False Positive - request

[hwtechsupport]

Domains or links
Please list any domains and links listed here that you believe are a false positive.

ams-shared-2.hostwindsdns.com

More Information
How did you discover your website or domain was listed here?

1. Website was hacked
2. Incorrectly marked as Phishing on Phishtank or OpenPhish?

Have you requested removal from other sources?
Please include all relevant links to your existing removals / whitelistings.

Additional context
Add any other context about the problem here.

https://hw-screenshots.sea-proxy.windystorage.com/screenshots/2024-12-19_15-43-00_ab92873a-51a8-43f0-a96e-1db9cddd87de.png

❗

We understand being listed on a Phishing Database like this can be frustrating and embarrassing for many web site owners. The first step is to remain calm. The second step is to rest assured one of our maintainers will address your issue as soon as possible. Please make sure you have provided as much information as possible to help speed up the process.

Send a Pull Request for faster removal
Users who understand github and creating Pull Requests can assist us with faster removals by sending a PR to mitchellkrogza/phishing repository, on the falsepositive.list file

https://github.com/mitchellkrogza/phishing/blob/main/falsepositive.list
Please include the same above information to help speed up the whitelisting process.

[g0d33p3rsec]

looking over the urlscan history, the only malicious content I am seeing is from 4 years ago.
https://urlscan.io/search/#ams-shared-2.hostwindsdns.com
https://urlscan.io/result/11f85520-0c7b-4f5b-91a4-adaaef05a24c/
https://urlscan.io/result/d67f489e-a6af-45d3-bd5e-056646a4d2cc/
The related account seems to have been suspended since July 14, 2020.

https://cleantalk.org/blacklists/23.254.228.123
https://cdn-front.cleantalk.org/blacklists/23.254.228.193

1. Website was hacked

does that align with the time of your incident?

[g0d33p3rsec]

double checked the db and those are the only two entries for that subdomain

https://ams-shared-2.hostwindsdns.com/~qzsfapqt/dkb
https://ams-shared-2.hostwindsdns.com/~qzsfapqt/dkb/credit.php

the parent domain does have many more entries, did you loose control of your DNS?

http://ams-shared-12.hostwindsdns.com/~ptmjzpjr/raiffei/index.php?error_login=verfgernummer%20ungltig.
http://dal-business-25.hostwindsdns.com/~mumlclim/akt
http://dal-shared-11.hostwindsdns.com/~wdpwpqmj/wp-includes/theme-compat/cpsess5721925080/file/up343453456/1213456624/inter/account/tmp/expires/banks/Desjardins
http://dal-shared-11.hostwindsdns.com/~wdpwpqmj/wp-includes/theme-compat/cpsess5721925080/file/up343453456/1213456624/inter/account/tmp/expires/banks/Desjardins/ondetverifier.html
http://dal-shared-11.hostwindsdns.com/~wdpwpqmj/wp-includes/theme-compat/cpsess5721925080/file/up343453456/1213456624/inter/account/tmp/expires/banks/Simplii
http://hwsrv-1252301.hostwindsdns.com
http://hwsrv-728665.hostwindsdns.com/Finance/atb/details.php
http://hwsrv-728665.hostwindsdns.com/Finance/atb/finishmsg.html
http://hwsrv-728665.hostwindsdns.com/Finance/atb/secquestions.php
http://hwsrv-943988.hostwindsdns.com/ad2d.php
https://ams-business-7.hostwindsdns.com/~tupxyyaq/netflix
https://ams-business-8.hostwindsdns.com/~pggtflir/dkb
https://ams-business-8.hostwindsdns.com/~pggtflir/dkb/credit.php
https://ams-shared-11.hostwindsdns.com/~ztzabnfm/fifa210/fonts/velviqrk/Fbm
https://ams-shared-2.hostwindsdns.com/~qzsfapqt/dkb
https://ams-shared-2.hostwindsdns.com/~qzsfapqt/dkb/credit.php
https://ams-shared-7.hostwindsdns.com/~jhrsmshs/particulares.bancosantander.es/Santander
https://ams-shared-7.hostwindsdns.com/~xgtlfrsx/alpha/alphsecure
http://sea-shared-16.hostwindsdns.com/~jjftndem/alerte/ppl/verification/app/signin.php
https://hwsrv-926859.hostwindsdns.com/a4025faae0e2679c5d59ca43a8da579a
https://sea-shared-10.hostwindsdns.com/~jbuhbuju/update/en/auth/?pwd=applexN9dG1/login.php?id=60049113
https://sea-shared-10.hostwindsdns.com/~jbuhbuju/update/en/auth/xN9dG1/login.php
https://sea-shared-10.hostwindsdns.com/~jbuhbuju/update/en/auth/xN9dG1/login.php?id=3207548
https://sea-shared-10.hostwindsdns.com/~jbuhbuju/update/en/auth/xN9dG1/login.php?id=33039382
https://sea-shared-10.hostwindsdns.com/~jbuhbuju/update/en/auth/xN9dG1/login.php?id=94658358
https://sea-shared-16.hostwindsdns.com/~jjftndem/alerte/ppltest
https://sea-shared-16.hostwindsdns.com/~jjftndem/alerte/ppltest/verification