Feed

Moneymule domains, malicious domains, trojans, etc.

Posted on June 6th, 2011 in MoneyMule,New Domains,Trojans,zeus,zlob by dglosser

Added 182 dirty domains from securehomenetworks.blogspot.com, vxvault.siri-urz.net, ddanchev.blogspot.com and others (Every source is  listed in the domains.txt file):

2n6h .co .cc 1glacisgroup-llc .net
3atlanta-uk .com 92cfa9e0 .b8r4 .org
5dali-style .com 983723315nwelle .cz .cc
7lrkvy .co .cc abodefllash .co .cc
aaaholic .com abodeplugin .co .cc
asdaqr15 .com adobecodec-01 .co .tv
atlantaltd-uk .cc adobecodec-02 .co .tv
avgenup .in angielskidlarodzicow .pl
benanshell .cz .cc aprotest-avi2011 .co .cc
bnhapeirud .co .cc atlanta-ltd-uk .net
bqtuhwhm .ce .ms blitznet-groupinc .cc
buzadora .cz .cc chirnsideandren .cx .cc
digibeetlesop .ru clickjacksonville .org
docmoo .ce .ms dalistyle-group .cc
domofro .cz .cc defender-beaxz .in
ecvcallise .co .cc defender-fdjez .in
esscleaner .com defender-nessc .in
ezzo .ce .ms derwoode-group .com
fastscandn-pc .tk derwoode-group .net
flash-02 .co .tv essclean-online .com
flashplugins .net freeopenscanerpo .in
fmoo .ce .ms grandao2010 .qipim .ru
frozyn .info gwgwrhtetretnt .com
gb-offers .com helpmedownload .com
geceeroe .ce .ms hkjhcgaidiiii .com
geelh .ce .ms hot-mp3download .com
gulrva .cz .cc hotmp3-download .com
gxdowzsz .ce .ms hsghyturrerefg .com
hnifuzof .cn hypnosis-guide-pro .com
homerev-sys .com idownload-istore-music .com
homerev2-sys .com idownload-istore .com
hsovolih .cn idownload-store-music .com
i-tvdish .com idownload-tunesmusic .com
infofraud .net image-editor-download .com
it-amira .net immigration-in-us .org
it-serviceltd .be imusic-download .com
itamira-de .com imusic-store-downloads .com
itserv-de .co ketchersode .ce .ms
jahn-siegen .de lasfotosmasnice .com
kade-group .com livesports-network .com
kzqacegd .cz .cc livestreamdirect .com
letbeservice .ru masterart-group .com
macwinsoft .net mobiledownloads-pro .com
markizac .com moonsgootlasynch .co .cc
mcmonnes .ce .ms movie-downloads-direct .com
medi-fix .com movie-downloadsnow .com
mendryltd .com moviedownloads-pro .com
miliardov .com mp3-downloadingnet .com
mnuyspe .co .be mp3download-net .com
mp3-depot .com mp3downloadhq .com
mp3-share .us mp3downloading-net .com
mp3helpdesk .com mp3sectionentitled .com
mscser .ru music-d0wnload-center .com
mstoolkit .com music-idownloads .com
music-folia .com music-istore-downloads .com
myfghavs .com music-moviesnetwork .com
newbiz10news .com music-new-downloads .com
newbiz1cash .com namebuypicture .cn
newbiz1news .com natspot-serve .com
newbiz2news .com newantivirusdownloads .com
newbiz3news .com newest-version-download .com
newbiz4news .com newflash10news .com
newbiz5news .com officesuite-download .com
newbiz6news .com parlen-group-usa .com
newbiz7news .com parlen-groupllc .com
newbiz8news .com parlengroupllc .net
newbiz9news .com protectantivscanfree1 .com
npeyugux .cn quad-it-group .com
palazziogt .ru quinta-groupus .com
phonezero .com .br rextechinnovation .com
quad-groupuk .cc rextechltd-us .com
quinta-llc .net schwendonger .ce .ms
quintagroup .cc searchalphabet .org
raucherhimmel .de special-art-ltd .com
rbomce .com special-art-uk .cc
rextechltd .cc targetmarketgroup-llc .cc
sadone .ce .ms taskmalbbunde .co .cc
searchant .org thebestscannerdha .l2x .eu
searchatom .org tingdjibmar .ce .ms
searchbegan .org traffic-4webmaster .com
sroxcwoa .ce .ms upperblackeddy4 .cz .cc
stillmate .co .cc vci01 .appbundler .net
subdom25 .com virusprotection24 .com
sublime-ltd .net vnsproject-de .cc
tyodi .com von90qr8ft .cz .cc
videocrazy .cx .cc vortex-llc-uk .net
wexct .info vortexllc-uk .com
woedmonn .ce .ms wayuvaga111 .vv .cc
xbx .tw web-fotogallery .be
xhyjl .cn witayeno111 .cz .cc
xmycelebs .co .cc worksappmedia .in
yahbesvyt .com youtubeonline .net

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

<TR><TD>2n6h .co .cc</TD>  <TD>1glacisgroup-llc .net</TD></TR>
<TR><TD>3atlanta-uk .com</TD>  <TD>92cfa9e0 .b8r4 .org</TD></TR>
<TR><TD>5dali-style .com</TD>  <TD>983723315nwelle .cz .cc</TD></TR>
<TR><TD>7lrkvy .co .cc</TD>  <TD>abodefllash .co .cc</TD></TR>
<TR><TD>aaaholic .com</TD>  <TD>abodeplugin .co .cc</TD></TR>
<TR><TD>asdaqr15 .com</TD>  <TD>adobecodec-01 .co .tv</TD></TR>
<TR><TD>atlantaltd-uk .cc</TD>  <TD>adobecodec-02 .co .tv</TD></TR>
<TR><TD>avgenup .in</TD>  <TD>angielskidlarodzicow .pl</TD></TR>
<TR><TD>benanshell .cz .cc</TD>  <TD>aprotest-avi2011 .co .cc</TD></TR>
<TR><TD>bnhapeirud .co .cc</TD>  <TD>atlanta-ltd-uk .net</TD></TR>
<TR><TD>bqtuhwhm .ce .ms</TD>  <TD>blitznet-groupinc .cc</TD></TR>
<TR><TD>buzadora .cz .cc</TD>  <TD>chirnsideandren .cx .cc</TD></TR>
<TR><TD>digibeetlesop .ru</TD>  <TD>clickjacksonville .org</TD></TR>
<TR><TD>docmoo .ce .ms</TD>  <TD>dalistyle-group .cc</TD></TR>
<TR><TD>domofro .cz .cc</TD>  <TD>defender-beaxz .in</TD></TR>
<TR><TD>ecvcallise .co .cc</TD>  <TD>defender-fdjez .in</TD></TR>
<TR><TD>esscleaner .com</TD>  <TD>defender-nessc .in</TD></TR>
<TR><TD>ezzo .ce .ms</TD>  <TD>derwoode-group .com</TD></TR>
<TR><TD>fastscandn-pc .tk</TD>  <TD>derwoode-group .net</TD></TR>
<TR><TD>flash-02 .co .tv</TD>  <TD>essclean-online .com</TD></TR>
<TR><TD>flashplugins .net</TD>  <TD>freeopenscanerpo .in</TD></TR>
<TR><TD>fmoo .ce .ms</TD>  <TD>grandao2010 .qipim .ru</TD></TR>
<TR><TD>frozyn .info</TD>  <TD>gwgwrhtetretnt .com</TD></TR>
<TR><TD>gb-offers .com</TD>  <TD>helpmedownload .com</TD></TR>
<TR><TD>geceeroe .ce .ms</TD>  <TD>hkjhcgaidiiii .com</TD></TR>
<TR><TD>geelh .ce .ms</TD>  <TD>hot-mp3download .com</TD></TR>
<TR><TD>gulrva .cz .cc</TD>  <TD>hotmp3-download .com</TD></TR>
<TR><TD>gxdowzsz .ce .ms</TD>  <TD>hsghyturrerefg .com</TD></TR>
<TR><TD>hnifuzof .cn</TD>  <TD>hypnosis-guide-pro .com</TD></TR>
<TR><TD>homerev-sys .com</TD>  <TD>idownload-istore-music .com</TD></TR>
<TR><TD>homerev2-sys .com</TD>  <TD>idownload-istore .com</TD></TR>
<TR><TD>hsovolih .cn</TD>  <TD>idownload-store-music .com</TD></TR>
<TR><TD>i-tvdish .com</TD>  <TD>idownload-tunesmusic .com</TD></TR>
<TR><TD>infofraud .net</TD>  <TD>image-editor-download .com</TD></TR>
<TR><TD>it-amira .net</TD>  <TD>immigration-in-us .org</TD></TR>
<TR><TD>it-serviceltd .be</TD>  <TD>imusic-download .com</TD></TR>
<TR><TD>itamira-de .com</TD>  <TD>imusic-store-downloads .com</TD></TR>
<TR><TD>itserv-de .co</TD>  <TD>ketchersode .ce .ms</TD></TR>
<TR><TD>jahn-siegen .de</TD>  <TD>lasfotosmasnice .com</TD></TR>
<TR><TD>kade-group .com</TD>  <TD>livesports-network .com</TD></TR>
<TR><TD>kzqacegd .cz .cc</TD>  <TD>livestreamdirect .com</TD></TR>
<TR><TD>letbeservice .ru</TD>  <TD>masterart-group .com</TD></TR>
<TR><TD>macwinsoft .net</TD>  <TD>mobiledownloads-pro .com</TD></TR>
<TR><TD>markizac .com</TD>  <TD>moonsgootlasynch .co .cc</TD></TR>
<TR><TD>mcmonnes .ce .ms</TD>  <TD>movie-downloads-direct .com</TD></TR>
<TR><TD>medi-fix .com</TD>  <TD>movie-downloadsnow .com</TD></TR>
<TR><TD>mendryltd .com</TD>  <TD>moviedownloads-pro .com</TD></TR>
<TR><TD>miliardov .com</TD>  <TD>mp3-downloadingnet .com</TD></TR>
<TR><TD>mnuyspe .co .be</TD>  <TD>mp3download-net .com</TD></TR>
<TR><TD>mp3-depot .com</TD>  <TD>mp3downloadhq .com</TD></TR>
<TR><TD>mp3-share .us</TD>  <TD>mp3downloading-net .com</TD></TR>
<TR><TD>mp3helpdesk .com</TD>  <TD>mp3sectionentitled .com</TD></TR>
<TR><TD>mscser .ru</TD>  <TD>music-d0wnload-center .com</TD></TR>
<TR><TD>mstoolkit .com</TD>  <TD>music-idownloads .com</TD></TR>
<TR><TD>music-folia .com</TD>  <TD>music-istore-downloads .com</TD></TR>
<TR><TD>myfghavs .com</TD>  <TD>music-moviesnetwork .com</TD></TR>
<TR><TD>newbiz10news .com</TD>  <TD>music-new-downloads .com</TD></TR>
<TR><TD>newbiz1cash .com</TD>  <TD>namebuypicture .cn</TD></TR>
<TR><TD>newbiz1news .com</TD>  <TD>natspot-serve .com</TD></TR>
<TR><TD>newbiz2news .com</TD>  <TD>newantivirusdownloads .com</TD></TR>
<TR><TD>newbiz3news .com</TD>  <TD>newest-version-download .com</TD></TR>
<TR><TD>newbiz4news .com</TD>  <TD>newflash10news .com</TD></TR>
<TR><TD>newbiz5news .com</TD>  <TD>officesuite-download .com</TD></TR>
<TR><TD>newbiz6news .com</TD>  <TD>parlen-group-usa .com</TD></TR>
<TR><TD>newbiz7news .com</TD>  <TD>parlen-groupllc .com</TD></TR>
<TR><TD>newbiz8news .com</TD>  <TD>parlengroupllc .net</TD></TR>
<TR><TD>newbiz9news .com</TD>  <TD>protectantivscanfree1 .com</TD></TR>
<TR><TD>npeyugux .cn</TD>  <TD>quad-it-group .com</TD></TR>
<TR><TD>palazziogt .ru</TD>  <TD>quinta-groupus .com</TD></TR>
<TR><TD>phonezero .com .br</TD>  <TD>rextechinnovation .com</TD></TR>
<TR><TD>quad-groupuk .cc</TD>  <TD>rextechltd-us .com</TD></TR>
<TR><TD>quinta-llc .net</TD>  <TD>schwendonger .ce .ms</TD></TR>
<TR><TD>quintagroup .cc</TD>  <TD>searchalphabet .org</TD></TR>
<TR><TD>raucherhimmel .de</TD>  <TD>special-art-ltd .com</TD></TR>
<TR><TD>rbomce .com</TD>  <TD>special-art-uk .cc</TD></TR>
<TR><TD>rextechltd .cc</TD>  <TD>targetmarketgroup-llc .cc</TD></TR>
<TR><TD>sadone .ce .ms</TD>  <TD>taskmalbbunde .co .cc</TD></TR>
<TR><TD>searchant .org</TD>  <TD>thebestscannerdha .l2x .eu</TD></TR>
<TR><TD>searchatom .org</TD>  <TD>tingdjibmar .ce .ms</TD></TR>
<TR><TD>searchbegan .org</TD>  <TD>traffic-4webmaster .com</TD></TR>
<TR><TD>sroxcwoa .ce .ms</TD>  <TD>upperblackeddy4 .cz .cc</TD></TR>
<TR><TD>stillmate .co .cc</TD>  <TD>vci01 .appbundler .net</TD></TR>
<TR><TD>subdom25 .com</TD>  <TD>virusprotection24 .com</TD></TR>
<TR><TD>sublime-ltd .net</TD>  <TD>vnsproject-de .cc</TD></TR>
<TR><TD>tyodi .com</TD>  <TD>von90qr8ft .cz .cc</TD></TR>
<TR><TD>videocrazy .cx .cc</TD>  <TD>vortex-llc-uk .net</TD></TR>
<TR><TD>wexct .info</TD>  <TD>vortexllc-uk .com</TD></TR>
<TR><TD>woedmonn .ce .ms</TD>  <TD>wayuvaga111 .vv .cc</TD></TR>
<TR><TD>xbx .tw</TD>  <TD>web-fotogallery .be</TD></TR>
<TR><TD>xhyjl .cn</TD>  <TD>witayeno111 .cz .cc</TD></TR>
<TR><TD>xmycelebs .co .cc</TD>  <TD>worksappmedia .in</TD></TR>
<TR><TD>yahbesvyt .com</TD>  <TD>youtubeonline .net</TD></TR>

Exploits, iframes, moneymules, rbn, rogue, zeus domains

Posted on May 30th, 2011 in exploit,iframes,MoneyMule,New Domains,RBN,rogue antivirus,Trojans,zeus by dglosser

A little bit for everyone… domains associated with zeus, money mules, rogue security, rbn, zeus, exploits &  trojans. Sources include www.tristatelogic.com, www.threatexpert.com, securehomenetwork.blogspot.com (Every source is  listed in the domains.txt file):

4t7uxaxrg8 .co .be 98dfgr994883798df .com
74l8w .co .cc allston-groupsec .cc
aa2535245 .com arztpraxis-schaefer .de
atca-inc .com bands-groupsvc .com
atcanetworks .net bandsgroup-inc .net
bafihamuxav .com bisyvoqyxymyqi .com
bands-inc .com centrimedicitoscani .it
bandsgroupnet .cc developgroupinc .net
bapyrejecak .com evolvingsysinc .net
barribuza .com ewloidydytgba .co .be
beazenrad .cz .cc eyesecurr327458 .net
beefcake .jino .ru fairbankhouston .cz .cc
c0re .us galleogroupnet .net
ccfjuyut .bee .pl giant-groupinc .com
cnl-groupsvc .com guidopietro .com .ar
cnl-inc .com homeofficeteam .com
cnlgroup-inc .cc imperial-groupinc .com
cnlgroupnet .net imperial-groupsvc .net
cordanrad .cz .cc imperialgroupco .com
cosainse .com infotech-groupco .net
cruelbox .info infotech-groupinc .com
dehozykato .com infotechgroup-inc .com
develop-inc .com keepclean-cvsid .cz .cc
dsnextgen .com lady-gaga-romance .com
evolving-inc .com ladygagaromance .net
execon .kz ladygagaromance .org
firimasa .net ladygagaromancefilms .com
fojexojup .com ladygagaromancetips .com
foo .com lastnightphoto .net
fs8g78f8dduf .com loading-v-045 .cz .cc
fujoresaw .com loading-v-506 .cz .cc
galleo-inc .com lolitasexmovies .com
giant-groupco .net magnet-groupinc .cc
giant-groupnet .cc mexigawarynode .com
giantgroupinc .com myfreewebspase .info
host-groupsvc .net neframeofwork .com
hostgroup-inc .com netmarket-inc .com
hostgroupinc .com netmarkettech .net
hostgroupnet .cc novaris-groupllc .tw
ict-groupco .com novaris-grouporg .cc
ict-groupsvc .net novarisgroupmain .tw
ictgroupinc .com nymemuhoseran .com
ictgroupnet .cc ofsrtndmcxcsoexq .org
inkmoduledso .com online–access .com
jacumegekij .com online–products .com
johunyniv .com online-2011-version .com
juqupybocuto .com online-antivirus-protection-reviews .com
jvc-inc .com online-downloads-2010 .com
jvcgroupnet .net online-football-channel .com
kaliberdapod .net online-new-version .com
leducivudadyj .com online-tv-access .com
lopiuy .com online-tv-access .net
marihuqavigyt .com online-tv-on-pc .com
mercy-inc .com online-tv-on-your-pc .com
mercygroupnet .net online-vital-records .com
myspeezo .ce .ms online-web-download .com
narod-photo .ru online10flash .com
nastymomvids .com online11flash .com
nicynajomypy .com perseus-groupfine .tw
nixecynuho .com perseus-groupinc .tw
o18j38 .co .cc perseusgroupllc .cc
on3news .ru protest-west2011 .co .cc
on4news .ru ricogodobekax .com
on5news .com savvi-investments .com
on5news .ru scanner-ant-iv-xp .com
on6news .com scanner-win-protection .com
on6news .ru scanner-win-stuff-protection .com
on7news .ru scannerantbiteivxp .com
on8news .com scanneranthillsivxp .com
on8news .ru scannerantivirsoft .com
on9news .ru scannerantivirsoftdrink .com
online10news .com scannerantivirsoftdrinks .com
online10news .ru scannerantivirsoftlanding .com
podojykofogu .com scannerantivirsoftrock .com
pornopet .com scannerantivirsoftspot .com
pozefybop .com scannerantlionivxp .com
pranza .com scannerprotectiondogsfree .com
qazomequguca .com scannerprotectionofficesfree .com
qozohyhobuci .com scannerprotectionwin .com
rapekids .com scannerprotectionxp .com
sanstag .com scannerwingamesprotection .com
scannerantiv .com scannerwinprotection .com
serpbe .net sexteachervids .com
tun4atta .in simplychasinasis .com
usbirthforms .org smackbitches .hostding .com
usfoodstamps .org solarisgroupinc .com
usi-groupinc .net solarisgroupnet .net
usigroup-inc .com symihyceqemexo .com
usigroupinc .com tomiya .sites .uol .com .br
usigroupnet .cc track .upsclients .org
usvaforms .org ultra-gamesdownload .com
utorant .com ultragames-download .com
utorint .com unlimited-downloadcenter .com
utorrint .com unlimited-mediaaccess .com
uzldzzzeo3 .co .be unlimitedconsole-games .com
vaforms .org unlimiteddownloadcenter .com
vallesoft .com unlimiteddownloadnetwork .com
vital-groupco .cc unlimiteddownloads-center .com
vital-groupco .tw unlimitedgame-downloads .com
vtbew .info unlimitedgames-downloads .com
weriloxoro .com unlimitedmedia-access .com
wu2d .com unlimitedmultimedia-access .com
xymasehyfi .com us-legalforms .org
z9r2 .com us-vital-records .com
z9r4 .com usmarriagerecords .info
zao1 .cz .cc vancouver2010-olympicsonline .com
zepa6hr6jk .co .be victorymarketing .info
zfdim0u06t .co .be vital-groupinc .tw
zoo4arab .net

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Apr 12 Update: Rouges, moneymules, harmful domains

Posted on April 13th, 2011 in MoneyMule,New Domains,rogue antivirus by dglosser

Domains associated with fake anvirus, moneymule and other badness added. Sources include sacour.cn, urlquery.net, amada.abuse.ch & securehomenetworks.blogspot.com (Every source is   listed in the domains.txt file):

28bxg .com bringtheguard1 .com
3425 .in bringtheguard1 .net
5356 .in bringtheguard2 .com
7skyjo .info bringtheguard2 .net
adobedload .com buy-the-guardian .com
agedn .com buy-the-guardian .net
bringtheguard .com caselfprotection .com
bringtheguard .net check-inet-guarddefense .com
cc286 .com checkinet-guarddefense .net
checksoftrs .com checkinetguard-defense .com
checksoftse .com dlrtt646bimpvzf .net
checksoftsi .com drawmade-group .com
checksoftte .com drawmade-group .net
cjws .co .cc duprotection-foryou .com
delt-group .com duselfprotection .com
delt-group .net eioxzi748qrudho .com
doprotect-pc .com faprotection-foryou .com
dorihuginn .cz .cc fast-softgprotection .net
duprotect-pc .com firstsecurityguard .com
eleelezz .com firstsuite-guard .net
eleelezz .net free-pc-protection1 .com
eleelezz1 .com free-pc-protection2 .net
eleelezz1 .net free-pc-protection3 .com
eleelezz2 .com free-pc-protection4 .net
eleelezz2 .net free-pc-protection5 .com
eleelezz3 .com free-pc-protection6 .net
eleelezz3 .net freeonlinescaner .net
eleelezz4 .com full-guardandcureon .com
eleelezz5 .com full-guardandcureon .net
eleelezz5 .net fullcheckguardian20 .com
exaguard .com fullcheckguardian21 .net
fan-kitdropin .com fullcheckguardian22 .com
fan-kitdropin .net fullcheckguardian23 .net
fankitdropin .com fullcheckguardian24 .com
fankitdropin .net fullcheckguardian25 .net
fast-scanpc .net fullcheckguardian26 .com
for1-secguard .net fullcheckguardian27 .com
freexxpote .co .cc fullcheckguardian28 .com
fuldguard .com fullcheckguardian29 .com
geprotect-pc .com fullguard-andcureon .com
govtds21 .co .cc fullguard-andcureon .net
guard-wall40 .com fullguardand-cureon .com
guard-wall41 .net fullguardandcure-on .com
guard-wall42 .com fullscananddiffence .com
guard-wall43 .net g-softproteion .com
guard-wall44 .com gaselfprotection .com
guard-wall45 .net get-full-link20 .com
highlvlguard2 .net get-full-link21 .net
highlvlguard3 .com get-full-link22 .com
highlvlguard3 .net get-full-link23 .net
netmoabjtgt .co .cc get-full-link24 .com
netmokkeqpx .co .cc get-full-soft10 .com
netnbmknlxb .co .cc get-full-soft11 .net
netncitdpbg .co .cc get-full-soft12 .com
netneagthoo .co .cc get-full-soft13 .net
netnhuvfhva .co .cc greatstafinsecurity .net
netnixoxxbe .co .cc guard-checherdefense .com
netnjhtiruu .co .cc guard-defense-checker .net
netnjiorldk .co .cc highsecurity-level10 .com
netnlebzzyv .co .cc highsecurity-level11 .net
netnmesfnwb .co .cc highsecurity-level12 .com
netnmxptdph .co .cc highsecurity-level13 .net
netnnxrkqcr .co .cc highsecurity-level14 .com
netnnznrvhr .co .cc highsecurity-level15 .net
netnrygsxwt .co .cc highsecurity-level8 .com
netnryktltf .co .cc highsecurity-level9 .net
netntuwpwme .co .cc netmovie-l9g5 .co .cc
netntzyusdd .co .cc netmovie-nerx .co .cc
netnwyistop .co .cc netmovie-q9k9 .co .cc
netnwzseome .co .cc netmovie-ruwu .co .cc
netnyutpbrt .co .cc netmovies-live-tube-1294 .co .cc
netnzmutdtu .co .cc netmovies-live-tube-331 .co .cc
netnzqhjcss .co .cc netmovies-live-tube-3670 .co .cc
netoalkdhho .co .cc netmovies-live-tube-3775 .co .cc
netocuqrqje .co .cc netmovies-live-tube-4831 .co .cc
netofnudnot .co .cc netmovies-live-tube-5063 .co .cc
netohmkubof .co .cc netwbemvxoh .co .cc
netolklmwzd .co .cc netwerwqjxu .co .cc
netomgnvtsc .co .cc netweyxtotw .co .cc
netopthnjbz .co .cc netwhawuyok .co .cc
netosowbkvn .co .cc netwkdwewye .co .cc
netouxkojlm .co .cc netwlrdlsct .co .cc
netovbkuiwk .co .cc netwoqgxhdp .co .cc
netovfamzjk .co .cc netwsmhhlkx .co .cc
netovkzebnh .co .cc netwxzhcjwn .co .cc
netowjlhtvt .co .cc netwyezcsdn .co .cc
netoxcbolzx .co .cc netwyrwcgsi .co .cc
netoyqpyhue .co .cc netxfruefzd .co .cc
netozbvdlnt .co .cc netxlbmghih .co .cc
netozzplskg .co .cc netxlnmidpi .co .cc
netpcdznjgg .co .cc netxnyfwfgw .co .cc
netpcowfnce .co .cc netxpsuzihb .co .cc
netpewmjhxk .co .cc netxrwqucmf .co .cc
neturpmqccz .co .cc netxvalqfyr .co .cc
netutihspmo .co .cc netxvoliruc .co .cc
netuwsylgfc .co .cc netxwmckfph .co .cc
netuxsulnwp .co .cc netxwtqcxss .co .cc
netvakdmfuw .co .cc netxxfxkdcs .co .cc
netvanupqmi .co .cc netxywlbbwe .co .cc
netvdtxmcqs .co .cc netyekrclxu .co .cc
netvdyhstiq .co .cc netyglcztxi .co .cc
netvebnffpv .co .cc netygvejqva .co .cc
netvhpmlaoa .co .cc netyhcmcbdq .co .cc
netvlsqfxog .co .cc netyjbafkmk .co .cc
netvskbzhnk .co .cc netylrxgkvu .co .cc
netvxryllkf .co .cc netyncdxffr .co .cc
netvycdmonz .co .cc protectwinscannerguide .com
netvytmlfyc .co .cc scaner-freeprog .cz .cc
netvzzcsvsm .co .cc tanxiaodong .gicp .net
netwazmtsyd .co .cc tazprogltd-us .com
nrgy-co .net tazprogltd-usa .net
nrgy-groupllc .cc urutan-antispyware .co .cc
oghmazel .cz .cc web-soft2011pc .eu
romtyreteam .ro

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Big Update: lizamoon, driveby, rogue domains

Posted on April 5th, 2011 in MoneyMule,New Domains,rogue antivirus,sql injection,Trojans,zeus by dglosser

Over 200 domains associated with zeus, lizamoon, drive-by exploits, moneymule, and  fake  security pages.  Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com, urlvoid.com (Every source is   listed in the domains.txt file):

advabnr .com afraid .orgmooo .com
ave-stats .info alternative-art-uk .co
axx1 .co .cc antivirus-2525 .co .cc
axx2 .co .cc antivirus-2932 .co .cc
azx3 .co .cc antivirus-3654 .co .cc
b949 .co .cc antivirus-713 .co .cc
bhaaa .co .cc antivirus-728 .co .cc
bhccc .co .cc antivirus-7357 .co .cc
bl0d .co .cc antivirus-8072 .co .cc
bl1f .co .cc antivirus-9638 .co .cc
bl4j .co .cc antivirus-9667 .co .cc
bl5d .co .cc autosportitalia .it
blcr .co .cc b5b15f58b4680803016eb17881f3e929 .info
blg9 .co .cc books-loader .info
blh8 .co .cc borinquensalsa .com
blh9 .co .cc casinovergelijker .com
blks .co .cc casualhopperois .com
blm9 .co .cc chelpgroup-llc .net
blnh .co .cc chepl-groupllc .biz
blnm .co .cc comdefender-abcc .in
blpk .co .cc comdefender-drnr .in
blqh .co .cc comdefender-evvj .in
blqm .co .cc comdefender-mpdfa .in
blsr .co .cc comdefender-nibea .in
blt8 .co .cc comdefender-rlob .in
bltq .co .cc comdefender-sxin .in
bluenosa .info comdefender-tpda .in
blzq .co .cc comdefender-uvag .in
ciaojfncvmt .com comdefender-wbui .in
colicie .info comdefender-xkox .in
comcmdrun .com comdefender-xqba .in
defender-aabv .in cossmar-goiano .asia
defender-abcc .in dc7e7c1a018708f .co .cc
defender-atio .in defender-aqeu .co .cc
defender-atxo .in defender-asng .co .cc
defender-fmof .in defender-eyde .co .cc
defender-gnva .in defender-fola .co .cc
defender-grlt .in globalpoweringgathering .com
defender-hipw .in google-stats47 .info
defender-hjlk .in google-stats54 .info
euy0 .co .cc google-stats73 .info
excluti .com hslfntooyyhumnp .biz
extra-911 .info ifczlmkjocnrkrvx .org
fewge .com infectedvirusxpsoft .com
frq3 .co .cc netruebtshb .co .cc
groatcoats .com netryevsirs .co .cc
gvppjnjv .net .in netrzysktlz .co .cc
image4msn .com netshwptknk .co .cc
incmt .com netskfzoygu .co .cc
kvpa .co .cc netsoftware-brvr .co .cc
mol-stats .info netsoftware-nerx .co .cc
ocservice-de .net netsoftware-q9k9 .co .cc
oregonltd-uk .cc netsoftware-sulv .co .cc
otmtg .com netsoftware-verh .co .cc
people-on .info netsoftware-werp .co .cc
planixcentral .in netspuqpphk .co .cc
ponel .biz netsqaezjdt .co .cc
prvenus-de .com netsqanvtkw .co .cc
purelandfilms .in netstpbbyzq .co .cc
qabplzoqthr .com netsuiqkpju .co .cc
rosabet .net netsystem-scanner-boep .co .cc
s0lk .co .cc netsystem-scanner-ekoi .co .cc
sabplgosvmt .com netzztoeauc .co .cc
slp1 .co .cc opytibuxi .virtue .nu
squit-llc .co oregon-ltd-uk .net
sru5 .co .cc pefpovhvstmjlmqe .biz
sru6 .co .cc pjpgvvwdmolouo .net
star-stats .info powernhgmdftkcleaner .myfw .us
suvitt .com ppeijrmuqlivgp .biz
tadygus .com pupplwpengstuf .net
talkwire .in pxpozrkjzrvtegn .biz
tea .com .pl rmtzqkuplsikots .biz
topazgmbh-de .com security-stats .info
w7-guardav .biz software-c9vv .co .cc
w7-guardav .com software-k9le .co .cc
w7-guardav .net software-z5qy .co .cc
w7guard-av .biz system-scanner-oypx .co .cc
w7guard-av .com system-scanner-qeap .co .cc
w7guard-av .net system-scanner-racv .co .cc
winadefender .biz system-scanner-ryes .co .cc
winwdefender .net system-scanner-tzii .co .cc
wsatfdwxzj .co .cc system-scanner-uemo .co .cc
wsbzaenrvm .co .cc system-scanner-uotu .co .cc
wscnfogqog .co .cc system-scanner-uyxt .co .cc
wsexirzexl .co .cc system-scanner-vpoo .co .cc
wsfmvdvera .co .cc system-stats .info
wsgskwbmhc .co .cc theantivirusxpsoft .com
wshxmhyqqq .co .cc thexpscanantivirus .com
wsirdbrvai .co .cc urllizamoon–com .rtrk .co .uk
wsjfvogzds .co .cc welcometotheglobalisnet .com
wsjjxjbfdj .co .cc world-stats598 .info
wsjknryvyw .co .cc wsantivirus-1517 .co .cc
wsjlhpadsv .co .cc wsdefender-nbev .co .cc
wslasmtlcv .co .cc wsdefender-ttii .co .cc
wslqrizgzk .co .cc wsdefender-ysyj .co .cc
wsobqiahme .co .cc wsmovies-tube-ylld .co .cc
wspwkwgaxl .co .cc wssoftway2011 .com
wsqjrralfl .co .cc wssystem-scanner-amoa .co .cc
wsqmrqlevl .co .cc wsxcacoqzt .co .cc
wsrpqsmunp .co .cc wsxkluycay .co .cc
wssgebxond .co .cc wsxnsxguyl .co .cc
wssgifitlp .co .cc wsxvwrktxa .co .cc
wssrjklbtq .co .cc wsysitfpiq .co .cc
wsubjsgtbr .co .cc wszthrboqe .co .cc
wsuconokjj .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

zeus, drive-by, malspam domains

Posted on March 29th, 2011 in exploit,malspam,MoneyMule,New Domains,zeus by dglosser

Domains associated with malspam, moneymules, zeus, etc. Sources: www.spamhaus.org, safebrowsing.google.com and others (Every source is always listed in the domains.txt file):

mamj .ru poggmedic .com
aimos .fr jobdatings .net
zz6b .com kpqqkorv .co .cc
12s83 .com kpxrpplv .co .cc
dfio5 .com krdbqfhe .co .cc
gemini .ee poneslas .cz .cc
newnut .ru pop-stats .info
sedvb .com tomwrezv .cz .cc
1e2e4 .info frinova2005 .com
dezeta .com onlinemacro .com
klz1 .co .cc pizdec .sx33 .net
me12 .co .cc softway2011 .com
mog5 .co .cc tendonina .co .cc
slp2 .co .cc waseetstore .com
slp4 .co .cc alisa-carter .com
slp6 .co .cc blank-record .com
slp8 .co .cc derwart-group .at
snk4 .co .cc excitingmovs .com
snk5 .co .cc hire-centers .com
snk6 .co .cc ping-matic .co .cc
snk7 .co .cc collins-ltdusa .cc
srtb .co .cc ephes-groupllc .cc
sru1 .co .cc newsoftwareltd .ru
sru2 .co .cc securuayetres .net
sru4 .co .cc statistic-www .com
sxp4 .co .cc get-backlink .co .cc
sxp9 .co .cc greatbargainz .info
t2x0 .co .cc lowcostcoiffure .fr
thdx08 .com pflanzen-import .de
ushuqb .com dontstop2346210 .com
xxqc .co .cc master-data-door .in
7speed .info popularcasinoex .org
ahbazen .net cam-girls-online .com
pre4sys .net softantivirfirst .com
swetanu .com itmastersoft .narod .ru
teylsoft .ru plantacao44 .hdfree .in
banpox .cz .cc tikraiarbusigeras .com
eguyendu .com softnetwork-safe .co .cc
findugly .org basicprotectionxa .co .cc
issa-net .com lessthenaminutedeal .com
jiongjia .com pillrxdrugstorechains .at
szivacsek .at welcometotheglobaliscom .com
cgozctk .co .cc guard-securitypersonal .cz .cc
for-fra .co .cc pedrogomes1975 .sites .uol .com .br
ilovekeks .biz s15248477 .onlinehome-server .info
mialepromo .ru

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Drive-by exploits, moneymule, zeus domains

Posted on March 22nd, 2011 in exploit,MoneyMule,New Domains,rogue antivirus,Spyeye,zeus by dglosser

Zeus drive-by domains, drive-by exploits, moneymule, rogue security domains. Sources include blog.urlvoid.com, google.safebrowsing.com, www.spamhaus.org.

12sa .cz .cc agamakus .vv .cc
2d7d .co .cc allmetalforums .com
3dk1 .co .cc artby-gorup .net
71pp .co .cc artby-group .biz
76hx .co .cc babomaz52 .co .cc
945e .co .cc callisto-ltdco .net
9rk1 .co .cc cerucoz53 .co .cc
aljalea .net conscientiousnessaga .co .cc
bhsss .co .cc coxepep5 .co .cc
bhttt .co .cc dfonwiuf2389f2938f .ru
bhvvv .co .cc diviter77 .co .cc
bhyyy .co .cc diwevaj15 .co .cc
bigbreak .ru fiquyiv71 .co .cc
bl7v .co .cc forofum78 .co .cc
blbw .co .cc fubuhud57 .co .cc
bldw .co .cc gdsjt4jgrftj4 .co .cc
cu9v .co .cc genoyej3 .co .cc
daebang .or .kr getsomepornhere .net
dp0t .co .cc gotuqid87 .co .cc
dp2t .co .cc groupinc-upland .biz
dp3t .co .cc gyznktmm .co .cc
dp4t .co .cc haqopor77 .co .cc
e-ads-13 .info hexilac10 .co .cc
ei1o .co .cc hfgjtyktyee2578 .co .cc
f2hl .co .cc hotabet14 .co .cc
f9tq .cz .cc internet-movie-stream .net
fhwq .co .cc interpower1 .cz .cc
gib-uk .biz ivirtualagents .com
go12 .cz .cc javaobj .co .cc
gtha .co .cc jeheyoz84 .co .cc
har-log .com jokosac59 .co .cc
ibg9 .cz .cc kresko-group .biz
ibs8 .cz .cc kresko-group .net
icu2 .co .cc kumoxov91 .co .cc
inline .de lacitay64 .co .cc
ioey .co .cc lefuvej59 .co .cc
ju7j .cz .cc lokakey64 .co .cc
jw4x .co .cc loxomul4 .co .cc
kdhy .co .cc malinowyzdroj .com .pl
m9g9 .co .cc maybest .co .cc
mtm4 .co .cc mefekos62 .co .cc
mwco .cz .cc mupehim81 .co .cc
np5u .co .cc neoline-groupco .cc
nssindia .com neoline-llc .net
ofline .co .cc newavig97 .co .cc
owuu .cz .cc nicamuf95 .co .cc
p6ox .co .cc panasonic-tv .com
phqv .co .cc payunic2 .co .cc
planutt .com petifuh78 .co .cc
pnxs .co .cc qeadllc-uk .com
prasys .co .cc qekiwej61 .co .cc
pwln .co .cc qoyeped27 .co .cc
qo11 .cz .cc qupagap76 .co .cc
qwxa .cz .cc richmond-art-group .cc
rjkd .co .cc sccvaxzv .co .cc
rqrx .co .cc soft-store-inc .com
sasx .cz .cc softstorecorp2011 .com
shinee .kr softstorecorp2012 .com
snwt .co .cc sologirlsdb .com
spwj .co .cc streaminternetvideos .com
svrz .co .cc targetmarket-groupllc .net
tmi .150m .com tawekiw79 .co .cc
utye .co .cc tiqunoj44 .co .cc
v934 .co .cc tivagal87 .co .cc
vdrt .co .cc tiyoxom15 .co .cc
vhet .co .cc torosenespana .com
vht0 .co .cc trinijunglejuice .com
vtwe .co .cc updateconnection .com
w1tu .co .cc usonlineguide .com
w9gg .cz .cc vefahoh97 .co .cc
wlt2 .co .cc vepepel21 .co .cc
yox4 .co .cc winupdateserver .su
z360 .net wiwuroy54 .co .cc
zexo .co .cc wuzehof7 .co .cc
ztty .co .cc yovekej67 .co .cc
zvgw .co .cc zanomos5 .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


some malvertising, exploit, rogue, moneymule domains

Posted on March 16th, 2011 in exploit,malspam,MoneyMule,New Domains,rogue antivirus by dglosser

malvertising, exploit, rogue, moneymule domains… sources include securehomenetworks.blogspot.com, www.malwaredomainlist, sunbeltblog.blogspot.com (Every source is always listed in the domains.txt file):

2548 .cn itservice-de .cc
abbcp .cn tonsley-art .com
eally .net veslouhoyboy .ru
hotcnn .ru windowspack .net
jk136 .com wurstbrota .info
nuevaq .fm zenitchampion .cn
gzn4 .co .cc collins-group .cc
klz0 .co .cc gdsg23gsgf .co .cc
latebin .ru gsdag3gsfg .co .cc
pmt0 .co .cc jokerisliger .com
rsiylr .com lilac-antique .cc
suy1 .co .cc micmacmall .co .cc
suy2 .co .cc webthearray .info
suy3 .co .cc baragas-budd1 .com
uxqt .co .cc euroantivirus .com
alimama .com irisantivirus .com
dlqvod .info kurdgull .ueuo .com
gamejil .com mailantivirus .com
lesslane .ru traveltomexixo .ru
newback .net typeantivirus .com
toysplan .ru focusantivirus .com
001e2e4 .info justeantivirys .com
boanpack .com links-exchange .net
mycing .co .kr worktravelexpo .com
nanumidc .com centreantivirus .com
oneclean .net generation-team .net
reycross .com richmond-art-uk .biz
sbrowser .net whalez-tsunami .info
sickstage .ru collins-art-group .cc
spyout .co .kr collins-groupusa .com
tamil365 .com tonsley-group-uk .net
voyraf .co .cc dancespotlightusa .com
8778ranser .in letmeseeyoustrip .info
biosuw1ns .com livreantiviruspro .com
hardclean .net alternativeart-ltd .com
nuttyknack .ru guard-onlystrong .xe .cx
teckcraft .com richmond-art-group .com
wingguide .com worldfamoucomposer .net
all4gsm .uni .cc alternative-art-ltd .net
dalalore .vv .cc competitor-uk-group .net
de-blitznet .cc competitorgroup-ltd .com
dkjwfpzc .co .cc pe .edu .upnorte .mooo .com
foksrox21 .info planetaantiviruspro .com
oxcbolzx .co .cc internetonlinegratis .com
sevg-incgr .net japan-tsunami-whale .info
thanhhoacpi .vn primeiroantiviruspro .com
vaccinelab .com addfreeprotectionwa .cz .cc
zerodoctor .com protection-motionra .co .cc
ajisuvravmt .com megatechservicegroup-ltd .cc
aspecs-group .cc rantigalta-industrellio .net
iiaojdnivmt .com megatechservice-group-ltd .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


March 12 Update: Rogues, Trojans, Moneymule,Zeus domains

Posted on March 12th, 2011 in exploit,iframes,malspam,MoneyMule,New Domains,rogue antivirus,zeus by dglosser

Rogue Domains, malspam domains, zeus, exploit domains. Sources include ddanchev.blogspot.com, malwaredomainlist.com, vxvault.siri-urz.net and others (Every source is always listed in the domains.txt file):

3apa3a .tomsk .tw bestsoftcheckerur .rr .nu
aaoutfit .com brasilimoveisdf .com .br
akebxej .co .cc checker-antivir-safe .co .cc
anarazel .cz .cc cmbpupin .sites .uol .com .br
antiviralpro .com cpiresmartins .sites .uol .com .br
apanen .co .cc derwart-group .com
bestgoodmovie .in despachantesolution .com
bigupdate .ru dsysqqkxzekyspjx .biz
bigupdater .ru e-s-c-r-o-w-autos .co .cc
bigupdaters .ru ephes-groupllc .net
bigupdates .ru ephesgroup-llc .biz
bigupdating .ru favorite-softcheker .xe .cx
bigupdatings .ru five-mountain .org
blackmemoso .com fivestarporn .info
dcelok .ce .ms flash135-video .3utilities .com
digitalmind .cn flash226-pics .servehttp .com
diumerfa .tk flash293-hosting .sytes .net
ertlkv .net .in foru-cleanstrong .rr .nu
filesretail .in forucleansimple .rr .nu
fire-cewer .tk frontingviruses .com
first-warez .in ghdsg32hgdf .co .cc
g3u4g .net host258-hosting .servehttp .com
gralbine .cz .cc hybridmediaworks .in
herosh .com hyqidqwzsratgjqp .com
highcliks .co .cc iqioaycapumus .linkpc .net
jabadoce .com ldpgtpjtzvidwm .net
kitoredf .ce .ms lucasnaif .sites .uol .com .br
kmoch .ce .ms meggadistribuidora .sites .uol .com .br
mialedot .ru metamphcrystal .com
miminoprost .net music-clubers .cz .cc
ndawestbr .com ourbestsearch .info
p2pshares .org reporteplatense .com .ar
poserafr07 .info sabcentrosul .sites .uol .com .br
publicvm .com safe-antivirarmy .rr .nu
shwptknk .co .cc safeforsoftor .co .cc
sjhf4gh .net save-suite-foryou .in
social-file .in sdfpkiscrypzrv .com
suhi4hr .net sevg-groupnet .com
superbfile .in softwarekraft .in
tor4ok .com spamreporter .co .cc
toscello .co .cc strong-networkmaster .co .cc
tvmoviefilm .in superhotwarez .in
uzugonop .com thefileformat .in
vfg2 .co .cc totalcitygroup-inc .com
webclever .ru vcardosobonfim .sites .uol .com .br
webtestfiles .in win-antispyw .com
www4lilli .co .cc worldtradegroupllc .com
zlvtwfwl .co .cc ykosqumjwtsqqrrf .com
zopretsqa .ce .ms your24domain .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Bulletproof Domains, Moneymule Domains, Exploit Domains, iframes and more…

Exploit domains, bulletproof domains, Moneymule Domains, Palevo Domains…
Sources include amada.abuse.ch, hphosts.blogspot.com, www.malwaredomainlist.com, support.clean-mx.de (Every source is always listed in the domains.txt file):

4565 .in 2g2gsdfhfh .co .cc
5673 .in allforyouonline .com
770304123 .com antiivirusgoe .com
9us .org antiquee-corp .info
acmedecor .ru antistresser .com
ademudmadve .com antivirusemail .com
adheadies .com aramategroup-int .info
anysnare .us art-marketllc .cc
apniscmvoe .ru artmarket-llc .net
av .babypin .net banjalucke-ljepotice .ru
av2011 .co .cc banner-stats .org
bebookfunk .com chriseden73 .free .fr
bevelli .com chronos-network .com
bmjdr .free .fr directsecuresite .com
ciss .cz .cc fourth-ukltd .net
dgp .cc fourthgroup-ltd .cc
dkandskm .com freeinfosociety .com
evnagivu .in g23ghshdfshj .co .cc
evnvu .in geg2gsxhsh .co .cc
f5v9w .com greekweddings .biz
fj43 .co .cc gsg23gsdhsh .co .cc
gamersite .eu gsg32gasegsh .co .cc
gghkqkkgytn .com hbaehanfznjfh .co .cc
guitarheroe .es helby-groupltd .biz
hd-56 .com highsecuritydirect .com
hitchouston .com hy-brasil .mhwang .com
hosgeffer .co .cc irc .ekizmedia .com
hotupdates .ru jejushinshin .co .kr
inetwork .by .ru junaidandzia .com
inf0z .com .ua karlasantoscaentano .com
iranblog .com knives .mahtarep .net
jiayifan .cn kssa .peasoul .com
jocelrolex .net mails .lebadv .com
kadds .ru marchingbaby .com
kamasut .net nudedancegirls .co .cc
karma2you .net officialsecuredsite .com
kghkqkkkdve .com oyunyoneticisi .com
koralda .com pickeklosarske .ru
landriver44 .ru qead-groupllc .net
mailforw .org query-google .com
maislex .net rolemodelstreetteam .invasioncrew .com
mix-plus .co .kr schwartzbrothersant-corp .com
odile-marco .com sdh4hsfhjfdjhsdf .co .cc
onlydev .fr securedirectsite .com
p0teha .com .ua securedsitedirect .com
pc-cheats .de securelive .co .kr
playerbox .in servicio-fisico .info
poqwwrr .com sexy-serbian-girls .info
pushot .com shopmovieproduction .cn
qead-llc .biz squitgroup-llc .net
radiosci .info taruntextiles .com
rignorell .info throne-groupllc .cc
sc2wc .info thronegroup-llc .co
send29931 .cn tinassanservice-groupllc .cc
sfgytdysytn .com tinassanserviceant-antteam .net
signafrica .com tinujeemoatoc .linkpc .net
sinip .es unfaimos .land .ru
stepworth .com update-drivers .in
svjazinet .ru us-acoongroup .net
throne-uk .at vintage-groupco .biz
twilattice .in vintagegroup-inc .com
uuquhc .ru west-view-art .cc
vdsvps .in westview-art .net
weirden .com worldofart-ltd .info
yujinshan .cn zccz .interfree .it
zhirok .net zemondocooler .com
zkasbo .ru

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Pheonix, Palevo, Neosploit, Money Mule, Rogue Domains

Posted on February 25th, 2011 in exploit,MoneyMule,New Domains,rogue antivirus,Trojans by dglosser

Pheonix, Palevo, Neosploit, Money Mule, Rogue Domains… Sources include support.clean-mx.de, securehomenetworks.blogspot.com, honeywhales.com (Every source is always listed in the domains.txt file):

1mdaily .co .cc aimic-groupllc .asia
2gov .co .cc aimic-groupllc .at
757qwerty .ru aimicgroup-main .asia
7opchat .info antivirusmax .com
aboutavsoft .com aramategroup-first .cc
ad .laoqn .com aramategroup-int .net
artsolve-ltd .at artsolveltdco .at
artsolveltd .cc astech-groupde .cc
azst .net atlant-groupinc .cc
beazeswyn .cz .cc atlant-usainc .net
beazius .cz .cc bredgarcorp-ant .be
bestvideoh .info computeraskmore .info
bleedorr .cz .cc creatence-groupllc .asia
boongosum .com creatence-groupllc .at
chakra .org creatence-groupllc .cc
comaskmore .info creditaskmore .info
convertgame .com creditlover .info
cooljavva .info dads-girls-hall .com
dadsgirls .net designvalentin .info
dagdanis .vv .cc devasteam-ant .ws
delzzerro .cn devonholidaylet .co .uk
dogo-group .cc dofubuhud57 .co .cc
dogo-group .net download-heaven .info
dotjavva .info drysdale-antcorp .at
dotoral .info drysdale-antcorp .biz
estermihen .com drysdale-group-inc .cc
evrensohbet .net elcometotheglobalisnet .com
findoral .info first-guardul .cz .cc
fintec-ukltd .ws first-security-checker .com
flyjavva .info g23h2hfsdjh .co .cc
freehotgay .com g32gshshfh .co .cc
frestilero .com gameaskmore .info
fulhortion .com gavinrazar .cz .cc
goznak .cc generation-groupltd .cc
gronderol .com generationgroup-ltd .net
gsdgsdhsh .vv .cc gogo-group-inc .cc
gteyuim6 .com gogo-teamant .com
haramadbum .com hdsh4hsfhdsj .vv .cc
iloveusa .co .cc he4hshxjhfdjh .co .cc
imennoser .com hermosayasociados .com
javvacash .info homeaskmore .info
jusretung .org i-compass-group .at
kulawield .vv .cc incredible-protectionro .rr .nu
kupitraff .com indexstatyahoo .com
limperniod .com javvadesign .info
listoral .info lilac-groupllc .cc
livejavva .info lookfeel-201101 .co .cc
lmagehost .com maxtrampo .correio .biz
lustzucker .de millennial-artco .biz
medpcela .org millennial-maingrop .net
moijs .com mimosa-groupus .cc
nacolazes .com mimosa-incgroup .com
nadnadzz2 .info ndfn34nfdn .co .cc
net-jacob .cz .cc netprotectionsoftre .com
optiopum .org nimrodltd-uk .net
ottormans .com oliver-antcorp .net
pcantiv .com paultonsgroup-ltd .info
pointlove .info platinumcode .net
popander .com pokervalentin .info
popunder .biz pse1jo2po3 .info
rapedbitch .ru renaissance-llc .cc
ratnadewi .biz renaissancellc .be
raufkhalid .com royalthelmas-teamant .asia
referrall .biz securitysite .mobi
rokmanser .org server1 .unibaaaq .com
secursincro .tk servicios-fisicos3 .info
sexasite .info simpleclean-foru .net
taklonaft .com smart-security-holder .in
tecboom .com socbestclan .3dn .ru
tirgra .org stile-groupllc .net
toikgame .com stilegroup-llc .ws
tradelove .info stroumarcet .com
umpertvilm .com suksesdantrik .co .cc
undowerto .org takoseksi .cultarts .com
untimbags .com tes .stuckin .org
vipprojects .cn top-network-guard .in
vltebtzc .co .cc top-only-scanner .uni .cc
wertulaso .org topsuitesentinel .rr .nu
xcounter .ru tradejavva .info
xs4all .nl valentinhouse .info
yonfolind .com valentinlive .info
zalil .ru valentinsite .info
zdbdbd .co .cc vansforsaleinessex .co .uk
zervman .com visionlove .info
zumugolter .com web-statistics-css .ru
zverstoft .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…