DNS-BH – Malware Domain Blocklist

Some new years malspam, rogue antivirus, exploit domains, zlob trojans. Sources include: www.threatexpert.com, emergingthreats.net, blog.fireeye.com and others:

0ci .ru	a48574 .angelfire .com
0×90 .devtech .us	blitz2008 .xpg .com .br
100alexa .cn	botz .thedomain .com
118fox .cn	chk7stn .angelfire .com
16868 .org	decemberchristmas .com
1ni8sami .cn	fasterupdate .com
88vcd .com	funnychristmasguide .com
aooooa .cn	hutchinsonkansasnewspapers .net
astrumavr .com	imfromiraq123456 .angelfire .com
astrumavrpro .com	isafeantivir .com
bestyearcard .com	isafeantivirus .com
bojifun .com	isafe-antivirus .com
cardnewyear .com	isafeantiviruspro .com
cnycdw .com	isafeantvirus .com
cznylsf .cn	isaferantivirus .com
fucuzzy .com	itsfatherchristmas .com
holidayxmas .com	keepupsecure .com
jmmbk .cn	mirabellaclub .com
kabanyonok .org	newlifeyearsite .com
kooo546 .com	newlyclickssystem .cn
mirsosoft .com	newyearcardcompany .com
mmnnps .cn	newyearcardonline .com
nmb360 .cn	newyearcardservice .com
olenyonok .org	outerinfonetwork .com
sjxhfa .cn	securedliveclicks .com
tiktikz .com	spxpnt5 .xpg .com .br
vvk2 .cn	sunnyporntube .com
zaychonok .org	virusandspywarescan .com
zubryonok .org	whitewhitechristmas .com
zzrenwu .com	youryearcard .com

---

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Sources include: secubox.aldria.com, www.threatexpert.com, www.malwaredomainlist.com, and others:

2ru .us	abilena .podolsk-mo .ru
abcdepage .com	jrdmgfxes .com
kdvty .com	bestsecureexpertcleaner .com
ahack .info	lazymp3z .com
ahdirz .com	linkprivatedocs .com
alertnewsblock .com	linskondesktop .com
alertsafenews .com	luckyclipz .com
alexastats .ru	main-downloadportal .com
allprivatelinks .com	main-downloadportal .net
aoyafgves .com	main-porn-hub .com
archiveviewsoftware .com	main-softwaredownload .com
aseachengine .com	main-softwaredownload .net
asearchnget .com	mediamovware .com
asearchservice .com	bestmoviesitefreein .com
beautypornpost .com	mobifonika .com
beddenis .info	moon-player .com
bestadulttube .com	moviezlibs .com
bestcanadianmed .com	movshighway .com
bestinfosearch .com	movwmwares .com
mjuie .com	movzway .com
bestofasia .info	mp3directz .com
jiehg .com	mp3zooming .com
bfansbxuow .net	msdownloads .cn
bgdtr .com	muslimwritersawards .co .uk
bgtnh .com	mvoyo .com
blowjoborgy .info	mymegatube .com
bluehomepages .com	nevervhudo .ru
boyhome .ru	newresultshere .com
bsplupdate .com	nicebots .biz
bulkwatcher .com	onenewtoolbar .com
bundlext .com	opsfiles .com
bvyls .com	owndocuments .com
casal192 .com	piczway .com
caz56 .com	posheng21 .cn
cdiqa .com	privatesecuritycenter .com
shortlinkings .com	qq188 .cn
classicplupdate .com	qwertycn .cn
cleanlive .net	renamehomepage .com
clipzocean .com	returnhomepage .com
clipzportal .com	safeinformservice .com
clipzsaloon .com	screenshortcuts .com
cserv1 .com	searchquickone .com
cserv2 .com	searchquicktwo .com
cutrecord .in	searchres1 .com
dcevr .com	searchres2 .com
dgjir .com	searchtubez .com
dieytemsn .com	securesurface .com
dj-xxx-tube .com	securityadvizr .com
dnsallabout .com	selectedclipz .com
dnserrorname .com	selectedtoolbar .com
dnserrorz .com	check-pc-antivir-2009 .com
dnsmislead .com	skwarovski .biz
docsofyours .com	softawe-download-forpc .com
domain5124 .com	software-pc-archive .com
ebn-tube .com	softwaredownload2008hq .com
elkaribe .biz	softwaredownload2008sq .com
tgbfiles .com	softwaredownload2008tq .com
fast-av-pc-scan .com	startpagepreview .com
fewfwe .net	storage-antispyware .com
flyonfiles .com	syshomepage .com
free-mp3-paradise .com	systemtrigger .com
freesearchway .com	tdsvassarium .com
freexxxmovz .com	ygpfb .com
gckry .com	therxdrugs .net
getresultnoew .com	top100clipz .com
gibserv .com	tube-chicks .net
gizmosb .biz	tube-ducks .net
gogomovz .com	tube-dudes .net
google-analitucs .com	tube-viewert .net
google-analitucs .ru	upgrade-pc-softz .com
googlestats .ru	upgrade-soft-serv20 .com
guiltydns .com	uptodatekeeper .com
hidatabase .cn	usedforspeedupb .info
highway69 .info	vgdes .com
homepagereset .com	vidsdevices .com
hpropellero .com	vidzdevices .com
hq-vidz .com	vidzselector .com
ietoolmachine .com	virtrigger .com
ilone .cn	virtriggersupport .com
img-z .com	virus-trigger .com
imgdirectz .com	virus-triggers .com
imgzportal .com	virustrigger2009 .com
informtoolbar .com	vn92 .net
intermovz .com	windowsupdateonline .com
ixivght .com	wmpappliance .com
yhdmi .com	wmpinstrument .com
zendirectz .com	experiencetoolbar .com
zxs35 .com

---

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Sources: www.malwaredomainlist.com, www.abuse.ch, sunbeltblog.blogspot.com, www.threatexpert.com, and others.

5foot .org	ieprogramming .com
anti-virus-xp .com	internet-defenses .com
asafetysite .com	life-tablets .cn
av-xp2008 .com	linksondesktop .com
belgius .net	lobanabucks .cn
bhtoesp .com	mediamswares .com
brbg .ru	dadsplace .com .au
cfohello .com .au	mncpssa .org
yanndex .su	moreaccess4me .com
druzg .ru	movsdlls .com
ogjtu .com	mp3dowl .com
errordnsurl .com	ebatkopatnax .ru
evilbots .net	phpnet77 .com
fstat .cn	sobalyaki .net
gfbwd .com	stabroom .cn
mgaazz .com	toolbarunit .com
ha2000 .co .uk	utevox .site90 .com
iebdesp .biz	waysofsecurity .com
yfrresp .com	gmail-security .com

---

Contact us if you want to help us keep the Malware Blocklist current.

Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Some asprox, zlob, fake security pages, rogue antivirus domains to add to your blocklist.

Sources:  www.matchent.com, sunbeltblog.blogspot.com, www.dynamoo.com, and others.

---

32ddk .name	homesiteurls .com
3confirm .ws	hqsextube08 .com
3cookie .tv	ierenewals .com
4ssl .bz	int3rn3t-d3f3ns3s .com
4ssl .ws	mnbenio .ru
51com .ru	mnicbre .ru
5jsp .bz	movsdevices .com
64crypt .cc	pkseio .ru
6usa .us	protectnotice .com
73comm .asia	prt3ctionactiv3scan .com
7confirm .gs	secure4 .cc
9control .tk	securealertbar .com
aabb1122 .com	add-block-plus .net
ssl81 .in	eantivirus-payments .com
asp1tw .com	total-secure2009 .com
bank7 .name	urlsofdnserrors .com
conf68 .mobi	user9 .bz
vtg43 .ru	vassariumpromo .com
eufnt .com	vjccc .com
ss11qn .cn	fastshortcuts .com
xbstw .com	wmptools .com

---

Contact us if you want to help us keep the Malware Blocklist current.Domains.txt file is the complete list along with original reference.

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Some fake antivirus/rogue security sites and sql injection domains. Sources: ddanchev.blogspot.com,  malwaredatabase.net/blog/, and others:

2b24 .ru	bestantivirus2009 .com
aboutdr .cn	checksystem-online .com
absvdfd87 .com	getdefender2009 .com
cg33 .ru	gettotalsec2008 .com
cv2e .ru	hot-porn-xtube .com
cv32 .ru	huytegygle .com
dieoa .net	andromeda-av .com
douhunqn .cn	antivirus-help1 .com
flwhelper .com	antivirus-help10 .com
kkexe .com	antivirus-help2 .com
mc2n .ru	antivirus-help3 .com
mj5f .ru	antivirus-help4 .com
oc32 .ru	antivirus-help5 .com
ppexe .com	antivirus-help6 .com
skpoot .net	antivirus-help7 .com
app2 .su	antivirus-help8 .com
aviplugin .com	antivirus-help9 .com
avxp08 .net	antivirus0003 .net
vswc .ru

---

Contact us if you want to help us keep the Malware Blocklist current.domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock,  ISA formats, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Lots of rogue security domains, some asprox, some zlob. Sources: sunbeltblog.blogspot.com, ddanchev.blogspot.com, malwaredatabase.net, and others:

1000ylc .cn	codecservice1 .com
2008antivirus .net	codecservice6 .com
2008antivirusxp .com	antivirus-noadware-2008 .com
2antivirus2008 .com	encountertracker .ws
3antivirus2008 .com	expressantivirus2009 .com
5antivirus2008 .com	faunarium .net
6antivirus2008 .com	antispyware2008sales .com
8antivirus2008 .com	freeantivirus2009 .com
adult-s-portal .com	freevidshardcore .com
adult-x2008 .com	thefunny-08 .com
firstblu .cn	fwlprocedure .com
gnaa .us	antispydeluxe2009 .com
antitrojan-2008 .com	hotadulttube08 .com
antivir-64 .com	moyapodruzhka .com
antivir2008 .us	mpegadaptationcom
antivir2009 .com	msantivirusxp .com
antivirus-2008-xp .com	msscanner .com
antivirus-2008 .org	myantivirusprotection2009 .com
antivirus-best-2008 .com	newcontent-s2008a .com
crklab .us	newfunnyvideo .com
antivirus-pro-2008 .com	norton-antivirus-2007 .com
funny-08 .com	norton2009antivirus .com
antivirus2008-pro .com	nortons2009antivirus .com
antivirus2008-pro .name	nortonsantivirus2009 .com
antivirus2008-pro .org	porndebug .com
antivirus2008b .net	pornmoviestube .net
antivirus2008m .net	realonlinevideo-2008 .com
antivirus2008n .net	antivirus-protection2008 .com
retoneva .com	scanner-prot .com
antivirus2008pro .name	secure-online-antivirus .com
antivirus2008v .net	sexlookupworld .com
siteresults1 .com	sfwinstrument .com
antivirus2009free .com	antivirus2008pro-download .org
antivirus777 .com	spywarepreventer .com
stars-08 .com	starfeed1 .com
antivirusonline-2009 .com	antivirus2009-freeverscan .com
antivirusq .net	thebigstars-08 .com
antivirusr .net	thebigstars2008 .com
antivirussofware2008 .com	yourfavoritetube .com
antivirussolution2008 .com	themusic-08portal .com
antivirusu .net	thestars-08 .com
antivirusw .net	thestars08 .com
antivirusxp2008 .org	thestars2008 .com
bestcelebs .ru	topdirectdownload .com
bestfunnyvids .com	topsoftupdate .com
beyru .ru	win-antivirus-protect .com
celebs69 .com	windows-antispyware-2008 .com
celebsnofake .com	worldstars2008 .com
celebstape .com	antivirusfreescan2009 .com
celebsvidsonline .com	xp-2008-antivirus .com
wwvyoutube .com	xp-antivirus-2008 .com

---

Contact us if you want to help us keep the Malware Blocklist current.domains.txt file is the complete list along with original reference.Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Sources: www.sudosecure.net,ddanchev.blogspot.com, www.dynamoo.com/blog, www.matchent.com/wpress and others:

456kill .com	ministerstwo .nazwa .pl
ad9 .co .in	browsetomy .gmxhome .de
aquasphere .cz	moveonforu .oranc .co .kr
asp2 .co .in	nawaro-management .de
xwarezzz .com	outwork-for-you .de
chantal-carlioz .fr	porzellanklinik-hinz .de
didierbrockly .info	promo2 .es
duka-coaching .dk	pyroantispy .com
fastpyroscan .com	quimigama .net
fedecopy .com .ar	restekiste .com
femyp .com	rmodelismo .com
rogger .it	firma-thummerer .de
xxxping .com	sabineanton .de
gty5 .ru	scemprestimoconsignado .com .br
halkjaer .biz	snoopen .de
id4 .co .in	steveellery .com
idoo .com	tch-clubhaus .de
urresti .es	thalies .com
zzzping .com	jabezinformatica .com
yyyping .com	voxinterna .de
megadent .pl	frankietomattos .com
mo98g .cn	jugendtanzgruppe .de
ww7 .co .in	manuelarodriguez .com .br
z0l7 .com

Contact us if you want to help us keep the Malware Blocklist current.

domains.txt file is the complete list along with original reference.

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!

asprox domains, a few rogue antivirus sites, zlob trojan domains

Sources include www.dynamoo.com, spyware-techie.com, www.matchent.com, and others:

8hcs .ru	medvezhonok .org
98hs .ru	mpegversion .com
porv .ru	abcways .com
nwj4 .ru	power-antivirus-2009 .com
asp82 .co .uk	prt27 .co .uk
aspx7 .co .uk	releasedvideo .com
bck48 .co .uk	shredder-scan .com
bgsr .ru	topsafetysoft .com
bnk6 .co .uk	antivirus-2009pro .com
bywd .ru	videoexternal .com
get74 .co .uk	webbestlink .com
getwsp .com	websecurebar .com
ibse .ru	win-x-defenders .com
iexplorerclue .com	worldofwarcrokft .com
uhwc .ru	wsp2008scanner .com
ojns .ru	ihatemondayand .com
ncbw .ru	mailer1 .key-one .it

---

Contact us if you want to help us keep the Malware Blocklist current.domains.txt file is the complete list along with original reference.

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!

Some ASProx domains, zlob domains, trojan domains, and fake antivirus domains. . Sources include www.malwaredomainlist.com, bharath-m-narayan.blogspot.com, www.shadowserver.org, and others:

1212l112 .net	irxxv .com
kodj .ru	iwillseethatvideo .com
345bi .cn	2008-adult-s2008 .com
a-n-k-o-r .com	best-freeware2008 .com
adnsline .com	lvorgucci .net
pfd2 .ru	manswar .commalware
po4c .ru	mpegstandard .com
nmr43 .ru	formatmpeg .com
ns-ok .com	best-soft-maxi .com
asgates .com	nihao29 .cn
bce8 .ru	anvimaster .com
nemr .ru	anvi-scanner .com
kjwd .ru	otherhomepage .com
blackhei .cn	allsecurenews .com
lksr .ru	almamama .com .cn
ch35 .ru	pvs360 .com
dajao .cn	qwgates .com
daoqaz .cn	rkjhc .cn
dcads .biz	secureshortcuts .com
ncwc .ru	sky8000 .com
herezh .cn	uswow2 .com
infomm .cn	web678 .com .cn
iroe .ru	windows-virus-scanner .com
j1bc .cn	wooollstx .cn
jackkk .cn	yibanle .cn
jve4 .ru	youlaiyou .net
k1ks .cn	zerolost .org
kpo3 .ru	zfzuguo .cn
kr92 .ru	browseroption .com

Contact us if you want to help keep the Malware Blocklist current.

domains.txt file is the complete list along with original reference.

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!