{"action":"created","issue":{"url":"https://api.github.com/repos/notracking/hosts-blocklists/issues/95","repository_url":"https://api.github.com/repos/notracking/hosts-blocklists","labels_url":"https://api.github.com/repos/notracking/hosts-blocklists/issues/95/labels{/name}","comments_url":"https://api.github.com/repos/notracking/hosts-blocklists/issues/95/comments","events_url":"https://api.github.com/repos/notracking/hosts-blocklists/issues/95/events","html_url":"https://github.com/notracking/hosts-blocklists/issues/95","id":365042900,"node_id":"MDU6SXNzdWUzNjUwNDI5MDA=","number":95,"title":"URLhaus","user":{"login":"HellboyPI","id":26040009,"node_id":"MDQ6VXNlcjI2MDQwMDA5","avatar_url":"https://avatars1.githubusercontent.com/u/26040009?v=4","gravatar_id":"","url":"https://api.github.com/users/HellboyPI","html_url":"https://github.com/HellboyPI","followers_url":"https://api.github.com/users/HellboyPI/followers","following_url":"https://api.github.com/users/HellboyPI/following{/other_user}","gists_url":"https://api.github.com/users/HellboyPI/gists{/gist_id}","starred_url":"https://api.github.com/users/HellboyPI/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HellboyPI/subscriptions","organizations_url":"https://api.github.com/users/HellboyPI/orgs","repos_url":"https://api.github.com/users/HellboyPI/repos","events_url":"https://api.github.com/users/HellboyPI/events{/privacy}","received_events_url":"https://api.github.com/users/HellboyPI/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-09-28T21:12:22Z","updated_at":"2018-10-07T22:37:17Z","closed_at":null,"author_association":"NONE","body":"New list suggestion -> [URLhaus](https://urlhaus.abuse.ch/) - relatively new list from well known [abuse.ch](https://abuse.ch/)\r\nThe list is also available as [DNS Response Policy Zone (RPZ)](https://urlhaus.abuse.ch/api/) file.\r\n\r\nThe false positive rate should be low because:\r\n_\"To reduce the amount of false positives, URLhaus RPZ does only include domain names associated with malware URLs that are either active (malware sites that currently serve a payload) or that have been added to URLhaus in the past 48 hours. In addition to that, Alexa Top 1M are excluded from the RPZ dataset.\"_"},"comment":{"url":"https://api.github.com/repos/notracking/hosts-blocklists/issues/comments/427693159","html_url":"https://github.com/notracking/hosts-blocklists/issues/95#issuecomment-427693159","issue_url":"https://api.github.com/repos/notracking/hosts-blocklists/issues/95","id":427693159,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNzY5MzE1OQ==","user":{"login":"notracking","id":16341583,"node_id":"MDQ6VXNlcjE2MzQxNTgz","avatar_url":"https://avatars3.githubusercontent.com/u/16341583?v=4","gravatar_id":"","url":"https://api.github.com/users/notracking","html_url":"https://github.com/notracking","followers_url":"https://api.github.com/users/notracking/followers","following_url":"https://api.github.com/users/notracking/following{/other_user}","gists_url":"https://api.github.com/users/notracking/gists{/gist_id}","starred_url":"https://api.github.com/users/notracking/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/notracking/subscriptions","organizations_url":"https://api.github.com/users/notracking/orgs","repos_url":"https://api.github.com/users/notracking/repos","events_url":"https://api.github.com/users/notracking/events{/privacy}","received_events_url":"https://api.github.com/users/notracking/received_events","type":"User","site_admin":false},"created_at":"2018-10-07T22:37:17Z","updated_at":"2018-10-07T22:37:17Z","author_association":"OWNER","body":"Thanks for the finds @HellboyPI ! \r\n\r\nI'm tracking my status down here, will update as I go along.\r\n\r\n**1) Not sure how to deal with DGA feeds atm.\r\n2) Not sure how to deal with DGA feeds atm.**\r\n3) Not actively maintained\r\n**4) Should add [this](http://malc0de.com/bl/BOOT) to the normal list\r\n5) Should check how well our whitelist works on this one, [readme](http://tracker.h3x.eu/about/400)\r\n6) Should add [this](http://www.urlvir.com/export-hosts/) to the normal list**\r\n7) Commercial\r\n**8) Should add [this](https://raw.githubusercontent.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites/master/.dev-tools/output/domains/ACTIVE/list) to the normal list\r\n9) Should add [this](https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt) to the normal list\r\n10) Already have a same purpose list parsed, should compare check before adding to the main list.**\r\n11) Not actively maintained\r\n12) Requires registration"}}
{"actor":{"display_login":"notracking"}}