67.216.67.0/24

[stsbob]

• 67.216.67.0/24
• http://*.iphiview.com domain names
  • Examples
  • bf.iphiview.com
  • rj.iphiview.com
  • cfmt.iphiview.com
  • cfal.iphiview.com
  • dmf.iphiview.com

There are additional domains, all using the .iphiview.com domain providing contracted services to charities and financial institutions. 

[TeMerc]

20 minutes ago, stsbob said:

• 67.216.67.0/24
• http://*.iphiview.com domain names
  • Examples
  • bf.iphiview.com
  • rj.iphiview.com
  • cfmt.iphiview.com
  • cfal.iphiview.com
  • dmf.iphiview.com

There are additional domains, all using the .iphiview.com domain providing contracted services to charities and financial institutions. 

Hello- This sub domain is still detected by a few reputable vendors: VirusTotal - Domain - truist.iphiview.com

[stsbob]

Thanks for the clarification.

This was rooted by a false positive finding from PhishLabs and they have been working since last week to remove the listing relating to truist.iphiview.com and keybank.iphiview.com.

We have the keybank.iphiview.com address disabled and the truist.iphiview.com site will be disabled at 3:00 PM EST today.

With those two sites disabled and are related to False Positives, would we be able to have the finding relating to iphiview.com domain removed as it is preventing online giving to over 100 charities?

[stsbob]

PhishLabs has removed the listing and has updated VirusTotal.

We have requests from the other sources to remove with their next update as well.