Feed

MoneyMule, Redkit, phishing domains…

Posted on June 30th, 2013 in exploit,malspam,malvertising,MoneyMule,New Domains by dglosser

Added 184 domains associated with MoneyMule, Redkit, phishing, neutrino, etc.  Sources:malwareurls.joxeankoret.com, siteinspector.comodo.com, urlquery.net and others (all sources are listed in our domains.txt file.)

* Please help to keep this site free and donate whatever you can: All donations go to hosting and infrastructure costs.
* twitter page: https://twitter.com/malwaredomains
* These malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.
* Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned! Use wget -N”!
* Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.
* Domains.txt file is the complete list along with original reference. Justdomains contains list of only the domain names. BOOT file is in MS DNS format. Malwaredomains.zones file is in BIND format. Also Available in AdBlock, ISA, and MaraDNS formats. A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…
We also have a mirror dedicated to research and Open Source Projects – please contact us for details.

Scam, Spyeye, Exploit Domains

Posted on December 14th, 2011 in fraud,New Domains,Spyeye,Trojans,zeus by dglosser

Added almost 100 new domains associated with investment scams, exploits, etc. Sources include malc0de.com, spyeyetracker.abuse.ch, www3.malekal.com and several others (Every source is  listed in the domains.txt file)

Reminder: the mirror for compressed zip files is up and running – please contact us for details – right now it has very little usage.

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

DNS Sinkhole 10/14 Update: 129 New Domains

Posted on October 15th, 2011 in exploit,malspam,malvertising,MoneyMule,New Domains by dglosser

Added 129 domains associated with RBN, moneymule, malspam and other malicious activity you don’t want on your personal computer or network. Sources: www.emergingthreats.net, blog.dynamoo.com, labs.m86security.com and others

(Every source is  listed in the domains.txt file)

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format. (The mirror for compressed zip files is up and running – please contact us for details.)

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


zeus, rogues, spyeye, artro, fake job domains…

Posted on August 14th, 2011 in malvertising,MoneyMule,New Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

251 domains associated with fake job offers, zeus, fake av, etc. Sources include amada.abuse.ch, blog.dynamoo.com, safebrowsing.google.com, tristatelogic.com  (Every source is  listed in the domains.txt file).

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Moneymule domains, malicious domains, trojans, etc.

Posted on June 6th, 2011 in MoneyMule,New Domains,Trojans,zeus,zlob by dglosser

Added 182 dirty domains from securehomenetworks.blogspot.com, vxvault.siri-urz.net, ddanchev.blogspot.com and others (Every source is  listed in the domains.txt file):

2n6h .co .cc 1glacisgroup-llc .net
3atlanta-uk .com 92cfa9e0 .b8r4 .org
5dali-style .com 983723315nwelle .cz .cc
7lrkvy .co .cc abodefllash .co .cc
aaaholic .com abodeplugin .co .cc
asdaqr15 .com adobecodec-01 .co .tv
atlantaltd-uk .cc adobecodec-02 .co .tv
avgenup .in angielskidlarodzicow .pl
benanshell .cz .cc aprotest-avi2011 .co .cc
bnhapeirud .co .cc atlanta-ltd-uk .net
bqtuhwhm .ce .ms blitznet-groupinc .cc
buzadora .cz .cc chirnsideandren .cx .cc
digibeetlesop .ru clickjacksonville .org
docmoo .ce .ms dalistyle-group .cc
domofro .cz .cc defender-beaxz .in
ecvcallise .co .cc defender-fdjez .in
esscleaner .com defender-nessc .in
ezzo .ce .ms derwoode-group .com
fastscandn-pc .tk derwoode-group .net
flash-02 .co .tv essclean-online .com
flashplugins .net freeopenscanerpo .in
fmoo .ce .ms grandao2010 .qipim .ru
frozyn .info gwgwrhtetretnt .com
gb-offers .com helpmedownload .com
geceeroe .ce .ms hkjhcgaidiiii .com
geelh .ce .ms hot-mp3download .com
gulrva .cz .cc hotmp3-download .com
gxdowzsz .ce .ms hsghyturrerefg .com
hnifuzof .cn hypnosis-guide-pro .com
homerev-sys .com idownload-istore-music .com
homerev2-sys .com idownload-istore .com
hsovolih .cn idownload-store-music .com
i-tvdish .com idownload-tunesmusic .com
infofraud .net image-editor-download .com
it-amira .net immigration-in-us .org
it-serviceltd .be imusic-download .com
itamira-de .com imusic-store-downloads .com
itserv-de .co ketchersode .ce .ms
jahn-siegen .de lasfotosmasnice .com
kade-group .com livesports-network .com
kzqacegd .cz .cc livestreamdirect .com
letbeservice .ru masterart-group .com
macwinsoft .net mobiledownloads-pro .com
markizac .com moonsgootlasynch .co .cc
mcmonnes .ce .ms movie-downloads-direct .com
medi-fix .com movie-downloadsnow .com
mendryltd .com moviedownloads-pro .com
miliardov .com mp3-downloadingnet .com
mnuyspe .co .be mp3download-net .com
mp3-depot .com mp3downloadhq .com
mp3-share .us mp3downloading-net .com
mp3helpdesk .com mp3sectionentitled .com
mscser .ru music-d0wnload-center .com
mstoolkit .com music-idownloads .com
music-folia .com music-istore-downloads .com
myfghavs .com music-moviesnetwork .com
newbiz10news .com music-new-downloads .com
newbiz1cash .com namebuypicture .cn
newbiz1news .com natspot-serve .com
newbiz2news .com newantivirusdownloads .com
newbiz3news .com newest-version-download .com
newbiz4news .com newflash10news .com
newbiz5news .com officesuite-download .com
newbiz6news .com parlen-group-usa .com
newbiz7news .com parlen-groupllc .com
newbiz8news .com parlengroupllc .net
newbiz9news .com protectantivscanfree1 .com
npeyugux .cn quad-it-group .com
palazziogt .ru quinta-groupus .com
phonezero .com .br rextechinnovation .com
quad-groupuk .cc rextechltd-us .com
quinta-llc .net schwendonger .ce .ms
quintagroup .cc searchalphabet .org
raucherhimmel .de special-art-ltd .com
rbomce .com special-art-uk .cc
rextechltd .cc targetmarketgroup-llc .cc
sadone .ce .ms taskmalbbunde .co .cc
searchant .org thebestscannerdha .l2x .eu
searchatom .org tingdjibmar .ce .ms
searchbegan .org traffic-4webmaster .com
sroxcwoa .ce .ms upperblackeddy4 .cz .cc
stillmate .co .cc vci01 .appbundler .net
subdom25 .com virusprotection24 .com
sublime-ltd .net vnsproject-de .cc
tyodi .com von90qr8ft .cz .cc
videocrazy .cx .cc vortex-llc-uk .net
wexct .info vortexllc-uk .com
woedmonn .ce .ms wayuvaga111 .vv .cc
xbx .tw web-fotogallery .be
xhyjl .cn witayeno111 .cz .cc
xmycelebs .co .cc worksappmedia .in
yahbesvyt .com youtubeonline .net

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

<TR><TD>2n6h .co .cc</TD>  <TD>1glacisgroup-llc .net</TD></TR>
<TR><TD>3atlanta-uk .com</TD>  <TD>92cfa9e0 .b8r4 .org</TD></TR>
<TR><TD>5dali-style .com</TD>  <TD>983723315nwelle .cz .cc</TD></TR>
<TR><TD>7lrkvy .co .cc</TD>  <TD>abodefllash .co .cc</TD></TR>
<TR><TD>aaaholic .com</TD>  <TD>abodeplugin .co .cc</TD></TR>
<TR><TD>asdaqr15 .com</TD>  <TD>adobecodec-01 .co .tv</TD></TR>
<TR><TD>atlantaltd-uk .cc</TD>  <TD>adobecodec-02 .co .tv</TD></TR>
<TR><TD>avgenup .in</TD>  <TD>angielskidlarodzicow .pl</TD></TR>
<TR><TD>benanshell .cz .cc</TD>  <TD>aprotest-avi2011 .co .cc</TD></TR>
<TR><TD>bnhapeirud .co .cc</TD>  <TD>atlanta-ltd-uk .net</TD></TR>
<TR><TD>bqtuhwhm .ce .ms</TD>  <TD>blitznet-groupinc .cc</TD></TR>
<TR><TD>buzadora .cz .cc</TD>  <TD>chirnsideandren .cx .cc</TD></TR>
<TR><TD>digibeetlesop .ru</TD>  <TD>clickjacksonville .org</TD></TR>
<TR><TD>docmoo .ce .ms</TD>  <TD>dalistyle-group .cc</TD></TR>
<TR><TD>domofro .cz .cc</TD>  <TD>defender-beaxz .in</TD></TR>
<TR><TD>ecvcallise .co .cc</TD>  <TD>defender-fdjez .in</TD></TR>
<TR><TD>esscleaner .com</TD>  <TD>defender-nessc .in</TD></TR>
<TR><TD>ezzo .ce .ms</TD>  <TD>derwoode-group .com</TD></TR>
<TR><TD>fastscandn-pc .tk</TD>  <TD>derwoode-group .net</TD></TR>
<TR><TD>flash-02 .co .tv</TD>  <TD>essclean-online .com</TD></TR>
<TR><TD>flashplugins .net</TD>  <TD>freeopenscanerpo .in</TD></TR>
<TR><TD>fmoo .ce .ms</TD>  <TD>grandao2010 .qipim .ru</TD></TR>
<TR><TD>frozyn .info</TD>  <TD>gwgwrhtetretnt .com</TD></TR>
<TR><TD>gb-offers .com</TD>  <TD>helpmedownload .com</TD></TR>
<TR><TD>geceeroe .ce .ms</TD>  <TD>hkjhcgaidiiii .com</TD></TR>
<TR><TD>geelh .ce .ms</TD>  <TD>hot-mp3download .com</TD></TR>
<TR><TD>gulrva .cz .cc</TD>  <TD>hotmp3-download .com</TD></TR>
<TR><TD>gxdowzsz .ce .ms</TD>  <TD>hsghyturrerefg .com</TD></TR>
<TR><TD>hnifuzof .cn</TD>  <TD>hypnosis-guide-pro .com</TD></TR>
<TR><TD>homerev-sys .com</TD>  <TD>idownload-istore-music .com</TD></TR>
<TR><TD>homerev2-sys .com</TD>  <TD>idownload-istore .com</TD></TR>
<TR><TD>hsovolih .cn</TD>  <TD>idownload-store-music .com</TD></TR>
<TR><TD>i-tvdish .com</TD>  <TD>idownload-tunesmusic .com</TD></TR>
<TR><TD>infofraud .net</TD>  <TD>image-editor-download .com</TD></TR>
<TR><TD>it-amira .net</TD>  <TD>immigration-in-us .org</TD></TR>
<TR><TD>it-serviceltd .be</TD>  <TD>imusic-download .com</TD></TR>
<TR><TD>itamira-de .com</TD>  <TD>imusic-store-downloads .com</TD></TR>
<TR><TD>itserv-de .co</TD>  <TD>ketchersode .ce .ms</TD></TR>
<TR><TD>jahn-siegen .de</TD>  <TD>lasfotosmasnice .com</TD></TR>
<TR><TD>kade-group .com</TD>  <TD>livesports-network .com</TD></TR>
<TR><TD>kzqacegd .cz .cc</TD>  <TD>livestreamdirect .com</TD></TR>
<TR><TD>letbeservice .ru</TD>  <TD>masterart-group .com</TD></TR>
<TR><TD>macwinsoft .net</TD>  <TD>mobiledownloads-pro .com</TD></TR>
<TR><TD>markizac .com</TD>  <TD>moonsgootlasynch .co .cc</TD></TR>
<TR><TD>mcmonnes .ce .ms</TD>  <TD>movie-downloads-direct .com</TD></TR>
<TR><TD>medi-fix .com</TD>  <TD>movie-downloadsnow .com</TD></TR>
<TR><TD>mendryltd .com</TD>  <TD>moviedownloads-pro .com</TD></TR>
<TR><TD>miliardov .com</TD>  <TD>mp3-downloadingnet .com</TD></TR>
<TR><TD>mnuyspe .co .be</TD>  <TD>mp3download-net .com</TD></TR>
<TR><TD>mp3-depot .com</TD>  <TD>mp3downloadhq .com</TD></TR>
<TR><TD>mp3-share .us</TD>  <TD>mp3downloading-net .com</TD></TR>
<TR><TD>mp3helpdesk .com</TD>  <TD>mp3sectionentitled .com</TD></TR>
<TR><TD>mscser .ru</TD>  <TD>music-d0wnload-center .com</TD></TR>
<TR><TD>mstoolkit .com</TD>  <TD>music-idownloads .com</TD></TR>
<TR><TD>music-folia .com</TD>  <TD>music-istore-downloads .com</TD></TR>
<TR><TD>myfghavs .com</TD>  <TD>music-moviesnetwork .com</TD></TR>
<TR><TD>newbiz10news .com</TD>  <TD>music-new-downloads .com</TD></TR>
<TR><TD>newbiz1cash .com</TD>  <TD>namebuypicture .cn</TD></TR>
<TR><TD>newbiz1news .com</TD>  <TD>natspot-serve .com</TD></TR>
<TR><TD>newbiz2news .com</TD>  <TD>newantivirusdownloads .com</TD></TR>
<TR><TD>newbiz3news .com</TD>  <TD>newest-version-download .com</TD></TR>
<TR><TD>newbiz4news .com</TD>  <TD>newflash10news .com</TD></TR>
<TR><TD>newbiz5news .com</TD>  <TD>officesuite-download .com</TD></TR>
<TR><TD>newbiz6news .com</TD>  <TD>parlen-group-usa .com</TD></TR>
<TR><TD>newbiz7news .com</TD>  <TD>parlen-groupllc .com</TD></TR>
<TR><TD>newbiz8news .com</TD>  <TD>parlengroupllc .net</TD></TR>
<TR><TD>newbiz9news .com</TD>  <TD>protectantivscanfree1 .com</TD></TR>
<TR><TD>npeyugux .cn</TD>  <TD>quad-it-group .com</TD></TR>
<TR><TD>palazziogt .ru</TD>  <TD>quinta-groupus .com</TD></TR>
<TR><TD>phonezero .com .br</TD>  <TD>rextechinnovation .com</TD></TR>
<TR><TD>quad-groupuk .cc</TD>  <TD>rextechltd-us .com</TD></TR>
<TR><TD>quinta-llc .net</TD>  <TD>schwendonger .ce .ms</TD></TR>
<TR><TD>quintagroup .cc</TD>  <TD>searchalphabet .org</TD></TR>
<TR><TD>raucherhimmel .de</TD>  <TD>special-art-ltd .com</TD></TR>
<TR><TD>rbomce .com</TD>  <TD>special-art-uk .cc</TD></TR>
<TR><TD>rextechltd .cc</TD>  <TD>targetmarketgroup-llc .cc</TD></TR>
<TR><TD>sadone .ce .ms</TD>  <TD>taskmalbbunde .co .cc</TD></TR>
<TR><TD>searchant .org</TD>  <TD>thebestscannerdha .l2x .eu</TD></TR>
<TR><TD>searchatom .org</TD>  <TD>tingdjibmar .ce .ms</TD></TR>
<TR><TD>searchbegan .org</TD>  <TD>traffic-4webmaster .com</TD></TR>
<TR><TD>sroxcwoa .ce .ms</TD>  <TD>upperblackeddy4 .cz .cc</TD></TR>
<TR><TD>stillmate .co .cc</TD>  <TD>vci01 .appbundler .net</TD></TR>
<TR><TD>subdom25 .com</TD>  <TD>virusprotection24 .com</TD></TR>
<TR><TD>sublime-ltd .net</TD>  <TD>vnsproject-de .cc</TD></TR>
<TR><TD>tyodi .com</TD>  <TD>von90qr8ft .cz .cc</TD></TR>
<TR><TD>videocrazy .cx .cc</TD>  <TD>vortex-llc-uk .net</TD></TR>
<TR><TD>wexct .info</TD>  <TD>vortexllc-uk .com</TD></TR>
<TR><TD>woedmonn .ce .ms</TD>  <TD>wayuvaga111 .vv .cc</TD></TR>
<TR><TD>xbx .tw</TD>  <TD>web-fotogallery .be</TD></TR>
<TR><TD>xhyjl .cn</TD>  <TD>witayeno111 .cz .cc</TD></TR>
<TR><TD>xmycelebs .co .cc</TD>  <TD>worksappmedia .in</TD></TR>
<TR><TD>yahbesvyt .com</TD>  <TD>youtubeonline .net</TD></TR>

Exploits, iframes, moneymules, rbn, rogue, zeus domains

Posted on May 30th, 2011 in exploit,iframes,MoneyMule,New Domains,RBN,rogue antivirus,Trojans,zeus by dglosser

A little bit for everyone… domains associated with zeus, money mules, rogue security, rbn, zeus, exploits &  trojans. Sources include www.tristatelogic.com, www.threatexpert.com, securehomenetwork.blogspot.com (Every source is  listed in the domains.txt file):

4t7uxaxrg8 .co .be 98dfgr994883798df .com
74l8w .co .cc allston-groupsec .cc
aa2535245 .com arztpraxis-schaefer .de
atca-inc .com bands-groupsvc .com
atcanetworks .net bandsgroup-inc .net
bafihamuxav .com bisyvoqyxymyqi .com
bands-inc .com centrimedicitoscani .it
bandsgroupnet .cc developgroupinc .net
bapyrejecak .com evolvingsysinc .net
barribuza .com ewloidydytgba .co .be
beazenrad .cz .cc eyesecurr327458 .net
beefcake .jino .ru fairbankhouston .cz .cc
c0re .us galleogroupnet .net
ccfjuyut .bee .pl giant-groupinc .com
cnl-groupsvc .com guidopietro .com .ar
cnl-inc .com homeofficeteam .com
cnlgroup-inc .cc imperial-groupinc .com
cnlgroupnet .net imperial-groupsvc .net
cordanrad .cz .cc imperialgroupco .com
cosainse .com infotech-groupco .net
cruelbox .info infotech-groupinc .com
dehozykato .com infotechgroup-inc .com
develop-inc .com keepclean-cvsid .cz .cc
dsnextgen .com lady-gaga-romance .com
evolving-inc .com ladygagaromance .net
execon .kz ladygagaromance .org
firimasa .net ladygagaromancefilms .com
fojexojup .com ladygagaromancetips .com
foo .com lastnightphoto .net
fs8g78f8dduf .com loading-v-045 .cz .cc
fujoresaw .com loading-v-506 .cz .cc
galleo-inc .com lolitasexmovies .com
giant-groupco .net magnet-groupinc .cc
giant-groupnet .cc mexigawarynode .com
giantgroupinc .com myfreewebspase .info
host-groupsvc .net neframeofwork .com
hostgroup-inc .com netmarket-inc .com
hostgroupinc .com netmarkettech .net
hostgroupnet .cc novaris-groupllc .tw
ict-groupco .com novaris-grouporg .cc
ict-groupsvc .net novarisgroupmain .tw
ictgroupinc .com nymemuhoseran .com
ictgroupnet .cc ofsrtndmcxcsoexq .org
inkmoduledso .com online–access .com
jacumegekij .com online–products .com
johunyniv .com online-2011-version .com
juqupybocuto .com online-antivirus-protection-reviews .com
jvc-inc .com online-downloads-2010 .com
jvcgroupnet .net online-football-channel .com
kaliberdapod .net online-new-version .com
leducivudadyj .com online-tv-access .com
lopiuy .com online-tv-access .net
marihuqavigyt .com online-tv-on-pc .com
mercy-inc .com online-tv-on-your-pc .com
mercygroupnet .net online-vital-records .com
myspeezo .ce .ms online-web-download .com
narod-photo .ru online10flash .com
nastymomvids .com online11flash .com
nicynajomypy .com perseus-groupfine .tw
nixecynuho .com perseus-groupinc .tw
o18j38 .co .cc perseusgroupllc .cc
on3news .ru protest-west2011 .co .cc
on4news .ru ricogodobekax .com
on5news .com savvi-investments .com
on5news .ru scanner-ant-iv-xp .com
on6news .com scanner-win-protection .com
on6news .ru scanner-win-stuff-protection .com
on7news .ru scannerantbiteivxp .com
on8news .com scanneranthillsivxp .com
on8news .ru scannerantivirsoft .com
on9news .ru scannerantivirsoftdrink .com
online10news .com scannerantivirsoftdrinks .com
online10news .ru scannerantivirsoftlanding .com
podojykofogu .com scannerantivirsoftrock .com
pornopet .com scannerantivirsoftspot .com
pozefybop .com scannerantlionivxp .com
pranza .com scannerprotectiondogsfree .com
qazomequguca .com scannerprotectionofficesfree .com
qozohyhobuci .com scannerprotectionwin .com
rapekids .com scannerprotectionxp .com
sanstag .com scannerwingamesprotection .com
scannerantiv .com scannerwinprotection .com
serpbe .net sexteachervids .com
tun4atta .in simplychasinasis .com
usbirthforms .org smackbitches .hostding .com
usfoodstamps .org solarisgroupinc .com
usi-groupinc .net solarisgroupnet .net
usigroup-inc .com symihyceqemexo .com
usigroupinc .com tomiya .sites .uol .com .br
usigroupnet .cc track .upsclients .org
usvaforms .org ultra-gamesdownload .com
utorant .com ultragames-download .com
utorint .com unlimited-downloadcenter .com
utorrint .com unlimited-mediaaccess .com
uzldzzzeo3 .co .be unlimitedconsole-games .com
vaforms .org unlimiteddownloadcenter .com
vallesoft .com unlimiteddownloadnetwork .com
vital-groupco .cc unlimiteddownloads-center .com
vital-groupco .tw unlimitedgame-downloads .com
vtbew .info unlimitedgames-downloads .com
weriloxoro .com unlimitedmedia-access .com
wu2d .com unlimitedmultimedia-access .com
xymasehyfi .com us-legalforms .org
z9r2 .com us-vital-records .com
z9r4 .com usmarriagerecords .info
zao1 .cz .cc vancouver2010-olympicsonline .com
zepa6hr6jk .co .be victorymarketing .info
zfdim0u06t .co .be vital-groupinc .tw
zoo4arab .net

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Big Update: lizamoon, driveby, rogue domains

Posted on April 5th, 2011 in MoneyMule,New Domains,rogue antivirus,sql injection,Trojans,zeus by dglosser

Over 200 domains associated with zeus, lizamoon, drive-by exploits, moneymule, and  fake  security pages.  Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com, urlvoid.com (Every source is   listed in the domains.txt file):

advabnr .com afraid .orgmooo .com
ave-stats .info alternative-art-uk .co
axx1 .co .cc antivirus-2525 .co .cc
axx2 .co .cc antivirus-2932 .co .cc
azx3 .co .cc antivirus-3654 .co .cc
b949 .co .cc antivirus-713 .co .cc
bhaaa .co .cc antivirus-728 .co .cc
bhccc .co .cc antivirus-7357 .co .cc
bl0d .co .cc antivirus-8072 .co .cc
bl1f .co .cc antivirus-9638 .co .cc
bl4j .co .cc antivirus-9667 .co .cc
bl5d .co .cc autosportitalia .it
blcr .co .cc b5b15f58b4680803016eb17881f3e929 .info
blg9 .co .cc books-loader .info
blh8 .co .cc borinquensalsa .com
blh9 .co .cc casinovergelijker .com
blks .co .cc casualhopperois .com
blm9 .co .cc chelpgroup-llc .net
blnh .co .cc chepl-groupllc .biz
blnm .co .cc comdefender-abcc .in
blpk .co .cc comdefender-drnr .in
blqh .co .cc comdefender-evvj .in
blqm .co .cc comdefender-mpdfa .in
blsr .co .cc comdefender-nibea .in
blt8 .co .cc comdefender-rlob .in
bltq .co .cc comdefender-sxin .in
bluenosa .info comdefender-tpda .in
blzq .co .cc comdefender-uvag .in
ciaojfncvmt .com comdefender-wbui .in
colicie .info comdefender-xkox .in
comcmdrun .com comdefender-xqba .in
defender-aabv .in cossmar-goiano .asia
defender-abcc .in dc7e7c1a018708f .co .cc
defender-atio .in defender-aqeu .co .cc
defender-atxo .in defender-asng .co .cc
defender-fmof .in defender-eyde .co .cc
defender-gnva .in defender-fola .co .cc
defender-grlt .in globalpoweringgathering .com
defender-hipw .in google-stats47 .info
defender-hjlk .in google-stats54 .info
euy0 .co .cc google-stats73 .info
excluti .com hslfntooyyhumnp .biz
extra-911 .info ifczlmkjocnrkrvx .org
fewge .com infectedvirusxpsoft .com
frq3 .co .cc netruebtshb .co .cc
groatcoats .com netryevsirs .co .cc
gvppjnjv .net .in netrzysktlz .co .cc
image4msn .com netshwptknk .co .cc
incmt .com netskfzoygu .co .cc
kvpa .co .cc netsoftware-brvr .co .cc
mol-stats .info netsoftware-nerx .co .cc
ocservice-de .net netsoftware-q9k9 .co .cc
oregonltd-uk .cc netsoftware-sulv .co .cc
otmtg .com netsoftware-verh .co .cc
people-on .info netsoftware-werp .co .cc
planixcentral .in netspuqpphk .co .cc
ponel .biz netsqaezjdt .co .cc
prvenus-de .com netsqanvtkw .co .cc
purelandfilms .in netstpbbyzq .co .cc
qabplzoqthr .com netsuiqkpju .co .cc
rosabet .net netsystem-scanner-boep .co .cc
s0lk .co .cc netsystem-scanner-ekoi .co .cc
sabplgosvmt .com netzztoeauc .co .cc
slp1 .co .cc opytibuxi .virtue .nu
squit-llc .co oregon-ltd-uk .net
sru5 .co .cc pefpovhvstmjlmqe .biz
sru6 .co .cc pjpgvvwdmolouo .net
star-stats .info powernhgmdftkcleaner .myfw .us
suvitt .com ppeijrmuqlivgp .biz
tadygus .com pupplwpengstuf .net
talkwire .in pxpozrkjzrvtegn .biz
tea .com .pl rmtzqkuplsikots .biz
topazgmbh-de .com security-stats .info
w7-guardav .biz software-c9vv .co .cc
w7-guardav .com software-k9le .co .cc
w7-guardav .net software-z5qy .co .cc
w7guard-av .biz system-scanner-oypx .co .cc
w7guard-av .com system-scanner-qeap .co .cc
w7guard-av .net system-scanner-racv .co .cc
winadefender .biz system-scanner-ryes .co .cc
winwdefender .net system-scanner-tzii .co .cc
wsatfdwxzj .co .cc system-scanner-uemo .co .cc
wsbzaenrvm .co .cc system-scanner-uotu .co .cc
wscnfogqog .co .cc system-scanner-uyxt .co .cc
wsexirzexl .co .cc system-scanner-vpoo .co .cc
wsfmvdvera .co .cc system-stats .info
wsgskwbmhc .co .cc theantivirusxpsoft .com
wshxmhyqqq .co .cc thexpscanantivirus .com
wsirdbrvai .co .cc urllizamoon–com .rtrk .co .uk
wsjfvogzds .co .cc welcometotheglobalisnet .com
wsjjxjbfdj .co .cc world-stats598 .info
wsjknryvyw .co .cc wsantivirus-1517 .co .cc
wsjlhpadsv .co .cc wsdefender-nbev .co .cc
wslasmtlcv .co .cc wsdefender-ttii .co .cc
wslqrizgzk .co .cc wsdefender-ysyj .co .cc
wsobqiahme .co .cc wsmovies-tube-ylld .co .cc
wspwkwgaxl .co .cc wssoftway2011 .com
wsqjrralfl .co .cc wssystem-scanner-amoa .co .cc
wsqmrqlevl .co .cc wsxcacoqzt .co .cc
wsrpqsmunp .co .cc wsxkluycay .co .cc
wssgebxond .co .cc wsxnsxguyl .co .cc
wssgifitlp .co .cc wsxvwrktxa .co .cc
wssrjklbtq .co .cc wsysitfpiq .co .cc
wsubjsgtbr .co .cc wszthrboqe .co .cc
wsuconokjj .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…