############################################################# ## Domain feed of known DGA domains from -2 to +3 days ## ## Feed Provided By: John Bambenek of Bambenek Consulting ## jcb@bambenekconsulting.com // http://bambenekconsulting.com ## ############################################################# The dga-feed list is a listing of all known DGA generated domains used by malware for domains 2 days prior to 3 days after the current data. This data doesn't necessarily mean these domains are malicious. In fact, most domains are unregistered, but nonsense domains tend to indicate malicious activity. This feed is provided for informational purposes only and author assumes no liability. Ideal use for this information may be for border security devices to monitor any attempts to resolve these domains or for DNS servers to blackhole these domains (or to run a local sinkhole). If you are aware of any DGA algorithms not represented here feel free to contact me using the info above.