svn commit: r1935179 - spamassassin/trunk/rules

Author: spamassassin_role
Date: Wed Jun 10 08:30:16 2026
New Revision: 1935179

Log:
promotions validated

Modified:
   spamassassin/trunk/rules/active.list

Modified: spamassassin/trunk/rules/active.list
==============================================================================
--- spamassassin/trunk/rules/active.list	Wed Jun 10 05:03:20 2026	(r1935178)
+++ spamassassin/trunk/rules/active.list	Wed Jun 10 08:30:16 2026	(r1935179)
@@ -1,6 +1,9 @@
 # DO NOT EDIT: file generated by build/mkupdates/listpromotable
 # active ruleset list, automatically generated from https://ruleqa.spamassassin.org/
-# with results from: last-net: net-giovanni-ham net-giovanni-spam net-grenier net-jhardin net-koyer net-llanga net-mmiroslaw-mails-ham net-mmiroslaw-mails-spam net-spamsponge net-whyscream; day 1: giovanni-ham giovanni-spam jhardin koyer mmiroslaw-mails-ham mmiroslaw-mails-spam whyscream; day 2: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 3: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 4: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge tsz-corpus whyscream; day 5: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails
 -spam spamsponge tsz-corpus whyscream
+# with results from: last-net: net-giovanni-ham net-giovanni-spam net-jhardin net-koyer net-llanga net-mmiroslaw-mails-ham net-mmiroslaw-mails-spam net-whyscream; day 1: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam whyscream; day 2: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 3: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 4: giovanni-ham giovanni-spam jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 5: giovanni-ham giovanni-spam jhardin koyer mmiroslaw-mails-ham mmiroslaw-mails-spam whyscream
+
+# good enough
+ACCT_PHISHING
 
 # good enough
 ACCT_PHISHING_MANY
@@ -113,6 +116,9 @@ ALL_TRUSTED
 # tflags publish
 AMAZON_IMG_NOT_RCVD_AMZN
 
+# good enough
+APOSTROPHE_FROM
+
 # tflags publish
 APP_DEVELOPMENT_FREEM
 
@@ -191,9 +197,6 @@ BITCOIN_EXTORT_02
 # tflags publish
 BITCOIN_IMGUR
 
-# good enough
-BITCOIN_MALF_HTML
-
 # tflags publish
 BITCOIN_MALWARE
 
@@ -248,9 +251,6 @@ BITCOIN_SPF_ONLYALL
 # good enough
 BITCOIN_TOEQFM
 
-# good enough
-BITCOIN_VISTA
-
 # tflags publish
 BITCOIN_WFH_01
 
@@ -260,10 +260,7 @@ BITCOIN_XPRIO
 # tflags publish
 BITCOIN_YOUR_INFO
 
-# good enough
-BODY_SINGLE_URI
-
-# tflags net
+# tflags publish
 BODY_URI_ONLY
 
 # tflags publish
@@ -344,6 +341,12 @@ DEAR_BENEFICIARY
 # good enough
 DEAR_EMAIL
 
+# good enough
+DEAR_NOBODY
+
+# good enough
+DEAR_WINNER
+
 # tflags net
 DIGEST_MULTIPLE
 
@@ -419,24 +422,15 @@ DMARC_TEMPERROR
 # tflags publish
 DOS_ANAL_SPAM_MAILER
 
-# good enough
-DOS_BODY_HIGH_NO_MID
-
 # tflags net
 DOS_DEREK_AUG08
 
 # good enough
-DOS_OE_TO_MX
-
-# good enough
 DOS_OUTLOOK_TO_MX
 
 # tflags publish
 DOTGOV_IMAGE
 
-# good enough
-DSN_NO_MIMEVERSION
-
 # tflags publish
 DX_TEXT_02
 
@@ -482,6 +476,9 @@ FBI_SPOOF
 # tflags publish
 FILL_THIS_FORM
 
+# good enough
+FKO_MS_OAUTH_SILENT
+
 # tflags publish
 FONT_INVIS_DIRECT
 
@@ -503,13 +500,16 @@ FONT_INVIS_NORDNS
 # tflags publish
 FONT_INVIS_POSTEXTRAS
 
+# good enough
+FORGED_RELAY_MUA_TO_MX
+
 # tflags net
 FORGED_SPF_HELO
 
 # tflags publish
 FORM_FRAUD
 
-# tflags publish
+# tflags net
 FORM_FRAUD_3
 
 # tflags publish
@@ -533,9 +533,6 @@ FREEM_FRNUM_UNICD_EMPTY
 # tflags publish
 FRNAME_IN_MSG_XPRIO_NO_SUB
 
-# good enough
-FROM_2_EMAILS_SHORT
-
 # tflags publish
 FROM_ADDR_WS
 
@@ -600,9 +597,6 @@ FROM_MISSP_REPLYTO
 FROM_MISSP_SPF_FAIL
 
 # good enough
-FROM_MISSP_TO_UNDISC
-
-# good enough
 FROM_MISSP_USER
 
 # good enough
@@ -633,6 +627,9 @@ FROM_SUSPICIOUS_NTLD
 FROM_SUSPICIOUS_NTLD_FP
 
 # good enough
+FROM_UNBAL1
+
+# good enough
 FROM_UNBAL2
 
 # good enough
@@ -653,6 +650,12 @@ FSL_HAS_TINYURL
 # good enough
 FSL_HELO_BARE_IP_1
 
+# good enough
+FSL_HELO_NON_FQDN_1
+
+# good enough
+FSL_LINK_AWS_S3_WEB
+
 # tflags publish
 FSL_NEW_HELO_USER
 
@@ -740,6 +743,9 @@ GB_BITCOIN_CP
 # tflags publish
 GB_CUSTOM_HTM_URI
 
+# good enough
+GB_FAKE_RF
+
 # tflags publish
 GB_FAKE_RF_SHORT
 
@@ -840,6 +846,9 @@ HEADER_FROM_DIFFERENT_DOMAINS
 HEAD_LONG
 
 # good enough
+HELO_LOCALHOST
+
+# good enough
 HELO_MISC_IP
 
 # tflags publish
@@ -855,9 +864,6 @@ HK_CTE_RAW
 HK_NAME_FM_MR_MRS
 
 # good enough
-HK_NAME_FROM
-
-# good enough
 HK_NAME_MR_MRS
 
 # tflags publish
@@ -875,6 +881,12 @@ HK_RCVD_IP_MULTICAST
 # tflags publish
 HK_SCAM
 
+# good enough
+HK_SPAMMY_FILENAME
+
+# good enough
+HK_WIN
+
 # tflags publish
 HOSTED_IMG_DIRECT_MX
 
@@ -920,7 +932,7 @@ HTML_OFF_PAGE
 # tflags publish
 HTML_SHRT_CMNT_OBFU_MANY
 
-# tflags publish
+# tflags net
 HTML_SINGLET_MANY
 
 # good enough
@@ -947,6 +959,9 @@ JH_SPAMMY_PATTERN01
 # tflags publish
 JH_SPAMMY_PATTERN02
 
+# good enough
+KHOP_DYNAMIC
+
 # tflags net
 KHOP_FAKE_EBAY
 
@@ -965,9 +980,6 @@ LIST_PRTL_SAME_USER
 # good enough
 LITECOIN_EXTORT_01
 
-# good enough
-LONGLN_LOW_CONTRAST
-
 # tflags publish
 LONG_HEX_URI
 
@@ -998,14 +1010,11 @@ MALWARE_PASSWORD
 # tflags publish
 MALW_ATTACH
 
-# tflags net
-MANY_HDRS_LCASE
-
 # tflags publish
 MANY_SPAN_IN_TEXT
 
-# tflags net
-MAY_BE_FORGED
+# good enough
+MANY_SUBDOM
 
 # tflags publish
 MC_MSFT_LISTMGR
@@ -1085,15 +1094,15 @@ MONEY_FROM_41
 # good enough
 MONEY_FROM_MISSP
 
-# good enough
-MONEY_NOHTML
-
 # tflags publish
 MSGID_DOLLARS_URI_IMG
 
 # tflags publish
 MSGID_HDR_MALF
 
+# good enough
+MSGID_MULTIPLE_AT
+
 # tflags publish
 MSM_PRIO_REPTO
 
@@ -1107,9 +1116,6 @@ MXG_EMAIL_FRAG
 MXG_SPOOFED_DOCUSIGN
 
 # good enough
-NAME_EMAIL_DIFF
-
-# good enough
 NA_DOLLARS
 
 # tflags publish
@@ -1176,22 +1182,19 @@ OBFU_UNSUB_UL
 ODD_FREEM_REPTO
 
 # tflags publish
-PAYPAL_PHISH_06
-
-# tflags publish
 PAYPAL_PHISH_07
 
 # good enough
 PDS_BAD_THREAD_QP_64
 
 # good enough
-PDS_BTC_ID
+PDS_BRAND_SUBJ_NAKED_TO
 
 # good enough
-PDS_BTC_MSGID
+PDS_BTC_ID
 
 # good enough
-PDS_DBL_URL_HELO_NODOM
+PDS_DBL_URL_LINKBAIT
 
 # good enough
 PDS_DBL_URL_TNB_RUNON
@@ -1202,7 +1205,7 @@ PDS_FRNOM_TODOM_DBL_URL
 # good enough
 PDS_FRNOM_TODOM_NAKED_TO
 
-# good enough
+# tflags net
 PDS_FROM_2_EMAILS
 
 # good enough
@@ -1212,6 +1215,12 @@ PDS_FROM_NAME_TO_DOMAIN
 PDS_HELO_SPF_FAIL
 
 # good enough
+PDS_HP_HELO_NORDNS
+
+# good enough
+PDS_LITECOIN_ID
+
+# good enough
 PDS_LTC_CP
 
 # good enough
@@ -1221,8 +1230,23 @@ PDS_LTC_HUSH
 PDS_NAKED_TO_NUMERO
 
 # good enough
+PDS_NO_FULL_NAME_SPOOFED_URL
+
+# good enough
+PDS_PHP_EVAL
+
+# good enough
 PDS_PRO_TLD
 
+# good enough
+PDS_SHORT_SPOOFED_URL
+
+# good enough
+PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE
+
+# good enough
+PDS_TO_EQ_FROM_NAME
+
 # tflags publish
 PHISH_ATTACH
 
@@ -1233,9 +1257,6 @@ PHISH_AZURE_CLOUDAPP
 PHISH_FBASEAPP
 
 # tflags publish
-PHONE_983_NOVEL
-
-# tflags publish
 PHONE_ORDERSCAM
 
 # tflags publish
@@ -1244,6 +1265,9 @@ PHP_NOVER_MUA
 # tflags publish
 PHP_ORIG_SCRIPT
 
+# good enough
+PHP_ORIG_SCRIPT_EVAL
+
 # tflags publish
 PHP_SCRIPT
 
@@ -1262,9 +1286,6 @@ POSSIBLE_APPLE_PHISH_02
 # tflags publish
 POSSIBLE_EBAY_PHISH_02
 
-# good enough
-POSSIBLE_GMAIL_PHISHER
-
 # tflags publish
 POSSIBLE_PAYPAL_PHISH_01
 
@@ -1521,7 +1542,7 @@ RDNS_NUM_TLD_ATCHNX
 RDNS_NUM_TLD_XM
 
 # good enough
-READY_TO_SHIP
+REPLYTO_WITHOUT_TO_CC
 
 # tflags publish
 REPTO_419_FRAUD
@@ -1572,9 +1593,6 @@ RISK_FREE
 SCC_ISEMM_LID_1
 
 # tflags publish
-SCC_ISEMM_LID_1B
-
-# tflags publish
 SCC_SPECIAL_GUID
 
 # tflags publish
@@ -1586,6 +1604,9 @@ SENDGRID_REDIR_PHISH
 # tflags publish
 SEO_SUSP_NTLD
 
+# good enough
+SHARE_50_50
+
 # tflags publish
 SHOPIFY_IMG_NOT_RCVD_SFY
 
@@ -1601,6 +1622,9 @@ SHY_OBFU_EXPIRE
 # tflags publish
 SHY_OBFU_PASSWORD
 
+# good enough
+SPELLED_OUT_NUMBER
+
 # tflags net
 SPF_FAIL
 
@@ -1656,6 +1680,12 @@ STATIC_XPRIO_OLE
 STOCK_TIP
 
 # good enough
+STOX_REPLY_TYPE
+
+# good enough
+STOX_REPLY_TYPE_WITHOUT_QUOTES
+
+# good enough
 STY_INVIS_DIRECT
 
 # tflags userconf
@@ -1674,8 +1704,17 @@ SUBJ_UNNEEDED_HTML
 SURBL_BLOCKED
 
 # good enough
+SUSP_UTF8_WORD_COMBO
+
+# good enough
 SUSP_UTF8_WORD_FROM
 
+# good enough
+SUSP_UTF8_WORD_MANY
+
+# good enough
+SUSP_UTF8_WORD_SUBJ
+
 # tflags publish
 SYSADMIN
 
@@ -1709,7 +1748,10 @@ TONLINE_FAKE_DKIM
 # tflags publish
 TO_EQ_FM_DIRECT_MX
 
-# tflags net
+# good enough
+TO_EQ_FM_DOM_HTML_IMG
+
+# good enough
 TO_EQ_FM_DOM_HTML_ONLY
 
 # tflags net
@@ -1718,7 +1760,7 @@ TO_EQ_FM_DOM_SPF_FAIL
 # good enough
 TO_EQ_FM_HTML_DIRECT
 
-# tflags net
+# good enough
 TO_EQ_FM_HTML_ONLY
 
 # tflags net
@@ -1739,7 +1781,7 @@ TO_NO_BRKTS_HTML_IMG
 # tflags publish
 TO_NO_BRKTS_HTML_ONLY
 
-# good enough
+# tflags net
 TO_NO_BRKTS_MSFT
 
 # tflags publish
@@ -1755,6 +1797,12 @@ TO_TOO_MANY_WFH_01
 TVD_PH_7
 
 # good enough
+TVD_PH_SEC
+
+# good enough
+TVD_PH_SUBJ_META
+
+# good enough
 TVD_PH_SUBJ_META1
 
 # tflags net
@@ -1763,7 +1811,7 @@ TVD_SPACE_ENCODED
 # tflags net
 TVD_SPACE_RATIO_MINFP
 
-# tflags net
+# good enough
 TVD_SUBJ_NUM_OBFU_MINFP
 
 # tflags publish
@@ -1892,6 +1940,9 @@ URI_ADOBESPARK
 # tflags publish
 URI_AZURE_CLOUDAPP
 
+# good enough
+URI_BUFFLY
+
 # tflags publish
 URI_CLOUDFLAREIPFS
 
@@ -2003,7 +2054,7 @@ URI_WP_DIRINDEX
 # tflags net
 URI_WP_HACKED
 
-# tflags net
+# tflags publish
 URI_WP_HACKED_2
 
 # tflags publish
@@ -2084,9 +2135,6 @@ XPRIO
 # tflags publish
 XPRIO_SHORT_SUBJ
 
-# tflags publish
-XPRIO_VISTA
-
 # good enough
 YOUR_DELIVERY_ADDRESS