Axb skrev den 2022-08-25 17:48:
On 8/25/22 16:10, Benny Pedersen wrote:
https://phishtank.com/phish_detail.php?phish_id=7691984
https://phishtank.com/phish_detail.php?phish_id=7680788
why is page.link have subdomain tjeking ?, is it marked at sa as a
redirector ?
tjeking?
i consider block all page.link, whois says its hosted by google :/
go ahead..
report it to google phish reports helps notning
pmc members can get the whole spample if needed
SURBL lists based on Phishtank data... no need for further action
# dont waste cyrkles
ifplugin Mail::SpamAssassin::Plugin::URIDNSBL
uridnsbl_skip_domain page.link
uridnsbl_skip_domain .page.link
endif # Mail::SpamAssassin::Plugin::URIDNSBL
# firebase have no abuse reporting, so blocking localy
uri FIREBASE_PAGE_LINK /page\.link/
describe FIREBASE_PAGE_LINK http://random.page.link :)
score FIREBASE_PAGE_LINK 50
# dont learn in awl
ifplugin Mail::SpamAssassin::Plugin::AWL
tflags FIREBASE_PAGE_LINK noawl
endif # Mail::SpamAssassin::Plugin::AWL
hope it works, can i make it better ?
i still have coffee left :-)
