From 921e79ec73aca8f08d68864cd84bf6788bc73d97 Mon Sep 17 00:00:00 2001
From: limina1 <131614677+limina1@users.noreply.github.com>
Date: Mon, 17 Feb 2025 21:32:57 -0500
Subject: [PATCH] Add link safety 51.md

---
 51.md | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)

diff --git a/51.md b/51.md
index 87744c72..16952bd3 100644
--- a/51.md
+++ b/51.md
@@ -151,6 +151,49 @@ Some clients have used these lists in the past, but they should work on transiti
 }
 ```
 
+### Link Safety
+
+A kind `10099` replaceable event for storing user domain preferences. If a client automatically loads content links, these provide settings to the user to change their preferences. Aggregating kind `10099` from other users can be useful in informing users should they change the default settings.
+
+```jsonc
+{
+  "kind": 10099,
+  "content": "",
+  "tags": [
+    ["d", "domain_lists"], // identifier 
+    ["white", "nostr.build"],
+    ["white", "void.cat"],
+    ["black", "malicious-site.net"],
+    ["black", "scam-domain.com"]
+    ["unknown", "ask"]  // Options: "load" | "block" | "ask"
+  ]
+}
+```
+
+### Report Event Extension
+
+Extend kind `1984` events to include domain reporting:
+
+```jsonc
+{
+  "kind": 1984,
+  "tags": [
+    ["u", "https://malicious-site.net", "malware"],
+    ["L", "security.domain.safety"],
+    ["l", "NS-mal", "security.domain.safety"]
+  ],
+  "content": "Domain distributes malware",
+}
+```
+
+Example Report Types
+----------------------
+Add the following report types for domains:
+- `ip_grab` - Sites attempting to collect IP addresses
+- `redirect` - Unexpected redirects to other domains
+- `nsfw_content` - Adult or explicit content
+- `phishing` - Fraudulent sites imitating legitimate services
+
 ## Encryption process pseudocode
 
 ```scala