MalwareWorld: aggregated threat intelligence
MalwareWorld aggregates active public blacklists into a worldwide dataset of suspicious IPs, domains, ranges, phone numbers, mobile app IDs, file hashes, certificate fingerprints, and known exploited CVEs.
Search
Exact lookup for IPs, domains, ranges, international phone numbers, mobile app IDs, file hashes, certificate fingerprints, and known exploited CVEs. URL input is supported.
Note
MalwareWorld only aggregates data from external blacklists and cannot remove entries
directly. All data is downloaded from third-party sources. To remove an indicator,
please contact the organization maintaining the original list where it appears.
Maps
Aggregated IP locations
Domains by TLD
No domain data for this category.
IPs by country
No IP data for this category.
Blacklist stats
Most active sources and host share by category.
Top blacklists by matches
Loading…
Hosts by category
Loading…
Loading…
Source freshness Loading…
Sorted by the most recent upstream update. GitHub commit dates and HTTP metadata are preferred; otherwise MalwareWorld tracks content-hash changes between runs.
Source
Category
Last update
Last checked
Status
Matches
Freshness history will appear after the next dataset generation.
Downloads
All source blacklists
Suspicious IPs
Suspicious domains
Suspicious ranges
All suspicious phone numbers
Malicious mobile app IDs
Malicious file hashes
Malicious certificate fingerprints
Known exploited vulnerabilities (CISA KEV)
Known exploited CVEs
Known exploited CVEs used in ransomware campaigns
Malicious TLS and code-signing certificates
Mobile spyware domains
Mobile spyware IPs
Mobile spyware app IDs
Mobile spyware file hashes
Mobile spyware signing certificates
Spam & smishing phone numbers
Spam & phishing email domains
Disposable email domains
Scam & fraud domains
Command & control domains
Command & control IPs
Command & control TLS certificates
Brute-force attacker IPs
Bad reputation domains
Bad reputation IPs
Bad reputation ranges
Malware domains
Malware IPs
Malware ranges
Ransomware domains
Known attacker domains
Known attacker IPs
Known attacker ranges
Spammer domains
Spammer IPs
Spammer ranges
Phishing domains
Phishing IPs
Phishing ranges
Cryptocurrency domains
Cryptocurrency IPs
Cryptocurrency ranges
Hide source domains
Hide source IPs
Hide source ranges
Adware domains
Adware IPs
Adware ranges
DGA domains
DGA IPs
DGA ranges
Run stats (JSON)