False Positive | mmtro.com

[Solvik]

What are the subjects of the false-positive (domains, URLs, or IPs)?

• mmtro.com

Why do you believe this is a false-positive?

I'm working for numberly, which is the hosting company behind mmtro.com

This website redirects users for adserving usage

We handle a domain whitelist per customer which makes sure nothing is abused as open redirect for phishing purposes.

When I look at https://phish.co.za/latest/phishing-links-ACTIVE.txt ; the following links are in it:

• http://mmtro.com/c?tagid=6565774-fc05868ce53638cc265ed86660c435cc&rtgzid=1887&idc=82679&redir=http://ksmuou1p5egy.karlthehandyman.com?=peter.ongena@ing.be
• http://mmtro.com/c?tagid=6565774-fc05868ce53638cc265ed86660c435cc&rtgzid=1887&idc=82679&redir=http://ksMuou1P5egy.karlthehandyman.com?=peter.ongena@ing.be

These links have return 403 for the past 365 days (we don't store logs for more than a year)

How did you discover this false-positive(s)?

VirusTotal

Where did you find this false-positive if not listed above?

I discovered this false-positive by monitoring VirusTotal every hour on our domains

Have you requested a review from other sources?

No response

Do you have a screenshot?

Screenshot

Additional Information or Context

No response

[phishing-database-bot]

Verification Required

@Solvik, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

   • Record Name: _phishingdb
   • Record Value: antiphish-3f409cf0fbae60ed3de9f5a3fb04612cef51680a

   Your Verification ID: antiphish-3f409cf0fbae60ed3de9f5a3fb04612cef51680a

2. Wait for DNS propagation (this may take a few minutes to a few hours).

3. Reply to this issue once the TXT record has been set.

Important Notes

• Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
• If the record cannot be set or you need alternative methods of verification, please contact us at contact@phish.co.za - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

• Online tools like MXToolBox TXT Lookup.
• The command line:

  dig TXT _phishingdb.example.com
  

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

[Solvik]

replying to check the TXT record:

 ➜  ~ dig +short txt _phishingdb.mmtro.com @8.8.8.8
"antiphish-3f409cf0fbae60ed3de9f5a3fb04612cef51680a"

[phishing-database-bot]

Successfully validated the following subjects: mmtro.com.

-- We appreciate your help in refining this. Please let us know if anything seems incorrect.

[phishing-database-bot]

Closing.

Domain(s) or IP(s) not found in the Phishing.Database project: ing.be, mmtro.com.

-- We appreciate your help in refining this. Please let us know if anything seems incorrect.