Feed

Nitro, malspam, risky domains…

Posted on September 23rd, 2012 in exploit,fastflux,malspam,New Domains,Trojans,zeus by dglosser

Added domains associated with Nitro, malspam, etc. Sources include safebrowsing.google.com, www.symantec.com, zeustracker.abuse.ch, blog.dynamoo.com, zataz.com, hosts-file.net (all sources are listed in our domain.txt file.

* Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be bannedUse wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format.  Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

NO ZONE FILES ARE LOCATED ON THIS SITE.  Users  and ip addresses which repeatedly attempt to download zone files directly from this site will be banned from all downloads.

 

 

BPhoster, Zeus, Fast Flux…

Posted on January 25th, 2012 in fastflux,New Domains,zeus by dglosser

Added 101 domains associated with BPHoster, Zeus, Fast Flux, Hiloti, iceIX. Sources include amada.abuse.ch, exposure.iseclab.org, www.emergingthreats.net (every source is  listed in the domains.txt file). Please update your blocklists/sinkhole  and review our Terms of Use.

SQLi, Fastflux Botnet, Dirt Jumper and more

Posted on October 25th, 2011 in fastflux,New Domains,RBN,rogue antivirus,Spyeye,sql injection,zeus by dglosser

Added 210 domains associated with SQLi, Dirt Jumper, RBN, fast flux botnets and other maliciousness. Sources include blog.dynamoo.com, ddanchev.blogspot.com, www.malwareurl.com and others

(Every source is  listed in the domains.txt file)

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format. (The mirror for compressed zip files is up and running – please contact us for details.)

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Drivebys, fast flux, botnet, moneymule, etc…

Posted on August 23rd, 2011 in fastflux,MoneyMule,New Domains,Phishing,Spyeye,Trojans,zeus by dglosser

A large update a few days ago which I forgot to add… Over 300 zeus, moneymule, botnet  domains…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Bulletproof Zeus, cybercrime, rogue security domains…

Posted on March 25th, 2011 in bulletproof,exploit,iframes,rogue antivirus,Trojans,zeus by dglosser

164 domains associated with Zeus (Bulletproof, drivebys), rogue antivirus ,  crybercrime and other badness. Sources include blog.sucuri.net, vxvault.siri-urz.net, www.malwaredomainlist.com (Every source is always listed in the domains.txt file):

2367 .in 3dglases-panasonic-tv .com
315uu .com 4jifnizd2w .cz .cc
3ara3a .com afteranyxxx .sytes .net
4324 .in amatricespornofrance .com
4meganet .com anoonoribujyo .linkpc .net
aabubwtathr .com antibiotics-shop .com
basicpills .com antivirusfreesmartrend .com
bestdatatool .in antivirushard .com
bhiii .co .cc antivirusmysmartrend .com
bhjjj .co .cc antivirussoftcentral .com
bhkkk .co .cc antivirussullinger .com
bhlll .co .cc antivirusullinger .com
bhmmm .co .cc antivirusxpeasy .com
bhnnn .co .cc bahiaautopecas .com .br
bhrrr .co .cc best-fast-scan .cx .cc
bigimotopast .ru billing-script .com
bufordsoft .com cacajose .sites .uol .com .br
cahodofo .com checkmeman .co .cc
carder .su dvdsoftwarestore .in
corlod7i .cz .cc eoficina .e .telefonica .net
creaps .net fedwire-reports .com .p8 .hostingprod .com
deniq .ru flyingshoestrade .com
dn3r .co .cc generic-ed-pharmacy .com
fathone .com getbackupandrunning .com
fojurus .cz .cc google-stats48 .info
freegoldsun .biz google-stats49 .info
freerttnews .com gsdha3whfh .vv .cc
freshcomp .ir hhwwswjpj .org .in
ftzo .co .cc ideal-solution .org
fuzzybean .com iolcarvalho .sites .uol .com .br
fygdzlil .co .cc issueantivirus .com
g2lr .co .cc jhda4jgdsjg .cz .cc
gabaqlygthr .com jkqlzsftofoiivx .com
getrxpills .com juniocsilva .sites .uol .com .br
gigasoftware .ru lareaddablehis .com
gjijpqhgvmt .com lessthenaminutehandle .com
greensinkod .com likeropslypwood .com
hatememan .com looseantivirus .com
iusav .com lynx-newmedia .in
izdonhesyn .com modulos2011 .hpg .com .br
jeqtzjte .co .cc mt-canete .sites .uol .com .br
jjijpohjvmt .com multi-stats .info
kagrinn .cz .cc mymagicstore .co .cc
kv5r .co .cc myscanantivirus .com
luster-adv .com nossasfotos00862 .com .sapo .pt
macroers .com online-guest .info
malathris .cz .cc ounvdlgyvrsksnkl .com
marbit .com premiumfreeantivirus .com
mediamarkinc .in pro-data-consult .in
miatxvsmthr .com releaseantivirus .com
mullador .cz .cc roleplaysanctuary .co .cc
music-cubtan .tk rttnewsantivirus .com
nwey .info salamandra-lll .cz .cc
obsh .co .cc scanantivirussearchmyfiles .com
qwsqws3 .co .cc scansearchmyfiles .com
ru-php .ru searchmyfilescanantivirus .com
rutrahxxx .ru securitylkins .com
shaliron .cz .cc seeantivirus .com
sol-stats .info shershenzhalit .ru
soretag .ru sholdrowfronap .com
sstatewin .org simplehircantivir .myfw .us
sukonah .in siquiero .com .uy
sunnmy .net sohsnowhowable .com
te7j .co .cc stream .myunire .com
tikrons0 .org sukiblyadi .name
tmdxcrlu .co .cc sullingersoft .com
to-bay .com supplyantivirus .com
topsale2 .ru system-scanner-jess .co .cc
topupdate .ru thepackplace .in
topupdaters .ru thescanantivirus .com
urwwtrnn .co .cc traffichere .dyndns-blog .com
uvbs .co .cc uiatxgsuvmt .com
vicewo .com upinsmokelala .ru
video-write .in vaccinescan .co .kr
woqaguw .co .cc video .shilysha .in
wphf .co .cc voiceiancef .com
xkrmwkdy .co .cc webantivirussoft .com
xts-pay .ru webfreeantivirus .com
y3qa .co .cc webscanantivirus .com
ypolois .cz .cc weiss-cannon .de
yuyu98 .com xclipshostre .co .cc
z3co .co .cc xz .8345netmarketing .info

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


DNS-BH Mar 19 Update: artro, palevo, bulletproof, rogue domains

Posted on March 19th, 2011 in exploit,fastflux,New Domains,rogue antivirus,Trojans,zeus by dglosser

A bunch of rogue, zeus, artro, palevo, and bulletproof domains. Sources include amada.abuse.ch, support.clean-mx.de, www.malwaredomainlist.com (Every source is always listed in the domains.txt file):

banage .ru boostxpantivirus .com
9o78 .cz .cc carahackfacebook .com
bulkbin .cn fortesteng123223 .com
pmr2 .co .cc inspectantivirus .com
psdtrp .com jtievgonpznzpbpp .com
web4kz .com liverscanantivir .com
avblast .net meuantivirusdown .com
missspan .in novoantiviruspro .com
pantamat .is peruse-antivirus .com
topksa .info realloungecentral .in
zveno-x .net seuantivirusfree .com
djtikvah .com survey-antivirus .com
glenninyx .in televisionfree .co .tv
luckycash .ru update99 .poche .ce .ms
maroder .info virtualsafetylab .com
paytraff .biz xpantivirustools .com
photopath .in xpantivirusvirus .com
poboltaem .lv antivirscantoolxp .com
povertyba .in bone-scan-antivir .com
rogueroad .ru colourscanantivir .com
udodelig .com maisantivirusscan .com
zeosleep .org xpantivirusclient .com
cs2gameme .com xpantivirusengine .com
gimigimi1 .com antivirscanspeedxp .com
hoghley .co .be antivirscantoolsxp .com
mysimash .info antiviruscrusaders .com
snapadoos .com installxpantivirus .com
thenetdata .in integrityantivirus .com
neonpage .co .cc livreantivirussoft .com
phones4wow .com meesheephotography .com
rjmvcdld .co .cc meuantivirusgratis .com
sop3sa7nop .com todosantivirusfree .com
tatu7g4ano .com xpantivirusreviews .com
textilprom .com xpantivirusupdates .com
urcmfedl .co .cc xpantivirusvendors .com
diqunoj44 .co .cc xpdesktopantivirus .com
dmpcrepairs .net antivirscanenginexp .com
koprowsko .ce .ms antivirscanimagesxp .com
sl0rd .codzs .com boundaryscanantivir .com
bigtopstudios .cn deep-antivirus-scan .com
ibmantivirus .com deep-scan-antivirus .com
xp-antivirus .com fast-malware-scan .co .cc
zapantivirus .com scrutinizeantivirus .com
antivirusdown .com xpantivirussolution .com
antivirusmeds .com antivir-scan-tool-xp .com
coolantivirus .com antivirscanenginesxp .com
fifa2012terra .com bomantivirusdownload .com
mainantivirus .com investigateantivirus .com
missantivirus .com windows-xp-antivirus .com
republikainfo .com advancedscanantivirus .com
syssupportctr .net antivir-scan-tools-xp .com
antivirussites .com best-antivirus-scan .co .cc
inolimpwetrust .com fast-antivirus-2011 .cw .cm
jsojonhjvhvtus .com fast-antivirus-scan .co .cc
ninja .ibedyou2 .com youtube .makingfaces .com .au
scan-antivirus .com antivirscancomputersxp .com
studyantivirus .com antivirscandocumentsxp .com
worldantivirus .com dl .fast-malware-scan .co .cc
grizzli-counter .com advanced-scan-antivirus .com
antivir-scan-xp .com antivir-scan-engines-xp .com
bonescanantivir .com antivirscandefinitionxp .com
peruseantivirus .com testtestforfhj111998 .com .tw
safexpantivirus .com antivirscancorporationxp .com
surveyantivirus .com antivirscancorporationxp .net
tunexpantivirus .com vcuehlunbhpltsbcwpkspxnq .com
xpantivirusscan .com antivirscantechnologiesxp .com
antivirus-survey .com cg79wo20kl92doowfn01oqpo9mdieowv5tyj .com
bomantivirusfree .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Bulletproof Domains, Moneymule Domains, Exploit Domains, iframes and more…

Exploit domains, bulletproof domains, Moneymule Domains, Palevo Domains…
Sources include amada.abuse.ch, hphosts.blogspot.com, www.malwaredomainlist.com, support.clean-mx.de (Every source is always listed in the domains.txt file):

4565 .in 2g2gsdfhfh .co .cc
5673 .in allforyouonline .com
770304123 .com antiivirusgoe .com
9us .org antiquee-corp .info
acmedecor .ru antistresser .com
ademudmadve .com antivirusemail .com
adheadies .com aramategroup-int .info
anysnare .us art-marketllc .cc
apniscmvoe .ru artmarket-llc .net
av .babypin .net banjalucke-ljepotice .ru
av2011 .co .cc banner-stats .org
bebookfunk .com chriseden73 .free .fr
bevelli .com chronos-network .com
bmjdr .free .fr directsecuresite .com
ciss .cz .cc fourth-ukltd .net
dgp .cc fourthgroup-ltd .cc
dkandskm .com freeinfosociety .com
evnagivu .in g23ghshdfshj .co .cc
evnvu .in geg2gsxhsh .co .cc
f5v9w .com greekweddings .biz
fj43 .co .cc gsg23gsdhsh .co .cc
gamersite .eu gsg32gasegsh .co .cc
gghkqkkgytn .com hbaehanfznjfh .co .cc
guitarheroe .es helby-groupltd .biz
hd-56 .com highsecuritydirect .com
hitchouston .com hy-brasil .mhwang .com
hosgeffer .co .cc irc .ekizmedia .com
hotupdates .ru jejushinshin .co .kr
inetwork .by .ru junaidandzia .com
inf0z .com .ua karlasantoscaentano .com
iranblog .com knives .mahtarep .net
jiayifan .cn kssa .peasoul .com
jocelrolex .net mails .lebadv .com
kadds .ru marchingbaby .com
kamasut .net nudedancegirls .co .cc
karma2you .net officialsecuredsite .com
kghkqkkkdve .com oyunyoneticisi .com
koralda .com pickeklosarske .ru
landriver44 .ru qead-groupllc .net
mailforw .org query-google .com
maislex .net rolemodelstreetteam .invasioncrew .com
mix-plus .co .kr schwartzbrothersant-corp .com
odile-marco .com sdh4hsfhjfdjhsdf .co .cc
onlydev .fr securedirectsite .com
p0teha .com .ua securedsitedirect .com
pc-cheats .de securelive .co .kr
playerbox .in servicio-fisico .info
poqwwrr .com sexy-serbian-girls .info
pushot .com shopmovieproduction .cn
qead-llc .biz squitgroup-llc .net
radiosci .info taruntextiles .com
rignorell .info throne-groupllc .cc
sc2wc .info thronegroup-llc .co
send29931 .cn tinassanservice-groupllc .cc
sfgytdysytn .com tinassanserviceant-antteam .net
signafrica .com tinujeemoatoc .linkpc .net
sinip .es unfaimos .land .ru
stepworth .com update-drivers .in
svjazinet .ru us-acoongroup .net
throne-uk .at vintage-groupco .biz
twilattice .in vintagegroup-inc .com
uuquhc .ru west-view-art .cc
vdsvps .in westview-art .net
weirden .com worldofart-ltd .info
yujinshan .cn zccz .interfree .it
zhirok .net zemondocooler .com
zkasbo .ru

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

iframes, artro c&c domains, scareware domains

Posted on February 20th, 2011 in iframes,New Domains,rogue antivirus,Trojans,zeus,zlob by dglosser

This update includes zeus, tdss rootlkit, scareware,  and other harmful, malicious sites and domains. Sources include ddanchev.blogspot.com, safebrowsing.google.com, www.sacour.cn and many others (Every source is always listed in the domains.txt file):

9365 .org gdezdeskto .co .cc
1f0fy .com hdfg43hshf .co .cc
8op .cz .cc hh3hfdnfdh .co .cc
elycam .cl hu587tiugi .vv .cc
martuz .cn nemohuildifsd .ru
ntcub .com oajhqooooeqea .in
web7t .com shgeru43hj .co .cc
360doc .com space-tome .co .cc
4www .cz .cc sparebankno1 .com
chango .com teamauctions .com
globe7 .com crj711ki813ck .com
moa3 .co .cc europalebasket .fr
turksex .co f23f21fafae .vv .cc
1porn .co .tv foxypredators .com
bluedisk .ru gdsg342gsgs .vv .cc
dddddd .info gsdg24gshgr .vv .cc
fotopush .ru gsdg43hsweh .co .cc
grb1505 .com gsg3gsdgseg .co .cc
m2121212 .cn gshg3ghsdhs .co .cc
myzoomia .in hdh45hdxfhf .co .cc
redsa .co .cc hfehe3hdfhf .co .cc
weniz .co .kr hugemoviecams .com
a1celebs .com klikspaandelft .nl
findwild .org lkckclcklii1i .com
fmx930 .co .cc parislemarais .com
hushstar .net pornhugevideo .com
madcrack .org releaseplugins .in
oneyaho .info shalillador .cz .cc
prontv .co .cc supermovieshow .in
snarework .us 212156dnfgdn .co .cc
tableplus .in automaticyaran .com
abcd1123 .info bdfnfebne3nf .vv .cc
animacord .com cleanalertcomp .com
chatpoetry .in cy71mavertoo .co .cc
gigasexc .info gsegf3gstg3g .vv .cc
gnu4oke0r .com gsgwegweg23g .vv .cc
snaretrace .us hdfh34hdrfhf .co .cc
tradejas .info ht4hdfgjcjgt .vv .cc
utrade-fx .com interscienceset .in
andradekor .com oijqujnnnsu1 .co .cc
asertinvoi .com premiumutilites .in
bfbf3bfb .vv .cc resortsinitaly .com
cebandis .cz .cc solutionslove .info
cworldxxx .info tubemovievideo .com
drelagda .vv .cc wefge3g1tg1g .vv .cc
enjoy-find .com hyperass-save .rr .nu
firtenbild .com pcwardingsystem .com
gfsdg4gs .co .cc rancholacienega .com
graninis .cz .cc video .blaskel .cz .cc
gworldxxx .info afroprivacyflash .com
hmbcompn12 .com burnley .web-fans .com
hugebigred .com hardnetwork-guard .in
hworldxxx .info hndfdfnfdnxdnf .vv .cc
inmediateam .in hugebigpornmovie .com
malakelv .cz .cc pctroublessolver .com
maridora .vv .cc antivirusesshield .com
micr0abuse .com hdhfdhdfhdfhdfh .vv .cc
natnatraoi .com hiringdivisionjob .com
nvmtymvm .vv .cc 031aec9 .netsolhost .com
oghmalak .vv .cc dvdtubeclipsjbsw .co .cc
pixellove .info monasteriodeboltana .es
prime-load .org pcactivitydebugger .com
topmoviewww .in pccustodianutility .com
tuberedsex .com update-win-soft .ipq .co
videoplugs .net gayeqylipija .linkpc .net
vivaxmotos .com lasicytylyne .linkpc .net
vrazdanuzda .dk pcinspectionutility .com
ajicajcadve .com pcprecautionscenter .com
ajimuqmadve .com pcprotectionservant .com
anti-vir-mc .com yeryeshsdhdhjfdhj .vv .cc
chicagotable .in digitalvideodirectory .in
fdf2fafaf .vv .cc pcstabilitymaximizer .com
gaboyaogytn .com systemtasksoptimizer .com
gewheheh4 .co .cc taskstweakingutility .com
gsgsv2vds .vv .cc facebook-surprise-ness .tk
ifilmmanager .in pcefficiencyreservoir .com
jbcavlajytn .com iecigoqojafuq .publicvm .com
menelibigos .com systemattentionutility .com
morlunaya .vv .cc systemshieldingutility .com
pokeryahoo .info opalicki9hpcarole .narod2 .ru
qbcavlaqdve .com systemsupervisioncenter .com
ristaemanue .com favorit-protectionavwo .rr .nu
sgtbcollege .org pcriskspreventionscenter .com
states-me .co .cc rnyhrdqcokuvjiqw25nwdlif .com
vsegwgewg .vv .cc systemanticrashesutility .com
wancheng .gov .cn accidentspreventingcenter .com
32fdsg3gsg .vv .cc pcautomaticproblemssolver .com
androlhala .cz .cc systemwrecksavertingsystem .com
bigvideocams .com gite-maison-pyrenees-luchon .com
centrihelm .cz .cc bacalhaubr .dominiotemporario .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

gumblar, neosploit, mebroot and other malicious domains

Posted on February 10th, 2011 in exploit,gumblar,New Domains,rogue antivirus,Spyeye,Trojans by dglosser

132 malicious sites and domains to add to your blocklist or malware shunlist. Sources include viralerts.com, securehomenetworks.blogspot.com, safebrowsing.google.com (Every source is always listed in the domains.txt file):

67i56y .co .cc 05584b4eff1eaa28 .com
abcfghfadve .com 37bf278f43c6b010 .com
abcfgqfadve .com 3c386b38174d842c .com
akyoma .com 4033da9724eed79f .com
edgeopia .in 43284729394324324 .com
fajowe .ovh .org 4db3fbcf385b84a7 .com
fnyoga .biz 5831c81cfa6ca6a7 .com
foto-retuse .cz 5dcf361c821fd9f0482504a16ff03351 .net
fotoris .co .kr 633f197ada10ea81 .com
gfgytsygytn .com 764061ff508d4a4c .com
ghgfh65 .co .cc 7c9954a76eeca202 .com
glermitfatr .com 7fd61bb596fa4277 .com
gnci-ict .com 826ccb84c37c7dc1 .com
hag-eng .co .il 87932748973284 .com
homejasm .info 880265094dc14384 .com
homewindowz .net 8f36492f1cbd9183 .com
ifcil .fr 9daa449337f8adeb .com
jasminsite .info 9f7a30252e13d39d .com
jasmwin .info a11cddb7a03a076f .com
jghkqhkjytn .com a709d8c6a44be227 .com
kingsoftus .com aa0131c1c816119d .com
klliker .info abda114debec233b .com
live2cam .ru fashionnails1 .com
loanvideo .info ff-traditions .com
lovecodi .com invincible72 .com
marinada8 .com jasmincredit .info
modulosnovs .com jgw .webspace .heihachi-hosting .net
mp3car .ru kinderfeestjesinfriesland .nl
musicjasm .info kiralikasansorizmir .com
n-able .in kiropraktoren .eu
nakedbi .com krutikservers .com
new-friha .cz .cc mariosflyingpizzaclearlake .com
obckqbkoytn .com marketingjasm .info
ocdqdyqodve .com marketvideo .info
moviezzzonline .com
orleisll .biz myrtesjordao .sites .uol .com .br
oxnard .la nakoncu .superhost .pl
oxxxi .com networkjasmin .info
pakptc .com new-softdriver .tk
pccar .ru newbrandlabel .ru
pixelvideo .info orkut .krovatka .su
pohuy .ws parraxaxa1972 .sites .uol .com .br
qualitysuper .nu reihstagf .ind .in
rhysen .in sakhg34fhelpweb .co .cc
sda2a .ipq .co sandrahyczy .sites .uol .com .br
shoremill .com scdqdyqsytn .com
showkurve .de sghpbepsytn .com
sis-street .com showdevelopment .com
skipolice .in shreeramrealestate .com
thpkmlnuzc .ru smallcap360 .com
topjasm .info smart2group .com
ts-webmail .com tas-seaplane .com
unfortineg .com testdataonline .in
wastedsh .info thetotalmedia .in
wholefiles .in traffic-analytics .net
wwwfulldata .in trustgeobiz .com
xengine .ru tunisianowar .ru
xivee .com turkeyinworld .ru
xload .ipq .co udewpfwuytn .com
zaduheljtw .ru www30 .websamba .com
zaebiz .eu xn--fct5gx28h9gs .tw
zxsoftpromo .ru xxvideogold .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

NeoSploit, FastFlux, Zeus, MoneyMule Domains

Posted on February 8th, 2011 in exploit,fastflux,gumblar,iframes,MoneyMule,New Domains,NewSploit,rogue antivirus,zeus by dglosser

Something for everyone…  Neosploit. Gumblar, fastflux, rogue, phoenix, money mule, zeus, and more…

Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com (Welcome Back), blog.unmaskparasites.com, zeustracker.abuse.ch (Every source is always listed in the domains.txt file)

13grandferi .ru 2cbefb47060e6bc9 .com
329902034111 .com 349832409002394 .com
32gdjfkivcf .co .cc adolftsboyarinove .narod2 .ru
32tsdgseg .co .cc alwayskl2 .dyndns-home .com
4star-solutions .cc antibreakingsystem .com
acoon-groupllc .cc antivirussystem2011corp .com
acoongroup-llc .co arphis-goldgroup .cc
addaxonahacko .info arphisgoldgroup-inc .co
adscomplete .info asassis .sites .uol .com .br
aimic-groupllc .cc b16f0f08c55e9cc5 .com
alice .it b7bb5832b25c7869 .com
amina-groupco .co barracuda-antivirus .com
amina-groupinc .cc c5667d150fe0b41b .com
aminaorg .cc carlosfalavina .sites .uol .com .br
amstelone3 .biz cef1cef16e9471c9 .com
araccldta .net cefd9f37178eb5e4 .com
asystem .sk componentsprotector .com
bbs2 .mapeak .com daniilgrkrutoyzu .narod2 .ru
bonutilite .in dd79e9f502426e84 .com
browndrives .com digitalfilessite .in
browserdl .com diligence-groupinc .cc
buyvideo .info dvdstreamclipsluwl .co .cc
casinojasm .info e395368c52b40e2a .com
checkoutlook .info eder_rogerio .sites .uol .com .br
citygates .biz eef795a4eddaf1e7bd79212acc9dde16 .net
cocoongroup-llc .hk ef0a5ecbf42d83ed .com
consolemato .com elsden-groupinc .hk
curery-best .in engineering-design .org
diligence-group .co escorialescorial .com
dsjkslnew .com evgeniyayaiardankinyae .narod2 .ru
eejewels .co extratopupgrade .ru
englishrescue .com f532f7f478af8e7a .com
espmexusa .ru f598f03740695a8d .com
essalundahl .com facebook-surprise-cvsa .tk
ethesis .org facebook-surprise-cvsd .tk
filegroup-llc .co facebook-surprise-cvsf .tk
filvorks .com facebook-surprise-cvsg .tk
finestplugin .in facebook-surprise-cvsh .tk
firstola .net facebook-surprise-cvsi .tk
freminoust .com facebook-surprise-cvso .tk
gabtijtgytn .com facebook-surprise-cvsp .tk
gharibola .ru facebook-surprise-cvsq .tk
gotoessaved .rr .nu facebook-surprise-cvsr .tk
gotquesaved .rr .nu facebook-surprise-cvss .tk
goturssaved .rr .nu facebook-surprise-cvst .tk
greyzzsecure3 .com facebook-surprise-cvsu .tk
hirodomain .com facebook-surprise-cvsw .tk
im-sysgroup .co facebook-surprise-cvsy .tk
incogroup-usa .co fc03ec727f8861ef .com
kliikers .info fd06366c338dc774 .com
lbm-groupinc .co fe59294ea5f6f07c .com
lbmgroupco .cc feeder .next-time-feed .org
lcd-finance .cc filerestingplace .in
ledurbano .com getdigitalvideo .in
lookasaudio .com gleichfalls-groupinc .co
mallow-group .cc hardpower-holder .rr .nu
mijn-roedel .be hryyyymerwireless .net
minka .com .pe i-compass-group .co
money-visualuk .cc icr01 .appbundler .net
movenestecobra .ru imsystems-group .cc
muffsave9 .com lidiyadmvitinskiyvm .narod2 .ru
mukertvaros .hu lifeinsurancequestions .info
newufuq .com longhui .yhnetwork .cn
ntstats .com mail .privacycop .co .kr
oneboy .ru mallow-groupinc .co
pegasltdunion .cc michaelesgroup-usa .co
peruvianfood .com modulesadvanced .pro .br
psgtech72 .com moneyvisual-llc .co
radiumuk-ltd .cc moonlightw .mireene .com
randomlegend .net ozarkcreationsandantiques .com
rerodvix .info physis-groupllc .cc
safesecurenow .com physisgroup-llc .co
santorini-fin .cc pinfold-groupinc .co
savvyladies .net prazer2008 .sites .uol .com .br
scanavtool .com rajeshwariinfosys .com
snaretrack .biz rameshwartiles .com
stile-groupllc .cc redisco-groupinc .hk
studioingconti .it safe-securitymaster .rr .nu
techadvinc .cc savescan-foryou .rr .nu
traxchexfree .ru scanersolutionse .rr .nu
usgroup-amina .co schneller-groupinc .co
usgroup-reign .co schwartz-brothers .cc
virgilguard10 .com secure-softwaremanager .com
virgilguard2 .com securityguardprep .com
virgilguard3 .com silversun-groupuk .co
virgilguard4 .com silversungroup-inc .cc
virgilguard5 .com simple-network-checker .rr .nu
virgilguard6 .com stepanyggorokhovshchk .narod2 .ru
virgilguard7 .com studyincolorado .com
virgilguard8 .com terminal-service .net
virgilguard9 .com update .ip-ntwk .com
werodvix .info yqaireciye .linkpc .net
wizu .webd .pl

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…