expect URL_ONLY
Subject: test
https://url.org
expect
Subject: test
my site is https://url.org
expect SUSPICIOUS_URL
Subject: test
my site is https://192.168.1.1
expect HOMOGRAPH_URL
Subject: test
my site is https://xn--youtue-tg7b.com
expect MIXED_CHARSET_URL
Subject: test
my site is https://www.xn--1ca81o6aa92e.com/
expect UNPARSABLE_URL
Subject: test
login to your account at https://bánk.com/
expect URL_REDIRECTOR_NESTED REDIRECTOR_URL
Subject: nested redirect
login to https://redirect.com/?https://redirect.org/?https://redirect.net/?https://redirect.io/?https://redirect.me/?https://redirect.com
expect REDIRECTOR_URL HOMOGRAPH_URL
Subject: redirect to omograph
login to https://www.redirect.com/?https://xn--twiter-507b.com
expect HAS_ONION_URI HAS_ANON_DOMAIN
Subject: url in title darkweb.onion/login
test
expect HAS_IPFS_GATEWAY_URL HAS_WP_URI URI_HIDDEN_PATH
Content-Type: text/html; charset="utf-8"
Subject: html test
expect HAS_GUC_PROXY_URI HAS_GOOGLE_FIREBASE_URL HAS_GOOGLE_REDIR HAS_ANON_DOMAIN URL_ONLY
Content-Type: text/html; charset="utf-8"
Subject: mixed urls googleusercontent.com/proxy/url
google.com/url?otherurl.org
expect WP_COMPROMISED
Subject: plain test
http://url.com/Well-known/../assetlinks.json
http://wp.com/WP-content/content.pdf
expect HAS_WP_URI
Subject: plain test
http://url.com/Well-known/../assetlinks.json
http://wp.com/WP-other/content.pdf
expect PHISHED_OPENPHISH PHISHED_PHISHTANK
Subject: plain test
https://phishing-open.org
https://phishing-tank.com
expect
Subject: IPs are not urls
192.168.1.1
expect
Content-Type: text/html; charset="utf-8"
Subject: IPs in HTML are not urls
Das System wurde um 01.01.1970 08:28:00 für die IP-Adresse
123.123.123.123 gesperrt.
Der Besucher hat versucht, sich mit folgenden Daten anzumelden.
Partner: 12345678
Portal: IP-Sperre einsehen
expect RCPT_DOMAIN_IN_BODY
To: hello@world.com
Subject: Special offer
An offer for world.com
