DNS-BH Mar 19 Update: artro, palevo, bulletproof, rogue domains

Posted on March 19th, 2011 in exploit,fastflux,New Domains,rogue antivirus,Trojans,zeus by dglosser

A bunch of rogue, zeus, artro, palevo, and bulletproof domains. Sources include amada.abuse.ch, support.clean-mx.de, www.malwaredomainlist.com (Every source is always listed in the domains.txt file):

banage .ru boostxpantivirus .com
9o78 .cz .cc carahackfacebook .com
bulkbin .cn fortesteng123223 .com
pmr2 .co .cc inspectantivirus .com
psdtrp .com jtievgonpznzpbpp .com
web4kz .com liverscanantivir .com
avblast .net meuantivirusdown .com
missspan .in novoantiviruspro .com
pantamat .is peruse-antivirus .com
topksa .info realloungecentral .in
zveno-x .net seuantivirusfree .com
djtikvah .com survey-antivirus .com
glenninyx .in televisionfree .co .tv
luckycash .ru update99 .poche .ce .ms
maroder .info virtualsafetylab .com
paytraff .biz xpantivirustools .com
photopath .in xpantivirusvirus .com
poboltaem .lv antivirscantoolxp .com
povertyba .in bone-scan-antivir .com
rogueroad .ru colourscanantivir .com
udodelig .com maisantivirusscan .com
zeosleep .org xpantivirusclient .com
cs2gameme .com xpantivirusengine .com
gimigimi1 .com antivirscanspeedxp .com
hoghley .co .be antivirscantoolsxp .com
mysimash .info antiviruscrusaders .com
snapadoos .com installxpantivirus .com
thenetdata .in integrityantivirus .com
neonpage .co .cc livreantivirussoft .com
phones4wow .com meesheephotography .com
rjmvcdld .co .cc meuantivirusgratis .com
sop3sa7nop .com todosantivirusfree .com
tatu7g4ano .com xpantivirusreviews .com
textilprom .com xpantivirusupdates .com
urcmfedl .co .cc xpantivirusvendors .com
diqunoj44 .co .cc xpdesktopantivirus .com
dmpcrepairs .net antivirscanenginexp .com
koprowsko .ce .ms antivirscanimagesxp .com
sl0rd .codzs .com boundaryscanantivir .com
bigtopstudios .cn deep-antivirus-scan .com
ibmantivirus .com deep-scan-antivirus .com
xp-antivirus .com fast-malware-scan .co .cc
zapantivirus .com scrutinizeantivirus .com
antivirusdown .com xpantivirussolution .com
antivirusmeds .com antivir-scan-tool-xp .com
coolantivirus .com antivirscanenginesxp .com
fifa2012terra .com bomantivirusdownload .com
mainantivirus .com investigateantivirus .com
missantivirus .com windows-xp-antivirus .com
republikainfo .com advancedscanantivirus .com
syssupportctr .net antivir-scan-tools-xp .com
antivirussites .com best-antivirus-scan .co .cc
inolimpwetrust .com fast-antivirus-2011 .cw .cm
jsojonhjvhvtus .com fast-antivirus-scan .co .cc
ninja .ibedyou2 .com youtube .makingfaces .com .au
scan-antivirus .com antivirscancomputersxp .com
studyantivirus .com antivirscandocumentsxp .com
worldantivirus .com dl .fast-malware-scan .co .cc
grizzli-counter .com advanced-scan-antivirus .com
antivir-scan-xp .com antivir-scan-engines-xp .com
bonescanantivir .com antivirscandefinitionxp .com
peruseantivirus .com testtestforfhj111998 .com .tw
safexpantivirus .com antivirscancorporationxp .com
surveyantivirus .com antivirscancorporationxp .net
tunexpantivirus .com vcuehlunbhpltsbcwpkspxnq .com
xpantivirusscan .com antivirscantechnologiesxp .com
antivirus-survey .com cg79wo20kl92doowfn01oqpo9mdieowv5tyj .com
bomantivirusfree .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Comments are closed.