False Positive | taap.it

[qhoarau]

What are the subjects of the false-positive (domains, URLs, or IPs)?

• taap.it

Why do you believe this is a false-positive?

Dear Sir/Madam,

I am Quentin Hoarau, co-owner and administrator of taap.it, a URL shortening and deep link generator service similar to Bitly.

I am contacting you URGENTLY because our domain has been flagged as malicious by your services, which is having devastating consequences for our business. This situation occurred due to misuse of our platform by certain users who created links redirecting to phishing websites.

This situation has become CRITICAL:

• Many users can no longer access our service
• We are losing paying customers each day this situation persists
• Our business reputation is suffering considerable damage that worsens with time
• Several business partners are threatening to terminate their contracts with us

I would like to inform you that immediate measures have been taken:

• All malicious links have been identified and removed from our database
• Stricter controls have been implemented to prevent the creation of links to malicious websites
• Our terms of service have been strengthened to explicitly prohibit this type of usage

Our platform is now completely clean and no longer contains any links to malicious content. We have also implemented preventive measures to ensure this situation does not occur again in the future.

I respectfully request that you URGENTLY review the security status of taap.it and remove it from your blacklist so that we can resume our normal business operations and limit the commercial damage already incurred.

I remain at your disposal for any additional information or verification you may require. You can contact me at qhoaraupro@gmail.com or by phone at [your number].

Thank you in advance for your urgent attention to this request.

Sincerely,
Quentin Hoarau
Co-founder & Administrator
taap.it

How did you discover this false-positive(s)?

VirusTotal

Where did you find this false-positive if not listed above?

I discovered this false-positive by

Have you requested a review from other sources?

I have requested a review from...

Do you have a screenshot?

Screenshot

Additional Information or Context

I have also noticed that...

[phishing-database-bot]

Verification Required

@qhoarau, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

   • Record Name: _phishingdb
   • Record Value: antiphish-bc535eaacbde2b8746c5c8b95fcc6c916a9e339f

   Your Verification ID: antiphish-bc535eaacbde2b8746c5c8b95fcc6c916a9e339f

2. Wait for DNS propagation (this may take a few minutes to a few hours).

3. Reply to this issue once the TXT record has been set.

Important Notes

• Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
• If the record cannot be set or you need alternative methods of verification, please contact us at contact@phish.co.za - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

• Online tools like MXToolBox TXT Lookup.
• The command line:

  dig TXT _phishingdb.example.com
  

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

[qhoarau]

Hello,

DNS TXT record has been set on my domain taap.it and propagation is done on MXToolBox TXT Lookup

Thank you

[spirillen]

Comments

Dear Sir/Madam,

Well, you see, I’m a Lady, a Miss, and a Lord (hence the “My Lord” bit). So, you really ought to address me as Your Highness... 👑 The reason I steer clear of pronouns is that some people are rather keen on getting them spot on!

DNS Check

ptcheck taap.it antiphish-bc535eaacbde2b8746c5c8b95fcc6c916a9e339f
The test value matches the DNS TXT record.

Thanks for using my tools.
Please consider a sponsor ship at https://www.mypdns.org/donate

Known phishing records

What can you tell me about these records, known to us from the PD project?

Subject                                                                                              Status      Source     Expiration Date   HTTP Code  Checker       Tested At          
---------------------------------------------------------------------------------------------------- ----------- ---------- ----------------- ---------- ------------- -------------------
https://taap.it/Zy5Wy3                                                                               ACTIVE      HTTP CODE  Unknown           200        AVAILABILITY  18. Mar 2025 20:47:29
http://www.taap.it/qEdO0t                                                                            INACTIVE    SPECIAL    Unknown           200        AVAILABILITY  18. Mar 2025 20:47:30
http://www.taap.it/diPozD                                                                            INACTIVE    SPECIAL    Unknown           200        AVAILABILITY  18. Mar 2025 20:47:32
http://www.taap.it/qLU10B                                                                            INACTIVE    SPECIAL    Unknown           200        AVAILABILITY  18. Mar 2025 20:47:32
http://www.taap.it/quiat8                                                                            INACTIVE    SPECIAL    Unknown           200        AVAILABILITY  18. Mar 2025 20:47:32
http://www.taap.it/T2EksR                                                                            INACTIVE    SPECIAL    Unknown           200        AVAILABILITY  18. Mar 2025 20:47:32

Execution Time: 00:00:00:4.679911

Status      Percentage   Amount      
----------- ------------ ------------
ACTIVE      17%          1           
INACTIVE    83%          5           
INVALID     0%           0

Verdict

Regrettably, as all the links mentioned above appear to be active, even taking into account the HTTP 308 response for the non-www. URI, I’m unable to proceed with whitelisting this URL shortener. Additionally, you are listed in both the phishing Army and the phishing_army_blocklist_extended.

External Hosts-Sources can be found here

phishingArmy.csv:taap.it
phishingArmy.csv:www.taap.it
phishing_army_blocklist_extended.csv:taap.it
phishing_army_blocklist_extended.csv:www.taap.it
phishing_database/ALL-phishing-links.csv:www.taap.it
phishing_database/phishing.database/domain.csv:taap.it

You should make sure to use HTTP code 410 on dead links (URI's) or in lack of programming/administration skills use 404

HTTP response status codes 410 Gone

The guidelines outlined in RFC 7231, specifically section 6.5.9, are quite explicit: the appropriate status code to use for links that will not be restored is 410 Gone. In contrast, a 404 status code indicates that the resource is temporarily unavailable.

The 410 (Gone) status code indicates that access to the target resource is no longer available at the origin server and that this condition is likely to be permanent. If the origin server does not

know, or has no facility to determine, whether or not the condition is permanent, the status code 404 (Not Found) ought to be used instead.

The 410 response is primarily intended to assist the task of web maintenance by notifying the recipient that the resource is intentionally unavailable and that the server owners desire that remote links to that resource be removed. Such an event is common for limited-time, promotional services and for resources belonging to individuals no longer associated with the origin server's site.
It is not necessary to mark all permanently unavailable resources as "gone" or to keep the mark for any length of time -- that is left to the discretion of the server owner.

A 410 response is cacheable by default; i.e., unless otherwise indicated by the method definition or explicit cache controls

---

Thank you for reaching out. I want to clarify that I am not the owner of this project nor user of it. I assist with the whitelisting of domains to the best of my ability, but I do this as an unpaid volunteer in my free time. Your understanding and patience are greatly appreciated.
Additionally, I would like to share that I occasionally struggle with a mild degree of PTSD, which means I tend to forget even small details, like did I have breakfast this morning. So please bare with me, if I'm loosing the thread sometimes. Your understanding and patience in this matter are greatly appreciated.

If you feel inclined to buy me a cup of coffee, it would certainly help speed up the process, but please know that it will not influence my decisions or verdicts in any way.

Additionally, I want to be very clear: I do not access any Cloudflare, CloudFront, or Google networks. This is a matter of principle for me, as I believe in upholding human rights, the right to online privacy, and network security. These services often intercept traffic to collect personally identifiable information (PII), which I believe compromises our autonomy and makes us all puppets to the big tech puppeteers.

Thank you for your understanding!

Best regards.