Domains tested against were amongst others “domains added within the last week to Phishtank.”
Testing this is bad, because of the possible short real minimal life time of a PHISH, not many are long OVERDUE.
Keeping such no longer existing PHISH-blocklists active, while they’re actually long gone,
will be an abundant source of FP’s.
Better improve PHISHTANK staff support and enhance real time detection
(while “PHISHING added to-day” could actually mean already gone from yesterday).
The report on the difference between DNS providers, like Quad9, OpenDNS, CleanBrowsing, Norton ConnectSafe, Comodo Secure en Yandex Safe tested in this case: [b]https://medium.com/@nykolas.z/phishing-protection-comparing-dns-security-filters-9d5a09849b91[/b]
CleanBrowsing scores best with on it’s heels Quad9. Do not use Comodo, Norton en Yandex.
Best is when you use the DHCP service of your own ISP router, that comes with such an extra feature, but with another service installed or via a DHCP server you would miss that feature alltogether, also when you use Google DNS service as a fallback service.
Just go to our virus & worms section, there I presented many a PHISH with backgrounds as why over the last years.
polonus (volunteer website security analyst and website error-hunter)