Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUG | My Awesome Bug #1107

Open
adsegzyhub opened this issue Feb 6, 2025 · 2 comments
Open

BUG | My Awesome Bug #1107

adsegzyhub opened this issue Feb 6, 2025 · 2 comments
Assignees

Comments

@adsegzyhub
Copy link

What is the problem you are experiencing?

Hello,

My domain (brainshare.ng) is blacklisted as phishing while is it not. This is seriously affecting our business. Can you kindly whitelist it? Over 30 scanning website say our site is save. Only you said it's phishing, according to the link below

https://www.virustotal.com/gui/url/6c23c5c8fe5c3a6e7159582063ab5a141e0b1e4c555eaeaa86a2b198485bf34d

Thanks
Olusegun A.

How can we reproduce the problem?

To reproduce the problem:

Do you have a screenshot?

Screenshot

What did you expect to happen?

I expected my site to opening without AVG or any other antivirus and antimalware to flag it down.

Is there a workaround?

I found a workaround...

Additional context

I would like to add...

Log information

Click to expand
Paste your log file here between the back tics.
@phishing-database-bot
Copy link
Member

Verification Required

@adsegzyhub, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

  1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

    • Record Name: _phishingdb
    • Record Value: antiphish-a3e8d35dfdb6be412da4b5f4f308ef139c2402af

    Your Verification ID: antiphish-a3e8d35dfdb6be412da4b5f4f308ef139c2402af

  2. Wait for DNS propagation (this may take a few minutes to a few hours).

  3. Reply to this issue once the TXT record has been set.

Important Notes

  • Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
  • If the record cannot be set or you need alternative methods of verification, please contact us at [email protected] - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

@g0d33p3rsec g0d33p3rsec removed the bug Something isn't working label Feb 6, 2025
@g0d33p3rsec
Copy link

Bug label removed as the issue is a reported false positive. We have two links in our dataset:

https://brainshare.ng/mobile/Officelogin/live/pass.php?email=<REDACTED>
https://brainshare.ng/mobile/Officelogin/live/pass.php?email=<REDACTED>%22#wa=wsignin1.0&amp;rpsnv=13&amp;ct=1539585327&amp;rver=7.0.6737.0&amp;wp=MBI_SSL&amp;wreply=https://outlook.live.com/owa/?nlp=1&amp;RpsCsrfState=715d44a2-2f11-4282-f625-a066679e96e2&amp;id=292841&amp;CBCXT=out&amp;lw=1&amp;fl=dob

https://github.com/neonprimetime/PhishingKitTracker/blob/master/2019-04_PhishingKitTracker.csv

Image

Image

https://phishtank.org/phish_detail.php?phish_id=6004440 confirms the URI as a true positive, though the report is from 2019 and may have been resolved.

Image

Looking at the urlscan history, I also see more recent questionable content. For example https://ceria777.brainshare.ng/ was scanned July 30, 2024 https://urlscan.io/result/f9fbf927-bb00-4e7e-8d30-9eab5d94eab0/#summary

Image

@spirillen spirillen moved this from 🆕 New to 🚫 Blocked / Waiting in Phishing Database Backlog Feb 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: 🚫 Blocked / Waiting
Development

No branches or pull requests

5 participants