[Oisf-users] URL reputation?

[Matt]

Has anyone discussed URL reputation as a feature?  URL reputation is a 
common offering for threat intelligence providers.  For instance, Phish 
Tank publishes an open source feed here: 
http://www.phishtank.com/developer_info.php.  I can pull that list and 
turn it into 11k rules, but that doesn't seem optimal.  For larger 
feeds, it isn't possible at all.  E.g. Symantec's Deep Sight feed has 
over 150k URLs on it this morning.  I tried turning that into a rule 
set, but the box ran out of memory trying to load it.

- Matt