[selinkocalar]

Wonder how they're handling attribution and false positives. Threat intel quality can vary so wildly between sources.

[ripernverse]

I identified patterns and categorized them as strong positives, while continuing to search for new patterns and assigning scores based on factors such as TLD, host registrar, and registration duration.

The accuracy varies across categories, as some patterns cannot be linked to Canadian entities, but, most of the data is sourced from phishing feeds.