Google sites still in phishing.bad.sites.conf?

[Jerry Benton]

Ok, it would be great to have a mechanism that detects phishing fraud links. To accomplish this I used phishtank.com to provide the data. The current blacklist has ~11,000 entries based on the latest list from phishtank.com. This is after I have already scrubbed the list changing URL links into hostnames and then removing the common safe sites derived from alexa.com. Am I personally eyeballing every entry into this list on a daily basis? Hell no. It is an automated solution that is available if you want to use it. This is the best free solution I could come with for the MailScanner community that is regularly updated with the latest threats. 

If anyone has a better solution, please send it to me. I will be happy to implement it. The file that is currently used to generate the list on the update server is attached. 

-
Jerry Benton
www.mailborder.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: mb-phish-update
Type: application/octet-stream
Size: 4324 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20151030/d7846923/attachment.obj>
-------------- next part --------------

> On Oct 30, 2015, at 6:48 AM, Paul Sand <pas at unh.edu> wrote:
> 
> * Jerry Benton <jerry.benton at mailborder.com> [2015-10-30 06:17]:
>> There has been a rash of ransomware using drive.google.com lately. If you
>> want to whitelist it, add it to your custom safe sites. 
> 
> As noted, I suspect that doesn't work in this case. But even if it did,
> is it really appropriate to issue the "Found definite phishing fraud"
> error against ALL uses of drive.google.com? 
> 
> It's your call, of course. But geez.
> 
> -- 
> -- Paul A Sand <pas at unh.edu>
> -- Information Technology / University of New Hampshire
> -- http://pubpages.unh.edu/~pas
> -- Slightly higher west of the Mississippi.
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>