http://bugzilla.spamassassin.org/show_bug.cgi?id=4147





------- Additional Comments From [EMAIL PROTECTED]  2005-04-29 01:40 -------
#nasty little piranha, bad phish!
#       new spammer trick, overlay an unterminated href with a second one, then 
terminate
#       only the second one.  OE shows the text for the first link and goes to 
the second link!

full            LW_PHISH_5              m'<a\s+[\s\w\=\.]*href=\"https://[^>]
{0,300}><table><tr><td><a\s+[\s\w\=\.]*href=\"(?:http:|https://\d)'is
score           LW_PHISH_5              2
describe        LW_PHISH_5              unterminated secure href

In case the rule text wraps badly, there are no spaces in it.
I don't know that I have any results for the above rule, but I'm pretty sure 
that I validated that it worked when I wrote it.
I also haven't noticed if this has hit recently; it may be stale.  Most phish 
score pretty high here these days, so I usually don't look at them.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to