svn commit: r1936751 - spamassassin/trunk/rulesrc/scores
[email protected] Fri, 31 Jul 2026 02:38:27 -0000
| Newsgroups | gmane.mail.spam.spamassassin.cvs |
|---|---|
| Message-ID | <178546550745.544042.13374133919548969569@svn03-he-fi> |
Author: spamassassin_role Date: Fri Jul 31 02:38:27 2026 New Revision: 1936751 Log: updated scores for revision 1936716 active rules added since last mass-check [set1 carried forward r1936706: insufficient ham contributors] Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf spamassassin/trunk/rulesrc/scores/scores-set0 spamassassin/trunk/rulesrc/scores/scores-set1 spamassassin/trunk/rulesrc/scores/scores-set2 spamassassin/trunk/rulesrc/scores/scores-set3 spamassassin/trunk/rulesrc/scores/stats-set0 Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf ============================================================================== --- spamassassin/trunk/rulesrc/scores/72_scores.cf Thu Jul 30 20:54:14 2026 (r1936750) +++ spamassassin/trunk/rulesrc/scores/72_scores.cf Fri Jul 31 02:38:27 2026 (r1936751) @@ -1,7 +1,7 @@ -score ACCT_PHISHING_MANY 2.999 2.780 2.999 2.780 +score ACCT_PHISHING_MANY 2.552 2.780 2.552 2.780 score AC_BR_BONANZA 0.001 0.001 0.001 0.001 score AC_DIV_BONANZA 0.001 0.001 0.001 0.001 -score AC_FROM_MANY_DOTS 2.500 2.499 2.500 2.499 +score AC_FROM_MANY_DOTS 2.499 2.499 2.499 2.499 score AC_HTML_NONSENSE_TAGS 1.000 1.000 1.000 1.000 score AC_POST_EXTRAS 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000 @@ -14,16 +14,16 @@ score AC_SPAMMY_URI_PATTERNS4 score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000 score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000 score ADMAIL 0.001 0.001 0.001 0.001 -score ADMITS_SPAM 2.000 1.999 2.000 1.999 +score ADMITS_SPAM 1.999 1.999 1.999 1.999 score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000 score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000 score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 2.499 1.000 2.499 score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999 -score ADVANCE_FEE_3_NEW 2.499 3.499 2.499 3.499 -score ADVANCE_FEE_3_NEW_MONEY 3.200 2.911 3.200 2.911 -score ADVANCE_FEE_4_NEW 2.899 2.799 2.899 2.799 +score ADVANCE_FEE_3_NEW 2.504 3.499 2.504 3.499 +score ADVANCE_FEE_3_NEW_MONEY 1.676 2.911 1.676 2.911 +score ADVANCE_FEE_4_NEW 2.800 2.799 2.800 2.799 score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001 -score ADVANCE_FEE_5_NEW_FRM_MNY 1.043 0.150 1.043 0.150 +score ADVANCE_FEE_5_NEW_FRM_MNY 1.536 0.150 1.536 0.150 score ADVANCE_FEE_5_NEW_MONEY 3.099 2.999 3.099 2.999 score AD_PREFS 0.001 0.001 0.001 0.001 score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000 @@ -33,28 +33,28 @@ score APP_DEVELOPMENT_NORDNS score ARC_SIGNED 0.001 0.001 0.001 0.001 score ARC_TRUSTED 0.001 0.001 0.001 0.001 score ARC_VALID 0.001 0.001 0.001 0.001 -score AXB_XMAILER_MIMEOLE_OL_024C2 2.923 1.435 2.923 1.435 +score AXB_XMAILER_MIMEOLE_OL_024C2 1.978 1.435 1.978 1.435 score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000 -score BIGNUM_EMAILS_FREEM 1.093 2.308 1.093 2.308 -score BIGNUM_EMAILS_MANY 2.652 3.000 2.652 3.000 +score BIGNUM_EMAILS_FREEM 0.650 2.308 0.650 2.308 +score BIGNUM_EMAILS_MANY 1.038 3.000 1.038 3.000 score BITCOIN_BOMB 1.000 1.000 1.000 1.000 -score BITCOIN_DEADLINE 2.177 1.834 2.177 1.834 +score BITCOIN_DEADLINE 1.913 1.834 1.913 1.834 score BITCOIN_DIRECT 3.499 0.001 3.499 0.001 -score BITCOIN_EXTORT_01 2.202 4.752 2.202 4.752 +score BITCOIN_EXTORT_01 2.573 4.752 2.573 4.752 score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000 score BITCOIN_IMGUR 1.000 1.000 1.000 1.000 -score BITCOIN_MALF_HTML 3.091 0.001 3.091 0.001 +score BITCOIN_MALF_HTML 3.499 0.001 3.499 0.001 score BITCOIN_MALWARE 3.499 1.000 3.499 1.000 score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000 -score BITCOIN_ONAN 2.999 2.186 2.999 2.186 +score BITCOIN_ONAN 1.557 2.186 1.557 2.186 score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000 -score BITCOIN_SPAM_02 1.120 2.499 1.120 2.499 +score BITCOIN_SPAM_02 1.974 2.499 1.974 2.499 score BITCOIN_SPAM_03 2.499 1.000 2.499 1.000 score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_05 0.001 2.499 0.001 2.499 score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000 -score BITCOIN_SPAM_07 2.453 2.492 2.453 2.492 +score BITCOIN_SPAM_07 1.872 2.492 1.872 2.492 score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_09 1.000 1.000 1.000 1.000 score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000 @@ -62,12 +62,12 @@ score BITCOIN_SPAM_11 score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000 score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000 score BITCOIN_TOEQFM 3.499 2.321 3.499 2.321 -score BITCOIN_VISTA 2.743 3.499 2.743 3.499 -score BITCOIN_XPRIO 2.499 2.499 2.499 2.499 -score BITCOIN_YOUR_INFO 2.497 2.716 2.497 2.716 -score BODY_URI_ONLY 2.353 0.235 2.353 0.235 +score BITCOIN_VISTA 1.273 3.499 1.273 3.499 +score BITCOIN_XPRIO 0.767 2.499 0.767 2.499 +score BITCOIN_YOUR_INFO 2.230 2.716 2.230 2.716 +score BODY_URI_ONLY 2.355 0.235 2.355 0.235 score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000 -score BOGUS_MSM_HDRS 1.390 0.479 1.390 0.479 +score BOGUS_MSM_HDRS 0.638 0.479 0.638 0.479 score BOMB_FREEM 1.000 1.000 1.000 1.000 score BOMB_MONEY 1.000 1.000 1.000 1.000 score BTC_ORG 1.000 1.000 1.000 1.000 @@ -76,18 +76,17 @@ score CANT_SEE_AD score CN_PHISH_JP_01 1.000 1.000 1.000 1.000 score CN_PHISH_JP_02 2.499 2.499 2.499 2.499 score CN_PHISH_JP_03 1.000 1.000 1.000 1.000 -score CN_PHISH_JP_04 1.278 1.656 1.278 1.656 +score CN_PHISH_JP_04 1.690 1.656 1.690 1.656 score CN_PHISH_JP_06 1.000 1.000 1.000 1.000 score CN_PHISH_JP_07 1.000 1.000 1.000 1.000 score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000 -score COMPENSATION 0.712 1.499 0.712 1.499 +score COMPENSATION 1.499 1.499 1.499 1.499 score CONTENT_AFTER_HTML 0.001 0.001 0.001 0.001 score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000 -score CTE_8BIT_MISMATCH 0.351 0.001 0.351 0.001 +score CTE_8BIT_MISMATCH 0.001 0.001 0.001 0.001 score DATE_IN_FUTURE_96_Q 4.099 4.199 4.099 4.199 score DAY_I_EARNED 1.000 1.000 1.000 1.000 -score DEAR_BENEFICIARY 3.000 2.999 3.000 2.999 -score DEAR_EMAIL 1.499 1.499 1.499 1.499 +score DEAR_BENEFICIARY 3.099 2.999 3.099 2.999 score DKIMWL_BL 0.001 1.000 0.001 1.000 score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001 score DKIMWL_WL_HIGH 0.001 -1.580 0.001 -1.580 @@ -95,12 +94,12 @@ score DKIMWL_WL_MED score DKIMWL_WL_MEDHI 0.001 -1.000 0.001 -1.000 score DMARC_PERMERROR 0.001 0.001 0.001 0.001 score DMARC_TEMPERROR 0.001 0.001 0.001 0.001 -score DOS_BODY_HIGH_NO_MID 3.900 4.000 3.900 4.000 +score DOS_BODY_HIGH_NO_MID 3.899 4.000 3.899 4.000 score DOTGOV_IMAGE 1.000 1.000 1.000 1.000 score DSN_NO_MIMEVERSION 1.999 1.999 1.999 1.999 score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000 score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000 -score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999 +score ENCRYPTED_MESSAGE -1.000 -0.999 -1.000 -0.999 score END_FUTURE_EMAILS 1.999 0.743 1.999 0.743 score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000 score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000 @@ -110,11 +109,11 @@ score FILL_THIS_FORM score FONT_INVIS_DIRECT 3.499 1.977 3.499 1.977 score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000 score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000 -score FONT_INVIS_LONG_LINE 1.997 1.729 1.997 1.729 -score FONT_INVIS_MSGID 2.499 2.499 2.499 2.499 -score FONT_INVIS_NORDNS 0.598 0.001 0.598 0.001 +score FONT_INVIS_LONG_LINE 1.996 1.729 1.996 1.729 +score FONT_INVIS_MSGID 2.500 2.499 2.500 2.499 +score FONT_INVIS_NORDNS 0.594 0.001 0.594 0.001 score FONT_INVIS_POSTEXTRAS 1.000 1.000 1.000 1.000 -score FORM_FRAUD 1.000 0.999 1.000 0.999 +score FORM_FRAUD 0.999 0.999 0.999 0.999 score FORM_FRAUD_3 2.499 2.599 2.499 2.599 score FORM_FRAUD_5 0.001 0.001 0.001 0.001 score FOUND_YOU 1.000 1.000 1.000 1.000 @@ -130,37 +129,37 @@ score FROM_FMBLA_NEWDOM28 score FROM_GOV_DKIM_AU 0.001 -1.000 0.001 -1.000 score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000 score FROM_GOV_SPOOF 0.001 0.999 0.001 0.999 -score FROM_IN_TO_AND_SUBJ 2.399 2.599 2.399 2.599 +score FROM_IN_TO_AND_SUBJ 2.499 2.599 2.499 2.599 score FROM_LONG_DOM 1.000 1.000 1.000 1.000 score FROM_LONG_DOM_MINFP 2.499 0.648 2.499 0.648 -score FROM_MISSPACED 1.304 0.037 1.304 0.037 +score FROM_MISSPACED 1.127 0.037 1.127 0.037 score FROM_MISSP_DYNIP 2.217 2.999 2.217 2.999 score FROM_MISSP_EH_MATCH 1.999 1.828 1.999 1.828 -score FROM_MISSP_FREEMAIL 0.694 3.299 0.694 3.299 -score FROM_MISSP_MSFT 1.684 0.794 1.684 0.794 -score FROM_MISSP_REPLYTO 2.499 2.359 2.499 2.359 +score FROM_MISSP_FREEMAIL 0.869 3.299 0.869 3.299 +score FROM_MISSP_MSFT 2.172 0.794 2.172 0.794 +score FROM_MISSP_REPLYTO 2.500 2.359 2.500 2.359 score FROM_MISSP_SPF_FAIL 0.001 1.181 0.001 1.181 -score FROM_MISSP_USER 0.575 0.094 0.575 0.094 -score FROM_MISSP_XPRIO 1.482 0.490 1.482 0.490 -score FROM_MULTI_NORDNS 2.822 3.902 2.822 3.902 +score FROM_MISSP_USER 2.859 0.094 2.859 0.094 +score FROM_MISSP_XPRIO 1.969 0.490 1.969 0.490 +score FROM_MULTI_NORDNS 2.999 3.902 2.999 3.902 score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000 -score FROM_NTLD_LINKBAIT 0.936 1.000 0.936 1.000 +score FROM_NTLD_LINKBAIT 1.240 1.000 1.240 1.000 score FROM_NTLD_REPLY_FREEMAIL 1.000 1.000 1.000 1.000 score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000 score FROM_PAYPAL_SPOOF 0.001 1.000 0.001 1.000 score FROM_SUSPICIOUS_NTLD 0.500 0.500 0.500 0.500 score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999 -score FROM_WSP_LEAD 2.932 3.200 2.932 3.200 +score FROM_WSP_LEAD 3.299 3.200 3.299 3.200 score FROM_WSP_TRAIL 3.099 2.128 3.099 2.128 score FSL_BULK_SIG 0.001 0.001 0.001 0.001 -score FSL_CTYPE_WIN1251 1.790 2.703 1.790 2.703 +score FSL_CTYPE_WIN1251 0.898 2.703 0.898 2.703 score FSL_HAS_TINYURL 2.499 3.699 2.499 3.699 -score FSL_HELO_BARE_IP_2 2.196 1.373 2.196 1.373 +score FSL_HELO_BARE_IP_2 1.600 1.373 1.600 1.373 score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001 -score FUZZY_BITCOIN 2.599 0.001 2.599 0.001 -score FUZZY_SECURITY 2.099 0.001 2.099 0.001 +score FUZZY_BITCOIN 2.699 0.001 2.699 0.001 +score FUZZY_SECURITY 2.100 0.001 2.100 0.001 score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000 -score GB_BITCOIN_CP 0.230 2.832 0.230 2.832 +score GB_BITCOIN_CP 2.757 2.832 2.757 2.832 score GB_CUSTOM_HTM_URI 0.001 0.001 0.001 0.001 score GB_FAKE_RF_SHORT 1.000 1.000 1.000 1.000 score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000 @@ -176,32 +175,31 @@ score GOOGLE_DRIVE_REPLY_BAD_NTLD score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000 score GOOG_REDIR_FRAUD 1.000 1.000 1.000 1.000 score GOOG_REDIR_HTML_ONLY 1.499 1.500 1.499 1.500 -score GOOG_REDIR_NORDNS 1.500 1.500 1.500 1.500 -score GOOG_REDIR_NOTRDNS 0.396 0.641 0.396 0.641 +score GOOG_REDIR_NORDNS 1.499 1.500 1.499 1.500 +score GOOG_REDIR_NOTRDNS 0.001 0.641 0.001 0.641 score GOOG_REDIR_SHORT 1.000 1.000 1.000 1.000 score GOOG_REDIR_STATICRDNS 1.000 1.000 1.000 1.000 score GOOG_STO_EMAIL_PHISH 2.999 2.999 2.999 2.999 -score GOOG_STO_HTML_PHISH 1.892 1.682 1.892 1.682 +score GOOG_STO_HTML_PHISH 0.301 1.682 0.301 1.682 score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000 score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000 score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000 score GOOG_STO_NOIMG_HTML 2.999 2.999 2.999 2.999 score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000 score HAS_X_OUTGOING_SPAM_STAT 1.000 1.000 1.000 1.000 -score HDRS_LCASE 0.100 0.001 0.100 0.001 score HDRS_MISSP 1.000 1.000 1.000 1.000 -score HDR_ORDER_FTSDMCXX_DIRECT 1.555 1.470 1.555 1.470 -score HDR_ORDER_FTSDMCXX_NORDNS 0.223 2.898 0.223 2.898 +score HDR_ORDER_FTSDMCXX_DIRECT 1.526 1.470 1.526 1.470 +score HDR_ORDER_FTSDMCXX_NORDNS 1.643 2.898 1.643 2.898 score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.250 0.001 0.250 -score HELO_MISC_IP 0.250 0.249 0.250 0.249 +score HELO_MISC_IP 0.249 0.249 0.249 0.249 score HELO_NO_DOMAIN 0.001 0.434 0.001 0.434 score HEXHASH_WORD 1.000 1.000 1.000 1.000 score HK_CTE_RAW 1.000 1.000 1.000 1.000 -score HK_NAME_FM_MR_MRS 1.052 0.001 1.052 0.001 +score HK_NAME_FM_MR_MRS 0.919 0.001 0.919 0.001 score HK_NAME_MR_MRS 1.000 0.999 1.000 0.999 -score HK_RANDOM_ENVFROM 1.000 0.001 1.000 0.001 -score HK_RANDOM_FROM 1.000 1.000 1.000 1.000 -score HK_RANDOM_REPLYTO 1.000 0.999 1.000 0.999 +score HK_RANDOM_ENVFROM 0.999 0.001 0.999 0.001 +score HK_RANDOM_FROM 0.999 1.000 0.999 1.000 +score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999 score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000 score HK_SCAM 0.001 0.001 0.001 0.001 score HOSTED_IMG_DIRECT_MX 3.499 1.000 3.499 1.000 @@ -209,17 +207,17 @@ score HOSTED_IMG_DQ_UNSUB score HOSTED_IMG_FREEM 1.000 1.000 1.000 1.000 score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000 score HOSTED_IMG_MULTI_PUB_01 2.999 2.999 2.999 2.999 -score HREF_EMPTY_NORDNS 0.502 1.379 0.502 1.379 +score HREF_EMPTY_NORDNS 0.500 1.379 0.500 1.379 score HREF_EMPTY_PHPMAIL 1.000 1.000 1.000 1.000 score HREF_EMPTY_XANTIABUSE 1.000 1.000 1.000 1.000 score HREF_EMPTY_XAUTHED 1.000 1.000 1.000 1.000 score HTML_ENTITY_ASCII 2.999 2.999 2.999 2.999 score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000 score HTML_FONT_TINY_NORDNS 1.999 1.999 1.999 1.999 -score HTML_OFF_PAGE 2.639 2.999 2.639 2.999 +score HTML_OFF_PAGE 2.667 2.999 2.667 2.999 score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000 score HTML_SINGLET_MANY 2.499 1.992 2.499 1.992 -score HTML_TAG_BALANCE_CENTER 2.900 2.387 2.900 2.387 +score HTML_TAG_BALANCE_CENTER 2.906 2.387 2.906 2.387 score HTML_TEXT_INVISIBLE_FONT 0.001 0.001 0.001 0.001 score HTML_TEXT_INVISIBLE_STYLE 1.000 1.000 1.000 1.000 score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000 @@ -231,79 +229,79 @@ score LINKEDIN_IMG_NOT_RCVD_LNKN score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000 score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000 score LONG_HEX_URI 1.000 1.000 1.000 1.000 -score LONG_IMG_URI 1.000 1.000 1.000 1.000 +score LONG_IMG_URI 0.001 1.000 0.001 1.000 score LONG_INVISIBLE_TEXT 2.999 2.999 2.999 2.999 score LOTS_OF_MONEY 0.010 0.010 0.010 0.010 score LOTTO_DEPT 1.999 1.999 1.999 1.999 score LUCRATIVE 0.001 0.001 0.001 0.001 score MALF_HTML_B64 1.000 1.000 1.000 1.000 -score MALWARE_NORDNS 0.053 1.000 0.053 1.000 +score MALWARE_NORDNS 2.055 1.000 2.055 1.000 score MALWARE_PASSWORD 1.000 1.000 1.000 1.000 -score MALW_ATTACH 2.399 2.699 2.399 2.699 -score MANY_HDRS_LCASE 0.100 0.001 0.100 0.001 +score MALW_ATTACH 2.499 2.699 2.499 2.699 score MAY_BE_FORGED 3.899 4.199 3.899 4.199 score MC_MSFT_LISTMGR 1.000 1.000 1.000 1.000 score MILLION_HUNDRED 2.699 2.329 2.699 2.329 score MILLION_USD 1.999 1.999 1.999 1.999 -score MIMEOLE_DIRECT_TO_MX 1.948 1.237 1.948 1.237 +score MIMEOLE_DIRECT_TO_MX 0.232 1.237 0.232 1.237 score MIME_NO_TEXT 0.001 0.001 0.001 0.001 score MIXED_AREA_CASE 1.000 1.000 1.000 1.000 -score MIXED_CENTER_CASE 1.068 2.499 1.068 2.499 -score MIXED_ES 1.084 0.001 1.084 0.001 +score MIXED_CENTER_CASE 2.499 2.499 2.499 2.499 +score MIXED_ES 1.593 0.001 1.593 0.001 score MIXED_FONT_CASE 1.000 1.000 1.000 1.000 -score MIXED_HREF_CASE 2.000 1.999 2.000 1.999 -score MIXED_IMG_CASE 2.999 1.695 2.999 1.695 +score MIXED_HREF_CASE 1.999 1.999 1.999 1.999 +score MIXED_IMG_CASE 0.315 1.695 0.315 1.695 score MONERO_DEADLINE 1.000 1.000 1.000 1.000 score MONERO_EXTORT_01 1.000 1.000 1.000 1.000 score MONERO_MALWARE 1.000 1.000 1.000 1.000 score MONERO_PAY_ME 1.000 1.000 1.000 1.000 score MONEY_FORM 0.001 0.001 0.001 0.001 score MONEY_FORM_SHORT 2.491 2.453 2.491 2.453 -score MONEY_FRAUD_3 2.188 2.697 2.188 2.697 -score MONEY_FRAUD_5 2.434 1.649 2.434 1.649 +score MONEY_FRAUD_3 2.520 2.697 2.520 2.697 +score MONEY_FRAUD_5 3.194 1.649 3.194 1.649 score MONEY_FRAUD_8 0.001 0.001 0.001 0.001 -score MONEY_FREEMAIL_REPTO 0.741 0.001 0.741 0.001 -score MONEY_FROM_41 1.942 1.999 1.942 1.999 +score MONEY_FREEMAIL_REPTO 0.739 0.001 0.739 0.001 +score MONEY_FROM_41 1.939 1.999 1.939 1.999 score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001 score MONEY_NOHTML 2.499 1.569 2.499 1.569 score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000 score MSGID_HDR_MALF 1.000 1.000 1.000 1.000 -score MSM_PRIO_REPTO 0.885 0.818 0.885 0.818 -score MXG_EMAIL_FRAG 0.100 0.100 0.100 0.100 -score MXG_SPOOFED_DOCUSIGN 0.099 0.100 0.099 0.100 -score NAME_EMAIL_DIFF 1.387 0.001 1.387 0.001 +score MSM_PRIO_REPTO 0.260 0.818 0.260 0.818 +score MXG_EMAIL_FRAG 0.099 0.100 0.099 0.100 +score MXG_SPOOFED_DOCUSIGN 0.100 0.100 0.100 0.100 +score NAME_EMAIL_DIFF 1.469 0.001 1.469 0.001 score NA_DOLLARS 1.499 1.499 1.499 1.499 score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000 score NEW_PRODUCTS 1.249 1.250 1.249 1.250 -score NICE_REPLY_A -1.202 -2.360 -1.202 -2.360 -score NORDNS_LOW_CONTRAST 1.887 2.499 1.887 2.499 +score NICE_REPLY_A -1.006 -2.360 -1.006 -2.360 +score NORDNS_LOW_CONTRAST 1.888 2.499 1.888 2.499 score NO_FM_NAME_IP_HOSTN 0.001 1.552 0.001 1.552 score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001 -score NUMBERONLY_BITCOIN_EXP 0.641 1.999 0.641 1.999 -score OBFU_BITCOIN 0.707 1.629 0.707 1.629 -score ODD_FREEM_REPTO 2.999 0.001 2.999 0.001 +score NUMBERONLY_BITCOIN_EXP 0.187 1.999 0.187 1.999 +score OBFU_BITCOIN 1.782 1.629 1.782 1.629 +score ODD_FREEM_REPTO 0.001 0.001 0.001 0.001 score PAYPAL_PHISH_07 1.000 1.000 1.000 1.000 -score PDS_BTC_ID 0.500 0.499 0.500 0.499 -score PDS_BTC_MSGID 0.609 0.414 0.609 0.414 +score PDS_BTC_ID 0.499 0.499 0.499 0.499 +score PDS_BTC_MSGID 0.001 0.414 0.001 0.414 score PDS_DBL_URL_TNB_RUNON 1.999 1.999 1.999 1.999 score PDS_FRNOM_TODOM_DBL_URL 1.499 1.499 1.499 1.499 -score PDS_FRNOM_TODOM_NAKED_TO 0.354 0.541 0.354 0.541 -score PDS_FROM_2_EMAILS 3.013 3.305 3.013 3.305 -score PDS_FROM_NAME_TO_DOMAIN 1.051 1.038 1.051 1.038 +score PDS_FRNOM_TODOM_NAKED_TO 0.874 0.541 0.874 0.541 +score PDS_FROM_2_EMAILS 3.080 3.305 3.080 3.305 +score PDS_FROM_NAME_TO_DOMAIN 0.531 1.038 0.531 1.038 score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000 score PDS_NAKED_TO_NUMERO 1.999 1.999 1.999 1.999 score PDS_OTHER_BAD_TLD 1.999 0.001 1.999 0.001 score PDS_RDNS_DYNAMIC_FP 0.010 0.010 0.010 0.010 +score PHISH_ATTACH 2.299 0.001 2.299 0.001 score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500 score PHISH_FBASEAPP 1.000 1.000 1.000 1.000 score PHONE_ORDERSCAM 1.000 1.000 1.000 1.000 score PHP_NOVER_MUA 1.000 1.000 1.000 1.000 -score PHP_ORIG_SCRIPT 1.404 0.800 1.404 0.800 -score PHP_SCRIPT 2.499 2.499 2.499 2.499 +score PHP_ORIG_SCRIPT 1.405 0.800 1.405 0.800 +score PHP_SCRIPT 0.644 2.499 0.644 2.499 score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000 score PMP_SPAM 1.000 1.000 1.000 1.000 score POSSIBLE_AMAZON_PHISH_03 1.000 1.000 1.000 1.000 -score POSSIBLE_GMAIL_PHISHER 1.275 3.799 1.275 3.799 +score POSSIBLE_GMAIL_PHISHER 0.659 3.799 0.659 3.799 score POSSIBLE_PAYPAL_PHISH_02 1.000 1.000 1.000 1.000 score PP_MIME_FAKE_ASCII_TEXT 0.001 0.239 0.001 0.239 score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500 @@ -313,7 +311,7 @@ score PUMPDUMP_MULTI score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000 score RAND_HEADER_MANY 1.000 1.000 1.000 1.000 score RAND_MKTG_HEADER 1.000 1.000 1.000 1.000 -score RATWARE_NO_RDNS 2.057 1.060 2.057 1.060 +score RATWARE_NO_RDNS 0.297 1.060 0.297 1.060 score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000 score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000 score RCVD_IN_IADB_DMARC 0.001 0.001 0.001 0.001 @@ -355,16 +353,16 @@ score SENDGRID_REDIR score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000 score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000 score SHOPIFY_IMG_NOT_RCVD_SFY 1.000 1.000 1.000 1.000 -score SHORTENER_SHORT_IMG 0.115 0.512 0.115 0.512 +score SHORTENER_SHORT_IMG 0.075 0.512 0.075 0.512 score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000 score SHY_OBFU_EXPIRE 1.000 1.000 1.000 1.000 score SHY_OBFU_PASSWORD 1.000 1.000 1.000 1.000 score SPOOFED_FREEMAIL 0.001 0.916 0.001 0.916 -score SPOOFED_FREEMAIL_NO_RDNS 1.405 1.150 1.405 1.150 +score SPOOFED_FREEMAIL_NO_RDNS 1.402 1.150 1.402 1.150 score SPOOFED_FREEM_REPTO 0.001 1.246 0.001 1.246 score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000 score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000 -score SPOOF_GMAIL_MID 1.252 0.001 1.252 0.001 +score SPOOF_GMAIL_MID 1.277 0.001 1.277 0.001 score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001 score STOCK_TIP 1.000 1.000 1.000 1.000 score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000 @@ -374,12 +372,12 @@ score SYSADMIN score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000 score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000 score TEQF_USR_POLITE 1.999 0.971 1.999 0.971 -score THIS_IS_ADV_SUSP_NTLD 0.165 0.001 0.165 0.001 +score THIS_IS_ADV_SUSP_NTLD 0.003 0.001 0.003 0.001 score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000 score TO_EQ_FM_DIRECT_MX 0.001 0.001 0.001 0.001 score TO_EQ_FM_DOM_HTML_ONLY 0.001 0.077 0.001 0.077 score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001 -score TO_EQ_FM_HTML_DIRECT 0.402 0.769 0.402 0.769 +score TO_EQ_FM_HTML_DIRECT 0.395 0.769 0.395 0.769 score TO_EQ_FM_HTML_ONLY 0.001 0.225 0.001 0.225 score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001 score TO_IN_SUBJ 0.100 0.100 0.100 0.100 @@ -388,10 +386,11 @@ score TO_NO_BRKTS_DYNIP score TO_NO_BRKTS_FROM_MSSP 2.499 2.499 2.499 2.499 score TO_NO_BRKTS_HTML_IMG 0.001 0.001 0.001 0.001 score TO_NO_BRKTS_HTML_ONLY 1.999 1.734 1.999 1.734 -score TO_NO_BRKTS_MSFT 2.499 0.266 2.499 0.266 +score TO_NO_BRKTS_MSFT 2.500 0.266 2.500 0.266 score TO_NO_BRKTS_NORDNS_HTML 1.999 2.000 1.999 2.000 score TO_NO_BRKTS_PCNT 2.499 2.499 2.499 2.499 -score TVD_DOLLARS_US 0.995 1.762 0.995 1.762 +score TVD_DOLLARS_US 0.251 1.762 0.251 1.762 +score TVD_FROM_1 1.000 0.001 1.000 0.001 score TVD_SPACE_ENCODED 2.499 2.499 2.499 2.499 score TVD_SPACE_RATIO_MINFP 0.001 0.001 0.001 0.001 score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000 @@ -400,7 +399,7 @@ score UNDISC_FREEM score UNDISC_MONEY 2.999 2.429 2.999 2.429 score UNICODE_OBFU_ASC 2.499 1.000 2.499 1.000 score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000 -score UNICODE_OBFU_ZW_MANY 2.999 2.625 2.999 2.625 +score UNICODE_OBFU_ZW_MANY 2.490 2.625 2.490 2.625 score UNICODE_RTL_OBFU 1.000 1.000 1.000 1.000 score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000 score UPPERCASE_URI 2.749 2.749 2.749 2.749 @@ -411,13 +410,13 @@ score URI_AZURE_CLOUDAPP score URI_CLOUDFLAREIPFS 1.000 1.000 1.000 1.000 score URI_DASHGOVEDU 1.000 1.000 1.000 1.000 score URI_DATA 1.000 1.000 1.000 1.000 -score URI_DOTCN_LOGIN 1.499 1.499 1.499 1.499 -score URI_DOTCN_SPOOF 3.000 2.999 3.000 2.999 +score URI_DOTCN_LOGIN 1.500 1.499 1.500 1.499 +score URI_DOTCN_SPOOF 2.999 2.999 2.999 2.999 score URI_DOTEDU 1.000 1.000 1.000 1.000 score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000 score URI_DWEBIPFS 1.000 1.000 1.000 1.000 score URI_EXCESS_SLASHES 2.499 1.000 2.499 1.000 -score URI_FIREBASEAPP 3.000 2.999 3.000 2.999 +score URI_FIREBASEAPP 2.999 2.999 2.999 2.999 score URI_FLKIPFSXYZIPFS 1.000 1.000 1.000 1.000 score URI_GLITCHME 1.000 1.000 1.000 1.000 score URI_GOOGDRAWPREVIEW_MINFP 3.000 3.000 3.000 3.000 @@ -427,23 +426,22 @@ score URI_HEX_IP score URI_IMG_CWINDOWSNET 1.000 1.000 1.000 1.000 score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000 score URI_INFURAIPFSIO 1.000 0.001 1.000 0.001 -score URI_IPFS 3.499 3.499 3.499 3.499 -score URI_IPFSIO 1.655 3.324 1.655 3.324 +score URI_IPFS 2.880 3.499 2.880 3.499 +score URI_IPFSIO 2.093 3.324 2.093 3.324 score URI_LONG_REPEAT 1.000 1.000 1.000 1.000 score URI_ONLY_MSGID_MALF 1.000 1.000 1.000 1.000 score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000 -score URI_PHISH 3.999 3.999 3.999 3.999 +score URI_PHISH 4.000 3.999 4.000 3.999 score URI_PHP_REDIR 1.000 1.000 1.000 1.000 score URI_REPLIT_DEV 1.000 1.000 1.000 1.000 score URI_TRY_3LD 1.999 1.894 1.999 1.894 score URI_TRY_USME 1.000 1.000 1.000 1.000 -score URI_W3SIPFS 1.000 1.000 1.000 1.000 score URI_WPADMIN 2.899 1.896 2.899 1.896 score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000 -score URI_WP_HACKED 2.100 2.104 2.100 2.104 -score URI_WP_HACKED_2 2.499 2.499 2.499 2.499 +score URI_WP_HACKED 2.103 2.104 2.103 2.104 +score URI_WP_HACKED_2 2.500 2.499 2.500 2.499 score USB_DRIVES 1.000 1.000 1.000 1.000 -score VFY_ACCT_NORDNS 2.500 2.999 2.500 2.999 +score VFY_ACCT_NORDNS 2.499 2.999 2.499 2.999 score VISTA_COST 1.000 1.000 1.000 1.000 score VISTA_TONOM_EQ_TOLOC 1.000 1.000 1.000 1.000 score VPS_NO_NTLD 1.000 1.000 1.000 1.000 @@ -454,7 +452,7 @@ score WORD_INVIS_MANY score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000 score XM_RANDOM 2.499 2.500 2.499 2.500 score XM_RECPTID 2.999 2.999 2.999 2.999 -score XPRIO 0.699 1.307 0.699 1.307 +score XPRIO 0.692 1.307 0.692 1.307 score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000 score XPRIO_VISTA 1.000 1.000 1.000 1.000 score ZW_OBFU_FROMTOSUBJ 1.000 1.000 1.000 1.000 Modified: spamassassin/trunk/rulesrc/scores/scores-set0 ============================================================================== --- spamassassin/trunk/rulesrc/scores/scores-set0 Thu Jul 30 20:54:14 2026 (r1936750) +++ spamassassin/trunk/rulesrc/scores/scores-set0 Fri Jul 31 02:38:27 2026 (r1936751) @@ -1,215 +1,217 @@ -# Using score set 0 logs for revision 1936693 from: -# ham-giovanni-ham.r1936693.log ham-giovanni-spam.r1936693.log ham-grenier.r1936693.log ham-jhardin.r1936693.log ham-koyer.r1936693.log ham-llanga.r1936693.log ham-mmiroslaw-mails-ham.r1936693.log ham-mmiroslaw-mails-spam.r1936693.log ham-spamsponge.r1936693.log ham-tsz-corpus.r1936693.log ham-whyscream.r1936693.log spam-giovanni-ham.r1936693.log spam-giovanni-spam.r1936693.log spam-grenier.r1936693.log spam-jhardin.r1936693.log spam-koyer.r1936693.log spam-llanga.r1936693.log spam-mmiroslaw-mails-ham.r1936693.log spam-mmiroslaw-mails-spam.r1936693.log spam-spamsponge.r1936693.log spam-tsz-corpus.r1936693.log spam-whyscream.r1936693.log +# Using score set 0 logs for revision 1936716 from: +# ham-giovanni-ham.r1936716.log ham-giovanni-spam.r1936716.log ham-grenier.r1936716.log ham-jhardin.r1936716.log ham-koyer.r1936716.log ham-llanga.r1936716.log ham-mmiroslaw-mails-ham.r1936716.log ham-mmiroslaw-mails-spam.r1936716.log ham-spamsponge.r1936716.log ham-tsz-corpus.r1936716.log ham-whyscream.r1936716.log spam-giovanni-ham.r1936716.log spam-giovanni-spam.r1936716.log spam-grenier.r1936716.log spam-jhardin.r1936716.log spam-koyer.r1936716.log spam-llanga.r1936716.log spam-mmiroslaw-mails-ham.r1936716.log spam-mmiroslaw-mails-spam.r1936716.log spam-spamsponge.r1936716.log spam-tsz-corpus.r1936716.log spam-whyscream.r1936716.log -score ACCT_PHISHING_MANY 2.999 +score ACCT_PHISHING_MANY 2.552 score AC_BR_BONANZA 0.001 score AC_DIV_BONANZA 0.001 # force non-zero -score AC_FROM_MANY_DOTS 2.500 +score AC_FROM_MANY_DOTS 2.499 score ADMAIL 0.001 -score ADMITS_SPAM 2.000 +score ADMITS_SPAM 1.999 score ADVANCE_FEE_2_NEW_MONEY 1.999 -score ADVANCE_FEE_3_NEW 2.499 -score ADVANCE_FEE_3_NEW_MONEY 3.200 -score ADVANCE_FEE_4_NEW 2.899 +score ADVANCE_FEE_3_NEW 2.504 +score ADVANCE_FEE_3_NEW_MONEY 1.676 +score ADVANCE_FEE_4_NEW 2.800 score ADVANCE_FEE_4_NEW_MONEY 0.001 -score ADVANCE_FEE_5_NEW_FRM_MNY 1.043 +score ADVANCE_FEE_5_NEW_FRM_MNY 1.536 score ADVANCE_FEE_5_NEW_MONEY 3.099 score AD_PREFS 0.001 score AMAZON_IMG_NOT_RCVD_AMZN 2.499 -score AXB_XMAILER_MIMEOLE_OL_024C2 2.923 -score BIGNUM_EMAILS_FREEM 1.093 -score BIGNUM_EMAILS_MANY 2.652 -score BITCOIN_DEADLINE 2.177 +score AXB_XMAILER_MIMEOLE_OL_024C2 1.978 +score BIGNUM_EMAILS_FREEM 0.650 +score BIGNUM_EMAILS_MANY 1.038 +score BITCOIN_DEADLINE 1.913 score BITCOIN_DIRECT 3.499 -score BITCOIN_EXTORT_01 2.202 -score BITCOIN_MALF_HTML 3.091 +score BITCOIN_EXTORT_01 2.573 +score BITCOIN_MALF_HTML 3.499 score BITCOIN_MALWARE 3.499 -score BITCOIN_ONAN 2.999 -score BITCOIN_SPAM_02 1.120 +score BITCOIN_ONAN 1.557 +score BITCOIN_SPAM_02 1.974 score BITCOIN_SPAM_03 2.499 -score BITCOIN_SPAM_07 2.453 +score BITCOIN_SPAM_07 1.872 score BITCOIN_TOEQFM 3.499 -score BITCOIN_VISTA 2.743 -score BITCOIN_XPRIO 2.499 -score BITCOIN_YOUR_INFO 2.497 -score BODY_URI_ONLY 2.353 -score BOGUS_MSM_HDRS 1.390 +score BITCOIN_VISTA 1.273 +score BITCOIN_XPRIO 0.767 +score BITCOIN_YOUR_INFO 2.230 +score BODY_URI_ONLY 2.355 +score BOGUS_MSM_HDRS 0.638 score CN_PHISH_JP_02 2.499 -score CN_PHISH_JP_04 1.278 -score COMPENSATION 0.712 -score CONTENT_AFTER_HTML 0.001 -score CTE_8BIT_MISMATCH 0.351 +score CN_PHISH_JP_04 1.690 +score COMPENSATION 1.499 +score CONTENT_AFTER_HTML 0.001 # force non-zero +score CTE_8BIT_MISMATCH 0.001 score DATE_IN_FUTURE_96_Q 4.099 -score DEAR_BENEFICIARY 3.000 -score DEAR_EMAIL 1.499 -score DOS_BODY_HIGH_NO_MID 3.900 +score DEAR_BENEFICIARY 3.099 +score DOS_BODY_HIGH_NO_MID 3.899 score DSN_NO_MIMEVERSION 1.999 -score ENCRYPTED_MESSAGE -0.999 +score ENCRYPTED_MESSAGE -1.000 score END_FUTURE_EMAILS 1.999 score FILL_THIS_FORM 0.001 score FONT_INVIS_DIRECT 3.499 -score FONT_INVIS_LONG_LINE 1.997 -score FONT_INVIS_MSGID 2.499 -score FONT_INVIS_NORDNS 0.598 -score FORM_FRAUD 1.000 +score FONT_INVIS_LONG_LINE 1.996 +score FONT_INVIS_MSGID 2.500 +score FONT_INVIS_NORDNS 0.594 +score FORM_FRAUD 0.999 score FORM_FRAUD_3 2.499 score FORM_FRAUD_5 0.001 score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero score FROM_ADDR_WS 2.999 -score FROM_IN_TO_AND_SUBJ 2.399 +score FROM_IN_TO_AND_SUBJ 2.499 score FROM_LONG_DOM_MINFP 2.499 -score FROM_MISSPACED 1.304 +score FROM_MISSPACED 1.127 score FROM_MISSP_DYNIP 2.217 score FROM_MISSP_EH_MATCH 1.999 -score FROM_MISSP_FREEMAIL 0.694 -score FROM_MISSP_MSFT 1.684 -score FROM_MISSP_REPLYTO 2.499 -score FROM_MISSP_USER 0.575 -score FROM_MISSP_XPRIO 1.482 -score FROM_MULTI_NORDNS 2.822 -score FROM_NTLD_LINKBAIT 0.936 +score FROM_MISSP_FREEMAIL 0.869 +score FROM_MISSP_MSFT 2.172 +score FROM_MISSP_REPLYTO 2.500 +score FROM_MISSP_USER 2.859 +score FROM_MISSP_XPRIO 1.969 +score FROM_MULTI_NORDNS 2.999 +score FROM_NTLD_LINKBAIT 1.240 score FROM_SUSPICIOUS_NTLD 0.500 score FROM_SUSPICIOUS_NTLD_FP 1.999 -score FROM_WSP_LEAD 2.932 +score FROM_WSP_LEAD 3.299 score FROM_WSP_TRAIL 3.099 -score FSL_CTYPE_WIN1251 1.790 +score FSL_CTYPE_WIN1251 0.898 score FSL_HAS_TINYURL 2.499 -score FSL_HELO_BARE_IP_2 2.196 -score FSL_NEW_HELO_USER 0.001 # force non-zero -score FUZZY_BITCOIN 2.599 -score FUZZY_SECURITY 2.099 -score GB_BITCOIN_CP 0.230 -score GB_CUSTOM_HTM_URI 0.001 +score FSL_HELO_BARE_IP_2 1.600 +score FSL_NEW_HELO_USER 0.001 +score FUZZY_BITCOIN 2.699 +score FUZZY_SECURITY 2.100 +score GB_BITCOIN_CP 2.757 +score GB_CUSTOM_HTM_URI 0.001 # force non-zero score GB_FREEMAIL_DISPTO 0.500 score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 score GOOG_REDIR_HTML_ONLY 1.499 -score GOOG_REDIR_NORDNS 1.500 -score GOOG_REDIR_NOTRDNS 0.396 +score GOOG_REDIR_NORDNS 1.499 +score GOOG_REDIR_NOTRDNS 0.001 score GOOG_STO_EMAIL_PHISH 2.999 -score GOOG_STO_HTML_PHISH 1.892 +score GOOG_STO_HTML_PHISH 0.301 score GOOG_STO_NOIMG_HTML 2.999 -score HDR_ORDER_FTSDMCXX_DIRECT 1.555 -score HDR_ORDER_FTSDMCXX_NORDNS 0.223 +score HDR_ORDER_FTSDMCXX_DIRECT 1.526 +score HDR_ORDER_FTSDMCXX_NORDNS 1.643 score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero -score HELO_MISC_IP 0.250 +score HELO_MISC_IP 0.249 score HELO_NO_DOMAIN 0.001 -score HK_NAME_FM_MR_MRS 1.052 +score HK_NAME_FM_MR_MRS 0.919 score HK_NAME_MR_MRS 1.000 -score HK_RANDOM_ENVFROM 1.000 -score HK_RANDOM_FROM 1.000 -score HK_RANDOM_REPLYTO 1.000 +score HK_RANDOM_ENVFROM 0.999 +score HK_RANDOM_FROM 0.999 +score HK_RANDOM_REPLYTO 0.999 score HK_SCAM 0.001 score HOSTED_IMG_DIRECT_MX 3.499 score HOSTED_IMG_MULTI_PUB_01 2.999 -score HREF_EMPTY_NORDNS 0.502 +score HREF_EMPTY_NORDNS 0.500 score HTML_ENTITY_ASCII 2.999 score HTML_FONT_TINY_NORDNS 1.999 -score HTML_OFF_PAGE 2.639 +score HTML_OFF_PAGE 2.667 score HTML_SINGLET_MANY 2.499 -score HTML_TAG_BALANCE_CENTER 2.900 +score HTML_TAG_BALANCE_CENTER 2.906 score HTML_TEXT_INVISIBLE_FONT 0.001 score KHOP_HELO_FCRDNS 0.001 # force non-zero +score LONG_IMG_URI 0.001 score LONG_INVISIBLE_TEXT 2.999 score LOTS_OF_MONEY 0.010 score LOTTO_DEPT 1.999 score LUCRATIVE 0.001 -score MALWARE_NORDNS 0.053 -score MALW_ATTACH 2.399 +score MALWARE_NORDNS 2.055 +score MALW_ATTACH 2.499 score MAY_BE_FORGED 3.899 score MILLION_HUNDRED 2.699 score MILLION_USD 1.999 -score MIMEOLE_DIRECT_TO_MX 1.948 +score MIMEOLE_DIRECT_TO_MX 0.232 score MIME_NO_TEXT 0.001 -score MIXED_CENTER_CASE 1.068 -score MIXED_ES 1.084 -score MIXED_HREF_CASE 2.000 -score MIXED_IMG_CASE 2.999 -score MONEY_FORM 0.001 +score MIXED_CENTER_CASE 2.499 +score MIXED_ES 1.593 +score MIXED_HREF_CASE 1.999 +score MIXED_IMG_CASE 0.315 +score MONEY_FORM 0.001 # force non-zero score MONEY_FORM_SHORT 2.491 -score MONEY_FRAUD_3 2.188 -score MONEY_FRAUD_5 2.434 +score MONEY_FRAUD_3 2.520 +score MONEY_FRAUD_5 3.194 score MONEY_FRAUD_8 0.001 -score MONEY_FREEMAIL_REPTO 0.741 -score MONEY_FROM_41 1.942 +score MONEY_FREEMAIL_REPTO 0.739 +score MONEY_FROM_41 1.939 score MONEY_FROM_MISSP 0.001 score MONEY_NOHTML 2.499 -score MSM_PRIO_REPTO 0.885 -score MXG_EMAIL_FRAG 0.100 -score MXG_SPOOFED_DOCUSIGN 0.099 -score NAME_EMAIL_DIFF 1.387 +score MSM_PRIO_REPTO 0.260 +score MXG_EMAIL_FRAG 0.099 +score MXG_SPOOFED_DOCUSIGN 0.100 +score NAME_EMAIL_DIFF 1.469 score NA_DOLLARS 1.499 score NEW_PRODUCTS 1.249 -score NICE_REPLY_A -1.202 -score NORDNS_LOW_CONTRAST 1.887 +score NICE_REPLY_A -1.006 +score NORDNS_LOW_CONTRAST 1.888 score NO_FM_NAME_IP_HOSTN 0.001 score NSL_RCVD_FROM_USER 0.001 -score NUMBERONLY_BITCOIN_EXP 0.641 -score OBFU_BITCOIN 0.707 -score ODD_FREEM_REPTO 2.999 -score PDS_BTC_ID 0.500 -score PDS_BTC_MSGID 0.609 +score NUMBERONLY_BITCOIN_EXP 0.187 +score OBFU_BITCOIN 1.782 +score ODD_FREEM_REPTO 0.001 # force non-zero +score PDS_BTC_ID 0.499 +score PDS_BTC_MSGID 0.001 score PDS_DBL_URL_TNB_RUNON 1.999 score PDS_FRNOM_TODOM_DBL_URL 1.499 -score PDS_FRNOM_TODOM_NAKED_TO 0.354 -score PDS_FROM_2_EMAILS 3.013 -score PDS_FROM_NAME_TO_DOMAIN 1.051 +score PDS_FRNOM_TODOM_NAKED_TO 0.874 +score PDS_FROM_2_EMAILS 3.080 +score PDS_FROM_NAME_TO_DOMAIN 0.531 score PDS_NAKED_TO_NUMERO 1.999 score PDS_OTHER_BAD_TLD 1.999 score PDS_RDNS_DYNAMIC_FP 0.010 -score PHP_ORIG_SCRIPT 1.404 -score PHP_SCRIPT 2.499 -score POSSIBLE_GMAIL_PHISHER 1.275 +score PHISH_ATTACH 2.299 +score PHP_ORIG_SCRIPT 1.405 +score PHP_SCRIPT 0.644 +score POSSIBLE_GMAIL_PHISHER 0.659 score PP_MIME_FAKE_ASCII_TEXT 0.001 -score RATWARE_NO_RDNS 2.057 +score RATWARE_NO_RDNS 0.297 score REPTO_419_FRAUD_GM 0.001 score REPTO_419_FRAUD_HM_LOOSE 0.999 score RISK_FREE 2.599 -score SHORTENER_SHORT_IMG 0.115 -score SPOOFED_FREEMAIL_NO_RDNS 1.405 -score SPOOF_GMAIL_MID 1.252 +score SHORTENER_SHORT_IMG 0.075 +score SPOOFED_FREEMAIL_NO_RDNS 1.402 +score SPOOF_GMAIL_MID 1.277 score STATIC_XPRIO_OLE 0.001 score SUSP_UTF8_WORD_FROM 1.999 score TEQF_USR_POLITE 1.999 -score THIS_IS_ADV_SUSP_NTLD 0.165 +score THIS_IS_ADV_SUSP_NTLD 0.003 score TO_EQ_FM_DIRECT_MX 0.001 score TO_EQ_FM_DOM_HTML_ONLY 0.001 -score TO_EQ_FM_HTML_DIRECT 0.402 +score TO_EQ_FM_HTML_DIRECT 0.395 score TO_EQ_FM_HTML_ONLY 0.001 score TO_IN_SUBJ 0.100 score TO_NO_BRKTS_DYNIP 2.250 score TO_NO_BRKTS_FROM_MSSP 2.499 -score TO_NO_BRKTS_HTML_IMG 0.001 # force non-zero +score TO_NO_BRKTS_HTML_IMG 0.001 score TO_NO_BRKTS_HTML_ONLY 1.999 -score TO_NO_BRKTS_MSFT 2.499 +score TO_NO_BRKTS_MSFT 2.500 score TO_NO_BRKTS_NORDNS_HTML 1.999 score TO_NO_BRKTS_PCNT 2.499 -score TVD_DOLLARS_US 0.995 +score TVD_DOLLARS_US 0.251 +score TVD_FROM_1 1.000 score TVD_SPACE_ENCODED 2.499 score TVD_SPACE_RATIO_MINFP 0.001 score UNDISC_FREEM 2.699 score UNDISC_MONEY 2.999 score UNICODE_OBFU_ASC 2.499 -score UNICODE_OBFU_ZW_MANY 2.999 +score UNICODE_OBFU_ZW_MANY 2.490 score UPPERCASE_URI 2.749 -score URI_DOTCN_LOGIN 1.499 -score URI_DOTCN_SPOOF 3.000 +score URI_DOTCN_LOGIN 1.500 +score URI_DOTCN_SPOOF 2.999 score URI_EXCESS_SLASHES 2.499 -score URI_FIREBASEAPP 3.000 +score URI_FIREBASEAPP 2.999 score URI_GOOGLE_PROXY 2.699 -score URI_IPFS 3.499 -score URI_IPFSIO 1.655 -score URI_PHISH 3.999 +score URI_IPFS 2.880 +score URI_IPFSIO 2.093 +score URI_PHISH 4.000 score URI_TRY_3LD 1.999 score URI_WPADMIN 2.899 -score URI_WP_HACKED 2.100 -score URI_WP_HACKED_2 2.499 -score VFY_ACCT_NORDNS 2.500 +score URI_WP_HACKED 2.103 +score URI_WP_HACKED_2 2.500 +score VFY_ACCT_NORDNS 2.499 score WIKI_IMG 2.499 score WORD_INVIS 2.999 score WORD_INVIS_MANY 2.999 score XM_RANDOM 2.499 score XM_RECPTID 2.999 -score XPRIO 0.699 +score XPRIO 0.692 score AC_HTML_NONSENSE_TAGS 1.000 score AC_POST_EXTRAS 1.000 score AC_SPAMMY_URI_PATTERNS1 1.000 @@ -288,7 +290,6 @@ score GOOG_STO_IMG_HTML 1.0 score GOOG_STO_IMG_NOHTML 1.000 score HAS_X_NO_RELAY 1.000 score HAS_X_OUTGOING_SPAM_STAT 1.000 -score HDRS_LCASE 0.100 score HDRS_MISSP 1.000 score HEXHASH_WORD 1.000 score HK_CTE_RAW 1.000 @@ -310,10 +311,8 @@ score LINKEDIN_IMG_NOT_RCVD_LNKN 1.0 score LIST_PRTL_PUMPDUMP 1.000 score LIST_PRTL_SAME_USER 1.000 score LONG_HEX_URI 1.000 -score LONG_IMG_URI 1.000 score MALF_HTML_B64 1.000 score MALWARE_PASSWORD 1.000 -score MANY_HDRS_LCASE 0.100 score MC_MSFT_LISTMGR 1.000 score MIXED_AREA_CASE 1.000 score MIXED_FONT_CASE 1.000 @@ -399,7 +398,6 @@ score URI_OPTOUT_3LD 1.0 score URI_PHP_REDIR 1.000 score URI_REPLIT_DEV 1.000 score URI_TRY_USME 1.000 -score URI_W3SIPFS 1.000 score URI_WP_DIRINDEX 1.000 score USB_DRIVES 1.000 score VISTA_COST 1.000 Modified: spamassassin/trunk/rulesrc/scores/scores-set1 ============================================================================== --- spamassassin/trunk/rulesrc/scores/scores-set1 Thu Jul 30 20:54:14 2026 (r1936750) +++ spamassassin/trunk/rulesrc/scores/scores-set1 Fri Jul 31 02:38:27 2026 (r1936751) @@ -158,6 +158,7 @@ score FSL_HAS_TINYURL 3.699 score FSL_HELO_BARE_IP_2 1.373 score FSL_NEW_HELO_USER 0.001 score FUZZY_BITCOIN 0.001 +score FUZZY_SECURITY 0.001 score GAPPY_SALES_LEADS_FREEM 1.000 score GB_BITCOIN_CP 2.832 score GB_CUSTOM_HTM_URI 0.001 @@ -239,6 +240,7 @@ score MALF_HTML_B64 1.000 score MALWARE_NORDNS 1.000 score MALWARE_PASSWORD 1.000 score MALW_ATTACH 2.699 +score MANY_HDRS_LCASE 0.001 score MAY_BE_FORGED 4.199 score MC_MSFT_LISTMGR 1.000 score MILLION_HUNDRED 2.329 @@ -290,6 +292,7 @@ score PDS_FROM_2_EMAILS 3.305 score PDS_FROM_NAME_TO_DOMAIN 1.038 score PDS_HELO_SPF_FAIL 1.000 score PDS_NAKED_TO_NUMERO 1.999 +score PDS_OTHER_BAD_TLD 0.001 score PDS_RDNS_DYNAMIC_FP 0.010 score PHISH_AZURE_CLOUDAPP 3.500 score PHISH_FBASEAPP 1.000 Modified: spamassassin/trunk/rulesrc/scores/scores-set2 ============================================================================== --- spamassassin/trunk/rulesrc/scores/scores-set2 Thu Jul 30 20:54:14 2026 (r1936750) +++ spamassassin/trunk/rulesrc/scores/scores-set2 Fri Jul 31 02:38:27 2026 (r1936751) @@ -1,215 +1,217 @@ -# Using score set 0 logs for revision 1936693 from: -# ham-giovanni-ham.r1936693.log ham-giovanni-spam.r1936693.log ham-grenier.r1936693.log ham-jhardin.r1936693.log ham-koyer.r1936693.log ham-llanga.r1936693.log ham-mmiroslaw-mails-ham.r1936693.log ham-mmiroslaw-mails-spam.r1936693.log ham-spamsponge.r1936693.log ham-tsz-corpus.r1936693.log ham-whyscream.r1936693.log spam-giovanni-ham.r1936693.log spam-giovanni-spam.r1936693.log spam-grenier.r1936693.log spam-jhardin.r1936693.log spam-koyer.r1936693.log spam-llanga.r1936693.log spam-mmiroslaw-mails-ham.r1936693.log spam-mmiroslaw-mails-spam.r1936693.log spam-spamsponge.r1936693.log spam-tsz-corpus.r1936693.log spam-whyscream.r1936693.log +# Using score set 0 logs for revision 1936716 from: +# ham-giovanni-ham.r1936716.log ham-giovanni-spam.r1936716.log ham-grenier.r1936716.log ham-jhardin.r1936716.log ham-koyer.r1936716.log ham-llanga.r1936716.log ham-mmiroslaw-mails-ham.r1936716.log ham-mmiroslaw-mails-spam.r1936716.log ham-spamsponge.r1936716.log ham-tsz-corpus.r1936716.log ham-whyscream.r1936716.log spam-giovanni-ham.r1936716.log spam-giovanni-spam.r1936716.log spam-grenier.r1936716.log spam-jhardin.r1936716.log spam-koyer.r1936716.log spam-llanga.r1936716.log spam-mmiroslaw-mails-ham.r1936716.log spam-mmiroslaw-mails-spam.r1936716.log spam-spamsponge.r1936716.log spam-tsz-corpus.r1936716.log spam-whyscream.r1936716.log -score ACCT_PHISHING_MANY 2.999 +score ACCT_PHISHING_MANY 2.552 score AC_BR_BONANZA 0.001 score AC_DIV_BONANZA 0.001 # force non-zero -score AC_FROM_MANY_DOTS 2.500 +score AC_FROM_MANY_DOTS 2.499 score ADMAIL 0.001 -score ADMITS_SPAM 2.000 +score ADMITS_SPAM 1.999 score ADVANCE_FEE_2_NEW_MONEY 1.999 -score ADVANCE_FEE_3_NEW 2.499 -score ADVANCE_FEE_3_NEW_MONEY 3.200 -score ADVANCE_FEE_4_NEW 2.899 +score ADVANCE_FEE_3_NEW 2.504 +score ADVANCE_FEE_3_NEW_MONEY 1.676 +score ADVANCE_FEE_4_NEW 2.800 score ADVANCE_FEE_4_NEW_MONEY 0.001 -score ADVANCE_FEE_5_NEW_FRM_MNY 1.043 +score ADVANCE_FEE_5_NEW_FRM_MNY 1.536 score ADVANCE_FEE_5_NEW_MONEY 3.099 score AD_PREFS 0.001 score AMAZON_IMG_NOT_RCVD_AMZN 2.499 -score AXB_XMAILER_MIMEOLE_OL_024C2 2.923 -score BIGNUM_EMAILS_FREEM 1.093 -score BIGNUM_EMAILS_MANY 2.652 -score BITCOIN_DEADLINE 2.177 +score AXB_XMAILER_MIMEOLE_OL_024C2 1.978 +score BIGNUM_EMAILS_FREEM 0.650 +score BIGNUM_EMAILS_MANY 1.038 +score BITCOIN_DEADLINE 1.913 score BITCOIN_DIRECT 3.499 -score BITCOIN_EXTORT_01 2.202 -score BITCOIN_MALF_HTML 3.091 +score BITCOIN_EXTORT_01 2.573 +score BITCOIN_MALF_HTML 3.499 score BITCOIN_MALWARE 3.499 -score BITCOIN_ONAN 2.999 -score BITCOIN_SPAM_02 1.120 +score BITCOIN_ONAN 1.557 +score BITCOIN_SPAM_02 1.974 score BITCOIN_SPAM_03 2.499 -score BITCOIN_SPAM_07 2.453 +score BITCOIN_SPAM_07 1.872 score BITCOIN_TOEQFM 3.499 -score BITCOIN_VISTA 2.743 -score BITCOIN_XPRIO 2.499 -score BITCOIN_YOUR_INFO 2.497 -score BODY_URI_ONLY 2.353 -score BOGUS_MSM_HDRS 1.390 +score BITCOIN_VISTA 1.273 +score BITCOIN_XPRIO 0.767 +score BITCOIN_YOUR_INFO 2.230 +score BODY_URI_ONLY 2.355 +score BOGUS_MSM_HDRS 0.638 score CN_PHISH_JP_02 2.499 -score CN_PHISH_JP_04 1.278 -score COMPENSATION 0.712 -score CONTENT_AFTER_HTML 0.001 -score CTE_8BIT_MISMATCH 0.351 +score CN_PHISH_JP_04 1.690 +score COMPENSATION 1.499 +score CONTENT_AFTER_HTML 0.001 # force non-zero +score CTE_8BIT_MISMATCH 0.001 score DATE_IN_FUTURE_96_Q 4.099 -score DEAR_BENEFICIARY 3.000 -score DEAR_EMAIL 1.499 -score DOS_BODY_HIGH_NO_MID 3.900 +score DEAR_BENEFICIARY 3.099 +score DOS_BODY_HIGH_NO_MID 3.899 score DSN_NO_MIMEVERSION 1.999 -score ENCRYPTED_MESSAGE -0.999 +score ENCRYPTED_MESSAGE -1.000 score END_FUTURE_EMAILS 1.999 score FILL_THIS_FORM 0.001 score FONT_INVIS_DIRECT 3.499 -score FONT_INVIS_LONG_LINE 1.997 -score FONT_INVIS_MSGID 2.499 -score FONT_INVIS_NORDNS 0.598 -score FORM_FRAUD 1.000 +score FONT_INVIS_LONG_LINE 1.996 +score FONT_INVIS_MSGID 2.500 +score FONT_INVIS_NORDNS 0.594 +score FORM_FRAUD 0.999 score FORM_FRAUD_3 2.499 score FORM_FRAUD_5 0.001 score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero score FROM_ADDR_WS 2.999 -score FROM_IN_TO_AND_SUBJ 2.399 +score FROM_IN_TO_AND_SUBJ 2.499 score FROM_LONG_DOM_MINFP 2.499 -score FROM_MISSPACED 1.304 +score FROM_MISSPACED 1.127 score FROM_MISSP_DYNIP 2.217 score FROM_MISSP_EH_MATCH 1.999 -score FROM_MISSP_FREEMAIL 0.694 -score FROM_MISSP_MSFT 1.684 -score FROM_MISSP_REPLYTO 2.499 -score FROM_MISSP_USER 0.575 -score FROM_MISSP_XPRIO 1.482 -score FROM_MULTI_NORDNS 2.822 -score FROM_NTLD_LINKBAIT 0.936 +score FROM_MISSP_FREEMAIL 0.869 +score FROM_MISSP_MSFT 2.172 +score FROM_MISSP_REPLYTO 2.500 +score FROM_MISSP_USER 2.859 +score FROM_MISSP_XPRIO 1.969 +score FROM_MULTI_NORDNS 2.999 +score FROM_NTLD_LINKBAIT 1.240 score FROM_SUSPICIOUS_NTLD 0.500 score FROM_SUSPICIOUS_NTLD_FP 1.999 -score FROM_WSP_LEAD 2.932 +score FROM_WSP_LEAD 3.299 score FROM_WSP_TRAIL 3.099 -score FSL_CTYPE_WIN1251 1.790 +score FSL_CTYPE_WIN1251 0.898 score FSL_HAS_TINYURL 2.499 -score FSL_HELO_BARE_IP_2 2.196 -score FSL_NEW_HELO_USER 0.001 # force non-zero -score FUZZY_BITCOIN 2.599 -score FUZZY_SECURITY 2.099 -score GB_BITCOIN_CP 0.230 -score GB_CUSTOM_HTM_URI 0.001 +score FSL_HELO_BARE_IP_2 1.600 +score FSL_NEW_HELO_USER 0.001 +score FUZZY_BITCOIN 2.699 +score FUZZY_SECURITY 2.100 +score GB_BITCOIN_CP 2.757 +score GB_CUSTOM_HTM_URI 0.001 # force non-zero score GB_FREEMAIL_DISPTO 0.500 score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 score GOOG_REDIR_HTML_ONLY 1.499 -score GOOG_REDIR_NORDNS 1.500 -score GOOG_REDIR_NOTRDNS 0.396 +score GOOG_REDIR_NORDNS 1.499 +score GOOG_REDIR_NOTRDNS 0.001 score GOOG_STO_EMAIL_PHISH 2.999 -score GOOG_STO_HTML_PHISH 1.892 +score GOOG_STO_HTML_PHISH 0.301 score GOOG_STO_NOIMG_HTML 2.999 -score HDR_ORDER_FTSDMCXX_DIRECT 1.555 -score HDR_ORDER_FTSDMCXX_NORDNS 0.223 +score HDR_ORDER_FTSDMCXX_DIRECT 1.526 +score HDR_ORDER_FTSDMCXX_NORDNS 1.643 score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero -score HELO_MISC_IP 0.250 +score HELO_MISC_IP 0.249 score HELO_NO_DOMAIN 0.001 -score HK_NAME_FM_MR_MRS 1.052 +score HK_NAME_FM_MR_MRS 0.919 score HK_NAME_MR_MRS 1.000 -score HK_RANDOM_ENVFROM 1.000 -score HK_RANDOM_FROM 1.000 -score HK_RANDOM_REPLYTO 1.000 +score HK_RANDOM_ENVFROM 0.999 +score HK_RANDOM_FROM 0.999 +score HK_RANDOM_REPLYTO 0.999 score HK_SCAM 0.001 score HOSTED_IMG_DIRECT_MX 3.499 score HOSTED_IMG_MULTI_PUB_01 2.999 -score HREF_EMPTY_NORDNS 0.502 +score HREF_EMPTY_NORDNS 0.500 score HTML_ENTITY_ASCII 2.999 score HTML_FONT_TINY_NORDNS 1.999 -score HTML_OFF_PAGE 2.639 +score HTML_OFF_PAGE 2.667 score HTML_SINGLET_MANY 2.499 -score HTML_TAG_BALANCE_CENTER 2.900 +score HTML_TAG_BALANCE_CENTER 2.906 score HTML_TEXT_INVISIBLE_FONT 0.001 score KHOP_HELO_FCRDNS 0.001 # force non-zero +score LONG_IMG_URI 0.001 score LONG_INVISIBLE_TEXT 2.999 score LOTS_OF_MONEY 0.010 score LOTTO_DEPT 1.999 score LUCRATIVE 0.001 -score MALWARE_NORDNS 0.053 -score MALW_ATTACH 2.399 +score MALWARE_NORDNS 2.055 +score MALW_ATTACH 2.499 score MAY_BE_FORGED 3.899 score MILLION_HUNDRED 2.699 score MILLION_USD 1.999 -score MIMEOLE_DIRECT_TO_MX 1.948 +score MIMEOLE_DIRECT_TO_MX 0.232 score MIME_NO_TEXT 0.001 -score MIXED_CENTER_CASE 1.068 -score MIXED_ES 1.084 -score MIXED_HREF_CASE 2.000 -score MIXED_IMG_CASE 2.999 -score MONEY_FORM 0.001 +score MIXED_CENTER_CASE 2.499 +score MIXED_ES 1.593 +score MIXED_HREF_CASE 1.999 +score MIXED_IMG_CASE 0.315 +score MONEY_FORM 0.001 # force non-zero score MONEY_FORM_SHORT 2.491 -score MONEY_FRAUD_3 2.188 -score MONEY_FRAUD_5 2.434 +score MONEY_FRAUD_3 2.520 +score MONEY_FRAUD_5 3.194 score MONEY_FRAUD_8 0.001 -score MONEY_FREEMAIL_REPTO 0.741 -score MONEY_FROM_41 1.942 +score MONEY_FREEMAIL_REPTO 0.739 +score MONEY_FROM_41 1.939 score MONEY_FROM_MISSP 0.001 score MONEY_NOHTML 2.499 -score MSM_PRIO_REPTO 0.885 -score MXG_EMAIL_FRAG 0.100 -score MXG_SPOOFED_DOCUSIGN 0.099 -score NAME_EMAIL_DIFF 1.387 +score MSM_PRIO_REPTO 0.260 +score MXG_EMAIL_FRAG 0.099 +score MXG_SPOOFED_DOCUSIGN 0.100 +score NAME_EMAIL_DIFF 1.469 score NA_DOLLARS 1.499 score NEW_PRODUCTS 1.249 -score NICE_REPLY_A -1.202 -score NORDNS_LOW_CONTRAST 1.887 +score NICE_REPLY_A -1.006 +score NORDNS_LOW_CONTRAST 1.888 score NO_FM_NAME_IP_HOSTN 0.001 score NSL_RCVD_FROM_USER 0.001 -score NUMBERONLY_BITCOIN_EXP 0.641 -score OBFU_BITCOIN 0.707 -score ODD_FREEM_REPTO 2.999 -score PDS_BTC_ID 0.500 -score PDS_BTC_MSGID 0.609 +score NUMBERONLY_BITCOIN_EXP 0.187 +score OBFU_BITCOIN 1.782 +score ODD_FREEM_REPTO 0.001 # force non-zero +score PDS_BTC_ID 0.499 +score PDS_BTC_MSGID 0.001 score PDS_DBL_URL_TNB_RUNON 1.999 score PDS_FRNOM_TODOM_DBL_URL 1.499 -score PDS_FRNOM_TODOM_NAKED_TO 0.354 -score PDS_FROM_2_EMAILS 3.013 -score PDS_FROM_NAME_TO_DOMAIN 1.051 +score PDS_FRNOM_TODOM_NAKED_TO 0.874 +score PDS_FROM_2_EMAILS 3.080 +score PDS_FROM_NAME_TO_DOMAIN 0.531 score PDS_NAKED_TO_NUMERO 1.999 score PDS_OTHER_BAD_TLD 1.999 score PDS_RDNS_DYNAMIC_FP 0.010 -score PHP_ORIG_SCRIPT 1.404 -score PHP_SCRIPT 2.499 -score POSSIBLE_GMAIL_PHISHER 1.275 +score PHISH_ATTACH 2.299 +score PHP_ORIG_SCRIPT 1.405 +score PHP_SCRIPT 0.644 +score POSSIBLE_GMAIL_PHISHER 0.659 score PP_MIME_FAKE_ASCII_TEXT 0.001 -score RATWARE_NO_RDNS 2.057 +score RATWARE_NO_RDNS 0.297 score REPTO_419_FRAUD_GM 0.001 score REPTO_419_FRAUD_HM_LOOSE 0.999 score RISK_FREE 2.599 -score SHORTENER_SHORT_IMG 0.115 -score SPOOFED_FREEMAIL_NO_RDNS 1.405 -score SPOOF_GMAIL_MID 1.252 +score SHORTENER_SHORT_IMG 0.075 +score SPOOFED_FREEMAIL_NO_RDNS 1.402 +score SPOOF_GMAIL_MID 1.277 score STATIC_XPRIO_OLE 0.001 score SUSP_UTF8_WORD_FROM 1.999 score TEQF_USR_POLITE 1.999 -score THIS_IS_ADV_SUSP_NTLD 0.165 +score THIS_IS_ADV_SUSP_NTLD 0.003 score TO_EQ_FM_DIRECT_MX 0.001 score TO_EQ_FM_DOM_HTML_ONLY 0.001 -score TO_EQ_FM_HTML_DIRECT 0.402 +score TO_EQ_FM_HTML_DIRECT 0.395 score TO_EQ_FM_HTML_ONLY 0.001 score TO_IN_SUBJ 0.100 score TO_NO_BRKTS_DYNIP 2.250 score TO_NO_BRKTS_FROM_MSSP 2.499 -score TO_NO_BRKTS_HTML_IMG 0.001 # force non-zero +score TO_NO_BRKTS_HTML_IMG 0.001 score TO_NO_BRKTS_HTML_ONLY 1.999 -score TO_NO_BRKTS_MSFT 2.499 +score TO_NO_BRKTS_MSFT 2.500 score TO_NO_BRKTS_NORDNS_HTML 1.999 score TO_NO_BRKTS_PCNT 2.499 -score TVD_DOLLARS_US 0.995 +score TVD_DOLLARS_US 0.251 +score TVD_FROM_1 1.000 score TVD_SPACE_ENCODED 2.499 score TVD_SPACE_RATIO_MINFP 0.001 score UNDISC_FREEM 2.699 score UNDISC_MONEY 2.999 score UNICODE_OBFU_ASC 2.499 -score UNICODE_OBFU_ZW_MANY 2.999 +score UNICODE_OBFU_ZW_MANY 2.490 score UPPERCASE_URI 2.749 -score URI_DOTCN_LOGIN 1.499 -score URI_DOTCN_SPOOF 3.000 +score URI_DOTCN_LOGIN 1.500 +score URI_DOTCN_SPOOF 2.999 score URI_EXCESS_SLASHES 2.499 -score URI_FIREBASEAPP 3.000 +score URI_FIREBASEAPP 2.999 score URI_GOOGLE_PROXY 2.699 -score URI_IPFS 3.499 -score URI_IPFSIO 1.655 -score URI_PHISH 3.999 +score URI_IPFS 2.880 +score URI_IPFSIO 2.093 +score URI_PHISH 4.000 score URI_TRY_3LD 1.999 score URI_WPADMIN 2.899 -score URI_WP_HACKED 2.100 -score URI_WP_HACKED_2 2.499 -score VFY_ACCT_NORDNS 2.500 +score URI_WP_HACKED 2.103 +score URI_WP_HACKED_2 2.500 +score VFY_ACCT_NORDNS 2.499 score WIKI_IMG 2.499 score WORD_INVIS 2.999 score WORD_INVIS_MANY 2.999 score XM_RANDOM 2.499 score XM_RECPTID 2.999 -score XPRIO 0.699 +score XPRIO 0.692 score AC_HTML_NONSENSE_TAGS 1.000 score AC_POST_EXTRAS 1.000 score AC_SPAMMY_URI_PATTERNS1 1.000 @@ -288,7 +290,6 @@ score GOOG_STO_IMG_HTML 1.0 score GOOG_STO_IMG_NOHTML 1.000 score HAS_X_NO_RELAY 1.000 score HAS_X_OUTGOING_SPAM_STAT 1.000 -score HDRS_LCASE 0.100 score HDRS_MISSP 1.000 score HEXHASH_WORD 1.000 score HK_CTE_RAW 1.000 @@ -310,10 +311,8 @@ score LINKEDIN_IMG_NOT_RCVD_LNKN 1.0 score LIST_PRTL_PUMPDUMP 1.000 score LIST_PRTL_SAME_USER 1.000 score LONG_HEX_URI 1.000 -score LONG_IMG_URI 1.000 score MALF_HTML_B64 1.000 score MALWARE_PASSWORD 1.000 -score MANY_HDRS_LCASE 0.100 score MC_MSFT_LISTMGR 1.000 score MIXED_AREA_CASE 1.000 score MIXED_FONT_CASE 1.000 @@ -399,7 +398,6 @@ score URI_OPTOUT_3LD 1.0 score URI_PHP_REDIR 1.000 score URI_REPLIT_DEV 1.000 score URI_TRY_USME 1.000 -score URI_W3SIPFS 1.000 score URI_WP_DIRINDEX 1.000 score USB_DRIVES 1.000 score VISTA_COST 1.000 Modified: spamassassin/trunk/rulesrc/scores/scores-set3 ============================================================================== --- spamassassin/trunk/rulesrc/scores/scores-set3 Thu Jul 30 20:54:14 2026 (r1936750) +++ spamassassin/trunk/rulesrc/scores/scores-set3 Fri Jul 31 02:38:27 2026 (r1936751) @@ -158,6 +158,7 @@ score FSL_HAS_TINYURL 3.699 score FSL_HELO_BARE_IP_2 1.373 score FSL_NEW_HELO_USER 0.001 score FUZZY_BITCOIN 0.001 +score FUZZY_SECURITY 0.001 score GAPPY_SALES_LEADS_FREEM 1.000 score GB_BITCOIN_CP 2.832 score GB_CUSTOM_HTM_URI 0.001 @@ -239,6 +240,7 @@ score MALF_HTML_B64 1.000 score MALWARE_NORDNS 1.000 score MALWARE_PASSWORD 1.000 score MALW_ATTACH 2.699 +score MANY_HDRS_LCASE 0.001 score MAY_BE_FORGED 4.199 score MC_MSFT_LISTMGR 1.000 score MILLION_HUNDRED 2.329 @@ -290,6 +292,7 @@ score PDS_FROM_2_EMAILS 3.305 score PDS_FROM_NAME_TO_DOMAIN 1.038 score PDS_HELO_SPF_FAIL 1.000 score PDS_NAKED_TO_NUMERO 1.999 +score PDS_OTHER_BAD_TLD 0.001 score PDS_RDNS_DYNAMIC_FP 0.010 score PHISH_AZURE_CLOUDAPP 3.500 score PHISH_FBASEAPP 1.000 Modified: spamassassin/trunk/rulesrc/scores/stats-set0 ============================================================================== --- spamassassin/trunk/rulesrc/scores/stats-set0 Thu Jul 30 20:54:14 2026 (r1936750) +++ spamassassin/trunk/rulesrc/scores/stats-set0 Fri Jul 31 02:38:27 2026 (r1936751) @@ -1,40 +1,40 @@ ##### WITH NEW RULES AND SCORES ##### # SUMMARY for threshold 5.0: -# Correctly non-spam: 167086 15.448% (93.318% of non-spam corpus) -# Correctly spam: 687142 63.530% (76.134% of spam corpus) -# False positives: 11964 1.106% (6.682% of nonspam, 1609140 weighted) -# False negatives: 215405 19.915% (23.866% of spam, 344822 weighted) +# Correctly non-spam: 157925 14.731% (92.971% of non-spam corpus) +# Correctly spam: 698317 65.137% (77.400% of spam corpus) +# False positives: 11939 1.114% (7.029% of nonspam, 1692404 weighted) +# False negatives: 203896 19.019% (22.600% of spam, 338495 weighted) # Average score for spam: 7.6 nonspam: 0.7 -# Average for false-pos: 5.3 false-neg: 1.6 -# TOTAL: 1081597 100.00% +# Average for false-pos: 5.3 false-neg: 1.7 +# TOTAL: 1072077 100.00% Reading scores from "tmprules"... Reading per-message hit stat logs and scores... # SUMMARY for threshold 5.0: -# Correctly non-spam: 21037 93.53% -# Correctly spam: 86017 76.35% -# False positives: 1456 6.47% -# False negatives: 26649 23.65% -# TCR(l=50): 1.132902 SpamRecall: 76.347% SpamPrec: 98.335% +# Correctly non-spam: 19876 92.89% +# Correctly spam: 86883 77.14% +# False positives: 1521 7.11% +# False negatives: 25747 22.86% +# TCR(l=50): 1.106418 SpamRecall: 77.140% SpamPrec: 98.279% ##### WITHOUT NEW RULES AND SCORES ##### Reading scores from "../rules-base"... Reading per-message hit stat logs and scores... # SUMMARY for threshold 5.0: -# Correctly non-spam: 177221 98.98% -# Correctly spam: 191105 21.17% -# False positives: 1829 1.02% -# False negatives: 711442 78.83% -# TCR(l=50): 1.124120 SpamRecall: 21.174% SpamPrec: 99.052% +# Correctly non-spam: 168028 98.92% +# Correctly spam: 191760 21.25% +# False positives: 1836 1.08% +# False negatives: 710453 78.75% +# TCR(l=50): 1.124599 SpamRecall: 21.254% SpamPrec: 99.052% Reading scores from "../rules-base"... Reading per-message hit stat logs and scores... # SUMMARY for threshold 5.0: -# Correctly non-spam: 22248 98.91% -# Correctly spam: 23871 21.19% -# False positives: 245 1.09% -# False negatives: 88795 78.81% -# TCR(l=50): 1.115008 SpamRecall: 21.187% SpamPrec: 98.984% +# Correctly non-spam: 21151 98.85% +# Correctly spam: 23719 21.06% +# False positives: 246 1.15% +# False negatives: 88911 78.94% +# TCR(l=50): 1.112824 SpamRecall: 21.059% SpamPrec: 98.974%