Re: [Assp-user] regex to catch ebay phishing

[Wim Borghs]

2007/1/24, Wim Borghs <[EMAIL PROTECTED]>:

I'm trying to construct a good regex to catch some ebay phishing
What I have now is:
<a\s+href\s*=\s*"http://(?![^/]+ebay)[^>]+>(\s*<(?!/a)[^>]+>\s*){0,3}<img\s+[^>]*src\s*=\s*"?http://pics.ebaystatic.com/


suggestions anyone?

Maybe I should include what this is supposed to catch (then again it may not
pass some spamfilters   ;-) ):
<a href="
http://www.bethel-hattem.nl/jeugd/_derived/signin.ebay.comwseBayISAPI.dllSignIn&amp;.dllSignIn&amp;co_partnerIdVisitor=.html";
border="0"><span style="text-decoration: none;"><img id="_x0000_i1042" src="
http://pics.ebaystatic.com/aw/pics/buttons/btnRespondNow.gif"; alt="Respond
Now" border="0" height="32" width="120"></span></a>

<a href="http://www.guysen.tv/.q/www.eBay.com/SignIn/index.php";><img src="
http://pics.ebaystatic.com/aw/pics/email/message/btnRespondNow.gif";
border="0" alt="Respond Now"></a>

And it should not catch legitimate eBay messages...

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user