Feed

Lots of Rogues, Fake AVs, trojans, etc.

Posted on April 27th, 2011 in New Domains,rogue antivirus,Trojans by dglosser

Over 250 malicious domains associated with rogue security, trojans, fake antivirus and other malicious behavior. Sources include amada.abuse.ch, hosts-file.net, malwareblacklist.com (Every source is  listed in the domains.txt file):

8addition .info againstvirusxpsoft .com
92wwux .cz .cc againstvirysscanxp .com
aandedoorns .co .za anti-v-free-virusscan .com
ageofrappelz .com anti-volt-free-virusscan .com
aipco .ru antilimit .bissnes .net
avfi .info antivcastscanner .com
b3d .mezon .ru antivcastscanwinxp .com
bansher .com antivgamesfreevirusscan .com
bed .3-a .net armour-antivirus .ce .ms
belas61 .com .br bestsuite-guard .net
bestsuiteforu .com boselfprotection .com
bicodehl .com chselfprotection .com
cafmedic .com deepscanandprotecion .com
caixinmoto88 .com dksxe518hmrtvbg .com
checksofttest .net dlrtt646bimpvzf .com
checksoftxt .com ehdbhaowiejud .co .cc
chprofi-soft .com fastscansoft48 .com
clavn .ru fastscansoft49 .net
crsoftprotect .com fastscansoft50 .com
cxuf .info fileprotection-av .com
cyprotect-pc .com fileprotectiosoft .net
d0 .waper .ru fine-drive-keeper .com
dedinkux .cz .cc fine-file-holder .net
deepscanfile .com fine-file-master .com
detectorst .com fine-pcchecker .com
deu .edu .tr fine-stuff-master .net
difence-for-me .net freesoftware .us .to
diprotect-pc .com game-party-royal .ru
diskn .com imagempps .webng .com
drstore1 .com joeniekrofoundation .com
edunkp2 .org landvermesser .tripod .com
executivegov .com memoryscannerantiv .com
extrabensen .org memoryscannerprotectionfast .com
fastscansoft40 .com memoryscannerprotectionfree .com
fastscansoft41 .com memoryscannerprotectionwin .com
fastscansoft42 .net memoryscannerprotectionxp .com
fastscansoft43 .net memoryscannerwinprotection .com
fastscansoft44 .net memoryscannerxpprotection .com
fastscansoft45 .com mobilescannerprotectionfree .com
fastscansoft46 .com mobilescannerprotectionwin .com
fastscansoft47 .com mobilescannerprotectionxp .com
feksake .biz mobilescannerwinprotection .com
file-down .co .kr mobilescannerxpprotection .com
finalavpro .net myantiviruzscanner .com
fine-pc-guard .com myantiviruzscannerxp .com
fine-pcguard .net negativescannerprotectionfree .com
fine-pcholder .com negativescannerprotectionwin .com
fine-pckeeper .com negativescannerprotectionxp .com
fine-pcmaster .net negativescannerwinprotection .com
fowplvhn .cz .cc negativescannerxpprotection .com
framtr .com newantiviruzscanner .com
funboxkey .com newantiviruzscannerxp .com
fyxm .net origin-ics .clickpotato .tv
gay-gay .it payrollserversinstall .com
globalwat .com pc-guard-soft1 .com
grvxpywy .cz .cc pc-guard-soft2 .net
howtokisslogs .ws pc-guard-soft3 .com
hstcorp .co .kr pc-guard-soft4 .net
imgccc .net pc-guard-soft5 .com
imgddd .net pc-guard-soft6 .net
imgeee .net pc-guard-soft7 .com
inscribete .org pc-guard-soft8 .net
jg5g .cz .cc ry-projector-accessories .com
jsr5rjhkgfh .cz .cc sheild-andpowetool .com
juicyjunction .com shelter-keeper-soft .com
kcp .fileave .com simple-antivir-soft .net
kinkalbrass .cz simple-guardin-foryou .net
kirster .in simple-onlysentinel .net
klinexx .com simpleclean-checker .com
link1030 .com simplecleansentinel .com
lntsaddles .com simplenetwork-guard .com
loadcash .biz simplesecuritymaster .com
mcrenox .com .ar simwork-antivirus .cz .cc
morllaines .com smart-cleanarmy .net
mumayi .net smart-drive-checker .com
nikold .ru smart-drivekeeper .com
pc-scanbest1 .com smart-file-keeper .com
pc-scanbest2 .net smart-fileguard .com
pc-scanbest3 .com smart-ineternetsecurity .com
pc-scanbest4 .net smart-internet-army .net
pc-scanbest5 .com smart-internet-holder .net
pc-scanbest6 .net smart-internetforyou .net
pc-scanbest7 .com smart-network-holder .com
pc-scanbest8 .net smart-network-scanner .com
petbabbledog .com smart-networksoft .com
pixohawaii .net smart-only-scanner .com
pnmli .info smart-pc-keeper .com
rapidstream .biz smart-pc-keeper .net
reports-4-u .com smart-pckeeper .net
reserve11 .com smart-security-guard .com
roozero .net smart-security-guard .net
rs2merchants .net smart-security-soft .com
rubbikcube .net .in smart-security70 .com
ruprostitutki .ru smart-security71 .com
s5c4 .net smart-security72 .com
scarts .name smart-security73 .com
secguard .biz smart-securitychecker .com
sellertop .cn .com smart-securityforu .net
semenov .ru smart-securityscanner .net
shieldavsoft .com smart-stuffholder .net
shup .com smart-stuffmaster .com
signalpaper .com smart-stuffmaster .net
skeieius .cz .cc smart-virusearcher50 .com
smart-pcguard .com smart-virusearcher51 .com
smart2xchange .ru smart-virusearcher52 .com
soft2011 .co .uk smart-virusearcher53 .com
speedyshare .com smart-virusearcher54 .com
spiderfile .net smart-virusearcher55 .com
swintonpark .com smart-your-keeper .com
t-codec .com smart-yourguard .com
tgces .co .cc smart-yourguard .net
thebugeraser .com smartantivirsoft .net
thordilak .cz .cc smartclean-holder .net
tomsan .ru solutionofavprotection .com
twididn .com specialprotectionav .com
twilanefi .com stable-protectionsoft .com
typessubject .com stablenetprotection-in .net
udjng .info stablepotection-av .com
uhncs .info start-protectionav .com
v72iz31r .cz .cc static2011online-search .in
vdub .fileave .com strong-guard21 .com
vituli .ru strong-guard22 .com
wagabb .com strong-guard23 .com
waper .ru strong-guard24 .com
wavescale .net strong-guard25 .com
webfamba .com strong-guard26 .com
webunddesign .info strong-guardin-soft .com
wylt .net strong-network-master .com
xa .yimg .com strong-power-defense5 .net
xinghaimoto .com subjectssummer .com
yebom .co .kr unt-antivirus .ce .ms
z3gdgk7s .cz .cc videohornetvide .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

List Reorg: 1027 domains removed

Posted on April 25th, 2011 in Removed Domains by dglosser

1027 domains have been removed. List of removed domains is here.

Building a DNS Blackhole with FreeBSD

Posted on April 24th, 2011 in Domain News by dglosser

Nice article on how to build a DNS Blackhole with FreeBSD on pintumbler.org

Lots of Rogue, Suspicious, Harmful Domains….

Posted on April 22nd, 2011 in New Domains,rogue antivirus by dglosser

Over 200 domains associated with rogue security, fake av, harmful domains. Sources include amada.abuse.ch, blog.urlvoid.com, safebrowsing.clients.google.com (Every source is  listed in the domains.txt file):

21vokglb .cn 0-0-0-0-0-0-0-0-0-0-0-0-0-55-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
81hja01aala .com businessyahoo .info
altacomputer .info cheapscannerprotectionxp .com
ancamera .com diagnosticscannerprotectionwin .com
antivirvip .com facebook-myspace .cz .cc
apafamaxuhle .org facebook-support .cz .cc
artgoogle .info freeantivirus .3dn .ru
autovaccine .co .kr hjoswzcjp1080tx .com
batqr019k-a .com hnvcflstx1292bdj .com
blogjoker .info hnvcflstx1292bdj .net
bookgoog .info hpvvxzgll1326ubg .com
bybyvysugot .com hqyfilssa1343hnt .com
casinolove .info hqyfilssa1343hnt .net
ccgslb .net ikqzaaghpx1394fl .com
clck .ru ikqzaaghpx1394fl .net
cleancop .co .kr injoy-softscan .net
cubyzawawezy .com just-free-soft14 .com
culuguwydiwy .com just-free-soft15 .net
dieuduongviet .net just-scanprotection .net
divxfreecodec .com justscansoft30 .com
esthisisel .gr justscansoft31 .net
free-porn .cz .cc laststuff-master .net
ghdsah34 .cz .cc laststuffholder .net
googdigital .info lastyour-guard .com
googgames .info mainsoftscanner45 .com
googglle .org mainsoftscanner46 .net
googleyou .info modern-protectav .net
googwin .info monoprotection .com
goptres .co .cc most-popularav .net
ha81naoo0o0 .com my-firstavprotect .com
hop-sing-rot .com my-firstavprotection .net
hop-sing-rot .net my-free-protection26 .com
hop-singrot .com my-free-protection27 .net
hop-singrot .net netrclernaxsecure .com
hope-soft50 .com netstableprotect .com
hope-soft51 .net netwoking-guard-solutions .net
ieshopguide .net network-antivirusprotection .net
incmaters .cz .cc network-diffenderav .net
jg7ifkjh .cz .cc quickscanantivfree .com
jucebuqag .com quickscanantivwin .com
justopensoft .net scan-er-antivn-oew .com
kozugyziqyze .com scanagainantivir .com
kumebyduwuvoc .com scanagainantivirusclient .com
lasthopesoft .net scanagainantivirusprotection .com
lastpc-master .com scanagainantivirusreviews .com
lastpc-master .net scanagainantivirusscan .com
lastpcguard .com scanagainantivirustools .com
lastpcguard .net scanagainantivirusupdates .com
lbje003e .cz .cc scanagainantivirusvirus .com
lololoka .cz .cc scanangryagainantivir .com
mguardlab .net scanangryagainantivirus .com
modes-torm .net scanantbiteivfree .com
modwyn .cz .cc scanantfarmivfree .com
netguardav .net scanantivwcarsin .com
netownsecure .com scanantivwdealerin .com
netrosmsecure .com scanantivwdriversin .com
nettussecure .com scanborsanerantv .com
netupitsecure .com scandanceagainantivir .com
onmuz .com scanguardianerantv .com
oyaeby .cz .cc scanonline-computer .net
paysys .co .kr scanprotectionexpertssoft .com
pepabahaturap .com scanprotectionfiltersoft .com
puldorpond .com scanprotectionkansassoft .com
pulse23 .cz .cc scanprotectiontoolssoft .com
qi56 .co .cc secureonlineweb .su
qodikowyfiv .com top-yourchecker .com
qqhe .com top-yourholder .net
realvaccine .co .kr topcleansentinel .net
relaax .co .cc topdrive-guard .com
rouyangw .com topdrive-master .net
scanantivfree .com topfile-holder .com
sexgoogle .info topfile-keeper .net
sexok .net topinternet-checker .com
supervaccin .com topnetwork-foryou .com
tempviews .cz .cc unificacaodoreal .com .br
topantivir4u .com veqilakazujago .com
topfile-guard .net webwinantivirusxp .com
topfileguard .com winantiagencyxp .com
trx .cz .cc winantivirusnowgophers .com
vaccinecore .com winantivirusnowkovalchuk .com
webtoonroom .com winantivirusnowonline .com
widpia .net winantivirusxponline .com
xeguwywas .com winantivirusxptournament .com
zuxejokyhosu .com zippfree .webng .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


exploit kit, fake av, zeus domains

Posted on April 20th, 2011 in exploit,New Domains,rogue antivirus,zeus by dglosser

Domains associated with rogue/fake av, zeus, brandjackers were added. Sources include amada.abuse.ch, safebrowsing.google.com, securehomenetworks.blogspot.com (Every source is  listed in the domains.txt file):

21vokglb .cn 0-0-0-0-0-0-0-0-0-0-0-0-0-55-0-0-0-0-0-0-0-0-0-0-0-0-0 .info
81hja01aala .com businessyahoo .info
altacomputer .info cheapscannerprotectionxp .com
ancamera .com diagnosticscannerprotectionwin .com
antivirvip .com facebook-myspace .cz .cc
apafamaxuhle .org facebook-support .cz .cc
artgoogle .info freeantivirus .3dn .ru
autovaccine .co .kr hjoswzcjp1080tx .com
batqr019k-a .com hnvcflstx1292bdj .com
blogjoker .info hnvcflstx1292bdj .net
bookgoog .info hpvvxzgll1326ubg .com
bybyvysugot .com hqyfilssa1343hnt .com
casinolove .info hqyfilssa1343hnt .net
ccgslb .net ikqzaaghpx1394fl .com
clck .ru ikqzaaghpx1394fl .net
cleancop .co .kr injoy-softscan .net
cubyzawawezy .com just-free-soft14 .com
culuguwydiwy .com just-free-soft15 .net
dieuduongviet .net just-scanprotection .net
divxfreecodec .com justscansoft30 .com
esthisisel .gr justscansoft31 .net
free-porn .cz .cc laststuff-master .net
ghdsah34 .cz .cc laststuffholder .net
googdigital .info lastyour-guard .com
googgames .info mainsoftscanner45 .com
googglle .org mainsoftscanner46 .net
googleyou .info modern-protectav .net
googwin .info monoprotection .com
goptres .co .cc most-popularav .net
ha81naoo0o0 .com my-firstavprotect .com
hop-sing-rot .com my-firstavprotection .net
hop-sing-rot .net my-free-protection26 .com
hop-singrot .com my-free-protection27 .net
hop-singrot .net netrclernaxsecure .com
hope-soft50 .com netstableprotect .com
hope-soft51 .net netwoking-guard-solutions .net
ieshopguide .net network-antivirusprotection .net
incmaters .cz .cc network-diffenderav .net
jg7ifkjh .cz .cc quickscanantivfree .com
jucebuqag .com quickscanantivwin .com
justopensoft .net scan-er-antivn-oew .com
kozugyziqyze .com scanagainantivir .com
kumebyduwuvoc .com scanagainantivirusclient .com
lasthopesoft .net scanagainantivirusprotection .com
lastpc-master .com scanagainantivirusreviews .com
lastpc-master .net scanagainantivirusscan .com
lastpcguard .com scanagainantivirustools .com
lastpcguard .net scanagainantivirusupdates .com
lbje003e .cz .cc scanagainantivirusvirus .com
lololoka .cz .cc scanangryagainantivir .com
mguardlab .net scanangryagainantivirus .com
modes-torm .net scanantbiteivfree .com
modwyn .cz .cc scanantfarmivfree .com
netguardav .net scanantivwcarsin .com
netownsecure .com scanantivwdealerin .com
netrosmsecure .com scanantivwdriversin .com
nettussecure .com scanborsanerantv .com
netupitsecure .com scandanceagainantivir .com
onmuz .com scanguardianerantv .com
oyaeby .cz .cc scanonline-computer .net
paysys .co .kr scanprotectionexpertssoft .com
pepabahaturap .com scanprotectionfiltersoft .com
puldorpond .com scanprotectionkansassoft .com
pulse23 .cz .cc scanprotectiontoolssoft .com
qi56 .co .cc secureonlineweb .su
qodikowyfiv .com top-yourchecker .com
qqhe .com top-yourholder .net
realvaccine .co .kr topcleansentinel .net
relaax .co .cc topdrive-guard .com
rouyangw .com topdrive-master .net
scanantivfree .com topfile-holder .com
sexgoogle .info topfile-keeper .net
sexok .net topinternet-checker .com
supervaccin .com topnetwork-foryou .com
tempviews .cz .cc unificacaodoreal .com .br
topantivir4u .com veqilakazujago .com
topfile-guard .net webwinantivirusxp .com
topfileguard .com winantiagencyxp .com
trx .cz .cc winantivirusnowgophers .com
vaccinecore .com winantivirusnowkovalchuk .com
webtoonroom .com winantivirusnowonline .com
widpia .net winantivirusxponline .com
xeguwywas .com winantivirusxptournament .com
zuxejokyhosu .com zippfree .webng .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


site delistings: hcol.com,thecud.com.au, and trinijunglejuice.com

Posted on April 19th, 2011 in Removed Domains by dglosser

hcol.com has been delisted (typo). trinijunglejuice.com and thecud.com.au will also be removed. Please update your blocklist.

Fake AV, Malspam, gozi, harmful domains

Posted on April 18th, 2011 in malspam,New Domains by dglosser

Over 200 fake antivirus, rfi, malspam, gozi, harmful domains. Sources include amada.abuse.ch, ddanchev.blogspot.com, safebrowsing.google.com (Every source is  listed in the domains.txt file)

back88008800 .com 2bemojewedowigo .com
bemolaqijicy .com besttools-of-security .com
bestwhe .com bestyour-holder .com
bestyourguard .net bestyourchecker .net
bestzdv .com bhprotection-foryou .com
big-defender .com biprotection-foryou .com
blessbeldsafe .com cilt442vyabkqqv .com
blessbledsafe .com cilt442vyabkqqv .net
blesscalsafe .com circleprotectionav .net
blsoftprotect .com circlesoft-protection .net
celisesuho .com coprotection-foryou .com
chsoftprotect .com coselfprotection .com
ciqw364efmnnsb .com crselfprotection .com
cixovatywo .com defense-between-pc4u .com
clearang .com defenseailiewpc .com
clearbly .com defenseartritepc .net
clearbrid .com defensechecker-guard .net
clearbtal .com defensedarlicpc .com
clearcle .com defensedentogepc .net
cleardts .com defenseeaddletpc .com
cleareark .com defenseectingepc .net
clearecit .com defenseguard-inetcheck .com
cleareond .com defenseosindisepc .com
clearfis .com defenserainnepc .net
clearhum .com defenseseatedpc .com
cleariot .com defenseslinguanpc .net
clearjelp .com defensesquarmicpc .com
clearmant .com defensesylottpc .net
clearpjs .com powerwerxmotorcorp .com
clearrus .com profitsantivirus .com
clearscom .com progressivescanantivfree .com
clearslia .com protect-win-scanner .com
cleartsk .com protection-ant-iv .com
clearvow .com protectionantfarmiv .com
clearzdv .com protectionantiv .com
clearzids .com protectioninstantwinscanner .com
clru493bgpyzzf .com protectionwinscan .com
coprotect-pc .com protectionwinscanner .com
cs2meandcr .com protectionwinscanneralbum .com
detectiveah .com protectionwinscannerdefinition .com
detectiveally .com protectionwinscannerdriver .com
detectiveash .com protectionxpprofits .com
detectiveaw .com protectprofitscan .com
detectivebous .com protectwinscanner .com
downloadmyprog .biz protectwinscannerdefinition .com
figaroo .ru protectwinscannerfeatures .com
fytypoqywu .com protectwinscannerglass .com
gicyxepomer .com protectwinscannerhardware .com
gopilezavyxiro .com protectwinscannermaintenance .com
hivanedak .com protectwinscannermanufacturer .com
hotilosire .com protectwinscannermanufacturers .com
jerakidukojoz .com protectwinscannermaster .com
kantum .net protectwinscannermodels .com
krabdream .info protectwinscannerprofile .com
kupeqobujohaq .com protectwinstournament .com
kytevaviqopoci .com purityanddivinityspa .com
multimaqen .com ratingswatchdiscussions .com
pikilokykizanu .com smartdrive-checker .com
planete-lolo .com smartdrive-master .net
popupguard .net smartfile-guard .com
popupguard1 .com smartfilekeeper .com
popupguard1 .net smartfilemaster .com
popupguard10 .net smartguardin-foryou .com
popupguard2 .com smartsecurityforu .net
popupguard2 .net smartsecurityguard .com
popupguard3 .com smartstuff-guard .net
popupguard3 .net smartstuffguard .net
popupguard4 .com smartstuffmaster .com
popupguard4 .net smartyour-holder .net
popupguard5 .com smartyourchecker .net
popupguard5 .net soft-checkerarea .com
popupguard6 .com soft-lab-protection .net
popupguard6 .net soft-webcheckerme .com
popupguard7 .com soft-webcheckerne .com
popupguard7 .net soft-webcheckerpi .com
popupguard8 .com soft-webcheckerry .com
popupguard8 .net soft-webcheckerst .com
popupguard9 .com softgroupprotection .com
popupguard9 .net softsolutionupdate .com
punajytapaci .com softtrue-avsoft .com
qisacugugu .com strongguardin-master .net
quantistart .com strongonlyholder .net
qupajubica .com strongonlyscanner .net
reruravobosila .com strongpowerchecker .com
rorodarof .com systemguardavsoft .com
ruqydahec .com systemtest-soft .net
sakafiduzipame .com test-systemscan .net
smartpcchecker .com test-systemsoft .net
smartpcmaster .com thebest-guardinsentinel .com
smartpcmaster .net thebest-internet-checker .com
smartsuitearmy .com thebest-internetforyou .com
sof-monsterav .com thebest-power4u .net
soft-base20 .com thebest-powerforyou .net
soft-base21 .com thebest-securityforyou .com
soft-base22 .net thebest-securityholder .net
soft-base23 .net thebestguardinchecker .net
soft-base24 .com thebestinternet-foru .com
softech-secure .com thebestonlyholder .com
softgroupsoft .com thebestscan-scanner .com
starpupmax .com topsecurity-4u .com
strongawn .com topstuff-guard .net
strongcip .com topstuffchecker .net
strongdan .com topstuffmaster .net
sydric .com topsuite-holder .com
sykobodyducib .com topsuite-sentinel .net
testsoftav1 .com topyour-keeper .net
testsoftav2 .net topyour-master .net
testsoftav3 .com topyourchecker .com
testsoftav4 .net total-difence10 .com
tetagyjaj .com total-difence11 .net
tibehewuk .com total-difence12 .com
tisatosyhimidy .com total-difence13 .net
topyour-guard .net total-difence14 .com
tyhiqymiwufuj .com total-difence15 .net
vakyditefo .com total-difence16 .com
wamojafadezy .com total-difence17 .net
wetotyger .com total-difence18 .com
wixecyhobovy .com total-difence19 .net
wolycunanoqe .com universalmigrat .com
yimg .co .in vmware-antispyware .co .cc
zajatimibuj .com vpn-antispyware .co .cc
zequcitamado .com webwasher-antispyware .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


266 Malicious Domains

Posted on April 16th, 2011 in New Domains,rogue antivirus by dglosser

266 domains (rouge, fake antivirus, and other badness) from sunbeltblog.blogspot.com, safebrowsing.google.com, amada.abuse.ch and others (Every source is   listed in the domains.txt file)

2vd .ir againstvirusscano .com
46t6 .co .cc anti-v-scan-winxp .com
4yyf .co .cc antivimetalzscanner .com
admxs .com antivirbestbabyscan .com
antiviriscano .com antivirbestbarsscan .com
antivscanner .com antivirbestdietscan .com
antivscanwinxp .com antivirbestgamesscan .com
avsoftkinese .com antivirus-best-blog-scan .com
barbosogranul .ru antivirus-best-scan .com
base-guardian .net antivirusbestdownloadscan .com
besoftprotect .com antivirusexamineo .com
bestatch .com antivirusfirstamendmentscan .com
bestatra .com antivirusfirstladyscan .com
bestbly .com antivirusfirstnationsscan .com
bestchet .com antivirusgreatdepressionscan .com
bestdied .com antivirusgreatesthitsscan .com
bestdjidefense .com antivirusgreatlakesscan .com
bestdrive-guard .com antivirusscannersolutions .com
bestdriveguard .com antivirusscannersupplies .com
bestdrivekeeper .com antivirusscannertips .com
bestdts .com antivirusscanoonline .com
bestehan .com antivirusscanoxp .com
bestexdefense .com antivirusscanoxponline .com
besteydefense .com antivirusscanpara .com
bestfile-guard .com antivirusscanque .com
bestfile-holder .com antiviruzreaderxp .com
bestfileholder .com antivmagazinescanwinxp .com
bestfws .com antivscancomputerswinxp .com
besthato .com antivscandefinitionwinxp .com
besthumdefense .com antivscanengineswinxp .com
bestigh .com antivscanenginewinxp .com
bestilldefense .com antivscanimageswinxp .com
bestilt .com antivscanneralbum .com
bestimdefense .com antivscanspeedwinxp .com
bestjone .com antivscantechnologieswinxp .com
bestkar .com antivscantoolswinxp .com
bestmfe .com antivscantoolwinxp .com
bestof-avsoft .net bestbonescanantiv .com
bestonlymaster .com bestclean-holder .com
bestonlysoft .com bestdrive-keeper .net
bestonlysoft .net bestdrivechecker .com
bestpcchecker .com bestdrivechecker .net
bestpcholder .com bestlaserscanantiv .com
bestpckeeper .com bestliverscanantiv .com
bestpid .com bestlungscanantiv .com
bestppcever .com bestprogressivescanantiv .com
bestsoftaetick .net bestprotect-foryou .com
bestsoftawpung .net bestprotect-foryou .net
bestsoftcelleed .net bestprotectfor-you .com
bestsoftdaming .net bestprotectfor-you .net
bestsoftloonway .net bestprotectforyou .com
bestsoftofelly .net bestprotectforyou .net
bestsoftptormot .net bestprotectionstandart .com
bregisite .com bestquickscanantiv .com
cache-3942 .net bestscanadamantiv .com
daddycrafts .com bestsecurityscanner .net
drh6 .co .cc bestsoftlunintic .net
erd43 .com bestsoftoxicycle .net
eyednetcam .co .uk bonescanantivfree .com
fineyour-master .com chazlakentjak .uni .cc
fineyourkeeper .com colourscanantivfree .com
fineyourkeeper .net consumerprotectionantiv .com
fineyourmaster .com copyprotectionantiv .com
first-clean-4u .com copyprotectwinxpscan .com
firstcleanarmy .net copyrightprotectionantiv .com
firstscanforu .net deticated .home-seller-remedy .com
firstscanforyou .com fineyour-checker .com
fullpc-scan50 .com first-clean-master .com
fullpc-scan51 .net first-cleanmaster .com
fullpc-scan52 .com first-cleansentinel .com
fullpc-scan53 .net first-guardin-checker .com
fullpc-scan54 .com first-security-holder .net
g-oogl-e .com first-suitesentinel .com
game163 .in firstcleanchecker .com
get-full-soft14 .com firstcleanmaster .com
get-full-soft15 .com firstdbepsentinel .isgre .at
get-full-soft16 .com firstinternet-scanner .com
get-full-soft17 .com firstinternet-soft .com
get-full-soft18 .com firstpower-holder .com
get-soft-trueav .net firstsecurityforyou .com
get-truesoftav .com freestyleantivirusnow .com
gettrue-softav .net freewincolourscanantivir .com
gettruesoft-av .com fullguardandcure-on .net
gidetector .com fullguardandcureon .com
godownice .com fullguardandcureon .net
godtsnice .com getlistprotection .com
goemnice .com gijmubdj930sace .com
gofwsnice .com gkkruxah960lqsy .com
goghtnice .com gllstchm1105racj .com
gogonice .com gluwyhpy1105emsz .com
goheanice .com grand .eyednetcam .co .uk
good-soft30 .com great-selfprotectav .com
good-soft31 .net great-selfprotectionav .net
good-soft32 .com great-stafinsecurity .com
good-soft33 .net great-stafinsecurity .net
good-soft34 .com greatsoft-protection .com
good-soft35 .net greatstaf-insecurity .com
grdetector .net greatstaf-insecurity .net
great-trueav .net greatstafin-security .com
greatacan .com greatstafin-security .net
greataing .com greatstafinsecurity .com
greatble .com guardbleresidpc .com
greatdut .com guarddefanse-inetcheck .net
greatead .com htmlprotectwinxpscan .com
greatenus .com inspectagainantivir .com
greatest-av15 .com laserscanantivfree .com
greatest-av16 .com liverscanantivfree .com
greatgic .com lungscanantivfree .com
greenpix .in myantivirusscano .com
guardaltoonpc .com myantivirusscanoxp .com
guardatellypc .net myprotectwinscan .com
guardban .com myscanwinantivirus .com
guardce .com mywinantivirusnow .com
guneon .com ntivcastscanwinxp .com
hangrika .com online-digital-video-collection .com
imgaaa .net parantivirusscano .com
imgbbb .net peruseagainantivir .com
iragu .com protectionwinscanneralbum .co
jjoptimo .ru protecttunexpscanvirus .com
kalihils .co .cc protecttunexpvirusnow .com
lampapomontage .ru protectvirussafexpnow .com
mahrang .com protectvirusxpdriversnow .com
matriworld .com protectwinscannerprogramming .com
mediasuperbe .in protectyoudistinctrpcscan .com
mskgu .com protectyoujavarpcscan .com
myteenmovies .net rockstargraphicdesign .com
n5m11vxq .cz .cc santandernet .sanbrasil .in
os3q .co .cc scan-again-antivirus-scan .com
rikadirect .com scan-again-antivirus-vendors .com
savanka .com scanagainantivirusengine .com
threejonline .com scanagainantivirusvendors .com
unisol-up .0ze .net scanwinantiagency .com
vinosmilts .com slidescannerantivxp .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval. Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Apr 12 Update: Rouges, moneymules, harmful domains

Posted on April 13th, 2011 in MoneyMule,New Domains,rogue antivirus by dglosser

Domains associated with fake anvirus, moneymule and other badness added. Sources include sacour.cn, urlquery.net, amada.abuse.ch & securehomenetworks.blogspot.com (Every source is   listed in the domains.txt file):

28bxg .com bringtheguard1 .com
3425 .in bringtheguard1 .net
5356 .in bringtheguard2 .com
7skyjo .info bringtheguard2 .net
adobedload .com buy-the-guardian .com
agedn .com buy-the-guardian .net
bringtheguard .com caselfprotection .com
bringtheguard .net check-inet-guarddefense .com
cc286 .com checkinet-guarddefense .net
checksoftrs .com checkinetguard-defense .com
checksoftse .com dlrtt646bimpvzf .net
checksoftsi .com drawmade-group .com
checksoftte .com drawmade-group .net
cjws .co .cc duprotection-foryou .com
delt-group .com duselfprotection .com
delt-group .net eioxzi748qrudho .com
doprotect-pc .com faprotection-foryou .com
dorihuginn .cz .cc fast-softgprotection .net
duprotect-pc .com firstsecurityguard .com
eleelezz .com firstsuite-guard .net
eleelezz .net free-pc-protection1 .com
eleelezz1 .com free-pc-protection2 .net
eleelezz1 .net free-pc-protection3 .com
eleelezz2 .com free-pc-protection4 .net
eleelezz2 .net free-pc-protection5 .com
eleelezz3 .com free-pc-protection6 .net
eleelezz3 .net freeonlinescaner .net
eleelezz4 .com full-guardandcureon .com
eleelezz5 .com full-guardandcureon .net
eleelezz5 .net fullcheckguardian20 .com
exaguard .com fullcheckguardian21 .net
fan-kitdropin .com fullcheckguardian22 .com
fan-kitdropin .net fullcheckguardian23 .net
fankitdropin .com fullcheckguardian24 .com
fankitdropin .net fullcheckguardian25 .net
fast-scanpc .net fullcheckguardian26 .com
for1-secguard .net fullcheckguardian27 .com
freexxpote .co .cc fullcheckguardian28 .com
fuldguard .com fullcheckguardian29 .com
geprotect-pc .com fullguard-andcureon .com
govtds21 .co .cc fullguard-andcureon .net
guard-wall40 .com fullguardand-cureon .com
guard-wall41 .net fullguardandcure-on .com
guard-wall42 .com fullscananddiffence .com
guard-wall43 .net g-softproteion .com
guard-wall44 .com gaselfprotection .com
guard-wall45 .net get-full-link20 .com
highlvlguard2 .net get-full-link21 .net
highlvlguard3 .com get-full-link22 .com
highlvlguard3 .net get-full-link23 .net
netmoabjtgt .co .cc get-full-link24 .com
netmokkeqpx .co .cc get-full-soft10 .com
netnbmknlxb .co .cc get-full-soft11 .net
netncitdpbg .co .cc get-full-soft12 .com
netneagthoo .co .cc get-full-soft13 .net
netnhuvfhva .co .cc greatstafinsecurity .net
netnixoxxbe .co .cc guard-checherdefense .com
netnjhtiruu .co .cc guard-defense-checker .net
netnjiorldk .co .cc highsecurity-level10 .com
netnlebzzyv .co .cc highsecurity-level11 .net
netnmesfnwb .co .cc highsecurity-level12 .com
netnmxptdph .co .cc highsecurity-level13 .net
netnnxrkqcr .co .cc highsecurity-level14 .com
netnnznrvhr .co .cc highsecurity-level15 .net
netnrygsxwt .co .cc highsecurity-level8 .com
netnryktltf .co .cc highsecurity-level9 .net
netntuwpwme .co .cc netmovie-l9g5 .co .cc
netntzyusdd .co .cc netmovie-nerx .co .cc
netnwyistop .co .cc netmovie-q9k9 .co .cc
netnwzseome .co .cc netmovie-ruwu .co .cc
netnyutpbrt .co .cc netmovies-live-tube-1294 .co .cc
netnzmutdtu .co .cc netmovies-live-tube-331 .co .cc
netnzqhjcss .co .cc netmovies-live-tube-3670 .co .cc
netoalkdhho .co .cc netmovies-live-tube-3775 .co .cc
netocuqrqje .co .cc netmovies-live-tube-4831 .co .cc
netofnudnot .co .cc netmovies-live-tube-5063 .co .cc
netohmkubof .co .cc netwbemvxoh .co .cc
netolklmwzd .co .cc netwerwqjxu .co .cc
netomgnvtsc .co .cc netweyxtotw .co .cc
netopthnjbz .co .cc netwhawuyok .co .cc
netosowbkvn .co .cc netwkdwewye .co .cc
netouxkojlm .co .cc netwlrdlsct .co .cc
netovbkuiwk .co .cc netwoqgxhdp .co .cc
netovfamzjk .co .cc netwsmhhlkx .co .cc
netovkzebnh .co .cc netwxzhcjwn .co .cc
netowjlhtvt .co .cc netwyezcsdn .co .cc
netoxcbolzx .co .cc netwyrwcgsi .co .cc
netoyqpyhue .co .cc netxfruefzd .co .cc
netozbvdlnt .co .cc netxlbmghih .co .cc
netozzplskg .co .cc netxlnmidpi .co .cc
netpcdznjgg .co .cc netxnyfwfgw .co .cc
netpcowfnce .co .cc netxpsuzihb .co .cc
netpewmjhxk .co .cc netxrwqucmf .co .cc
neturpmqccz .co .cc netxvalqfyr .co .cc
netutihspmo .co .cc netxvoliruc .co .cc
netuwsylgfc .co .cc netxwmckfph .co .cc
netuxsulnwp .co .cc netxwtqcxss .co .cc
netvakdmfuw .co .cc netxxfxkdcs .co .cc
netvanupqmi .co .cc netxywlbbwe .co .cc
netvdtxmcqs .co .cc netyekrclxu .co .cc
netvdyhstiq .co .cc netyglcztxi .co .cc
netvebnffpv .co .cc netygvejqva .co .cc
netvhpmlaoa .co .cc netyhcmcbdq .co .cc
netvlsqfxog .co .cc netyjbafkmk .co .cc
netvskbzhnk .co .cc netylrxgkvu .co .cc
netvxryllkf .co .cc netyncdxffr .co .cc
netvycdmonz .co .cc protectwinscannerguide .com
netvytmlfyc .co .cc scaner-freeprog .cz .cc
netvzzcsvsm .co .cc tanxiaodong .gicp .net
netwazmtsyd .co .cc tazprogltd-us .com
nrgy-co .net tazprogltd-usa .net
nrgy-groupllc .cc urutan-antispyware .co .cc
oghmazel .cz .cc web-soft2011pc .eu
romtyreteam .ro

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Another huge update – 278 Domains

Posted on April 9th, 2011 in New Domains,rogue antivirus,sql injection by dglosser

278 domains associated with rouge security/fake AV, sql injection, lizamoon and other badness. Sources include blog.sucuri.net, safebrowsing.google.com, amada.abuse.ch and securehomenetworks.blogspot.com (Every source is   listed in the domains.txt file)

100451 .com best-cleanscanner .com
av-brend .ru best-driveholder .net
avprotect2011 .ru best-drivekeeper .com
baad .ws best-drivekeeper .net
banner2system .com best-file-holder .com
banner3system .com best-file-master .com
banner4system .com best-force-guard1 .net
best-av-soft1 .com best-force-guard2 .net
best-av-soft2 .net best-force-guard3 .net
best-av-soft3 .com best-force-guard4 .net
best-av-soft4 .net best-force-guard5 .com
best-avsoft1 .com best-force-guard6 .com
best-avsoft2 .net best-force-guard7 .com
best-avsoft3 .com best-malwareprotection .com
best-avsoft4 .net best-malwareprotection .net
best-avsoft5 .com best-network-soft .net
best-avsoft6 .net best-networkguard .net
best-checkerro .com best-networksoft .net
best-checkerru .com best-protectforyou .com
best-checkerry .com best-protectforyou .net
best-checkerst .com best-securitychecker .com
best-checkerti .com best-securityforyou .com
best-checkertt .com best-securityguard .com
best-checkerty .com best-securitymaster .net
best-checkerum .com best-softcheckri .com
best-checkerur .com best-softcheckrk .com
best-clean-area .com best-softchecksp .com
best-cleanguard .net best-softcheckta .com
best-driveguard .com best-softcheckut .com
best-driveholder .com best-stuff-checker .com
best-fileguard .net best-stuff-keeper .net
best-ofsoftav .net best-stuffkeeper .com
best-pcholder .com best-stuffmaster .com
best-pcmaster .com best-suitescanner .com
best-savez .com best-your-holder .net
best-softguard4 .net bestantivir-soft1 .com
best-yourguard .com bestantivir-soft2 .com
bestably .com bestantivir-soft3 .com
bestaddefense .com bestantivir-soft4 .com
bestade .com bestantivir-soft5 .com
bestandefense .com bestantivir-soft6 .com
bridgetday .ru checker-network-hard .cz .cc
checkwebspeed .net cloudnanoconnnection .info
cz88 .net comsoftware-c9vv .co .cc
defender-ayva .co .cc comsoftware-cvrr .co .cc
defender-nibea .in comsoftware-cytu .co .cc
dunaverj .com comsoftware-d5j9 .co .cc
exirzexl .co .cc comsoftware-d5tu .co .cc
fiherspind .com comsoftware-h9zv .co .cc
focustemplate .ru comsoftware-hudu .co .cc
hcol .com comsoftware-juq5 .co .cc
helpimoma .ru comsoftware-k9le .co .cc
jewelrypartybiz .com comsoftware-l9g5 .co .cc
jiekefa8e .info comsoftware-lerd .co .cc
js43jfgskfgh .vv .cc comsoftware-m9br .co .cc
kmsfktrkfk .vv .cc comsoftware-m9gv .co .cc
lucangl .com comsoftware-mvrz .co .cc
momolian .com comsoftware-mykv .co .cc
netapebnarr .co .cc comsoftware-qvrd .co .cc
netaqzqrquk .co .cc comsoftware-t5l9 .co .cc
netaxnltmec .co .cc comsoftware-verl .co .cc
netbbtakdgf .co .cc comsoftware-w5dy .co .cc
netblgqxumw .co .cc comsoftware-wujy .co .cc
netbnsdglxo .co .cc comsoftware-wyke .co .cc
netbrnydjba .co .cc comsoftware-x5dy .co .cc
netbruosrnj .co .cc comsoftware-z5qy .co .cc
netbtwcsegn .co .cc easystatscounter .co .cc
netbuiimzym .co .cc faststatscounter .co .cc
netbwmlezvm .co .cc securetraletguard .com
netbytmjfwf .co .cc securetramenguard .net
netceskzois .co .cc securetroodyguard .com
netcjrexkse .co .cc securewassamguard .net
netcokummxz .co .cc secureyishedguard .com
netcvhgkrzr .co .cc secureyonetionpc .com
netcwepgvol .co .cc security-aggregate2 .com
netcxdpckmy .co .cc security-internet4u .com
netcxsdjrjd .co .cc security-master4 .com
netdaxslvcu .co .cc security-master5 .com
netdeeafcmo .co .cc security-master6 .com
opodeanog .com securitykidgrend .com
plomertvah .com securitylink-foryou1 .com
pzecsfas .co .cc securitylink-foryou2 .net
qqkuyou .cn securitylink-foryou3 .com
rafterte .com securitylink-foryou4 .net
recover888 .com securitylink-foryou5 .com
sabantdr .com securitylink-foryou6 .net
satiere .com securitylink-foryou7 .com
searchableantiv .com securitylink-foryou8 .net
securedys .com securityscommont .com
secureean .com sefaty-guardian4 .net
secureehum .com sefaty-guardian5 .net
secureehus .com sefaty-guardian6 .net
secureei .com selfsoft-checker1 .net
secureel .com selfsoft-checker2 .net
secureem .net selfsoft-checker3 .net
secureeni .com selfsoft-checker4 .net
secureente .com selfsoft-checker5 .com
secureeog .com selfsoft-checker6 .com
secureeoge .com selfsoft-checker7 .com
secureever .com selfsoft-checker8 .com
securefre .com softwareupdateservice .ru
securefws .com supergoogleanalytics .co .cc
securegle .com system-scanner-iwcw .co .cc
securegre .com total-virusdetective .net
securehing .com true-protection30 .com
secureion .net true-protection31 .net
securejya .com true-protection32 .com
securekly .net true-protection33 .net
securekya .com true-protection34 .com
securemhz .com true-protection36 .com
secureomsk .com true-protection37 .net
securepjs .com true-protection38 .com
secureque .com true-protection39 .net
securesone .com true-protection40 .com
securityaillaus .com true-protection41 .net
securityampang .com winupdateservices .com
securitymornew .net wsmovie-tube-anuq .co .cc
securityoddlead .com wsmovie-tube-dohu .co .cc
securityspland .com wsmovie-tube-gdly .co .cc
securitywootery .net wsmovie-tube-iokx .co .cc
securitywrenom .com wsmovie-tube-omku .co .cc
seriousguard .com wsmovie-tube-oywa .co .cc
sinitti .com wsmovie-tube-uljb .co .cc
slavitic .com wsmovie-tube-usky .co .cc
sofeqadro .ru wsmovie-tube-uxyl .co .cc
soft-hight .ru wsmovie-tube-yxpc .co .cc
software-nerx .co .cc wsmovies-live-tube-tuah .co .cc
software-q9k9 .co .cc wsmovies-live-tube-tzio .co .cc
solomon-xl .cz .cc wsmovies-live-tube-yeey .co .cc
thescannerantiv .com wsmovies-tube-ebex .co .cc
thosegoto .com wsmovies-tube-eiee .co .cc
tulsidas .com wsmovies-tube-nkgi .co .cc
unuberpait .com wsmovies-tube-saxl .co .cc
updateservers .kz wssystem-scanner-aogz .co .cc
uvulaudan .com wssystem-scanner-kmiv .co .cc
windriverupdate .kz wssystem-scanner-oiiu .co .cc
xh2009 .com wssystem-scanner-uhix .co .cc
yu678 .com yourstatscounter .co .cc
zlpeqbhp .co .cc yourstatscounter .cz .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…