search

StevenBlack / hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
MIT License
26.51k stars 2.2k forks source link

Block `caremed.de financialanalystinfo.com mailtransfere.shop restitution.eu.com` #2323

Closed WebworkrNet closed 1 year ago

WebworkrNet commented 1 year ago

Lists in use:

Domains:

caremed.de
financialanalystinfo.com
mailtransfere.shop
restitution.eu.com

Details: Spam

https://www.virustotal.com/gui/domain/caremed.de

chrome_screenshot_1683524893987

https://www.virustotal.com/gui/domain/financialanalystinfo.com

chrome_screenshot_1683525021605

https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3afinancialanalystinfo.com&run=toolpage

chrome_screenshot_1683525127131

https://www.virustotal.com/gui/domain/mailtransfere.shop

chrome_screenshot_1683525371183

https://www.virustotal.com/gui/domain/restitution.eu.com

chrome_screenshot_1683525279667

hagezi commented 1 year ago

caremed.de - German Work and Travel insurance financialanalystinfo.com - tracking domain used for processing email/marketing statistics such as views/clicks/optouts mailtransfere.shop - DEAD domain restitution.eu.com - only SOA Record, no A/AAAA, whitelisted on https://otx.alienvault.com/indicator/domain/restitution.eu.com

icedterminal commented 1 year ago

financialanalystinfo.com - tracking domain used for processing email/marketing statistics such as views/clicks/optouts

So this is the only one that has the potential to be included. However, in blocking that TLD you remove the ability to unsubscribe at their site. The ideal solution would be find out what sub domains, if any, are in use with the emails they are present in. This requires input from those that encounter it.