Skip to content
/ NRD Public

A daily updated list of newly registered domains from the past 14 and 30 days for blocking, monitoring and analysis.

License

Notifications You must be signed in to change notification settings

xRuffKez/NRD

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 

Repository files navigation

Hitsshields.io Stars

πŸ›‘οΈ NRD Lists - Block Newly Registered Domains

Effortlessly block newly registered domains (NRDs) that are often used for malicious purposes, phishing, and tracking. The NRD lists are updated frequently and are compatible with a variety of DNS filtering and ad-blocking tools.

ℹ️ Informations

Type Information
NRD 14/30 Complete lists contain all Domains! (Also DGA and Phish)
DGA 14/30 Lists of newly algorithm registered Domains from Malware families only!
Phish 14/30 Lists of Domain which look like brand imitating domains! (High FP rate!)

All Lists are causing high system memory usage! Please be adviced that some lists are splitted in parts because of their size!

Sources about the danger of NRDs:
What are malicious NRDs? - Paloaltonetworks
NRDs; To block or not to block- Forbes
The danger of DGAs - FS.com


πŸ“œ Available Lists

List Name Description
14-Day NRD Blocks domains registered in the past 14 days.
30-Day NRD Blocks domains registered in the past 30 days.
14-day DGA NRD Domain Generation Algorithm Generated Domains from Malware Families from past 14 Days
30-day DGA NRD Domain Generation Algorithm Generated Domains from Malware Families from past 30 Days
14-Day Phishing NRD Targets phishing domains from the past 14 days. (High FP rate!)
30-Day Phishing NRD Targets phishing domains from the past 30 days. (High FP rate!)
14-Day NRD Mini Same as regular 14 Day NRD but under Top 1 Million of ranked queried Domains from Tranco as source.
30-Day NRD Mini Same as regular 30 Day NRD but under Top 1 Million of ranked queried Domains from Tranco as source.

πŸ”§ Features

Feature Details
πŸ›‘ Block NRDs Stops access to newly registered domains before they can be weaponized for phishing or malware.
πŸ”’ Privacy Protection Blocks newly created domains often used for tracking and data collection.
🚫 Phishing Protection Focused phishing lists block high-risk domains specifically flagged for fraud.
⚑ Multi-Format Support Lists are available in Domain-only, Adblock, Wildcard, and Unbound formats for seamless compatibility.

πŸ“‚ Supported Formats

Format Purpose Compatible Tools
Domain-only Standard domain list for DNS filtering tools and analysis. DNSCloak, DNSCrypt, PersonalDNSfilter, InviZible Pro
Adblock Adblock Syntax for use with supported tools. Pi-hole, AdGuard Home, TechnitiumDNS, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave, AdNauseam, eBlocker
Wildcard Flexible DNS blocking with wildcard patterns. Blocky (v0.23+), Nebulo, NetDuma, OPNsense, YogaDNS
Unbound Importing for unbound.conf Unbound

πŸ› οΈ List Update Schedule

  • Lists are updated at least once every 24h at 5:10 UTC
  • Files are timestamped to reflect the latest update cycle.

🚨 Important Notes

  • False Positives:
    Legitimate domains may sometimes be blocked. Review the lists and whitelist any domains essential to you.
  • Phishing Lists:
    Specifically target domains flagged for phishing activities. (High false positive rate expected!)
  • File size:
    The Lists are huge!
    Expect your tools or browser to crash without enough system memory!

πŸ“– License

This project is licensed under the MIT License. See the LICENSE file for more details.


πŸ”— Quick Links


🀝 Credits


Star History

Star History Chart