Tencent QQ has an undocumented publicly-accessible real-time feed of malicious URLs.

This repository extracts these URLs, at regular intervals, to a machine-readable .txt blocklist compatible with firewall applications like Pi-hole and pfBlockerNG.

The URLs in this blocklist are compiled by Tencent QQ.

Disclaimer: This project is not sponsored, endorsed, or otherwise affiliated with Tencent.

Each URL is numerically categorised by threat type with the parameter evilclass. The evilclass number for each URL is provided in the blocklist after the # symbol.

Translations are provided as-follows

# evilclass
{
 '1' : '社工欺诈', # Phishing
 '2' : '信息诈骗', # Scam
 '3' : '虚假广告', # False Advertising
 '4' : '恶意文件', # Malicious Files
 '5' : '博彩网站', # Gambling
 '6' : '色情内容', # Pornographic content
 '7' : '垃圾信息', # Spam
 '8' : '非法内容' # Illegal content (likely to contain politically censored websites)
}

Source: https://github.com/flowerdown/tencent_url_safe_dump/blob/master/tencent_Dangerous_web.py

More information (in chinese) on the parameter evilclass can be found at https://urlsec.qq.com/eviltype.html and https://urlsec.qq.com/wiki/#!md/SafeQueryHttp.md

• Python 3.12+

git clone and cd into the project directory, then run the following

python3 -m venv venv
venv/bin/python3 -m pip install --upgrade pip
venv/bin/python3 -m pip install -r requirements.txt

venv/bin/python3 scraper.py

^{These files are provided "AS IS", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, arising from, out of or in connection with the files or the use of the files.}

_{Any and all trademarks are the property of their respective owners.}