threat-hostlist's Introduction

Threat host list

This project aims to provide a resource for malicious domain intelligence gathered from various sources, focusing on threats like malware, ransomware, phishing, spyware, and botnets. The goal is to simplify the process of accessing and utilizing this information for users, without the need to manually search for and maintain these lists themselves. By incorporating these blocklists into your DNS-level protections, you can efficiently safeguard your network environment against a wide range of cyber threats.

We appreciate any contributions to improve and expand this project. If you have suggestions for new blocklists, updates to existing ones, or have identified unmaintained blocklists that should be excluded, feel free to open a pull request or raise an issue. Your input is invaluable in making this project a valuable resource for everyone!

Please note that blocklists lacking active maintenance or those containing relatively significant false positives will not be included in this collection.

Blocklists

Blocklist	Source	Description	Homepage	License	Raw
add.Dead	FadeMind	Dead websites. Against typos in URLs	Link	GPLv3+	Raw
add.Risk	FadeMind	Websites with risk content, malwares etc	Link	GPLv3+	Raw
Anti Malware List	DandelionSprout	DandelionSprout's Anti Malware Filter	Link	Dandelicence v1.4	Raw
Anti-Malware Blocklists	QuidsUp	NoTrack project Anti-Malware Blocklists	Link	GPLv3	Raw
AZORult Tracker	AZORult Tracker	AZORult C&C Tracker	Link	CC0	Raw
Badd-Boyz-Hosts	Mitchell Krog	A hosts file to block bad domains	Link	MIT	Raw
blackbook	Miroslav Stampar	Blackbook of malware domains	Link	Public Domain	Raw
CoinBlockerLists	ZeroDot1	Simple list that help prevent cryptomining	Link	AGPLv3	Raw
eth-phishing-detect	MetaMask	Phishing domains targeting Ethereum users	Link	DON'T BE A DICK PUBLIC LICENSE	Raw
Fraud block list	The Block List Project	Lists of sites created to fraud	Link	The Unlicense license	Raw
GlobalAntiScamOrg-blocklist	Wu Tingfeng	Global Anti Scam Organization blocklist	Link	BSD-3-Clause	Raw
KADhosts(KAD host version)	Filters Heroes	List of various threats in the network	Link	CC BY-SA 4.0	Raw
Malicious Domain list	CERT Polska	List of malicious domains from CERT Polska	Link		Raw
Malicious Domain Blacklist	FruxLabs Crack Team	Rescure Cyber Threat Intelligence Feeds	Link	Public Domain	Raw
Malicious Domain Blocking	Hexxium Creations	Community driven malicious domains list	Link		Raw
Malicious Links List	USOM (trCERT)	Malicious Links List from TR-CERT	Link		Raw
Maltrail	Miroslav Stampar	A malicious traffic detection system	Link	MIT	Raw
NoCoin adblock list	hoshsadiq	Block lists to prevent JavaScript miners	Link	MIT	Raw
OpenPhish	OpenPhish	Phishing Intelligence	Link	All rights reserved	Raw
Phishing Army Extended	Phishing Army	The Extended Blocklist to filter Phishing	Link	CC BY-NC 4.0	Raw
Phishing block list	The Block List Project	Lists of sites created to phish info	Link	The Unlicense license	Raw
Phishing Domain Database	Mitchell Krog	Phishing Domains database	Link	MIT	Raw
Phishing List	SecureReload	SecureReload Phishing List	Link		Raw
Phishing URL Blocklist	Ming Di Leom	PhishTank and OpenPhish based blocklist	Link	CC BY-SA 4.0	Raw
Ransomware block list	The Block List Project	Known sites that host or contain ransomware	Link	The Unlicense license	Raw
Scam block list	The Block List Project	Sites that intend to scam	Link	The Unlicense license	Raw
Scam Blocklist	DurableNapkin	A blocklist to protect users against untrustworthy sites	Link	MIT	Raw
ThreatFox IOCs host file	ThreatFox	A free & community driven IOCs platform	Link	CC0	Raw
Threat-Intel	DigitalSide	Open Source Cyber Threat Intellegence	Link	MIT	Raw
Toxic Domains	Stop Forum Spam	Toxic Domains from StopForumSpam	Link	Custom	Raw
URLhaus	abuse.ch	A project to share malicious URLs	Link	CC0	Raw
UT1 malware Category	Blacklists UT1	Any website which deliver malware	Link	CC BY-SA 4.0	Raw
UT1 phishing Category	Blacklists UT1	Phishing sites	Link	CC BY-SA 4.0	Raw

threat-hostlist's People

Contributors

Stargazers

Watchers

threat-hostlist's Issues

Jarelllama's Scam Blocklist

Hi, I'm the maintainer of Jarelllama's Scam Blocklist, a blocklist for newly created scam and phishing domains automatically retrieved daily using Google Search API, automated NRD detection, and other public sources.

I see you're the main maintainer of dnslow.me and that NRDs are already blocked there. I will admit the large majority of my blocklist are malicious NRDs, however, the blocklist still offers cumulative domains automatically retrieved from various publically available sources such as scamadviser.com (no closed/paid sources are used for legal reasons)

Here is the list of currently integrated sources used for the automated retrieval:

Google Search (using the Custom Search JSON API)
Regex matching for malicious NRDs
aa419.org
dnstwist matching for malicious NRDs
guntab.com
petscams.com
scam.directory
scamadviser.com
stopgunscams.com

These are the formats the blocklist is currently in:

Format	Syntax
Adblock Plus	\|\|scam.com^
Dnsmasq	local=/scam.com/
Unbound	local-zone: "scam.com." always_nxdomain
Wildcard Asterisk	*.scam.com
Wildcard Domains	scam.com

Taken from my README, this is the current filtering process:

The domains collated from all sources are filtered against an actively maintained whitelist (scam reporting sites, forums, vetted stores, etc.)
The domains are checked against the Tranco Top Sites Ranking for potential false positives which are then vetted manually
Common subdomains like 'www' are stripped to make use of wildcard matching for all other subdomains. The list of subdomains checked for can be viewed here: subdomains.txt
Only domains are included in the blocklist; IP addresses are manually checked for resolving DNS records and URLs are stripped down to their domains
Entries that require manual verification/intervention are sent in a Telegram notification for fast remediations

Dead domains and parked domains are automatically removed daily as well. More about the blocklist's retrieval and filtering process can be found in the README.

Please do let me know your thoughts!

My TIF list

Hi, nice list. If you are interested, please feel free to include my TIF list:

https://github.com/hagezi/dns-blocklists#threat-intelligence-feeds---increases-security-significantly

Cheers,
Gerd

peterdavehello / threat-hostlist Goto Github PK

threat-hostlist's Introduction

Threat host list

Blocklists

threat-hostlist's People

Contributors

Stargazers

Watchers

Forkers

threat-hostlist's Issues

Jarelllama's Scam Blocklist

My TIF list

Add urlabuse.com

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent