-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathUrsnif - Malware Domain Feed V2
569 lines (567 loc) · 9.98 KB
/
Ursnif - Malware Domain Feed V2
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
# Ursnif - Malware Domain Feed V2
# Command and Control domains for malware known as Ursnif.
# These domains are extracted from malware sandbox reports using a Machine Learning model trained on a corpus of good and bad domains.
# Source: https://otx.alienvault.com/user/otxrobottwo
#
# UPDATED: 15-02-2021
#
# Every link reported should be considered harmefull and could result in an unwanted malware download. Use this file carrefully.
#
# **** Therefor my advice is ****
# **** If you experience sites that are being blocked ****
# **** please double check your input in search field and ****
# **** see if it's correct and verify that it is the correct page you ****
# **** are going too! If it is correct then whitelist that site ****
#
# USE THIS LIST WITH CAUTION!
#
#
# *****The list is released without any warranty to the end users.*****
#
# *** This list contains domains and hosts ***
# *******************************************************************************************************************************************************************
# Ursnif - Malware Domain Feed V2
# Source: https://otx.alienvault.com/pulse/5cc3e630ec29d3bd417690eb
# Domains
2zvdoq8grm7vwed20-zz.com
4xj0nhh.com
5u2mr.com
9nag0.com
9ygw2.com
50pm4.com
58tiy.com
2020lhjfhf.xyz
a0enorc6of7.com
a4zy33hbmhxx70w9q.com
a8xui1akl9gjqucfa.com
a9nq0z.com
ab94z0.com
accrualdewd.xyz
acizinelid.com
acnessempo.com
addiamentali.org
aespilicka.com
agateofary.com
agieshorma.com
alcheewale.com
alistherdatas.at
alltimedfgsf.icu
aloiuraa.icu
amehota2gfgh.com
amotecksat.com
andertyhgeetyasd.com
angiasatop.com
aquatolass.com
areigreell.com
armetulisy.com
arundeaker.com
asinaptali.com
asodergina.com
awh93dhkylps5ulnq-be.com
azerooitaly.website
azzoodijdhgdr.com
b81bgabrielle.xyz
baceldeniz.com
bbbingobus.today
bbfjjf8.com
bbrendanbl42.xyz
begoventa.top
besbionia.com
bghqyf1.com
bizzznez.org
bl3cavy.com
bm25yp.com
bn50bmx.com
bologuron.club
boontouick.com
bp4prsdxo3vfexul.com
bpf-capital.ca
bullisworg.com
c6ut9we.com
c54aavse.com
c55wccayla.info
c58fdzlitzy.band
c76v53uelinda.email
c88gpm21qoal18bmk.com
c93dg24kellie.info
canoffersloud.com
casecose20smart.net
cativatnic.com
centalnana.com
ch4ck0j.com
chenilluro.com
chokatawan.com
chvqi4w.com
cjwefrfomatt.com
consulttrus.org
copiesciso.com
cqftatumg59.com
cuinangila.com
curcipleaf.com
cy56emie.com
cztixxy.com
d12quigfjulianne.com
ddeneaungy.com
devitrains.com
dfredamy.company
dgokmertli23q.com
dhoulabeau.com
dhsiwyqdlskwsqo.com
digingophe.com
directmailway.com
dithomatos.com
djules36petra.xyz
dmurrayh52k.club
dolikulooospo.fun
dorwatarth.com
dr8hiw8.com
dr8r2rq.com
dueightere.com
duenexacch.com
dugfsg.com
dvalliejyo.club
dvt553ldkg.com
dzn1lbbwzbmh.com
e2o4bd6sh2b1sjk56-fv.com
e7xfxb.com
e9bja.com
eastiggeno.com
ebwz497.com
eed9jqjd4b600bu2b-md.com
egiiuouy.club
ehubo3y.com
emaiscuism.com
emblareppy.com
erugutrane.com
eweodinda.ru
f04qvvbwwhmxc09y.com
f5ekqcgwa.com
f39fxnzeanabelle.xyz
fal6qo3f68.com
fantaniz.ru
fastirdiat.com
fdhwgm.com
fepz41.com
fffufk.com
fgni4rivczb53fvk.com
fharmonue54w.com
ficondebro.com
fileouya.xyz
fjavieryvette94.com
fk6xyupsuvjn93.com
focamearsy.com
fooropetes.com
formulaoneuno.today
fornomonse.com
freiniacae.com
frockyllie.com
ft23fpcu5yabw2.com
ftevinpgreta.com
fw6rzlxc.com
fyiyvb.com
fyumadisenue.city
g0zh8lb3.com
g7bxxcu.com
g94ju4.com
gaintetikh.com
gazoilonnsodjd.website
gbszciag8tgf2m.com
ghdy656262oe.com
ghinatronx.com
gjb3sd1.com
gl6063f3cc237zqm.com
goarebecao.club
godeageaux.com
gofast22gfor.com
goldenmemb.website
gophimeraq.com
grtyrrodfto.com
gs11fd5.com
gutasiergo1.com
gwn2649pm.com
h4dv4c.com
h6e2at7du07f7a2ip.com
h7llj8w.com
haushanapa.com
hbritneyyi.com
hchyna985.top
hdiwuey872629hsgs18702837.com
heevassify.com
heremeseeview.site
herzqvtpb99m0cn.com
hges2gnmvvv8mv8yi.com
hiteronak.icu
hne53brianaea.com
holoderyttonten.website
hoolahooptrape.xyz
hoomellhic.com
horectitab.com
hq92lmdlcdnandwuq.com
hrghpyxiqg.com
hsh55eyo77serenity.xyz
hswawuo7c8axfxw3.com
huictiathm.com
huriliseso.com
hutorescag.com
hzo0aut97bfu7zweb.com
i4y2du8rr6npqvhv.com
i7r5ec.com
icemorgish.com
iehrbfoei.xyz
ihf8rrn.com
impedignaw.com
inesyriata.com
inviatotutoneladon.com
ioyyf.com
j5sfioue15kxqs.com
j6793yojewell.club
jandneneet.com
javisoacso.com
jentabrnie.com
jewayelome.com
jlb81hdvernon.com
jottnistic.com
jounsenurf.com
jraytjacynthe.com
jrosinaiabbigail.com
jscfgfuevx.com
jt23932.xyz
jxfps21tjohnathon.xyz
jyomacktom.top
k1n3pxnd5e6x2h09a-df.com
k6xqu9m.com
k55gaisi.com
kbitr0gz21p8.com
kc92scb74.club
kh2714ldb.com
kircherche.com
kkmmnnbbjasdhe.com
kmqdagp70r.com
knuymon.com
kongos.ru
kraglepure.com
krnrw15waino.xyz
krtew5f.com
ksoniay95ee.info
ku3rgq4.com
kureidww.company
kuu15austin21.com
kv0yg9f024w5uj5t.com
kwjqbk2fw9p8q5y.com
kxwh2gp.com
kzex9vp0jfw6a8up1.com
l95dtz8.com
laddloanalao.xyz
le7dv4wry1qy0dozb-df.com
lededardan.com
legicalpan.com
legitaseta.com
leinwqoa.com
lhxlihz.com
ligmosiver.com
limitsno.at
lj2xwtcr7920v8.com
ljh34t.com
lki1w0.com
llh23.com
lloangeras.com
logrichasi.com
lokoloppo4.com
loogerblog.xyz
lumperpush.com
m2mfbpsqgq0e2e20.com
m8pwsczg0bbzw48j7.com
m64ayojodie.top
m2048javon18.com
macecraft.site
madorigum.top
maeoureath.com
marryscristmasssanta.website
marthonves.com
mashallah.at
meartitalo.com
menehleibe.com
menutorga.top
metadatings.top
mimeaniega.com
mm24b1h.com
mmontyireina.club
mof9eugaamlp1gqy.com
mollygvins.site
mollypanic.com
mpalexlarissa.info
msdkaceym.com
mzg4958lc.com
mzy48domenico.com
n2f79.com
n4curtispablo.info
n48lxj5097.email
n58fvgermaine.com
n60peablo.com
n60pehhnablo.com
nayoabreto.band
nazscklpaq.com
nbwvg2egflr8t2da1-wo.com
ncznw6a.com
needforbestpropouse.xyz
neoscenrer.com
newupistebls.club
nf60pabtlo.com
nfyuabel.com
njelissae.top
noeldon.com
noredowits.com
northworth.tk
nrhlxbt9covscex9b.com
nrs2wjke0t2vz9.com
nsyblefgg.city
nuremerivo.com
nvdvdgp.com
nvoaeicweston.com
nyuqyujyi.com
of07v4u6ys4n.com
okinawajame0.today
oklogallem.com
onialisati.com
onivallort.com
ooroollino.com
operfalq1fioa.com
owrty2.com
oz10krn1rkxqnkcbdm.com
p3gcak.com
p7hne.com
p26ui42annamarie.com
paneloos.website
pasesertos.com
patanrivey.com
periarinov.com
peterongdo.com
pflossie86z7.city
pjr82milford.xyz
plnr9gs.com
poreslugle.com
poskncpeiuywbt.xyz
primankanamanky.ru
promomarkus.ru
protedabao.com
proupdateserver.com
pulneselle.com
pv60oib8e7.com
pvi24bu.com
q982yeq23.xyz
q5278biboyd.com
qjudahia.city
qmiller.club
qn44katlynorval.com
qqm9lv.com
qr12s8ygy1.com
qryyueeriberto.com
qswbhz5.com
qurrineion.com
qwq7urac09jbde96.com
qyr78wfya85.top
r52yoo.top
r81a1dk.com
rabelegrac.com
ralmonresc.com
rearpusnor.com
redflash.org
reprolucup.com
rheracstar.com
rieseenchs.com
ritaioural.com
riul.xyz
roiboypo.ru
rururmaskkapsulrttezya.website
ryiwuehwskosuqhs.com
s3lm81.com
s63v8ruqxwinz6bv.com
s82dortha27r.top
s928eid19oqieuqoeu.com
safj3ng.com
santaliny.net
santaliny.org
sbrian025ao.com
scostanpod.com
scronarcom.com
scwwne.com
se66ndx04fofu3sqv.com
securecc.ru
selogotufoo1.com
sertificatkey.xyz
setupoldnavy.space
sfmtcxts.com
sh1ywp.com
shumbildac.com
shvaiwq.com
siicg8lgad.com
silviaformigligooo.us
sizfjalenk51.com
slalomdrivevrsto.today
sleopuntle.com
sniodoliss.com
south6644.life
sphotethee.com
spinthexplore.com
stalussnip.com
static-view.website
statoffbal.com
stoilamser.com
swaloordot.com
swf1fas.com
swloovrxcwzholden.com
t6kamillemoshe.com
tanklemech.com
tapestraru.com
tcolleen4463dn.com
tdzlbz2.com
teeapitary.com
tehaluetic.com
teomengura.com
tericks90.info
tfernzq.com
the53augustine.com
tkamryn51robert.com
to4karu.ru
tobmojiol2adf.com
toortoctel.com
toraisdiah.com
tpc2snch0g7njxjq.com
tq9kma.com
tramvaineedet.ru
troorgario.com
twr84ue.com
ty29lt.com
tygrapygraboom.de
tynupd.com
tzwcamren.com
ub1uxd9u4qz46t8y6s.com
ue4j6g.com
ueba6ka.club
ukapindism.com
uncomfermed.com
uphokety.com
uyl9so2ddlulwtrg4.com
v0rzpbu.com
v60yuuu1415.com
v61nkkybd.com
vacepideaf.com
vdnu32a.com
velooiisd.club
vestcheasy.com
vh9sjhs.com
vhdannyqhk.com
vhi66eimaynard.top
vi9yyu.top
vi57iykatarina.xyz
vinalpapel.com
vioropeily.com
vivitempen.com
vmelynaa.club
vorimusesa.com
vr9519.club
vsav42a.com
vzquiarisb.com
w0j3oq.com
w5yejb.com
w57u8053.club
w450l5.com
w6948qzoila.xyz
wadameee.club
wagoatilby.com
wandeveemp.com
web-tofly.com
webplugthemes.com
wee2684iy62.club
weyua6.com
wfpyutf.com
wgcjeremy11.band
whiogrebs.com
willeam.net
wineguroo.xyz
wkatrinamatteo.info
wlibby71e.com
wnaomievltgeorgianna.com
wnc2sod.com
wnrfa9y.com
woa79ewinfield.club
wola4ru08w9i7jjpuc.com
worauctapy.com
wqmxf8k.com
wreswanste.com
ws3adlfkm1.com
ws3lfkm.com
wsierra14a.email
wv01gwbrgs.com
x4fwben.xyz
xaat39f.com
xcjhb30ton.com
xdeho9.com
xiviola30heber.xyz
xjllvivienne.band
xjustusia37.xyz
xljksdu.com
xvobvgcssb.com
yamemasesy.com
yanevitais.com
ybnqudhnasdasdq.com
ycd4tjz.com
yg2zdng.com
yingoof.club
yj5hzv.com
ytgknwaktu0fyn.com
z4v1qth.com
z7bukn0mhgn12exuv.com
z19ok.com
z50rvfhcasandra.com
z72aoe50.com
z7440ucoleman.club
zbtgcvclwr3qoz7h.com
ze2abug5d9vcrufg.com
ze5upyoybvc0yeke.com
zelinopats.com
zgum52f88v3xf57682.com
zie96irmad.top
zinivalev.com
zkc5kelvin.xyz
zkeaganarlie.xyz
zlayla20.com
znmenb.com
zpx0okh.com
zr7y3f.com
zs6eb.com
zuoashlyc.com
zvednyisvet.ru
zx3a2ob1q6f2pv.com
zy70aa.company
zzjetgj.com
# Hosts
0.0.0.0 ad1.wensa.at
0.0.0.0 api2.casus.at
0.0.0.0 api3.lamanak.at
0.0.0.0 api.ahah100.at
0.0.0.0 api.frame303.at
0.0.0.0 api.xc78cx.at
0.0.0.0 app.calag.at
0.0.0.0 b5.ahonpot.at
0.0.0.0 cd.ahonpot.at
0.0.0.0 cdn1.kamalak.at
0.0.0.0 g2.ex100p.at
0.0.0.0 gstat.kangweid.com
0.0.0.0 h1.wensa.at
0.0.0.0 nort.calag.at
0.0.0.0 one.ahah100.at
0.0.0.0 ostappnp.myjino.ru
0.0.0.0 pop.project-ip.co.uk
0.0.0.0 w8.wensa.at
0.0.0.0 web.citylimitshog.com
0.0.0.0 web.plainfielddentalcare.com
0.0.0.0 ww1.liemuteste.com
0.0.0.0 ww17.thulligend.com
0.0.0.0 ww31.q982yeq23.xyz
0.0.0.0 ww38.hchyna985.top
0.0.0.0 ww38.q982yeq23.xyz
0.0.0.0 www.cargobooking.ru
0.0.0.0 www.tcolleen4463dn.com
0.0.0.0 y1.rexa.at
0.0.0.0 yap.yolopuk.at