parthdmaniar / coronavirus-covid-19-sars-cov-2-iocs Goto Github PK

www.google.com and www.twitter.com came with cabc3d9 in URLs

Hi,

I think you need more validation, the Alexa top1m list is not sufficient. You probably want to validate against the public suffix list too: https://publicsuffix.org/list/public_suffix_list.dat

Here are some TLDs in your list:
.be
.us
.ac
.com (!)

There is more strange stuff when looking at the length of the entries, try these greps
$ egrep '^.{1}$' URLs
$ egrep '^.{2}$' URLs
$ egrep '^.{3}$' URLs
$ egrep '^.{4}$' URLs
$ egrep '^.{5}$' URLs
$ egrep '^.{6}$' URLs

Some more IOCs to look into, Sir.

• https://www.anomali.com/learn/covid19
• https://github.com/sophoslabs/covid-iocs/
• https://github.com/carbonblack/tau-tools/tree/master/threat_hunting/IOCs

IP list to several of them in an effort to protect users from harmful content. There was a report that a subset of the IP blocks might be overly broad - specifically the entries for 23.227.38.65 and 23.227.38.32. These are IPs from which shopify hosts their client websites, and while blocking those IPs does prevent access to fraudulent storefronts, it seems to block access to legitimate ones as well. For example, one of my users reported problems accessing the following:

httpx://cleanmonster.com (likely scam site, a brand-new storefront selling COVID supplies)
httpx://gatherhereonline.com (local craft supplies store, not COVID-related, false positive)

In looking into the issue, I realized they were both blocked by the same entries in the IP list. Would it be possible to move entries resolving to those IPs into the URL list? This would prevent penalizing legitimate businesses using shopify as their payment processor.

Hi there,

I am the developer of covid19map.us, an informational map I built using public data from USAFacts. The website is a static page hosted by Netlify that is open source (https://github.com/freedmand/covid19map.us) – there are no ads, tracking, phishing, or any other malware. Please let me know if I can provide any further information.

Hello,
I'm the developer of this website, it's a scientific tool based on public data. Could you please remove it from your list. Let me know if you need any additional information.

Hi,

I am the developer of http://covid-19-sounds.org/, a research project from the University of Cambridge.

Please whitelist our project, we are collecting valuable cough and breathing data to develop models in order to detect covid19.

Proof of validity: the university has officially covered us here https://www.cam.ac.uk/research/news/new-app-collects-the-sounds-of-covid-19

Please let me know if could we use your feed in our security product for free?

Hi there, coronavirusdatamap.com and californiacoronavirus.org appear to be trustworthy websites owned by @embreinhardt, but they're currently blacklisted. Could you please find a way to whitelist them? Let me know if I can help with that!