Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Blocklist suggestion: Jarelllama's Scam Blocklist #200

Closed
jarelllama opened this issue Apr 14, 2024 · 4 comments
Closed

Blocklist suggestion: Jarelllama's Scam Blocklist #200

jarelllama opened this issue Apr 14, 2024 · 4 comments

Comments

@jarelllama
Copy link

Hi, I'm the maintainer of https://github.com/jarelllama/Scam-Blocklist , a blocklist for newly created scam and phishing domains automatically retrieved daily using Google Search API, automated NRD detection, and other public sources.

It may be a good fit for your Suspicious and Malicious categories.

These are the formats I currently offer:

Format Syntax
Adblock Plus ||scam.com^
Dnsmasq local=/scam.com/
Unbound local-zone: "scam.com." always_nxdomain
Wildcard Asterisk *.scam.com
Wildcard Domains scam.com

Taken from my README, this is the current filtering process:

  • The domains collated from all sources are filtered against an actively maintained whitelist (scam reporting sites, forums, vetted stores, etc.)
  • The domains are checked against the Tranco Top Sites Ranking for potential false positives which are then vetted manually
  • Common subdomains like 'www' are stripped to make use of wildcard matching for all other subdomains. The list of subdomains checked for can be viewed here: subdomains.txt
  • Only domains are included in the blocklist; IP addresses are manually checked for resolving DNS records and URLs are stripped down to their domains
  • Entries that require manual verification/intervention are sent in a Telegram notification for fast remediations

Dead domains and parked domains are automatically removed daily as well. More about the blocklist's retrieval and filtering process can be found in the README.

The blocklist is currently integrated into Hagezi's TIF blocklist and the oisd blocklist.

@KnightmareVIIVIIXC
Copy link

#204

WaLLy3K added a commit that referenced this issue Jan 12, 2025
@WaLLy3K
Copy link
Owner

WaLLy3K commented Jan 12, 2025

The content looks good, I appreciate you taking the time to describe how the list is generated (This matters a lot to me!!), the list has been around for a while (I suppose there's some benefits to not reviewing and approving immediately! 😅) and there's a domains-only format list which is perfect. I've added this, so thank you very much for the submission! 🙂

@WaLLy3K WaLLy3K closed this as completed Jan 12, 2025
@jarelllama
Copy link
Author

Thanks @WaLLy3K . Heads up, if you ever add Hagezi's TIF (full) blocklist, my scam blocklist is already integrated thus, doesn't need to be its own entry.

@WaLLy3K
Copy link
Owner

WaLLy3K commented Jan 12, 2025

Thanks @WaLLy3K . Heads up, if you ever add Hagezi's TIF (full) blocklist, my scam blocklist is already integrated thus, doesn't need to be its own entry.

Noted! I do try to avoid consolidated blocklists though, and always prefer to direct people to the original creator. 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants