Feed

Blacklist Update: 182 New Domains

Posted on May 30th, 2009 in New Domains,rogue antivirus by dglosser

Lots of rogue antivirus domains, fake security domains, a few facebook phishing domains, zeus domains, and other nasty domains to block. Sources include blackip.ustc.edu.cn, safelab.spaces.live.com, zeustracker.abuse.ch, www.threatexpert.com, and others:

117la .cn about-home-security .com
123aaddzz .cn addedantivirus .com
237yud .cn advanedpromalwarescanner .com
2qtw .cn adware-clean .com
4root .net angantivirus09 .com
597update .com ang-antivirus09 .com
666pz .info angantivirus09 .info
afoi .ru antispyware-engine .com
alfafoxx .com antivirus-components .com
areps .at antivirus-doktor .com
atioqe .cn antiviruspaymentsystem .com
autoscan4 .info anti-virus-professional .com
bestcover2u .cn antivirus-protection-tools .com
bests .at archiveexefiles09 .com
bestspace .be ascertaindiseasepro .cn
brunga .at badwetgirls .com
c0jm .com bestaddedantivirus .com
ccj3 .cn bestcover4you .cn
ccj7 .cn bestcoverforyou .cn
ebnetwork .biz bestfriskviruslive .cn
erewx .info best-protect-av1 .info
exe316 .com best-xmovies .com
exodih .cn cameronzfunz .com
exousyt .cn castsecurityshield .com
feptuaq .cn easybestprotection .cn
fix4scan .info easyfriskdisease .cn
fixscan4 .info easyincomeprotection .cn
flex4scan .info easyplusantivirus .com
gen4scan .info facebook-groups .us
genscan4 .info free-antispyware-system .com
goautoscan .com freeantivirusplus09 .com
gofinescan .com freecoveronline .cn
goflexscan .com freedefense2u .cn
goldbase .be freedefenseforyou .cn
goscanauto .com freemalwarealert .info
goscanfine .com free-xtubes-host .com
goscanflex .com fuck-me-pumps .com
greenbuddy .be getantivirusplus09 .com
hbsfhg .com homenameworld .cn
hieudsjvif .com hot-xmovies .com
hjhj .us infidelirium .com
hvfbecvw .biz litetopdiscoversite .cn
ihackr .com litetopfinddirect .cn
ileron .cn macrosoftwarego .com
indigoline .be malwareconf .info
keyscan4 .info malware-live-pro-scanv1 .com
kirgo .at mediahomenameshoppicture .cn
kkjjuuii .cn mixmediadirect .cn
kkkooo888 .cn mydefense4you .cn
leosex .org myguardforyou .cn
limnos .si mynewnameshop .cn
masevi .net namebuyfilmlife .cn
mbr1 .cn newguard4you .cn
mbr7 .cn newguardforyou .cn
mymarket .be notescan4 .info
newguard2u .cn playe .gaming .cx
niklejo .net plusantiviruspro .com
nmbrx .com porn-hub-xmovies .com
noadware .com porn-movies-central .com
nokel .ru pornotubeonline10 .com
nutpic .at proantivirusscanv2 .com
on65 .cn realantivirusplus09 .com
picoband .be scan4auto .info
ponbon .im scan4fine .info
ppfff .com .cn scanauto4 .info
pzxz8 .com scanflex4 .info
qjdiejs .cn scanmeta4 .info
qsxdeww .cn scannote4 .info
qwr3 .cn securityfastscan .com
redbuddy .be securityonlinesite .com
redfriend .be shock-world .mobi
redir1805 .com smartantivirusplus09 .com
scan4fix .info technologybigtop .cn
scan4key .info thefilmmusic .cn
scangen4 .info thesexybaby .com
silvertag .be top-porn-tubes .com
sulidev .com traffmarketing .com
suxpymi .cn truesafetyweb .com
sweeter .be tubes-xxx-movies .com
vispace .be usednamestore .cn
vzlom-icq .ru winpcantivirus2010 .com
whiteflash .be woaini23456 .com
whitemart .be xmoviedownloads .com
wvg2 .cn xtubes-xmovies .com
wvg3 .cn youraddedantivirus .com
xcbnr .cn your-antivirus .com
xtuberpl .com yourfriskinfection .cn
xxoo888 .cn yourfriskviruspro .cn
y237yud .cn yourguard4you .cn
yospace .be yourguardforyou .cn
zwwderff .cn zvezdu-porno .net

Over 150 new harmful domains to block

Posted on May 26th, 2009 in New Domains by dglosser

Sources include ddanchev.blogspot.com, secuboxlabs.fr, www.malwaredomainlist.com, and malwareurl.com:

056789 .cn 3-antispyware3000 .net
169ol .com 3dd4f6 .beladen .net
1s2d3 .cn add-block-filter .info
4gameranking .com addedantivirusonline .com
5l2o8 .com addedantiviruspro .com
7stepsmedia .net addedantivirusstore .com
aiongamemeca .com allinternetfreebies .com
amoretour .net antispyware-center .com
av-cash .com antispyware-for-all .com
baiduduyou .cn antispyware-systems .com
baidu-opop1 .cn antiviruses-for-all .com
bigbargin .cn antivirus-xppro2009 .com
bigbulkmail .cn antovirus-pro .com
bikpakoc .cn arch-grandsoftarchive .com
intriangle .com asurakiller .go .51 .net
islandtravet .cn baiduybaidbrqlm .cn
ispartof .net bestcountedantivirus .com
ji-u .cn bigpremiumlite .cn
k1l3r .ru bloog-aranking .com
kauitour .com borishoffbibi .ru
kiskecaq .cn guarddog2009 .com
koddavinchi .com justimportant .com
kovsutap .cn kir-fileplanet .com
ku98 .biz litedownloadseek .cn
lafastfind .com litepremiumlist .cn
mbr0 .cn litetoplocatesite .cn
mbr3 .cn livesystemupdates .com
mbr5 .cn mercurylabels .com
mbr9 .cn myplusantiviruspro .com
msgeo .cn my-porn-archive .com
nakvgyuy .cn networkstabilityexamine .com
nan .co .ee nightplayauto .ru
nanotopfind .cn nonfatcarbest .cn
netspond .com onlinebrandsecuritys .com
newsbot2 .com onlinesafetyscansite .com
numbersbulk .cn onlinescanxp .com
officeon .ch .ma onlinescanxppp .com
photo-host .in photobucket-id .net
popyodiw .cn porn-tube-host .com
portalpics .com porn-tubes-world .com
ppddd .com .cn powerful-tube .com
pradotour .com prestotuneup .com
pubmitzvah .cn raymonddelon .com
qwr1 .cn safetyscansite .com
qwr7 .cn sandiiegoexpo .ru
qwr8 .cn scanstabilityinternet .com
rezident77 .ru secure .aquabilling .com
salonpavlina .cz secure-center-antivirus .com
servergloria .cn security-components .com
setuwen .cn securityexamination .com
shhdyb .cn securityonlinedirect .com
shotgol .com securityonlineworld .com
sipcojeq .cn securityscansite .com
su7 .us sekurpaslanmaz .com
sunlux .net shock–world .com
tedixyt .cn socialsecurityscan .com
tns-counter .ru softwaresupport-group .com
trydirectjob .cn spyware-systems .info
tubeontvgl .com stabilityonlineskim .com
usrv03 .com thestabilityweb .com
usrv03 .hk trucount3001 .com
usrv03 .ru trucount3002 .com
videoaaa .net tubez-boobez .com
video-info .info ufj5e1 .chinaw3 .com
wabimp .in uniqviruscleaner .com
wc-host .in unlimitedmarvin .com
wrightcount .com updateserversoftware .com
wvg0 .cn virusremover-2008 .com
wvg4 .cn webbrowsersecurity .com
wvg9 .cn websecuritybureau .com
wwwworldweb .com websecuritypolice .com
xcount .cc webstoresecurity .com
xh-intra .com webtrustrank1 .net
xiaonice .cn wwwsafeexamine .com
xidsasuc .cn xmovies-downloads .com
yourcatfree .cn xxx-movies-central .com
yourliteseek .cn yourelitehosting .ru
zuka .dsl .ge yourlitetopfind .cn
zvezdu-sosut .ru yourplusantivirus .com
Contact us if you want to help us keep the Malware Domain Blacklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names. 
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

List Update Complete

Posted on May 25th, 2009 in Domain News,Removed Domains by dglosser

All domains originally listed in 2007 or earlier have been updated or removed.     Over 7000 domains were removed.

The full list of removed domains is located at:
www.malwaredomains.com/files/deleted_20090524.txt

The new lists are  located at:

www.malwaredomains.com/files/domains.txt
www.malwaredomains.com/files/spywaredomains.zones
www.malwaredomains.com/files/BOOT
www.malwaredomains.com/files/justdomains

List Update: Over 7000 Domains being removed

Posted on May 24th, 2009 in Domain News,Removed Domains by dglosser

All domains originally listed in 2007 or earlier have been updated or removed.   As of last count,  over 7000 domains will be removed.

The full list of removed domains is located at:
www.malwaredomains.com/files/deleted_20090524.txt

The new lists are temporarily located at:

www.malwaredomains.com/files/newdomains.txt
www.malwaredomains.com/files/new.spywaredomains.zones
www.malwaredomains.com/files/new.BOOT

Please test if you can and provide feedback if possible, they will be promoted to active status tomorrow AM.

Gumblar and other Harmful Domains to Blacklist

Posted on May 23rd, 2009 in New Domains,Trojans by dglosser

Many Gumblar domains and other threats. Sources include www.martinsecurity.net, www.threatexpert.com, blog.unmaskparasites.com, and others:

beidzan .com besthandycap .com
bestlotron .cn cheapslotplay .cn
bestwebfind .cn dunyadabiryer .com
betbigwager .cn duplaouroeprata .com .br
carbozy .net ebayauctiondata .com
citi-bank .ru filmtypemedia .cn
crazeyt .com findbigbrother .cn
cutlot .cn findyourbigwhy .cn
d99q .cn greatbethere .cn
dpa-zp .gov .ua homenameregistration .cn
engekurda .de hpc1 .anamai .moph .go .th
fgckeqvvif .com icedenarena .com
findbigboob .cn idhomesearch .biz
finditbig .cn laspzx .linan .gov .cn
gilani .tk litecarfinestsite .cn
hotslotpot .cn litegreatestdirect .cn
hugetopnano .cn litetopfindworld .cn
ibalefo .net lotmachinesguide .cn
i-site .ph lotultimatebet .cn
klaomta .com mediahomenamemartvideo .cn
liteautotop .cn namebuypicture .cn
litecartop .cn nanotopdiscover .cn
pos-kupang .com nua20090515 .com
proxyshop .net patlatbiforum .com
scan4note .com peskostruikaz .com
sciam .ru profit-marketing .net
silzefos .cn superbetfair .cn
theyourbest .cn superlitecarbest .cn
trafiks .cn torrentoreactor .net
vafuiek .com usafastshopping .com
zz-dns .com yoursearchword .org

130 New Domains to block

Posted on May 20th, 2009 in Domain News,New Domains by dglosser

Performed a complete reload of the database, added 130 new domains and cleaned up a few typos. So please let us know if you have issues with this list ASAP.

We are also revalidating domains listed in 2007 in preparation for the May 24-25 maintenance.

Sources include: www.malwaredomainlist.com, safeweb.norton.com, google.com/safebrowsing, and others:

15l2o8 .com abbeynational29 .com
1k .pl abbeynational52 .com
51momo .zx3k .cn abbeynational76 .com
84654323 .cn abbeynational93 .com
bannerads08 .com advanedmalwarescanner .com
bl4ckst4r .cn allmetalnews .com
bolelshiko .com antimalwaremasterpro .com
brrtydwsw .cn antispyware-components .com
ff88567 .cn antivirsystem .com
foxbevip .ru antvirushelpv1 .com
hivids .net autoperformspec .com
homesy .net baidujkljasda .cn
ilovefzl .com .cn bellevuemultimedia .com
index333 .com best-crystal-tube .com
isgorg .ie bestwebscantools .com
kentik .net blogtransaction .cn
kxso .com bonuspromooffer .com
last-visit .com cleancontroller .com
lifenaming .cn confunderload .ru
loshadinet .com dreamlitediamond .cn
m09b .com eocom .freehostia .com
martuz .cn familyofefounders .cn
moulitehat .cn financeimprove .cn
mybigmoney .name free-scan-service1 .net
nowscan6 .com get-mega-tube .com
nsdy .com goldgertdsdf .com
palaceyou .cn hex-programmers .com
rainjukebox .cn iiikaolllxxx .net
resorttravet .cn initpcsecurityscan .com
roomsme .cn kljnoorderwijk .be
roselambda .cn kol-programmers .com
scan4live .info kor-programms .com
scantop4 .com kxc-softwaresportal .com
sdfiiixkoas .net live-payment-system .com
seamodern .cn main15052009 .com
sextds .com malwareliveproscannerv1 .com
siepiwh .cn mxviewworldmy2 .com
smilecasino .cn mycheckdiseasestore .cn
stakeshouse .cn my-cheerful-dns .com
symphonygold .cn nextfreedollar .com
systguard .com nikkicatsouras .net
teamwows .cn ourlittleducky .com
top4scan .com premiumlivescanv1 .com
travetbeach .cn privacy-centar .org
travets .cn privacy-center .org
trekkers .se privacy-tools-pack .com
tubeee .com privacyupdate447 .com
tudorplace .com qualitycollisionbodyshop .com
use-sena .cn redirectclicks .com
vbn5 .cn retroxporntube .com
vexpen .jino .ru revistamollendo .com
vilasse .cn rol-programms .com
vilihood .cn sdfv-programs .com
w1s2d3 .com sgh-topprograms .com
waigua .tw slk-softwareportal .com
wardspace .co .uk startgetaways .cn
woolcart .cn stjude-rawang .com
wowregister .cn superiorinternetsecurity .com
xuyxuyxuy .cn theblueyydns .com
xvydesign .com therenothing .net
youbonusnew .cn uberhax .global-gangsters .com
yxdlq .com weekendtravet .cn
yy12s .com your-guide-online .com
zerocleaner .com zone-searching .com
zuxmash .info zrx .theseagull .info

Contact us if you want to help us keep the Malware Domain Blacklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Block: martuz -dot- cn

Posted on May 19th, 2009 in New Domains by dglosser

The Internet Storm Center reports that  the Gumblar/JSRedir-R dropbox for this trojan, gumblar .cn has been offline,  but  a successor has come online, martuz .cn.

Please add martuz .cn to your blocklists as soon as possible.

luckysploit, fake codec, fake antivirus domains

Posted on May 16th, 2009 in fake codecs,New Domains,rogue antivirus by dglosser

Over 75 new malicious domains to block:

abkzfdilko .com allvirusscannow .com
acplugibgo .com antimalware-scannerv2 .com
aeardyrvgt .com antiviruslivescanv3 .com
afflvwetib .com antivirusquickscanv1 .com
agixtudkco .com approved-payments .com
ahylezyiof .com cdcdcdcdc2121cdsfdfd .com
autobestwestern .cn esecure-federal .com
azm8 .com esecure-federal .net
bastvirusscan .com esecure-federal .us
bbatzkvfha .net facebook-gallery .net
bcoxihfvvh .net federalbanksystem .com
bddanhdnfl .net federalbanksystem .net
bestbillingpro .com federalbanksystem .us
bewfsnfwka .net federalreserve-direct .com
bfcysytdze .net federalreserve-direct .us
bgukeumzwz .net federalreserve-online .com
bhlmxnopqc .net federalreserve-online .us
clipan .net fedwire .usatreasury-direct .net
computerscanv1 .com fedwire .usatreasury-direct .us
coreguard2009 .com fullantispywarescan .com
coreguard2009 .net fullsecurityaction .com
eo2q .cn fullsecuritydefender .com
federalbanks .us greatscansecurity .com
freeforscanpc .com hupersecuritydot .com
hifgejig .cn hypersecurityshield .com
jjxp22 .cn mxviewworldmy1 .com
mtsou .com myfirstsecurityscan .com
muswou .com onlinevirusbusterv2 .com
mysoft-forum .com proantivirusscanv3 .com
pcguardscan .com safeinternettoolv1 .com
rogkadej .cn scanyourpconline .com
rtbn2 .cn securitytrustscan .com
taolu163 .cn systemvirusscan .com
truconv .com topwinsystemscan .com
webinspector .biz totalvirushield .com
wuhwasum .cn totalvirusshield .com
xvirusdescan .com truevirusshield .com
yourpcshield .com virustopshield .com
zapalinfo .info

Almost 200 New Malicious Domains Added

Posted on May 13th, 2009 in New Domains,sql injection by dglosser

Sources include:     www.malwaredomainlist.com, www.threatexpert.com, atlas.arbor.net:

01may2009 .us 1bestprotectionscanner .com
06may2009 .com 1computeronlinescanner .com
123-ptp .com 30newsf .07x .net
15min .it 30newsx .07x .net
17o .org allowedwebsurfing .com
1knews .07x .net antiawarepro .com
1news .07x .net antispy-scan-4freee .com
1xnews .07x .net antispywarepcscanner .com
2qnews .07x .net antivguardian .com
2rnews .07x .net antivirprof .com
4dnews .07x .net antivirusbestscannerv1 .com
5may2009 .com antivirus-online-pro-scan .com
6may2009 .com antivirus-powerful-scannerv2 .com
aaqkweoslz .com antivirus-powerful-scanv2 .com
adimsceibh .com antivirus-protection .us
aermiso .com antivirus-remote .com
bazrvxedfe .net antivirus-xppro-2009 .com
berusimcom .com awardspacelooksbig .us
bestxmovs .info blogsexnakedgirlxxx .com
bklinkov .ru clicksmanagementscom .com
cakpapaz .cn cls-softwares .com
celebsxx .net clubmillionswow .cn
clipsno .com crytheriver .biz
clunk .biz extrantivirus .com
dfgyhk .cn files .load-best-file-arhive .com
djspdsie .cn findlocaljob .cn
dom11z .cn findmorepill .com
durnosy .com free-tube-video-central .net
f9o5test .us freewareseach .com
f9o851test .us fullvirusprotection .com
f9o852test .us gerandong .07x .net
f9o86test .us girlteenxxxfreemov .com
f9o87test .us globalsecurityscans .com
f9o8test .us google-awards .cn
ff7test5 .us google-forum .biz
fra22 .ne hot-porn-tubes .com
g2g1test .us hottestfiles .com
gevitvox .in hot-tube-tuberzzz .net
goworkscan .com imagesrepository .com
hf3y5 .com infosecuritycenter .com
hfriili .me laptop .07x .net
hostnsload .cn lemmydislikes .com
igr5s .com line4scan .info
infodist1 .com liteautobestguide .cn
ingclip .com litetopdetect .cn
ipshougou .com liveavantbrowser2 .cn
jud4g .com mac-videos .com
kerchex .biz members .chello .pl
kerchon .com momentstohaveyou .cn
klawesd .cn mostbeloved-online-magics .cn
kort .07x .net my-fuck-movies .com
l1j1f .com mynewhostinc .com
litefront .cn my-tube-zone .com
litler .info niche-tube-videos-here .net
lkmpmlm .com nikolaevere .com
log4scan .info nkoreawarefare .info
logscan4 .info nonfatautobest .cn
lorexx .cn onlinescanxpp .com
m1m11test .us onlinetube .info
m1m13test .us ophyemaweito .com
m1m14test .us part-owner .net
m1m15test .us porntube4u .com
m1m16test .us porn-tube-movies .com
m1m17test .us puttsoftwareupdate .com
m1m18test .us qqcfwaigua .com
m1m19test .us rapidantivir09 .com
m1m20test .us repair-registry .net
m1m21test .us safewebsecurity .com
mokpo29 .pe .kr sameshitasiteverwas .com
multaka .org scan4zoom .info
nicdaheb .cn scanline4 .info
nipels .ru scanner-av-fast .com
nolagtime .com securedonlinecomputerscan .com
nospam-ns .com securedpaymentsystem .com
odegda .cv .ua securedvirusscanner .com
piratik .biz systemsecurityline .com
pyrisiman .com teenchickas .com
ray4scan .com totalmic .if .ua
regscan .cc totalweightlosscenter .com
renomicji .com trustedwebsecurity .com
sathalf .com tubezzz-boobezzz .net
scan4log .info uniquexsoftware .com
scan4mix .com updateserver .info
scan4ray .com videoporntrue .com
sd9-forum .biz viruscatcher .net
sdjisbp .cn virusinfocheck .com
sehmadac .cn visitcouns .com
soft .88d .cc vrusstatuscheck .com
ssdmmri .cn wantfinest .com
svarkon .ru wasponlinemedia .com
tdsdm .net websitecheck .cn
teyrebuf .cn xoomer .alice .it
tixleloc .cn xoomer .virgilio .it
tixwagoq .cn xssipforum .biz
vavgurac .cn xtube-downloads .com
wanggui .com xtube-xmovie .com
wm5588 .com youporn-for-free .com
www404 .cn yourwindowsvista .com
xpsweb .com zemtewrwww .com

List Maintenance May 24-25

Posted on May 12th, 2009 in New Domains by dglosser

There will be a major list maintenance on May 24th and 25th.

The list may be unavailable on those days.

We plan on removing domains listed in 2007.   The vast majority of these domains have expired or no longer host malware. New domains are created every day, so there’s no shortage of new domains to block :)

Please contact us if you have any questions.