Question:where do theses fresh phishing domains come from?

[completelyboofyblitzed]

Thank you for the tool!

Could you please specify where does "fresh Phishing DB" come from? How is it updated? How is it decided whether the domain is phishing?

[krystian3w]

Maybe with something like passivedns https://github.com/PolishFiltersTeam/KAD/issues/1241#issuecomment-645287499

[spirillen]

Hey there, I know a little about your Q, so let me reply with what I know.

@mitchellkrogza have a number of servers with traps, these traps are then run true a several 1000's line long regex based bash scripts, saw it a couple of years ago..... trust me, it's complexes and takes several hours to decode all the regex.

Hope it give you some answers.

[funilrys]

Correct. Closing.