zeus, drive-by, malspam domains

Posted on March 29th, 2011 in exploit,malspam,MoneyMule,New Domains,zeus by dglosser

Domains associated with malspam, moneymules, zeus, etc. Sources: www.spamhaus.org, safebrowsing.google.com and others (Every source is always listed in the domains.txt file):

mamj .ru poggmedic .com
aimos .fr jobdatings .net
zz6b .com kpqqkorv .co .cc
12s83 .com kpxrpplv .co .cc
dfio5 .com krdbqfhe .co .cc
gemini .ee poneslas .cz .cc
newnut .ru pop-stats .info
sedvb .com tomwrezv .cz .cc
1e2e4 .info frinova2005 .com
dezeta .com onlinemacro .com
klz1 .co .cc pizdec .sx33 .net
me12 .co .cc softway2011 .com
mog5 .co .cc tendonina .co .cc
slp2 .co .cc waseetstore .com
slp4 .co .cc alisa-carter .com
slp6 .co .cc blank-record .com
slp8 .co .cc derwart-group .at
snk4 .co .cc excitingmovs .com
snk5 .co .cc hire-centers .com
snk6 .co .cc ping-matic .co .cc
snk7 .co .cc collins-ltdusa .cc
srtb .co .cc ephes-groupllc .cc
sru1 .co .cc newsoftwareltd .ru
sru2 .co .cc securuayetres .net
sru4 .co .cc statistic-www .com
sxp4 .co .cc get-backlink .co .cc
sxp9 .co .cc greatbargainz .info
t2x0 .co .cc lowcostcoiffure .fr
thdx08 .com pflanzen-import .de
ushuqb .com dontstop2346210 .com
xxqc .co .cc master-data-door .in
7speed .info popularcasinoex .org
ahbazen .net cam-girls-online .com
pre4sys .net softantivirfirst .com
swetanu .com itmastersoft .narod .ru
teylsoft .ru plantacao44 .hdfree .in
banpox .cz .cc tikraiarbusigeras .com
eguyendu .com softnetwork-safe .co .cc
findugly .org basicprotectionxa .co .cc
issa-net .com lessthenaminutedeal .com
jiongjia .com pillrxdrugstorechains .at
szivacsek .at welcometotheglobaliscom .com
cgozctk .co .cc guard-securitypersonal .cz .cc
for-fra .co .cc pedrogomes1975 .sites .uol .com .br
ilovekeks .biz s15248477 .onlinehome-server .info
mialepromo .ru

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from mirror if possible: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…