Yes it is using @spaminator’s list of known phishing domains: https://spaminator.me/api/p/domains.json
Every time a new phishing wave starts, the attacker’s domain gets added there by the @spaminator team.
Maybe you’re right. That’s also why I was thinking that we should automate the addition of new entries to the blacklist. What I had in mind for this was:
- If a top 20 witness sends a memo like “phish:justinscam.com” the reported domain gets automatically added to the blacklist;
- Same if at least 2 witnesses in position between 40 and 20 send a memo in that format.
I could even host myself a copy of @spaminator's blacklist and start offering this automation mechanism in @keys-defender..
🤔💡 - PS. DONE
Seems like a good plan!
Posted Using LeoFinance Beta