[Feature Request] Add isMalicious.com as a data source

[hexablob]

Feature Request

I'd like to suggest adding isMalicious.com as a data source for your blocklists.

About isMalicious

isMalicious is a threat intelligence platform that aggregates malicious domain data from multiple reputable sources. It provides regularly updated blocklists categorized by threat type.

Available Blocklists

List	URL	Description
All Malicious	https://ismalicious.com/api/blocklist/download/blocklist-domains-all.txt	Combined list
Phishing	https://ismalicious.com/api/blocklist/download/blocklist-domains-phishing.txt	Phishing sites
Malware	https://ismalicious.com/api/blocklist/download/blocklist-domains-malware.txt	Malware distribution
Ransomware	https://ismalicious.com/api/blocklist/download/blocklist-domains-ransomware.txt	Ransomware-related
C2	https://ismalicious.com/api/blocklist/download/blocklist-domains-c2.txt	Command & Control
Scam	https://ismalicious.com/api/blocklist/download/blocklist-domains-scam.txt	Scam/fraud sites

Format

Lists are plain text with one domain per line (no prefix):

malicious-domain1.com
phishing-site.net
ransomware-c2.org

Why Add This Source?

• Multi-source aggregation: Combines data from multiple threat intelligence feeds
• Categorized lists: Separate lists for different threat types align with your category system
• Daily updates: Fresh threat data
• Free/public access: No authentication required for blocklist downloads
• MIT Licensed: Open source compatible

Links

• Website: https://ismalicious.com
• Documentation: https://docs.ismalicious.com

Would the maintainers be interested in evaluating isMalicious as a source for the malware, phishing, ransomware, and/or scam lists?

Thank you for maintaining this excellent project!

[iam-py-test]

Free/public access: No authentication required for blocklist downloads

That does not seem to be the case:

{"error":"Access Denied","message":"Authentication required. Please log in."}

GitHub: https://github.com/hexablob/ismalicious.com

I get a 404 when trying to access that URL.
Thank you

[hexablob]

That does not seem to be the case: {"error":"Access Denied","message":"Authentication required. Please log in."}

Thanks for catching this! I've just pushed a fix, blocklist endpoints now support public access without authentication @iam-py-test

You should now be able to fetch:

https://ismalicious.com/api/blocklist/download/blocklist-domains-all.txt
https://ismalicious.com/api/blocklist/download/blocklist-domains-phishing.txt
https://ismalicious.com/api/blocklist/download/blocklist-domains-malware.txt
https://ismalicious.com/api/blocklist/download/blocklist-domains-ransomware.txt

I get a 404 when trying to access that URL.

Apologies for the confusion - the repository is currently private. I'll update the PR description to remove that reference.

Let me know if you run into any other issues!

[iam-py-test]

I get a gateway timeout:

Thanks

[hexablob]

They've been updated @iam-py-test you should be able to fetch the blocklists now