search

x0rz / phishing_catcher

Phishing catcher using Certstream
https://blog.0day.rocks/catching-phishing-using-certstream-97177f0d499a
GNU General Public License v3.0
1.71k stars 355 forks source link

use number of short parts of domains for scoring #38

Open elbosso opened 5 years ago

elbosso commented 5 years ago

I Propose to score domains higher if they got more than two short parts towards the end so that 

some-domain.co.uk

is ok but something like 

some-domain.com.info.co.uk.com

is punished.

This pattern happens surprisingly often - i played around with this project just for two days and this is something that got my attention...