<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>DNS-BH - Malware Domain Blocklist</title>
	<atom:link href="http://www.malwaredomains.com/wordpress/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://www.malwaredomains.com</link>
	<description>Malware Prevention through Domain Blocking (Black Hole DNS Sinkhole)</description>
	<lastBuildDate>Wed, 22 May 2013 12:20:54 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
		<item>
		<title>Resources for Hacked Sites</title>
		<link>http://www.malwaredomains.com/?p=3226</link>
		<comments>http://www.malwaredomains.com/?p=3226#comments</comments>
		<pubDate>Wed, 22 May 2013 12:17:58 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[General Security]]></category>
		<category><![CDATA[Off Topic]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3226</guid>
		<description><![CDATA[Some nice resources on what to do if your site was hacked: Additional resources: hacked sites (StopBadware) Hacked Site Recovery (Google) FAQ: Malware and Hacked Sites (Google) Webmaster help for Hacked Sites (Google) If you find a nice (noncommercial preferred) resources, let us know and we&#8217;ll add it to our list &#160;]]></description>
				<content:encoded><![CDATA[<p>Some nice resources on what to do if your site was hacked:</p>
<ul>
<li><a href="https://www.stopbadware.org/hacked-sites-resources?utm_source=StopBadware+Announcements+List&amp;utm_campaign=36767f679a-May_2013_Newsletter5_14_2013&amp;utm_medium=email&amp;utm_term=0_42a4ba2b5f-36767f679a-311212550" target="_blank">Additional resources: hacked sites (StopBadware)</a></li>
<li><a href="http://googlewebmastercentral.blogspot.com/2013/03/new-first-stop-for-hacked-site-recovery.html" target="_blank">Hacked Site Recovery (Google)</a></li>
<li><a href="https://sites.google.com/site/webmasterhelpforum/en/faq-malware-and-hacked-sites">FAQ: Malware and Hacked Sites (Google)</a></li>
<li><a href="http://www.google.com/webmasters/hacked/" target="_blank">Webmaster help for Hacked Sites (Google)</a></li>
</ul>
<p>If you find a nice (noncommercial preferred) resources, let us know and we&#8217;ll add it to our list</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3226</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>147 pushdo,malvertising,maliciousjs, iframe domains added</title>
		<link>http://www.malwaredomains.com/?p=3222</link>
		<comments>http://www.malwaredomains.com/?p=3222#comments</comments>
		<pubDate>Sun, 19 May 2013 23:38:51 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[New Domains]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3222</guid>
		<description><![CDATA[Added 147 domains associated with malicious javascript, iframes, pushdo, etc. Sources include safebrowsing.clients.google.com, sucuri.net, www.secureworks.com  (all sources are listed in our domains.txt file.) * Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs. * twitter page: https://twitter.com/malwaredomains * These malware block lists provided here are for free for [...]]]></description>
				<content:encoded><![CDATA[<p>Added 147 domains associated with malicious javascript, iframes, pushdo, etc. Sources include safebrowsing.clients.google.com, sucuri.net, www.secureworks.com  (all sources are listed in our <a href="http://malwaredomains.lehigh.edu/files/domains.txt" target="_blank">domains.txt</a> file.)</p>
<h5>* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.<br />
* twitter page: <a href="https://twitter.com/malwaredomains" target="_blank">https://twitter.com/malwaredomains</a></h5>
<h6>* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.<br />
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!<br />
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.<br />
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…<br />
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.</h6>
<h5>NO ZONE FILES ARE LOCATED ON THIS SITE. Users and ip addresses which repeatedly attempt to download zone files directly from this site will be banned from all downloads</h5>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3222</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ransomware Domains: iestats .cc, emstats .su, ehistats .su, e-protections .su</title>
		<link>http://www.malwaredomains.com/?p=3219</link>
		<comments>http://www.malwaredomains.com/?p=3219#comments</comments>
		<pubDate>Fri, 17 May 2013 21:42:19 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[rogue antivirus]]></category>
		<category><![CDATA[rogue security sites]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3219</guid>
		<description><![CDATA[The Internet Storm Center has listed several &#8220;Ransomware&#8221; Domains (iestats .cc, emstats .su, ehistats .su, e-protections .su). We&#8217;ll be adding it to our blocklist here but you shouldn&#8217;t wait.]]></description>
				<content:encoded><![CDATA[<p>The <a href="https://isc.sans.edu/" target="_blank">Internet Storm Center</a> has <a href="https://isc.sans.edu/diary/e-netprotections+su+/15818" target="_blank">listed</a> several &#8220;Ransomware&#8221; Domains (iestats .cc, emstats .su, ehistats .su, e-protections .su). We&#8217;ll be adding it to our blocklist here but you shouldn&#8217;t wait.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3219</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SutraTDS, iframe, malvertising,malspam domains</title>
		<link>http://www.malwaredomains.com/?p=3217</link>
		<comments>http://www.malwaredomains.com/?p=3217#comments</comments>
		<pubDate>Fri, 17 May 2013 15:38:24 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[New Domains]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3217</guid>
		<description><![CDATA[Added 111 SutraTDS, iframe, malvertising, malspam domains from blog.dynamoo.com, urlquery.net, and some private sources. (all sources are listed in our domains.txt file.) * Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs. * twitter page: https://twitter.com/malwaredomains * These malware block lists provided here are for free for [...]]]></description>
				<content:encoded><![CDATA[<p>Added 111 <span style="text-decoration: underline;">S</span>utraTDS, iframe, malvertising, malspam domains from blog.dynamoo.com, urlquery.net, and some private sources. (all sources are listed in our <a href="http://malwaredomains.lehigh.edu/files/domains.txt" target="_blank">domains.txt</a> file.)</p>
<h5>* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.<br />
* twitter page: <a href="https://twitter.com/malwaredomains" target="_blank">https://twitter.com/malwaredomains</a></h5>
<h6>* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.<br />
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!<br />
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.<br />
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…<br />
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.</h6>
<h5>NO ZONE FILES ARE LOCATED ON THIS SITE. Users and ip addresses which repeatedly attempt to download zone files directly from this site will be banned from all downloads</h5>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3217</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Zeus Special!  279 Zeus domains added</title>
		<link>http://www.malwaredomains.com/?p=3214</link>
		<comments>http://www.malwaredomains.com/?p=3214#comments</comments>
		<pubDate>Tue, 14 May 2013 05:02:16 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[New Domains]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3214</guid>
		<description><![CDATA[Added 279 Zeus domains from zeustracker.abuse.ch.]]></description>
				<content:encoded><![CDATA[<p>Added 279 Zeus domains from zeustracker.abuse.ch.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3214</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Off Topic: DevOps Reactions</title>
		<link>http://www.malwaredomains.com/?p=3208</link>
		<comments>http://www.malwaredomains.com/?p=3208#comments</comments>
		<pubDate>Mon, 13 May 2013 14:00:49 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[Off Topic]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3208</guid>
		<description><![CDATA[Off Topic but too funny not to pass on: http://devopsreactions.tumblr.com/ &#160;]]></description>
				<content:encoded><![CDATA[<p>Off Topic but too funny not to pass on:</p>
<p>http://devopsreactions.tumblr.com/</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3208</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Added 167 malspam, iframe, redkit domains</title>
		<link>http://www.malwaredomains.com/?p=3210</link>
		<comments>http://www.malwaredomains.com/?p=3210#comments</comments>
		<pubDate>Sat, 11 May 2013 22:27:30 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[New Domains]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3210</guid>
		<description><![CDATA[Added 167 Red Kit, Malicious Spam, iframe domains. Sources include dynamoo.com (of course), urlquery.net, siteinspector.comodo.com (all sources are listed in our domains.txt file.) * Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs. * twitter page: https://twitter.com/malwaredomains * These malware block lists provided here are for free [...]]]></description>
				<content:encoded><![CDATA[<p>Added 167 Red Kit, Malicious Spam, iframe domains. Sources include<br />
dynamoo.com (of course), urlquery.net, siteinspector.comodo.com (all sources are listed in our <a href="http://malwaredomains.lehigh.edu/files/domains.txt" target="_blank">domains.txt</a> file.)</p>
<h5>* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.<br />
* twitter page: <a href="https://twitter.com/malwaredomains" target="_blank">https://twitter.com/malwaredomains</a></h5>
<h6>* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.<br />
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!<br />
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.<br />
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…<br />
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.</h6>
<h5>NO ZONE FILES ARE LOCATED ON THIS SITE. Users and ip addresses which repeatedly attempt to download zone files directly from this site will be banned from all downloads</h5>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3210</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>malspam, iframe, typosquatting, malvertising domains</title>
		<link>http://www.malwaredomains.com/?p=3204</link>
		<comments>http://www.malwaredomains.com/?p=3204#comments</comments>
		<pubDate>Sat, 11 May 2013 00:14:30 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[New Domains]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3204</guid>
		<description><![CDATA[A small but important update  containing a little bit of everything &#8211; 98 rogue, malspam, typosquatting, malvertising domains. Sources: isc.sans.edu, blog.dynamoo.com, urlquery.net, blog.sucuri.net (all sources are listed in our domains.txt file.) * Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs. * twitter page: https://twitter.com/malwaredomains * These [...]]]></description>
				<content:encoded><![CDATA[<p>A small but important update  containing a little bit of everything &#8211; 98 rogue, malspam, typosquatting, malvertising domains. Sources: isc.sans.edu, blog.dynamoo.com, urlquery.net, blog.sucuri.net (all sources are listed in our <a href="http://malwaredomains.lehigh.edu/files/domains.txt" target="_blank">domains.txt</a> file.)</p>
<h5>* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.<br />
* twitter page: <a href="https://twitter.com/malwaredomains" target="_blank">https://twitter.com/malwaredomains</a></h5>
<h6>* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.<br />
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!<br />
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.<br />
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…<br />
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.</h6>
<h5>NO ZONE FILES ARE LOCATED ON THIS SITE. Users and ip addresses which repeatedly attempt to download zone files directly from this site will be banned from all downloads</h5>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3204</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>2135 Domains Removed</title>
		<link>http://www.malwaredomains.com/?p=3201</link>
		<comments>http://www.malwaredomains.com/?p=3201#comments</comments>
		<pubDate>Wed, 08 May 2013 22:52:45 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[Removed Domains]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3201</guid>
		<description><![CDATA[2135 domains have been delisted, please update your blocklists. The list of  delisted domains is here.]]></description>
				<content:encoded><![CDATA[<p>2135 domains have been delisted, please update your blocklists. The list of  delisted domains is <a href="http://mirror1.malwaredomains.com/files/removed-domains-20130505.txt">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3201</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>174 Zeus, Mariposa, Harmful Domains</title>
		<link>http://www.malwaredomains.com/?p=3196</link>
		<comments>http://www.malwaredomains.com/?p=3196#comments</comments>
		<pubDate>Mon, 06 May 2013 00:26:26 +0000</pubDate>
		<dc:creator>dglosser</dc:creator>
				<category><![CDATA[New Domains]]></category>
		<category><![CDATA[zeus]]></category>

		<guid isPermaLink="false">http://www.malwaredomains.com/?p=3196</guid>
		<description><![CDATA[Added 174 Zeus, Mariposa, safebrowsing domains. Sources:     zeustracker.abuse.ch, labs.alienvault.com, ics-cert.us-cert.gov and others ((all sources are listed in our domains.txt file.) * Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs. * twitter page: https://twitter.com/malwaredomains * These malware block lists provided here are for free for noncommercial [...]]]></description>
				<content:encoded><![CDATA[<p>Added 174 Zeus, Mariposa, safebrowsing domains. Sources:     zeustracker.abuse.ch, labs.alienvault.com, ics-cert.us-cert.gov and others ((all sources are listed in our <a href="http://malwaredomains.lehigh.edu/files/domains.txt" target="_blank">domains.txt</a> file.)</p>
<h5>* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.<br />
* twitter page: <a href="https://twitter.com/malwaredomains" target="_blank">https://twitter.com/malwaredomains</a></h5>
<h6>* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.<br />
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!<br />
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.<br />
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…<br />
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.</h6>
<h5><span style="color: #000080;">NO ZONE FILES ARE LOCATED ON THIS SITE. Users and ip addresses which repeatedly attempt to download zone files directly from this site will be banned from all downloads</span></h5>
]]></content:encoded>
			<wfw:commentRss>http://www.malwaredomains.com/?feed=rss2&#038;p=3196</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
