svn commit: r1935658 - spamassassin/trunk/rules

[email protected] Fri, 26 Jun 2026 08:30:13 -0000
Newsgroups gmane.mail.spam.spamassassin.cvs
Message-ID <178246261356.1451921.7853690942973937397@svn03-he-fi>
Author: spamassassin_role
Date: Fri Jun 26 08:30:13 2026
New Revision: 1935658

Log:
promotions validated

Modified:
   spamassassin/trunk/rules/active.list

Modified: spamassassin/trunk/rules/active.list
==============================================================================
--- spamassassin/trunk/rules/active.list	Fri Jun 26 07:09:55 2026	(r1935657)
+++ spamassassin/trunk/rules/active.list	Fri Jun 26 08:30:13 2026	(r1935658)
@@ -1,6 +1,6 @@
 # DO NOT EDIT: file generated by build/mkupdates/listpromotable
 # active ruleset list, automatically generated from https://ruleqa.spamassassin.org/
-# with results from: last-net: net-giovanni-ham net-giovanni-spam net-jhardin net-koyer net-llanga net-mmiroslaw-mails-ham net-mmiroslaw-mails-spam net-whyscream; day 1: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 2: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 3: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 4: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 5: giovanni-ham giovanni-spam jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream
+# with results from: last-net: net-giovanni-ham net-giovanni-spam net-koyer net-llanga net-spamsponge net-whyscream; day 1: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 2: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 3: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 4: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 5: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream
 
 # good enough
 ACCT_PHISHING
@@ -180,9 +180,6 @@ BIGNUM_EMAILS_FREEM
 BIGNUM_EMAILS_MANY
 
 # tflags publish
-BILL_1618
-
-# tflags publish
 BITCOIN_BOMB
 
 # tflags publish
@@ -197,7 +194,7 @@ BITCOIN_EXTORT_02
 # tflags publish
 BITCOIN_IMGUR
 
-# tflags net
+# tflags publish
 BITCOIN_MALWARE
 
 # tflags publish
@@ -263,7 +260,10 @@ BITCOIN_YOUR_INFO
 # good enough
 BODY_EMPTY
 
-# tflags net
+# good enough
+BODY_SINGLE_WORD
+
+# tflags publish
 BODY_URI_ONLY
 
 # tflags publish
@@ -293,34 +293,22 @@ CHARSET_FARAWAY
 # tflags userconf
 CHARSET_FARAWAY_HEADER
 
-# good enough
-CK_HELO_GENERIC
-
 # tflags publish
 CN_B2B_SPAMMER
 
 # tflags publish
-CN_PHISH_JP_01
-
-# tflags publish
 CN_PHISH_JP_02
 
 # tflags publish
 CN_PHISH_JP_03
 
 # tflags publish
-CN_PHISH_JP_04
-
-# tflags publish
-CN_PHISH_JP_06
-
-# tflags publish
 CN_PHISH_JP_07
 
 # tflags publish
 COMMENT_GIBBERISH
 
-# tflags net
+# good enough
 COMPENSATION
 
 # tflags publish
@@ -356,6 +344,9 @@ DEAR_WINNER
 # tflags net
 DIGEST_MULTIPLE
 
+# good enough
+DIRECT_LOW_CONTRAST
+
 # tflags net
 DKIMWL_BL
 
@@ -432,7 +423,10 @@ DOS_ANAL_SPAM_MAILER
 DOS_DEREK_AUG08
 
 # good enough
-DOS_OUTLOOK_TO_MX
+DOS_OE_TO_MX
+
+# good enough
+DOS_RCVD_IP_TWICE_B
 
 # tflags publish
 DOTGOV_IMAGE
@@ -447,6 +441,9 @@ DX_TEXT_03
 DYNAMIC_IMGUR
 
 # good enough
+DYN_RDNS_AND_INLINE_IMAGE
+
+# good enough
 DYN_RDNS_SHORT_HELO_HTML
 
 # tflags publish
@@ -483,6 +480,9 @@ FBI_SPOOF
 FILL_THIS_FORM
 
 # good enough
+FILL_THIS_FORM_LOAN
+
+# good enough
 FILL_THIS_FORM_LONG
 
 # good enough
@@ -515,10 +515,10 @@ FORGED_RELAY_MUA_TO_MX
 # tflags net
 FORGED_SPF_HELO
 
-# tflags net
+# tflags publish
 FORM_FRAUD
 
-# tflags net
+# tflags publish
 FORM_FRAUD_3
 
 # tflags publish
@@ -636,9 +636,6 @@ FROM_SUSPICIOUS_NTLD
 FROM_SUSPICIOUS_NTLD_FP
 
 # good enough
-FROM_UNBAL1
-
-# good enough
 FROM_UNBAL2
 
 # good enough
@@ -647,6 +644,9 @@ FROM_WSP_LEAD
 # good enough
 FROM_WSP_TRAIL
 
+# good enough
+FROM_WWW
+
 # tflags net
 FSL_BULK_SIG
 
@@ -732,9 +732,6 @@ FUZZY_SAVINGS
 FUZZY_SECURITY
 
 # tflags publish
-FUZZY_TRUSTWALLET
-
-# tflags publish
 FUZZY_UNSUBSCRIBE
 
 # tflags publish
@@ -768,9 +765,6 @@ GB_FREEMAIL_DISPTO
 GB_FREEMAIL_DISPTO_NOTFREEM
 
 # tflags publish
-GB_FROM_METAMASK
-
-# tflags publish
 GB_GOOGLE_OBFUR
 
 # tflags net
@@ -839,12 +833,12 @@ HAS_X_NO_RELAY
 # tflags publish
 HAS_X_OUTGOING_SPAM_STAT
 
-# tflags net
-HDRS_LCASE
-
 # tflags publish
 HDRS_MISSP
 
+# good enough
+HDR_CASE_REV_ENC
+
 # tflags publish
 HDR_ORDER_FTSDMCXX_DIRECT
 
@@ -944,7 +938,7 @@ HTML_OFF_PAGE
 # tflags publish
 HTML_SHRT_CMNT_OBFU_MANY
 
-# tflags net
+# tflags publish
 HTML_SINGLET_MANY
 
 # good enough
@@ -989,9 +983,6 @@ LIST_PRTL_PUMPDUMP
 # tflags publish
 LIST_PRTL_SAME_USER
 
-# good enough
-LITECOIN_EXTORT_01
-
 # tflags publish
 LONG_HEX_URI
 
@@ -1022,21 +1013,9 @@ MALWARE_PASSWORD
 # tflags publish
 MALW_ATTACH
 
-# tflags net
-MANY_HDRS_LCASE
-
 # tflags publish
 MANY_SPAN_IN_TEXT
 
-# good enough
-MANY_SUBDOM
-
-# tflags net
-MAY_BE_FORGED
-
-# tflags publish
-MC_MSFT_LISTMGR
-
 # tflags publish
 MILLION_HUNDRED
 
@@ -1089,6 +1068,9 @@ MONERO_PAY_ME
 MONEY_ATM_CARD
 
 # good enough
+MONEY_BARRISTER
+
+# good enough
 MONEY_FORM
 
 # good enough
@@ -1112,6 +1094,9 @@ MONEY_FROM_41
 # good enough
 MONEY_FROM_MISSP
 
+# good enough
+MONEY_PERCENT
+
 # tflags publish
 MSGID_DOLLARS_URI_IMG
 
@@ -1178,15 +1163,15 @@ NSL_RCVD_FROM_USER
 # good enough
 NSL_RCVD_HELO_USER
 
-# good enough
-NUMBERONLY_BITCOIN_EXP
-
 # tflags publish
 OBFU_BITCOIN
 
 # tflags publish
 OBFU_HTML_ATTACH
 
+# good enough
+OBFU_JPG_ATTACH
+
 # tflags publish
 OBFU_JVSCR_ESC
 
@@ -1203,9 +1188,6 @@ ODD_FREEM_REPTO
 PAYPAL_PHISH_07
 
 # good enough
-PDS_BAD_THREAD_QP_64
-
-# good enough
 PDS_BRAND_SUBJ_NAKED_TO
 
 # good enough
@@ -1236,19 +1218,10 @@ PDS_HELO_SPF_FAIL
 PDS_HP_HELO_NORDNS
 
 # good enough
-PDS_LITECOIN_ID
-
-# good enough
-PDS_LTC_CP
-
-# good enough
-PDS_LTC_HUSH
-
-# good enough
 PDS_NAKED_TO_NUMERO
 
 # good enough
-PDS_NO_FULL_NAME_SPOOFED_URL
+PDS_PHPEXP_BOT
 
 # good enough
 PDS_PHP_EVAL
@@ -1257,6 +1230,9 @@ PDS_PHP_EVAL
 PDS_PRO_TLD
 
 # good enough
+PDS_RDNS_DYNAMIC_FP
+
+# good enough
 PDS_SHORT_SPOOFED_URL
 
 # good enough
@@ -1275,9 +1251,6 @@ PHISH_AZURE_CLOUDAPP
 PHISH_FBASEAPP
 
 # tflags publish
-PHONE_ORDERSCAM
-
-# tflags publish
 PHP_NOVER_MUA
 
 # tflags publish
@@ -1293,9 +1266,6 @@ PHP_SCRIPT
 PHP_SCRIPT_MUA
 
 # tflags publish
-PMP_SPAM
-
-# tflags publish
 POSSIBLE_AMAZON_PHISH_03
 
 # tflags publish
@@ -1310,6 +1280,9 @@ POSSIBLE_PAYPAL_PHISH_01
 # tflags publish
 POSSIBLE_PAYPAL_PHISH_02
 
+# good enough
+POSTCARD_09
+
 # tflags publish
 PP_MIME_FAKE_ASCII_TEXT
 
@@ -1340,9 +1313,6 @@ RAND_HEADER_MANY
 # tflags publish
 RAND_MKTG_HEADER
 
-# good enough
-RATWARE_NO_RDNS
-
 # tflags net
 RAZOR2_CF_RANGE_51_100
 
@@ -1604,9 +1574,6 @@ REPTO_419_FRAUD_YJ
 # tflags publish
 REPTO_419_FRAUD_YN
 
-# good enough
-RISK_FREE
-
 # tflags publish
 SCC_ISEMM_LID_1
 
@@ -1622,9 +1589,6 @@ SENDGRID_REDIR_PHISH
 # tflags publish
 SEO_SUSP_NTLD
 
-# good enough
-SHARE_50_50
-
 # tflags publish
 SHOPIFY_IMG_NOT_RCVD_SFY
 
@@ -1640,9 +1604,6 @@ SHY_OBFU_EXPIRE
 # tflags publish
 SHY_OBFU_PASSWORD
 
-# good enough
-SPELLED_OUT_NUMBER
-
 # tflags net
 SPF_FAIL
 
@@ -1698,12 +1659,6 @@ STATIC_XPRIO_OLE
 STOCK_TIP
 
 # good enough
-STOX_REPLY_TYPE
-
-# good enough
-STOX_REPLY_TYPE_WITHOUT_QUOTES
-
-# good enough
 STY_INVIS_DIRECT
 
 # tflags userconf
@@ -1712,19 +1667,22 @@ SUBJECT_IN_BLOCKLIST
 # tflags userconf
 SUBJECT_IN_WELCOMELIST
 
+# good enough
+SUBJ_ATTENTION
+
 # tflags net
 SUBJ_BRKN_WORDNUMS
 
-# tflags net
-SUBJ_UNNEEDED_HTML
+# good enough
+SUBJ_OBFU_LOW_CNTRST
+
+# good enough
+SUBJ_ODD_CASE
 
 # tflags net
 SURBL_BLOCKED
 
 # good enough
-SUSP_UTF8_WORD_COMBO
-
-# good enough
 SUSP_UTF8_WORD_FROM
 
 # good enough
@@ -1748,7 +1706,7 @@ TEQF_USR_IMAGE
 # tflags publish
 TEQF_USR_MSGID_HEX
 
-# tflags net
+# tflags publish
 TEQF_USR_MSGID_MALF
 
 # good enough
@@ -1766,10 +1724,10 @@ TONLINE_FAKE_DKIM
 # tflags publish
 TO_EQ_FM_DIRECT_MX
 
-# tflags net
+# good enough
 TO_EQ_FM_DOM_HTML_IMG
 
-# tflags net
+# good enough
 TO_EQ_FM_DOM_HTML_ONLY
 
 # tflags net
@@ -1778,7 +1736,7 @@ TO_EQ_FM_DOM_SPF_FAIL
 # good enough
 TO_EQ_FM_HTML_DIRECT
 
-# tflags net
+# good enough
 TO_EQ_FM_HTML_ONLY
 
 # tflags net
@@ -1791,6 +1749,9 @@ TO_IN_SUBJ
 TO_NAME_SUBJ_NO_RDNS
 
 # good enough
+TO_NO_BRKTS_DYNIP
+
+# good enough
 TO_NO_BRKTS_FROM_MSSP
 
 # tflags publish
@@ -1799,7 +1760,7 @@ TO_NO_BRKTS_HTML_IMG
 # tflags publish
 TO_NO_BRKTS_HTML_ONLY
 
-# tflags net
+# good enough
 TO_NO_BRKTS_MSFT
 
 # tflags publish
@@ -1818,18 +1779,15 @@ TVD_PH_7
 TVD_PH_SEC
 
 # good enough
-TVD_PH_SUBJ_META
-
-# good enough
 TVD_PH_SUBJ_META1
 
 # tflags net
 TVD_SPACE_ENCODED
 
-# tflags net
+# good enough
 TVD_SPACE_RATIO_MINFP
 
-# tflags net
+# good enough
 TVD_SUBJ_NUM_OBFU_MINFP
 
 # tflags publish
@@ -1862,9 +1820,6 @@ UNPARSEABLE_RELAY
 # tflags publish
 UNSUB_GOOG_FORM
 
-# good enough
-UPPERCASE_URI
-
 # tflags net
 URIBL_ABUSE_SURBL
 
@@ -1958,9 +1913,6 @@ URI_ADOBESPARK
 # tflags publish
 URI_AZURE_CLOUDAPP
 
-# good enough
-URI_BUFFLY
-
 # tflags publish
 URI_CLOUDFLAREIPFS
 
@@ -1998,12 +1950,6 @@ URI_EXCESS_SLASHES
 URI_FIREBASEAPP
 
 # tflags publish
-URI_FLKIPFSXYZIPFS
-
-# tflags publish
-URI_GLITCHME
-
-# tflags publish
 URI_GOOGDRAWPREVIEW_MINFP
 
 # tflags publish
@@ -2064,12 +2010,15 @@ URI_TRY_3LD
 URI_TRY_USME
 
 # tflags publish
+URI_W3SIPFS
+
+# tflags publish
 URI_WPADMIN
 
 # tflags publish
 URI_WP_DIRINDEX
 
-# tflags net
+# tflags publish
 URI_WP_HACKED
 
 # tflags publish
@@ -2111,6 +2060,9 @@ USER_IN_WELCOMELIST
 # tflags userconf
 USER_IN_WELCOMELIST_TO
 
+# good enough
+US_DOLLARS_3
+
 # tflags publish
 VFY_ACCT_NORDNS
 
@@ -2154,7 +2106,7 @@ XPRIO
 XPRIO_SHORT_SUBJ
 
 # good enough
-YOUR_DELIVERY_ADDRESS
+YOU_INHERIT
 
 # tflags publish
 ZW_OBFU_FROMTOSUBJ