public service - url filtering

public service - url filtering

am 29.05.2007 11:52:40 von Shai

Hello,

Can someone recommend a web site that publishes bad reputation URLs?
I'm looking for a list of URLs that are known to distribute malware.
I'm also looking for a such a list that is publicly available.

Thanks

sr

Re: public service - url filtering

am 29.05.2007 21:22:16 von Default User

On 29 May 2007 02:52:40 -0700, shai@cs.wisc.edu wrote:

>
>Hello,
>
>Can someone recommend a web site that publishes bad reputation URLs?
>I'm looking for a list of URLs that are known to distribute malware.
>I'm also looking for a such a list that is publicly available.

The first thing that comes to my mind is to use something like the MVPS
hosts file to get a list http://www.mvps.org/winhelp2002/hosts.htm . I
don't know of any site that creates a list of bad sites, per se, other than
something like "Site Advisor" http://www.siteadvisor.com/ , which you
actually have to know the site url before they will give you a report on
it. You can also get "bad domains" from IESpyAd
http://www.spywarewarrior.com/uiuc/resource.htm#IESPYAD , but you'll need
to parse through the RegEdit scripts to find them.

Re: public service - url filtering

am 30.05.2007 02:43:00 von flamer

On May 29, 9:52 pm, s...@cs.wisc.edu wrote:
> Hello,
>
> Can someone recommend a web site that publishes bad reputation URLs?
> I'm looking for a list of URLs that are known to distribute malware.
> I'm also looking for a such a list that is publicly available.
>
> Thanks
>
> sr

most anti-spyware/adware programmes have an option to protect your pc
from threats, this usually involves dumping thousands of sites into
your hosts file. spysweeper is one and spybot is another. You might
want to leech their lists.

Flamer.

Re: public service - url filtering

am 12.06.2007 11:50:33 von Sean

We use SafeSquid, as proxy and application layer firewalling.
It has an option to query with in.dnsbl.org, to confirm that the url
that the users visit, do not belong to an unwanted domain. If a domain
is listed with dnsbl.org, access to that url is blocked.
The details are available at http://dnsbl.org/faq.php3

SafeSquid can also use the flat file categorised database, like from
urlblacklist.com, to block access to any of the 72 categories. You can
download the database once from
http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=d ownload&file=bigblacklist
You need to register to get regular updates.