Does anyone have a copy of the netflix phishing that they could forward to me at amitch...@isipp.com, including the body of it?
TIA! Anne > On Feb 2, 2021, at 1:04 AM, Benny Pedersen <m...@junc.eu> wrote: > > On 2021-02-02 03:25, Kevin A. McGrail wrote: >> Since it's already hitting 8.9, why do more? > > too much phishing in winter half year to my taste > > i just google report urls now, and still add to phishtank, hopefully phishers > get a real life > > you can safely add 1.5 more to KAM_SENDGRID, if it continues i do it localy > > no need to argue http://multirbl.valli.org/lookup/149.72.91.245.html :-) > >> On 1/19/2021 9:07 PM, Benny Pedersen wrote: >>> i have added urls to phishtank >>> if its could be added rules to spamassassin to detect it better i can send >>> sample to sa pmc members >>> X-Spam-Status: Yes, score=8.9, required=5.0, Autolearn=no >>> autolearn_force=no, >>> LastExt=149.72.91.245 >>> X-Spam-Rules_score: >>> DATE_IN_PAST_03_06=1.076,DKIM_SIGNED=-0.1,DKIM_VALID=-0.1, >>> DKIM_VALID_AU=-0.1,DKIM_VALID_EF=-0.1,HTML_IMAGE_ONLY_32=0.001, >>> HTML_MESSAGE=0.1,KAM_NUMSUBJECT=0.5,KAM_REALLYHUGEIMGSRC=0.5, >>> KAM_SENDGRID=1.5,RCVD_IN_BRUKALAI_BLACK=2,SENDGRID_REDIR=0.932, >>> SPF_HELO_NONE=3,SPF_PASS=-0.1,TXREP=-0.187,UNPARSEABLE_RELAY=0.001 >>> mx relay is sendgrid, but enveloppe sender is not sendgrid >>> https://phishtank.com/phish_detail.php?phish_id=6927641 >>> https://phishtank.com/phish_detail.php?phish_id=6927893