Feed

DNS-BH Mar 30 update: 40 domains

Posted on March 31st, 2011 in exploit,New Domains,rogue antivirus,sql injection by dglosser

A short but important update consisting of our two friends from yesterday (lizamoon . com and defender-uqko .in) and some rogue and exploit domains. Sources include sucuri.net, urlquery.net, urlvoid.com (Every source is always listed in the domains.txt file):

antivirixpsoft .com
antivirus-9009 .co .cc
antivirusxphard .com
antivirusxpinfected .com
antivirusxpsoft .com
antivirusxpsoftcentral .com
antivirusxpsoftonline .com
defender-uqko .in
grkkkkbbbooppd .in .ua
gsdgwe3gfnx .co .cc
hfhdasdh43 .co .cc
lizamoon .com
marketinglike .info
pokerlike .info
protestersantivirusxp .com
protestersantivirusxpsoft .com
protesterscanantivirus .com
protesterscanantivirusxp .com
protestersscanantivirus .com
protestersvirusxpsoft .com
solomon-vll .cz .cc
system-scanner-ouny .co .cc
webantivirusxpsoft .com
webxpscanantivirus .com
xdelbox .com
xpexamineantivirus .com
xpscanagainstvirus .com
xpscanantiagency .com
xpscanantibacteria .com
xpscanantiviri .com
xpscanantivirus .com
xpscanantiviruscentral .com
xpscanantivirusonline .com
xpscanantivirusprotesters .com
xpscanwarvirus .com
xpseeantivirus .com
xudezyj903 .virtue .nu
xvumttotkdljhm .com
xxqlmrreypesttt .com
zdropp .co .cc


This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

urgent block: lizamoon .com and defender-uqko .in

Posted on March 30th, 2011 in 0day,Domain News,sql injection by dglosser

Websense security labs (1) is reporting a mass sql injection attack of over 28000 err 50,000 sites:

< script src=hxxp ://lizamoon . com/ur.php>

We’ll be adding this site (and defender-uqko .in) on tonight’s update, but you shouldn’t wait and should  add these sites to your blocklists ASAP.

(1)http://community.websense.com/blogs/securitylabs/archive/2011/03/29/lizamoon-mass-injection-28000-urls-including-itunes.aspx

zeus, drive-by, malspam domains

Posted on March 29th, 2011 in exploit,malspam,MoneyMule,New Domains,zeus by dglosser

Domains associated with malspam, moneymules, zeus, etc. Sources: www.spamhaus.org, safebrowsing.google.com and others (Every source is always listed in the domains.txt file):

mamj .ru poggmedic .com
aimos .fr jobdatings .net
zz6b .com kpqqkorv .co .cc
12s83 .com kpxrpplv .co .cc
dfio5 .com krdbqfhe .co .cc
gemini .ee poneslas .cz .cc
newnut .ru pop-stats .info
sedvb .com tomwrezv .cz .cc
1e2e4 .info frinova2005 .com
dezeta .com onlinemacro .com
klz1 .co .cc pizdec .sx33 .net
me12 .co .cc softway2011 .com
mog5 .co .cc tendonina .co .cc
slp2 .co .cc waseetstore .com
slp4 .co .cc alisa-carter .com
slp6 .co .cc blank-record .com
slp8 .co .cc derwart-group .at
snk4 .co .cc excitingmovs .com
snk5 .co .cc hire-centers .com
snk6 .co .cc ping-matic .co .cc
snk7 .co .cc collins-ltdusa .cc
srtb .co .cc ephes-groupllc .cc
sru1 .co .cc newsoftwareltd .ru
sru2 .co .cc securuayetres .net
sru4 .co .cc statistic-www .com
sxp4 .co .cc get-backlink .co .cc
sxp9 .co .cc greatbargainz .info
t2x0 .co .cc lowcostcoiffure .fr
thdx08 .com pflanzen-import .de
ushuqb .com dontstop2346210 .com
xxqc .co .cc master-data-door .in
7speed .info popularcasinoex .org
ahbazen .net cam-girls-online .com
pre4sys .net softantivirfirst .com
swetanu .com itmastersoft .narod .ru
teylsoft .ru plantacao44 .hdfree .in
banpox .cz .cc tikraiarbusigeras .com
eguyendu .com softnetwork-safe .co .cc
findugly .org basicprotectionxa .co .cc
issa-net .com lessthenaminutedeal .com
jiongjia .com pillrxdrugstorechains .at
szivacsek .at welcometotheglobaliscom .com
cgozctk .co .cc guard-securitypersonal .cz .cc
for-fra .co .cc pedrogomes1975 .sites .uol .com .br
ilovekeks .biz s15248477 .onlinehome-server .info
mialepromo .ru

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

List Reorg: 537 domains removed, 1017 “immortal” domains

Posted on March 28th, 2011 in Domain News,Removed Domains by dglosser

The list cleanup is complete. 537 domains have been removed (list is located here).  A list of over 1000 long-lived malware domains is located here.
Reminders:

We aggregate and report on malware domains from a variety of trusted sources.   If you believe a domain is improperly listed, look  it up in the domains.txt file, which contains the original reference as to why it was listed.  Use a site such as urlvoid to determine where else the site is listed.    Contact the original listing to have it removed and then, once it is removed, contact us. Please do not threaten us -  see this post for more information.

We occasionally  we receive from users lists of domains which we are asked to block. Since we are a relisting and aggregation service,  please provide us with the location of a trusted external site where the site is listed.

Finally please consider donating to help cover the cost of hosting and infrastructure.

List Reorg: 537 domains removed, 1017 “immortal” domains

Posted on March 27th, 2011 in Domain News,immortal,Removed Domains by dglosser

A list reorg is in progress today; in the meantime, the list of domains which will be removed is here. A list of over 1000 long-lived malware domains is here.

Bulletproof Zeus, cybercrime, rogue security domains…

Posted on March 25th, 2011 in bulletproof,exploit,iframes,rogue antivirus,Trojans,zeus by dglosser

164 domains associated with Zeus (Bulletproof, drivebys), rogue antivirus ,  crybercrime and other badness. Sources include blog.sucuri.net, vxvault.siri-urz.net, www.malwaredomainlist.com (Every source is always listed in the domains.txt file):

2367 .in 3dglases-panasonic-tv .com
315uu .com 4jifnizd2w .cz .cc
3ara3a .com afteranyxxx .sytes .net
4324 .in amatricespornofrance .com
4meganet .com anoonoribujyo .linkpc .net
aabubwtathr .com antibiotics-shop .com
basicpills .com antivirusfreesmartrend .com
bestdatatool .in antivirushard .com
bhiii .co .cc antivirusmysmartrend .com
bhjjj .co .cc antivirussoftcentral .com
bhkkk .co .cc antivirussullinger .com
bhlll .co .cc antivirusullinger .com
bhmmm .co .cc antivirusxpeasy .com
bhnnn .co .cc bahiaautopecas .com .br
bhrrr .co .cc best-fast-scan .cx .cc
bigimotopast .ru billing-script .com
bufordsoft .com cacajose .sites .uol .com .br
cahodofo .com checkmeman .co .cc
carder .su dvdsoftwarestore .in
corlod7i .cz .cc eoficina .e .telefonica .net
creaps .net fedwire-reports .com .p8 .hostingprod .com
deniq .ru flyingshoestrade .com
dn3r .co .cc generic-ed-pharmacy .com
fathone .com getbackupandrunning .com
fojurus .cz .cc google-stats48 .info
freegoldsun .biz google-stats49 .info
freerttnews .com gsdha3whfh .vv .cc
freshcomp .ir hhwwswjpj .org .in
ftzo .co .cc ideal-solution .org
fuzzybean .com iolcarvalho .sites .uol .com .br
fygdzlil .co .cc issueantivirus .com
g2lr .co .cc jhda4jgdsjg .cz .cc
gabaqlygthr .com jkqlzsftofoiivx .com
getrxpills .com juniocsilva .sites .uol .com .br
gigasoftware .ru lareaddablehis .com
gjijpqhgvmt .com lessthenaminutehandle .com
greensinkod .com likeropslypwood .com
hatememan .com looseantivirus .com
iusav .com lynx-newmedia .in
izdonhesyn .com modulos2011 .hpg .com .br
jeqtzjte .co .cc mt-canete .sites .uol .com .br
jjijpohjvmt .com multi-stats .info
kagrinn .cz .cc mymagicstore .co .cc
kv5r .co .cc myscanantivirus .com
luster-adv .com nossasfotos00862 .com .sapo .pt
macroers .com online-guest .info
malathris .cz .cc ounvdlgyvrsksnkl .com
marbit .com premiumfreeantivirus .com
mediamarkinc .in pro-data-consult .in
miatxvsmthr .com releaseantivirus .com
mullador .cz .cc roleplaysanctuary .co .cc
music-cubtan .tk rttnewsantivirus .com
nwey .info salamandra-lll .cz .cc
obsh .co .cc scanantivirussearchmyfiles .com
qwsqws3 .co .cc scansearchmyfiles .com
ru-php .ru searchmyfilescanantivirus .com
rutrahxxx .ru securitylkins .com
shaliron .cz .cc seeantivirus .com
sol-stats .info shershenzhalit .ru
soretag .ru sholdrowfronap .com
sstatewin .org simplehircantivir .myfw .us
sukonah .in siquiero .com .uy
sunnmy .net sohsnowhowable .com
te7j .co .cc stream .myunire .com
tikrons0 .org sukiblyadi .name
tmdxcrlu .co .cc sullingersoft .com
to-bay .com supplyantivirus .com
topsale2 .ru system-scanner-jess .co .cc
topupdate .ru thepackplace .in
topupdaters .ru thescanantivirus .com
urwwtrnn .co .cc traffichere .dyndns-blog .com
uvbs .co .cc uiatxgsuvmt .com
vicewo .com upinsmokelala .ru
video-write .in vaccinescan .co .kr
woqaguw .co .cc video .shilysha .in
wphf .co .cc voiceiancef .com
xkrmwkdy .co .cc webantivirussoft .com
xts-pay .ru webfreeantivirus .com
y3qa .co .cc webscanantivirus .com
ypolois .cz .cc weiss-cannon .de
yuyu98 .com xclipshostre .co .cc
z3co .co .cc xz .8345netmarketing .info

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Drive-by exploits, moneymule, zeus domains

Posted on March 22nd, 2011 in exploit,MoneyMule,New Domains,rogue antivirus,Spyeye,zeus by dglosser

Zeus drive-by domains, drive-by exploits, moneymule, rogue security domains. Sources include blog.urlvoid.com, google.safebrowsing.com, www.spamhaus.org.

12sa .cz .cc agamakus .vv .cc
2d7d .co .cc allmetalforums .com
3dk1 .co .cc artby-gorup .net
71pp .co .cc artby-group .biz
76hx .co .cc babomaz52 .co .cc
945e .co .cc callisto-ltdco .net
9rk1 .co .cc cerucoz53 .co .cc
aljalea .net conscientiousnessaga .co .cc
bhsss .co .cc coxepep5 .co .cc
bhttt .co .cc dfonwiuf2389f2938f .ru
bhvvv .co .cc diviter77 .co .cc
bhyyy .co .cc diwevaj15 .co .cc
bigbreak .ru fiquyiv71 .co .cc
bl7v .co .cc forofum78 .co .cc
blbw .co .cc fubuhud57 .co .cc
bldw .co .cc gdsjt4jgrftj4 .co .cc
cu9v .co .cc genoyej3 .co .cc
daebang .or .kr getsomepornhere .net
dp0t .co .cc gotuqid87 .co .cc
dp2t .co .cc groupinc-upland .biz
dp3t .co .cc gyznktmm .co .cc
dp4t .co .cc haqopor77 .co .cc
e-ads-13 .info hexilac10 .co .cc
ei1o .co .cc hfgjtyktyee2578 .co .cc
f2hl .co .cc hotabet14 .co .cc
f9tq .cz .cc internet-movie-stream .net
fhwq .co .cc interpower1 .cz .cc
gib-uk .biz ivirtualagents .com
go12 .cz .cc javaobj .co .cc
gtha .co .cc jeheyoz84 .co .cc
har-log .com jokosac59 .co .cc
ibg9 .cz .cc kresko-group .biz
ibs8 .cz .cc kresko-group .net
icu2 .co .cc kumoxov91 .co .cc
inline .de lacitay64 .co .cc
ioey .co .cc lefuvej59 .co .cc
ju7j .cz .cc lokakey64 .co .cc
jw4x .co .cc loxomul4 .co .cc
kdhy .co .cc malinowyzdroj .com .pl
m9g9 .co .cc maybest .co .cc
mtm4 .co .cc mefekos62 .co .cc
mwco .cz .cc mupehim81 .co .cc
np5u .co .cc neoline-groupco .cc
nssindia .com neoline-llc .net
ofline .co .cc newavig97 .co .cc
owuu .cz .cc nicamuf95 .co .cc
p6ox .co .cc panasonic-tv .com
phqv .co .cc payunic2 .co .cc
planutt .com petifuh78 .co .cc
pnxs .co .cc qeadllc-uk .com
prasys .co .cc qekiwej61 .co .cc
pwln .co .cc qoyeped27 .co .cc
qo11 .cz .cc qupagap76 .co .cc
qwxa .cz .cc richmond-art-group .cc
rjkd .co .cc sccvaxzv .co .cc
rqrx .co .cc soft-store-inc .com
sasx .cz .cc softstorecorp2011 .com
shinee .kr softstorecorp2012 .com
snwt .co .cc sologirlsdb .com
spwj .co .cc streaminternetvideos .com
svrz .co .cc targetmarket-groupllc .net
tmi .150m .com tawekiw79 .co .cc
utye .co .cc tiqunoj44 .co .cc
v934 .co .cc tivagal87 .co .cc
vdrt .co .cc tiyoxom15 .co .cc
vhet .co .cc torosenespana .com
vht0 .co .cc trinijunglejuice .com
vtwe .co .cc updateconnection .com
w1tu .co .cc usonlineguide .com
w9gg .cz .cc vefahoh97 .co .cc
wlt2 .co .cc vepepel21 .co .cc
yox4 .co .cc winupdateserver .su
z360 .net wiwuroy54 .co .cc
zexo .co .cc wuzehof7 .co .cc
ztty .co .cc yovekej67 .co .cc
zvgw .co .cc zanomos5 .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Site Delistings: senzafreni.com and meesheephotography.com

Posted on March 21st, 2011 in Removed Domains by dglosser

senzafreni.com and meesheephotography.com have been delisted and will be removed on the next update.

meesheephotography.com/blog/wp-admin/blog-wp/config.bin

DNS-BH Mar 19 Update: artro, palevo, bulletproof, rogue domains

Posted on March 19th, 2011 in exploit,fastflux,New Domains,rogue antivirus,Trojans,zeus by dglosser

A bunch of rogue, zeus, artro, palevo, and bulletproof domains. Sources include amada.abuse.ch, support.clean-mx.de, www.malwaredomainlist.com (Every source is always listed in the domains.txt file):

banage .ru boostxpantivirus .com
9o78 .cz .cc carahackfacebook .com
bulkbin .cn fortesteng123223 .com
pmr2 .co .cc inspectantivirus .com
psdtrp .com jtievgonpznzpbpp .com
web4kz .com liverscanantivir .com
avblast .net meuantivirusdown .com
missspan .in novoantiviruspro .com
pantamat .is peruse-antivirus .com
topksa .info realloungecentral .in
zveno-x .net seuantivirusfree .com
djtikvah .com survey-antivirus .com
glenninyx .in televisionfree .co .tv
luckycash .ru update99 .poche .ce .ms
maroder .info virtualsafetylab .com
paytraff .biz xpantivirustools .com
photopath .in xpantivirusvirus .com
poboltaem .lv antivirscantoolxp .com
povertyba .in bone-scan-antivir .com
rogueroad .ru colourscanantivir .com
udodelig .com maisantivirusscan .com
zeosleep .org xpantivirusclient .com
cs2gameme .com xpantivirusengine .com
gimigimi1 .com antivirscanspeedxp .com
hoghley .co .be antivirscantoolsxp .com
mysimash .info antiviruscrusaders .com
snapadoos .com installxpantivirus .com
thenetdata .in integrityantivirus .com
neonpage .co .cc livreantivirussoft .com
phones4wow .com meesheephotography .com
rjmvcdld .co .cc meuantivirusgratis .com
sop3sa7nop .com todosantivirusfree .com
tatu7g4ano .com xpantivirusreviews .com
textilprom .com xpantivirusupdates .com
urcmfedl .co .cc xpantivirusvendors .com
diqunoj44 .co .cc xpdesktopantivirus .com
dmpcrepairs .net antivirscanenginexp .com
koprowsko .ce .ms antivirscanimagesxp .com
sl0rd .codzs .com boundaryscanantivir .com
bigtopstudios .cn deep-antivirus-scan .com
ibmantivirus .com deep-scan-antivirus .com
xp-antivirus .com fast-malware-scan .co .cc
zapantivirus .com scrutinizeantivirus .com
antivirusdown .com xpantivirussolution .com
antivirusmeds .com antivir-scan-tool-xp .com
coolantivirus .com antivirscanenginesxp .com
fifa2012terra .com bomantivirusdownload .com
mainantivirus .com investigateantivirus .com
missantivirus .com windows-xp-antivirus .com
republikainfo .com advancedscanantivirus .com
syssupportctr .net antivir-scan-tools-xp .com
antivirussites .com best-antivirus-scan .co .cc
inolimpwetrust .com fast-antivirus-2011 .cw .cm
jsojonhjvhvtus .com fast-antivirus-scan .co .cc
ninja .ibedyou2 .com youtube .makingfaces .com .au
scan-antivirus .com antivirscancomputersxp .com
studyantivirus .com antivirscandocumentsxp .com
worldantivirus .com dl .fast-malware-scan .co .cc
grizzli-counter .com advanced-scan-antivirus .com
antivir-scan-xp .com antivir-scan-engines-xp .com
bonescanantivir .com antivirscandefinitionxp .com
peruseantivirus .com testtestforfhj111998 .com .tw
safexpantivirus .com antivirscancorporationxp .com
surveyantivirus .com antivirscancorporationxp .net
tunexpantivirus .com vcuehlunbhpltsbcwpkspxnq .com
xpantivirusscan .com antivirscantechnologiesxp .com
antivirus-survey .com cg79wo20kl92doowfn01oqpo9mdieowv5tyj .com
bomantivirusfree .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


some malvertising, exploit, rogue, moneymule domains

Posted on March 16th, 2011 in exploit,malspam,MoneyMule,New Domains,rogue antivirus by dglosser

malvertising, exploit, rogue, moneymule domains… sources include securehomenetworks.blogspot.com, www.malwaredomainlist, sunbeltblog.blogspot.com (Every source is always listed in the domains.txt file):

2548 .cn itservice-de .cc
abbcp .cn tonsley-art .com
eally .net veslouhoyboy .ru
hotcnn .ru windowspack .net
jk136 .com wurstbrota .info
nuevaq .fm zenitchampion .cn
gzn4 .co .cc collins-group .cc
klz0 .co .cc gdsg23gsgf .co .cc
latebin .ru gsdag3gsfg .co .cc
pmt0 .co .cc jokerisliger .com
rsiylr .com lilac-antique .cc
suy1 .co .cc micmacmall .co .cc
suy2 .co .cc webthearray .info
suy3 .co .cc baragas-budd1 .com
uxqt .co .cc euroantivirus .com
alimama .com irisantivirus .com
dlqvod .info kurdgull .ueuo .com
gamejil .com mailantivirus .com
lesslane .ru traveltomexixo .ru
newback .net typeantivirus .com
toysplan .ru focusantivirus .com
001e2e4 .info justeantivirys .com
boanpack .com links-exchange .net
mycing .co .kr worktravelexpo .com
nanumidc .com centreantivirus .com
oneclean .net generation-team .net
reycross .com richmond-art-uk .biz
sbrowser .net whalez-tsunami .info
sickstage .ru collins-art-group .cc
spyout .co .kr collins-groupusa .com
tamil365 .com tonsley-group-uk .net
voyraf .co .cc dancespotlightusa .com
8778ranser .in letmeseeyoustrip .info
biosuw1ns .com livreantiviruspro .com
hardclean .net alternativeart-ltd .com
nuttyknack .ru guard-onlystrong .xe .cx
teckcraft .com richmond-art-group .com
wingguide .com worldfamoucomposer .net
all4gsm .uni .cc alternative-art-ltd .net
dalalore .vv .cc competitor-uk-group .net
de-blitznet .cc competitorgroup-ltd .com
dkjwfpzc .co .cc pe .edu .upnorte .mooo .com
foksrox21 .info planetaantiviruspro .com
oxcbolzx .co .cc internetonlinegratis .com
sevg-incgr .net japan-tsunami-whale .info
thanhhoacpi .vn primeiroantiviruspro .com
vaccinelab .com addfreeprotectionwa .cz .cc
zerodoctor .com protection-motionra .co .cc
ajisuvravmt .com megatechservicegroup-ltd .cc
aspecs-group .cc rantigalta-industrellio .net
iiaojdnivmt .com megatechservice-group-ltd .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…