captainGeech42 / ransomwatch

Ransomware leak site monitoring
MIT License
305 stars 64 forks source link

Victim removal detection doesn't work properly when onion changes #87

Open captainGeech42 opened 2 years ago

captainGeech42 commented 2 years ago

Victim removal detection currently uses the full URL usually, which includes the onion domain. One side effect of this is that whenever the onion addr for a site changes, all of the victims are considered removed and new on the next scrape, which is problematic.

Change this to just use the URI + site ID.