mirror of
https://git.proxmox.com/git/proxmox-spamassassin
synced 2025-04-28 21:37:19 +00:00
update SpamAssassin signatures
Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
This commit is contained in:
Stoiko Ivanov
parent
9f78c2890a
commit
fc5290a34d
@ -56,7 +56,7 @@ endif
|
||||
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | grep -i '^xn--' | idn -u | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
|
||||
|
||||
if can(Mail::SpamAssassin::Conf::feature_registryboundaries)
|
||||
# Updated 2022-10-18
|
||||
# Updated 2023-05-19
|
||||
util_rb_tld xn--11b4c3d xn--1ck2e1b xn--1qqw23a xn--2scrj9c xn--30rr7y xn--3bst00m
|
||||
util_rb_tld xn--3ds443g xn--3e0b707e xn--3hcrj9c xn--3pxu8k xn--42c2d9a xn--45br5cyl
|
||||
util_rb_tld xn--45brj9c xn--45q11c xn--4dbrk0ce xn--4gbrim xn--54b7fta0cc xn--55qw42g
|
||||
@ -70,30 +70,30 @@ util_rb_tld xn--fiq64b xn--fiqs8s xn--fiqz9s xn--fjq720a xn--flw351e xn--fpcrj9c
|
||||
util_rb_tld xn--fzc2c9e2c xn--fzys8d69uvgm xn--g2xx48c xn--gckr3f0f xn--gecrj9c xn--gk3at1e
|
||||
util_rb_tld xn--h2breg3eve xn--h2brj9c xn--h2brj9c8c xn--hxt814e xn--i1b6b1a6a2e
|
||||
util_rb_tld xn--imr513n xn--io0a7i xn--j1aef xn--j1amh xn--j6w193g xn--jlq480n2rg
|
||||
util_rb_tld xn--jlq61u9w7b xn--jvr189m xn--kcrx77d1x4a xn--kprw13d xn--kpry57d xn--kput3i
|
||||
util_rb_tld xn--l1acc xn--lgbbat1ad8j xn--mgb9awbf xn--mgba3a3ejt xn--mgba3a4f16a
|
||||
util_rb_tld xn--mgba7c0bbn0a xn--mgbaakc7dvf xn--mgbaam7a8h xn--mgbab2bd xn--mgbah1a3hjkrd
|
||||
util_rb_tld xn--mgbai9azgqp6j xn--mgbayh7gpa xn--mgbbh1a xn--mgbbh1a71e xn--mgbc0a9azcg
|
||||
util_rb_tld xn--mgbca7dzdo xn--mgbcpq6gpa1a xn--mgberp4a5d4ar xn--mgbgu82a xn--mgbi4ecexp
|
||||
util_rb_tld xn--mgbpl2fh xn--mgbt3dhd xn--mgbtx2b xn--mgbx4cd0ab xn--mix891f xn--mk1bu44c
|
||||
util_rb_tld xn--mxtq1m xn--ngbc5azd xn--ngbe9e0a xn--ngbrx xn--node xn--nqv7f
|
||||
util_rb_tld xn--nqv7fs00ema xn--nyqy26a xn--o3cw4h xn--ogbpf8fl xn--otu796d xn--p1acf
|
||||
util_rb_tld xn--p1ai xn--pgbs0dh xn--pssy2u xn--q7ce6a xn--q9jyb4c xn--qcka1pmc xn--qxa6a
|
||||
util_rb_tld xn--qxam xn--rhqv96g xn--rovu88b xn--rvc1e0am3e xn--s9brj9c xn--ses554g
|
||||
util_rb_tld xn--t60b56a xn--tckwe xn--tiq49xqyj xn--unup4y xn--vermgensberater-ctb
|
||||
util_rb_tld xn--vermgensberatung-pwb xn--vhquv xn--vuq861b xn--w4r85el8fhu5dnra xn--w4rs40l
|
||||
util_rb_tld xn--wgbh1c xn--wgbl6a xn--xhq521b xn--xkc2al3hye2a xn--xkc2dl3a5ee0h xn--y9a3aq
|
||||
util_rb_tld xn--yfro4i67o xn--ygbi2ammx xn--zfr164b
|
||||
util_rb_tld xn--jvr189m xn--kcrx77d1x4a xn--kprw13d xn--kpry57d xn--kput3i xn--l1acc
|
||||
util_rb_tld xn--lgbbat1ad8j xn--mgb9awbf xn--mgba3a3ejt xn--mgba3a4f16a xn--mgba7c0bbn0a
|
||||
util_rb_tld xn--mgbaakc7dvf xn--mgbaam7a8h xn--mgbab2bd xn--mgbah1a3hjkrd xn--mgbai9azgqp6j
|
||||
util_rb_tld xn--mgbayh7gpa xn--mgbbh1a xn--mgbbh1a71e xn--mgbc0a9azcg xn--mgbca7dzdo
|
||||
util_rb_tld xn--mgbcpq6gpa1a xn--mgberp4a5d4ar xn--mgbgu82a xn--mgbi4ecexp xn--mgbpl2fh
|
||||
util_rb_tld xn--mgbt3dhd xn--mgbtx2b xn--mgbx4cd0ab xn--mix891f xn--mk1bu44c xn--mxtq1m
|
||||
util_rb_tld xn--ngbc5azd xn--ngbe9e0a xn--ngbrx xn--node xn--nqv7f xn--nqv7fs00ema
|
||||
util_rb_tld xn--nyqy26a xn--o3cw4h xn--ogbpf8fl xn--otu796d xn--p1acf xn--p1ai xn--pgbs0dh
|
||||
util_rb_tld xn--pssy2u xn--q7ce6a xn--q9jyb4c xn--qcka1pmc xn--qxa6a xn--qxam xn--rhqv96g
|
||||
util_rb_tld xn--rovu88b xn--rvc1e0am3e xn--s9brj9c xn--ses554g xn--t60b56a xn--tckwe
|
||||
util_rb_tld xn--tiq49xqyj xn--unup4y xn--vermgensberater-ctb xn--vermgensberatung-pwb
|
||||
util_rb_tld xn--vhquv xn--vuq861b xn--w4r85el8fhu5dnra xn--w4rs40l xn--wgbh1c xn--wgbl6a
|
||||
util_rb_tld xn--xhq521b xn--xkc2al3hye2a xn--xkc2dl3a5ee0h xn--y9a3aq xn--yfro4i67o
|
||||
util_rb_tld xn--ygbi2ammx xn--zfr164b
|
||||
endif
|
||||
|
||||
# Standard List
|
||||
# For an up to date list of TLDs that can be pasted into this block, run this command:
|
||||
# wget https://data.iana.org/TLD/tlds-alpha-by-domain.txt -q -O - | tail -n+2 | grep -vi '^xn--' | tr '\n' ' ' | fold -w 80 -s | perl -pe 's/\s+$//; s/.*/util_rb_tld \L$_\n/'
|
||||
|
||||
# Updated 2022-10-18
|
||||
# Updated 2023-05-19
|
||||
util_rb_tld aaa aarp abarth abb abbott abbvie abc able abogado abudhabi ac academy
|
||||
util_rb_tld accenture accountant accountants aco actor ad adac ads adult ae aeg aero aetna
|
||||
util_rb_tld af afl africa ag agakhan agency ai aig airbus airforce airtel akdn al alfaromeo
|
||||
util_rb_tld accenture accountant accountants aco actor ad ads adult ae aeg aero aetna af
|
||||
util_rb_tld afl africa ag agakhan agency ai aig airbus airforce airtel akdn al alfaromeo
|
||||
util_rb_tld alibaba alipay allfinanz allstate ally alsace alstom am amazon americanexpress
|
||||
util_rb_tld americanfamily amex amfam amica amsterdam analytics android anquan anz ao aol
|
||||
util_rb_tld apartments app apple aq aquarelle ar arab aramco archi army arpa art arte as
|
||||
@ -147,10 +147,10 @@ util_rb_tld koeln komatsu kosher kp kpmg kpn kr krd kred kuokgroup kw ky kyoto k
|
||||
util_rb_tld lacaixa lamborghini lamer lancaster lancia land landrover lanxess lasalle lat
|
||||
util_rb_tld latino latrobe law lawyer lb lc lds lease leclerc lefrak legal lego lexus lgbt
|
||||
util_rb_tld li lidl life lifeinsurance lifestyle lighting like lilly limited limo lincoln
|
||||
util_rb_tld linde link lipsy live living lk llc llp loan loans locker locus loft lol london
|
||||
util_rb_tld lotte lotto love lpl lplfinancial lr ls lt ltd ltda lu lundbeck luxe luxury lv
|
||||
util_rb_tld ly ma macys madrid maif maison makeup man management mango map market marketing
|
||||
util_rb_tld markets marriott marshalls maserati mattel mba mc mckinsey md me med media meet
|
||||
util_rb_tld link lipsy live living lk llc llp loan loans locker locus lol london lotte
|
||||
util_rb_tld lotto love lpl lplfinancial lr ls lt ltd ltda lu lundbeck luxe luxury lv ly ma
|
||||
util_rb_tld madrid maif maison makeup man management mango map market marketing markets
|
||||
util_rb_tld marriott marshalls maserati mattel mba mc mckinsey md me med media meet
|
||||
util_rb_tld melbourne meme memorial men menu merckmsd mg mh miami microsoft mil mini mint
|
||||
util_rb_tld mit mitsubishi mk ml mlb mls mm mma mn mo mobi mobile moda moe moi mom monash
|
||||
util_rb_tld money monster mormon mortgage moscow moto motorcycles mov movie mp mq mr ms msd
|
||||
@ -173,9 +173,9 @@ util_rb_tld room rs rsvp ru rugby ruhr run rw rwe ryukyu sa saarland safe safety
|
||||
util_rb_tld sale salon samsclub samsung sandvik sandvikcoromant sanofi sap sarl sas save
|
||||
util_rb_tld saxo sb sbi sbs sc sca scb schaeffler schmidt scholarships school schule
|
||||
util_rb_tld schwarz science scot sd se search seat secure security seek select sener
|
||||
util_rb_tld services ses seven sew sex sexy sfr sg sh shangrila sharp shaw shell shia
|
||||
util_rb_tld shiksha shoes shop shopping shouji show showtime si silk sina singles site sj
|
||||
util_rb_tld sk ski skin sky skype sl sling sm smart smile sn sncf so soccer social softbank
|
||||
util_rb_tld services seven sew sex sexy sfr sg sh shangrila sharp shaw shell shia shiksha
|
||||
util_rb_tld shoes shop shopping shouji show showtime si silk sina singles site sj sk ski
|
||||
util_rb_tld skin sky skype sl sling sm smart smile sn sncf so soccer social softbank
|
||||
util_rb_tld software sohu solar solutions song sony soy spa space sport spot sr srl ss st
|
||||
util_rb_tld stada staples star statebank statefarm stc stcgroup stockholm storage store
|
||||
util_rb_tld stream studio study style su sucks supplies supply support surf surgery suzuki
|
||||
|
||||
@ -411,7 +411,7 @@ describe FROM_LOCAL_DIGITS From: localpart has long digit sequence
|
||||
|
||||
header __TOCC_EXISTS exists:ToCc
|
||||
|
||||
header X_PRIORITY_CC ALL =~ /^X-Priority:[^\n]{0,80}^Cc:/msi
|
||||
header X_PRIORITY_CC ALL =~ /^X-Priority:.*?^Cc:/msi
|
||||
describe X_PRIORITY_CC Cc: after X-Priority: (bulk email fingerprint)
|
||||
|
||||
# catch non-RFC2047 compliant messages
|
||||
|
||||
@ -439,7 +439,6 @@ def_welcomelist_auth *@*.build.com
|
||||
def_welcomelist_auth *@*.trulia.com
|
||||
def_welcomelist_auth *@*.rentalcars.com
|
||||
def_welcomelist_auth *@recommendedjobs.com
|
||||
def_welcomelist_auth *@*.zendesk.com
|
||||
def_welcomelist_auth *@*.advocareemail.com
|
||||
def_welcomelist_auth *@*.plenti.com
|
||||
def_welcomelist_auth *@*.amolatina.com
|
||||
@ -1417,7 +1416,6 @@ def_whitelist_auth *@*.build.com
|
||||
def_whitelist_auth *@*.trulia.com
|
||||
def_whitelist_auth *@*.rentalcars.com
|
||||
def_whitelist_auth *@recommendedjobs.com
|
||||
def_whitelist_auth *@*.zendesk.com
|
||||
def_whitelist_auth *@*.advocareemail.com
|
||||
def_whitelist_auth *@*.plenti.com
|
||||
def_whitelist_auth *@*.amolatina.com
|
||||
|
||||
File diff suppressed because one or more lines are too long
@ -1,8 +1,8 @@
|
||||
score ACCT_PHISHING_MANY 1.000 1.000 1.000 1.000
|
||||
score ACCT_PHISHING_MANY 2.803 2.999 2.803 2.999
|
||||
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
|
||||
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
|
||||
score AC_FROM_MANY_DOTS 2.999 1.544 2.999 1.544
|
||||
score AC_HTML_NONSENSE_TAGS 1.999 1.999 1.999 1.999
|
||||
score AC_FROM_MANY_DOTS 2.996 2.644 2.996 2.644
|
||||
score AC_HTML_NONSENSE_TAGS 1.997 1.999 1.997 1.999
|
||||
score AC_POST_EXTRAS 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
|
||||
@ -13,270 +13,268 @@ score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
|
||||
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
|
||||
score ADMITS_SPAM 3.096 0.001 3.096 0.001
|
||||
score ADULT_DATING_COMPANY 10.000 10.000 10.000 10.000
|
||||
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
|
||||
score ADVANCE_FEE_2_NEW_FRM_MNY 1.000 1.000 1.000 1.000
|
||||
score ADVANCE_FEE_2_NEW_MONEY 2.000 1.999 2.000 1.999
|
||||
score ADVANCE_FEE_3_NEW 3.499 3.499 3.499 3.499
|
||||
score ADVANCE_FEE_3_NEW_MONEY 2.399 2.399 2.399 2.399
|
||||
score ADVANCE_FEE_4_NEW 2.199 2.199 2.199 2.199
|
||||
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_4_NEW_MONEY 2.485 2.499 2.485 2.499
|
||||
score ADVANCE_FEE_5_NEW 2.199 0.821 2.199 0.821
|
||||
score ADVANCE_FEE_5_NEW_FRM_MNY 1.592 2.202 1.592 2.202
|
||||
score ADVANCE_FEE_5_NEW_MONEY 2.136 0.001 2.136 0.001
|
||||
score AD_PREFS 0.366 0.097 0.366 0.097
|
||||
score ALIBABA_IMG_NOT_RCVD_ALI 1.000 1.000 1.000 1.000
|
||||
score AMAZON_IMG_NOT_RCVD_AMZN 0.001 1.845 0.001 1.845
|
||||
score ADVANCE_FEE_2_NEW_MONEY 1.997 1.999 1.997 1.999
|
||||
score ADVANCE_FEE_3_NEW 2.994 3.268 2.994 3.268
|
||||
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 0.001 0.001 0.001
|
||||
score ADVANCE_FEE_3_NEW_MONEY 0.140 2.499 0.140 2.499
|
||||
score ADVANCE_FEE_4_NEW 2.297 0.001 2.297 0.001
|
||||
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.834 0.001 0.834
|
||||
score ADVANCE_FEE_4_NEW_MONEY 2.596 2.230 2.596 2.230
|
||||
score ADVANCE_FEE_5_NEW_FRM_MNY 1.084 2.168 1.084 2.168
|
||||
score ADVANCE_FEE_5_NEW_MONEY 0.001 0.001 0.001 0.001
|
||||
score AD_PREFS 0.363 0.001 0.363 0.001
|
||||
score ALIBABA_IMG_NOT_RCVD_ALI 0.001 0.001 0.001 0.001
|
||||
score AMAZON_IMG_NOT_RCVD_AMZN 0.001 0.001 0.001 0.001
|
||||
score APP_DEVELOPMENT_FREEM 1.000 1.000 1.000 1.000
|
||||
score APP_DEVELOPMENT_NORDNS 1.000 1.000 1.000 1.000
|
||||
score ARC_SIGNED 0.001 0.001 0.001 0.001
|
||||
score ARC_VALID 0.001 0.001 0.001 0.001
|
||||
score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
|
||||
score AXB_X_FF_SEZ_S 2.700 1.196 2.700 1.196
|
||||
score BEBEE_IMG_NOT_RCVD_BB 1.000 1.000 1.000 1.000
|
||||
score BIGNUM_EMAILS_FREEM 1.000 0.384 1.000 0.384
|
||||
score BIGNUM_EMAILS_MANY 1.000 1.000 1.000 1.000
|
||||
score BIGNUM_EMAILS_FREEM 0.001 0.396 0.001 0.396
|
||||
score BIGNUM_EMAILS_MANY 2.996 2.999 2.996 2.999
|
||||
score BITCOIN_BOMB 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_DEADLINE 1.500 1.449 1.500 1.449
|
||||
score BITCOIN_EXTORT_01 4.500 0.941 4.500 0.941
|
||||
score BITCOIN_DEADLINE 2.997 2.788 2.997 2.788
|
||||
score BITCOIN_EXTORT_01 3.845 1.739 3.845 1.739
|
||||
score BITCOIN_EXTORT_02 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_IMGUR 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_MALF_HTML 3.499 3.084 3.499 3.084
|
||||
score BITCOIN_MALWARE 2.094 2.501 2.094 2.501
|
||||
score BITCOIN_OBFU_SUBJ 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_ONAN 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_MALF_HTML 3.497 3.500 3.497 3.500
|
||||
score BITCOIN_MALWARE 1.842 1.000 1.842 1.000
|
||||
score BITCOIN_OBFU_SUBJ 1.661 0.116 1.661 0.116
|
||||
score BITCOIN_ONAN 2.658 1.000 2.658 1.000
|
||||
score BITCOIN_PAY_ME 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_PDF 2.497 2.499 2.497 2.499
|
||||
score BITCOIN_SPAM_01 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_02 0.001 0.001 0.001 0.001
|
||||
score BITCOIN_SPAM_03 1.000 2.499 1.000 2.499
|
||||
score BITCOIN_SPAM_04 1.000 0.184 1.000 0.184
|
||||
score BITCOIN_SPAM_05 0.001 2.475 0.001 2.475
|
||||
score BITCOIN_SPAM_02 2.155 2.499 2.155 2.499
|
||||
score BITCOIN_SPAM_03 2.498 1.000 2.498 1.000
|
||||
score BITCOIN_SPAM_04 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_05 0.001 1.940 0.001 1.940
|
||||
score BITCOIN_SPAM_06 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_07 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_07 2.140 3.010 2.140 3.010
|
||||
score BITCOIN_SPAM_08 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_09 1.000 1.092 1.000 1.092
|
||||
score BITCOIN_SPAM_09 1.498 1.000 1.498 1.000
|
||||
score BITCOIN_SPAM_10 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_11 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPAM_12 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_SPF_ONLYALL 0.001 1.000 0.001 1.000
|
||||
score BITCOIN_XPRIO 0.234 0.001 0.234 0.001
|
||||
score BITCOIN_YOUR_INFO 3.000 1.481 3.000 1.481
|
||||
score BODY_SINGLE_URI 1.004 0.302 1.004 0.302
|
||||
score BODY_URI_ONLY 1.154 1.654 1.154 1.654
|
||||
score BOGUS_MIME_VERSION 1.000 1.000 1.000 1.000
|
||||
score BOGUS_MSM_HDRS 1.000 1.000 1.000 1.000
|
||||
score BITCOIN_XPRIO 0.001 0.001 0.001 0.001
|
||||
score BITCOIN_YOUR_INFO 2.996 2.999 2.996 2.999
|
||||
score BODY_SINGLE_URI 2.497 2.499 2.497 2.499
|
||||
score BODY_SINGLE_WORD 1.602 0.001 1.602 0.001
|
||||
score BODY_URI_ONLY 2.996 2.999 2.996 2.999
|
||||
score BOGUS_MIME_VERSION 3.496 2.248 3.496 2.248
|
||||
score BOGUS_MSM_HDRS 1.000 0.753 1.000 0.753
|
||||
score BOMB_FREEM 1.000 1.000 1.000 1.000
|
||||
score BOMB_MONEY 1.000 1.000 1.000 1.000
|
||||
score BTC_ORG 1.000 1.000 1.000 1.000
|
||||
score BULK_RE_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score CANT_SEE_AD 1.000 1.000 1.000 1.000
|
||||
score CK_HELO_GENERIC 0.249 0.001 0.249 0.001
|
||||
score CK_HELO_GENERIC 0.248 0.250 0.248 0.250
|
||||
score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
|
||||
score COMPENSATION 1.498 1.000 1.498 1.000
|
||||
score CONTENT_AFTER_HTML 1.000 1.000 1.000 1.000
|
||||
score CONTENT_AFTER_HTML_WEAK 1.000 1.000 1.000 1.000
|
||||
score CTE_8BIT_MISMATCH 0.999 0.163 0.999 0.163
|
||||
score CTE_8BIT_MISMATCH 0.998 0.001 0.998 0.001
|
||||
score DATE_IN_FUTURE_Q_PLUS 3.595 2.499 3.595 2.499
|
||||
score DAY_I_EARNED 1.000 1.000 1.000 1.000
|
||||
score DEAR_BENEFICIARY 0.699 0.001 0.699 0.001
|
||||
score DKIMWL_BL 0.001 1.295 0.001 1.295
|
||||
score DEAR_BENEFICIARY 0.001 0.001 0.001 0.001
|
||||
score DKIMWL_BL 0.001 1.000 0.001 1.000
|
||||
score DKIMWL_BLOCKED 0.001 0.001 0.001 0.001
|
||||
score DKIMWL_WL_HIGH 0.001 -0.001 0.001 -0.001
|
||||
score DKIMWL_WL_MED 0.001 -0.001 0.001 -0.001
|
||||
score DKIMWL_WL_MEDHI 0.001 -0.263 0.001 -0.263
|
||||
score DKIMWL_WL_MEDHI 0.001 -0.001 0.001 -0.001
|
||||
score DOTGOV_IMAGE 1.000 1.000 1.000 1.000
|
||||
score DX_TEXT_03 0.998 1.299 0.998 1.299
|
||||
score DYNAMIC_IMGUR 1.000 1.000 1.000 1.000
|
||||
score EBAY_IMG_NOT_RCVD_EBAY 1.000 1.000 1.000 1.000
|
||||
score ENCRYPTED_MESSAGE -1.000 -0.999 -1.000 -0.999
|
||||
score END_FUTURE_EMAILS 2.499 2.499 2.499 2.499
|
||||
score ENCRYPTED_MESSAGE -0.998 -1.000 -0.998 -1.000
|
||||
score END_FUTURE_EMAILS 2.497 2.499 2.497 2.499
|
||||
score ENVFROM_GOOG_TRIX 1.000 1.000 1.000 1.000
|
||||
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.551 1.000 1.551
|
||||
score FACEBOOK_IMG_NOT_RCVD_FB 1.000 1.000 1.000 1.000
|
||||
score FAKE_REPLY_A1 2.197 2.599 2.197 2.599
|
||||
score FBI_MONEY 1.000 1.000 1.000 1.000
|
||||
score FBI_SPOOF 1.000 1.000 1.000 1.000
|
||||
score FILL_THIS_FORM 0.899 1.223 0.899 1.223
|
||||
score FILL_THIS_FORM 0.898 0.001 0.898 0.001
|
||||
score FONT_INVIS_DIRECT 0.001 0.001 0.001 0.001
|
||||
score FONT_INVIS_DOTGOV 1.000 1.000 1.000 1.000
|
||||
score FONT_INVIS_HTML_NOHTML 1.000 1.000 1.000 1.000
|
||||
score FONT_INVIS_LONG_LINE 1.286 0.726 1.286 0.726
|
||||
score FONT_INVIS_MSGID 1.155 1.438 1.155 1.438
|
||||
score FONT_INVIS_LONG_LINE 2.996 2.999 2.996 2.999
|
||||
score FONT_INVIS_MSGID 0.947 0.001 0.947 0.001
|
||||
score FONT_INVIS_NORDNS 1.000 1.000 1.000 1.000
|
||||
score FONT_INVIS_POSTEXTRAS 0.002 1.896 0.002 1.896
|
||||
score FORGED_SPF_HELO 0.001 0.001 0.001 0.001
|
||||
score FORM_FRAUD 0.999 1.000 0.999 1.000
|
||||
score FONT_INVIS_POSTEXTRAS 1.645 2.814 1.645 2.814
|
||||
score FORM_FRAUD 0.546 0.001 0.546 0.001
|
||||
score FORM_FRAUD_3 0.001 0.001 0.001 0.001
|
||||
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
|
||||
score FOUND_YOU 1.000 1.000 1.000 1.000
|
||||
score FREEMAIL_FORGED_FROMDOMAIN 0.250 0.250 0.250 0.250
|
||||
score FREEMAIL_FORGED_FROMDOMAIN 0.249 0.250 0.249 0.250
|
||||
score FREEM_FRNUM_UNICD_EMPTY 1.000 1.000 1.000 1.000
|
||||
score FRNAME_IN_MSG_XPRIO_NO_SUB 1.000 1.000 1.000 1.000
|
||||
score FROM_ADDR_WS 2.999 2.349 2.999 2.349
|
||||
score FROMSPACE 3.196 2.499 3.196 2.499
|
||||
score FROM_2_EMAILS_SHORT 1.060 1.884 1.060 1.884
|
||||
score FROM_ADDR_WS 2.996 2.999 2.996 2.999
|
||||
score FROM_BANK_NOAUTH 0.001 1.000 0.001 1.000
|
||||
score FROM_FMBLA_NDBLOCKED 0.001 0.001 0.001 0.001
|
||||
score FROM_FMBLA_NEWDOM 0.001 1.000 0.001 1.000
|
||||
score FROM_FMBLA_NEWDOM 0.001 0.001 0.001 0.001
|
||||
score FROM_FMBLA_NEWDOM14 0.001 1.000 0.001 1.000
|
||||
score FROM_FMBLA_NEWDOM28 0.001 0.799 0.001 0.799
|
||||
score FROM_GOV_DKIM_AU 0.001 -0.766 0.001 -0.766
|
||||
score FROM_GOV_DKIM_AU 0.001 -0.001 0.001 -0.001
|
||||
score FROM_GOV_REPLYTO_FREEMAIL 0.001 1.000 0.001 1.000
|
||||
score FROM_GOV_SPOOF 0.001 1.000 0.001 1.000
|
||||
score FROM_MISSPACED 1.999 1.601 1.999 1.601
|
||||
score FROM_MISSP_EH_MATCH 2.000 1.399 2.000 1.399
|
||||
score FROM_MISSP_FREEMAIL 2.699 0.001 2.699 0.001
|
||||
score FROM_MISSP_MSFT 0.601 0.001 0.601 0.001
|
||||
score FROM_MISSP_REPLYTO 1.199 0.901 1.199 0.901
|
||||
score FROM_IN_TO_AND_SUBJ 1.601 1.899 1.601 1.899
|
||||
score FROM_MISSPACED 1.998 0.001 1.998 0.001
|
||||
score FROM_MISSP_DYNIP 0.945 2.299 0.945 2.299
|
||||
score FROM_MISSP_EH_MATCH 0.001 0.200 0.001 0.200
|
||||
score FROM_MISSP_FREEMAIL 1.649 0.199 1.649 0.199
|
||||
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
|
||||
score FROM_MISSP_REPLYTO 2.150 1.743 2.150 1.743
|
||||
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
|
||||
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
|
||||
score FROM_MULTI_NORDNS 2.297 1.002 2.297 1.002
|
||||
score FROM_NEWDOM_BTC 0.001 1.000 0.001 1.000
|
||||
score FROM_NTLD_LINKBAIT 1.000 1.000 1.000 1.000
|
||||
score FROM_NTLD_REPLY_FREEMAIL 1.000 1.000 1.000 1.000
|
||||
score FROM_NTLD_LINKBAIT 1.911 1.000 1.911 1.000
|
||||
score FROM_NTLD_REPLY_FREEMAIL 0.278 1.000 0.278 1.000
|
||||
score FROM_NUMBERO_NEWDOMAIN 0.001 1.000 0.001 1.000
|
||||
score FROM_PAYPAL_SPOOF 0.001 1.451 0.001 1.451
|
||||
score FROM_SUSPICIOUS_NTLD 0.499 0.499 0.499 0.499
|
||||
score FROM_SUSPICIOUS_NTLD_FP 1.999 1.999 1.999 1.999
|
||||
score FROM_UNBAL1 2.299 2.299 2.299 2.299
|
||||
score FSL_BULK_SIG 0.001 0.815 0.001 0.815
|
||||
score FROM_PAYPAL_SPOOF 0.001 1.243 0.001 1.243
|
||||
score FROM_SUSPICIOUS_NTLD 0.499 0.238 0.499 0.238
|
||||
score FROM_SUSPICIOUS_NTLD_FP 1.997 1.073 1.997 1.073
|
||||
score FROM_UNBAL1 2.220 1.693 2.220 1.693
|
||||
score FROM_UNBAL2 2.696 3.299 2.696 3.299
|
||||
score FROM_WSP_TRAIL 3.396 3.199 3.396 3.199
|
||||
score FSL_BULK_SIG 0.001 0.001 0.001 0.001
|
||||
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
|
||||
score FSL_HAS_TINYURL 2.799 2.699 2.799 2.699
|
||||
score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
|
||||
score FUZZY_IMPORTANT 3.799 0.633 3.799 0.633
|
||||
score FUZZY_WALLET 1.799 0.078 1.799 0.078
|
||||
score FUZZY_AMAZON 0.001 0.001 0.001 0.001
|
||||
score FUZZY_WALLET 1.797 0.001 1.797 0.001
|
||||
score GAPPY_SALES_LEADS_FREEM 1.000 1.000 1.000 1.000
|
||||
score GB_BITCOIN_CP 2.977 0.598 2.977 0.598
|
||||
score GB_BITCOIN_NH 1.000 1.980 1.000 1.980
|
||||
score GB_CUSTOM_HTM_URI 1.499 0.001 1.499 0.001
|
||||
score GB_FAKE_RF_SHORT 1.000 1.000 1.000 1.000
|
||||
score GB_BITCOIN_NH 1.000 1.000 1.000 1.000
|
||||
score GB_CUSTOM_HTM_URI 1.498 0.001 1.498 0.001
|
||||
score GB_FAKE_RF_SHORT 1.941 1.295 1.941 1.295
|
||||
score GB_FORGED_MUA_POSTFIX 1.000 1.000 1.000 1.000
|
||||
score GB_FREEMAIL_DISPTO 0.001 0.001 0.001 0.001
|
||||
score GB_FREEMAIL_DISPTO_NOTFREEM 0.500 0.500 0.500 0.500
|
||||
score GB_GOOGLE_OBFUR 0.750 0.750 0.750 0.750
|
||||
score GB_HASHBL_BTC 0.001 0.504 0.001 0.504
|
||||
score GB_STORAGE_GOOGLE_EMAIL 1.000 1.000 1.000 1.000
|
||||
score GB_URI_FLEEK_STO_HTM 1.000 1.000 1.000 1.000
|
||||
score GB_GOOGLE_TRANSL 0.750 0.750 0.750 0.750
|
||||
score GB_HASHBL_BTC 0.001 0.001 0.001 0.001
|
||||
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
|
||||
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
|
||||
score GOOGLE_DOC_SUSP 1.000 1.000 1.000 1.000
|
||||
score GOOGLE_DRIVE_REPLY_BAD_NTLD 1.000 1.000 1.000 1.000
|
||||
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
|
||||
score GOOG_REDIR_HTML_ONLY 1.999 1.999 1.999 1.999
|
||||
score GOOG_REDIR_NORDNS 2.600 2.900 2.600 2.900
|
||||
score GOOG_REDIR_HTML_ONLY 1.997 1.999 1.997 1.999
|
||||
score GOOG_REDIR_NORDNS 2.497 3.399 2.497 3.399
|
||||
score GOOG_STO_EMAIL_PHISH 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_HTML_PHISH 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_HTML_PHISH_MANY 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_IMG_HTML 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_IMG_NOHTML 1.000 2.500 1.000 2.500
|
||||
score GOOG_STO_NOIMG_HTML 3.000 2.949 3.000 2.949
|
||||
score GOOG_STO_IMG_HTML 2.466 2.999 2.466 2.999
|
||||
score GOOG_STO_IMG_NOHTML 1.000 1.000 1.000 1.000
|
||||
score GOOG_STO_NOIMG_HTML 2.996 2.999 2.996 2.999
|
||||
score HAS_X_NO_RELAY 1.000 1.000 1.000 1.000
|
||||
score HAS_X_OUTGOING_SPAM_STAT 0.502 0.001 0.502 0.001
|
||||
score HDRS_LCASE 0.001 0.100 0.001 0.100
|
||||
score HDRS_LCASE_IMGONLY 0.100 0.099 0.100 0.099
|
||||
score HDRS_MISSP 2.499 0.718 2.499 0.718
|
||||
score HDR_ORDER_FTSDMCXX_DIRECT 0.865 0.001 0.865 0.001
|
||||
score HAS_X_OUTGOING_SPAM_STAT 0.805 0.803 0.805 0.803
|
||||
score HDRS_MISSP 2.497 0.001 2.497 0.001
|
||||
score HDR_ORDER_FTSDMCXX_DIRECT 0.001 0.001 0.001 0.001
|
||||
score HDR_ORDER_FTSDMCXX_NORDNS 0.001 0.001 0.001 0.001
|
||||
score HEADER_FROM_DIFFERENT_DOMAINS 0.250 0.250 0.250 0.250
|
||||
score HELO_MISC_IP 0.250 0.001 0.250 0.001
|
||||
score HEADER_FROM_DIFFERENT_DOMAINS 0.249 0.250 0.249 0.250
|
||||
score HELO_NO_DOMAIN 0.001 0.001 0.001 0.001
|
||||
score HEXHASH_WORD 1.000 1.973 1.000 1.973
|
||||
score HEXHASH_WORD 1.000 1.000 1.000 1.000
|
||||
score HK_CTE_RAW 1.000 1.000 1.000 1.000
|
||||
score HK_LOTTO 1.000 0.120 1.000 0.120
|
||||
score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
|
||||
score HK_RANDOM_ENVFROM 0.387 0.999 0.387 0.999
|
||||
score HK_RANDOM_FROM 1.000 1.000 1.000 1.000
|
||||
score HK_RANDOM_REPLYTO 0.999 1.000 0.999 1.000
|
||||
score HK_LOTTO 0.998 1.000 0.998 1.000
|
||||
score HK_NAME_MR_MRS 0.998 1.000 0.998 1.000
|
||||
score HK_RANDOM_ENVFROM 0.001 0.001 0.001 0.001
|
||||
score HK_RANDOM_FROM 0.998 0.001 0.998 0.001
|
||||
score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
|
||||
score HK_RCVD_IP_MULTICAST 1.000 1.000 1.000 1.000
|
||||
score HK_SCAM 1.999 1.999 1.999 1.999
|
||||
score HK_WIN 1.000 1.000 1.000 1.000
|
||||
score HOSTED_IMG_DIRECT_MX 0.001 2.707 0.001 2.707
|
||||
score HK_SCAM 1.997 1.999 1.997 1.999
|
||||
score HK_WIN 0.998 1.000 0.998 1.000
|
||||
score HOSTED_IMG_DIRECT_MX 0.105 0.001 0.105 0.001
|
||||
score HOSTED_IMG_DQ_UNSUB 1.000 1.000 1.000 1.000
|
||||
score HOSTED_IMG_FREEM 1.000 1.000 1.000 1.000
|
||||
score HOSTED_IMG_FREEM 2.496 3.215 2.496 3.215
|
||||
score HOSTED_IMG_MULTI 1.000 1.000 1.000 1.000
|
||||
score HOSTED_IMG_MULTI_PUB_01 1.000 2.999 1.000 2.999
|
||||
score HTML_ENTITY_ASCII 2.999 2.999 2.999 2.999
|
||||
score HTML_ENTITY_ASCII_TINY 1.000 1.000 1.000 1.000
|
||||
score HTML_FONT_TINY_NORDNS 1.850 1.823 1.850 1.823
|
||||
score HTML_OFF_PAGE 1.932 1.000 1.932 1.000
|
||||
score HOSTED_IMG_MULTI_PUB_01 2.996 3.000 2.996 3.000
|
||||
score HTML_ENTITY_ASCII 1.000 1.000 1.000 1.000
|
||||
score HTML_ENTITY_ASCII_TINY 2.996 2.999 2.996 2.999
|
||||
score HTML_FONT_TINY_NORDNS 1.997 0.873 1.997 0.873
|
||||
score HTML_OFF_PAGE 0.958 0.001 0.958 0.001
|
||||
score HTML_SHRT_CMNT_OBFU_MANY 1.000 1.000 1.000 1.000
|
||||
score HTML_SINGLET_MANY 2.499 2.455 2.499 2.455
|
||||
score HTML_TAG_BALANCE_CENTER 2.899 2.799 2.899 2.799
|
||||
score HTML_TEXT_INVISIBLE_FONT 1.402 1.111 1.402 1.111
|
||||
score HTML_TEXT_INVISIBLE_STYLE 2.050 1.207 2.050 1.207
|
||||
score IMG_ONLY_FM_DOM_INFO 1.000 1.000 1.000 1.000
|
||||
score JH_SPAMMY_HEADERS 3.499 3.499 3.499 3.499
|
||||
score HTML_SINGLET_MANY 2.498 2.499 2.498 2.499
|
||||
score HTML_TEXT_INVISIBLE_FONT 1.348 1.945 1.348 1.945
|
||||
score HTML_TEXT_INVISIBLE_STYLE 1.828 0.891 1.828 0.891
|
||||
score IMG_ONLY_FM_DOM_INFO 1.705 1.000 1.705 1.000
|
||||
score JH_SPAMMY_HEADERS 3.496 3.499 3.496 3.499
|
||||
score JH_SPAMMY_PATTERN01 1.000 1.000 1.000 1.000
|
||||
score JH_SPAMMY_PATTERN02 1.000 1.000 1.000 1.000
|
||||
score KHOP_HELO_FCRDNS 0.399 0.399 0.399 0.399
|
||||
score KHOP_HELO_FCRDNS 0.399 0.001 0.399 0.001
|
||||
score LINKEDIN_IMG_NOT_RCVD_LNKN 1.000 1.000 1.000 1.000
|
||||
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
|
||||
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
|
||||
score LONG_HEX_URI 2.999 2.870 2.999 2.870
|
||||
score LONG_IMG_URI 0.568 2.472 0.568 2.472
|
||||
score LONG_INVISIBLE_TEXT 2.999 2.999 2.999 2.999
|
||||
score LONG_HEX_URI 2.996 2.888 2.996 2.888
|
||||
score LONG_IMG_URI 0.001 0.001 0.001 0.001
|
||||
score LONG_INVISIBLE_TEXT 2.996 2.530 2.996 2.530
|
||||
score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
|
||||
score LOTTO_AGENT 1.000 1.011 1.000 1.011
|
||||
score LOTTO_DEPT 0.001 0.001 0.001 0.001
|
||||
score LUCRATIVE 1.000 1.000 1.000 1.000
|
||||
score MALF_HTML_B64 1.000 1.000 1.000 1.000
|
||||
score MALWARE_NORDNS 0.937 2.591 0.937 2.591
|
||||
score MALWARE_PASSWORD 2.970 3.499 2.970 3.499
|
||||
score MALW_ATTACH 2.199 2.299 2.199 2.299
|
||||
score MANY_SPAN_IN_TEXT 2.499 2.399 2.499 2.399
|
||||
score MILLION_HUNDRED 0.595 1.738 0.595 1.738
|
||||
score MILLION_USD 1.212 0.994 1.212 0.994
|
||||
score MALWARE_NORDNS 1.538 3.210 1.538 3.210
|
||||
score MALWARE_PASSWORD 1.000 1.000 1.000 1.000
|
||||
score MALW_ATTACH 2.197 0.001 2.197 0.001
|
||||
score MILLION_HUNDRED 0.112 0.831 0.112 0.831
|
||||
score MILLION_USD 0.286 0.001 0.286 0.001
|
||||
score MIMEOLE_DIRECT_TO_MX 0.001 0.001 0.001 0.001
|
||||
score MIME_NO_TEXT 1.000 1.000 1.000 1.000
|
||||
score MIXED_AREA_CASE 1.000 1.000 1.000 1.000
|
||||
score MIXED_CENTER_CASE 1.000 1.596 1.000 1.596
|
||||
score MIXED_ES 1.799 1.999 1.799 1.999
|
||||
score MIXED_CENTER_CASE 1.000 1.000 1.000 1.000
|
||||
score MIXED_ES 1.997 1.467 1.997 1.467
|
||||
score MIXED_FONT_CASE 1.000 1.000 1.000 1.000
|
||||
score MIXED_HREF_CASE 1.000 0.487 1.000 0.487
|
||||
score MIXED_IMG_CASE 1.000 2.274 1.000 2.274
|
||||
score MIXED_HREF_CASE 1.000 1.999 1.000 1.999
|
||||
score MIXED_IMG_CASE 1.000 1.000 1.000 1.000
|
||||
score MONERO_DEADLINE 1.000 1.000 1.000 1.000
|
||||
score MONERO_EXTORT_01 1.000 1.000 1.000 1.000
|
||||
score MONERO_MALWARE 1.000 1.000 1.000 1.000
|
||||
score MONERO_PAY_ME 1.000 1.000 1.000 1.000
|
||||
score MONEY_ATM_CARD 0.001 0.001 0.001 0.001
|
||||
score MONEY_BARRISTER 0.001 0.480 0.001 0.480
|
||||
score MONEY_FORM 0.001 0.001 0.001 0.001
|
||||
score MONEY_FORM_SHORT 2.499 1.078 2.499 1.078
|
||||
score MONEY_FRAUD_3 2.573 1.185 2.573 1.185
|
||||
score MONEY_FRAUD_5 2.503 1.406 2.503 1.406
|
||||
score MONEY_FRAUD_8 1.240 2.037 1.240 2.037
|
||||
score MONEY_FREEMAIL_REPTO 2.999 1.109 2.999 1.109
|
||||
score MONEY_FROM_MISSP 1.322 0.001 1.322 0.001
|
||||
score MONEY_FORM_SHORT 0.001 0.001 0.001 0.001
|
||||
score MONEY_FRAUD_3 0.001 0.001 0.001 0.001
|
||||
score MONEY_FRAUD_5 2.896 0.001 2.896 0.001
|
||||
score MONEY_FRAUD_8 0.886 0.695 0.886 0.695
|
||||
score MONEY_FREEMAIL_REPTO 2.996 0.705 2.996 0.705
|
||||
score MONEY_FROM_41 0.544 1.000 0.544 1.000
|
||||
score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
|
||||
score MSGID_DOLLARS_URI_IMG 1.000 1.000 1.000 1.000
|
||||
score MSGID_HDR_MALF 1.000 1.000 1.000 1.000
|
||||
score MSMAIL_PRI_ABNORMAL 0.209 1.067 0.209 1.067
|
||||
score MSMAIL_PRI_ABNORMAL 0.470 0.586 0.470 0.586
|
||||
score MSM_PRIO_REPTO 1.000 1.000 1.000 1.000
|
||||
score NAME_EMAIL_DIFF 1.729 0.001 1.729 0.001
|
||||
score NA_DOLLARS 1.499 1.499 1.499 1.499
|
||||
score NEWEGG_IMG_NOT_RCVD_NEGG 1.000 1.000 1.000 1.000
|
||||
score NEW_PRODUCTS 1.000 1.000 1.000 1.000
|
||||
score NICE_REPLY_A -0.001 -0.001 -0.001 -0.001
|
||||
score NORDNS_LOW_CONTRAST 0.001 1.152 0.001 1.152
|
||||
score NICE_REPLY_A -0.001 -0.103 -0.001 -0.103
|
||||
score NO_FM_NAME_IP_HOSTN 0.001 0.001 0.001 0.001
|
||||
score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
|
||||
score NSL_RCVD_HELO_USER 0.001 2.259 0.001 2.259
|
||||
score NUMBERONLY_BITCOIN_EXP 1.999 1.999 1.999 1.999
|
||||
score NSL_RCVD_HELO_USER 0.001 0.001 0.001 0.001
|
||||
score OBFU_BITCOIN 1.000 1.000 1.000 1.000
|
||||
score OBFU_TEXT_ATTACH 0.046 0.898 0.046 0.898
|
||||
score ODD_FREEM_REPTO 2.999 2.557 2.999 2.557
|
||||
score PDS_BAD_THREAD_QP_64 0.001 0.001 0.001 0.001
|
||||
score PDS_BTC_ID 0.499 0.292 0.499 0.292
|
||||
score PDS_BTC_MSGID 0.001 0.001 0.001 0.001
|
||||
score PDS_BTC_NTLD 0.789 0.027 0.789 0.027
|
||||
score PDS_DBL_URL_TNB_RUNON 1.999 1.000 1.999 1.000
|
||||
score PDS_EMPTYSUBJ_URISHRT 1.477 1.419 1.477 1.419
|
||||
score PDS_FROM_2_EMAILS_SHRTNER 0.605 1.445 0.605 1.445
|
||||
score PDS_HELO_SPF_FAIL 0.001 1.999 0.001 1.999
|
||||
score PDS_NAKED_TO_NUMERO 1.996 1.149 1.996 1.149
|
||||
score PDS_NO_FULL_NAME_SPOOFED_URL 0.749 0.749 0.749 0.749
|
||||
score PDS_PHP_EVAL 1.000 1.499 1.000 1.499
|
||||
score PDS_RDNS_DYNAMIC_FP 0.001 0.010 0.001 0.010
|
||||
score PDS_SHORT_SPOOFED_URL 1.999 1.999 1.999 1.999
|
||||
score PDS_TINYSUBJ_URISHRT 1.499 1.356 1.499 1.356
|
||||
score OBFU_UNSUB_UL 2.297 2.200 2.297 2.200
|
||||
score ODD_FREEM_REPTO 2.996 2.799 2.996 2.799
|
||||
score PDS_BRAND_SUBJ_NAKED_TO 0.998 0.999 0.998 0.999
|
||||
score PDS_BTC_ID 0.498 0.001 0.498 0.001
|
||||
score PDS_BTC_MSGID 0.046 0.001 0.046 0.001
|
||||
score PDS_DBL_URL_TNB_RUNON 1.997 1.000 1.997 1.000
|
||||
score PDS_FRNOM_TODOM_DBL_URL 1.499 1.499 1.499 1.499
|
||||
score PDS_FRNOM_TODOM_NAKED_TO 1.498 1.499 1.498 1.499
|
||||
score PDS_FROM_NAME_TO_DOMAIN 1.997 1.999 1.997 1.999
|
||||
score PDS_HELO_SPF_FAIL 0.001 1.000 0.001 1.000
|
||||
score PDS_RDNS_DYNAMIC_FP 0.010 0.001 0.010 0.001
|
||||
score PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE 1.000 1.000 1.000 1.000
|
||||
score PDS_TONAME_EQ_TOLOCAL_VSHORT 0.999 0.999 0.999 0.999
|
||||
score PDS_TO_EQ_FROM_NAME 1.748 0.001 1.748 0.001
|
||||
score PHISH_ATTACH 2.297 0.001 2.297 0.001
|
||||
score PHISH_AZURE_CLOUDAPP 3.500 3.500 3.500 3.500
|
||||
score PHISH_FBASEAPP 1.000 1.000 1.000 1.000
|
||||
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
|
||||
score PHP_ORIG_SCRIPT 2.347 1.351 2.347 1.351
|
||||
score PHP_ORIG_SCRIPT_EVAL 1.000 2.999 1.000 2.999
|
||||
score PHP_SCRIPT 2.499 2.398 2.499 2.398
|
||||
score PHP_ORIG_SCRIPT 2.497 0.001 2.497 0.001
|
||||
score PHP_SCRIPT 2.497 2.499 2.497 2.499
|
||||
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
|
||||
score POSSIBLE_GMAIL_PHISHER 1.382 0.694 1.382 0.694
|
||||
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
|
||||
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
|
||||
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
|
||||
@ -284,18 +282,29 @@ score PUMPDUMP 1.000 1.000 1.000 1.000
|
||||
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
|
||||
score RAND_HEADER_LIST_SPOOF 1.000 1.000 1.000 1.000
|
||||
score RAND_HEADER_MANY 1.000 1.000 1.000 1.000
|
||||
score RAND_MKTG_HEADER 1.999 1.999 1.999 1.999
|
||||
score RATWARE_NO_RDNS 0.001 1.897 0.001 1.897
|
||||
score RAND_MKTG_HEADER 1.997 1.324 1.997 1.324
|
||||
score RATWARE_NO_RDNS 0.001 0.001 0.001 0.001
|
||||
score RCVD_DOTEDU_SHORT 1.000 1.000 1.000 1.000
|
||||
score RCVD_DOTEDU_SUSP_URI 1.000 1.000 1.000 1.000
|
||||
score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
|
||||
score RCVD_IN_MSPIKE_H3 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_H4 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_H5 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_WL 0.001 0.001 0.001 0.001
|
||||
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
|
||||
score RDNS_NUM_TLD_ATCHNX 1.000 1.000 1.000 1.000
|
||||
score RDNS_NUM_TLD_XM 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD 1.000 1.000 1.000 1.000
|
||||
score READY_TO_SHIP 1.000 0.001 1.000 0.001
|
||||
score REPTO_419_FRAUD 0.853 1.353 0.853 1.353
|
||||
score REPTO_419_FRAUD_AOL 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_AOL_LOOSE 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_CNS 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_GM 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_GM 2.996 1.000 2.996 1.000
|
||||
score REPTO_419_FRAUD_GM_LOOSE 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_HM 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_OL 1.000 1.000 1.000 1.000
|
||||
@ -306,86 +315,91 @@ score REPTO_419_FRAUD_YH_LOOSE 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_YJ 1.000 1.000 1.000 1.000
|
||||
score REPTO_419_FRAUD_YN 1.000 1.000 1.000 1.000
|
||||
score REPTO_INFONUMSCOM 1.000 1.000 1.000 1.000
|
||||
score SCC_BODY_SINGLE_WORD 0.001 0.001 0.001 0.001
|
||||
score SCC_CANSPAM_2 3.695 3.299 3.695 3.299
|
||||
score SCC_ISEMM_LID_1 1.000 1.000 1.000 1.000
|
||||
score SCC_ISEMM_LID_1B 1.499 1.499 1.499 1.499
|
||||
score SENDGRID_REDIR 1.499 1.068 1.499 1.068
|
||||
score SCC_ISEMM_LID_1A 1.000 0.001 1.000 0.001
|
||||
score SCC_ISEMM_LID_1B 1.498 1.499 1.498 1.499
|
||||
score SCC_SPAMMER_ADDR_2 2.675 2.799 2.675 2.799
|
||||
score SCC_SPECIAL_GUID 0.923 0.947 0.923 0.947
|
||||
score SENDGRID_REDIR 1.498 0.409 1.498 0.409
|
||||
score SENDGRID_REDIR_PHISH 1.000 1.000 1.000 1.000
|
||||
score SEO_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score SHOPIFY_IMG_NOT_RCVD_SFY 2.499 2.298 2.499 2.298
|
||||
score SHORTENER_SHORT_IMG 1.000 1.000 1.000 1.000
|
||||
score SERGIO_SUBJECT_VIAGRA01 2.195 2.814 2.195 2.814
|
||||
score SHOPIFY_IMG_NOT_RCVD_SFY 2.497 2.499 2.497 2.499
|
||||
score SHORTENER_SHORT_IMG 0.196 2.499 0.196 2.499
|
||||
score SHORT_IMG_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score SHORT_SHORTNER 1.999 1.108 1.999 1.108
|
||||
score SPOOFED_FREEMAIL 0.001 0.001 0.001 0.001
|
||||
score SPOOFED_FREEMAIL_NO_RDNS 0.001 0.001 0.001 0.001
|
||||
score SPOOFED_FREEM_REPTO 0.001 2.499 0.001 2.499
|
||||
score SPOOFED_FREEM_REPTO_CHN 0.001 1.215 0.001 1.215
|
||||
score SPOOFED_FREEMAIL_NO_RDNS 1.099 0.001 1.099 0.001
|
||||
score SPOOFED_FREEM_REPTO 0.001 0.001 0.001 0.001
|
||||
score SPOOFED_FREEM_REPTO_CHN 0.001 1.000 0.001 1.000
|
||||
score SPOOFED_FREEM_REPTO_RUS 0.001 1.000 0.001 1.000
|
||||
score SPOOF_GMAIL_MID 1.499 0.001 1.499 0.001
|
||||
score STATIC_XPRIO_OLE 0.001 1.865 0.001 1.865
|
||||
score STATIC_XPRIO_OLE 0.001 0.001 0.001 0.001
|
||||
score STOCK_TIP 1.000 1.000 1.000 1.000
|
||||
score STOX_BOUND_090909_B 1.674 0.001 1.674 0.001
|
||||
score STOX_BOUND_090909_B 0.995 1.428 0.995 1.428
|
||||
score SUBJ_BRKN_WORDNUMS 1.000 1.000 1.000 1.000
|
||||
score SUSP_UTF8_WORD_SUBJ 2.000 1.999 2.000 1.999
|
||||
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
|
||||
score SUSP_UTF8_WORD_COMBO 0.446 1.668 0.446 1.668
|
||||
score SUSP_UTF8_WORD_FROM 1.997 1.132 1.997 1.132
|
||||
score SUSP_UTF8_WORD_MANY 2.333 0.263 2.333 0.263
|
||||
score SUSP_UTF8_WORD_SUBJ 1.492 1.999 1.492 1.999
|
||||
score SYSADMIN 1.000 1.000 1.000 1.000
|
||||
score TAGSTAT_IMG_NOT_RCVD_TGST 1.000 1.000 1.000 1.000
|
||||
score TARINGANET_IMG_NOT_RCVD_TN 1.000 1.000 1.000 1.000
|
||||
score THIS_AD 2.400 1.262 2.400 1.262
|
||||
score THIS_IS_ADV_SUSP_NTLD 1.000 1.000 1.000 1.000
|
||||
score THIS_AD 0.998 0.799 0.998 0.799
|
||||
score THIS_IS_ADV_SUSP_NTLD 0.001 1.000 0.001 1.000
|
||||
score TONLINE_FAKE_DKIM 1.000 1.000 1.000 1.000
|
||||
score TONOM_EQ_TOLOC_SHRT_SHRTNER 0.001 0.001 0.001 0.001
|
||||
score TO_EQ_FM_DIRECT_MX 1.000 1.000 1.000 1.000
|
||||
score TO_EQ_FM_DIRECT_MX 0.001 0.718 0.001 0.718
|
||||
score TO_EQ_FM_DOM_HTML_IMG 3.197 0.001 3.197 0.001
|
||||
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
|
||||
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
|
||||
score TO_IN_SUBJ 0.100 0.100 0.100 0.100
|
||||
score TO_NAME_SUBJ_NO_RDNS 2.605 0.950 2.605 0.950
|
||||
score TO_NO_BRKTS_FROM_MSSP 2.499 2.499 2.499 2.499
|
||||
score TO_NO_BRKTS_HTML_IMG 1.999 1.999 1.999 1.999
|
||||
score TO_NO_BRKTS_HTML_ONLY 2.000 1.999 2.000 1.999
|
||||
score TO_NO_BRKTS_MSFT 0.001 0.546 0.001 0.546
|
||||
score TO_NO_BRKTS_NORDNS_HTML 1.999 1.370 1.999 1.370
|
||||
score TO_NO_BRKTS_PCNT 2.499 2.500 2.499 2.500
|
||||
score TVD_PH_7 2.199 2.299 2.199 2.299
|
||||
score TVD_SUBJ_APPR_LOAN 0.001 2.200 0.001 2.200
|
||||
score TO_IN_SUBJ 0.098 0.099 0.098 0.099
|
||||
score TO_NAME_SUBJ_NO_RDNS 2.658 1.000 2.658 1.000
|
||||
score TO_NO_BRKTS_FROM_MSSP 2.497 2.499 2.497 2.499
|
||||
score TO_NO_BRKTS_HTML_IMG 1.997 2.000 1.997 2.000
|
||||
score TO_NO_BRKTS_HTML_ONLY 1.997 1.999 1.997 1.999
|
||||
score TO_NO_BRKTS_MSFT 1.746 1.397 1.746 1.397
|
||||
score TO_NO_BRKTS_NORDNS_HTML 1.998 1.999 1.998 1.999
|
||||
score TO_NO_BRKTS_PCNT 2.497 2.490 2.497 2.490
|
||||
score TVD_SPACE_ENC_FM_MIME 1.336 0.001 1.336 0.001
|
||||
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
|
||||
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
|
||||
score UNDISC_FREEM 2.999 2.899 2.999 2.899
|
||||
score UNDISC_MONEY 2.748 1.979 2.748 1.979
|
||||
score UNICODE_OBFU_ASC 1.000 2.499 1.000 2.499
|
||||
score UNDISC_FREEM 3.096 2.699 3.096 2.699
|
||||
score UNDISC_MONEY 3.196 3.100 3.196 3.100
|
||||
score UNICODE_OBFU_ASC 2.497 2.499 2.497 2.499
|
||||
score UNICODE_OBFU_ZW 1.000 1.000 1.000 1.000
|
||||
score UNSUB_GOOG_FORM 1.000 1.000 1.000 1.000
|
||||
score URI_ADOBESPARK 1.000 1.000 1.000 1.000
|
||||
score URI_AZURE_CLOUDAPP 1.000 1.000 1.000 1.000
|
||||
score URI_AZURE_CLOUDAPP 2.996 1.000 2.996 1.000
|
||||
score URI_DASHGOVEDU 1.000 1.000 1.000 1.000
|
||||
score URI_DATA 1.000 1.000 1.000 1.000
|
||||
score URI_DOTEDU 1.000 1.678 1.000 1.678
|
||||
score URI_DOTEDU 1.997 1.999 1.997 1.999
|
||||
score URI_DOTEDU_ENTITY 1.000 1.000 1.000 1.000
|
||||
score URI_FIREBASEAPP 1.000 1.000 1.000 1.000
|
||||
score URI_GOOGLE_PROXY 1.799 1.599 1.799 1.599
|
||||
score URI_FIREBASEAPP 2.996 1.000 2.996 1.000
|
||||
score URI_GOOGLE_PROXY 2.696 2.799 2.696 2.799
|
||||
score URI_GOOG_STO_SPAMMY 3.000 3.000 3.000 3.000
|
||||
score URI_HEX_IP 1.000 1.000 1.000 1.000
|
||||
score URI_HEX_IP 2.497 1.000 2.497 1.000
|
||||
score URI_IMG_WP_REDIR 1.000 1.000 1.000 1.000
|
||||
score URI_LONG_REPEAT 1.000 1.000 1.000 1.000
|
||||
score URI_ONLY_MSGID_MALF 1.000 1.000 1.000 1.000
|
||||
score URI_OPTOUT_3LD 1.000 2.000 1.000 2.000
|
||||
score URI_PHISH 3.999 3.627 3.999 3.627
|
||||
score URI_PHP_REDIR 1.000 1.000 1.000 1.000
|
||||
score URI_TRY_3LD 1.999 1.667 1.999 1.667
|
||||
score URI_ONLY_MSGID_MALF 1.974 1.325 1.974 1.325
|
||||
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
|
||||
score URI_PHISH 3.995 3.999 3.995 3.999
|
||||
score URI_PHP_REDIR 3.496 1.000 3.496 1.000
|
||||
score URI_TRY_3LD 1.997 2.000 1.997 2.000
|
||||
score URI_TRY_USME 1.000 1.000 1.000 1.000
|
||||
score URI_WPADMIN 0.001 2.299 0.001 2.299
|
||||
score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
|
||||
score URI_WP_HACKED 3.500 3.499 3.500 3.499
|
||||
score URI_WP_HACKED_2 2.499 2.499 2.499 2.499
|
||||
score USB_DRIVES 1.000 1.000 1.000 1.000
|
||||
score VFY_ACCT_NORDNS 2.622 2.999 2.622 2.999
|
||||
score URI_WPADMIN 2.397 2.299 2.397 2.299
|
||||
score URI_WP_DIRINDEX 3.496 1.000 3.496 1.000
|
||||
score URI_WP_HACKED 2.131 1.627 2.131 1.627
|
||||
score URI_WP_HACKED_2 2.497 2.499 2.497 2.499
|
||||
score USB_DRIVES 1.997 1.000 1.997 1.000
|
||||
score VFY_ACCT_NORDNS 0.001 0.001 0.001 0.001
|
||||
score VPS_NO_NTLD 1.000 1.000 1.000 1.000
|
||||
score WALMART_IMG_NOT_RCVD_WAL 1.000 1.000 1.000 1.000
|
||||
score WORD_INVIS 1.576 0.504 1.576 0.504
|
||||
score WORD_INVIS_MANY 3.000 2.999 3.000 2.999
|
||||
score XFER_LOTSA_MONEY 0.541 0.498 0.541 0.498
|
||||
score XM_DIGITS_ONLY 1.000 1.000 1.000 1.000
|
||||
score XM_RANDOM 1.352 2.302 1.352 2.302
|
||||
score XM_RECPTID 2.999 1.602 2.999 1.602
|
||||
score XPRIO 0.397 0.001 0.397 0.001
|
||||
score WORD_INVIS 1.581 2.070 1.581 2.070
|
||||
score WORD_INVIS_MANY 2.996 2.999 2.996 2.999
|
||||
score XM_DIGITS_ONLY 1.704 1.655 1.704 1.655
|
||||
score XM_RANDOM 1.117 0.001 1.117 0.001
|
||||
score XPRIO 1.551 0.001 1.551 0.001
|
||||
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000
|
||||
score XPRIO_URL_SHORTNER 0.523 0.999 0.523 0.999
|
||||
score YOU_INHERIT 0.926 1.345 0.926 1.345
|
||||
score YOU_INHERIT 2.297 0.001 2.297 0.001
|
||||
|
||||
Loading…
Reference in New Issue
Block a user