search

mitchellkrogza / Phishing.Database

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
MIT License
1.13k stars 257 forks source link

[FALSE-POSITIVE] #789

Closed softmetapod closed 8 months ago

softmetapod commented 9 months ago

Domains or links Please list any domains and links listed here which you believe are a false positive. micrsoftalerts.com

More Information How did you discover your web site or domain was listed here?

  1. Incorrectly marked as Phishing on Phishtank or OpenPhish?
    • I work for DNSFilter and we have confirmed this site is used for testing responses to Phishing.

Have you requested removal from other sources? None

Additional context We use your threat feed as part of DNSFilter Third Party threat vendors

spirillen commented 9 months ago

I work for DNSFilter

How can this postulate be verified?

And it is rather hard to see what you mean with this domain, it seems rather little maintained

image

opzch commented 9 months ago

Although it's obvious from search results that it is serving phishing training: https://urlscan.io/domain/micrsoftalerts.com

a year ago this site redirected to a (real? takedown training?) phishing page on *.000webhostapp.com: https://urlscan.io/result/982cc738-6262-46d0-80d0-b32ffbb44f2e/

So, there could be a possibility for training admins to change the destination and redirect to any website. While ignoring detections on such sites is a clear need, whitelisting this one is not a very good idea.

micrsoftalerts.com - urlscan.io
urlscan.io - Website scanner for suspicious and malicious URLs
sgurosgytt.000webhostapp.com - urlscan.io
urlscan.io - Website scanner for suspicious and malicious URLs
mitchellkrogza commented 8 months ago

No website found