Download a list of the most observed malware DNS names that we have seen looked up during malware infections or embedded within malware binaries.

Most Observed Malware-Related DNS Names

Fri Nov 6 08:38:10 2009

10 Day Watch List      30 Day Watch List      

Embeds = number of malware binaries in which this DNS name was discovered
Rank = 30-day importance ranking (1 to 100) of most prolific malware-related DNS
Lookups = number of observed infections in which this DNS name was looked up
DNS = malware DNS list...be afraid if your PC looks up these entries.

Rank Lookups Embeds First Last CC DNS
19 150 0 10/07 11/05   citi-bank.ru
10 57 19 10/10 11/05   proxim.ircgalaxy.pl
9 41 33 10/08 11/05   siliconfireware.ru
7 47 32 10/07 11/04   moscow-advokat.ru
5 27 0 10/20 11/05   sleepatnight.cn
4 34 0 10/07 11/05   www.petdoso.com
4 8 33 10/08 11/05   www.bbin.ru
4 30 0 10/07 11/03   cx10man.weedns.com
4 33 0 10/08 11/05   spi.domainsponsor.com
3 7 33 10/08 11/05   www.proxy-socks.net
3 23 0 10/13 11/03   s.unicat.org
3 2 33 10/08 11/05   ebookfinaltrash.ru
3 2 33 10/08 11/05   prodexteam.net
3 2 33 10/08 11/05   alfabank.ru
3 2 33 10/08 11/05   www.cbr.ru
3 1 33 10/08 11/05   www.mmbank.ru
3 1 33 10/08 11/05   www.sbrf.ru
3 1 33 10/08 11/05   welcome3.smile.co.uk
2 0 33 10/08 11/05   www.masterbank.ru
2 0 33 10/08 11/05   www.uniastrum.ru
2 0 33 10/08 11/05   www.bankofmadura.com
2 0 33 10/08 11/05   www.baltbank.ru
2 0 33 10/08 11/05   www.mdmbank.ru
2 0 33 10/08 11/05   digital-relaxkgb.ru
2 0 33 10/08 11/05   olb2.nationet.com
2 0 33 10/08 11/05   grepware-facility.ru
2 0 33 10/08 11/05   prorat.net
2 0 33 10/08 11/05   www.ovk.ru
2 0 33 10/08 11/05   www.absolutbank.ru
2 0 33 10/08 11/05   gutabank.ru
2 0 33 10/08 11/05   www.uralsib.ru
2 0 33 10/08 11/05   gronxplanets.ru
2 0 33 10/08 11/05   www.vtb.ru
2 0 33 10/08 11/05   53bank.com
2 0 33 10/08 11/05   asmworm.com
2 0 33 10/08 11/05   kidos-bank.ru
2 0 33 10/08 11/05   www.bankofindia.com
2 0 33 10/08 11/05   atmacasoft.com
2 0 33 10/08 11/05   www.icbank.ru
2 0 33 10/08 11/05   myonlineaccounts2.abbeynational.co.uk
2 0 33 10/08 11/05   tat-neftbank.ru
2 0 33 10/08 11/05   www.spyinstructors.com
2 0 33 10/08 11/05   fethard.biz
2 0 33 10/08 11/05   online-business.lloydstsb.co.uk
2 0 33 10/08 11/05   hyper-space-fuel.ru
2 0 33 10/08 11/05   pizdabol-inc.ru
2 0 33 10/08 11/05   seclab.ru
2 0 33 10/08 11/05   prodexteam.netcrutop.nu
2 0 33 10/08 11/05   www.kmb.ru
2 0 33 10/08 11/05   acrolein-hawk.rubanking.halifax-online.co.uk
2 0 33 10/08 11/05   securitylab.ru
2 0 33 10/08 11/05   www.allahabadbank.com
2 0 33 10/08 11/05   yambo.biz
2 0 33 10/08 11/05   www.netmagister.com
2 17 0 10/07 11/03   fx010413.whyi.org
2 14 0 10/14 11/05   jsactivity.com
2 21 0 10/07 11/05   proxima.ircgalaxy.pl
2 9 5 10/08 11/03   f.unicat.org
2 13 0 10/14 11/05   bfkq.com
2 4 32 10/07 11/02   graz.at.eu.undernet.org
2 9 0 10/30 11/05   komojoke.cn
2 4 32 10/07 11/02   ced.dal.net
2 4 32 10/07 11/02   coins.dal.net
2 3 32 10/07 11/02   los-angeles.ca.us.undernet.org
2 3 32 10/07 11/02   diemen.nl.eu.undernet.org
1 3 32 10/07 11/02   gaspode.zanet.org.za
1 1 32 10/07 11/02   lia.zanet.net
1 3 32 10/07 11/02   washington.dc.us.undernet.org
1 2 32 10/07 11/02   vancouver.dal.net
1 2 32 10/07 11/02   ozbytes.dal.net
1 2 32 10/07 11/02   london.uk.eu.undernet.org
1 2 32 10/07 11/02   brussels.be.eu.undernet.org
1 1 32 10/07 11/02   lulea.se.eu.undernet.org
1 2 32 10/07 11/02   caen.fr.eu.undernet.org
1 1 32 10/07 11/02   flanders.be.eu.undernet.org
1 1 32 10/07 11/02   qis.md.us.dal.net
1 1 32 10/07 11/02   broadway.ny.us.dal.net
1 0 32 10/07 11/02   viking.dal.net
1 11 0 10/08 11/03   dl.guarddog2009.com
1 0 17 10/08 11/04   chechenpress.info
1 10 0 10/10 11/03   www.brans.pl
1 13 0 10/08 11/01   jbeegvia.ru
1 7 0 10/17 11/05   search.toptravellingtips.com
1 6 0 10/26 11/05   www.binbank.ru
1 0 16 10/11 11/05   www.nomos.ru
1 25 0 10/07 10/18   gidromash.cn
1 13 0 10/11 10/25   nenastiya.cn
1 9 0 10/07 11/05   www.businesstomb.com
0 6 0 10/07 11/03   gynoman.weedns.com
0 8 0 10/11 11/05   config1007.iwillhavesexygirls.com
0 8 0 10/11 11/05   maillist.iwillhavesexygirls.com
0 5 0 10/07 11/03   g.0x20.biz
0 4 0 10/15 11/03   telephone.dd.blueline.be
0 3 0 11/04 11/04   www.vouchercodez.com
0 7 0 10/11 10/30   wws.mobiec.net
0 3 0 10/15 11/03   phonewire.dd.blueline.be
0 3 0 10/14 11/05   sendfan.com
0 3 0 10/14 11/05   www.sendfan.com
0 3 0 10/13 11/03   attacke.100free.com
0 14 0 10/07 10/18   ottopay.cn