Emanuele of bofhland has produced the following signatures, which have now been added to the distribution mirrors: bofhland_cracked_URL.ndb bofhland_malware_URL.ndb bofhland_phishing_URL.ndb These are high quality full url signatures for phishing and malware and cracked serves that could be serving anything for malware to phish to pill and regular spam. They are updated in realtime and purged in real time as well. Note: To notify false positives or for any information, please email to clam AT bofhland DOT org Thanks to Tom for the description and to Emanuele for the signatures.