Feed

zeus domains, phishing domains, fraud domains

Posted on September 27th, 2009 in New Domains,Phishing,zeus by dglosser

zeus, fraud,phishing domains to block:

753123 .cn 9049629062 .com
aaic .ru advancement-statekos .cn
aaig .ru a-ha-group .com
aaiv .ru american-avto .net
aclc .ru americanliit .cn
alwaysky .cn aol-update-installer .cn
avrev .info askthegoalkeeper .com
besher .net assdazzxcad .cn
bet7bet .cn bigamadillo .ru
comp-sp .ru bigfreepussy .net
cz8 .ru blghacks .com
deropen .com careyzfunz .com
dibosh .cn cecilzfunz .com
djhbzsv .cn clearrecords .ru
docplus .ru closerprups .com
drbach .pl countrystar .ru
ef2tr .cn deluz666 .info
esenins .cn dirvsdl .co .kr
groov .biz eremenko .biz
harflash .cn euroassistant .eu
i11ate .eu fairydata .cn
i11bte .eu fedas1aa .com
i11ete .eu fedas1ab .com
i11hte .eu fedas1ac .com
i11ite .eu fedas1ad .com
i11mte .eu fedas1ae .com
i11nte .eu fedas1af .com
i11ote .eu fedas1ag .com
i11pte .eu fedas1ah .com
i11rte .eu fedas1ai .com
i11tte .eu fedas1aj .com
i11ute .eu fedas1ak .com
i11wte .eu fedas1al .com
i11xte .eu fedas1am .com
i11zte .eu fedas1an .com
ianndex .com fedas1ao .com
jacarise .it fedas1ap .com
jaha1ws .eu fedas1aq .com
jbha1ws .eu fedas1ar .com
jdha1ws .eu fedas1as .com
jgha1ws .eu fedas1at .com
jjha1ws .eu fedas1au .com
jkha1ws .eu fedas1av .com
jmha1ws .eu fedas1aw .com
jnha1ws .eu fedas1ax .com
jpha1ws .eu fedas1ay .com
jqha1ws .eu fedas1az .com
jrha1ws .eu ghostusers .info
jtha1ws .eu goldbrick .cn
juha1ws .eu goodsovclass .com
juhh1we .com gorodsnov .cn
juhh1wf .com groovemusics .net
juhh1wg .com guild .hut .ru
juhh1wh .com hellzoness .ru
juhh1wj .com homyak777 .cn
juhh1wn .com hostz-150909 .com
juhh1wp .com inviagra .com
juhh1wq .com kanabiolka .net
juhh1wr .com ks357429 .kimsufi .com
juhh1wt .com ledyzpizdik .cn
jvha1ws .eu magicpincer .com
jwha1ws .eu mbtransfer .com
kanever .com my-honey-pet .in
kid1hx .eu nescafelayout .coms
limon4ik .cn noabuseplease .cn
loadir .net nonprobs .com
megobill .cn option-1 .org
mylfix4 .cn p0rt3m .bplaced .net
naifos .biz p0rt3m1337 .bplaced .net
nerinsk .com palmainfo .com
nwac .ru poolballset .com
onivgope .cn posledniy .cn
onulor .cn predposledniy .cn
otdel-k .cn rdr20090924 .info
pm13 .ru richalina .cn
pobedaim .cn robotbobot .cn
proxy5my .cn scanmequick .com
pvdiz .biz sdf388fsh6767fsbb4ba7 .com
pvsex .biz seo-fraud .ru
ripway .com smart-phone-reviews .com
sattor .cn softinfosite .com
sir-t .cn sureameritradex .com
sl111 .net technigoyous .net
sscanner .ru theblogwebsite .com
uh1asu .eu timezero .freehostia .com
v-bonus .ru tissot333 .cn
viphack .ru traffic4stats .cn
vivabot .com updateload .info
vstdrrr .mn updateslive .net
vstdrrr .us uscguard .com
wh0rse .net vadik .jino .ru
wipex .org vampizdecvsemnax .net
wwooww .org videowalha .co .uk
wwwcfg .com wapdodoit .ru
xepace .cn woocasino .com
y11dera .com worldofshore .cn
y11derb .com wwwaaa101 .com
y11derc .com wwwbypost .com
y11derd .com wwwipnot .com
y11dere .com xoxo .slavhosthosting .ru
y11derf .com y11derq .com
y11derg .com y11derr .com
y11derh .com y11ders .com
y11deri .com y11dert .com
y11derj .com y11deru .com
y11derk .com y11derv .com
y11derl .com y11derw .com
y11derm .com y11derx .com
y11dern .com y11dery .com
y11dero .com y11derz .com
y11derp .com ybsportcn .ws
yomobi .ru youloads .ru
zother .net yourhsc .jino .ru

Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

fraud domains, scam domains, rfi domains

Posted on September 24th, 2009 in exploit,New Domains,Phishing,Trojans by dglosser

Sources: www.malwaredomainlist.com, www.avira.com, www.malwareurl.com, and others:

563f235 .cn adicionaamigork2 .webcindario .com
6malwarescan .com affina-groupnet .cn
849jfg .com affina-groupnet .com
888b123 .cn affina-groupsvc .cc
99c342 .cn affina-groupsvc .cn
aaeg .ru aleksandrhomepage .com
add-block-11 .info analytic-manager .org
afedovascevo .com annuity-groupllc .cn
age-free .ru annuity-groupllc .com
akvaryumizmir .com annuity-groupnet .cc
allradiohits .com annuity-groupnet .cn
ame .com .au antispywaretotalscan5 .com
aqobeyv .cn antiviruscontraviro .com
aviraplatinum .com autoonlineadvisor .net
awulyna .cn bufertongamoda .com
barmatuxa .info buteratorionasd .com
bbortixx .info celiminerkariota .com
best-scanpc .net check-threats-online .com
biozavr .ru ciscocommunity .cn
biozov .ru danseavecnousbordeaux .com
bk-teknik .dk dem .real-host .org
btctecnologia .com despnar .idsn .gov .co
ccikudor .cn directory .tatoosite .it
cheapsocks .cn download-secure-files .com
citygateinc .com fallsoftsafety .com
cnn08 .com fastscanandprotect .com
coinheaven .com fastscanandprotect .net
coolvideo4dom .cn fast-scanandprotect .net
counter11 .info fastscan-protect .com
crkeys4cheap .com fastscan-protect .net
cybipmo .cn fastscan-search .com
dark-cherep .com fastscan-search .net
diding .co .kr fastscansecure .com
dogstudio .net fastscan-secure .com
doinw .com fastscansecure .net
doxws .com fastsearchandprotect .com
dumbmua .or .kr fast-searchandprotect .com
dz-evil .com fast-searchandprotect .net
easynettest .com fast-searchandsecure .com
eddxx .com fast-searchandsecure .net
ediyhy .cn fastsearchprotection .com
elku .ru fast-searchprotection .com
elxolionave .com fastsearch-protection .com
ericlapointe .com fastsearchprotection .net
ertubredong .com fast-searchprotection .net
exchangenew .com fastsearch-protection .net
filemarket .net fastsearch-secure .com
fit77 .biz fastsearch-secure .net
freshhost .info fast-systemguard .com
gevyta .cn floattubesonline .com
goldenpost .co .kr flowersshoping .com
gratisweb .com giandomenicolombardi .it
herosima1yet .cn gogyadexchina0ab .cn
idoafy .cn gumertagionader .com
ihrhrhrhereo .cn headlinenews2 .com
imgnode .cn informatica11 .dominiotemporario .com
ipoxyid .cn internetprotectioncheck .com
iuulnta .cn le-king-de-linformatique .com
iuzhejw .cn malware-reaper .com
jyvlayu .cn mega-manager .info
litjnz .cn mega-statistic .com
lpreke .cn mycomputerscanner11 .com
mega-manager .net nuherfodaverta .com
mega-manager .org nulerotkabelast .com
mirctr .org nulkersonatior .com
nuliborkawer .com opolertionfer .com
omega5 .cn past-another-life .ru
online-cnn .com paulmccartneyusa .cn
open-dns .info polanermogalios .com
oqaezfy .cn professionalblackbook .com
org-edu .ru protected-field .com
osujyre .cn protectmyzone .com
otherchina .cn protect-myzone .com
palata666 .info protectmyzone .net
plugidentity .com protect-myzone .net
polygraphy-p .ru protectyourpc-now1 .com
projekt2 .de puritan-groupco .cc
report-cnn .com puritan-groupco .cn
reycross .cn puritan-groupinc .cn
roadone .net puritan-groupinc .com
rucoc .com regency-groupco .cn
rxumohas .cn regency-groupco .com
scan-4-clean .com regency-groupnet .cc
sdrukap .com regency-groupnet .cn
searchdefend .net scambiovisite .tatoosite .it
semihow .com searchscan-online .com
serversen .cn searchscan-online .net
skylife .cn securescantools .com
softsafeness .com securityrundlll .com
sowyen .co .kr securityscantooldirect .com
starcountry .ru securitytestnetonline .com
statscounter .cn smsphonesymb02 .cn
stats-track .com socialbeautytips .com
stiggba .com systemprotected .net
susnoj .cn tecbiosistemas .com .br
suxumzulum .cn theanotherlife .ru
sweetfay .cn tomotorsports .com
tahribat .com topspyfreecheck .com
the-previous .ru tracker-stats .com
tilowgy .cn tracker-stats .net
tqeetazx .cn trust-systemguard .com
trustwarrior .com trustsystem-protect .net
ucuywih .cn updatedownloadcenter2 .com
uhajokalesko .com uplaserdunavats .com
uk4you .cn usaworkinghard .cn
upiumry .cn videoproducedsoftware .com
uzehayb .cn vision-groupinc .cn
volkanboya .com vision-groupsvc .com
vretupak .com vuilertumegated .com
watzthebuzz .com vuilleskomandar .com
webinwild .co .uk vulerdasonatka .com
wett-profis .com windowspcdefender .net
weueai .cn windowsprotection-suite .net
xhtmlweb .com windows-up2date .cn
xouymiw .cn winfixscanner1 .com
ybcyyy .com winfixscanner2 .com
yestour .net winfixscanner7 .com
yh1weq .eu winfixscanner8 .com
ynoubfa .cn winfixscanner9 .com
ynyxeg .cn yourfriskillness .cn
zimzikjun .cn yoursecuritynetwork .com
zpit .pl

New Rogues: rampir .info, gomutescan .com, goneatscan .com

Posted on September 22nd, 2009 in New Domains,rogue antivirus by dglosser

Joshua Long (the JoshMeister) suggests the following rogue domains be blocked:

  • rampir .info
  • gomutescan .com
  • goneatscan .com

These sites will be added on our next update, but you probably don’t want to wait that long :)

Almost 200 hostile domains to block

Posted on September 22nd, 2009 in New Domains,rogue antivirus by dglosser

Sources include ddanchev.blogspot.com, ddanchev.blogspot.com, www.malwareurl.com, and malwaredomainlist.com:

245a34 .cn musicanacional .com
2e7860 .cn obamanewterror .com
9821g9 .cn waitforsunrise .com
iqidoh .cn windows-shield .com
iphotos .ir worldsbestscan .com
iqiatwo .cn xxx-white-tube .com
iqoyxab .cn 10-open-davinci .com
mofa .go .ug emphasis-online .com
ukwirex .ws getrequesttrest .com
dzuqiqaz .cn mediastreamdata .net
jorgan .info megaspywarescan .com
kpaxikey .cn nationaltreasure .cn
magictin .cn tryantivir-scan .com
nbakoff .com virscan-online1 .com
nfovidab .cn watch2010movies .com
novaetc .com colonizemoon2010 .com
ukwirex .com fast-systemguard .net
cnn-bcc2 .com managetelevision .com
darkbitz .com megaspywarescan5 .com
fornistan .cn my-protectedzone .com
hoooools .com my-protectedzone .net
kebike .co .kr myprotectionzone .com
kilogid2 .biz newsoverworldhot .com
lrxsoft .info securedvirusscan .com
nnieqee .info totalspywarescan .com
shaurman .com totalvirusscanc3 .com
33duraka .info xillercollection .biz
adultping .net antimalwareshield .com
confsonort .ru blastertroops2011 .com
fffkkeee .info criticalmentality .com
iwanttowin .cn exceldocumentsinfo .cn
j-vintage .com myprotection-zone .net
kowpa .x-y .net online-systemscan .net
rootscan .info primeareanetworks .com
search890 .com supportyourcountry .cn
uniqstats .net totalspywarescan3 .com
bestscanpc .org totalspywarescan4 .com
bintus-bahi .cn totalspywarescan5 .com
issuenews1 .com tryantivirscanner .com
jahanradio .com warningvirusalert .com
lifecounter .cn worldrolemodeling .com
newsoption .biz worldsbestscanner .com
savemywork .net 005threats-scanner .com
sexualporno .ru antivir-my-pc-scan .com
trucountme .com antivir-scan-my-pc .com
winnerphone .cn awardantivirusscan .com
banner09092 .com becomemybestfriend .com
best-scanpc .com delete-all-virus01 .com
bestscanpc .info delete-all-virus03 .com
beststarwars .cn delete-all-virus07 .com
downloadavr .com delete-all-virus09 .com
ericwanhouse .cn executive-officers .com
itorkalione .com futureshortsonline .com
lionglervoa .com multimediahomesoft .com
materetcaput .it mysystemprotection .com
mymoney-blog .ru mysystemprotection .net
newscnn2009 .com tryantivir-scanner .com
norma-market .ru antivir-scan-online .com
poligraphiya .cn antivirusxppro-2009 .com
usanews2009 .com mysystem-protection .net
willsmithinc .cn tryantivirusscanner .com
4malwarescan .com valueantivirusshop1 .com
batman-comics .cn warningmalwarealert .com
bulkdvdreader .cn warningspywarealert .com
downloadavr2 .com warningvirusspreads .com
greattime2009 .cn windowsprotection-9 .com
green-av-pre .com bewareofvirusattacks .com
happy-winners .de eenadu-epaper .hmsite .net
kingofrings .info remove-all-pc-adware .com
modern-design .cn uptodate-your-system .com
rover-machine .cn warningmalwarealert2 .com
sitemechanics .cn warningmalwarealert5 .com
space2009city .cn winningantivirusscan .com
trucount3005 .com 001yourprivatescanner .com
trytowintoday .cn antivirscanmycomputer .com
01malwarescan .com antivirus-promo-scan1 .com
07malwarescan .com antivirus-promo-scan9 .com
4cleanspyware .com bewareofvirusattacks3 .com
6cleanspyware .com blackwter-cuprumworks .net
7cleanspyware .com firstspywarescannerv1 .com
adeptofmastery .cn power-virus-scannerv2 .com
blue-xxx-tube .com ustintimberlakestream .com
chinafavorites .cn worldsbestantivirscan .com
cncdatanetwork .cn bernie-madoff .coolinc .info
irs .gov .ikbas1 .eu justintimberlakestream .com
irs .gov .yh1wek .eu leading-antivirus-scan .com
noronha .pe .gov .br securedvirusproscanner .com
obbeytheriver .com totalsecurityscannerv3 .com
virscan-live1 .com trustsusyem-protection .com
wheels-on-fire .cn capitalofficeautomation .com
006all-scanner .com festivalamazonasjazz .com .br
009all-scanner .com justthingsyouneedtoknow .com
3removespyware .com windows-protectionsuite .net
5removespyware .com antivirus-promo-scanner3 .com
7removespyware .com leading-antispyware-scan .com
8removespyware .com greatsecuritytestinternet .com
bestwishestoyou .cn secure .web-software-payments .com
hallecodecdivx .com

Huge Update: Over 270 domains to block

Posted on September 18th, 2009 in New Domains,Trojans,zeus by dglosser

Over 270 new domains to block – zeus, koobface, rogue domains. Sources include zeustracker.abuse.ch, ww.malwareurl.com, ddanchev.blogspot.com, and others:

0md .ru 094k .ofspokesman .com
2ijdi .cn 09computerquickscan .com
3eifj .cn 2sdfhs8d7fsh34d8f7s .org
4e4en .com ad-warealert .com
abyvauw .cn agoliopaner .com
adjudg .info bianca .trinityonline .biz
adoimi .cn crusade-affiliates .com
adspromo .cn dercleaner .info
aflamsat .com dotastoc .com
anmast .info dot-soft .net
argier .info dz-hacker .com
atwain .info eljupdate .info
bedash .info fast-virus-scan4 .com
botled .info gotrioscan .com
broths .info gsm .tehnogold .ru
camlet .info hiccanaght .com
caretz .info hiccanaght .net
cuplift .info hqvirusscanner .com
debuty .info hqvirusscanner5 .com
declin .info hqvirusscanner7 .com
devicel .info hqvirusscanner8 .com
dolchi .info hundenhuete .com
extrip .info iantiviruspro .com
fatted .info iantivirus-pro .com
fifthz .info ijnphysght .com
filths .info inflightservice .se
fosset .info inversiontrace .com
freckl .info investmenttooltips .com
fulier .info iron-words .info
gaudad .info jaagobangladesh .com
gelded .info jaesupgght .net
gfr24 .com jaoxiavght .net
ghterwa .com jdreborn .co .uk
haere .info jornalinparcial .com .br
hjc .or .kr jrigutto .com
holdit .info junior-cup .de
hostned .ws justintimberlake2009 .cn
hownet .info justseethisonline .com
ia-pro .com karmandala .com
ihagoin .cn kasonkertub .com
ijobuaw .cn kilibinchek .cn
ikoiwe .cn kopol .com .ar
ikorate .cn kpu .feelmuziq .com
ikyadeh .cn labor .labcei .unimore .it
ikyigy .cn lamorecosmetics .com
inquir .info lastexesite .com
jpchase .cn lilia .jino .ru
kedder .info lllllllll .info
ki2ip .cn lnx .mp3dmultimediastudio .it
kievsk .com locationlite .com
klozep .net magicsuser .net
knivel .info malogrado .de
krapen .info mamasanta .com
ksakksik .cn management-overview .com
kult .si media1950 .cn
kurskoi .com megaspywarescan2 .com
l2707 .com membres .lycos .fr
lafikhex .cn millionmany .org
lamsa1 .com mknjbhyju .exxl .pl
lastexe .com moskaritobanios .com
lavyer .info mravinsky .ru
liifd .cn mt3pvkfmpi7de .cm
litsed .cn museum-mputantular .com
loginup .cn mybetorwager .cn
lsdc .be myprotected-zone .net
luxexe .com myth-busters .cn
mauds .co .uk myvirusscanner .net
mayray .info namethatshop .cn
meyrie .info newwayscanner .info
mg0b .info nordicholidayhomes .nl
miloty .info novoxexe .com
mirstor .cn ntrytodownload .info
n0one .com osaertugern .com
narowz .info pleasagain .com
nevils .info preserveatetowah .com
numben .info primemovier .net
oiluk .net promodelia .com
onclew .info refleksltd .org
orodes .info rosariofutbol .com
outliv .info rvertundfertug .com
pampa .hu ryacleaner .info
penvie .info sangrokwon .or .kr
piisp .com scan-virus .net
pinua .com searchpcguard .net
pittie .info search-protect .net
plamet .info securefileshere .com
plazec .info securityscantoolworld .com
potinz .info securitytoolworld .com
prarie .info shop .kbench .com
psmellc .org sjkmerirtokm .cn
psycho .lv somfaigabor .hu
quoifs .info spacecountry .cn
raught .info sportime .co .kr
rh4df .cn sportshots .cn
rustat .su startexcite .com
sawme .info startexe .com
scarre .info sterlate .com
scrowl .info summertoday .com
seca .ws supertubeworks .com
sighal .info sycamorecanyonschool .com
sigura .ro system-guard .com
silvton .cn systguard2009 .com
skylog .kz tahulavumbak .com
slavik2 .com teacherslounge .cn
slavik3 .com tech44tech .com
solnamu .com theinfectedsurvivors .eu
speen .info toprambler .biz
stampo .info totalunix .net
steepy .info train-modelisme .com
stikkso .com tryantivirusscan .com
subsul .com u0asd9fua0sd8fuasdf .org
swoons .info uiskddcuiretog .com
syukadig .cn uliboktebededmakar .com
tandkof .cn uliondarvasoka .com
tented .info uliya737 .freehostia .com
thingre .com univpancasila .ac .id
ticedu .info urlupdate .info
tithed .info urodinam .net
tobaco .name us-business-shop-2019 .com
trimecs .net usdisturbed .cn
uintoo .ru usesomescents .com
uloumir .cn vin4enso .cz8 .ru
unclin .info virtuozbilnyak .cn
undeaf .info weeeeeld .com
unwept .info wejlk298798324 .cn
usicam .info wificafe-search .com
vklom .com windowspcline .cn
w0rk .biz winspycleaner .com
wg879 .cn woptimizer .com
wiving .info worldbestonlinescan5 .com
wwwzapas .cn worldbestonlinescan9 .com
wzand .info worldbestonlinescanner .com
x83 .ru xcuidflofertun .com
x-pager .com xsconceptgolf .com
xsddss .net yournamequickshop .cn
xyu-bam .cn zellmada .co .cc
zaiki .biz zeromagic .spb .ru
zussia .info zoldtermekek .hu

Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

block teacherslounge.cn, mg0b.info, cnn-bcc2.com

Posted on September 17th, 2009 in 0day,New Domains by dglosser

Please add teacherslounge .cn and  mg0b .info to your blocklists as soon as possible.

Thanks to the “JoshMeister” :

This Google search…
www.google.com/search?q=poll+skinner+won+america’s+got+talent

…brings up this link on the first page of results (which on the surface looks like a legit site that may have been hacked, but who knows)…
www.bgbc .org/wp-content/themes/arras-theme/css/blueprint/blue.php?kevin-skinner-wins-america-s-got-talent

…which redirects to  mg0b .info/go2.php?s=x243

…which redirects to
teacherslounge .cn/go.php?id=2031&key=6c2039a17&p=1

…which as of this moment isn’t redirecting anywhere for me, but is hosted on the same IP as tons of other malware domains (94.102.48 .29).  Presumably this URL will soon redirect to a fake virus scan or something else malicious.

Update: Josh reports a brand new domain to block: cnn-bcc2  .com

280+ scareware domains, harmful domains, exploit domains

Posted on September 15th, 2009 in New Domains,rogue antivirus,sql injection by dglosser

Over 280 new malicious domains added from atlas.arbor.net, www.malwaredomainlist.com, www.tech-linkblog.com and others:

21site .com .cn aaaauto .servebbs .net
39sys39 .cn aaburke .dynalias .org
7oydomen .cn aaliyahicare4u .office-on-the .net
81wordfly .de aamane06 .isa-geek .com
84chatterworks .de aandrioli .servebbs .net
87m .co .cc aarab51 .go .dyndns .org
90snapset .de aartt .dyn-o-saur .com
a2stu .blogdns .com abbassi03 .homedns .org
absbillnow .com afedodevascevo .com
admnqtc .cn agodaynsvcbert .com
afgc .asso .fr alertonbgabert .com
agiaten .cn alliance-marketing .cn
alex-bron .ru antispywarescanner08 .com
alioneferkilo .com antivirusonlinescan03 .com
annunci-motori .it archway-groupinc .cn
antipirat .cn best-topscanner .com
avpersona .net best-virus-scanner5 .com
bellasbar .co .za billing365solution .com
billingsecurepayment .com
benber .info bill-service-365 .com
bezzpaleva .cn bill-solution-365 .com
bigamadillo .cn buhervadonuska .com
biig .net canasta-banditen .de
bill-it-now .com ccpaymentsys24 .com
billmeplease .biz cc-payment-sys24 .com
billmyccnow .com cc-pay-system .com
billsoftpay .com clean-all-spyware03 .com
billsystem-24 .com clean-all-spyware10 .com
bomkyvi .cn comanda-parfum .com
bukake3890 .info continental-systems .com
campani .net core2623 .ingloriousbastardsx .com
cuantosexo .com cr0d .interfree .it
davidbredov .ru dayoneskateshop .com
dirvsdl .or .kr demoscan4free .com
divambee35 .de ecologygreenpc .com
dmitrygaiduk .cn elxolisdonave .com
ebator .com ertubredxcong .com
eleparts .co .kr fast-virus-scan01 .com
embrari-1 .cn fast-virus-scan7 .com
forms .dgpj .mj .pt findbigbearproperty .cn
free-checkpc .com firesaverbest .com
freedom3 .cn forum .mylinkreview .com
free-scan-pc .us fotomasterstvo .ru
gemmakt .cn fuck-celebrities-movie .com
geotisto .info gomasukanahui .com
geroyvoin .cn google-stats008 .cn
git77 .biz goscan-protect .net
goldtraff .info go-searchandprotect .com
good-week .cn groupmomsorgies .net
googie-stats .com hearabout .linksysnet .com
gorodu .com hfju38djfhjdi3kd .cn
goscantech .com hulieropedaso .com
guotao518 .cn ingloriousbastardsx .com
harlingens .com integrity-groupinc .cn
hat77 .biz integrity-groupsvc .cn
hkindoor .com intellectual-vir-scan08 .com
huladopkaert .com intellectual-vir-scan09 .com
hyg12zr .eu iobacebauiler .com
hyg12zu .eu iobacebyuauiler .com
hyu11hec .eu itorkadflione .com
hyu11heh .eu join2623 .softwareordersx .com
hyu11hej .eu kasongskertub .com
hyu11her .eu kolinhopewaqs .com
hyy12cyl .eu kopaeva .servegame .com
idofrosting .com lionglenhrvoa .com
idunef .cn malwareinternetscanner03 .com
ifypeod .cn malwareseradicator .com
igivor .cn malwareurlirblock .com
ijuoxe .cn marketservers .net
indo .home .ro massive-groupsvc .cc
jejucasa .com mega-business-online-shop-2009 .com
kiano-180809 .com mega-tracker .info
kokkosik .com newcellphones-overview .com
korcacity .com new-systemguard .com
krommeknilles .nl new-systemprotection .com
kvumurij .cn new-systemprotection .net
leiayre .cn nrefadoteskfer .com
libesouz .ru nulcdiborkawer .com
lingobest .com numbergatoriosso .com
lionaserduma .com onlinebillingsolution .net
listven .com online-scanandsecure .net
losawzs .eu onlinescansystem .net
medialabs .it online-securescanner .com
mena-groupsvc .cn onlinesoftwarebilling .com
messengerinfo .cn onlinestoresystem .com
milet-company .cn onlinesystemscan .com
mredkizerut .com online-systemscan .com
mtkstrip .co .kr onlinesystemscan .net
mtkstrip .com order-software-online .com
mtkstrip .kr overviewforexbids .com
muvz .sytes .net ovuiobvipolak .com
mvdhiraagu .com paymentsolution24 .com
mylipc .com payment-solution24 .com
myzonedom .ru pay-securesystem .com
nameguards .cn paysoftbillsolution .com
nashi-babki2 .com pebergenufeska .com
neztro .com pencil-netwok .com
noliporedtre .com personaldetailsinfo .com
nosatorabumb .com personalpurchuasesite .com
onpromo .cn prime-groupinc .cc
oretoderfat .com prime-groupinc .cn
oyks .net privacyguardpro .com
pay-cc-24 .com project .usinfolab .net
pcfsupport .com protection-check07 .com
personal08 .com quick-virus-scanner02 .com
photopath49 .de quick-virus-scanner07 .com
poavlonini .com quick-virus-scanner08 .com
prikulamud .com rdafergfvacex .com
prime-groupco .cn redeye-groupco .cn
radioheadicon .cn redeye-groupinc .cc
rdafervacex .com redeye-groupinc .cn
red-wolf .ru retrobaziliona .com
rhrhrhrhereo .cn rss-checkfeeds .com
rjkifj .cn safe-fileshere .com
saint56 .pe .kr santacruzcall .com
searchgroovy .cn saturn-groupco .cn
searra-ditol .cn saturn-groupsvc .cn
shrekmovie .cn sdoosdne774bsd3s83bn .com
sigatrio .org sebastienleabse .com
slavik1 .com securityscantoolguide .com
sms-vkontakte .ru senmu .homeftp .net
sockslab .net sex-and-the-city .cn
softhotspot .com shounbakerpro .info
soft-process .com slyusarenko .kicks-ass .org
spasicomp .com smart-online-shop .com
srvfarino .co .cr smarttech-house .net
step2me .net softwareordersx .com
tiete .com .br street-peppers .ru
tiondapulkat .com styleorient .dnsalias .org
totalgroupinc .cn sunshinecoasttours .selfip .net
total-groupli .cn superb-antivir-scan01 .com
traceback-ip .eu taborfilmfestival .com
tradenton .com tahulavubgmbak .com
turbo-profit .com tour .ivancity .com
ukwirex .info trufficseovciezlocovnert .com
upwize .info tudoaqui2 .xpg .com .br
utionakertu .com uhajokvfalesko .com
validating .ru upinosatoretr .com
volonterkom .cn virtualsecuritycheck .com
warningdt .nm .ru washingtontruth .com
yamagiku .net wertagulionaders .com
yesfreescan .com

Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS-DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Also a trusted source on the WOT-the Web of Trust!

Used by SURBL, MOREnet, and others…

Rogue security, scam, money mule, malspam domains

Posted on September 13th, 2009 in New Domains,rogue antivirus,sql injection by dglosser

Sources include     www.bobbear.co.uk, malwaredomainlist.com, www.trustedsource.org and others:

97kanmm .cn aha-shame-shame .com
arda .or .th antispyware-scanner2 .com
armartshop .com antivirus-fast-scan01 .com
avpro2010 .com antivirus-fast-scan02 .com
av-pro2010 .com antivirus-fast-scan04 .com
bazarish .net antivirus-fast-scan05 .com
bcobanut .cn antivirusfilter-zone .com
bcugusot .cn antivirusonlinescan6 .com
bdekowip .cn antivirusp2010 .com
bdonilix .cn antivirus-p2010 .com
beeves .info antivirusp-2010 .com
bestexe .com antivirus-p-2010 .com
bgsew .com antiviruspro2010 .com
bideqta .cn antivirus-pro2010 .com
bluepadma .com antiviruspro-2010 .com
boomexe .com antivirus-pro-2010 .com
cityfit .ru antivirus-promo-scan .com
clxwe .com antivirusquickscan2 .com
cosovowar .cn antivirus-scanner6 .com
crisis1s .com anti-virus-solution .org
d10gc .cn anti-virus-xp-pro2009 .com
db9qq .cn apelsin4ik .co .cc
derebas .co .cc archway-groupinc .com
dile1 .info arosakilomen .com
drjwv .com artvariety .co .za
droope .info avchecknow .com
ds .xdns .eu avirus2010 .com
ds3gj .cn a-virus2010 .com
eelcd5 .info avirus-2010 .com
eraean .com a-virus-2010 .com
eurccc .cn bervuilendosate .com
exe-por01 .com best-erotic .mcdir .ru
f6e .ru bestexeonline .com
f6y .ru best-live-lottery .cn
f7p .ru bestscanpc .net
f7y .ru bethanyhousetwells .co .uk
f8a .ru bnbsuubtvvsyy4ndvg .com
faites .info boomexesite .com
ffxiname .com boxenstopp .biz
fguyamoz .cn bravemousepride .com
forety .com buhervadoska .com
fpgo .ru bumergonagortaut .com
frantsuz .com bundesregeirung .de
galz177 .net cdmhsxdght .net
gathernet .in csjh .tpc .edu .tw
gd1di .cn dedkeopght .net
gd8bb .cn denpcysght .net
gidromash .cn dimka2009 .real-host .org
googlle .in dkitistnoif .info
gosstroy .com dnsless .gh0sthosting .com
green-av .com dns-systems123 .com
gt5ev .cn doubleclick-rss .com
hd6bb .cn elitedigiscrappers .com
hexexe .com ewaxertulio .com
mofmeta .com expo .ubsc .or .kr
nenastiya .cn extremeanalonline .com
ottopay .cn fear-angels .bissnes .org
prepaider .net fernudarogal .com
q05 .ru fgddfgdgdfg .com
q07 .ru fiminalisimo .net
q1e .ru fragus-v1-1 .cn
q38 .ru frantsuzik .com
q3t .ru free-scan-here .com
q46 .ru gc4fg456hfghfss6sg4 .com
q59 .ru genie-hkfc .com
traiden .org get-safe-files .com
u0e .ru ghlyhwpght .net
u19 .ru gmail-pop3 .com
u9j .ru gobcounter .org
verticalt .com goffin-escrow .com
x0v .ru google .hmsite .net
x1h .ru google-update-checker .cn
x1i .ru gosalerbas .com
x3b .ru go-scanandprotect .com
x6g .ru grabmymotor .com
x6h .ru great-connections .com
x6p .ru green-av-pro .com
x6q .ru guianossacidade .com .br
x7d .ru hardexeworld .com
x8f .ru hexexeterra .com
x8y .ru holding-group .cn
x9v .ru imeyerhome .org
x9w .ru med-payments .org
xb4 .ru megahostname .biz
xb5 .ru moneytransferltd .com
xc6 .ru neweca-payments .com
xc7 .ru new-systemshield .com
xe6 .ru prime-groupco .com
xh9 .ru redeye-groupco .com
xi5 .ru remove-all-adware06 .com
xj4 .ru rude-xxx-tube .com
xj7 .ru saturn-groupsvc .com
xk7 .ru shontecltd .com
xk9 .ru windows-protectonline .com
xm0 .ru windows-systemguard .com
xr3 .ru windows-systemguard .net
xt7 .ru windows-virusscan .com
xt8 .ru windows-virusscan .net
xw0 .ru

250 new harmful domains

Posted on September 9th, 2009 in New Domains,rogue antivirus by dglosser

Rogue security domains,  fake antivirus domains,  some sql injection domains.   Sources include www.malwareurl.com,  s3cwatch.wordpress.com,     www.siteadvisor.com and others:

18xn .com 1a-7294 .antagus .de
1kfie .cn ablegang .com
28zxc .ws advancedpcscanner2 .com
345s .com advancedpcscanner3 .com
5fgh .ws advancedpcscanner6 .com
88mw .com advancedpcscanner9 .com
88wdvd .cn advancedvirscanner3 .com
99boxx .com antivirus-deluxe .com
a3h .at antivirusplus1 .com
a3l .at antivirusquickscan3 .com
a3q .at antivirusquickscan5 .com
a5f .at antivirus-xp .awardspace .us
a5h .at armor-groupco .cc
a5j .at armor-groupco .cn
a5m .at avir-guardian .com
apalet .info av-scan-2009 .com
b5c .at av-scan-2009-up .com
b5r .at av-scanner-2009 .com
b6l .at awareremover .com
b6t .at beachhousename .cn
b7g .at besecuresallpcs .com
b7p .at best-antivirus3 .com
boksx .com best-antivirus8 .com
bqtl .in bestantivirusscanv8 .com
c6h .at bestscanantispywarev3 .com
c7h .at best-virus-scanner4 .com
c7r .at best-virus-scanner6 .com
c8t .at bigtopleads .cn
c9m .at bigtoprocks .cn
c9m .ru boxhidden .com
c9u .at brandschutztechnik-hartmann .de
captum .info cahsbadaboom .awardspace .us
cncn88cn .cn checkvirus-zone .net
dateing .de clean-all-spyware07 .com
dd88567 .cn coolnssecurity .com
dma .ma cosco-groupmain .cn
downbt .com cosco-groupmain .com
dwsx .com datescout .de
enlarg .info download4safe .com
envied .info dynamicfilmmedia .cn
erpeer .info earchsafetyprotection .net
espied .info ebookexpress .de
f6y .at enter .popporn .in
f7p .at entreamis .ma
f7y .at entryservice .de
f8a .at ertubedewse .com
figgle .info goeachscan .com
froday .info go-scansystem .com
gehae .info go-scansystem .net
grumio .info go-searchprotection .com
gssmedia .cn gotomyprotectedzone .com
haerh .info greatestsecscans .com
hardnut .cn greenbillsystem .com
hhbg .in homepersonalantivirus .com
huchinu .com hqvirusscanner2 .com
hyg12zk .eu imjustbored .com
hyg12zq .eu imoviemax .ru
hyu11heb .eu intsecureprof .com
hyu11hep .eu invalda-groupmain .cn
hyu11hew .eu kissfromde .cn
iis .mo .cn larkmedia .ru
ilixyeq .cn livetimesecurityscan .com
ilodux .cn livetimevirusscaner .com
iloefe .cn lowexeonline .com
iluefot .cn martpictureexistence .cn
inb4ch .com mashroomtheory .cn
in-t-h-e .cn meldorgroup .cn
ipqk .in micronetsys .org
jackvn .net movies-hidden-places .com
jaybi .ma mylovsecurity .com
jayfor .com myprotected-zone .com
kbgg .in mysecurityshield .net
kgapofef .cn newpcguard .net
kkxv .in ns37428 .ovh .net
lapsek .info officesecuritysupply .com
lowexe .com pagerank-backlinks .de
mcsmc .org pagerank-submit .de
mnprfix .cn pickknob .info
nqrl .in pictswizard .com
nyusa2a .eu porno-inter .ru
nyusa2b .eu proofdefender .com
nyusa2s .eu protectmycomputernow .com
oufc .in pro-voting .com
pleach .info publicpub .net
polear .info qingchun-meinv .cn
q0j .ru quickhealcleaner .com
q0w .ru quick-virus-scanner01 .com
q1f .ru ranking-charts .com
q1l .ru safetysystem-shield .net
q1n .ru scan4youpconline .com
q3c .ru scanonline-protect .com
q5k .ru scanonline-protect .net
qoeirq .com scan-secure .net
s1p5 .info scansystemonline .com
sallat .info scansystem-online .com
searce .info scantoolsite .com
sexyy .ru scanvirus-online .net
sicyon .info search-systemshield .com
slatch .info secure-systemshield .net
soac .in seyconel .com .br
spelem .info stonek .info
tour6 .info system-guard .net
traffok .cn system-guard2009 .com
u0r .ru tenshy .info
u1j .ru thegreatav .com
u3j .ru towton .info
u3m .ru tsfxzg .info
u3v .ru ultrapc-scan .com
u3y .ru unroot .info
u5m .ru us-windowsupdate .com
u5v .ru vagrom .info
u6k .ru vanni-van .cn
u6n .ru vector-groupfine .cn
u7e .ru vector-groupfly .cc
u7n .ru virusermoverpro .com
u7x .ru virusfilter-zone .net
u8b .ru viruskill2009 .com
u8h .ru vista-store .de
u9b .ru voided .info
u9k .ru vrenutredo .com
uppd .in web-masteru .do .am
x0o .ru windowsguardpro .com
xrbw .in windowsultimate-guard .com
ynaa .in winprotection-suite .net
z360 .net wins-guard .com

Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!

Used by SURBL, MOREnet, and others…

List cleanup: over 3200 domains delisted

Posted on September 7th, 2009 in Domain News,Removed Domains by dglosser

Time to reload your master list: we just finished cleaning up the malware master domain list and removed over 3200 domains.

The full list of removed domains are located at:  http://www.malwaredomains.com/files/removed-justdomains-20090907.txt

Please let us know ASAP if any domains should be added back in.

Don’t worry, plenty of new domains will added over the next few weeks :)