From jerry.benton at mailborder.com Mon Nov 4 16:52:52 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Mon, 4 Nov 2024 16:52:52 +0000 Subject: Phishing Safe Sites Message-ID: I was reviewing the build script for the safe and bad sites today. * The safe sites file will contain the top 1500 domains on the internet. This will pretty much be static as AWS no longer publishes that information. It will be updated in the next 4 hours. (Currently empty.) * The bad sites file is still updated every 4 hours from phishtank with the latest nefarious sites. * The safe domains used while building the script are below. If you have any suggestions to add to that list, let me know. No, I will not add your personal domain. You can use the custom safe sites list in MailScanner for that. # common short url providers $safe_domains[] = 'adf.ly'; $safe_domains[] = 'bit.ly'; $safe_domains[] = 'doiop.com'; $safe_domains[] = 'fur.ly'; $safe_domains[] = 'goo.gl'; $safe_domains[] = 'is.gd'; $safe_domains[] = 'mcaf.ee'; $safe_domains[] = 'ow.ly'; $safe_domains[] = 'snipurl.com'; $safe_domains[] = 'su.pr'; $safe_domains[] = 'tinyurl.com'; $safe_domains[] = 'v.gd'; $safe_domains[] = 'tiny.cc'; $safe_domains[] = 'tr.im'; $safe_domains[] = 'bit.do'; $safe_domains[] = 'po.st'; $safe_domains[] = 'lrd.to'; $safe_domains[] = 'g.co'; # known safe domains $safe_domains[] = 'www.google.com'; $safe_domains[] = 'docs.google.com'; $safe_domains[] = 'accounts.google.com'; $safe_domains[] = 'sites.google.com'; $safe_domains[] = 'mail.google.com'; $safe_domains[] = 'schema.org'; $safe_domains[] = 'urldefense.proofpoint.com'; -- Jerry Benton www.mailborder.com +1 843-800-8605 -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Mon Nov 4 17:14:39 2024 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Mon, 4 Nov 2024 12:14:39 -0500 Subject: Phishing Safe Sites In-Reply-To: References: Message-ID: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> drive.google.com seems to be a complaint I sometimes receive on the MailScanner project because it often shows up in Phishtank, and it only takes one bad URL reported to Phishtank to cause the entire drive.google.com to get flagged as a bad site. On 11/4/24 11:52, Jerry Benton wrote: > > I was reviewing the build script for the safe and bad sites today. > > * The safe sites file will contain the top 1500 domains on the > internet. This will pretty much be static as AWS no longer > publishes that information. It will be updated in the next 4 > hours. (Currently empty.) > * The bad sites file is still updated every 4 hours from phishtank > with the latest nefarious sites. > * The safe domains used while building the script are below. If you > have any suggestions to add to that list, let me know. No, I will > not add your personal domain. You can use the custom safe sites > list in MailScanner for that. > > # common short url providers > > $safe_domains[] = 'adf.ly'; > > $safe_domains[] = 'bit.ly'; > > $safe_domains[] = 'doiop.com'; > > $safe_domains[] = 'fur.ly'; > > $safe_domains[] = 'goo.gl'; > > $safe_domains[] = 'is.gd'; > > $safe_domains[] = 'mcaf.ee'; > > $safe_domains[] = 'ow.ly'; > > $safe_domains[] = 'snipurl.com'; > > $safe_domains[] = 'su.pr'; > > $safe_domains[] = 'tinyurl.com'; > > $safe_domains[] = 'v.gd'; > > $safe_domains[] = 'tiny.cc'; > > $safe_domains[] = 'tr.im'; > > $safe_domains[] = 'bit.do'; > > $safe_domains[] = 'po.st'; > > $safe_domains[] = 'lrd.to'; > > $safe_domains[] = 'g.co'; > > # known safe domains > > $safe_domains[] = 'www.google.com'; > > $safe_domains[] = 'docs.google.com'; > > $safe_domains[] = 'accounts.google.com'; > > $safe_domains[] = 'sites.google.com'; > > $safe_domains[] = 'mail.google.com'; > > $safe_domains[] = 'schema.org'; > > $safe_domains[] = 'urldefense.proofpoint.com'; > > -- > > Jerry Benton > > www.mailborder.com > > +1 843-800-8605 > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Mon Nov 4 18:04:33 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Mon, 4 Nov 2024 18:04:33 +0000 Subject: Phishing Safe Sites In-Reply-To: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> Message-ID: Ok, I added drive.google.com. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Shawn Iverson via MailScanner Date: Monday, November 4, 2024 at 12:15 To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: Phishing Safe Sites drive.google.com seems to be a complaint I sometimes receive on the MailScanner project because it often shows up in Phishtank, and it only takes one bad URL reported to Phishtank to cause the entire drive.google.com to get flagged as a bad site. On 11/4/24 11:52, Jerry Benton wrote: I was reviewing the build script for the safe and bad sites today. * The safe sites file will contain the top 1500 domains on the internet. This will pretty much be static as AWS no longer publishes that information. It will be updated in the next 4 hours. (Currently empty.) * The bad sites file is still updated every 4 hours from phishtank with the latest nefarious sites. * The safe domains used while building the script are below. If you have any suggestions to add to that list, let me know. No, I will not add your personal domain. You can use the custom safe sites list in MailScanner for that. # common short url providers $safe_domains[] = 'adf.ly'; $safe_domains[] = 'bit.ly'; $safe_domains[] = 'doiop.com'; $safe_domains[] = 'fur.ly'; $safe_domains[] = 'goo.gl'; $safe_domains[] = 'is.gd'; $safe_domains[] = 'mcaf.ee'; $safe_domains[] = 'ow.ly'; $safe_domains[] = 'snipurl.com'; $safe_domains[] = 'su.pr'; $safe_domains[] = 'tinyurl.com'; $safe_domains[] = 'v.gd'; $safe_domains[] = 'tiny.cc'; $safe_domains[] = 'tr.im'; $safe_domains[] = 'bit.do'; $safe_domains[] = 'po.st'; $safe_domains[] = 'lrd.to'; $safe_domains[] = 'g.co'; # known safe domains $safe_domains[] = 'www.google.com'; $safe_domains[] = 'docs.google.com'; $safe_domains[] = 'accounts.google.com'; $safe_domains[] = 'sites.google.com'; $safe_domains[] = 'mail.google.com'; $safe_domains[] = 'schema.org'; $safe_domains[] = 'urldefense.proofpoint.com'; -- Jerry Benton www.mailborder.com +1 843-800-8605 -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex at vidadigital.com.pa Mon Nov 4 18:07:46 2024 From: alex at vidadigital.com.pa (Alex Neuman) Date: Mon, 04 Nov 2024 18:07:46 +0000 Subject: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> Message-ID: <406da57c-10f7-7674-b31c-f520f43c6f90@vidadigital.com.pa> Would this be the place to add: https://.safelinks.protection.outlook.com ? [https://d36urhup7zbd7q.cloudfront.net/dfe5f5a2-cfbb-41fa-8eda-a8abbad069ab/126199572_10158608990566480_8674984746572509731_n.format_png.resize_200x.jpeg] ? Alex Neuman Host / CEO,?Vida Digital / Reliant Technologies +507 833-7900 [tel:+507+833-7900] |+507 6781-9505 [tel:+507+6781-9505] |https://vidadigital.com.pa/ [https://mailtrack.io/l/7ba35feebe84dfbd9bd579c8b30cb95e5ebc759b?url=https%3A%2F%2Fvidadigital.com.pa%2F&u=2636895&signature=565d8f35be1e0787] [https://cdn.gifo.wisestamp.com/social/soundcloud/ff8800/64/0/background.png]https://mailtrack.io/l/1de29c09145987d1a413bb00c922d49fd8f4e0a4?url=http%3A%2F%2Fanchor.fm%2Fvidadigital&u=2636895&signature=d993aeb3af2c629a[https://cdn.gifo.wisestamp.com/social/wiseintro/1CB7EB/64/0/background.png]https://mailtrack.io/l/85292bc06c6c8a2c893bd13b7a5188eb88d200bb?url=http%3A%2F%2Fwiseintro.co%2Fvidadigital&u=2636895&signature=9235f6a446229fd8[https://cdn.gifo.wisestamp.com/social/tiktok/EE1D52/64/0/background.png]https://mailtrack.io/l/6cb34d398335077540d6951c1183161cb3f3c8f1?url=http%3A%2F%2Ftiktok.com%2F%40vidadigital&u=2636895&signature=fe6ab5155849f245[https://cdn.gifo.wisestamp.com/social/facebook/3b5998/64/0/background.png]https://mailtrack.io/l/5af6a1557cfe12ccfc38ad345cf74a60338782d8?url=http%3A%2F%2Ffacebook.com%2Fvidadigital&u=2636895&signature=e5bf1226f0700d59[https://cdn.gifo.wisestamp.com/social/instagram/E4405F/64/0/background.png]https://mailtrack.io/l/7d0614893f69b10161b2a5527992272f145a3c8b?url=http%3A%2F%2Finstagram.com%2Fvidadigital&u=2636895&signature=384e89d165b66b8e[https://cdn.gifo.wisestamp.com/social/linkedin/0077b5/64/0/background.png]https://mailtrack.io/l/1bba1d145848dc0f8884845097fe8fc2781f4727?url=http%3A%2F%2Flinkedin.com%2Fin%2Falexneuman&u=2636895&signature=3c9addd9371c0c26[https://cdn.gifo.wisestamp.com/social/twitter/55acee/64/0/background.png]https://mailtrack.io/l/e7d8be975b3411e102db8d7189f663358670addc?url=http%3A%2F%2Ftwitter.com%2Fvidadigital&u=2636895&signature=73eb573e8680cacb[https://cdn.gifo.wisestamp.com/social/youtube/cd201f/64/0/background.png]https://mailtrack.io/l/30e438fed56df5c2b73fb103c5b36ab1d709a62b?url=http%3A%2F%2Fyoutube.com%2Fvidadigital&u=2636895&signature=c8e9aeb59210be1b[https://cdn.gifo.wisestamp.com/social/pinterest/bd081c/64/0/background.png]https://mailtrack.io/l/1e5961b7efd6813d9673f3d5c0560e8ccf2be4c5?url=http%3A%2F%2Fpinterest.com%2Fvidadigital&u=2636895&signature=9e74f510f23c70ac ? [data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=3D] On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton wrote: > Ok, I added drive.google.com [http://drive.google.com]. > > ? > > ? > > --? > > Jerry Benton > > www.mailborder.com [http://www.mailborder.com] > > +1 843-800-8605 > > ? > > ? > > From: MailScanner mailscanner.info [mailborder.com at lists.mailscanner.info]> on behalf of Shawn > Iverson via MailScanner [mailscanner at lists.mailscanner.info]> > Date: Monday, November 4, 2024 at 12:15 > To: mailscanner at lists.mailscanner.info [mailscanner at lists.mailscanner.info] < > mailscanner at lists.mailscanner.info [mailscanner at lists.mailscanner.info]> > Cc: Shawn Iverson > Subject: Re: Phishing Safe Sites > > drive.google.com [http://drive.google.com] seems to be a complaint I sometimes > receive on the MailScanner project because it often shows up in Phishtank, and > it only takes one bad URL reported to Phishtank to cause the entire > drive.google.com [http://drive.google.com] to get flagged as a bad site. > > ? > > On 11/4/24 11:52, Jerry Benton wrote: > > > I was reviewing the build script for the safe and bad sites today. > > > > ? > > > > * The safe sites file will contain the top 1500 domains on the internet. > > This will pretty much be static as AWS no longer publishes that > > information. It will be updated in the next 4 hours. (Currently empty.) > > * The bad sites file is still updated every 4 hours from phishtank with the > > latest nefarious sites. > > * The safe domains used while building the script are below. If you have > > any suggestions to add to that list, let me know. No, I will not add your > > personal domain. You can use the custom safe sites list in MailScanner > > for that. > > > > ? > > > > # common short url providers > > > > $safe_domains[] = 'adf.ly [http://adf.ly]'; > > > > $safe_domains[] = 'bit.ly [http://bit.ly]'; > > > > $safe_domains[] = 'doiop.com [http://doiop.com]'; > > > > $safe_domains[] = 'fur.ly [http://fur.ly]'; > > > > $safe_domains[] = 'goo.gl [http://goo.gl]'; > > > > $safe_domains[] = 'is.gd [http://is.gd]'; > > > > $safe_domains[] = 'mcaf.ee [http://mcaf.ee]'; > > > > $safe_domains[] = 'ow.ly [http://ow.ly]'; > > > > $safe_domains[] = 'snipurl.com [http://snipurl.com]'; > > > > $safe_domains[] = 'su.pr [http://su.pr]'; > > > > $safe_domains[] = 'tinyurl.com [http://tinyurl.com]'; > > > > $safe_domains[] = 'v.gd [http://v.gd]'; > > > > $safe_domains[] = 'tiny.cc'; > > > > $safe_domains[] = 'tr.im [http://tr.im]'; > > > > $safe_domains[] = 'bit.do'; > > > > $safe_domains[] = 'po.st [http://po.st]'; > > > > $safe_domains[] = 'lrd.to [http://lrd.to]'; > > > > $safe_domains[] = 'g.co [http://g.co]'; > > > > ? > > > > # known safe domains > > > > $safe_domains[] = 'www.google.com [http://www.google.com]'; > > > > $safe_domains[] = 'docs.google.com [http://docs.google.com]'; > > > > $safe_domains[] = 'accounts.google.com [http://accounts.google.com]'; > > > > $safe_domains[] = 'sites.google.com [http://sites.google.com]'; > > > > $safe_domains[] = 'mail.google.com [http://mail.google.com]'; > > > > $safe_domains[] = 'schema.org [http://schema.org]'; > > > > $safe_domains[] = 'urldefense.proofpoint.com > > [http://urldefense.proofpoint.com]'; > > > > ? > > > > ? > > > > --? > > > > Jerry Benton > > > > www.mailborder.com [http://www.mailborder.com] > > > > +1 843-800-8605 > > > > ? > > > > > > > > > > > > ? > > > > ? > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info [mailscanner at lists.mailscanner.info] > http://lists.mailscanner.info/mailman/listinfo/mailscanner > [http://lists.mailscanner.info/mailman/listinfo/mailscanner] -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailscanner-list at okla.com Mon Nov 4 18:08:59 2024 From: mailscanner-list at okla.com (Tracy Greggs) Date: Mon, 04 Nov 2024 18:08:59 +0000 Subject: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> Message-ID: drive.google.com is a constant source of phishing in my observations. Everyone can easily customize to suit their environment though. ------ Original Message ------ >From "Jerry Benton" To "MailScanner Discussion" Date 11/4/2024 12:04:33 PM Subject Re: Phishing Safe Sites >Ok, I added drive.google.com. > > > > > >-- > >Jerry Benton > >www.mailborder.com > >+1 843-800-8605 > > > > > >From: MailScanner > >on behalf of Shawn Iverson via MailScanner > >Date: Monday, November 4, 2024 at 12:15 >To: mailscanner at lists.mailscanner.info > >Cc: Shawn Iverson >Subject: Re: Phishing Safe Sites > >drive.google.com seems to be a complaint I sometimes receive on the >MailScanner project because it often shows up in Phishtank, and it only >takes one bad URL reported to Phishtank to cause the entire >drive.google.com to get flagged as a bad site. > > > >On 11/4/24 11:52, Jerry Benton wrote: > >>I was reviewing the build script for the safe and bad sites today. >> >> >> >>The safe sites file will contain the top 1500 domains on the internet. >>This will pretty much be static as AWS no longer publishes that >>information. It will be updated in the next 4 hours. (Currently >>empty.) >>The bad sites file is still updated every 4 hours from phishtank with >>the latest nefarious sites. >>The safe domains used while building the script are below. If you have >>any suggestions to add to that list, let me know. No, I will not add >>your personal domain. You can use the custom safe sites list in >>MailScanner for that. >> >> >># common short url providers >> >>$safe_domains[] = 'adf.ly'; >> >>$safe_domains[] = 'bit.ly'; >> >>$safe_domains[] = 'doiop.com'; >> >>$safe_domains[] = 'fur.ly'; >> >>$safe_domains[] = 'goo.gl'; >> >>$safe_domains[] = 'is.gd'; >> >>$safe_domains[] = 'mcaf.ee'; >> >>$safe_domains[] = 'ow.ly'; >> >>$safe_domains[] = 'snipurl.com'; >> >>$safe_domains[] = 'su.pr'; >> >>$safe_domains[] = 'tinyurl.com'; >> >>$safe_domains[] = 'v.gd'; >> >>$safe_domains[] = 'tiny.cc'; >> >>$safe_domains[] = 'tr.im'; >> >>$safe_domains[] = 'bit.do'; >> >>$safe_domains[] = 'po.st'; >> >>$safe_domains[] = 'lrd.to'; >> >>$safe_domains[] = 'g.co'; >> >> >> >># known safe domains >> >>$safe_domains[] = 'www.google.com'; >> >>$safe_domains[] = 'docs.google.com'; >> >>$safe_domains[] = 'accounts.google.com'; >> >>$safe_domains[] = 'sites.google.com'; >> >>$safe_domains[] = 'mail.google.com'; >> >>$safe_domains[] = 'schema.org'; >> >>$safe_domains[] = 'urldefense.proofpoint.com'; >> >> >> >> >> >>-- >> >>Jerry Benton >> >>www.mailborder.com >> >>+1 843-800-8605 >> >> >> >> >> >> >> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Mon Nov 4 20:21:18 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Mon, 4 Nov 2024 20:21:18 +0000 Subject: Phishing Safe Sites In-Reply-To: <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> Message-ID: Not sure. Having second thoughts on drive.google.com as well. Tracy has a good point about it being a source for malware. I see it all the time as well. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Alex Neuman via MailScanner Date: Monday, November 4, 2024 at 15:06 To: MailScanner Discussion Cc: Alex Neuman Subject: Re: Phishing Safe Sites Would this be the place to add: https://.safelinks.protection.outlook.com ? [https://d36urhup7zbd7q.cloudfront.net/dfe5f5a2-cfbb-41fa-8eda-a8abbad069ab/126199572_10158608990566480_8674984746572509731_n.format_png.resize_200x.jpeg] Alex Neuman Host / CEO, Vida Digital / Reliant Technologies +507 833-7900 | +507 6781-9505 | https://vidadigital.com.pa/ [https://cdn.gifo.wisestamp.com/social/soundcloud/ff8800/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/wiseintro/1CB7EB/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/tiktok/EE1D52/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/facebook/3b5998/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/instagram/E4405F/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/linkedin/0077b5/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/twitter/55acee/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/youtube/cd201f/64/0/background.png] [https://cdn.gifo.wisestamp.com/social/pinterest/bd081c/64/0/background.png] ? [https://mailtrack.io/trace/mail/w/bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw/acda0c693292b2c90af0c428394fbce5c7bc1152.png?u=2636895] On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton wrote: Ok, I added drive.google.com. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner > on behalf of Shawn Iverson via MailScanner > Date: Monday, November 4, 2024 at 12:15 To: mailscanner at lists.mailscanner.info > Cc: Shawn Iverson > Subject: Re: Phishing Safe Sites drive.google.com seems to be a complaint I sometimes receive on the MailScanner project because it often shows up in Phishtank, and it only takes one bad URL reported to Phishtank to cause the entire drive.google.com to get flagged as a bad site. On 11/4/24 11:52, Jerry Benton wrote: I was reviewing the build script for the safe and bad sites today. * The safe sites file will contain the top 1500 domains on the internet. This will pretty much be static as AWS no longer publishes that information. It will be updated in the next 4 hours. (Currently empty.) * The bad sites file is still updated every 4 hours from phishtank with the latest nefarious sites. * The safe domains used while building the script are below. If you have any suggestions to add to that list, let me know. No, I will not add your personal domain. You can use the custom safe sites list in MailScanner for that. # common short url providers $safe_domains[] = 'adf.ly'; $safe_domains[] = 'bit.ly'; $safe_domains[] = 'doiop.com'; $safe_domains[] = 'fur.ly'; $safe_domains[] = 'goo.gl'; $safe_domains[] = 'is.gd'; $safe_domains[] = 'mcaf.ee'; $safe_domains[] = 'ow.ly'; $safe_domains[] = 'snipurl.com'; $safe_domains[] = 'su.pr'; $safe_domains[] = 'tinyurl.com'; $safe_domains[] = 'v.gd'; $safe_domains[] = 'tiny.cc'; $safe_domains[] = 'tr.im'; $safe_domains[] = 'bit.do'; $safe_domains[] = 'po.st'; $safe_domains[] = 'lrd.to'; $safe_domains[] = 'g.co'; # known safe domains $safe_domains[] = 'www.google.com'; $safe_domains[] = 'docs.google.com'; $safe_domains[] = 'accounts.google.com'; $safe_domains[] = 'sites.google.com'; $safe_domains[] = 'mail.google.com'; $safe_domains[] = 'schema.org'; $safe_domains[] = 'urldefense.proofpoint.com'; -- Jerry Benton www.mailborder.com +1 843-800-8605 -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Mon Nov 4 20:38:09 2024 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Mon, 4 Nov 2024 15:38:09 -0500 Subject: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> Message-ID: <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> I feel that way about all of Google, not just drive. I'm not sure that google deserves blanket treatment for any of its subdomains.? Maybe it would be best to drop *.google.com from $safe_domains and require everyone to manage locally? On 11/4/24 15:21, Jerry Benton wrote: > > Not sure. Having second thoughts on drive.google.com as well. Tracy > has a good point about it being a source for malware. I see it all the > time as well. > > -- > > Jerry Benton > > www.mailborder.com > > +1 843-800-8605 > > *From: *MailScanner > > on behalf of Alex Neuman via MailScanner > > *Date: *Monday, November 4, 2024 at 15:06 > *To: *MailScanner Discussion > *Cc: *Alex Neuman > *Subject: *Re: Phishing Safe Sites > > Would this be the place to add: > https://.safelinks.protection.outlook.com > > ? > > > > > > > > *Alex Neuman* > *Host / CEO,?Vida Digital / Reliant Technologies* > > +507 833-7900 > > > > *|* > > > > +507 6781-9505 > > > > *|* > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > https://vidadigital.com.pa/ > > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > > > > ? > > > On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton > wrote: > > Ok, I added drive.google.com . > > -- > > Jerry Benton > > www.mailborder.com > > +1 843-800-8605 > > *From: *MailScanner > > on behalf of Shawn Iverson via MailScanner > > *Date: *Monday, November 4, 2024 at 12:15 > *To: *mailscanner at lists.mailscanner.info > > *Cc: *Shawn Iverson > *Subject: *Re: Phishing Safe Sites > > drive.google.com seems to be a complaint > I sometimes receive on the MailScanner project because it often > shows up in Phishtank, and it only takes one bad URL reported to > Phishtank to cause the entire drive.google.com > to get flagged as a bad site. > > On 11/4/24 11:52, Jerry Benton wrote: > > I was reviewing the build script for the safe and bad sites > today. > > * The safe sites file will contain the top 1500 domains on > the internet. This will pretty much be static as AWS no > longer publishes that information. It will be updated in > the next 4 hours. (Currently empty.) > * The bad sites file is still updated every 4 hours from > phishtank with the latest nefarious sites. > * The safe domains used while building the script are below. > If you have any suggestions to add to that list, let me > know. No, I will not add your personal domain. You can use > the custom safe sites list in MailScanner for that. > > # common short url providers > > $safe_domains[] = 'adf.ly '; > > $safe_domains[] = 'bit.ly '; > > $safe_domains[] = 'doiop.com '; > > $safe_domains[] = 'fur.ly '; > > $safe_domains[] = 'goo.gl '; > > $safe_domains[] = 'is.gd '; > > $safe_domains[] = 'mcaf.ee '; > > $safe_domains[] = 'ow.ly '; > > $safe_domains[] = 'snipurl.com '; > > $safe_domains[] = 'su.pr '; > > $safe_domains[] = 'tinyurl.com '; > > $safe_domains[] = 'v.gd '; > > $safe_domains[] = 'tiny.cc'; > > $safe_domains[] = 'tr.im '; > > $safe_domains[] = 'bit.do'; > > $safe_domains[] = 'po.st '; > > $safe_domains[] = 'lrd.to '; > > $safe_domains[] = 'g.co '; > > # known safe domains > > $safe_domains[] = 'www.google.com '; > > $safe_domains[] = 'docs.google.com '; > > $safe_domains[] = 'accounts.google.com > '; > > $safe_domains[] = 'sites.google.com '; > > $safe_domains[] = 'mail.google.com '; > > $safe_domains[] = 'schema.org '; > > $safe_domains[] = 'urldefense.proofpoint.com > '; > > -- > > Jerry Benton > > www.mailborder.com > > +1 843-800-8605 > > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailscanner-list at okla.com Mon Nov 4 20:44:41 2024 From: mailscanner-list at okla.com (Tracy Greggs) Date: Mon, 04 Nov 2024 20:44:41 +0000 Subject: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites In-Reply-To: <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> Message-ID: I can't argue that. We all have the ability to tailor things to our needs, but Google is a digital outhouse. Onedrive isn't any better IMHO. Insured Aircraft Title Service, LLC INSURED AIRCRAFT TITLE SERVICE Tracy Greggs IT / Systems Administrator Insured Aircraft Title Service, LLC 21 E Main St. STE 100 Oklahoma City, OK. 73104 800.654.4882 Toll Free 405.681.6663 Local tgreggs at insuredaircraft.com www.insuredaircraft.com Please be aware - Online bank fraud is on the rise and it is important that you be cautious before wiring funds. If you receive an email containing WIRE TRANSFER INSTRUCTIONS call your escrow officer before wiring funds to verify the accuracy of the wiring instructions. Your escrow officer can be reached at (405) 681-6663. BE VERY CAREFUL IN WIRING FUNDS ------ Original Message ------ From "Shawn Iverson via MailScanner" To mailscanner at lists.mailscanner.info Cc "Shawn Iverson" Date 11/4/2024 2:38:09 PM Subject {Disarmed} Re: Phishing Safe Sites >I feel that way about all of Google, not just drive. I'm not sure that >google deserves blanket treatment for any of its subdomains. Maybe it >would be best to drop *.google.com from $safe_domains and require >everyone to manage locally? > >On 11/4/24 15:21, Jerry Benton wrote: >>Not sure. Having second thoughts on drive.google.com as well. Tracy >>has a good point about it being a source for malware. I see it all the >>time as well. >> >> >> >> >> >>-- >> >>Jerry Benton >> >>www.mailborder.com >> >>+1 843-800-8605 >> >> >> >> >> >>From: MailScanner >> >> >>on behalf of Alex Neuman via MailScanner >> >> >>Date: Monday, November 4, 2024 at 15:06 >>To: MailScanner Discussion >> >>Cc: Alex Neuman >> >>Subject: Re: Phishing Safe Sites >> >>Would this be the place to add: >>https://.safelinks.protection.outlook.com >> >>? >> >> >> >> >> >> >> >> >> >> >>Alex Neuman >>Host / CEO, Vida Digital / Reliant Technologies >> >>+507 833-7900 >> >>| >> >>+507 6781-9505 >> >>| >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: https://vidadigital.com.pa/ >> >> >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >>MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website:MailScanner has detected >>definite fraud in the website at "mailtrack.io". Do not trust this >>website:MailScanner has detected definite fraud in the website at >>"mailtrack.io". Do not trust this website: >> >> >> >> >> >> >> >>? >> >> >> >> >> >>On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton >> >>wrote: >> >>>Ok, I added drive.google.com. >>> >>> >>> >>> >>> >>>-- >>> >>>Jerry Benton >>> >>>www.mailborder.com >>> >>>+1 843-800-8605 >>> >>> >>> >>> >>> >>>From: MailScanner >>mailborder.com at lists.mailscanner.info> on behalf of Shawn Iverson via >>>MailScanner < mailscanner at lists.mailscanner.info> >>>Date: Monday, November 4, 2024 at 12:15 >>>To: mailscanner at lists.mailscanner.info >>> >>>Cc: Shawn Iverson >>>Subject: Re: Phishing Safe Sites >>> >>>drive.google.com seems to be a complaint I sometimes receive on the >>>MailScanner project because it often shows up in Phishtank, and it >>>only takes one bad URL reported to Phishtank to cause the entire >>>drive.google.com to get flagged as a bad >>>site. >>> >>> >>> >>>On 11/4/24 11:52, Jerry Benton wrote: >>> >>>>I was reviewing the build script for the safe and bad sites today. >>>> >>>> >>>> >>>>The safe sites file will contain the top 1500 domains on the >>>>internet. This will pretty much be static as AWS no longer publishes >>>>that information. It will be updated in the next 4 hours. (Currently >>>>empty.) >>>>The bad sites file is still updated every 4 hours from phishtank >>>>with the latest nefarious sites. >>>>The safe domains used while building the script are below. If you >>>>have any suggestions to add to that list, let me know. No, I will >>>>not add your personal domain. You can use the custom safe sites list >>>>in MailScanner for that. >>>> >>>> >>>># common short url providers >>>> >>>>$safe_domains[] = ' adf.ly'; >>>> >>>>$safe_domains[] = ' bit.ly'; >>>> >>>>$safe_domains[] = ' doiop.com'; >>>> >>>>$safe_domains[] = ' fur.ly'; >>>> >>>>$safe_domains[] = ' goo.gl'; >>>> >>>>$safe_domains[] = ' is.gd'; >>>> >>>>$safe_domains[] = ' mcaf.ee'; >>>> >>>>$safe_domains[] = ' ow.ly'; >>>> >>>>$safe_domains[] = ' snipurl.com'; >>>> >>>>$safe_domains[] = ' su.pr'; >>>> >>>>$safe_domains[] = ' tinyurl.com'; >>>> >>>>$safe_domains[] = ' v.gd'; >>>> >>>>$safe_domains[] = 'tiny.cc'; >>>> >>>>$safe_domains[] = ' tr.im'; >>>> >>>>$safe_domains[] = 'bit.do'; >>>> >>>>$safe_domains[] = ' po.st'; >>>> >>>>$safe_domains[] = ' lrd.to'; >>>> >>>>$safe_domains[] = ' g.co'; >>>> >>>> >>>> >>>># known safe domains >>>> >>>>$safe_domains[] = ' www.google.com'; >>>> >>>>$safe_domains[] = ' docs.google.com'; >>>> >>>>$safe_domains[] = ' accounts.google.com'; >>>> >>>>$safe_domains[] = ' sites.google.com'; >>>> >>>>$safe_domains[] = ' mail.google.com'; >>>> >>>>$safe_domains[] = ' schema.org'; >>>> >>>>$safe_domains[] = ' urldefense.proofpoint.com'; >>>> >>>> >>>> >>>> >>>> >>>>-- >>>> >>>>Jerry Benton >>>> >>>>www.mailborder.com >>>> >>>>+1 843-800-8605 >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>> >>> >>>-- >>>MailScanner mailing list >>>mailscanner at lists.mailscanner.info >>>http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex at vidadigital.com.pa Mon Nov 4 22:33:25 2024 From: alex at vidadigital.com.pa (Alex Neuman) Date: Mon, 04 Nov 2024 22:33:25 +0000 Subject: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> Message-ID: <5169f258-755a-7bfc-8d7a-054d8c9d7096@vidadigital.com.pa> Agreed Alex Neuman [https://d36urhup7zbd7q.cloudfront.net/5204598412279808/5825323278139392/signoff.gif?ck=1630013031.85] photo [https://d36urhup7zbd7q.cloudfront.net/dfe5f5a2-cfbb-41fa-8eda-a8abbad069ab/126199572_10158608990566480_8674984746572509731_n.format_png.resize_200x.jpeg] ? Alex Neuman Host / CEO, Vida Digital / Reliant Technologies +507 833-7900 [tel:+507833-7900] | +507 6781-9505? [tel:+5076781-9505] vidadigital.com.pa/ [https://mailtrack.io/l/b6973ba516c47d157e45e10e2dde06491dddb389?url=https%3A%2F%2Fvidadigital.com.pa%2F&u=2636895&signature=f14ac141b8e1f06d] | alex at vidadigital.com.pa? [alex at vidadigital.com.pa] https://wa.me/50767819505? [https://mailtrack.io/l/1e1129074ba2c53ddf84bd6fdc42dc1cc887b582?url=https%3A%2F%2Fwa.me%2Fhttps%3A%2F%2Fwa.me%2F50767819505&u=2636895&signature=fdab30733d968bec] soundcloud [https://cdn.gifo.wisestamp.com/s/scld/ff8800/64/0/background.png]https://mailtrack.io/l/f73896b8cc2915d0f03de1ee20b9944c88d034cb?url=https%3A%2F%2Fanchor.fm%2Fvidadigital&u=2636895&signature=55eb81ee3151dd7c wiseintro [https://cdn.gifo.wisestamp.com/s/wi/1CB7EB/64/0/background.png]https://mailtrack.io/l/f7176dff9941de6f8fc8f3c3f533ce382b517e4d?url=https%3A%2F%2Fwiseintro.co%2Fvidadigital&u=2636895&signature=9bba77db2c113bf8 tiktok [https://cdn.gifo.wisestamp.com/s/tt/000000/64/0/background.png]https://mailtrack.io/l/c918e7b35abba0a0387f85a26167b839e19770c5?url=https%3A%2F%2Ftiktok.com%2F%40vidadigital&u=2636895&signature=a528bd94e57ccdbd facebook [https://cdn.gifo.wisestamp.com/s/fb/3b5998/64/0/background.png]https://mailtrack.io/l/a5a0d882d983861006526483438b41f8db454771?url=https%3A%2F%2Ffacebook.com%2Fvidadigital&u=2636895&signature=7d725ac11e3b248f instagram [https://cdn.gifo.wisestamp.com/s/inst/E4405F/64/0/background.png]https://mailtrack.io/l/9ae5db7dc81e5c97448c5a63f84ef8246f68e5bc?url=https%3A%2F%2Finstagram.com%2Fvidadigital&u=2636895&signature=4de7a6fe6bd34b40 linkedin [https://cdn.gifo.wisestamp.com/s/ld/0077b5/64/0/background.png]https://mailtrack.io/l/f150411b9b076b3ac8f1e6a08aeac84e6486a584?url=https%3A%2F%2Flinkedin.com%2Fin%2Falexneuman&u=2636895&signature=d50a4c0ff71a6bc2 twitter [https://cdn.gifo.wisestamp.com/s/tw/000000/64/0/background.png]https://mailtrack.io/l/4a0b9d4889937377a7ad59738b798acc86a5b9c5?url=https%3A%2F%2Ftwitter.com%2Fvidadigital&u=2636895&signature=a192bdf0570d4346 youtube [https://cdn.gifo.wisestamp.com/s/yt/ff0000/64/0/background.png]https://mailtrack.io/l/87ff900a5b09a7749ee76f0a22cf19f5fab74b07?url=https%3A%2F%2Fyoutube.com%2Fvidadigital&u=2636895&signature=48417f3411a988c3 pinterest [https://cdn.gifo.wisestamp.com/s/ptrst/bd081c/64/0/background.png]https://mailtrack.io/l/d7464e24a48935051cfb1162b4ba2bcf164fbd0b?url=https%3A%2F%2Fpinterest.com%2Fvidadigital&u=2636895&signature=cac4f52604f9a47a ? __tpx__ [https://tracy.srv.wisestamp.com/px/wsid/Jkw9van6.png] [data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=3D] On Mon, Nov 4, 2024 at 3:44?PM Tracy Greggs via MailScanner wrote: > I can't argue that. > > > We all have the ability to tailor things to our needs, but Google is a digital > outhouse.? ?Onedrive isn't any better IMHO. > > > > > Insured Aircraft Title Service, LLC > [https://ci3.googleusercontent.com/meips/ADKq_NaBdfIkHoY0gZO7_dcdavDscLLGcMiMMjPO43AvgddwWNv4tBih5UL2tZTxkvA6MHvjQqT9=s0-d-e1-ft#https://i.imgur.com/CSAZQ7Y.png] > INSURED AIRCRAFT > TITLE SERVICE > > > Tracy Greggs > IT / Systems Administrator > > Insured Aircraft Title Service, LLC > 21 E Main St. STE 100 > Oklahoma City, OK. 73104 > > 800.654.4882 Toll Free > 405.681.6663 Local > tgreggs at insuredaircraft.com [tgreggs at insuredaircraft.com] > www.insuredaircraft.com > [https://mailtrack.io/l/470c8749a5e6dfa72a89c73b85ac83e6fa52076e?url=http%3A%2F%2Fwww.insuredaircraft.com&u=2636895&signature=7b876d4581e20aa6] > > Please be aware - Online bank fraud is on the rise and it is important that > you be cautious before wiring funds. If you receive an email containing WIRE > TRANSFER INSTRUCTIONS call your escrow officer before wiring funds to verify > the accuracy of the wiring instructions. Your escrow officer can be reached at > (405) 681-6663. > BE VERY CAREFUL IN WIRING FUNDS > > > > > > > ------ Original Message ------ > From "Shawn Iverson via MailScanner" [mailscanner at lists.mailscanner.info]> > To mailscanner at lists.mailscanner.info [mailscanner at lists.mailscanner.info] > Cc "Shawn Iverson" > Date 11/4/2024 2:38:09 PM > Subject {Disarmed} Re: Phishing Safe Sites > > > > > I feel that way about all of Google, not just drive. I'm not sure that > > google deserves blanket treatment for any of its subdomains.? Maybe it would > > be best to drop *.google.com > > [https://mailtrack.io/l/8d3029fa302e263886f4a8f5b93bb5ab4a3e3326?url=http%3A%2F%2Fgoogle.com&u=2636895&signature=4b7ea2fa4144826a] > > from $safe_domains and require everyone to manage locally? > > > > > > On 11/4/24 15:21, Jerry Benton wrote: > > > > > > > Not sure. Having second thoughts on drive.google.com > > > [https://mailtrack.io/l/5573c4ea8b7fe515078a19d68a83b4c54f938f0c?url=http%3A%2F%2Fdrive.google.com&u=2636895&signature=cc336aaa69adc5b2] > > > as well. Tracy has a good point about it being a source for malware. I see > > > it all the time as well. > > > > > > ? > > > > > > ? > > > > > > --? > > > > > > Jerry Benton > > > > > > www.mailborder.com > > > [https://mailtrack.io/l/234f1d71fbdb4cc2d9a32dd5ddb93f72bfbaebdc?url=http%3A%2F%2Fwww.mailborder.com&u=2636895&signature=f98d6ff908b48545] > > > > > > +1 843-800-8605 > > > > > > ? > > > > > > ? > > > > > > From: MailScanner > > mailscanner.info> > > > [mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] > > > on behalf of Alex Neuman via MailScanner > > mailscanner.info> [mailscanner at lists.mailscanner.info] > > > Date: Monday, November 4, 2024 at 15:06 > > > To: MailScanner Discussion > > > [mailscanner at lists.mailscanner.info] > > > Cc: Alex Neuman [alex at vidadigital.com.pa] > > > Subject: Re: Phishing Safe Sites > > > > > > Would this be the place to add: > > > https://.safelinks.protection.outlook.com > > > [https://mailtrack.io/l/df5c4695c75c536eb26cc7dc83239efb30b8a824?url=http%3A%2F%2Fsafelinks.protection.outlook.com&u=2636895&signature=f81c532091b393ad] > > > > > > ? > > > > > > > > > > > > > > > > > > ? > > > > > > > > > > > > > > > ? > > > > > > [https://ci3.googleusercontent.com/meips/ADKq_NZEZV34Kcc1v7x-SOBu-tfzwF2Z6dIsUz_OmqZSDiS90HQOd45pgyRqHEWBDiyhkTIiRNf2i_CKgo0gqUUFv8GIgTiOaE_3oJmBIq4epmS0HPQjjqFZ-XKP9DdgEE9oOIXmu26sa0xPK9MuXCSyJ9gFh9KJjdIC5WJAZbTnnnwzQluylQdhwItStIMdTi-ciliKQtfXcNJGBZC-4qNgUNowajrVH8dGXWZ2MqnphVE=s0-d-e1-ft#https://d36urhup7zbd7q.cloudfront.net/dfe5f5a2-cfbb-41fa-8eda-a8abbad069ab/126199572_10158608990566480_8674984746572509731_n.format_png.resize_200x.jpeg] > > > > > > ? > > > > > > Alex Neuman > > > Host / CEO,?Vida Digital / Reliant Technologies > > > > > > +507 833-7900 [tel:+507+833-7900] > > > > > > | > > > > > > +507 6781-9505 [tel:+507+6781-9505] > > > > > > | > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: https://vidadigital.com.pa/ > > > [https://mailtrack.io/l/7ba35feebe84dfbd9bd579c8b30cb95e5ebc759b?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=https%3A%2F%2Fvidadigital.com.pa%2F&u=2636895&signature=565d8f35be1e0787] > > > > > > > > > > > > > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_Nbuhuu7pZ9k94MDs6hcaRWwOg4oWW9fr4XA2AlpVW3Fx9OwT2Dtbw7kYRA4HfpUQ_r2lZne8QmbF1z1NlzV1DYlO_WFNhfUAUl8gh_xBpPMSgqrKBshTFsafHtciIkU2hQ=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/soundcloud/ff8800/64/0/background.png] > > > [https://mailtrack.io/l/1de29c09145987d1a413bb00c922d49fd8f4e0a4?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Fanchor.fm%2Fvidadigital&u=2636895&signature=d993aeb3af2c629a] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NY7NHBcJ34sLkYCA5XhB-cetFSNNiX_sVngAASTZPcummPQR3jDbQROXER8DohVMQ_Fe1Yw8HrgVqzJ8XkRMT4GLkLL9b0ElwU7dcxuuJpQj2hRWB9JShBxPxT-NuxLrw=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/wiseintro/1CB7EB/64/0/background.png] > > > [https://mailtrack.io/l/85292bc06c6c8a2c893bd13b7a5188eb88d200bb?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Fwiseintro.co%2Fvidadigital&u=2636895&signature=9235f6a446229fd8] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_Na4rq6bWTeP0EYFxyUYZXQwClaKAVsp8uvK1AqCxenFDQgH12meMxMcE2lwGn91sFL3NSCdLbsMq_MtNGiyxquPs1cLYGU4rvsgrGMJimsKIDP6KUWanMevyo_nUg=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/tiktok/EE1D52/64/0/background.png] > > > [https://mailtrack.io/l/6cb34d398335077540d6951c1183161cb3f3c8f1?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Ftiktok.com%2F%40vidadigital&u=2636895&signature=fe6ab5155849f245] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NYsmcxOZFEkUm1OiqfKuYpz6SZVh1KTPrIAdxYZHyzGlwW4yFu3kX1Reg7bjh14XjmROznP2bBt-IkfmZJCq5n3XjvnZ1WNiKMNU3I2DLJfeVaNa7_3ziJ113cnxCHP=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/facebook/3b5998/64/0/background.png] > > > [https://mailtrack.io/l/5af6a1557cfe12ccfc38ad345cf74a60338782d8?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Ffacebook.com%2Fvidadigital&u=2636895&signature=e5bf1226f0700d59] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NYTF4StG60ZxMbRsieJGmUVbNqX94w6KWbr4kxoUOA6C7BOY0JphO-3HsoY6F1E4_atd-a3k4vLY8X0FGdWJLDzGM64LVDGTYxoMYUo04WlsOB3nYSgW06SZs-TZj8RlQ=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/instagram/E4405F/64/0/background.png] > > > [https://mailtrack.io/l/7d0614893f69b10161b2a5527992272f145a3c8b?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Finstagram.com%2Fvidadigital&u=2636895&signature=384e89d165b66b8e] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NamNUHk9CD-LShrUH96S27X6ZT9aNLMDbgO75aR98G39ZpM1cDhmxCNUkGP7l-As-eBP5Rfe0QCHfV3NkfLadKGQQ-L3mARlBWukIH_a2Ap5bBdfsjEYDtNaBkhK0To=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/linkedin/0077b5/64/0/background.png] > > > [https://mailtrack.io/l/1bba1d145848dc0f8884845097fe8fc2781f4727?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Flinkedin.com%2Fin%2Falexneuman&u=2636895&signature=3c9addd9371c0c26] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NYf6ITUvsmsj4gFDD4PRblE0VDjq1hlh11Y1lwUpijejID1-6f61CsUMR8SO5kyDUJha6Vy745CC9robDP1kxk9DGmxqCrVYDgxfsSt-Sf81P_2MkkC6ZMdArkQWoc=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/twitter/55acee/64/0/background.png] > > > [https://mailtrack.io/l/e7d8be975b3411e102db8d7189f663358670addc?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Ftwitter.com%2Fvidadigital&u=2636895&signature=73eb573e8680cacb] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NYmGeIS70MzcOR4TRKTjYhrJOaX2eGPS4YqY0MZ-vuwHszT03LMJT_xgcqnwCNopZLxkkO-apQzeyZfgOg7kXY_uwzb5y0LjYrtuFDwWFWHmjXaPr6s7jvYtganzOM=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/youtube/cd201f/64/0/background.png] > > > [https://mailtrack.io/l/30e438fed56df5c2b73fb103c5b36ab1d709a62b?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Fyoutube.com%2Fvidadigital&u=2636895&signature=c8e9aeb59210be1b] > > > > > > MailScanner has detected definite fraud in the website at "mailtrack.io". > > > Do not trust this website: MailScanner has detected definite fraud in the > > > website at "mailtrack.io". Do not trust this website: MailScanner has > > > detected definite fraud in the website at "mailtrack.io". Do not trust > > > this website: MailScanner has detected definite fraud in the website at > > > "mailtrack.io". Do not trust this website: > > > [https://ci3.googleusercontent.com/meips/ADKq_NbkjKZDNWMxbmjeITvJpfHcygSiu9LqoN-Xaya8H9pnhAw22e-SwWC9H8SjVzAfNZDAWncwaoMREIXo2D_XtCAdcZz3vk-03D1-oLuTMtbzVdUd2_cHl0SmzOO_HeQEOQ=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/pinterest/bd081c/64/0/background.png] > > > [https://mailtrack.io/l/1e5961b7efd6813d9673f3d5c0560e8ccf2be4c5?w=bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw&url=http%3A%2F%2Fpinterest.com%2Fvidadigital&u=2636895&signature=9e74f510f23c70ac] > > > > > > ? > > > > > > > > > > > > > > > ? > > > > > > ? > > > > > > ? > > > > > > > > > [data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7] > > > > > > On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton > > > [jerry.benton at mailborder.com] wrote: > > > > > > > Ok, I added drive.google.com > > > > [https://mailtrack.io/l/a7c0ed096e504565533bae81bb40a425bfc5e2ab?url=http%3A%2F%2Fdrive.google.com&u=2636895&signature=9b93f972c92f431e]. > > > > > > > > ? > > > > > > > > ? > > > > > > > > --? > > > > > > > > Jerry Benton > > > > > > > > www.mailborder.com > > > > [https://mailtrack.io/l/d6d5ac6266b6393cb65773d734ecbf626388ded0?url=http%3A%2F%2Fwww.mailborder.com&u=2636895&signature=14706be37edca869] > > > > > > > > +1 843-800-8605 > > > > > > > > ? > > > > > > > > ? > > > > > > > > From: MailScanner > > > mailborder.com at lists.mailscanner.info > > > > [mailborder.com at lists.mailscanner.info]> on behalf of Shawn Iverson via > > > > MailScanner < mailscanner at lists.mailscanner.info > > > > [mailscanner at lists.mailscanner.info]> > > > > Date: Monday, November 4, 2024 at 12:15 > > > > To: mailscanner at lists.mailscanner.info > > > > [mailscanner at lists.mailscanner.info] > > > [mailscanner at lists.mailscanner.info]> > > > > Cc: Shawn Iverson > > > [shawniverson at summitgrid.com]> > > > > Subject: Re: Phishing Safe Sites > > > > > > > > drive.google.com > > > > [https://mailtrack.io/l/7c03704eb00d6696b9017d3d510d995f67141b89?url=http%3A%2F%2Fdrive.google.com&u=2636895&signature=7c0fcc03b1a311ff] > > > > seems to be a complaint I sometimes receive on the MailScanner project > > > > because it often shows up in Phishtank, and it only takes one bad URL > > > > reported to Phishtank to cause the entire drive.google.com > > > > [https://mailtrack.io/l/cdb23bfc64f8608f164cf206649616141c6fd846?url=http%3A%2F%2Fdrive.google.com&u=2636895&signature=0629a62848e4ea4b] > > > > to get flagged as a bad site. > > > > > > > > ? > > > > > > > > On 11/4/24 11:52, Jerry Benton wrote: > > > > > > > > > I was reviewing the build script for the safe and bad sites today. > > > > > > > > > > ? > > > > > > > > > > * The safe sites file will contain the top 1500 domains on the > > > > > internet. This will pretty much be static as AWS no longer > > > > > publishes that information. It will be updated in the next 4 hours. > > > > > (Currently empty.) > > > > > * The bad sites file is still updated every 4 hours from phishtank > > > > > with the latest nefarious sites. > > > > > * The safe domains used while building the script are below. If you > > > > > have any suggestions to add to that list, let me know. No, I will > > > > > not add your personal domain. You can use the custom safe sites > > > > > list in MailScanner for that. > > > > > > > > > > ? > > > > > > > > > > # common short url providers > > > > > > > > > > $safe_domains[] = ' adf.ly > > > > > [https://mailtrack.io/l/8bc06c111b9f11286bdfad6f5347f709cfddd022?url=http%3A%2F%2Fadf.ly&u=2636895&signature=cdfef472d4f505ad]'; > > > > > > > > > > $safe_domains[] = ' bit.ly > > > > > [https://mailtrack.io/l/82dfd1b6e152fc6b8827f1613df1ea1e04db2ff4?url=http%3A%2F%2Fbit.ly&u=2636895&signature=b4676b8f9b8f0d55]'; > > > > > > > > > > $safe_domains[] = ' doiop.com > > > > > [https://mailtrack.io/l/d622a4a81366f8d1d83c462854e7adf71d527da5?url=http%3A%2F%2Fdoiop.com&u=2636895&signature=184ac105130be779]'; > > > > > > > > > > $safe_domains[] = ' fur.ly > > > > > [https://mailtrack.io/l/6dbe5f9cb1aa33fac3a92acac8dab31188eb3616?url=http%3A%2F%2Ffur.ly&u=2636895&signature=602e9d0117f1265b]'; > > > > > > > > > > $safe_domains[] = ' goo.gl > > > > > [https://mailtrack.io/l/3f59cabc4a6e585e7606a630cdcec826e8b35d37?url=http%3A%2F%2Fgoo.gl&u=2636895&signature=6229c3b3e0354cf5]'; > > > > > > > > > > $safe_domains[] = ' is.gd > > > > > [https://mailtrack.io/l/43a4c7ed4e3a9c605c5dc6f55df5088bc15e68c3?url=http%3A%2F%2Fis.gd&u=2636895&signature=af92c1b0109a8465]'; > > > > > > > > > > $safe_domains[] = ' mcaf.ee > > > > > [https://mailtrack.io/l/fb64a4eff2768aaeb2ecb889a671d6fc9460bbb4?url=http%3A%2F%2Fmcaf.ee&u=2636895&signature=e38fcc82b827fd12]'; > > > > > > > > > > $safe_domains[] = ' ow.ly > > > > > [https://mailtrack.io/l/fbaaa908d74e0f82085ddff932bb874c0358bb2c?url=http%3A%2F%2Fow.ly&u=2636895&signature=fc2e101dea5bcca1]'; > > > > > > > > > > $safe_domains[] = ' snipurl.com > > > > > [https://mailtrack.io/l/e81ee60858a33966573ba79b3b224a0f8fc6601c?url=http%3A%2F%2Fsnipurl.com&u=2636895&signature=3916c9bd1f6d01a6]'; > > > > > > > > > > $safe_domains[] = ' su.pr > > > > > [https://mailtrack.io/l/179276575f3749d0f98d1f1d04527c134a7ea6db?url=http%3A%2F%2Fsu.pr&u=2636895&signature=b187ab345a5bdd1f]'; > > > > > > > > > > $safe_domains[] = ' tinyurl.com > > > > > [https://mailtrack.io/l/18725cf73c7055489147f3ba110a892994d21710?url=http%3A%2F%2Ftinyurl.com&u=2636895&signature=ce3ad033422de382]'; > > > > > > > > > > $safe_domains[] = ' v.gd > > > > > [https://mailtrack.io/l/cc52e7fe39ba98690878904f8fb3c431743f4aa8?url=http%3A%2F%2Fv.gd&u=2636895&signature=30a5efab7b99ac0b]'; > > > > > > > > > > $safe_domains[] = 'tiny.cc'; > > > > > > > > > > $safe_domains[] = ' tr.im > > > > > [https://mailtrack.io/l/a72fe045748e62d4cc811396d408f1a7548c69c1?url=http%3A%2F%2Ftr.im&u=2636895&signature=0c09d35a50eb6c00]'; > > > > > > > > > > $safe_domains[] = 'bit.do'; > > > > > > > > > > $safe_domains[] = ' po.st > > > > > [https://mailtrack.io/l/c8b765513290d588cb2ad6ac27223830f3b4d644?url=http%3A%2F%2Fpo.st&u=2636895&signature=889fb07858f4b2bb]'; > > > > > > > > > > $safe_domains[] = ' lrd.to > > > > > [https://mailtrack.io/l/492017f40e58e75343dd10af643262cdbec6bd0c?url=http%3A%2F%2Flrd.to&u=2636895&signature=27fb53bf92feddeb]'; > > > > > > > > > > $safe_domains[] = ' g.co > > > > > [https://mailtrack.io/l/219c04d62e7a7db4c6250fea2b78a417792a0d06?url=http%3A%2F%2Fg.co&u=2636895&signature=8278d36f8ec9dd93]'; > > > > > > > > > > ? > > > > > > > > > > # known safe domains > > > > > > > > > > $safe_domains[] = ' www.google.com > > > > > [https://mailtrack.io/l/6aef59551cfd35c1916d9e7311a17793b885cb3f?url=http%3A%2F%2Fwww.google.com&u=2636895&signature=d456c9caf5b530bc]'; > > > > > > > > > > $safe_domains[] = ' docs.google.com > > > > > [https://mailtrack.io/l/4f26f27b994a0775f92c7213209880332f458abb?url=http%3A%2F%2Fdocs.google.com&u=2636895&signature=59f9cbc17986e8c4]'; > > > > > > > > > > $safe_domains[] = ' accounts.google.com > > > > > [https://mailtrack.io/l/f1eb68beb7cb99b03a227048bd5620408ce1185a?url=http%3A%2F%2Faccounts.google.com&u=2636895&signature=fb89b6b7f96165a9]'; > > > > > > > > > > $safe_domains[] = ' sites.google.com > > > > > [https://mailtrack.io/l/04305485fa72ca0d4b4a2561241eb7f8a824cc77?url=http%3A%2F%2Fsites.google.com&u=2636895&signature=acf06efbd49d554a]'; > > > > > > > > > > $safe_domains[] = ' mail.google.com > > > > > [https://mailtrack.io/l/c05f559c8c936bb2dc467eb30dc5ed1061cd1c66?url=http%3A%2F%2Fmail.google.com&u=2636895&signature=f6d68a0fdf0b157b]'; > > > > > > > > > > $safe_domains[] = ' schema.org > > > > > [https://mailtrack.io/l/74c591391844a56016b16811f6b6b9a21bb06019?url=http%3A%2F%2Fschema.org&u=2636895&signature=a66701c0b6fc19ac]'; > > > > > > > > > > $safe_domains[] = ' urldefense.proofpoint.com > > > > > [https://mailtrack.io/l/a639959785800f7df1d7b9482a0a31970d93b98b?url=http%3A%2F%2Furldefense.proofpoint.com&u=2636895&signature=da025cfe14cbb160]'; > > > > > > > > > > ? > > > > > > > > > > ? > > > > > > > > > > --? > > > > > > > > > > Jerry Benton > > > > > > > > > > www.mailborder.com > > > > > [https://mailtrack.io/l/db71d22807bb2fdaa0e61d94adcd6f3b9e37cf6b?url=http%3A%2F%2Fwww.mailborder.com&u=2636895&signature=b47e9c329cd2c5a4] > > > > > > > > > > +1 843-800-8605 > > > > > > > > > > ? > > > > > > > > > > ? > > > > > > > > > > ? > > > > > > > > > > ? > > > > > > > > > > > > > > > > -- > > > > MailScanner mailing list > > > > mailscanner at lists.mailscanner.info [mailscanner at lists.mailscanner.info] > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > [https://mailtrack.io/l/8eaaec0aaf37d3d017bacc2d78d784b07fbc98c0?url=http%3A%2F%2Flists.mailscanner.info%2Fmailman%2Flistinfo%2Fmailscanner&u=2636895&signature=96ad9960d57fb557] > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info [mailscanner at lists.mailscanner.info] > http://lists.mailscanner.info/mailman/listinfo/mailscanner > [https://mailtrack.io/l/136a5e43a35c5acd2888e5b620609b40f4c006f0?url=http%3A%2F%2Flists.mailscanner.info%2Fmailman%2Flistinfo%2Fmailscanner&u=2636895&signature=fea2979de7cc11ad] -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Tue Nov 5 00:11:33 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Tue, 5 Nov 2024 00:11:33 +0000 Subject: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites In-Reply-To: <8c628f6f5d1fc83989a02c9f148ebd4a@vidadigital.com.pa> References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> <8c628f6f5d1fc83989a02c9f148ebd4a@vidadigital.com.pa> Message-ID: I went ahead and removed all the google stuff. It will be out at the next run in an hour or so. I have also removed the uncompressed version of the update files. I still see hits on the server downloading them with the old scripts when I wrote an update for that years ago. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Alex Neuman via MailScanner Date: Monday, November 4, 2024 at 19:07 To: MailScanner Discussion Cc: Alex Neuman Subject: Re: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites Agreed [Alex Neuman] [photo] Alex Neuman Host / CEO, Vida Digital / Reliant Technologies +507 833-7900 | +507 6781-9505 vidadigital.com.pa/ | alex at vidadigital.com.pa https://wa.me/50767819505 [soundcloud] [wiseintro] [tiktok] [facebook] [instagram] [linkedin] [twitter] [youtube] [pinterest] [__tpx__] [https://mailtrack.io/trace/mail/w/bWFpbHNjYW5uZXJAbGlzdHMubWFpbHNjYW5uZXIuaW5mbw/f978f6165139b84ead79ecc2b9ad6704563e0283.png?u=2636895] On Mon, Nov 4, 2024 at 3:44?PM Tracy Greggs via MailScanner wrote: I can't argue that. We all have the ability to tailor things to our needs, but Google is a digital outhouse. Onedrive isn't any better IMHO. [Insured Aircraft Title Service, LLC] INSURED AIRCRAFT TITLE SERVICE Tracy Greggs IT / Systems Administrator Insured Aircraft Title Service, LLC 21 E Main St. STE 100 Oklahoma City, OK. 73104 800.654.4882 Toll Free 405.681.6663 Local tgreggs at insuredaircraft.com www.insuredaircraft.com Please be aware - Online bank fraud is on the rise and it is important that you be cautious before wiring funds. If you receive an email containing WIRE TRANSFER INSTRUCTIONS call your escrow officer before wiring funds to verify the accuracy of the wiring instructions. Your escrow officer can be reached at (405) 681-6663. BE VERY CAREFUL IN WIRING FUNDS ------ Original Message ------ From "Shawn Iverson via MailScanner" > To mailscanner at lists.mailscanner.info Cc "Shawn Iverson" > Date 11/4/2024 2:38:09 PM Subject {Disarmed} Re: Phishing Safe Sites I feel that way about all of Google, not just drive. I'm not sure that google deserves blanket treatment for any of its subdomains. Maybe it would be best to drop *.google.com from $safe_domains and require everyone to manage locally? On 11/4/24 15:21, Jerry Benton wrote: Not sure. Having second thoughts on drive.google.com as well. Tracy has a good point about it being a source for malware. I see it all the time as well. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Alex Neuman via MailScanner Date: Monday, November 4, 2024 at 15:06 To: MailScanner Discussion Cc: Alex Neuman Subject: Re: Phishing Safe Sites Would this be the place to add: https://.safelinks.protection.outlook.com ? [https://ci3.googleusercontent.com/meips/ADKq_NZEZV34Kcc1v7x-SOBu-tfzwF2Z6dIsUz_OmqZSDiS90HQOd45pgyRqHEWBDiyhkTIiRNf2i_CKgo0gqUUFv8GIgTiOaE_3oJmBIq4epmS0HPQjjqFZ-XKP9DdgEE9oOIXmu26sa0xPK9MuXCSyJ9gFh9KJjdIC5WJAZbTnnnwzQluylQdhwItStIMdTi-ciliKQtfXcNJGBZC-4qNgUNowajrVH8dGXWZ2MqnphVE=s0-d-e1-ft#https://d36urhup7zbd7q.cloudfront.net/dfe5f5a2-cfbb-41fa-8eda-a8abbad069ab/126199572_10158608990566480_8674984746572509731_n.format_png.resize_200x.jpeg] Alex Neuman Host / CEO, Vida Digital / Reliant Technologies +507 833-7900 | +507 6781-9505 | MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: https://vidadigital.com.pa/ MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_Nbuhuu7pZ9k94MDs6hcaRWwOg4oWW9fr4XA2AlpVW3Fx9OwT2Dtbw7kYRA4HfpUQ_r2lZne8QmbF1z1NlzV1DYlO_WFNhfUAUl8gh_xBpPMSgqrKBshTFsafHtciIkU2hQ=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/soundcloud/ff8800/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NY7NHBcJ34sLkYCA5XhB-cetFSNNiX_sVngAASTZPcummPQR3jDbQROXER8DohVMQ_Fe1Yw8HrgVqzJ8XkRMT4GLkLL9b0ElwU7dcxuuJpQj2hRWB9JShBxPxT-NuxLrw=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/wiseintro/1CB7EB/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_Na4rq6bWTeP0EYFxyUYZXQwClaKAVsp8uvK1AqCxenFDQgH12meMxMcE2lwGn91sFL3NSCdLbsMq_MtNGiyxquPs1cLYGU4rvsgrGMJimsKIDP6KUWanMevyo_nUg=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/tiktok/EE1D52/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NYsmcxOZFEkUm1OiqfKuYpz6SZVh1KTPrIAdxYZHyzGlwW4yFu3kX1Reg7bjh14XjmROznP2bBt-IkfmZJCq5n3XjvnZ1WNiKMNU3I2DLJfeVaNa7_3ziJ113cnxCHP=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/facebook/3b5998/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NYTF4StG60ZxMbRsieJGmUVbNqX94w6KWbr4kxoUOA6C7BOY0JphO-3HsoY6F1E4_atd-a3k4vLY8X0FGdWJLDzGM64LVDGTYxoMYUo04WlsOB3nYSgW06SZs-TZj8RlQ=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/instagram/E4405F/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NamNUHk9CD-LShrUH96S27X6ZT9aNLMDbgO75aR98G39ZpM1cDhmxCNUkGP7l-As-eBP5Rfe0QCHfV3NkfLadKGQQ-L3mARlBWukIH_a2Ap5bBdfsjEYDtNaBkhK0To=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/linkedin/0077b5/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NYf6ITUvsmsj4gFDD4PRblE0VDjq1hlh11Y1lwUpijejID1-6f61CsUMR8SO5kyDUJha6Vy745CC9robDP1kxk9DGmxqCrVYDgxfsSt-Sf81P_2MkkC6ZMdArkQWoc=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/twitter/55acee/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NYmGeIS70MzcOR4TRKTjYhrJOaX2eGPS4YqY0MZ-vuwHszT03LMJT_xgcqnwCNopZLxkkO-apQzeyZfgOg7kXY_uwzb5y0LjYrtuFDwWFWHmjXaPr6s7jvYtganzOM=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/youtube/cd201f/64/0/background.png] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [https://ci3.googleusercontent.com/meips/ADKq_NbkjKZDNWMxbmjeITvJpfHcygSiu9LqoN-Xaya8H9pnhAw22e-SwWC9H8SjVzAfNZDAWncwaoMREIXo2D_XtCAdcZz3vk-03D1-oLuTMtbzVdUd2_cHl0SmzOO_HeQEOQ=s0-d-e1-ft#https://cdn.gifo.wisestamp.com/social/pinterest/bd081c/64/0/background.png] ? On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton wrote: Ok, I added drive.google.com. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner > on behalf of Shawn Iverson via MailScanner < mailscanner at lists.mailscanner.info> Date: Monday, November 4, 2024 at 12:15 To: mailscanner at lists.mailscanner.info > Cc: Shawn Iverson > Subject: Re: Phishing Safe Sites drive.google.com seems to be a complaint I sometimes receive on the MailScanner project because it often shows up in Phishtank, and it only takes one bad URL reported to Phishtank to cause the entire drive.google.com to get flagged as a bad site. On 11/4/24 11:52, Jerry Benton wrote: I was reviewing the build script for the safe and bad sites today. * The safe sites file will contain the top 1500 domains on the internet. This will pretty much be static as AWS no longer publishes that information. It will be updated in the next 4 hours. (Currently empty.) * The bad sites file is still updated every 4 hours from phishtank with the latest nefarious sites. * The safe domains used while building the script are below. If you have any suggestions to add to that list, let me know. No, I will not add your personal domain. You can use the custom safe sites list in MailScanner for that. # common short url providers $safe_domains[] = ' adf.ly'; $safe_domains[] = ' bit.ly'; $safe_domains[] = ' doiop.com'; $safe_domains[] = ' fur.ly'; $safe_domains[] = ' goo.gl'; $safe_domains[] = ' is.gd'; $safe_domains[] = ' mcaf.ee'; $safe_domains[] = ' ow.ly'; $safe_domains[] = ' snipurl.com'; $safe_domains[] = ' su.pr'; $safe_domains[] = ' tinyurl.com'; $safe_domains[] = ' v.gd'; $safe_domains[] = 'tiny.cc'; $safe_domains[] = ' tr.im'; $safe_domains[] = 'bit.do'; $safe_domains[] = ' po.st'; $safe_domains[] = ' lrd.to'; $safe_domains[] = ' g.co'; # known safe domains $safe_domains[] = ' www.google.com'; $safe_domains[] = ' docs.google.com'; $safe_domains[] = ' accounts.google.com'; $safe_domains[] = ' sites.google.com'; $safe_domains[] = ' mail.google.com'; $safe_domains[] = ' schema.org'; $safe_domains[] = ' urldefense.proofpoint.com'; -- Jerry Benton www.mailborder.com +1 843-800-8605 -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.gif Type: image/gif Size: 42 bytes Desc: image001.gif URL: From shawniverson at summitgrid.com Wed Nov 6 09:54:14 2024 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Wed, 6 Nov 2024 04:54:14 -0500 Subject: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> <8c628f6f5d1fc83989a02c9f148ebd4a@vidadigital.com.pa> Message-ID: I am getting reports that the compressed download is failing. Should I prepare an update to MailScanner? https://github.com/MailScanner/v5/issues/694 On 11/4/24 19:11, Jerry Benton wrote: > > I went ahead and removed all the google stuff. It will be out at the > next run in an hour or so. > > I have also removed the uncompressed version of the update files. I > still see hits on the server downloading them with the old scripts > when I wrote an update for that years ago. > > -- > > Jerry Benton > > www.mailborder.com > > +1 843-800-8605 > > *From: *MailScanner > > on behalf of Alex Neuman via MailScanner > > *Date: *Monday, November 4, 2024 at 19:07 > *To: *MailScanner Discussion > *Cc: *Alex Neuman > *Subject: *Re: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites > > Agreed > > > Alex Neuman > > > photo > > > > > > *Alex Neuman * > *Host / CEO, Vida Digital / Reliant Technologies * > > +507 833-7900 > > > > *| * > > > > +507 6781-9505 > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* vidadigital.com.pa/ > > > > > *| * > > > > alex at vidadigital.com.pa > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > https://wa.me/50767819505 > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* soundcloud > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* wiseintro > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* tiktok > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* facebook > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* instagram > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* linkedin > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* twitter > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* youtube > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* pinterest > > > __tpx__ > > On Mon, Nov 4, 2024 at 3:44?PM Tracy Greggs via MailScanner > wrote: > > I can't argue that. > > We all have the ability to tailor things to our needs, but Google > is a digital outhouse.? ?Onedrive isn't any better IMHO. > > Insured Aircraft Title Service, LLC > > *INSURED AIRCRAFT* > > *TITLE SERVICE* > > > > > > > *Tracy Greggs* > > IT / Systems Administrator > > Insured Aircraft Title Service, LLC > > 21 E Main St. STE 100 > > Oklahoma City, OK. 73104 > > 800.654.4882 Toll Free > > 405.681.6663 Local > > tgreggs at insuredaircraft.com > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > www.insuredaircraft.com > > > *Please be aware*- Online bank fraud is on the rise and it is > important that you be cautious before wiring funds. If you receive > an email containing WIRE TRANSFER INSTRUCTIONS call your escrow > officer before wiring funds to verify the accuracy of the wiring > instructions. Your escrow officer can be reached at (405) 681-6663. > > *BE VERY CAREFUL IN WIRING FUNDS* > > > ------ Original Message ------ > > From "Shawn Iverson via MailScanner" > > > To mailscanner at lists.mailscanner.info > > Cc "Shawn Iverson" > > Date 11/4/2024 2:38:09 PM > > Subject {Disarmed} Re: Phishing Safe Sites > > I feel that way about all of Google, not just drive. I'm not > sure that google deserves blanket treatment for any of its > subdomains.? Maybe it would be best to drop *.*MailScanner has > detected definite fraud in the website at "mailtrack.io". Do > /not/ trust this website:* google.com > > from $safe_domains and require everyone to manage locally? > > On 11/4/24 15:21, Jerry Benton wrote: > > Not sure. Having second thoughts on *MailScanner has > detected definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* drive.google.com > > as well. Tracy has a good point about it being a source > for malware. I see it all the time as well. > > -- > > Jerry Benton > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > www.mailborder.com > > > +1 843-800-8605 > > *From: *MailScanner > > > on behalf of Alex Neuman via MailScanner > > > *Date: *Monday, November 4, 2024 at 15:06 > *To: *MailScanner Discussion > > > *Cc: *Alex Neuman > > *Subject: *Re: Phishing Safe Sites > > Would this be the place to add: > https://.*MailScanner has detected > definite fraud in the website at "mailtrack.io". Do /not/ > trust this website:* safelinks.protection.outlook.com > > > ? > > > > > > > > *Alex Neuman * > *Host / CEO,?Vida Digital / Reliant Technologies * > > +507 833-7900 > > > > *|* > > > > +507 6781-9505 > > > > *|* > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > *https://vidadigital.com.pa/ > > > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* *MailScanner > has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website: > * > > > ? > > > yH5BAEAAAAALAAAAAABAAEAAAIBRAA7 > > On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton > > wrote: > > Ok, I added *MailScanner has detected definite fraud > in the website at "mailtrack.io". Do /not/ trust this > website:* drive.google.com > . > > > -- > > Jerry Benton > > *MailScanner has detected definite fraud in the > website at "mailtrack.io". Do /not/ trust this > website:* www.mailborder.com > > > +1 843-800-8605 > > *From: *MailScanner mailborder.com at lists.mailscanner.info> on behalf of > Shawn Iverson via MailScanner < > mailscanner at lists.mailscanner.info> > *Date: *Monday, November 4, 2024 at 12:15 > *To: *mailscanner at lists.mailscanner.info > > *Cc: *Shawn Iverson > *Subject: *Re: Phishing Safe Sites > > *MailScanner has detected definite fraud in the > website at "mailtrack.io". Do /not/ trust this > website:* drive.google.com > > seems to be a complaint I sometimes receive on the > MailScanner project because it often shows up in > Phishtank, and it only takes one bad URL reported to > Phishtank to cause the entire *MailScanner has > detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > drive.google.com > > to get flagged as a bad site. > > On 11/4/24 11:52, Jerry Benton wrote: > > I was reviewing the build script for the safe and > bad sites today. > > * The safe sites file will contain the top 1500 > domains on the internet. This will pretty much > be static as AWS no longer publishes that > information. It will be updated in the next 4 > hours. (Currently empty.) > * The bad sites file is still updated every 4 > hours from phishtank with the latest nefarious > sites. > * The safe domains used while building the > script are below. If you have any suggestions > to add to that list, let me know. No, I will > not add your personal domain. You can use the > custom safe sites list in MailScanner for that. > > # common short url providers > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* adf.ly > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* bit.ly > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* doiop.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* fur.ly > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* goo.gl > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* is.gd > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* mcaf.ee > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* ow.ly > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* snipurl.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* su.pr > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* tinyurl.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* v.gd > '; > > $safe_domains[] = 'tiny.cc'; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* tr.im > '; > > $safe_domains[] = 'bit.do'; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* po.st > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* lrd.to > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* g.co > '; > > # known safe domains > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* www.google.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* docs.google.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* accounts.google.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* sites.google.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* mail.google.com > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* schema.org > '; > > $safe_domains[] = ' *MailScanner has detected > definite fraud in the website at "mailtrack.io". > Do /not/ trust this website:* > urldefense.proofpoint.com > '; > > -- > > Jerry Benton > > *MailScanner has detected definite fraud in the > website at "mailtrack.io". Do /not/ trust this > website:* www.mailborder.com > > > +1 843-800-8605 > > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > *MailScanner has detected definite fraud in the > website at "mailtrack.io". Do /not/ trust this > website:* > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > *MailScanner has detected definite fraud in the website at > "mailtrack.io". Do /not/ trust this website:* > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.gif Type: image/gif Size: 42 bytes Desc: not available URL: From shawniverson at summitgrid.com Wed Nov 6 10:08:34 2024 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Wed, 6 Nov 2024 05:08:34 -0500 Subject: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> <8c628f6f5d1fc83989a02c9f148ebd4a@vidadigital.com.pa> Message-ID: I'm going to go ahead and update MailScanner and tell everyone to switch to https for /usr/sbin/ms-update-phishing On 11/6/24 04:54, Shawn Iverson via MailScanner wrote: > > I am getting reports that the compressed download is failing. Should I > prepare an update to MailScanner? > > https://github.com/MailScanner/v5/issues/694 > > On 11/4/24 19:11, Jerry Benton wrote: >> >> I went ahead and removed all the google stuff. It will be out at the >> next run in an hour or so. >> >> I have also removed the uncompressed version of the update files. I >> still see hits on the server downloading them with the old scripts >> when I wrote an update for that years ago. >> >> -- >> >> Jerry Benton >> >> www.mailborder.com >> >> +1 843-800-8605 >> >> *From: *MailScanner >> >> on behalf of Alex Neuman via MailScanner >> >> *Date: *Monday, November 4, 2024 at 19:07 >> *To: *MailScanner Discussion >> *Cc: *Alex Neuman >> *Subject: *Re: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites >> >> Agreed >> >> >> Alex Neuman >> >> >> photo >> >> >> >> >> >> *Alex Neuman * >> *Host / CEO, Vida Digital / Reliant Technologies * >> >> +507 833-7900 >> >> >> >> *| * >> >> >> >> +507 6781-9505 >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* >> vidadigital.com.pa/ >> >> >> >> >> *| * >> >> >> >> *MailScanner has detected a possible fraud attempt from >> "vidadigital.com.pa" claiming to be* *MailScanner has detected a >> possible fraud attempt from "vidadigital.com.pa" claiming to be* >> alex at vidadigital.com.pa >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* >> https://wa.me/50767819505 >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* soundcloud >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* wiseintro >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* tiktok >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* facebook >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* instagram >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* linkedin >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* twitter >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* youtube >> >> >> >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this website:* pinterest >> >> >> __tpx__ >> >> On Mon, Nov 4, 2024 at 3:44?PM Tracy Greggs via MailScanner >> wrote: >> >> I can't argue that. >> >> We all have the ability to tailor things to our needs, but Google >> is a digital outhouse.? ?Onedrive isn't any better IMHO. >> >> Insured Aircraft Title Service, LLC >> >> *INSURED AIRCRAFT* >> >> *TITLE SERVICE* >> >> >> >> >> >> >> *Tracy Greggs* >> >> IT / Systems Administrator >> >> Insured Aircraft Title Service, LLC >> >> 21 E Main St. STE 100 >> >> Oklahoma City, OK. 73104 >> >> 800.654.4882 Toll Free >> >> 405.681.6663 Local >> >> tgreggs at insuredaircraft.com >> >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do >> /not/ trust this website:* *MailScanner has detected definite >> fraud in the website at "mailtrack.io". Do /not/ trust this >> website:* www.insuredaircraft.com >> >> >> *Please be aware*- Online bank fraud is on the rise and it is >> important that you be cautious before wiring funds. If you >> receive an email containing WIRE TRANSFER INSTRUCTIONS call your >> escrow officer before wiring funds to verify the accuracy of the >> wiring instructions. Your escrow officer can be reached at (405) >> 681-6663. >> >> *BE VERY CAREFUL IN WIRING FUNDS* >> >> >> ------ Original Message ------ >> >> From "Shawn Iverson via MailScanner" >> >> >> To mailscanner at lists.mailscanner.info >> >> Cc "Shawn Iverson" >> >> Date 11/4/2024 2:38:09 PM >> >> Subject {Disarmed} Re: Phishing Safe Sites >> >> I feel that way about all of Google, not just drive. I'm not >> sure that google deserves blanket treatment for any of its >> subdomains.? Maybe it would be best to drop *.*MailScanner >> has detected definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has detected >> definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite fraud >> in the website at "mailtrack.io". Do /not/ trust this >> website:* google.com >> >> from $safe_domains and require everyone to manage locally? >> >> On 11/4/24 15:21, Jerry Benton wrote: >> >> Not sure. Having second thoughts on *MailScanner has >> detected definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has detected >> definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite >> fraud in the website at "mailtrack.io". Do /not/ trust >> this website:* drive.google.com >> >> as well. Tracy has a good point about it being a source >> for malware. I see it all the time as well. >> >> -- >> >> Jerry Benton >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> www.mailborder.com >> >> >> +1 843-800-8605 >> >> *From: *MailScanner >> >> >> on behalf of Alex Neuman via MailScanner >> >> >> *Date: *Monday, November 4, 2024 at 15:06 >> *To: *MailScanner Discussion >> >> >> *Cc: *Alex Neuman >> >> *Subject: *Re: Phishing Safe Sites >> >> Would this be the place to add: >> https://.*MailScanner has detected >> definite fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected definite >> fraud in the website at "mailtrack.io". Do /not/ trust >> this website:* *MailScanner has detected definite fraud >> in the website at "mailtrack.io". Do /not/ trust this >> website:* safelinks.protection.outlook.com >> >> >> ? >> >> >> >> >> >> >> >> *Alex Neuman * >> *Host / CEO,?Vida Digital / Reliant Technologies * >> >> +507 833-7900 >> >> >> >> *|* >> >> >> >> +507 6781-9505 >> >> >> >> *|* >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> *https://vidadigital.com.pa/ >> >> >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the website >> at "mailtrack.io". Do /not/ trust this website: >> * >> >> >> ? >> >> >> yH5BAEAAAAALAAAAAABAAEAAAIBRAA7 >> >> On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton >> >> wrote: >> >> Ok, I added *MailScanner has detected definite fraud >> in the website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* drive.google.com >> . >> >> >> -- >> >> Jerry Benton >> >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* www.mailborder.com >> >> >> +1 843-800-8605 >> >> *From: *MailScanner >> > mailborder.com at lists.mailscanner.info> on behalf of >> Shawn Iverson via MailScanner < >> mailscanner at lists.mailscanner.info> >> *Date: *Monday, November 4, 2024 at 12:15 >> *To: *mailscanner at lists.mailscanner.info >> >> *Cc: *Shawn Iverson >> *Subject: *Re: Phishing Safe Sites >> >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* drive.google.com >> >> seems to be a complaint I sometimes receive on the >> MailScanner project because it often shows up in >> Phishtank, and it only takes one bad URL reported to >> Phishtank to cause the entire *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* drive.google.com >> >> to get flagged as a bad site. >> >> On 11/4/24 11:52, Jerry Benton wrote: >> >> I was reviewing the build script for the safe and >> bad sites today. >> >> * The safe sites file will contain the top 1500 >> domains on the internet. This will pretty >> much be static as AWS no longer publishes >> that information. It will be updated in the >> next 4 hours. (Currently empty.) >> * The bad sites file is still updated every 4 >> hours from phishtank with the latest >> nefarious sites. >> * The safe domains used while building the >> script are below. If you have any suggestions >> to add to that list, let me know. No, I will >> not add your personal domain. You can use the >> custom safe sites list in MailScanner for that. >> >> # common short url providers >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* adf.ly >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* bit.ly >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* doiop.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* fur.ly >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* goo.gl >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* is.gd >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* mcaf.ee >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* ow.ly >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* snipurl.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* su.pr >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* tinyurl.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* v.gd >> '; >> >> $safe_domains[] = 'tiny.cc'; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* tr.im >> '; >> >> $safe_domains[] = 'bit.do'; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* po.st >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* lrd.to >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* g.co >> '; >> >> # known safe domains >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* www.google.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* docs.google.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* accounts.google.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* sites.google.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* mail.google.com >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* schema.org >> '; >> >> $safe_domains[] = ' *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* urldefense.proofpoint.com >> '; >> >> -- >> >> Jerry Benton >> >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite >> fraud in the website at "mailtrack.io". Do /not/ >> trust this website:* *MailScanner has detected >> definite fraud in the website at "mailtrack.io". >> Do /not/ trust this website:* www.mailborder.com >> >> >> +1 843-800-8605 >> >> >> >> >> >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> *MailScanner has detected definite fraud in the >> website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* *MailScanner has detected definite fraud in >> the website at "mailtrack.io". Do /not/ trust this >> website:* >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> >> >> >> >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> *MailScanner has detected definite fraud in the website at >> "mailtrack.io". Do /not/ trust this website:* *MailScanner has >> detected definite fraud in the website at "mailtrack.io". Do >> /not/ trust this website:* *MailScanner has detected definite >> fraud in the website at "mailtrack.io". Do /not/ trust this >> website:* >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.gif Type: image/gif Size: 42 bytes Desc: not available URL: From jerry.benton at mailborder.com Wed Nov 6 11:08:52 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Wed, 6 Nov 2024 11:08:52 +0000 Subject: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites In-Reply-To: References: <88cbfe02-8759-4eb7-af17-016e8e5f46ff@summitgrid.com> <8a809c7cfeb39aba6406ef3d2f42bcb4@vidadigital.com.pa> <641faba5-a39f-44d8-ac6e-9b6cabf3dd1d@summitgrid.com> <8c628f6f5d1fc83989a02c9f148ebd4a@vidadigital.com.pa> Message-ID: Yeah, certbot put in some automatic redirects. I disabled them. They should work now. Howevr, the URLs should be updated to https. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Shawn Iverson via MailScanner Date: Wednesday, November 6, 2024 at 06:01 To: mailscanner at lists.mailscanner.info Cc: Shawn Iverson Subject: Re: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites I'm going to go ahead and update MailScanner and tell everyone to switch to https for /usr/sbin/ms-update-phishing On 11/6/24 04:54, Shawn Iverson via MailScanner wrote: I am getting reports that the compressed download is failing. Should I prepare an update to MailScanner? MailScanner has detected definite fraud in the website at "github.com". Do not trust this website: https://github.com/MailScanner/v5/issues/694 On 11/4/24 19:11, Jerry Benton wrote: I went ahead and removed all the google stuff. It will be out at the next run in an hour or so. I have also removed the uncompressed version of the update files. I still see hits on the server downloading them with the old scripts when I wrote an update for that years ago. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Alex Neuman via MailScanner Date: Monday, November 4, 2024 at 19:07 To: MailScanner Discussion Cc: Alex Neuman Subject: Re: {Disarmed} Re: {Disarmed} Re: Phishing Safe Sites Agreed [Image removed by sender. Alex Neuman] [Image removed by sender. photo] Alex Neuman Host / CEO, Vida Digital / Reliant Technologies +507 833-7900 | +507 6781-9505 MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: vidadigital.com.pa/ | MailScanner has detected a possible fraud attempt from "vidadigital.com.pa" claiming to be MailScanner has detected a possible fraud attempt from "vidadigital.com.pa" claiming to be MailScanner has detected a possible fraud attempt from "vidadigital.com.pa" claiming to be alex at vidadigital.com.pa MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: https://wa.me/50767819505 MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. soundcloud] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. wiseintro] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. tiktok] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. facebook] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. instagram] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. linkedin] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. twitter] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. youtube] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender. pinterest] [Image removed by sender. __tpx__] [Image removed by sender.] On Mon, Nov 4, 2024 at 3:44?PM Tracy Greggs via MailScanner wrote: I can't argue that. We all have the ability to tailor things to our needs, but Google is a digital outhouse. Onedrive isn't any better IMHO. [Image removed by sender. Insured Aircraft Title Service, LLC] INSURED AIRCRAFT TITLE SERVICE Tracy Greggs IT / Systems Administrator Insured Aircraft Title Service, LLC 21 E Main St. STE 100 Oklahoma City, OK. 73104 800.654.4882 Toll Free 405.681.6663 Local tgreggs at insuredaircraft.com MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: www.insuredaircraft.com Please be aware - Online bank fraud is on the rise and it is important that you be cautious before wiring funds. If you receive an email containing WIRE TRANSFER INSTRUCTIONS call your escrow officer before wiring funds to verify the accuracy of the wiring instructions. Your escrow officer can be reached at (405) 681-6663. BE VERY CAREFUL IN WIRING FUNDS ------ Original Message ------ From "Shawn Iverson via MailScanner" > To mailscanner at lists.mailscanner.info Cc "Shawn Iverson" > Date 11/4/2024 2:38:09 PM Subject {Disarmed} Re: Phishing Safe Sites I feel that way about all of Google, not just drive. I'm not sure that google deserves blanket treatment for any of its subdomains. Maybe it would be best to drop *.MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: google.com from $safe_domains and require everyone to manage locally? On 11/4/24 15:21, Jerry Benton wrote: Not sure. Having second thoughts on MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: drive.google.com as well. Tracy has a good point about it being a source for malware. I see it all the time as well. -- Jerry Benton MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Alex Neuman via MailScanner Date: Monday, November 4, 2024 at 15:06 To: MailScanner Discussion Cc: Alex Neuman Subject: Re: Phishing Safe Sites Would this be the place to add: https://.MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: safelinks.protection.outlook.com ? [Image removed by sender.] Alex Neuman Host / CEO, Vida Digital / Reliant Technologies +507 833-7900 | +507 6781-9505 | MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: https://vidadigital.com.pa/ MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: [Image removed by sender.] ? On Mon, Nov 4, 2024 at 1:04?PM Jerry Benton wrote: Ok, I added MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: drive.google.com. -- Jerry Benton MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: www.mailborder.com +1 843-800-8605 From: MailScanner > on behalf of Shawn Iverson via MailScanner < mailscanner at lists.mailscanner.info> Date: Monday, November 4, 2024 at 12:15 To: mailscanner at lists.mailscanner.info > Cc: Shawn Iverson > Subject: Re: Phishing Safe Sites MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: drive.google.com seems to be a complaint I sometimes receive on the MailScanner project because it often shows up in Phishtank, and it only takes one bad URL reported to Phishtank to cause the entire MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: drive.google.com to get flagged as a bad site. On 11/4/24 11:52, Jerry Benton wrote: I was reviewing the build script for the safe and bad sites today. * The safe sites file will contain the top 1500 domains on the internet. This will pretty much be static as AWS no longer publishes that information. It will be updated in the next 4 hours. (Currently empty.) * The bad sites file is still updated every 4 hours from phishtank with the latest nefarious sites. * The safe domains used while building the script are below. If you have any suggestions to add to that list, let me know. No, I will not add your personal domain. You can use the custom safe sites list in MailScanner for that. # common short url providers $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: adf.ly'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: bit.ly'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: doiop.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: fur.ly'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: goo.gl'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: is.gd'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: mcaf.ee'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: ow.ly'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: snipurl.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: su.pr'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: tinyurl.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: v.gd'; $safe_domains[] = 'tiny.cc'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: tr.im'; $safe_domains[] = 'bit.do'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: po.st'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: lrd.to'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: g.co'; # known safe domains $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: www.google.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: docs.google.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: accounts.google.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: sites.google.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: mail.google.com'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: schema.org'; $safe_domains[] = ' MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: urldefense.proofpoint.com'; -- Jerry Benton MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: www.mailborder.com +1 843-800-8605 -- MailScanner mailing list mailscanner at lists.mailscanner.info MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: http://lists.mailscanner.info/mailman/listinfo/mailscanner -- MailScanner mailing list mailscanner at lists.mailscanner.info MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: MailScanner has detected definite fraud in the website at "mailtrack.io". Do not trust this website: http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.gif Type: image/gif Size: 42 bytes Desc: image001.gif URL: From jerry.benton at mailborder.com Wed Nov 6 12:20:40 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Wed, 6 Nov 2024 12:20:40 +0000 Subject: Phishing Script and Server Update & Future Plans Message-ID: I have updated the cron script for phishing bad/safe sites to v0.3.1. It is available here: https://phishing.mailscanner.info The phishing update server has been updated to use https, but will not force that connection and will now accept http. Several previous automatic bad site scrubs were removed for the google domain and several subdomains. This means you will need to add them to the phishing safe sites custom file to retain links to google domains. Uncompressed versions of the bad/safe sites files are no longer available. If you have an old script trying to download those files, it will fail. You will need to use the newer update script or modify any custom scripts to download the compressed versions and then extract them for use. The phishing bad sites is compiled from Phishtank data. It essentially pulls the domains from the phishing links and puts them into a flat file for use in MailScanner. Future plan: I am looking into creating a mechanism to populate a SQLite database with phishing links instead of just domains. I am creating this for use in Mailborder, but will make the database available for MailScanner. In order to be used in MailScanner someone would have to write the code to use it. (I have enough to do.) Once I create a base structure of what the database would look like, I will send out an update here with a link to the SQLite database. Not sure how this would impact scanning speed at this time. It would of course depend on how big that database gets. The reason why I am looking into this ? I contacted Openphish about licensing cost to get their database. They want $10k per server per year for the ?light? version. That is just nuts. How you can help ? I need source data to compile this database. I can get some from Phishtank and a very small amount from Openphish free sources. I haven?t put a whole lot of cycles into this, but if you have any suggestions, please email me. -- Jerry Benton www.mailborder.com +1 843-800-8605 -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Wed Nov 6 14:16:08 2024 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Wed, 06 Nov 2024 09:16:08 -0500 Subject: Phishing Script and Server Update & Future Plans In-Reply-To: Message-ID: An HTML attachment was scrubbed... URL: From bogdan at rotariu.ro Wed Nov 6 14:26:32 2024 From: bogdan at rotariu.ro (Bogdan-Stefan Rotariu) Date: Wed, 6 Nov 2024 16:26:32 +0200 Subject: Phishing Script and Server Update & Future Plans In-Reply-To: References: Message-ID: <915C0EAF-1249-47FA-92D6-B48AE65326BC@rotariu.ro> Thank you for the recent update. I would like to suggest two changes: 1. Since we have already set the PATH, we can simply use ms-peek without specifying the full path (/usr/sbin/ms-peek). 2. Regarding the enforcement of HTTPS, we have encountered issues with bad .gz files. Currently, the only fix is to remove them manually. I propose that the script either overwrites these .gz files or removes them before downloading new ones to prevent this issue. gzip: /usr/mailscanner/etc/phishing.safe.sites.conf.master.gz: not in gzip format I have added a workaround to our script: if [ -d $CONFIGDIR ]; then cd $CONFIGDIR #delete .gz old gz files if left behind find "$CONFIGDIR" -name "*.gz" -type f -exec rm -f {} + Thanks, -- Bogdan-Stefan Rotariu > On 6 Nov 2024, at 14:20, Jerry Benton wrote: > > I have updated the cron script for phishing bad/safe sites to v0.3.1. It is available here:https://phishing.mailscanner.info > > The phishing update server has been updated to use https, but will not force that connection and will now accept http. > > Several previous automatic bad site scrubs were removed for the google domain and several subdomains. This means you will need to add them to the phishing safe sites custom file to retain links to google domains. > > Uncompressed versions of the bad/safe sites files are no longer available. If you have an old script trying to download those files, it will fail. You will need to use the newer update script or modify any custom scripts to download the compressed versions and then extract them for use. > > The phishing bad sites is compiled from Phishtank data. It essentially pulls the domains from the phishing links and puts them into a flat file for use in MailScanner. > > > Future plan: > > I am looking into creating a mechanism to populate a SQLite database with phishing links instead of just domains. I am creating this for use in Mailborder, but will make the database available for MailScanner. In order to be used in MailScanner someone would have to write the code to use it. (I have enough to do.) Once I create a base structure of what the database would look like, I will send out an update here with a link to the SQLite database. Not sure how this would impact scanning speed at this time. It would of course depend on how big that database gets. > > The reason why I am looking into this ? > > I contacted Openphish about licensing cost to get their database. They want $10k per server per year for the ?light? version. That is just nuts. > > How you can help ? > > I need source data to compile this database. I can get some from Phishtank and a very small amount from Openphish free sources. I haven?t put a whole lot of cycles into this, but if you have any suggestions, please email me. > > > -- > Jerry Benton > www.mailborder.com > +1 843-800-8605 > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry.benton at mailborder.com Wed Nov 6 14:38:07 2024 From: jerry.benton at mailborder.com (Jerry Benton) Date: Wed, 6 Nov 2024 14:38:07 +0000 Subject: Phishing Script and Server Update & Future Plans In-Reply-To: <915C0EAF-1249-47FA-92D6-B48AE65326BC@rotariu.ro> References: <915C0EAF-1249-47FA-92D6-B48AE65326BC@rotariu.ro> Message-ID: It was not in gzip format because the update server was handing you a 301 that was not being handled correctly. This will no longer happen. -- Jerry Benton www.mailborder.com +1 843-800-8605 From: MailScanner on behalf of Bogdan-Stefan Rotariu Date: Wednesday, November 6, 2024 at 09:36 To: MailScanner Discussion Subject: Re: Phishing Script and Server Update & Future Plans Thank you for the recent update. I would like to suggest two changes: 1. Since we have already set the PATH, we can simply use ms-peek without specifying the full path (/usr/sbin/ms-peek). 2. Regarding the enforcement of HTTPS, we have encountered issues with bad .gz files. Currently, the only fix is to remove them manually. I propose that the script either overwrites these .gz files or removes them before downloading new ones to prevent this issue. gzip: /usr/mailscanner/etc/phishing.safe.sites.conf.master.gz: not in gzip format I have added a workaround to our script: if [ -d $CONFIGDIR ]; then cd $CONFIGDIR #delete .gz old gz files if left behind find "$CONFIGDIR" -name "*.gz" -type f -exec rm -f {} + Thanks, -- Bogdan-Stefan Rotariu On 6 Nov 2024, at 14:20, Jerry Benton wrote: I have updated the cron script for phishing bad/safe sites to v0.3.1. It is available here:https://phishing.mailscanner.info The phishing update server has been updated to use https, but will not force that connection and will now accept http. Several previous automatic bad site scrubs were removed for the google domain and several subdomains. This means you will need to add them to the phishing safe sites custom file to retain links to google domains. Uncompressed versions of the bad/safe sites files are no longer available. If you have an old script trying to download those files, it will fail. You will need to use the newer update script or modify any custom scripts to download the compressed versions and then extract them for use. The phishing bad sites is compiled from Phishtank data. It essentially pulls the domains from the phishing links and puts them into a flat file for use in MailScanner. Future plan: I am looking into creating a mechanism to populate a SQLite database with phishing links instead of just domains. I am creating this for use in Mailborder, but will make the database available for MailScanner. In order to be used in MailScanner someone would have to write the code to use it. (I have enough to do.) Once I create a base structure of what the database would look like, I will send out an update here with a link to the SQLite database. Not sure how this would impact scanning speed at this time. It would of course depend on how big that database gets. The reason why I am looking into this ? I contacted Openphish about licensing cost to get their database. They want $10k per server per year for the ?light? version. That is just nuts. How you can help ? I need source data to compile this database. I can get some from Phishtank and a very small amount from Openphish free sources. I haven?t put a whole lot of cycles into this, but if you have any suggestions, please email me. -- Jerry Benton www.mailborder.com +1 843-800-8605 -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner -------------- next part -------------- An HTML attachment was scrubbed... URL: From bogdan at rotariu.ro Wed Nov 6 15:04:17 2024 From: bogdan at rotariu.ro (Bogdan Rotariu) Date: Wed, 6 Nov 2024 17:04:17 +0200 Subject: Phishing Script and Server Update & Future Plans In-Reply-To: References: Message-ID: An HTML attachment was scrubbed... URL: From kenneth at vkdata.dk Mon Nov 25 11:21:45 2024 From: kenneth at vkdata.dk (Kenneth Hansen) Date: Mon, 25 Nov 2024 12:21:45 +0100 Subject: Configure Spamhaus DQS Message-ID: Hi We are running a setup where our datacenter provider is having their entire IP-ranges blocked by spamhaus for using an open resolver. I have attempted to find information online on how to make MailScanner (and as part of this also SpamAssassin) use the DQS service for queries to their lists, but have been unsuccessful. Could someone point me in the right direction for how this setup can be done, so that we can again query spamhaus? Med venlig hilsen / Best Regards Kenneth Hansen *Datatekniker* Telefon: +45 73 73 88 88 <+4573738888> Mail: support at vkdata.dk -------------- next part -------------- An HTML attachment was scrubbed... URL: From shawniverson at summitgrid.com Mon Nov 25 18:03:47 2024 From: shawniverson at summitgrid.com (Shawn Iverson) Date: Mon, 25 Nov 2024 13:03:47 -0500 Subject: Configure Spamhaus DQS In-Reply-To: References: Message-ID: The SpamHaus Spamassassin DQS service is implemented exclusively within Spamassassin. https://github.com/spamhaus/spamassassin-dqs I have not set it up so I cannot provide any insight, but hopefully someone else here has. On 11/25/24 06:21, Kenneth Hansen via MailScanner wrote: > Hi > We are running a setup where our datacenter provider is having their > entire IP-ranges blocked by spamhaus for using an open resolver. > > I have attempted to find information online on how to make MailScanner > (and as part of this also SpamAssassin) use the DQS service for > queries to their lists, but have been unsuccessful. > Could someone point me in the right direction for how this setup can > be done, so that we can again query spamhaus? > > Med venlig hilsen / Best Regards > > Kenneth Hansen > /Datatekniker/ > > Telefon: +45 73 73 88 88 > Mail: support at vkdata.dk > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From kenneth at vkdata.dk Tue Nov 26 07:42:43 2024 From: kenneth at vkdata.dk (Kenneth Hansen) Date: Tue, 26 Nov 2024 08:42:43 +0100 Subject: Configure Spamhaus DQS In-Reply-To: References: Message-ID: Hi Shawn Thank you for the prompt response and clarification of how the spamassassin integration works. We will explore the spamhaus documentation to figure out the required configuration for our setup Med venlig hilsen / Best Regards Kenneth Hansen *Datatekniker* Telefon: +45 73 73 88 88 <+4573738888> Mail: support at vkdata.dk Den man. 25. nov. 2024 kl. 19.04 skrev Shawn Iverson via MailScanner < mailscanner at lists.mailscanner.info>: > The SpamHaus Spamassassin DQS service is implemented exclusively within > Spamassassin. https://github.com/spamhaus/spamassassin-dqs > > I have not set it up so I cannot provide any insight, but hopefully > someone else here has. > On 11/25/24 06:21, Kenneth Hansen via MailScanner wrote: > > Hi > We are running a setup where our datacenter provider is having their > entire IP-ranges blocked by spamhaus for using an open resolver. > > I have attempted to find information online on how to make MailScanner > (and as part of this also SpamAssassin) use the DQS service for queries to > their lists, but have been unsuccessful. > Could someone point me in the right direction for how this setup can be > done, so that we can again query spamhaus? > > Med venlig hilsen / Best Regards > > Kenneth Hansen > *Datatekniker* > > Telefon: +45 73 73 88 88 <+4573738888> > Mail: support at vkdata.dk > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > -------------- next part -------------- An HTML attachment was scrubbed... URL: