Feed

dns-bh domain blocklist update

Posted on February 5th, 2008 in New Domains by dglosser

New domains, mainly from emergingtheats sandbox:

3rb69 (dot) com 4irc (dot) com
aaathemes (dot) com alfree5 (dot) info
chnsystem (dot) com d0d0n0 (dot) info
daw00dbhai (dot) info explorethepearl (dot) com
flibbernet (dot) homelinux (dot) org winquickupdates (dot) com
gayyree (dot) info hacktalk (dot) net
hzs (dot) cn kronicx (dot) com
leechnet (dot) net malwarecore (dot) com
meoryprof (dot) info qoogler (dot) com
quara-best (dot) com ryan1918 (dot) com
s10 (dot) dynu (dot) net serv1 (dot) gayyree (dot) info
svcs (dot) ma (dot) cx swapixtreme (dot) com
swiifatecihno (dot) com thefreesite (dot) com
trojan8 (dot) com voodofiles (dot) com

Help fight spyware: Join the Spyware Listening Post!

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND Server format
domains.txt file is the complete list along with original reference

Malicious Banner Ads

Posted on February 5th, 2008 in Domain News,rogue antivirus by dglosser

The Spyware Sucks Blog has several reports on malicious banner ads. Most are promoting rogue antispyware programs.  Will be adding to dns-bh blocklist on the next update.