Feed

site delisting: antispywarefordummies. com

Posted on February 25th, 2010 in Removed Domains by dglosser

antispywarefordummies. com is being reevaluated. Please remove from your blocklists until the issue is resolved.

lots of fraud, scam, moneymule domains to blacklist

Posted on February 23rd, 2010 in fastflux,New Domains,Phishing by dglosser

Mostly money-mule, fraud, scam domains added. Also some fast-flux and other malicious domains as well,.

See wikipedia or  f-secure for more information about money mules. Sources include www.malwareurl.com, malc0de.com, and atlas.arbor.net:

70-music .com 3000channelsplus .com
90-music .com alldigitalchannels .com
allmoviesnow .net americanautobargains .com
anti-scamco .net arequipalinda .com
aqaqaqaq .com ares-downloadnow .com
avchecker123 .com aresdownloadnow .com
bear-groupco .ws aresgalaxydownloads .com
bear-groupinc .ws autobargainsnetwork .com
bizelitt .com better-fitness .com
chaujoi .cn bloggingforsuccess .com
djbormand .cn britishsupport .net
dvdxpremium .com citizen-groupco .tw
dvdxultra .com citizen-groupco .ws
e58z .cn citizen-groupsvc .tw
elenailyina .com citizengroupinc .ws
emoore .info classic-groupco .ws
excel-groupco .tw classic-groupsvc .tw
expertbucks .com classicgroupinc .ws
fcrazy .com download .haozip .com
fivejet .com excel-groupinc .tw
fivewjet .com excel-groupinc .ws
fobsl .cn excel-groupsvc .ws
forum .d99q .cn explosioncash .com
fviejet .com file0129 .iwillhavesexygirls .com
gatemx1 .com financial-groupco .tw
gerdas .cz financial-groupco .ws
gethotgames .com financial-groupinc .tw
getpcmovies .com financial-groupsvc .ws
gidrasil .cn firewallprotector .com
goldenmac .cn free-limewire-now .com
greatan .cn getdownloadmovies .com
greenpl .com getlivebasketballtv .com
guardcom getlivefootballtv .com
hadser .cz getlivesoccertv .com
hoploawq .com globalunitrack .com
hotmusicfast .com hypnoticacolectiva .com
i-pspaccess .com imoviedownloads .net
info-bill .com internetdownloadstore .com
isoftwaretv .com kamarilloskukarekas .com
itvdownload .com magicrevenue .com
jioyfu .cz maglavais .ath .cx
jjotqkhqymp .info mahjongmuseum .com
jvoamkvyxv .info market-vision .tw
k-litetk .com market-visioninc .ws
kazz .com maxpaidsurveys .com
khalej .cn measure-groupco .tw
liulanqi .cc measure-groupco .ws
lojasdiko .com measure-groupinc .tw
love2coffee .cn measure-groupinc .ws
mail2book .in medfinanceflow .com
maniyakat .cn miamicaraccessories .com
masterpsp .com millennium-groupco .tw
me-1 .info millennium-groupinc .ws
mevsimevsim .com millennium-groupsvc .tw
moviesforpc .com millennium-groupsvc .ws
moviewiz .net monstersoftware .info
mp3review .biz moviedownloadaccess .com
mypspcenter .com moviedownloadreview .biz
mywarworld .cn moviedownloadsnow .net
nautiqa .com .sg musicplayer-downloads .com
neswbrand .com musicplayercenter .com
nit99 .biz myzunedownload .com
nmalodbp .com netpaidshopping .com
nvbgfy .cz newmovieflicks .com
order-info .com noltvoqmhoce .info
pasder .cz nuris-groupco .tw
pedersii .net nuris-groupco .ws
playtodayss .net nuris-groupinc .tw
proadware .com nuris-groupinc .ws
r7n7 .com patrickcadona .com
rep1030 .co .uk pmxjpigimsdv .info
rep1030 .me .uk qooglesearch .com
rep1031 .co .uk render-groupco .tw
rep1032 .co .uk render-groupco .ws
rep1041 .co .uk render-groupinc .tw
rep1041 .me .uk ricksmusicstore .com
rep1042 .co .uk secure .info-bill .com
rep1042 .me .uk secure .order-info .com
rep1043 .co .uk server .modulo03 .com
rep1043 .me .uk shareazasite .com
ro777 .com success-groupco .tw
rocklamanna .com success-groupco .ws
rolstop .in success-groupinc .tw
safepcav .com success-groupsvc .ws
sowner .info tbxierkoqze .info
sttcounter .cn technotronics .cn
theshipmangroup .com
top4hot .info virus-scannerdot1 .com
udaswy .cz virus-scannerdot2 .com
uijghy .cz virus-scannerdot3 .com
vexmarc .com virus-scannerdot6 .com
vjxzzqobsyz .com winter-smile .com
web-pings .com wordpressquest .com
welovetweet .com wxrzufdrzzn .info
xenonshow .gr xlgjewczfjqx .com
yuferd .cz xpresscanon-yourpc .com
zontrhost .net z130217 .infobox .ru

site removal: raycoachmania.com

Posted on February 22nd, 2010 in Removed Domains by dglosser

Raycoachmania.com has been delisted. Please update your blocklists.

aurora, zeus, phishing, pushdo,rogue domains to block

Posted on February 19th, 2010 in New Domains,Phishing,rogue antivirus,Trojans,zeus by dglosser

lots of fake antivirus, aurora, zeus, and botnet domains to block. Sources include google.com safebrowsing, threatexpert.com, hosts-file.net and others:

360 .homeunix .com adobefreesoftware .com
888viet .com allstaffdefender .com
adobe-config-s3 .net antimalware-2010 .com
adwarepronow .com flashdownloadv11 .com
alt1 .homelinux .com get-spyware-destroyer .com
ameimx .com getantivirusplusnow .com
amt1 .homelinux .com global-a-security .com
anabolic-pharma .com global-b-security .com
antisgetout .cn global-c-security .com
filoups .info global-d-security .com
fireasseye .com global-z-security .com
freecapch .info google .com .analytics .egilkemecun .com
ftpaccess .cc imgyou1 .yourfreehosting .net
fuckbriankrebs .com inter0virus-scan .com
gink22hok .com inter8virus-scan .com
google .homeuni8 .com internet-free-webgames .com
google .homeunix .com just-protect-pc .info
google .homeunkx .com learnwholesalesecrets .com
guards-pc .com max-antivirus-security11 .com
guardwww .com max-antivirus-security22 .com
kinolinks .com max-antivirus-security4 .com
klalkius .com max-antivirus-security5 .com
lexusbestparts .com max-antivirus-security55 .com
loadpartners .com max-antivirus-security6 .com
max-antivirus-security7 .com
max1antispyware .com max-antivirus-security77 .com
max2antispyware .com max-antivirus-security9 .com
max4antispyware .com microantiviruslive .com
max6antispyware .com navy-antispywarea .com
max7antispyware .com pro-2in1-securityh .com
merin22 .mooo .com registrycleanersreviewed .com
mr-tr0jan .no-ip .biz remote-pc-scannerv .com
mysecurityland .com remote-pc1-scanner .com
new-av-scannera .com scan-and-destroya .com
new-system-guard .in scan-and-destroye .com
newsystem-guard .in scan-and-destroyt .com
nokrizis2 .org scan-and-destroyw .com
oduvanchic .com scan-and-destroyz .com
paymentsafety .net scan4virus-onlinea .com
pcsecurity-soft .com scan4virus-onlined .com
pidersli .net scan4virus-onlinet .com
podgribami .org scan4virus-onlinew .com
protectedfield .in scan4virus-onlinne .com
qbzq16 .com secure-plus-payments .com
remotepaybill .com secure .privatesecuredpayments .com
rescuesysupdate .com security-tool2010 .com
safetyearth .net smart-2-antispyware .com
samsonite-shop .cz smart-3-antispyware .com
scriptwb .com smart-7-antispyware .com
secondome .com smart-8-antispyware .com
securepcav .com smart-9-antispyware .com
sl1 .homelinux .org smartvirus-scan1 .com
smart-av-scan1 .com smartvirus-scan3 .com
smart-av-scan3 .com smartvirus-scan4 .com
smart-av-scan5 .com smartvirus-scan6 .com
smart-av-scan7 .com smartvirus-scan8 .com
smart-av-scan9 .com spyware-max-scan2 .com
smart1antivirus .com spyware-max-scan3 .com
smart2antivirus .com spyware-max-scan5 .com
smart4antivirus .com spyware-max-scan7 .com
spy-detectora .com spyware-max-scan9 .com
spy-detectorc .com spywaredestroyerone .com
spy-detectore .com spywaremaxscan4 .com
spy-detectorf .com spywaremaxscan6 .com
spy-detectork .com spywaremaxscan9 .com
spy-sheriff .tk spywareremovalguides .com
spywaremaxscan1 .com stop-virus-server .com
spywaremaxscan3 .com super1antispyware .com
tax .state-nm .com super4antispyware .com
tax .state-ok .com super6antispyware .com
torrentabuser .com super7antispyware .com
tyuqwer .dyndns .org update .ourhobby .com
vasd .info virus-detectora .com
vinefirebot .com virus-detectorc .com
voanews .ath .cx virus-detectord .com
warezaccess .com virus-detectorj .com
webswan .33iqst .com virus-detectort .com
windef2010 .com win6best-scanner .com
winxp7server .com windowsaltserver .com
ymail .ath .cx

The malware block lists here are provided for free for noncommercial use as part of the fight against malware. Please help to keep this site free! Donate whatever you can, all donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgement, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!

Used by SURBL, MOREnet, and others…

100 New Domains

Posted on February 16th, 2010 in New Domains,Phishing by dglosser

Sources: www.malwaredomainlist.com, malwareint.com, abuse.ch and more:

24jd .co .cc accountlogin .saouar-ncsoft .com
384756783900 .cn ads .honestjohn .co .uk
67gr .co .tv advs .rach .com .sg
6ccc .ru antispywarecomp .com
77gr .co .tv antispywarefordummies .com
783456788839 .cn antivirus-live-one .com
aau .bij .pl antivirus-scan-wizarda .com
apsight .ru antivirus-scan-wizardc .com
arber .us antivirus-scan-wizardd .com
avalaz .info antivirus-scan-wizarde .com
bahoy .net antivirus-scan-wizardf .com
banconsol .com antivirus-wizard-d5 .com
bbcnewss .avh .cx antivirus-wizard-e6 .com
bet-portal .com antivirus2010pro .com
brainzzz .net antiviruswizard .org
camforuss .com aop1 .homelinux .com
cddvdwriter .com app1 .homelinux .com
cefincf .com archive .zinnko .be
cement-bag .com av-online-scan .org
comicscaner .cn banginbeckyblog .com
csjbo .info betgrandslam .com
driverpro .org blackhatcodebreaker .com
dsfad .in brutapukamuk .com
e-mule-it .com buy-internetsecurity .com
ecoolwatch .com clickgooglo .com
emule-it .com cnyijiaying .com .cn
farmeset .com compuguard .info
ffsvrs .com connectproxy .3322 .org
frameste .com contentcleaner .com
fraudgedt .com core2687 .downloadarchivex .com
freebest4 .info cp332308 .cpanel .tech-logol .ru
frudget .com downloadserialcrack .com
geewong .org facilsex .com .ar
gotworse .cn for-sunny-smile .com
horosta .ru forhappysex .com
jtmqypcgt .info good-spyware .com
klaikius .com google-analytics .su
kripw .com huliganseres .net
pes2009 .biz inlakehouse .com
raudget .com lehmanbrotherbankruptcy .com
repek .or .kr letitbit .zinnko .pl
securixp .com microsoft-windows-security .com
sjfdhw395t .com mynes-consultings .cn
sneakyboy .com nazarethimaging .com
sulikavan .us protectedsystem .in
textsex .biz protective-program .com
topdns241 .com securityantivirus .com
vinodelam .net useclean-atyour-sys .in
webnomoney .com winxpupdate .org
xx4b83603e .ru zanosi-bablo .com

List cleanup – 686 Domains removed

Posted on February 14th, 2010 in Domain News,Removed Domains by dglosser

686 older domains have been delisted.   Please let us know if any need to be added back.

120 New Domains to blacklist

Posted on February 11th, 2010 in New Domains,Trojans,zeus by dglosser

Sources include malwareurl.com, safeweb.norton.com, zeustracker.abuse.ch:

2high-five .com adobe10-togeam .cn
6623 .info advancebases .com
9down .com alltoponline .com
adwoords .net analiticcontrol .com
aeiconseil .com analiticdirect .com
analytiss .com antivirusacademy .com
artcell .info antivirusbetter .com
badmodels .biz autouploaders .net
bandbmlc .it avondaleacademy .com
blendament .com awesome-dvd .com
blitzbeatz .com awesomeesecurity .com
bothlok .com barrysphotography .net
bothlooik .com beautifull-life .net
bumagajet .net biaobrgeroin .cn
casionew .com bikeweekrallys .com
codiframe .net bluegreenallegator .com
dayprofi .com borshecoins .co .uk
ddwworks .com brothervonmash .com
dnusax .com campinglesbruyeres .com
dometype .com cheapnetdiscounts .com
eccinput .com coloradoshop .info
eometype .com coupons2discounts .com
epcat .net crystal-pro-antivirus .com
estguard .com delete-all-virus-33 .com
fructik .ru ditrnbibarsp .com
gosafezone .net douglasequipment .com
greattaby .com dubaigatehost .com
gsmthebest .ro easygiftgiving .com
hsbcgroup .ru efgjhtieuno .com
huesosam .net extrassecuritynow .com
iframeoff .org fantastictools .com
intleft .net favorit-network .com
iuylqb .cn fetzenflieger .at
j2c-crib .com funtixandcompany .com
jikurakis .com ghiltypacific .com
juanmm .cn grummerhens .net
kelandiciv .net laiserattack .com
korat2 .go .th lake777 .homeip .net
liveiframe .com lightcounter .in
lokosale .com linmaoshuiqing .cn
loribel .fr lozkawodne24 .eu
metafarm .org malegebi251 .21sys21 .cn
metaiframe .org mega-antispywaret .com
mjjia .cn milleniumleaders .com
mobylearn .biz myextrassecurity .com
monstclick .in myshadowofyoursecurity .com
mwrtorks2cv .in newbrother2010 .freehostwebs .com
nazarkebab .pl newesupport .com
ndt .110mb .com now-scan-pc .com
netcarfind .cn oberaufseher .net
new2body .net ok10000 .net .cn
newesafety .com permanentgoodazmark .com
news .21npc .com personalchefbuffet .com .br
ninivekha .net secureantibot .net
rkdefender .eu services .00-com .info
sole-doro .com sevenstars7 .com
somrtype .com viewiframe .org
vsetutvse .net wilkytoolbar .net .in
wwwmeta .org woodstocklandconservancy .org
ydsalon .net

site delisting: totalbarcode.com

Posted on February 8th, 2010 in Removed Domains by dglosser

totalbarcode.com has been delisted and will be removed on the next update. Please remove from your blocklists.

108 rogue antivirus, fastflux, trojan domains

Posted on February 8th, 2010 in Domain News,fastflux,New Domains,rogue antivirus by dglosser

Sources include www.malwaredomainlist.com, atlas.arbor.net, www.malwareurl.com:

a-roi .jp bestesecurity .com
briankc .com excellentesecurity .com
d67c .cn extrassecurityonline .com
dunered .com extrassecuritysite .com
ebazaar .gr feastfashion .com
ibiza .1gb .ua fliegenfischen-lehmann .de
inkqoevl .cn freeshadowofyoursecurity .com
iss9w8s89xx .org goodesecurity .com
iswim .co .il google-counter .com
jupiukl .cz gowestmarriott .com
justinnew1 .com greatesecurityshop .com
justinnew13 .com greatesecuritytoday .com
justinnew14 .com greatesupport .com
justinnew15 .com hjgfw34rwedfgds .com
justinnew2 .com host3 .idfc2 .info
justinnew3 .com householdsout .cn
justinnew7 .com intermillercvt .freehostwebs .com
justinnew8 .com justinnew19 .com
justinnew9 .com justinnew20 .com
kitaydomn .in justinnew21 .com
lopiukl .cz microantivirus-scanner0 .com
maaltsxg .cn microantivirus-scanner1 .com
moncasesdd .in microantivirus-scanner3 .com
newsmeta .net microantivirus-scanner5 .com
nexon .cz microantivirus-scanner9 .com
notproblem .com microantivirusscanner1 .com
oniframe .com microantivirusscanner2 .com
pefero .co .cc microantivirusscanner6 .com
rokobon .com microantivirusscanner8 .com
sanosansar .com microantivirusscanner9 .com
sasheen .com morcnsterpiss11 .com
save-file .org morcnsterpiss12 .com
serchapi .co .cc morcnsterpiss13 .com
ships .ath .cx morcnsterpiss14 .com
shuchinsk .net morcnsterpiss8 .com
smithyguy .com mundopumavirtualx01 .in
spl0a .in newshadowofyoursecurity .com
star2gams .com no-vironyourpc .com
sucipa .com .vc novironyourpc .net
sucipe .com .vc perfectesecurity .com
sucipe .vc porntube2000 .com
sucipy .com .vc shadowofyoursecuritynow .com
sucipy .vc shadowofyoursecurityonline .com
takest .info ships .zapto .org
teams3 .cn ssdfsdfwefwefwe .com
terrrfsd .be suez .services .00-com .info
terrrfsr .co .uk swimwearswimsuit .co .uk
terrrfsr .me .uk the-start2010 .com
tofu-china .com thelivingdeserta .com
tonset .com toborochihosting .com
townwet .com trashiugar .info
ub8 .net ultmanheroes .com
ukmiukl .com .pl universalpicturesspain .es
unioke .info videodivertentigratis .net
uopiukl .cz vseserioznocb .megabyet .net
updatect .org windowsantivirusserver2 .com
veton .biz xxxcamerasexcheap .com
xfilex .info yahoo-account-services .com
yvuxksuk .cn yourbestmarket .com

The malware block lists here are provided for free for noncommercial use as part of the fight against malware. Please help to keep this site free! Donate whatever you can, all donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgement, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Available in AdBlock and WOT-the Web of Trust plug-ins.   Used by SURBL, MOREnet, and others..

Site delisting: checksix-fr.com

Posted on February 6th, 2010 in Removed Domains by dglosser

checksix-fr.com will be delisted on the next update.