Feed

Two updates: runforestrun, iceix, rogues, malvertising, malspam domains…

Posted on June 25th, 2012 in 0day,malvertising,New Domains,rogue antivirus,spam by dglosser

Two recent updates, adding over 230 domains associated with “RunForestRun, IceIX, Malicious Spam, Malicious Advertising, etc. Sources include www.malwaredomainlist.com, isc.sans.org, hosts-file.net and many more (all sources are listed in our domain.txt file.)
Compressed files are located at: http://www.malware-domains.com (full zone files, note the dash)  and http://dns-bh.sagadc.org/.  We also have a mirror dedicated to research and Open Source Projects – contact us for details.
NO ZONE FILES ARE LOCATED ON THIS SITE.
* Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format.  Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Advance Fee Scam, BH Exploit, Rogue Domains

Posted on December 25th, 2011 in fraud,MoneyMule,New Domains,rogue antivirus,spam,Trojans by dglosser

Added Domains associated with Advance Fee Scams, Black Hole Exploit, Money Mule, PDF Exploits, etc.  Sources include boiler-rooms.org, jsunpack.jeek.org, www.malwaredomainlist.com, xylibox.blogspot.com and others

(every source is  listed in the domains.txt file)

Reminder: the mirror for compressed zip files is up and running – please contact us for details – right now it has very little usage.

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Bulletproof Domains, Moneymule Domains, Exploit Domains, iframes and more…

Exploit domains, bulletproof domains, Moneymule Domains, Palevo Domains…
Sources include amada.abuse.ch, hphosts.blogspot.com, www.malwaredomainlist.com, support.clean-mx.de (Every source is always listed in the domains.txt file):

4565 .in 2g2gsdfhfh .co .cc
5673 .in allforyouonline .com
770304123 .com antiivirusgoe .com
9us .org antiquee-corp .info
acmedecor .ru antistresser .com
ademudmadve .com antivirusemail .com
adheadies .com aramategroup-int .info
anysnare .us art-marketllc .cc
apniscmvoe .ru artmarket-llc .net
av .babypin .net banjalucke-ljepotice .ru
av2011 .co .cc banner-stats .org
bebookfunk .com chriseden73 .free .fr
bevelli .com chronos-network .com
bmjdr .free .fr directsecuresite .com
ciss .cz .cc fourth-ukltd .net
dgp .cc fourthgroup-ltd .cc
dkandskm .com freeinfosociety .com
evnagivu .in g23ghshdfshj .co .cc
evnvu .in geg2gsxhsh .co .cc
f5v9w .com greekweddings .biz
fj43 .co .cc gsg23gsdhsh .co .cc
gamersite .eu gsg32gasegsh .co .cc
gghkqkkgytn .com hbaehanfznjfh .co .cc
guitarheroe .es helby-groupltd .biz
hd-56 .com highsecuritydirect .com
hitchouston .com hy-brasil .mhwang .com
hosgeffer .co .cc irc .ekizmedia .com
hotupdates .ru jejushinshin .co .kr
inetwork .by .ru junaidandzia .com
inf0z .com .ua karlasantoscaentano .com
iranblog .com knives .mahtarep .net
jiayifan .cn kssa .peasoul .com
jocelrolex .net mails .lebadv .com
kadds .ru marchingbaby .com
kamasut .net nudedancegirls .co .cc
karma2you .net officialsecuredsite .com
kghkqkkkdve .com oyunyoneticisi .com
koralda .com pickeklosarske .ru
landriver44 .ru qead-groupllc .net
mailforw .org query-google .com
maislex .net rolemodelstreetteam .invasioncrew .com
mix-plus .co .kr schwartzbrothersant-corp .com
odile-marco .com sdh4hsfhjfdjhsdf .co .cc
onlydev .fr securedirectsite .com
p0teha .com .ua securedsitedirect .com
pc-cheats .de securelive .co .kr
playerbox .in servicio-fisico .info
poqwwrr .com sexy-serbian-girls .info
pushot .com shopmovieproduction .cn
qead-llc .biz squitgroup-llc .net
radiosci .info taruntextiles .com
rignorell .info throne-groupllc .cc
sc2wc .info thronegroup-llc .co
send29931 .cn tinassanservice-groupllc .cc
sfgytdysytn .com tinassanserviceant-antteam .net
signafrica .com tinujeemoatoc .linkpc .net
sinip .es unfaimos .land .ru
stepworth .com update-drivers .in
svjazinet .ru us-acoongroup .net
throne-uk .at vintage-groupco .biz
twilattice .in vintagegroup-inc .com
uuquhc .ru west-view-art .cc
vdsvps .in westview-art .net
weirden .com worldofart-ltd .info
yujinshan .cn zccz .interfree .it
zhirok .net zemondocooler .com
zkasbo .ru

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

malspam domains, more openx exploit domains, a couple of phishing domains

Posted on November 20th, 2010 in exploit,New Domains,spam by dglosser

Some phishing and malspam domains, a couple more openx exploit domains, and assorted harmful domains you need to block. Sources include vxvault.siri-urz.net, www.whitefirdesign.com, malc0de.com and others (Every source is always listed in the domains.txt file):

10centes1 .com 32agora .com
17wanr .com 3emath .com
273wg .com 3losal .tk
3proxy .ru 1-search-engine-marketing .net
45search .com 100-matrasov .ru
4neurons .com 24horasbnet .net .br
5letes .hu 3456rdfvgerg .ru
64down .com 3bstreaming .com
6dpg3khy .ru 3d-screensaver-downloads .com
7dnfwg .com 4587avvv .1gb .ru
7zsfx .info a11099 .nb .host192-168-1-2 .com
8910online .com aatimetable .com
a5b .kr abcnmembers .com
abisource .com aboutcorfugreece .com
ac-68 .com acampamentosnet .com
act365 .com access-file-repair .com
addons1 .com access-unlocker .com
addwere .com access-unlocker .org
aguavips .com accesspasswordrecovery .org
ajidy .net accesspasswordrecovery .us
accesspasswordrecovery .ws
alalbait .ps acelogix .fileburst .com
albateam .us acoustica1 .cachefly .net
alcamarsaci .cl acreunagoias .com .br
alemdizi .com actualkeylogger .com
all3c .com addendum .winsoftkr .com
alturl .com adservingmedia .com
anddertt .com adultvideo .cz .cc
annormous .ru adwareblocker .com
avisbudget .com adwarecatcher .com
bansard .cc adwareinspector .com
basehanpd .info agnescyril .free .fr
binoquils .com aircraftfluids .in
brookegypt .com alaskan-malamute-bodensee .de
ddorfprivat .de ale .goncal .sites .uol .com .br
decreasein .net allspymonitor .com
dreka328 .com animedreamsource .nl
dscodec .com anotherdomainname .in
dsone .fr antivirus-upd .co .cc
duotegame .com asqrgxsvcadsf .net
enbindeft .com avondaleacademy .com
ensortlem .com bestdataarea .com
fenieneec .info chaparroagricola .com
figleaves .com chat .sex-007 .ru
finremtsog .com coconlovely .com
forminteld .com dresscodetv .asia
free-sms .co .kr esim .raciborz .pl
hpdata .ws getittoherer .com
info-dr .com gonlyourchoicess .com
ipma .co .in
ititit .in idyjugilo .co .cc
kintera .com ihjfigvincz .com
leofloter .com iiahgvxincz .com
mleoziber .com indelibleme .com
mymoneyme .in jazteberabim .de
nolemoitos .com jdebperjncz .com
omahosting .com krazy-girls .com
pupmypzed .ru loves5 .ttxtz .com .br
questurl .com onlinessite-uj3 .co .cc
qvodxz .info overclock .osa .pl
resultbar .com phjmrwdqpsifxvr .com
resulturl .com powercare .co .kr
ridgear .com priorityclub .com
salonveh .is querybrowser .com
sedpoo .com resultbrowse .com
sendidea .in superfilesseason .com
ses02 .net ultrafastcomputer .ru
unjaysmilf .com
torkla .cz .cc unoghoster .com
tudovids .com update .powercare .co .kr
ulumagherm .com update2 .nbar .co .kr
vseocenah .ru vashaekonomika .ru
webhole .co .kr video92-flash .sytes .net
zibendelt .com z147885 .infobox .ru
zvidterms .com zeroclean .co .kr
0-0-0-0-0-0-0-0-0-0-0-0-0-10-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
0-0-0-0-0-0-0-0-0-0-0-0-0-11-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
0-0-0-0-0-0-0-0-0-0-0-0-0-56-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
0-0-0-0-0-0-0-0-0-0-0-0-0-57-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
0-0-0-0-0-0-0-0-0-0-0-0-0-58-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
0-0-0-0-0-0-0-0-0-0-0-0-0-9-0-0-0-0-0-0-0-0-0-0-0-0-0 .info

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Over 150 new harmful domains added

Posted on November 17th, 2010 in exploit,New Domains,spam,Trojans by dglosser

Domains associated with Neisploit, c&c, malspam, and trojans. Sources include malwaresurvival.com, www.malwaredomainlist.com, support.clean-mx.de (Every source is always listed in the domains.txt file):

23liao .info aa0311cbsf .com
2myagust .com abodeflash-vol82 .co .tv
addcount .ru admin .addcount .ru
aiyksrro .cn adobeflashfix .co .cc
akmnds .net alexastatscounter .biz
allowsuit .ru alexastatscounter .info
arguesigh .ru alexastatscounter .net
askfloat .ru answerblack .com
asmerlion .com asmuholtiv .com
banpaint .ru axxess3d .co .za
bidstore .ru boilingyear .com
bigmans .ru brightcheap .com
bingoso .net chaindaily .com
blimofalt .com chancebulb .com
blindwife .net confirmacaoonline .com
blockred .com dd227 .aasite .info
bookblow .com divxdownloads .org
carvefail .ru dwnsft027 .co .cc
cgaretes .com efirtemion .com
chainegg .com enginemenu .co .cc
classjar .com erieislandsoutfitter .com
cn89212 .com esperizden .com
combrain .ru esportvdfs .hpg .com .br
cowfire .com expololol .com
cowglove .com failinnocent .co .cc
crashlist .ru forkboiling .com
crossflood .ru fotomania2010 .ru
cryfound .ru frandistribuidora01 .com
curetire .ru freedaysoft .ru
damptime .com freshtoolsguide .com
danedealer .ru ginnerfrans .com
derttttt .ru girlchalk .com
dflam .com gmajem .x10 .mx
dividpoke .ru gripchair .com
djkowkji .cn jacketslim .com
dukjung .es .kr jubihlertn .com
ecoped .ca kagashakar .cz .cc
endclean .ru keygenlist .com
essz .net linkmater .com
evofasst .com luxurystorewatch .com
fkhfgfg .tk magzepterl .com
foldwalk .ru microsoftwindowsecurity121 .com
frylook .ru microsoftwindowsecurity132 .com
funwife .ru microupdates .ru
handfound .ru newcooltools .com
healsigh .ru newsystembrasil .org
jutack .com objectsoken .com
kdddaber .com offerargue .ru
lajaxxx .info opinasrusa .com
lyptuk .cn ourfaceb00k .com
my-web1 .tk peakshield .co .cc
nabiratt .in pizdecsilamzla .co .cc
noski5 .com porelove .info
ntmtraff .tk qualitaetvorun .org
overtus .net realsimpledirect .com
oztime .asia rightdeal77 .net
raiseheal .ru rogeriofagundes .com .br
ridepoint .ru romanempire .lv
sacv .net s8lw0v7iyi1kwgoevnwvjcn85 .net
sawmend .ru skbroadband .com
scoldrip .ru smokewaste .ru
sdozk .com space .ciacomo .co .cc
sexyster .tk stampthank .ru
snowgrey .com stuffcover .ru
soakcomb .ru synctime .asia
spendwave .ru sysupdatenbz .com
spoildry .ru thefreedepot .com
statsv2 .com tradealert .ru
statsv3 .com ttawamortgagebroker .net
tl2wg .info ultimatewatches .ru
trapjoin .ru unknown-garbage .com
tugfill .ru unuvoltim .com
tuwubino .com uzbekius20 .ipq .co
un04 .com valatneer .org
ushase .com vguest .jino .ru
wawnet .net vivaldi-tour .ru
webdeorr .net wizard2 .sbs .co .kr
win0day .com wrg34gwww333 .com
zyxyfy .com youronlinemovieclip .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

113 New Harmful Domains Added

Posted on November 16th, 2010 in New Domains,spam,zeus by dglosser

Added 113 harmful domains last night;  also fixed an error in the list – if you updated your list last night please do so again at your earliest convenience.

csex .com jjibpyrjncz .com
tred .net linkparadijs .nl
tyfaw .in mhjuyylmlev .com
hiyi .info mrburnsltd .info
mbrdot .tk qabnwzeqncz .com
qazino .ru riarqejrncz .com
r00tx .org skinhuman .co .cc
weqar .com vfgjrhyvncz .com
yesman .in viarqejvlev .com
eazydn .com buzzfreepack .com
feraus .com caravanltd .co .cc
freqos .com halooinvezde .org
on .rucl .ru meemivampire .com
twindu .net mrburnsltds .info
bestkind .ru oeynuyiy .cjb .com
kupiec24 .pl garrypotertds .com
kwilium .net hespressmaroc .com
olamst .info iglesiadedios .com
retroman .in nextdoorfiles .com
ssh000s .com topsexhardcore .in
twtrcon .net varada20 .front .ru
cogiicio .com videokinos-xxx .ru
fhpornoka .ru ardhmeria-juaj .com
flowmajt .com dgjte .ineazydn .com
ttxtz .com .br karakatica3 .ipq .co
mpromocja .pl pcsecurityland .com
mymucero .com superfilesfree .com
speakdns .com adobefeatures .co .cc
webfamba .com binarydatafiles .com
widestep .com clearloadonline .com
zoo-movs .com clientdatafiles .com
zuihouyi .com fotoshare-online .in
zuspraha9 .cz hostmaster .csex .com
endorsemt .com rsrkrktqmhstzqq .biz
fiestappc .com aqvasex .tkeazydn .com
orangeco .info bbrasil-cadastro .com
planecage .com mrburnsltdstore .info
szdamuzhi .com simpsonsarchive .info
zehuhon .co .cc adwareprofesional .com
zs-urzedow .pl djalerockzzz .musik .lc
adware2010 .com mrburnsltdonline .info
aljarahost .net adwareprofessional .com
lbreseller .com adwareprofessional .org
sorumluyuz .org dlmirror-n44 .myftp .org
thecubeguy .com aligate32 .comeazydn .com
vemdelicia .com antivirus .nhinfosys .com
verseuable .com arccacessoria .sytes .net
webbcarros .com mediasoftwareonline .com
zaporizhzhe .ua halomasterpie .fileave .com
aabnweealev .com affiliatecube .comeazydn .com
adware-2009 .com anonymousstats .comeazydn .com
adware-2011 .com arquivosonline .neteazydn .com
buywinseven .com intervieweyebrowspirit .co .cc
dc17 .arabsh .com directbuy-freepass .comeazydn .com
dwnsftyj6 .co .cc business .one .strangled .neteazydn .com
igrayvbiznes .ru secure .accurint .com .session100000421 .isapfile .ru

134 new domains to block

Posted on March 4th, 2010 in New Domains,Phishing,rogue antivirus,spam,zeus by dglosser

fastflux, zeus, rogue, skype spam domains. Sources include atlas.arbor.net, blogs.paretologic.com, and others:

27gr .co .tv 34jh7alm94 .asia
88810 .cn 873hgf7xx60 .com
953333 .com a2132959 .0lx .net
aprotect .com abouttraffic .net
arraysaw .com acdbxybadve .com
arraysaw .net autoparck .sumy .ua
arshard .com aviavavilons .net
av-command .com blackhistorypeople .com
avcommand .net botproxy2 .twoblocksdown .com
b11335599 .cn businessboard6124 .net
basiscause .com canadauniversitypress .com
brozsearch .com candyshop451 .com
c36996639 .cn contentserver .ru
c58446658 .cn contrsnid .uz .ua
cavally .in didbotta6 .unipv .it
contempt .in draft5sticks4 .net
d92378523 .cn enteri1llisec .in
disea .info findlostcats .com
ebaat .biz flashplayerpluginonline .com
egn14142nn .ws for-sunny-se .com
egygate .info free-screen-capture-software .com
evertrands .com freeanalsextubemovies .com
everybots .com globostep .info
experrior .eu googleanalinics .com
footbal .rv .ua gotnewfriendbook .com
fructik3 .ru groov .uzhgorod .ua:8080
gameshort .ru h10024 .nb .host127-0-0-1 .com
geo95 .com happytreeporno .com
getsup .info homeamateurclips .com
googleinru .in homesitetoo .com
gromz .net hqexgirl .osa .pl
iescrow .ir illegaloffer .ru
j00k877x .cc imobiliariacanela .com .br
kaliuz .com lmaoimages .com
kolaider .net miamiheraldsi .com
kozzz .in nbsolution .com
m2121212 .cn o17070 .nb .host127-0-0-1 .com
m3131313 .cn personalsystemscan .cn
mn8873nb01 .cc plainjapan .com
natos .info playthisfuck .com
nn31415en .in polycounter .com
oast .com pzignbfxspou .info
polevand .com quickmedialinks .com
redondo .ru redriveruk .com
reilka .co .kr salamangzan .com
reilka .kr santacruzinfo .com .br
reilki .co .kr scoregame .info
reilki .kr searchfeature .org
reilki .ne .kr sendspace .repek .or .kr
reilki .or .kr slinkadult .biz
reilko .co .kr softinternational .net
reilko .kr sportgun .pl .ua
reilko .ne .kr stignita .zapto .org
reilkx .or .kr stoptibetcrisis .net
rioner .com storage84030 .org
scanerborn .cn tdsstdstds .org
sendingout .cn theinputonline .com
serdb01 .com thetubeholder .com
shitstream .cn uncutsouthmovies .com
smile .if .ua valentinsss .info
sunqtr .com w1543 .nb .host127-0-0-1 .com
tabs .pl woodfuelwales .com
updategr .org www-myphoto .com
vallesina .tv x21526 .nb .host192-168-1-2 .com
whyviral .com xxxtoywebsitecheap .com
x-drugs .ru yswzrjkpsp .com
zeroday .cc

Block ueopen .com ASAP

Posted on November 18th, 2009 in 0day,New Domains,spam by dglosser

Block the domain ueopen .com ASAP.

From  http://www.fbi.gov/cyberinvest/escams.htm (spaces added to malicious domain):

The FBI assesses with high confidence that hackers are using spear phishing e-mails with malicious payloads to exploit U.S. law firms and public relations firms….   The specific intrusion vector used against the firms is a spear phishing or targeted socially engineered e-mail designed to compromise a network by bypassing technological network defenses and exploiting the person at the keyboard. Hackers exploit the ability of end users to launch the malicious payloads from within the network by attaching a file to the message or including a link to the domain housing the file and enticing users to click the attachment or link….

Once executed, the malicious payload will attempt to download and execute the file ‘srhost.exe’ from the domain ‘hxxp://d. ueopen.com’; e.g. hxxp://d. ueopen.com/srhost.exe. Any traffic associated with ‘ueopen.com’ should be considered as an indication of an existing network compromise and addressed appropriately.

Domain will be added on the next update but you should not wait….

Over 325 zeus, malspam, phishing, zeus domains added

Posted on October 17th, 2009 in New Domains,Phishing,spam by dglosser

Over 325 new domains added – no many to list.  We usually don’t add spam or phishing domains due to their sheer number but this is an exception.

Check the http://www.malwaredomains.com/updates/20091017.txt file for the full list.

Update your blocklists ASAP!

Happy 4th of July from waledac

Posted on July 4th, 2009 in New Domains,spam,Waledac by dglosser

Many waledac independence day domains, some zeus domains, and other badness.  Sources include www.malwareurl.com, zeustracker.abuse.ch, www.siteadvisor.com:

1ffli .com .mx 1live-antimalware-pro-scan .com
51pt .com .cn 1liveantimalwarequickscnan .com
7777ee .com 4thfirework .com
7777tt .com 6-tube-world .com
a3l .ru advanced-virus-remover2009 .com
ajokauz .cn antimalwareaupdateserver .com
ajyawif .cn antimalwaregiard .com
akajjcthr .com antivir2009pro .com
akoede .cn antivirapro .com
akoetly .cn antivirfile .com
apefovy .cn antivirsystempro .com
arachka .com antivir-systempro .com
ateugic .cn antiviruslicensepurchase .com
ateygi .cn antivirus-nt .com
atiawy .cn antivirussyspro2009 .com
atiguko .cn antivirwin2009 .com
ativoma .cn avirguardian .com
atoceuk .cn avirprotect .com
atofaf .cn awareprotect .com
atyorzi .cn benini .xpg .com .br
avayhik .cn best-antivirus-pc .info
avemyk .cn dreamheartsnow .cn
aveyco .cn enginecoolant .cn
aveylpa .cn filescan4 .info
aviopuh .cn fireholiday .com
avoapyt .cn fireworksholiday .com
awyeg .com fireworksnetwork .com
b5r .ru fireworkspoint .com
b7p .ru flywell-travel .com
b9g .at freeindependence .com
bayscan4 .info full-antispyware-scanner .com
bbvvbb .cn green-tube-site .com
best-av .info guard-gate .info
bgiyjcthr .com guardincorp .info
biumer .com handyphoneworld .com
bonusdream .cn happyindependence .com
boxingclubs .cn holidayfirework .com
bricezfunz .com holidaysfirework .com
c1z .at holifireworks .com
c5e .at hot-exe-area .net
c5p .at hotxxxtubz .com
c5p .ru i-antivirusplus .com
c5y .at imgesinstudioonline .com
cheappower .ru interactiveindependence .com
dfdfg443 .cn jukeboxjunkie .at
entrank .com let-exe-2009 .com
fobrim .cn luxartpics .net
fomazej .cn miosmschat .com
fombual .cn miosmsworld .com
gasdry .ru morescan4 .info
gemells .com movie4thjuly .com
gg .jjmmmmm .cn moviefireworks .com
gogotraff .cn movieindependence .com
gvod-down .cn movies4thjuly .com
gzpf .in moviesfireworks .com
hexhome .com moviesindependence .com
hfs-haus .de music-megaupload .com
hh88567 .cn mynameisboxxy .com
hohoh .biz mywhitecoat .com
ina6iq .com netgalleryart .com
keeperbook .cn outdoorindependence .com
lentopl .info privatesecuredpayments .com
mavr-best .com pro-secure .info
medisont .com protectinstructor .info
megapain .info protectionlol .info
metroking .ws queilesaventura .com
milllk .com safeandsearch .info
mixlotsite .cn scan4high .info
mvt .c4 .fr scan6zoom .info
no-virus .info scan-spyware-now .com
pixphotos .com scanzoom6 .info
pokjuyt .ru secure .paysecureorders .com
qvod881 .cn secure-gov .com
rain-man .cn securerealy .com
ro-skill .com securitybestonline .com
rtcb .org sesese .y145c .cn
smophi .com shootersworld .cn
suntravet .cn superhandycap .com
sxicl .co .uk systemprotectinc .info
tcsrz .com thehandygal .com
tec .qc .cx therealsecurityshields .com
tong-ji .com thesecuritynsyard .com
tongji520 .com totalsecuritysite .com
trfdb .net trustshield .info
udta .in video4thjuly .com
uhaulde .cn videoindependence .com
ukropin .com vivalatube .com
vpsvip .com wirtschaft-frieden .ch
welivehere .cn workscan4 .info
wthelp .cn www-facebook .net
xs8g .com xmoviedownloads .cn
yusitymp .com yourhandyhome .com
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!

Used by SURBL, MOREnet, and others…