Feed

Browser Wars

Posted on December 19th, 2011 in General Security by dglosser

Accuvant LABS just published a “Browser Security Comparison”  [1], but also see [2].

The data from this site was one of the URL Blocklists used in Accuvant’s study.
We encourage research using this and other blocklists,  but please let us know when the article is published.

[1] http://www.accuvant.com/sites/default/files/images/webbrowserresearch_v1_0.pdf

[2]http://www.nsslabs.com/assets/noreg-reports/2011/The%20Browser%20Wars%20Just%20Got%20Ugly.pdf

zeus, nachaspam, fastflux domains

Posted on December 18th, 2011 in malspam,New Domains,Trojans,zeus,zlob by dglosser

Added domains associated with advance-fee scams, fast-flux botnet, Lockemall, nashaspam, etc. Sources include zeustracker.abuse.ch, www.malwaredomainlist.com, securehomenetworks.blogspot.com, boiler-rooms.org (every source is  listed in the domains.txt file)

Reminder: the mirror for compressed zip files is up and running – please contact us for details – right now it has very little usage.


Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

test – search for removed domains

Posted on December 14th, 2011 in New Domains by dglosser

Before contacting us regarding domain delisting, please first check to see if the domain has been removed.

Enter the FULL domain name in the search box below.
================================================================




================================================================

(This is a test… I’m working on removing the radio button and adding a filetype:txt, if anyone has the code it would be appreciated)

Scam, Spyeye, Exploit Domains

Posted on December 14th, 2011 in fraud,New Domains,Spyeye,Trojans,zeus by dglosser

Added almost 100 new domains associated with investment scams, exploits, etc. Sources include malc0de.com, spyeyetracker.abuse.ch, www3.malekal.com and several others (Every source is  listed in the domains.txt file)

Reminder: the mirror for compressed zip files is up and running – please contact us for details – right now it has very little usage.

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

Site Delisting: upgradeable.co.nz

Posted on December 12th, 2011 in Removed Domains by dglosser

upgradeable.co.nz has been delisted and will be removed on the next update.

zeus, trojan, htaccess redirect, malicious javascript domains

Posted on December 11th, 2011 in malspam,New Domains,Trojans,zeus by dglosser

Added over 110 domains associated with malicious javascript, malicious .htaccess redirects, spam leading to malware, etc. Source include sucuri.net, malc0de.com, blog.dynamoo.com  (Every source is  listed in the domains.txt file)

Reminder: the mirror for compressed zip files is up and running – please contact us for details – right now it has very little usage.

Please help to keep this site free and donate whatever you can:  All donations go to hosting and infrastructure costs.

These malware block lists provided here are for free for noncommercial use as part of the fight against malware.   Any use of this list commercially is strictly prohibited without prior approval.

Please use the “datestamp” and “timestamp” file to determine if the list has been updated and ONLY pull the files you need – abusers will be banned!

Yearly sponsorships are available. Full acknowledgment, an icon, and link back to your site will be placed in the left sidebar.

Domains.txt file is the complete list along with original reference.
Justdomains contains list of only the domain names.

BOOT file is in MS DNS format. spywaredomains.zones file is in BIND format.

Also Available in AdBlock, ISA, and MaraDNS formats.

A trusted source on the WOT-the Web of Trust . Used by SURBL, MOREnet, SANs, and others…

adblock Pt II

Posted on December 9th, 2011 in New Domains by dglosser

It seems the filter list in adblock plus has some lines like this

  ||^

This doesn’t seem to be a problem with firefox, but other browers have issues… Removing the    ||^    lines fixes the issue….

I experimented a bit with using manual filters from your list and I think I found the reason – in the filter list I found multiple lines like this:

Just using a single filter like this breaks the pages in Safari (presumably Chrome). After removing all of the “||^” lines from the list I had no problem with the rest of the filters.

Adblock Plus Issue

Posted on December 9th, 2011 in New Domains by dglosser

Some users are reporting issues with adblock plus since the last update here. We are looking into the issue – Any specific troubleshooting is appreciated -  you don’t have to tell us that things are “messed up”… Thanks

Malspam and other Malicious Domains

Posted on December 7th, 2011 in malspam,New Domains by dglosser

Added 67 domains associated with malspam and other malicious activity

delisting: sibnet.ru

Posted on December 6th, 2011 in Removed Domains by dglosser

sibnet.ru has been delisted and will be removed on the next update.