cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
79
Views
0
Helpful
1
Replies

check domain

david625
Level 1
Level 1

Is there a way to check a domain to see if it has been identified as a site containing malware, etc.?  For example, I would like to know if the site karenware.com has been identified by OpenDNS as a compromised site.

1 Reply 1

alexahar
Cisco Employee
Cisco Employee

The solution to review a domain is to open up a support case with OpenDNS. 

To check if a domain is being blocked for malware or phishing, you can perform the following steps. We do have a tool called Investigate that allows searching through our Malware database and provides more insight; however, this is an advanced security tool that's available with it's own package. You can check if a domain is blocked for malware with the following steps.

```
nslookup examplemalwaredomain.com
Server: 208.67.222.222

Non-authoritative answer:
Name: examplemalwaredomain.com
Address: 67.215.66.149
```

```
nslookup 67.215.66.149

Non-authoritative answer:
149.66.215.67.in-addr.arpa name = hit-malware.opendns.com.
```

If the returned domain name is our Malware block page, this indicates that the domain is being blocked for Malware.