Feed

Fake-AV, exploit, malvertising domains

Posted on April 21st, 2012 in malvertising,New Domains,rogue antivirus,Trojans,zlob by dglosser

Added 124 domains associated with rogue/fake AV, malvertising, exploits, etc. Sources include hosts-file.net, www.emergingthreats.net, www.urlvoid.com
(all sources are listed in our domain.txt file.)

Compressed files are located at: http://www.malware-domains.com (full zone files, note the dash)  and http://dns-bh.sagadc.org/.  We also have a mirror dedicated to research and Open Source Projects – contact us for details.

* Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format.  Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

bankpatch, blackenergy, htaccess redirects…

Posted on March 22nd, 2012 in iframes,malvertising,New Domains,rogue antivirus,Trojans,zeus,zlob by dglosser

Add over 190 domains associated with iframes, malicious javascripts, htaccess redirects, malvertising, etc. Sources include sucuri.net, safebrowsing.clients.google.com, iseclab.org and others (all sources are listed in our domain.txt file.)

Compressed files are located at: http://www.malware-domains.com (full zone files, note the dash)  and http://dns-bh.sagadc.org/.  We also have a mirror dedicated to research and Open Source Projects – contact us for details.

* Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format.  Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Another Huge Update: 220+ Ramnit, Rogue, Zbot Domains

Posted on January 19th, 2012 in New Domains,rogue antivirus,Trojans,zlob by dglosser

Added over 220 domains associated with zbot-bgz, rogue, ramnit and other badness. Sources include contagiodump.blogspot.com (thanks Kevin), www.sophos.com. Please update your blocklists/sinkhole according to our Terms of Use.

zeus, nachaspam, fastflux domains

Posted on December 18th, 2011 in malspam,New Domains,Trojans,zeus,zlob by dglosser

Added domains associated with advance-fee scams, fast-flux botnet, Lockemall, nashaspam, etc. Sources include zeustracker.abuse.ch, www.malwaredomainlist.com, securehomenetworks.blogspot.com, boiler-rooms.org (every source is  listed in the domains.txt file)

Reminder: the mirror for compressed zip files is up and running – please contact us for details – right now it has very little usage.


Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Artro, bestpack, morto, zbot domains

Posted on August 31st, 2011 in exploit,New Domains,Trojans,zeus,zlob by dglosser

Added 240 domains associated with zbot, morto. bestpack, etc. Sources include www.spamhaus.org, www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.asp, www.emergingthreats.net, malwareurl.com

(Every source is  listed in the domains.txt file)…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

zbot, trojans, Ponmocup, drivebys… so it goes

Posted on August 24th, 2011 in New Domains,rogue antivirus,Trojans,zlob by dglosser

192 domains associated with zbot, ponmocup, drivebys, spyeye… Sources include amada.abuse.ch, www.emergingthreats.net, www.malwareurl.com (Every source is  listed in the domains.txt file)…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

,

Moneymule domains, malicious domains, trojans, etc.

Posted on June 6th, 2011 in MoneyMule,New Domains,Trojans,zeus,zlob by dglosser

Added 182 dirty domains from securehomenetworks.blogspot.com, vxvault.siri-urz.net, ddanchev.blogspot.com and others (Every source is  listed in the domains.txt file):

2n6h .co .cc 1glacisgroup-llc .net
3atlanta-uk .com 92cfa9e0 .b8r4 .org
5dali-style .com 983723315nwelle .cz .cc
7lrkvy .co .cc abodefllash .co .cc
aaaholic .com abodeplugin .co .cc
asdaqr15 .com adobecodec-01 .co .tv
atlantaltd-uk .cc adobecodec-02 .co .tv
avgenup .in angielskidlarodzicow .pl
benanshell .cz .cc aprotest-avi2011 .co .cc
bnhapeirud .co .cc atlanta-ltd-uk .net
bqtuhwhm .ce .ms blitznet-groupinc .cc
buzadora .cz .cc chirnsideandren .cx .cc
digibeetlesop .ru clickjacksonville .org
docmoo .ce .ms dalistyle-group .cc
domofro .cz .cc defender-beaxz .in
ecvcallise .co .cc defender-fdjez .in
esscleaner .com defender-nessc .in
ezzo .ce .ms derwoode-group .com
fastscandn-pc .tk derwoode-group .net
flash-02 .co .tv essclean-online .com
flashplugins .net freeopenscanerpo .in
fmoo .ce .ms grandao2010 .qipim .ru
frozyn .info gwgwrhtetretnt .com
gb-offers .com helpmedownload .com
geceeroe .ce .ms hkjhcgaidiiii .com
geelh .ce .ms hot-mp3download .com
gulrva .cz .cc hotmp3-download .com
gxdowzsz .ce .ms hsghyturrerefg .com
hnifuzof .cn hypnosis-guide-pro .com
homerev-sys .com idownload-istore-music .com
homerev2-sys .com idownload-istore .com
hsovolih .cn idownload-store-music .com
i-tvdish .com idownload-tunesmusic .com
infofraud .net image-editor-download .com
it-amira .net immigration-in-us .org
it-serviceltd .be imusic-download .com
itamira-de .com imusic-store-downloads .com
itserv-de .co ketchersode .ce .ms
jahn-siegen .de lasfotosmasnice .com
kade-group .com livesports-network .com
kzqacegd .cz .cc livestreamdirect .com
letbeservice .ru masterart-group .com
macwinsoft .net mobiledownloads-pro .com
markizac .com moonsgootlasynch .co .cc
mcmonnes .ce .ms movie-downloads-direct .com
medi-fix .com movie-downloadsnow .com
mendryltd .com moviedownloads-pro .com
miliardov .com mp3-downloadingnet .com
mnuyspe .co .be mp3download-net .com
mp3-depot .com mp3downloadhq .com
mp3-share .us mp3downloading-net .com
mp3helpdesk .com mp3sectionentitled .com
mscser .ru music-d0wnload-center .com
mstoolkit .com music-idownloads .com
music-folia .com music-istore-downloads .com
myfghavs .com music-moviesnetwork .com
newbiz10news .com music-new-downloads .com
newbiz1cash .com namebuypicture .cn
newbiz1news .com natspot-serve .com
newbiz2news .com newantivirusdownloads .com
newbiz3news .com newest-version-download .com
newbiz4news .com newflash10news .com
newbiz5news .com officesuite-download .com
newbiz6news .com parlen-group-usa .com
newbiz7news .com parlen-groupllc .com
newbiz8news .com parlengroupllc .net
newbiz9news .com protectantivscanfree1 .com
npeyugux .cn quad-it-group .com
palazziogt .ru quinta-groupus .com
phonezero .com .br rextechinnovation .com
quad-groupuk .cc rextechltd-us .com
quinta-llc .net schwendonger .ce .ms
quintagroup .cc searchalphabet .org
raucherhimmel .de special-art-ltd .com
rbomce .com special-art-uk .cc
rextechltd .cc targetmarketgroup-llc .cc
sadone .ce .ms taskmalbbunde .co .cc
searchant .org thebestscannerdha .l2x .eu
searchatom .org tingdjibmar .ce .ms
searchbegan .org traffic-4webmaster .com
sroxcwoa .ce .ms upperblackeddy4 .cz .cc
stillmate .co .cc vci01 .appbundler .net
subdom25 .com virusprotection24 .com
sublime-ltd .net vnsproject-de .cc
tyodi .com von90qr8ft .cz .cc
videocrazy .cx .cc vortex-llc-uk .net
wexct .info vortexllc-uk .com
woedmonn .ce .ms wayuvaga111 .vv .cc
xbx .tw web-fotogallery .be
xhyjl .cn witayeno111 .cz .cc
xmycelebs .co .cc worksappmedia .in
yahbesvyt .com youtubeonline .net

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

<TR><TD>2n6h .co .cc</TD>  <TD>1glacisgroup-llc .net</TD></TR>
<TR><TD>3atlanta-uk .com</TD>  <TD>92cfa9e0 .b8r4 .org</TD></TR>
<TR><TD>5dali-style .com</TD>  <TD>983723315nwelle .cz .cc</TD></TR>
<TR><TD>7lrkvy .co .cc</TD>  <TD>abodefllash .co .cc</TD></TR>
<TR><TD>aaaholic .com</TD>  <TD>abodeplugin .co .cc</TD></TR>
<TR><TD>asdaqr15 .com</TD>  <TD>adobecodec-01 .co .tv</TD></TR>
<TR><TD>atlantaltd-uk .cc</TD>  <TD>adobecodec-02 .co .tv</TD></TR>
<TR><TD>avgenup .in</TD>  <TD>angielskidlarodzicow .pl</TD></TR>
<TR><TD>benanshell .cz .cc</TD>  <TD>aprotest-avi2011 .co .cc</TD></TR>
<TR><TD>bnhapeirud .co .cc</TD>  <TD>atlanta-ltd-uk .net</TD></TR>
<TR><TD>bqtuhwhm .ce .ms</TD>  <TD>blitznet-groupinc .cc</TD></TR>
<TR><TD>buzadora .cz .cc</TD>  <TD>chirnsideandren .cx .cc</TD></TR>
<TR><TD>digibeetlesop .ru</TD>  <TD>clickjacksonville .org</TD></TR>
<TR><TD>docmoo .ce .ms</TD>  <TD>dalistyle-group .cc</TD></TR>
<TR><TD>domofro .cz .cc</TD>  <TD>defender-beaxz .in</TD></TR>
<TR><TD>ecvcallise .co .cc</TD>  <TD>defender-fdjez .in</TD></TR>
<TR><TD>esscleaner .com</TD>  <TD>defender-nessc .in</TD></TR>
<TR><TD>ezzo .ce .ms</TD>  <TD>derwoode-group .com</TD></TR>
<TR><TD>fastscandn-pc .tk</TD>  <TD>derwoode-group .net</TD></TR>
<TR><TD>flash-02 .co .tv</TD>  <TD>essclean-online .com</TD></TR>
<TR><TD>flashplugins .net</TD>  <TD>freeopenscanerpo .in</TD></TR>
<TR><TD>fmoo .ce .ms</TD>  <TD>grandao2010 .qipim .ru</TD></TR>
<TR><TD>frozyn .info</TD>  <TD>gwgwrhtetretnt .com</TD></TR>
<TR><TD>gb-offers .com</TD>  <TD>helpmedownload .com</TD></TR>
<TR><TD>geceeroe .ce .ms</TD>  <TD>hkjhcgaidiiii .com</TD></TR>
<TR><TD>geelh .ce .ms</TD>  <TD>hot-mp3download .com</TD></TR>
<TR><TD>gulrva .cz .cc</TD>  <TD>hotmp3-download .com</TD></TR>
<TR><TD>gxdowzsz .ce .ms</TD>  <TD>hsghyturrerefg .com</TD></TR>
<TR><TD>hnifuzof .cn</TD>  <TD>hypnosis-guide-pro .com</TD></TR>
<TR><TD>homerev-sys .com</TD>  <TD>idownload-istore-music .com</TD></TR>
<TR><TD>homerev2-sys .com</TD>  <TD>idownload-istore .com</TD></TR>
<TR><TD>hsovolih .cn</TD>  <TD>idownload-store-music .com</TD></TR>
<TR><TD>i-tvdish .com</TD>  <TD>idownload-tunesmusic .com</TD></TR>
<TR><TD>infofraud .net</TD>  <TD>image-editor-download .com</TD></TR>
<TR><TD>it-amira .net</TD>  <TD>immigration-in-us .org</TD></TR>
<TR><TD>it-serviceltd .be</TD>  <TD>imusic-download .com</TD></TR>
<TR><TD>itamira-de .com</TD>  <TD>imusic-store-downloads .com</TD></TR>
<TR><TD>itserv-de .co</TD>  <TD>ketchersode .ce .ms</TD></TR>
<TR><TD>jahn-siegen .de</TD>  <TD>lasfotosmasnice .com</TD></TR>
<TR><TD>kade-group .com</TD>  <TD>livesports-network .com</TD></TR>
<TR><TD>kzqacegd .cz .cc</TD>  <TD>livestreamdirect .com</TD></TR>
<TR><TD>letbeservice .ru</TD>  <TD>masterart-group .com</TD></TR>
<TR><TD>macwinsoft .net</TD>  <TD>mobiledownloads-pro .com</TD></TR>
<TR><TD>markizac .com</TD>  <TD>moonsgootlasynch .co .cc</TD></TR>
<TR><TD>mcmonnes .ce .ms</TD>  <TD>movie-downloads-direct .com</TD></TR>
<TR><TD>medi-fix .com</TD>  <TD>movie-downloadsnow .com</TD></TR>
<TR><TD>mendryltd .com</TD>  <TD>moviedownloads-pro .com</TD></TR>
<TR><TD>miliardov .com</TD>  <TD>mp3-downloadingnet .com</TD></TR>
<TR><TD>mnuyspe .co .be</TD>  <TD>mp3download-net .com</TD></TR>
<TR><TD>mp3-depot .com</TD>  <TD>mp3downloadhq .com</TD></TR>
<TR><TD>mp3-share .us</TD>  <TD>mp3downloading-net .com</TD></TR>
<TR><TD>mp3helpdesk .com</TD>  <TD>mp3sectionentitled .com</TD></TR>
<TR><TD>mscser .ru</TD>  <TD>music-d0wnload-center .com</TD></TR>
<TR><TD>mstoolkit .com</TD>  <TD>music-idownloads .com</TD></TR>
<TR><TD>music-folia .com</TD>  <TD>music-istore-downloads .com</TD></TR>
<TR><TD>myfghavs .com</TD>  <TD>music-moviesnetwork .com</TD></TR>
<TR><TD>newbiz10news .com</TD>  <TD>music-new-downloads .com</TD></TR>
<TR><TD>newbiz1cash .com</TD>  <TD>namebuypicture .cn</TD></TR>
<TR><TD>newbiz1news .com</TD>  <TD>natspot-serve .com</TD></TR>
<TR><TD>newbiz2news .com</TD>  <TD>newantivirusdownloads .com</TD></TR>
<TR><TD>newbiz3news .com</TD>  <TD>newest-version-download .com</TD></TR>
<TR><TD>newbiz4news .com</TD>  <TD>newflash10news .com</TD></TR>
<TR><TD>newbiz5news .com</TD>  <TD>officesuite-download .com</TD></TR>
<TR><TD>newbiz6news .com</TD>  <TD>parlen-group-usa .com</TD></TR>
<TR><TD>newbiz7news .com</TD>  <TD>parlen-groupllc .com</TD></TR>
<TR><TD>newbiz8news .com</TD>  <TD>parlengroupllc .net</TD></TR>
<TR><TD>newbiz9news .com</TD>  <TD>protectantivscanfree1 .com</TD></TR>
<TR><TD>npeyugux .cn</TD>  <TD>quad-it-group .com</TD></TR>
<TR><TD>palazziogt .ru</TD>  <TD>quinta-groupus .com</TD></TR>
<TR><TD>phonezero .com .br</TD>  <TD>rextechinnovation .com</TD></TR>
<TR><TD>quad-groupuk .cc</TD>  <TD>rextechltd-us .com</TD></TR>
<TR><TD>quinta-llc .net</TD>  <TD>schwendonger .ce .ms</TD></TR>
<TR><TD>quintagroup .cc</TD>  <TD>searchalphabet .org</TD></TR>
<TR><TD>raucherhimmel .de</TD>  <TD>special-art-ltd .com</TD></TR>
<TR><TD>rbomce .com</TD>  <TD>special-art-uk .cc</TD></TR>
<TR><TD>rextechltd .cc</TD>  <TD>targetmarketgroup-llc .cc</TD></TR>
<TR><TD>sadone .ce .ms</TD>  <TD>taskmalbbunde .co .cc</TD></TR>
<TR><TD>searchant .org</TD>  <TD>thebestscannerdha .l2x .eu</TD></TR>
<TR><TD>searchatom .org</TD>  <TD>tingdjibmar .ce .ms</TD></TR>
<TR><TD>searchbegan .org</TD>  <TD>traffic-4webmaster .com</TD></TR>
<TR><TD>sroxcwoa .ce .ms</TD>  <TD>upperblackeddy4 .cz .cc</TD></TR>
<TR><TD>stillmate .co .cc</TD>  <TD>vci01 .appbundler .net</TD></TR>
<TR><TD>subdom25 .com</TD>  <TD>virusprotection24 .com</TD></TR>
<TR><TD>sublime-ltd .net</TD>  <TD>vnsproject-de .cc</TD></TR>
<TR><TD>tyodi .com</TD>  <TD>von90qr8ft .cz .cc</TD></TR>
<TR><TD>videocrazy .cx .cc</TD>  <TD>vortex-llc-uk .net</TD></TR>
<TR><TD>wexct .info</TD>  <TD>vortexllc-uk .com</TD></TR>
<TR><TD>woedmonn .ce .ms</TD>  <TD>wayuvaga111 .vv .cc</TD></TR>
<TR><TD>xbx .tw</TD>  <TD>web-fotogallery .be</TD></TR>
<TR><TD>xhyjl .cn</TD>  <TD>witayeno111 .cz .cc</TD></TR>
<TR><TD>xmycelebs .co .cc</TD>  <TD>worksappmedia .in</TD></TR>
<TR><TD>yahbesvyt .com</TD>  <TD>youtubeonline .net</TD></TR>

iframes, artro c&c domains, scareware domains

Posted on February 20th, 2011 in iframes,New Domains,rogue antivirus,Trojans,zeus,zlob by dglosser

This update includes zeus, tdss rootlkit, scareware,  and other harmful, malicious sites and domains. Sources include ddanchev.blogspot.com, safebrowsing.google.com, www.sacour.cn and many others (Every source is always listed in the domains.txt file):

9365 .org gdezdeskto .co .cc
1f0fy .com hdfg43hshf .co .cc
8op .cz .cc hh3hfdnfdh .co .cc
elycam .cl hu587tiugi .vv .cc
martuz .cn nemohuildifsd .ru
ntcub .com oajhqooooeqea .in
web7t .com shgeru43hj .co .cc
360doc .com space-tome .co .cc
4www .cz .cc sparebankno1 .com
chango .com teamauctions .com
globe7 .com crj711ki813ck .com
moa3 .co .cc europalebasket .fr
turksex .co f23f21fafae .vv .cc
1porn .co .tv foxypredators .com
bluedisk .ru gdsg342gsgs .vv .cc
dddddd .info gsdg24gshgr .vv .cc
fotopush .ru gsdg43hsweh .co .cc
grb1505 .com gsg3gsdgseg .co .cc
m2121212 .cn gshg3ghsdhs .co .cc
myzoomia .in hdh45hdxfhf .co .cc
redsa .co .cc hfehe3hdfhf .co .cc
weniz .co .kr hugemoviecams .com
a1celebs .com klikspaandelft .nl
findwild .org lkckclcklii1i .com
fmx930 .co .cc parislemarais .com
hushstar .net pornhugevideo .com
madcrack .org releaseplugins .in
oneyaho .info shalillador .cz .cc
prontv .co .cc supermovieshow .in
snarework .us 212156dnfgdn .co .cc
tableplus .in automaticyaran .com
abcd1123 .info bdfnfebne3nf .vv .cc
animacord .com cleanalertcomp .com
chatpoetry .in cy71mavertoo .co .cc
gigasexc .info gsegf3gstg3g .vv .cc
gnu4oke0r .com gsgwegweg23g .vv .cc
snaretrace .us hdfh34hdrfhf .co .cc
tradejas .info ht4hdfgjcjgt .vv .cc
utrade-fx .com interscienceset .in
andradekor .com oijqujnnnsu1 .co .cc
asertinvoi .com premiumutilites .in
bfbf3bfb .vv .cc resortsinitaly .com
cebandis .cz .cc solutionslove .info
cworldxxx .info tubemovievideo .com
drelagda .vv .cc wefge3g1tg1g .vv .cc
enjoy-find .com hyperass-save .rr .nu
firtenbild .com pcwardingsystem .com
gfsdg4gs .co .cc rancholacienega .com
graninis .cz .cc video .blaskel .cz .cc
gworldxxx .info afroprivacyflash .com
hmbcompn12 .com burnley .web-fans .com
hugebigred .com hardnetwork-guard .in
hworldxxx .info hndfdfnfdnxdnf .vv .cc
inmediateam .in hugebigpornmovie .com
malakelv .cz .cc pctroublessolver .com
maridora .vv .cc antivirusesshield .com
micr0abuse .com hdhfdhdfhdfhdfh .vv .cc
natnatraoi .com hiringdivisionjob .com
nvmtymvm .vv .cc 031aec9 .netsolhost .com
oghmalak .vv .cc dvdtubeclipsjbsw .co .cc
pixellove .info monasteriodeboltana .es
prime-load .org pcactivitydebugger .com
topmoviewww .in pccustodianutility .com
tuberedsex .com update-win-soft .ipq .co
videoplugs .net gayeqylipija .linkpc .net
vivaxmotos .com lasicytylyne .linkpc .net
vrazdanuzda .dk pcinspectionutility .com
ajicajcadve .com pcprecautionscenter .com
ajimuqmadve .com pcprotectionservant .com
anti-vir-mc .com yeryeshsdhdhjfdhj .vv .cc
chicagotable .in digitalvideodirectory .in
fdf2fafaf .vv .cc pcstabilitymaximizer .com
gaboyaogytn .com systemtasksoptimizer .com
gewheheh4 .co .cc taskstweakingutility .com
gsgsv2vds .vv .cc facebook-surprise-ness .tk
ifilmmanager .in pcefficiencyreservoir .com
jbcavlajytn .com iecigoqojafuq .publicvm .com
menelibigos .com systemattentionutility .com
morlunaya .vv .cc systemshieldingutility .com
pokeryahoo .info opalicki9hpcarole .narod2 .ru
qbcavlaqdve .com systemsupervisioncenter .com
ristaemanue .com favorit-protectionavwo .rr .nu
sgtbcollege .org pcriskspreventionscenter .com
states-me .co .cc rnyhrdqcokuvjiqw25nwdlif .com
vsegwgewg .vv .cc systemanticrashesutility .com
wancheng .gov .cn accidentspreventingcenter .com
32fdsg3gsg .vv .cc pcautomaticproblemssolver .com
androlhala .cz .cc systemwrecksavertingsystem .com
bigvideocams .com gite-maison-pyrenees-luchon .com
centrihelm .cz .cc bacalhaubr .dominiotemporario .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Aug 13 Update: exploit, zeus, fastflux…

Posted on August 13th, 2010 in exploit,fastflux,New Domains,Trojans,zlob by dglosser

Over 200 domains associated with zeus, pdf exploits and other badness. Sources include safebrowsing.google.com, malekal.com, ddanchev.blogspot.com:

123kochi .com

1247892628 .zage .in
aabeejyafds .com ago1980 .ag .funpic .org
aaboyriafds .com aksaraytso .org .tr
acdftpbaoxk .com autoblogsystemx .com
ad-amazing .com badoqonoucotu .sixth .biz
aefrqwnaoxk .com barcelonabokurd .freetzi .com
aghkvkfafds .com benassibrosmihael .com
aghyjtuaoxk .com bigbossindia .net
aghyjxuaoxk .com blue-web-tube .com
ahjqndlafds .com celebsfinectpics .com
aloro .info celebsfreeimages .com
ams-school .com colloquialewfe .info
aquaticwrap .ru cylytojedufysu .ftp1 .biz
aroundpiano .ru desktopsecuritycorp .com
banner3 .biz dg-aagricola .com .br
barabudd555 .com discountprowatch .com
baybear .ru diseasednoodle .ru
bbls .ru domainsresolve .in
betaguy .ru doownloaders .com
betheo .com download-host .co .cc
bgmagazine .net downtownartists .hu
blockoctopus .ru dynamic-system .in
bonblogger .com educationlamp .com
borderspot .net eguaupenel .bigmoney .biz
budgetdude .ru empresahorizonte .com .br
bunssang .com entertainments-mp3-online .com
chaoticice .ru envirodollars .ru
clannut .ru escribaniaquinterno .com .ar
coldboy .ru execuimagemovies .com
countryme .ru foreclosurepreventionweb .com
cytei .info forhomessale .ru
dayemail .ru galacticstall .ru
dimetoo .co .cc genesisbeta .net
divecritic .com grandstoreua .in
dobgirl .com grillonet .com .br
dogmun .com h2fastpornpics .com
durposty .com hippocounter .info
earbrief .com httpstatsconfig .com
easychurch .ru internetcountercheck .com
economypoet .ru judicial-notice .com
eiste .info kon8oervonvqprinvni8qubvienoi8 .com
elvagony .com kusinapachacamac .com
exam2daybd .com mattropolis .net
excelwatch .com microlightning .ru
faceturk .net milkthecasinos .com
fchfdghfg .tk mjibujwmoxk .com
ffeeq .com mjimklhmfds .com
filetrab .com mjiruemmfds .com
gate109 .info mjiruwmmfds .com
getyourdns .com musicsgeneva .com
gmp32 .org mypcdefense15 .co .cc
golddeery .info mypcdefense16 .co .cc
gunjack .net mypcdefense17 .co .cc
hairyartist .ru mypcdefense18 .co .cc
hkisl .com .cn mypcdefense19 .co .cc
httpsstarss .in mypcdefense20 .co .cc
judeenator .net mypcdefense21 .co .cc
kai-zellner .de mypcdefense22 .co .cc
lineage25 .com mypcdefense23 .co .cc
lingamcabs .com mypcdefense24 .co .cc
linkor .in mypcdefense25 .co .cc
lonelyzero .ru mysecurity20 .co .cc
lovingmug .ru nemohuildiin .ru
lowermatch .ru newforall35-pr .co .cc
luckyfan .ru parktadimrestaurant .com
malepad .ru pc-scan-online .com
matchsearch .ru perfectpillcool .com
medxdrugx .com personal-pc-guard98 .co .cc
mikkymouse .com physicianschoiceonline .com
mindbat .ru picbloggerprojet .com
myads .name picindividuals .com
obscurewax .ru protect-me-97 .co .cc
oceanobject .ru protect-me-98 .co .cc
opus22 .org qabiooeqfds .com
orfemale .com qjigaicqoxk .com
p3-consult .com qjiruimqfds .com
pantik .in raviganeshassociates .com
penarea .ru readymadebox .com
picmonde .com real-tube-2010 .com
ponybug .ru recordsquare .ru
qlnl .com rescuedtoilet .ru
qualattice .com richgaurd1 .co .cc
rancideye .ru roulettevipcasino .ru
rawscent .ru routesave16 .co .cc
repkamouse .net saeed-photo .webphoto .ir
scarletpole .ru sevabharath .com
secondgain .ru shamelessfreegift .com
shortrib .ru slaveperfume .ru
sodacells .ru sriradhakrishna .com
stripsen .dk srpskidespot .org .rs
subyq .info starvingarctic .ru
suryacakra .com tagdol .dothome .co .kr
sweatymilk .ru tattooempireindia .com
tanderplus .com tehnoindustrya .ru
tartonion .ru theherbfarm .co .kr
trafdriver .com treasuresanew .net
vipe44 .com ulunaykanatli .com
volkahatab .cc vasealovitribu .com
wearyratio .ru vemmanederland .nl
xenhuper .ru wowowowomaydan .com
xz19 .com xdeqkdmxoxk .com
yahooxsw .com xfgswsoxoxk .com
yummyeyes .ru xhjwmyqxbvf .com

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

The full files are located at: http://mirror1.malwaredomains.com/files/
Primary Mirror: http://mirror1.malwaredomains.com/files/
BOOT file is in MS DNS format;; spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

May 23 Update: koobface,fastflux,zbot,zeus domains

Posted on May 23rd, 2010 in exploit,fastflux,koobface,New Domains,Trojans,zeus,zlob by dglosser

Over 250 new domains associated with zbot, zeus,torpig,neosploit, koobface and other maliciousness. Sources include ddanchev.blogspot.com, atlas.arbor.net/summary/fastflux, www.malc0de.com, zeustracker.abuse.ch:

jjll .ru cribrejist .kz
ijll .ru habibaksa .net
n9uo .com hesneclimi .ru
v3p2 .com hulejsoops .ru
b1xs .com img4453945 .com
irnis .net kh76t .3322 .org
notkey .ru magic-dieta .ru
u678 .info medicinada .com
zipbin .ru nonstopsen .com
123m .info nyfrizymiq .net
illmap .ru petquestion .ru
ledorga .fr powerbarrel .ru
missgin .ru radicalgirl .ru
nearzit .ru redspinster .ru
nettps .net sleepydream .ru
noknack .ru southernpeg .ru
nothill .ru tameconcert .ru
oddbabe .ru tenthprofit .ru
petlips .ru torncurrent .ru
petwife .ru updt334221 .com
radtune .ru validbanner .ru
rareelf .ru av-special .net
tapclip .ru dating-spot .ru
tornmum .ru haveitornot .ru
usetune .ru kghxpwukvif .com
void99 .com like-me-web .com
evilpal .ru mabhkkemvif .com
freeipg .ru mamapapalol .com
kettych .com mondaybubble .ru
lazyloss .ru netgomarket .com
lessjazz .ru obele-chuka .com
lostdeed .ru ohjeugbomlc .com
lovemine .ru oldpresident .ru
mildroom .ru relaxedgrape .ru
miniarms .ru siliconemist .ru
nosypipe .ru skepticalpub .ru
onebeard .ru springarctic .ru
ourriver .ru tenderavatar .ru
pangreed .ru terminalpoem .ru
pinkhack .ru trendsecure .com
radjoker .ru valuablemind .ru
richsign .ru wtopcompany .biz
rmtiw324 .ru xee1aeph2aay .kz
roundpad .ru 1gb-scanner .com
saltysky .ru 2gb-scanner .com
sparemat .ru 2mb-scanner .com
spotsnow .ru 3gb-scanner .com
suavepad .ru 3mb-scanner .com
surechip .ru 4gb-scanner .com
tartshow .ru 4mb-scanner .com
tastysea .ru 5gb-scanner .com
vasttune .ru 5mb-scanner .com
wantdive .ru 6mb-scanner .com
westlips .ru deewaek4heeh .kz
yoursoap .ru fialfyjfvif .com
zerovir .com holasionweb .com
dieta-24 .ru kakleglo2335 .com
hypoload .in novascanner4 .com
indypages .ru red-xxx-tube .net
innerduck .ru shiftupdate .info
juicyfile .ru stellarshower .ru
latevenom .ru ziniomags .com .cn
leakymaid .ru 12netantispy .com
lightword .ru 13netantispy .com
macroarea .ru 14netantispy .com
micmarket .ru 16netantispy .com
microdoor .ru 1anetantispy .com
ministate .ru 1bnetantispy .com
modelprod .ru 2web-antispy .com
mushylion .ru 3web-antispy .com
needtempt .ru 4web-antispy .com
noislant .com 5web-antispy .com
onewinter .ru 6web-antispy .com
pearlpole .ru fastsearch .cz .cc
petsample .ru gaihooxaefap .com
prickheal .ru gigapayfosus .com
priorface .ru ielaithereej .com
rarephone .ru k2onlinesatis .com
rattyduck .ru nethabercilik .com
rawshower .ru politicalpoets .ru
redwriter .ru 1webantivirus .com
robot114 .com 2webantivirus .com
romantube .ru 3webantivirus .com
roundgain .ru 4webantivirus .com
roundhour .ru 5webantivirus .com
roundroad .ru awebantivirus .com
s1system .com awindows-scan .com
scaryloss .ru cwebantivirus .com
secretaxe .ru dwebantivirus .com
shinyrock .ru ewebantivirus .com
shortfeet .ru fivefingers31 .org
slickfilm .ru oldcarsforrent .com
smallbars .ru shiftsoftware .info
softstage .ru ultimatecomfort .ru
soggyzero .ru webpregnantget .com
soreentry .ru 1gig-antivirus .com
soundrisk .ru 20gb-antivirus .com
spellload .ru 2gig-antivirus .com
spicyyear .ru 30gb-antivirus .com
stuckdate .ru 3gig-antivirus .com
stuffstep .ru 40gb-antivirus .com
tangystar .ru 4gig-antivirus .com
telechart .ru 50gb-antivirus .com
validfolk .ru 5gig-antivirus .com
vastdiary .ru 60gb-antivirus .com
videohubb .in bprotectsystem .com
weakimage .ru drugs-prostore .com
wearyyear .ru getdrugs-store .com
worstfuel .ru mypc-services10 .com
wutrinfe .com phpgrinchalina5 .com
yourmoose .ru 8my-antispyware .com
comandav .com navigationquebec .com
iomegaone .com 0web-antispyware .com
labelstare .ru 3web-antispyware .com
lunchscone .ru 7web-antispyware .com
mondayring .ru aweb-antispyware .com
priorsmell .ru img410 .imageshacks .in
roundmaker .ru smartsupersecurity .com
saltyriver .ru webguardyourpc-33p .net
sparechief .ru englishbusinessok .info
spicyledge .ru rs358l32 .rapidshare .com
stallshare .ru securityinternacces .com
subroyalty .ru gestionmunicipal .org .py
tightspace .ru ownload-hosting-free .biz
urbandream .ru 1zabslwvn538n4i5tcjl .com
vastinsect .ru chakra .master-networking .net
vastobject .ru haijeihefoobeekahkohweto .com
wovenshelf .ru