Feed

Another huge update – 278 Domains

Posted on April 9th, 2011 in New Domains,rogue antivirus,sql injection by dglosser

278 domains associated with rouge security/fake AV, sql injection, lizamoon and other badness. Sources include blog.sucuri.net, safebrowsing.google.com, amada.abuse.ch and securehomenetworks.blogspot.com (Every source is   listed in the domains.txt file)

100451 .com best-cleanscanner .com
av-brend .ru best-driveholder .net
avprotect2011 .ru best-drivekeeper .com
baad .ws best-drivekeeper .net
banner2system .com best-file-holder .com
banner3system .com best-file-master .com
banner4system .com best-force-guard1 .net
best-av-soft1 .com best-force-guard2 .net
best-av-soft2 .net best-force-guard3 .net
best-av-soft3 .com best-force-guard4 .net
best-av-soft4 .net best-force-guard5 .com
best-avsoft1 .com best-force-guard6 .com
best-avsoft2 .net best-force-guard7 .com
best-avsoft3 .com best-malwareprotection .com
best-avsoft4 .net best-malwareprotection .net
best-avsoft5 .com best-network-soft .net
best-avsoft6 .net best-networkguard .net
best-checkerro .com best-networksoft .net
best-checkerru .com best-protectforyou .com
best-checkerry .com best-protectforyou .net
best-checkerst .com best-securitychecker .com
best-checkerti .com best-securityforyou .com
best-checkertt .com best-securityguard .com
best-checkerty .com best-securitymaster .net
best-checkerum .com best-softcheckri .com
best-checkerur .com best-softcheckrk .com
best-clean-area .com best-softchecksp .com
best-cleanguard .net best-softcheckta .com
best-driveguard .com best-softcheckut .com
best-driveholder .com best-stuff-checker .com
best-fileguard .net best-stuff-keeper .net
best-ofsoftav .net best-stuffkeeper .com
best-pcholder .com best-stuffmaster .com
best-pcmaster .com best-suitescanner .com
best-savez .com best-your-holder .net
best-softguard4 .net bestantivir-soft1 .com
best-yourguard .com bestantivir-soft2 .com
bestably .com bestantivir-soft3 .com
bestaddefense .com bestantivir-soft4 .com
bestade .com bestantivir-soft5 .com
bestandefense .com bestantivir-soft6 .com
bridgetday .ru checker-network-hard .cz .cc
checkwebspeed .net cloudnanoconnnection .info
cz88 .net comsoftware-c9vv .co .cc
defender-ayva .co .cc comsoftware-cvrr .co .cc
defender-nibea .in comsoftware-cytu .co .cc
dunaverj .com comsoftware-d5j9 .co .cc
exirzexl .co .cc comsoftware-d5tu .co .cc
fiherspind .com comsoftware-h9zv .co .cc
focustemplate .ru comsoftware-hudu .co .cc
hcol .com comsoftware-juq5 .co .cc
helpimoma .ru comsoftware-k9le .co .cc
jewelrypartybiz .com comsoftware-l9g5 .co .cc
jiekefa8e .info comsoftware-lerd .co .cc
js43jfgskfgh .vv .cc comsoftware-m9br .co .cc
kmsfktrkfk .vv .cc comsoftware-m9gv .co .cc
lucangl .com comsoftware-mvrz .co .cc
momolian .com comsoftware-mykv .co .cc
netapebnarr .co .cc comsoftware-qvrd .co .cc
netaqzqrquk .co .cc comsoftware-t5l9 .co .cc
netaxnltmec .co .cc comsoftware-verl .co .cc
netbbtakdgf .co .cc comsoftware-w5dy .co .cc
netblgqxumw .co .cc comsoftware-wujy .co .cc
netbnsdglxo .co .cc comsoftware-wyke .co .cc
netbrnydjba .co .cc comsoftware-x5dy .co .cc
netbruosrnj .co .cc comsoftware-z5qy .co .cc
netbtwcsegn .co .cc easystatscounter .co .cc
netbuiimzym .co .cc faststatscounter .co .cc
netbwmlezvm .co .cc securetraletguard .com
netbytmjfwf .co .cc securetramenguard .net
netceskzois .co .cc securetroodyguard .com
netcjrexkse .co .cc securewassamguard .net
netcokummxz .co .cc secureyishedguard .com
netcvhgkrzr .co .cc secureyonetionpc .com
netcwepgvol .co .cc security-aggregate2 .com
netcxdpckmy .co .cc security-internet4u .com
netcxsdjrjd .co .cc security-master4 .com
netdaxslvcu .co .cc security-master5 .com
netdeeafcmo .co .cc security-master6 .com
opodeanog .com securitykidgrend .com
plomertvah .com securitylink-foryou1 .com
pzecsfas .co .cc securitylink-foryou2 .net
qqkuyou .cn securitylink-foryou3 .com
rafterte .com securitylink-foryou4 .net
recover888 .com securitylink-foryou5 .com
sabantdr .com securitylink-foryou6 .net
satiere .com securitylink-foryou7 .com
searchableantiv .com securitylink-foryou8 .net
securedys .com securityscommont .com
secureean .com sefaty-guardian4 .net
secureehum .com sefaty-guardian5 .net
secureehus .com sefaty-guardian6 .net
secureei .com selfsoft-checker1 .net
secureel .com selfsoft-checker2 .net
secureem .net selfsoft-checker3 .net
secureeni .com selfsoft-checker4 .net
secureente .com selfsoft-checker5 .com
secureeog .com selfsoft-checker6 .com
secureeoge .com selfsoft-checker7 .com
secureever .com selfsoft-checker8 .com
securefre .com softwareupdateservice .ru
securefws .com supergoogleanalytics .co .cc
securegle .com system-scanner-iwcw .co .cc
securegre .com total-virusdetective .net
securehing .com true-protection30 .com
secureion .net true-protection31 .net
securejya .com true-protection32 .com
securekly .net true-protection33 .net
securekya .com true-protection34 .com
securemhz .com true-protection36 .com
secureomsk .com true-protection37 .net
securepjs .com true-protection38 .com
secureque .com true-protection39 .net
securesone .com true-protection40 .com
securityaillaus .com true-protection41 .net
securityampang .com winupdateservices .com
securitymornew .net wsmovie-tube-anuq .co .cc
securityoddlead .com wsmovie-tube-dohu .co .cc
securityspland .com wsmovie-tube-gdly .co .cc
securitywootery .net wsmovie-tube-iokx .co .cc
securitywrenom .com wsmovie-tube-omku .co .cc
seriousguard .com wsmovie-tube-oywa .co .cc
sinitti .com wsmovie-tube-uljb .co .cc
slavitic .com wsmovie-tube-usky .co .cc
sofeqadro .ru wsmovie-tube-uxyl .co .cc
soft-hight .ru wsmovie-tube-yxpc .co .cc
software-nerx .co .cc wsmovies-live-tube-tuah .co .cc
software-q9k9 .co .cc wsmovies-live-tube-tzio .co .cc
solomon-xl .cz .cc wsmovies-live-tube-yeey .co .cc
thescannerantiv .com wsmovies-tube-ebex .co .cc
thosegoto .com wsmovies-tube-eiee .co .cc
tulsidas .com wsmovies-tube-nkgi .co .cc
unuberpait .com wsmovies-tube-saxl .co .cc
updateservers .kz wssystem-scanner-aogz .co .cc
uvulaudan .com wssystem-scanner-kmiv .co .cc
windriverupdate .kz wssystem-scanner-oiiu .co .cc
xh2009 .com wssystem-scanner-uhix .co .cc
yu678 .com yourstatscounter .co .cc
zlpeqbhp .co .cc yourstatscounter .cz .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Huge Update: Over 450 domains

Posted on April 7th, 2011 in New Domains,rogue antivirus,sql injection,zeus by dglosser

One of the biggest updates ever – over 450 domains associated with some 0-day exploits, fakeav,lizamoon, and other badness you don’t want visiting your company’s desktops or laptops (or your own for that matter).

Sources: amada.abuse.ch blocklist, safebrowsing.google.com, securehomenetworks.blogspot.com and others (Every source is   listed in the domains.txt file)

1guardfor-sec .net netmovie-tube-efli .co .cc
31ad .com netmovie-tube-eucg .co .cc
77169 .com .cn netmovie-tube-euie .co .cc
addsoft-check .com netmovie-tube-gmfl .co .cc
addsoft-checker .net netmovie-tube-habj .co .cc
addsoftcheck .net netmovie-tube-hetu .co .cc
all-foryoursafety .com netmovie-tube-iari .co .cc
all-foryoursafety .net netmovie-tube-iega .co .cc
allfor-yoursafety .com netmovie-tube-ieia .co .cc
allfor-yoursafety .net netmovie-tube-igoi .co .cc
allforyour-safety .com netmovie-tube-ijoq .co .cc
allforyour-safety .net netmovie-tube-iroy .co .cc
allforyoursafety .com netmovie-tube-juie .co .cc
allforyoursafety .net netmovie-tube-jyey .co .cc
allgustrue .com netmovie-tube-kliy .co .cc
alsoftprotect .com netmovie-tube-lryz .co .cc
alternative-softav .net netmovie-tube-lywo .co .cc
antiattack1 .net netmovie-tube-oaxe .co .cc
antiattack2 .net netmovie-tube-osaz .co .cc
antiattack3 .net netmovie-tube-pode .co .cc
antiattack4 .net netmovie-tube-pzix .co .cc
antiattack5 .net netmovie-tube-riyo .co .cc
antiattack6 .net netmovie-tube-teoe .co .cc
antivirazooth .com netmovie-tube-tiny .co .cc
antivirdjecity .com netmovie-tube-ubjm .co .cc
av-solurion-soft .com netmovie-tube-uhlu .co .cc
avcircleprotect .com netmovie-tube-upua .co .cc
avgroup-soft .net netmovie-tube-urip .co .cc
avsoft-guard-all .com netmovie-tube-usay .co .cc
avsoftafrion .net netmovie-tube-uzje .co .cc
bandawww .ru netmovie-tube-viry .co .cc
bandidora .cz .cc netmovie-tube-vohe .co .cc
clr .cn netmovie-tube-vsae .co .cc
collectiontiny .ru netmovie-tube-wauy .co .cc
commovie-asiwa .in netmovie-tube-wnkw .co .cc
commovie-bjnl .in netmovie-tube-ydui .co .cc
commovie-bnis .in netmovie-tube-yhyi .co .cc
commovie-brvr .co .cc netmovie-tube-ywek .co .cc
commovie-buns .in netmovie-tube-ywli .co .cc
commovie-c5n9 .co .cc netmovie-tube-yywd .co .cc
commovie-c9vv .co .cc netmovie-tube-zjfm .co .cc
commovie-cewj .in netmovie-tube-zkni .co .cc
commovie-cfab .in netmovie-tube-zxoh .co .cc
commovie-cvrr .co .cc netmovie-werp .co .cc
commovie-d5d9 .co .cc niredvw .kwik .to
commovie-d5j9 .co .cc nocyrvw .kwik .to
commovie-d5tu .co .cc nuadazan .cz .cc
commovie-doep .in smakteyl .ru
commovie-dwre .in tiny-collection .ru
commovie-eawi .in trust-in-goodsoft .com
commovie-ehke .in trust-in-goodsoft .net
commovie-estv .in trust-ingoodsoft .com
commovie-eulp .in trust-ingoodsoft .net
commovie-fvux .in trusted-zone20 .com
commovie-g5br .co .cc trusted-zone21 .net
commovie-gfrn .in trusted-zone22 .com
commovie-gnqh .in trusted-zone23 .net
commovie-h9zv .co .cc trusted-zone24 .com
commovie-hbed .in trusted-zone25 .net
commovie-hbfk .in trusted-zone26 .com
commovie-hure .co .cc trusted-zone27 .net
commovie-igib .in trusted-zone28 .com
commovie-invp .in trusted-zone29 .net
commovie-iodp .in trustedguadianzone .com
commovie-jnmk .in trustedproducttr .com
commovie-jqio .in trustedproductua .com
commovie-k9le .co .cc trustedproductus .com
commovie-kqhe .in trustin-goodsoft .com
commovie-ksvs .in trustin-goodsoft .net
commovie-ktll .in trustingoo-dsoft .com
commovie-kura .in trustingoo-dsoft .net
commovie-lerd .co .cc trustingoodsoft .com
commovie-lstg .in trustingoodsoft .net
commovie-lvou .in ubershields .com
commovie-lvxs .in ubershields .net
commovie-m9br .co .cc ubershields1 .com
commovie-m9gv .co .cc ubershields1 .net
commovie-mcnf .in ubershields10 .com
commovie-miow .in ubershields10 .net
commovie-mvrz .co .cc ubershields11 .com
commovie-mykv .co .cc ubershields11 .net
commovie-nern .co .cc ubershields12 .com
commovie-ngrg .in ubershields12 .net
commovie-nmpd .in ubershields13 .com
commovie-nvrk .in ubershields13 .net
commovie-nxiv .in ubershields14 .com
commovie-obhs .in ubershields14 .net
commovie-plnd .in ubershields15 .com
commovie-qhxg .in ubershields15 .net
commovie-qvima .in ubershields2 .com
commovie-qvrd .co .cc ubershields2 .net
commovie-rnlk .in ubershields3 .com
commovie-svrb .co .cc ubershields3 .net
commovie-swvl .in ubershields4 .com
commovie-t5l9 .co .cc ubershields4 .net
commovie-tggd .in ubershields5 .com
commovie-uhps .in ubershields5 .net
commovie-urpc .in ubershields6 .com
commovie-verh .co .cc ubershields6 .net
commovie-verl .co .cc ubershields7 .com
commovie-vhol .in ubershields7 .net
commovie-vosr .in ubershields8 .com
commovie-vpxd .in ubershields8 .net
commovie-vtpp .in ubershields9 .com
commovie-vxkt .in ubershields9 .net
commovie-w5dy .co .cc ultraaby .com
commovie-wiro .in ultraayem .com
commovie-wnqd .in ultrabtud .com
commovie-wxpf .in ultracpso .com
commovie-wyke .co .cc ultradts .com
commovie-x5dy .co .cc ultraeice .com
commovie-xdjb .in ultraeple .com
commovie-z5qy .co .cc umetior .com
commovieway2011 .com unseer .com
comodofw .co .cc upgradesoft-av .net
dirtjamp .ru upgreatprotecion .net
granirana .cz .cc uwybzuwe .co .cc
htnbqitr .co .cc viblager .com
mincesur .com vip-protection10 .com
movie-brvr .co .cc vip-protection11 .net
movie-c5n9 .co .cc vip-protection12 .com
movie-c9vv .co .cc vip-protection13 .net
movie-cvrr .co .cc vip-protection14 .com
movie-d5d9 .co .cc vip-protection15 .net
movie-d5j9 .co .cc vip-protection16 .com
movie-d5tu .co .cc vip-protection17 .net
movie-g5br .co .cc vip-protection18 .com
movie-h9zv .co .cc virus-detector5 .com
movie-hure .co .cc virus-detector6 .com
movie-k9le .co .cc virus-detector7 .com
movie-lerd .co .cc virus-detector8 .com
movie-m9br .co .cc web-guardian-readynow .com
movie-m9gv .co .cc web-guardian-readynow .net
movie-mvrz .co .cc web-guardianreadynow .com
movie-mykv .co .cc web-guardianreadynow .net
movie-nern .co .cc webguardian-readynow .com
movie-qvrd .co .cc webguardian-readynow .net
movie-svrb .co .cc webguardianready-now .com
movie-t5l9 .co .cc webguardianready-now .net
movie-verh .co .cc webguardianreadynow .com
movie-verl .co .cc webguardianreadynow .net
movie-w5dy .co .cc wekby .com
movie-wyke .co .cc winadefender .com
movie-x5dy .co .cc winadefender .net
movie-z5qy .co .cc winbdefender .biz
netaadkznyw .co .cc winbdefender .com
netaarrxoop .co .cc winbdefender .net
netahtqsgme .co .cc wincdefender .biz
netantivirus-1091 .co .cc wincdefender .com
netantivirus-1186 .co .cc wincdefender .net
netantivirus-1382 .co .cc winddefender .biz
netantivirus-1427 .co .cc winddefender .net
netantivirus-1574 .co .cc winedefender .biz
netantivirus-2051 .co .cc winedefender .net
netantivirus-2932 .co .cc winfdefender .biz
netantivirus-2938 .co .cc winfdefender .com
netantivirus-3029 .co .cc winfdefender .net
netantivirus-3068 .co .cc wingdefender .biz
netantivirus-33 .co .cc wingdefender .com
netantivirus-3564 .co .cc wingdefender .net
netantivirus-3654 .co .cc winhdefender .biz
netantivirus-3833 .co .cc winhdefender .com
netantivirus-3879 .co .cc winhdefender .net
netantivirus-4063 .co .cc winidefender .biz
netantivirus-418 .co .cc winidefender .com
netantivirus-4303 .co .cc winidefender .net
netantivirus-4749 .co .cc winjdefender .biz
netantivirus-5216 .co .cc winjdefender .com
netantivirus-5340 .co .cc winjdefender .net
netantivirus-5676 .co .cc winkdefender .biz
netantivirus-6169 .co .cc winkdefender .com
netantivirus-6437 .co .cc winkdefender .net
netantivirus-6703 .co .cc winldefender .biz
netantivirus-7081 .co .cc winldefender .com
netantivirus-713 .co .cc winldefender .net
netantivirus-7237 .co .cc winmdefender .biz
netantivirus-728 .co .cc winmdefender .com
netantivirus-7357 .co .cc winmdefender .net
netantivirus-8072 .co .cc winndefender .biz
netantivirus-8577 .co .cc winndefender .com
netantivirus-9009 .co .cc winndefender .net
netantivirus-92 .co .cc winodefender .biz
netantivirus-9465 .co .cc winodefender .com
netantivirus-9638 .co .cc winodefender .net
netantivirus-9926 .co .cc winpdefender .biz
netantivirus-9961 .co .cc winpdefender .com
netdefender-ajem .co .cc winpdefender .net
netdefender-bwuy .co .cc winrdefender .biz
netdefender-cfos .co .cc winrdefender .com
netdefender-dtyh .co .cc winrdefender .net
netdefender-dyxa .co .cc winsdefender .biz
netdefender-eahy .co .cc winsdefender .com
netdefender-edaa .co .cc winsdefender .net
netdefender-ewum .co .cc wintdefender .biz
netdefender-eyde .co .cc wintdefender .com
netdefender-fola .co .cc wintdefender .net
netdefender-iibk .co .cc winudefender .biz
netdefender-iies .co .cc winudefender .com
netdefender-iieu .co .cc winudefender .net
netdefender-isde .co .cc winvdefender .biz
netdefender-iyrc .co .cc winvdefender .com
netdefender-jihv .co .cc winvdefender .net
netdefender-kzwu .co .cc winwdefender .biz
netdefender-lphk .co .cc winwdefender .com
netdefender-nuqp .co .cc wistery .com
netdefender-oeki .co .cc wsantivirus-6975 .co .cc
netdefender-oeoe .co .cc wsaqfwbngy .co .cc
netdefender-ofkq .co .cc wsaqwavnwv .co .cc
netdefender-qbiy .co .cc wsaspducpi .co .cc
netdefender-qsko .co .cc xciterf .com
netdefender-syio .co .cc xlinque .com
netdefender-ueuv .co .cc xsoftprotection .com
netdefender-wtln .co .cc xzrw1q .com
netdefender-yrot .co .cc your-full-protection .com
netdefender-yugs .co .cc your-full-protection1 .net
netdefender-zaep .co .cc your-full-protection2 .net
netdefender-zcez .co .cc your-full-protection3 .net
netdefender-zpiv .co .cc your-secure-shelter .net
netmovie-tube-acin .co .cc yourfullprotectionav .net
netmovie-tube-ahaa .co .cc yournetworkprotection .com
netmovie-tube-aias .co .cc zone-protectionre .com
netmovie-tube-aoyr .co .cc zone-protectionri .com
netmovie-tube-aqis .co .cc zone-protectionti .com
netmovie-tube-beym .co .cc zone-protectionua .com
netmovie-tube-cbnr .co .cc zone-protectionue .com
netmovie-tube-csua .co .cc zoneofguardians .com
netmovie-tube-datm .co .cc zonfing .com
netmovie-tube-efkq .co .cc zprw6q .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Big Update: lizamoon, driveby, rogue domains

Posted on April 5th, 2011 in MoneyMule,New Domains,rogue antivirus,sql injection,Trojans,zeus by dglosser

Over 200 domains associated with zeus, lizamoon, drive-by exploits, moneymule, and  fake  security pages.  Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com, urlvoid.com (Every source is   listed in the domains.txt file):

advabnr .com afraid .orgmooo .com
ave-stats .info alternative-art-uk .co
axx1 .co .cc antivirus-2525 .co .cc
axx2 .co .cc antivirus-2932 .co .cc
azx3 .co .cc antivirus-3654 .co .cc
b949 .co .cc antivirus-713 .co .cc
bhaaa .co .cc antivirus-728 .co .cc
bhccc .co .cc antivirus-7357 .co .cc
bl0d .co .cc antivirus-8072 .co .cc
bl1f .co .cc antivirus-9638 .co .cc
bl4j .co .cc antivirus-9667 .co .cc
bl5d .co .cc autosportitalia .it
blcr .co .cc b5b15f58b4680803016eb17881f3e929 .info
blg9 .co .cc books-loader .info
blh8 .co .cc borinquensalsa .com
blh9 .co .cc casinovergelijker .com
blks .co .cc casualhopperois .com
blm9 .co .cc chelpgroup-llc .net
blnh .co .cc chepl-groupllc .biz
blnm .co .cc comdefender-abcc .in
blpk .co .cc comdefender-drnr .in
blqh .co .cc comdefender-evvj .in
blqm .co .cc comdefender-mpdfa .in
blsr .co .cc comdefender-nibea .in
blt8 .co .cc comdefender-rlob .in
bltq .co .cc comdefender-sxin .in
bluenosa .info comdefender-tpda .in
blzq .co .cc comdefender-uvag .in
ciaojfncvmt .com comdefender-wbui .in
colicie .info comdefender-xkox .in
comcmdrun .com comdefender-xqba .in
defender-aabv .in cossmar-goiano .asia
defender-abcc .in dc7e7c1a018708f .co .cc
defender-atio .in defender-aqeu .co .cc
defender-atxo .in defender-asng .co .cc
defender-fmof .in defender-eyde .co .cc
defender-gnva .in defender-fola .co .cc
defender-grlt .in globalpoweringgathering .com
defender-hipw .in google-stats47 .info
defender-hjlk .in google-stats54 .info
euy0 .co .cc google-stats73 .info
excluti .com hslfntooyyhumnp .biz
extra-911 .info ifczlmkjocnrkrvx .org
fewge .com infectedvirusxpsoft .com
frq3 .co .cc netruebtshb .co .cc
groatcoats .com netryevsirs .co .cc
gvppjnjv .net .in netrzysktlz .co .cc
image4msn .com netshwptknk .co .cc
incmt .com netskfzoygu .co .cc
kvpa .co .cc netsoftware-brvr .co .cc
mol-stats .info netsoftware-nerx .co .cc
ocservice-de .net netsoftware-q9k9 .co .cc
oregonltd-uk .cc netsoftware-sulv .co .cc
otmtg .com netsoftware-verh .co .cc
people-on .info netsoftware-werp .co .cc
planixcentral .in netspuqpphk .co .cc
ponel .biz netsqaezjdt .co .cc
prvenus-de .com netsqanvtkw .co .cc
purelandfilms .in netstpbbyzq .co .cc
qabplzoqthr .com netsuiqkpju .co .cc
rosabet .net netsystem-scanner-boep .co .cc
s0lk .co .cc netsystem-scanner-ekoi .co .cc
sabplgosvmt .com netzztoeauc .co .cc
slp1 .co .cc opytibuxi .virtue .nu
squit-llc .co oregon-ltd-uk .net
sru5 .co .cc pefpovhvstmjlmqe .biz
sru6 .co .cc pjpgvvwdmolouo .net
star-stats .info powernhgmdftkcleaner .myfw .us
suvitt .com ppeijrmuqlivgp .biz
tadygus .com pupplwpengstuf .net
talkwire .in pxpozrkjzrvtegn .biz
tea .com .pl rmtzqkuplsikots .biz
topazgmbh-de .com security-stats .info
w7-guardav .biz software-c9vv .co .cc
w7-guardav .com software-k9le .co .cc
w7-guardav .net software-z5qy .co .cc
w7guard-av .biz system-scanner-oypx .co .cc
w7guard-av .com system-scanner-qeap .co .cc
w7guard-av .net system-scanner-racv .co .cc
winadefender .biz system-scanner-ryes .co .cc
winwdefender .net system-scanner-tzii .co .cc
wsatfdwxzj .co .cc system-scanner-uemo .co .cc
wsbzaenrvm .co .cc system-scanner-uotu .co .cc
wscnfogqog .co .cc system-scanner-uyxt .co .cc
wsexirzexl .co .cc system-scanner-vpoo .co .cc
wsfmvdvera .co .cc system-stats .info
wsgskwbmhc .co .cc theantivirusxpsoft .com
wshxmhyqqq .co .cc thexpscanantivirus .com
wsirdbrvai .co .cc urllizamoon–com .rtrk .co .uk
wsjfvogzds .co .cc welcometotheglobalisnet .com
wsjjxjbfdj .co .cc world-stats598 .info
wsjknryvyw .co .cc wsantivirus-1517 .co .cc
wsjlhpadsv .co .cc wsdefender-nbev .co .cc
wslasmtlcv .co .cc wsdefender-ttii .co .cc
wslqrizgzk .co .cc wsdefender-ysyj .co .cc
wsobqiahme .co .cc wsmovies-tube-ylld .co .cc
wspwkwgaxl .co .cc wssoftway2011 .com
wsqjrralfl .co .cc wssystem-scanner-amoa .co .cc
wsqmrqlevl .co .cc wsxcacoqzt .co .cc
wsrpqsmunp .co .cc wsxkluycay .co .cc
wssgebxond .co .cc wsxnsxguyl .co .cc
wssgifitlp .co .cc wsxvwrktxa .co .cc
wssrjklbtq .co .cc wsysitfpiq .co .cc
wsubjsgtbr .co .cc wszthrboqe .co .cc
wsuconokjj .co .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.


Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Lots of rogue and lizamoon domains

Posted on April 2nd, 2011 in New Domains,rogue antivirus,sql injection by dglosser

163 domains, mainly associated with sql injection, lizamoon, and rogue antivirus.   Most have been nuked but one can never me too  careful (think about how many times gumblar has come back from the dead). Sources include ddanchev.blogspot.com, www.malwaregroup.com, community.websense.com/blogs   (Every source is always listed in the domains.txt file):

4dtb .co .cc antiagencyxpsoft .com
aaphonecard .com antivirus-1091 .co .cc
abcartel .com antivirus-1574 .co .cc
adamplus .com antivirus-2051 .co .cc
alexblane .com antivirus-3833 .co .cc
defender-bcvs .in antivirus-4063 .co .cc
defender-cron .in antivirus-418 .co .cc
defender-ddbr .in antivirus-4303 .co .cc
defender-drnr .in antivirus-4749 .co .cc
defender-dteo .in antivirus-495 .co .cc
defender-eklq .in antivirus-5216 .co .cc
defender-endl .in antivirus-5676 .co .cc
defender-hmfu .in antivirus-5802 .co .cc
defender-hsug .in antivirus-6437 .co .cc
defender-htlu .in antivirus-6703 .co .cc
defender-iksl .in antivirus-7081 .co .cc
defender-jgnl .in defender-bwuy .co .cc
defender-keod .in defender-eahy .co .cc
defender-kuts .in defender-ewum .co .cc
defender-kwwh .in defender-iibk .co .cc
defender-labm .in defender-iies .co .cc
defender-lcoh .in defender-isde .co .cc
defender-nrpr .in defender-iyrc .co .cc
defender-ojbr .in defender-jihv .co .cc
defender-osbi .in defender-kzwu .co .cc
defender-pakc .in defender-nhei .co .cc
defender-ppdw .in defender-qsko .co .cc
defender-qfdx .in defender-ueuv .co .cc
defender-qotg .in defender-wtln .co .cc
defender-qpwo .in defender-xnnx .in
defender-qumf .in defender-ykym .co .cc
defender-rlag .in deltadataserve .in
defender-rlfp .in dwuptskekpistitc .biz
defender-rlob .in egyptantivirusxp .com
defender-rrin .in etraveldesigners .net
defender-sxin .in extra-service .info
defender-thga .in eyqikygwkwhpfwq .biz
defender-uvag .in fpsanmpcroivzqm .biz
defender-vflq .in google-stats45 .info
defender-vlmj .in invtuxxntpssqfg .net
defender-vqqn .in itisformebaby .biz
defender-vxgh .in jjqmdfushfxz .net
defender-wbui .in jsqsllxtumwmcedm .net
defender-wkiw .in ktukilwrpiowrvr .com
defender-wqga .in likecreative .info
defender-wrhw .in lvtzlwqqgsvezwu .net
defender-xcre .in mail .wscntgy .com
defender-xkox .in mistybluecottage .com .au
efirst-data .in mklkptspnuqhiqvf .biz
eva-marine .info movie-tube-beym .co .cc
exyme .com .mx movie-tube-juie .co .cc
greatfilenes .in movies-live-tube-jeyq .co .cc
instantrack .net movieway2011 .com
karmabaw .co .cc myantivirusxpsoft .com
lameedge .ru myxpscanantivirus .com
lostyear .ru newpharmacyschools .ru
miaynvxmthr .com nnqwgnrssxswu .com
milapop .com nswqkodntlomnn .com
movie-iirg .in obscriancaeadolescente .org .br
movie-pblv .in online-stats201 .info
movie-tkhk .in s6199 .wdropp .co .cc
movie-ueep .in scanantivirixp .com
movie-xbtb .in skrtuneyoevpsj .biz
movie-xxnl .in stats-master111 .info
myskimba .in stats-master88 .info
newmoviedata .in stats-master99 .info
s4lk .co .cc system-scanner-boep .co .cc
s5lk .co .cc system-scanner-eill .co .cc
sd3e .co .cc system-scanner-eopa .co .cc
sgn9 .co .cc system-scanner-ewqq .co .cc
suptubes .com system-scanner-iaap .co .cc
sxp1 .co .cc system-scanner-ieyx .co .cc
sxp2 .co .cc system-scanner-lcyo .co .cc
t6ryt56 .info system-scanner-xtoi .co .cc
tzv-stats .info system-scanner-yoyx .co .cc
ustoldleft .ru system-scanner-ytut .co .cc
vdexkkwvthr .com totalxpornhub .com
virtualmits .com wrkoylmwpptvqj .biz
vodka-file .org wrwiowsqgoorupqg .biz
wdropp .co .cc xclipshubtku .co .cc
wizardmt .com xmusnaskjuzcwrss .biz
wscntgy .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

DNS-BH Mar 30 update: 40 domains

Posted on March 31st, 2011 in exploit,New Domains,rogue antivirus,sql injection by dglosser

A short but important update consisting of our two friends from yesterday (lizamoon . com and defender-uqko .in) and some rogue and exploit domains. Sources include sucuri.net, urlquery.net, urlvoid.com (Every source is always listed in the domains.txt file):

antivirixpsoft .com
antivirus-9009 .co .cc
antivirusxphard .com
antivirusxpinfected .com
antivirusxpsoft .com
antivirusxpsoftcentral .com
antivirusxpsoftonline .com
defender-uqko .in
grkkkkbbbooppd .in .ua
gsdgwe3gfnx .co .cc
hfhdasdh43 .co .cc
lizamoon .com
marketinglike .info
pokerlike .info
protestersantivirusxp .com
protestersantivirusxpsoft .com
protesterscanantivirus .com
protesterscanantivirusxp .com
protestersscanantivirus .com
protestersvirusxpsoft .com
solomon-vll .cz .cc
system-scanner-ouny .co .cc
webantivirusxpsoft .com
webxpscanantivirus .com
xdelbox .com
xpexamineantivirus .com
xpscanagainstvirus .com
xpscanantiagency .com
xpscanantibacteria .com
xpscanantiviri .com
xpscanantivirus .com
xpscanantiviruscentral .com
xpscanantivirusonline .com
xpscanantivirusprotesters .com
xpscanwarvirus .com
xpseeantivirus .com
xudezyj903 .virtue .nu
xvumttotkdljhm .com
xxqlmrreypesttt .com
zdropp .co .cc


This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.


Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

urgent block: lizamoon .com and defender-uqko .in

Posted on March 30th, 2011 in 0day,Domain News,sql injection by dglosser

Websense security labs (1) is reporting a mass sql injection attack of over 28000 err 50,000 sites:

< script src=hxxp ://lizamoon . com/ur.php>

We’ll be adding this site (and defender-uqko .in) on tonight’s update, but you shouldn’t wait and should  add these sites to your blocklists ASAP.

(1)http://community.websense.com/blogs/securitylabs/archive/2011/03/29/lizamoon-mass-injection-28000-urls-including-itunes.aspx

164 new domains (zeus, gumblar, iframe, etc)

Posted on July 23rd, 2010 in gumblar,New Domains,Trojans,zeus by dglosser

164 new domains associated with sql injection, gumblar, zeus and other badness. Sources: safebrowsing.clients.google.com, ddanchev.blogspot.com, blog.unmaskparasites.com and others:

a1e1 .net almahdi .webphoto .ir
anishinfoways .us anupamhoteliersltd .com
barakobrama .com b2bdebtcollection .co .uk
casino-you .com b2bdebtrecovery .co .uk
casinodeal .org bayareapeacekeepers .org
casinozbestmy .ru betterlibrariesforpaloalto .com
casinozmybest .ru casinozbestweb .ru
cbx-north .se casinozmy-best .ru
ceferd .com cestoweb .rajzdravi .cz
ceylon-tours .de cheapphotography .org
chatabebek .cz coiffure-claude .com
cinartekstil .net cologne-mohair-dyers .com
cipayroll .com communications .baydem .com
claptones .hu conta-vencedora .pt
compfuture .net countryinsulation .co .uk
cosmoabc .com dayspaxalapa .com
crc .ac .th deutscheshaus .ge
crm4u .co .il diedeutschmeisterin .at
cronbronzvon .net digitalmediaset .com
culturechine .org directpharma .net
daeneung .co .kr divineinnovation .net
dailylaiken .com djcyclesstore .com
damisystem .com doctor-samru .57 .com1 .ru
danielfarina .com dolphinassociates .in
day-sity .ho .ua download-reactor .com
demkarklima .com downloadfreemcafeeantivirus .com
denisen .com .cn ebi-live-chat .net
designetmoi .com elaheh .webphoto .ir
designrj .com elizabethdschafer .com
devman .org energyinfo .com .br
dgiz .de engelbertink-hoveniersbedrijf .nl
dkbc .org englishrescue .com
doctor-jade .ru enutritionhub .com
drakken .com .ar escorialescorial .com
dsc .com .eg exactwatches .com
dsofttech .com exponentialreturns .com
dylanromer .com expresshomecinema .com
elcombra .de extraflowtraff .in
emglabor .de fashiontouch .net
emuna .com .ua felipeycamila .com .ar
enftv .org feltonmachine .com
eng .ru .ac .th freeantivirus31 .com
etqw .hu freebasicantivirus .com
ezgmp .com freeboobsarts .com
fabil .pl guanabaratravel .com
fagfolkfakta .no jeffs-koreskole .dk
fauxtastic .net jubilantetty6 .info
ferozkhan .in knuenglish .co .kr
ferrytopia .com knuenglish .mireene .com
findsens .dk koreaexport .co .kr
freeartstv .com loloohuildifsd .ru
freehitdata .com marketholiday .ru
freereview .in mediaservicesdata .com
freeserials .ws mediavisualarts .com
gagainco .com montemeubles-location .com
gate4ads .info montezuma .spb .ru
greenwatt .co .uk nikrogul .ovh .org
itspitsp .com replicabagcenter .com
jocudaidie .ru replicahandbagscheap .com
joinnow20 .co .cc replicahandbagsite .com
jointo27 .co .cc retailsecurity21 .com
jseuz .tk rytectvo .host .sk
lessown .in wanderlusting .net
lightpalace .net webserivcekota .ru
mediahopes .com webserivcessh .ru
mitroc .com webserivcezub .ru
musiceng .ru webserviceaan .ru
my3gb .com webservicebal .ru
najahsalam .net webservicedevlop .ru
naphi .com webserviceforward .ru
obec .go .th webserviceftp .ru
okport .in webservicekuz .ru
onlink .in webservicelupa .ru
prodin .com .ar webservicenow .ru
ruskodom .ru webservicesbba .ru
searchdead .com webserviceskot .ru
searchdear .com webservicesmulti .ru
searchfunes .org webservicesrob .ru
shirazittc .ir webservicessl .ru
sochi .nov .ru webservicesttt .ru
taxshelf .ru webservicezok .ru
web2host .in webwinkel-klusje .nl

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors

The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
Primary Mirror: http://mirror1.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

SQL Injection: webserviceget. ru, webservicefull. ru

Posted on June 24th, 2010 in 0day,New Domains by dglosser

From nsmjunkie:

Ongoing Mass SQLi attempts

I’m continuing to see ongoing SQLi attempts using the same injection technique we saw a couple of weeks ago. As one would expect the third-party site hosting the malicious JavaScript keeps changing. Below is a list of both the source IP addresses of the attempted SQLi attack as well as the script URL they’re trying to inject:

Source IP addresses of SQLi attacks:

86.197.85.243
218.248.42.113

Malicious Script URLs:

hxxp://oem. webserviceget.ru/js.js
hxxp://org. webservicefull.ru/js.js
hxxp://kernel. webserviceget.ru/js.js

Needless to say,  please block these domains (and possibly the IPs as well) as soon as you can.

Rogue security, scam, money mule, malspam domains

Posted on September 13th, 2009 in New Domains,rogue antivirus,sql injection by dglosser

Sources include     www.bobbear.co.uk, malwaredomainlist.com, www.trustedsource.org and others:

97kanmm .cn aha-shame-shame .com
arda .or .th antispyware-scanner2 .com
armartshop .com antivirus-fast-scan01 .com
avpro2010 .com antivirus-fast-scan02 .com
av-pro2010 .com antivirus-fast-scan04 .com
bazarish .net antivirus-fast-scan05 .com
bcobanut .cn antivirusfilter-zone .com
bcugusot .cn antivirusonlinescan6 .com
bdekowip .cn antivirusp2010 .com
bdonilix .cn antivirus-p2010 .com
beeves .info antivirusp-2010 .com
bestexe .com antivirus-p-2010 .com
bgsew .com antiviruspro2010 .com
bideqta .cn antivirus-pro2010 .com
bluepadma .com antiviruspro-2010 .com
boomexe .com antivirus-pro-2010 .com
cityfit .ru antivirus-promo-scan .com
clxwe .com antivirusquickscan2 .com
cosovowar .cn antivirus-scanner6 .com
crisis1s .com anti-virus-solution .org
d10gc .cn anti-virus-xp-pro2009 .com
db9qq .cn apelsin4ik .co .cc
derebas .co .cc archway-groupinc .com
dile1 .info arosakilomen .com
drjwv .com artvariety .co .za
droope .info avchecknow .com
ds .xdns .eu avirus2010 .com
ds3gj .cn a-virus2010 .com
eelcd5 .info avirus-2010 .com
eraean .com a-virus-2010 .com
eurccc .cn bervuilendosate .com
exe-por01 .com best-erotic .mcdir .ru
f6e .ru bestexeonline .com
f6y .ru best-live-lottery .cn
f7p .ru bestscanpc .net
f7y .ru bethanyhousetwells .co .uk
f8a .ru bnbsuubtvvsyy4ndvg .com
faites .info boomexesite .com
ffxiname .com boxenstopp .biz
fguyamoz .cn bravemousepride .com
forety .com buhervadoska .com
fpgo .ru bumergonagortaut .com
frantsuz .com bundesregeirung .de
galz177 .net cdmhsxdght .net
gathernet .in csjh .tpc .edu .tw
gd1di .cn dedkeopght .net
gd8bb .cn denpcysght .net
gidromash .cn dimka2009 .real-host .org
googlle .in dkitistnoif .info
gosstroy .com dnsless .gh0sthosting .com
green-av .com dns-systems123 .com
gt5ev .cn doubleclick-rss .com
hd6bb .cn elitedigiscrappers .com
hexexe .com ewaxertulio .com
mofmeta .com expo .ubsc .or .kr
nenastiya .cn extremeanalonline .com
ottopay .cn fear-angels .bissnes .org
prepaider .net fernudarogal .com
q05 .ru fgddfgdgdfg .com
q07 .ru fiminalisimo .net
q1e .ru fragus-v1-1 .cn
q38 .ru frantsuzik .com
q3t .ru free-scan-here .com
q46 .ru gc4fg456hfghfss6sg4 .com
q59 .ru genie-hkfc .com
traiden .org get-safe-files .com
u0e .ru ghlyhwpght .net
u19 .ru gmail-pop3 .com
u9j .ru gobcounter .org
verticalt .com goffin-escrow .com
x0v .ru google .hmsite .net
x1h .ru google-update-checker .cn
x1i .ru gosalerbas .com
x3b .ru go-scanandprotect .com
x6g .ru grabmymotor .com
x6h .ru great-connections .com
x6p .ru green-av-pro .com
x6q .ru guianossacidade .com .br
x7d .ru hardexeworld .com
x8f .ru hexexeterra .com
x8y .ru holding-group .cn
x9v .ru imeyerhome .org
x9w .ru med-payments .org
xb4 .ru megahostname .biz
xb5 .ru moneytransferltd .com
xc6 .ru neweca-payments .com
xc7 .ru new-systemshield .com
xe6 .ru prime-groupco .com
xh9 .ru redeye-groupco .com
xi5 .ru remove-all-adware06 .com
xj4 .ru rude-xxx-tube .com
xj7 .ru saturn-groupsvc .com
xk7 .ru shontecltd .com
xk9 .ru windows-protectonline .com
xm0 .ru windows-systemguard .com
xr3 .ru windows-systemguard .net
xt7 .ru windows-virusscan .com
xt8 .ru windows-virusscan .net
xw0 .ru

250 new harmful domains

Posted on September 9th, 2009 in New Domains,rogue antivirus by dglosser

Rogue security domains,  fake antivirus domains,  some sql injection domains.   Sources include www.malwareurl.com,  s3cwatch.wordpress.com,     www.siteadvisor.com and others:

18xn .com 1a-7294 .antagus .de
1kfie .cn ablegang .com
28zxc .ws advancedpcscanner2 .com
345s .com advancedpcscanner3 .com
5fgh .ws advancedpcscanner6 .com
88mw .com advancedpcscanner9 .com
88wdvd .cn advancedvirscanner3 .com
99boxx .com antivirus-deluxe .com
a3h .at antivirusplus1 .com
a3l .at antivirusquickscan3 .com
a3q .at antivirusquickscan5 .com
a5f .at antivirus-xp .awardspace .us
a5h .at armor-groupco .cc
a5j .at armor-groupco .cn
a5m .at avir-guardian .com
apalet .info av-scan-2009 .com
b5c .at av-scan-2009-up .com
b5r .at av-scanner-2009 .com
b6l .at awareremover .com
b6t .at beachhousename .cn
b7g .at besecuresallpcs .com
b7p .at best-antivirus3 .com
boksx .com best-antivirus8 .com
bqtl .in bestantivirusscanv8 .com
c6h .at bestscanantispywarev3 .com
c7h .at best-virus-scanner4 .com
c7r .at best-virus-scanner6 .com
c8t .at bigtopleads .cn
c9m .at bigtoprocks .cn
c9m .ru boxhidden .com
c9u .at brandschutztechnik-hartmann .de
captum .info cahsbadaboom .awardspace .us
cncn88cn .cn checkvirus-zone .net
dateing .de clean-all-spyware07 .com
dd88567 .cn coolnssecurity .com
dma .ma cosco-groupmain .cn
downbt .com cosco-groupmain .com
dwsx .com datescout .de
enlarg .info download4safe .com
envied .info dynamicfilmmedia .cn
erpeer .info earchsafetyprotection .net
espied .info ebookexpress .de
f6y .at enter .popporn .in
f7p .at entreamis .ma
f7y .at entryservice .de
f8a .at ertubedewse .com
figgle .info goeachscan .com
froday .info go-scansystem .com
gehae .info go-scansystem .net
grumio .info go-searchprotection .com
gssmedia .cn gotomyprotectedzone .com
haerh .info greatestsecscans .com
hardnut .cn greenbillsystem .com
hhbg .in homepersonalantivirus .com
huchinu .com hqvirusscanner2 .com
hyg12zk .eu imjustbored .com
hyg12zq .eu imoviemax .ru
hyu11heb .eu intsecureprof .com
hyu11hep .eu invalda-groupmain .cn
hyu11hew .eu kissfromde .cn
iis .mo .cn larkmedia .ru
ilixyeq .cn livetimesecurityscan .com
ilodux .cn livetimevirusscaner .com
iloefe .cn lowexeonline .com
iluefot .cn martpictureexistence .cn
inb4ch .com mashroomtheory .cn
in-t-h-e .cn meldorgroup .cn
ipqk .in micronetsys .org
jackvn .net movies-hidden-places .com
jaybi .ma mylovsecurity .com
jayfor .com myprotected-zone .com
kbgg .in mysecurityshield .net
kgapofef .cn newpcguard .net
kkxv .in ns37428 .ovh .net
lapsek .info officesecuritysupply .com
lowexe .com pagerank-backlinks .de
mcsmc .org pagerank-submit .de
mnprfix .cn pickknob .info
nqrl .in pictswizard .com
nyusa2a .eu porno-inter .ru
nyusa2b .eu proofdefender .com
nyusa2s .eu protectmycomputernow .com
oufc .in pro-voting .com
pleach .info publicpub .net
polear .info qingchun-meinv .cn
q0j .ru quickhealcleaner .com
q0w .ru quick-virus-scanner01 .com
q1f .ru ranking-charts .com
q1l .ru safetysystem-shield .net
q1n .ru scan4youpconline .com
q3c .ru scanonline-protect .com
q5k .ru scanonline-protect .net
qoeirq .com scan-secure .net
s1p5 .info scansystemonline .com
sallat .info scansystem-online .com
searce .info scantoolsite .com
sexyy .ru scanvirus-online .net
sicyon .info search-systemshield .com
slatch .info secure-systemshield .net
soac .in seyconel .com .br
spelem .info stonek .info
tour6 .info system-guard .net
traffok .cn system-guard2009 .com
u0r .ru tenshy .info
u1j .ru thegreatav .com
u3j .ru towton .info
u3m .ru tsfxzg .info
u3v .ru ultrapc-scan .com
u3y .ru unroot .info
u5m .ru us-windowsupdate .com
u5v .ru vagrom .info
u6k .ru vanni-van .cn
u6n .ru vector-groupfine .cn
u7e .ru vector-groupfly .cc
u7n .ru virusermoverpro .com
u7x .ru virusfilter-zone .net
u8b .ru viruskill2009 .com
u8h .ru vista-store .de
u9b .ru voided .info
u9k .ru vrenutredo .com
uppd .in web-masteru .do .am
x0o .ru windowsguardpro .com
xrbw .in windowsultimate-guard .com
ynaa .in winprotection-suite .net
z360 .net wins-guard .com

Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!

Used by SURBL, MOREnet, and others…