Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

False Positive | qr.tapnscan.me, qr-codes.io, linkpages.pro, q.linkpages.pro #1095

Open
arp-joy opened this issue Feb 4, 2025 · 9 comments
Assignees

Comments

@arp-joy
Copy link

arp-joy commented Feb 4, 2025

What are the subjects of the false-positive (domains, URLs, or IPs)?

Request to Whitelisting Domain - qr.tapnscan.me, qr-codes.io, linkpages.pro, q.linkpages.pro

Why do you believe this is a false-positive?

Phishing Database has flagged our domain below, owned by Uniqode, as a phishing/malware site. This is causing significant issues for our users, preventing them from accessing the domain through various network providers.

  • qr.tapnscan.me,
  • qr-codes.io,
  • linkpages.pro,
  • q.linkpages.pro

We kindly request your assistance whitelisting the blocked domain and restoring full access for our users. We are a SOC® 2, ISO27001, and GDPR-compliant provider of QR Code codes known by the name uniqode.com, and you can find additional details on trust.uniqode.com. We already have our security infrastructure, which is continuously removing malicious URLs from our system. Please let me know if you need more information to get this sorted for us.

How did you discover this false-positive(s)?

VirusTotal

Where did you find this false-positive if not listed above?

I discovered this false-positive by scanning our system.

Have you requested a review from other sources?

I have requested a review from...

Do you have a screenshot?

Screenshot

Additional Information or Context

I have also noticed that...

@phishing-database-bot
Copy link
Member

Verification Required

@arp-joy, thank you for submitting a false positive report! To help us verify your ownership of the affected domain(s), please complete the following steps:

  1. Set a DNS TXT record for the domain(s) listed in this issue with the following details:

    • Record Name: _phishingdb
    • Record Value: antiphish-5193b4b86e3e4f0420aab23d9a37e199954d6d96

    Your Verification ID: antiphish-5193b4b86e3e4f0420aab23d9a37e199954d6d96

  2. Wait for DNS propagation (this may take a few minutes to a few hours).

  3. Reply to this issue once the TXT record has been set.

Important Notes

  • Verification does not guarantee whitelisting. The Phishing.Database team will review your report after verifying ownership, but the decision to whitelist depends on further investigation and analysis.
  • If the record cannot be set or you need alternative methods of verification, please contact us at [email protected] - preferably from the domain's official email address.

How to Check the TXT Record ?

You can verify that the TXT record is properly set using:

Thank you for your cooperation! We will address your issue as soon as possible after verification.

The Phishing.Database Project Team.

@arp-joy
Copy link
Author

arp-joy commented Feb 5, 2025

Can I please have an update? This is critical, and we need your help on this.

@arp-joy
Copy link
Author

arp-joy commented Feb 5, 2025

I understand that the URLs below are currently classified as Phishing and Other Frauds. However, I would like to respectfully request a reconsideration of this classification or the potential unblocking of our domain

  1. https://qrcodes.pro/
  2. https://qr-codes.io/
  3. https://qr.tapnscan.me/
  4. https://linkpages.pro/

We are a QR code generator company (uniqode.com) supporting over 50k businesses. Unfortunately, we encounter malicious users creating harmful URLs, but we have systems in place to detect and block such activity immediately.

Your security solution seems to be blocking our entire domain instead of the specific malicious URLs generated by these bad actors. This is causing significant disruption to our legitimate business operations and our customers.

We would greatly appreciate it if you could re-evaluate the classification and consider unblocking our domain while continuing to block any specific malicious URLs that you detect.

@spirillen
Copy link
Contributor

how is example.com involved??

please edit OP to one domain per line surrounded by back tics ```

@arp-joy
Copy link
Author

arp-joy commented Feb 7, 2025

@spirillen, what does example.com mean, and where is it mentioned? I have provided all the required details in the note.

I would really appreciate it if this could be fixed on priority.

@arp-joy
Copy link
Author

arp-joy commented Feb 7, 2025

Image

@spirillen
Copy link
Contributor

Image

@arp-joy arp-joy changed the title False Positive | example.com False Positive | qr.tapnscan.me, qr-codes.io, linkpages.pro, q.linkpages.pro Feb 10, 2025
@arp-joy
Copy link
Author

arp-joy commented Feb 10, 2025

@spirillen I've made the change. Can you please let me know what additional details you need to resolve this?

We really need this fixed as soon as you can.

@spirillen
Copy link
Contributor

We really need this fixed as soon as you can.

Then, why haven't you test up the TXT records for any of the domains in a week??


ptcheck tapnscan.me antiphish-5193b4b86e3e4f0420aab23d9a37e199954d6d96
Failed to query DNS TXT record for _phishingdb.tapnscan.me

Thanks for using my tools.
Please consider a sponsor ship at https://www.mypdns.org/donate


ptcheck qr-codes.io antiphish-5193b4b86e3e4f0420aab23d9a37e199954d6d96
Failed to query DNS TXT record for _phishingdb.qr-codes.io

Thanks for using my tools.
Please consider a sponsor ship at https://www.mypdns.org/donate


ptcheck linkpages.pro antiphish-5193b4b86e3e4f0420aab23d9a37e199954d6d96
Failed to query DNS TXT record for _phishingdb.linkpages.pro

Thanks for using my tools.
Please consider a sponsor ship at https://www.mypdns.org/donate

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: 🆕 New
Development

No branches or pull requests

6 participants