Darkcomet, Poisonivy, DGA domains…

Posted on April 29th, 2014 in New Domains by dglosser

Added over 700 domains associated with njrat, darkcomet, poisonivy, fake flash installers,  and other badness. Sources include gist.github.com/jedisct1, malwareconfig.com, dynamoo.com ((All domains and sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs
* twitter page: https://twitter.com/malwaredomains

* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format.
* Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
* We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

April Updates

Posted on April 23rd, 2014 in New Domains by dglosser

4/16 = 232 domains4/20 = 155 domains
4/22 = 301 domains

Please updates your blocklists and follow our terms of use



Posted on April 13th, 2014 in New Domains by dglosser

Been a little behind on posting updates due to HeartBleed.  There have been several updates this week (4/11 & 4/13), please updates your blocklists and follow our terms of use