Feed

Drivebys, fast flux, botnet, moneymule, etc…

Posted on August 23rd, 2011 in fastflux,MoneyMule,New Domains,Phishing,Spyeye,Trojans,zeus by dglosser

A large update a few days ago which I forgot to add… Over 300 zeus, moneymule, botnet  domains…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

zeus, rogues, spyeye, artro, fake job domains…

Posted on August 14th, 2011 in malvertising,MoneyMule,New Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

251 domains associated with fake job offers, zeus, fake av, etc. Sources include amada.abuse.ch, blog.dynamoo.com, safebrowsing.google.com, tristatelogic.com  (Every source is  listed in the domains.txt file).

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

211 New Domains (dns trojan, gbot, hiloti, zeus…)

Posted on August 8th, 2011 in malspam,malvertising,New Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

Domains associated with dns.trojan, gbot, hiloti, zeus, rogues, and other badness. Sources include amada.abuse.ch, stopmalvertising.com, tristatelogic.com, www.spamhaus.org, zeustracker.abuse.ch (Every source is  listed in the domains.txt file).

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Starting August 1st, files are ONLY  available via the download mirrors. Main mirror is : http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


179 New Palevo, Zeus, Rogue Security, iframe Domains

Posted on July 24th, 2011 in iframes,New Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

179 domains containing malicious javascript, malicious iframes, exploits, zeus, palevo, fake security…  Sources include amada.abuse.ch,  doc.emergingthreats.net, malc0de.com, and others (Every source is  listed in the domains.txt file).

Reminder: 
Starting on August 1st, the zone and text files will ONLY be available from a mirror and will no longer be available on the main site!!


Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Starting August 1st, files are ONLY  available via the download mirrors. Main mirror is : http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Botnet Domains, Black Hole Exploit-Kit Domains

Posted on June 14th, 2011 in exploit,iframes,New Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

246 Domains associated with Zeus, iframes, bots, black-hole exploit and other maliciousness. Sources include safebrowsing.google.com, securehomenetworks.blogspot.com, sucuri.net. (Every source is  listed in the domains.txt file):

ajansrena .ce .ms width=”130″ bestxmobiez13 .cz .cc
anayaghma .cz .cc checker-only-safe .co .cc
bestbanners1 .com flashsecuritycenter .in
bigryans .ce .ms freeportindustries .ca
boneraffyaho .cz .cc makemoneywith-followers .com
borrowme .bij .pl managev2 .dynamicdashboard .com
bravepath3 .com media-downloadcenter .com
buyordie .osa .pl media .mp3downloadhq .com
cmakdohaio93 .in medianewdownload .com
e-faw .cz .cc member .mp3downloadhq .com
fermadeals .ce .ms members-area-ab .com
filneso .com members-area-ac .com
finelimeol .com members-area-as .com
firmasteu .com members-area-at .com
firmculips .com members-area-av .com
fishrasil .com members-area-ax .com
fixfiper .com members-area-bl .com
fizzyoime .com members-area-bu .com
flaskoof .com members-area-ca .com
flasowel .com members-area-cd .com
flus8ush .com members-area-ct .com
forozperu .com members-area-dc .com
fowtorun .com members-area-di .com
foxnegory .com members-area-do .com
framebro .com members-area-dr .com
fuvolsia .com members-area-dt .com
fuzoleup .com members-area-dv .com
gabingtag .com members-area-ec .com
gavutalk .com members-area-ef .com
geispovs .com members-area-eg .com
geocanow .com members-area-eoj .com
gifmaoers .com members-area-fd .com
giftrabcu .com members-area-fr .com
givigbacc .com members-area-fw .com
glormoafe .com members-area-gf .com
goamporee .com members-area-gg .com
goatexols .com members-area-gl .com
gocratuk .com members-area-gm .com
godeloer .com members-area-gs .com
goeinrike .com members-area-hw .com
gokocnie .com members-area-hy .com
goldeanoc .com members-area-ip .com
golenomu .com members-area-kw .com
gompogasu .com members-area-mm .com
goodatbany .com members-area-movies .com
greleklon .com members-area-mp .com
greloinna .com members-area-ms .com
groutolly .com members-area-music .com
guilarkear .com members-area-nc .com
halatylobe .com members-area-oj .com
hatfermily .com members-area-online .ru
havecone .com members-area-pd .com
heloacdores .com members-area-pe .com
helonorms .com members-area-pf .com
helvhan .com members-area-pl .com
hermanotaw .com members-area-po .com
heshareto .com members-area-re .com
hickocwins .com members-area-rg .com
hjyu .50megs .com members-area-rp .com
indometastan .in members-area-sa .com
ismailcetisli .com members-area-sc .com
jabberva .cn members-area-seo .com
jsbanners3 .com members-area-sl .com
keywordelites .info members-area-sp .com
kiraporntube .com members-area-ss .com
lavanda .345 .pl members-area-st .com
livetvreview .com members-area-ta .com
liveufc126 .com members-area-tv .com
ll-ccc .cz .cc members-area-tw .com
mcanavib .cn members-area-vi .com
medicare-forms .org members-area-vp .com
membersareaabt .com members-area-ws .com
membersareaant .com members-area-yi .com
membersareaanx .com members-site-online .com
membersareaasp .com members-stream-music .com
membersareaavr .com members-tv .freedownloadzone .com
membersareabkd .com members .freedownloadzone .com
membersareabur .com members2 .freedownloadzone .com
membersareacdt .com membersarea-allinone .com
membersareadie .com membersarea-bookdownloads .com
membersareaear .com membersarea-epa .com
membersareaeba .com membersarea-pennyauctions .com
membersareafed .com membersarea-xpa .com
membersareafit .com membersareaantivirus .com
membersareafla .com membersarealogin .com
membersareagam .com membersareamovie .com
membersareagms .com membersareamusic .com
membersareahwr .com membersareasof .com
membersareaipd .com membersareaspo .com
membersareamed .com membersareasst .com
membersareamob .com membersareatvt .com
membersareamov .com membersareatwi .com
membersareamus .com membersareavir .com
membersareaoof .com membersareawdo .com
membersareapdo .com membersareazpl .com
membersareapet .com memberssitelogin .com
membersareappl .com memberszh .freedownloadzone .ph
membersareapss .com messenger-download-2010 .com
membersareapsx .com messenger-downloads .com
membersareask .com messenger-free-download .com
membersareasky .com music-tunesdownload .com
messenger-new .com musicdownload-site .com
midgiluo .com musicdownloadreview .info
modiesto .com musicmembersarea .com
musique-2010 .com my-mediacenter .com
musique-2011 .com mydownloadings .com
mvamelov .cn net-gamedownloading .com
my-stream-tv .com net-moviedownloads .net
my-streampass .com netmoviedownloads .com
new-burner .com netmovies-download .com
new-install .com new-2010-download .com
new-pdf-2011 .com new-2010-pdf-download .com
new-pdf9 .com new-2011-online-version .com
new-recorder .com new-antivirus-version .com
new-tv-to-pc .com new-earth-locations .com
new-voice-ip .com new-gamingexperience .com
news-cmps .cz .cc new-hd-movies-online .com
noyeenf .cz .cc new-instant-download .com
nw-cpm .cz .cc new-internettelevision .com
peoria33884 .cz .cc new-music-online .com
puqwjax .cz .cc new-online-version .com
ringostart .osa .pl new-pdf-online-download .com
seaarch .info new-pdf-reader .com
senzsetive .cz .cc new-tv-online-access .com
shalisally .ce .ms new-tv-online-access .net
stats-co .cz .cc new-version-online .com
stillalives .ce .ms new-voip-2010-download .com
ticetegas .com new-voip-2011-download .com
todgekaw .com new-voip-access .com
versepurze .com new-voip-instant-access .com
warwork .info new-voip-latest-download .com
wdjpq .ne new-voip-online-access .com
we-faw .cz .cc new-web-download .com
wertlist .com newantivirusdownload .com
winupdatecentr .in stceltensarg .ce .ms
wrewa .ifrance .com varealestateblog .com

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

More Rogue Security, Zeus, Spyeye, RBN Domains

Posted on June 11th, 2011 in exploit,MoneyMule,New Domains,RBN,rogue antivirus,Spyeye,Trojans,zeus by dglosser

210 SpyEye, RBN,  Zeus, TDSS, bot, exploit domains. Original sources include doc.emergingthreats.net, www.malwaredomainlist.com, www.threatexpert.com (Every source is  listed in the domains.txt file):

0c7k29 .co .cc 8c1b65893ccba911b4d0aa593a8a926f .vplaylink .info
active-scan .com al1-xscript0s .com
askredpoleq .com alfacleanwin .com
b4lry1 .co .cc alghazitractors .com
bestaudia7 .com assbrotherhood .ru
bmetalvs .com bharathiyagurukulam .com
bnavs .com boards .soapcentral .com
bnavsgroup .com buqajoqunely .com
bnavsonline .com cigivasepuxy .com
bnavsxp .com cizubejiwoma .com
bo8l1a .co .cc cleanscanpro .com
ccjava-l0ad .com coldhardcash4us .com
cibabewytyl .com complete-art-group-ltd .com
ciquqamod .com complete-art-uk .net
cknovt .com condor-llc-uk .net
cleartraf .ru condorllc-uk .com
clnovt .com crackrapidshare .net
crackshare .net crackserialkeys .net
cwnovt .com damskezimnibundy .cz
de-kadegroup .cc defender-sdvup .in
defender-tmp .in fapyrypumumuva .com
depotex .com fitevejetety .com
derlsplay .com fosimoxexora .com
dirnaster .com fuhocogupyneko .com
diverthigh .com gexopetoqoco .com
docrealtor .com ghavspacquiao .com
docweds .com google-analitycs .cz .cc
evelismag .info hermes .divinusdeus .net
ewa .kz huzatifizama .com
fabviolu .com hyviwysoqizege .com
fajomowiqy .com ideaidiosyncratic .info
famopaips .com isoftwaretvdownloads .com
fephgobd .com isoftwaretvstations .com
ffickibo .com itunesdownloadstore .com
figumsin .com jexelabexomeco .com
filmome .com jukebox-download-new .com
fugalike .com jukebox-new-download .com
fullkeygen .net juxukupyzemi .com
fuqikabyko .com jynogobefukor .com
gestaded .com kiqevinarelo .com
ghavs .com lejicolyxudy .com
ghavsgroup .com lugecunecaxez .com
ghavsinc .com moxopurarite .com
ghavsonline .com mupesatupukyqi .com
ghavsxp .com net-jaghori .webphoto .ir
h4g5kjhbk3h .com newflash1news .com
howtotws .cz .cc newflash2news .com
iproshare .vv .cc newflash3news .com
itraf .in newflash4news .com
jagbibiv .cn newflash5news .com
joyawpan .com newflash6news .com
juqesumycuz .com newflash7news .com
karbrrbrr .co .cc newflash8news .com
khumemit .cn newflash9news .com
krasava .cz .cc newplayer-downloads .com
lakersavsxp .com newsatellite-tv-forpc .com
lakersnavs .com notimexonline .com
lecuvubaja .com official-2010-version .com
mao .kz official-antivirus .com
marquee8 .co .cc official-online-download .com
mazafaka .w2c .ru official-pdf-2010 .com
mijokoquvon .com official-pdf-download .com
musclescan .com official-pdf-pro .com
mybnavs .com official-pdf2010 .com
myghavs .com official-pdfdownload .com
newbnavs .com official-version-2011 .com
newghavs .com officialbirthcertificates .org
newpdf9 .com officialbirthforms .org
noo .kz officialgreencard .org
nurulicovy .com officialimmigration .org
ohbl .in officialmarriagerecords .org
opera24 .ru officialpdf-2010 .com
overtn .com pacquiaoavs .com
patchcrack .net philippine-embassy .ir
pavahikexu .com piwetyzififa .com
picvance .com pobazepukatyc .com
pyduhomyc .com qibahovybicu .com
q27vqa .co .cc quakearena32 .ru
q714 .co .cc repavukoqipez .com
quickbroom .com rodmi4e .dlinkddns .com
qupasebyve .com ropeqeginora .com
realtraf .ru rs-323-service .ru
s106 .cz .cc ru .coolnuff .com
sisawylum .com rukizypufygejy .com
slmaat .com ryqytobogociw .com
solaraterm .com shadowoperations .co .cc
synduk .ru skyline-antique .com
tarakan2011 .ru skyline-ltd .net
thebnavs .com socawycerumyxi .com
theghavs .com spider-se0rch .com
ultimawin .com squadroshield .co .cc
vanhold .com tedowyhubal .com
vgsinfo .com tesipohycuco .com
vinuko .de thesurfrack .com
w2c .ru topnglchecker .co .be
wap-files .mobi united-trans .org
warez4me .ru vudehebaviwod .com
warez72 .ru vuvodiguqewuxe .com
warez75 .ru wacumohuqos .com
webfrogs .ru wascosafaries .com
woxoqehed .com wepomagidysaky .com
yamarsian .in xedycekycimohu .com
zaqewoqake .com ya-toptal-tvoyu-dushu .com
zdravnadzor .ru zagohitapuzog .com
zlen .ru zearch-lntr0duct10n .com

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


2011 May 16 Update – 279 Domains to Blacklist

Posted on May 16th, 2011 in New Domains,rogue antivirus,Spyeye,Trojans by dglosser

279 domains added from safebrowsing.google.com, amada.abuse.ch, tristatelogic.com and other sources (Every source is  listed in the domains.txt file):

cnxc .com ytwxizuw .cz .cc
hz88 .com yurzdtas .gv .vg
zsgr .com yxnmpnxx .cw .cm
zsjt .com 131fafrfr .cx .cc
adsfff .tk antivscanct .com
iduba .com epad-reader .com
yybtv .com popavswinxp .com
diyasmw .cn programmall .com
falokmp .cn thobandis .cx .cc
infobj .com xn--hvs035e .com
lady11 .com xn--omsq06a .com
zm2008 .com adobe-acrobat .us
zsbaby .com adriejurus .cz .cc
zsbook .com cordawield .cx .cc
dhoqoyal .cn fixerror-404 .com
fhijafif .cn savescansoft .com
lhamedep .cn scanerafrago .com
shrm .com .au avsscanattack .com
777inter .net carolinsoll .cz .cc
diorchid .com ehagcftygceyy .com
oxyboost .net limewiremusic .org
popavwin .com open-office-3 .com
avsnowwin .com saveornotsave .com
digicig .co .za saveornotsave .net
jioua82 .cx .cc soundavswinxp .com
lc-player .com xn--brv05ylox .com
lopolop .cz .cc eweyuyitjbvsdf .com
tobmarket .com five-star-flix .com
zer0day .co .cc frostwire-2011 .com
ahffjvhe .cz .cc live-online-now .tv
aluypmnj .cz .cc nero-d0wnloads .com
aompzqql .cz .cc quantummechanic .cc
aqzkmfjw .gv .vg saveornotsave1 .com
bdlyhmir .cw .cm saveornotsave1 .net
btfjackz .gv .vg skype-d0wnload .com
cdkbxfdo .cz .cc thepopavswinxp .com
cgntkhqw .cz .cc xn--nqv968a7ur .com
cidlsfqa .gv .vg xn--rssu71d4ti .com
cjvcnnlp .gv .vg xn--xfr829bcne .com
cldqkzwe .ce .ms avsnowwinonline .com
coreruln .ce .ms enscanantivirys .com
dblidubo .cz .cc frostwire-music .net
dfvygcgj .cz .cc inningsvsnowwin .com
dhkmpdsu .co .cc itunes-d0wnload .com
djmkkdjy .cw .cm ousatcoyfu0t3 .co .cc
dkseoaxx .cz .cc pdf-10-download .com
dzpseihn .cw .cm popavswinonline .com
epad-media .com save-suiteguard .com
eqzdgdfr .cw .cm antisixrysscanxp .com
evcolwcc .gv .vg antivirusliberal .com
fdulbvmc .gv .vg avsnowtournament .com
feqtexgu .cw .cm easy-sellerguide .com
fgmoyywd .cz .cc easyfrenchlesson .com
frptsdey .cw .cm farmville-expert .com
fsmdigtp .cw .cm fast-tvdownloads .com
ftjnfqfj .cw .cm fasttv-downloads .com
gjjbbrzs .cw .cm find-niche-guide .com
gqjpkngj .cz .cc live-soccer-2010 .com
grlvgpyl .cz .cc livegolf-channel .com
grlwlgab .cw .cm quicktime-player .net
gsfmetre .gv .vg save-power-guard .net
hbthvvfr .cz .cc saveonly-checker .net
hdmibzur .cz .cc saveonly-scanner .com
hskztkis .cw .cm tournamentavswin .com
iisoshvy .cz .cc antivirysprotests .com
ilhikyou .gv .vg avsexamineprotect .com
jbenxfhd .cz .cc elitetv-downloads .com
jljipxmu .gv .vg limewire-2011-now .com
kcxvdpha .cz .cc limewire-software .com
kgpxjchg .cw .cm limewiremusic2011 .net
kjcbowkc .cz .cc limewiremusic2011 .org
kjimsvjp .cz .cc live-rugbychannel .com
klqkluay .cz .cc myantivirysscanxp .com
kqdlcacl .ce .ms myxpscanantivirys .com
kvnfkpgu .cz .cc popavswinxponline .com
lkgsmiib .cw .cm savesecurityguard .com
lnfqfcha .cw .cm frostwire-s0ftware .com
lraroocn .gv .vg irfanview-download .com
mcpunucv .cw .cm lc-player-download .com
miviytgn .cw .cm lime-wire-download .com
mjujqmvn .cw .cm live-boxingchannel .com
mlfwvzcv .gv .vg live-hockeychannel .com
mqvljeyw .cz .cc live-soccerchannel .com
mszupthq .cz .cc livecyclingchannel .com
mxfdxjae .cw .cm save-security-foru .net
njhokxdv .cw .cm theantivirysscanxp .com
njpfsdey .co .cc antivirysscanonline .com
nkmhthjn .cw .cm download-access-now .com
nyjianming .com fastmovie-downloads .com
ogqxlezo .cz .cc latest-2010-version .com
ophlffuj .cz .cc latest-new-download .com
oppuvjyz .cz .cc live-boxing-channel .com
osrlzxjz .cz .cc live-cricketchannel .com
oynzdvdx .cz .cc live-online-football .tv
pgkltehq .cz .cc live-sports-forpctv .com
pifavpom .cz .cc live-support-ticket .com
pjdipnhp .cz .cc mp3-music-d0wnloads .com
plrcdkeh .cw .cm openoffice-d0wnload .com
plsmvtyi .cz .cc openoffice-s0ftware .com
plsoapes .gv .vg popavswintournament .com
popavwinxp .com save-suite-sentinel .com
poweqtjd .gv .vg scan-protectionbest .com
ppqnvwat .cw .cm senatescanantivirys .com
ptfbickb .cz .cc xn--kbr59t53njlfwvj .com
puonjlmn .gv .vg antivirusreleasescan .com
qlvzuhns .cz .cc elitemovie-downloads .com
qwxrodaf .cz .cc limwire-p2p-download .com
qxskbcoy .gv .vg live-contact-support .com
rbhpqdpf .gv .vg live-footballchannel .com
rgvwexsu .cw .cm live-product-support .com
rmvjpdkd .cz .cc livebaseball-channel .com
rpynhmpd .gv .vg livefootball-channel .com
rsaqbycq .cw .cm save-securitydefense .net
rwnymvnp .cw .cm antivirysscanxponline .com
rygeksvb .cw .cm download-2010-version .com
saveonly4u .com exploit-pennyauctions .com
slfridow .cz .cc latest-online-version .com
tbylbbtn .cz .cc latest-skype-download .com
tirctzkr .cw .cm latestmobiledownloads .com
tjvoiuic .cz .cc limewire-d0wnload-now .com
tpnodvou .cz .cc live-lacrosse-channel .com
trtbfbig .cz .cc live-wrestlingchannel .com
ttsayxum .cz .cc malwarebytes-software .com
ufhzpbjb .cz .cc easy-twitter-followers .com
uydaqjjm .cw .cm fightingchannel-online .com
uywgxabe .cz .cc itunes-player-download .com
voxddskx .cz .cc limewire-2011-download .com
vrslhvsf .cz .cc live-basketballchannel .com
wcwrwpea .cz .cc malwarebytes-d0wnloads .com
wojbupce .cw .cm antivirusfreescanonline .com
xdptqtip .cz .cc federalenergyincentives .com
xhemeehj .co .cc latest-new-pdf-download .com
xmmabtjn .cw .cm live-watersportschannel .com
xn--nqvp8a .com antivirusfreescancentral .com
xnjmxwlz .cw .cm federalenergy-incentives .com
xrwesxhx .cz .cc fastscannerdefencecapabil .com
ydcmblin .gv .vg live-football-2010-online .com
yfcbhkrl .cw .cm live-cricket-online-access .com
ymijviyt .cz .cc ip-173-201-152-5 .ip .secureserver .net
yrbpaubd .cz .cc

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Drive-by exploits, moneymule, zeus domains

Posted on March 22nd, 2011 in exploit,MoneyMule,New Domains,rogue antivirus,Spyeye,zeus by dglosser

Zeus drive-by domains, drive-by exploits, moneymule, rogue security domains. Sources include blog.urlvoid.com, google.safebrowsing.com, www.spamhaus.org.

12sa .cz .cc agamakus .vv .cc
2d7d .co .cc allmetalforums .com
3dk1 .co .cc artby-gorup .net
71pp .co .cc artby-group .biz
76hx .co .cc babomaz52 .co .cc
945e .co .cc callisto-ltdco .net
9rk1 .co .cc cerucoz53 .co .cc
aljalea .net conscientiousnessaga .co .cc
bhsss .co .cc coxepep5 .co .cc
bhttt .co .cc dfonwiuf2389f2938f .ru
bhvvv .co .cc diviter77 .co .cc
bhyyy .co .cc diwevaj15 .co .cc
bigbreak .ru fiquyiv71 .co .cc
bl7v .co .cc forofum78 .co .cc
blbw .co .cc fubuhud57 .co .cc
bldw .co .cc gdsjt4jgrftj4 .co .cc
cu9v .co .cc genoyej3 .co .cc
daebang .or .kr getsomepornhere .net
dp0t .co .cc gotuqid87 .co .cc
dp2t .co .cc groupinc-upland .biz
dp3t .co .cc gyznktmm .co .cc
dp4t .co .cc haqopor77 .co .cc
e-ads-13 .info hexilac10 .co .cc
ei1o .co .cc hfgjtyktyee2578 .co .cc
f2hl .co .cc hotabet14 .co .cc
f9tq .cz .cc internet-movie-stream .net
fhwq .co .cc interpower1 .cz .cc
gib-uk .biz ivirtualagents .com
go12 .cz .cc javaobj .co .cc
gtha .co .cc jeheyoz84 .co .cc
har-log .com jokosac59 .co .cc
ibg9 .cz .cc kresko-group .biz
ibs8 .cz .cc kresko-group .net
icu2 .co .cc kumoxov91 .co .cc
inline .de lacitay64 .co .cc
ioey .co .cc lefuvej59 .co .cc
ju7j .cz .cc lokakey64 .co .cc
jw4x .co .cc loxomul4 .co .cc
kdhy .co .cc malinowyzdroj .com .pl
m9g9 .co .cc maybest .co .cc
mtm4 .co .cc mefekos62 .co .cc
mwco .cz .cc mupehim81 .co .cc
np5u .co .cc neoline-groupco .cc
nssindia .com neoline-llc .net
ofline .co .cc newavig97 .co .cc
owuu .cz .cc nicamuf95 .co .cc
p6ox .co .cc panasonic-tv .com
phqv .co .cc payunic2 .co .cc
planutt .com petifuh78 .co .cc
pnxs .co .cc qeadllc-uk .com
prasys .co .cc qekiwej61 .co .cc
pwln .co .cc qoyeped27 .co .cc
qo11 .cz .cc qupagap76 .co .cc
qwxa .cz .cc richmond-art-group .cc
rjkd .co .cc sccvaxzv .co .cc
rqrx .co .cc soft-store-inc .com
sasx .cz .cc softstorecorp2011 .com
shinee .kr softstorecorp2012 .com
snwt .co .cc sologirlsdb .com
spwj .co .cc streaminternetvideos .com
svrz .co .cc targetmarket-groupllc .net
tmi .150m .com tawekiw79 .co .cc
utye .co .cc tiqunoj44 .co .cc
v934 .co .cc tivagal87 .co .cc
vdrt .co .cc tiyoxom15 .co .cc
vhet .co .cc torosenespana .com
vht0 .co .cc trinijunglejuice .com
vtwe .co .cc updateconnection .com
w1tu .co .cc usonlineguide .com
w9gg .cz .cc vefahoh97 .co .cc
wlt2 .co .cc vepepel21 .co .cc
yox4 .co .cc winupdateserver .su
z360 .net wiwuroy54 .co .cc
zexo .co .cc wuzehof7 .co .cc
ztty .co .cc yovekej67 .co .cc
zvgw .co .cc zanomos5 .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Bullet Proof Domains, SpyEye, fast flux and other malicious domains

Posted on March 8th, 2011 in bulletproof,exploit,fastflux,New Domains,Spyeye,zeus by dglosser

Bullet Proof SpyEye Domains, fast flux C&C, and other malicious domains. Sources include blog.sucuri.net, securehomenetworks.blogspot.com, www.sacour.cn & others (Every source is always listed in the domains.txt file):

8785 .in 90fd78b9078bd0g .com
8931 .in achilleine .co .cc
aa0025 .co .cc achillodynia .co .cc
ac .qvoz .info achitophel .co .cc
achilleid .co .cc achlamydeae .co .cc
achillize .co .cc achlorophyllous .co .cc
achime .co .cc achloropsia .co .cc
achinese .co .cc antivirusscannerguide .com
achingly .co .cc antivirusscannermaintenance .com
achmetha .co .cc antivirusscannermanufacturers .com
acholic .co .cc berfry43bgrbf .vv .cc
acholoe .co .cc bigtitzsarena .com
acholuria .co .cc canarvanexpertmedia .net
acholuric .co .cc canarvanpointmedia .net
admin-z1 .com cometrymywork .info
agamaris .vv .cc d34ghqarfrgad .com
andromath .vv .cc dontstop21523510 .com
avstartpc .com doselfprotection .com
bbazzas .com dxuxpusopmqpofs .net
bestboy-link .in expireddomaingains .com
besten-link .in fashion-report .ru
bg3u4g .net fastprotection-soft .net
bliaetxv .cz .cc fenom-guardianre .rr .nu
bradenso .info fullstandartofprotection .net
burifym .cz .cc g243gtdsgsdg .vv .cc
checksoftos .in g2hhfadh4ehfdh .co .cc
defendaor .in g2hsjgjgfj .co .cc
dersedrprd .com generalabbrialgroup-ltd .net
dianaath .cz .cc glkgj5j4rshdfhj .vv .cc
erofreex .info goodcy-clear .rr .nu
famontare80 .net goodku-clear .rr .nu
foprccz .vv .cc gqgqhfdjdh .co .cc
freedom-av .com gs34grsgdg .vv .cc
freepornii .com gsdg3gsdgsdg .vv .cc
gb3hnh3nf .co .cc gsg3gsdgsxgsdg .vv .cc
ghomath .cz .cc gwsg3gsgdsgd .vv .cc
gidvbmvm .co .cc haitunwan .txmh .net
gsdg2g32 .co .cc hgerwhu45 .co .cc
ironsum .ru hrh45jftjfj .co .cc
keleghma .vv .cc indigomantisop .com
kestiny .com jfgdhdfhsdfh .vv .cc
kudwda .ru jfgjfr5jdfj .vv .cc
l2-x .com jghrt9frgtr9 .com
lopaset .co .cc just-perfectprotection .in
mildtune .ru manalmeena .cz .cc
miltonmoon .com masiniunelte .eu
miraswyn .cz .cc metalkiolpe .com
mmspicture .ru micirugiaencolombia .com
mvrxihvr .co .cc mkgk5jswhgfnxg .vv .cc
newdivase .info nalmethris .vv .cc
nkeldx .info pds .adncommerce .com
nkeldy .info profi-softusin .cz .cc
nkeldz .info proring-safe .in
nuarius .cz .cc protectionforyousi .rr .nu
oofhx .info redalpacadatabaseexperts .net
oofhz .info redalpacadirectdatabase .net
poooilha .info redalpacadynamicdatabase .net
poooilhb .info redalpacaexpertdatabase .net
poooilhc .info safenetwork-foryou .com
protectav .com saturnosistema .com .br
securedify .in savedeve-soft .rr .nu
siranaya .vv .cc saveonly-sentinel .com
startpcav .com savesecurity-foryou .com
tdsdivase .info savesecurityforyou .com
tdspoint .com scan-direction .net
theshop .su scan-projectsi .cz .cc
tvwnzim .co .cc servicios-fisicos2 .info
verygoodav .net sikiispornosex .net
vistamenu .com smart-scanforu .uni .cc
vvdnftmz .co .cc srryyspqjxyvq .biz
vvtvnit .co .cc startavclub .com
wheelcars .ru testonlyforfhj3355591 .com .tw
yuyu87 .com topnetworkguard .com
zpidesa .info trafficconverter .net
zpidesb .info triptowercustomhosting .net
zpidesc .info verifiedconnect .in
zpidesd .info yrganosserx122108 .net
zpidese .info

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

184 New Malicious, Harmful Domains

Posted on February 18th, 2011 in New Domains,Removed Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

Delistings: mirrorservice.org, goo.gl, alice.it

Additions: 184 domains associated with zeus, trojans, spyeye, rogue antimalware, etc. Sources include blog.dynamoo.com, labs.snort.org, securehomenetworks.blogspot.com, safebrowsing.google.com (Every source is always listed in the domains.txt file):

18dd .net 98ghwe5p98gh .net
21civ .com agasi-story .info
52rjwg .com berrianguz .com
5ga .info cheburash .ind .in
81813 .com company777 .com
8fd30g .net dangerboom .com
95622 .com dangerboom .net
96pk .com dangerthree .com
ag008 .com differentdata-one .com
axa3 .cn drghwaweg45j4i6u3q32fg2h .com
bd-flats .ru drollkenga .com
belikoff .info drollpinguins .com
benelulz .com drollumbat .com
bgnt .net drollzebra .com
bobtube .info dualicons .co .cc
bog77 .com easyiptracker .info
da0s .info excellentcat .com
dangertwo .com external-top-domains .ru
dangertwo .net fihomuny .co .cc
dor77 .com firastbill .com
drollcats .com funnybarsshow .com
dsd333 .cn funnybearsshow .com
dsms .in funnymarmotshow .com
ejewels .ca funnypinguinshow .com
em-stat .com general-st .info
fps101 .com .ua glhkghjfhhfklffr .com
fuckzebra .com going-wide .net
funglobal .net golovanerabotaet .com
gentix77 .net goodpetrovich .com
getacc .net googletrackgeo .com
getacc2 .com gotcrysaved .in
girtac .ru gotdaesaved .in
glomports .com handbag-review-2010 .com
gol77 .com hollybible .com
googlerr .com images .stmaiget .com
groupmind .in ipcounter .info
gsa8f3 .net iu7nq6br5w .com
gtrafx .com jiuyaoyouxi .com
gwk5ghwo .net lightporntube .com
halyot .net microsoftwindowssecurity184 .com
havephun .org microsoftwindowssecurity185 .com
hotupdate .ru microsoftwindowssecurity199 .com
hscr .info microsoftwindowssecurity200 .com
imageshak .biz mizanticonif .com
irompas .com mollotojub .com
ishnkus .cz .cc molotorasolutions .com
jok7 .com mostporntube .com
lee2ip .com new-looking .net
leemka .com newprojectbrain .com
lotos2 .com online-network-solution .com
mhhsrn .com optimumconsult .net
mirotag .com paroquiasaojoaobatistavicosa .com
molotora .com patriots4ai .com
my-loads .com personal-networkholder45tt .in
my-loads2 .net protect-pc-2011 .co .cc
mysnom .net protection-pc .org
myvafpt .com rerererererere .com
newsdfg .com rogervideos .net
np-comp .com sailingaccommodations .com
npcn .or .kr secure-difitizer .net
nshmz .com sidepotsecured .com
opakisa .info statsnets .com
picheta .net storage-reportcenter678 .net
pinout .in storageistorg-basdan678 .com
popatube .info swindling .info
pornera .info system-of-scan .info
pornero .info termogaz .info
pornerot .info thebest-suite-master .rr .nu
pornikxx .info tianxiaba .net
pornoera .info tickhillroofing .com
pornoero .info tirexhost .com
pornsait .info todayonmytv .com
razumtds .ws traff-shop .net
repoiury .com truegeneralporn .com
rezip .ru tubedownloader .com
rmkstore .us turbostat .org
romanchuk .net upalumpas .com
santa77 .com updatewincenter .com
seololo .com uzimtasnikas .com
sipyjo .cn viatibworkfus .cz .cc
slowpoke .in vikanzubik .com
soxabi .info vizanie3d .com
stxstats .com voldcafuri .cz .cc
top-ups .net volgansuk .com
toplesson .in vrbrothers .com
vecite .info worddreamelpa .cz .cc
vimizont .com worldstatsgate .com
vvvvc .co .cc xp-scaner .com
xp-scan .com xppclapgirl .com
yjolase .net youxibao .info
zaparena .biz zaebalihostingi .com
zxstats .com zaebalikakdolgopizdec .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…