Feed

Safe Browsing Alerts for Network Administrators

Posted on September 29th, 2010 in News by dglosser

From http://googleonlinesecurity.blogspot.com/2010/09/safe-browsing-alerts-for-network.html

Today, we’re happy to announce Google Safe Browsing Alerts for Network Administrators — an experimental tool which allows Autonomous System (AS) owners to receive early notifications for malicious content found on their networks. A single network or ISP can host hundreds or thousands of different websites. Although network administrators may not be responsible for running the websites themselves, they have an interest in the quality of the content being hosted on their networks. We’re hoping that with this additional level of information, administrators can help make the Internet safer by working with webmasters to remove malicious content and fix security vulnerabilities.

To get started, visit safebrowsingalerts.googlelabs.com.

Blackhole DNS Update: 234 New Malicious Sites

Posted on September 29th, 2010 in exploit,New Domains,Trojans,zeus by dglosser

zeus, trojan, exploit domains and malicious sites.  Sources include www.threatlog.com, www.malwaredomainlist.com, vxvault.siri-urz.net  (the source for each entry is always in the domains.txt file)

Note: as discussed in an earlier post,  entries  in the zone file containing an underscore have the line appended with “check-names ignore;};”  Please let us know asap if you encounter any issues.

smal .ly lapivyg .co .cc
kjbdr .in leqocyv .co .cc
lixz .net lungkorea .org
onac .com mdbyzbk .co .cc
poxz .net moneymader .ru
zayif .in mvhjsssdf .com
iijas .com okelkas .co .cc
plimd .net opperlant .com
rotid .com opriors .cz .cc
devozz .com paintmarch .ru
dimeyes .ru safeernet .com
dwnl4dc .in sqewnbiol .com
ebidas .com swalltiem .com
flawere .us swalltmie .com
kkwxe .info tunolum .co .cc
kssdeq .com wakihel .co .cc
llsua .info bisexplanet .eu
mg-bern .ch bulletprof .net
parkbox .ru coderstrin .org
pctutu .com cripesload .org
qawfer .com fajo3palos .com
qopps .info imagelotop .com
sudcom .org loveimage5 .com
tarlie .com luinstra-vt .nl
tkyjrti .in manobimage .com
bishop9 .biz manop5ikal .com
decel .co .cc matches-re .com
dimsmoke .ru migfoto .com .br
dogarmc .com mila-sp .com .ua
flikade .com navemestre .com
grauss9 .net skachfiles .org
greatrow .ru suavis .jino .ru
hjirtey .com swalltijme .com
ipoprest .ru thesokwrld .com
itellio .com voxinghelt .com
lolnetss .tk choseyourway .in
mnioers .com dasimagesad .com
nelgoon .com fickenvideo .com
novtepp .com flipharborj .com
ocaca .co .cc joetracker .info
opeltom .com julia-sp .com .ua
pozade .info leenamasi .cz .cc
rvk .jino .ru marrylandwm .com
softlie .com nadya-sp .com .ua
stayfix .com popunder777 .com
telegraf .by priztersmon .com
xeriozt .com qopponline .info
24hkgame .com theloadarea .com
cargon .co .cc trokonline .info
crosspeck .ru zambiatodes .com
dizzydude .ru barbour-club .com
hghkallie .ru crowledblade .com
iontells .com dailyinqilab .com
juitwell .com face-looking .net
karlik .co .cc finwizonline .com
letyiurt .com getsmartdata .com
lokrob .co .cc google-count .net
marchskip .ru human-nature .org
newqopp .info imagenabotam .com
nojtul .co .cc loadairtools .com
opentroc .com marina-sp .com .ua
oxobet .co .cc mediafullred .com
postbbnk .com mediafullune .com
qoppnow .info megadrive220 .com
rotseven .com newloadworld .com
soplosap .com offroad-zone .com
suppteam .net pinotblogger .com
swallime .com smashingapps .com
swalltie .com thefilesarea .com
systime .asia vades-loadec .org
tewlay .co .cc valdec-lains .org
vlitrols .com adobe-update20 .tk
we-top .cz .cc gambolsfhsw5 .info
allnations .jp girlfriend-re .com
cirykaq .co .cc globalrevealx .com
dabkzms .co .cc kakansasosat .info
everstijk .com mails4u-pa .com .ua
facealbum .net my-freewebstat .ru
fegunyd .co .cc myrefillscript .ru
felkald .co .cc notes4u-pa .com .ua
genidoz .co .cc quickfilesinc .com
gfhhkjk .co .cc superdatainfo .com
hooksleva .net vk-info-a .jino .ru
ladies-re .com

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

299 New Malicious Sites to Block

Posted on September 26th, 2010 in exploit,fastflux,New Domains,rogue antivirus,zeus by dglosser

dns trojan domains, rogue domains, dropper domains, exploit and other harmful domains. Sources include blog.dynamoo.com, www.abuse.ch, www.malwaredomainlist.com (the source for each entry is always in the domains.txt file)

Note: as discussed in an earlier post,  entries  in the zone file containing an underscore have the line appended with “check-names ignore;};”  Please let us know asap if you encounter any issues.

vviv .ru bellepetunia .com
zoma .ru celeb-o-rama .com
babac .ru dertentazner .com
qlepa .in doctorrteeny .com
166m .info happyjuniors .com
2211a .com httpdsconfig .com
am-way .ru httpssresrun .com
burais .fr infinitelivin .tw
l1nn .info ralaxanteras .com
sedr .info rapsvsvsn212 .net
ullte .com scaner-ac2 .cz .cc
vaqp .info scaner-add .cz .cc
ymso .info scaner-all .cz .cc
dsvbaiv .in service-stroy .ru
httpsxy .in smileyarcade .com
inmoble .ru smileyforyou .com
jastli .com 0day-exchange .com
sedrs .info beaucesansfil .com
wetbit .com bestfincareer .com
winavm .com bestviagranow .com
wordq .info counterslocal .com
xdsfa .info funbuddyicons .com
1520015 .com scaner-acea .cz .cc
algimas .com scaner-aced .cz .cc
all-side .hu scaner-acef .cz .cc
all4roof .ru scaner-aceh .cz .cc
dcquick .com scaner-anti .cz .cc
drugsab .com scaner-dual .cz .cc
httpsbee .in scaner-fast .cz .cc
httpsget .in scaner-ferw .cz .cc
httpssun .in scaner-high .cz .cc
jackcond .ru set-guard44 .co .cc
minirank .ru smileycentral .com
pure-air .ru syanmachinery .com
shiorey .com thesmileyblog .com
sinpoor .com trafficforalz .net
smarttds .ws web-traffic .cz .cc
topckit .com webmovieworks .com
yanefsi .com yangzhou-etdz .com
zakonoma .ru beautifulakota .com
adddzone .net bestfilesmovie .com
addonrock .ru cartonlinesite .com
aeroventa .ru funwebproducts .com
auto-wash .ru ripforvirus1 .co .cc
bilmedic .com ripforvirus2 .co .cc
bioloom .info ripforvirus3 .co .cc
bizuwafot .cn ripforvirus4 .co .cc
bostoca .info ripforvirus5 .co .cc
bromedic .com ripforvirus6 .co .cc
bu19i3st .com ripforvirus7 .co .cc
caumedic .com ripforvirus8 .co .cc
chem-prom .ru ripforvirus9 .co .cc
crosswall .ru scaner-ferda .cz .cc
erterzan .com scaner-gammi .cz .cc
gonepaint .ru scaner-hello .cz .cc
httpsgate .in searcharrogant .org
httpslink .in siteapartments .com
httpsload .in thisiscrazy1 .co .cc
httpsport .in thisiscrazy2 .co .cc
httpssite .in thisiscrazy3 .co .cc
httpszero .in thisiscrazy4 .co .cc
jezuqurih .cn thisiscrazy5 .co .cc
ludixoqif .cn thisiscrazy6 .co .cc
netspart .net thisiscrazy7 .co .cc
onlline .info thisiscrazy8 .co .cc
osen2010g .ru thisiscrazy9 .co .cc
petrjklo .com casinodirectnet .com
qvodabc .info google-stats49 .info
riqulayux .cn google-stats50 .info
sheathing .ru java-install .com .br
skinphan .com quickfilmonline .com
troknow .info ripforvirus10 .co .cc
vegipehob .cn ripforvirus11 .co .cc
westrest .com ripforvirus12 .co .cc
whiptone .com ripforvirus13 .co .cc
xeyaskas .com ripforvirus14 .co .cc
yivopivug .cn ripforvirus15 .co .cc
zalevaka .com ripforvirus16 .co .cc
18jlurp .co .cc ripforvirus17 .co .cc
999538945 .com ripforvirus18 .co .cc
alienradar .ru ripforvirus19 .co .cc
anadoctor .com ripforvirus20 .co .cc
bbkzbks .co .cc scaner-access .cz .cc
bojumeh .co .cc scaner-ferdad .cz .cc
boronbolt .net scaner-ferwae .cz .cc
fdsdorgan .com thisiscrazy10 .co .cc
fiendemed .com thisiscrazy11 .co .cc
headboong .com thisiscrazy12 .co .cc
hezhexh .co .cc thisiscrazy13 .co .cc
hezhlhe .co .cc thisiscrazy14 .co .cc
hezlhez .co .cc thisiscrazy15 .co .cc
hezlhhh .co .cc thisiscrazy16 .co .cc
hheuhhh .co .cc thisiscrazy17 .co .cc
hhezhe3 .co .cc thisiscrazy18 .co .cc
httpsquer .com thisiscrazy19 .co .cc
hutahhe .co .cc thisiscrazy20 .co .cc
hzthezh .co .cc thisiscrazy21 .co .cc
mmmbkbd .co .cc thisiscrazy22 .co .cc
mp3fiesta .com thisiscrazy23 .co .cc
myupdates .biz thisiscrazy24 .co .cc
qwedffh .co .cc thisiscrazy25 .co .cc
rezrett .co .cc thisiscrazy26 .co .cc
sandpimed .com thisiscrazy27 .co .cc
seowindow .net thisiscrazy28 .co .cc
tile-world .ru thisiscrazy29 .co .cc
trokblog .info thisiscrazy30 .co .cc
xodowud .co .cc thisiscrazy31 .co .cc
zaskupalt .com thisiscrazy32 .co .cc
3094903020 .com thisiscrazy33 .co .cc
3405090345 .com thisiscrazy34 .co .cc
airways-pro .ru thisiscrazy35 .co .cc
bapharmacy .com thisiscrazy36 .co .cc
bluefincom .com thisiscrazy37 .co .cc
bonutilite .com thisiscrazy38 .co .cc
casinonssd .com thisiscrazy39 .co .cc
dias-design .ru webscasinoslucky .ru
doctorrnes .com xxxvideo-dpiy .cz .cc
httpconfig .com xxxvideo-eyyc .cz .cc
largessff .info myupdateswindows .biz
quintivolt .com smileysinamerica .com
scaner-h .cz .cc supermediavision .com
servespring .ru worldtruejournal .biz
slikanddik .com aaarrr .bulletprof .net
smileybuzz .com onlinewatchmovies .net
socmdoctor .com trustposition22 .co .cc
trokhotel .info trustposition23 .co .cc
upyourpics .com desktopsecurityorg .com
window-tech .ru popularscreensaver .com
wrtumenter .com scaner-ferdadadf .cz .cc
345image456 .com security-power30 .co .cc
aestextiles .com security-power31 .co .cc
barrhavenbia .ca security-power32 .co .cc
chatsmileys .com security-power33 .co .cc
elecaedu777 .com security-power34 .co .cc
esupermedia .com security-power35 .co .cc
freefdsvoip .com security-power36 .co .cc
mountain-air .ru security-power37 .co .cc
office-ready .ru security-power38 .co .cc
poragraph .by .ru security-power39 .co .cc
scaner-ap .cz .cc smileycentralsucks .com
scaner-as .cz .cc amaury .nightparties .com
scaner-go .cz .cc as08as08s098as09a80s .ru
scaner-il .cz .cc camping-dwingelderveld .nl
scaner-it .cz .cc bestofvideos2010online .net
setyupdates .com desktopsecurity2010soft .com
smileyssuck .com desktopsecuritysolution .com
smileysucks .com myblindstudioinfoonline .com
trafix111 .co .cc securitysoftwaretechltd2010 .com
zactrs778zc .com qsbjlsdjlkb245jhbj44dklasbkb .com
amigosdirect .com

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Visualizing the Hosting Patterns of Modern Cybercriminals

Posted on September 25th, 2010 in Domain News by dglosser

Nice article on SANs:

Andrew Hunt – Visualizing the Hosting Patterns of Modern Cybercriminals

For example when seed data pulled from Malware Domains is correlated with passive DNS and ASN data, then visualized, it is possible to see how the majority of the authoritative nameservers are hosted in the same network block. This dependence indicates an investment by the aggressor into a particular hosting company and can provide an effective network-level block at relatively low cost. As always, be aware of potential collateral damage when blocking a network portion that may also contain legitimate IP hosting space.

Site Delisting: froot.nl

Posted on September 24th, 2010 in Removed Domains by dglosser

froot.nl has been delisted and will be removed on the next update.

240 New bulletproof, zeus, c&c, exploit domains

Posted on September 23rd, 2010 in bulletproof,exploit,New Domains,Trojans,zeus by dglosser

Note: as discussed in an earlier post,  entries  in the zone file containing an underscore have the line appended with “check-names ignore;};”  Please let us know asap if you encounter any issues

zeus domains, exploit domains, c&c domains,  bulletproof and otherwise  domains categorized as malicious by amada.abuse.ch, vxvault.siri-urz.net, www3.malekal.com and others (the source for each entry is always in the domains.txt file):

10babbleset .net abodeflash-vol51 .co .cc
14centixo .net alimonyforces .com
21blogpedia .net allartsonline .com
22roota .net analitycscook .com
28rifftune .net analitycscord .com
2way2010 .info analitycscrack .com
34050690693 .com analitycscredit .com
399hansotar .com analitycscrime .com
985465 .net analitycscry .com
allnetart .com analitycscup .com
ankravsrc .lv animalsexporn .in
antispybase .com antimalwaresecurity .net
antispybase .net antispyprogtool .com
antispyeye .com antispywarepc .com
antispyeye .net antispywarepc .net
antispywork .net antispywareprog .net
artph .com antivirprime .net
atsopanol .com antizooxxx .co .cc
autoandarts .com artcooldesign .com
av-fox .net artrockdisplay .com
avfortress .com artscarparts .com
balancview .org artscraftsstudio .com
bastocks .com artsgallerysite .com
bauhath .com asiaartsonline .com
bbonusworld .com auctionhouseart .com
bcdfinder .com barcalys-trial .com
bdemkrhbfds .com barcalys-trial2 .com
besthomfdok .com bestartcenter .com
bfscooby .com bestartsnews .com
bigbendarts .com bestbodyarts .net
bigpoolarts .com bestcityarts .com
bigroadarts .com bestmalearts .com
bka .im bestmultiarts .com
bloglabel .net bgroundplatt .com
boundtube .net bigartsdirect .com
bourgum .com binuser .fileave .com
braineurons .com blackbeautyart .com
bricesearch .org botanicalgardenart .com
burrova .com brainboxonline .net
buyexplaine .com brightsphere .net
carheavens .ru casinosgoldscashs .ru
catbodyart .com casinosgoldsgames .ru
cazino-game .com centralasiaarts .com
ceonter .com cheapcyberarts .com
ceryxlt .com doctor5antivirus .com
cip-soft .com dvdfirmwareupdates .com
crazymasya .com dynamicnetwork .ru
cybernis .com ede76c .reggieprotector10 .com
durnosy .com goldspowersbetss .ru
dyr .medicnz .ru greatsokdfite .com
fastlouprim .com host66-flash .servehttp .com
forsett .com hottesttubemovies .com
forthemore .com ipchecker911 .com
froot .nl jeybicufuic .serveftp .net
gfguhsdig .com jipiqunimujumeja .scrapper-site .net
gnomsmotor .ru joinmediafiles .com
grings3 .cz .cc keygen .serdb01 .com
herrrtisof .com microantivirus-2009 .com
hhehshe .co .cc msnsolution .nicaze .net
imnet .us mysamsungapps .net
inlovebot .com net-master55 .co .cc
isoburn .in onl-for-fils .org
jadesquadg .com orygecpizdat .info
jetmember .net potterspoultry .co .uk
jhasrte .in proposta .hotmail .ru
jimkey .in realloungecentral .com
jmlklgjxt .in red-tube-video .net
jttjurop .in scaner-ac1 .cz .cc
junefreeporn .in scaner-acer .cz .cc
kirixi .in scaner-bcdercdc .cz .cc
kiwmvqjv .in scaner-bcderrwe .cz .cc
kjmrxjlx .in scaner-bcderrwesf .cz .cc
kjsagtsadt .in scaner-bcdgdffrs .cz .cc
kmqwe .in scaner-cio .cz .cc
kurva .kilu .de scaner-clouds .cz .cc
lejimer .co .cc scaner-coast .cz .cc
liruna .com scaner-demon .cz .cc
medicnz .ru scaner-dir .cz .cc
mmmbsbt .co .cc scaner-dro .cz .cc
mollpointer .com scaner-ear .cz .cc
monaco-auto .com scaner-eclips .cz .cc
moykamin .com scaner-eee .cz .cc
mygabfly .net scaner-end .cz .cc
myqopp .info scaner-enter .cz .cc
outgtrf .in scaner-idea .cz .cc
pokagih .co .cc scaner-internet .cz .cc
searchannoyed .org
qoppstore .info searchchatup .org
scaner-do .cz .cc searchcloudy .com
scaner-e .cz .cc searchclumsy .com
scaner-ed .cz .cc searchcolossal .com
scaner-ex .cz .cc searchendrun .org
scaner-i .cz .cc searchfertile .com
scaner-ip .cz .cc searchfierce .com
sdehaacsfds .com searchinhard .org
searchandsx .org searchinhure .org
searchangry .org searchinzone .org
searchbent .org searchlouinc .org
searchcold .com searchpieups .org
searchdirty .com searchpotinc .org
searchdisup .org searchreturup .org
searchdull .com searchsiminc .org
searchdusty .com searchtensup .org
searcheager .com searchtiesup .org
searchequal .com searchuserbar .org
searchinatl .org stable-defense33 .co .cc
searchinpat .org stable-defense40 .co .cc
searchjolly .com supermovieinfo .com
searchporit .org themoviecontent .com
searchsutes .org thereisnoss .biz
searchwilup .org tqpnqvebjkovok .net
sogston .com trafficforalz .org
supermcun .com truemediawork .com
supersocine .com trustedantivirus .com
tisheedesh .com unitedwestandmow .net
tro0l .com updatepcprotection .com
twitloop .com updatesdownloads .com
uilenowst .com updatespatchinfo .com
xhaito .com websextrasbetss .ru
zexxcom .com yourmovieupdates .com

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Site Update: 1818 Domains Removed

Posted on September 21st, 2010 in Domain News,Removed Domains by dglosser

1818 Stale or inactive domains have been removed,  list is here

Time to refresh your blocklists….

Site Delisting: obkom.net.ua

Posted on September 21st, 2010 in Domain News,Removed Domains by dglosser

obkom.net.ua has been delisted and will be removed on the next update (scheduled for tonight)

Long-lived (Immortal) Malware Domains

Posted on September 19th, 2010 in Domain News by dglosser

We are continuing to revalidate domains on the dns-bh list. These are domains which were identified as malicious  anywhere between 90 and 360 days ago. but according to google safebrowsing, are still actively involved in badness.

long-lived-malware-domains.txt

Analysis  of the hosting and registrars of these “immortal” or “Methuselah” malware domains should prove interesting.

Huge update: 379 new malicious domains added

Posted on September 19th, 2010 in New Domains,zeus by dglosser

379 malicious sites containing amanda c&c domains, zeus domains, and other malicious domains. Sources include blog.dynamoo.com, amada.abuse.ch, (the source for each entry is always in the domains.txt file):

k0x .ru zrefkilops .com
1-aa .com bestviewbar .net
gnfdt .cn definsearch .org
pp24 .biz dhjcchvdbvf .com
pw2 .info eefjhbdefds .com
trazi .in eurocararts .com
zabil .in findactions .net
cuert .com findbackdup .org
dfill .com findeupbant .org
gumile .in findlineinc .org
gvist .org findnextinc .org
hotgas .ru fineartsbay .com
kfppp .com genreystick .com
vstils .ru getcoolarts .com
xsbot .net glamorstyle .com
xyyds .com goldfireart .com
403403 .net google-stat .org
boryan .biz gotsuspended .cn
bytrin .com greatwebart .com
cebere .net horsegovena .org
cebere .org hotyoungart .com
ceterz .biz iiajhvdifds .com
craken .biz loveableart .com
firmar .org mcdldrgmfds .com
freel .info mydigispace .net
freev .info mynewspages .com
ftpshki .cc netmegasite .net
gabbug .net nextartshow .com
geerht .com ns3emeringo .com
livedd .com oiascwnofds .biz
morert .com oiascwnofds .com
mvk .net .ru pdejadcpbvf .com
mynpad .com picturespan .net
nvk .net .ru portalafter .com
sdalege .ru portalagain .com
updsys .net portalangry .com
utwest .com pro100-soft .net
angelx .info protectguru .com
awejkgf .com riaijldrbvf .com
checkege .ru statxonline .com
daporch .com texticearts .com
deanard .com themorearts .com
deltav .info therusharts .com
diashka .com theyoyoarts .com
erityng .com cochargearts .com
feearts .com commonmanart .com
gerborn .com deepbluearts .com
gevaeus .com designfanart .com
giselin .com dvdvideoarts .com
hackzona .tk eveinoutfind .org
husseta .com factoryofgood .ru
indep29 .com forceclub-us .net
installs .tv greatdogsart .com
kamonth .com hackhound .org .uk
kathell .com hhhopertiny .info
kingdol .com ilovelasvegas .ru
koralda .com liteinsearch .org
lambrie .com megaartstore .com
lantzel .com moneyforarts .com
leyeshv .com monoartglass .com
ordclub .com myartsportal .com
otvetege .ru newsdownloads .cn
pastsby .com portalalmost .com
proobizz .cc portalalways .com
raifind .org portcityarts .com
roxenda .com privathosting .eu
safarel .com realvideoart .com
theyayo .net richphotoart .com
traxbax .com sporthillart .com
vkxstile .ru strincsearch .org
xcorps .info superwebarts .com
asmatrin .com thaionlinego .com
dallynews .cn the-goodlike .com
darksiti .net thelatinarts .com
ddumasz .info traffic-fans .com
faststat .biz truebluearts .com
findreup .org ultrawebarts .com
free-pac .net useadssearch .org
freeyuof .com cyberfinearts .com
fslandvn .com easy-answers .info
hitssock .com euarabsmeconf .com
infindup .org fanartsonline .com
lj1i16b0 .com fastprosearch .com
lloydstsb .bz godigitalarts .com
myskimba .com gographicarts .com
narmedic .org greatblackart .com
newgsite .com greatmovieart .com
nikranox .org hipartsonline .com
onlinekq .com investbabaika .com
pcf-osow .com lanxiouspower .com
preflopp .com livingtraffic .com
ptessnet .com loveartstudio .com
reservus .com marinafineart .com
rsite .net .ru motorcityarts .com
secsslup .com mynextfineart .com
server90 .org netoffshorego .com
spys .fvds .ru odistanyachts .com
statcount .cn portalaccount .com
stylysxvk .ru portalagainst .com
suerbald .com portioncenter .com
talkwire .net realdogonline .com
thepchen .com rubbikcube .net .in
thezelle .com search-static .org
topquasi .com strongantivir .com
tsbd1984 .com supercarsinfo .net
weaponx .info superlegoarts .com
webvk .net .ru supermicroart .com
amntasjhg .com theopiaonline .com
dottasink .net thephotodrive .net
dujdinganx .in thestatserver .com
dwnld0020 .com troliatakuyut .net
estatedog .net ciougmxehgjesk .com
fantasyv .info citingsecurity .com
fantasyx .info edrichfinearts .com
finderaco .org faunafloraarts .com
finderats .org floraartschool .com
finderdir .org folkartsonline .com
finderhal .org fornaticumlili .biz
finderinf .org hiddenglenarts .com
findermem .org horseblogovena .org
finderolm .org hosting-backup .org
findersta .org hotporncatalog .com
finderunt .org legovisualarts .com
finderyel .org mainstatserver .com
findesten .org mediadynamicgo .com
findindbi .org newchannelarts .com
findinsid .org petrenckolekha .com
findupsot .org photovideoarts .com
flyairart .com realartsonline .com
francisx .info thedigitalarts .com
gvistello .net toyworkscentre .com
hhezhez .co .cc traffic-photos .com
inningter .com auto-russo-trah .com
ketsymbol .com club-world-auto .org
leimop .net .in cpucardioholder .com
lineage-4u .ru crystalriverart .com
lmailing .info firemountainart .com
melankolik .us freesurrealarts .com
mono-arts .com greatartsschool .com
mylodka24 .net greenspringsart .com
netromart .com hercegovinablog .org
nichtadden .in highway-traffic .com
photopush .net horsebloggovena .org
puppyarts .com italianbestarts .com
raincfind .org megagraphicarts .com
read-arts .com nerukabbcompany .com
sec-stats .org networdiscoungo .com
suaverich .com nextgraphicarts .com
ttrefovic .com realartsjournal .com
vkhost .net .ru successfullarts .com
worldhili .com thefunny-world .info
55echosend .com coolsecurityscan .com
acunetxweb .net easysecurityscan .com
atringroup .com filesecurityscan .com
coolcatart .com firefightersfire .net
divambee35 .net floraartsacademy .com
enggraduat .com flowerartsonline .com
engsummary .com google-server42 .info
finderexup .org greatartsacademy .com
findextinc .org greencomputerart .com
findexttab .org nativeartscrafts .com
findincese .org naturalbeautyart .com
finefanart .com nowisisdudescars .com
francecore .com peopleartgallery .com
gamble43you .in planetsaturnarts .com
getcanfind .org ppobhkmn598d4k83 .com
govenablog .org superartsgallery .com
hello-arts .com the-funny-world .info
homeartnet .com theeasy-answers .info
homesiteuk .com whereisdudescars .com
inrealfind .org youngirlsactions .com
maximclock .com chineseartsonline .com
metin2blog .com clicksecurityscan .com
myeasyarts .com clickwebanalitick .com
mylivetune .com grand-vitaro-club .com
netlinksgo .com greatflashstudies .com
ozfinearts .com naturalbeautyarts .com
portalable .com superartsfestival .com
portalacid .com thefriends-place .info
sportmybet .com thevipbuyconterst .com
tas-club .co .cc orientalartsonline .com
the-secure .com planopetroleumteam .com
thefanarts .com picturegraffitoarts .com
theflowart .com ptf .messenger-update .su
thenetarts .com revolutionartonline .com
twinvestor .com millionsincomingfrom .biz
uptfindnex .org thephotos-galleries .info
vyebyvglaz .com satelliteartsfestival .com
winterleaf .org client158 .faster-hosting .com
zettapetta .net

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.


Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…