False Positive | planoly.store

[mouadbelbah-planoly]

What are the subjects of the false-positive (domains, URLs, or IPs)?

• planoly.store

Why do you believe this is a false-positive?

planoly.store is not a phising website, it's similar to linktr.ee. (Rebranded and started redirecting traffic from snipfeed.co which is in good standing).

How did you discover this false-positive(s)?

VirusTotal

Where did you find this false-positive if not listed above?

N/A

Have you requested a review from other sources?

• Lumu
• CRDF
• VIPRE
• Alphamountain

Do you have a screenshot?

• Lumu

• CRDF

• VIPRE

• Alphamountain

Additional Information or Context

No response

[phishing-database-bot]

Verification Required

@mouadbelbah-planoly, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

   • Record Name: _phishingdb
   • Record Value: antiphish-7b1fb9c179507f1310bcf9da52825a47f354b028

   Your Verification ID: antiphish-7b1fb9c179507f1310bcf9da52825a47f354b028

2. Wait for DNS propagation (this may take a few minutes to a few hours).

3. Reply to this issue once the TXT record has been set.

Important Notes

• Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
• If the record cannot be set or you need alternative methods of verification, please contact us at contact@phish.co.za - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

• Online tools like MXToolBox TXT Lookup.
• The command line:

  dig TXT _phishingdb.example.com
  

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

[mouadbelbah-planoly]

DNS Text record has been added.

[spirillen]

Search results

Lookup provided by My Privacy DNS

Hosts-Sources

External Hosts-Sources can be found here

Sorted result

EasyList

Matrix blacklist project

Matrix blacklist project, Filtered

Response Policy Zone - RPZ

Did not find any matching RPZ records

Known Issues

• There are no known issue for planoly.store in My Privacy DNS
• There are no known issue for planoly.store in My Privacy DNS (Issue Backup)
• There are no known issue for planoly.store in GitHub:Matrix
• False Positive | planoly.store #1262
• There are no known issue for planoly.store in phishing (Database)

DNS Servers

elinore.ns.cloudflare.com.
vin.ns.cloudflare.com.

HTTP header

HTTP response, click to expand

HTTP/2 307 
date: Sat, 22 Mar 2025 10:26:29 GMT
content-type: text/plain
location: https://www.planoly.com/creator-store?from=snipfeed
cache-control: public, max-age=0, must-revalidate
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
x-frame-options: DENY
x-vercel-id: iad1::dwj2n-1742639189593-2189317cccba
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 9244fdb67ed99761-FRA
alt-svc: h3=":443"; ma=86400

HTTP/2 200 
content-type: text/html
surrogate-key: webflow.planoly.com 672e565988d070f341f0ca59 pageId:675608c85a063a791c3015ca 6733ced313786ba4879cbaa8
surrogate-control: max-age=432000
x-lambda-id: 93fc5098-786f-4134-b0ec-d6f9403d0cf5
last-modified: Thu, 20 Mar 2025 19:31:12 GMT
cf-cache-status: HIT
cf-ray: 923824362febeda2-MXP
x-cluster-name: eu-south-1-prod-hosting-red
date: Sat, 22 Mar 2025 10:26:20 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1bdf441282a54ae942606c92014c38d4.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS58-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IOjfa1cH7y51llYd2Gfm-MwVgp8wXtKx2Hhs5eD65geVnrnBA8So7A==
age: 139453
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
content-security-policy: frame-ancestors https://ads.tiktok.com
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),fullscreen=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()
vary: Origin

[spirillen]

Comments

DNS Check

ptcheck planoly.store antiphish-7b1fb9c179507f1310bcf9da52825a47f354b028
The test value matches the DNS TXT record.

Known phishing records

What can you tell me about these records, known to us from the PD project?

Subject                                                                                              Status      Source     Expiration Date   HTTP Code  Checker       Tested At          
---------------------------------------------------------------------------------------------------- ----------- ---------- ----------------- ---------- ------------- -------------------
https://planoly.store/blackwelllewis915                                                              INACTIVE    STDLOOKUP  Unknown           404        AVAILABILITY  22. Mar 2025 10:27:18

Execution Time: 00:00:00:1.126468

Verdict

DNS Servers

elinore.ns.cloudflare.com.
vin.ns.cloudflare.com.

Network

NetRange:       104.16.0.0 - 104.31.255.255
CIDR:           104.16.0.0/12
NetName:        CLOUDFLARENET

Declined Assistance with Whitelisting Requests

I regret to inform you that I will not be assisting with whitelisting requests in this matter, as you are utilising networks associated with Cloudflare, Google, Amazon, or Microsoft. These entities have a notorious reputation for disregarding individuals' Fundamental Human Rights and Online Privacy (as detailed here: https://kb.mypdns.org/articles/MPDNS-A-2).

As such, you will need to await assistance from a meta sheep who may be willing to help. I cannot support the surveillance of innocent individuals without a court order from a democratic country, which notably excludes, but is not limited to, the USA and Denmark.

Thank you for your understanding.

---

Thank you for reaching out. I want to clarify that I am not the owner of this project nor user of it. I assist with the whitelisting of domains to the best of my ability, but I do this as an unpaid volunteer in my free time. Your understanding and patience are greatly appreciated.
Additionally, I would like to share that I occasionally struggle with a mild degree of PTSD, which means I tend to forget even small details, like did I have breakfast this morning. So please bare with me, if I'm loosing the thread sometimes. Your understanding and patience in this matter are greatly appreciated.

If you feel inclined to buy me a cup of Coffee, it would certainly help speed up the process, but please know that it will not influence my decisions or verdicts in any way.

Additionally, I want to be very clear: I do not access any Cloudflare, CloudFront, or Google networks. This is a matter of principle for me, as I believe in upholding human rights, the right to online privacy, and network security. These services often intercept traffic to collect personally identifiable information (PII), which I believe compromises our autonomy and makes us all puppets to the big tech puppeteers.

Thank you for your understanding!

Best regards.

[mouadbelbah-planoly]

Thank you for your reply , these are user created pages , in this case this user was abusing our service by adding a fake AT&T page for phishing purposes, our system later picked up and banned the account along with couple others that have the same fingerprint.

Would @g0d33p3rsec @mitchellkrogza or @funilrys be able to assist us ?