Feed

Malicious Spam, Phishing, Multibanker, Malicious Advertising Domains…

Posted on June 28th, 2013 in malspam,malvertising,New Domains,Phishing,Trojans by dglosser

Added 114 domains associated with Phishing, Malicious Ad Banners, sinowal, multibanker, MalSpam, and other badness from blog.dynamoo.com, safebrowsing.clients.google.com, virustracker.info, www.phishtank.com (all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

zeroaccess, malspam, blackhole exploit domains

Posted on June 17th, 2012 in BH Exploit Kit,malspam,New Domains,Phishing,Trojans by dglosser

Added domains associated with bh exploits, malicious spam, zeroaccess and other trojans. Sources include labs.sucuri.net, hosts-file.net, blog.dynamoo.com. Please update your blocklists/sinkhole and follow our Terms of Use.

Reminder: the main site does not contain any zone files. Only download files from one our our download mirrors.

Over 250 malvertising, flashback, phishing domains

Posted on April 12th, 2012 in exploit,malvertising,New Domains,Phishing,Trojans by dglosser

Added over 250 domains linked to flashback, phishing, malvertising, etc. Sources include www.threatexpert.com, private correspondence, contagiodump.blogspot.com and others. Please update your blocklists/sinkhole  and follow  our Terms of Use.

Reminder: the main site does not contain any zone files. Only download files from one our our download mirrors.

spyeye,zeus,rbn,scam domains

Posted on October 22nd, 2011 in fraud,malvertising,New Domains,Phishing,RBN,Trojans,zeus by dglosser

Added 206 domains associated with rbn, zeus, botnets, etc. Sources:blog.dynamoo.com, www.emergingthreats.net, zeustracker.abuse.ch and many others (Every source is  listed in the domains.txt file)

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format. (The mirror for compressed zip files is up and running – please contact us for details.)

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Forgery, scam, phishing domains

Posted on September 12th, 2011 in iframes,MoneyMule,New Domains,Phishing,Trojans,zeus by dglosser

Added almost 200 domains associated with scams, frauds, phishing, as well as the usual zeus and malicious domains. Sources include zeustracker.abuse.ch, spamhaus.org, vxvault.siri-urz.net.. (Every source is  listed in the domains.txt file)

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

blackholeexploitkit, fraud, rogue, domains

Posted on September 4th, 2011 in fraud,New Domains,Phishing,rogue antivirus,Spyeye by dglosser

Added over 340 domains associated with fraud, blackhole exploit kit, phishing, rogue antivirus, etc. Sources include malwareurl.com, www.spamhaus.org, malwaredomainlist.com

(Every source is  listed in the domains.txt file)…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Drivebys, fast flux, botnet, moneymule, etc…

Posted on August 23rd, 2011 in fastflux,MoneyMule,New Domains,Phishing,Spyeye,Trojans,zeus by dglosser

A large update a few days ago which I forgot to add… Over 300 zeus, moneymule, botnet  domains…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

artro, fastflux,phishing,torping domains…

Posted on January 20th, 2011 in exploit,fastflux,New Domains,Phishing,rogue antivirus,Trojans by dglosser

165 new domains associated with torpig, rogue antivirus, phishing, fastflux, and other badness. Sources include atlas.arbor.net, abuse.ch, vxvault.siri-urz.net (Every source is always listed in the domains.txt file):

ffup .ru ginadesi .com
aksix .com indisk .co .kr
cz889 .com justtambo .in
hx681 .com litypist .com
iseyh .com lorikhgj .com
mdcoc .net migrader .com
stepsk .ru mydynatri .in
aferup .com ohanerri .com
astped .com pantomer .com
baza-33 .ru pastephe .com
bidspa .com phidhony .com
cerpoo .com sterebay .com
chmok .info vanderab .com
cutped .com venonite .com
daiehu .com asperfals .com
exteth .com avast-russ .ru
goapoo .com cuapowoam .com
jikped .com girlsexe .info
jorped .com girlsexq .info
laarup .com medz4less .net
menteu .com supertable .in
oisrup .com tooniland .com
opluck .com vofib-oxyx .ru
outped .com webtvfiles .in
ovatic .com wobersnam .com
padrup .com gilbertblab .in
pempoo .com hotnewsite .net
podfer .com imoveistrp .com
pourid .com movietoplay .in
pukfer .com mozpancast .com
qutped .com recofmuayt .com
silrup .com b4ido .comze .com
tivped .com chewedboots .com
todped .com chjfeggcdbs .com
xetpoo .com chudno .mcdir .ru
alyseko .com diamldnddbs .com
arcuard .com freemail4me .net
assaygo .com gizprotect1 .com
baullka .com jabsrjtjdbs .com
baza-123 .ru kataburglary .in
bylinve .com porntubehunt .com
cadeniu .com prodefence .co .kr
celkage .com proprotect .co .kr
cinding .com rockinhookup .com
colzann .com empiremailing .com
crucity .com everymovieplus .in
dashite .com hdstreamxporn .net
dsionhu .com loadfilesworld .in
erinari .com operaupdates .info
furthmu .com solidleader .co .cc
golos-33 .ru tamdownload7 .info
jaseyou .com bestfilesseason .in
laughro .com booknameserver .com
maketags .in aaracccobrancas .com
meadeci .com komustopxvideos .com
mokaped .com picasso .xuilo .cz .cc
molvinc .com pornuxa .xuilo .cz .cc
opporfo .com cordillerablanca .org
pastail .com smallspiderwomen .com
pizdos .info uumwebergnesiz .co .cc
sadirvi .com imagestorageplace .com
slypepi .com gdfgdfgdgdfgdfg .in .ua
stomoha .com wire-fedwire-info .com
vibrage .com dvdstreamvidsrxa .co .cc
virtest .com gjj-ltayo .serveirc .com
wangluc .com topsecuritydefense .com
wornnig .com hrf-rklyo .servegame .com
wylmark .com save-securityscanner .com
zoaearb .com adakhukanalinfo .narod2 .ru
argoscoc .com host81-tube .redirectme .net
canympet .com karinafmamelintl .narod2 .ru
chianthe .com flash43-tube .3utilities .com
chokyman .com milenaesdurkinbsh .narod2 .ru
clichast .com tube74-videos .servepics .com
cornalif .com vitaliymtslapinel .narod2 .ru
dinewsie .com alisayuivoronkovyy .narod2 .ru
emiatici .com vladimirbsvalievpe .narod2 .ru
fastupp .info removemyemailaddressplease .com
fecterry .com vladimiroyaburkinyum .narod2 .ru
feriytal .com konstantinbdkruteleve .narod2 .ru
flakawni .com makareebesfamilnovyab .narod2 .ru
formuria .com valentinalykuzminykhkh .narod2 .ru
gettanum .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Dec 2 Update – 144 domains

Posted on December 3rd, 2010 in iframes,New Domains,Phishing,rogue antivirus,Spyeye,Trojans,zeus by dglosser

artro c&c domains, spyeye domains, some rogue domains, and lots of google savebrowsing domains. Sources include safebrowsing.clients.google.com, spyeyetracker.abuse.ch, amada.abuse.ch and others (Every source is always listed in the domains.txt file):

75oal .k12 .tr a1marketingteam .net
a-1signsinc .com abmarchitects .com
afford-uk .org adobexe-v03 .co .tv
aimauto .org adobexe-ver03 .co .tv
autohton2005 .ro adobexe-vol01 .co .tv
azizshaikh .com adobexe-vol03 .co .tv
bayram-197 .com aehg-laplata .com .ar
bitaid .nl agencjapracy .fr .pl
bonanzagt .com agropharma .com .ar
bossu .fr altunbilgisayar .com
buydrivers .info andam1 .webphoto .ir
carita .pl angelesrodriguez .com .ar
choulsoolee .com annuairemedicaloran .com
d-mediagroup .com anywayitsolutions .com
dansin .se apysvirtual .com .ar
darkscape .info arsenalforum .cekuj .net
denhollander .cc ascomaformation .info
derkexports .com atharvatechnology .com
diyfab .com azadtravels .co .uk
doitbig .org bajando-de-peso .com
dwiyanto .com blackjackcardcounting .co .uk
e-bayer .info canakkalenakliye .com
e-hak .co .kr centrepassatge .com
eclada .co .uk chiangmaiporcelain .com
elsabrosito .com citygroupservices .com
emozgetcherez .ru coll-med6 .freevar .com
emugyk .cn dashbulag .webphoto .ir
eno .com .ar dodawa-appliances .com
eswhc .co .cc dpsindirapuram .com
fastiran .net education-tips .info
fetiking .kir .jp equipeworldsound .com .br
flash-01 .co .tv ertvotusik .co .cc
gamdboksis .com escuela60guatrache .com .ar
gpkangra .com ferhatkaraca .com
guadeloupe .cc flowertask .co .jp
hotel-sas .ru giovanniguadagno .com
imbbs2t4u .com gsnjineh87 .webphoto .ir
ioyunlarim .com hafez .webphoto .ir
iranor .ca hepberaberiz .net
isshl .com igraemvpingpong .ru
jobscel .com illumina-illume .com
kapaone .org interactive .info .pl
kemosi .com karatayram .gov .tr
kvthane .org lourensfourie .co .za
listplus .co .cc magicalyatra .com
logopad .net majnon313 .webphoto .ir
manafnet .com malawihighcommission .co .uk
nt17 .in marmaratriko .net
pamiangsao .com millatfoundation .in
pkgmitom .ru moatarian .webphoto .ir
pkupe .com moblehasehmi .webphoto .ir
pmgkorea .com mylithcentral .net
pwoot .fr mylocaloffice .us
pyramidnav .com novointernetban .com
radarodz300 .com ottomansguild .com
rongen-ai .com plasmahdtvratings .com
rtlnm .org radiointerlive .com
rtopotr .com rajresidencydelhi .com
rw31 .com seadistaminefast .com
sakiai .com shirdirailyatra .com
scalajwtblog .ro soketuparikh .com
smileidea .com strategiccapitalalliance .com
stromec .ru swissarmyknifes .us
teamerblog .com tekoki-aikoukai .com
tngthai .com thaibadmintonclub .com
trainings4u .com theatrekoodak .webphoto .ir
uh .pl topbusinesscoaches .com
ukrec2rec .co .uk twittermodeler .com
unimed .com .tr volatilerecordings .com
viptrader .net vostok-line .spb .ru
yahoopower .info vrsalesandnetworking .com
zunoferts .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

exploit, fastflux, malspam, rogue domains

Posted on May 6th, 2010 in New Domains,Phishing,rogue antivirus,Trojans,zeus by dglosser

159 domains containing malspam, rogue antivirus, trojans, or associated with fraud. Sources include www.malwareurl.com, atlas.arbor.net, hphosts.blogspot.com, ddanchev.blogspot.com:

ad .z5x .net my-test-domain .ru
azsbwkwwwxvf .com myprotected-system .com
benefit-sales .com newsystem-guard .com
birbins-of .com oem-buy-software .com
bobleblack .com oem-buy-software .net
bobleboble .com on-discount .com
boblebreak .com onguard-zone .net
buy-download .net online-soft .net
cheap-market .com onlinesstop .com
cialisviagrabest .com payment-safety .net
ciro062 .hpg .com .br pcregrtuy .net
cleanupantivirus .com perfectstorez .com
clothedown .com pert45s .com
createpc-pcscan-korn .net plotguardto-mypc .com
crimepayz .biz porn-movies-26c96 .com
det0xcorp .kz questionhere .com
diamondgoals .com raskeni .ru
dinamite-deal .com realguardforyou20p .net
dodtorsans .net realguardforyou21p .net
doforsafety60-pd .net realguardforyou22p .net
doforsafety61-pd .net realguardforyou23p .net
doforsafety62-pd .net realguardforyou24p .net
doforsafety63-pd .net recover88888 .com
doforsafety64-pd .net requiregift .com
doforsafety65-pd .net romsinkord .com
doforsafety66-pd .net roundboble .com
doforsafety67-pd .net roundclever .com
doforsafety68-pd .net roundopen .com
doforsafety69-pd .net roundrunning .com
easyas123abcandfu .com safelinkhere .net
enlarge-mypenis .com salon-de-miki .jp
fhio22nd .net save-secure .com
fightmalware7 .com screenroad .com
finestguard40-pd .com search4vir .net
finestguard40-pd .net searchturne .org
finestguard41-pd .com sharifabadco .com
finestguard41-pd .net shop-gods .com
finestguard42-pd .com shop-here-now .com
finestguard42-pd .net snowgrid .com
finestguard43-pd .com startisland .com
finestguard43-pd .net suitcase50td .com
finestguard44-pd .com suitcase50td .net
finestguard44-pd .net suitcase51td .com
finestguard45-pd .com suitcase51td .net
finestguard45-pd .net suitcase52td .com
finestguard46-pd .com suitcase52td .net
finestguard46-pd .net suitcase53td .com
finestguard47-pd .com suitcase53td .net
finestguard48-pd .com suitcase54td .com
finestguard48-pd .net suitcase54td .net
finestguard49-pd .com superwidgetcomponents .info
finestguard49-pd .net systemcec7 .com
gallerysbest .com teperb-bananoviy .com
ginopost .com terasave1 .com
go-searchandscan .net terasave10 .com
greatestdeasl .com terasave11 .com
grepad .com terasave12 .com
happyplanet .com .mx terasave2 .com
health-life-co .com terasave3 .com
health-online-com .com terasave4 .com
hgaragesales .net terasave5 .com
homesatmadison .com terasave6 .com
hot-cleanofyourpc .com terasave7 .com
ileon .us terasave8 .com
impish .info terasave9 .com
jademason .com thejustb .com
javapony .org thetrinity .com .tw
letme-guardyourzone .com treatsudden .com
letprotectsystem .net trust-systemprotect .net
life-health-co .com trustsystemguard .net
light-brands .com updates-account .net
loseheavyweights .com upscanyour-pcnow .com
madisoninc .net upscanyourpc-now .com
malware-checker-free .net upwin .co .cc
mannyorder .com vilkgood .cn
marfilks .net volunteerabroad .ca
marmarams .com vyyy-team .cs .nov .ru
masterglass .go .ro windows-systemshield .net
my-softprotect4 .net xxxxxx000 .net
my-systemprotection .net

This malware block lists here are provided for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…