svn commit: r1935741 - spamassassin/trunk/rules

Author: spamassassin_role
Date: Tue Jun 30 08:30:13 2026
New Revision: 1935741

Log:
promotions validated

Modified:
   spamassassin/trunk/rules/active.list

Modified: spamassassin/trunk/rules/active.list
==============================================================================
--- spamassassin/trunk/rules/active.list	Tue Jun 30 08:04:46 2026	(r1935740)
+++ spamassassin/trunk/rules/active.list	Tue Jun 30 08:30:13 2026	(r1935741)
@@ -1,6 +1,6 @@
 # DO NOT EDIT: file generated by build/mkupdates/listpromotable
 # active ruleset list, automatically generated from https://ruleqa.spamassassin.org/
-# with results from: last-net: net-giovanni-ham net-giovanni-spam net-koyer net-llanga net-spamsponge net-whyscream; day 1: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 2: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 3: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 4: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream; day 5: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream
+# with results from: last-net: net-giovanni-ham net-giovanni-spam net-grenier net-jhardin net-koyer net-llanga net-mmiroslaw-mails-ham net-mmiroslaw-mails-spam net-spamsponge net-whyscream; day 1: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 2: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 3: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 4: giovanni-ham giovanni-spam grenier jhardin koyer llanga mmiroslaw-mails-ham mmiroslaw-mails-spam spamsponge whyscream; day 5: giovanni-ham giovanni-spam koyer llanga spamsponge whyscream
 
 # good enough
 ACCT_PHISHING
@@ -180,6 +180,9 @@ BIGNUM_EMAILS_FREEM
 BIGNUM_EMAILS_MANY
 
 # tflags publish
+BILL_1618
+
+# tflags publish
 BITCOIN_BOMB
 
 # tflags publish
@@ -194,7 +197,7 @@ BITCOIN_EXTORT_02
 # tflags publish
 BITCOIN_IMGUR
 
-# tflags publish
+# tflags net
 BITCOIN_MALWARE
 
 # tflags publish
@@ -248,6 +251,9 @@ BITCOIN_SPF_ONLYALL
 # good enough
 BITCOIN_TOEQFM
 
+# good enough
+BITCOIN_VISTA
+
 # tflags publish
 BITCOIN_WFH_01
 
@@ -263,7 +269,7 @@ BODY_EMPTY
 # good enough
 BODY_SINGLE_WORD
 
-# tflags publish
+# tflags net
 BODY_URI_ONLY
 
 # tflags publish
@@ -293,22 +299,34 @@ CHARSET_FARAWAY
 # tflags userconf
 CHARSET_FARAWAY_HEADER
 
+# good enough
+CK_HELO_DYNAMIC_SPLIT_IP
+
 # tflags publish
 CN_B2B_SPAMMER
 
 # tflags publish
+CN_PHISH_JP_01
+
+# tflags publish
 CN_PHISH_JP_02
 
 # tflags publish
 CN_PHISH_JP_03
 
 # tflags publish
+CN_PHISH_JP_04
+
+# tflags publish
+CN_PHISH_JP_06
+
+# tflags publish
 CN_PHISH_JP_07
 
 # tflags publish
 COMMENT_GIBBERISH
 
-# good enough
+# tflags net
 COMPENSATION
 
 # tflags publish
@@ -344,9 +362,6 @@ DEAR_WINNER
 # tflags net
 DIGEST_MULTIPLE
 
-# good enough
-DIRECT_LOW_CONTRAST
-
 # tflags net
 DKIMWL_BL
 
@@ -426,6 +441,9 @@ DOS_DEREK_AUG08
 DOS_OE_TO_MX
 
 # good enough
+DOS_OUTLOOK_TO_MX
+
+# good enough
 DOS_RCVD_IP_TWICE_B
 
 # tflags publish
@@ -480,12 +498,6 @@ FBI_SPOOF
 FILL_THIS_FORM
 
 # good enough
-FILL_THIS_FORM_LOAN
-
-# good enough
-FILL_THIS_FORM_LONG
-
-# good enough
 FKO_MS_OAUTH_SILENT
 
 # tflags publish
@@ -515,10 +527,10 @@ FORGED_RELAY_MUA_TO_MX
 # tflags net
 FORGED_SPF_HELO
 
-# tflags publish
+# tflags net
 FORM_FRAUD
 
-# tflags publish
+# tflags net
 FORM_FRAUD_3
 
 # tflags publish
@@ -644,9 +656,6 @@ FROM_WSP_LEAD
 # good enough
 FROM_WSP_TRAIL
 
-# good enough
-FROM_WWW
-
 # tflags net
 FSL_BULK_SIG
 
@@ -654,9 +663,6 @@ FSL_BULK_SIG
 FSL_CTYPE_WIN1251
 
 # good enough
-FSL_HAS_TINYURL
-
-# good enough
 FSL_HELO_BARE_IP_1
 
 # good enough
@@ -765,6 +771,9 @@ GB_FREEMAIL_DISPTO
 GB_FREEMAIL_DISPTO_NOTFREEM
 
 # tflags publish
+GB_FROM_METAMASK
+
+# tflags publish
 GB_GOOGLE_OBFUR
 
 # tflags net
@@ -833,6 +842,9 @@ HAS_X_NO_RELAY
 # tflags publish
 HAS_X_OUTGOING_SPAM_STAT
 
+# tflags net
+HDRS_LCASE
+
 # tflags publish
 HDRS_MISSP
 
@@ -890,9 +902,6 @@ HK_SCAM
 # good enough
 HK_SPAMMY_FILENAME
 
-# good enough
-HK_WIN
-
 # tflags publish
 HOSTED_IMG_DIRECT_MX
 
@@ -920,6 +929,9 @@ HREF_EMPTY_XANTIABUSE
 # tflags publish
 HREF_EMPTY_XAUTHED
 
+# good enough
+HTML_ATTACH
+
 # tflags userconf
 HTML_CHARSET_FARAWAY
 
@@ -938,7 +950,7 @@ HTML_OFF_PAGE
 # tflags publish
 HTML_SHRT_CMNT_OBFU_MANY
 
-# tflags publish
+# tflags net
 HTML_SINGLET_MANY
 
 # good enough
@@ -969,9 +981,6 @@ JH_SPAMMY_PATTERN02
 KHOP_DYNAMIC
 
 # tflags net
-KHOP_FAKE_EBAY
-
-# tflags net
 KHOP_HELO_FCRDNS
 
 # tflags publish
@@ -983,6 +992,9 @@ LIST_PRTL_PUMPDUMP
 # tflags publish
 LIST_PRTL_SAME_USER
 
+# good enough
+LITECOIN_EXTORT_01
+
 # tflags publish
 LONG_HEX_URI
 
@@ -1016,6 +1028,12 @@ MALW_ATTACH
 # tflags publish
 MANY_SPAN_IN_TEXT
 
+# tflags net
+MAY_BE_FORGED
+
+# tflags publish
+MC_MSFT_LISTMGR
+
 # tflags publish
 MILLION_HUNDRED
 
@@ -1068,9 +1086,6 @@ MONERO_PAY_ME
 MONEY_ATM_CARD
 
 # good enough
-MONEY_BARRISTER
-
-# good enough
 MONEY_FORM
 
 # good enough
@@ -1089,14 +1104,8 @@ MONEY_FRAUD_8
 MONEY_FREEMAIL_REPTO
 
 # good enough
-MONEY_FROM_41
-
-# good enough
 MONEY_FROM_MISSP
 
-# good enough
-MONEY_PERCENT
-
 # tflags publish
 MSGID_DOLLARS_URI_IMG
 
@@ -1163,6 +1172,9 @@ NSL_RCVD_FROM_USER
 # good enough
 NSL_RCVD_HELO_USER
 
+# good enough
+NUMBERONLY_BITCOIN_EXP
+
 # tflags publish
 OBFU_BITCOIN
 
@@ -1188,13 +1200,16 @@ ODD_FREEM_REPTO
 PAYPAL_PHISH_07
 
 # good enough
+PDS_BAD_THREAD_QP_64
+
+# good enough
 PDS_BRAND_SUBJ_NAKED_TO
 
 # good enough
 PDS_BTC_ID
 
 # good enough
-PDS_DBL_URL_LINKBAIT
+PDS_BTC_MSGID
 
 # good enough
 PDS_DBL_URL_TNB_RUNON
@@ -1205,7 +1220,7 @@ PDS_FRNOM_TODOM_DBL_URL
 # good enough
 PDS_FRNOM_TODOM_NAKED_TO
 
-# good enough
+# tflags net
 PDS_FROM_2_EMAILS
 
 # good enough
@@ -1218,9 +1233,18 @@ PDS_HELO_SPF_FAIL
 PDS_HP_HELO_NORDNS
 
 # good enough
+PDS_LTC_CP
+
+# good enough
+PDS_LTC_HUSH
+
+# good enough
 PDS_NAKED_TO_NUMERO
 
 # good enough
+PDS_OTHER_BAD_TLD
+
+# good enough
 PDS_PHPEXP_BOT
 
 # good enough
@@ -1236,10 +1260,10 @@ PDS_RDNS_DYNAMIC_FP
 PDS_SHORT_SPOOFED_URL
 
 # good enough
-PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE
+PDS_TO_EQ_FROM_NAME
 
 # good enough
-PDS_TO_EQ_FROM_NAME
+PDS_X_PHP_WP_EXP
 
 # tflags publish
 PHISH_ATTACH
@@ -1251,6 +1275,9 @@ PHISH_AZURE_CLOUDAPP
 PHISH_FBASEAPP
 
 # tflags publish
+PHONE_ORDERSCAM
+
+# tflags publish
 PHP_NOVER_MUA
 
 # tflags publish
@@ -1266,6 +1293,9 @@ PHP_SCRIPT
 PHP_SCRIPT_MUA
 
 # tflags publish
+PMP_SPAM
+
+# tflags publish
 POSSIBLE_AMAZON_PHISH_03
 
 # tflags publish
@@ -1313,6 +1343,9 @@ RAND_HEADER_MANY
 # tflags publish
 RAND_MKTG_HEADER
 
+# good enough
+RATWARE_NO_RDNS
+
 # tflags net
 RAZOR2_CF_RANGE_51_100
 
@@ -1680,6 +1713,9 @@ SUBJ_OBFU_LOW_CNTRST
 SUBJ_ODD_CASE
 
 # tflags net
+SUBJ_UNNEEDED_HTML
+
+# tflags net
 SURBL_BLOCKED
 
 # good enough
@@ -1703,7 +1739,7 @@ TARINGANET_IMG_NOT_RCVD_TN
 # tflags publish
 TEQF_USR_IMAGE
 
-# tflags publish
+# tflags net
 TEQF_USR_MSGID_HEX
 
 # tflags publish
@@ -1724,7 +1760,7 @@ TONLINE_FAKE_DKIM
 # tflags publish
 TO_EQ_FM_DIRECT_MX
 
-# good enough
+# tflags net
 TO_EQ_FM_DOM_HTML_IMG
 
 # good enough
@@ -1736,7 +1772,7 @@ TO_EQ_FM_DOM_SPF_FAIL
 # good enough
 TO_EQ_FM_HTML_DIRECT
 
-# good enough
+# tflags net
 TO_EQ_FM_HTML_ONLY
 
 # tflags net
@@ -1760,7 +1796,7 @@ TO_NO_BRKTS_HTML_IMG
 # tflags publish
 TO_NO_BRKTS_HTML_ONLY
 
-# good enough
+# tflags net
 TO_NO_BRKTS_MSFT
 
 # tflags publish
@@ -1787,7 +1823,7 @@ TVD_SPACE_ENCODED
 # good enough
 TVD_SPACE_RATIO_MINFP
 
-# good enough
+# tflags net
 TVD_SUBJ_NUM_OBFU_MINFP
 
 # tflags publish
@@ -1820,6 +1856,9 @@ UNPARSEABLE_RELAY
 # tflags publish
 UNSUB_GOOG_FORM
 
+# good enough
+UPPERCASE_URI
+
 # tflags net
 URIBL_ABUSE_SURBL
 
@@ -1913,6 +1952,9 @@ URI_ADOBESPARK
 # tflags publish
 URI_AZURE_CLOUDAPP
 
+# good enough
+URI_BUFFLY
+
 # tflags publish
 URI_CLOUDFLAREIPFS
 
@@ -1950,6 +1992,12 @@ URI_EXCESS_SLASHES
 URI_FIREBASEAPP
 
 # tflags publish
+URI_FLKIPFSXYZIPFS
+
+# tflags publish
+URI_GLITCHME
+
+# tflags publish
 URI_GOOGDRAWPREVIEW_MINFP
 
 # tflags publish
@@ -1988,7 +2036,7 @@ URI_MALWARE_SCMS
 # tflags userconf
 URI_NOVOWEL
 
-# tflags net
+# tflags publish
 URI_ONLY_MSGID_MALF
 
 # tflags publish
@@ -2018,7 +2066,7 @@ URI_WPADMIN
 # tflags publish
 URI_WP_DIRINDEX
 
-# tflags publish
+# tflags net
 URI_WP_HACKED
 
 # tflags publish
@@ -2060,9 +2108,6 @@ USER_IN_WELCOMELIST
 # tflags userconf
 USER_IN_WELCOMELIST_TO
 
-# good enough
-US_DOLLARS_3
-
 # tflags publish
 VFY_ACCT_NORDNS
 
@@ -2105,6 +2150,9 @@ XPRIO
 # tflags publish
 XPRIO_SHORT_SUBJ
 
+# tflags publish
+XPRIO_VISTA
+
 # good enough
 YOU_INHERIT