WARNING: All domains on this website should be considered dangerous. If you do
not know what you are doing here, it is recommended you leave right away. This
website is a resource for security professionals and enthusiasts.
Search: Results to return: Include inactive sites

Page 0 ... 0 1 2 ... 22

Date (UTC)DomainIPReverse LookupDescriptionASN
2014/09/16_09:59isonomia.com.ar/vwyryztlkn/nsxiquronl.html200.58.123.153x094vm14.isonomia.com.ar.Compromised site (DHL malspam campaign), leads to Upatre27823AR
2014/09/16_09:59cosmetice-farduri.ro/modidoogrt/gjdotmqgzx.html144.76.194.178ns.icetechcopycenter.ro.Compromised site (DHL malspam campaign), leads to Upatre24940DE
2014/09/16_09:59okeanbg.com/sshbuycplb/hbkfnidlfx.html91.215.216.21hook.icnhost.net.Compromised site (DHL malspam campaign), leads to Upatre49699BG
2014/09/16_09:59dimensionnail.ro/aqbfyipgkh/hjyxeiamcp.html85.10.205.164ns.gorilahosting.ro.Compromised site (DHL malspam campaign), leads to Upatre24940DE
2014/09/16_09:59luchtenbergdecor.com.br/gcbelfuqbk/ygjbemlcsd.js186.202.56.110CPROHWIN0190.locaweb.com.br.Compromised site (DHL malspam campaign), leads to Upatre27715BR
2014/09/16_09:59unitex.home.pl/bbhdskxelc/wlqcwttani.html79.96.42.136v061604.home.net.pl.Compromised site (Natwest malspam campaign), leads to Upatre12824PL
2014/09/16_09:59hobbytotaalservice.nl/dspbhbslyt/twzokdiymd.html85.17.155.23hosted-by.leaseweb.com.Compromised site (Natwest malspam campaign), leads to Upatre16265NL
2014/09/16_09:59bnsoutlaws.co.uk/xzvltaqahm/hrbturjzuh.html87.249.106.3rev-3.106.249.87.virtu.nl.Compromised site (Natwest malspam campaign), leads to Upatre16243NL
2014/09/16_09:59bnsoutlaws.co.uk/vhwqpjheft/nlxclwfmym.html87.249.106.3rev-3.106.249.87.virtu.nl.Compromised site (Natwest malspam campaign), leads to Upatre16243NL
2014/09/16_09:59bnsoutlaws.co.uk/sadpwzhoww/durnmjxqyj.html87.249.106.3rev-3.106.249.87.virtu.nl.Compromised site (Natwest malspam campaign), leads to Upatre16243NL
2014/09/16_09:59artsconsortium.org/znquvoclmr/bamgrmqmgb.html72.47.194.241gumey.com.Compromised site (Natwest malspam campaign), leads to Upatre31815US
2014/09/16_09:59artsconsortium.org/wkqcisrgap/ahqjkywlsx.html72.47.194.241gumey.com.Compromised site (Natwest malspam campaign), leads to Upatre31815US
2014/09/16_09:59artsconsortium.org/lcrplilcal/irzdmndcby.html72.47.194.241gumey.com.Compromised site (Natwest malspam campaign), leads to Upatre31815US
2014/09/16_09:59-162.210.70.17/uemfjtpigt/dgnkhubxnc.html162.210.70-17.confluence-networks.com.Compromised site (Natwest malspam campaign), leads to Upatre40034VG
2014/09/16_09:59ambulanciaslazaro.com/nqwkgtzemx/yjfqpocron.html149.62.168.210inetworking.vservers.es.Compromised site (Natwest malspam campaign), leads to Upatre12860ES
2014/09/16_09:59luchtenbergdecor.com.br/cythsfonuj/sijnkzotme.js186.202.56.110CPROHWIN0190.locaweb.com.br.Compromised site (Natwest malspam campaign), leads to Upatre27715BR
2014/09/16_09:59ciclismovalenciano.com/wcxpcflvbj/ymkmcvpnkh.js46.29.49.1cloud1.hospedajeydominios.com.Compromised site (Natwest malspam campaign), leads to Upatre51718ES
2014/09/16_09:59optilogus.com/twmfizdfmu/lteqwxftti.html192.185.17.123-Compromised site (Sage malspam campaign), leads to Upatre20013US
2014/09/16_09:59flashsavant.com/cqavunntfg/kuldytebws.html74.91.152.22.webhosting.ecommerce.com.Compromised site (Sage malspam campaign), leads to Upatre32392US
2014/09/16_09:59becomedebtfree.com.au/ttlnlmwbox/ctinpfgeob.html198.57.194.65198-57-194-65.unifiedlayer.com.Compromised site (Sage malspam campaign), leads to Upatre46606US
2014/09/16_09:59becomedebtfree.com.au/zscczqbncu/nrrwalnlba.html198.57.194.65198-57-194-65.unifiedlayer.com.Compromised site (Sage malspam campaign), leads to Upatre46606US
2009/09/26_00:00dp-medien.eu81.169.145.69w05.rzone.de.compromised site directs to exploits6724DE
2009/09/26_00:00juedische-kammerphilharmonie.de85.13.135.179dd14202.kasserver.com.compromised site directs to exploits34788DE
2009/09/26_00:00vernoblisk.com67.228.85.201hostica.com.compromised site directs to exploits36351US
2009/09/26_00:00vural-electronic.com81.169.145.82w82.rzone.de.compromised site directs to exploits6724DE
2010/02/02_08:40www.rempko.sk/kontakt.htm213.81.152.60wep.t-com.sk.compromised site directs to exploits6855SK
2010/04/16_20:16pokachi.net/77.222.40.91varna.sweb.ru.compromised site directs to exploits44112RU
2010/04/16_20:16pride-u-bike.com/2006/09/30/akkymtlator/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/2007/06/23/s-tolkacha/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/2007/07/30/doroga-smerti/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/byzapimoto/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/motorcycle/suzuki-motorcycle/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/motorcycle/vozdeniye-motorcycle/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/sell/honda-steed-400-1996/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16pride-u-bike.com/sell/honda-vfr400r-nc30/206.225.20.77-compromised site directs to exploits6428US
2010/04/16_20:16quotidiennokoue.com/66.7.214.152pass81.dizinc.com.compromised site directs to exploits33182US
2010/04/16_20:16quotidiennokoue.com/?cat=566.7.214.152pass81.dizinc.com.compromised site directs to exploits33182US
2010/04/16_20:16quotidiennokoue.com/?p=55866.7.214.152pass81.dizinc.com.compromised site directs to exploits33182US
2010/04/16_20:16safety.amw.com/family/ask-john-walsh-how-can-i-tell-if-a-child-has-been-abused/4.59.56.18-compromised site directs to exploits3356US
2010/04/16_20:16safety.amw.com/home/stop-domestic-violence-before-it-starts/4.59.56.18-compromised site directs to exploits3356US
2010/04/16_20:16wmserver.net/sgcg/?page_id=5217.30.180.48virtual22.nebula.fi.compromised site directs to exploits29422FI
2010/04/16_20:16wp9.ru/188.127.248.545.mirit.su.compromised site directs to exploits48172RU
2010/04/16_20:16www.sanseracingteam.com/wordpress/85.10.140.251wpc4811.host7x24.com.compromised site directs to exploits48185FR
2010/04/16_20:16www.sanseracingteam.com/wordpress/?p=12885.10.140.251wpc4811.host7x24.com.compromised site directs to exploits48185FR
2010/04/16_20:16www.sonnoli.com/?page_id=562.149.140.107webx97.aruba.it.compromised site directs to exploits31034IT
2010/04/16_20:16www.stirparts.ru/89.108.67.238cp141.agava.net.compromised site directs to exploits43146RU
2010/04/16_20:16www.tiergestuetzt.de/80.190.144.115sv05.net-housting.de.compromised site directs to exploits15598DE
2014/10/09_13:05www.sasenergia.pt/images/highslide/highslide-with-gallery.js176.221.32.120pplc32120.ciberserver.com.Compromised site leading to exploit8426PT
2011/02/24_21:26skiholidays4beginners.com/subtraction-scorpio-male-and-virgo-female-compatiblity/67.215.248.8-Compromised site leading to fake AV29761US
2011/02/24_21:26patrickhickey.eu/concertina-free-short-skits-scripts-in-hindi-for-independence-day/89.234.64.136web4.hosting.digiweb.ie.Compromised site leading to fake AV31122IE
2011/02/24_21:26rolemodelstreetteam.invasioncrew.com/raazuc/Dossier-For-M98.131.132.1rev.opentransfer.com.1.132.131.98.in-addr.arpa.Compromised site leading to fake AV32392US
2011/02/24_21:26hy-brasil.mhwang.com/212.117.169.139ip-212-117-169-139.server.lu.Compromised site leading to fake AV5577LU
2011/02/24_21:26marx-brothers.mhwang.com/212.117.169.139ip-212-117-169-139.server.lu.Compromised site leading to fake AV5577LU
2011/02/24_21:26networkmedical.com.hk/defeating-innova-champion-discs-inc-raven/66.7.213.86queen.host-care.com.Compromised site leading to fake AV33182US
2011/02/25_16:20rat-on-subway.mhwang.com/212.117.169.139ip-212-117-169-139.server.lu.Compromised site leading to fake AV5577LU
2013/07/11_07:25www.rebeccacella.com/wp-content/plugins/subscribe/212.227.31.159kundenserver.de.compromised site leads to exploit kit8560DE
2014/02/07_08:25www.zatzy.com/allmaent/391854-volvos-nya-drive-e.html81.201.217.115-compromised site leads to exploit kit41175SE
2015/10/16_07:33www.smartscan.ro85.9.27.130s13v.webindex.ro.compromised site leads to exploit kit5588RO
2016/01/12_08:53www.technix.it/217.194.6.34vchicken.oval.it.compromised site leads to exploit kit12637IT
2016/01/12_09:58szinhaz.hu/185.43.205.98szinhaz.hu.compromised site leads to exploit kit62214HU
2016/01/12_10:08www.ostsee-schnack.de/80.67.28.137dgws10s3-1-5db.ispgateway.de.compromised site leads to exploit kit34011DE
2016/01/19_09:03blog.replacemycontacts.com/50.62.235.1p3nlhg498c1498.shr.prod.phx3.secureserver.net.compromised site leads to exploit kit26496US
2016/01/19_09:50pradakomechanicals.com/203.124.103.1sg2nlhg500c1500.shr.prod.sin2.secureserver.net.compromised site leads to exploit kit26496SG
2016/01/19_11:30www.profill-smd.com/77.55.57.113acf113.rev.netart.pl.compromised site leads to exploit kit15967PL
2016/01/20_12:33www.areadiprova.eu/gardani/80.247.79.174mail.360at.net.compromised site leads to exploit kit12850IT
2013/08/30_07:38windspotter.net/?r=site/widget178.63.73.213static.213.73.63.178.clients.your-server.de.compromised site leads to Java exploit24940DE
2015/01/13_14:47rubiks.ca/js/jquery-1.14.94.js50.87.18.12750-87-18-127.unifiedlayer.com.Compromised site, leads to exploit46606US
2015/01/13_14:47mysmallcock.com/taxadmin/get_doc.html64.6.105.24164-6-105-241.phatservers.com.Compromised site, leads to exploit30266US
2015/01/13_14:47monarchslo.com/taxadmin/get_doc.html69.163.242.27apache2-dap.mafdet.dreamhost.com.Compromised site, leads to exploit26347US
2015/01/13_14:47myshopmarketim.com/taxadmin/get_doc.html94.73.148.14094-73-148-140.cizgi.net.tr.Compromised site, leads to exploit34619TR
2015/01/13_14:47mindstormstudio.ro/taxadmin/get_doc.html85.10.205.164ns.gorilahosting.ro.Compromised site, leads to exploit24940DE
2015/01/13_14:47semiyun.com/taxadmin/get_doc.html95.173.170.227227rfszma.guzel.net.tr.Compromised site, leads to exploit51559TR
2015/01/13_14:47maxisoft.co.uk/taxadmin/get_doc.html192.185.111.220ns539.websitewelcome.com.Compromised site, leads to exploit20013US
2015/01/13_14:47omrdatacapture.com/taxadmin/get_doc.html213.171.218.18server213-171-218-18.livedns.org.uk.Compromised site, leads to exploit8560GB
2013/06/05_20:17www.tdms.saglik.gov.tr/KDV_Guncel_Tevkifat_Oranlari.htm212.175.169.227-compromised sites leads to exploit kit9121TR
2009/12/10_15:48cznshuya.ivnet.ru/81.20.97.13hosting.ivnet.ru.compromized site loads external script with exploits24699RU
2009/12/10_15:48www.tpt.edu.in/76.163.253.1-compromized site loads external script with exploits32392US
2010/09/15_21:29-94.100.25.139/np/admin.php139.25.100.94.king-servers.com.control panel of CRiMEPACK35017PL
2010/09/19_09:45sudcom.org/tmp/source/index.php81.31.145.112da45.joomlahost.it.control panel of Eleonore Exploits pack v1.4.147242IT
2010/12/28_18:17-116.255.180.231/elt/e/stat.php-control panel of Eleonore Exploits pack v1.4.4mod4837CN
2011/03/20_17:23-91.220.62.84/123/stat.php-control panel of Eleonore Exploits pack version 1.4.4mod51699UA
2010/09/22_19:04-178.17.163.108/ez/stats.php178-17-163-108.static-host.net.control panel of exploit kit43289MD
2010/08/21_19:01-91.188.59.150/admin.php-control panel of Incognito exploit kit6851LV
2010/08/20_09:37-87.118.88.140/pizda/stat.phpns.server.leo-host.ru.control panel of Siberia exploit pack31103DE
2010/04/10_09:07-62.75.152.79/MeinEigenerServer/index.php?p=Loginvs152079.vserver.de.control panel of Warbot8972DE
2012/11/19_07:51natural.buckeyeenergyforum.com/r/l/the-joint.php193.0.179.20frolov4me.biz.Cool exploit kit57062RU
2012/11/19_07:51narrow.azenergyforum.com/r/l/brown_season.php193.0.179.20frolov4me.biz.Cool exploit kit57062RU
2012/12/10_15:48private.hotelcesenaticobooking.info/r/l/updating-bugs_keeping.php93.190.43.44-Cool exploit kit6849UA
2013/01/11_07:0850efa6486f1ef.skydivesolutions.be/news/refusal/natural.cgi93.189.40.173-Cool exploit kit41853RU
2012/11/13_10:00-61.19.251.27/web/cb.php-CrimeBoss exploit kit9931TH
2010/09/15_21:29-94.100.25.139/np/index.php139.25.100.94.king-servers.com.CRiMEPACK35017PL
2012/02/26_21:35cswilliamsburg.com/site7/data/174.122.148.945e.94.7aae.static.theplanet.com.CrimePack exploit kit21844US
2012/11/22_12:32babos.scrapping.cc/v211112n/i.php?token=forum62.76.47.1262-76-47-12.clodo.ru.CritXPack exploit kit48172RU
2012/11/26_08:23-85.143.166.181/t221112d/i.php?token=default85-143-166-181.clodo.ru.CritXPack exploit kit56534RU
2016/01/06_15:19-46.30.45.39/Statement.jpgvz110372.eurodir.ru.Cryptowall download script35415RU
2016/01/06_15:19-46.30.45.39/yyo.wvz110372.eurodir.ru.Cryptowall ransomware35415RU
2015/12/30_19:54healthybloodpressure.info/2uOioq.php50.63.56.47ip-50-63-56-47.ip.secureserver.net.Cryptowall ransomware C&C26496US
2009/05/13_00:00-72.10.169.26/loader.exe-Cutwail/Pushdo36666CA
2014/11/25_08:30-104.152.215.90/1.html90-215-152-104-static.reverse.queryfoundry.net.CVE-2014-6332 exploit62638US
2014/12/17_21:01whitehorsetechnologies.net/images/clients/x/mail.php208.91.199.150bh-7.webhostbox.net.Destination of banking phishing19905VG

Page 0 ... 0 1 2 ... 22


You can find an overview of downloadable lists here