Feed

Mirror issues

Posted on September 18th, 2011 in Domain News by dglosser

There are still reports of problems with download the files from the mirrors.

Over the phone, our hosting service is able to replicate the problem and escalates to level two. Then level two claims there is no problem and closes the ticket.

We will continue to work with them but it looks like we may have to switch to a different host.

We’ll keep you updated as more information becomes available.

Download issues

Posted on September 17th, 2011 in Domain News by dglosser

We are aware some of you are having problems downloading our files from our primary mirror.  Please hold off on downloading any files while we look into this issue. Thanks

419 Scam Domains

Posted on September 17th, 2011 in Domain News by dglosser

Joe Wein has a great list of 419 scam domains here.

Please take a look and add them to your own blocklist if you wish (or let us know if you think the list is useful and should be added to our blocklist)

List Reorg: Almost 500 domains removed

Posted on September 15th, 2011 in Domain News,immortal,Removed Domains by dglosser

We re-evaluated over 700 domains and removed almost 500 of them.

The list of removed domains are located here:
http://mirror1.malwaredomains.com/files/removed-domains-20110913.txt

About 150 of those domains were previously categorized as “immortal”, or long-lived malware domains – which means they were serving malware for over six months…

Only 37 of those domains were removed.  So 75% of those long-lived malicious domains are really “immortal” , and continued to be actively associated with malware. Wow.

The list of “immortal” domains is located here:

http://mirror1.malwaredomains.com/files/immortal_domains.txt

Forgery, scam, phishing domains

Posted on September 12th, 2011 in iframes,MoneyMule,New Domains,Phishing,Trojans,zeus by dglosser

Added almost 200 domains associated with scams, frauds, phishing, as well as the usual zeus and malicious domains. Sources include zeustracker.abuse.ch, spamhaus.org, vxvault.siri-urz.net.. (Every source is  listed in the domains.txt file)

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

IPv6 and DNS Sinkholes

Posted on September 9th, 2011 in Domain News by dglosser

The Internet Storm Center has posted information on how to add IPv6 support to your DNS sinkhole zone file so it works for both  IPv4 and IPv6.

http://isc.sans.org/diary/IPv6+and+DNS+Sinkhole/11542

Donations

Posted on September 9th, 2011 in Domain News,Donate by dglosser

We were recently asked if we will remove a domain if we receive a “donation”.    Of course, the answer is no.

We’ve also been accused of asking for a “donation” in order to have a website delisted.   Again, that is completely untrue.

The  malware blocklist on this site is a  list of domains which have been associated with viruses or malware collected from public sources.

This is a completely volunteer effort as part of the fight against malware.  And loses money every month.

All donations  are used to offset  hosting costs and is totally independent of any site listing.

Site Delisting: swintonpark.com

Posted on September 8th, 2011 in Removed Domains by dglosser

swintonpark.com has been delisted and will be removed on the next update.

Site Delisting: providelivehelp.com

Posted on September 6th, 2011 in Removed Domains by dglosser

providelivehelp.com has been delisted. Please remove from your blocklists.

346 New domains added

Posted on September 6th, 2011 in New Domains by dglosser

lots of fraud/scam domains, zeus c&c domains, and other malicious domains. Sources include zeustracker.abuse.ch, malwareurl.com and others

(Every source is  listed in the domains.txt file)…

Reminder:  The zone and text files are ONLY be available from a mirror and are not available from  the main site!!

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…