ah understand, should have better checked what SA really adds to domain list. So both versions are checked. Just bad luck if the expanded version of the uri domain (ex ch.com) has a blacklisting at uribl or spamhaus ;-) But that's another story
Have a good weekend tobi On 11/6/20 5:42 PM, RW wrote: > On Fri, 6 Nov 2020 17:24:58 +0100 > Tobi wrote: > >>> www.ch is a weird special case as a >>> domain name >> >> Did you check whois for www.ch? It's a registered domain and it >> resolves, so the owner has a whitelisting in SA or better his www.ch >> links which may host a very sophisticated spearphish page will never >> be queried by SA against blacklists. > > > The .com version is added as an additional URL, www.ch is still > queried. >
