Facebook Phishing Kit with peculiar opengraph tags

IOK Rule (edit)

title: Facebook Phishing Kit with peculiar opengraph tags
description: |
  A Facebook phishing kit which includes some peculiar OpenGraph tags originally from https://www.jpl.nasa.gov/news/testing-proves-its-worth-with-successful-mars-parachute-deployment 

detection:
  ogTags:
    html|contains:
      - <meta property="og:title" content="Testing Proves Its Worth With Successful Mars Parachute Deployment">
      - <meta property="og:description" content="Testing Proves Its Worth With Successful Mars Parachute Deployment" />

  newsArticle: # the HTML tags are also present on the original page so exclude some text from that article
    html|contains:
      - "The giant canopy that helped land Perseverance on Mars was tested here on Earth at NASA’s Wallops Flight Facility in Virginia."
  condition: ogTags and not newsArticle

tags:
  - kit
  - target.facebook