svn commit: r1931241 - spamassassin/trunk/rulesrc/sandbox/jhardin

[email protected]
Newsgroups gmane.mail.spam.spamassassin.cvs
Message-ID <176816408708.944010.11332817007104356415@svn02-us-east.apache.org>
Author: jhardin
Date: Sun Jan 11 20:41:26 2026
New Revision: 1931241

Log:
Add focused rule for Amazon Prime phishing via Google Draw

Modified:
   spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf	Sun Jan 11 20:24:39 2026	(r1931240)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf	Sun Jan 11 20:41:26 2026	(r1931241)
@@ -4137,12 +4137,17 @@ meta       ADULT_DATING_COMPANY        _
 score      ADULT_DATING_COMPANY        10.000	# limit
 tflags     ADULT_DATING_COMPANY        publish
 
+body       __AMAZON_PRIME_MEMBERSHIP   /\bYour (?:Amazon )?Prime Membership\b/
 
 body       CHINA_MANUFACTURER          /\bWe are China located manufacture/i
 score      CHINA_MANUFACTURER          2.500	# limit
 
 meta       POSSIBLE_AMAZON_PHISH_01    (__FROM_NAME_AMAZONCOM && __NAME_EMAIL_DIFF)
 meta       POSSIBLE_AMAZON_PHISH_02    (__FROM_NAME_AMAZONCOM && !__HDR_RCVD_AMAZON && !__HDR_RCVD_AMAZON_HELO)
+meta       POSSIBLE_AMAZON_PHISH_03    (__AMAZON_PRIME_MEMBERSHIP && __URI_GOOGDRAWPREVIEW)
+describe   POSSIBLE_AMAZON_PHISH_03    Amazon Prime phishing via Google Draw
+score      POSSIBLE_AMAZON_PHISH_03    3.500	# limit
+tflags     POSSIBLE_AMAZON_PHISH_03    publish
 
 meta       POSSIBLE_EBAY_PHISH_01      (__FROM_NAME_EBAYCOM && __NAME_EMAIL_DIFF)
 meta       POSSIBLE_EBAY_PHISH_02      (__FROM_NAME_EBAYCOM && !__HDR_RCVD_EBAY)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.