Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CERT.PL's Warning List #466

Closed
antek821 opened this issue May 3, 2021 · 2 comments
Closed

Add CERT.PL's Warning List #466

antek821 opened this issue May 3, 2021 · 2 comments

Comments

@antek821
Copy link

antek821 commented May 3, 2021

Please add Polish phishing list. It's a dynamically operating list that has been operating for over a year, aimed at users from Poland

Name: CERT.PL's Warning List
Tags: lang:pl purpose:security
Description in English: Protect against to phishing. Created by CERT Polska, Description in Polish: Chroni przed phishing'iem. Lista tworzona przez CERT Polska
Homepage: https://www.cert.pl/posts/2020/03/ostrzezenia_phishing/
Link to list: https://hole.cert.pl/domains/domains_adblock.txt

@krystian3w
Copy link
Contributor

krystian3w commented May 6, 2021

Almost online hosts are aded into KAD: https://github.com/AdguardTeam/FiltersRegistry/tree/master/filters/ThirdParty/filter_232_KADPrzekrety at 3 times on day.

From KAD I and hawkeye116477 remove CERT.pl hosts with expired WHOIS, blocked with error 403/404 (by super admin on hosting/domain server) once or twice a week.

If you must have 86 or more updates at day (or have also offline domains) maybe better add this as new project - AdGuard can run 24 updates cycles now and for ThirdParty maybe now have only 86 chances to detect new list.

I suppose no possible add updates on 5 minute intervals (12 in hour / 288 on every 24h) like CERT.pl added new phishing by use AdGuard ecosystem domain filters.adtidy.org.


legacy glitch (no longer disadvantage)

The CERT.pl list also has the disadvantage of not generating an alert:

||bad.domain^ - AdGuard rejected this to generate alerts and recommends use:

||bad.domain^$document
||bad.domain^$all

to generate aletrs:

obraz

@antek821
Copy link
Author

antek821 commented May 8, 2021

@krystian3w thanks for the answer. I didn't know that KAD already had this list in it. Regarding what you wrote, I am closing the issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants