Hi Siddhesh, You can do this with a simple URI rule type or the Header rule type. There are also RBLs you might consider supporting/using that can list the domain for you as well.
header __TO_EXAMPLE To =~ /\@domain\.tld/i and uri __URI_EXAMPLE /domain\.tld/i Regards, KAM On 11/4/2019 2:36 AM, KADAM, SIDDHESH wrote: > Hi, > > Can we assign a high score to mail which has an URL which contents a > recipient domain name or recipient email ID ? > > I have been seeing lots of cases of Phish URL where spammer tries to > pull end user's password by sending these URLs over mail. > > Regards, > Siddhesh > -- Kevin A. McGrail kmcgr...@apache.org Member, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171