use malwaredomainlist rss feed, instead of newest list