.log ham-tsz-corpus.r1936693.log ham-whyscream.r1936693.log spam-giovanni-ham.r1936693.log spam-giovanni-spam.r1936693.log spam-grenier.r1936693.log spam-jhardin.r1936693.log spam-koyer.r1936693.log spam-llanga.r1936693.log spam-mmiroslaw-mails-ham.r1936693.log spam-mmiroslaw-mails-spam.r1936693.log spam-spamsponge.r1936693.log spam-tsz-corpus.r1936693.log spam-whyscream.r1936693.log
 
 score ACCT_PHISHING_MANY             2.999
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001 # force non-zero
-score AC_FROM_MANY_DOTS              2.499
-score ADMAIL                         0.001 # force non-zero
-score ADMITS_SPAM                    1.999
+score AC_FROM_MANY_DOTS              2.500
+score ADMAIL                         0.001
+score ADMITS_SPAM                    2.000
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              2.500
-score ADVANCE_FEE_3_NEW_MONEY        3.199
-score ADVANCE_FEE_4_NEW              2.799
+score ADVANCE_FEE_3_NEW              2.499
+score ADVANCE_FEE_3_NEW_MONEY        3.200
+score ADVANCE_FEE_4_NEW              2.899
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.019
-score ADVANCE_FEE_5_NEW_MONEY        2.899
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.043
+score ADVANCE_FEE_5_NEW_MONEY        3.099
 score AD_PREFS                       0.001
-score AMAZON_IMG_NOT_RCVD_AMZN       2.500
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.537
-score BIGNUM_EMAILS_FREEM            1.996
-score BIGNUM_EMAILS_MANY             2.202
-score BITCOIN_DEADLINE               2.197
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2   2.923
+score BIGNUM_EMAILS_FREEM            1.093
+score BIGNUM_EMAILS_MANY             2.652
+score BITCOIN_DEADLINE               2.177
 score BITCOIN_DIRECT                 3.499
-score BITCOIN_EXTORT_01              4.470
-score BITCOIN_MALF_HTML              2.037
-score BITCOIN_ONAN                   1.340
-score BITCOIN_SPAM_02                1.519
-score BITCOIN_SPAM_07                1.338
+score BITCOIN_EXTORT_01              2.202
+score BITCOIN_MALF_HTML              3.091
+score BITCOIN_MALWARE                3.499
+score BITCOIN_ONAN                   2.999
+score BITCOIN_SPAM_02                1.120
+score BITCOIN_SPAM_03                2.499
+score BITCOIN_SPAM_07                2.453
 score BITCOIN_TOEQFM                 3.499
-score BITCOIN_VISTA                  2.042
-score BITCOIN_XPRIO                  0.459
-score BITCOIN_YOUR_INFO              2.999
-score BODY_URI_ONLY                  2.352
-score BOGUS_MSM_HDRS                 2.019
+score BITCOIN_VISTA                  2.743
+score BITCOIN_XPRIO                  2.499
+score BITCOIN_YOUR_INFO              2.497
+score BODY_URI_ONLY                  2.353
+score BOGUS_MSM_HDRS                 1.390
 score CN_PHISH_JP_02                 2.499
-score CN_PHISH_JP_04                 1.645
-score COMPENSATION                   1.499
+score CN_PHISH_JP_04                 1.278
+score COMPENSATION                   0.712
 score CONTENT_AFTER_HTML             0.001
-score CTE_8BIT_MISMATCH              0.350
+score CTE_8BIT_MISMATCH              0.351
 score DATE_IN_FUTURE_96_Q            4.099
-score DEAR_BENEFICIARY               2.899
-score DEAR_EMAIL                     1.500
-score DOS_BODY_HIGH_NO_MID           3.899
+score DEAR_BENEFICIARY               3.000
+score DEAR_EMAIL                     1.499
+score DOS_BODY_HIGH_NO_MID           3.900
 score DSN_NO_MIMEVERSION             1.999
 score ENCRYPTED_MESSAGE              -0.999
 score END_FUTURE_EMAILS              1.999
 score FILL_THIS_FORM                 0.001
 score FONT_INVIS_DIRECT              3.499
-score FONT_INVIS_LONG_LINE           1.995
+score FONT_INVIS_LONG_LINE           1.997
 score FONT_INVIS_MSGID               2.499
-score FONT_INVIS_NORDNS              0.589
+score FONT_INVIS_NORDNS              0.598
 score FORM_FRAUD                     1.000
 score FORM_FRAUD_3                   2.499
-score FORM_FRAUD_5                   0.001 # force non-zero
-score FREEMAIL_FORGED_FROMDOMAIN     0.001
-score FROM_ADDR_WS                   2.675
+score FORM_FRAUD_5                   0.001
+score FREEMAIL_FORGED_FROMDOMAIN     0.001 # force non-zero
+score FROM_ADDR_WS                   2.999
 score FROM_IN_TO_AND_SUBJ            2.399
 score FROM_LONG_DOM_MINFP            2.499
-score FROM_MISSPACED                 0.775
-score FROM_MISSP_DYNIP               1.936
+score FROM_MISSPACED                 1.304
+score FROM_MISSP_DYNIP               2.217
 score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            1.218
-score FROM_MISSP_MSFT                3.085
+score FROM_MISSP_FREEMAIL            0.694
+score FROM_MISSP_MSFT                1.684
 score FROM_MISSP_REPLYTO             2.499
-score FROM_MISSP_USER                3.004
-score FROM_MISSP_XPRIO               0.919
-score FROM_MULTI_NORDNS              3.039
-score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_MISSP_USER                0.575
+score FROM_MISSP_XPRIO               1.482
+score FROM_MULTI_NORDNS              2.822
+score FROM_NTLD_LINKBAIT             0.936
+score FROM_SUSPICIOUS_NTLD           0.500
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FROM_WSP_LEAD                  2.520
-score FROM_WSP_TRAIL                 3.100
-score FSL_CTYPE_WIN1251              0.541
-score FSL_HAS_TINYURL                2.498
-score FSL_HELO_BARE_IP_2             1.599
+score FROM_WSP_LEAD                  2.932
+score FROM_WSP_TRAIL                 3.099
+score FSL_CTYPE_WIN1251              1.790
+score FSL_HAS_TINYURL                2.499
+score FSL_HELO_BARE_IP_2             2.196
 score FSL_NEW_HELO_USER              0.001 # force non-zero
 score FUZZY_BITCOIN                  2.599
-score GB_BITCOIN_CP                  0.730
+score FUZZY_SECURITY                 2.099
+score GB_BITCOIN_CP                  0.230
 score GB_CUSTOM_HTM_URI              0.001
 score GB_FREEMAIL_DISPTO             0.500
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GOOG_REDIR_HTML_ONLY           1.499
-score GOOG_REDIR_NORDNS              1.499
-score GOOG_REDIR_NOTRDNS             0.400
+score GOOG_REDIR_NORDNS              1.500
+score GOOG_REDIR_NOTRDNS             0.396
 score GOOG_STO_EMAIL_PHISH           2.999
-score GOOG_STO_HTML_PHISH            2.318
+score GOOG_STO_HTML_PHISH            1.892
 score GOOG_STO_NOIMG_HTML            2.999
-score HDR_ORDER_FTSDMCXX_DIRECT      1.782
-score HDR_ORDER_FTSDMCXX_NORDNS      1.447
+score HDR_ORDER_FTSDMCXX_DIRECT      1.555
+score HDR_ORDER_FTSDMCXX_NORDNS      0.223
 score HEADER_FROM_DIFFERENT_DOMAINS  0.001 # force non-zero
 score HELO_MISC_IP                   0.250
 score HELO_NO_DOMAIN                 0.001
-score HK_NAME_FM_MR_MRS              1.047
-score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_ENVFROM              0.999
-score HK_RANDOM_FROM                 0.999
-score HK_RANDOM_REPLYTO              0.999
+score HK_NAME_FM_MR_MRS              1.052
+score HK_NAME_MR_MRS                 1.000
+score HK_RANDOM_ENVFROM              1.000
+score HK_RANDOM_FROM                 1.000
+score HK_RANDOM_REPLYTO              1.000
 score HK_SCAM                        0.001
 score HOSTED_IMG_DIRECT_MX           3.499
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HREF_EMPTY_NORDNS              0.600
+score HREF_EMPTY_NORDNS              0.502
 score HTML_ENTITY_ASCII              2.999
-score HTML_FONT_TINY_NORDNS          2.000
-score HTML_OFF_PAGE                  2.729
+score HTML_FONT_TINY_NORDNS          1.999
+score HTML_OFF_PAGE                  2.639
 score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        4.199
+score HTML_TAG_BALANCE_CENTER        2.900
 score HTML_TEXT_INVISIBLE_FONT       0.001
 score KHOP_HELO_FCRDNS               0.001 # force non-zero
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
 score LOTTO_DEPT                     1.999
 score LUCRATIVE                      0.001
-score MALW_ATTACH                    2.499
+score MALWARE_NORDNS                 0.053
+score MALW_ATTACH                    2.399
 score MAY_BE_FORGED                  3.899
-score MILLION_HUNDRED                2.700
+score MILLION_HUNDRED                2.699
 score MILLION_USD                    1.999
-score MIMEOLE_DIRECT_TO_MX           1.715
-score MIME_NO_TEXT                   0.001 # force non-zero
-score MIXED_CENTER_CASE              1.729
-score MIXED_ES                       1.083
-score MIXED_HREF_CASE                1.999
-score MIXED_IMG_CASE                 0.611
+score MIMEOLE_DIRECT_TO_MX           1.948
+score MIME_NO_TEXT                   0.001
+score MIXED_CENTER_CASE              1.068
+score MIXED_ES                       1.084
+score MIXED_HREF_CASE                2.000
+score MIXED_IMG_CASE                 2.999
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               2.495
-score MONEY_FRAUD_3                  1.982
-score MONEY_FRAUD_5                  2.674
+score MONEY_FORM_SHORT               2.491
+score MONEY_FRAUD_3                  2.188
+score MONEY_FRAUD_5                  2.434
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           0.740
-score MONEY_FROM_41                  0.564
+score MONEY_FREEMAIL_REPTO           0.741
+score MONEY_FROM_41                  1.942
 score MONEY_FROM_MISSP               0.001
-score MONEY_NOHTML                   2.500
-score MSM_PRIO_REPTO                 1.625
+score MONEY_NOHTML                   2.499
+score MSM_PRIO_REPTO                 0.885
 score MXG_EMAIL_FRAG                 0.100
 score MXG_SPOOFED_DOCUSIGN           0.099
-score NAME_EMAIL_DIFF                1.051
+score NAME_EMAIL_DIFF                1.387
 score NA_DOLLARS                     1.499
 score NEW_PRODUCTS                   1.249
-score NICE_REPLY_A                   -2.147
-score NORDNS_LOW_CONTRAST            1.886
+score NICE_REPLY_A                   -1.202
+score NORDNS_LOW_CONTRAST            1.887
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.001 # force non-zero
-score NUMBERONLY_BITCOIN_EXP         1.038
-score OBFU_BITCOIN                   1.547
-score ODD_FREEM_REPTO                0.001
-score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.001
+score NSL_RCVD_FROM_USER             0.001
+score NUMBERONLY_BITCOIN_EXP         0.641
+score OBFU_BITCOIN                   0.707
+score ODD_FREEM_REPTO                2.999
+score PDS_BTC_ID                     0.500
+score PDS_BTC_MSGID                  0.609
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_FRNOM_TODOM_DBL_URL        1.499
-score PDS_FRNOM_TODOM_NAKED_TO       0.508
-score PDS_FROM_2_EMAILS              2.668
-score PDS_FROM_NAME_TO_DOMAIN        0.896
+score PDS_FRNOM_TODOM_NAKED_TO       0.354
+score PDS_FROM_2_EMAILS              3.013
+score PDS_FROM_NAME_TO_DOMAIN        1.051
 score PDS_NAKED_TO_NUMERO            1.999
+score PDS_OTHER_BAD_TLD              1.999
 score PDS_RDNS_DYNAMIC_FP            0.010
-score PHP_ORIG_SCRIPT                1.400
-score PHP_SCRIPT                     0.643
-score POSSIBLE_GMAIL_PHISHER         1.491
-score PP_MIME_FAKE_ASCII_TEXT        0.001 # force non-zero
-score RATWARE_NO_RDNS                2.073
+score PHP_ORIG_SCRIPT                1.404
+score PHP_SCRIPT                     2.499
+score POSSIBLE_GMAIL_PHISHER         1.275
+score PP_MIME_FAKE_ASCII_TEXT        0.001
+score RATWARE_NO_RDNS                2.057
 score REPTO_419_FRAUD_GM             0.001
 score REPTO_419_FRAUD_HM_LOOSE       0.999
 score RISK_FREE                      2.599
-score SHORTENER_SHORT_IMG            0.121
-score SPOOFED_FREEMAIL_NO_RDNS       1.401
-score SPOOF_GMAIL_MID                1.370
-score STATIC_XPRIO_OLE               0.003
+score SHORTENER_SHORT_IMG            0.115
+score SPOOFED_FREEMAIL_NO_RDNS       1.405
+score SPOOF_GMAIL_MID                1.252
+score STATIC_XPRIO_OLE               0.001
 score SUSP_UTF8_WORD_FROM            1.999
 score TEQF_USR_POLITE                1.999
-score THIS_IS_ADV_SUSP_NTLD          0.001
+score THIS_IS_ADV_SUSP_NTLD          0.165
 score TO_EQ_FM_DIRECT_MX             0.001
 score TO_EQ_FM_DOM_HTML_ONLY         0.001
-score TO_EQ_FM_HTML_DIRECT           2.398
+score TO_EQ_FM_HTML_DIRECT           0.402
 score TO_EQ_FM_HTML_ONLY             0.001
-score TO_IN_SUBJ                     0.099
-score TO_NO_BRKTS_DYNIP              2.249
+score TO_IN_SUBJ                     0.100
+score TO_NO_BRKTS_DYNIP              2.250
 score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           0.001
+score TO_NO_BRKTS_HTML_IMG           0.001 # force non-zero
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_MSFT               2.499
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.443
-score TVD_DOLLARS_US                 1.522
+score TO_NO_BRKTS_PCNT               2.499
+score TVD_DOLLARS_US                 0.995
 score TVD_SPACE_ENCODED              2.499
 score TVD_SPACE_RATIO_MINFP          0.001
 score UNDISC_FREEM                   2.699
-score UNDISC_MONEY                   3.099
+score UNDISC_MONEY                   2.999
 score UNICODE_OBFU_ASC               2.499
 score UNICODE_OBFU_ZW_MANY           2.999
 score UPPERCASE_URI                  2.749
 score URI_DOTCN_LOGIN                1.499
-score URI_DOTCN_SPOOF                2.999
+score URI_DOTCN_SPOOF                3.000
 score URI_EXCESS_SLASHES             2.499
-score URI_FIREBASEAPP                2.999
-score URI_GOOGLE_PROXY               2.700
+score URI_FIREBASEAPP                3.000
+score URI_GOOGLE_PROXY               2.699
 score URI_IPFS                       3.499
-score URI_IPFSIO                     2.219
+score URI_IPFSIO                     1.655
 score URI_PHISH                      3.999
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.799
-score URI_WP_HACKED                  2.201
+score URI_WPADMIN                    2.899
+score URI_WP_HACKED                  2.100
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.495
+score VFY_ACCT_NORDNS                2.500
 score WIKI_IMG                       2.499
 score WORD_INVIS                     2.999
-score WORD_INVIS_MANY                3.000
+score WORD_INVIS_MANY                2.999
 score XM_RANDOM                      2.499
 score XM_RECPTID                     2.999
-score XPRIO                          2.249
+score XPRIO                          0.699
 score AC_HTML_NONSENSE_TAGS          1.000
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
@@ -225,11 +231,9 @@ score BEBEE_IMG_NOT_RCVD_BB          1.0
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
-score BITCOIN_MALWARE                1.000
 score BITCOIN_OBFU_SUBJ              1.000
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
-score BITCOIN_SPAM_03                1.000
 score BITCOIN_SPAM_04                1.000
 score BITCOIN_SPAM_06                1.000
 score BITCOIN_SPAM_08                1.000
@@ -264,7 +268,6 @@ score FOUND_YOU                      1.0
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
 score FROM_LONG_DOM                  1.000
-score FROM_NTLD_LINKBAIT             1.000
 score FROM_NTLD_REPLY_FREEMAIL       1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FAKE_RF_SHORT               1.000
@@ -309,8 +312,8 @@ score LIST_PRTL_SAME_USER            1.0
 score LONG_HEX_URI                   1.000
 score LONG_IMG_URI                   1.000
 score MALF_HTML_B64                  1.000
-score MALWARE_NORDNS                 1.000
 score MALWARE_PASSWORD               1.000
+score MANY_HDRS_LCASE                0.100
 score MC_MSFT_LISTMGR                1.000
 score MIXED_AREA_CASE                1.000
 score MIXED_FONT_CASE                1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set1
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1	Thu Jul 30 00:45:03 2026	(r1936705)
+++ spamassassin/trunk/rulesrc/scores/scores-set1	Thu Jul 30 02:47:47 2026	(r1936706)
@@ -13,6 +13,7 @@ score AC_SPAMMY_URI_PATTERNS3 1.000
 score AC_SPAMMY_URI_PATTERNS4 1.000
 score AC_SPAMMY_URI_PATTERNS8 1.000
 score AC_SPAMMY_URI_PATTERNS9 1.000
+score ADMAIL 0.001
 score ADMITS_SPAM 1.999
 score ADULT_DATING_COMPANY 10.000
 score ADVANCE_FEE_2_NEW_FORM 1.000
@@ -42,6 +43,7 @@ score BITCOIN_DIRECT 0.001
 score BITCOIN_EXTORT_01 4.752
 score BITCOIN_EXTORT_02 1.000
 score BITCOIN_IMGUR 1.000
+score BITCOIN_MALF_HTML 0.001
 score BITCOIN_MALWARE 1.000
 score BITCOIN_OBFU_SUBJ 1.000
 score BITCOIN_ONAN 2.186
@@ -155,6 +157,7 @@ score FSL_CTYPE_WIN1251 2.703
 score FSL_HAS_TINYURL 3.699
 score FSL_HELO_BARE_IP_2 1.373
 score FSL_NEW_HELO_USER 0.001
+score FUZZY_BITCOIN 0.001
 score GAPPY_SALES_LEADS_FREEM 1.000
 score GB_BITCOIN_CP 2.832
 score GB_CUSTOM_HTM_URI 0.001
@@ -236,7 +239,6 @@ score MALF_HTML_B64 1.000
 score MALWARE_NORDNS 1.000
 score MALWARE_PASSWORD 1.000
 score MALW_ATTACH 2.699
-score MANY_HDRS_LCASE 0.001
 score MAY_BE_FORGED 4.199
 score MC_MSFT_LISTMGR 1.000
 score MILLION_HUNDRED 2.329
@@ -313,6 +315,8 @@ score RCVD_DOTEDU_SHORT 1.000
 score RCVD_DOTEDU_SUSP_URI 1.000
 score RCVD_IN_IADB_DMARC 0.001
 score RCVD_IN_IADB_ESP -0.001
+score RCVD_IN_IADB_MI_CPR_MAT 0.001
+score RCVD_IN_IADB_UT_CPR_MAT 0.001
 score RCVD_IN_MSPIKE_BL 0.001
 score RCVD_IN_MSPIKE_H2 0.001
 score RCVD_IN_MSPIKE_H3 0.001
@@ -360,7 +364,6 @@ score SPOOFED_FREEM_REPTO_RUS 1.000
 score SPOOF_GMAIL_MID 0.001
 score STATIC_XPRIO_OLE 0.001
 score STOCK_TIP 1.000
-score STY_INVIS_DIRECT 2.499
 score SUBJ_BRKN_WORDNUMS 1.000
 score SURBL_BLOCKED 0.001
 score SUSP_UTF8_WORD_FROM 1.999
@@ -420,6 +423,7 @@ score URI_GOOG_STO_SPAMMY 1.000
 score URI_HEX_IP 1.000
 score URI_IMG_CWINDOWSNET 1.000
 score URI_IMG_WP_REDIR 1.000
+score URI_INFURAIPFSIO 0.001
 score URI_IPFS 3.499
 score URI_IPFSIO 3.324
 score URI_LONG_REPEAT 1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set2
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2	Thu Jul 30 00:45:03 2026	(r1936705)
+++ spamassassin/trunk/rulesrc/scores/scores-set2	Thu Jul 30 02:47:47 2026	(r1936706)
@@ -1,209 +1,215 @@
-# Using score set 0 logs for revision 1936660 from:
-# ham-giovanni-ham.r1936660.log ham-giovanni-spam.r1936660.log ham-grenier.r1936660.log ham-jhardin.r1936660.log ham-koyer.r1936660.log ham-llanga.r1936660.log ham-mmiroslaw-mails-ham.r1936660.log ham-mmiroslaw-mails-spam.r1936660.log ham-spamsponge.r1936660.log ham-tsz-corpus.r1936660.log ham-whyscream.r1936660.log spam-giovanni-ham.r1936660.log spam-giovanni-spam.r1936660.log spam-grenier.r1936660.log spam-jhardin.r1936660.log spam-koyer.r1936660.log spam-llanga.r1936660.log spam-mmiroslaw-mails-ham.r1936660.log spam-mmiroslaw-mails-spam.r1936660.log spam-spamsponge.r1936660.log spam-tsz-corpus.r1936660.log spam-whyscream.r1936660.log
+# Using score set 0 logs for revision 1936693 from:
+# ham-giovanni-ham.r1936693.log ham-giovanni-spam.r1936693.log ham-grenier.r1936693.log ham-jhardin.r1936693.log ham-koyer.r1936693.log ham-llanga.r1936693.log ham-mmiroslaw-mails-ham.r1936693.log ham-mmiroslaw-mails-spam.r1936693.log ham-spamsponge.r1936693.log ham-tsz-corpus.r1936693.log ham-whyscream.r1936693.log spam-giovanni-ham.r1936693.log spam-giovanni-spam.r1936693.log spam-grenier.r1936693.log spam-jhardin.r1936693.log spam-koyer.r1936693.log spam-llanga.r1936693.log spam-mmiroslaw-mails-ham.r1936693.log spam-mmiroslaw-mails-spam.r1936693.log spam-spamsponge.r1936693.log spam-tsz-corpus.r1936693.log spam-whyscream.r1936693.log
 
 score ACCT_PHISHING_MANY             2.999
 score AC_BR_BONANZA                  0.001
 score AC_DIV_BONANZA                 0.001 # force non-zero
-score AC_FROM_MANY_DOTS              2.499
-score ADMAIL                         0.001 # force non-zero
-score ADMITS_SPAM                    1.999
+score AC_FROM_MANY_DOTS              2.500
+score ADMAIL                         0.001
+score ADMITS_SPAM                    2.000
 score ADVANCE_FEE_2_NEW_MONEY        1.999
-score ADVANCE_FEE_3_NEW              2.500
-score ADVANCE_FEE_3_NEW_MONEY        3.199
-score ADVANCE_FEE_4_NEW              2.799
+score ADVANCE_FEE_3_NEW              2.499
+score ADVANCE_FEE_3_NEW_MONEY        3.200
+score ADVANCE_FEE_4_NEW              2.899
 score ADVANCE_FEE_4_NEW_MONEY        0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY      1.019
-score ADVANCE_FEE_5_NEW_MONEY        2.899
+score ADVANCE_FEE_5_NEW_FRM_MNY      1.043
+score ADVANCE_FEE_5_NEW_MONEY        3.099
 score AD_PREFS                       0.001
-score AMAZON_IMG_NOT_RCVD_AMZN       2.500
-score AXB_XMAILER_MIMEOLE_OL_024C2   0.537
-score BIGNUM_EMAILS_FREEM            1.996
-score BIGNUM_EMAILS_MANY             2.202
-score BITCOIN_DEADLINE               2.197
+score AMAZON_IMG_NOT_RCVD_AMZN       2.499
+score AXB_XMAILER_MIMEOLE_OL_024C2   2.923
+score BIGNUM_EMAILS_FREEM            1.093
+score BIGNUM_EMAILS_MANY             2.652
+score BITCOIN_DEADLINE               2.177
 score BITCOIN_DIRECT                 3.499
-score BITCOIN_EXTORT_01              4.470
-score BITCOIN_MALF_HTML              2.037
-score BITCOIN_ONAN                   1.340
-score BITCOIN_SPAM_02                1.519
-score BITCOIN_SPAM_07                1.338
+score BITCOIN_EXTORT_01              2.202
+score BITCOIN_MALF_HTML              3.091
+score BITCOIN_MALWARE                3.499
+score BITCOIN_ONAN                   2.999
+score BITCOIN_SPAM_02                1.120
+score BITCOIN_SPAM_03                2.499
+score BITCOIN_SPAM_07                2.453
 score BITCOIN_TOEQFM                 3.499
-score BITCOIN_VISTA                  2.042
-score BITCOIN_XPRIO                  0.459
-score BITCOIN_YOUR_INFO              2.999
-score BODY_URI_ONLY                  2.352
-score BOGUS_MSM_HDRS                 2.019
+score BITCOIN_VISTA                  2.743
+score BITCOIN_XPRIO                  2.499
+score BITCOIN_YOUR_INFO              2.497
+score BODY_URI_ONLY                  2.353
+score BOGUS_MSM_HDRS                 1.390
 score CN_PHISH_JP_02                 2.499
-score CN_PHISH_JP_04                 1.645
-score COMPENSATION                   1.499
+score CN_PHISH_JP_04                 1.278
+score COMPENSATION                   0.712
 score CONTENT_AFTER_HTML             0.001
-score CTE_8BIT_MISMATCH              0.350
+score CTE_8BIT_MISMATCH              0.351
 score DATE_IN_FUTURE_96_Q            4.099
-score DEAR_BENEFICIARY               2.899
-score DEAR_EMAIL                     1.500
-score DOS_BODY_HIGH_NO_MID           3.899
+score DEAR_BENEFICIARY               3.000
+score DEAR_EMAIL                     1.499
+score DOS_BODY_HIGH_NO_MID           3.900
 score DSN_NO_MIMEVERSION             1.999
 score ENCRYPTED_MESSAGE              -0.999
 score END_FUTURE_EMAILS              1.999
 score FILL_THIS_FORM                 0.001
 score FONT_INVIS_DIRECT              3.499
-score FONT_INVIS_LONG_LINE           1.995
+score FONT_INVIS_LONG_LINE           1.997
 score FONT_INVIS_MSGID               2.499
-score FONT_INVIS_NORDNS              0.589
+score FONT_INVIS_NORDNS              0.598
 score FORM_FRAUD                     1.000
 score FORM_FRAUD_3                   2.499
-score FORM_FRAUD_5                   0.001 # force non-zero
-score FREEMAIL_FORGED_FROMDOMAIN     0.001
-score FROM_ADDR_WS                   2.675
+score FORM_FRAUD_5                   0.001
+score FREEMAIL_FORGED_FROMDOMAIN     0.001 # force non-zero
+score FROM_ADDR_WS                   2.999
 score FROM_IN_TO_AND_SUBJ            2.399
 score FROM_LONG_DOM_MINFP            2.499
-score FROM_MISSPACED                 0.775
-score FROM_MISSP_DYNIP               1.936
+score FROM_MISSPACED                 1.304
+score FROM_MISSP_DYNIP               2.217
 score FROM_MISSP_EH_MATCH            1.999
-score FROM_MISSP_FREEMAIL            1.218
-score FROM_MISSP_MSFT                3.085
+score FROM_MISSP_FREEMAIL            0.694
+score FROM_MISSP_MSFT                1.684
 score FROM_MISSP_REPLYTO             2.499
-score FROM_MISSP_USER                3.004
-score FROM_MISSP_XPRIO               0.919
-score FROM_MULTI_NORDNS              3.039
-score FROM_SUSPICIOUS_NTLD           0.499
+score FROM_MISSP_USER                0.575
+score FROM_MISSP_XPRIO               1.482
+score FROM_MULTI_NORDNS              2.822
+score FROM_NTLD_LINKBAIT             0.936
+score FROM_SUSPICIOUS_NTLD           0.500
 score FROM_SUSPICIOUS_NTLD_FP        1.999
-score FROM_WSP_LEAD                  2.520
-score FROM_WSP_TRAIL                 3.100
-score FSL_CTYPE_WIN1251              0.541
-score FSL_HAS_TINYURL                2.498
-score FSL_HELO_BARE_IP_2             1.599
+score FROM_WSP_LEAD                  2.932
+score FROM_WSP_TRAIL                 3.099
+score FSL_CTYPE_WIN1251              1.790
+score FSL_HAS_TINYURL                2.499
+score FSL_HELO_BARE_IP_2             2.196
 score FSL_NEW_HELO_USER              0.001 # force non-zero
 score FUZZY_BITCOIN                  2.599
-score GB_BITCOIN_CP                  0.730
+score FUZZY_SECURITY                 2.099
+score GB_BITCOIN_CP                  0.230
 score GB_CUSTOM_HTM_URI              0.001
 score GB_FREEMAIL_DISPTO             0.500
-score GB_FREEMAIL_DISPTO_NOTFREEM    0.499
+score GB_FREEMAIL_DISPTO_NOTFREEM    0.500
 score GOOG_REDIR_HTML_ONLY           1.499
-score GOOG_REDIR_NORDNS              1.499
-score GOOG_REDIR_NOTRDNS             0.400
+score GOOG_REDIR_NORDNS              1.500
+score GOOG_REDIR_NOTRDNS             0.396
 score GOOG_STO_EMAIL_PHISH           2.999
-score GOOG_STO_HTML_PHISH            2.318
+score GOOG_STO_HTML_PHISH            1.892
 score GOOG_STO_NOIMG_HTML            2.999
-score HDR_ORDER_FTSDMCXX_DIRECT      1.782
-score HDR_ORDER_FTSDMCXX_NORDNS      1.447
+score HDR_ORDER_FTSDMCXX_DIRECT      1.555
+score HDR_ORDER_FTSDMCXX_NORDNS      0.223
 score HEADER_FROM_DIFFERENT_DOMAINS  0.001 # force non-zero
 score HELO_MISC_IP                   0.250
 score HELO_NO_DOMAIN                 0.001
-score HK_NAME_FM_MR_MRS              1.047
-score HK_NAME_MR_MRS                 0.999
-score HK_RANDOM_ENVFROM              0.999
-score HK_RANDOM_FROM                 0.999
-score HK_RANDOM_REPLYTO              0.999
+score HK_NAME_FM_MR_MRS              1.052
+score HK_NAME_MR_MRS                 1.000
+score HK_RANDOM_ENVFROM              1.000
+score HK_RANDOM_FROM                 1.000
+score HK_RANDOM_REPLYTO              1.000
 score HK_SCAM                        0.001
 score HOSTED_IMG_DIRECT_MX           3.499
 score HOSTED_IMG_MULTI_PUB_01        2.999
-score HREF_EMPTY_NORDNS              0.600
+score HREF_EMPTY_NORDNS              0.502
 score HTML_ENTITY_ASCII              2.999
-score HTML_FONT_TINY_NORDNS          2.000
-score HTML_OFF_PAGE                  2.729
+score HTML_FONT_TINY_NORDNS          1.999
+score HTML_OFF_PAGE                  2.639
 score HTML_SINGLET_MANY              2.499
-score HTML_TAG_BALANCE_CENTER        4.199
+score HTML_TAG_BALANCE_CENTER        2.900
 score HTML_TEXT_INVISIBLE_FONT       0.001
 score KHOP_HELO_FCRDNS               0.001 # force non-zero
 score LONG_INVISIBLE_TEXT            2.999
 score LOTS_OF_MONEY                  0.010
 score LOTTO_DEPT                     1.999
 score LUCRATIVE                      0.001
-score MALW_ATTACH                    2.499
+score MALWARE_NORDNS                 0.053
+score MALW_ATTACH                    2.399
 score MAY_BE_FORGED                  3.899
-score MILLION_HUNDRED                2.700
+score MILLION_HUNDRED                2.699
 score MILLION_USD                    1.999
-score MIMEOLE_DIRECT_TO_MX           1.715
-score MIME_NO_TEXT                   0.001 # force non-zero
-score MIXED_CENTER_CASE              1.729
-score MIXED_ES                       1.083
-score MIXED_HREF_CASE                1.999
-score MIXED_IMG_CASE                 0.611
+score MIMEOLE_DIRECT_TO_MX           1.948
+score MIME_NO_TEXT                   0.001
+score MIXED_CENTER_CASE              1.068
+score MIXED_ES                       1.084
+score MIXED_HREF_CASE                2.000
+score MIXED_IMG_CASE                 2.999
 score MONEY_FORM                     0.001
-score MONEY_FORM_SHORT               2.495
-score MONEY_FRAUD_3                  1.982
-score MONEY_FRAUD_5                  2.674
+score MONEY_FORM_SHORT               2.491
+score MONEY_FRAUD_3                  2.188
+score MONEY_FRAUD_5                  2.434
 score MONEY_FRAUD_8                  0.001
-score MONEY_FREEMAIL_REPTO           0.740
-score MONEY_FROM_41                  0.564
+score MONEY_FREEMAIL_REPTO           0.741
+score MONEY_FROM_41                  1.942
 score MONEY_FROM_MISSP               0.001
-score MONEY_NOHTML                   2.500
-score MSM_PRIO_REPTO                 1.625
+score MONEY_NOHTML                   2.499
+score MSM_PRIO_REPTO                 0.885
 score MXG_EMAIL_FRAG                 0.100
 score MXG_SPOOFED_DOCUSIGN           0.099
-score NAME_EMAIL_DIFF                1.051
+score NAME_EMAIL_DIFF                1.387
 score NA_DOLLARS                     1.499
 score NEW_PRODUCTS                   1.249
-score NICE_REPLY_A                   -2.147
-score NORDNS_LOW_CONTRAST            1.886
+score NICE_REPLY_A                   -1.202
+score NORDNS_LOW_CONTRAST            1.887
 score NO_FM_NAME_IP_HOSTN            0.001
-score NSL_RCVD_FROM_USER             0.001 # force non-zero
-score NUMBERONLY_BITCOIN_EXP         1.038
-score OBFU_BITCOIN                   1.547
-score ODD_FREEM_REPTO                0.001
-score PDS_BTC_ID                     0.499
-score PDS_BTC_MSGID                  0.001
+score NSL_RCVD_FROM_USER             0.001
+score NUMBERONLY_BITCOIN_EXP         0.641
+score OBFU_BITCOIN                   0.707
+score ODD_FREEM_REPTO                2.999
+score PDS_BTC_ID                     0.500
+score PDS_BTC_MSGID                  0.609
 score PDS_DBL_URL_TNB_RUNON          1.999
 score PDS_FRNOM_TODOM_DBL_URL        1.499
-score PDS_FRNOM_TODOM_NAKED_TO       0.508
-score PDS_FROM_2_EMAILS              2.668
-score PDS_FROM_NAME_TO_DOMAIN        0.896
+score PDS_FRNOM_TODOM_NAKED_TO       0.354
+score PDS_FROM_2_EMAILS              3.013
+score PDS_FROM_NAME_TO_DOMAIN        1.051
 score PDS_NAKED_TO_NUMERO            1.999
+score PDS_OTHER_BAD_TLD              1.999
 score PDS_RDNS_DYNAMIC_FP            0.010
-score PHP_ORIG_SCRIPT                1.400
-score PHP_SCRIPT                     0.643
-score POSSIBLE_GMAIL_PHISHER         1.491
-score PP_MIME_FAKE_ASCII_TEXT        0.001 # force non-zero
-score RATWARE_NO_RDNS                2.073
+score PHP_ORIG_SCRIPT                1.404
+score PHP_SCRIPT                     2.499
+score POSSIBLE_GMAIL_PHISHER         1.275
+score PP_MIME_FAKE_ASCII_TEXT        0.001
+score RATWARE_NO_RDNS                2.057
 score REPTO_419_FRAUD_GM             0.001
 score REPTO_419_FRAUD_HM_LOOSE       0.999
 score RISK_FREE                      2.599
-score SHORTENER_SHORT_IMG            0.121
-score SPOOFED_FREEMAIL_NO_RDNS       1.401
-score SPOOF_GMAIL_MID                1.370
-score STATIC_XPRIO_OLE               0.003
+score SHORTENER_SHORT_IMG            0.115
+score SPOOFED_FREEMAIL_NO_RDNS       1.405
+score SPOOF_GMAIL_MID                1.252
+score STATIC_XPRIO_OLE               0.001
 score SUSP_UTF8_WORD_FROM            1.999
 score TEQF_USR_POLITE                1.999
-score THIS_IS_ADV_SUSP_NTLD          0.001
+score THIS_IS_ADV_SUSP_NTLD          0.165
 score TO_EQ_FM_DIRECT_MX             0.001
 score TO_EQ_FM_DOM_HTML_ONLY         0.001
-score TO_EQ_FM_HTML_DIRECT           2.398
+score TO_EQ_FM_HTML_DIRECT           0.402
 score TO_EQ_FM_HTML_ONLY             0.001
-score TO_IN_SUBJ                     0.099
-score TO_NO_BRKTS_DYNIP              2.249
+score TO_IN_SUBJ                     0.100
+score TO_NO_BRKTS_DYNIP              2.250
 score TO_NO_BRKTS_FROM_MSSP          2.499
-score TO_NO_BRKTS_HTML_IMG           0.001
+score TO_NO_BRKTS_HTML_IMG           0.001 # force non-zero
 score TO_NO_BRKTS_HTML_ONLY          1.999
 score TO_NO_BRKTS_MSFT               2.499
 score TO_NO_BRKTS_NORDNS_HTML        1.999
-score TO_NO_BRKTS_PCNT               2.443
-score TVD_DOLLARS_US                 1.522
+score TO_NO_BRKTS_PCNT               2.499
+score TVD_DOLLARS_US                 0.995
 score TVD_SPACE_ENCODED              2.499
 score TVD_SPACE_RATIO_MINFP          0.001
 score UNDISC_FREEM                   2.699
-score UNDISC_MONEY                   3.099
+score UNDISC_MONEY                   2.999
 score UNICODE_OBFU_ASC               2.499
 score UNICODE_OBFU_ZW_MANY           2.999
 score UPPERCASE_URI                  2.749
 score URI_DOTCN_LOGIN                1.499
-score URI_DOTCN_SPOOF                2.999
+score URI_DOTCN_SPOOF                3.000
 score URI_EXCESS_SLASHES             2.499
-score URI_FIREBASEAPP                2.999
-score URI_GOOGLE_PROXY               2.700
+score URI_FIREBASEAPP                3.000
+score URI_GOOGLE_PROXY               2.699
 score URI_IPFS                       3.499
-score URI_IPFSIO                     2.219
+score URI_IPFSIO                     1.655
 score URI_PHISH                      3.999
 score URI_TRY_3LD                    1.999
-score URI_WPADMIN                    2.799
-score URI_WP_HACKED                  2.201
+score URI_WPADMIN                    2.899
+score URI_WP_HACKED                  2.100
 score URI_WP_HACKED_2                2.499
-score VFY_ACCT_NORDNS                2.495
+score VFY_ACCT_NORDNS                2.500
 score WIKI_IMG                       2.499
 score WORD_INVIS                     2.999
-score WORD_INVIS_MANY                3.000
+score WORD_INVIS_MANY                2.999
 score XM_RANDOM                      2.499
 score XM_RECPTID                     2.999
-score XPRIO                          2.249
+score XPRIO                          0.699
 score AC_HTML_NONSENSE_TAGS          1.000
 score AC_POST_EXTRAS                 1.000
 score AC_SPAMMY_URI_PATTERNS1        1.000
@@ -225,11 +231,9 @@ score BEBEE_IMG_NOT_RCVD_BB          1.0
 score BITCOIN_BOMB                   1.000
 score BITCOIN_EXTORT_02              1.000
 score BITCOIN_IMGUR                  1.000
-score BITCOIN_MALWARE                1.000
 score BITCOIN_OBFU_SUBJ              1.000
 score BITCOIN_PAY_ME                 1.000
 score BITCOIN_SPAM_01                1.000
-score BITCOIN_SPAM_03                1.000
 score BITCOIN_SPAM_04                1.000
 score BITCOIN_SPAM_06                1.000
 score BITCOIN_SPAM_08                1.000
@@ -264,7 +268,6 @@ score FOUND_YOU                      1.0
 score FREEM_FRNUM_UNICD_EMPTY        1.000
 score FRNAME_IN_MSG_XPRIO_NO_SUB     1.000
 score FROM_LONG_DOM                  1.000
-score FROM_NTLD_LINKBAIT             1.000
 score FROM_NTLD_REPLY_FREEMAIL       1.000
 score GAPPY_SALES_LEADS_FREEM        1.000
 score GB_FAKE_RF_SHORT               1.000
@@ -309,8 +312,8 @@ score LIST_PRTL_SAME_USER            1.0
 score LONG_HEX_URI                   1.000
 score LONG_IMG_URI                   1.000
 score MALF_HTML_B64                  1.000
-score MALWARE_NORDNS                 1.000
 score MALWARE_PASSWORD               1.000
+score MANY_HDRS_LCASE                0.100
 score MC_MSFT_LISTMGR                1.000
 score MIXED_AREA_CASE                1.000
 score MIXED_FONT_CASE                1.000

Modified: spamassassin/trunk/rulesrc/scores/scores-set3
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3	Thu Jul 30 00:45:03 2026	(r1936705)
+++ spamassassin/trunk/rulesrc/scores/scores-set3	Thu Jul 30 02:47:47 2026	(r1936706)
@@ -13,6 +13,7 @@ score AC_SPAMMY_URI_PATTERNS3 1.000
 score AC_SPAMMY_URI_PATTERNS4 1.000
 score AC_SPAMMY_URI_PATTERNS8 1.000
 score AC_SPAMMY_URI_PATTERNS9 1.000
+score ADMAIL 0.001
 score ADMITS_SPAM 1.999
 score ADULT_DATING_COMPANY 10.000
 score ADVANCE_FEE_2_NEW_FORM 1.000
@@ -42,6 +43,7 @@ score BITCOIN_DIRECT 0.001
 score BITCOIN_EXTORT_01 4.752
 score BITCOIN_EXTORT_02 1.000
 score BITCOIN_IMGUR 1.000
+score BITCOIN_MALF_HTML 0.001
 score BITCOIN_MALWARE 1.000
 score BITCOIN_OBFU_SUBJ 1.000
 score BITCOIN_ONAN 2.186
@@ -155,6 +157,7 @@ score FSL_CTYPE_WIN1251 2.703
 score FSL_HAS_TINYURL 3.699
 score FSL_HELO_BARE_IP_2 1.373
 score FSL_NEW_HELO_USER 0.001
+score FUZZY_BITCOIN 0.001
 score GAPPY_SALES_LEADS_FREEM 1.000
 score GB_BITCOIN_CP 2.832
 score GB_CUSTOM_HTM_URI 0.001
@@ -236,7 +239,6 @@ score MALF_HTML_B64 1.000
 score MALWARE_NORDNS 1.000
 score MALWARE_PASSWORD 1.000
 score MALW_ATTACH 2.699
-score MANY_HDRS_LCASE 0.001
 score MAY_BE_FORGED 4.199
 score MC_MSFT_LISTMGR 1.000
 score MILLION_HUNDRED 2.329
@@ -313,6 +315,8 @@ score RCVD_DOTEDU_SHORT 1.000
 score RCVD_DOTEDU_SUSP_URI 1.000
 score RCVD_IN_IADB_DMARC 0.001
 score RCVD_IN_IADB_ESP -0.001
+score RCVD_IN_IADB_MI_CPR_MAT 0.001
+score RCVD_IN_IADB_UT_CPR_MAT 0.001
 score RCVD_IN_MSPIKE_BL 0.001
 score RCVD_IN_MSPIKE_H2 0.001
 score RCVD_IN_MSPIKE_H3 0.001
@@ -360,7 +364,6 @@ score SPOOFED_FREEM_REPTO_RUS 1.000
 score SPOOF_GMAIL_MID 0.001
 score STATIC_XPRIO_OLE 0.001
 score STOCK_TIP 1.000
-score STY_INVIS_DIRECT 2.499
 score SUBJ_BRKN_WORDNUMS 1.000
 score SURBL_BLOCKED 0.001
 score SUSP_UTF8_WORD_FROM 1.999
@@ -420,6 +423,7 @@ score URI_GOOG_STO_SPAMMY 1.000
 score URI_HEX_IP 1.000
 score URI_IMG_CWINDOWSNET 1.000
 score URI_IMG_WP_REDIR 1.000
+score URI_INFURAIPFSIO 0.001
 score URI_IPFS 3.499
 score URI_IPFSIO 3.324
 score URI_LONG_REPEAT 1.000

Modified: spamassassin/trunk/rulesrc/scores/stats-set0
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0	Thu Jul 30 00:45:03 2026	(r1936705)
+++ spamassassin/trunk/rulesrc/scores/stats-set0	Thu Jul 30 02:47:47 2026	(r1936706)
@@ -1,40 +1,40 @@
 ##### WITH NEW RULES AND SCORES #####
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 164782  15.638%  (93.235% of non-spam corpus)
-# Correctly spam:     665010  63.111%  (75.831% of spam corpus)
-# False positives:     11956  1.135%  (6.765% of nonspam, 1582976 weighted)
-# False negatives:    211959  20.116%  (24.169% of spam, 326419 weighted)
-# Average score for spam:  7.5    nonspam: 0.7
-# Average for false-pos:   5.3  false-neg: 1.5
-# TOTAL:              1053707  100.00%
+# Correctly non-spam: 167086  15.448%  (93.318% of non-spam corpus)
+# Correctly spam:     687142  63.530%  (76.134% of spam corpus)
+# False positives:     11964  1.106%  (6.682% of nonspam, 1609140 weighted)
+# False negatives:    215405  19.915%  (23.866% of spam, 344822 weighted)
+# Average score for spam:  7.6    nonspam: 0.7
+# Average for false-pos:   5.3  false-neg: 1.6
+# TOTAL:              1081597  100.00%
 
 Reading scores from "tmprules"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  20793  93.56%
-# Correctly spam:      83271  76.07%
-# False positives:      1432  6.44%
-# False negatives:     26201  23.93%
-# TCR(l=50): 1.119334  SpamRecall: 76.066%  SpamPrec: 98.309%
+# Correctly non-spam:  21037  93.53%
+# Correctly spam:      86017  76.35%
+# False positives:      1456  6.47%
+# False negatives:     26649  23.65%
+# TCR(l=50): 1.132902  SpamRecall: 76.347%  SpamPrec: 98.335%
 
 ##### WITHOUT NEW RULES AND SCORES #####
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam: 174917  98.97%
-# Correctly spam:     188481  21.49%
-# False positives:      1821  1.03%
-# False negatives:    688488  78.51%
-# TCR(l=50): 1.124986  SpamRecall: 21.492%  SpamPrec: 99.043%
+# Correctly non-spam: 177221  98.98%
+# Correctly spam:     191105  21.17%
+# False positives:      1829  1.02%
+# False negatives:    711442  78.83%
+# TCR(l=50): 1.124120  SpamRecall: 21.174%  SpamPrec: 99.052%
 Reading scores from "../rules-base"...
 Reading per-message hit stat logs and scores...
 
 # SUMMARY for threshold 5.0:
-# Correctly non-spam:  21986  98.92%
-# Correctly spam:      23796  21.74%
-# False positives:       239  1.08%
-# False negatives:     85676  78.26%
-# TCR(l=50): 1.121341  SpamRecall: 21.737%  SpamPrec: 99.006%
+# Correctly non-spam:  22248  98.91%
+# Correctly spam:      23871  21.19%
+# False positives:       245  1.09%
+# False negatives:     88795  78.81%
+# TCR(l=50): 1.115008  SpamRecall: 21.187%  SpamPrec: 98.984%