> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.pixalate.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.pixalate.com/_mcp/server.

# High Risk Domains

> High Risk Domains feed reference. The five website block lists (fraud, malware and phishing, viewability, domain age, brand safety), what each contains, file names and how to apply them.

High Risk Domains is a set of up to five website block lists. Each list targets a different kind of risk, from invalid traffic to adult content, so you can apply the ones that fit your policy. Every file is a plain list of domains.

## The five lists

| List                                          | File name                           | What it contains                                                                | Basis        |
| --------------------------------------------- | ----------------------------------- | ------------------------------------------------------------------------------- | ------------ |
| [Fraud domains](#fraud-domains)               | `FraudBlist_YYYYMMDD.csv`           | Domains that perform malicious activity, with an IVT probability of 60% or more | SIVT         |
| [Malware and phishing](#malware-and-phishing) | `PhishingMalwareBlist_YYYYMMDD.csv` | URLs serving malware or performing phishing attacks                             | SIVT         |
| [Low viewability](#low-viewability)           | `ViewabilityBlist_YYYYMMDD.csv`     | Domains with display viewability below 5%                                       | Viewability  |
| [New domains](#new-domains)                   | `DomainAgeBlist_YYYYMMDD.csv`       | Domains 6 months old or younger                                                 | Domain age   |
| [Brand safety](#brand-safety)                 | `BrandsafetyBlist_YYYYMMDD.csv`     | Known adult websites                                                            | Brand safety |

### Fraud domains

Domains that perform malicious activity: sites that only spread malware, commit advertising fraud, serve malicious ads that force malware downloads, or host adult content. Pixalate builds the list from its ad analytics data and from data its crawler collects, and includes a domain when its assessed IVT probability is 60% or higher.

### Malware and phishing

URLs that serve malware executables or perform phishing or spear-phishing attacks. Security products can use it to block, or alert on, malicious traffic. The list combines data from Pixalate's crawler with data from partners that work against the spread of malware and phishing URLs.

### Low viewability

Domains where display viewability is below 5%, based on Pixalate's universal data.

### New domains

Websites whose age Pixalate sees as 6 months or less.

### Brand safety

Known adult websites.

## File format and cadence

|                  |                                       |
| ---------------- | ------------------------------------- |
| Format           | CSV, one domain per row               |
| File names       | See [the five lists](#the-five-lists) |
| Update frequency | Daily                                 |

For access, delivery and polling, see [Delivery and integration](/data-feeds/delivery).

## Schema

Each file has a single column: the domain. Entries can be root domains or subdomains.

```csv
samplesite4.com
subdomain.samplesite5.com
samplesite24.com
```

## Apply it pre-bid

* **Choose lists by policy.** The fraud and malware lists target invalid traffic and security threats. The viewability, domain age and brand safety lists reflect inventory quality and suitability, so apply them according to your own standards.
* **Check the domain in each bid request** against the lists you apply, and drop matching requests before you bid.

## Related feeds

* [MFA data feeds](/data-feeds/mfa): made-for-advertising risk for websites, mobile apps and CTV apps.
* [IP block lists](/data-feeds/ip-block-lists): block invalid traffic by IP address.
* [High Risk Mobile Apps 2.0](/data-feeds/high-risk-mobile-apps) and [High Risk CTV Apps 2.0](/data-feeds/high-risk-ctv-apps): the app equivalents.
* [Enrichment API domain fields](/apis/enrichment-api-domain-fields): look up an individual domain's risk signals.

Questions? Email [support@pixalate.com](mailto:support@pixalate.com).