Community DNS Blacklist

Review-gated
flowchart LR
    A(["Community query"]) --> B["1 · Receive query\ntext · URL · image · QR"]
    B --> C["2 · Normalize & protect\nextract domains, strip PII"]
    C --> D["3 · Review evidence\nvs. records, context, repeats"]
    D --> E["4 · Publish with context\ncategory · confidence · source"]
    E --> F["5 · Share via channels\npartners & global lists"]
    F --> G(["Indicator live"])

    classDef step fill:#eef0fb,stroke:#c9cdec,stroke-width:1.5px,color:#1b2140,font-weight:500,rx:9,ry:9;
    classDef terminal fill:#4b5bd6,stroke:#4b5bd6,color:#ffffff,font-weight:600,rx:22,ry:22;
    class B,C,D,E,F step;
    class A,G terminal;

A blacklist entry is a review signal, not a guarantee — indicators can be corrected, re-reviewed, or removed as evidence changes.