Newly registered domains (NRDs) are commonly used by threat actors for phishing, malware, and command-and-control infrastructure due to their disposable nature, which helps evade detection.
Two variants are available:
- NRDs: Include all newly registered domains.
- Entropy NRDs/DGAs: Contain only newly registered, high-entropy domains generated by Domain Generation Algorithms (DGAs) extracted from the NRD list. These domains display significant structural randomness and are commonly used by malware to establish resilient and evasive command-and-control channels.
Warning
These lists are very large and resource-intensive. They may cause high memory usage and contain false positives, since some legitimate domains are newly registered. Use with caution and whitelist critical services as needed.
Caution
Use at your own risk. The NRD lists are provided as-is, without guarantees, support, or a process for removing false positives.
Important
The base data for these lists is provided by Stamus Labs.
Stamus Labs do not guarantee daily updates, and in some cases, data may be delayed by several days.
| Time period |
Format AdBlock |
Format Domains |
|---|---|---|
| 7 days ago to yesterday | Link | Link |
| 14 days ago to 8 days ago | Link | Link |
| 21 days ago to 15 days ago | Link | Link |
| 28 days ago to 22 days ago | Link | Link |
| 35 days ago to 29 days ago | Link | Link |
Note
To block NRDs from the last 14 days, combine the domain lists from 7 days ago and 14 days ago. For blocking NRDs from the last 21 days, combine lists from 7, 14, and 21 days ago. Etc.
Tip
In addition to the NRD list formats provided here, the NRDs are also available in other formats in external repositories:
- Wildcard (Asterisk): Cebeerre/dnsblocklists
🔠 Entropy NRDs/DGAs: Contain only newly registered, high-entropy domains generated by Domain Generation Algorithms (DGAs)
Note
These domains are already included in the full NRD list.
| Time period |
Format AdBlock |
Format Domains |
|---|---|---|
| Past 7 days | Link | Link |
| Past 14 days | Link | Link |
| Past 30 days | Link | Link |