Threat host list

September 6, 2025 ยท View on GitHub

This project aims to provide a resource for malicious domain intelligence gathered from various sources, focusing on threats like malware, ransomware, phishing, spyware, and botnets. The goal is to simplify the process of accessing and utilizing this information for users, without the need to manually search for and maintain these lists themselves. By incorporating these blocklists into your DNS-level protections, you can efficiently safeguard your network environment against a wide range of cyber threats.

We appreciate any contributions to improve and expand this project. If you have suggestions for new blocklists, updates to existing ones, or have identified unmaintained blocklists that should be excluded, feel free to open a pull request or raise an issue. Your input is invaluable in making this project a valuable resource for everyone!

Please note that blocklists lacking active maintenance or those containing relatively significant false positives will not be included in this collection.

Blocklists

BlocklistSourceDescriptionHomepageLicenseRaw
add.DeadFadeMindDead websites. Against typos in URLsLinkGPLv3+Raw
add.RiskFadeMindWebsites with risk content, malwares etcLinkGPLv3+Raw
Anti Malware ListDandelionSproutDandelionSprout's Anti Malware FilterLinkDandelicence v1.4Raw
Anti-Malware BlocklistsQuidsUpNoTrack project Anti-Malware BlocklistsLinkGPLv3Raw
AZORult TrackerAZORult TrackerAZORult C&C TrackerLinkCC0Raw
Badd-Boyz-HostsMitchell KrogA hosts file to block bad domainsLinkMITRaw
blackbookMiroslav StamparBlackbook of malware domainsLinkPublic DomainRaw
CyberHost Malware DomainsCyberHostList of malware and phishing domainsLinkCC BY-SA 4.0Raw
eth-phishing-detectMetaMaskPhishing domains targeting Ethereum usersLinkDON'T BE A DICK PUBLIC LICENSERaw
Fraud block listThe Block List ProjectLists of sites created to fraudLinkThe Unlicense licenseRaw
GlobalAntiScamOrg-blocklistWu TingfengGlobal Anti Scam Organization blocklistLinkBSD-3-ClauseRaw
KADhosts(KAD host version)Filters HeroesList of various threats in the networkLinkCC BY-SA 4.0Raw
Malicious Domain listCERT PolskaList of malicious domains from CERT PolskaLinkRaw
Malicious Domain BlacklistFruxLabs Crack TeamRescure Cyber Threat Intelligence FeedsLinkPublic DomainRaw
Malicious Domain BlockingHexxium CreationsCommunity driven malicious domains listLinkRaw
Malicious Links ListUSOM (trCERT)Malicious Links List from TR-CERTLinkRaw
MaltrailMiroslav StamparA malicious traffic detection systemLinkMITRaw
NoCoin adblock listhoshsadiqBlock lists to prevent JavaScript minersLinkMITRaw
OpenPhishOpenPhishPhishing IntelligenceLinkAll rights reservedRaw
Phishing Army ExtendedPhishing ArmyThe Extended Blocklist to filter PhishingLinkCC BY-NC 4.0Raw
Phishing block listThe Block List ProjectLists of sites created to phish infoLinkThe Unlicense licenseRaw
Phishing Domain DatabaseMitchell KrogPhishing Domains databaseLinkMITRaw
Phishing URL BlocklistMing Di LeomPhishTank and OpenPhish based blocklistLinkCC BY-SA 4.0Raw
Ransomware block listThe Block List ProjectKnown sites that host or contain ransomwareLinkThe Unlicense licenseRaw
Scam block listThe Block List ProjectSites that intend to scamLinkThe Unlicense licenseRaw
Scam BlocklistDurableNapkinA blocklist to protect users against untrustworthy sitesLinkMITRaw
ThreatFox IOCs host fileThreatFoxA free & community driven IOCs platformLinkCC0Raw
Threat-IntelDigitalSideOpen Source Cyber Threat IntellegenceLinkMITRaw
Toxic DomainsStop Forum SpamToxic Domains from StopForumSpamLinkCustomRaw
URLhausabuse.chA project to share malicious URLsLinkCC0Raw
UT1 malware CategoryBlacklists UT1Any website which deliver malwareLinkCC BY-SA 4.0Raw
UT1 phishing CategoryBlacklists UT1Phishing sitesLinkCC BY-SA 4.0Raw