Some nice resources on what to do if your site was hacked:
If you find a nice (noncommercial preferred) resources, let us know and we’ll add it to our list
Added 147 domains associated with malicious javascript, iframes, pushdo, etc. Sources include safebrowsing.clients.google.com, sucuri.net, www.secureworks.com (all sources are listed in our domains.txt file.)
The Internet Storm Center has listed several “Ransomware” Domains (iestats .cc, emstats .su, ehistats .su, e-protections .su). We’ll be adding it to our blocklist here but you shouldn’t wait.
Added 111 SutraTDS, iframe, malvertising, malspam domains from blog.dynamoo.com, urlquery.net, and some private sources. (all sources are listed in our domains.txt file.)
Added 279 Zeus domains from zeustracker.abuse.ch.
Off Topic but too funny not to pass on:
http://devopsreactions.tumblr.com/
Added 167 Red Kit, Malicious Spam, iframe domains. Sources include
dynamoo.com (of course), urlquery.net, siteinspector.comodo.com (all sources are listed in our domains.txt file.)
A small but important update containing a little bit of everything – 98 rogue, malspam, typosquatting, malvertising domains. Sources: isc.sans.edu, blog.dynamoo.com, urlquery.net, blog.sucuri.net (all sources are listed in our domains.txt file.)
2135 domains have been delisted, please update your blocklists. The list of delisted domains is here.
Added 174 Zeus, Mariposa, safebrowsing domains. Sources: zeustracker.abuse.ch, labs.alienvault.com, ics-cert.us-cert.gov and others ((all sources are listed in our domains.txt file.)