Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

145 Phishing/Scam Domain/Websites offering Fake VISA #4223

Closed
1 task done
Dolly43-qw opened this issue Nov 5, 2024 · 10 comments
Closed
1 task done

145 Phishing/Scam Domain/Websites offering Fake VISA #4223

Dolly43-qw opened this issue Nov 5, 2024 · 10 comments
Assignees
@hagezi
Labels
deny Deny domain(s) further analysis Further analysis necessary malicious/scam/phishing Denylist request for malicious/scam/phishing domains

Comments

@Dolly43-qw
Copy link

Which domain(s) should be blocked?

https://www.mea.gov.in/Portal/CountryNews/19364_press_800551188.pdf

Why should these domain(s) be blocked?

This require further analysis as some domains are already available for sale while some are still active.

This pdf issued by the Ministry Of External Affairs the Government of India website :
https://www.mea.gov.in/

Privacy

  • I confirm that the report does not contain any private information.
@Dolly43-qw Dolly43-qw added the deny Deny domain(s) label Nov 5, 2024
@Dolly43-qw Dolly43-qw changed the title 145 Phishing/Scam Domain/Websites offering VISA 145 Phishing/Scam Domain/Websites offering Fake VISA Nov 5, 2024
@hagezi
Copy link
Owner

hagezi commented Nov 6, 2024

Active domians (not NXDOMAIN or SERVFAIL):

akbartravels.com
atlaspvs.com
bisertravel.com.mk
blsindiavisa.kr
btwvisas.com
cibtvisas.com
covex.it
e-indianvisa.com
etaindiaonline.com
etaindia.org
e-touristvisa.com
e-touristvisaindia.com
etv-in.com
evisa.express
e-visa.ie
e-visaindia.com
evisaindia.com
evisa-indian.com
e-visaindiaonline.com
evisa-india-online.com
evisaindiaonline.org
evisaindia.org
evisasindia.org
evisatoindia.org
e-visums.nl
globalvisacorp.com
goindiavisa.com
indiaeta.com
india.evisa-agency.com
india-e-visa.com
indiae-visa.com
indiaevisaservice.com
indiaevisas.org
indiaimmigration.org
indianetouristvisacoin.wordpress.com
indian-e-visa.com
indian-evisa.com
indianevisaonline.com
indianimmigration.org
indianonlinevisas.org
indiantravelvisa.com
indianvisagov.com
indian-visa.in
indianvisa.online
indianvisaonlinegov.com
indian-visaonline.org
indianvisa-online.org
indianvisaonline.org
indianvisaservice.org.in
indiaonlinevisa.org
india.travisa.com
indiavisa.com
indiavisa.com.sg
indiavisa.co.uk
indiavisainfo.com
indiavisa.my
india-visa-online.com
india-visa-online.org
india-visaonline.org
indiavisa-online.org
indiavisaonline.org
indiavisa.org
india-visas.org
itseasy.com
ivisa.com
i-visaindia.com
jsdimmigration.com
jsdimmigrations.com
natvisa.com
online-eta.com
onlinevisa.com
smvisa.co.il
touristvisaonline.com
traveldocs.com
travelexpress.us.com
travelvisabookings.com
travisa.com
visacentral.com
visadone.com
visafirst.com
visagov.com
visahq.com
visasimple.com
visa-to-india.com
visatoindia.org
visumbuitenland.nl

@hagezi hagezi added the malicious/scam/phishing Denylist request for malicious/scam/phishing domains label Nov 6, 2024
@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 6, 2024

Thank you for your support. Ping @durablenapkin @jarelllama @iam-py-test for checking and possibly including the domain(s).

@hagezi hagezi added the fixed-pending-release Will be fixed in the next release label Nov 6, 2024
@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 6, 2024

Thank you for your support. The issue is scheduled to be fixed in the next release. You will be notified when the issue is finally fixed.

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 7, 2024

This issue has been fixed in release 2024.312.15823

@github-actions github-actions bot closed this as completed Nov 7, 2024
@github-actions github-actions bot removed the fixed-pending-release Will be fixed in the next release label Nov 7, 2024
@iam-py-test
Copy link

Added, thanks

iam-py-test added a commit to iam-py-test/my_filters_001 that referenced this issue Nov 7, 2024
@iam-py-test
Fix hagezi/dns-blocklists#4223
eaaf2df
jarelllama added a commit to jarelllama/Scam-Blocklist that referenced this issue Nov 27, 2024
@jarelllama
Update phishing targets
1b7037b 
hagezi/dns-blocklists#4259
hagezi/dns-blocklists#4223
hagezi/dns-blocklists#4125
hagezi/dns-blocklists#4101
hagezi/dns-blocklists#4075
@durablenapkin durablenapkin mentioned this issue Jan 7, 2025
Closed
3 tasks
@maxsam4
Copy link

maxsam4 commented Jan 9, 2025

Lot's of other domains in this list are legitimate and incorrectly blocked.

I started looking from the top and top 3 domains seem legitimate.

@hagezi hagezi reopened this Jan 9, 2025
@hagezi
Copy link
Owner

hagezi commented Jan 9, 2025

@maxsam4

Thanks, I'll have another look, a few have already been sorted out.

@hagezi hagezi added the further analysis Further analysis necessary label Jan 9, 2025
@hagezi
Copy link
Owner

hagezi commented Jan 9, 2025 •
edited
Loading

Allowed:

akbartravels.com
btwvisas.com
visahq.com

Dead:
indiavisainfo.com

On current top 1M lists (Umbrella, Cloudflare, Tranco - popular, potentially false positive domains):

cibtvisas.com
evisa.express
globalvisacorp.com
india-visa-online.org (down)
indiaevisas.org (scam - india-e-visa.info)
itseasy.com
ivisa.com
natvisa.com
traveldocs.com
travisa.com
visacentral.com
visumbuitenland.nl

Currently blocked:

atlaspvs.com
bisertravel.com.mk
blsindiavisa.kr
cibtvisas.com
covex.it
e-indianvisa.com
etaindiaonline.com
etaindia.org
e-touristvisa.com
e-touristvisaindia.com
etv-in.com
evisa.express
e-visa.ie
e-visaindia.com
evisaindia.com
evisa-indian.com
e-visaindiaonline.com
evisa-india-online.com
evisaindiaonline.org
evisaindia.org
evisasindia.org
evisatoindia.org
e-visums.nl
globalvisacorp.com
goindiavisa.com
indiaeta.com
india.evisa-agency.com
india-e-visa.com
indiae-visa.com
indiaevisaservice.com
indiaevisas.org
indiaimmigration.org
indianetouristvisacoin.wordpress.com
indian-e-visa.com
indian-evisa.com
indianevisaonline.com
indianimmigration.org
indianonlinevisas.org
indiantravelvisa.com
indianvisagov.com
indian-visa.in
indianvisa.online
indianvisaonlinegov.com
indian-visaonline.org
indianvisa-online.org
indianvisaonline.org
indianvisaservice.org.in
indiaonlinevisa.org
india.travisa.com
indiavisa.com
indiavisa.com.sg
indiavisa.co.uk
indiavisa.my
india-visa-online.com
india-visa-online.org
india-visaonline.org
indiavisa-online.org
indiavisaonline.org
indiavisa.org
india-visas.org
itseasy.com
ivisa.com
i-visaindia.com
jsdimmigration.com
jsdimmigrations.com
natvisa.com
online-eta.com
onlinevisa.com
smvisa.co.il
touristvisaonline.com
traveldocs.com
travelexpress.us.com
travelvisabookings.com
travisa.com
visacentral.com
visadone.com
visafirst.com
visagov.com
visasimple.com
visa-to-india.com
visatoindia.org
visumbuitenland.nl

@hagezi hagezi added the fixed-pending-release Will be fixed in the next release label Jan 9, 2025
@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 9, 2025

Thank you for your support. The issue is scheduled to be fixed in the next release. You will be notified when the issue is finally fixed.

@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 9, 2025

This issue has been fixed in release 2025.009.59498

@github-actions github-actions bot closed this as completed Jan 9, 2025
@github-actions github-actions bot removed the fixed-pending-release Will be fixed in the next release label Jan 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@hagezi hagezi

Labels
deny Deny domain(s) further analysis Further analysis necessary malicious/scam/phishing Denylist request for malicious/scam/phishing domains
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@maxsam4 @iam-py-test @hagezi @Dolly43-qw