Malware Domain List

WARNING: All domains on this website should be considered dangerous. If you do
not know what you are doing here, it is recommended you leave right away. This
website is a resource for security professionals and enthusiasts.

Page 0

Date (UTC)	Domain	IP	Reverse Lookup	Description	ASN
⇑ ⇓	⇑ ⇓	⇑ ⇓	⇑ ⇓	⇑ ⇓	⇑ ⇓
2017/01/19_13:05	www.studiolegaleabbruzzese.com/wp-content/plugins/urxwhbnw3ez/flight_4832.pdf	62.149.142.206	webx440.aruba.it.	ransomware	31034
2016/07/21_13:20	adv.riza.it/www/delivery/ajs.php?zoneid=51&cb=96020978060	62.149.195.107	host107-195-149-62.serverdedicati.aruba.it.	iframe on compromised site leads to exploit kit	31034
2016/06/20_14:33	www.salentoeasy.it/	95.110.189.62	host62-189-110-95.serverdedicati.aruba.it.	iframe on compromised site leads to EK	31034
2016/05/10_07:18	www.outlinearray.com/	85.235.130.71	w461.widhost.net.	iframe on compromised site leads to EK	31034
2016/02/29_13:00	www.gold-city.it/image/_vti_cnf/app/psi.exe	31.11.33.82	websn2s072.aruba.it.	trojan	31034
2015/07/20_18:46	www.mondoperaio.net/wp-content/plugins/cached_data/k1.exe	62.149.144.66	webx544.aruba.it.	Trojan.P0ny	31034
2014/09/16_09:59	www.advancesrl.eu/ukhclcatkr/brcybmsute.html	62.149.142.94	webx328.aruba.it.	Compromised site (DHL malspam campaign), leads to Upatre	31034
2014/09/16_09:59	www.advancesrl.eu/tjjyeqyfjz/gmiuxfhgsb.html	62.149.142.94	webx328.aruba.it.	Compromised site (DHL malspam campaign), leads to Upatre	31034
2014/09/16_09:59	www.advancesrl.eu/ryubfrytqb/dkdorvskxe.html	62.149.142.94	webx328.aruba.it.	Compromised site (DHL malspam campaign), leads to Upatre	31034
2014/05/27_04:02	grendizer.biz/fattura/fattura05032014.zip?9hq3vacty6ggvex	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/fattura05032014.zip?dzmooxysgf3yt6ju2ehhm	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/fattura05032014.zip?jwui91zljfn	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/ordine4582923332.zip?vybhzpsoxzapz0xdt	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/statistiche.zip?l7ucqay9bgq6i6sk	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/Informazioni/Fattura05032014.zip?zav6BNgeGvW89WPVOQlRX	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/Informazioni/Info.zip?17kDYCBNi6t	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/informazioni/ordine4582923332.zip?boweipzoa374cr_info@bikesplaza.nl	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/informazioni/statistiche.zip?vfww8lyfaiccpr_elke.staiger+at+fdp.landtag-bw.de	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/informazioni/statistiche.zip?vfw=	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/fattura05032014.zip?uiukcav35d	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/fattura05032014.zip?xx0frhnydqgzvzfzugbs5xm	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/info.zip?phmtllqsewlgejre=	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/info.zip?phmtllqsewlgejrea3r_emanuele.monfrini%20at%20fastwebnet.it	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/info.zip?phmtllqsewlgejrea3r_emanuele.monfrini+at+fastwebnet.it	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/info.zip?phmtllqsewlgejrea3r_emanuele.monfriniatfastwebnet.it	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/statistiche/fattura05032014.zip?qgbaprb3jqghxxof	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/fattura05032014.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/ordine4582923332.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/fattura/statistiche.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/Informazioni/Info.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/Informazioni/Fattura05032014.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/Informazioni/ordine4582923332.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/Informazioni/statistiche.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/fattura05032014.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/ordine/info.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/05/27_04:02	grendizer.biz/statistiche/fattura05032014.zip	85.235.154.18	mwin05.masterweb.it.	Trojan.Zbot	31034
2014/04/29_08:25	www.marss.eu/	95.110.133.212	host212-133-110-95.serverdedicati.aruba.it.	obfuscated Javascript leads to fake flash player site	31034
2010/04/16_20:16	www.sonnoli.com/?page_id=5	62.149.140.107	webx97.aruba.it.	compromised site directs to exploits	31034

Page 0

You can find an overview of downloadable lists here

Search:			Results to return:		Include inactive sites