sa-updates/25_url_shortener.cf

   1 # SpamAssassin - URL shortener rules
   2 #
   3 # Please don't modify this file as your changes will be overwritten with
   4 # the next update. Use /etc/mail/spamassassin/local.cf instead.
   5 # See 'perldoc Mail::SpamAssassin::Conf' for details.
   6 #
   7 # <@LICENSE>
   8 # Licensed to the Apache Software Foundation (ASF) under one or more
   9 # contributor license agreements.  See the NOTICE file distributed with
  10 # this work for additional information regarding copyright ownership.
  11 # The ASF licenses this file to you under the Apache License, Version 2.0
  12 # (the "License"); you may not use this file except in compliance with
  13 # the License.  You may obtain a copy of the License at:
  14 #
  15 #     http://www.apache.org/licenses/LICENSE-2.0
  16 #
  17 # Unless required by applicable law or agreed to in writing, software
  18 # distributed under the License is distributed on an "AS IS" BASIS,
  19 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  20 # See the License for the specific language governing permissions and
  21 # limitations under the License.
  22 # </@LICENSE>
  23 #
  24 ###########################################################################
  25
  26 ###
  27 ### Note that this file contains two separate lists, url_shortener and a
  28 ### backup regex generated from it.  Both must updated and kept in sync.
  29 ###
  30 ### __URL_SHORTENER will always by set by either the plugin or regex
  31 ###
  32
  33 # SpamAssassin 4.0 version required
  34 if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)
  35
  36 body __URL_SHORTENER eval:short_url()
  37
  38 body URL_SHORTENER_CHAINED     eval:short_url_chained()
  39 describe URL_SHORTENER_CHAINED Message contains shortened URL chained to other shorteners
  40 tflags URL_SHORTENER_CHAINED   net
  41 score URL_SHORTENER_CHAINED    0.01
  42
  43 uri URL_SHORTENER_DISABLED      m,^https://(?:bitly\.com/a/blocked|tinyurl\.com/app/nospam),
  44 describe URL_SHORTENER_DISABLED Message contains shortened URL that has been disabled due to abuse
  45 tflags URL_SHORTENER_DISABLED   net
  46 score URL_SHORTENER_DISABLED    2
  47
  48 #
  49 # Please only add entries that you manually verified as actual working
  50 # redirectors that can have abusable custom URLs.  Adding non-abusable
  51 # services only generates unnecessary HTTP requests.
  52 #
  53 # After any changes, also update __URL_SHORTENER regex at end of file.
  54 #
  55
  56 # generic list of likely active services - cleaned up 25.05.2022
  57 url_shortener .ftn.app
  58 url_shortener .page.link
  59 url_shortener .short.gy
  60 url_shortener .shortz.me
  61 url_shortener 0rz.tw
  62 url_shortener 4sq.com
  63 url_shortener 4url.cc
  64 url_shortener afly.co
  65 url_shortener ai6.net
  66 url_shortener amzn.com
  67 url_shortener amzn.to
  68 url_shortener b.link
  69 url_shortener b23.ru
  70 url_shortener binged.it
  71 url_shortener bit.do
  72 url_shortener bit.ly
  73 url_shortener bitly.com
  74 url_shortener bizj.us
  75 url_shortener chilp.it
  76 url_shortener conta.cc
  77 url_shortener clck.ru
  78 url_shortener crks.me
  79 url_shortener cutt.ly
  80 url_shortener cutwin.biz
  81 url_shortener dai.ly
  82 url_shortener db.tt
  83 url_shortener disq.us
  84 url_shortener dlvr.it
  85 url_shortener doi.org
  86 url_shortener doiop.com
  87 url_shortener eepurl.com
  88 url_shortener fb.me
  89 url_shortener fire.to
  90 url_shortener firsturl.de
  91 url_shortener firsturl.net
  92 url_shortener flic.kr
  93 url_shortener gdurl.com
  94 url_shortener go.ly
  95 url_shortener goo.gl
  96 url_shortener goolnk.com
  97 url_shortener gplinks.in
  98 url_shortener guest.link
  99 url_shortener hellotxt.com
 100 url_shortener hop.kz
 101 url_shortener hotshorturl.com
 102 url_shortener hub.am
 103 url_shortener huff.to
 104 url_shortener hurl.it
 105 url_shortener hyperurl.co
 106 url_shortener inx.lv
 107 url_shortener is.gd
 108 url_shortener it2.in
 109 url_shortener j.mp
 110 url_shortener kore.us
 111 url_shortener kurl.no
 112 url_shortener l.bestsellers.to
 113 url_shortener lnk.sk
 114 url_shortener lnkd.in
 115 url_shortener lnkiy.in
 116 url_shortener lru.jp
 117 url_shortener mrte.ch
 118 url_shortener n9.cl
 119 url_shortener ndurl.com
 120 url_shortener onion.com
 121 url_shortener ouo.io
 122 url_shortener ow.ly
 123 url_shortener owl.li
 124 url_shortener pduda.mobi
 125 url_shortener rb.gy
 126 url_shortener redir.ec
 127 url_shortener rotf.lol
 128 url_shortener s.apache.org
 129 url_shortener s.free.fr
 130 url_shortener s.id
 131 url_shortener shar.es
 132 url_shortener shorl.com
 133 url_shortener shortn.me
 134 url_shortener shorturl.at
 135 url_shortener simurl.net
 136 url_shortener slidesha.re
 137 url_shortener smarturl.it
 138 url_shortener smfu.in
 139 url_shortener snip.ly
 140 url_shortener snkr.me
 141 url_shortener stpmvt.com
 142 url_shortener t.co
 143 url_shortener t.ly
 144 url_shortener tcrn.ch
 145 url_shortener tgr.ph
 146 url_shortener tiny.cc
 147 url_shortener tiny.one
 148 url_shortener tiny.pl
 149 url_shortener tinylink.in
 150 url_shortener tinyurl.com
 151 url_shortener to.ly
 152 url_shortener trib.al
 153 url_shortener twixar.me
 154 url_shortener u.nu
 155 url_shortener u.to
 156 url_shortener url.ie
 157 url_shortener urlcut.com
 158 url_shortener urlday.cc
 159 url_shortener urls.im
 160 url_shortener urlz.at
 161 url_shortener urlzs.com
 162 url_shortener utfg.sk
 163 url_shortener wow.link
 164 url_shortener wp.me
 165 url_shortener x.co
 166 url_shortener x.hypem.com
 167 url_shortener xurl.es
 168 url_shortener yhoo.it
 169 url_shortener youtu.be
 170 url_shortener z23.ru
 171 url_shortener zurl.ws
 172
 173 # www.shrunken.com - list validated 25.05.2022
 174 url_shortener www.shrunken.com
 175 url_shortener 0.gp
 176 url_shortener 2.gp
 177 url_shortener 2.ly
 178 url_shortener 3.ly
 179 url_shortener 4.gp
 180 url_shortener 4.ly
 181 url_shortener 5.gp
 182 url_shortener 6.gp
 183 url_shortener 6.ly
 184 url_shortener 7.ly
 185 url_shortener 8.ly
 186 url_shortener 9.ly
 187 url_shortener g.asia
 188 url_shortener p.asia
 189 url_shortener ur3.us
 190
 191 # shorturl.com - list validated 25.05.2022
 192 url_shortener alturl.com
 193 url_shortener .1sta.com
 194 url_shortener .24ex.com
 195 url_shortener .2fear.com
 196 url_shortener .2fortune.com
 197 url_shortener .2freedom.com
 198 url_shortener .2hell.com
 199 url_shortener .2savvy.com
 200 url_shortener .2truth.com
 201 url_shortener .2tunes.com
 202 url_shortener .2ya.com
 203 url_shortener .alturl.com
 204 url_shortener .antiblog.com
 205 url_shortener .bigbig.com
 206 url_shortener .dealtap.com
 207 url_shortener .ebored.com
 208 url_shortener .echoz.com
 209 url_shortener .filetap.com
 210 url_shortener .funurl.com
 211 url_shortener .headplug.com
 212 url_shortener .hereweb.com
 213 url_shortener .hitart.com
 214 url_shortener .mirrorz.com
 215 url_shortener .mp3update.com
 216 url_shortener .shorturl.com
 217 url_shortener .spyw.com
 218 url_shortener .vze.com
 219
 220 # iscool.net - list validated 25.05.2022
 221 url_shortener .arecool.net
 222 url_shortener .iscool.net
 223 url_shortener .isfun.net
 224 url_shortener .tux.nu
 225
 226 # kisa.link - list validated 25.05.2022
 227 url_shortener kisa.link
 228 url_shortener www.kisa.link
 229 url_shortener bul.tc
 230 url_shortener cy.tc
 231 url_shortener fn.tc
 232 url_shortener ftp.tc
 233 url_shortener gr.tc
 234 url_shortener hbr.tc
 235 url_shortener heg.tc
 236 url_shortener ins.tc
 237 url_shortener ko.tc
 238 url_shortener kod.tc
 239 url_shortener lol.tc
 240 url_shortener m2.tc
 241 url_shortener ml.tc
 242 url_shortener mmo.tc
 243 url_shortener oy.tc
 244 url_shortener pc.tc
 245 url_shortener pubg.tc
 246 url_shortener pvp.tc
 247 url_shortener sro.tc
 248 url_shortener tek.link
 249 url_shortener tw.tc
 250
 251 # grabify.link - list validated 25.05.2022
 252 url_shortener grabify.link
 253 url_shortener catsnthing.com
 254 url_shortener catsnthings.fun
 255 url_shortener cheapcinema.club
 256 url_shortener dateing.club
 257 url_shortener fortnight.space
 258 url_shortener fortnitechat.site
 259 url_shortener freegiftcards.co
 260 url_shortener gaming-at-my.best
 261 url_shortener gamingfun.me
 262 url_shortener headshot.monster
 263 url_shortener imageshare.best
 264 url_shortener joinmy.site
 265 url_shortener leancoding.co
 266 url_shortener locations.quest
 267 url_shortener lovebird.guru
 268 url_shortener myprivate.pics
 269 url_shortener noodshare.pics
 270 url_shortener partpicker.shop
 271 url_shortener progaming.monster
 272 url_shortener screenshare.pics
 273 url_shortener screenshot.best
 274 url_shortener shhh.lol
 275 url_shortener shrekis.life
 276 url_shortener sportshub.bar
 277 url_shortener stopify.co
 278 url_shortener trulove.guru
 279 url_shortener yourmy.monster
 280
 281 # additional url shorteners 2023
 282 url_shortener .app.link
 283 url_shortener bitly.ws
 284 url_shortener han.gl
 285 url_shortener lukora.cz
 286 url_shortener shorturl.asia
 287 url_shortener m2.do
 288
 289 # GET method required for some services, keep the same services in url_shortener also
 290 if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_get)
 291 url_shortener_get bit.ly
 292 endif
 293
 294 endif  # has_short_url_redir
 295
 296
 297 ###
 298 ### Use a regex if DecodeShortURLs plugin is not loaded
 299 ###
 300
 301 if !can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)
 302
 303 ## Generate __URL_SHORTENER with this command, to keep it in sync with url_shortener list:
 304 ##
 305 ## perl -pe 'while (<>) {/^\s*url_shortener\s+(\S+)/ or next;$s=quotemeta($1);$s=~s/^\\./\\w+\\./;push @a,$s} print "uri __URL_SHORTENER m,^https?://(?:".join("|",@a).")/,i\n"' < 25_url_shortener.cf
 306 ##
 307
 308 uri __URL_SHORTENER m,^https?://(?:\w+\.ftn\.app|\w+\.page\.link|\w+\.short\.gy|\w+\.shortz\.me|0rz\.tw|4sq\.com|4url\.cc|afly\.co|ai6\.net|amzn\.com|amzn\.to|b\.link|b23\.ru|binged\.it|bit\.do|bit\.ly|bitly\.com|bizj\.us|chilp\.it|conta\.cc|crks\.me|cutt\.ly|cutwin\.biz|dai\.ly|db\.tt|disq\.us|dlvr\.it|doi\.org|doiop\.com|eepurl\.com|fb\.me|fire\.to|firsturl\.de|firsturl\.net|flic\.kr|gdurl\.com|go\.ly|goo\.gl|goolnk\.com|gplinks\.in|guest\.link|hellotxt\.com|hop\.kz|hotshorturl\.com|hub\.am|huff\.to|hurl\.it|hyperurl\.co|inx\.lv|is\.gd|it2\.in|j\.mp|kore\.us|kurl\.no|l\.bestsellers\.to|lnk\.sk|lnkd\.in|lnkiy\.in|lru\.jp|mrte\.ch|n9\.cl|ndurl\.com|onion\.com|ouo\.io|ow\.ly|owl\.li|pduda\.mobi|rb\.gy|redir\.ec|rotf\.lol|s\.apache\.org|s\.free\.fr|s\.id|shar\.es|shorl\.com|shortn\.me|shorturl\.at|simurl\.net|slidesha\.re|smarturl\.it|smfu\.in|snip\.ly|snkr\.me|stpmvt\.com|t\.co|t\.ly|tcrn\.ch|tgr\.ph|tiny\.cc|tiny\.one|tiny\.pl|tinylink\.in|tinyurl\.com|to\.ly|trib\.al|twixar\.me|u\.nu|u\.to|url\.ie|urlcut\.com|urlday\.cc|urls\.im|urlz\.at|urlzs\.com|utfg\.sk|wow\.link|wp\.me|x\.co|x\.hypem\.com|xurl\.es|yhoo\.it|youtu\.be|z23\.ru|zurl\.ws|www\.shrunken\.com|0\.gp|2\.gp|2\.ly|3\.ly|4\.gp|4\.ly|5\.gp|6\.gp|6\.ly|7\.ly|8\.ly|9\.ly|g\.asia|p\.asia|ur3\.us|alturl\.com|\w+\.1sta\.com|\w+\.24ex\.com|\w+\.2fear\.com|\w+\.2fortune\.com|\w+\.2freedom\.com|\w+\.2hell\.com|\w+\.2savvy\.com|\w+\.2truth\.com|\w+\.2tunes\.com|\w+\.2ya\.com|\w+\.alturl\.com|\w+\.antiblog\.com|\w+\.bigbig\.com|\w+\.dealtap\.com|\w+\.ebored\.com|\w+\.echoz\.com|\w+\.filetap\.com|\w+\.funurl\.com|\w+\.headplug\.com|\w+\.hereweb\.com|\w+\.hitart\.com|\w+\.mirrorz\.com|\w+\.mp3update\.com|\w+\.shorturl\.com|\w+\.spyw\.com|\w+\.vze\.com|\w+\.arecool\.net|\w+\.iscool\.net|\w+\.isfun\.net|\w+\.tux\.nu|kisa\.link|www\.kisa\.link|bul\.tc|cy\.tc|fn\.tc|ftp\.tc|gr\.tc|hbr\.tc|heg\.tc|ins\.tc|ko\.tc|kod\.tc|lol\.tc|m2\.tc|ml\.tc|mmo\.tc|oy\.tc|pc\.tc|pubg\.tc|pvp\.tc|sro\.tc|tek\.link|tw\.tc|grabify\.link|catsnthing\.com|catsnthings\.fun|cheapcinema\.club|dateing\.club|fortnight\.space|fortnitechat\.site|freegiftcards\.co|gaming\-at\-my\.best|gamingfun\.me|headshot\.monster|imageshare\.best|joinmy\.site|leancoding\.co|locations\.quest|lovebird\.guru|myprivate\.pics|noodshare\.pics|partpicker\.shop|progaming\.monster|screenshare\.pics|screenshot\.best|shhh\.lol|shrekis\.life|sportshub\.bar|stopify\.co|trulove\.guru|yourmy\.monster|\w+\.app\.link|bitly\.ws|han\.gl|lukora\.cz|shorturl\.asia|m2\.do)/,i
 309
 310
 311 endif
 312