The current blacklists include most of the abuse.ch projects, except for URLhaus.

It includes malware urls including those from top domains (e.g. dropbox, google docs), so if urls are cut into domains only, that would results in many false positive.

Someone implemented it into a uBO filter.

As in title.

Database is kind of huge, so it'll be nice to have it in sql database (instead in RAM) and use same API but with async functions.
It could be, like you pass info of your database where u've uploaded sql file - as options to constructor. Then you can use all the same functions with async suffix.

In the suspicious IP list, there is an entry for localhost (127.0.0.1)

Both of them offer really nice statistics on IP's and unusual activity:

dShield : https://www.dshield.org/

OTX : https://otx.alienvault.com/

With these, you would practically have all the global tendencies as well as a list of IPs and their history.

I hope this helps!

Keep on doing what you are doing, you are making the cybersecurity community better with all the work that you have put in. Kudos to you!

Domain: coin-changer.net

A fake Crypto Exchanger which phishes people crypto coins / Card Money.
They scammed me for 200 USDT.
There is no offical license or company for "coin-changer.net"
More about this fraudulent phishing website "coin-changer.net":
https://www.chainabuse.com/report/1501334d-4530-4d9a-9646-a7b4918ce4f3

Please add this to phishing detection system, thanks.

• I have checked to make sure that there is not a duplicate issue

I follow the installation tutorial, just changed the link, and in the tutorial, the strings in title, type, etc, have a string on them, but mine returns none.