False Positive | s.lu

[Showfom]

What are the subjects of the false-positive (domains, URLs, or IPs)?

• s.lu

Why do you believe this is a false-positive?

s.lu is a custom domain from our premium URL shortener service s.ee.

I believe this is a false-positive because all phishing links from this domain are removed.

How did you discover this false-positive(s)?

VirusTotal

Where did you find this false-positive if not listed above?

I discovered this false-positive by ALL-phishing-domains.lst

Have you requested a review from other sources?

No response

Do you have a screenshot?

No response

Additional Information or Context

We take the safety and security of our service very seriously and have implemented comprehensive measures to ensure it is not used for phishing or malicious purposes. Specifically:

We actively monitor all URLs generated by our users daily. If we identify any phishing or illegal content, the associated user accounts are immediately banned, and the malicious URLs removed.

We synchronize daily with well-known phishing databases to proactively block malicious URLs and domains, minimizing any possibility of abuse.

We handle and investigate user and third-party reports of misuse promptly. Verified malicious links and responsible accounts are blocked swiftly upon confirmation.

Given our proactive and diligent approach, we kindly request a review of our domain (s.ee) and guidance on the necessary steps to have it removed from Phishing.Database's blocked list.

Thank you for your prompt attention and assistance.

[phishing-database-bot]

Verification Required

@Showfom, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

   • Record Name: _phishingdb
   • Record Value: antiphish-df5c058701a14e1db92e3eb96b4d60b7e3eacc20

   Your Verification ID: antiphish-df5c058701a14e1db92e3eb96b4d60b7e3eacc20

2. Wait for DNS propagation (this may take a few minutes to a few hours).

3. Reply to this issue once the TXT record has been set.

Important Notes

• Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
• If the record cannot be set or you need alternative methods of verification, please contact us at contact@phish.co.za - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

• Online tools like MXToolBox TXT Lookup.
• The command line:

  dig TXT _phishingdb.example.com
  

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

[Showfom]

DNS done

# dig txt _phishingdb.s.lu +short
"antiphish-df5c058701a14e1db92e3eb96b4d60b7e3eacc20"

[spirillen]

DNS Servers

bristol.ns.cloudflare.com.
yichun.ns.cloudflare.com.

Network

NetRange:       104.16.0.0 - 104.31.255.255
CIDR:           104.16.0.0/12
NetName:        CLOUDFLARENET

Declined Assistance with Whitelisting Requests

I regret to inform you that I will not be assisting with whitelisting requests in this matter, as you are utilising networks associated with Cloudflare, Google, Amazon, or Microsoft. These entities have a notorious reputation for disregarding individuals' Fundamental Human Rights and Online Privacy (as detailed here: https://kb.mypdns.org/articles/MPDNS-A-2).

As such, you will need to await assistance from a meta sheep who may be willing to help. I cannot support the surveillance of innocent individuals without a court order from a democratic country, which notably excludes, but is not limited to, the USA and Denmark.

Thank you for your understanding.