MalwareWorld: aggregated threat intelligence
MalwareWorld aggregates active public blacklists into a worldwide dataset of suspicious IPs, domains, ranges, phone numbers, mobile app IDs, file hashes, and signing certificates.
Search
Exact lookup for IPs, domains, ranges, international phone numbers, mobile app IDs, file hashes, and signing certificates. URL input is supported.
Note
MalwareWorld only aggregates data from external blacklists and cannot remove entries
directly. All data is downloaded from third-party sources. To remove an indicator,
please contact the organization maintaining the original list where it appears.
Maps
Aggregated IP locations
Domains by TLD
No domain data for this category.
IPs by country
No IP data for this category.
Blacklist stats
Most active sources and host share by category.
Top blacklists by matches
Loading…
Hosts by category
Loading…
Loading…
Source freshness Loading…
Sorted by the most recent upstream update. GitHub commit dates and HTTP metadata are preferred; otherwise MalwareWorld tracks content-hash changes between runs.
Source
Category
Last update
Last checked
Status
Matches
Freshness history will appear after the next dataset generation.
Downloads
All source blacklists
Suspicious IPs
Suspicious domains
Suspicious ranges
All suspicious phone numbers
Malicious mobile app IDs
Malicious mobile file hashes
Malicious mobile signing certificates
Mobile spyware domains
Mobile spyware IPs
Mobile spyware app IDs
Mobile spyware file hashes
Mobile spyware signing certificates
Spam & smishing phone numbers
Spam & phishing email domains
Disposable email domains
Scam & fraud domains
Command & control domains
Command & control IPs
Brute-force attacker IPs
Bad reputation domains
Bad reputation IPs
Bad reputation ranges
Malware domains
Malware IPs
Malware ranges
Known attacker domains
Known attacker IPs
Known attacker ranges
Spammer domains
Spammer IPs
Spammer ranges
Phishing domains
Phishing IPs
Phishing ranges
Cryptocurrency domains
Cryptocurrency IPs
Cryptocurrency ranges
Hide source domains
Hide source IPs
Hide source ranges
Adware domains
Adware IPs
Adware ranges
DGA domains
DGA IPs
DGA ranges
Run stats (JSON)