DNS-BH – Malware Domain Blocklist

Bullet Proof SpyEye Domains, fast flux C&C, and other malicious domains. Sources include blog.sucuri.net, securehomenetworks.blogspot.com, www.sacour.cn & others (Every source is always listed in the domains.txt file):

8785 .in	90fd78b9078bd0g .com
8931 .in	achilleine .co .cc
aa0025 .co .cc	achillodynia .co .cc
ac .qvoz .info	achitophel .co .cc
achilleid .co .cc	achlamydeae .co .cc
achillize .co .cc	achlorophyllous .co .cc
achime .co .cc	achloropsia .co .cc
achinese .co .cc	antivirusscannerguide .com
achingly .co .cc	antivirusscannermaintenance .com
achmetha .co .cc	antivirusscannermanufacturers .com
acholic .co .cc	berfry43bgrbf .vv .cc
acholoe .co .cc	bigtitzsarena .com
acholuria .co .cc	canarvanexpertmedia .net
acholuric .co .cc	canarvanpointmedia .net
admin-z1 .com	cometrymywork .info
agamaris .vv .cc	d34ghqarfrgad .com
andromath .vv .cc	dontstop21523510 .com
avstartpc .com	doselfprotection .com
bbazzas .com	dxuxpusopmqpofs .net
bestboy-link .in	expireddomaingains .com
besten-link .in	fashion-report .ru
bg3u4g .net	fastprotection-soft .net
bliaetxv .cz .cc	fenom-guardianre .rr .nu
bradenso .info	fullstandartofprotection .net
burifym .cz .cc	g243gtdsgsdg .vv .cc
checksoftos .in	g2hhfadh4ehfdh .co .cc
defendaor .in	g2hsjgjgfj .co .cc
dersedrprd .com	generalabbrialgroup-ltd .net
dianaath .cz .cc	glkgj5j4rshdfhj .vv .cc
erofreex .info	goodcy-clear .rr .nu
famontare80 .net	goodku-clear .rr .nu
foprccz .vv .cc	gqgqhfdjdh .co .cc
freedom-av .com	gs34grsgdg .vv .cc
freepornii .com	gsdg3gsdgsdg .vv .cc
gb3hnh3nf .co .cc	gsg3gsdgsxgsdg .vv .cc
ghomath .cz .cc	gwsg3gsgdsgd .vv .cc
gidvbmvm .co .cc	haitunwan .txmh .net
gsdg2g32 .co .cc	hgerwhu45 .co .cc
ironsum .ru	hrh45jftjfj .co .cc
keleghma .vv .cc	indigomantisop .com
kestiny .com	jfgdhdfhsdfh .vv .cc
kudwda .ru	jfgjfr5jdfj .vv .cc
l2-x .com	jghrt9frgtr9 .com
lopaset .co .cc	just-perfectprotection .in
mildtune .ru	manalmeena .cz .cc
miltonmoon .com	masiniunelte .eu
miraswyn .cz .cc	metalkiolpe .com
mmspicture .ru	micirugiaencolombia .com
mvrxihvr .co .cc	mkgk5jswhgfnxg .vv .cc
newdivase .info	nalmethris .vv .cc
nkeldx .info	pds .adncommerce .com
nkeldy .info	profi-softusin .cz .cc
nkeldz .info	proring-safe .in
nuarius .cz .cc	protectionforyousi .rr .nu
oofhx .info	redalpacadatabaseexperts .net
oofhz .info	redalpacadirectdatabase .net
poooilha .info	redalpacadynamicdatabase .net
poooilhb .info	redalpacaexpertdatabase .net
poooilhc .info	safenetwork-foryou .com
protectav .com	saturnosistema .com .br
securedify .in	savedeve-soft .rr .nu
siranaya .vv .cc	saveonly-sentinel .com
startpcav .com	savesecurity-foryou .com
tdsdivase .info	savesecurityforyou .com
tdspoint .com	scan-direction .net
theshop .su	scan-projectsi .cz .cc
tvwnzim .co .cc	servicios-fisicos2 .info
verygoodav .net	sikiispornosex .net
vistamenu .com	smart-scanforu .uni .cc
vvdnftmz .co .cc	srryyspqjxyvq .biz
vvtvnit .co .cc	startavclub .com
wheelcars .ru	testonlyforfhj3355591 .com .tw
yuyu87 .com	topnetworkguard .com
zpidesa .info	trafficconverter .net
zpidesb .info	triptowercustomhosting .net
zpidesc .info	verifiedconnect .in
zpidesd .info	yrganosserx122108 .net
zpidese .info

---

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Note: as discussed in an earlier post,  entries  in the zone file containing an underscore have the line appended with “check-names ignore;};”  Please let us know asap if you encounter any issues

zeus domains, exploit domains, c&c domains,  bulletproof and otherwise  domains categorized as malicious by amada.abuse.ch, vxvault.siri-urz.net, www3.malekal.com and others (the source for each entry is always in the domains.txt file):

10babbleset .net	abodeflash-vol51 .co .cc
14centixo .net	alimonyforces .com
21blogpedia .net	allartsonline .com
22roota .net	analitycscook .com
28rifftune .net	analitycscord .com
2way2010 .info	analitycscrack .com
34050690693 .com	analitycscredit .com
399hansotar .com	analitycscrime .com
985465 .net	analitycscry .com
allnetart .com	analitycscup .com
ankravsrc .lv	animalsexporn .in
antispybase .com	antimalwaresecurity .net
antispybase .net	antispyprogtool .com
antispyeye .com	antispywarepc .com
antispyeye .net	antispywarepc .net
antispywork .net	antispywareprog .net
artph .com	antivirprime .net
atsopanol .com	antizooxxx .co .cc
autoandarts .com	artcooldesign .com
av-fox .net	artrockdisplay .com
avfortress .com	artscarparts .com
balancview .org	artscraftsstudio .com
bastocks .com	artsgallerysite .com
bauhath .com	asiaartsonline .com
bbonusworld .com	auctionhouseart .com
bcdfinder .com	barcalys-trial .com
bdemkrhbfds .com	barcalys-trial2 .com
besthomfdok .com	bestartcenter .com
bfscooby .com	bestartsnews .com
bigbendarts .com	bestbodyarts .net
bigpoolarts .com	bestcityarts .com
bigroadarts .com	bestmalearts .com
bka .im	bestmultiarts .com
bloglabel .net	bgroundplatt .com
boundtube .net	bigartsdirect .com
bourgum .com	binuser .fileave .com
braineurons .com	blackbeautyart .com
bricesearch .org	botanicalgardenart .com
burrova .com	brainboxonline .net
buyexplaine .com	brightsphere .net
carheavens .ru	casinosgoldscashs .ru
catbodyart .com	casinosgoldsgames .ru
cazino-game .com	centralasiaarts .com
ceonter .com	cheapcyberarts .com
ceryxlt .com	doctor5antivirus .com
cip-soft .com	dvdfirmwareupdates .com
crazymasya .com	dynamicnetwork .ru
cybernis .com	ede76c .reggieprotector10 .com
durnosy .com	goldspowersbetss .ru
dyr .medicnz .ru	greatsokdfite .com
fastlouprim .com	host66-flash .servehttp .com
forsett .com	hottesttubemovies .com
forthemore .com	ipchecker911 .com
froot .nl	jeybicufuic .serveftp .net
gfguhsdig .com	jipiqunimujumeja .scrapper-site .net
gnomsmotor .ru	joinmediafiles .com
grings3 .cz .cc	keygen .serdb01 .com
herrrtisof .com	microantivirus-2009 .com
hhehshe .co .cc	msnsolution .nicaze .net
imnet .us	mysamsungapps .net
inlovebot .com	net-master55 .co .cc
isoburn .in	onl-for-fils .org
jadesquadg .com	orygecpizdat .info
jetmember .net	potterspoultry .co .uk
jhasrte .in	proposta .hotmail .ru
jimkey .in	realloungecentral .com
jmlklgjxt .in	red-tube-video .net
jttjurop .in	scaner-ac1 .cz .cc
junefreeporn .in	scaner-acer .cz .cc
kirixi .in	scaner-bcdercdc .cz .cc
kiwmvqjv .in	scaner-bcderrwe .cz .cc
kjmrxjlx .in	scaner-bcderrwesf .cz .cc
kjsagtsadt .in	scaner-bcdgdffrs .cz .cc
kmqwe .in	scaner-cio .cz .cc
kurva .kilu .de	scaner-clouds .cz .cc
lejimer .co .cc	scaner-coast .cz .cc
liruna .com	scaner-demon .cz .cc
medicnz .ru	scaner-dir .cz .cc
mmmbsbt .co .cc	scaner-dro .cz .cc
mollpointer .com	scaner-ear .cz .cc
monaco-auto .com	scaner-eclips .cz .cc
moykamin .com	scaner-eee .cz .cc
mygabfly .net	scaner-end .cz .cc
myqopp .info	scaner-enter .cz .cc
outgtrf .in	scaner-idea .cz .cc
pokagih .co .cc	scaner-internet .cz .cc
	searchannoyed .org
qoppstore .info	searchchatup .org
scaner-do .cz .cc	searchcloudy .com
scaner-e .cz .cc	searchclumsy .com
scaner-ed .cz .cc	searchcolossal .com
scaner-ex .cz .cc	searchendrun .org
scaner-i .cz .cc	searchfertile .com
scaner-ip .cz .cc	searchfierce .com
sdehaacsfds .com	searchinhard .org
searchandsx .org	searchinhure .org
searchangry .org	searchinzone .org
searchbent .org	searchlouinc .org
searchcold .com	searchpieups .org
searchdirty .com	searchpotinc .org
searchdisup .org	searchreturup .org
searchdull .com	searchsiminc .org
searchdusty .com	searchtensup .org
searcheager .com	searchtiesup .org
searchequal .com	searchuserbar .org
searchinatl .org	stable-defense33 .co .cc
searchinpat .org	stable-defense40 .co .cc
searchjolly .com	supermovieinfo .com
searchporit .org	themoviecontent .com
searchsutes .org	thereisnoss .biz
searchwilup .org	tqpnqvebjkovok .net
sogston .com	trafficforalz .org
supermcun .com	truemediawork .com
supersocine .com	trustedantivirus .com
tisheedesh .com	unitedwestandmow .net
tro0l .com	updatepcprotection .com
twitloop .com	updatesdownloads .com
uilenowst .com	updatespatchinfo .com
xhaito .com	websextrasbetss .ru
zexxcom .com	yourmovieupdates .com

---

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…