You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@spamassassin.apache.org by jh...@apache.org on 2021/01/29 16:50:17 UTC

svn commit: r1886023 - /spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_azurephish.cf

Author: jhardin
Date: Fri Jan 29 16:50:17 2021
New Revision: 1886023

URL: http://svn.apache.org/viewvc?rev=1886023&view=rev
Log:
Add new generated ruleset for evaluation

Added:
    spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_azurephish.cf

Added: spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_azurephish.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_azurephish.cf?rev=1886023&view=auto
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_azurephish.cf (added)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_azurephish.cf Fri Jan 29 16:50:17 2021
@@ -0,0 +1,10 @@
+
+# Azure-hosted web applications referred to in phishing spams, generated at Fri Jan 29 08:44:20 2021
+
+uri PHISH_AZURE_CLOUDAPP m;^https?://(?=[^/]+\.cloudapp\.azure\.com)(?:(?:billetedecalle\.northeurope|comprobantefiscale\.eastus|multa(?:detrafico\.eastus|s\.southcentralus)|notificadosburofax\.eastus|penadetransitomulta\.eastus))\.cloudapp\.azure\.com/;i
+
+describe PHISH_AZURE_CLOUDAPP Link to known phishing web application
+score PHISH_AZURE_CLOUDAPP 3.000
+#tflags PHISH_AZURE_CLOUDAPP publish
+
+