[IntelMQ-users] Malware Domain List feed (was: Re: Error in parser module?)

Sebastian Wagner wagner at cert.at
Mon Mar 1 17:07:29 CET 2021


Dear Chris,

On 3/1/21 6:33 AM, Chris Horsley wrote:
>
>>> It looks like there have been breaking changes at the malware domain
>>> list feed. The URL http://www.malwaredomainlist.com/updatescsv.php
>>> returns an empty text, therefore parsing fails.
>>>
>>> The website doesn't show any current information. Maybe the feed has
>>> been discontinued?
>>>
>> Does anyone know if http://www.malwaredomainlist.com/ is still
>> active? I haven't yet discovered any discontinuation notice on the
>> webpage and the forum. If the feed stopped, we can remove the feed
>> and parser completely, otherwise we should fix the parser to handle that
>>
> I don't know precisely when it might have stopped working, but we
> noticed no new data arriving in late 2019 and the Wayback Machine
> suggests it stopped updating well before that.
>
Thank you for the detailed information.

We can then safely remove the parser and update the (feed) documentation
accordingly.

kind regards
Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210301/f1effe0a/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210301/f1effe0a/attachment.sig>


More information about the IntelMQ-users mailing list