Master Feeds
Use of these feeds governed by this license or the license you signed when you got commercial service.


ALL FAMILIES

C2 IP Feed

C2 Domain Feed

C2 All Indicator Feed

DGA Domain Feed

DGA Domain Feed ZIP File

HIGH-CONFIDENCE FAMILIES ONLY

High-Confidence C2 IP Feed

High-Confidence C2 Domain Feed

High-Confidence C2 All Indicator Feed

High-Confidence DGA Domain Feed

High-Confidence DGA Domain Feed ZIP File

Family-Specific Feeds

Bamital (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Banjori (FP Risk: Medium - Some short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Bebloh/URLZone (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Bedep (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Beebone (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Chinad (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Corebot (FP Risk: Low) | Master | Domlist | IP List | NS Host List (NOT GENERATED) | NS IP List (NOT GENERATED)

Cryptolocker (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Dircrypt (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Dromedan (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Dyre (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Fobber (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

G01 (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Geodo (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Gozi (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Hesperbot (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Kraken (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Locky (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Madmax (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Matsnu (FP Risk: High - Wordlist based) | Master | Domlist | IP List | NS Host List | NS IP List

Mirai (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Murofet (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Necurs (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Nymaim (FP Risk: Medium - Short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

P2P GOZ (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pandabanker (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

PT GOZ / New GOZ (FP Risk: Low) | Master | Domlist | NS Host List | NS IP List

Padcrypt (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pizd (FP Risk: High) | Master | Domlist | IP List | NS Host List | NS IP List

Proslikefan (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pushdo (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Pykspa (FP Risk: Medium - short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Qadars (FP Risk: Low | Master | Domlist | IP List | NS Host List | NS IP List

Qakbot (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Ramdo (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Ramnit (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Ranbyus (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Shifu (FP Risk: Medium) | Master | Domlist | IP List | NS Host List | NS IP List

Simda (FP Risk: Medium - short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Sisron (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Sphinx (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Suppobox (FP Risk: High - wordlist based) | Master | Domlist | IP List | NS Host List | NS IP List

Symmi (FP Risk: Low) | Master | Domlist | IP List | NS Host List (NOT GENERATED) | NS IP List (NOT GENERATED)

Tempedreve (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Tinba / TinyBanker (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Tinynuke (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Tofsee (FP Risk: Medium - Short Domain Names) | Master | Domlist | IP List | NS Host List | NS IP List

Unknowndropper (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Unknownjs (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Vawtrak (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Vidro (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List

Virut (FP Risk: Medium - short domain names) | Master | Domlist | IP List | NS Host List | NS IP List

Volatile Cedar / Explosive (FP Risk: Low) | Master | Domlist | IP List | NS Host List | NS IP List