hagezi / dns-blocklists

DNS-Blocklists: For a better internet - keep the internet clean!
GNU General Public License v3.0
6.16k stars 208 forks source link

hopp.to shouldn't be blocklisted #489

Closed shaulgo closed 1 year ago

shaulgo commented 1 year ago

What adblocker/DNS cloud service are you using?

NextDns

Which blocklists are used?

HaGeZi(Threat Intelligence Feeds) HaGeZi (Multi Normal) HaGeZi (Multi Pro) HaGeZi (Multi Pro++) HaGeZi (Ultimate)

Which domain(s) should be unblocked?

hopp.to

Why should the domain(s) be unblocked? If necessary, please describe the steps to reproduce.

It is a url shortener/link-in-bio product by wix. Domain shouldn't be blocked. Users get subdomains. So it should be only by subdomains. Thanks

hagezi commented 1 year ago

Thanks, main domain will be unblocked.

grafik

Domain:
 - hopp.to

Top 1M rank:
 - Umbrella:       -/-
 - Tranco:         -/-
 - Chrome:         -/-

Nofilter DNS:
 - Cloudflare      OK
 - DNS0.eu         OK
 - Google          OK
 - OpenDNS         OK
 - Quad9           OK

Secure DNS:
 - CleanBrowsing   OK
 - Cloudflare      OK
 - CONTROLD.TIF    BLOCKED
 - DNS0.eu         OK
 - DNS0.eu.ZERO    OK
 - NextDNS.TIF_AI  OK
 - OpenDNS         OK
 - Quad101         OK
 - Quad9           OK
 - SafeDNS         BLOCKED
 - UltraDNS        OK
 - Yandex          OK

Blocklists:
 - 1Hosts.Lite     OK
 - 1Hosts.Mini     OK
 - 1Hosts.Pro      OK
 - AdGuardDNS      OK
 - AhaDNS          BLOCKED
 - CONTROLD        BLOCKED
 - DNSforge.de     OK
 - EasyList        OK
 - HaGeZi.LIGHT    OK
 - HaGeZi.NORMAL   BLOCKED
 - HaGeZi.PERSONAL OK
 - HaGeZi.PRO      BLOCKED
 - HaGeZi.PRO.PLUS BLOCKED
 - HaGeZi.ULTIMATE BLOCKED
 - hBlock          OK
 - Lightswitch05   OK
 - NextDNS         OK
 - NoTracking      BLOCKED
 - OISD            BLOCKED
 - OVPN            OK
 - QuidsUp.NOTRACK OK
 - StevenBlack     OK
 - Tiarap          BLOCKED

Intels:
 - Google          https://transparencyreport.google.com/safe-browsing/search?url=hopp.to
 - VirusTotal      https://www.virustotal.com/en/domain/hopp.to/information/
 - AlienVault      https://otx.alienvault.com/indicator/domain/hopp.to
 - Bitdefender     https://trafficlight.bitdefender.com/info/?url=https%3A%2F%2Fhopp.to
 - FortiGuard      https://www.fortiguard.com/webfilter?q=hopp.to
 - Kaspersky       https://opentip.kaspersky.com/hopp.to?tab=web
 - McAfee          https://siteadvisor.com/sitereport.html?url=hopp.to
 - Norton          https://safeweb.norton.com/report/show?url=hopp.to
 - OpenDNS         https://domain.opendns.com/hopp.to
 - URLVoid         https://www.urlvoid.com/scan/hopp.to/
 - Yandex          https://yandex.com/safety/?l10n=en&url=hopp.to
shaulgo commented 1 year ago

Thanks for taking care of this. May I know what service are you using for this report. I recognize virustotal at the top. But how do you get the report under it?

hagezi commented 1 year ago

@shaulgo No, it is a shell script based on this script: https://github.com/PeterDaveHello/chkdomain

I just extended it with some functions that query my build system.

shaulgo commented 1 year ago

Is it an issue that it's still appearing in th dns-data-collection? https://github.com/hagezi/dns-data-collection/blob/335affa6369f36fb5c4e7003ff472db369090598/sources/mitchellkrogza_phishing.database_phishing-domains-new-today.txt#L6055

hagezi commented 1 year ago

No, not for my lists, they are just raw data from the sources,