<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">drive.google.com seems to be a
complaint I sometimes receive on the MailScanner project because
it often shows up in Phishtank, and it only takes one bad URL
reported to Phishtank to cause the entire drive.google.com to get
flagged as a bad site.</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 11/4/24 11:52, Jerry Benton wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DS7PR12MB8372D0F7E94AAB591A48C3B3F4512@DS7PR12MB8372.namprd12.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator"
content="Microsoft Word 15 (filtered medium)">
<style>@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;}p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-ligatures:none;}div.WordSection1
{page:WordSection1;}ol
{margin-bottom:0in;}ul
{margin-bottom:0in;}</style>
<div class="WordSection1">
<p class="MsoNormal">I was reviewing the build script for the
safe and bad sites today.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph"
style="margin-left:0in;mso-list:l0 level1 lfo1">The safe
sites file will contain the top 1500 domains on the
internet. This will pretty much be static as AWS no longer
publishes that information. It will be updated in the next 4
hours. (Currently empty.)<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:0in;mso-list:l0 level1 lfo1">The bad
sites file is still updated every 4 hours from phishtank
with the latest nefarious sites.
<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:0in;mso-list:l0 level1 lfo1">The safe
domains used while building the script are below. If you
have any suggestions to add to that list, let me know. No, I
will not add your personal domain. You can use the custom
safe sites list in MailScanner for that. <o:p></o:p></li>
</ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># common short url providers<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'adf.ly';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'bit.ly';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'doiop.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'fur.ly';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'goo.gl';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'is.gd';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'mcaf.ee';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'ow.ly';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'snipurl.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'su.pr';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'tinyurl.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'v.gd';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'tiny.cc';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'tr.im';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'bit.do';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'po.st';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'lrd.to';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'g.co';<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># known safe domains<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = '<a class="moz-txt-link-abbreviated" href="http://www.google.com">www.google.com</a>';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'docs.google.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'accounts.google.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'sites.google.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'mail.google.com';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] = 'schema.org';<o:p></o:p></p>
<p class="MsoNormal">$safe_domains[] =
'urldefense.proofpoint.com';<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span
style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Calibri",sans-serif">-- <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Calibri",sans-serif">Jerry
Benton<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Calibri",sans-serif"><a
href="http://www.mailborder.com"
moz-do-not-send="true"><span style="color:#0563C1">www.mailborder.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Calibri",sans-serif">+1
843-800-8605<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
</body>
</html>