Suspicious Domains

Background

There are many suspicious domains on the internet. In an effort to identify them, as well as false positives, we have assembled weighted lists based on tracking and malware lists from different sources. ISC is collecting and categorizing various lists associated with a certain level of sensitivity. We would like to acknowledge the following data sources:

• www.abuse.ch - SpyEye and ZeuS Trackers
• www.malwaredomains.com
• www.threatexpert.com

A suggested use of these lists is as input file for Guy's domain sinkhole project.

Thank you to handler Jason Lam for developing this project! This page is still experimental and evolving. We will be adding more data sources over time. If you have any suggestions, please let us know.

Lists By Level

The lists below categorize domains as a guide to Low, Medium and High Levels of Sensitivity.

• The lower the sensitivity, the fewer false positives.
• Lists are based on ranges so they will overlap at each level.

Low Sensitivity Level (opens in new window)

Medium Sensitivity Level (opens in new window)

High Sensitivity Level (opens in new window)

Domain Whitelist

Download current whitelists:

• APPROVED whitelist
• PENDING whitelist

The form below allows you to submit a known-good domain to the suspicious domains whitelist. Your submission will be reviewed and approved for release. Please Contact Us if you feel you have special circumstances outside of the criteria listed below or have any problems with the form.

• There is a limit of 20 submissions per 24 hour period
• Only 1 domain allowed per form submission
• Domain MUST exists in one of the Lists By Level at the time of submission
• Domain will be removed from whitelist 7 days after dropping off all Lists By Level

Please log in to submit a domain to the whitelist.

Search the Lists

Search for domain history and details:

Domain Name:

Creates a custom domain list file

Limit Score Range:	0123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100 -to- 0123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100 Higher the score, the more sensitive the domain
Refine Domain Names:	ANYALLLIKE separate lists with spaces
Restrict Date Range:	JanFebMarAprMayJunJulAugSepOctNovDec123456789101112131415161718192021222324252627282930312000200120022003200420052006200720082009201020112012201320142015 -to- JanFebMarAprMayJunJulAugSepOctNovDec123456789101112131415161718192021222324252627282930312000200120022003200420052006200720082009201020112012201320142015
Occurs A Minimum Of:	01020304050607080901001101201301401501601701801902002102202302402502602702802903003103203303403503603703803904004104204304404504604704804905005105205305405505605705805906006106206306406506606706806907007107207307407507607707807908008108208308408508608708808909009109209309409509609709809901000 leave at zero(0) for unlimited