Feed

149 new domains (exploitkit, redkit, multibanker,etc)

Posted on September 30th, 2013 in exploit,malspam,malvertising,New Domains,Trojans by dglosser

Added 149 new domains (exploitkit, redkit, multibanker,etc) from app.webinspector.com, vxvault.siri-urz.net, blog.dynamoo.com and other sources (all are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

100+ zeus, malvertising, DNS Amplification domains

Posted on September 26th, 2013 in New Domains by dglosser

Added 107 domains associated with DNSAmplification, malvertising, zeus, phishing and other badware you won’t want on your network or loading in your browser. Sources include dnsamplificationattacks.blogspot.com, dnsamplificationattacks.blogspot.com, zeustracker.abuse.ch… Please update your blocklists and follow our terms of use.

Big Update: 229 domains (icefog, XtremeRAT, malvertising, etc)

Posted on September 28th, 2013 in malspam,malvertising,New Domains,Trojans by dglosser

Added 229 domains (icefog, RAT, malspam, malvertising, etc). Sources include:blog.dynamoo.com, infosecdailydigest.com, www.fireeye.com (all are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

multibanker, dnsamplification, malvertising domains

Posted on September 16th, 2013 in malspam,malvertising,New Domains,Phishing by dglosser

Added 174 domains associated with phishing, multibanker, dnsamplification, malvertising  and other badness. Sources: virustracker.info, threattrack.tumblr.com, labs.sucuri.net (all are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

150+ Malvertising Domains

Posted on September 14th, 2013 in malvertising,New Domains,Phishing by dglosser

Added over 150 domains associated with malicious advertising and malicious ad banners. Please update your blocklists and follow our terms of use

malvertising, malspam – 160 Domains

Posted on September 9th, 2013 in malspam,malvertising,New Domains by dglosser

Added 160 malspam and malvertising domains from blog.dynamoo.com and www.bluecoat.com (all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

malicious spam, malicious banners…

Posted on August 12th, 2013 in malspam,malvertising,New Domains by dglosser

Added 105 domains (malicious spam, malicious banners, other badness). Sources: threattrack.tumblr.com, safebrowsing.clients.google.com, blog.webroot.com, blog.dynamoo.com (all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

Big Update: 280 domains

Posted on July 31st, 2013 in iframes,malspam,malvertising,New Domains by dglosser

Added 280 domains (iframes, malspam, multibanker, Ramnit, redkit etc from blog.dynamoo.com, malc0de.com, urlquery.net, virustracker.info ((all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

multibanker, phishing, rogues…

Posted on July 15th, 2013 in malspam,malvertising,New Domains,Phishing,Trojans by dglosser

Added 161 domains associated with rogue antivirus/security/software, phishing, malvertising, etc. Sources include: labs.umbrella.com, virustracker.info, www.phishtank.com(all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

Betabot, Citadel, RedKit, TDS Domains…

Posted on July 7th, 2013 in iframes,malspam,malvertising,New Domains,Trojans by dglosser

Added domains associated with Betabot, Citadel, SutraTDS, RedKit,  iframes. Sources include malwareurls.joxeankoret.com, malc0de.com, vxvault.siri-urz.net, www.exposedbotnets.com (all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

iframes, malicious javascript, malvertising, redirects

Posted on July 2nd, 2013 in iframes,malspam,malvertising,New Domains by dglosser

Added 137 malicious domains (iframes, malicious js, malvertising, malspam, etc) from labs.sucuri.net, blog.dynamoo.com, safebrowsing.clients.google.com and others. Please update your blocklists and follow our terms of use