Feed

spyeye, pheonix, palevo, blackhole exploit kit domains

Posted on February 13th, 2011 in gumblar,iframes,New Domains,Spyeye,Trojans,zeus by dglosser

Malicious domains associated with blackhole exploit kit, palevo, gumblar, spyeye and other exploits. Sources include honeywhales.com, honeywhales.com, stopmalvertising.com (Every source is always listed in the domains.txt file):

0did .co .cc 1iuhebritur .com
0r9h .co .cc 24thehshsdw .com
1gov .co .cc 3ffhi5uehbg .com
2gov .co .cc 4oihtgfgklnld .com
asfirey .com 5dshhgodhgi .com
autoklad .net 7hrtheg8deg .com
axstat .com 9f348hthgsf .com
banage .ru ajirfqradve .com
bevelli .com antispamverification .com
bgnt .net asfiuweof .co .cc
bki1 .co .cc automaticyaran .com
bki3 .co .cc av-updates .cw .cm
brempinok .com banjalucke-ljepotice .ru
cityjas .info bnet .doesntexist .org
clicklive .info booblegum22 .co .cc
codelive .info browsewriter .in
cupit-dom .com cheburash .ind .in
d1-eniro .com cl-whitelist .com
datayakoz .info clickweekend .info
disdarred .info co-co-co-co .cz .cc
dlm3 .co .cc diveintoaccessibility .org
dlm7 .co .cc facebook-surprise-jnsd .tk
eiub4ugbud .com facebook-surprise-ness .tk
elgeriofey .com findweekend .info
erubf .info foxypredators .com
flylive .info golontsaver1 .com
g-oogl-e .com gotbigbooty .org
gdsg .co .cc gube2qome8 .cz .cc
geodemy .com hotgallerygirls4u .com
goneblast .com hotvalentin .info
h4rthrt .co .cc houseaskme .info
hca-media .com hw9 .hostseguro .com
hotupdate .ru jebena .ananikolic .su
hujn .co .cc kirmayerlaw .com
hushstar .net lolallvolume .com
inkstock .gr makeitmove .com .au
jastrade .info mandoguard4 .com
jpg7 .cz .cc nawidakhgar .com
kaddos .ru nepalembassy .pk
ko6l .co .cc no-email-spam .com
kolhat .pl odemuamodve .com
kotofey .com ohjvnkvodve .com
lmagehost .com parislemarais .com
loanlove .info pcactivitydebugger .com
locodap .co .cc pcprecautionscenter .com
loveloan .info pcprotectionservant .com
magicbed .co .kr pyxovirginia .in
makliop .biz resortsinitaly .com
mixvide .info sagehillweb .com
naga2013 .co .cc satel25nbr .co .cc
naga2014 .co .cc sgtbcollege .org
nero .gol .ge silnopernul .co .cc
onmimay .com starmediainfo .in
pardokkate .com statick-dns .com
pay-clicks .ru storage-reportcenter678 .net
popatube .info storage-spectrgrover677 .net
pornero .info storageistorg-basdan678 .com
prodriver .ru supermovieshow .in
pushot .com swaytindel .com
reflerman .com systemtasksoptimizer .com
sb .uz t43hotorhe .com
seastats .com teamauctions .com
shljapa .com tuqidig5 .co .cc
t6ryt56 .info update-win-soft .ipq .co
trquebec .in urcdw .zavoddebila .com
vwi8 .co .cc v5881 .vozenet .com
vwi9 .co .cc valentincredit .info
web-der .com valentinsource .info
webfamba .in veodejtikkkaa .in
webzadel .in videospartyh .info
wildprize .com virgilguard1 .com
wodied .net vivaxmotos .com
wudcmb .net weekendbest .info
yaholove .info wellcomedowqa .co .cc
yahoone .info xeydvpyxvtacr .in
yakozbuy .info yahodigital .info
yakozwin .info yakozcool .info
youtube .me .uk zanzabaros .com
zxstats .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

NeoSploit, FastFlux, Zeus, MoneyMule Domains

Posted on February 8th, 2011 in exploit,fastflux,gumblar,iframes,MoneyMule,New Domains,NewSploit,rogue antivirus,zeus by dglosser

Something for everyone…  Neosploit. Gumblar, fastflux, rogue, phoenix, money mule, zeus, and more…

Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com (Welcome Back), blog.unmaskparasites.com, zeustracker.abuse.ch (Every source is always listed in the domains.txt file)

13grandferi .ru 2cbefb47060e6bc9 .com
329902034111 .com 349832409002394 .com
32gdjfkivcf .co .cc adolftsboyarinove .narod2 .ru
32tsdgseg .co .cc alwayskl2 .dyndns-home .com
4star-solutions .cc antibreakingsystem .com
acoon-groupllc .cc antivirussystem2011corp .com
acoongroup-llc .co arphis-goldgroup .cc
addaxonahacko .info arphisgoldgroup-inc .co
adscomplete .info asassis .sites .uol .com .br
aimic-groupllc .cc b16f0f08c55e9cc5 .com
alice .it b7bb5832b25c7869 .com
amina-groupco .co barracuda-antivirus .com
amina-groupinc .cc c5667d150fe0b41b .com
aminaorg .cc carlosfalavina .sites .uol .com .br
amstelone3 .biz cef1cef16e9471c9 .com
araccldta .net cefd9f37178eb5e4 .com
asystem .sk componentsprotector .com
bbs2 .mapeak .com daniilgrkrutoyzu .narod2 .ru
bonutilite .in dd79e9f502426e84 .com
browndrives .com digitalfilessite .in
browserdl .com diligence-groupinc .cc
buyvideo .info dvdstreamclipsluwl .co .cc
casinojasm .info e395368c52b40e2a .com
checkoutlook .info eder_rogerio .sites .uol .com .br
citygates .biz eef795a4eddaf1e7bd79212acc9dde16 .net
cocoongroup-llc .hk ef0a5ecbf42d83ed .com
consolemato .com elsden-groupinc .hk
curery-best .in engineering-design .org
diligence-group .co escorialescorial .com
dsjkslnew .com evgeniyayaiardankinyae .narod2 .ru
eejewels .co extratopupgrade .ru
englishrescue .com f532f7f478af8e7a .com
espmexusa .ru f598f03740695a8d .com
essalundahl .com facebook-surprise-cvsa .tk
ethesis .org facebook-surprise-cvsd .tk
filegroup-llc .co facebook-surprise-cvsf .tk
filvorks .com facebook-surprise-cvsg .tk
finestplugin .in facebook-surprise-cvsh .tk
firstola .net facebook-surprise-cvsi .tk
freminoust .com facebook-surprise-cvso .tk
gabtijtgytn .com facebook-surprise-cvsp .tk
gharibola .ru facebook-surprise-cvsq .tk
gotoessaved .rr .nu facebook-surprise-cvsr .tk
gotquesaved .rr .nu facebook-surprise-cvss .tk
goturssaved .rr .nu facebook-surprise-cvst .tk
greyzzsecure3 .com facebook-surprise-cvsu .tk
hirodomain .com facebook-surprise-cvsw .tk
im-sysgroup .co facebook-surprise-cvsy .tk
incogroup-usa .co fc03ec727f8861ef .com
kliikers .info fd06366c338dc774 .com
lbm-groupinc .co fe59294ea5f6f07c .com
lbmgroupco .cc feeder .next-time-feed .org
lcd-finance .cc filerestingplace .in
ledurbano .com getdigitalvideo .in
lookasaudio .com gleichfalls-groupinc .co
mallow-group .cc hardpower-holder .rr .nu
mijn-roedel .be hryyyymerwireless .net
minka .com .pe i-compass-group .co
money-visualuk .cc icr01 .appbundler .net
movenestecobra .ru imsystems-group .cc
muffsave9 .com lidiyadmvitinskiyvm .narod2 .ru
mukertvaros .hu lifeinsurancequestions .info
newufuq .com longhui .yhnetwork .cn
ntstats .com mail .privacycop .co .kr
oneboy .ru mallow-groupinc .co
pegasltdunion .cc michaelesgroup-usa .co
peruvianfood .com modulesadvanced .pro .br
psgtech72 .com moneyvisual-llc .co
radiumuk-ltd .cc moonlightw .mireene .com
randomlegend .net ozarkcreationsandantiques .com
rerodvix .info physis-groupllc .cc
safesecurenow .com physisgroup-llc .co
santorini-fin .cc pinfold-groupinc .co
savvyladies .net prazer2008 .sites .uol .com .br
scanavtool .com rajeshwariinfosys .com
snaretrack .biz rameshwartiles .com
stile-groupllc .cc redisco-groupinc .hk
studioingconti .it safe-securitymaster .rr .nu
techadvinc .cc savescan-foryou .rr .nu
traxchexfree .ru scanersolutionse .rr .nu
usgroup-amina .co schneller-groupinc .co
usgroup-reign .co schwartz-brothers .cc
virgilguard10 .com secure-softwaremanager .com
virgilguard2 .com securityguardprep .com
virgilguard3 .com silversun-groupuk .co
virgilguard4 .com silversungroup-inc .cc
virgilguard5 .com simple-network-checker .rr .nu
virgilguard6 .com stepanyggorokhovshchk .narod2 .ru
virgilguard7 .com studyincolorado .com
virgilguard8 .com terminal-service .net
virgilguard9 .com update .ip-ntwk .com
werodvix .info yqaireciye .linkpc .net
wizu .webd .pl

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

179 New Malicious Domains

Posted on February 6th, 2011 in exploit,gumblar,New Domains,rogue antivirus by dglosser

179 new malicious sites associated with gumblar, backdoors, moneymule, rogue security. Sources include securehomenetworks.blogspot.com, blog.unmaskparasites.com,
www.cyber-ta.org (Every source is always listed in the domains.txt file)

4yurin .net 0b95e3b26f61814ccfff14732cf677f0 .info
accuratefiles .com 0f5587ea64f31c07a5c8c4e2d772a9c3 .info
ad-clear .com 20fe6f701bb9958ea8f21b5ed059c8e5 .info
antalyapress .com 2665ca51e64ed43371806fb58d939201 .info
antalyarally .com 2a68e7fae7692079eea9d03e9fdf0c19 .info
aus-finance .cc 2c6fafb275abdbe9ab914749d72c61e4 .info
aus-fininc .cc 39c2624ef781533934fd27b0b2cc537d .info
chargerz1970 .com 3d23e5816b59a22f52e7c7e9c2f0744c .info
chicor23 .com 4bab612b800ae4f788c5a14806f532c8 .info
cores-group .cc 4f2a5f41bf5e31b4701fe34191271e0d .info
couksns .cc 52c9d58f42d3ff15b1581fe7bc71c0cb .info
cushyhost .com 793266ef7c7b5b17429e9b6c689cb979 .info
dc06 .arabsh .com 7f7fb7020e658a93c9e1641cc474acfc .info
dc10 .arabsh .com 85c8e547c1c857d0b0ab9676736c3152 .info
decadnt .com 87d53fbc27630e53a7ca13b7242defb3 .info
detkasupe .co .cc 87f9197b3e6d886b72c1eb2d7af9e5e7 .info
directit .info 8c46a1cf0f8dcc3695862e6fef0fec18 .info
dret1q .cz .cc 8f5eff3f24fbea5a500ba9974779f6e6 .info
eftpsystem .com 98bde9f1137db98765508578349694a2 .info
egrfucgo .co .cc beckmenvineyards .com
elsoplongt .com best-onlysentinel .rr .nu
et-treska .com bredgar-groupllc .cc
farline-fin .co bredgargroup-llc .co
fawgh3 .cz .cc c34caefa7dabc50ce543000f24bce605 .info
filebox .me c48d93ee3ae1a2eadf5ec711616c248c .info
fintec-ltd .cc carport-diagnose .de
fintec-uk .co casinoantalya .com
forexinvest4 .com cesis-groupllc .cc
freshversion .biz cesisgroup-llc .cc
gazuem .co .cc coresgroup-inc .co
goo .gl craft-groupnet .cc
hhk57ryy .co .cc d5403e5622841dd806915a4de67dd9f8 .info
juzmksab .co .cc da9341709e53ad11d84c6284eda86043 .info
koilorio .com dangerousteens .com
lcd-fin .co dca3eeefdd8929d4bdf515a9089dd8f6 .info
liveonair .net descarga-total .com
lulango .com duncroft-group-inc .cc
macrotech-uk .co eac932138dbfdce39966aa07d36b3361 .info
macrotechinc .cc ebde6cc774abc92ea899dac57371454f .info
marfygroup .cc emule-security .net
mkbrothers .com f01cd3f7b4095b172df8ea9551943339 .info
mopar443 .com farline-fininc .cc
moparcars .net fc281189368041da24696fd4e1114cef .info
mypromofile .info fcccd8966e123fe9833b40b08db0ac18 .info
noble-works .net freezdec-ru .1gb .ru
nowtostream .in goodivelensay .org
onedatadirect .in googleantivirusonline12010 .co .cc
pc-privacy .co .kr journey-financial .cc
pixforfree .net monsterbux .ax3 .net
portal .maipu .cl oliver-sonsinc .cc
portalunse .com .ar online-solutionsllc .cc
prestoni .in powersonic .com .br
primobit .com privacyhidden .co .kr
privacyme .co .kr privacykeep .co .kr
productism .com privacyright .co .kr
qoqefa6 .co .cc productionguy .com
quadportal .co .cc productprotection .co .cc
quvvrvvrz .co .cc progi-gamesmail .ucoz .ru
qvwbu .info project-rainbowcrack .com
r32fgsh .co .cc protectinfo .co .kr
radium-group .cc quattropetroli .it
rapidcult .co .cc radiorocks .kiev .ua
rapidname .co .cc rarecontrol .co .cc
realrate .co .cc royalthelmas-group-llc .cc
rightvalue .co .cc safeprivacy .co .kr
ru .brans .pl sandiesangster .org
rxthz .info santorini-finance .co
sacex .net securityboan .co .kr
saiset .org server220 .uppit .com
sakarya-vho .org serviceeffect .co .cc
saldt .info shecanseeyou .info
salesian .net sikodil .si .ohost .de
smartbing .info smartconsultant .co .tz
solutionsltd .cc smartdomain .co .cc
speedklicker .de softwaremini .co .cc
spris .com sonyericsson .lua .pl
spspn .ca strongdomain .co .cc
statkeys .co .cc sunrisepr-groupltd .cc
sxtinc .com sweetpornobabes .com
taboo .za .pl systemusers .co .cc
techadv-inc .cc techouse-group .cc
tenxx .in totallicence .co .cc
ukccons .cc uktech-groupllc .cc
ukgroup-cesis .co varioguarderonline .com
verodvix .info video-girls4you .co .cc
vgomjkug .co .cc videofreeplay .fileave .com
vofcpa .com videos3 .fileave .com
yes-groupllc .cc windowsstar .co .cc
yesgroup-llc .co wormsdestroyer .com
zsitedu .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

iframe, gumblar, rogue and other malicious domains

Posted on January 26th, 2011 in exploit,gumblar,iframes,New Domains,rogue antivirus,Trojans,zeus by dglosser

Malicious domains associated with zeus, rogue security, gumblar and other nastiness. Sources include securehomenetworks.blogspot.com, blog.unmaskparasites.com, www.shadowserver.org (Every source is always listed in the domains.txt file):

5srak .info 08nigbmwk43i01y6 .com
artspirit .us 0vibd7viihxrtpyu .com
bambula .tv 100animalsexvideosfree .net
bbzfc .info 10k1txdk35mt02xx .com
bctjd .info 1ky4owcrh7ziwukm .com
bcwhp .info 1spmt1xfmumz2isf .com
bdc .com .sg 1vvzq5t3kwfiwzmt .com
becoupon .com 1xvodqv3mtxp9dyy .com
bezlic2a .net 2332kxifxiynpznr .com
bjpwn .info 235inmya16h6kiob .com
bluejam .ru 2b20k27wuid0znfi .com
charg12 .in 2kkh3naw5kinmzcw .com
chm0k .info 343 .boolans .com
copewa2 .co .cc 3t98o01vi52i16v1 .com
ctronn .info 3yzfra70yk08b95r .com
dayb .co .cc 4w1ripmfrp4rbp34 .com
djhvb .info 4xszq0f9dwg2oxcp .com
dkaxp .info 53ia49772x7r16ks .com
edzaxo .info 57ne196zfx73884i .com
fermcom .com 5kv6ni27e3iauu9b .com
forele4 .co .cc adsforadsense .co .cc
frllb .info all-invite .org
fsint .info balkanpropertyservices .co .uk
fuqidi9 .co .cc balmoralservices .org
gogless .net basketknife .com
govnjuk .info bearspawbakery .com
hackera .ru bestcablemedia .in
hamds .info bestfilesfree .in
hztbe .info besthome104 .com
idiotlink .net bestsecurity-foru .rr .nu
iwzox .info bigspiderwomen .com
jiutw .info bizzre-free-videonia .co .cc
jiwre .info bud-gjjzx .serveftp .com
kehivi1 .co .cc ccatalunya .com
kkkqqq007 .com chek-pc2010 .co .cc
la2onix .ru crotopmodels .com
lqahh .info daodao123 .info
lqyjv .info datanetsweb .in
nrtsaz .co .cc diendanvinatex .com
nygav .info dieta-doleta .ru
nyiyh .info ehukujykodayre .publicvm .com
ololoshka .org erotismaszaszxxx .sytes .net
oneddos .cz .cc esportydiueiisa .hpg .com .br
otrezc .info expololol1 .com
pgkqy .info facebook-surprise-nhsa .tk
pgmog .info firstpower-checker .com
postsamart .in fletcher9837 .ws
qemevu4 .co .cc fr .update .ip-ntwk .com
redir .ec gazgaped778 .com
rggzs .com goodghtsafe .rr .nu
roogy .info hotdvdmedia .in
rouek .info hqvideoonlinefree .com
site .ru iculemyebomo .linkpc .net
slyflag .ru inohoniokijys .publicvm .com
sokets .in internationalvolunteerdirectory .org
sqof .info interviewbuy .ru
telki-best .ru personal-scan-4u .in
thewalter .net pics170-hosting .redirectme .net
tiweva6 .co .cc pics279-host .redirectme .net
tofdhf .ru povulohezexuw .dyndns-web .com
tpjt .info protechstorage .in
twwwb .info qvrnezubr .co .cc
twyuj .info rantrafrout .com
uaerup .com realemotions .ru
vdjiv .info realporno .bladi .cz .cc
vegkn .info safe-antivirchecker .com
vezmb .info satel12vc .co .cc
winsoft1 .com saud4 .markaz-royal .net
wvx1 .in smartavscanonline .com
xlnyz .info soft-projectsi .rr .nu
xmhce .info sofyaechbutylinyshch .narod2 .ru
xmkam .info stellappkolomiytsevyo .narod2 .ru
xxxmpegu .info supergjgjgjgjgjgjg .com
yaxoso3 .co .cc tigals .ifrance .com
zbanrn .info trueeox-safe .in
zefuta9 .co .cc trustzoneforyou .in
zoneij .com ulitugaeqad .linkpc .net
ztvoy .info us2-network .nocreditcard .com
zulte .info videos85-pics .redirectme .net
zusrq .info zama4y .ebana .ru .preview .ihc .ru
zxekm .info zeroce8 .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Gumblar Domains

Posted on September 12th, 2010 in Domain News,gumblar by dglosser

Unmask Parasites has  updated their list of Gumblar Zombie URLs. We’ve asked for permission to include  it as a separate file in BIND and MS zone format while we integrate them into our blocklists.  But you should check out the massive list of over 1300 urls yourself .

Update from Unmask Parasites:

… most of them don’t contain those Gumblar script now. I maintain this list mostly as a reference so that webmasters of sites with Gumblat zombie URLs could locate and remove them, and webmasters of infected sites where hackers inject links to those zombie script could search for domain names specified in Google’s diagnostic pages (they contain some historical data) and find my list and clean up instructions.

Almost 200 New Malicious Domains

Posted on August 7th, 2010 in exploit,gumblar,New Domains by dglosser

Sources include blog.dynamoo.com, blog.unmaskparasites.com, trojanedbinaries.com:

87jonsonfd .com advanced-def .com
about-joga .ru advanceddefender .org
ad-parking .net antiviractive .com
adsnet .biz best-scanner-2010 .net
advdefender .com best-scanner-2010 .org
ajhsfget .com brick-layer888 .com
antispybox .com creatives-labs .com
antispymega .com cyber-deployment .com
antispymv .com directbinary .com
antispynew .com first-online-scanner .com
antispysp .com first-online-scanner .net
antispyutil .com first-online-scanner .org
antivirback .com gosrmecalodnl38 .com
asdagj .com gosrmecalonl16 .com
avmirror .com gosrmecalonl20 .com
bbcxq .com gosrmecalonl21 .com
beza .tu2 .ru gosrmecalonl3 .com
bravqwer .com gosrmecalonl30 .com
breenders .com gosrmecalonl4 .com
c3metrics .net gosrmecalonl5 .com
chinese-way .com gosrmecalonl8 .com
dkeh38oz .com gosrmecalonl9 .com
evdoilsdus .com gosrmedicalonl1 .com
fd1a234sa .com gosrmedicalonl10 .com
freead .name gosrmedicalonl11 .com
fuchroot .com gosrmedicalonl13 .com
gasredbox .com gosrmedicalonl14 .com
getadvdef .com gosrmedicalonl16 .com
goadvdef .com gosrmedicalonl17 .com
goadvdef2 .com gosrmedicalonl18 .com
hhsdgbes .com gosrmedicalonl19 .com
huisko .cn gosrmedicalonl2 .com
ilui45iu7 .com gosrmedicalonl20 .com
iuysdjerh .com gosrmedicalonl3 .com
jkhasels .com gosrmedicalonl5 .com
jkhteqa .com gosrmedicalonl6 .com
kaljv63s .com gosrmedicalonl7 .com
kdy7rsxa .com gosrmedicalonl9 .com
kipyatok .cn irrationalsdv3 .info
kljdskrza .com kavascansecurity .com
lkfjfuisdh .com nameservice-worldwide .com
lkhysayte .com profithobby .net
lokisko .cn rebornendkit .cn
lovinezer .com s-powerlink .com
mdmasege .com safe3etfejwqf .com
mybar .us scanner2010 .com
pogodanet .cn scanner2010 .net
qsfgyee .com scanner2010 .org
rmbtoor .com scannerglobal .com
s0cksps .com scannerglobal .net
sadahesz .com shoppingsurat .com
sadangez .com showdevelopment .com
sadkajt357 .com silivrirehberim .com
safniiyew .com sinsaengtech .com
sakjgeyq .com smartflower .sitemaps .co .kr
salkjyhx .com solinges .com .ar
sfahdasjw .com speedydecorators .co .uk
shoba .in spis-imion .waa .pl
shop-weto .com squirrelbird .net
sitec-med .com super-scanner .net
sjb653xz .com super-scanner .org
skzart .com swineflu-articles .com
smtech .in tallestbuildingslist .com
sobo .in tcsdivisions .com
stonet .ru teh-g .webphoto .ir
supanaphom .com tekirdagdaemlak .com
surbhisoft .com terminal-service .net
svemo .de testpagina2 .webdesign-idej .nl
svo-stroy .ru thechimborazo .com
sweethost .org theflyingpoodles .com
sweweb .org tietkiem .thuonghuyenbooks .vn
tacsw .or .kr tne .tourskorea .com
tamiltouch .com totalflowers .ro
tejasindia .com tottaldomain .cn
tem97 .org tunikproducts .com
tomo7e .com twowildgirls .net
toolbarcom .org ugurkargonakliyat .com
tourcentr .com uznai-pravdu-ru .1gb .ru
tvindc .com uzunkopru-meb .gov .tr
urotex .com vazkreseniehristovo .org
valleyseve .de versaillesstudio .com
vankami .net viamediasolutions .com
vasaikar .org vidaabundanteheredia .pablohost .com
vasiad .org video-conferencing-tips .com
videofetes .com vikinginfotech .com
vipsocks .cn villadepinto .com
vivazaxo .com vinhhuyhotel .com
vizlefx .com volunteer-scan .com
walnut .la wap .soundsuggestion .com
wcfdubai .com wapika .sitefr .info
wdggtwegww .com waydomains .typicaldesign .net
webantispy .com webproductsthatmakeyourich .com
webdogs .nl wepro-fashions .com
webimyo .net wittyvideos .com
wilstose .co .cc wolfsclassiccarrent .nl
wolfshop .pl worldofmakemoney .com
youth4bjp .in xenoncenter .com
zealups .com 0-0-0-0-0-0-0-0-0-0-0-0-0-50-0-0-0-0-0-0-0-0-0-0-0-0-0 .info

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors

The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
Primary Mirror: http://mirror1.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Huge Update: Over 200 Domains

Posted on August 4th, 2010 in gumblar,New Domains,Trojans,zeus by dglosser

Over 200 domains associated with seomalware, malspam, zeus, gumblar have been added. Sources include safebrowsing.clients.google.com, blog.unmaskparasites.com, research.zscaler.com:

021web .com .cn 1000sweeties .com
4safe .in a2construction .net
69poses4u .com acccinternational .com
800816 .com .cn adobeactivation .net
88456 .pp .ru almightybusiness .co .in
92mimi4 .cn alpine-balloon-challenge .ch
acani .in angel-lux-tube .com
apmebf .com animaltechlabs .com
artsimone .ch apexconsultancy .com
asgardr .fr apogeecleaning .com
atstatec .com april-snow .co .kr
baabbeesss .com arak .webphoto .ir
bamyazilim .com artoflivingfaridabad .org
bandikots .com ax-118 .webphoto .ir
basacbake .com bajchatka .proste .pl
bb4msg .com bloccorlando .org
be2tv .com brookewhitemedia .com
beachhub .info browserdomain .in
bemcoindia .com cavaliersales .com
best-selik .ru classicgamingcruises .com
billingcxn .com dangerousteens .com
bodegaspa .com devision-sharks .ru
brenz .pl duzeykursmerkezi .com
cafedeaiai .com enjoy-party .info
chudachok9 .ru enlaceseducativos .com .ar
coastia .com eventosmaderoview .com .ar
combatant .cz excel-consultants .in
deryam .biz freepetcaretips .com
dwefsd .com fu0ckpisingebonun .com
enceny .com geocartablog .com
ereei .info getamodification .com
eyesites .co .uk google-analyze .org
ezeldizi .biz greenlandaviation .com
fffest .co .cc guppypetshop .com
fl-bbb .org hiphopplanet .ca
freeguard .biz hitthegroove .com
g1rlyuoung .com imapkolkata .com
gere-okon .ru infoprodukbisnis .com
gmentp .com joaillerieliban .com
grouseinn .com kakalfoundation .org
gumdang .or .kr koilman .inodea .co .kr
horasan .bel .tr komita-mentoring .com
ianes .com krainaseriali .jun .pl
illoul .net mascotsunlimited .com
incornew .net mattlinwyman .com
infinitech .in minisearch .co .kr
intzvill .com more-movie-tube .info
ip33033 .com movie-tube-portal .info
ixeajki .cn needservices .org
ixnitor .com nesc-mauritius .org
juststaff .com newpartyworld .com
lisac2009 .info ns10-wistee .fr
lkem .info our-children .net
loinfo .ovh .org peche-cote-azur .com
lykqug .cn printinstant .com
m08b .com radiantspl .com
m5rj .net rajeshagarwal .org
malmo-arena .se randomlegend .net
megayear .net rangpacknmove .com
metds .org rattanaburihos .com
mingegypt .com ravirajgrroup .com
moshiko .net reflexoterapiemasaj-vacuum .ro
mt .ru repair .ivyro .net
musicmufta .com replicawatchesnow .com
my-lg070 .net revistabaron .com .ar
naijapress .com roaroiet .doae .go .th
naturesiam .com robertomilanomoreomglol .info
ngl .kr rondoniainfoco .com
nkphcoop .com rostechnoimport .ru
nt02 .co .in rsequitytips .com
obaduk .com rtohomecenter .com
plustecpk .com russiancommunications .com
rad-data .net rvconsultancy .com
ragero .ru rxgenerics .net
razmatazz .net s216344386 .online .de
rijagt .dk sahrudayarajagiri .org
rstechies .com salinasenterprise .com
rts-me .com saludonline .ok .pe
rtv .lx .ro santoshada .net
sa-m .com sarvodayachildcare .com
saba-ac .com scanlation .net
sagri .org sdcenter .inkoreahost .com
samarago .ru sebastiangora-photography .com
sanahr .com selixsolutions .com
se-group .de sheenachohan .com
seoshell .com shindobat-zama .jp
sepahan-e .com shinwoori .tourskorea .com
sexpot .co .kr shriodeeducationsoc .com
sgs .co .kr smewnoibolvan .ru
sho0oq .com stateder .co .cc
smetask-op .ru sweetpornobabes .com
sp .sk thelemoncity .com
spider-eg .com theshinhwa .com
sragenlor .com transconttgn .com
t-e-clive .com travelersnote .co .kr
timoton .com ubaipropertysociety .ae
tomitt .com update-ff .co .cc
vyshnya .pp .ua update-java3 .com
web898 .net webmovedesigns .com
wemsg .com weirdalliance .net
wwwsarkozy .eu whiteagngo .com
xin3721 .com youngsweat .com
ymcakorea .org ypufubegopem .mynetav .org
zeroclan .net

Big Update – 247 New Domains

Posted on August 2nd, 2010 in exploit,gumblar,New Domains,Trojans,zeus by dglosser

Start with harmful, dangerous, exploit domains. Add some fastflux and gumblar domains. Top it off with zeus, neosploit, and trojan domains…. Sources include blog.unmaskparasites.com, blog.urlvoid.com, mdl.paretologic.com/index.php:

acidsource .com 2010healthworld .com
adingurj .com 2011healthworld .com
akplus .info 4gameranking .com
allstat .in aconnect .rubanners .ru
alwaasim .com adobeflash-ver16 .co .tv
asf .wdn .com adultxxxblog11 .in
av-clean .com ak-fbcdn .facebook-profiles .net
awrinc .net allthetraffic .co .cc
barabudd444 .com anti-vir-protect .com
bellday .ru anti-virus-best .com
benteer .com aqswdeq .fileave .com
beport .in azurcorporation .com
beretjhvb5 .info bawtsfkincool .fileave .com
bestakrez .com blacktube .narod .ru
bestmedoccur .ru byyudolijyd .squirly .info
bestrachel .com checkingconnects .com
boc .vec .go .th datamediaworld .com
breezeschool .ru destek .yesilbeyaz .com .tr
chintali .com diathaothe .co .cc
chotnam .net emeraldplanetcasino .ru
cleanupsoft .net empiresilvercasino .ru
cocainy .com enquiriespx .tripod .com
codezz .kilu .at escortdilay .com
combm .in exhouse400doors .com
comclean .pe .kr feast-initiative .info
conctata .co .cc fictivedesign .com
cpubusiness .in finestutilitesguide .com
cqcreport .org foliatotal .com .br
cssupdates .com forsight .com .au
d2main .info fortunaclasse .com
dbline .in free-crack-service .com
digi-desmond .nl friendsparty .org
dixiachen .net fusepygopiketey .instanthq .com
dl0l .in great-tube-fest .com
dmato .com hotcelebsnow .com
dns-configs .net infinitydownline .com
dogar .com .tr isysolybuliqo .ddns .us
domainsword .in jiascjnjfds .com
dzbest .net jk100asdsadhg .com
erapost .net jk200sdjasdhg .com
esvictory1 .ru joodsmaastricht .nl
ezanole .idv .tw jrbeintumgd .tripod .com
flagford .ru jupitermotors .com .au
flykser .net kasscukaher .org
foodsound .com kermitklein .com
for-help .eu keywordplus .net
foreks999 .ru lalocationmanager .com
formchamp .com liswegwegwegu .com
gegooglee .com luxcollection .net
ipclear .co .kr macromediasetup .com
istallsalot .in malwareremovalbot .com
manfredwiener .at
kachelsbv .nl massive-dynamic .ru
keyzan .in maxima-motors .ru
kigll .com mcpq .plus-zone .co .kr
kopitopia .com morzambakdersanesi .com
kpma .info muenoakafjw .com
krassoffki .com nadine-morano .com
lidlab .ru net .lovealiy .com
limpopos .ru netmediaforum .com
localhostr .com nextgenengineer .org
lonngren .co .uk nimaabedi .webphoto .ir
massf .in ninia .caucasus .net
mjef .info nslppd .ttqipai .com
na-vip .ru nvkznemo .iris-podarki .ru
nextso .net obtkayukhlak .com
nimtsih .biz onlinepharmany .com
noerwerk .dk orbitalenhancements .com
nongluck .com orhaninsaatltd .com
nutcountry .ru otimagrafica .com
nvenf .in ozenistarimmak .com
ocec .net pachihai .sakura .ne .jp
oh3r7hf .h16 .ru panamaxexim .com
okgrupo .com parkssipart2 .tistory .com
onclean .net partner .ntoos .com
oreks999 .ru perfectmedicalwindow .com
ornettech .com photopost .co .kr
oyunzadem .com phutra-kmc .at .ua
pannatex .com picobello-shop .com
paramworld .com pin98 .dothome .co .kr
parkperson .ru pinarlikoyu .com
parthsoft .com pink-hippo-mannheim .alexander-ditz .de
pasada .by pioneersystematics .com
pdx1online .com pitkabayresort .com
petplant .hu placemedicalpoint .com
picafierce .com platinumsuite .co .uk
pitcapital .com plazafinanciera .net
pixforfree .net popmania .sitebr .net
plmag .net portalmotosergipe .com
pornotoq .info portalunse .com .ar
posgame .com posadaladesmera .es
poze .sloris .ro powersellertoolkit .com
pro-babki .info premises-liability .net
profitice .ru prkygcznwuln .com
profitquest .ru problemradar .ru
propacrop .com programability .ru
pubetter .dk projectland .co .kr
publicnet .ca propertyadvancement .com
purunsj .com propertyduck .ru
qddlbd .com propertygame .ru
qqceo .net prosoftdesign .in
qvevri .ge protestmusic .ru
qwoal .com psplanet .com .au
regsweep .com punjabirasoi .net
rubychief .com qybifyrufoqoere .ikwb .com
srinima .info real-antivir-4pc .com
tiktak .cc rnvcomputers .nl
toppulse32 .org safe-space13 .org
transjapan .ru solarcotton .com
undercross .ru super-cool-tube .com
up_plan .php tobaccobarnonline .com
utry .in top4devices .thewomanizer .net
vbmn .info townofdolores .com
wandrill .com trafficpc .co .cc
werrrcorp .com uatimetable .com
westfinish .ru untitled-themovie .com
whizher .com update-java2 .com
xdiablox .com vanda1 .zoomshare .com
xssfeat .tk vbckvhfvfds .com
xtborder .co .cc wocaohaofan .ns1 .v588 .com
ys38 .com woodstockguitars .dk
yu-irc .net woyqupcrfio .com
zeracool .com zuraotaiyohwunookaebuasa .com
zsitsih .biz

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors

The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
Primary Mirror: http://mirror1.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

July 30 Update: 186 new domains

Posted on July 29th, 2010 in gumblar,New Domains,Trojans,zeus by dglosser

sources include honeywhales.com, malwaredomainlist, safebrowsing.google.com:

1k7 .ru magicbed .co .kr
a5s .ru mahjabeenm .com
a6k .ru masihigeet .com
a7f .ru medyasehir .com
a8f .ru mobilisim .mobi
a8h .ru scancamp .co .cc
a8w .ru scandesk .co .cc
a9w .ru stats-serv .net
b3o .ru stifast31 .info
b3w .ru vistumbler .net
b5v .ru 33askday7w2 .com
b5x .ru benignbkk4 .info
b6m .ru goldvegas24 .com
b6n .ru kanarinac .in .rs
b6o .ru khezri-adine .ir
b6r .ru koncertiroda .hu
b8g .ru kortvideohem .se
b8h .ru lupitaarmas .com
b8i .ru mesgurukula .com
smx .nu mhjldsgmfds .com
errr .ws mobileauto1 .com
kbda .in mtravel3biz .com
m201 .de my-dns-stat .net
3data .de scantopia .co .cc
49558 .cn today-newday .cn
k365 .org adcreativecp .com
kb40 .com broken-sound .net
renti .tw diamonddoctor .ru
stire .in last4444best .com
dpeed .com leksakskungen .se
kamli .com marianainigo .com
kashej .dk mayaheritage .com
lagule .at mtqxbadjxasd .com
mymw .info regalachiefs .com
n-age .net scanwizard .co .cc
skyrat .ru sj99asdhy728 .com
19855 .info errekhxzerr .co .cc
bbsr .co .in kittykatjeans .com
burbank .la laufend-helfen .eu
carmup .com marco-behrendt .de
ceberz .net mentissystems .com
ceberz .org regencychurch .org
kcom-m .com sleepstreamer .com
kfcf .co .kr suprem-company .ro
koci .re .kr thetraffics .co .cc
kockoy .com cuckoldtrainer .com
kohyao .net epicsgallery .co .uk
krunop .com hotxtubeonline .com
m-paris .ru miriquidi-coons .de
mashaei .ir secksaygrannay .com
mirjany .ru secret-connect .com
slapfan .in storagedatanet .com
soft32 .com subvencionwest .com
tdsinfo .tk thenewsoftware .com
4shared .com thethoughtzone .net
cxevalo .com updates-online .net
geerrge .com dolphinmobile .co .uk
kult-uur .be google .analytics .tk
lcitsih .biz greatelectronic .com
likeism .org miroengineering .com
mylodka .net secure-checking .com
rcturbo .com vigulardefense5 .com
servqvod .tk ctpatconsultants .com
sexnej .info dandbcorporation .com
sslworld .in diamondlandcasino .ru
2hate4us .com goodgirlsbadguys .com
9999tech .com kadikoyanaokulu .info
kadalcok .net koltaiandor .extra .hu
kontorce .net lesetainsdugraal .com
kytten .co .cc millenniumkids .co .in
lauwaert .net normal-best-tube .com
leadrush .com shloesandrooneys .com
siren114 .com testednewpartner .com
spinparty .pl diamondgreatcasino .ru
sutki-ekb .ru louisianajazzclub .net
vdsconfig .in mikeandtarabruley .com
fxguard .co .cc scolileblajului .lx .ro
gm1online .com herr-bertxy .tripod .com
kandilkoy .com jubailcityplanning .com
lancorner .com jubilantmattresses .com
lordrizzo .com kaplanoyunaletleri .com
maaandhra .com medicalwholesaleran .ru
mallcom .co .kr thecheckingconnect .com
mandarine .net victoryinformation .com
metroeple .com baseballcardcatalog .com
ms-update .net biuramatrymonialne .info
sebo .16tn .com kandkfrenchbulldogs .com
tamesteel .net kiralikasansorizmir .com
bertsinnema .nl sonicomusica .powweb .com
dagama .itkm .ru kasprowicz .polskikosz .pl
kevinkramer .ne limosforhenparties .co .uk
lentdesign .com ronaldneko .dothome .co .kr
maechaem .ac .th shop-hosting-bisingen .de

125 new unsafe domains

Posted on July 27th, 2010 in fastflux,gumblar,New Domains,zeus by dglosser

Sources include safebrowsing.clients.google.com, blog.unmaskparasites.com, atlas.arbor.net:

g12 .ro iranpingpong .ir
t3n .pl j-partner .co .kr
75a .net jetaimesuit .com
6r66 .com johnbennett .com
gemus .pl joy-leports .com
ic-4 .org paymentsint .com
im .ne .kr gadgetsshore .com
shtos .ru gorselankara .com
cit-lm .sk granpiano .com .mx
cjbux .com gratisthumbs .com
fzdqjn .cn gsccleveland .com
g3l .co .in iammaryhamer .com
haggar .cl infograph .com .mx
hoefra .at ismaildundar .com
rxbob .com konmuangdong .com
rxbon .com konyvelesgyor .hu
vv02 .info scan-security .cn
vv03 .info azdanzyeemlak .biz
geco .zc .bz fitdurchphysio .de
hazuse .com folkartist-kr .com
itillc .com galleparadise .com
itmgoch .ru greatrxdecide .com
naveli .com healthplanone .net
omjkit .org jollyspattaya .com
phpqtr .com rxdirectvital .com
ramazan .ir trafic-server .org
antiviru .ru gallery .soss .co .in
dairanet .cn gang .dothome .co .kr
fotoris .com goldenhospital .com
gozites .com hotelsathyam .co .in
hickorys .ca mypharmacylive .com
hopelife .in ponysirindhorn .com
idamusti .dk projectsvalley .com
ipac-bd .org golfpromadeeasy .com
joeburns .eu house-takecare .info
primeart .hu jaquemet-zehnder .ch
testilla .ru najbolja-zabava .com
arena-eg .com placemedsgalore .com
frontflip .se redirect-script .com
goodmann .net 1debtcreditcards .com
happy104 .com blackhollywoodhu .com
joukekorf .nl focusonesthetics .com
ju-bernau .de lacefrontsecrets .com
bali-yama .com pillqualitysight .com
gclub1688 .net activesecuritynet .org
iraqiyoon .net islacontoymexico .info
login-srf .com medicalstockwould .com
shazslair .com xn--ob0bn98bb2ff3e .kr
soul-suply .ru floristeriatorrens .com
avtracker .info gpdiebenhaezerposo .org
earthi0-3d .com greatlakesicecream .com
fromsuperb .com habbo-star .bplaced .net
gold-eshop .com itpackservejapimen .net
grameendev .org robotvacuumreviews .com
howcodec .co .kr free-birthday-party .com
iris2009 .co .kr industrialsurquillo .com
prettysame .com kinderfeest-compleet .nl
xcreenshop .com frenchpharmacyonline .com
zsofia-adam .hu googlevirustemizleme .com
flashback .dp .ua khannavishavkarmasabha .com
funkyclients .nl hindustanrealtyservices .com
huileargane .com graphicmanagementassociates .com
hukrkvartira .ru