elliotwutingfeng / TencentQQURLSec

Tencent QQ has an undocumented publicly-accessible real-time feed of malicious URLs. This repository extracts these URLs, at regular intervals, to a machine-readable .txt blocklist compatible with firewall applications like Pi-hole and pfBlockerNG. (Defunct w.e.f. 25 January 2024)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

TenCent QQ URLSec blocklist

Python AIOHTTP GitHub Actions

GitHub license scraper Total Blocklist URLs

Tencent QQ has an undocumented publicly-accessible real-time feed of malicious URLs.

This repository extracts these URLs, at regular intervals, to a machine-readable .txt blocklist compatible with firewall applications like Pi-hole and pfBlockerNG.

The URLs in this blocklist are compiled by Tencent QQ.

Disclaimer: This project is not sponsored, endorsed, or otherwise affiliated with Tencent.

Blocklist download

File Download
blocklist.txt 💾
blocklist_ABP.txt 💾
blocklist_UBO.txt 💾

Threat categories

Each URL is numerically categorised by threat type with the parameter evilclass. The evilclass number for each URL is provided in the blocklist after the # symbol.

Translations are provided as-follows

# evilclass
{
 '1' : '社工欺诈', # Phishing
 '2' : '信息诈骗', # Scam
 '3' : '虚假广告', # False Advertising
 '4' : '恶意文件', # Malicious Files
 '5' : '博彩网站', # Gambling
 '6' : '色情内容', # Pornographic content
 '7' : '垃圾信息', # Spam
 '8' : '非法内容' # Illegal content (likely to contain politically censored websites)
}

Source: https://github.com/flowerdown/tencent_url_safe_dump/blob/master/tencent_Dangerous_web.py

More information (in chinese) on the parameter evilclass can be found at https://urlsec.qq.com/eviltype.html and https://urlsec.qq.com/wiki/#!md/SafeQueryHttp.md

Requirements

  • Python 3.12+

Setup instructions

git clone and cd into the project directory, then run the following

python3 -m venv venv
venv/bin/python3 -m pip install --upgrade pip
venv/bin/python3 -m pip install -r requirements.txt

Usage

venv/bin/python3 scraper.py

 

These files are provided "AS IS", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, arising from, out of or in connection with the files or the use of the files.

Any and all trademarks are the property of their respective owners.

About

Tencent QQ has an undocumented publicly-accessible real-time feed of malicious URLs. This repository extracts these URLs, at regular intervals, to a machine-readable .txt blocklist compatible with firewall applications like Pi-hole and pfBlockerNG. (Defunct w.e.f. 25 January 2024)

License:BSD 3-Clause "New" or "Revised" License


Languages

Language:Python 100.0%