Updated every hour
Online since 06/2005 - 7.000.000 hits/month
Last database update:
Welcome to the Malware Patrol project! We provide feeds of malware URLs and CryptoLocker domains and IPs, so you can protect yourself and your network users from getting infected by Malware. Block lists are available in several formats, including the most popular anti-spam, anti-virus and web proxy systems.
Premium subscribers can download the CryptolLocker feeds. Subscribe today!
Please visit our feeds page for more details. The Premium subscription allows access to all available formats of URLs and CryptoLocker block lists and is updated every hour. The Free subscription is only updated every 48/72 hours. Premium subscriptions helps us maintain the project and develop the many long awaited features. To know more about why you should choose the Premium subscribption, please watch this video.
Have questions or comments? Contact us at orders (a t) malwarepatrol . net. False positives should be reported to fp (a t) malwarepatrol.net
Your use of this web site constitutes agreement to all Terms and Conditions. If you want to use our feeds/block lists in a commercial product or service, please contact us for licensing information.
Want to know more about the project, visit the About Us page.
Recent Malware detected
14 Mar 14: Keep suspicious URLs coming to firstname.lastname@example.org . We'll not accept submissions via the online form anymore starting today.
24 Feb 14: We are happy to announce the availability of block lists of CryptoLocker command and control domains and IP addresses. If the ransomware can't access its servers, it won't be able to encrypt the victim's files and ask for a ransom.
Follow us on Twitter!
Why use a block list of URLs?
One of the most frequent questions is: "We have a firewall, anti-virus, anti-malware, IDS/IPS, etc - why do we need block lists of URLs in our proxy or router?"
That is a great question. First of all, it is certainly very important to have multiple protection layers and trusted intelligence sources when it comes to Internet security, no single vendor can protect you from all the current threats. This is known as layered security. Also, fraudsters are always improving their attacks that range from simple URLs pointing to malware files to complex exploit kits that can leverage vulnerabilities to download malicious software to the victims' computers. On top of that, distributed malware frequently has very low anti-virus detection rates. Attackers are also heavily using "downloaders", these are softwares which only intent is to download other malicious binaries that happens to be malware. We collect and track URLs that point to malware, including the ones used by exploit kits and downloaders, this is why it is so important to use our block lists.
So, why take chances when you can get extra protection? Waste no more time and start protecting your network with the data provided by the Malware Patrol. Click here to find all the feeds/block lists available.