False Positive | amazon.*

[smed79]

What are the subjects of the false-positive?

amazon.com.be
amazon.eg
amazon.nl
amazon.pl
amazon.sa
amazon.se
d1bic451mvzia9.cloudfront.net
d1g85xjy0c48cv.cloudfront.net
d3ag4hukkh62yn.cloudfront.net

Why do you believe this is a false-positive?

Because the blocked domains are Amazon regional website.

How did you discover this false-positive(s)?

I discovered this false-positive using Ultimate Hosts Blacklist DNS.

Where did you find this false-positive?

https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt

Have you requested a review from other sources?

No.

Do you have a screenshot?

No.

Additional Information or Context

No.

[phishing-database-bot]

Verification Required

@smed79, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

   • Record Name: _phishingdb
   • Record Value: antiphish-01a35e4671ae4801e99c0c5e1a3955277ebe891d

   Your Verification ID: antiphish-01a35e4671ae4801e99c0c5e1a3955277ebe891d

2. Wait for DNS propagation (this may take a few minutes to a few hours).

3. Reply to this issue once the TXT record has been set.

Important Notes

• Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
• If the record cannot be set or you need alternative methods of verification, please contact us at contact@phish.co.za - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

• Online tools like MXToolBox TXT Lookup.
• The command line:

  dig TXT _phishingdb.example.com
  

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

[spirillen]

Hi @smed79 have reopened Phishing-Database/phishing#749, these should have been removed from the blacklist by default