Wednesday, May 31, 2017

Overdetecting Phishing Threats

I have been using an OpenDNS server (127.0.0.54) via DNSCrypt for domain name resolution, and the other day I saw this after clicking on a link:



The blocked domain is part of the JAMA Network which is the umbrella organization that publishes a variety of high-quality peer-reviewed medical journals under the American Medical Association. JAMA publications are among the most reputable medical publications in healthcare, and I think the domain that was blocked is unlikely to be an actual phishing threat. Anyone know of reasons why OpenDNS might have reported it as such?

No comments:

Post a Comment