False Positive | go.skimlinks.com #969
Comments
|
@funilrys @mitchellkrogza I'm missing the power to edit OP msg. In this case I would like to add the ``` to the urls + fixing the image line I can see there are lots of spookier destination links in the list, and as my VM are not turned on, I'm not the one checking any of these out. Leaving for other to test and judge |
oddly, redirects to a safe browsing lookup
another safe browsing lookup
safe browsing lookup
redirects to hsn.com the other URIs are returning 404s and 410s |
|
I see multiple instances of your service redirecting to malicious content on the free host
https://urlscan.io/result/f2ce8f71-5325-4098-9e88-20d7508b2b8a/ scan of |
true positives confirmed, the ad-tech pitch does nothing to mitigate the threats |
|
Moved this issue to the blocked projects list, as it seems stalled from OP. |
|
@obyg11770 please see also the question @funilrys recently asked in your duplicate thread #944 (comment) |
|
@obyg11770 I see that you replied to the other thread via email so tagging you again to this thread so that we can limit your issue to a single thread instead of scattering the information throughout the repo. |
|
I suggest we add these lines to a "onetime" whitelist, especially because the reporter @obyg11770 isn't related to the domain. https: //go.skimresources.com/?id=126006X1587360&xs=1&isjs=1&url=https://furnimart.in/BT329685/dGl0bGV1bml0MUBjdHQuY29t
https: //go.skimresources.com/?id=126006X1587360&xs=1&isjs=1&url=https://furnimart.in/BT329685/dGl0bGV1bml0MUBjdHQuY29t&xguid=01FF0J812A714ZCD82XKBYR97N&persistence=1&checksum=ee353b273cd133198aec87cc3ba4f45c985039243cec1770acdac2d39b8a3a7a
https: //go.skimresources.com/?id=129857X1600501&url=https%3A%2F%2Fmeadow-tiny-month.glitch.me/56bh7c4e.html
https: //go.skimresources.com/?id=129857X1600501&url=https%3A%2F%2Fnewworldenclosures.com/wp-includes/js/Wellsv2
https: //go.skimresources.com/?id=129857X1600601&url=https://bafkreig2ox6scs3dco5umljsr6seap2bj7jcwsw7zxavxxvrczordwajfu.ipfs.dweb.link
https: //go.skimresources.com/?id=209867X1689872&&url=https://s.free.fr/4TFQugKa
https: //www.skimresources.com/?id=92X363&xcust=trdpro_us_1541938487208509200&xs=1&url=https://lovenestfamily.org/yiivkfxc/webmail-RD127/index.html@Phishing-Database/contributors Should we make a list for removal of records, but not permanent whitelist? |
I think that could be useful and generally safer than a whitelist for domains that may change hands in the future. A risk with the whitelist approach is that it is susceptible to domain hijacking if the owner moves on and allows their control of the domain to expire. |
|
Can you please update me on the status of this as your system continues to
incorrectly mark this url as phishing and it is now costing me money in
lost revenue to my site.
…On Sat, Jan 4, 2025 at 12:53 PM Scott Petty ***@***.***> wrote:
@Phishing-Database/contributors
<https://github.com/orgs/Phishing-Database/teams/contributors> Should we
make a list for removal of records, but not permanent whitelist?
I think that could be useful and generally safer than a whitelist for
domains that may change hands in the future. A risk with the whitelist
approach is that it is susceptible to domain hijacking if the owner moves
on and allows their control of the domain to expire.
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4QKSFXGVHU22LQFJKT2JBC4HAVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKNZRGQYDQOBSHA>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
|
Please see #988 (comment) by admin |
|
I do not understand these comments as I am not a developer.
…On Mon, Jan 13, 2025 at 10:50 AM spirillen ***@***.***> wrote:
Please see #988 (comment)
<#988 (comment)>
by admin
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4QBVXKRKCMV3FKV5TL2KQDIPAVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOBXHEZTQOJVGA>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Are |
|
I am concerned about go.skimlinks.com not @megaworldai. this is the
original tickte
#944
skimlinks does not collect PII. PLease read the ticket linked above.
go.skimlinks is an advertising network redirect link that is used for
tracking sales conversions and managing payouts to publishers across. the
world.
…On Tue, Jan 14, 2025 at 3:46 AM spirillen ***@***.***> wrote:
I do not understand these comments as I am not a developer.
AFAIK, we are whitelisting URL shortener already. @megaworldai
<https://github.com/megaworldai> if you can be listed in @PeterDaveHello
<https://github.com/PeterDaveHello>'s list
https://github.com/PeterDaveHello/url-shorteners/ , it will be removed
automatically from our project.
Are go.skimlinks.com not used for redirecting traffic and collecting PII
data?
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4SZ4N5FUV7AR3CQJ3D2KT2KJAVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOBZG4YDGOJYHE>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
since you also seem to struggle with basic reading comprehension, the relevant part of the referenced comment is:
TL;DR, you need to address the root cause and have the site delisted from the upstream source feeding into our database |
|
Scott:
I'm not sure why you are being such an asshole? I've been nothing but
polite and patient. I'm not a developer. I don't work on github. I have no
idea how to get the list updated. Your system is screwing me over and all
you can do is respond with some cynical bs? Can you help me solve the
problem instead? There is no way to contact @PeterDaveHello that I can
find. How do I go about getting this domain delisted? What exact steps do I
need to take? I'll do them.
Thanks.
On Jan 14, 2025, at 10:11 AM, Scott Petty ***@***.***> wrote:
I am concerned about go.skimlinks.com not @megaworldai
<https://github.com/megaworldai>. this is the original tickte #944
<#944>
skimlinks does not collect PII. PLease read the ticket linked above.
go.skimlinks is an advertising network redirect link that is used for
tracking sales conversions and managing payouts to publishers across. the
world.
since you also seem to struggle with basic reading comprehension, the
relevant part of the referenced comment is:
if you can be listed in @PeterDaveHello <https://github.com/PeterDaveHello>'s
list https://github.com/PeterDaveHello/url-shorteners/ , it will be removed
automatically from our project.
TL;DR, you need to address the root cause and have the site delisted from
the upstream source feeding into our database
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4WF74MJUSPTSKQTR7D2KVHMZAVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJQG43DEMZSHE>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
|
I understand your frustration. To resolve this, please open an issue in the @PeterDaveHello url_shortner repository and request to have your domain added to the project. Thank you for your patience. https://github.com/PeterDaveHello/url-shorteners/issues/new?template=Blank+issue&title=go.skimresources.com |
|
I had a dev friend of mine do this two weeks ago and there is still no
change.
[image: image.png]
…On Mon, Jan 27, 2025 at 7:29 PM spirillen ***@***.***> wrote:
@obyg11770 <https://github.com/obyg11770>
I understand your frustration. To resolve this, please open an issue in
the @PeterDaveHello <https://github.com/PeterDaveHello> url_shortner
repository and request to have your domain added to the project. Thank you
for your patience.
https://github.com/PeterDaveHello/url-shorteners/issues/new?template=Blank+issue&title=go.skimresources.com
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4WCZBCJNKPIFON2W2L2M32S5AVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJXG43DSMZYGM>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
|
@PeterDaveHello ?? can you review this one, to see if you can solve it? |
|
Hello:
I am still having this issue. Please someone help me resolve it. It has
been over a month now :(
…On Thu, Jan 30, 2025 at 7:07 PM spirillen ***@***.***> wrote:
@PeterDaveHello <https://github.com/PeterDaveHello> ?? can you review
this one, to see if you can solve it?
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4WEU6URAUUWMBK4FLT2NLSG3AVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMRWGIYDIMJWGY>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
EnglishHave you opened an issue in the @PeterDaveHello Project as we asked you to? Spanish¿Has abierto un problema en el proyecto @PeterDaveHello como te pedimos? FrenchAvez-vous ouvert un problème dans le projet @PeterDaveHello comme nous vous l'avons demandé? GermanHast du ein Problem im @PeterDaveHello-Projekt eröffnet, wie wir dich gebeten haben? ItalianHai aperto un problema nel progetto @PeterDaveHello come ti abbiamo chiesto? Chinese (Simplified)你是否按照我们的要求在@PeterDaveHello项目中打开了一个问题？ DanishHar du åbnet et issue i @PeterDaveHello projekt, som vi bad dig om? |
|
If you need anything, please open issues or submit pull requests at the right place: https://github.com/PeterDaveHello/url-shorteners. I'm currently overwhelmed by the mentioning notifications, and they are not helpful. |
|
An issue was opened on Jan 15th but still has not been resolved [image:
image.png]
…On Wed, Feb 12, 2025 at 7:11 AM Peter Dave Hello ***@***.***> wrote:
If you need anything, please open issues or submit pull requests at the
right place: https://github.com/PeterDaveHello/url-shorteners. I'm
currently overwhelmed by the mentioning notifications, and they are not
helpful.
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4RUGN3XSDLC45LD43L2PNQANAVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNJUGAYDKNBZGE>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
[image: PeterDaveHello]*PeterDaveHello* left a comment
(Phishing-Database/Phishing.Database#969)
<#969 (comment)>
If you need anything, please open issues or submit pull requests at the
right place: https://github.com/PeterDaveHello/url-shorteners. I'm
currently overwhelmed by the mentioning notifications, and they are not
helpful.
—
Reply to this email directly, view it on GitHub
<#969 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AOIVX4RUGN3XSDLC45LD43L2PNQANAVCNFSM6AAAAABUFFLR5GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNJUGAYDKNBZGE>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
|
@PeterDaveHello are you maintaining the url shortner lists actively?? PeterDaveHello/url-shorteners#124
|
|
Closing. Domain(s) or IP(s) not found in the Phishing.Database project: go.skimresources.com, go.skimlinks.com. -- We appreciate your help in refining this. Please let us know if anything seems incorrect. |
github-project-automation
bot
moved this from 🚫 Blocked / Waiting
to ✅ Done
in Phishing Database Backlog
What are the subjects of the false-positive (domains, URLs, or IPs)?
https://go.skimresources.com/
go.skimresources.com
Why do you believe this is a false-positive?
I believe this is a false-positive because this is a legitimate advertising network that is used by thousands of websites to drive
$6m+ in sales daily across 48,500 merchants worldwide
How did you discover this false-positive(s)?
VirusTotal
Where did you find this false-positive if not listed above?
I discovered this false-positive by...
Have you requested a review from other sources?
I have requested a review from...
virus total but they sent me to you
Do you have a screenshot?
Screenshot
Additional Information or Context
this is the second time i have reached out to you with no response.
The text was updated successfully, but these errors were encountered: