Hi, I'm the maintainer of https://github.com/jarelllama/Scam-Blocklist , a blocklist for newly created scam and phishing domains automatically retrieved daily using Google Search API, automated NRD detection, and other public sources.
It may be a good fit for your Suspicious and Malicious categories.
Taken from my README, this is the current filtering process:
The domains collated from all sources are filtered against an actively maintained whitelist (scam reporting sites, forums, vetted stores, etc.)
The domains are checked against the Tranco Top Sites Ranking for potential false positives which are then vetted manually
Common subdomains like 'www' are stripped to make use of wildcard matching for all other subdomains. The list of subdomains checked for can be viewed here: subdomains.txt
Only domains are included in the blocklist; IP addresses are manually checked for resolving DNS records and URLs are stripped down to their domains
Entries that require manual verification/intervention are sent in a Telegram notification for fast remediations
Dead domains and parked domains are automatically removed daily as well. More about the blocklist's retrieval and filtering process can be found in the README.
The blocklist is currently integrated into Hagezi's TIF blocklist and the oisd blocklist.
KnightmareVIIVIIXC
commented
5 months ago
Hi, I'm the maintainer of https://github.com/jarelllama/Scam-Blocklist , a blocklist for newly created scam and phishing domains automatically retrieved daily using Google Search API, automated NRD detection, and other public sources.
It may be a good fit for your Suspicious and Malicious categories.
Taken from my README, this is the current filtering process:
Dead domains and parked domains are automatically removed daily as well. More about the blocklist's retrieval and filtering process can be found in the README.
The blocklist is currently integrated into Hagezi's TIF blocklist and the oisd blocklist.