gumblar, artro, zeus domains

Posted on January 23rd, 2011 in exploit,fastflux,gumblar,iframes,New Domains,rogue antivirus,zeus by dglosser

Domains associated with gumblar, zeus, drive-by’s, rogues, etc… Sources include viralerts.com, safebrowsing.google.com, blog.unmaskparasites.com (Every source is always listed in the domains.txt file):

0879 .in 0313879956 .kt .io
09cd .co .kr 1websitedesign .net
2312 .in 3010928 .02 .com .tw
3453 .in 3tnoongfed .com
4534 .in adsensestat .com
6452 .in africabusinessintelligence .com
770304123 .cn afrique-solidarite .org
9879 .in alabbascement .com
abda3y .com almadinah-almunawrah .info
aceedan .com altogiro .ind .br
addomains .ru amour-sexo .com
aerocean .in anamaithaperng .com
air-bt .ru anandayogaa .org
aireuregio .de aqua-tectum .hu
al3shaq .com argo-japan .com
am4u .kr automobileandtransport .com
arakasa .com bangsaenpost .com
asly .net belaflex .ind .br
asteam .fr belaruskabel .ru
at1 .it best-clansite .de
binaryweb .com besteshoponline .com
blythe .la bizcardcolor .com
cattww .com booblegum19 .co .cc
chartinfo .net buypartylights .com
cipayroll .com c2cservices .co .in
clickping .org cargoogle .info
d9668 .cz .cc casamango .freehostia .com
de73b .cz .cc clientdatafiles .in
devalex .in coches-online .com
dishicage .net dasad41da4safasdasd21 .biz
erlkvv .net .in datagoogle .info
essoptes .com digitalloadsoftware .in
ewela .co .kr donjanhealth .com
fivecross .in dvdstreamvideosxyd .co .cc
gazacham .ps gclubdiary .com
ggo-team .com ghjpovqgdbs .com
hdcbljevga .ru glasgosurvine .com
hugilis .cz .cc google-analytisc .co .cc
introgagu .com iesnaretrack .biz
iranjoc .com kaisserz-awe .net .in
kz3gq1 .in kjgfdkghkg .co .cc
loveaz .biz mfgjhhimdbs .com
moveit .pt muslimhands .org .sd
mrpc .com .au nextdoorfiles .in
ndcasle .com rezidencia .com
ockonr .com searchdead .org
oddwsw .co .cc searchtasty .org
offscreen .com staticpaper .nl
oiwdd .co .cc stersboy777 .in
pojdue .co .cc trakyareklam .net
ro521 .com triskell-productions .com
sabnorway .com tubamarket .com
sdlls .ru tube-heaven .co .cc
srmvx .com .br urlprotect .co .cc
t3onyghop .com uzunkopru .org
unexpo .org vallyofwonder .com
vodbd .org verificaresite .lx .ro
wantedh2o .at visitorseerdt .co .cc
weblam .net voozioapple .in
webteste .com weightsoft .in
wid .com .pl workuscnm .cafe24 .com
wunubigs .com xenoncenter .com
xomcui .com yusungtech .co .kr
yanagi .co .kr zubaidas .com .pk
zanfo .it zuiddorpe .net

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Comments are closed.