NAME¶

Mail::SpamAssassin::Plugin::Phishing - check uris against phishing feed

SYNOPSIS¶

  loadplugin Mail::SpamAssassin::Plugin::Phishing
  ifplugin Mail::SpamAssassin::Plugin::Phishing
    phishing_openphish_feed /etc/mail/spamassassin/openphish-feed.txt
    phishing_phishtank_feed /etc/mail/spamassassin/phishtank-feed.csv
    body     URI_PHISHING      eval:check_phishing()
    describe URI_PHISHING      Url match phishing in feed
  endif

DESCRIPTION¶

This plugin finds uris used in phishing campaigns detected by OpenPhish or PhishTank feeds.

The Openphish free feed is updated every 6 hours and can be downloaded from https://openphish.com/feed.txt. The Premium Openphish feed is not currently supported.

The PhishTank free feed is updated every 1 hours and can be downloaded from http://data.phishtank.com/data/online-valid.csv. To avoid download limits a registration is required.