Feed

2011 May 16 Update – 279 Domains to Blacklist

Posted on May 16th, 2011 in New Domains,rogue antivirus,Spyeye,Trojans by dglosser

279 domains added from safebrowsing.google.com, amada.abuse.ch, tristatelogic.com and other sources (Every source is  listed in the domains.txt file):

cnxc .com ytwxizuw .cz .cc
hz88 .com yurzdtas .gv .vg
zsgr .com yxnmpnxx .cw .cm
zsjt .com 131fafrfr .cx .cc
adsfff .tk antivscanct .com
iduba .com epad-reader .com
yybtv .com popavswinxp .com
diyasmw .cn programmall .com
falokmp .cn thobandis .cx .cc
infobj .com xn--hvs035e .com
lady11 .com xn--omsq06a .com
zm2008 .com adobe-acrobat .us
zsbaby .com adriejurus .cz .cc
zsbook .com cordawield .cx .cc
dhoqoyal .cn fixerror-404 .com
fhijafif .cn savescansoft .com
lhamedep .cn scanerafrago .com
shrm .com .au avsscanattack .com
777inter .net carolinsoll .cz .cc
diorchid .com ehagcftygceyy .com
oxyboost .net limewiremusic .org
popavwin .com open-office-3 .com
avsnowwin .com saveornotsave .com
digicig .co .za saveornotsave .net
jioua82 .cx .cc soundavswinxp .com
lc-player .com xn--brv05ylox .com
lopolop .cz .cc eweyuyitjbvsdf .com
tobmarket .com five-star-flix .com
zer0day .co .cc frostwire-2011 .com
ahffjvhe .cz .cc live-online-now .tv
aluypmnj .cz .cc nero-d0wnloads .com
aompzqql .cz .cc quantummechanic .cc
aqzkmfjw .gv .vg saveornotsave1 .com
bdlyhmir .cw .cm saveornotsave1 .net
btfjackz .gv .vg skype-d0wnload .com
cdkbxfdo .cz .cc thepopavswinxp .com
cgntkhqw .cz .cc xn--nqv968a7ur .com
cidlsfqa .gv .vg xn--rssu71d4ti .com
cjvcnnlp .gv .vg xn--xfr829bcne .com
cldqkzwe .ce .ms avsnowwinonline .com
coreruln .ce .ms enscanantivirys .com
dblidubo .cz .cc frostwire-music .net
dfvygcgj .cz .cc inningsvsnowwin .com
dhkmpdsu .co .cc itunes-d0wnload .com
djmkkdjy .cw .cm ousatcoyfu0t3 .co .cc
dkseoaxx .cz .cc pdf-10-download .com
dzpseihn .cw .cm popavswinonline .com
epad-media .com save-suiteguard .com
eqzdgdfr .cw .cm antisixrysscanxp .com
evcolwcc .gv .vg antivirusliberal .com
fdulbvmc .gv .vg avsnowtournament .com
feqtexgu .cw .cm easy-sellerguide .com
fgmoyywd .cz .cc easyfrenchlesson .com
frptsdey .cw .cm farmville-expert .com
fsmdigtp .cw .cm fast-tvdownloads .com
ftjnfqfj .cw .cm fasttv-downloads .com
gjjbbrzs .cw .cm find-niche-guide .com
gqjpkngj .cz .cc live-soccer-2010 .com
grlvgpyl .cz .cc livegolf-channel .com
grlwlgab .cw .cm quicktime-player .net
gsfmetre .gv .vg save-power-guard .net
hbthvvfr .cz .cc saveonly-checker .net
hdmibzur .cz .cc saveonly-scanner .com
hskztkis .cw .cm tournamentavswin .com
iisoshvy .cz .cc antivirysprotests .com
ilhikyou .gv .vg avsexamineprotect .com
jbenxfhd .cz .cc elitetv-downloads .com
jljipxmu .gv .vg limewire-2011-now .com
kcxvdpha .cz .cc limewire-software .com
kgpxjchg .cw .cm limewiremusic2011 .net
kjcbowkc .cz .cc limewiremusic2011 .org
kjimsvjp .cz .cc live-rugbychannel .com
klqkluay .cz .cc myantivirysscanxp .com
kqdlcacl .ce .ms myxpscanantivirys .com
kvnfkpgu .cz .cc popavswinxponline .com
lkgsmiib .cw .cm savesecurityguard .com
lnfqfcha .cw .cm frostwire-s0ftware .com
lraroocn .gv .vg irfanview-download .com
mcpunucv .cw .cm lc-player-download .com
miviytgn .cw .cm lime-wire-download .com
mjujqmvn .cw .cm live-boxingchannel .com
mlfwvzcv .gv .vg live-hockeychannel .com
mqvljeyw .cz .cc live-soccerchannel .com
mszupthq .cz .cc livecyclingchannel .com
mxfdxjae .cw .cm save-security-foru .net
njhokxdv .cw .cm theantivirysscanxp .com
njpfsdey .co .cc antivirysscanonline .com
nkmhthjn .cw .cm download-access-now .com
nyjianming .com fastmovie-downloads .com
ogqxlezo .cz .cc latest-2010-version .com
ophlffuj .cz .cc latest-new-download .com
oppuvjyz .cz .cc live-boxing-channel .com
osrlzxjz .cz .cc live-cricketchannel .com
oynzdvdx .cz .cc live-online-football .tv
pgkltehq .cz .cc live-sports-forpctv .com
pifavpom .cz .cc live-support-ticket .com
pjdipnhp .cz .cc mp3-music-d0wnloads .com
plrcdkeh .cw .cm openoffice-d0wnload .com
plsmvtyi .cz .cc openoffice-s0ftware .com
plsoapes .gv .vg popavswintournament .com
popavwinxp .com save-suite-sentinel .com
poweqtjd .gv .vg scan-protectionbest .com
ppqnvwat .cw .cm senatescanantivirys .com
ptfbickb .cz .cc xn--kbr59t53njlfwvj .com
puonjlmn .gv .vg antivirusreleasescan .com
qlvzuhns .cz .cc elitemovie-downloads .com
qwxrodaf .cz .cc limwire-p2p-download .com
qxskbcoy .gv .vg live-contact-support .com
rbhpqdpf .gv .vg live-footballchannel .com
rgvwexsu .cw .cm live-product-support .com
rmvjpdkd .cz .cc livebaseball-channel .com
rpynhmpd .gv .vg livefootball-channel .com
rsaqbycq .cw .cm save-securitydefense .net
rwnymvnp .cw .cm antivirysscanxponline .com
rygeksvb .cw .cm download-2010-version .com
saveonly4u .com exploit-pennyauctions .com
slfridow .cz .cc latest-online-version .com
tbylbbtn .cz .cc latest-skype-download .com
tirctzkr .cw .cm latestmobiledownloads .com
tjvoiuic .cz .cc limewire-d0wnload-now .com
tpnodvou .cz .cc live-lacrosse-channel .com
trtbfbig .cz .cc live-wrestlingchannel .com
ttsayxum .cz .cc malwarebytes-software .com
ufhzpbjb .cz .cc easy-twitter-followers .com
uydaqjjm .cw .cm fightingchannel-online .com
uywgxabe .cz .cc itunes-player-download .com
voxddskx .cz .cc limewire-2011-download .com
vrslhvsf .cz .cc live-basketballchannel .com
wcwrwpea .cz .cc malwarebytes-d0wnloads .com
wojbupce .cw .cm antivirusfreescanonline .com
xdptqtip .cz .cc federalenergyincentives .com
xhemeehj .co .cc latest-new-pdf-download .com
xmmabtjn .cw .cm live-watersportschannel .com
xn--nqvp8a .com antivirusfreescancentral .com
xnjmxwlz .cw .cm federalenergy-incentives .com
xrwesxhx .cz .cc fastscannerdefencecapabil .com
ydcmblin .gv .vg live-football-2010-online .com
yfcbhkrl .cw .cm live-cricket-online-access .com
ymijviyt .cz .cc ip-173-201-152-5 .ip .secureserver .net
yrbpaubd .cz .cc

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Another big update: 266 new domains. Five more “immortal” malware domains

Posted on May 13th, 2011 in iframes,New Domains,rogue antivirus,Trojans by dglosser

Another huge update with domains originally listed at www.tristatelogic.com, safebrowsing.google.com, amada.abuse.ch and others (Every source is  listed in the domains.txt file)

Five domains which were removed from the list have been relisted (i.e. repeat offenders) and have been added to our list of “long-lived,  “immortal” malware domains.

1661666 .com amginternational .com
55fafre .cx .cc antisixrysscan .com
5xse .com antivirus-ryal .cx .cc
alhana .hu antivirysscanxp .com
antivirusan .com antivirysseexp .com
antivirysscan .com applebottommagazine .com
ares-ultrapro .com audio-editor-recorder .com
aresultra .com avast-d0wnload .com
asgdfooooywgf .com avast-downloads .com
asphostserver .com avg-2011-download .com
averaph .com avira-antivir-software .com
avg-downloads .com avira-antivirus-scan .com
avscolourcan .com avsscandefencegroup .com
aydeeegdweyfw .com aware-download .com
badfquywefhwh .com best-antimalware .com
banditcanyon .com best-chef-recipes .com
bardpress .com best-skype-software .com
bashdgfyudgew .com bestmovies-net .com
bavisoft .com bodybuilding-2010 .com
bestlimewire .com book-download-center .com
bestmp3-mix .com bookdownload-center .com
bestorgblog .net browsernewdownload .com
bfivuzop .cn burnerdownloads .com
bhorchhi .com burning-rom-new .com
bimsha .biz business-flash .net
bizop3tester .com buy-all-wholesale .com
bookholo .info cardtransaction .com
boolin .in cdburner-d0wnload .com
burn-2011 .com cochinpropertymart .com
burner-rom-9 .com complete-antivirusprotection .com
burning-rom10 .com completeantivirusprotection .com
bzefowum .cn computerhorse .info
c4k-india .org contacts-navigator .com
cajshcfytwgec .com counter2b .zapto .org
capnador .net criminalupdates .com
client-2010 .com cureyeast-infection-now .com
corporativo44 .com current-download-online .com
creditholo .info datingmatch-connection .com
cukerbuker .com ddos-protection .cx .cc
curem .net descargar-musica-2010 .com
cvvhost .com descargar-musica-2011 .com
dashcfatfeygf .com designerdiscountclub .com
datumer .com dftuhgsefwrger .com
dbabyshop .com download-antivirus-now .com
delivery001 .com download-antivirus-pro .com
delivery002 .com download-antivirus2010 .com
delivery003 .com download-istore .com
delivery004 .com download-latest-skype .com
douate .com download-musicpro .com
download-pdf9 .com download-new-version .com
drocuwil .cn download-new-voip-2010 .com
durley-artau .net download-official-version .com
dvd-shrink .us download-online .org
earth-2011 .com download-pdf-now .com
famous-poles .com download-voip-2011 .com
fanclubmania .ru downloadfor-all .com
fancytech .com downloading-new .com
fatboyblog .com downloadmusicnew .com
fire1 .de durley-art-group .cc
freesexvip .com dvdshrink-download .com
gagaavswinxp .com dynamicdashboard .com
groupknife .info earth-download-2010 .com
hbsfhwerbxn .co .cc earth-download-pro .com
horsecode .info egyptvirysscan .com
horsegreen .info helby-group-ltd .cc
horsemoney .info incubationcentre .ie
horseyou .info internetcountercheck .com
hwyprowler .com lakerscanneravs .com
jabbawockeez .us masterpiece-group .cc
javaneiran .net masterpiece-group .org
jona-ardyn .com mayerpopavswinxp .com
khdi .or .kr mitissanservice-group-ltd .cc
koertig-gmbh .com mitissanservicegroup-ltd .com
love-adambiz .net moghar .webphoto .ir
love-adaminfo .net myantivirysscan .com
love-adamnet .net newpopavswinxp .com
love-adamorg .net paulcompany .co .uk
lubawskie .yoyo .pl popavswingroup .com
luxurylollies .com popavswinxpgroup .com
m2625m .in promisestoghana .com
maribit .com royalbuffetgrill .com
mark-duncan .com safeguardinscanner .com
markizak .com safeguardinsoft .com
mceheo .co .cc safeinternetsoft .com
mvtygvmk .co .cc safemasteragatist .com
mypopavswin .com safemasteramentive .com
mypopavswinxp .com safemasteravoyelle .com
n-age .net safemasterbroothy .com
newpopavswin .com safemastercleagern .com
newsunky .com safemasteryellart .com
noticiah .com safeonly-guard .com
p-file .su safesecurity-soft .net
petburi .go .th safesecuritysoft .com
piast-poland .com safesuite-sentinel .com
popavsalbum .com safesuite-soft .com
popavslose .com safty-guard-avsoft .net
popavswin .com safyour-pc-station .com
qlive .co .kr satbledifenceav .com
qyrzfhilst .ru sauna .katowice .pl
radiosol1230 .net save-internetsoft .com
rijagt .dk save-networkchecker .com
safezonec .com save-networkholder .net
safezonec .net save-onlysentinel .com
sanahr .com scanergetsampy .com
save-only4u .com scanprotectionfactorsoft .com
scanercrosyl .com scanprotectionfactorxp .com
scanergister .com scanprotectionfilterxp .com
skc .org .sg scanprotectionfunctionssoft .com
sktco .com scanprotectionfunctionsxp .com
snowshed .net scanprotectionkansasxp .com
the-zen .co .kr scanprotectionmeasuresoft .com
the1iwant .com scanprotectionmeasurexp .com
thepopavswin .com scanprotectionmethodssoft .com
toppc-keeper .com scanprotectionmethodsxp .com
toppcchecker .com scanprotectionofficessoft .com
toppcguard .net scanprotectionofficesxp .com
toppcholder .net secretyoutube .com
toppcmaster .com squit-group-llc .biz
tsindia .biz top-suite-holder .com
ttmusic .co .kr top-your-checker .com
turbokitstr .com top-your-holder .net
vsco .ru top-your-keeper .net
wiebeavswin .com toponly-checker .com
xtrarobotz .com toponly-checker .net
z .azxr .net topscanscanner .com
zkarghmu .cz .cc turkish-hospitality .com
zmnqpyuf .cw .cm updatebackupserver .com
znqbjrhm .cz .cc updatebackupserver .kz
zqabecxl .cw .cm updatebackupserver .ru
zrrvtaxq .cz .cc updatebackupserver .su
zsritpowodowo .pl watercolor-gallery .net
zsylkctv .cw .cm webantivirysscanxp .com
zxaqquwz .cz .cc xpscanantiviren .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Lots of Rogue AV/Scareware domains, zeus and other malicious domains

Posted on May 9th, 2011 in New Domains,rogue antivirus,zeus by dglosser

Over 180 new Fake AV/Rogue Domains, zeus and other harmful domains. Sources include securehomenetworks.blogspot.com (a misnomer if I ever heard one as James’ “DNS SuperBlackHole” can help secure any network), www.spamhaus.org, and others (Every source is  listed in the domains.txt file):

2010-new .com 10-new-download .com
2010-pdf-pro .com 100-percent-free .com
3-suite .org 2010–pdfreader .com
3bxc .com 2010-download .com
5-startv .com 2010-new-version .com
7-pro .com 2011-download .com
9981ly .com 9-burning-suite .com
9pdf-new .com 9-new-version .com
9pdf-now .com 9pdfdownload-new .com
9pdf-pro .com a4h9uploading .com
9pdfdownload .com absolute-searh .com
acer9 .com acrobat-software .com
advneeze .net activeprocess .com
al-salamyiu .org adaware-d0wnload .com
alcobro .net adaware-freescan .com
ancytd .ru antivirus7reg .com
antiviryssee .com antivirusfreesee .com
avg-d0wnload .com antivirussafety .com
bestofnet .com .ua appleipodpack .com
bigzalupen .ru avscandefence .com
blockbadsite .com avsnowwingroup .com
brexd .ru avsscandefence .com
caserdddt .com best-antivirusk0 .com
cokk87 .com bonaquadjriga .ru
compaq4 .com combinationsacc .com
coruwx .ru computer4geeks .com
decrd .ru cruelstories .com
esiand .ru cybersearch-0 .com
face-search .net fi1efre-11jo .com
grisco .go .ro filefre-llj0 .com
hdjfskh .net funnys .webphoto .ir
homepc .it glooer-searh .com
hostne .ru hdfkslscanmaxw .co .cc
idxxd .ru jplclxivworikjm .net
iole .in karbjurator .co .cc
mentld .ru livej0rny-shop .com
mlmy .edu .pl livejorny-sh0p .com
mynrrljt .co .cc necessary-softav .net
n9-media .net netzdvsecure .com
nejucam .ro new-bestav-soft .com
newsavecry .com new-personalav .com
newsavedyss .com newblueshield .com
newsaveent .com no-regretforit .com
newsaveesed .com no-regretforit .net
newsavefily .com noregret-forit .com
niceamgot .com noregret-forit .net
niceapgot .com noregretfor-it .com
nicecegot .com noregretfor-it .net
niceeadgot .com noregretforit .com
niceeurn .com noregretforit .net
nicefws .com onlypcprotection .net
nicegasgot .com popavswininc .com
nicehum .com popavswinxpinc .com
niceily .com popularsofscan .com
niceinde .com powerfullsoft .com
niceing .com r-superengine2 .net
nicemfa .com r-superengine3 .com
nobleaped .com r-superengine3 .net
nobleawke .com r-superengine4 .com
nobleaze .com r-superengine4 .net
oppavp .ru r-superengine5 .com
quake2012 .ru r-superengine5 .net
richguards8 .com r-superengine6 .com
richguards9 .net r-superengine6 .net
riposteron .com r-superengine7 .com
riposteron1 .com r-superengine7 .net
riposteron2 .com r-superengine8 .com
riposteron3 .com r-superengine8 .net
ruphost .ru r-superengine9 .com
safe-zoneer .net safe-clean4u .com
safe-zoneks .net safe-cleanholder .com
safe-zonell .net safe-keeper10 .com
safe-zoneni .net safe-keeper6 .com
safe-zonewi .com safe-keeper7 .net
safeafor .com safe-keeper8 .com
safeais .com safe-keeper9 .net
safeazon .com safeclean-army .net
safebly .com safeclean-foru .net
safebrud .com safecleanguard .com
safecps .com scakpdupad .co .cc
safeein .com searchforbiz .net
soslow .cz .cc spybot-d0wnloads .com
thelimewire .com spybot-s0ftware .com
tlline0-cas .com thefrostwire .com
tm700 .co .cc turaminich .co .cc
webpigs .ru voice-0ver-ip .com
xywy .com vubwbtdgcrvnwcl .biz
xyxy .net vuze-d0wnload .com
zalupkin .ru winmx-downloads .com
zoomt .net

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

More Rogue Security & Rogue AV, Zeus and other Badness

Posted on May 7th, 2011 in New Domains,rogue antivirus,Trojans,zeus by dglosser

Lots of Rogue Antivirus Domains, spyeye, zeus, and other malicious domains. Sources include zeustracker.abuse.ch, www.sacour.cn, blog.sucuri.net & others (Every source is  listed in the domains.txt file):

1st-consult .com alfortdkm73 .awardspace .biz
2g6r5fgcz3 .cz .cc bbcosamavideo .mo .cx
543ge .cz .cc fogodeaquario .com .br
adam-love .net guardvelpitumpc .com
andromari .cx .cc guardvldbayerpc .net
avi7o .co .cc hhoxaeiru1190ddk .net
badcobro .net lessthenaseconddeal .com
banderlog .org main-softguardsh .net
betony .cz .cc main-softguardsk .net
clickbroken .org main-softguardsp .net
clickclever .org main-softguardst .com
cryingfreemen .ru main-softguardti .com
findaddition .org open-soft-guardian .net
findadjustment .org osamalivevideo .cc .im
findadvertisem .org overall-tool-of-secure .com
findinca .org pc-best-doctor1 .com
fucktwice .in pc-best-doctor2 .com
ginevenessi .com pc-best-doctor3 .com
glickz .in pc-best-doctor4 .com
gtrregrw .cz .cc pc-best-doctor5 .com
helptestsoft .com perfect-protection32 .com
highlvlguard .com personal-antivir-holder .net
highlvlguard .net personal-cleanholder .com
highlvlguard1 .com personal-networkguard .com
highlvlguard1 .net personal-scanholder .com
highlvlguard2 .com personal-suite-guard .com
hope-soft53 .net personalnetwork-soft .com
hope-soft54 .com personalnetworkmaster .com
hope-soft55 .net personalsecurity-4u .com
hope-soft56 .com polecreekmeadows .com
hope-soft57 .net protectwindowsxpvirusnow .com
hopsing-rot .com protectwinscanneralbum .com
hopsing-rot .net protectwinscannerdriver .com
hopsingrot .com protectwinscannerdrivers .com
hopsingrot .net protectwinscannerinterface .com
jquery4html .co .cc protectwinxpscan .com
junioroops .name protectwinxpscancomputers .com
justatest .cz .cc protectwinxpscancorporation .com
kerrq .com protectwinxpscandefinition .com
langameclan .com protectxpbonescanvirus .com
lastyourmaster .com protectxpboundaryscanvirus .com
leased-ltx .cz .cc protectxpdriversvirusnow .com
legacy-tools .cz .cc protectxpliverscanvirus .com
main-defence .net protectxplungscanvirus .com
martpin .net protectxpprogressivescanvirus .com
micro-chip .ru protectxpscanvirus .com
netfacil .th .im protectxpscanvirusdefinitions .com
netupdate5 .ru protectxpscanvirusdetected .com
new-wughire .com protectxpscanvirusdiseases .com
notyfiwgt .co .cc protectxpscanvirusinfection .com
openlightsoft .com protectyourpcscan .com
opentestoftin .com quevirusscanoxp .com
opofy7puti .cz .cc required-software .com
posmi .net scanantivwinfoin .com
pxcz .cz .cc scanantivwmodelsin .com
quevirusscano .com scanantivwstorein .com
r-superengine9 .net scanantivwtrucksin .com
recatright .com scanaquilanerantv .com
recatright1 .com scanbandieranerantv .com
recatright2 .com scancronacanerantv .com
recatright3 .com scandanceagainantivirus .com
recatright4 .com scannerprotectiondogswin .com
richguards .com scannerprotectiondogsxp .com
richguards .net scannerprotectionexpertsfree .com
richguards1 .com scannerprotectionexpertswin .com
richguards1 .net scannerprotectionfactorfree .com
richguards10 .net scannerprotectionfactorwin .com
richguards2 .com scannerprotectionfast .com
richguards2 .net scannerprotectionfilterfree .com
richguards3 .com scannerprotectionfilterwin .com
richguards3 .net scannerprotectionfree .com
richguards4 .com scannerprotectionfunctionsfree .com
richguards4 .net scannerprotectionfunctionswin .com
richguards5 .net scannerprotectionkansasfree .com
richguards6 .com scannerprotectionkansaswin .com
richguards7 .net scannerprotectionmeasurefree .com
rthlsinks .cz .cc scannerprotectionmethodsfree .com
sajko .co .cc scanprotectionspecialistxp .com
scanantivxp .com scanprotectionsuitesoft .com
searchallow .org scanprotectionsuitexp .com
searchbite .org scanprotectionxp .com
searchmodern .org scansoftdrinkprotection .com
server1 .unibaq .com scansoftdrinkprotectionxp .com
soft-cleaner .com scansoftdrinksprotection .com
stereo .si scansoftdrinksprotectionxp .com
tandriteerbe .info scansoftlandingprotectionxp .com
testurl .ipq .co scansoftprotectionxp .com
tuk .kz soasnovas-radioplay .com
ubuntugid .ru theantiviruzscanner .com
ufogomantisona .com theantiviruzscannerxp .com
upsreleased .cz .cc thedailynewsheadline .com
uvxmedia .info trainingnewgeneration .net
veproxy .com tupostalesyfotos .com
viables .cz .cc vastramworldwide .com
westpres .info zbyasfgydjccxv .com
wretery .cz .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Zeus, Scareware, and more fake security domains

Posted on May 4th, 2011 in New Domains,rogue antivirus,sql injection,zeus by dglosser

lots of fake antivirus domains, zeus, scareware domains. Sources include www.sophos.com, securehomenetworks.blogspot.com, hosts-file.net (Every source is  listed in the domains.txt file):

06et .cz .cc alolipololi .osa .pl
0tdsgov .co .cc antivirbestscan .com
13tdsgov .co .cc bestnacha-site-r .info
1tdsgov .co .cc bestsoftquestnus .net
22tdsgov .co .cc bestsoftwurass .net
23tdsgov .co .cc beststuff-master .net
7hitaxodupi .com compactscannerprotectionwin .com
99ip .ru compactscannerprotectionxp .com
antivirus .cz .cc compactscannerwinprotection .com
bivudywigana .com compactscannerxpprotection .com
bkzbkzz .co .cc consumer-protection-ant-iv-scan-xp .com
bkzblbk .co .cc consumerprotectionantivscanxp .com
bndeu0 .com copy-protection-ant-iv-scan-xp .com
bndeu1 .com copyprotectionantivscanxp .com
bndeu2 .com copyright-protection-ant-iv-scan-xp .com
bndeu3 .com copyrightprotectionantivscanxp .com
bndeu4 .com desktopscannerantiv .com
bndeu5 .com desktopscannerprotectionfast .com
bndeu6 .com desktopscannerprotectionfree .com
bndeu7 .com desktopscannerprotectionwin .com
bndeu8 .com desktopscannerprotectionxp .com
bndeu9 .com desktopscannerwinprotection .com
ciluvekypomow .com desktopscannerxpprotection .com
dinifuxariqi .com dexojovahazyla .com
dioasis .com dygydypinynyx .com
dltbkbb .co .cc fine-stuffmaster .net
dojewoboji .com fine-your-guard .net
dulyfarebacuf .com fine-your-keeper .com
e82x .cz .cc fine-yourguard .net
eadied .net finedrive-guard .com
exposedexbfs .com finedriveholder .net
fepigixypo .com finedrivekeeper .net
fequxukovo .com finefileguard .com
gedynehyze .com finepc-holder .com
gehotigyry .com finepc-keeper .com
govtds30 .co .cc fowyqypacytucy .com
guardedily .com gewexyvunokyk .com
guardedise .com giftedvices .cz .cc
guardedlart .com gocubadywucyle .com
guardedmis .com guardforpc-solutions .com
gurydivadu .com guardian-lab-soft .com
gygipikalyn .com guardian1-forsec .com
gyrahakita .com guardiansec-all .com
gyricehagupy .com guardrchiticpc .com
gyxyqimacik .com guardsuclonpc .net
haeied .net guardsuryousepc .com
hahecekis .com guarduggisspc .net
hahecekis .net intelbackupsrv .su
hand-bending .com jackman-consortium .com
hijocyragap .com jajypyzuzidepo .com
hireremexyd .com jgjs5jfhdkh .vv .cc
hitaxodupi .com jijekoramukiw .com
hsd4hrehdh .vv .cc kelacofotacafo .com
huzomohidid .com lesykywozebyle .com
ivonica .com libynozegokido .com
jvcprocessos .com llantasdelpacifico .cl
jydosucin .com milrphsrqtqpwtwr .org
jyluzovunevu .com nsrnyosqqescloh .net
kkojjors .net pe-antivirus .cz .cc
koduzuwobow .com pifuxevunawewo .com
komeriqoxuri .com progressive-avscan .com
ku3 .in protection-for-you .net
laiaed .net protection-foryou .com
lixumokyfo .com protection-foryourt .net
lrvou .info protection-foryousa .net
luxury-pride .ru protection-foryoute .net
moririnejuf .com protection-foryouti .com
movawypig .com protection-foryouty .com
mpnewsphoto .com protectionforyou .net
muhecuxudy .com punemipaqatyc .com
muzyzywupece .com quickscanprotectionsoft .com
najelijywar .com quickscanprotectionxp .com
nakulpi .net quickscansoftprotection .com
nezutepazew .com quickscansoftprotectionxp .com
nitodocyri .com r-superengine .com
posufejez .com r-superengine .net
profi-softac .com r-superengine1 .com
protect-x .net r-superengine1 .net
puhigygapyhi .com r-superengine2 .com
pydehenena .com radiationprotectionantivscanxp .com
qebinehuh .com requireapriest .com
qyqinisope .com rorylexyzabihy .com
r8m .us rubidanyxorun .com
retro-7-3 .cz .cc rywoxekomecig .com
roskmvnsya .co .be salyzubytedotu .com
rrrpzrp .co .cc scan-again-antivirus .com
rvonrvw .com scan-er-antivnoew .com
scanerjaming .com scan-eranti-vn-oew .com
scanerlboter .com scan-eranti-vnoew .com
scwiiraq .com scan-erantivn-oew .com
secureack .com scan-erantivnoew .com
secureain .com scan-protection-soft .com
seekerfeed .com scanabsolutelyfreeantivxp .com
seodp .info scanadamantivfree .com
skc8 .cz .cc scanonline-desktop .net
tozibapah .com sec-forguard1 .com
traffik113 .ru secure-entired1 .com
tsgz .info secure-networks-solutions .com
twiitter .ru sesokiqufikeg .com
userdoptn .com sisygynilulyh .com
uykn .cz .cc sosefekesylafy .com
variantov .com sozodikuqulec .com
vufekihoto .com supecikasagynu .com
vupuhuzyniw .com top-security-guard .net
vwrwj6 .com top-stuff-guard .com
vydidysur .com top-stuffmaster .net
wepiminymu .com top-suite-foryou .com
wizyvopyla .com vydevelorabik .com
womozedabati .com walireqoxyxyt .com
xomedefanace .com xezarecupohyv .com
y1jl .cz .cc xumakyzolibuhy .com
y4xt .cz .cc xygorinazecit .com
zavewuzykubo .com zidacofodafur .com
zoo-mpeg .com

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Blackhat SEO, Osama Bin Laden’s death, Rogue AV

Posted on May 3rd, 2011 in 0day,New Domains,rogue antivirus by dglosser

It was inevitable…. Searches on “Osama Bin Laden Body”  are leading users to malicious rogueware domains antivirus. cz. cc/fast-scan/  and pe-antivirus. cz. cc/fast-scan/hese domains will be blocked on the next update but you shouldn’t wait.   (Source: Secureworks )

An email to your users warning them about this sort of thing  may not be a bad idea.

209 New Malicious Domains

Posted on May 1st, 2011 in New Domains,rogue antivirus,Trojans by dglosser

209 New Malicious Domains associated with Fake AV/Scareware,  Trojans, etc. Sources include amada.abuse.ch, hosts-file.net, malwareurl.com

123tagged .com codescannerprotectionfast .com
admineye1 .com codescannerprotectionfree .com
afepqbrylo .ru codescannerprotectionwin .com
asia-news100 .com codescannerprotectionxp .com
az-antivirus .ce .ms codescannerwinprotection .com
baidunhf .com codescannerxpprotection .com
bervb .com colorscannerantiv .com
best1banners .com colorscannerprotectionfast .com
bofmedic .com colorscannerprotectionfree .com
buygoilkef .ru colorscannerprotectionwin .com
cgfoyekuzj .ru colorscannerprotectionxp .com
codescannerantiv .com colorscannerwinprotection .com
dfkdoirrsaxasods .ru colorscannerxpprotection .com
dhuz .info colourscanprotectionxp .com
dkbq .info compactscannerantiv .com
dushko .net compactscannerprotectionfast .com
emmb .info compactscannerprotectionfree .com
erosway .com documentscannerprotectionfast .com
fotocrak .com documentscannerprotectionfree .com
g450 .in documentscannerprotectionwin .com
gabtag .net documentscannerprotectionxp .com
ghmnl .info documentscannerwinprotection .com
golovushka .net documentscannerxpprotection .com
hdxclipshubabe .co .cc equal-protection-ant-iv-scan-xp .com
hdxclipshubabu .co .cc equalprotectionantivscanxp .com
hdxclipshubaib .co .cc everylittlethingshedoes .info
hdxclipshubaoh .co .cc free-win-laser-scan-antivir .com
hdxclipshubczj .co .cc free-win-lung-scan-antivir .com
hdxclipshubeiw .co .cc free-win-quick-scan-antivir .com
hdxclipshubemh .co .cc free-win-scan-antivir .com
hdxclipshubfgl .co .cc freediagnosticscannerprotection .com
hdxclipshubfvf .co .cc freewinbonescanantivir .com
hdxclipshubfxa .co .cc freewinscanantivir .com
hdxclipshubgdl .co .cc freewinvirusscanantivir .com
hdxclipshubggm .co .cc hdxclipshubkku .co .cc
hdxclipshubgmt .co .cc hdxclipshubkmi .co .cc
hdxclipshubhdv .co .cc hdxclipshublqh .co .cc
hdxclipshubhmt .co .cc hdxclipshublrf .co .cc
hdxclipshubiag .co .cc hdxclipshublsc .co .cc
hdxclipshubioo .co .cc hdxclipshubltm .co .cc
hdxclipshubjoz .co .cc hdxclipshublvc .co .cc
hdxclipshubjpb .co .cc hdxclipshubmow .co .cc
hdxclipshubkhf .co .cc hdxclipshubmpd .co .cc
horrys .in hdxclipshubnck .co .cc
hsey .info hdxclipshubnjn .co .cc
httpsea .com hdxclipshubnta .co .cc
inetspeedup .com hdxclipshubone .co .cc
infoxkmdrg .ru hdxclipshuboxu .co .cc
intermediacorp .org hdxclipshubpex .co .cc
ipchecker001 .com hdxclipshubqkj .co .cc
irishel .in hdxclipshubqrt .co .cc
j-fond .ru hdxclipshubqve .co .cc
jefotherbld .com hdxclipshubqww .co .cc
klassess .com hdxclipshubqzq .co .cc
lock .cpapath .com hdxclipshubrba .co .cc
marksandco .net hdxclipshubrql .co .cc
maxthirds .com hdxclipshubrry .co .cc
moresonline .com hdxclipshubrwt .co .cc
mycentinder .com hdxclipshubsht .co .cc
myflipjam .com hdxclipshubtef .co .cc
mysdt .in hdxclipshubtsg .co .cc
namebrend .ru hdxclipshubtxp .co .cc
njkfq .com hdxclipshubuay .co .cc
ntukjgozxy .ru hdxclipshubuhi .co .cc
nuitanpows .cz .cc hdxclipshubwcj .co .cc
ojsfcpabwm .ru hdxclipshubwgx .co .cc
owsx .co .cc hdxclipshubwyf .co .cc
paradeo .com hdxclipshubxfu .co .cc
passportsoftvi .ru hdxclipshubxph .co .cc
pcehok .cz .cc hdxclipshubyrf .co .cc
petmovea .com hdxclipshubzkg .co .cc
prosafeinside .co .cc hdxclipshubzzq .co .cc
rotyjigibano .ru hostmaster .maxthirds .com
samborai .com imagescannerantiv .com
scanantivwin .com imagescannerprotectionfast .com
secureamas .com imagescannerprotectionfree .com
secureame .com imagescannerprotectionwin .com
secureara .com imagescannerprotectionxp .com
secureawd .com licenseacquisition .org
secureaxle .com liverscanprotectionsoft .com
secureaze .com liverscanprotectionxp .com
securebritartpc .net lungscanprotectionsoft .com
securebtus .com photoscannerprotectionfast .com
securebum .com photoscannerprotectionfree .com
securecaty .com photoscannerprotectionwin .com
securechin .com promosyongazetesi .com
securecoe .com scanagainantivirus .com
securecys .com scanagainantivirussolution .com
securedjer .com scanagainantivirussolutions .com
securedyl .com scanantcolonyivfree .com
selfhost .nl scanantivirusvwin .com
smaksoft .ru scanantivwdealersin .com
stx .nl scanantivwenginesin .com
top-file-keeper .net scanantivwgolfin .com
top-filemaster .com strong-power-defense6 .net
top-only-foryou .com swt .sawankalok .go .th
top-pcguard .com top-guardin-master .com
txtpui1224 .orge .pl top-internet-scanner .com
weatherxml .net top-internetforu .com
werlijokityp .com top-internetforyou .com
winkbuzz .net top-internetguard .com
wnoayieqpz .ru top-only-scanner .com
xonuhoregovi .ru vgob .infosky-protection .com
ypryfe7 .stx .nl wellcheckmypower .info
zadeway5k .cz .cc

This malware block lists provided here are for free for noncommercial use as part of the fight against malware. Any use of this list commercially is strictly prohibited without prior approval.

Please help to keep this site free and donate whatever you can. All donations go to hosting and infrastructure costs.

Also, yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

Please download files from main mirror: http://mirror1.malwaredomains.com/files/

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…