Feed

vallesina.tv and tfla.info delisting

Posted on May 14th, 2010 in New Domains by dglosser

vallesina.tv and tfla.info have been removed. Please update your blocklists.

exploit, fastflux, malspam, rogue domains

Posted on May 6th, 2010 in New Domains,Phishing,rogue antivirus,Trojans,zeus by dglosser

159 domains containing malspam, rogue antivirus, trojans, or associated with fraud. Sources include www.malwareurl.com, atlas.arbor.net, hphosts.blogspot.com, ddanchev.blogspot.com:

ad .z5x .net my-test-domain .ru
azsbwkwwwxvf .com myprotected-system .com
benefit-sales .com newsystem-guard .com
birbins-of .com oem-buy-software .com
bobleblack .com oem-buy-software .net
bobleboble .com on-discount .com
boblebreak .com onguard-zone .net
buy-download .net online-soft .net
cheap-market .com onlinesstop .com
cialisviagrabest .com payment-safety .net
ciro062 .hpg .com .br pcregrtuy .net
cleanupantivirus .com perfectstorez .com
clothedown .com pert45s .com
createpc-pcscan-korn .net plotguardto-mypc .com
crimepayz .biz porn-movies-26c96 .com
det0xcorp .kz questionhere .com
diamondgoals .com raskeni .ru
dinamite-deal .com realguardforyou20p .net
dodtorsans .net realguardforyou21p .net
doforsafety60-pd .net realguardforyou22p .net
doforsafety61-pd .net realguardforyou23p .net
doforsafety62-pd .net realguardforyou24p .net
doforsafety63-pd .net recover88888 .com
doforsafety64-pd .net requiregift .com
doforsafety65-pd .net romsinkord .com
doforsafety66-pd .net roundboble .com
doforsafety67-pd .net roundclever .com
doforsafety68-pd .net roundopen .com
doforsafety69-pd .net roundrunning .com
easyas123abcandfu .com safelinkhere .net
enlarge-mypenis .com salon-de-miki .jp
fhio22nd .net save-secure .com
fightmalware7 .com screenroad .com
finestguard40-pd .com search4vir .net
finestguard40-pd .net searchturne .org
finestguard41-pd .com sharifabadco .com
finestguard41-pd .net shop-gods .com
finestguard42-pd .com shop-here-now .com
finestguard42-pd .net snowgrid .com
finestguard43-pd .com startisland .com
finestguard43-pd .net suitcase50td .com
finestguard44-pd .com suitcase50td .net
finestguard44-pd .net suitcase51td .com
finestguard45-pd .com suitcase51td .net
finestguard45-pd .net suitcase52td .com
finestguard46-pd .com suitcase52td .net
finestguard46-pd .net suitcase53td .com
finestguard47-pd .com suitcase53td .net
finestguard48-pd .com suitcase54td .com
finestguard48-pd .net suitcase54td .net
finestguard49-pd .com superwidgetcomponents .info
finestguard49-pd .net systemcec7 .com
gallerysbest .com teperb-bananoviy .com
ginopost .com terasave1 .com
go-searchandscan .net terasave10 .com
greatestdeasl .com terasave11 .com
grepad .com terasave12 .com
happyplanet .com .mx terasave2 .com
health-life-co .com terasave3 .com
health-online-com .com terasave4 .com
hgaragesales .net terasave5 .com
homesatmadison .com terasave6 .com
hot-cleanofyourpc .com terasave7 .com
ileon .us terasave8 .com
impish .info terasave9 .com
jademason .com thejustb .com
javapony .org thetrinity .com .tw
letme-guardyourzone .com treatsudden .com
letprotectsystem .net trust-systemprotect .net
life-health-co .com trustsystemguard .net
light-brands .com updates-account .net
loseheavyweights .com upscanyour-pcnow .com
madisoninc .net upscanyourpc-now .com
malware-checker-free .net upwin .co .cc
mannyorder .com vilkgood .cn
marfilks .net volunteerabroad .ca
marmarams .com vyyy-team .cs .nov .ru
masterglass .go .ro windows-systemshield .net
my-softprotect4 .net xxxxxx000 .net
my-systemprotection .net

This malware block lists here are provided for free for noncommercial use as part of the fight against malware.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.
Updates are located at http://www.malwaredomains.com/updates or one of the mirrors
The full files are located at: http://www.malwaredomains.com/files or one of the mirrors
BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Important Additions: grepad-dot-com, ginopost-dot-com, thejustb-dot-com

Posted on May 5th, 2010 in 0day,exploit,New Domains by dglosser

Please block the following ASAP:

thejustb. com
grepad. com
ginopost. com

Sources:

http://blog.scansafe.com/journal/2010/5/4/grepadcom-iframe-nets-govt-niche-sites.html

http://isc.sans.org/diary.html?storyid=8740

http://ddanchev.blogspot.com/2010/05/us-treasury-site-compromise-linked-to.html

DNS-BH Update for May 2

Posted on May 3rd, 2010 in New Domains,rogue antivirus,zeus by dglosser

Sources: secuboxlabs.fr, safeweb.norton.com. www.malwaredomainlist.com, and others:

aaszxy .ru 0wners-team .com
asafepc .com aghmhikafir .com
b-care .jp antispyware-soft .com
bart4simp .com antivirus-live-one1 .com
bartes2kot .com bigmaxmultimedia .com
bl .fcrazy .cc blackflagvideo .com
bteldd .info bocatoma-hotel-resort .com
buhniroma .com bradrichmond .com
c00lphotos .com centromarinocc .com
c7 .qpdofz .net ecardforyou .clanteam .com
chatalkhor .net endroiturlredirect .com
cn .wwvv .us expensiveimages .com
epopx .in filmmediastar .com
eromitres .com filmutiliteonline .com
esero86 .ru fotos-hahah .com
etipx .in malware-checker-free .com
finderrac .org mdn-design .info
flvfilm .com medialinknews .com
foinkto015 .net micro .zymichost .com
fondospara .com moviemediastar .com
hochux6 .info msn-id .freehosting .com
images .0len .in msn .bigprofile .com
images .0lis .in msvideosoft .com
megga .ru myfreeutilities .com
mingrichun .com myxvideodump .com
movie .c1umb .in nationalmedecine .com
mscps .in nature2energy .com
mufolis .com online-b92 .com
ndpwrgg .info oophohyoshiige2aceeth4fu .com
necoshop .com picturesoftglue .com
nopagency .com pqdevjwznyw .com
oft .ag publicidadendurango .com
onotole777 .ru realmediacenter .com
oroboros .in somegreatsongs .com
plexco .co .cc space4images .info
poceka .info spaceforfotos .com
popoloruty .in sragenkab .go .id
ppp3ppp .biz streamingsports .altervista .org
sumk .in superdogmedia .com
thetube4you .info supertubevideos .com
tolstiy .co .cc systemcheck .x10hosting .com
tripnet .com tagged-facebook .com
umbjoobes .com theloaddata .com
unloooted .com trimlifemedia .com
vasyadurak .ru utilitiesstorage .com
vidoo2ri .in videoholland .nl
vimakina .com videosofttools .com
vip-space .net xtmhltmxaacg .com
zavalis .info