What Malwaredomainlist Links are Drive-Bys?

I'm feeling kind of cocky and may test my PCAV+AppGuard on locked-down setup with links from MDL, but I did this once on a VM, and most required me to run an executable, which would obviously be blocked. How can I tell if one of the links is a drive-by-download and not one you have to run?

 

By looking at the ending. If it points to a file, then it's a download. If it points to a site, it's an exploit.

 

Thank you. Part of me wants to try and the other says there's no point in risking it. What is Ransom LockEmAll? Isn't that supposed to be a really bad malware?

 

Yea Ransom malware locks up your entire system and forces you to pay for it to be unlocked (which it does not do when you pay they just take the money and run). Its pretty nasty to get I have seen it in anti malware testing videos.

 

it is good stuff man