# Domain Blacklist for OSINT Finder
# These are false positive domains found in code, logs, or system files
# Format: one domain per line, case-insensitive
# Wildcard patterns: *.errors, *.name, etc. will match any domain ending with that suffix

# Universal false positive patterns (any domain ending with these suffixes)
# These are common false positives from JavaScript/TypeScript code, object properties, etc.
# Examples: a.errors, b.errors, x.name, y.name, test.java, file.py, etc. will all be blocked
*.errors
*.name
*.test
*.java
*.py
*.id
*.family
*.next
*.map
*.open
*.fire
*.style
*.final
*.md
*.watch
*.as
*.src.map
*.actual.constructor.name
*.prototype.*
*.call
*.console.info
*.property
*.parts
# Public suffix list / registry metadata (TLD metadata, not real domains)
*.isoc.sd
isoc.sd
*.public-suffix.org
*.iana.org
*.icann.org
*.markerseverity.*

# File extensions (common false positives from code)
*.js
*.ts
*.json
*.yaml
*.yml
*.xml
*.html
*.css
*.scss
*.less
*.sass
*.coffee
*.rb
*.go
*.rs
*.cpp
*.c
*.h
*.hpp
*.cs
*.php
*.pl
*.sh
*.bash
*.zsh
*.fish
*.ps1
*.bat
*.cmd
*.exe
*.dll
*.so
*.dylib
*.a
*.lib
*.o
*.obj
*.class
*.jar
*.war
*.ear
*.zip
*.tar
*.gz
*.bz2
*.xz
*.7z
*.rar
*.deb
*.rpm
*.pkg
*.dmg
*.iso
*.img
*.bin
*.dat
*.log
*.tmp
*.bak
*.old
*.swp
*.swo
*.swn
*.pid
*.lock
*.conf
*.config
*.ini
*.cfg
*.properties
*.env

# Build/system directories and files
*.dist
*.build
*.target
*.out
*.bin
*.lib
*.include
*.share
*.local
*.cache
*.node_modules
*.vendor
*.bundle
*.chunk
*.min
*.src
*.assets
*.static
*.public
*.private
*.tmp
*.temp
*.swp
*.swo
*.swn
*.pid
*.lock
*.bak
*.old
*.orig
*.rej
*.patch
*.diff

# Version control
*.git
*.svn
*.hg
*.bzr
*.cvs
*.gitignore
*.gitattributes
*.gitmodules
*.gitkeep
*.gitconfig

# IDE/Editor configs
*.idea
*.vscode
*.vs
*.xcode
*.xcodeproj
*.xcworkspace
*.pbxproj
*.plist
*.strings
*.storyboard
*.xib
*.nib
*.bundle
*.framework
*.app
*.ipa
*.apk
*.aab

# Certificates and keys
*.keystore
*.jks
*.p12
*.pfx
*.cer
*.crt
*.key
*.pem
*.der
*.csr
*.p7b
*.p7c
*.p7m
*.p7s
*.spc
*.p8
*.p10
*.truststore
*.cacerts

# Package managers
*.npmrc
*.yarnrc
*.bowerrc
*.editorconfig
*.eslintrc
*.prettierrc
*.jshintrc
*.tslint.json
*.tsconfig.json
*.jsconfig.json
*.babelrc
*.browserslistrc
*.dockerignore
*.dockerfile
*.makefile
*.cmake
*.gradle
*.maven
*.sbt
*.ivy
*.project
*.classpath
*.settings

# Common false positives from code (specific domains that don't match patterns above)
1.day
1.pm
14.cd
1bar.net
24tv.ua
2fclient.com
40example.com
4dos.com
6b407.cafe
9now.com.au

# System/internal domains
localhost
local
internal
localdomain
test
example
example.com
example.org
example.net

# Common development domains
dev
staging
test.local
local.test
*.local
*.test
*.dev

# Browser/system domains
about:blank
about:config
chrome://
moz-extension://
file://

# Reserved TLDs
*.invalid
*.test
*.example
*.localhost

# System/public service domains (from _URL_BLACKLIST)
# W3C
w3.org
www.w3.org

# Ubuntu/Canonical
ubuntu.com
documentation.ubuntu.com
discourse.ubuntu.com
canonical.com
images.lxd.canonical.com
cloud-images.ubuntu.com
people.canonical.com
shop.canonical.com
contracts.canonical.com
assets.ubuntu.com

# GitHub
github.com
www.github.com
api.github.com
docs.github.com

# GNU
gnu.org
www.gnu.org

# Wikipedia
wikipedia.org
en.wikipedia.org

# PyPI
pypi.org
test.pypi.org

# Kernel
kernel.org
www.kernel.org
docs.kernel.org

# IETF
ietf.org
www.ietf.org
tools.ietf.org
datatracker.ietf.org

# IANA
iana.org
www.iana.org

# Debian
debian.org
www.debian.org
bugs.debian.org
sources.debian.org

# Python
python.org
www.python.org
bugs.python.org
docs.python.org
hg.python.org

# Docker
docker.com
docs.docker.com
get.docker.com

# Microsoft
microsoft.com
www.microsoft.com
learn.microsoft.com

# Red Hat
redhat.com

# Google services
google.com
googletagmanager.com
www.googletagmanager.com
cloud.google.com
sites.google.com
developers.google.com

# Matrix
matrix.to

# NTP
pool.ntp.org
www.pool.ntp.org
support.ntp.org

# Snapcraft
snapcraft.io

# Linux Containers
discuss.linuxcontainers.org

# Freedesktop
freedesktop.org
www.freedesktop.org

# Launchpad
bugs.launchpad.net

# Grafana
grafana.com

# YouTube
youtube.com
www.youtube.com

# Shields.io
img.shields.io

# ReadTheDocs
urllib3.readthedocs.io

# Go packages
pkg.go.dev

# Additional system domains found in previous scans
# Single character domains (a.com, b.org, etc. - common false positives)
a.com
a.org
a.net
a.io
a.dev
b.com
b.org
b.net
b.io
b.dev
c.com
c.org
c.net
c.io
c.dev
d.com
d.org
d.net
d.io
d.dev
e.com
e.org
e.net
e.io
e.dev
f.com
f.org
f.net
f.io
f.dev
g.com
g.org
g.net
g.io
g.dev
h.com
h.org
h.net
h.io
h.dev
i.com
i.org
i.net
i.io
i.dev
j.com
j.org
j.net
j.io
j.dev
k.com
k.org
k.net
k.io
k.dev
l.com
l.org
l.net
l.io
l.dev
m.com
m.org
m.net
m.io
m.dev
n.com
n.org
n.net
n.io
n.dev
o.com
o.org
o.net
o.io
o.dev
p.com
p.org
p.net
p.io
p.dev
q.com
q.org
q.net
q.io
q.dev
r.com
r.org
r.net
r.io
r.dev
s.com
s.org
s.net
s.io
s.dev
t.com
t.org
t.net
t.io
t.dev
u.com
u.org
u.net
u.io
u.dev
v.com
v.org
v.net
v.io
v.dev
w.com
w.org
w.net
w.io
w.dev
x.com
x.org
x.net
x.io
x.dev
y.com
y.org
y.net
y.io
y.dev
z.com
z.org
z.net
z.io
z.dev

# Common false positive patterns from code analysis
ki.as
h.id
l.id
m.id
u.open
e.watch

# Additional false positive patterns (from actual findings)
*.date
*.select
*.data
*.bar
*.fail
*.stream
*.foo
*.host
*.read
*.post
*.seek
*.codes

# Python methods/modules detected as domains (from actual SQLite analysis)
# These are false positives from code where Python methods are detected as domains
# Using wildcard patterns to catch all variations (e.g., match.group, re.group, any.group)
*.group
*.search
*.abc
*.findall
*.match
*.sub
*.split
*.compile
*.join
*.replace
*.strip
*.lower
*.upper
*.startswith
*.endswith
*.format
*.append
*.extend
*.insert
*.remove
*.pop
*.index
*.count
*.sort
*.reverse
*.keys
*.values
*.items
*.get
*.setdefault
*.update
*.popitem
*.clear
*.copy
*.fromkeys
*.add
*.discard
*.intersection
*.union
*.difference
*.symmetric_difference
*.issubset
*.issuperset
*.isdisjoint
*.decode
*.find
*.rfind
*.rindex
*.partition
*.rpartition
*.rsplit
*.splitlines
*.lstrip
*.rstrip
*.swapcase
*.title
*.translate
*.zfill
