Feed

Over 140 fake codecs to add to your Domain Blocklists

Posted on September 13th, 2008 in fake codecs,New Domains by dglosser

HUGE list of over 140 fake-codec domains, courtesy of Brian Krebb’s excellent series of articles (voices.washingtonpost.com/securityfix/codecs.txt).

adult-soft-codec .com hotthecodecadultx .com
adult18codec .com megasoft-codec .com
adultcd .org mysoft-and-codec .com
adultcodec-2008 .com porno-codec .com
adultcodecstars .com porno18codec .com
adulthotcodec02008 .com pornocodec-2008 .com
adulthotcodec102008 .com procodec .com
adulthotcodec12008 .com revolutionsystems .ru
adulthotcodec122008 .com securesoftwaretools .com
adulthotcodec20008 .com securitywebupdates .com
adulthotcodec23008 .com sexicodecadult-s .com
adulthotcodec29008 .com sexicodecadult-w .com
adulthotcodec29208 .com sexicodecstars .com
antispy2008pro .com sextubecodec01 .com
antispychecker .com sextubecodec31 .com
antispydownloads .org soft-and-codec .com
antispyknight .com thehotcodec12 .com
antispyknight .net thehotcodec99 .com
antispyresponse .com universal-video-codec .info
antispyspider .biz universecodec .info
antispyspider .net v-codec-2008 .com
antispyspider .us v-codec18 .com
antispyware-2008-buy .com video2008codec .com
antispyware-2008-download .com videowincodec .com
antispyware-2008-download .info viruscleaner2008 .com
antispyware-2008-download .net virusescape .com
antispyware-2008-download .org virusfall .com
antispyware-2008-purchase .com virusfighter4u .com
antispyware-2008-soft .com virusfreedom .com
antispyware-2008 .info virusprotect .biz
antispyware-2008 .org vm-codec .com
antispyware-2008buy .com vm-codec18 .com
antispyware-2008purchase .com vm-codec2008 .com
antispyware-2008soft .com vmcodec .com
antispyware-review .info vmcodec18 .com
antispyware2008-buy .com vmcodec2008 .com
antispyware2008-buysoft .com winxcodec .com
antispyware2008-download .com xpacodec .com
antispyware2008-download .info xpantiviruspro .com
antispyware2008-download .net xpbcodec .com
antispyware2008-download .org xpds1 .com
antispyware2008-purchase .com xpldev .net
antispyware2008-soft .com xpmcodec .com
antispyware2008 .org xpodium .com
antispyware2008a .com xpornsex .com
antispyware2008buy .com xpostx .com
antispyware2008buysoft .com xprlxl .org
antispyware2008c .com xpsecure .com
antispyware2008purchase .com xpsecure .net
antispyware2008soft .com xpsecurescan .net
antispyware2008softbuy .com xptcodec .com
antispyware2008xp .com xpxcodec .com
antispyware2008y .com xvideocodec .com
antispywaresales .com hot-codec18 .com
antitests .com hot18-codec2008 .com
antiviralprep .com hot2008-18codec .com
antiviralpro .com hot200818codec .com
antiviralrep .com hot2008codec .com
antivirus-2008a-pro .com hotcodecadult-d .com
antivirus-2008o-pro .com hotcodecadult-gs .com
antivirus-2008q-pro .com hotcodecadult56 .com
antivirus-2008t-pro .com hotcodecadultz .com
antivirus-online .info hotcodecstars .com
antivirus-pcscanner .net hotecodec18 .com
antivirus-scanonline .net hotthecodecadultas .com
antivirus2008a-pro .com hotthecodecadultq .com
antivirus2008o-pro .com hotthecodecadultu .com
antivirus2008q-pro .com codecadult18 .com
antivirus2008scanner .com codecbase .net
antivirus2008xp .com codeccollections .com
antivirus2008y-pro .com codecreviews21 .com
antiviruscash .com codecsfactory .com
antivirusdwl .com codecslib .com
antiviruswista .com freeonlineantivirus2008 .com
antivirware .com google-video-codec .info
bigcodecadult .com bmwx6foreva .ru
bigcodecadult2008-17 .com codec-portal08 .com

Contact us if you want to help us keep the Malware Blocklist current.domains.txt file is the complete list along with original reference.Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/filesBOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

DNS-BH Blocklist: 75 new malware domains to block

Posted on September 10th, 2008 in asprox,rogue antivirus,sql injection by dglosser

Over 75 new domains. Sql Injection, asprox,  fake security pages, rogue antivirus. Sources:  sunbeltblog.blogspot.com, malwaredatabase.net, www.dynamoo.com, and others:

19ssl .net alldiskscheck300 .com
22net .ru altawebgl-500 .com
24aspx .com antispyware-free-scanner .com
2aspx .net antivirussecurity-solution .com
4net9 .ru aprotectionhelp .com
56ssl .com as-pro-xp-download .com
58ssl .com masterspitetds09 .com
64asp .ru brokenurls .com
64do .com cusln .com
6aspx .com dailyhomesite .com
74asp .net desklinks .com
81ssl .com directrevisions .com
83asp .co doups .cn
8ssl .net download-base .com
92prt .ru download-soft-4free .com
9aspx .net download-soft-basez .com
9ssl .net online-security-systems .com
acr34 .ru filescheck-list303 .com
jzm013 .cn firstaidclicks .com
jzm014 .cn freeonlinescanner9 .com
jzm015 .cn seamastersoft .com
asl39 .ru googlescanners-360 .com
eufks .com homepagetoday .com
fst9 .ru xp-licensingpages .com
ms-avc .com protectionpurchase .com
hs7yue .cn xpprotector .com
net83 .ru immediallc .com
nowherepage .com intervidd .com
ok2bstr8 .com msantivirus-xp .com
on1000000 .cn pcsdefender .com
hxg008 .cn safensecurebar .com
oryfn .com soft-upgrade-network .com
ieextend .com softlayerdll .com
slivtraf1 .com software-downloadz .com
pwrware .com spypreventers .com
qingfeng01 .cn webprobar .com
rycsp .com windows-av .com
sel92 .ru winsecuritydl .com
minimal345 .com >winxp-antivir-on-line-scan .com

Contact us if you want to help us keep the Malware Blocklist current.domains.txt file is the complete list along with original reference.

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Domain Removal: datingspace.net

Posted on September 9th, 2008 in Removed Domains by dglosser

datingspace.net has changed registrars and does not seem to be hosting any active malware.  It has been delisted. Please update your files.

Malware Blocklist Update Sept 07

Posted on September 7th, 2008 in asprox,fake codecs,New Domains,RBN,rogue antivirus,sql injection by dglosser

Over 20 new domains to block. Sources: sandnet.emergingthreats.net, www.siteadvisor.com, malwaredatabase.net, and others.

0scan .com malafikarubik .ru
1480et258 .com pxyj .com .cn
9u9u9 .cn securityscannersite .com
bokee .com ugm-records .de
cdm1djeni .com videotubezone .com
dr-mickel .de win-xp-antivir-hqscanner .com
vwsc .ru xiaxia12l .com
ibyebecd .com xp-protections .com
jiayimarket .com xp-registration .com
jic2 .ru xp2008-protect .com
lloydsterm .com zonephp .com
ssa387 .cn dsfswweas .com

Contact us if you want to help us keep the Malware Blocklist current.
domains.txt file is the complete list along with original reference.Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/filesBOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock and ISA formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

sql injection, rogue security sites to blackhole

Posted on September 2nd, 2008 in asprox,fake codecs,iframes,rogue antivirus,sql injection,zlob by dglosser

Some fake antivirus/rogue security sites and sql injection domains. Sources: ddanchev.blogspot.com,  malwaredatabase.net/blog/, and others:

2b24 .ru bestantivirus2009 .com
aboutdr .cn checksystem-online .com
absvdfd87 .com getdefender2009 .com
cg33 .ru gettotalsec2008 .com
cv2e .ru hot-porn-xtube .com
cv32 .ru huytegygle .com
dieoa .net andromeda-av .com
douhunqn .cn antivirus-help1 .com
flwhelper .com antivirus-help10 .com
kkexe .com antivirus-help2 .com
mc2n .ru antivirus-help3 .com
mj5f .ru antivirus-help4 .com
oc32 .ru antivirus-help5 .com
ppexe .com antivirus-help6 .com
skpoot .net antivirus-help7 .com
app2 .su antivirus-help8 .com
aviplugin .com antivirus-help9 .com
avxp08 .net antivirus0003 .net
vswc .ru

Contact us if you want to help us keep the Malware Blocklist current.domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlockISA formats, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Gustav Sites

Posted on September 1st, 2008 in Domain News by dglosser

When Hurricane Katrina hit, hundreds of scam sites were registered.

The Internet Storm Center is currently tracking hundreds of recently-registered Gustav domains.

We haven’t added these domains as they are not verified scams but will be monitoring them.