Botnet infected hosts
Dancho Danchev lists the following domains as botnet infected hosts sending out phishing emails and as well as what’s been sending out the recent fake Microsoft Critical Live Update emails:
asp29.com asp63.net aspx77.in cfm83.net aspx83.in aspx94.in bank45.us boa23.com com94.net info23.in net18.in net73.net net94.us pid83.net ref34.us sec26.net sec94.in sid45.com site17.in site37.in ssd47.com ssl18.net ssl19.com ssl62.net web42.in web59.net web636.com www84.in
Please add to your blocklists, will be added here on the next update.