Phishing Safe Sites

Jerry Benton jerry.benton at mailborder.com
Mon Nov 4 16:52:52 UTC 2024


I was reviewing the build script for the safe and bad sites today.


  *   The safe sites file will contain the top 1500 domains on the internet. This will pretty much be static as AWS no longer publishes that information. It will be updated in the next 4 hours. (Currently empty.)
  *   The bad sites file is still updated every 4 hours from phishtank with the latest nefarious sites.
  *   The safe domains used while building the script are below. If you have any suggestions to add to that list, let me know. No, I will not add your personal domain. You can use the custom safe sites list in MailScanner for that.

# common short url providers
$safe_domains[] = 'adf.ly';
$safe_domains[] = 'bit.ly';
$safe_domains[] = 'doiop.com';
$safe_domains[] = 'fur.ly';
$safe_domains[] = 'goo.gl';
$safe_domains[] = 'is.gd';
$safe_domains[] = 'mcaf.ee';
$safe_domains[] = 'ow.ly';
$safe_domains[] = 'snipurl.com';
$safe_domains[] = 'su.pr';
$safe_domains[] = 'tinyurl.com';
$safe_domains[] = 'v.gd';
$safe_domains[] = 'tiny.cc';
$safe_domains[] = 'tr.im';
$safe_domains[] = 'bit.do';
$safe_domains[] = 'po.st';
$safe_domains[] = 'lrd.to';
$safe_domains[] = 'g.co';

# known safe domains
$safe_domains[] = 'www.google.com';
$safe_domains[] = 'docs.google.com';
$safe_domains[] = 'accounts.google.com';
$safe_domains[] = 'sites.google.com';
$safe_domains[] = 'mail.google.com';
$safe_domains[] = 'schema.org';
$safe_domains[] = 'urldefense.proofpoint.com';


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 843-800-8605

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20241104/60845e60/attachment.html>


More information about the MailScanner mailing list