HostlistsRegistry icon indicating copy to clipboard operation
HostlistsRegistry copied to clipboard

USOM - Top misleading site block list

Open Soickan opened this issue 8 months ago • 10 comments

Prerequisites

  • [X] I checked the documentation and found no answer;
  • [X] I checked to make sure that this issue has not already been filed;
  • [X] This is not an ad/bug report.

Problem description

Add list: USOM - Official Turk Cyber Block Center (www.usom.gov.tr)

Proposed solution

Hi,

Add please USOM - Official Turk Cyber Block Center (http://www.usom.gov.tr) block list. There is no ad blocking in the list. The list includes a list of fake and misleading sites. It is mostly updated hourly.

You can learn the details of blocked sites at https://www.usom.gov.tr/adres

This list address: https://www.usom.gov.tr/url-list.txt

Thanks

Additional information

No response

Soickan avatar Oct 24 '23 05:10 Soickan

@Soickan Moved to the correct repository.

Alex-302 avatar Oct 25 '23 20:10 Alex-302

Hello @Soickan, thank you for suggestion. Here is blocklist requirements

How can I check this list against these criteria?

The blocklist should have a place for receiving user complaints and holding discussions, such as a repository on github.com, or a public website/forum.

The blocklist should be relatively popular, meaning:
- if there is a repository on GitHub, the number of stars should be at least 50.
- if there is no repository on GitHub, the number of reported issues and discussions should be at least 10 per month.
- the blocklist should be actively supported for at least 6 months.

The blocklist should be regularly updated with at least 10 updates per month.

Sergey-Lyapin avatar Dec 22 '23 12:12 Sergey-Lyapin

Hm. I don't see working domains below 20k line. The most domains are blocked/dead.

Alex-302 avatar Dec 25 '23 16:12 Alex-302

Since they are mostly misleading (phishing) sites, when they are detected, the site owners close the site. Therefore, there will be old sites that do not work. This is, in a way, proof that the detection of sites is quick.

Soickan avatar Dec 26 '23 05:12 Soickan

It has more than 250k domains, and the most of that domains are dead/unregistered. Why don't they remove or move to another file domains, that are dead?

Alex-302 avatar Jan 03 '24 16:01 Alex-302

It has more than 250k domains, and the most of that domains are dead/unregistered. Why don't they remove or move to another file domains, that are dead?

First of all, although it is officially detected and blocked, it continues to prevent phishing by remaining on the list.

Other ad blocking filters do not guarantee a 100% active domain. I see that retroactive cleaning is not done much in these filters.

Soickan avatar Jan 04 '24 05:01 Soickan

The active domains are included in my Threat Intelligence Feed list. The USOM also has a few false positive domains from time to time, these are also filtered out.

The TIF is available in AdGuard DNS.

hagezi avatar Jan 04 '24 06:01 hagezi

Stats from the last TIF build:

 Nr | Included | Dead | Removed |   Count | URL/File
136 |      25% |  75% |      0% |  250898 | https://www.usom.gov.tr/url-list.txt

75% dead domains, <1% false positives,

hagezi avatar Jan 04 '24 11:01 hagezi

@hagezi Which tool do you use to check dead domains? 3p or your own?

Alex-302 avatar Jan 04 '24 13:01 Alex-302

@Alex-302 I check this myself with my own script against the Google DNS. My lists are checked once a month. I also check the deadlist once a month to see if dead domains are active again. I can make the list of dead domains available if required.

hagezi avatar Jan 04 '24 13:01 hagezi