Feed

DNS-BH Update: New Malicious Domains

Posted on April 1st, 2008 in New Domains by dglosser

Over 150 new domains associated with malware, mainly from the emerging threats sandbox:

01800mexico(dot)info flycodecs(dot)com
10(dot)haokandi(dot)cn forum(dot)4satmasters(dot)ru
cumbridge(dot)com fotorsge(dot)com
340safe(dot)cn freelifenet(dot)cn
3dpokerpkr(dot)com friendsteerr(dot)com
5460w(dot)cn friistreng(dot)ho(dot)ua
555abc(dot)com ftp(dot)drivehq(dot)com
5fera(dot)cn ftp(dot)puslapiai(dot)lt
807080(dot)cn ftp(dot)viadogay(dot)com
8q8(dot)biz fullspace(dot)cc
activeprotect(dot)cn g1ikddcvns3sdsal(dot)info
ads(dot)targetedbanner(dot)biz g6(dot)adfirefox(dot)cn
adserver(dot)adtechus(dot)com g7(dot)adfirefox(dot)cn
adultfinder(dot)com gatehs(dot)com
afroukbusinessdirectory(dot)com gateqy(dot)com
agava(dot)ru geqn(dot)u7zywp(dot)com
aidd123(dot)cn gg(dot)agek(dot)kr
aircraftbooking(dot)co(dot)uk gioff(dot)tu1(dot)ru
ajesevilla(dot)org givetotuck(dot)org
all-hallows-evening(dot)info globalhome(dot)co(dot)kr
allcollisions(dot)com gmbh-inform-de(dot)info
alled(dot)byethost13(dot)com goldvipclub(dot)com
aolmaster(dot)com grabest(dot)info
argoshude(dot)com h7smcnr1wlsdn34fgv(dot)info
audiotrash(dot)biz hbj(dot)hd(dot)gov(dot)cn
autocaes(dot)com herfirstanalsex(dot)1(dot)vg
autocontext(dot)begun(dot)ru highjar(dot)info
avadvisor(dot)info homecashcredit(dot)com
aw(dot)org(dot)ru host1(dot)msmsns(dot)com
axelfoto(dot)com hostingprod(dot)com
b(dot)987255(dot)com hostswiss(dot)com
bcgdbkzlbu(dot)net hotcodecadultgh(dot)com
beatchemistry(dot)net hujashka(dot)com
beautyscreens(dot)com huntin(dot)cn
bestc(dot)qqhudong(dot)cn ic-hk(dot)cz
bestworldcom(dot)cn icqplanet(dot)ru
bot(dot)ledahtohu(dot)com idbvarm(dot)com
bot(dot)ru iddgtvfc(dot)com
bowlingclublimousin(dot)fr iiiboy(dot)com
bubamubaches(dot)info in(dot)helmburn(dot)com
bullet727(dot)1gb(dot)in inform1ongung(dot)info
bux(dot)to injectpanel(dot)com
byet(dot)org ip1(dot)grupoeliete(dot)com
c(dot)158dm(dot)com iped(dot)com(dot)br
cankus(dot)com irc(dot)4ntrim(dot)net
cashback(dot)cashbackseven(dot)com irc(dot)albcrew(dot)rr(dot)nu
cc(dot)haoddos(dot)com irc(dot)brokenirc(dot)net
ccqqq123(dot)cn irc(dot)elegantdevils(dot)com
cds(dot)adecn(dot)com irc(dot)marlmx(dot)info
cell-profiler(dot)de jesuser(dot)cn
cerin(dot)cn jeyhost(dot)000webhost(dot)info
certi(dot)cz jino-net(dot)ru
chacent(dot)cn jomos(dot)ch
chcpdns(dot)info kardun(dot)com
chinahotweb(dot)net opernuz(dot)com
click(dot)patgenat(dot)com pharmacytop(dot)net
clio1010(dot)hostdegraca(dot)com ravepills(dot)com
conclusion00(dot)cc statadd(dot)com
config(dot)kwsearchguide(dot)com viagrabest(dot)info
cqwudu(dot)cn 163sinasohutom21cnvnetbaigoogdule(dot)com(dot)cn
d(dot)158dm(dot)com criminal-vb6ers(dot)one-crew(dot)net
criticalfactor(dot)cc documenti-elettronici(dot)com
d(dot)789fa(dot)com emotioncard(dot)com(dot)br
d(dot)gxlgdx(dot)com emretur(dot)cc-power(dot)be
dady(dot)da-dy(dot)com en(dot)vrbrothers(dot)com
dadys(dot)da-dy(dot)com f(dot)gxlgdx(dot)com
datacenter001(dot)com fa(dot)n1ce(dot)com(dot)ar
ddos(dot)93se(dot)com fad(dot)veleshtanet(dot)com
ddvxbo(dot)wtcvxu(dot)com fala1-team(dot)jino-net(dot)ru
deewoo(dot)net fata1team(dot)onep(dot)ru
diybanked(dot)cn faye(dot)mrface(dot)com
door(dot)196462035(dot)cn fbceeefbdede(dot)com
douwen(dot)sin(dot)khk(dot)be feliznatal(dot)rbcmail(dot)ru
down(dot)cashbackseven(dot)com fewfwe(dot)com
down(dot)keymatch(dot)kr file(dot)servicepack(dot)kr
down(dot)msmsns(dot)com file(dot)spymedic(dot)co(dot)kr
download(dot)uusee(dot)com files(dot)deewoo(dot)net
download(dot)zhongsou(dot)com findonlineworld(dot)com
downloads(dot)rabio(dot)com firebrown(dot)com
draft(dot)hut1(dot)ru drops-checker(dot)info
dreamfully-chilostoma(dot)com dvdahappy(dot)com
driska(dot)org dw(dot)51wan8(dot)com
dzuc(dot)net dw(dot)lovelily800105(dot)com

Help fight spyware: Join the Spyware Listening Post!

domains.txt file is the complete list along with original reference

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format

Comments are closed.