I’ve been working on adding sites to https://polkadot.js.org/phishing/. And this month I was able to add 369 websites. I have automated the parts of the process but the most time I spend is actually adding sites to the GitHub repository (formatting URL and placing them in alphabetical order). And that process is getting harder since we have more and more reported URLs. I was wondering if there could be a better way to block phishing sites.
1. Pull phishing URL’s from some phishing site databases. I have found this site https://pastebin.com/u/spamreports
2. User reportable Suspicious sites. Let’s say a user goes to a site and it looks and feels suspicions user then can click on the polkadot.js extension and mark it as “Suspicious” site gets added to “Suspicious List” next user would get a warning but would be able to go to the site if you get 10 users marking the site as “Suspicious” site gets added to list and it is blocked
You could have moderators if they think the site is Phishing, they can verify it and it gets added to the blocked list.
3. If the user goes to a site that has specific keywords in the URL worn user about Phishing Sites, like do not paster Seed keys to URL’s t
ccris02