Feed

black hole exploitkit, zeroaccess & other harmful domains

Posted on November 5th, 2011 in iframes,malvertising,New Domains,Trojans by dglosser

Added 118 domains associated with the Black Hole Exploit Kit, Zero Access, and other risky and harmful domains. Sources: www.malwareurl.com, zeustracker.abuse.ch, vxvault.siri-urz.net and others   (Every source is  listed in the domains.txt file)


Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format. (The mirror for compressed zip files is up and running – please contact us for details.)

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Dynamic DNS

Posted on November 4th, 2011 in Domain News,dynamic dns by dglosser

We’ve updated our list of Dynamic DNS Providers.    This is for information  purposes only and is not part of our blocklists. ..

The list is here or here.

Clarifications, updates, corrections appreciated as always

Nov 2 Update: 167 Dangerous Domains

Posted on November 3rd, 2011 in iframes,malvertising,New Domains,rogue antivirus,Spyeye,Trojans,zeus by dglosser

167 malicious and Dangerous Domains associated with fake jobs, malvertising, poisonivy, nitro, trojans…

ww.malwareurl.com and others

(Every source is  listed in the domains.txt file)

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format. (The mirror for compressed zip files is up and running – please contact us for details.)

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…


Urgent Block: stats1. in

Posted on November 2nd, 2011 in New Domains by dglosser

Please add  stats1. in to your blocklists….

See http://google.com/safebrowsing/diagnostic?site=stats1.in
Malicious software includes 103 scripting exploit(s), 59 exploit(s), 53 trojan(s).

We’ll block this domain tonight but you shouldn’t wait…

List Recert: 653 Domains Removed

Posted on November 1st, 2011 in Domain News by dglosser

Of the 740 domains which were re-certified,  653 Domains have been removed.

88 of those domains, which were originally listed over six months ago, were STILL actively associated with malware.

These domains were added to our list of long-lived, “immortal” malware domains.

List of removed domains is available here:

http://mirror1.malwaredomains.com/files/removed-domains-20111031.txt

List of “immortal domains” here.


Also,  a clearification – permission is granted if you wish to use these lists for INTERNAL use only at your organization or company.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need. – abusers will be banned!

We also have a mirror with compressed files dedicated for academic research, people who contribute and support malwaredomains,  other non-profit activities.  Please contact us for details.