Mail::SpamAssassin::Plugin::Phishing − check uris against phishing feed
loadplugin
Mail::SpamAssassin::Plugin::Phishing
ifplugin Mail::SpamAssassin::Plugin::Phishing
phishing_openphish_feed
/etc/mail/spamassassin/openphish−feed.txt
phishing_phishtank_feed
/etc/mail/spamassassin/phishtank−feed.csv
body URI_PHISHING eval:check_phishing()
describe URI_PHISHING Url match phishing in feed
endif
This plugin finds uris used in phishing campaigns detected by OpenPhish or PhishTank feeds.
The Openphish free feed is updated every 6 hours and can be downloaded from https://openphish.com/feed.txt. The Premium Openphish feed is not currently supported.
The PhishTank free feed is updated every 1 hours and can be downloaded from http://data.phishtank.com/data/online−valid.csv. To avoid download limits a registration is required.