svn commit: r1928631 - spamassassin/trunk/rulesrc/sandbox/jhardin

Author: jhardin
Date: Sat Sep 20 01:13:44 2025
New Revision: 1928631

Log:
Add a couple of redirectors observed in phishing

Modified:
   spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf	Sat Sep 20 01:13:09 2025	(r1928630)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf	Sat Sep 20 01:13:44 2025	(r1928631)
@@ -4497,4 +4497,9 @@ tflags     PP_CROSSTALK_GOOG_MSFT      p
 # likely useless by itself, but it might help metas
 header     __PP_GOOGLE_MAESTRO         EnvelopeFrom =~ /\@maestro\.bounces\.google\.com$/
 
+# observed in phishing
+redirector_pattern                     m;^https?://secure\.adnxs\.com/.*[?&]redir=(.+);
+redirector_pattern                     m;^https?://shopper\.digidip\.net/.*[?&]url=(.+);
+
+