Feed

100+ New Malicious Domains to blackhole

Posted on December 24th, 2008 in asprox,New Domains,Phishing,rogue antivirus,spam by dglosser

Lots of rogue antivirus domains, asprox domains, phishing domains, exploit domains, and other domains you don’t want your users visiting. Sources include malwaredomainlist.com, malwaredatabase.net, safeweb.norton.com, dnsbl.abuse.ch, and others.   We appreciate the service these sites are providing:

00119922 com advertisercash com
18978 com cn adwarecommander com
240av cn adwarepatrol com
6680 cc anotherdnserrorz com
91131 org antiamenazas com
ach org il antispamassistant com
addetect com antispambastion com
adsniffer com antispamgold com
ave2 cn antispyadvanced com
ave3 cn antispyware-scanner-free com
aresdeluxe com antispywarexp com
adwareplatinum com antivirusprogramsite com
adwareremover ws antivirusprotectorsite com
adwaresafety com antiviruswebsite com
adwaretools com aresdownloadnow com
alertspy com av-scan-pc-tools net
bassamtwe com buymsantispyware2009com
bbs abvc cn cheapdecember com
bigsellstaff cn cntotalizator cn
bnmd kz detectiveadvanced com
clrtemp cz detectivehound com
cashpopup net directchristmasgift com
cch2 cn doctoradwarepro com
ccswzx6 cn download-all4free com
ccswzx7 cn download-best-antivirus2010 info
chhuslfffu com livechristmasgift com
clickomania biz fronthomepagez com
dft6s kz msas2009storage com
gfksamtwe com vidzsolution com
kefjwfev cn privacy-care com
korienado com qualitaetips com
lepr info rec bestrevenue net
light-player net rikora com
lite-corp com scan-onlinefreee com
lqir6s2eo com scanonlinefreee com
mega-player net newyearclassmates com
membersphoto com windowsplaeyraddons com
vhxfbwft com thebestantivirus axspace com
msas2009dl com online-spyware-detector com
mtno ru msantispyware2009 com
myspacy biz myprivatetubes09 net
wmpd ru netdigitalsecurity com
netisecurity com pok shopvideofest cn
ttfafa com soft4youupdat org
nvepe ru sp2 information com
uhjnxredc com xhcqxdedc com
wuxiawu com yourdecember com
pop yandex2 cn

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.  Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Over 100 new domains to add to your Blocklists

Posted on December 6th, 2008 in asprox,New Domains,rogue antivirus,spam by dglosser

Bad phishing domains, botnet domains, rogue antivirus, asprox and other domains you don’t want visiting your network. Sources include: ddanchev.blogspot.com, www.matchent.com, siteadvisor, threatexpert, and others:

0107 .es meeteingchristams .com
0175 .es meetwithyourfriends .com
0307 .es miteodemo .com
0secure .bz muchnude .mine .nu
10c0ka49t .com 2008-noadware-antivirus .com
murakamus .cn nanoantivir .com
27go .co .uk nanoantiviruscheck .com
2coxi8sb6 .com neegzlh35 .com
2j1f .net neeunt .com
42cert .asia no0k .com
51apps .gs nuclear3 .com
51exec .gs oirerbio .com
5nt29884j .com biznews .podzone .org
5nt5r3keh .com onlineservclass .com
6query .us oryitugf .com
7azwmrsg5 .com christmasclasses .com
8e9 .ne pdefzone .com
9batch .tk personal-defender .com
a725jv8ik .com personaldefender2009 .com
absoluts .org pn3ekq976 .com
adobeflash107 .com pro-scanner-online .com
adtctqypoa .com concours-accesd .com
anfelt .com q06ciwt60 .com
aspx37 .me rewinzie .com
baikec .cn sclassmeet .com
bgoryomek .com serveronlines .com
ole55 .us site60 .co .uk
page65 .tk sllwbd8 .cn
classmatesus .com stableclickz1 .com
classmts .com stgsfw7sr .com
prpoqpsy .com suspended-domain .ru
d8ri1iz5d .com terrimlo .com
daohang08 .com tgsfw7sr .com
defender-review .com updatemics .com
defender2009 .com updatemics1 .com
demovideons .com updatemicz .com
downloadcentrer .com meetclassns .com
usersoftware .in vps4 .picnato .com
fgpeinwq .com web1inst .com
findzproportal1 .com web2inst .com
fke5nnp8m .com web3inst .com
getsgd .com web4inst .com
gffsfpey .com downloadservers7 .com
whv67 .cn wwqwseed .com
zgynkmd .cn www-17173 .com
zgynkmu .cn www-onlinedown .com
zgynkmy .cn y171108 .com
ide92 .ws youblognews .net
ieenttio .com younewsblog .net
iloveeverybody .tj yourblognews .net
ioctl2 .jp yournewsblog .net
ipluginu .cn ypouaypu .com
ipowerwebz .mine .nu liveinternetstatistics .ws
j0rykafwn .cn louinda .net
jnlyf96v4 .com mediabspl .com
ki7wvgauf .com zp304ju3z .com
klassmanes .com goodmeetingsoon .com
linenetz .com googiesindication .com
historycleaner2009 .com ia-payment-pro .com

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

zlob, haxdoor, rogue domains to add to your malware blocklist

Posted on November 23rd, 2008 in fake codecs,New Domains,rogue antivirus,spam by dglosser

Lots of rogue antispyware, fake security sites, and other bad domains  to add to your malware blocklist. Sources include: ddanchev.blogspot.com, www.malwaredomainlist.com, safeweb.norton.com, www.threatexpert.com, and others:

abb192 .cn download-citadel-software .com
mestkom .ru megauplinkbindinstaller .com
ascoprguide .net micro-antiv2009 .com
aslaskfds .com micro-antivir2009 .com
bestlocatehomes .com micro-antivirus-2009 .com
blufda .com micro-av-2009 .com
cash-babules .com micro-av2009 .com
cbwej .com microantivir-2009 .com
cccpbuck .com microav2009 .com
clickchecker6 .com misdnspage .com
damtare .by .ru movzportal .com
danunah .info mysecureexpertcleaner .com
medsinfo .ru mysecuritysupport .com
energysavecenter .com mysuperload .info
fghin .com netcrefer .net
fuckmaturewhore .com new-porn-tubeportal2008 .net
ghjfd .com newer-pon-hub2009 .com
gogovidz .com ofis-rents .ru
gotds .info antivirus-premium-scan .com
greatvips .info olandon .com
homepageonweb .com onlinecounter1 .net
homepageroze .com onlinetds .info
okhyf .com pbkjh .com
ietoolexpress .com pornoxxxmovie .com
internetgameboxx .com powerfulvirusremover2008 .com
kamikazewargames .com prosecureexpertcleaner .com
kolonka17 .cn prosecureexpertcleanerpro .com
kram3r .net sergej-grienko .co
krchaaltert .be spinpalace .com
liveupdateservice .cn vmpmedias .com
mac-imunizator .net zonzamas .info
malwarecrashpro .com hypersecurefileshredder .com
megautbe .cn

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

74 more to add to your domain blacklist

Posted on November 8th, 2008 in fake codecs,New Domains,rogue antivirus,spam,sql injection by dglosser

Some Obama malspam, fake porntube, phishing, sql injection sites. Some of this malware has very low detection rates.  Add to your malware DNSBL fast…

Sources: garwarner.blogspot.com, www.malwaredomainlist.com, www.threatexpert.com, s3cwatch.wordpress.com, and others:

10wrj .com liebiao .2008just .cn
tcact .com antivirus-online-scanner .com
404mispage .com lovelypornovideo .net
adxbnet .net oiuyt .net
adxcnet .net oritrsunwart .com
adxdnet .net pizder .com
ahiiptjsto .com playswomen .com
alexinic .info poreibrsu .com
lolika .cn pubdomainstr .com
antivirus-x .com qmkaanta .com
anyygfxes .com bloomingmarvellous .net .au
aolpound .com s8marta .info
avproscan .com secure-ebank .com
banner-count .com secure-ebanking .com
baraokl .com secure-ibank .com
bfiinwach .com secure-ibanking .com
realimgz .com secure-netbanker .com
sion .or .kr securebanking-net .com
bnmhg .com secureconnect-us .com
bot-tob .ru securesolutions-net .com
cc86 .info seove .com .cn
co .uk .trkidsub .ch serensy .com
connect-secure .com zz .ushealthmart .com
ebasearch .org 1securebanking .com
fleshkatera .cn tdbanks .net
freegoogla .vicp .net thelocatemissing .com
gensoftdownload .com topavailable .info
google-moogle .net us-bankconnect .com
herowood .info us-securebanking .com
ibanking-net .com vcoenutrmsi .com
ibanking-secure .com wconlinenrue .com
il3er .cn wrsnav .wwlax .com
ko118cn youtube-spyvideo .com
kremz .ru bmanager .shadypart .net
lenovowireless .net yourglobalsite .info
ycn6 .cn youtube-spy .info
xiaoxiao02 .cn

Contact us if you want to help us keep the Malware Blocklist current.Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

CNN MalSpam

Posted on August 6th, 2008 in Domain News,Phishing,spam by dglosser

CyberCrime has a full list of URLs in the latest wave of malspam using CNN headlines as a subject line. Some of the domains have been cleaned up, but many are still active. We will be adding the active domains still hosting the malware spam on the next update.

malspam, asprox, sql injection domains to blacklist

Sources: www.sudosecure.net,ddanchev.blogspot.com, www.dynamoo.com/blog, www.matchent.com/wpress and others:

456kill .com ministerstwo .nazwa .pl
ad9 .co .in browsetomy .gmxhome .de
aquasphere .cz moveonforu .oranc .co .kr
asp2 .co .in nawaro-management .de
xwarezzz .com outwork-for-you .de
chantal-carlioz .fr porzellanklinik-hinz .de
didierbrockly .info promo2 .es
duka-coaching .dk pyroantispy .com
fastpyroscan .com quimigama .net
fedecopy .com .ar restekiste .com
femyp .com rmodelismo .com
rogger .it firma-thummerer .de
xxxping .com sabineanton .de
gty5 .ru scemprestimoconsignado .com .br
halkjaer .biz snoopen .de
id4 .co .in steveellery .com
idoo .com tch-clubhaus .de
urresti .es thalies .com
zzzping .com jabezinformatica .com
yyyping .com voxinterna .de
megadent .pl frankietomattos .com
mo98g .cn jugendtanzgruppe .de
ww7 .co .in manuelarodriguez .com .br
z0l7 .com  

Contact us if you want to help us keep the Malware Blocklist current.

domains.txt file is the complete list along with original reference.

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!

25 more domains added to blocklist

Posted on February 14th, 2008 in New Domains,spam,Storm Worm by dglosser

25 additional bh-dns blocklist domains, from various sources. Includes trojans, fast-flux domains, top spam domains, etc:

987408.com aaahme (dot) info
alaskanloxajz (dot) com biggerlongerbetter (dot) com
boratchik (dot) com denizendream (dot) org
destroythemoon (dot) com fortunebird (dot) biz
geremsihesel (dot) com hitijeoairnv (dot) biz
iowandream (dot) info jeennervel (dot) com
jieneesterns (dot) com kentuckianfuker (dot) com
leadygyved (dot) com lovesinchesadds (dot) com
lovesitlongerst (dot) com manukazorada (dot) biz
moonstarfood (dot) com negativebeats (dot) com
netzakdjuq (dot) biz rideherhardwets (dot) com
sadukkanora (dot) com shorterisnotgosh (dot) com
unbestersmaven (dot) com

Help fight spyware: Join the Spyware Listening Post!

domains.txt file is the complete list along with original reference

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format

spamtrackers.eu

Posted on January 30th, 2008 in spam by dglosser

A nice resource to learn more about spam is spamtrackers. Their wiki is extremely informative and updated several times a day.