Scroll to navigation

Mail::SpamAssassin::Plugin::Phishing(3pm) User Contributed Perl Documentation Mail::SpamAssassin::Plugin::Phishing(3pm)


Mail::SpamAssassin::Plugin::Phishing - check uris against phishing feed


  loadplugin Mail::SpamAssassin::Plugin::Phishing

  ifplugin Mail::SpamAssassin::Plugin::Phishing
    phishing_openphish_feed /etc/mail/spamassassin/openphish-feed.txt
    phishing_phishtank_feed /etc/mail/spamassassin/phishtank-feed.csv
    body     URI_PHISHING      eval:check_phishing()
    describe URI_PHISHING      Url match phishing in feed


This plugin finds uris used in phishing campaigns detected by OpenPhish or PhishTank feeds.

The Openphish free feed is updated every 6 hours and can be downloaded from The Premium Openphish feed is not currently supported.

The PhishTank free feed is updated every 1 hours and can be downloaded from To avoid download limits a registration is required.


The following options can be used in site-wide ("") configuration files to customize how the module handles phishing uris
Absolute path of the downloaded OpenPhish datafeed.
Absolute path of the downloaded PhishTank datafeed.
phishing_uri_noparam ( 0 | 1 ) (default: 0)
If this option is set uri parameters will not be take into consideration when parsing the phishing uris datafeed. If this option is enabled and the url without parameters is "generic" (like the url will be skipped.
2020-08-03 perl v5.30.3