mirror of
https://git.proxmox.com/git/proxmox-spamassassin
synced 2025-04-28 12:19:37 +00:00
update SpamAssassin signatures
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
This commit is contained in:
Stoiko Ivanov
parent
6ca0e3a236
commit
151f49fd24
@ -56,7 +56,7 @@ endif
|
||||
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | idn -u | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
|
||||
|
||||
if can(Mail::SpamAssassin::Conf::feature_registryboundaries)
|
||||
# Updated 2023-05-19
|
||||
# Updated 2023-11-17
|
||||
util_rb_tld xn--11b4c3d xn--1ck2e1b xn--1qqw23a xn--2scrj9c xn--30rr7y xn--3bst00m
|
||||
util_rb_tld xn--3ds443g xn--3e0b707e xn--3hcrj9c xn--3pxu8k xn--42c2d9a xn--45br5cyl
|
||||
util_rb_tld xn--45brj9c xn--45q11c xn--4dbrk0ce xn--4gbrim xn--54b7fta0cc xn--55qw42g
|
||||
@ -90,110 +90,108 @@ endif
|
||||
# For an up to date list of TLDs that can be pasted into this block, run this command:
|
||||
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | tail -n+2 | grep -vi '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
|
||||
|
||||
# Updated 2023-05-19
|
||||
util_rb_tld aaa aarp abarth abb abbott abbvie abc able abogado abudhabi ac academy
|
||||
util_rb_tld accenture accountant accountants aco actor ad ads adult ae aeg aero aetna af
|
||||
util_rb_tld afl africa ag agakhan agency ai aig airbus airforce airtel akdn al alfaromeo
|
||||
util_rb_tld alibaba alipay allfinanz allstate ally alsace alstom am amazon americanexpress
|
||||
util_rb_tld americanfamily amex amfam amica amsterdam analytics android anquan anz ao aol
|
||||
util_rb_tld apartments app apple aq aquarelle ar arab aramco archi army arpa art arte as
|
||||
util_rb_tld asda asia associates at athleta attorney au auction audi audible audio auspost
|
||||
util_rb_tld author auto autos avianca aw aws ax axa az azure ba baby baidu banamex
|
||||
util_rb_tld bananarepublic band bank bar barcelona barclaycard barclays barefoot bargains
|
||||
util_rb_tld baseball basketball bauhaus bayern bb bbc bbt bbva bcg bcn bd be beats beauty
|
||||
util_rb_tld beer bentley berlin best bestbuy bet bf bg bh bharti bi bible bid bike bing
|
||||
util_rb_tld bingo bio biz bj black blackfriday blockbuster blog bloomberg blue bm bms bmw
|
||||
util_rb_tld bn bnpparibas bo boats boehringer bofa bom bond boo book booking bosch bostik
|
||||
# Updated 2023-11-17
|
||||
util_rb_tld aaa aarp abb abbott abbvie abc able abogado abudhabi ac academy accenture
|
||||
util_rb_tld accountant accountants aco actor ad ads adult ae aeg aero aetna af afl africa
|
||||
util_rb_tld ag agakhan agency ai aig airbus airforce airtel akdn al alibaba alipay
|
||||
util_rb_tld allfinanz allstate ally alsace alstom am amazon americanexpress americanfamily
|
||||
util_rb_tld amex amfam amica amsterdam analytics android anquan anz ao aol apartments app
|
||||
util_rb_tld apple aq aquarelle ar arab aramco archi army arpa art arte as asda asia
|
||||
util_rb_tld associates at athleta attorney au auction audi audible audio auspost author
|
||||
util_rb_tld auto autos avianca aw aws ax axa az azure ba baby baidu banamex bananarepublic
|
||||
util_rb_tld band bank bar barcelona barclaycard barclays barefoot bargains baseball
|
||||
util_rb_tld basketball bauhaus bayern bb bbc bbt bbva bcg bcn bd be beats beauty beer
|
||||
util_rb_tld bentley berlin best bestbuy bet bf bg bh bharti bi bible bid bike bing bingo
|
||||
util_rb_tld bio biz bj black blackfriday blockbuster blog bloomberg blue bm bms bmw bn
|
||||
util_rb_tld bnpparibas bo boats boehringer bofa bom bond boo book booking bosch bostik
|
||||
util_rb_tld boston bot boutique box br bradesco bridgestone broadway broker brother
|
||||
util_rb_tld brussels bs bt build builders business buy buzz bv bw by bz bzh ca cab cafe cal
|
||||
util_rb_tld call calvinklein cam camera camp canon capetown capital capitalone car caravan
|
||||
util_rb_tld cards care career careers cars casa case cash casino cat catering catholic cba
|
||||
util_rb_tld cbn cbre cbs cc cd center ceo cern cf cfa cfd cg ch chanel channel charity
|
||||
util_rb_tld chase chat cheap chintai christmas chrome church ci cipriani circle cisco
|
||||
util_rb_tld citadel citi citic city cityeats ck cl claims cleaning click clinic clinique
|
||||
util_rb_tld clothing cloud club clubmed cm cn co coach codes coffee college cologne com
|
||||
util_rb_tld comcast commbank community company compare computer comsec condos construction
|
||||
util_rb_tld consulting contact contractors cooking cookingchannel cool coop corsica country
|
||||
util_rb_tld coupon coupons courses cpa cr credit creditcard creditunion cricket crown crs
|
||||
util_rb_tld cruise cruises cu cuisinella cv cw cx cy cymru cyou cz dabur dad dance data
|
||||
util_rb_tld date dating datsun day dclk dds de deal dealer deals degree delivery dell
|
||||
util_rb_tld deloitte delta democrat dental dentist desi design dev dhl diamonds diet
|
||||
util_rb_tld digital direct directory discount discover dish diy dj dk dm dnp do docs doctor
|
||||
util_rb_tld dog domains dot download drive dtv dubai dunlop dupont durban dvag dvr dz earth
|
||||
util_rb_tld eat ec eco edeka edu education ee eg email emerck energy engineer engineering
|
||||
util_rb_tld enterprises epson equipment er ericsson erni es esq estate et etisalat eu
|
||||
util_rb_tld eurovision eus events exchange expert exposed express extraspace fage fail
|
||||
util_rb_tld fairwinds faith family fan fans farm farmers fashion fast fedex feedback
|
||||
util_rb_tld ferrari ferrero fi fiat fidelity fido film final finance financial fire
|
||||
util_rb_tld firestone firmdale fish fishing fit fitness fj fk flickr flights flir florist
|
||||
util_rb_tld flowers fly fm fo foo food foodnetwork football ford forex forsale forum
|
||||
util_rb_tld foundation fox fr free fresenius frl frogans frontdoor frontier ftr fujitsu fun
|
||||
util_rb_tld fund furniture futbol fyi ga gal gallery gallo gallup game games gap garden gay
|
||||
util_rb_tld gb gbiz gd gdn ge gea gent genting george gf gg ggee gh gi gift gifts gives
|
||||
util_rb_tld giving gl glass gle global globo gm gmail gmbh gmo gmx gn godaddy gold
|
||||
util_rb_tld goldpoint golf goo goodyear goog google gop got gov gp gq gr grainger graphics
|
||||
util_rb_tld gratis green gripe grocery group gs gt gu guardian gucci guge guide guitars
|
||||
util_rb_tld guru gw gy hair hamburg hangout haus hbo hdfc hdfcbank health healthcare help
|
||||
util_rb_tld helsinki here hermes hgtv hiphop hisamitsu hitachi hiv hk hkt hm hn hockey
|
||||
util_rb_tld holdings holiday homedepot homegoods homes homesense honda horse hospital host
|
||||
util_rb_tld hosting hot hoteles hotels hotmail house how hr hsbc ht hu hughes hyatt hyundai
|
||||
util_rb_tld ibm icbc ice icu id ie ieee ifm ikano il im imamat imdb immo immobilien in inc
|
||||
util_rb_tld industries infiniti info ing ink institute insurance insure int international
|
||||
util_rb_tld intuit investments io ipiranga iq ir irish is ismaili ist istanbul it itau itv
|
||||
util_rb_tld jaguar java jcb je jeep jetzt jewelry jio jll jm jmp jnj jo jobs joburg jot joy
|
||||
util_rb_tld jp jpmorgan jprs juegos juniper kaufen kddi ke kerryhotels kerrylogistics
|
||||
util_rb_tld kerryproperties kfh kg kh ki kia kids kim kinder kindle kitchen kiwi km kn
|
||||
util_rb_tld koeln komatsu kosher kp kpmg kpn kr krd kred kuokgroup kw ky kyoto kz la
|
||||
util_rb_tld lacaixa lamborghini lamer lancaster lancia land landrover lanxess lasalle lat
|
||||
util_rb_tld latino latrobe law lawyer lb lc lds lease leclerc lefrak legal lego lexus lgbt
|
||||
util_rb_tld li lidl life lifeinsurance lifestyle lighting like lilly limited limo lincoln
|
||||
util_rb_tld link lipsy live living lk llc llp loan loans locker locus lol london lotte
|
||||
util_rb_tld lotto love lpl lplfinancial lr ls lt ltd ltda lu lundbeck luxe luxury lv ly ma
|
||||
util_rb_tld madrid maif maison makeup man management mango map market marketing markets
|
||||
util_rb_tld marriott marshalls maserati mattel mba mc mckinsey md me med media meet
|
||||
util_rb_tld cbn cbre cc cd center ceo cern cf cfa cfd cg ch chanel channel charity chase
|
||||
util_rb_tld chat cheap chintai christmas chrome church ci cipriani circle cisco citadel
|
||||
util_rb_tld citi citic city ck cl claims cleaning click clinic clinique clothing cloud club
|
||||
util_rb_tld clubmed cm cn co coach codes coffee college cologne com comcast commbank
|
||||
util_rb_tld community company compare computer comsec condos construction consulting
|
||||
util_rb_tld contact contractors cooking cool coop corsica country coupon coupons courses
|
||||
util_rb_tld cpa cr credit creditcard creditunion cricket crown crs cruise cruises cu
|
||||
util_rb_tld cuisinella cv cw cx cy cymru cyou cz dabur dad dance data date dating datsun
|
||||
util_rb_tld day dclk dds de deal dealer deals degree delivery dell deloitte delta democrat
|
||||
util_rb_tld dental dentist desi design dev dhl diamonds diet digital direct directory
|
||||
util_rb_tld discount discover dish diy dj dk dm dnp do docs doctor dog domains dot download
|
||||
util_rb_tld drive dtv dubai dunlop dupont durban dvag dvr dz earth eat ec eco edeka edu
|
||||
util_rb_tld education ee eg email emerck energy engineer engineering enterprises epson
|
||||
util_rb_tld equipment er ericsson erni es esq estate et etisalat eu eurovision eus events
|
||||
util_rb_tld exchange expert exposed express extraspace fage fail fairwinds faith family fan
|
||||
util_rb_tld fans farm farmers fashion fast fedex feedback ferrari ferrero fi fidelity fido
|
||||
util_rb_tld film final finance financial fire firestone firmdale fish fishing fit fitness
|
||||
util_rb_tld fj fk flickr flights flir florist flowers fly fm fo foo food football ford
|
||||
util_rb_tld forex forsale forum foundation fox fr free fresenius frl frogans frontier ftr
|
||||
util_rb_tld fujitsu fun fund furniture futbol fyi ga gal gallery gallo gallup game games
|
||||
util_rb_tld gap garden gay gb gbiz gd gdn ge gea gent genting george gf gg ggee gh gi gift
|
||||
util_rb_tld gifts gives giving gl glass gle global globo gm gmail gmbh gmo gmx gn godaddy
|
||||
util_rb_tld gold goldpoint golf goo goodyear goog google gop got gov gp gq gr grainger
|
||||
util_rb_tld graphics gratis green gripe grocery group gs gt gu guardian gucci guge guide
|
||||
util_rb_tld guitars guru gw gy hair hamburg hangout haus hbo hdfc hdfcbank health
|
||||
util_rb_tld healthcare help helsinki here hermes hiphop hisamitsu hitachi hiv hk hkt hm hn
|
||||
util_rb_tld hockey holdings holiday homedepot homegoods homes homesense honda horse
|
||||
util_rb_tld hospital host hosting hot hotels hotmail house how hr hsbc ht hu hughes hyatt
|
||||
util_rb_tld hyundai ibm icbc ice icu id ie ieee ifm ikano il im imamat imdb immo immobilien
|
||||
util_rb_tld in inc industries infiniti info ing ink institute insurance insure int
|
||||
util_rb_tld international intuit investments io ipiranga iq ir irish is ismaili ist
|
||||
util_rb_tld istanbul it itau itv jaguar java jcb je jeep jetzt jewelry jio jll jm jmp jnj
|
||||
util_rb_tld jo jobs joburg jot joy jp jpmorgan jprs juegos juniper kaufen kddi ke
|
||||
util_rb_tld kerryhotels kerrylogistics kerryproperties kfh kg kh ki kia kids kim kindle
|
||||
util_rb_tld kitchen kiwi km kn koeln komatsu kosher kp kpmg kpn kr krd kred kuokgroup kw ky
|
||||
util_rb_tld kyoto kz la lacaixa lamborghini lamer lancaster land landrover lanxess lasalle
|
||||
util_rb_tld lat latino latrobe law lawyer lb lc lds lease leclerc lefrak legal lego lexus
|
||||
util_rb_tld lgbt li lidl life lifeinsurance lifestyle lighting like lilly limited limo
|
||||
util_rb_tld lincoln link lipsy live living lk llc llp loan loans locker locus lol london
|
||||
util_rb_tld lotte lotto love lpl lplfinancial lr ls lt ltd ltda lu lundbeck luxe luxury lv
|
||||
util_rb_tld ly ma madrid maif maison makeup man management mango map market marketing
|
||||
util_rb_tld markets marriott marshalls mattel mba mc mckinsey md me med media meet
|
||||
util_rb_tld melbourne meme memorial men menu merckmsd mg mh miami microsoft mil mini mint
|
||||
util_rb_tld mit mitsubishi mk ml mlb mls mm mma mn mo mobi mobile moda moe moi mom monash
|
||||
util_rb_tld money monster mormon mortgage moscow moto motorcycles mov movie mp mq mr ms msd
|
||||
util_rb_tld mt mtn mtr mu museum music mutual mv mw mx my mz na nab nagoya name natura navy
|
||||
util_rb_tld nba nc ne nec net netbank netflix network neustar new news next nextdirect
|
||||
util_rb_tld nexus nf nfl ng ngo nhk ni nico nike nikon ninja nissan nissay nl no nokia
|
||||
util_rb_tld northwesternmutual norton now nowruz nowtv np nr nra nrw ntt nu nyc nz obi
|
||||
util_rb_tld observer office okinawa olayan olayangroup oldnavy ollo om omega one ong onl
|
||||
util_rb_tld online ooo open oracle orange org organic origins osaka otsuka ott ovh pa page
|
||||
util_rb_tld panasonic paris pars partners parts party passagens pay pccw pe pet pf pfizer
|
||||
util_rb_tld pg ph pharmacy phd philips phone photo photography photos physio pics pictet
|
||||
util_rb_tld pictures pid pin ping pink pioneer pizza pk pl place play playstation plumbing
|
||||
util_rb_tld plus pm pn pnc pohl poker politie porn post pr pramerica praxi press prime pro
|
||||
util_rb_tld prod productions prof progressive promo properties property protection pru
|
||||
util_rb_tld prudential ps pt pub pw pwc py qa qpon quebec quest racing radio re read
|
||||
util_rb_tld realestate realtor realty recipes red redstone redumbrella rehab reise reisen
|
||||
util_rb_tld reit reliance ren rent rentals repair report republican rest restaurant review
|
||||
util_rb_tld reviews rexroth rich richardli ricoh ril rio rip ro rocher rocks rodeo rogers
|
||||
util_rb_tld room rs rsvp ru rugby ruhr run rw rwe ryukyu sa saarland safe safety sakura
|
||||
util_rb_tld sale salon samsclub samsung sandvik sandvikcoromant sanofi sap sarl sas save
|
||||
util_rb_tld saxo sb sbi sbs sc sca scb schaeffler schmidt scholarships school schule
|
||||
util_rb_tld schwarz science scot sd se search seat secure security seek select sener
|
||||
util_rb_tld services seven sew sex sexy sfr sg sh shangrila sharp shaw shell shia shiksha
|
||||
util_rb_tld shoes shop shopping shouji show showtime si silk sina singles site sj sk ski
|
||||
util_rb_tld skin sky skype sl sling sm smart smile sn sncf so soccer social softbank
|
||||
util_rb_tld software sohu solar solutions song sony soy spa space sport spot sr srl ss st
|
||||
util_rb_tld stada staples star statebank statefarm stc stcgroup stockholm storage store
|
||||
util_rb_tld stream studio study style su sucks supplies supply support surf surgery suzuki
|
||||
util_rb_tld sv swatch swiss sx sy sydney systems sz tab taipei talk taobao target
|
||||
util_rb_tld tatamotors tatar tattoo tax taxi tc tci td tdk team tech technology tel temasek
|
||||
util_rb_tld tennis teva tf tg th thd theater theatre tiaa tickets tienda tiffany tips tires
|
||||
util_rb_tld tirol tj tjmaxx tjx tk tkmaxx tl tm tmall tn to today tokyo tools top toray
|
||||
util_rb_tld toshiba total tours town toyota toys tr trade trading training travel
|
||||
util_rb_tld travelchannel travelers travelersinsurance trust trv tt tube tui tunes tushu tv
|
||||
util_rb_tld tvs tw tz ua ubank ubs ug uk unicom university uno uol ups us uy uz va
|
||||
util_rb_tld vacations vana vanguard vc ve vegas ventures verisign versicherung vet vg vi
|
||||
util_rb_tld viajes video vig viking villas vin vip virgin visa vision viva vivo vlaanderen
|
||||
util_rb_tld vn vodka volkswagen volvo vote voting voto voyage vu vuelos wales walmart
|
||||
util_rb_tld walter wang wanggou watch watches weather weatherchannel webcam weber website
|
||||
util_rb_tld wed wedding weibo weir wf whoswho wien wiki williamhill win windows wine
|
||||
util_rb_tld winners wme wolterskluwer woodside work works world wow ws wtc wtf xbox xerox
|
||||
util_rb_tld xfinity xihuan xin xxx xyz yachts yahoo yamaxun yandex ye yodobashi yoga
|
||||
util_rb_tld yokohama you youtube yt yun za zappos zara zero zip zm zone zuerich zw
|
||||
util_rb_tld mt mtn mtr mu museum music mv mw mx my mz na nab nagoya name natura navy nba nc
|
||||
util_rb_tld ne nec net netbank netflix network neustar new news next nextdirect nexus nf
|
||||
util_rb_tld nfl ng ngo nhk ni nico nike nikon ninja nissan nissay nl no nokia norton now
|
||||
util_rb_tld nowruz nowtv np nr nra nrw ntt nu nyc nz obi observer office okinawa olayan
|
||||
util_rb_tld olayangroup oldnavy ollo om omega one ong onl online ooo open oracle orange org
|
||||
util_rb_tld organic origins osaka otsuka ott ovh pa page panasonic paris pars partners
|
||||
util_rb_tld parts party pay pccw pe pet pf pfizer pg ph pharmacy phd philips phone photo
|
||||
util_rb_tld photography photos physio pics pictet pictures pid pin ping pink pioneer pizza
|
||||
util_rb_tld pk pl place play playstation plumbing plus pm pn pnc pohl poker politie porn
|
||||
util_rb_tld post pr pramerica praxi press prime pro prod productions prof progressive promo
|
||||
util_rb_tld properties property protection pru prudential ps pt pub pw pwc py qa qpon
|
||||
util_rb_tld quebec quest racing radio re read realestate realtor realty recipes red
|
||||
util_rb_tld redstone redumbrella rehab reise reisen reit reliance ren rent rentals repair
|
||||
util_rb_tld report republican rest restaurant review reviews rexroth rich richardli ricoh
|
||||
util_rb_tld ril rio rip ro rocks rodeo rogers room rs rsvp ru rugby ruhr run rw rwe ryukyu
|
||||
util_rb_tld sa saarland safe safety sakura sale salon samsclub samsung sandvik
|
||||
util_rb_tld sandvikcoromant sanofi sap sarl sas save saxo sb sbi sbs sc sca scb schaeffler
|
||||
util_rb_tld schmidt scholarships school schule schwarz science scot sd se search seat
|
||||
util_rb_tld secure security seek select sener services seven sew sex sexy sfr sg sh
|
||||
util_rb_tld shangrila sharp shaw shell shia shiksha shoes shop shopping shouji show si silk
|
||||
util_rb_tld sina singles site sj sk ski skin sky skype sl sling sm smart smile sn sncf so
|
||||
util_rb_tld soccer social softbank software sohu solar solutions song sony soy spa space
|
||||
util_rb_tld sport spot sr srl ss st stada staples star statebank statefarm stc stcgroup
|
||||
util_rb_tld stockholm storage store stream studio study style su sucks supplies supply
|
||||
util_rb_tld support surf surgery suzuki sv swatch swiss sx sy sydney systems sz tab taipei
|
||||
util_rb_tld talk taobao target tatamotors tatar tattoo tax taxi tc tci td tdk team tech
|
||||
util_rb_tld technology tel temasek tennis teva tf tg th thd theater theatre tiaa tickets
|
||||
util_rb_tld tienda tips tires tirol tj tjmaxx tjx tk tkmaxx tl tm tmall tn to today tokyo
|
||||
util_rb_tld tools top toray toshiba total tours town toyota toys tr trade trading training
|
||||
util_rb_tld travel travelers travelersinsurance trust trv tt tube tui tunes tushu tv tvs tw
|
||||
util_rb_tld tz ua ubank ubs ug uk unicom university uno uol ups us uy uz va vacations vana
|
||||
util_rb_tld vanguard vc ve vegas ventures verisign versicherung vet vg vi viajes video vig
|
||||
util_rb_tld viking villas vin vip virgin visa vision viva vivo vlaanderen vn vodka
|
||||
util_rb_tld volkswagen volvo vote voting voto voyage vu wales walmart walter wang wanggou
|
||||
util_rb_tld watch watches weather weatherchannel webcam weber website wed wedding weibo
|
||||
util_rb_tld weir wf whoswho wien wiki williamhill win windows wine winners wme
|
||||
util_rb_tld wolterskluwer woodside work works world wow ws wtc wtf xbox xerox xfinity
|
||||
util_rb_tld xihuan xin xxx xyz yachts yahoo yamaxun yandex ye yodobashi yoga yokohama you
|
||||
util_rb_tld youtube yt yun za zappos zara zero zip zm zone zuerich zw
|
||||
|
||||
#
|
||||
# 2nd level TLD list
|
||||
@ -495,9 +493,17 @@ util_rb_2tld weebly.com
|
||||
util_rb_2tld ifrance.com
|
||||
util_rb_2tld jimdo.com
|
||||
util_rb_2tld kimsufi.com
|
||||
util_rb_2tld mail333.su
|
||||
util_rb_2tld pisem.su
|
||||
util_rb_2tld azerbaijan.su
|
||||
util_rb_2tld east-kazakhstan.su
|
||||
util_rb_2tld exnet.su
|
||||
util_rb_2tld georgia.su
|
||||
util_rb_2tld kalmykia.su
|
||||
util_rb_2tld mail15.su
|
||||
util_rb_2tld mail333.su
|
||||
util_rb_2tld mangyshlak.su
|
||||
util_rb_2tld nov.su
|
||||
util_rb_2tld pisem.su
|
||||
util_rb_2tld tashkent.su
|
||||
util_rb_2tld prserv.net
|
||||
util_rb_2tld angelfire.com
|
||||
util_rb_2tld 163.to
|
||||
@ -638,6 +644,8 @@ util_rb_2tld tumblr.com
|
||||
util_rb_2tld fileave.com
|
||||
util_rb_2tld de.tl
|
||||
util_rb_2tld co.com
|
||||
util_rb_2tld sendpul.se
|
||||
util_rb_2tld amplifyapp.com
|
||||
# Dyndns.com
|
||||
util_rb_2tld dyndns-at-home.com
|
||||
util_rb_2tld dyndns-at-work.com
|
||||
@ -740,6 +748,7 @@ util_rb_3tld no-ip.co.uk
|
||||
#
|
||||
util_rb_3tld mobile.web.tr
|
||||
util_rb_3tld ct.sendgrid.net
|
||||
util_rb_3tld on.fleek.co
|
||||
|
||||
endif
|
||||
|
||||
|
||||
@ -40,8 +40,11 @@ header __HELO_STATIC_SENDGRID X-Spam-Relays-External =~ /^[^\]]+ helo=o\d{1,3}-\
|
||||
# 50-203-126-142-static.hfc.comcastbusiness.net
|
||||
header __HELO_STATIC_COMCAST X-Spam-Relays-External =~ /^[^\]]+ helo=\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}-static\.hfc\.comcastbusiness\.net\s[^\]]+ auth= /i
|
||||
|
||||
# smtp-0f95944d4245d0b2c.core1.sfdc-58ktaz.mta.salesforce.com
|
||||
header __HELO_STATIC_SALESFORCE X-Spam-Relays-External =~ /^[^\]]+ helo=smtp\-\w+\.core\d\.sfdc\-\w+\.mta\.salesforce\.com\s[^\]]+ auth= /i
|
||||
|
||||
describe HELO_STATIC_HOST Relay HELO'd using static hostname
|
||||
meta HELO_STATIC_HOST (__HELO_STATIC_ROGERS || __HELO_STATIC_SENDGRID || __HELO_STATIC_COMCAST)
|
||||
meta HELO_STATIC_HOST (__HELO_STATIC_ROGERS || __HELO_STATIC_SENDGRID || __HELO_STATIC_COMCAST || __HELO_STATIC_SALESFORCE)
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
|
||||
|
||||
@ -145,7 +145,7 @@ freemail_domains fedxmail.com feelings.com female.ru fepg.net ffanet.com fiberia
|
||||
freemail_domains filipinolinks.com financesource.com findmail.com
|
||||
freemail_domains fiscal.net flashmail.com flipcode.com florida.usa.com floridagators.com
|
||||
freemail_domains fmail.co.uk fmailbox.com fmgirl.com fmguy.com fnmail.com footballer.com foxmail.com
|
||||
freemail_domains forfree.at forsythmissouri.org fortuncity.com forum.dk free.com.pe free.fr
|
||||
freemail_domains forfree.at forsythmissouri.org fortuncity.com forum.dk free.com.pe free.fr *.free.hr
|
||||
freemail_domains free.net.nz freeaccess.nl freegates.be freeghana.com freehosting.nl
|
||||
freemail_domains freei.co.th freeler.nl freemail.* freemail.*.* freemail.globalsite.com.br
|
||||
freemail_domains freemuslim.net freenet.de freenet.kg freeola.net freepgs.com freesbee.fr
|
||||
@ -387,7 +387,7 @@ freemail_domains yellow-jackets.com yellowstone.net yenimail.com yepmail.net yif
|
||||
freemail_domains ymail.com yopmail.com your-mail.com yours.com yourwap.com yyhmail.com z11.com z6.com
|
||||
freemail_domains zednet.co.uk zeeman.nl ziplip.com zipmail.com.br zipmax.com
|
||||
freemail_domains zmail.pt zmail.ru zona-andina.net zonai.com zoneview.net zonnet.nl
|
||||
freemail_domains zoho.com zoomshare.com zoznam.sk zubee.com zuvio.com zwallet.com zworg.com
|
||||
freemail_domains zoho.com zohomail.com zoomshare.com zoznam.sk zubee.com zuvio.com zwallet.com zworg.com
|
||||
freemail_domains zybermail.com zzn.com
|
||||
|
||||
# chinese numbers
|
||||
|
||||
@ -63,13 +63,16 @@ header __PLING_QUERY Subject =~ /\?.*!|!.*\?/
|
||||
meta PLING_QUERY (__PLING_QUERY && !__ISO_2022_JP_DELIM)
|
||||
describe PLING_QUERY Subject has exclamation mark and question mark
|
||||
|
||||
# A common spam idiosyncrasy
|
||||
describe FROMSPACE Idiosyncratic "From" header format
|
||||
header FROMSPACE From:raw =~ /^\s?\"\s/
|
||||
|
||||
|
||||
|
||||
header MSGID_SPAM_CAPS Message-ID =~ /^\s*<?[A-Z]+\@(?!(?:mailcity|whowhere)\.com)/
|
||||
describe MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
|
||||
|
||||
header MSGID_SPAM_LETTERS Message-Id =~ /<[a-z]{5,}\@(\S+\.)+\S+>/
|
||||
header MSGID_SPAM_LETTERS Message-Id =~ /<[a-z]{5,}\@(?:\S+\.)+\S+>/
|
||||
describe MSGID_SPAM_LETTERS Spam tool Message-Id: (letters variant)
|
||||
|
||||
|
||||
@ -421,11 +424,11 @@ header BAD_ENC_HEADER ALL:raw =~ /=\?[^?\s]+\?[^?\s]\?\s*[^?]+\s(?!\?=)/
|
||||
describe BAD_ENC_HEADER Message has bad MIME encoding in the header
|
||||
|
||||
|
||||
header __ML1 Precedence =~ m{\b(list|bulk)\b}i
|
||||
header __ML1 Precedence =~ m{\b(?:list|bulk)\b}i
|
||||
meta __ML2 __HAS_LIST_ID
|
||||
header __ML3 exists:List-Post
|
||||
header __ML4 exists:Mailing-List
|
||||
header __ML5 Return-Path:addr =~ m{^([^\@]+-(request|bounces|admin|owner)|owner-[^\@]+)(\@|\z)}i
|
||||
header __ML5 Return-Path:addr =~ m{^(?:[^\@]+-(?:request|bounces|admin|owner)|owner-[^\@]+)(?:\@|\z)}i
|
||||
meta __VIA_ML __ML1 || __ML2 || __ML3 || __ML4 || __ML5
|
||||
describe __VIA_ML Mail from a mailing list
|
||||
|
||||
|
||||
@ -108,7 +108,7 @@ describe MONEY_BACK Money back guarantee
|
||||
body FREE_QUOTE_INSTANT /free.{0,12}(?:(?:instant|express|online|no.?obligation).{0,4})+.{0,32}\bquote/i
|
||||
describe FREE_QUOTE_INSTANT Free express or no-obligation quote
|
||||
|
||||
body BAD_CREDIT /\b((?:bad|poor|eliminate|repair|(?:re)?establish|damag).{0,10} (?:credit|debt)|no credit (?:check|histor|need))/i
|
||||
body BAD_CREDIT /\b(?:(?:bad|poor|eliminate|repair|(?:re)?establish|damag).{0,10} (?:credit|debt)|no credit (?:check|histor|need))/i
|
||||
describe BAD_CREDIT Eliminate Bad Credit
|
||||
|
||||
|
||||
|
||||
@ -63,7 +63,10 @@ header __HAS_XORIGMSGID X-Orig-Message-Id =~ /^<.+\@.+>$/m
|
||||
|
||||
meta __GROUPSIO_GATED __GROUPSIO_MSGID && __HAS_XORIGMSGID
|
||||
|
||||
meta __UNUSABLE_MSGID (__LYRIS_EZLM_REMAILER || __GATED_THROUGH_RCVD_REMOVER || __WACKY_SENDMAIL_VERSION || __IPLANET_MESSAGING_SERVER || __HOTMAIL_BAYDAV_MSGID || __SYMPATICO_MSGID && __GROUPSIO_GATED)
|
||||
#bz8202
|
||||
header __MCRSFT_MSGID MESSAGEID =~ /^<[[:alnum:]]{30,45}@[^>]*\.(outlook|exchangelabs).com>$/im
|
||||
|
||||
meta __UNUSABLE_MSGID (__MCRSFT_MSGID || __LYRIS_EZLM_REMAILER || __GATED_THROUGH_RCVD_REMOVER || __WACKY_SENDMAIL_VERSION || __IPLANET_MESSAGING_SERVER || __HOTMAIL_BAYDAV_MSGID || __SYMPATICO_MSGID && __GROUPSIO_GATED)
|
||||
|
||||
## now on to the forgery rules
|
||||
|
||||
@ -270,7 +273,7 @@ describe X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found
|
||||
|
||||
# case-sensitive rule
|
||||
# only significant rules with no FPs, hit recently, on 2+ corpuses
|
||||
header HEADER_SPAM ALL =~ /^(Alternate-Recipient|Antivirus|Approved|Delivery-Notification|Disclose-Recipients|Error-path|Language|Location|Mime-Subversion|Newsletter-ID|PID|Rot|UID|X-BounceTrace|X-CS-IP|X-Company-Address|X-Company-City|X-Company-Country|X-Company-State|X-Company-Zip|X-E(?:[Mm]ail)?|X-Encoding|X-Originating-Company|X-RMD-Text|X-SG4|X-SP-Track-ID|X-Webmail-Time|X-bounce-to):/m
|
||||
header HEADER_SPAM ALL =~ /^(?:Alternate-Recipient|Antivirus|Approved|Delivery-Notification|Disclose-Recipients|Error-path|Language|Location|Mime-Subversion|Newsletter-ID|PID|Rot|UID|X-BounceTrace|X-CS-IP|X-Company-Address|X-Company-City|X-Company-Country|X-Company-State|X-Company-Zip|X-E(?:[Mm]ail)?|X-Encoding|X-Originating-Company|X-RMD-Text|X-SG4|X-SP-Track-ID|X-Webmail-Time|X-bounce-to):/m
|
||||
describe HEADER_SPAM Bulk email fingerprint (header-based) found
|
||||
|
||||
header RATWARE_RCVD_PF Received =~ / \(Postfix\) with ESMTP id [^;]+\; \S+ \d+ \S+ \d+ \d+:\d+:\d+ \S+$/s
|
||||
|
||||
@ -129,7 +129,7 @@ header __BOUNCE_INTERSCAN From =~ /\bInterscan MSS Notification\b/
|
||||
|
||||
body __BOUNCE_NO_RESEND /\bPlease do not resend your original message\./
|
||||
|
||||
header __BOUNCE_AUTO_REPLY Subject =~ /\b(automatic reply|AutoReply)\b/
|
||||
header __BOUNCE_AUTO_REPLY Subject =~ /\b(?:automatic reply|AutoReply)\b/
|
||||
|
||||
meta BOUNCE_MESSAGE __HAVE_BOUNCE_RELAYS && !OOOBOUNCE_MESSAGE && !__MY_SERVERS_FOUND && !ALL_TRUSTED && !__NONBOUNCE_READ_RECEIPT && (__BOUNCE_FROM_DAEMON || (__BOUNCE_RPATH_NULL && !__BOUNCE_READ_NOTIFICATION) || __BOUNCE_RPATH_MD || __BOUNCE_AUTO_GENERATED || __BOUNCE_Y_AUTOGEN || __BOUNCE_SYMANTEC || __BOUNCE_X_ERR_STAT || __BOUNCE_RETURNED || __BOUNCE_MAILDELFAIL || __BOUNCE_MSGDELFAIL || __BOUNCE_ESMTP || __BOUNCE_NEVER_SEE || __BOUNCE_NONWORKING || __BOUNCE_UNDELIVERABLE || __BOUNCE_UNDELIVERABLE_ML || __BOUNCE_NOTDEL || __BOUNCE_CTYPE || __BOUNCE_DEL_FAIL || __BOUNCE_STAT_FAIL || __BOUNCE_ADDR_ERR || __BOUNCE_NO_VAL || __BOUNCE_DATA_FORMAT || __BOUNCE_COULD_NOT || __BOUNCE_UNDEL_MSG || __BOUNCE_RPATH_ERRMAIL || __BOUNCE_INTERSCAN || __BOUNCE_ETRUST || __BOUNCE_AUTO_RESPONSE || __BOUNCE_AUTO_RESPOND || __BOUNCE_NO_RESEND || __BOUNCE_NOTIF || __BOUNCE_RET_MAIL || __BOUNCE_DEL_FAIL || __BOUNCE_MAIL_DEL_FAIL || __BOUNCE_AUTO_REPLY)
|
||||
|
||||
@ -246,7 +246,7 @@ body __VBOUNCE_MAILSWEEP /MAILsweeper has found that a \S+ \S+ \S+ \S+ one or
|
||||
header __VBOUNCE_SCREENSAVER Subject =~ /\b(?:Re: ?)Wicked screensaver\b/i
|
||||
header __VBOUNCE_DISALLOWED Subject =~ /^Disallowed attachment type found/
|
||||
header __VBOUNCE_FROMPT From =~ /Security.?Scan Anti.?Virus/
|
||||
header __VBOUNCE_WARNING Subject =~ /^Warning:\s*E-?mail virus(es)? detected/i
|
||||
header __VBOUNCE_WARNING Subject =~ /^Warning:\s*E-?mail virus(?:es)? detected/i
|
||||
header __VBOUNCE_DETECTED Subject =~ /^Virus detected /i
|
||||
header __VBOUNCE_INTERSCAN Subject =~ /^Failed to clean virus\b/i
|
||||
header __VBOUNCE_VIOLATION Subject =~ /^Content violation/i
|
||||
@ -273,7 +273,7 @@ header __VBOUNCE_RAV Subject =~ /^RAV Anti.?Virus scan results/
|
||||
body __VBOUNCE_ATTACHMENT0 /(?:Attachment.{0,40}was Deleted|the infected attachment)/
|
||||
# Bart says: it appears that _ATTACHMENT0 is an alternate for _NAV -- both match the same messages.
|
||||
|
||||
body __VBOUNCE_AVREPORT0 /(antivirus system report|the antivirus module has|illegal attachment|Unrepairable Virus Detected)/i
|
||||
body __VBOUNCE_AVREPORT0 /(?:antivirus system report|the antivirus module has|illegal attachment|Unrepairable Virus Detected)/i
|
||||
header __VBOUNCE_SENDER Subject =~ /^Virus to sender/
|
||||
body __VBOUNCE_MAILSWEEP2 /\bblocked by Mailsweeper\b/i
|
||||
|
||||
|
||||
@ -27,13 +27,13 @@
|
||||
|
||||
ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
|
||||
|
||||
replace_tag A (?:[aA\@\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xe4\xe3\xe2\xe0\xe1\xe2\xe3\xe4\xe5\xe6]|[\xb6\xc1\xc4\xcb]|[\xc3][\x80\x81\x82\x83\x84\x85\xa0\xa1\xa2\xa3\xa4\xa5]|[\xc4][\x80\x81\x82\x83\x84\x85]|[\xce][\x86\x91\x94\x9b\xac\xb1]|[\xd0][\x90\xb0]|[\xd1][\xa6\xa7]|[\xd3][\x90\x91\x92\x93]|[\xe1](?:[\x8e][\xaa]|[\xb8][\x80\x81]|[\xba][\x9a\xa0-\xb7]|[\xbc][\x80-\x8f]|[\xbd][\xb0\xb1]|[\xbe][\x80-\x8f\xb0-\xbc])|[\xf0][\x9d](?:[\x90][\x80\x9a\xb4]|[\x91][\x8e\xa8]|[\x92][\x82\x9c\xb6]|[\x93][\x90\xaa]|[\x94][\xb8\x92]|[\x95][\x92]|[\x96][\xa0\xba]|[\x97][\x94\xae]|[\x98][\x88\xa2\xbc]|[\x99][\x96\xb0]|[\x9a][\x8a\xa8]|[\x9b][\x82\xa2\xbc]|[\x9c][\x9c\xb6]|[\x9d][\x96\xb0]|[\x9e][\x90\xaa]))
|
||||
replace_tag A (?:[aA\@\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xe4\xe3\xe2\xe0\xe1\xe2\xe3\xe4\xe5\xe6]|[\xb6\xc1\xc4\xcb]|[\xc3][\x80\x81\x82\x83\x84\x85\xa0\xa1\xa2\xa3\xa4\xa5]|[\xc4][\x80\x81\x82\x83\x84\x85]|[\xc9][\x91]|[\xce][\x86\x91\x94\x9b\xac\xb1]|[\xd0][\x90\xb0]|[\xd1][\xa6\xa7]|[\xd3][\x90\x91\x92\x93]|[\xe1](?:[\x8e][\xaa]|[\xb8][\x80\x81]|[\xba][\x9a\xa0-\xb7]|[\xbc][\x80-\x8f]|[\xbd][\xb0\xb1]|[\xbe][\x80-\x8f\xb0-\xbc])|[\xf0][\x9d](?:[\x90][\x80\x9a\xb4]|[\x91][\x8e\xa8]|[\x92][\x82\x9c\xb6]|[\x93][\x90\xaa]|[\x94][\xb8\x92]|[\x95][\x92]|[\x96][\xa0\xba]|[\x97][\x94\xae]|[\x98][\x88\xa2\xbc]|[\x99][\x96\xb0]|[\x9a][\x8a\xa8]|[\x9b][\x82\xa2\xbc]|[\x9c][\x9c\xb6]|[\x9d][\x96\xb0]|[\x9e][\x90\xaa]))
|
||||
replace_tag B (?:[bB8\xc2\xe2]|[\xce][\x92\xb2]|[\xcf][\x90\xb8]|[\xc3][\x9f]|[\xc6][\x80\x81\x82\x83\x84\x85]|[\xce][\x92\xb2]|[\xcf][\x90]|[\xd0][\x91\x92\xac\xb1\xb2]|[\xd1][\x8a\x8c\xa2\xa3]|[\xd2][\x8c\x8d]|[\xe1](?:[\xb8][\x82-\x87]|[\xba][\x9e])|[\xf0][\x9d](?:[\x90][\x81\x9b\xb5]|[\x91][\x8f\xa9]|[\x92][\x83\x9d\xb7]|[\x93][\x91\xab]|[\x94][\x85\x9f\xb9]|[\x95][\x93\xad]|[\x96][\x87\xa1\xbb]|[\x97][\x95\xaf]|[\x98][\x89\xa3\xbd]|[\x99][\x97\xb1]|[\x9a][\x8b\xa9]|[\x9b][\x83\xa3\xbd]|[\x9c][\x9d\xb7]|[\x9d][\x97\xb1]|[\x9e][\x91\xab]))
|
||||
replace_tag C (?:[cCk\xc7\xe7\xf2@]|[\xc3][\x87\xa7]|[\xc4][\x86\x87\x88\x89\x8a\x8b\x8c\x8d]|[\xc6][\x87\x88]|[\xcf][\x82\x9a\x9b\xb2\xb9\xbe]|[\xd0][\xa1]|[\xd1][\x81]|[\xd2][\x80\x81\xaa\xab]|[\xd5][\x87]|&\#(?:1(?:0(?:10|17|2[123]|57|89)|1(?:52|53|94|95)|99)|2(?:31|6[2-9])|39[12]|x(?:3(?:f2|f9|fe)|4(?:21|41|80|81|aa|ab)));|[\xe1](?:[\xb8][\x88\x89])|[\xf0][\x9d](?:[\x90][\x82\x9c\xb6]|[\x91][\x90\xaa]|[\x92][\x84\x9e\xb8]|[\x93][\x92\xac]|[\x94][\x86\xa0\xba]|[\x95][\x94\xae]|[\x96][\x88\xa2\xbc]|[\x97][\x96\xb0]|[\x98][\x8a\xa4\xbe]|[\x99][\x98\xb2]|[\x9a][\x8c]|[\x9b][\x93]|[\x9c][\x8d]|[\x9d][\x87]|[\x9e][\x81]))
|
||||
replace_tag D (?:[dD\xd0]|[\xc3][\x90]|[\xc4][\x8e\x8f\x90\x91]|[\xc6][\x89\x8a]|[\xd4][\x80\x81]|[\xd5][\xaa]|[\xe1](?:[\xb8][\x8a-\x93])|[\xf0][\x9d](?:[\x90][\x83\x9d\xb7]|[\x91][\x91\xab]|[\x92][\x85\x9f\xb9]|[\x93][\x93\xad]|[\x94][\x87\xa1\xbb]|[\x95][\x95\xaf]|[\x96][\x89\xa3\xbd]|[\x97][\x97\xb1]|[\x98][\x8b\xa5\xbf]|[\x99][\x99\xb3]|[\x9a][\x8d]))
|
||||
replace_tag E (?:[eE3\xb8\xc5\xd3\xdd\xe5\xee]|[\xc3][\x88\x89\x8a\x8b\xa8\xa9\xaa\xab]|[\xc4][\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b]|[\xc8][\x84\x85\x86\x87\xa8\xa9]|[\xce][\x88\x95\xa3\xad\xb5\xbe]|[\xcf][\xb5]|[\xd0][\x80\x81\x84\x95\xb5]|[\xd1][\x90\x91\x94\xb3]|[\xd2][\xbc\xbd\xbe\xbf]|[\xd3][\x96\x97\xa9\xab]|[\xd4][\x90\x91]|[\xc8\xc9\xca\xcb\xe8\xe9\xea\xeb\xa4]|&\#(?:1(?:0(?:13|2[458]|45|77)|108|2(?:1[2-5]|3[89]|9[67]))|2(?:0[0-3]|3[2-5]|7[4-9]|8[0-3])|400|51[6-9]|5[58][23]|603|9(?:04|17|[34]1|4[19]));|[\xe1](?:[\xb8][\x94-\x9d]|[\xba][\xb8-\xbf]|[\xbb][\x80-\x87]|[\xbc][\x90-\x9d]|[\xbd][\xb2\xb3]|[\xbf][\x88\x89])|[\xf0][\x9d](?:[\x90][\x84\x9e\xb8]|[\x91][\x92\xac]|[\x92][\x86\xa0\xba]|[\x93][\x94\xae]|[\x94][\xa2\xbc]|[\x95][\x96]|[\x96][\x8a\xa4\xbe]|[\x97][\x98\xb2]|[\x98][\x8c\xa6]|[\x99][\x80\x9a\xb4]|[\x9a][\x8e\xac\xba]|[\x9b][\x86\x9c\xa6\xb4]|[\x9c][\x80\x96\xa0\xae\xba]|[\x9d][\x90\x9a\xa8\xb4]|[\x9e][\x8a\x94\xa2\xae]|[\x9f][\x84]))
|
||||
replace_tag E (?:[eE3\xb8\xc5\xd3\xdd\xe5\xee]|[\xc3][\x88\x89\x8a\x8b\xa8\xa9\xaa\xab]|[\xc4][\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\xbe]|[\xc8][\x84\x85\x86\x87\xa8\xa9]|[\xc9][\x87]|[\xce][\x88\x95\xa3\xad\xb5\xbe]|[\xcf][\xb5]|[\xd0][\x80\x81\x84\x95\xb5]|[\xd1][\x90\x91\x94\xb3]|[\xd2][\xbc\xbd\xbe\xbf]|[\xd3][\x96\x97\xa9\xab]|[\xd4][\x90\x91]|[\xc8\xc9\xca\xcb\xe8\xe9\xea\xeb\xa4]|&\#(?:1(?:0(?:13|2[458]|45|77)|108|2(?:1[2-5]|3[89]|9[67]))|2(?:0[0-3]|3[2-5]|7[4-9]|8[0-3])|400|51[6-9]|5[58][23]|603|9(?:04|17|[34]1|4[19]));|[\xe1](?:[\xb8][\x94-\x9d]|[\xba][\xb8-\xbf]|[\xbb][\x80-\x87]|[\xbc][\x90-\x9d]|[\xbd][\xb2\xb3]|[\xbf][\x88\x89])|[\xf0][\x9d](?:[\x90][\x84\x9e\xb8]|[\x91][\x92\xac]|[\x92][\x86\xa0\xba]|[\x93][\x94\xae]|[\x94][\xa2\xbc]|[\x95][\x96]|[\x96][\x8a\xa4\xbe]|[\x97][\x98\xb2]|[\x98][\x8c\xa6]|[\x99][\x80\x9a\xb4]|[\x9a][\x8e\xac\xba]|[\x9b][\x86\x9c\xa6\xb4]|[\x9c][\x80\x96\xa0\xae\xba]|[\x9d][\x90\x9a\xa8\xb4]|[\x9e][\x8a\x94\xa2\xae]|[\x9f][\x84]))
|
||||
replace_tag F (?:[fF]|[\xcf][\x9c\x9d]|[\xd2][\x92\x93]|[\xd3][\xba\xbb]|[\xd4][\xb2]|[\xd5][\xa2]|[\xe1](?:[\xb8][\x9e\x9f]|[\xba][\x9b\x9c\x9d])|[\xf0][\x9d](?:[\x90][\x85\x9f\xb9]|[\x91][\x93\xad]|[\x92][\x87\xa1\xbb]|[\x93][\x95\xaf]|[\x94][\xa3\xbd]|[\x95][\x97\xb1]|[\x96][\x8b\xa5\xbf]|[\x97][\x99\xb3]|[\x98][\x8d\xa7]|[\x99][\x81\x9b\xb5]|[\x9a][\x8f]|[\x9f][\x8a\x8b]))
|
||||
replace_tag G (?:[gGk]|[\xc4][\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3]|[\xd2][\xa8\xa9]|[\xd4][\x8c\x8d]|[\xd6][\x81]|[\xf0][\x9d](?:[\x90][\x86\xa0\xba]|[\x91][\x94\xae]|[\x92][\x88\xa2\xbc]|[\x93][\x96\xb0]|[\x94][\xa4\xbe]|[\x95][\x98]|[\x96][\x8c\xa6]|[\x97][\x80\x9a\xb4]|[\x98][\x8e\xa8]|[\x99][\x82\x9c\xb6]|[\x9a][\x90]))
|
||||
replace_tag G (?:[gGk]|[\xc4][\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3]|[\xc7][\xa5]|[\xd2][\xa8\xa9]|[\xd4][\x8c\x8d]|[\xd6][\x81]|[\xf0][\x9d](?:[\x90][\x86\xa0\xba]|[\x91][\x94\xae]|[\x92][\x88\xa2\xbc]|[\x93][\x96\xb0]|[\x94][\xa4\xbe]|[\x95][\x98]|[\x96][\x8c\xa6]|[\x97][\x80\x9a\xb4]|[\x98][\x8e\xa8]|[\x99][\x82\x9c\xb6]|[\x9a][\x90]))
|
||||
replace_tag H (?:[hH\xb9\xc7]|[\xc4][\xa4\xa5\xa6\xa7]|[\xce][\x89\x97]|[\xcf][\xa6]|[\xd0][\x8a\x8b\x9d\xbd]|[\xd1][\x92\x9b]|[\xd2][\x94\x95\xa2\xa3\xa4\xa5\xba\xbb]|[\xd3][\x87\x88\x89\x8a]|[\xd4][\xbb]|[\xd5][\xab\xb0]|&\#(?:2(?:22[3-6]|9[2-5])|54[23]|1(?:0(?:53|85)|18[6-9]|8(?:0(?:8[89]|9[0-5])|1(?:38[89]|340)))|919);|[\xe1](?:[\xb8][\xa2-\xab]|[\xba][\x96]|[\xbc][\xa8-\xaf]|[\xbe][\x98-\x9f]|[\xbf][\x8a-\x8c])|[\xf0][\x9d](?:[\x90][\x87\xa1\xbb]|[\x91][\x95\xaf]|[\x92][\x89\xa3\xbd]|[\x93][\x97\xb1]|[\x94][\xbf]|[\x95][\x99]|[\x96][\xa7]|[\x97][\x81\x9b\xb5]|[\x98][\x8f\xa9]|[\x99][\x83\x9d\xb7]|[\x9a][\x91\xae]|[\x9b][\xa8]|[\x9c][\xa2]|[\x9d][\x9c]|[\x9e][\x96]))
|
||||
replace_tag I (?:[iIl|!1y?\xcc\xcd\xce\xcf\xec\xed\xee\xef\xe9\xba\xc0\xc9\xda\xdf\xfa]|[\xc3][\x8c\x8d\x8e\x8f\xac\xad\xae\xaf]|[\xc4][\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1]|[\xc7][\x8f\x90]|[\xce][\x8a\x90\x99\xaa\xaf\xb9]|[\xcf][\x8a]|[\xd0][\x86\x87]|[\xd1][\x96\x97]|[\xd3][\x80\x8f]|[\xd5][\xac]|&\#(?:1(?:03[01]|11[01]|216|231)|2(?:0[4-7]|16|3[6-9]|9[6-9])|3(?:0[0-5])|4(?:0[67]|6[34])|52[0-3]);|[\xe1](?:[\xb8][\xac-\xaf]|[\xbb][\x88-\x8b]|[\xbc][\xb0-\xbf]|[\xbd][\xb6\xb7]|[\xbf][\x90-\x9b])|[\xf0][\x9d](?:[\x90][\x88\xa2\xbc]|[\x91][\x96\xb0]|[\x92][\x8a\xa4\xbe]|[\x93][\x98\xb2]|[\x94][\xa6]|[\x95][\x80\x9a]|[\x96][\x8e\xa8]|[\x97][\x82\x9c\xb6]|[\x98][\x90\xaa]|[\x99][\x84\x9e\xb8]|[\x9a][\x92\xb0]|[\x9b][\xaa]|[\x9c][\xa4]|[\x9d][\x9e]|[\x9e][\x98]))
|
||||
replace_tag J (?:[jJ]|[\xc4][\xb4\xb5]|[\xcf][\xb3]|[\xd0][\x88]|[\xd1][\x98]|[\xd5][\xb5]|[\xf0][\x9d](?:[\x90][\x89\xa3\xbd]|[\x91][\x97\xb1]|[\x92][\x8b\xa5\xbf]|[\x93][\x99\xb3]|[\x94][\xa7]|[\x95][\x81\x9b]|[\x96][\x8f\xa9]|[\x97][\x83\x9d\xb7]|[\x98][\x91\xab]|[\x99][\x85\x9f\xb9]|[\x9a][\x93]))
|
||||
@ -45,7 +45,7 @@ replace_tag O (?:[goO0u\xbc\xcf\xd2\xd3\xd4\xd5\xd6\xd8\xef\xf0\xf2\xf3\xf4\xf5\
|
||||
replace_tag P (?:[pP\xd1\xf1\xfe]|[\xce][\xa1]|[\xcf][\x81\xb7\xb8]|[\xd0][\xa0]|[\xd1][\x80]|[\xd2][\x8e\x8f]|[\xd4][\x97]|[\xd5][\xa9]|[\xd6][\x84]|[\xe1](?:[\xb9][\x94-\x97]|[\xbf][\xa4\xa5\xac])|[\xf0][\x9d](?:[\x90][\x8f\xa9]|[\x91][\x83\x9d\xb7]|[\x92][\x91]|[\x93][\x9f]|[\x95][\x87\xa1]|[\x96][\xaf]|[\x97][\x89\xa3\xbd]|[\x98][\x97\xb1]|[\x99][\x8b\xa5\xbf]|[\x9a][\x99\xb8]|[\x9b][\x92\xb2]|[\x9c][\x8c\xac]|[\x9d][\x86\xa6]|[\x9e][\x80\xa0\xba]))
|
||||
replace_tag Q (?:[qQ]|[\xcf][\x98\xa4\xa5]|[\xd4][\x9a\x9b\xb3]|[\xd5][\xa3\xa6]|[\xf0][\x9d](?:[\x90][\x90\xaa]|[\x91][\x84\x9e\xb8]|[\x92][\x92]|[\x93][\x86\xba]|[\x94][\xae]|[\x95][\x88\xa2]|[\x96][\x96\xb0]|[\x97][\x8a\xa4\xbe]|[\x98][\x98\xb2]|[\x99][\x8c\xa6]|[\x9a][\x80\x9a]))
|
||||
replace_tag R (?:[rR]|[\xc5][\x94\x95\x96\x97\x98\x99]|[\xc8][\x90\x91\x92\x93]|[\xd0][\x93\xaf]|[\xd1][\x8f\x93]|[\xd2][\x90\x91\x93]|[\xd3][\xb6\xb7]|[\xd4][\xb8\xbb]|[\xd5][\x90\x92]|[\xd6][\x80]|&\#(?:1(?:071|103)|34[0-5]|422|5(?:2[89]|3[01]|8[89])|6(?:3[67]|40));|[\xe1](?:[\xb9][\x98-\x9f])|[\xf0][\x9d](?:[\x90][\x91\xab]|[\x91][\x85\x9f\xb9]|[\x92][\x93\xad]|[\x93][\x87\xa1\xbb]|[\x94][\x95\xaf]|[\x95][\x89\xa3\xbd]|[\x96][\x97\xb1]|[\x97][\x8b\xa5\xbf]|[\x98][\x99\xb3]|[\x99][\x8d\xa7]|[\x9a][\x81\x9b]))
|
||||
replace_tag S (?:[sSz\xa6\xa7]|[\xc5][\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1]|[\xd0][\x85]|[\xd1][\x95]|[\xd5][\x8f]|[\xe1](?:[\xb9][\xa0-\xa9])|[\xf0][\x9d](?:[\x90][\x92\xac]|[\x91][\x86\xa0\xba]|[\x92][\x94]|[\x94][\xb0]|[\x95][\x8a\xa4]|[\x96][\xb2]|[\x97][\x8c\xa6]|[\x98][\x80\x9a\xb4]|[\x99][\x8e\xa8]|[\x9a][\x82\x9c]))
|
||||
replace_tag S (?:[sSz\xa6\xa7]|[\xc5][\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1]|[\xc6][\xbe]|[\xd0][\x85]|[\xd1][\x95]|[\xd5][\x8f]|[\xe1](?:[\xb9][\xa0-\xa9])|[\xf0][\x9d](?:[\x90][\x92\xac]|[\x91][\x86\xa0\xba]|[\x92][\x94]|[\x94][\xb0]|[\x95][\x8a\xa4]|[\x96][\xb2]|[\x97][\x8c\xa6]|[\x98][\x80\x9a\xb4]|[\x99][\x8e\xa8]|[\x9a][\x82\x9c]))
|
||||
replace_tag T (?:[tT\xc3\xd4\xf4]|[\xc5][\xa2\xa3\xa4\xa5\xa6\xa7]|[\xcd][\xb2\xb3]|[\xce][\xa4]|[\xcf][\x84\xae\xaf]|[\xd0][\x93\xa2]|[\xd1][\x82]|[\xd2][\x90\xac\xad]|[\xd3][\xb6]|[\xd4][\xb5\xb7]|[\xd5][\x92\xa7]|[\xe1](?:[\xb9][\xaa-\xb1]|[\xba][\x97])|[\xf0][\x9d](?:[\x90][\x93\xad]|[\x91][\x87\xa1\xbb]|[\x92][\x95]|[\x93][\x89\xbd]|[\x94][\xb1]|[\x95][\x8b\xa5]|[\x96][\x99\xb3]|[\x97][\x8d\xa7]|[\x98][\x81\x9b\xb5]|[\x99][\x8f\xa9]|[\x9a][\x83\x9d\xbb]|[\x9b][\x95\xb5]|[\x9c][\x8f\xaf]|[\x9d][\x89\xa9]|[\x9e][\x83\xa3\xbd]))
|
||||
replace_tag U (?:[uUv\xb5\xd9\xda\xdb\xdc\xe0\xec\xf5\xfc\xfb\xfa\xf9\xfd]|[\xc3][\x99\x9a\x9b\x9c\xb9\xba\xbb\xbc]|[\xc5][\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3]|[\xcf][\x85\x8b\x8d]|[\xd0][\x8f\xa6]|[\xd1][\x86\x9f]|[\xd4][\xb1\xbf]|[\xd5][\x84\x8d\xb4\xb6\xbd\xbe]|[\xd6][\x87]|[\xe1](?:[\xb9][\xb2-\xbb]|[\xbb][\xa4-\xb1]|[\xbd][\x90-\x97\xba\xbb]|[\xbf][\xa0-\xa3\xa6\xa7])|[\xf0][\x9d](?:[\x90][\x94\xae]|[\x91][\x88\xa2\xbc]|[\x92][\x96\xb0]|[\x93][\x8a\xa4\xbe]|[\x94][\x98\xb2]|[\x95][\x8c\xa6]|[\x96][\x80\x9a\xb4]|[\x97][\x8e\xa8]|[\x98][\x82\x9c\xb6]|[\x99][\x90\xaa]|[\x9a][\x84\x9e]|[\x9b][\x8d\x96]|[\x9c][\x87\x90]|[\x9d][\x81\x8a\xbb]|[\x9e][\x84\xb5\xbe]))
|
||||
replace_tag V (?:[vVu\xe3\xed]|\\\/|[\xce][\xbd]|[\xd1][\xb4\xb5\xb6\xb7]|[\xe1](?:[\xb9][\xbc-\xbf]|[\xbd][\x90-\x97\xba\xbb]|[\xbf][\xa0-\xa3\xa6\xa7])|[\xf0][\x9d](?:[\x90][\x95\xaf]|[\x91][\x89\xa3\xbd]|[\x92][\x97]|[\x93][\x8b\xa5\xbf]|[\x95][\x8d\xa7]|[\x96][\xb5]|[\x97][\x8f\xa9]|[\x98][\x83\x9d\xb7]|[\x99][\x91\xab]|[\x9a][\x85\x9f]|[\x9b][\x96]|[\x9c][\x88]|[\x9d][\x8a]))
|
||||
|
||||
@ -54,7 +54,6 @@ score URL_SHORTENER_DISABLED 2
|
||||
#
|
||||
|
||||
# generic list of likely active services - cleaned up 25.05.2022
|
||||
url_shortener .app.link
|
||||
url_shortener .ftn.app
|
||||
url_shortener .page.link
|
||||
url_shortener .short.gy
|
||||
@ -75,6 +74,7 @@ url_shortener bitly.com
|
||||
url_shortener bizj.us
|
||||
url_shortener chilp.it
|
||||
url_shortener conta.cc
|
||||
url_shortener clck.ru
|
||||
url_shortener crks.me
|
||||
url_shortener cutt.ly
|
||||
url_shortener cutwin.biz
|
||||
@ -114,7 +114,6 @@ url_shortener lnk.sk
|
||||
url_shortener lnkd.in
|
||||
url_shortener lnkiy.in
|
||||
url_shortener lru.jp
|
||||
url_shortener lukora.cz
|
||||
url_shortener mrte.ch
|
||||
url_shortener n9.cl
|
||||
url_shortener ndurl.com
|
||||
@ -279,6 +278,14 @@ url_shortener stopify.co
|
||||
url_shortener trulove.guru
|
||||
url_shortener yourmy.monster
|
||||
|
||||
# additional url shorteners 2023
|
||||
url_shortener .app.link
|
||||
url_shortener bitly.ws
|
||||
url_shortener han.gl
|
||||
url_shortener lukora.cz
|
||||
url_shortener shorturl.asia
|
||||
url_shortener m2.do
|
||||
|
||||
# GET method required for some services, keep the same services in url_shortener also
|
||||
if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_get)
|
||||
url_shortener_get bit.ly
|
||||
@ -298,7 +305,8 @@ if !can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)
|
||||
## perl -pe 'while (<>) {/^\s*url_shortener\s+(\S+)/ or next;$s=quotemeta($1);$s=~s/^\\./\\w+\\./;push @a,$s} print "uri __URL_SHORTENER m,^https?://(?:".join("|",@a).")/,i\n"' < 25_url_shortener.cf
|
||||
##
|
||||
|
||||
uri __URL_SHORTENER m,^https?://(?:\w+\.app\.link|\w+\.ftn\.app|\w+\.page\.link|\w+\.short\.gy|\w+\.shortz\.me|0rz\.tw|4sq\.com|4url\.cc|afly\.co|ai6\.net|amzn\.com|amzn\.to|b\.link|b23\.ru|binged\.it|bit\.do|bit\.ly|bitly\.com|bizj\.us|chilp\.it|conta\.cc|crks\.me|cutt\.ly|cutwin\.biz|dai\.ly|db\.tt|disq\.us|dlvr\.it|doi\.org|doiop\.com|eepurl\.com|fb\.me|fire\.to|firsturl\.de|firsturl\.net|flic\.kr|gdurl\.com|go\.ly|goo\.gl|goolnk\.com|gplinks\.in|guest\.link|hellotxt\.com|hop\.kz|hotshorturl\.com|hub\.am|huff\.to|hurl\.it|hyperurl\.co|inx\.lv|is\.gd|it2\.in|j\.mp|kore\.us|kurl\.no|l\.bestsellers\.to|lnk\.sk|lnkd\.in|lnkiy\.in|lru\.jp|lukora\.cz|mrte\.ch|n9\.cl|ndurl\.com|onion\.com|ouo\.io|ow\.ly|owl\.li|pduda\.mobi|rb\.gy|redir\.ec|rotf\.lol|s\.apache\.org|s\.free\.fr|s\.id|shar\.es|shorl\.com|shortn\.me|shorturl\.at|simurl\.net|slidesha\.re|smarturl\.it|smfu\.in|snip\.ly|snkr\.me|stpmvt\.com|t\.co|t\.ly|tcrn\.ch|tgr\.ph|tiny\.cc|tiny\.one|tiny\.pl|tinylink\.in|tinyurl\.com|to\.ly|trib\.al|twixar\.me|u\.nu|u\.to|url\.ie|urlcut\.com|urlday\.cc|urls\.im|urlz\.at|urlzs\.com|utfg\.sk|wow\.link|wp\.me|x\.co|x\.hypem\.com|xurl\.es|yhoo\.it|youtu\.be|z23\.ru|zurl\.ws|www\.shrunken\.com|0\.gp|2\.gp|2\.ly|3\.ly|4\.gp|4\.ly|5\.gp|6\.gp|6\.ly|7\.ly|8\.ly|9\.ly|g\.asia|p\.asia|ur3\.us|alturl\.com|\w+\.1sta\.com|\w+\.24ex\.com|\w+\.2fear\.com|\w+\.2fortune\.com|\w+\.2freedom\.com|\w+\.2hell\.com|\w+\.2savvy\.com|\w+\.2truth\.com|\w+\.2tunes\.com|\w+\.2ya\.com|\w+\.alturl\.com|\w+\.antiblog\.com|\w+\.bigbig\.com|\w+\.dealtap\.com|\w+\.ebored\.com|\w+\.echoz\.com|\w+\.filetap\.com|\w+\.funurl\.com|\w+\.headplug\.com|\w+\.hereweb\.com|\w+\.hitart\.com|\w+\.mirrorz\.com|\w+\.mp3update\.com|\w+\.shorturl\.com|\w+\.spyw\.com|\w+\.vze\.com|\w+\.arecool\.net|\w+\.iscool\.net|\w+\.isfun\.net|\w+\.tux\.nu|kisa\.link|www\.kisa\.link|bul\.tc|cy\.tc|fn\.tc|ftp\.tc|gr\.tc|hbr\.tc|heg\.tc|ins\.tc|ko\.tc|kod\.tc|lol\.tc|m2\.tc|ml\.tc|mmo\.tc|oy\.tc|pc\.tc|pubg\.tc|pvp\.tc|sro\.tc|tek\.link|tw\.tc|grabify\.link|catsnthing\.com|catsnthings\.fun|cheapcinema\.club|dateing\.club|fortnight\.space|fortnitechat\.site|freegiftcards\.co|gaming\-at\-my\.best|gamingfun\.me|headshot\.monster|imageshare\.best|joinmy\.site|leancoding\.co|locations\.quest|lovebird\.guru|myprivate\.pics|noodshare\.pics|partpicker\.shop|progaming\.monster|screenshare\.pics|screenshot\.best|shhh\.lol|shrekis\.life|sportshub\.bar|stopify\.co|trulove\.guru|yourmy\.monster)/,i
|
||||
uri __URL_SHORTENER m,^https?://(?:\w+\.ftn\.app|\w+\.page\.link|\w+\.short\.gy|\w+\.shortz\.me|0rz\.tw|4sq\.com|4url\.cc|afly\.co|ai6\.net|amzn\.com|amzn\.to|b\.link|b23\.ru|binged\.it|bit\.do|bit\.ly|bitly\.com|bizj\.us|chilp\.it|conta\.cc|crks\.me|cutt\.ly|cutwin\.biz|dai\.ly|db\.tt|disq\.us|dlvr\.it|doi\.org|doiop\.com|eepurl\.com|fb\.me|fire\.to|firsturl\.de|firsturl\.net|flic\.kr|gdurl\.com|go\.ly|goo\.gl|goolnk\.com|gplinks\.in|guest\.link|hellotxt\.com|hop\.kz|hotshorturl\.com|hub\.am|huff\.to|hurl\.it|hyperurl\.co|inx\.lv|is\.gd|it2\.in|j\.mp|kore\.us|kurl\.no|l\.bestsellers\.to|lnk\.sk|lnkd\.in|lnkiy\.in|lru\.jp|mrte\.ch|n9\.cl|ndurl\.com|onion\.com|ouo\.io|ow\.ly|owl\.li|pduda\.mobi|rb\.gy|redir\.ec|rotf\.lol|s\.apache\.org|s\.free\.fr|s\.id|shar\.es|shorl\.com|shortn\.me|shorturl\.at|simurl\.net|slidesha\.re|smarturl\.it|smfu\.in|snip\.ly|snkr\.me|stpmvt\.com|t\.co|t\.ly|tcrn\.ch|tgr\.ph|tiny\.cc|tiny\.one|tiny\.pl|tinylink\.in|tinyurl\.com|to\.ly|trib\.al|twixar\.me|u\.nu|u\.to|url\.ie|urlcut\.com|urlday\.cc|urls\.im|urlz\.at|urlzs\.com|utfg\.sk|wow\.link|wp\.me|x\.co|x\.hypem\.com|xurl\.es|yhoo\.it|youtu\.be|z23\.ru|zurl\.ws|www\.shrunken\.com|0\.gp|2\.gp|2\.ly|3\.ly|4\.gp|4\.ly|5\.gp|6\.gp|6\.ly|7\.ly|8\.ly|9\.ly|g\.asia|p\.asia|ur3\.us|alturl\.com|\w+\.1sta\.com|\w+\.24ex\.com|\w+\.2fear\.com|\w+\.2fortune\.com|\w+\.2freedom\.com|\w+\.2hell\.com|\w+\.2savvy\.com|\w+\.2truth\.com|\w+\.2tunes\.com|\w+\.2ya\.com|\w+\.alturl\.com|\w+\.antiblog\.com|\w+\.bigbig\.com|\w+\.dealtap\.com|\w+\.ebored\.com|\w+\.echoz\.com|\w+\.filetap\.com|\w+\.funurl\.com|\w+\.headplug\.com|\w+\.hereweb\.com|\w+\.hitart\.com|\w+\.mirrorz\.com|\w+\.mp3update\.com|\w+\.shorturl\.com|\w+\.spyw\.com|\w+\.vze\.com|\w+\.arecool\.net|\w+\.iscool\.net|\w+\.isfun\.net|\w+\.tux\.nu|kisa\.link|www\.kisa\.link|bul\.tc|cy\.tc|fn\.tc|ftp\.tc|gr\.tc|hbr\.tc|heg\.tc|ins\.tc|ko\.tc|kod\.tc|lol\.tc|m2\.tc|ml\.tc|mmo\.tc|oy\.tc|pc\.tc|pubg\.tc|pvp\.tc|sro\.tc|tek\.link|tw\.tc|grabify\.link|catsnthing\.com|catsnthings\.fun|cheapcinema\.club|dateing\.club|fortnight\.space|fortnitechat\.site|freegiftcards\.co|gaming\-at\-my\.best|gamingfun\.me|headshot\.monster|imageshare\.best|joinmy\.site|leancoding\.co|locations\.quest|lovebird\.guru|myprivate\.pics|noodshare\.pics|partpicker\.shop|progaming\.monster|screenshare\.pics|screenshot\.best|shhh\.lol|shrekis\.life|sportshub\.bar|stopify\.co|trulove\.guru|yourmy\.monster|\w+\.app\.link|bitly\.ws|han\.gl|lukora\.cz|shorturl\.asia|m2\.do)/,i
|
||||
|
||||
|
||||
endif
|
||||
|
||||
|
||||
@ -546,7 +546,6 @@ def_welcomelist_auth *@*.bludot.com
|
||||
def_welcomelist_auth *@*.directgeneral.com
|
||||
def_welcomelist_auth *@*.subaru.com
|
||||
def_welcomelist_auth *@*.aexp.com
|
||||
def_welcomelist_auth *@*.usssa.com
|
||||
def_welcomelist_auth *@*.bestwesternrewards.com
|
||||
def_welcomelist_auth *@*.email-weightwatchers.com
|
||||
def_welcomelist_auth *@*.email-allstate.com
|
||||
@ -601,7 +600,6 @@ def_welcomelist_auth *@*.email-lifetouch.com
|
||||
def_welcomelist_auth *@*.evine.com
|
||||
def_welcomelist_auth *@*.donorschoose.org
|
||||
def_welcomelist_auth noreply@adt.com
|
||||
def_welcomelist_auth *@tmomail.net
|
||||
def_welcomelist_auth donotreply@dhl.com
|
||||
def_welcomelist_auth *@travelodge.co.uk
|
||||
def_welcomelist_auth bounce@ryanairemail.com
|
||||
@ -795,6 +793,7 @@ def_welcomelist_auth *@*.endcitizensunited.org
|
||||
def_welcomelist_auth *@*.redditgifts.com
|
||||
def_welcomelist_auth *@*.tdworld.com
|
||||
def_welcomelist_auth *@*.thenorthface.com
|
||||
def_welcomelist_auth *@*.bark.com
|
||||
def_welcomelist_auth *@*.center.io
|
||||
def_welcomelist_auth *@*.movethisworld.com
|
||||
def_welcomelist_auth *@*.pgsurveying.com
|
||||
@ -1099,6 +1098,7 @@ def_whitelist_auth *@*.docusign.com
|
||||
# authentic emails
|
||||
#
|
||||
def_whitelist_auth *@*.indeed.com
|
||||
def_whitelist_auth *@*.wellframe.com
|
||||
def_whitelist_auth *@*.hyatt.com
|
||||
def_whitelist_auth *@*.sears.com
|
||||
def_whitelist_auth *@*.jcpenney.com
|
||||
@ -1523,7 +1523,6 @@ def_whitelist_auth *@*.bludot.com
|
||||
def_whitelist_auth *@*.directgeneral.com
|
||||
def_whitelist_auth *@*.subaru.com
|
||||
def_whitelist_auth *@*.aexp.com
|
||||
def_whitelist_auth *@*.usssa.com
|
||||
def_whitelist_auth *@*.bestwesternrewards.com
|
||||
def_whitelist_auth *@*.email-weightwatchers.com
|
||||
def_whitelist_auth *@*.email-allstate.com
|
||||
@ -1578,7 +1577,6 @@ def_whitelist_auth *@*.email-lifetouch.com
|
||||
def_whitelist_auth *@*.evine.com
|
||||
def_whitelist_auth *@*.donorschoose.org
|
||||
def_whitelist_auth noreply@adt.com
|
||||
def_whitelist_auth *@tmomail.net
|
||||
def_whitelist_auth donotreply@dhl.com
|
||||
def_whitelist_auth *@travelodge.co.uk
|
||||
def_whitelist_auth bounce@ryanairemail.com
|
||||
|
||||
File diff suppressed because one or more lines are too long
@ -1,9 +1,9 @@
|
||||
score ACCT_PHISHING_MANY 2.803 2.999 2.803 2.999
|
||||
score ACCT_PHISHING_MANY 2.561 2.999 2.561 2.999
|
||||
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
|
||||
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
|
||||
score AC_FROM_MANY_DOTS 2.996 2.644 2.996 2.644
|
||||
score AC_HTML_NONSENSE_TAGS 1.997 1.999 1.997 1.999
|
||||
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
|
||||
score AC_FROM_MANY_DOTS 2.499 2.499 2.499 2.499
|
||||
score AC_HTML_NONSENSE_TAGS 1.999 1.999 1.999 1.999
|
||||
score AC_POST_EXTRAS 0.001 1.417 0.001 1.417
|
||||
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000
|
||||
@ -13,267 +13,288 @@ score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
|
||||
score ADMITS_SPAM 3.096 0.001 3.096 0.001
|
||||
score ADMITS_SPAM 3.199 3.099 3.199 3.099
|
||||
score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000
|
||||
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
|
||||
score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 1.000 1.000 1.000
|
||||
score ADVANCE_FEE_2_NEW_MONEY 1.997 1.999 1.997 1.999
|
||||
score ADVANCE_FEE_3_NEW 2.994 3.268 2.994 3.268
|
||||
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_3_NEW_MONEY 0.140 2.499 0.140 2.499
|
||||
score ADVANCE_FEE_4_NEW 2.297 0.001 2.297 0.001
|
||||
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.834 0.001 0.834
|
||||
score ADVANCE_FEE_4_NEW_MONEY 2.596 2.230 2.596 2.230
|
||||
score ADVANCE_FEE_5_NEW_FRM_MNY 1.084 2.168 1.084 2.168
|
||||
score ADVANCE_FEE_5_NEW_MONEY 0.001 0.001 0.001 0.001
|
||||
score AD_PREFS 0.363 0.001 0.363 0.001
|
||||
score ALIBABA_IMG_NOT_RCVD_ALI 0.001 0.001 0.001 0.001
|
||||
score AMAZON_IMG_NOT_RCVD_AMZN 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 2.063 1.000 2.063
|
||||
score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
|
||||
score ADVANCE_FEE_3_NEW 3.499 3.266 3.499 3.266
|
||||
score ADVANCE_FEE_3_NEW_MONEY 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_4_NEW 0.803 0.001 0.803 0.001
|
||||
score ADVANCE_FEE_4_NEW_FRM_MNY 0.674 1.242 0.674 1.242
|
||||
score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_5_NEW_FRM_MNY 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_5_NEW_MONEY 0.001 0.662 0.001 0.662
|
||||
score AD_PREFS 0.001 0.001 0.001 0.001
|
||||
score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000
|
||||
score AMAZON_IMG_NOT_RCVD_AMZN 2.499 2.499 2.499 2.499
|
||||
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
|
||||
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
|
||||
score ARC_SIGNED 0.001 0.001 0.001 0.001
|
||||
score ARC_VALID 0.001 0.001 0.001 0.001
|
||||
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
|
||||
score AXB_X_FF_SEZ_S 3.499 3.399 3.499 3.399
|
||||
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
|
||||
score BIGNUM_EMAILS_FREEM 0.001 0.396 0.001 0.396
|
||||
score BIGNUM_EMAILS_MANY 2.996 2.999 2.996 2.999
|
||||
score BIGNUM_EMAILS_FREEM 1.000 1.000 1.000 1.000
|
||||
score BIGNUM_EMAILS_MANY 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_DEADLINE 2.997 2.788 2.997 2.788
|
||||
score BITCOIN_EXTORT_01 3.845 1.739 3.845 1.739
|
||||
score BITCOIN_DEADLINE 1.586 2.999 1.586 2.999
|
||||
score BITCOIN_EXTORT_01 2.103 0.001 2.103 0.001
|
||||
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_MALF_HTML 3.497 3.500 3.497 3.500
|
||||
score BITCOIN_MALWARE 1.842 1.000 1.842 1.000
|
||||
score BITCOIN_OBFU_SUBJ 1.661 0.116 1.661 0.116
|
||||
score BITCOIN_ONAN 2.658 1.000 2.658 1.000
|
||||
score BITCOIN_MALWARE 3.406 0.986 3.406 0.986
|
||||
score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_ONAN 1.642 1.116 1.642 1.116
|
||||
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_PDF 2.497 2.499 2.497 2.499
|
||||
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_02 2.155 2.499 2.155 2.499
|
||||
score BITCOIN_SPAM_03 2.498 1.000 2.498 1.000
|
||||
score BITCOIN_SPAM_02 2.499 2.321 2.499 2.321
|
||||
score BITCOIN_SPAM_03 2.499 1.683 2.499 1.683
|
||||
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_05 0.001 1.940 0.001 1.940
|
||||
score BITCOIN_SPAM_05 0.001 1.000 0.001 1.000
|
||||
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_07 2.140 3.010 2.140 3.010
|
||||
score BITCOIN_SPAM_07 2.903 0.001 2.903 0.001
|
||||
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_09 1.498 1.000 1.498 1.000
|
||||
score BITCOIN_SPAM_09 1.499 1.499 1.499 1.499
|
||||
score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
|
||||
score BITCOIN_XPRIO 0.001 0.001 0.001 0.001
|
||||
score BITCOIN_YOUR_INFO 2.996 2.999 2.996 2.999
|
||||
score BODY_SINGLE_URI 2.497 2.499 2.497 2.499
|
||||
score BODY_SINGLE_WORD 1.602 0.001 1.602 0.001
|
||||
score BODY_URI_ONLY 2.996 2.999 2.996 2.999
|
||||
score BOGUS_MIME_VERSION 3.496 2.248 3.496 2.248
|
||||
score BOGUS_MSM_HDRS 1.000 0.753 1.000 0.753
|
||||
score BITCOIN_TOEQFM 1.597 1.539 1.597 1.539
|
||||
score BITCOIN_VISTA 0.001 3.016 0.001 3.016
|
||||
score BITCOIN_XPRIO 2.499 2.499 2.499 2.499
|
||||
score BITCOIN_YOUR_INFO 1.000 1.000 1.000 1.000
|
||||
score BODY_SINGLE_URI 1.680 0.547 1.680 0.547
|
||||
score BODY_SINGLE_WORD 0.784 0.001 0.784 0.001
|
||||
score BODY_URI_ONLY 0.178 0.001 0.178 0.001
|
||||
score BOGUS_MIME_VERSION 3.499 2.706 3.499 2.706
|
||||
score BOGUS_MSM_HDRS 2.355 2.528 2.355 2.528
|
||||
score BOMB_FREEM 1.000 1.000 1.000 1.000
|
||||
score BOMB_MONEY 1.000 1.000 1.000 1.000
|
||||
score BTC_ORG 1.000 1.000 1.000 1.000
|
||||
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score CANT_SEE_AD 1.000 1.000 1.000 1.000
|
||||
score CK_HELO_GENERIC 0.248 0.250 0.248 0.250
|
||||
score CK_HELO_GENERIC 0.249 0.249 0.249 0.249
|
||||
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
|
||||
score COMPENSATION 1.498 1.000 1.498 1.000
|
||||
score COMPENSATION 1.499 0.538 1.499 0.538
|
||||
score CONTENT_AFTER_HTML 1.000 1.000 1.000 1.000
|
||||
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
|
||||
score CTE_8BIT_MISMATCH 0.998 0.001 0.998 0.001
|
||||
score DATE_IN_FUTURE_Q_PLUS 3.595 2.499 3.595 2.499
|
||||
score CTE_8BIT_MISMATCH 0.999 0.001 0.999 0.001
|
||||
score DATE_IN_FUTURE_Q_PLUS 2.760 2.006 2.760 2.006
|
||||
score DAY_I_EARNED 1.000 1.000 1.000 1.000
|
||||
score DEAR_BENEFICIARY 0.001 0.001 0.001 0.001
|
||||
score DEAR_BENEFICIARY 3.099 2.446 3.099 2.446
|
||||
score DKIMWL_BL 0.001 1.000 0.001 1.000
|
||||
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
|
||||
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
|
||||
score DKIMWL_WL_HIGH 0.001 -0.014 0.001 -0.014
|
||||
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
|
||||
score DKIMWL_WL_MEDHI 0.001 -0.001 0.001 -0.001
|
||||
score DOTGOV_IMAGE 1.000 1.000 1.000 1.000
|
||||
score DX_TEXT_03 0.998 1.299 0.998 1.299
|
||||
score DSN_NO_MIMEVERSION 1.999 1.999 1.999 1.999
|
||||
score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000
|
||||
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
|
||||
score ENCRYPTED_MESSAGE -0.998 -1.000 -0.998 -1.000
|
||||
score END_FUTURE_EMAILS 2.497 2.499 2.497 2.499
|
||||
score ENCRYPTED_MESSAGE -0.999 -0.999 -0.999 -0.999
|
||||
score END_FUTURE_EMAILS 2.499 2.499 2.499 2.499
|
||||
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
|
||||
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
|
||||
score FAKE_REPLY_A1 2.197 2.599 2.197 2.599
|
||||
score FACEBOOK_IMG_NOT_RCVD_FB 1.999 1.999 1.999 1.999
|
||||
score FBI_MONEY 1.000 1.000 1.000 1.000
|
||||
score FBI_SPOOF 1.000 1.000 1.000 1.000
|
||||
score FILL_THIS_FORM 0.898 0.001 0.898 0.001
|
||||
score FILL_THIS_FORM 0.798 0.801 0.798 0.801
|
||||
score FONT_INVIS_DIRECT 0.001 0.001 0.001 0.001
|
||||
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
|
||||
score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000
|
||||
score FONT_INVIS_LONG_LINE 2.996 2.999 2.996 2.999
|
||||
score FONT_INVIS_MSGID 0.947 0.001 0.947 0.001
|
||||
score FONT_INVIS_NORDNS 1.000 1.000 1.000 1.000
|
||||
score FONT_INVIS_POSTEXTRAS 1.645 2.814 1.645 2.814
|
||||
score FORM_FRAUD 0.546 0.001 0.546 0.001
|
||||
score FORM_FRAUD_3 0.001 0.001 0.001 0.001
|
||||
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
|
||||
score FONT_INVIS_HTML_NOHTML 2.487 1.018 2.487 1.018
|
||||
score FONT_INVIS_LONG_LINE 2.162 2.999 2.162 2.999
|
||||
score FONT_INVIS_MSGID 2.499 2.499 2.499 2.499
|
||||
score FONT_INVIS_NORDNS 0.001 0.710 0.001 0.710
|
||||
score FONT_INVIS_POSTEXTRAS 2.590 0.872 2.590 0.872
|
||||
score FORM_FRAUD 0.999 0.999 0.999 0.999
|
||||
score FORM_FRAUD_3 2.253 1.199 2.253 1.199
|
||||
score FORM_FRAUD_5 2.453 1.619 2.453 1.619
|
||||
score FOUND_YOU 1.000 1.000 1.000 1.000
|
||||
score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.250 0.249 0.250
|
||||
score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.001 0.001 0.001
|
||||
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
|
||||
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
|
||||
score FROMSPACE 3.196 2.499 3.196 2.499
|
||||
score FROM_2_EMAILS_SHORT 1.060 1.884 1.060 1.884
|
||||
score FROM_ADDR_WS 2.996 2.999 2.996 2.999
|
||||
score FROM_ADDR_WS 1.050 0.001 1.050 0.001
|
||||
score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
|
||||
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
|
||||
score FROM_FMBLA_NEWDOM 0.001 0.001 0.001 0.001
|
||||
score FROM_FMBLA_NEWDOM14 0.001 1.000 0.001 1.000
|
||||
score FROM_FMBLA_NEWDOM 0.001 1.352 0.001 1.352
|
||||
score FROM_FMBLA_NEWDOM14 0.001 0.999 0.001 0.999
|
||||
score FROM_FMBLA_NEWDOM28 0.001 0.799 0.001 0.799
|
||||
score FROM_GOV_DKIM_AU 0.001 -0.001 0.001 -0.001
|
||||
score FROM_GOV_DKIM_AU 0.001 -0.156 0.001 -0.156
|
||||
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
|
||||
score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000
|
||||
score FROM_IN_TO_AND_SUBJ 1.601 1.899 1.601 1.899
|
||||
score FROM_MISSPACED 1.998 0.001 1.998 0.001
|
||||
score FROM_MISSP_DYNIP 0.945 2.299 0.945 2.299
|
||||
score FROM_MISSP_EH_MATCH 0.001 0.200 0.001 0.200
|
||||
score FROM_MISSP_FREEMAIL 1.649 0.199 1.649 0.199
|
||||
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
|
||||
score FROM_MISSP_REPLYTO 2.150 1.743 2.150 1.743
|
||||
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
|
||||
score FROM_IN_TO_AND_SUBJ 1.799 1.799 1.799 1.799
|
||||
score FROM_MISSPACED 1.999 1.149 1.999 1.149
|
||||
score FROM_MISSP_DYNIP 1.661 0.533 1.661 0.533
|
||||
score FROM_MISSP_EH_MATCH 1.999 2.000 1.999 2.000
|
||||
score FROM_MISSP_FREEMAIL 2.304 2.401 2.304 2.401
|
||||
score FROM_MISSP_MSFT 0.892 0.001 0.892 0.001
|
||||
score FROM_MISSP_PHISH 2.782 3.002 2.782 3.002
|
||||
score FROM_MISSP_REPLYTO 2.500 0.858 2.500 0.858
|
||||
score FROM_MISSP_SPF_FAIL 0.001 1.779 0.001 1.779
|
||||
score FROM_MISSP_TO_UNDISC 3.203 2.332 3.203 2.332
|
||||
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
|
||||
score FROM_MULTI_NORDNS 2.297 1.002 2.297 1.002
|
||||
score FROM_MISSP_XPRIO 2.500 2.499 2.500 2.499
|
||||
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
|
||||
score FROM_NTLD_LINKBAIT 1.911 1.000 1.911 1.000
|
||||
score FROM_NTLD_REPLY_FREEMAIL 0.278 1.000 0.278 1.000
|
||||
score FROM_NTLD_LINKBAIT 1.000 1.000 1.000 1.000
|
||||
score FROM_NTLD_REPLY_FREEMAIL 1.663 1.000 1.663 1.000
|
||||
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
|
||||
score FROM_PAYPAL_SPOOF 0.001 1.243 0.001 1.243
|
||||
score FROM_SUSPICIOUS_NTLD 0.499 0.238 0.499 0.238
|
||||
score FROM_SUSPICIOUS_NTLD_FP 1.997 1.073 1.997 1.073
|
||||
score FROM_UNBAL1 2.220 1.693 2.220 1.693
|
||||
score FROM_UNBAL2 2.696 3.299 2.696 3.299
|
||||
score FROM_WSP_TRAIL 3.396 3.199 3.396 3.199
|
||||
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
|
||||
score FROM_PAYPAL_SPOOF 0.001 0.001 0.001 0.001
|
||||
score FROM_SUSPICIOUS_NTLD 0.499 0.499 0.499 0.499
|
||||
score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999
|
||||
score FROM_UNBAL1 2.266 2.020 2.266 2.020
|
||||
score FROM_WSP_TRAIL 2.699 2.699 2.699 2.699
|
||||
score FSL_BULK_SIG 0.001 0.714 0.001 0.714
|
||||
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
|
||||
score FSL_HAS_TINYURL 2.799 2.699 2.799 2.699
|
||||
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
|
||||
score FUZZY_AMAZON 0.001 0.001 0.001 0.001
|
||||
score FUZZY_WALLET 1.797 0.001 1.797 0.001
|
||||
score FUZZY_AMAZON 2.599 2.499 2.599 2.499
|
||||
score FUZZY_IMPORTANT 2.399 1.996 2.399 1.996
|
||||
score FUZZY_PRIVACY 2.699 2.699 2.699 2.699
|
||||
score FUZZY_SECURITY 2.599 2.499 2.599 2.499
|
||||
score FUZZY_WALLET 1.787 0.001 1.787 0.001
|
||||
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
|
||||
score GB_BITCOIN_NH 1.000 1.000 1.000 1.000
|
||||
score GB_CUSTOM_HTM_URI 1.498 0.001 1.498 0.001
|
||||
score GB_FAKE_RF_SHORT 1.941 1.295 1.941 1.295
|
||||
score GB_BITCOIN_CP 3.000 2.999 3.000 2.999
|
||||
score GB_CUSTOM_HTM_URI 1.499 0.001 1.499 0.001
|
||||
score GB_FAKE_RF_SHORT 1.939 1.999 1.939 1.999
|
||||
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
|
||||
score GB_FREEMAIL_DISPTO 0.001 0.001 0.001 0.001
|
||||
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.500 0.500 0.500
|
||||
score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750
|
||||
score GB_GOOGLE_TRANSL 0.750 0.750 0.750 0.750
|
||||
score GB_HASHBL_BTC 0.001 0.001 0.001 0.001
|
||||
score GB_HASHBL_BTC 0.001 4.852 0.001 4.852
|
||||
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
|
||||
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
|
||||
score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000
|
||||
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
|
||||
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
|
||||
score GOOG_REDIR_HTML_ONLY 1.997 1.999 1.997 1.999
|
||||
score GOOG_REDIR_NORDNS 2.497 3.399 2.497 3.399
|
||||
score GOOG_MALWARE_DNLD 3.889 3.186 3.889 3.186
|
||||
score GOOG_REDIR_HTML_ONLY 1.999 1.999 1.999 1.999
|
||||
score GOOG_REDIR_NORDNS 2.498 0.899 2.498 0.899
|
||||
score GOOG_STO_EMAIL_PHISH 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_IMG_HTML 2.466 2.999 2.466 2.999
|
||||
score GOOG_STO_IMG_HTML 2.501 2.523 2.501 2.523
|
||||
score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_NOIMG_HTML 2.996 2.999 2.996 2.999
|
||||
score GOOG_STO_NOIMG_HTML 2.496 1.524 2.496 1.524
|
||||
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
|
||||
score HAS_X_OUTGOING_SPAM_STAT 0.805 0.803 0.805 0.803
|
||||
score HDRS_MISSP 2.497 0.001 2.497 0.001
|
||||
score HDR_ORDER_FTSDMCXX_DIRECT 0.001 0.001 0.001 0.001
|
||||
score HDR_ORDER_FTSDMCXX_NORDNS 0.001 0.001 0.001 0.001
|
||||
score HAS_X_OUTGOING_SPAM_STAT 1.000 1.000 1.000 1.000
|
||||
score HDRS_LCASE_IMGONLY 0.099 0.099 0.099 0.099
|
||||
score HDRS_MISSP 2.500 2.499 2.500 2.499
|
||||
score HDR_ORDER_FTSDMCXX_DIRECT 1.999 1.787 1.999 1.787
|
||||
score HDR_ORDER_FTSDMCXX_NORDNS 3.499 1.931 3.499 1.931
|
||||
score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.250 0.249 0.250
|
||||
score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001
|
||||
score HELO_MISC_IP 0.250 0.249 0.250 0.249
|
||||
score HELO_NO_DOMAIN 0.001 0.443 0.001 0.443
|
||||
score HEXHASH_WORD 1.000 1.000 1.000 1.000
|
||||
score HK_CTE_RAW 1.000 1.000 1.000 1.000
|
||||
score HK_LOTTO 0.998 1.000 0.998 1.000
|
||||
score HK_NAME_MR_MRS 0.998 1.000 0.998 1.000
|
||||
score HK_RANDOM_ENVFROM 0.001 0.001 0.001 0.001
|
||||
score HK_RANDOM_FROM 0.998 0.001 0.998 0.001
|
||||
score HK_LOTTO 0.999 0.999 0.999 0.999
|
||||
score HK_NAME_FM_MR_MRS 1.299 0.402 1.299 0.402
|
||||
score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
|
||||
score HK_RANDOM_ENVFROM 0.999 0.674 0.999 0.674
|
||||
score HK_RANDOM_FROM 0.999 1.000 0.999 1.000
|
||||
score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
|
||||
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
|
||||
score HK_SCAM 1.997 1.999 1.997 1.999
|
||||
score HK_WIN 0.998 1.000 0.998 1.000
|
||||
score HOSTED_IMG_DIRECT_MX 0.105 0.001 0.105 0.001
|
||||
score HK_SCAM 1.999 1.999 1.999 1.999
|
||||
score HOSTED_IMG_DIRECT_MX 3.499 3.220 3.499 3.220
|
||||
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
|
||||
score HOSTED_IMG_FREEM 2.496 3.215 2.496 3.215
|
||||
score HOSTED_IMG_FREEM 0.001 0.001 0.001 0.001
|
||||
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
|
||||
score HOSTED_IMG_MULTI_PUB_01 2.996 3.000 2.996 3.000
|
||||
score HTML_ENTITY_ASCII 1.000 1.000 1.000 1.000
|
||||
score HTML_ENTITY_ASCII_TINY 2.996 2.999 2.996 2.999
|
||||
score HTML_FONT_TINY_NORDNS 1.997 0.873 1.997 0.873
|
||||
score HTML_OFF_PAGE 0.958 0.001 0.958 0.001
|
||||
score HOSTED_IMG_MULTI_PUB_01 2.999 2.999 2.999 2.999
|
||||
score HREF_EMPTY_NORDNS 0.004 0.522 0.004 0.522
|
||||
score HREF_EMPTY_PHPMAIL 1.000 1.000 1.000 1.000
|
||||
score HREF_EMPTY_XANTIABUSE 1.000 1.000 1.000 1.000
|
||||
score HREF_EMPTY_XAUTHED 1.000 1.000 1.000 1.000
|
||||
score HTML_BADATTR 1.000 1.000 1.000 1.000
|
||||
score HTML_ENTITY_ASCII 2.999 2.999 2.999 2.999
|
||||
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
|
||||
score HTML_FONT_TINY_NORDNS 1.999 1.818 1.999 1.818
|
||||
score HTML_OFF_PAGE 2.999 2.999 2.999 2.999
|
||||
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
|
||||
score HTML_SINGLET_MANY 2.498 2.499 2.498 2.499
|
||||
score HTML_TEXT_INVISIBLE_FONT 1.348 1.945 1.348 1.945
|
||||
score HTML_TEXT_INVISIBLE_STYLE 1.828 0.891 1.828 0.891
|
||||
score IMG_ONLY_FM_DOM_INFO 1.705 1.000 1.705 1.000
|
||||
score JH_SPAMMY_HEADERS 3.496 3.499 3.496 3.499
|
||||
score HTML_SINGLET_MANY 2.499 2.499 2.499 2.499
|
||||
score HTML_TEXT_INVISIBLE_FONT 1.343 1.148 1.343 1.148
|
||||
score HTML_TEXT_INVISIBLE_STYLE 1.130 0.858 1.130 0.858
|
||||
score IMG_DIRECT_TO_MX 0.521 0.040 0.521 0.040
|
||||
score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
|
||||
score JH_SPAMMY_HEADERS 3.499 3.499 3.499 3.499
|
||||
score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000
|
||||
score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000
|
||||
score KHOP_HELO_FCRDNS 0.399 0.001 0.399 0.001
|
||||
score KHOP_FAKE_EBAY 0.001 0.001 0.001 0.001
|
||||
score KHOP_HELO_FCRDNS 0.399 0.259 0.399 0.259
|
||||
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000
|
||||
score LIST_PARTIAL_SHORT_MSG 2.370 1.001 2.370 1.001
|
||||
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
|
||||
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
|
||||
score LONG_HEX_URI 2.996 2.888 2.996 2.888
|
||||
score LONG_IMG_URI 0.001 0.001 0.001 0.001
|
||||
score LONG_INVISIBLE_TEXT 2.996 2.530 2.996 2.530
|
||||
score LONGLN_LOW_CONTRAST 2.124 0.001 2.124 0.001
|
||||
score LONG_HEX_URI 3.000 2.158 3.000 2.158
|
||||
score LONG_IMG_URI 1.944 0.443 1.944 0.443
|
||||
score LONG_INVISIBLE_TEXT 2.154 2.098 2.154 2.098
|
||||
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
|
||||
score LUCRATIVE 1.000 1.000 1.000 1.000
|
||||
score MALFORMED_FREEMAIL 2.268 1.248 2.268 1.248
|
||||
score MALF_HTML_B64 1.000 1.000 1.000 1.000
|
||||
score MALWARE_NORDNS 1.538 3.210 1.538 3.210
|
||||
score MALWARE_NORDNS 0.839 1.471 0.839 1.471
|
||||
score MALWARE_PASSWORD 1.000 1.000 1.000 1.000
|
||||
score MALW_ATTACH 2.197 0.001 2.197 0.001
|
||||
score MILLION_HUNDRED 0.112 0.831 0.112 0.831
|
||||
score MILLION_USD 0.286 0.001 0.286 0.001
|
||||
score MIMEOLE_DIRECT_TO_MX 0.001 0.001 0.001 0.001
|
||||
score MANY_HDRS_LCASE 0.100 0.001 0.100 0.001
|
||||
score MANY_SUBDOM 3.199 3.100 3.199 3.100
|
||||
score MAY_BE_FORGED 2.099 0.001 2.099 0.001
|
||||
score MILLION_HUNDRED 0.001 0.001 0.001 0.001
|
||||
score MILLION_USD 1.736 0.435 1.736 0.435
|
||||
score MIMEOLE_DIRECT_TO_MX 1.999 1.126 1.999 1.126
|
||||
score MIME_NO_TEXT 1.000 1.000 1.000 1.000
|
||||
score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
|
||||
score MIXED_CENTER_CASE 1.000 1.000 1.000 1.000
|
||||
score MIXED_ES 1.997 1.467 1.997 1.467
|
||||
score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
|
||||
score MIXED_HREF_CASE 1.000 1.999 1.000 1.999
|
||||
score MIXED_CENTER_CASE 2.499 2.238 2.499 2.238
|
||||
score MIXED_ES 2.199 2.199 2.199 2.199
|
||||
score MIXED_FONT_CASE 1.194 0.739 1.194 0.739
|
||||
score MIXED_HREF_CASE 1.999 1.999 1.999 1.999
|
||||
score MIXED_IMG_CASE 1.000 1.000 1.000 1.000
|
||||
score MONERO_DEADLINE 1.000 1.000 1.000 1.000
|
||||
score MONERO_EXTORT_01 1.000 1.000 1.000 1.000
|
||||
score MONERO_MALWARE 1.000 1.000 1.000 1.000
|
||||
score MONERO_PAY_ME 1.000 1.000 1.000 1.000
|
||||
score MONEY_ATM_CARD 0.001 0.001 0.001 0.001
|
||||
score MONEY_ATM_CARD 0.219 0.330 0.219 0.330
|
||||
score MONEY_FORM 0.001 0.001 0.001 0.001
|
||||
score MONEY_FORM_SHORT 0.001 0.001 0.001 0.001
|
||||
score MONEY_FRAUD_3 0.001 0.001 0.001 0.001
|
||||
score MONEY_FRAUD_5 2.896 0.001 2.896 0.001
|
||||
score MONEY_FRAUD_8 0.886 0.695 0.886 0.695
|
||||
score MONEY_FREEMAIL_REPTO 2.996 0.705 2.996 0.705
|
||||
score MONEY_FROM_41 0.544 1.000 0.544 1.000
|
||||
score MONEY_FORM_SHORT 1.272 1.787 1.272 1.787
|
||||
score MONEY_FRAUD_3 0.953 0.262 0.953 0.262
|
||||
score MONEY_FRAUD_5 0.001 0.001 0.001 0.001
|
||||
score MONEY_FRAUD_8 3.099 2.999 3.099 2.999
|
||||
score MONEY_FREEMAIL_REPTO 2.999 1.084 2.999 1.084
|
||||
score MONEY_FROM_41 1.999 1.999 1.999 1.999
|
||||
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
|
||||
score MONEY_NOHTML 2.499 2.499 2.499 2.499
|
||||
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
|
||||
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
|
||||
score MSMAIL_PRI_ABNORMAL 0.470 0.586 0.470 0.586
|
||||
score MSGID_HDR_MALF 2.395 2.997 2.395 2.997
|
||||
score MSGID_NOFQDN1 0.001 1.935 0.001 1.935
|
||||
score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000
|
||||
score NAME_EMAIL_DIFF 1.729 0.001 1.729 0.001
|
||||
score NA_DOLLARS 1.499 1.499 1.499 1.499
|
||||
score NA_DOLLARS 1.499 0.001 1.499 0.001
|
||||
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
|
||||
score NEW_PRODUCTS 1.000 1.000 1.000 1.000
|
||||
score NICE_REPLY_A -0.001 -0.103 -0.001 -0.103
|
||||
score NICE_REPLY_A -1.545 -1.553 -1.545 -1.553
|
||||
score NORDNS_LOW_CONTRAST 0.001 0.953 0.001 0.953
|
||||
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
|
||||
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
|
||||
score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
|
||||
score NSL_RCVD_HELO_USER 0.001 0.107 0.001 0.107
|
||||
score OBFU_BITCOIN 1.000 1.000 1.000 1.000
|
||||
score OBFU_UNSUB_UL 2.297 2.200 2.297 2.200
|
||||
score ODD_FREEM_REPTO 2.996 2.799 2.996 2.799
|
||||
score PDS_BRAND_SUBJ_NAKED_TO 0.998 0.999 0.998 0.999
|
||||
score PDS_BTC_ID 0.498 0.001 0.498 0.001
|
||||
score PDS_BTC_MSGID 0.046 0.001 0.046 0.001
|
||||
score PDS_DBL_URL_TNB_RUNON 1.997 1.000 1.997 1.000
|
||||
score PDS_FRNOM_TODOM_DBL_URL 1.499 1.499 1.499 1.499
|
||||
score PDS_FRNOM_TODOM_NAKED_TO 1.498 1.499 1.498 1.499
|
||||
score PDS_FROM_NAME_TO_DOMAIN 1.997 1.999 1.997 1.999
|
||||
score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000
|
||||
score PDS_RDNS_DYNAMIC_FP 0.010 0.001 0.010 0.001
|
||||
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.000 1.000 1.000 1.000
|
||||
score PDS_TO_EQ_FROM_NAME 1.748 0.001 1.748 0.001
|
||||
score PHISH_ATTACH 2.297 0.001 2.297 0.001
|
||||
score OBFU_TEXT_ATTACH 1.499 1.599 1.499 1.599
|
||||
score ODD_FREEM_REPTO 1.000 1.000 1.000 1.000
|
||||
score PDS_BAD_THREAD_QP_64 0.999 0.001 0.999 0.001
|
||||
score PDS_BTC_ID 0.499 0.499 0.499 0.499
|
||||
score PDS_BTC_MSGID 0.001 0.674 0.001 0.674
|
||||
score PDS_DBL_URL_TNB_RUNON 1.999 2.000 1.999 2.000
|
||||
score PDS_EMPTYSUBJ_URISHRT 0.736 1.499 0.736 1.499
|
||||
score PDS_FREEMAIL_REPLYTO_URISHRT 1.499 0.891 1.499 0.891
|
||||
score PDS_FRNOM_TODOM_DBL_URL 0.001 0.001 0.001 0.001
|
||||
score PDS_FRNOM_TODOM_NAKED_TO 1.499 0.291 1.499 0.291
|
||||
score PDS_FROM_NAME_TO_DOMAIN 2.000 1.130 2.000 1.130
|
||||
score PDS_HELO_SPF_FAIL 0.001 1.999 0.001 1.999
|
||||
score PDS_HP_HELO_NORDNS 0.498 0.001 0.498 0.001
|
||||
score PDS_NAKED_TO_NUMERO 1.000 1.000 1.000 1.000
|
||||
score PDS_OTHER_BAD_TLD 1.999 1.999 1.999 1.999
|
||||
score PDS_PHP_EVAL 1.500 1.499 1.500 1.499
|
||||
score PDS_TINYSUBJ_URISHRT 0.001 1.499 0.001 1.499
|
||||
score PDS_TONAME_EQ_TOLOCAL_HDRS_LCASE 1.999 1.999 1.999 1.999
|
||||
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
|
||||
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
|
||||
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
|
||||
score PHP_ORIG_SCRIPT 2.497 0.001 2.497 0.001
|
||||
score PHP_SCRIPT 2.497 2.499 2.497 2.499
|
||||
score PHP_ORIG_SCRIPT 1.000 1.000 1.000 1.000
|
||||
score PHP_ORIG_SCRIPT_EVAL 3.000 2.999 3.000 2.999
|
||||
score PHP_SCRIPT 2.499 2.499 2.499 2.499
|
||||
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
|
||||
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
|
||||
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
|
||||
@ -282,10 +303,13 @@ score PUMPDUMP 1.000 1.000 1.000 1.000
|
||||
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
|
||||
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
|
||||
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
|
||||
score RAND_MKTG_HEADER 1.997 1.324 1.997 1.324
|
||||
score RATWARE_NO_RDNS 0.001 0.001 0.001 0.001
|
||||
score RAND_MKTG_HEADER 2.000 1.969 2.000 1.969
|
||||
score RATWARE_NO_RDNS 2.682 1.148 2.682 1.148
|
||||
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
|
||||
score RCVD_DOTEDU_SUSP 0.331 0.914 0.331 0.914
|
||||
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
|
||||
score RCVD_IN_IADB_COURT 0.001 -0.001 0.001 -0.001
|
||||
score RCVD_IN_IADB_LEG_MAND 0.001 -0.001 0.001 -0.001
|
||||
score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
|
||||
score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
|
||||
@ -299,107 +323,121 @@ score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
|
||||
score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000
|
||||
score RDNS_NUM_TLD_XM 1.000 1.000 1.000 1.000
|
||||
score READY_TO_SHIP 1.000 0.001 1.000 0.001
|
||||
score REPTO_419_FRAUD 0.853 1.353 0.853 1.353
|
||||
score REPTO_419_FRAUD 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_AOL_LOOSE 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_CNS 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_GM 2.996 1.000 2.996 1.000
|
||||
score REPTO_419_FRAUD_GM_LOOSE 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_GM 2.999 2.794 2.999 2.794
|
||||
score REPTO_419_FRAUD_GM_LOOSE 0.999 0.999 0.999 0.999
|
||||
score REPTO_419_FRAUD_HM 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_OL 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_PM 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_QQ 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_YH 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_YH_LOOSE 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_YJ 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_YJ 1.000 1.639 1.000 1.639
|
||||
score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000
|
||||
score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000
|
||||
score RISK_FREE 0.001 0.354 0.001 0.354
|
||||
score SCC_BODY_SINGLE_WORD 0.001 0.001 0.001 0.001
|
||||
score SCC_CANSPAM_2 3.695 3.299 3.695 3.299
|
||||
score SCC_BODY_URI_ONLY 1.940 2.699 1.940 2.699
|
||||
score SCC_CANSPAM_1 1.941 0.202 1.941 0.202
|
||||
score SCC_CANSPAM_2 3.799 3.599 3.799 3.599
|
||||
score SCC_CTMPP 2.210 1.756 2.210 1.756
|
||||
score SCC_ISEMM_LID_1 1.000 1.000 1.000 1.000
|
||||
score SCC_ISEMM_LID_1A 1.000 0.001 1.000 0.001
|
||||
score SCC_ISEMM_LID_1B 1.498 1.499 1.498 1.499
|
||||
score SCC_SPAMMER_ADDR_2 2.675 2.799 2.675 2.799
|
||||
score SCC_SPECIAL_GUID 0.923 0.947 0.923 0.947
|
||||
score SENDGRID_REDIR 1.498 0.409 1.498 0.409
|
||||
score SCC_ISEMM_LID_1A 1.000 1.000 1.000 1.000
|
||||
score SCC_ISEMM_LID_1B 1.499 1.499 1.499 1.499
|
||||
score SCC_SPAMMER_ADDR_2 2.243 2.803 2.243 2.803
|
||||
score SENDGRID_REDIR 1.500 1.500 1.500 1.500
|
||||
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
|
||||
score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score SERGIO_SUBJECT_VIAGRA01 2.195 2.814 2.195 2.814
|
||||
score SHOPIFY_IMG_NOT_RCVD_SFY 2.497 2.499 2.497 2.499
|
||||
score SHORTENER_SHORT_IMG 0.196 2.499 0.196 2.499
|
||||
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499 2.499 2.499 2.499
|
||||
score SHORTENER_SHORT_IMG 0.001 0.739 0.001 0.739
|
||||
score SHORTENER_SHORT_SUBJ 0.238 0.001 0.238 0.001
|
||||
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score SPOOFED_FREEMAIL 0.001 0.001 0.001 0.001
|
||||
score SPOOFED_FREEMAIL_NO_RDNS 1.099 0.001 1.099 0.001
|
||||
score SPOOFED_FREEM_REPTO 0.001 0.001 0.001 0.001
|
||||
score SHORT_SHORTNER 1.999 0.001 1.999 0.001
|
||||
score SHY_OBFU_EXPIRE 1.000 1.000 1.000 1.000
|
||||
score SHY_OBFU_PASSWORD 1.000 1.000 1.000 1.000
|
||||
score SPAM_CWINDOWSNET 0.349 0.685 0.349 0.685
|
||||
score SPOOFED_FREEMAIL 0.001 1.795 0.001 1.795
|
||||
score SPOOFED_FREEMAIL_NO_RDNS 1.155 0.001 1.155 0.001
|
||||
score SPOOFED_FREEM_REPTO 0.001 2.075 0.001 2.075
|
||||
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
|
||||
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
|
||||
score SPOOF_GMAIL_MID 1.499 0.001 1.499 0.001
|
||||
score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001
|
||||
score SPOOF_GMAIL_MID 1.499 0.998 1.499 0.998
|
||||
score STATIC_XPRIO_OLE 1.995 0.764 1.995 0.764
|
||||
score STOCK_TIP 1.000 1.000 1.000 1.000
|
||||
score STOX_BOUND_090909_B 0.995 1.428 0.995 1.428
|
||||
score SUBJ_ATTENTION 0.499 0.499 0.499 0.499
|
||||
score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000
|
||||
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
|
||||
score SUSP_UTF8_WORD_COMBO 0.446 1.668 0.446 1.668
|
||||
score SUSP_UTF8_WORD_FROM 1.997 1.132 1.997 1.132
|
||||
score SUSP_UTF8_WORD_MANY 2.333 0.263 2.333 0.263
|
||||
score SUSP_UTF8_WORD_SUBJ 1.492 1.999 1.492 1.999
|
||||
score SUSP_UTF8_WORD_FROM 1.999 1.999 1.999 1.999
|
||||
score SUSP_UTF8_WORD_MANY 2.999 2.999 2.999 2.999
|
||||
score SYSADMIN 1.000 1.000 1.000 1.000
|
||||
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
|
||||
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
|
||||
score THIS_AD 0.998 0.799 0.998 0.799
|
||||
score THIS_IS_ADV_SUSP_NTLD 0.001 1.000 0.001 1.000
|
||||
score THIS_AD 2.299 2.155 2.299 2.155
|
||||
score THIS_IS_ADV_SUSP_NTLD 1.226 1.499 1.226 1.499
|
||||
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
|
||||
score TO_EQ_FM_DIRECT_MX 0.001 0.718 0.001 0.718
|
||||
score TO_EQ_FM_DOM_HTML_IMG 3.197 0.001 3.197 0.001
|
||||
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
|
||||
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
|
||||
score TO_IN_SUBJ 0.098 0.099 0.098 0.099
|
||||
score TO_NAME_SUBJ_NO_RDNS 2.658 1.000 2.658 1.000
|
||||
score TO_NO_BRKTS_FROM_MSSP 2.497 2.499 2.497 2.499
|
||||
score TO_NO_BRKTS_HTML_IMG 1.997 2.000 1.997 2.000
|
||||
score TO_NO_BRKTS_HTML_ONLY 1.997 1.999 1.997 1.999
|
||||
score TO_NO_BRKTS_MSFT 1.746 1.397 1.746 1.397
|
||||
score TO_NO_BRKTS_NORDNS_HTML 1.998 1.999 1.998 1.999
|
||||
score TO_NO_BRKTS_PCNT 2.497 2.490 2.497 2.490
|
||||
score TVD_SPACE_ENC_FM_MIME 1.336 0.001 1.336 0.001
|
||||
score TO_EQ_FM_DIRECT_MX 0.001 0.001 0.001 0.001
|
||||
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.690 0.001 0.690
|
||||
score TO_EQ_FM_HTML_ONLY 0.001 0.001 0.001 0.001
|
||||
score TO_EQ_FM_SPF_FAIL 0.001 0.213 0.001 0.213
|
||||
score TO_IN_SUBJ 0.100 0.099 0.100 0.099
|
||||
score TO_NAME_SUBJ_NO_RDNS 2.915 1.801 2.915 1.801
|
||||
score TO_NO_BRKTS_FROM_MSSP 2.500 2.499 2.500 2.499
|
||||
score TO_NO_BRKTS_HTML_IMG 1.902 1.799 1.902 1.799
|
||||
score TO_NO_BRKTS_HTML_ONLY 1.999 1.999 1.999 1.999
|
||||
score TO_NO_BRKTS_MSFT 1.006 2.129 1.006 2.129
|
||||
score TO_NO_BRKTS_NORDNS_HTML 1.999 1.626 1.999 1.626
|
||||
score TO_NO_BRKTS_PCNT 2.500 2.499 2.500 2.499
|
||||
score TVD_SPACE_ENCODED 2.499 1.260 2.499 1.260
|
||||
score TVD_SPACE_RATIO_MINFP 2.352 0.001 2.352 0.001
|
||||
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
|
||||
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
|
||||
score UNDISC_FREEM 3.096 2.699 3.096 2.699
|
||||
score UNDISC_MONEY 3.196 3.100 3.196 3.100
|
||||
score UNICODE_OBFU_ASC 2.497 2.499 2.497 2.499
|
||||
score UNDISC_FREEM 2.699 2.599 2.699 2.599
|
||||
score UNDISC_MONEY 2.999 2.900 2.999 2.900
|
||||
score UNICODE_OBFU_ASC 2.499 2.499 2.499 2.499
|
||||
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
|
||||
score UNICODE_OBFU_ZW_MANY 0.001 0.001 0.001 0.001
|
||||
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
|
||||
score URI_ADOBESPARK 1.000 1.000 1.000 1.000
|
||||
score URI_AZURE_CLOUDAPP 2.996 1.000 2.996 1.000
|
||||
score URI_AZURE_CLOUDAPP 2.999 2.999 2.999 2.999
|
||||
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
|
||||
score URI_DATA 1.000 1.000 1.000 1.000
|
||||
score URI_DOTEDU 1.997 1.999 1.997 1.999
|
||||
score URI_DOTEDU 1.999 1.999 1.999 1.999
|
||||
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
|
||||
score URI_FIREBASEAPP 2.996 1.000 2.996 1.000
|
||||
score URI_GOOGLE_PROXY 2.696 2.799 2.696 2.799
|
||||
score URI_GOOG_STO_SPAMMY 3.000 3.000 3.000 3.000
|
||||
score URI_HEX_IP 2.497 1.000 2.497 1.000
|
||||
score URI_DQ_UNSUB 2.399 2.240 2.399 2.240
|
||||
score URI_FIREBASEAPP 1.000 1.000 1.000 1.000
|
||||
score URI_GOOGLE_PROXY 2.199 2.199 2.199 2.199
|
||||
score URI_GOOG_STO_SPAMMY 3.000 2.999 3.000 2.999
|
||||
score URI_HEX_IP 1.000 1.000 1.000 1.000
|
||||
score URI_IMG_CWINDOWSNET 3.129 1.911 3.129 1.911
|
||||
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
|
||||
score URI_LONG_REPEAT 1.000 1.000 1.000 1.000
|
||||
score URI_ONLY_MSGID_MALF 1.974 1.325 1.974 1.325
|
||||
score URI_ONLY_MSGID_MALF 0.528 1.999 0.528 1.999
|
||||
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
|
||||
score URI_PHISH 3.995 3.999 3.995 3.999
|
||||
score URI_PHP_REDIR 3.496 1.000 3.496 1.000
|
||||
score URI_TRY_3LD 1.997 2.000 1.997 2.000
|
||||
score URI_PHISH 3.999 3.999 3.999 3.999
|
||||
score URI_PHP_REDIR 1.000 1.000 1.000 1.000
|
||||
score URI_TRY_3LD 1.999 1.999 1.999 1.999
|
||||
score URI_TRY_USME 1.000 1.000 1.000 1.000
|
||||
score URI_WPADMIN 2.397 2.299 2.397 2.299
|
||||
score URI_WP_DIRINDEX 3.496 1.000 3.496 1.000
|
||||
score URI_WP_HACKED 2.131 1.627 2.131 1.627
|
||||
score URI_WP_HACKED_2 2.497 2.499 2.497 2.499
|
||||
score USB_DRIVES 1.997 1.000 1.997 1.000
|
||||
score VFY_ACCT_NORDNS 0.001 0.001 0.001 0.001
|
||||
score URI_WPADMIN 2.399 2.399 2.399 2.399
|
||||
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
|
||||
score URI_WP_HACKED 3.499 3.499 3.499 3.499
|
||||
score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
|
||||
score USB_DRIVES 1.000 1.000 1.000 1.000
|
||||
score VFY_ACCT_NORDNS 2.881 2.999 2.881 2.999
|
||||
score VISTA_COST 1.000 1.000 1.000 1.000
|
||||
score VISTA_TONOM_EQ_TOLOC 2.499 0.860 2.499 0.860
|
||||
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
|
||||
score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
|
||||
score WORD_INVIS 1.581 2.070 1.581 2.070
|
||||
score WORD_INVIS_MANY 2.996 2.999 2.996 2.999
|
||||
score XM_DIGITS_ONLY 1.704 1.655 1.704 1.655
|
||||
score XM_RANDOM 1.117 0.001 1.117 0.001
|
||||
score XPRIO 1.551 0.001 1.551 0.001
|
||||
score WIKI_IMG 3.199 3.099 3.199 3.099
|
||||
score WORD_INVIS 1.572 1.898 1.572 1.898
|
||||
score WORD_INVIS_MANY 2.999 2.999 2.999 2.999
|
||||
score XFER_LOTSA_MONEY 0.001 0.001 0.001 0.001
|
||||
score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
|
||||
score XM_RANDOM 2.499 2.499 2.499 2.499
|
||||
score XM_RECPTID 3.000 2.999 3.000 2.999
|
||||
score XPRIO 0.700 2.249 0.700 2.249
|
||||
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000
|
||||
score YOU_INHERIT 2.297 0.001 2.297 0.001
|
||||
score XPRIO_VISTA 1.000 1.000 1.000 1.000
|
||||
score YOU_INHERIT 2.266 1.682 2.266 1.682
|
||||
|
||||
Loading…
Reference in New Issue
Block a user