Benny, Sorry for the top posting.
SURBL doesn’t list that base domain. And please check on the SURBL page not on some third party site that might even be acl’ed. https://www.surbl.org/surbl-analysis page.link is NOT listed SURBL lists the subdomains, and we list many of them. It’s a firebase service and it’s abused for a long time unfortunately. Your mail is very confusing. With the ‘how?’ Without any further context and false assumptions. I would also suggest you update to SA4 so some of the items will be handled different. Such as the 2/3ld entries that are no longer needed for several of the datasources. With kind regards, Raymond Dijkxhoorn - SURBL > Op 25 aug. 2022 om 23:27 heeft Benny Pedersen <m...@junc.eu> het volgende > geschreven: > > Axb skrev den 2022-08-25 17:48: >>> On 8/25/22 16:10, Benny Pedersen wrote: >>> https://phishtank.com/phish_detail.php?phish_id=7691984 >>> https://phishtank.com/phish_detail.php?phish_id=7680788 >>> why is page.link have subdomain tjeking ?, is it marked at sa as a >>> redirector ? >> tjeking? > > microsoft swiftkey spelling error :) > >>> i consider block all page.link, whois says its hosted by google :/ >> go ahead.. > > /var/lib/spamassassin/3.004006/kam_sa-channels_mcgrail_com/KAM_urlshorteners.cf:url_shortener > .page.link > /var/lib/spamassassin/3.004006/kam_sa-channels_mcgrail_com/nonKAMrules.cf:util_rb_2tld > page.link > /var/lib/spamassassin/3.004006/updates_spamassassin_org/20_aux_tlds.cf:util_rb_2tld > page.tl page.link > /var/lib/spamassassin/3.004006/updates_spamassassin_org/25_url_shortener.cf:url_shortener > .page.link > > how ? > >>> report it to google phish reports helps notning >>> pmc members can get the whole spample if needed >> SURBL lists based on Phishtank data... no need for further action > > surbl list page.link as blocked ? > > https://multirbl.valli.org/lookup/page.link.html > > how ? >