To reply to my own comment, I realized that this could potentially be done more simply by just attempting to place a dummy call to an un-indexed tower when encountered (my understanding is that a Stingray isn't actually capable of handling calls). If >99% of calls failed (basically 100% with room for error), the tower could be confirmed bad and blacklisted.