MALWARE PATROL FOR ROUTE 53
Malicious Domain Blocking for Route 53 Resolver
DNS firewalls remain one of the most effective and foundational layers in modern cybersecurity. By intercepting domain-level threats before they reach users or systems, they prevent a wide array of attacks, from phishing attempts and malware downloads to data exfiltration and command-and-control communications.
Malware Patrol’s multi-threat Malicious Domains feed is purpose-built for seamless integration with Amazon Route 53 Resolver DNS Firewall. It provides DNS-layer protection against an extensive range of active cyber threats, serving as your network’s first line of defense.
This comprehensive feed blocks access to domains linked to:
-
Malware and ransomware distribution
-
Phishing campaigns
-
Cryptojacking sites
-
Command-and-control (C2) infrastructure (including DGA)
With coverage across more than 100 malware and ransomware families, this feed delivers the continuous, high-confidence domain intelligence needed to detect and stop malicious activity before it can impact your environment.
Configuration Guide
ABOUT AMAZON ROUTE 53
“Amazon Route 53 provides highly available and scalable Domain Name System (DNS), domain name registration, and health-checking cloud services.
You can combine your Route 53 DNS with health-checking services to route traffic to healthy endpoints or to independently monitor and alarm on endpoints.
In addition, Route 53 Resolver provides a regional DNS service that performs recursive DNS lookups for names hosted in Amazon Elastic Compute Cloud (EC2), as well as public names on the internet. Lastly, the Route 53 Resolver DNS Firewall allows you to block queries made for known or suspected malicious domains, and to allow queries for trusted domains when using the Route 53 Resolver for recursive DNS resolution.”