A method for enhancing computer security is provided. The method may include receiving a first dataset including a first plurality of web sites and a second dataset including a second plurality of web sites. The second plurality of web sites may comprise whitelisted websites. The method may include executing a first set of instructions, the first set of instructions including accessing each of the first plurality of websites and, based on the accessing, assigning a confidence score to each of the websites. The method may also include executing a second set of instructions. The second set of instructions may include creating a third dataset including a third list of web sites having a URL that includes a predetermined term. The second set of instructions may also include removing from the third dataset the second plurality of websites to create a modified third dataset.