Feed

Bulletproof Zeus, cybercrime, rogue security domains…

Posted on March 25th, 2011 in bulletproof,exploit,iframes,rogue antivirus,Trojans,zeus by dglosser

164 domains associated with Zeus (Bulletproof, drivebys), rogue antivirus ,  crybercrime and other badness. Sources include blog.sucuri.net, vxvault.siri-urz.net, www.malwaredomainlist.com (Every source is always listed in the domains.txt file):

2367 .in 3dglases-panasonic-tv .com
315uu .com 4jifnizd2w .cz .cc
3ara3a .com afteranyxxx .sytes .net
4324 .in amatricespornofrance .com
4meganet .com anoonoribujyo .linkpc .net
aabubwtathr .com antibiotics-shop .com
basicpills .com antivirusfreesmartrend .com
bestdatatool .in antivirushard .com
bhiii .co .cc antivirusmysmartrend .com
bhjjj .co .cc antivirussoftcentral .com
bhkkk .co .cc antivirussullinger .com
bhlll .co .cc antivirusullinger .com
bhmmm .co .cc antivirusxpeasy .com
bhnnn .co .cc bahiaautopecas .com .br
bhrrr .co .cc best-fast-scan .cx .cc
bigimotopast .ru billing-script .com
bufordsoft .com cacajose .sites .uol .com .br
cahodofo .com checkmeman .co .cc
carder .su dvdsoftwarestore .in
corlod7i .cz .cc eoficina .e .telefonica .net
creaps .net fedwire-reports .com .p8 .hostingprod .com
deniq .ru flyingshoestrade .com
dn3r .co .cc generic-ed-pharmacy .com
fathone .com getbackupandrunning .com
fojurus .cz .cc google-stats48 .info
freegoldsun .biz google-stats49 .info
freerttnews .com gsdha3whfh .vv .cc
freshcomp .ir hhwwswjpj .org .in
ftzo .co .cc ideal-solution .org
fuzzybean .com iolcarvalho .sites .uol .com .br
fygdzlil .co .cc issueantivirus .com
g2lr .co .cc jhda4jgdsjg .cz .cc
gabaqlygthr .com jkqlzsftofoiivx .com
getrxpills .com juniocsilva .sites .uol .com .br
gigasoftware .ru lareaddablehis .com
gjijpqhgvmt .com lessthenaminutehandle .com
greensinkod .com likeropslypwood .com
hatememan .com looseantivirus .com
iusav .com lynx-newmedia .in
izdonhesyn .com modulos2011 .hpg .com .br
jeqtzjte .co .cc mt-canete .sites .uol .com .br
jjijpohjvmt .com multi-stats .info
kagrinn .cz .cc mymagicstore .co .cc
kv5r .co .cc myscanantivirus .com
luster-adv .com nossasfotos00862 .com .sapo .pt
macroers .com online-guest .info
malathris .cz .cc ounvdlgyvrsksnkl .com
marbit .com premiumfreeantivirus .com
mediamarkinc .in pro-data-consult .in
miatxvsmthr .com releaseantivirus .com
mullador .cz .cc roleplaysanctuary .co .cc
music-cubtan .tk rttnewsantivirus .com
nwey .info salamandra-lll .cz .cc
obsh .co .cc scanantivirussearchmyfiles .com
qwsqws3 .co .cc scansearchmyfiles .com
ru-php .ru searchmyfilescanantivirus .com
rutrahxxx .ru securitylkins .com
shaliron .cz .cc seeantivirus .com
sol-stats .info shershenzhalit .ru
soretag .ru sholdrowfronap .com
sstatewin .org simplehircantivir .myfw .us
sukonah .in siquiero .com .uy
sunnmy .net sohsnowhowable .com
te7j .co .cc stream .myunire .com
tikrons0 .org sukiblyadi .name
tmdxcrlu .co .cc sullingersoft .com
to-bay .com supplyantivirus .com
topsale2 .ru system-scanner-jess .co .cc
topupdate .ru thepackplace .in
topupdaters .ru thescanantivirus .com
urwwtrnn .co .cc traffichere .dyndns-blog .com
uvbs .co .cc uiatxgsuvmt .com
vicewo .com upinsmokelala .ru
video-write .in vaccinescan .co .kr
woqaguw .co .cc video .shilysha .in
wphf .co .cc voiceiancef .com
xkrmwkdy .co .cc webantivirussoft .com
xts-pay .ru webfreeantivirus .com
y3qa .co .cc webscanantivirus .com
ypolois .cz .cc weiss-cannon .de
yuyu98 .com xclipshostre .co .cc
z3co .co .cc xz .8345netmarketing .info

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Comments are closed.