OwlCyberSecurity - MANAGER

Edit File: 25_url_shortener.cf

# SpamAssassin - URL shortener rules
#
# Please don't modify this file as your changes will be overwritten with
# the next update. Use /etc/mail/spamassassin/local.cf instead.
# See 'perldoc Mail::SpamAssassin::Conf' for details.
#
# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at:
# 
#     http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>
#
###########################################################################

###
### Note that this file contains two separate lists, url_shortener and a
### backup regex generated from it.  Both must updated and kept in sync.
###
### __URL_SHORTENER will always by set by either the plugin or regex
###

# SpamAssassin 4.0 version required
if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)

body __URL_SHORTENER eval:short_url()

body URL_SHORTENER_CHAINED     eval:short_url_chained()
describe URL_SHORTENER_CHAINED Message contains shortened URL chained to other shorteners
tflags URL_SHORTENER_CHAINED   net
score URL_SHORTENER_CHAINED    0.01

uri URL_SHORTENER_DISABLED      m,^https://(?:bitly\.com/a/blocked|tinyurl\.com/app/nospam),
describe URL_SHORTENER_DISABLED Message contains shortened URL that has been disabled due to abuse
tflags URL_SHORTENER_DISABLED   net
score URL_SHORTENER_DISABLED    2

#
# Please only add entries that you manually verified as actual working
# redirectors that can have abusable custom URLs.  Adding non-abusable
# services only generates unnecessary HTTP requests.
#
# After any changes, also update __URL_SHORTENER regex at end of file.
#

# generic list of likely active services - cleaned up 25.05.2022
url_shortener .ftn.app
url_shortener .page.link
url_shortener .short.gy
url_shortener .shortz.me
url_shortener 0rz.tw
url_shortener 4sq.com
url_shortener 4url.cc
url_shortener afly.co
url_shortener ai6.net
url_shortener amzn.com
url_shortener amzn.to
url_shortener b.link
url_shortener b23.ru
url_shortener binged.it
url_shortener bit.do
url_shortener bit.ly
url_shortener bitly.com
url_shortener bizj.us
url_shortener chilp.it
url_shortener conta.cc
url_shortener clck.ru
url_shortener crks.me
url_shortener cutt.ly
url_shortener cutwin.biz
url_shortener dai.ly
url_shortener db.tt
url_shortener disq.us
url_shortener dlvr.it
url_shortener doi.org
url_shortener doiop.com
url_shortener eepurl.com
url_shortener fb.me
url_shortener fire.to
url_shortener firsturl.de
url_shortener firsturl.net
url_shortener flic.kr
url_shortener gdurl.com
url_shortener go.ly
url_shortener goo.gl
url_shortener goolnk.com
url_shortener gplinks.in
url_shortener guest.link
url_shortener hellotxt.com
url_shortener hop.kz
url_shortener hotshorturl.com
url_shortener hub.am
url_shortener huff.to
url_shortener hurl.it
url_shortener hyperurl.co
url_shortener inx.lv
url_shortener is.gd
url_shortener it2.in
url_shortener j.mp
url_shortener kore.us
url_shortener kurl.no
url_shortener l.bestsellers.to
url_shortener lnk.sk
url_shortener lnkd.in
url_shortener lnkiy.in
url_shortener lru.jp
url_shortener mrte.ch
url_shortener n9.cl
url_shortener ndurl.com
url_shortener onion.com
url_shortener ouo.io
url_shortener ow.ly
url_shortener owl.li
url_shortener pduda.mobi
url_shortener rb.gy
url_shortener redir.ec
url_shortener rotf.lol
url_shortener s.apache.org
url_shortener s.free.fr
url_shortener s.id
url_shortener shar.es
url_shortener shorl.com
url_shortener shortn.me
url_shortener shorturl.at
url_shortener simurl.net
url_shortener slidesha.re
url_shortener smarturl.it
url_shortener smfu.in
url_shortener snip.ly
url_shortener snkr.me
url_shortener stpmvt.com
url_shortener t.co
url_shortener t.ly
url_shortener tcrn.ch
url_shortener tgr.ph
url_shortener tiny.cc
url_shortener tiny.one
url_shortener tiny.pl
url_shortener tinylink.in
url_shortener tinyurl.com
url_shortener to.ly
url_shortener trib.al
url_shortener twixar.me
url_shortener u.nu
url_shortener u.to
url_shortener url.ie
url_shortener urlcut.com
url_shortener urlday.cc
url_shortener urls.im
url_shortener urlz.at
url_shortener urlzs.com
url_shortener utfg.sk
url_shortener wow.link
url_shortener wp.me
url_shortener x.co
url_shortener x.hypem.com
url_shortener xurl.es
url_shortener yhoo.it
url_shortener youtu.be
url_shortener z23.ru
url_shortener zurl.ws

# www.shrunken.com - list validated 25.05.2022
url_shortener www.shrunken.com
url_shortener 0.gp
url_shortener 2.gp
url_shortener 2.ly
url_shortener 3.ly
url_shortener 4.gp
url_shortener 4.ly
url_shortener 5.gp
url_shortener 6.gp
url_shortener 6.ly
url_shortener 7.ly
url_shortener 8.ly
url_shortener 9.ly
url_shortener g.asia
url_shortener p.asia
url_shortener ur3.us

# shorturl.com - list validated 25.05.2022
url_shortener alturl.com
url_shortener .1sta.com
url_shortener .24ex.com
url_shortener .2fear.com
url_shortener .2fortune.com
url_shortener .2freedom.com
url_shortener .2hell.com
url_shortener .2savvy.com
url_shortener .2truth.com
url_shortener .2tunes.com
url_shortener .2ya.com
url_shortener .alturl.com
url_shortener .antiblog.com
url_shortener .bigbig.com
url_shortener .dealtap.com
url_shortener .ebored.com
url_shortener .echoz.com
url_shortener .filetap.com
url_shortener .funurl.com
url_shortener .headplug.com
url_shortener .hereweb.com
url_shortener .hitart.com
url_shortener .mirrorz.com
url_shortener .mp3update.com
url_shortener .shorturl.com
url_shortener .spyw.com
url_shortener .vze.com

# iscool.net - list validated 25.05.2022
url_shortener .arecool.net
url_shortener .iscool.net
url_shortener .isfun.net
url_shortener .tux.nu

# kisa.link - list validated 25.05.2022
url_shortener kisa.link
url_shortener www.kisa.link
url_shortener bul.tc
url_shortener cy.tc
url_shortener fn.tc
url_shortener ftp.tc
url_shortener gr.tc
url_shortener hbr.tc
url_shortener heg.tc
url_shortener ins.tc
url_shortener ko.tc
url_shortener kod.tc
url_shortener lol.tc
url_shortener m2.tc
url_shortener ml.tc
url_shortener mmo.tc
url_shortener oy.tc
url_shortener pc.tc
url_shortener pubg.tc
url_shortener pvp.tc
url_shortener sro.tc
url_shortener tek.link
url_shortener tw.tc

# grabify.link - list validated 25.05.2022
url_shortener grabify.link
url_shortener catsnthing.com
url_shortener catsnthings.fun
url_shortener cheapcinema.club
url_shortener dateing.club
url_shortener fortnight.space
url_shortener fortnitechat.site
url_shortener freegiftcards.co
url_shortener gaming-at-my.best
url_shortener gamingfun.me
url_shortener headshot.monster
url_shortener imageshare.best
url_shortener joinmy.site
url_shortener leancoding.co
url_shortener locations.quest
url_shortener lovebird.guru
url_shortener myprivate.pics
url_shortener noodshare.pics
url_shortener partpicker.shop
url_shortener progaming.monster
url_shortener screenshare.pics
url_shortener screenshot.best
url_shortener shhh.lol
url_shortener shrekis.life
url_shortener sportshub.bar
url_shortener stopify.co
url_shortener trulove.guru
url_shortener yourmy.monster

# additional url shorteners 2023
url_shortener .app.link
url_shortener bitly.ws
url_shortener han.gl
url_shortener lukora.cz
url_shortener shorturl.asia
url_shortener m2.do

# GET method required for some services, keep the same services in url_shortener also
if can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_get)
url_shortener_get bit.ly
endif

endif  # has_short_url_redir

###
### Use a regex if DecodeShortURLs plugin is not loaded
###

if !can(Mail::SpamAssassin::Plugin::DecodeShortURLs::has_short_url_redir)

## Generate __URL_SHORTENER with this command, to keep it in sync with url_shortener list:
##
## perl -pe 'while (<>) {/^\s*url_shortener\s+(\S+)/ or next;$s=quotemeta($1);$s=~s/^\\./\\w+\\./;push @a,$s} print "uri __URL_SHORTENER m,^https?://(?:".join("|",@a).")/,i\n"' < 25_url_shortener.cf
##

endif