http://mirror1.malwaredomains.com/files/
http://mirror2.malwaredomains.com/files/
http://mirror3.malwaredomains.com/files/
http://mirror4.malwaredomains.com/files/
complete domain.txt file http://malware-domains.com/files/domains.zip http://mirror1.malwaredomains.com/files/domains.zip http://mirror2.malwaredomains.com/files/domains.zip http://mirror1.malwaredomains.com/files/domains.txt http://mirror2.malwaredomains.com/files/domains.txt
complete BOOT file http://malware-domains.com/files/BOOT.zip http://mirror1.malwaredomains.com/files/BOOT.ZIP http://mirror2.malwaredomains.com/files/BOOT.ZIP http://mirror1.malwaredomains.com/files/BOOT http://mirror2.malwaredomains.com/files/BOOT
complete zone file (bind) http://malware-domains.com/files/spywaredomains.zones.zip http://mirror1.malwaredomains.com/files/spywaredomains.zones.zip http://mirror2.malwaredomains.com/files/spywaredomains.zones.zip http://mirror1.malwaredomains.com/files/spywaredomains.zones http://mirror2.malwaredomains.com/files/spywaredomains.zones
http://malwaredomains.lehigh.edu/ http://mirror1.malwaredomains.com http://mirror2.malwaredomains.com http://dns-bh.sagadc.org http://www.malware-domains.com (note dash) – all files compressed
We also have a mirror dedicated to research and Open Source Projects – contact us for details. If you can donate free space and have a lot of bandwidth to spare, please contact us.
================================================================================ also...
http://www.spamhaus.org/drop/edrop.txt http://www.spamhaus.org/drop/drop.txt
================================================================================
These are the list which we currently provide. If you have special requirements, then please let me know.
http://www.malwaredomainlist.com/mdlcsv.php complete database in csv format
http://www.malwaredomainlist.com/updatescsv.php
updates in csv format
http://www.malwaredomainlist.com/hostslist/mdl.xml
RSS feed of url updates
http://www.malwaredomainlist.com/hostslist/zeus.xml RSS feed of zbot/zeus url updates
http://www.malwaredomainlist.com/zeuscsv.php ZeuS urls in csv format
http://www.malwaredomainlist.com/hostslist/hosts.txt
hosts.txt an be used as a block list
http://www.malwaredomainlist.com/hostslist/delisted.txt
sites which are offline or have been cleaned
http://www.malwaredomainlist.com/hostslist/yesterday.php all new database entries from yesterday (all db fields)
http://www.malwaredomainlist.com/hostslist/yesterday_urls.php all new urls from yesterday (url only)
http://www.malwaredomainlist.com/hostslist/ip.txt list of active ip addresses
Further Reading: http://www.spamhaus.org/news/article/669/
For further information see:
DNS Response Policy Zones https://dnsrpz.info/ Spamhaus Domain Blocklist http://www.spamhaus.org/dbl Taking Back the DNS http://www.circleid.com/posts/20100728_taking_back_the_dns/ RPZ FAQ (PDF. 38KB) http://www.spamhaus.org/faq/RPZ.FAQ.20110602.pdf Response Policy Zone - History, Usage and Research (PDF. 180KB) http://www.spamhaus.org/whitepapers/RPZ-History-Usage-Research.pdf Cisco: Using DNS RPZ to block malicious DNS requests http://blogs.cisco.com/security/using-dns-rpz-to-block-malicious-dns-requests/ Internet Identity: Happy Birthday RPZ http://www.internetidentity.com/blog/happy-birthday-rpz/ Imperial College of London: What are DNS Response Policy Zones? http://www3.imperial.ac.uk/ict/services/security/securityservices/rpz