{
  "name": "malicious",
  "description": "Malicious, malware, spyware, phishing etc",
  "sources": [
    {
      "name": "Phishing Army",
      "description": "Generated every 6 hours from PhishTank, OpenPhish, Cert.pl and PhishFindR reports.",
      "url": "https://phishing.army/download/phishing_army_blocklist.txt",
      "format": "domains"
    },
    {
      "name": "OpenPhish",
      "description": "Phishing URL lists",
      "url": "https://openphish.com/feed.txt",
      "format": "urls"
    },
    {
      "name": "Badd-Boyz-Hosts",
      "description": "Badd-Boyz-Hosts",
      "url": "https://raw.githubusercontent.com/mitchellkrogza/Badd-Boyz-Hosts/master/hosts",
      "format": "hosts"
    },
    {
      "name": "The-Big-List-of-Hacked-Malware-Web-Sites",
      "description": "The-Big-List-of-Hacked-Malware-Web-Sites",
      "url": "https://raw.githubusercontent.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites/master/hosts",
      "format": "hosts"
    },
    {
      "name": "immortal_domains",
      "description": "immortal_domains",
      "url": "https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt",
      "format": "domains"
    },
    {
      "name": "Mandiant_APT1_Report_Appendix_D",
      "description": "Mandiant_APT1_Report_Appendix_D",
      "url": "https://bitbucket.org/ethanr/dns-blacklists/raw/master/bad_lists/Mandiant_APT1_Report_Appendix_D.txt",
      "format": "domains"
    },
    {
      "name": "ut1-blacklists malware",
      "description": "ut1-blacklists malware",
      "url": "https://raw.githubusercontent.com/olbat/ut1-blacklists/master/blacklists/malware/domains",
      "format": "domains"
    },
    {
      "name": "ut1-blacklists phishing",
      "description": "ut1-blacklists phishing",
      "url": "https://raw.githubusercontent.com/olbat/ut1-blacklists/master/blacklists/phishing/domains",
      "format": "domains"
    },
    {
      "name": "shallalist spyware",
      "description": "shallalist spyware",
      "url": "https://raw.githubusercontent.com/cbuijs/shallalist/master/spyware/domains",
      "format": "domains"
    },
    {
      "url": "https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt",
      "format": "hosts"
    }
  ],
  "exclusions": [
    "*.0rz.tw",
    "*.1drv.ms",
    "*.4shared.com",
    "*.archive.org",
    "*.arpa",
    "*.backblazeb2.com",
    "*.bit.do",
    "*.bit.ly",
    "*.bitly.com",
    "*.cl.ly",
    "*.cloud.ovh.net",
    "*.cutt.ly",
    "*.discordapp.com",
    "*.docs.google.com",
    "*.docs.zoho.com",
    "*.downloads.intercomcdn.com",
    "*.drive.google.com",
    "*.dropbox.com",
    "*.dropboxusercontent.com",
    "*.evernote.com",
    "*.file-upload.com",
    "*.filefactory.com",
    "*.files.1drv.com",
    "*.files.cloud.orange.fr",
    "*.forms.gle",
    "*.github.com",
    "*.githubusercontent.com",
    "*.gitlab.com",
    "*.googleusercontent.com",
    "*.imagebam.com",
    "*.imagehosting.biz",
    "*.imgbox.com",
    "*.imgur.com",
    "*.is.gd",
    "*.j.mp",
    "*.jsdelivr.net",
    "*.linktr.ee",
    "*.lnky.in",
    "*.mail.naver.com",
    "*.maven.org",
    "*.mediafire.com",
    "*.mega.nz",
    "*.on24.com",
    "*.onedrive.live.com",
    "*.ow.ly",
    "*.paste.ee",
    "*.pastebin.com",
    "*.pasteboard.co",
    "*.pastelink.net",
    "*.postimg.cc",
    "*.rebrand.ly",
    "*.reurl.cc",
    "*.s.id",
    "*.send.firefox.com",
    "*.sendspace.com",
    "*.snip.ly",
    "*.thumbsnap.com",
    "*.tiny.cc",
    "*.tinypic.com",
    "*.tinyurl.com",
    "*.wetransfer.com",
    "*.wixstatic.com",
    "*.zdusercontent.com",
    "*.zippyshare.com",
    "51.la",
    "ams3.digitaloceanspaces.com",
    "bitbucket.org",
    "firebasestorage.googleapis.com",
    "mailchi.mp",
    "mandrillapp.com",
    "nyc3.digitaloceanspaces.com",
    "pool-nyc.supportxmr.com",
    "pool-vegas.xmrpool.net",
    "pool.minexmr.com",
    "s3-af-south-1.amazonaws.com",
    "s3-ap-east-1.amazonaws.com",
    "s3-ap-northeast-1.amazonaws.com",
    "s3-ap-northeast-2.amazonaws.com",
    "s3-ap-northeast-3.amazonaws.com",
    "s3-ap-south-1.amazonaws.com",
    "s3-ap-southeast-1.amazonaws.com",
    "s3-ap-southeast-2.amazonaws.com",
    "s3-ca-central-1.amazonaws.com",
    "s3-cn-north-1.amazonaws.com",
    "s3-cn-northwest-1.amazonaws.com",
    "s3-eu-central-1.amazonaws.com",
    "s3-eu-north-1.amazonaws.com",
    "s3-eu-south-1.amazonaws.com",
    "s3-eu-west-1.amazonaws.com",
    "s3-eu-west-2.amazonaws.com",
    "s3-eu-west-3.amazonaws.com",
    "s3-sa-east-1.amazonaws.com",
    "s3-us-east-1.amazonaws.com",
    "s3-us-east-2.amazonaws.com",
    "s3-us-west-1.amazonaws.com",
    "s3-us-west-2.amazonaws.com",
    "s3-website-ap-northeast-1.amazonaws.com",
    "s3-website-ap-southeast-1.amazonaws.com",
    "s3-website-ap-southeast-2.amazonaws.com",
    "s3-website-eu-west-1.amazonaws.com",
    "s3-website-sa-east-1.amazonaws.com",
    "s3-website-us-east-1.amazonaws.com",
    "s3-website-us-west-1.amazonaws.com",
    "s3-website-us-west-2.amazonaws.com",
    "s3-website.af-south-1.amazonaws.com",
    "s3-website.ap-east-1.amazonaws.com",
    "s3-website.ap-northeast-2.amazonaws.com",
    "s3-website.ap-northeast-3.amazonaws.com",
    "s3-website.ap-south-1.amazonaws.com",
    "s3-website.ca-central-1.amazonaws.com",
    "s3-website.cn-northwest-1.amazonaws.com.cn",
    "s3-website.eu-central-1.amazonaws.com",
    "s3-website.eu-north-1.amazonaws.com",
    "s3-website.eu-south-1.amazonaws.com",
    "s3-website.eu-west-2.amazonaws.com",
    "s3-website.eu-west-3.amazonaws.com",
    "s3-website.us-east-2.amazonaws.com",
    "s3.af-south-1.amazonaws.com",
    "s3.amazonaws.com",
    "s3.ap-east-1.amazonaws.com",
    "s3.ap-northeast-1.amazonaws.com",
    "s3.ap-northeast-2.amazonaws.com",
    "s3.ap-northeast-3.amazonaws.com",
    "s3.ap-south-1.amazonaws.com",
    "s3.ap-southeast-1.amazonaws.com",
    "s3.ap-southeast-2.amazonaws.com",
    "s3.ca-central-1.amazonaws.com",
    "s3.cn-north-1.amazonaws.com",
    "s3.cn-northwest-1.amazonaws.com",
    "s3.dualstack.af-south-1.amazonaws.com",
    "s3.dualstack.ap-east-1.amazonaws.com",
    "s3.dualstack.ap-northeast-1.amazonaws.com",
    "s3.dualstack.ap-northeast-2.amazonaws.com",
    "s3.dualstack.ap-northeast-3.amazonaws.com",
    "s3.dualstack.ap-south-1.amazonaws.com",
    "s3.dualstack.ap-southeast-1.amazonaws.com",
    "s3.dualstack.ap-southeast-2.amazonaws.com",
    "s3.dualstack.ca-central-1.amazonaws.com",
    "s3.dualstack.cn-north-1.amazonaws.com",
    "s3.dualstack.cn-northwest-1.amazonaws.com",
    "s3.dualstack.eu-central-1.amazonaws.com",
    "s3.dualstack.eu-north-1.amazonaws.com",
    "s3.dualstack.eu-south-1.amazonaws.com",
    "s3.dualstack.eu-west-1.amazonaws.com",
    "s3.dualstack.eu-west-2.amazonaws.com",
    "s3.dualstack.eu-west-3.amazonaws.com",
    "s3.dualstack.sa-east-1.amazonaws.com",
    "s3.dualstack.us-east-1.amazonaws.com",
    "s3.dualstack.us-east-2.amazonaws.com",
    "s3.dualstack.us-west-1.amazonaws.com",
    "s3.dualstack.us-west-2.amazonaws.com",
    "s3.eu-central-1.amazonaws.com",
    "s3.eu-north-1.amazonaws.com",
    "s3.eu-south-1.amazonaws.com",
    "s3.eu-west-1.amazonaws.com",
    "s3.eu-west-2.amazonaws.com",
    "s3.eu-west-3.amazonaws.com",
    "s3.sa-east-1.amazonaws.com",
    "s3.us-east-1.amazonaws.com",
    "s3.us-east-2.amazonaws.com",
    "s3.us-west-1.amazonaws.com",
    "s3.us-west-2.amazonaws.com",
    "sfo2.digitaloceanspaces.com",
    "sgp1.digitaloceanspaces.com",
    "sites.google.com",
    "storage.googleapis.com",
    "weebly.com",
    "xmr-eu.dwarfpool.com",
    "xmr-eu.nanopool.org",
    "xmr-eu1.nanopool.org",
    "xmr-eu2.nanopool.org",
    "xmr.crypto-pool.fr",
    "xmr.pool.minergate.com",
    "xmrpool.eu"
  ],
  "additions": [
    "6xdjulutbykigq5ljispjii7mrxyjv70.aligfwaf.com",
    "best.prizedea2040.info",
    "d1nv3q2tn5hb3k.cloudfront.net",
    "ddvql06zg3s2o.cloudfront.net",
    "ef29a.com",
    "indoctrinationtheory.com",
    "psncore.com",
    "wealthfont.com",
    "www.enjoylhappy.xyz",
    "www1.getsecurify.com",
    "wyqodo.ecok4.ru",
    "yetushiping.com"
  ]
}
