WARNING: All domains on this website should be considered dangerous. If you do
not know what you are doing here, it is recommended you leave right away. This
website is a resource for security professionals and enthusiasts.
Search: Results to return: Include inactive sites

Page 0 1 ... 45

Date (UTC)DomainIPReverse LookupDescriptionASN
2009/03/22_00:00-205.209.143.94/000f1.htm-Trojan33314US
2009/03/22_00:00-205.209.143.94/000f2.htm-Trojan33314US
2009/04/27_00:00-200.122.168.229/dl/goldvipclub/-trojan Casino3790CR
2009/04/27_00:00-200.122.168.229/dl/goldvipclub/TrackDownload.dll?DID=991392-trojan Casino3790CR
2009/05/13_00:00-72.10.169.26/loader.exe-Cutwail/Pushdo36666CA
2009/05/18_00:00-85.13.236.154/v50/?v=66&s=I&uid=1824245000&p=13310&q=85.13.236.154.reverse.coreix.netMalware calls home31708GB
2009/05/23_00:00-219.148.34.9/dmdown/sss.exe-Trojan17672CN
2009/06/03_00:00-63.227.18.137/id5.txtmail.vail-valley.comRFI209US
2009/06/04_00:00-202.91.74.136/bjp3/id3.txt-RFI9830IN
2009/06/16_00:00-213.174.143.196/v/g.php?d=79-directs to rogue39572UA
2009/06/18_00:00-69.3.109.79/1.htmlh-69-3-109-79-static.nycmny83.covad.netExploits18566US
2009/08/17_00:00-199.238.181.161/setup.exe-Rogue2914US
2009/09/11_00:00-213.163.89.54/lib/index.php?t=2-redirects to exploit kit20495NL
2009/09/13_00:00-66.96.214.117:80806696214117.hostnoc.netcompromised server with nginx at port 808021788US
2009/09/13_00:00-84.242.167.49:8080www.sopharma.bgcompromised server with nginx at port 80808672BG
2009/09/13_00:00-209.9.188.130/t.txt-RFI3491US
2009/09/23_00:00-213.163.89.54/mito/-redirects to exploit kit20495NL
2009/11/01_18:49-217.23.6.17:10283/d3n2829231.dat-malware calls home15435NL
2009/11/13_20:52-200.80.97.174/maravilha.txtmultilink-97-174.ipAddr.multilink-ht.net.RFI27767HT
2009/11/24_19:27-88.80.10.1/pp/anp.php-RFI33837SE
2009/12/12_10:56-218.25.203.5/images/images/js.gif-trojan4837CN
2010/02/14_15:14-119.145.143.6/aspnet_client/system_web/update.exe-trojan Redosdru4134CN
2010/02/17_15:39-66.220.17.157/toolbar_uninstall.exe157.17.220.66.in-addr.arpaTrojan.Obfuscated.BX / Lop / Swizzor6939US
2010/02/17_15:39-89.28.13.212/in.php?s=89.28.13.21489-28-13-212.starnet.mdredirects to fake av31252MD
2010/02/26_16:28-77.245.61.232/offersfortoday/get_file.phpafleet15.amsnl.webair.com.redirects to trojan36057NL
2010/02/26_16:30-77.245.61.232/offersfortoday/multi/28.exeafleet15.amsnl.webair.com.trojan36057NL
2010/03/17_04:53-83.139.194.168/images/comprovanteEmail_Html.com-Trojan33942IT
2010/03/24_11:51-58.55.127.16:8080/files/image.jpg-Backdoor Koutodoor4134CN
2010/04/03_10:04-91.207.6.134/spm/page.php?id=1378328&tick=1378328&ver=100&smtp=ok&task=0134.6.207.91.unknown.SteepHost.Net.-47142CZ
2010/04/07_14:26-78.140.15.82/protod.exe-backdoor31357RU
2010/04/08_15:26-202.38.97.217/manual/readme.txt-trojan4538CN
2010/04/10_09:07-62.75.152.79/MeinEigenerServer/index.php?p=Loginvs152079.vserver.de.control panel of Warbot8972DE
2010/04/12_11:29-95.143.193.60/dir/gate.php?box=war&take=0&uid=pecwghrc-trojan Peerfit49770SE
2010/04/12_20:14-193.86.3.170/region/karneva2003-2/karneval2003-2.htmlns3.oku-zn.cz.obfuscated iframe directs to exploit kit2819CZ
2010/04/14_05:32-78.140.15.82/bootstrap-Gootkit31357RU
2010/04/17_23:47-78.140.15.82/quu3aiVai7Lei6epha7azoYegah4da9za2rec8ahngoosu7tuneemoizee5vael5eBoazahHephaahohTa3eecoochaiseesheichoh7aikuz0uas8zeekiaChiayeVa/scripts/tasks.xml-Gootkit31357RU
2010/05/07_06:52-62.122.75.237/-Rogue AV5577UA
2010/05/08_11:02-116.127.121.27/~brownsoftdown/download/servprodect27.exe-trojan9318KR
2010/05/09_19:02-193.105.174.42/stat/halo-i16/o.php-malware calls home196954UA
2010/05/09_19:02-193.105.174.42/stat/halo-i16/s.php-malware calls home196954UA
2010/05/09_19:02-193.105.174.42/stat/halo-i5/s.php-malware calls home196954UA
2010/05/09_19:02-193.105.174.42/stat/halo-i5/l.php-malware calls home196954UA
2010/05/13_10:04-188.65.74.166-fake av42473AT
2010/05/13_10:04-188.65.74.167-fake av42473AT
2010/05/13_10:04-188.65.74.168-fake av42473AT
2010/05/13_10:04-188.65.74.169-fake av42473AT
2010/05/13_10:04-188.65.74.170-fake av42473AT
2010/05/15_21:10-193.105.207.21/ccc/dede.qwas--50793CZ
2010/05/15_21:10-193.105.207.21/dede/gate.php--50793CZ
2010/05/26_18:24-83.133.125.178/r.php?type=0srv45.cyberhost.name.returns malware url13237EU

Page 0 1 ... 45


You can find an overview of downloadable lists here