Skip to content

Update headers_replyto_new_domain_nlu_request.yml#4364

Open
IndiaAce wants to merge 1 commit intomainfrom
india.ESC-11039.update_sus_new_domain
Open

Update headers_replyto_new_domain_nlu_request.yml#4364
IndiaAce wants to merge 1 commit intomainfrom
india.ESC-11039.update_sus_new_domain

Conversation

@IndiaAce
Copy link
Copy Markdown
Member

Description

Identified as a good candidate rule change for a new pattern we've been observing for these newly registered domains that don't have reply_to's or they aren't mismatched. I enforced this change with a suspicious tld's check as it was a very common pattern I had observed.

Associated samples

Associated hunts

@IndiaAce IndiaAce requested a review from a team April 17, 2026 16:30
@IndiaAce IndiaAce requested a review from a team as a code owner April 17, 2026 16:30
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
…egistered reply-to domain with engaging financial or urgent language
@github-actions github-actions Bot added the in-test-rules PR is in our testing suite to collect telemetry label Apr 17, 2026
github-actions Bot added a commit that referenced this pull request Apr 17, 2026
…-to domain with engaging financial or urgent language
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in-test-rules PR is in our testing suite to collect telemetry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant