Feed

DNS Blackhole Update – 200+ malicious sites added

Posted on September 18th, 2010 in New Domains by dglosser

Amada C&C servers, harmful and malicious sites according to google safebrowsing, malvertisement domains, etc. (the source for each entry is always in the domains.txt file):

003485883 .com antivirdog .net
0o0o0o0o0 .com 19js810300z .com
12pole .info 1iii1i11i1ii .com
1host4me .ru 3423254353446 .org
34588313 .com 4ego .teleffonov .net
599630083 .com activateoursoft .com
68b6b6b6 .com aefesixabvf .com
abaronaweb .net aftermaoart .com
adserv .co .in analitycsdead .com
afonya123 .com antispybrain .net
afreepack .com antispycraft .net
aglardgr .com antispyfond .com
agrigid .com antispygeek .net
agrofee .com antispyversion .com
antispybox .net antispyversion .net
antispymv .net antivirback .net
antispynew .net antivireagle .com
antispyoem .com antivirfox .com
antivircat .com antivirglass .net
arestyute .com antivirhand .com
baffyko .com antivirlock .com
blackry .com antivirlock .net
bull-99 .info antivirman .com
cheni .in antivirone .com
cnjug .com antivirus-armature .com
coani .in blamesllek .com
cuscuss .com cleansoft61 .co .cc
ddret .com clicksmell .org
decdo .in connectionsupport .org
demparten .com domain470005 .com
depenam .com everydaynow4 .co .cc
destiem .info everydaynow5 .co .cc
eminemm .net everydaynow7 .co .cc
enprivacy .com everydaynow9 .co .cc
epenam .com fjvbifdsbdu .com
fgtre .com global .pcclear .com
fiopak .co .cc graymageds .com
fishum .com helpsupport .biz
fun-gsm .ru homexxxvideos .in
gddff .com inprivacy .co .kr
ghdre .com interparceltd .com
gudie0 .info jabpgwijbvf .com
home-sd .com journaltag .net
i-scan .co .kr juicycloth .com
ibombers .com kelsamsdad .com
ieskau .eu levelin29-online .com
jaddf .com levelin29-web .com
janesblog .org loadmediameans .com
janoodle6 .net megochecks2 .co .cc
jeffreyl .info megochecks3 .co .cc
jro1ni1l1 .com megochecks5 .co .cc
judlife .com megochecks7 .co .cc
kkrrn .com megochecks8 .co .cc
kovertums .com myteen2011 .com
krnnt .com nambiutar9 .com
kvccg .com newspickerdot .com
kvxxr .com numerouno-india .com
ledyllo .com olstimes .co .cc
leeep .info online-life .org
levelin29 .biz onlinesite-u1 .co .cc
levelin29 .com orangeosol .com
levelin29 .org platinumalbumm .com
levelin29 .us pleasing-tube .com
manpolisa .com ppcstructure .org
my79list .com prot-best-av47 .co .cc
namopasi .com risesafety2 .co .cc
notersils .com risesafety4 .co .cc
nt04 .in risesafety7 .co .cc
nt15 .in scaner-g .cz .cc
onescan .co .kr searchannoying .org
onrpg-cdn .com searchyieades .org
pirmanoi .com securebankingserver .net
poiiu .com securityletters .com
portalkey .org securityprisoners .com
privacypc .net securitytour .com
ramiko .net sfgateverse .com
rastiks .info showgraphicarts .com
rcggu .com sicha-linna2 .com
rchjj .com stable-defense20 .co .cc
rcsss .com stable-defense21 .co .cc
rtyyv .com stable-defense24 .co .cc
sakoplos .com storereturn .cc
sanmoposa .com tsd1online .com
servhb .com usefull-av20 .co .cc
sexown .com usefull-av21 .co .cc
snusdzs .co .cc usefull-av22 .co .cc
ssadf .com usefull-av23 .co .cc
ssweq .com usefull-av24 .co .cc
stats .ads .in vasilijgaltsev .com
steadi .info verificationstreet .com
susisite .com videoartfilms .com
sutbizka .ru virginmegaart .com
suzusez .co .cc volosatyhren .com
theqopp .info vseohuenno .com
up004 .cn waycoolart .com
vfiwvhbi .com webgetphotos .com
vurmo-st6 .cn websitegreengo .com
walkforce .net websnapster .com
wentul .co .cc woodstyledesign .com
wiggete .com worldartsguide .com
wille77 .info yellowaven .com
winpals .com youngartdesign .com
xprezznet .com youngfinearts .com
yourfi .com yourbookarts .com
yyeed .com yourdogsart .com
yyutr .com yourfreearts .com
zx210 .jino .ru zenartdesign .com

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Clear Cloud – Another DNS Service

Posted on September 15th, 2010 in Domain News by dglosser

Like NortonDNS, ClearCloud from Sunbelt Software is a DNS service which block domains and sites containing malware and other badness.

More information can be found here

I’ve always been impressed with Alex and Sunbelt Software, ever since he stepped up to the plate and helped Julie Amero.

For home users, the following may be a nice setup:

* setting your DNS to Clear Cloud (or Norton’s new service)
* surfing with Firefox
* using adblock plus (with appropriate subscriptions) and Web of Trust
* Siteadvisor
* Winpatrol
* MalwareBytes

Or, for the more technical, running James McQuaid’s “DNS Super Black Hole” would provide even better protection.

For those running their own dns servers, running the dns-bh list internally while pointing to Clear Clould or Symantec DNS may be worth considering.

New Update: trojan, exploit, fastflux and other malicious sites to block

Posted on September 14th, 2010 in exploit,fastflux,New Domains,trojan by dglosser

trojan, exploit, fastflux and other malicious sites to block. Sources include www.malwaredomainlist.com, atlas.arbor.net, secuboxlabs.fr, www.threatlog.com (the source for each entry is always in the domains.txt file):

aacidsoft .com ableonline .info
adplus .in abodeflash-vol44 .co .cc
aibieviake .ru abodeflash-vol49 .co .cc
aimagefaa .com acompliabuynow .com
athtion .com adobeflash-ver97 .co .tv
b-v-a .be adobeundress .ru
balancai .com aerotrafficcwork .co .cc
banderboss .ru asiawholesalers .net
begawe .info bellmorefinancial .com
bidz .cn bestcitymovie .com
bingoshow .org bestgoodmovie .com
blameli .com bidonbogas .no-ip .info
blameloik .com big-easy-shop .com
blerin .com bluelinefreight .in
blink19 .eu brendamexico .com
broad16 .eu bubbagriffey .com
bumin .org busderaskon .com
bviosity .com creektelmedia .com
cacrazy .com datasupportsys .com
cansbass .com datasyncpro .com
cdevery .com deep-scan-soft200 .co .cc
chpixie .com digitalinfofiles .com
clickpaths .eu electronictechtools .com
comedyeasy .ru elitesuite .info
compadar .com examplesofoligopoly .com
daeshnew .com facebook .centlot .com
daleko .us factonfiles .com
dbtraw .com faststoned .net
de .888 .com ferroground .com
dns .ddos .im filehosting-space .co .cc
doools .in filesmatch .com
eemaimocho .ru fotospace4vip .com
eexiziedai .ru fotosprofile .com
ekoredu .com goimages .co .cc
ethli .com gowardtor2010movie .co .cc
exinwl .com great-tube-fest .net
fakiral .in grjmfvqe .co .cc
faloge .com guesswhoiam .net
fdcast .com guilelesskiof .info
fdflex .com healthmatrxcapsules .com
fodifkso .in hometrafficcwork .co .cc
foldnt .com hyperadnetworks .com
foregan .in iaachamber .com
fra8888 .ru idatamatch .com
freeappz .biz imddos .my03 .com
g39fvk309 .in in-access-point .com
geezter .com jajsytvuca .com
gigimon .net jazzstibbtm .com
givemelog .in jazzsubartm .com
gizmatool .net jetztvorun .net
globdomain .ru kiselmadku .com
gp5z .ws maliby3000 .com
gqfoch .in media-l-file .org
greenter .ru meettheearth .net
gurgamer .com mneznez .co .cc
h1s2 .co .cc moneybeerers .com
h4u1 .co .cc mykaksosat .info
hefotodu .cc mypetitebusiness .org
holf .in mythazn .co .cc
ieweepeeve .ru nagatkeaneworld .net
ilsearch .com nakedproductions .us
inesseat .com oldsearchfeed .ru
jectar .com personal-guard199 .co .cc
jkag36as .com personal-guard200 .co .cc
jookest .in quickloadmovie .com
kirkon .in rezjure .co .cc
lasopalop .com rijnascymga .com
lavandas .ru rodadaspremium .com
lessoonas .org rrej2jd .co .cc
maharath .com ruslan7777 .com
medjam .com saitfroll .com
midsim .com sdztsdz .co .cc
mishn .co .cc seaitfoll .com
myprodjs .ru secr86838 .com
nt14 .in sentumi .co .cc
orbiter .in shadowtycoon .net
ottomoto .net slut-topxxx .sytes .net
outself .in softinfosite .com
psamtek .cn sovousevocefor .com
pure-ads .com spydajaba .com
pvpv .ws statdns .co .cc
rchfs .com statsbeck .com
rotmc .com storymediaworld .com
rtwer .in tabletspharmacymedicationssite .com
rvvvcd .com tenziloper .com
sanctur .com testfhjslk331 .org
segodnya .us textonlinemedia .com
serv .com thaihotweb .com
simrako .com thegoodbox .com
srapex .com thekaksosat .info
stepanola .in thesyncbox .com
tecsr .com tucointopp .com
tyrte .in uzvegdaws .net
vebaza .info verasertys22 .com
veveto .net videos4yourfriends .net
web .9bic .net virtuellvorun .org
webzadel .com vohphozeeg .ru
whools .co .cc web35 .speedserv .com
winggo .co .kr wifipoints .ru
wwwviews .com workgroupsite .com
xpharmx .com yourloadmedia .com
zapaska .biz

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Gumblar Domains

Posted on September 12th, 2010 in Domain News,gumblar by dglosser

Unmask Parasites has  updated their list of Gumblar Zombie URLs. We’ve asked for permission to include  it as a separate file in BIND and MS zone format while we integrate them into our blocklists.  But you should check out the massive list of over 1300 urls yourself .

Update from Unmask Parasites:

… most of them don’t contain those Gumblar script now. I maintain this list mostly as a reference so that webmasters of sites with Gumblat zombie URLs could locate and remove them, and webmasters of infected sites where hackers inject links to those zombie script could search for domain names specified in Google’s diagnostic pages (they contain some historical data) and find my list and clean up instructions.

184 new malicious sites to block

Posted on September 11th, 2010 in exploit,New Domains,Trojans,zeus by dglosser

Exploit domains, c&c domains, trojan domains and more…

Sources include blog.dynamoo.com, blog.sucuri.net, malc0de.com ((full list is always in the domains.txt file):

3495098834 .com 0319bce .netsolhost .com
amcupsite .com 128bitninja .com
ardsigorta .com 2ka06zlk7 .site .aplus .net
audo20s .in 365hotporntube .in
avscanner .net aabalhtabvf .com
basicreader .in academyhouse .us
behindband .eu alldigitaltools .com
bic567 .com antimalwareguard .com
bulnabi .com antiviruswala .com
ceberg .net asdqw .no-ip .biz
chatpoetry .net atlanticwore .com
chomai .in auto-booster .in
clifedo .net bestfilmhelp .com
deckhan .in bestprogramever .com
deedit .in bff-bojzc .sytes .net
diablade .com bff-lhazv .servemp3 .com
doob .de blogs .clarin .com
dooplineer .org cashmultipliersystem .info
draggle .in cismislis .co .cc
easyclick .in cleansoft56 .co .cc
ethdem .com computerengine .in
face-plus .com darting-tube .com
farbaby .ru dashing-tube .com
ferrosoft .com dataplaykey .com
fiwijo .com enginecollector .in
forexee .com entertainmentcyprus .net
freematrix .in eurotransbiz .com
godfast .info facebook-vidz .com
good-bad122 .ru finworldonline .com
gstats .cn first-wave-aug .com
h26heh1 .co .cc flvpronetwork .biz
hack-it .biz gaatavers .co .cc
hezheah .co .cc go-thailand-now .com
hezhett .co .cc good-invi2451 .ru
hhezshl .co .cc good-invi2454 .ru
hit-senders .cn good-vik41234 .ru
husderma3 .com good-vik46214 .ru
imtarts .com goodfreetubexxx .com
kabanus .info googleanalitics .net
kserfly .net googletoday .net
lamebring .com ikk-gadqr .myftp .biz
legkoidem .com imgdownloads .com
lubnays .cn itamonte .com .br
manopikal .com jumpmanlocker .com
mneznet .co .cc loadfilescity .com
msezsnl .co .cc machineclassic .com
myzizzazz .com manmovieonline .com
nascetur .com medlinefils .org
neglite .com mibubikuolay .cjb .com
newtopbug .com nakedfridaydresscode .com
nocireho .com natebennettfleming .com
nonstopacc .com ouydejuhemeco .cjb .com
noting .in patogh-persian .persiangig .com
palkoitag .com programsonworld .com
photo-msn .com protectpc198 .co .cc
pikerjer .com protectpc199 .co .cc
plehat .co .cc protectpc200 .co .cc
puskaybust .ru qd .netkill .com .cn
pwgegrsdfs .ru rapidloadmedia .com
qeborga .com rapsvsvsn21 .net
qlieyet .com saskiasommer .kilu .de
qq9876 .info securetracker .net
rapid-debug .in securitysoftware2010tech .com
rapidhost .in securitysoftwaretech2010ltd .com
rearemr .co .cc seemoreshows .com
restend .com sefergtrserfv .asia
rpzrptr .co .cc setmediaarea .com
sedrnow .info sharedocuments .com
sepi .tw sharemovies .com
skkedu .co .kr shieldsearch .in
socuri .net solid-success .in
solidpool .in superdatamovie .com
sprayfly .com superfreetool .com
sslsite .in supermultimediafiles .com
stolimonov .ru swalltilme .com
stspssp .co .cc syndication-exoclick .com
sudspss .co .cc thebestmoviehelp .com
sutadut .co .cc top-ballsxxx .sytes .net
swalltim .com topinfomovie .com
t2w4r .com topmoviewww .com
t3ded .com toptoolmedia .com
tastyimage .ru transworldlife .com
tawutodo .cc trovaonovo .hpg .com .br
telaut .org tube60-pics .sytes .net
thesedr .info update .infohold .co .kr
tradbox .net varvavabest .com
tunedads .com voiceguard198 .co .cc
whoqb .com voiceguard199 .co .cc
wintv .com .au voiceguard200 .co .cc
xdxny .com westtrafficanser .com
xxns1 .info yalovasehri .com
yadr0 .com yourloadzone .com

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…


.

site delistings: marmolesexoticos.com and ewzine.com

Posted on September 10th, 2010 in Removed Domains by dglosser

marmolesexoticos.com and ewzine.com have been delisted and will be removed on the next update

DNS-BH Update: 218 New Malicious Sites

Posted on September 8th, 2010 in fastflux,fraud,iframes,New Domains by dglosser

Sources include vxvault.siri-urz.net, wam.dasient.com, scamfraudalert.wordpress.com, db.aa419.org (full list is always in the domains.txt file):

66191 .com uk-certegroup .net
awaue .com uk-monetgroup .net
euuaw .com uk-plutogroup .net
kusika .ru uk-profigroup .net
ntcub .com uk-topazgroup .net
spotpc .in us-certegroup .net
vid2c .com us-fortegroup .net
aeaaea .com veniusa-group .net
eracou .com bindaasspaces .info
grafrz .com business-arena .net
itloads .in file .sidegreen .com
jambill .in finconsult-ltd .net
lentive .in forte-usagroup .net
msxxw .info high-fivegroup .net
oeooea .com highfive-group .net
raone .info indigouk-group .net
secowo .com instagroup-usa .net
secree .com megadrive21 .com .br
uoauer .com metaphor-group .net
krakeib .com pluto-groupltd .net
lmwoool .com preciseusa-inc .net
razasur .com run-setup-soft .com
tenepix .com seepremierhome .com
vamos01 .com ssl-validation .net
dullplane .ru tokedeamor .kit .net
glowwith .net uk-indigogroup .net
italbeit .com us-fortisgroup .net
leetfile .com zangievsoft46pd .in
pohudieka .ru antiviruspc2010 .com
ship-gsc .com digitalagevideo .com
swaydata .com espetacular1001 .com
tuksaliz .com fortisusa-group .net
tuksnalo .com get-me-soft27 .co .cc
youngarea .ru havanawebcigars .com
favoclick .com hermes-delivery .com
fcvjnfasf .com ikk-kntdz .myvnc .com
msdzssd .co .cc ikk-najdz .myvnc .com
ohmaebahsh .ru metaphor-usainc .net
primoserv .biz minefieldrunner .com
promo-park .ru olston-groupusa .net
sse3sms .co .cc onlinescanxppro .com
ssezamd .co .cc photospace-view .com
tradexoom .com precisegroupgov .net
uncoemzoy .com rating-groupinc .net
5349589022 .com rating-webgroup .net
anynetdata .com relydybyiio .cjb .com
cgi05-ebay .com somefilesonline .com
codingcert .com uk-mercurygroup .net
ehrezevmib .com update .keycop .co .kr
godinneers .org us-centrumgroup .net
inkognittto .ru us-kryptongroup .net
inoxidella .com windows-defence .com
italine .com .br businessupdates .asia
mccohen-uk .net centrumusa-group .net
misfitsone .net crossdressdirect .net
tipsticker .com equityfinanceplc .net
34592349505 .com invincible-group .net
freejyfc19 .info iufebifihouk .cjb .com
goathuskies .com kryptonusa-group .net
kameraesmer .com mercury-groupllc .net
mccohen-ltd .net sevenseasexplorer .de
mysnapfish .info thelime-groupinc .net
sohousa-inc .net uplandstableland .com
speedpackcs .com us-metaphorgroup .net
topdatasite .com us-sidelinegroup .net
54tfgc5g55 .co .cc xz987765 .fileave .com
atg-groupgov .net best-pc-guardever .com
atg-usagroup .net business-arenaltd .net
bestdataline .com chemconsulting .com .cn
bestdatalist .com dhlexpresscourier .com
cvg-groupinc .net dianesomerville .co .uk
downloadavr3 .com facilitatedigital .net
fotomensagem .biz olston-firstgroup .net
hotel-on-line .ru sidelineusa-group .net
karplogistic .com soft-security70 .co .cc
mechamaniacs .com tyototyhofitu .cjb .com
moneyplat-uk .net uediiologiryc .cjb .com
nemohuildifsd .ru uhjgzu35 .uh .funpic .de
paodecoco .eng .br uk-middlemengroup .net
promoupdate .info us-middlemengroup .net
scenenheard .info us-quartzitegroup .net
tmg-groupusa .net vayvay .persiangig .com
us-luckystar .net yqenigemyrejy .cjb .com
us-sohogroup .net adobeflash-ver95 .co .tv
us-venigroup .net clean-your-pc198 .co .cc
youraesthete .com clean-your-pc199 .co .cc
atg-grouptech .net clean-your-pc200 .co .cc
awm-antivirus .com horizon-vendenheim .com
basemediasite .com quartzite-groupusa .net
beststatfiles .com uk-invinciblegroup .net
business-aren .net vkd-kntqw .bounceme .net
caramelloinze .net suporte-servidor .pro .br
codenewsworld .com update .k-security .co .kr
cvg-grouplead .net vkd-najdi .serveblog .net
finconsult-uk .net bokj-bafxf .servepics .com
finlinkonline .com bokj-sftxb .servepics .com
glinedelivery .com videos50-video .sytes .net
hahablaururu .info interbwinonline-promo .com
lime-groupusa .net video36-hosting .sytes .net
monet-ukgroup .net crawlspace-interactive .com
moneyplat-ltd .net flash65-pics .servehttp .com
precise-group .net statistics-cyberpank .co .cc
profiuk-group .net host77-videos .servehttp .com
sec-soft198 .co .cc google-traffic-analytics .com
sec-soft199 .co .cc site-boobsxxx .redirectme .net
sec-soft200 .co .cc videos25-flash .servehttp .com
smmovelovegal .net log_account_activation .t35 .com
techstockdata .com professionalmedicalservices .org
topazuk-group .net a7e4c531df612cf917e9e99e1417e1d8 .co .cc

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.Any use of this list commercially is strictly prohibited.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.Any use of this list commercially is strictly prohibited.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…

Underscores in domain names II

Posted on September 7th, 2010 in Domain News by dglosser

In a previous post, we mentioned that if  a domain  or more likely a subdomain  contains an underscore, bind will not start unless some ignore statements are added to the to the named.conf file.  However, there are security risks associated with setting these options globally.

One fan of this blog and blocklist suggested that  the following would work:

zone “zone_name_with_underscore.maliciousdomain.com” {type master; file “/etc/namedb/blockeddomain.hosts”; check-names ignore;};

The key here is the check-names ignore directive is placed in the line in question and would not be a global directive.

Please let us know if there are any issues with this; otherwise we’ll add it sometime in the next week or so.

List Refresh: 1635 domains removed

Posted on September 5th, 2010 in Domain News,Removed Domains by dglosser

1635 stale domains were removed. The list of removed domains is located in the file called “removed-domains-20100905.txt

c&c, zeus, rogue, fastflux, exploitpack domains

Posted on September 4th, 2010 in exploit,fastflux,New Domains,rogue antivirus,zeus by dglosser

214 new c&c, zeus, fastflux, rogue, exploitpack and other malicous web sites. Sources include atlas.arbor.net, safebrowsing.clients.google.com, secuboxlabs.fr (full list is always in the domains.txt file):

5b .ro anuegonahui .cn
bx1 .biz carombolkas .ru
esong .in csdupdates .net
ly6k .com dolchevitos .ru
msdrv .ru fgdimage77 .com
nisol .ru imageaseea .com
z .ins .ge jhcomp1609 .com
ajxyf .com latrigalle .com
athlu .com movierapid .com
bsnes .biz newplayer .info
lbook .org ricksmagic .com
rauret .fr seksihayat .com
skoty .net thecooljob .com
to .zuo .hu ujkdiuejdk .com
velcom .in whitehorce .com
yadr7 .com witsolapur .org
100du .info 2010player .info
baqa-g .com adverter13 .info
coower .com bestdealair .com
demko .name bigworlddvd .com
ilsual .com core .pr0fit .net
jessw .info demoitmedia .com
leyew .info dsgfopllllc .com
lienket .us engagessite .com
msxxy .info hilary-blog .net
phamtu .net imagesshack .net
rizzle .net poseidonbot .com
s33kol .com premium-cdn .com
139139 .info purplespace .org
baaswer .com sex-holding .net
birtpix .com weelsjanezi .com
cocainy .net 001100110011 .com
cpadown .com ads-platform .com
dadi518 .com brendonlfile .org
elgaleon .cl dataandvideo .com
ezadguf .net deals-health .com
goodload .in dierobarso .cz .cc
incode .name fastirktreis .com
inexper .com justedigital .com
kebsyno .com kiamagentoss .net
opllllc .com mortalconbat .com
ossirep .com sefergtrserfv .ru
pixieti .com talkingtopic .com
salomko .com thestronker .info
sitehip .com video-shares .org
ad2312w .com voloboe3000 .info
torrich .com 3405902934059 .com
youtubes .me dataentryfilm .com
688set .co .cc peskostruikaz .com
casual .in .ua sed-machinery .com
cnjsoere .com yoursolomedia .com
draftwre .com browserservices .in
freep2p2 .com centralpassage .net
gaxnet32 .com cooldreamsfilm .com
ledillio .com defensiblesite .net
littlebiz .us fotosbasesite .info
simariko .com kosmoukmanages .org
soulinyou .ru mysticfamiliar .com
velcom .co .in thebogeydoctor .com
viztip .co .cc trinnitti-soft .org
011101101 .com bot .gravityz3ro .com
19sesse .co .cc designmywindows .com
349209233 .com hrfroltartemo .cz .cc
458928409 .com mediadatadirect .com
82801se .co .cc mediafactonline .com
929399s .co .cc offseasonstudio .com
935807s .co .cc pc-cleaner196 .co .cc
ablesite .info pc-cleaner197 .co .cc
beastdeal .com pc-cleaner198 .co .cc
bnestdeal .com pc-cleaner199 .co .cc
cahgofoneu .ru pc-cleaner200 .co .cc
cdn-light .com solomovieonline .com
ewbf-2010 .com superloadmaster .com
fajopalos .com trafficpagelf .co .cc
fedukirep .com windowshopworld .com
free88888 .com countdomainserv1 .com
hezhthu .co .cc digitaldatatrust .com
lydwaudoy .com digitalmediatool .com
memorija .info onlineservice1 .co .cc
mywndzn .co .cc qualityfilmtools .com
saynotocp .com soft-secure196 .co .cc
sdst351 .co .cc soft-secure197 .co .cc
sdz02sd .co .cc soft-secure198 .co .cc
secr86839 .com soft-secure199 .co .cc
sezlsez .co .cc soft-secure200 .co .cc
sezsezd .co .cc stonetabletguide .net
slsmdns .co .cc xpressdrugdirect .com
smmseza .co .cc digitaltoolsmiths .com
snm75sd .co .cc downloaddemomedia .com
snmsdzs .co .cc e-market .kfcdc .edu .tw
sseusms .co .cc fastfiledownload .info
ssezsas .co .cc zeus .bnetinvaderz .com
ssezsea .co .cc adobeflash-ver81 .co .tv
susdzss .co .cc award-space-host .co .cc
sutasdz .co .cc electronicdatacoms .com
suzusdz .co .cc madbomberfireworks .com
hope2012 .info mypostcards .weebly .com
szsdmst .co .cc monsteroutdoormedia .com
szsemse .co .cc noticiasnet .tempsite .ws
szsezse .co .cc premierdigitalvideo .com
szysese .co .cc free-file-exchange .co .cc
szyseyz .co .cc wellnesstabletspills .net
szzssda .co .cc comrade007 .3utilities .com
tehnobeton .ru free-scanner-online .co .cc
wahdohotel .nl healthwellnessnetwork .com
yy112233 .info tablethealthapothecary .com
1001001110 .com a8228djjnedu7e8hd83ndd43d3d3 .com
abletoday .info

The malware block lists provided here are for free for noncommercial use as part of the fight against malware.

Any use of this list commercially is strictly prohibited.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror:  http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, and others…