RBL, RPZ, Malware domains

RBL, RPZ, Malware domains
=========================

http://mirror1.malwaredomains.com/files/

http://mirror2.malwaredomains.com/files/

http://mirror3.malwaredomains.com/files/

http://mirror4.malwaredomains.com/files/

--------------------------------------------------------------------------------
complete domain.txt file
http://malware-domains.com/files/domains.zip
http://mirror1.malwaredomains.com/files/domains.zip
http://mirror2.malwaredomains.com/files/domains.zip
http://mirror1.malwaredomains.com/files/domains.txt
http://mirror2.malwaredomains.com/files/domains.txt

--------------------------------------------------------------------------------
complete BOOT file
http://malware-domains.com/files/BOOT.zip
http://mirror1.malwaredomains.com/files/BOOT.ZIP
http://mirror2.malwaredomains.com/files/BOOT.ZIP
http://mirror1.malwaredomains.com/files/BOOT
http://mirror2.malwaredomains.com/files/BOOT

--------------------------------------------------------------------------------
complete zone file  (bind)
http://malware-domains.com/files/spywaredomains.zones.zip
http://mirror1.malwaredomains.com/files/spywaredomains.zones.zip
http://mirror2.malwaredomains.com/files/spywaredomains.zones.zip
http://mirror1.malwaredomains.com/files/spywaredomains.zones
http://mirror2.malwaredomains.com/files/spywaredomains.zones

--------------------------------------------------------------------------------
The following are our mirrors:
==============================

http://malwaredomains.lehigh.edu/
http://mirror1.malwaredomains.com
http://mirror2.malwaredomains.com
http://dns-bh.sagadc.org
http://www.malware-domains.com (note dash) – all files compressed


--------------------------------------------------------------------------------
We also have a mirror dedicated to research and Open Source Projects – contact
us for details.  If you can donate free space and have a lot of bandwidth to
spare, please contact us.

================================================================================
also...

<li><a href="http://www.joewein.net/" title="joewein.de LLC">joewein.net</a></li>
<li><a href="http://www.phsdl.net/project_honeypot.php" title="Spam Domains an Zlob Trojans">Project Honeypot Spam Domains List</a></li>
<li><a href="http://sudosecure.net/spambot/spambotlinks.php">SpamBot domains</a></li>
<li><a href="http://spamtrackers.eu/wiki/index.php?title=Main_Page">Spamtrackers wiki</a></li>


================================================================================
================================================================================
My Own Additions
--------------------------------------------------------------------------------
http://www.spamhaus.org/drop/edrop.txt
http://www.spamhaus.org/drop/drop.txt


See also:
http://www.malwaredomainlist.com/forums/index.php?topic=3270.0
================================================================================
================================================================================


--------------------------------------------------------------------------------
These are the list which we currently provide. If you have special requirements, then please let me know.

http://www.malwaredomainlist.com/mdlcsv.php
complete database in csv format

http://www.malwaredomainlist.com/updatescsv.php
updates in csv format

http://www.malwaredomainlist.com/hostslist/mdl.xml
RSS feed of url updates

http://www.malwaredomainlist.com/hostslist/zeus.xml
RSS feed of zbot/zeus url updates

http://www.malwaredomainlist.com/zeuscsv.php
ZeuS urls in csv format

http://www.malwaredomainlist.com/hostslist/hosts.txt
hosts.txt an be used as a block list

http://www.malwaredomainlist.com/hostslist/delisted.txt
sites which are offline or have been cleaned

http://www.malwaredomainlist.com/hostslist/yesterday.php
all new database entries from yesterday (all db fields)

http://www.malwaredomainlist.com/hostslist/yesterday_urls.php
all new urls from yesterday  (url only)

http://www.malwaredomainlist.com/hostslist/ip.txt
list of active ip addresses

--------------------------------------------------------------------------------
Further Reading:
http://www.spamhaus.org/news/article/669/

--------------------------------------------------------------------------------
For further information see:

DNS Response Policy Zones <https://dnsrpz.info/>
Spamhaus Domain Blocklist <http://www.spamhaus.org/dbl>
Taking Back the DNS <http://www.circleid.com/posts/20100728_taking_back_the_dns/>
RPZ FAQ (PDF. 38KB) <http://www.spamhaus.org/faq/RPZ.FAQ.20110602.pdf>
Response Policy Zone - History, Usage and Research (PDF. 180KB) <http://www.spamhaus.org/whitepapers/RPZ-History-Usage-Research.pdf>
Cisco: Using DNS RPZ to block malicious DNS requests <http://blogs.cisco.com/security/using-dns-rpz-to-block-malicious-dns-requests/>
Internet Identity: Happy Birthday RPZ <http://www.internetidentity.com/blog/happy-birthday-rpz/>
Imperial College of London: What are DNS Response Policy Zones? <http://www3.imperial.ac.uk/ict/services/security/securityservices/rpz>