horusteknoloji / tr-phishinglist Goto Github PK

Legitimate company in Switzerland

> pihole -q update-fitness.ch
 Match found in https://raw.githubusercontent.com/HorusTeknoloji/TR-PhishingList/master/url-lists.txt:
   update-fitness.ch

https://www.angi.com/ is on url-lists.txt. Any reason this is on a phishing block list?

Hi.
This domain I believe is a False Positive
It is Facebook Messenger :)

It's used to sign in or sign up for an Autodesk account or products. Not a phishing link.

Thank you.

This is a legitimate site.

This site is used for piracy, but is not malicious.
I have whitelisted on my end, but just alerting you FYI.

1drv.ms is a shortlink used for Microsoft OneDrive files, and it would be appreciated if this entry could be reviewed and considered for removal.

Thanks!

hello,

this is an official subdomain about Sandisk.com used for DCN

for example: _https://kb.sandisk.com/app/answers/detail/a_id/15108/ check the "Download:
_https://downloads.sandisk.com/Dashboard/SanDiskSSDDashboardSetup.exe

bye

I feel fossbytes.com shouldn't be blocked. It's just a technology website / blog.

This is a CDN (Content Delivery Network) for Shopify, breaking the ability to buy any product on any site powered by Shopify.

Car rental site

Is used for secure payments

This breaks paying with Stripe Checkout

Legitimate company in pakistan

Hi there,

Found two false-positives.

basemaps.arcgis.com
cdn.arcgis.com

With these two domains blocked it prevents any map on the ArcGIS platform from loading at all.

Thank you!

Both very big german isps

Truecaller is a smartphone application that has features of caller-identification, call-blocking, flash-messaging, call-recording, Chat & Voice by using the internet. There's no reason to block it.

In the middle of url-lists.txt, there is

<script type='text/javascript' src='https://sagadc.com/wp-content/plugins/kadence-blocks/dist/magnific.js?ver=1.9.12' id='magnific-popup-js'></script>

ext-sq.squarespace.com is a false-positive. It's a redirect CNAME record for SquareSpace customers that use their webhosting. If this is blocked, websites that use this provider cannot be reached.

kundencenter.telekom.de is the customer portal of german ISP Deutsche Telekom (wikipedia)

This is just a paste sharing website!

Hi,
This is a news site. It is being blocked. I believe this is a false positive. It is not phishing

This is the domain of a german ISP

Merhaba,

Blocklisti bir süredir kullanıyorum fakat kullandığım web hosting firmasının sunucusuna ftp ile bağlanamıyordum. Pi-Hole çalışan Raspberry Pi’da pihole -q ftpupload.net komutunu çalıştırınca bu blocklisti gösterdi. Sadece ftp yükleme sunucusunun domaini. Blocklistten silebilirseniz sevinirim.

Hi,
This domain is used for static assets on Wordpress. Blocking this breaks many Wordpress sites.

I run karthikkaranth.me. There is nothing malicious about it, and I have never sent an email from the domain.

Needed for Google Drive thumbnails

ow.ly is just a URL shortener :)
Thanks

Hi,

we run https://hwsecurity.dev

Can you remove it from your blacklist?

KnowBe4 is a legitimate phishing education company. Their website should not be listed as phishing.

This is a URL shortening service, and is not malicious.

Makes no sense to block these o_0

Legit site

Hi,

Is there a reason for blocking icanhazip.com? It's a site for getting your current external ip address, which is now even maintained by Cloudflare: https://major.io/2021/06/06/a-new-future-for-icanhazip/

As I understood from the blog post, it's sometimes used in malware for detecting IP addresses, but it's still a very useful site.

This is a CDN for images and javascript across many websites and is not malicious
a CDN is a Content Delivery Network, so basically a host for static files like images/javascripts

hello,
personal.avira-update.com is an official sub domain for download Update for Avira Antivirus FREE version (personal Version)

https://whois.domaintools.com/avira-update.com

bye

dropbox.com is the legitimate website for Dropbox.

Found in: https://raw.githubusercontent.com/HorusTeknoloji/TR-PhishingList/master/url-lists.txt

Companies use Mailer Lite for email campaigns. Not a phishing site and hence, shouldn't be blocked.

This is not phishing.

intel.com in list

This is a credit score checking website

Invalid entry: error: too many connections in url-lists.txt

error-page.net
error-source-uk.at.ua
error: too many connections
errordoctor.com
errorfix.link

It is apple's domain.