Download a list of the most observed malware DNS names that we have seen looked up during malware infections or embedded within malware binaries.

Most Observed Malware-Related DNS Names

Tue Feb 9 08:50:52 2010

10 Day Watch List      30 Day Watch List      

Embeds = number of malware binaries in which this DNS name was discovered
Rank = 30-day importance ranking (1 to 100) of most prolific malware-related DNS
Lookups = number of observed infections in which this DNS name was looked up
DNS = malware DNS list...be afraid if your PC looks up these entries.

Rank Lookups Embeds First Last CC DNS
18 134 0 01/10 02/08   citi-bank.ru
10 73 0 01/10 02/08   pozeml.com
9 68 0 01/10 02/08   pozemle.cn
8 69 1 01/10 02/08   proxim.ircgalaxy.pl
6 69 0 01/10 02/02   down1130.iwillhavesexygirls.com
5 35 0 01/13 02/07   www.vouchercodez.com
5 21 0 02/03 02/08   down0129.iwillhavesexygirls.com
4 31 0 01/15 02/08   jsactivity.com
4 31 0 01/15 02/08   bfkq.com
4 20 0 01/28 02/05   mjjia.cn
4 19 0 01/28 02/05   hotelseas.com
4 19 0 01/28 02/05   braverhotels.com
4 43 96 01/16 01/17   m.drd3h.com
3 31 0 01/10 02/07   av.lometr.pl
3 15 0 02/01 02/08   img.ub8.net
3 16 13 01/11 02/08   siliconfireware.ru
3 13 0 02/03 02/08   file0129.iwillhavesexygirls.com
3 20 0 01/10 02/08   proxima.ircgalaxy.pl
2 18 0 01/11 02/08   spi.domainsponsor.com
2 23 11 01/10 02/07   moscow-advokat.ru
2 20 0 01/15 02/03   search.toptravellingtips.com
2 0 96 01/16 01/17   cilevb.com
1 25 0 01/15 01/28   1130.kfgrtjer.cn
1 8 0 02/01 02/08   stashonline.info
1 11 0 01/15 02/04   xz.ub9.net
1 13 0 01/10 02/08   cx10man.weedns.com
1 8 0 01/29 02/02   config1130.iwillhavesexygirls.com
1 4 13 01/11 02/08   ebookfinaltrash.ru
1 3 13 01/11 02/08   welcome3.smile.co.uk
1 10 0 01/15 02/04   in.7cy.net
1 3 13 01/11 02/08   www.proxy-socks.net
1 1 13 01/11 02/08   www.bbin.ru
1 16 0 01/15 01/24   wws.mobiec.net
1 8 0 01/15 02/04   in1.7cy.net
1 0 48 01/16 01/17   vuln.st
1 1 13 01/11 02/08   kidos-bank.ru
0 0 13 01/11 02/08   prodexteam.net
0 0 13 01/11 02/08   www.masterbank.ru
0 0 13 01/11 02/08   www.uniastrum.ru
0 0 13 01/11 02/08   www.bankofmadura.com
0 0 13 01/11 02/08   www.baltbank.ru
0 0 13 01/11 02/08   www.mdmbank.ru
0 0 13 01/11 02/08   digital-relaxkgb.ru
0 0 13 01/11 02/08   olb2.nationet.com
0 0 13 01/11 02/08   grepware-facility.ru
0 0 13 01/11 02/08   prorat.net
0 0 13 01/11 02/08   www.ovk.ru
0 0 13 01/11 02/08   www.absolutbank.ru
0 0 13 01/11 02/08   gutabank.ru
0 0 13 01/11 02/08   www.uralsib.ru
0 0 13 01/11 02/08   gronxplanets.ru
0 0 13 01/11 02/08   www.vtb.ru
0 0 13 01/11 02/08   53bank.com
0 0 13 01/11 02/08   alfabank.ru
0 0 13 01/11 02/08   asmworm.com
0 0 13 01/11 02/08   www.bankofindia.com
0 0 13 01/11 02/08   atmacasoft.com
0 0 13 01/11 02/08   www.icbank.ru
0 0 13 01/11 02/08   www.mmbank.ru
0 0 13 01/11 02/08   www.sbrf.ru
0 0 13 01/11 02/08   myonlineaccounts2.abbeynational.co.uk
0 0 13 01/11 02/08   www.cbr.ru
0 0 13 01/11 02/08   tat-neftbank.ru
0 0 13 01/11 02/08   www.spyinstructors.com
0 0 13 01/11 02/08   fethard.biz
0 0 13 01/11 02/08   online-business.lloydstsb.co.uk
0 0 13 01/11 02/08   hyper-space-fuel.ru
0 0 13 01/11 02/08   seclab.ru
0 0 13 01/11 02/08   pizdabol-inc.ru
0 0 13 01/11 02/08   www.kmb.ru
0 0 13 01/11 02/08   prodexteam.netcrutop.nu
0 0 13 01/11 02/08   acrolein-hawk.rubanking.halifax-online.co.uk
0 0 13 01/11 02/08   securitylab.ru
0 0 13 01/11 02/08   www.allahabadbank.com
0 0 13 01/11 02/08   yambo.biz
0 0 13 01/11 02/08   www.netmagister.com
0 5 0 01/23 02/04   jbeegvia.ru
0 3 11 01/10 02/07   ozbytes.dal.net
0 3 11 01/10 02/07   brussels.be.eu.undernet.org
0 3 11 01/10 02/07   qis.md.us.dal.net
0 3 11 01/10 02/07   coins.dal.net
0 3 11 01/10 02/07   viking.dal.net
0 2 11 01/10 02/07   diemen.nl.eu.undernet.org
0 2 11 01/10 02/07   graz.at.eu.undernet.org
0 6 0 01/20 01/28   irc.zief.pl
0 2 11 01/10 02/07   washington.dc.us.undernet.org
0 2 11 01/10 02/07   london.uk.eu.undernet.org
0 8 0 01/19 01/22   ty.lnlycnc.cn
0 1 11 01/10 02/07   broadway.ny.us.dal.net
0 1 11 01/10 02/07   gaspode.zanet.org.za
0 3 0 01/30 02/04   dhkgpylwrl.com
0 5 0 01/10 02/03   fx010413.whyi.org
0 0 7 01/15 02/08   www.nomos.ru
0 3 0 01/21 02/04   adserving.cpxinteractive.com
0 3 0 01/21 02/04   panther1.cpxinteractive.com
0 5 0 01/18 01/30   as.casalemedia.com
0 2 11 01/10 02/07   flanders.be.eu.undernet.org
0 2 11 01/10 02/07   lulea.se.eu.undernet.org
0 2 11 01/10 02/07   caen.fr.eu.undernet.org
0 2 11 01/10 02/07   lia.zanet.net