Mail::SpamAssassin::Plugin::Phishing(3)    User Contributed Perl Documentation


NAME
       Mail::SpamAssassin::Plugin::Phishing - check uris against phishing feed

SYNOPSIS
         loadplugin Mail::SpamAssassin::Plugin::Phishing

         ifplugin Mail::SpamAssassin::Plugin::Phishing
           phishing_openphish_feed /etc/mail/spamassassin/openphish-feed.txt
           phishing_phishtank_feed /etc/mail/spamassassin/phishtank-feed.csv
           phishing_phishstats_feed /etc/mail/spamassassin/phishstats-feed.csv
           body     URI_PHISHING      eval:check_phishing()
           describe URI_PHISHING      Url match phishing in feed
         endif

DESCRIPTION
       This plugin finds uris used in phishing campaigns detected by
       OpenPhish, PhishTank or PhishStats feeds.

       The Openphish free feed is updated every 6 hours and can be downloaded
       from https://openphish.com/feed.txt.

       The PhishTank free feed is updated every 1 hours and can be downloaded
       from http://data.phishtank.com/data/online-valid.csv.  To avoid
       download limits a registration is required.

       The PhishStats feed is updated every 90 minutes and can be downloaded
       from https://phishstats.info/phish_score.csv.

ADMIN PREFERENCES
       The following options can be used in site-wide ("local.cf")
       configuration files to customize how the module handles phishing uris

       phishing_openphish_feed
           Absolute path of the downloaded OpenPhish datafeed.

       phishing_phishtank_feed
           Absolute path of the downloaded PhishTank datafeed.

       phishing_uri_noparam ( 0 | 1 ) (default: 0)
           If this option is set uri parameters will not be take into
           consideration when parsing the phishing uris datafeed.  If this
           option is enabled and the url without parameters is "generic" (like
           https://www.kisa.link/url_redirector.php?url=...) the url will be
           skipped.

       phishing_phishstats_feed
           Absolute path of the downloaded PhishStats datafeed.

       phishing_phishstats_minscore ( 0 - 10 ) (default: 6)
           Minimum score to take into consideration for phishing uris
           downloaded from PhishStats datafeed.

perl v5.38.0                      2023-07-26
                                       Mail::SpamAssassin::Plugin::Phishing(3)