Feed

250+ Fraud, neosploit, Domains, zeus, exploit domains to block

Posted on March 10th, 2010 in exploit,fastflux,iframes,New Domains,Phishing,rogue antivirus,trojan,zeus by dglosser

Over 250 new domains to add to your shunlist. Many fraud/moneymule domains, rogue antivirus domains, wsnpoem domains, and more. Sources include secuboxlabs.fr, www.malwaredomainlist.com, www.malwareurl.com, www.unmaskparasites.com:

978cf .com acunterstates .net
aafoocgv .cn adomuistiktes .net
abulasspokas .net adrembovesttes .net
acrasso .com adrotator .mediaplex .feed-mnptr .com
adwarealert .com afropelosentes .net
aervrfhu .ru ahouperstofas .net
aformanionas .net allnatroniksssss .com
almi-tour .ru anergosedattes .net
alsaer .info antispyware2008 .com
amenthe .nl antivir-protection .com
amorinerowas .net antivirusprommx .com
analytics2 .org aplewasmedtes .net
antispyware .com aredroutertes .net
apologal .com asorutinodtes .com
apoose .in atackedleavesused .cn
asammary .com atacktrickschange .cn
asspuc .com atemptingconfusedhang .cn
avppi .com atitudeasaultrelease .cn
bentley .co .kr augustfapegame .cn
bergushistes .net aviolafouttes .net
bfhqrmtm .cn aweprolikartes .net
buyyoursex .com backstoryreceivedknowing .cn
capital-team .net bankingsecondsalute .cn
cashsblog .cn barbaraslapsiphone .cn
cashsdeal .cn barbaraspentsoda .cn
cashspeed .cn becausesymptomsdesk .cn
cashsrc .cn beckhamsomeinternational .cn
cashsurf .cn belgianherelocal .cn
cashwork .cn believedwekdayfoursquare .cn
casinonext .ru bestreportws12 .in
centralspl .ru beststatscounter .us
ceteploudas .net bokstechsupersj .cn
cha .91mt .com borugrestotes .net
chinapower7 .com boxingeatingshare .cn
countrtds .ru boxingstudyprotruding .cn
crushed .in broughtswinemidle .cn
cuddly .in browseblanksfod .cn
cut-down .in browsewakefatherhod .cn
dainty .in buisenesscorp .com
dauntless .in coisalindinhalegal .com
debated .in cosadeborracho .com .ar
defective .in datingtipsforman .net
dgnews .org download .evidenceeraser .com
dnf10086 .com eiweimiupeiviadi .in
dobmvnh .com facbooks .yourfreehosting .net
dovetox .com filemediagroup .com
drop .az forum .rawafedschool .com
dsdwwewe .com friporn-besplatno .info
dzinternet .co .cc fstt .dsdwwewe .com
eivom3d .ru globetechnologies .com
eliminateall .com goodmultimediaonline .net
en .kyod .biz iam .superfluxed .net
excode .info imhiddene .ishidden .net
extemi .com jetespomertes .net
extrasales .in kasp .x10hosting .com
facebook-c .com kiropadonttes .com
fekete .org lopokerasandco .hk
ffret .ru mediaindustrydata .com
findinamica .info medianettools .com
florikast .com megalithrecords .com
flutegraph .cn mobidomaining .info
forumbeat .info mobilemultimediadata .com
gamederp .ru mp3-zdarma .tym .sk
ghtsuumuno .com my .msn-fbgallery .net
hebragr .com newptlisbon4 .com
hjwbxhqr .cn newptlisbon5 .com
honeypussy .info newptlisbon6 .com
horovod .in newptlisbon7 .com
howlit .info newptlisbon8 .com
ifgaqfyithr .com newptlisbon9 .com
imguser .com oceandigitalfilm .com
intil .info old .hi5photos .us
ioretiop .com ordegofindates .com
issimode .net paedagogisches-journal .de
johnm .tmweb .ru perdiusmodtes .net
joukwerostes .net photocourtesy .com
kenoie .com prodloader14 .info
keynots .com proprator14 .info
kopolinos .com puppetmasterz .org
ks45tn2 .cn red-phoenix .info
kslotz .co .cc royalityfull .net
l63 .ln .cn satregonovates .net
lctk .biz scnadator14 .info
leacherz .net search-network-plus .com
lecizens .com searchportrait .org
lrfjkzlx .cn sectionsecuredsite .info
maurers .tv selectsolution .net
minimpucash .net servisesocks5 .com
mogus .in sofgeromiustes .net
movreportes .net sondiuperotes .net
mszone .sytes .net sorpresas .uni .cc
my-next-love .ru spokionertes .net
narkyl .com sponsoryregysters .com
newptlisbon3 .com spuperrrtransfer .com
nt01 .co .in studiocom .com .br
nt11 .co .in super-pornmovies .info
obiassi .com super-pornomovie .info
outshed .com super-pornomovies .info
p1anka .cn super-pornovideo .info
pachaclub .in super-pornovideos .info
patologo .ru super-pornvideo .info
pipiskin .hk super-pornvideos .info
pornokinoxxx .ru superporn-movie .info
puthere .info superporn-movies .info
qefshvsqdve .com superporn-video .info
sakura2 .cn superporn-videos .info
satofepolas .net superporno-movie .info
secureway .bz superporno-movies .info
sex .kissx .ru superporno-video .info
sexshopcafe .com superporno-videos .info
sikis19 .net ukbankstop10compare .com
soundboard .com updateinfo22 .com
spirims .com uper-pornmovie .info
swat4 .gram .pl usuarios .multimania .es
tdsclick4 .com validatestreams .com
thanksimage .com vasermatniktes .net
tnirif .info voquerofomtes .net
vkratingx .ru vur-for-itonpcnow .in
vuurowes .com vurfor-itonpc-now .in
vvvilon .com websecuresection .info
walers .tk wentiscopertes .net
woperdosas .net xxxvidzforfree .net
wowtribes .com yougoodvideo .net
x554b9c1b .co .cc z130827 .infobox .ru
xtubegexxx .in zapolunenates .net
ycgezkpu .cn zooom .heliohost .org
youporn8 .net

The malware block lists here are provided for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can.  All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgement, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A  trusted source on the WOT-the Web of Trust .  Used by SURBL, MOREnet, and others…

lots of fake antivirus, zeus/wsnpoem and other badware domains

Posted on March 7th, 2010 in New Domains,rogue antivirus,trojan,zeus by dglosser

Over 200 trojan, ransomware, and other bad domains you don’t want you or your users visiting. Sources include www.malwaredomainlist.com, malwareurl.com, and unmaskparasites.com:

17gr .co .tv advance-pcdefender .in
188tan .cn antispyare7help .com
41ac .com antispyare9help .com
44fj .com antivirus00help .com
5536megabyte .info antivirus010scanner .com
ackstone .com antivirus01help .com
aerostuff .ru antivirus030scanner .com
allinadayswork .org antivirus03help .com
allowolverin .in antivirus050scanner .com
amzinas .com antivirus06help .com
analiticterra .com antivirus070scanner .com
ankursociety .org antivirus08help .com
antispyare2help .com antivirus090scanner .com
antispyare4help .com antivirusomega0 .com
antispyare5help .com antivirusomega1 .com
autotradersuk .net antivirusomega6 .com
axaldjqt .cn antivirusomega8 .com
bablodos .in antivirusomega9 .com
bayinsurance .cn antivirusprotection01 .com
ccc213 .ilive .ro antivirusprotection11 .com
cfssixsn .cn antivirusprotection22 .com
characterscaner .cn astonmartinpics .blogspot .com
click-poisk .com bl1-virus-scanner .com
contred033 .org bl3-virus-scanner .com
crazybunchsc .com bl5-virus-scanner .com
curlicious .com bl8-virus-scanner .com
cxim .asia bl9-virus-scanner .com
deviliz .com discovertotalhealth .com
domen-2010 .com finalspywarescanner0 .com
dy61 .com finalspywarescanner1 .com
enzoforfree .ru finalspywarescanner4 .com
exitguide .ru finalspywarescanner7 .com
fel0ny .com finalspywarescanner9 .com
ffarms .net getr1chordietry1n .info
fontana .ru googlanaliktics .com
frigologistics .nl googlantivirusa .com
garavangzik .com googlantivirusc .com
gimcc .webd .pl googlantivirust .com
goldmaniac .com googlantivirusu .com
gotmerged .cn googlantivirusw .com
healthmann .pk google-statistics-uk-two .com
hmcompany .info herault-automobiles .fr
houreena .com inter-antivirus .com
httptraffic .in inter1antivirus .com
hubys .com inter3antivirus .com
idnsservice .biz inter6antivirus .com
inclabtec .biz inter8antivirus .com
ineedcash .org inter9antivirus .com
investrade .sk intera-antivirus .com
irai .nerim .net interc-antivirus .com
jcdcwxbjthr .com interd-antivirus .com
jeasoftware .info intere-antivirus .com
jefshosjdve .com laudunlardoiseavenir .fr
jnsassociate .com lv1-virus-scanner .com
jv-s .com lv2-virus-scanner .com
kalowweb .de lv3-virus-scanner .com
kp49 .com lv5-virus-scanner .com
ktsoft .eu lv8-virus-scanner .com
leonardandself .com mad-i-bevaegelse .dk
lonvirtuel .com mapssite .blogspot .com
lumibonu .su mazra3ati-sudan .com
meinedosis .de microsoft-server1-update .com
mes-lamination .com microsoft-server2-update .com
mipolas .com microsoft-server3-update .com
mirikas .cn microsoft-server4-update .com
mjisuvrmthr .com microsoft-server5-update .com
moretds .org moremediaplugins .net
muddbowl .com mycareermychoice .com
myfirstguide .com networksolutions5 .net
mylovebusiness .com nordamerika-invest .com
myplaythegame .com proper0antispyware .com
needno2search .com proper1antivirus .com
nickpie .com proper3antivirus .com
nospamnet .com proper5antivirus .com
outuser .cn proper6antispyware .com
pagadodireto .net proper7antispyware .com
pageupndown .net proper7antivirus .com
pd41 .com proper8antispyware .com
person .doae .go .th proper8antivirus .com
pfgeeeepdve .com proper9antispyware .com
photovideo .uz prospywarescanner1 .com
realixlove .net prospywarescanner5 .com
realtorrentltd .ru prospywarescanner7 .com
repuzer .net .ua prospywarescanner8 .com
royalfuls .com prospywarescanner9 .com
saloongins .net quick-antispyware .com
se56 .com quickaantispyware .com
secretshoper .info quickbantispyware .com
serverdrom .com quickcantispyware .com
skullsmod .com quickdantispyware .com
slovestond .com scana-antispyware .com
steggba .com scanc-antispyware .com
tumasolt .com scane-antispyware .com
ty42 .com scani-antispyware .com
ubcvesuuthr .com scant-antispyware .com
unb0rn .biz security010scanner .com
v-murmanske .ru security020scanner .com
wildbunchsc .com security030scanner .com
xxxsss .net security040scanner .com
yourweekends .net security050scanner .com
yrots .ru siteadvertise4you .net
yumi .org .ua windesktopsecurity .com
z131588 .infobox .ru

Huge update: malicious advertising domains

Posted on March 5th, 2010 in New Domains,Phishing,rogue antivirus,zeus by dglosser

We are adding the malicious domains being served up at ad banner networks based on the listings at  malwaredomainlist and trojanedbinaries. Most of these malicious ad banners serve up fake anvirus scareware.  There are also  few phishing and zeus domains in this update.   Many of these domains are offline, but it’s better to be safe that sorry:

15gr .co .tv aaafreebarter .com
16gr .co .tv aozjuvcbkupv .info
99999pk .com avgroupwebsite .com
a2zthings .com barteranywhere .com
aabtiktadve .com barterbrokersusa .com
abxbarter .com bartercontrol .com
acdlsmladve .com barterforbusiness .com
acdlsvladve .com barterforbusiness .net
av-crew .net barternewengland .com
av-protect .com barterofsandiego .com
azisugftqguq .com bidxctvqvwrw .info
backupzzz .com biz2bizcommerce .com
barterbam .com byuigracdnjj .info
barterbing .com capitolbartering .net
barterbucks .us cfnmmoviesman .com
barterbureau .com charitybarterbanc .org
bartergenius .com charitycashlessbanc .com
barterne .com charitytradebanc .org
bazqrhafrrh .info ckzqfrxaxihi .info
bonescaner .cn comunicat-de-presa .ro
brtconsulting .it contecomigo .net .br
cgnmydalqgsm .com corporatebarteronline .com
corexchange .org cvybexpnqhlx .info
dbcavsaddve .com cxdnvwapzezk .info
ddehkyhddve .com dbvvwrkgycfa .info
ddewphwddve .com dcghkoixsagu .info
desz .kr dfxlhdyffzho .info
desz .ne .kr djxyazxjpfnf .info
desz .or .kr dobarter .darnfast .net
dffmjefhfyf .com edaddywarbucks .net
doapost .com eututrywxvhd .info
dobarter .com excellencesoft .com
dwldxeqavts .info friavuzpsvxc .info
dygpcewrjnw .info google-analitics .net
edase .or .kr gopbaqvgprvh .info
eliyisgtkaj .info hnstetlseuop .info
emo-lesbians .com host192-168-1-2 .com
ersm .kr hzlyaejcvmat .info
ersm .ne .kr j80-trinitains .com
jestywtvadgj .info
ezqaxnmsbs .info jgvsjnhmvngn .info
fywthroeasx .info jttyhhvcxmbz .info
gogle-analiz .com kijksoeohxze .info
googleinrus .in kmpbfdtknwsh .info
hjvcnunmtzc .info kzpkpehthbgn .info
hwqckfphkhyi .com leadingedgetrade .com
ibabiz .com learningomaha .com
iipghhbnarh .com malibuexchange .com
ikbalvockal .net mashburnsales .com
inxvwrxogrc .info mnuzqxerjufm .info
jbaagpepjvc .com mohammedistechnologies .com
jklnznqvztu .info muhrlwuzyaly .info
lbckqbkldve .com myunionwallet .com
limeakfjskt .com naturecoastbarter .com
live-soft .net news .hermison .com
lsvoenxxyya .info nlfgjehbotwi .info
mad-millions .biz omvdbdcknpct .info
maxcardinc .com oneofakindsxm .com
mkmohanty .com orangebeemoney .com
nbtislvidmq .info pavel .real-host .ru
new-soft .net perfect-center .org
newsoftcore .com pghtradealliance .com
newsoftspot .com pittsburgh-trade-alliance .com
nyqoxifkvxga .com platinumtraders .com .au
oaofmsckue .info premierbarter .com
ocryspyjvkh .info prtrkmxkpctw .info
oiav84 .ru qlgkmytdvyjx .info
ottawabarter .com ricardocarvalho .co .za
papirosi .info ritmotours .com .tr
pdecaxcpdve .com rmkbyklbhawd .info
pfgtihtpdve .com roomservicedesign .com .au
pianwinpdve .com royalautomodule .in
pianwxnpdve .com rtkffbmmgkpw .info
portablapps .info rxflhciirups .info
puddxvixrro .com screensavers1 .info
qabtihtqdve .com shifustserver .com
qcdvnhvqdve .com softcoregroup .com
qjiwptwqdve .com softmetalgroup .com
qlcleaner .eu sphamifoaqpx .info
retdownload .info statisticanalysis .info
rimofoixaf .info sweethotteens .org
riupdate .info the-dragon-cave .com
royalsearch .org thenutritiongroup .biz
salefale .com tidawgeihqch .info
scanerexcuse .cn tklaxlxvedkt .info
shop .ccomp .cz tommahercompany .info
sirius-socks .cn tradeexchangenetwork .com
software2010 .net traffichits247 .com
soldatus .com uentfkblzpxx .info
stxtrade .com undercoversquilting .com
tdrfhdzxyb .info uoncvsqcuclx .info
tinytanks .net uplevelgmno .vn .ua
tissuespritz .com uuyvsrbtpjhl .info
tluaweyermg .info uwbhpcrydgta .info
tmclean .info valleybartergroup .com
todayileft .com valuecardalliance .com
trade-usa .net valuecardarizona .com
trademakers .ca vgmhlwrixzxz .info
tradeyainc .com vipfashiongroup .com
troytabor .com virusscanlevela .com
uefnwtnudve .com vujpgvscrjbk .info
valleybarter .com vwrvqmvrvjwi .info
valuecard .biz worldcashlessbanc .com
valuecardaz .com wwkzrjfuhmjg .info
vertelitt .com xewffvnixdyk .info
viwterm .com xkduqnxfpnfg .info
vnhdjolg .com xnboetuqunld .info
wazprlhzhfvg .com yfguydudorip .info
xdxq .cdu .edu .cn yggxvnwumcqv .info
xtunbiifnl .info yhaidebpfltr .info
yburuvaeqcv .com yynspckhyebi .info
yvaxtdzhbldc .com zejdcqsoglao .info
zrenie .cn zelhnalbivd .info
zsrsjnihnb .info zugponkeqtzz .info

The malware block lists here are provided for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can.  All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgement, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust.

Used by SURBL, MOREnet, and others…

Block ASAP: google-analitics-dot-net and salefale-dot-com

Posted on March 4th, 2010 in 0day,exploit,iframes,New Domains by dglosser

From SANS:  Block google-analitics (dot) net and salefale (dot) com ASAP.

Sites will be added on the next update, but you should not wait.

134 new domains to block

Posted on March 4th, 2010 in New Domains,Phishing,rogue antivirus,spam,zeus by dglosser

fastflux, zeus, rogue, skype spam domains. Sources include atlas.arbor.net, blogs.paretologic.com, and others:

27gr .co .tv 34jh7alm94 .asia
88810 .cn 873hgf7xx60 .com
953333 .com a2132959 .0lx .net
aprotect .com abouttraffic .net
arraysaw .com acdbxybadve .com
arraysaw .net autoparck .sumy .ua
arshard .com aviavavilons .net
av-command .com blackhistorypeople .com
avcommand .net botproxy2 .twoblocksdown .com
b11335599 .cn businessboard6124 .net
basiscause .com canadauniversitypress .com
brozsearch .com candyshop451 .com
c36996639 .cn contentserver .ru
c58446658 .cn contrsnid .uz .ua
cavally .in didbotta6 .unipv .it
contempt .in draft5sticks4 .net
d92378523 .cn enteri1llisec .in
disea .info findlostcats .com
ebaat .biz flashplayerpluginonline .com
egn14142nn .ws for-sunny-se .com
egygate .info free-screen-capture-software .com
evertrands .com freeanalsextubemovies .com
everybots .com globostep .info
experrior .eu googleanalinics .com
footbal .rv .ua gotnewfriendbook .com
fructik3 .ru groov .uzhgorod .ua:8080
gameshort .ru h10024 .nb .host127-0-0-1 .com
geo95 .com happytreeporno .com
getsup .info homeamateurclips .com
googleinru .in homesitetoo .com
gromz .net hqexgirl .osa .pl
iescrow .ir illegaloffer .ru
j00k877x .cc imobiliariacanela .com .br
kaliuz .com lmaoimages .com
kolaider .net miamiheraldsi .com
kozzz .in nbsolution .com
m2121212 .cn o17070 .nb .host127-0-0-1 .com
m3131313 .cn personalsystemscan .cn
mn8873nb01 .cc plainjapan .com
natos .info playthisfuck .com
nn31415en .in polycounter .com
oast .com pzignbfxspou .info
polevand .com quickmedialinks .com
redondo .ru redriveruk .com
reilka .co .kr salamangzan .com
reilka .kr santacruzinfo .com .br
reilki .co .kr scoregame .info
reilki .kr searchfeature .org
reilki .ne .kr sendspace .repek .or .kr
reilki .or .kr slinkadult .biz
reilko .co .kr softinternational .net
reilko .kr sportgun .pl .ua
reilko .ne .kr stignita .zapto .org
reilkx .or .kr stoptibetcrisis .net
rioner .com storage84030 .org
scanerborn .cn tdsstdstds .org
sendingout .cn theinputonline .com
serdb01 .com thetubeholder .com
shitstream .cn uncutsouthmovies .com
smile .if .ua valentinsss .info
sunqtr .com w1543 .nb .host127-0-0-1 .com
tabs .pl woodfuelwales .com
updategr .org www-myphoto .com
vallesina .tv x21526 .nb .host192-168-1-2 .com
whyviral .com xxxtoywebsitecheap .com
x-drugs .ru yswzrjkpsp .com
zeroday .cc

fastflux, rogue, koobface domains

Posted on March 1st, 2010 in fastflux,New Domains,rogue antivirus by dglosser

Upload was delayed by a few days due to weather issues from the latest storm. Sources include malwareurl.com, www.malwaredomainlist.com, www.scanw.com:

7-job-net .com 1class-antispyware .com
aboutrevers .com 1classantispyware .com
acb .bs .it 1classantispywarec .com
adjamadja .cn 1classantispywared .com
anywayi .info 2010-antivirus-scana .com
articlesi .info 2010-antivirus-scanh .com
bert8ihd .net 2010-antivirus-scanm .com
bestfreedns .in 2010-antivirus-scann .com
bizcontax .co .za 2010-antivirus-scanv .com
blogsnstuff .com antispy-security1 .com
bowwow .co .in antispy-security3 .com
brevard-fl .com antispy-security5 .com
bustedsafer .cn antispy-security7 .com
cekc2 .com availablemediamore .com
company-euro .com bestsysprotection .in
cpadm21 .org cafeinternationalcatering .com
cqb-inc .com cpu-help-online .info
dedicalsels .com derryrailtrail .org
dixon-link .com deserver .dnsdojo .net
dosuguss .net dnsresourcecenter .com
euro-shopping .net happyhardcoreporn .com
gold-es-net .com intel-z1-antispyware .com
goldes-it .com intel-z3-antispyware .com
good-nets .com intel-z5-antispyware .com
guard-lab .net intel-z6-antispyware .com
gxf .co .il intel-z7-antispyware .com
horosta1 .ru intel1-antivirus .com
inet-guard .net intel3-antivirus .com
inetguard2 .net intel5-antivirus .com
inetguardlab .net intel7-antivirus .com
inguards .net intel9-antivirus .com
it-financess .com internethosting .sg
job-for-yours .com lokal .enhedslisten .dk
justproud2b .com mega7-scanner .com
l2tops .msk .ru micro1soft-scanner .com
lionelsorin .fr micro2soft-scanner .com
liturile .ru micro4soft-scanner .com
livesoftrock .com micro6soft-scanner .com
mazeratis .com micro7soft-scanner .com
mega1-scanner .com microsoft-spynet .com
mega2-scanner .com nanoprotection-scan01 .com
mega4-scanner .com nanoprotection-scan02 .com
mega6-scanner .com nanoprotection-scan04 .com
missboston .org nanoprotection-scan07 .com
navigate777 .net nanoprotection-scan09 .com
newcarsdot .biz nextgen-scannerb .com
newcrawler .cn nextgen-scannerc .com
niposedas .ru nextgen-scannerd .com
nolif3-clan .net nextgen-scannerr .com
ntmeda .org nextgen-scannert .com
olypoos .com nitro-antispyware .com
oppiomna .com nitro-antispywarea .com
oyunland .org nitro-antispywarec .com
peyamnetsd .info nitro-antispywared .com
picula .ru nitro-antispywaret .com
playbosssiks .net online-web-net .com
poolst .in outoffinternet .info
probestclub .com people-and-job .net
purgand .com phiesookaeruaxah .in
redsol .cn protection11scan .com
retranslate .org protection12scan .com
s-domain .cn protection14scan .com
scanvirtek .com protection15scan .com
sheenalarsen .com protection18scan .com
slashrock .info quick0-antivirus-scan .com
softforwin25 .com quick2-antivirus-scan .com
sp-777 .com quick4-antivirus-scan .com
straks .fr richardspizza .com
susez .mine .nu rschaedeli .dyndns .org
tempr .ru run1-antivirus-scan .com
texasref .com run3-antivirus-scan .com
transport96 .ru run5-antivirus-scan .com
turningout .cn run7-antivirus-scan .com
uaetoon .net run9-antivirus-scan .com
univi .chez .com s172760532 .onlinehome .us
volosanka .cn secure-scanner .in
web-euro-it .com stopwarsintheworld .com
webfiless .com systemrestoreupdate .com
webpages-it .com tchetik .phpnet .us
wesst-es .net virus-scannerdot7 .com
wesst-netts .com waimaighaiphahxi .in
wwwtrue .org webcompany-es .net
yyx .wfu .edu .cn webcompany-euro .net

The malware block lists here are provided for free for noncommercial use as part of the fight against malware. Please help to keep this site free! Donate whatever you can, all donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgement, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
New: Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!

Used by SURBL, MOREnet, and others…