DNS-BH – Malware Domain Blocklist

Russian Business Network, fake security sites, fake codecs, rogue antivirus, rootkits and other malicious domains you don’t want visiting your network. Sources include: ddanchev.blogspot.com, wiki.castlecops.com, emergingthreats.net, dnsbl.abuse.ch and others:

1488 .ru	onlineav-scanner .com
adult-datinq .info	petsmovies .com
adultworld .name	plp-free .com
adwaredeluxe .com	anti-virus-defence .com
aextubxn .com	antivirus-pro-scan .com
alte6yacvjac .com	antivirusadvanced .com
analystic .org	pornokit .com
pointedclips .com	porntube08 .com
porenads .net	porntube09 .com
porno-titi .com	prodsnameservers .com
atgcges51x .com	productsnames .com
avmyscan .com	protection-livescan .com
avscan-pro .com	bestscanner-pro .com
avscanpro .com	rapid-antivir .com
best-scan-pro .com	rapid-antivirus .com
bestprohost .com	rapidantivir .com
bestproscan .com	rapidantivirus-2009 .com
qpwoi .com	rapidantivirus2009 .com
bxbo9tgcgqu .com	rashagirls .com
childrenporn .org	rezmas .com
city-codec .net	rxpromotion .com
cum-on-mature .tv	rxpromotion .info
cum-on-virgins .com	savamigo .com
dvdladnse .com	savo7 .ru
ewotrost .cn	scansguard .com
extraantivir .com	securityscanner2009 .com
fav-tube-xxx .net	serv .netcrefer .net
flowgaleria .org	sexycodecadult .com
forbidden-clips .com	sguardscan .com
foteens .com	shampoojob .com
getsg2008 .com	silviocash .com
go-your-scan .com	somehelpful .com
gomovs .com	spydestroy .com
gotclipz .com	stalbox .com
gotvideoz .com	tds .samson007 .ru
goyourscan .com	topvirgin .com
traffo .info	hot-fuck-tube-site .net
hotysex .ru	traffresearch .info
iabestscan .com	tsautah .org
iascannerpro .com	ushealthmart .com
inwhores .com	virus-response .com
offgirls .com	virusresplab .com
m1ibeian .cn	virusresponse2009 .com
m4gatube .cn	whitetrack .net
mature-porn-gate .com	winbabes .com
maxmind .com	winsystemsupport .com
mega-aaz .cn	lasvegasusacasino .com
moviezdirect .com

---

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

fake codecs, rogue antivirus, fake security sites, fake youtube sites and more. Sources include: safebrowsing.clients.google.com, ddanchev.blogspot.com, www.threatexpert.com, www.malwaredomainlist.com, and others:

101freehost .com	protectiononlineinfo .com
11tag .in	onestepsearch .net
188tan .cn	registrydoctor2008-pro .com
18err .eu	registrydoctor2008-scan .com
18i16 .net	registrydoctor2008 .com
off34 .com	registrydoctorpro2008 .com
20ver .cc	s-softwaredownload .com
58keep .bz	secureexpertcleaner .com
63root .jp	securefileshredder .com
abb192-cn	sslcom5 .cc
adult9films .cn	super-softwareportals .com
adultporntube .org	supersecurefileshredder .com
aibcvienna .org	topdirectory .info
bearcat .net .cn	trafficconverter .biz
bvr2 .cn	vampizdec .cn
catshof .com	verzeih .com
chanchoi .cn	1sweethost .com
video-news .cn	w125 .west263 .cn
qq-7758 .cn	wikinedia .net
daditraff .cn	winsecureexpertcleaner .com
golpii .com	chicks-xxx-tube .net
gooanal .net	wtcsites .com
libid5 .tv	www-skycn .com
wo9188 .cn	yoursecureexpertcleaner .com
mmd178 .cn	youtube-see .com
msn-space .us	zzzz2233 .cn
mssrv10256 .com	mattsearchengine .com
navigationcatalyst .com	clicksoverview .com
oy4b-oykb .ru	pctotaldefender .com
offset9 .name	privatetube08 .com
omgfreehost .com

---

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

From http://www.f-secure.com/v-descs/worm_w32_downadup_a.shtml and http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=75911 and http://isc.sans.org/:

Active exploitation of MS08-067 vulnerability.

Block  trafficconverter .biz  ASAP

Lots of rogue antispyware, fake security sites, and other bad domains  to add to your malware blocklist. Sources include: ddanchev.blogspot.com, www.malwaredomainlist.com, safeweb.norton.com, www.threatexpert.com, and others:

abb192 .cn	download-citadel-software .com
mestkom .ru	megauplinkbindinstaller .com
ascoprguide .net	micro-antiv2009 .com
aslaskfds .com	micro-antivir2009 .com
bestlocatehomes .com	micro-antivirus-2009 .com
blufda .com	micro-av-2009 .com
cash-babules .com	micro-av2009 .com
cbwej .com	microantivir-2009 .com
cccpbuck .com	microav2009 .com
clickchecker6 .com	misdnspage .com
damtare .by .ru	movzportal .com
danunah .info	mysecureexpertcleaner .com
medsinfo .ru	mysecuritysupport .com
energysavecenter .com	mysuperload .info
fghin .com	netcrefer .net
fuckmaturewhore .com	new-porn-tubeportal2008 .net
ghjfd .com	newer-pon-hub2009 .com
gogovidz .com	ofis-rents .ru
gotds .info	antivirus-premium-scan .com
greatvips .info	olandon .com
homepageonweb .com	onlinecounter1 .net
homepageroze .com	onlinetds .info
okhyf .com	pbkjh .com
ietoolexpress .com	pornoxxxmovie .com
internetgameboxx .com	powerfulvirusremover2008 .com
kamikazewargames .com	prosecureexpertcleaner .com
kolonka17 .cn	prosecureexpertcleanerpro .com
kram3r .net	sergej-grienko .co
krchaaltert .be	spinpalace .com
liveupdateservice .cn	vmpmedias .com
mac-imunizator .net	zonzamas .info
malwarecrashpro .com	hypersecurefileshredder .com
megautbe .cn

---

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Sources include: secubox.aldria.com, www.threatexpert.com, www.malwaredomainlist.com, and others:

2ru .us	abilena .podolsk-mo .ru
abcdepage .com	jrdmgfxes .com
kdvty .com	bestsecureexpertcleaner .com
ahack .info	lazymp3z .com
ahdirz .com	linkprivatedocs .com
alertnewsblock .com	linskondesktop .com
alertsafenews .com	luckyclipz .com
alexastats .ru	main-downloadportal .com
allprivatelinks .com	main-downloadportal .net
aoyafgves .com	main-porn-hub .com
archiveviewsoftware .com	main-softwaredownload .com
aseachengine .com	main-softwaredownload .net
asearchnget .com	mediamovware .com
asearchservice .com	bestmoviesitefreein .com
beautypornpost .com	mobifonika .com
beddenis .info	moon-player .com
bestadulttube .com	moviezlibs .com
bestcanadianmed .com	movshighway .com
bestinfosearch .com	movwmwares .com
mjuie .com	movzway .com
bestofasia .info	mp3directz .com
jiehg .com	mp3zooming .com
bfansbxuow .net	msdownloads .cn
bgdtr .com	muslimwritersawards .co .uk
bgtnh .com	mvoyo .com
blowjoborgy .info	mymegatube .com
bluehomepages .com	nevervhudo .ru
boyhome .ru	newresultshere .com
bsplupdate .com	nicebots .biz
bulkwatcher .com	onenewtoolbar .com
bundlext .com	opsfiles .com
bvyls .com	owndocuments .com
casal192 .com	piczway .com
caz56 .com	posheng21 .cn
cdiqa .com	privatesecuritycenter .com
shortlinkings .com	qq188 .cn
classicplupdate .com	qwertycn .cn
cleanlive .net	renamehomepage .com
clipzocean .com	returnhomepage .com
clipzportal .com	safeinformservice .com
clipzsaloon .com	screenshortcuts .com
cserv1 .com	searchquickone .com
cserv2 .com	searchquicktwo .com
cutrecord .in	searchres1 .com
dcevr .com	searchres2 .com
dgjir .com	searchtubez .com
dieytemsn .com	securesurface .com
dj-xxx-tube .com	securityadvizr .com
dnsallabout .com	selectedclipz .com
dnserrorname .com	selectedtoolbar .com
dnserrorz .com	check-pc-antivir-2009 .com
dnsmislead .com	skwarovski .biz
docsofyours .com	softawe-download-forpc .com
domain5124 .com	software-pc-archive .com
ebn-tube .com	softwaredownload2008hq .com
elkaribe .biz	softwaredownload2008sq .com
tgbfiles .com	softwaredownload2008tq .com
fast-av-pc-scan .com	startpagepreview .com
fewfwe .net	storage-antispyware .com
flyonfiles .com	syshomepage .com
free-mp3-paradise .com	systemtrigger .com
freesearchway .com	tdsvassarium .com
freexxxmovz .com	ygpfb .com
gckry .com	therxdrugs .net
getresultnoew .com	top100clipz .com
gibserv .com	tube-chicks .net
gizmosb .biz	tube-ducks .net
gogomovz .com	tube-dudes .net
google-analitucs .com	tube-viewert .net
google-analitucs .ru	upgrade-pc-softz .com
googlestats .ru	upgrade-soft-serv20 .com
guiltydns .com	uptodatekeeper .com
hidatabase .cn	usedforspeedupb .info
highway69 .info	vgdes .com
homepagereset .com	vidsdevices .com
hpropellero .com	vidzdevices .com
hq-vidz .com	vidzselector .com
ietoolmachine .com	virtrigger .com
ilone .cn	virtriggersupport .com
img-z .com	virus-trigger .com
imgdirectz .com	virus-triggers .com
imgzportal .com	virustrigger2009 .com
informtoolbar .com	vn92 .net
intermovz .com	windowsupdateonline .com
ixivght .com	wmpappliance .com
yhdmi .com	wmpinstrument .com
zendirectz .com	experiencetoolbar .com
zxs35 .com

---

Contact us if you want to help us keep the Malware Domain Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Please remove  www.alltheinternet.com and www.searchalot.com from your blocklists.

Thank you.

Phishing sites,  fake security sites, rogue antivirus domains, and other domains you don’t want visiting your network or computers. Sources include www.abuse.ch, ddanchev.blogspot.com, blog.trendmicro.com, www.malwaredomainlist.com, and others:

07load .us	filmstvouty .info
mtdl .tk	google-analystic .net
ltdl .tk	google-analyze .com
3876373tr .org	1federalreservebank .com
3traff .cn	asecurevillage .com
4-seacher .ru	mmcounter .com
aaqarkznvb .com	1securitycenter .com
absolutepatience .com	naszza-klasa .cn
aglobaltoolbar .com	onlyiesettings .com
antinameserv .com	antispyware-xp2009 .com
panelstop .cn	antispywarexp-2009 .com
pavelmoous .ru	popokimoki .com
tkdl .tk	productthere .ru
as-xp2009 .com	reservpptppp20 .ru
traff .asia	reservpptppp7777 .ru
asweatpage .com	securefileshredder2009 .com
asxpnames .com	securefilesshred .com
mangust32 .cn	securefilesshredder .com
av-pro-2009 .com	antivirus-freescan .com
av-pro2009 .com	topregistrydoctor2008 .com
axa1 .cn	autosellergroup .com
axa3 .cn	treasurydepartment .net
beshragos .com	ultraantivirus2009 .com
burimilol .net	us-bankconnect .net
busyhere .ru	us-bankers .com
citibank .nm .ru	us-bankers .net
cosmo6766 .ru	us-securebanking .net
cosmo9998 .ru	usbanker .org
d3m0n .jino-net .ru	usbanksecurities .net
ddtfff .ru	usfedreserve .net
dtdl .tk	virus-labs2009 .com
fdic-secure .org	virusremover2008plus .com
fdicbanks .net	walers .tk
fdicorp .org	websafenotice .com
fed-reserve .com	win-system-support .com
fed-reserve .net	fedreservesystem .com
ygvtf .com	youtube .watch .hotru

---

Contact us if you want to help us keep the Malware Blocklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Sql injection Domains,  major phishing sites, rogue antispyware, fake security sites, all sites  you should add to your BHDNS blocklist.  Sources include dnsbl.abuse.ch, safeweb.norton.com, siteadvisor.com, isc.sans.org, and others:

404dnswebsite .com	connection-secure .net
a777 .org	idea21 .org
acglgoa .com	ikfjcketn .com
active-scanner .com	infonews .ath .cx
afreexxx .com	insanempegs .com
amhvcketn .com	iucvetn .com
aqlgdjeni .com	jlgvcketn .com
armsart .com	linkk .do .kl
ath .cx	linksyoulike .com
avegeni .com	live-antivirus-scan .com
baryouneed .com	megadow .kit .net
best-payments .net	melsongroup .net
biedetn .com	mountainready .com
brzgeni .com	mtioebso .com
bsoil .cn	newmeetning .com
bsplware .com	nmcolo .cn
bsspending .com .cn	nonstopantivirus .com
cjfsetn .com	old-and-girl .net
clsmateees .com	hellofriendsdi .com
cmplcoupler .com	plutoantivirus .com
id017 .cz	powerfullantivirusscan .com
dbios .org	premium-pc-scan .com
dfn2etn .com	prointernetscan .com
egfor .cn	rapidantivirus .com
eosads .com	htb4cketn .com
eptylugip .com	safepccleaner .com
espads .net	safesurfingpage .com
faceseee .com	spyware-protector .com
s4d .in	startedwebsite .com
pif02 .jp	topvorlagen .net
yrwap .cn	totaltrygghet .com
fhp4etn .com	tryoutietool .com
forcedscan .com	tube-4free .com
fqmgdjeni .com	udp96 .ws
fresh-women .com	update-microsoft .kmip .net
frzvetn .com	uusmoje .cn
ghjyt .com	vividns .net
giqgetn .com	hentaimoviesdownload .com
gold-software .com	zlwrnm9 .cn
gsagcketn .com	federalreserveus .com
gsajetn .com	fedreservebank .net
htbgetn .com	fedreservesystem .net

---

Contact us if you want to help us keep the Malware Blocklist current.Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format
Also available in AdBlock, ISA, and MaraDNS formats!
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

didtheyreadit.com will be removed on the next update. Please remove from your blocklists.