Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #list of domains used by the NSA to install malware on victim’s PCs
- #may contain duplicates
- #made: 04,25,2015
- #add this list to your hosts file
- #----------START OF LIST----------
- #DoubleFantasy:
- 127.0.0.1 advancing-technology.com
- 127.0.0.1 avidnewssource.com
- 127.0.0.1 businessdealsblog.com
- 127.0.0.1 businessedgeadvance.com
- 127.0.0.1 charging-technology.com
- 127.0.0.1 computertechanalysis.com
- 127.0.0.1 config.getmyip.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 globalnetworkanalys.com
- 127.0.0.1 melding-technology.com
- 127.0.0.1 myhousetechnews.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 newsterminalvelocity.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 selective-business.com
- 127.0.0.1 slayinglance.com
- 127.0.0.1 successful-marketing-now.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 taking-technology.com
- 127.0.0.1 techasiamusicsvr.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 technicaldigitalreporting.com
- 127.0.0.1 timelywebsitehostesses.com
- 127.0.0.1 dt1blog.com
- 127.0.0.1 forboringbusinesses.com
- 127.0.0.1 www.advancing-technology.com
- 127.0.0.1 www.avidnewssource.com
- 127.0.0.1 www.businessdealsblog.com
- 127.0.0.1 www.businessedgeadvance.com
- 127.0.0.1 www.charging-technology.com
- 127.0.0.1 www.computertechanalysis.com
- 127.0.0.1 www.config.getmyip.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.globalnetworkanalys.com
- 127.0.0.1 www.melding-technology.com
- 127.0.0.1 www.myhousetechnews.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.newsterminalvelocity.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.selective-business.com
- 127.0.0.1 www.slayinglance.com
- 127.0.0.1 www.successful-marketing-now.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.taking-technology.com
- 127.0.0.1 www.techasiamusicsvr.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.technicaldigitalreporting.com
- 127.0.0.1 www.timelywebsitehostesses.com
- 127.0.0.1 www.dt1blog.com
- 127.0.0.1 www.forboringbusinesses.com
- #EquationLaser:
- 127.0.0.1 lsassoc.com #re-registered, not malicious at the moment
- 127.0.0.1 gar-tech.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.lsassoc.com #re-registered, not malicious at the moment
- 127.0.0.1 www.gar-tech.com #SINKHOLED BY KASPERSKY LAB
- #Fanny:
- 127.0.0.1 webuysupplystore.mooo.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.webuysupplystore.mooo.com #SINKHOLED BY KASPERSKY LAB
- #EquationDrug:
- 127.0.0.1 newjunk4u.com
- 127.0.0.1 easyadvertonline.com
- 127.0.0.1 newip427.changeip.net #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 ad-servicestats.net #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 subad-server.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 ad-noise.net
- 127.0.0.1 ad-void.com
- 127.0.0.1 aynachatsrv.com
- 127.0.0.1 damavandkuh.com
- 127.0.0.1 fnlpic.com
- 127.0.0.1 monster-ads.net
- 127.0.0.1 nowruzbakher.com
- 127.0.0.1 sherkhundi.com
- 127.0.0.1 quik-serv.com
- 127.0.0.1 nickleplatedads.com
- 127.0.0.1 arabtechmessenger.net
- 127.0.0.1 amazinggreentechshop.com
- 127.0.0.1 foroushi.net
- 127.0.0.1 technicserv.com
- 127.0.0.1 goldadpremium.com
- 127.0.0.1 honarkhaneh.net
- 127.0.0.1 parskabab.com
- 127.0.0.1 technicupdate.com
- 127.0.0.1 technicads.com
- 127.0.0.1 customerscreensavers.com
- 127.0.0.1 darakht.com
- 127.0.0.1 ghalibaft.com
- 127.0.0.1 adservicestats.com
- 127.0.0.1 247adbiz.net #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 webbizwild.com
- 127.0.0.1 roshanavar.com
- 127.0.0.1 afkarehroshan.com
- 127.0.0.1 thesuperdeliciousnews.com
- 127.0.0.1 adsbizsimple.com
- 127.0.0.1 goodbizez.com
- 127.0.0.1 meevehdar.com
- 127.0.0.1 xlivehost.com
- 127.0.0.1 gar-tech.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 downloadmpplayer.com
- 127.0.0.1 honarkhabar.com
- 127.0.0.1 techsupportpwr.com
- 127.0.0.1 zhalehziba.com
- 127.0.0.1 serv-load.com
- 127.0.0.1 wangluoruanjian.com
- 127.0.0.1 islamicmarketing.net
- 127.0.0.1 noticiasftpsrv.com
- 127.0.0.1 coffeehausblog.com
- 127.0.0.1 platads.com
- 127.0.0.1 havakhosh.com
- 127.0.0.1 toofanshadid.com
- 127.0.0.1 bazandegan.com
- 127.0.0.1 sherkatkonandeh.com
- 127.0.0.1 mashinkhabar.com
- 127.0.0.1 quickupdateserv.com
- 127.0.0.1 rapidlyserv.com
- 127.0.0.1 www.newjunk4u.com
- 127.0.0.1 www.easyadvertonline.com
- 127.0.0.1 www.newip427.changeip.net #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.ad-servicestats.net #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.subad-server.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.ad-noise.net
- 127.0.0.1 www.ad-void.com
- 127.0.0.1 www.aynachatsrv.com
- 127.0.0.1 www.damavandkuh.com
- 127.0.0.1 www.fnlpic.com
- 127.0.0.1 www.monster-ads.net
- 127.0.0.1 www.nowruzbakher.com
- 127.0.0.1 www.sherkhundi.com
- 127.0.0.1 www.quik-serv.com
- 127.0.0.1 www.nickleplatedads.com
- 127.0.0.1 www.arabtechmessenger.net
- 127.0.0.1 www.amazinggreentechshop.com
- 127.0.0.1 www.foroushi.net
- 127.0.0.1 www.technicserv.com
- 127.0.0.1 www.goldadpremium.com
- 127.0.0.1 www.honarkhaneh.net
- 127.0.0.1 www.parskabab.com
- 127.0.0.1 www.technicupdate.com
- 127.0.0.1 www.technicads.com
- 127.0.0.1 www.customerscreensavers.com
- 127.0.0.1 www.darakht.com
- 127.0.0.1 www.ghalibaft.com
- 127.0.0.1 www.adservicestats.com
- 127.0.0.1 www.247adbiz.net #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.webbizwild.com
- 127.0.0.1 www.roshanavar.com
- 127.0.0.1 www.afkarehroshan.com
- 127.0.0.1 www.thesuperdeliciousnews.com
- 127.0.0.1 www.adsbizsimple.com
- 127.0.0.1 www.goodbizez.com
- 127.0.0.1 www.meevehdar.com
- 127.0.0.1 www.xlivehost.com
- 127.0.0.1 www.gar-tech.com #SINKHOLED BY KASPERSKY LAB
- 127.0.0.1 www.downloadmpplayer.com
- 127.0.0.1 www.honarkhabar.com
- 127.0.0.1 www.techsupportpwr.com
- 127.0.0.1 www.zhalehziba.com
- 127.0.0.1 www.serv-load.com
- 127.0.0.1 www.wangluoruanjian.com
- 127.0.0.1 www.islamicmarketing.net
- 127.0.0.1 www.noticiasftpsrv.com
- 127.0.0.1 www.coffeehausblog.com
- 127.0.0.1 www.platads.com
- 127.0.0.1 www.havakhosh.com
- 127.0.0.1 www.toofanshadid.com
- 127.0.0.1 www.bazandegan.com
- 127.0.0.1 www.sherkatkonandeh.com
- 127.0.0.1 www.mashinkhabar.com
- 127.0.0.1 www.quickupdateserv.com
- 127.0.0.1 www.rapidlyserv.com
- #GrayFish:
- 127.0.0.1 ad-noise.net
- 127.0.0.1 business-made-fun.com
- 127.0.0.1 businessdirectnessource.com
- 127.0.0.1 charmedno1.com
- 127.0.0.1 cribdare2no.com
- 127.0.0.1 dowelsobject.com
- 127.0.0.1 following-technology.com
- 127.0.0.1 forgotten-deals.com
- 127.0.0.1 functional-business.com
- 127.0.0.1 housedman.com
- 127.0.0.1 industry-deals.com
- 127.0.0.1 listennewsnetwork.com
- 127.0.0.1 phoneysoap.com
- 127.0.0.1 posed2shade.com
- 127.0.0.1 quik-serv.com
- 127.0.0.1 rehabretie.com
- 127.0.0.1 speedynewsclips.com
- 127.0.0.1 teatac4bath.com
- 127.0.0.1 unite3tubes.com
- 127.0.0.1 unwashedsound.com
- 127.0.0.1 www.ad-noise.net
- 127.0.0.1 www.business-made-fun.com
- 127.0.0.1 www.businessdirectnessource.com
- 127.0.0.1 www.charmedno1.com
- 127.0.0.1 www.cribdare2no.com
- 127.0.0.1 www.dowelsobject.com
- 127.0.0.1 www.following-technology.com
- 127.0.0.1 www.forgotten-deals.com
- 127.0.0.1 www.functional-business.com
- 127.0.0.1 www.housedman.com
- 127.0.0.1 www.industry-deals.com
- 127.0.0.1 www.listennewsnetwork.com
- 127.0.0.1 www.phoneysoap.com
- 127.0.0.1 www.posed2shade.com
- 127.0.0.1 www.quik-serv.com
- 127.0.0.1 www.rehabretie.com
- 127.0.0.1 www.speedynewsclips.com
- 127.0.0.1 www.teatac4bath.com
- 127.0.0.1 www.unite3tubes.com
- 127.0.0.1 www.unwashedsound.com
- #TripleFantasy:
- 127.0.0.1 arm2pie.com
- 127.0.0.1 brittlefilet.com
- 127.0.0.1 cigape.net
- 127.0.0.1 crisptic01.net
- 127.0.0.1 fliteilex.com
- 127.0.0.1 itemagic.net
- 127.0.0.1 micraamber.net
- 127.0.0.1 mimicrice.com
- 127.0.0.1 rampagegramar.com
- 127.0.0.1 rubi4edit.com
- 127.0.0.1 rubiccrum.com
- 127.0.0.1 rubriccrumb.com
- 127.0.0.1 team4heat.net
- 127.0.0.1 tropiccritics.com
- 127.0.0.1 www.arm2pie.com
- 127.0.0.1 www.brittlefilet.com
- 127.0.0.1 www.cigape.net
- 127.0.0.1 www.crisptic01.net
- 127.0.0.1 www.fliteilex.com
- 127.0.0.1 www.itemagic.net
- 127.0.0.1 www.micraamber.net
- 127.0.0.1 www.mimicrice.com
- 127.0.0.1 www.rampagegramar.com
- 127.0.0.1 www.rubi4edit.com
- 127.0.0.1 www.rubiccrum.com
- 127.0.0.1 www.rubriccrumb.com
- 127.0.0.1 www.team4heat.net
- 127.0.0.1 www.tropiccritics.com
- #Equation group's exploitation servers:
- 127.0.0.1 standardsandpraiserepurpose.com
- 127.0.0.1 suddenplot.com
- 127.0.0.1 technicalconsumerreports.com
- 127.0.0.1 technology-revealed.com
- 127.0.0.1 www.standardsandpraiserepurpose.com
- 127.0.0.1 www.suddenplot.com
- 127.0.0.1 www.technicalconsumerreports.com
- 127.0.0.1 www.technology-revealed.com
- #IPs hardcoded in malware configuration blocks: (websites hosted on)
- 127.0.0.1 toniccutie.com
- 127.0.0.1 synclegacy.com
- 127.0.0.1 cleanleans.com
- 127.0.0.1 technicaldigitalreporting.com
- 127.0.0.1 z1ddu.com
- 127.0.0.1 cobranewsource.com
- 127.0.0.1 dt1blog.com
- 127.0.0.1 forboringbusinesses.com
- 127.0.0.1 bana1fun.net
- 127.0.0.1 cds4arab.com
- 127.0.0.1 globalnetworkanalys.com
- 127.0.0.1 timelywebsitehostesses.com
- 127.0.0.1 mysaltychocolateballs.com
- 127.0.0.1 heapsandpayed.com
- 127.0.0.1 thedealsdealsdeals.com
- 127.0.0.1 yawntincain.com
- 127.0.0.1 advancing-technology.com
- 127.0.0.1 bikedlong.com
- 127.0.0.1 hamricetoteach.com
- 127.0.0.1 slayinglance.com
- 127.0.0.1 snow4edunder.com
- 127.0.0.1 mows4your.com
- 127.0.0.1 charging-technology.com
- 127.0.0.1 www.toniccutie.com
- 127.0.0.1 www.synclegacy.com
- 127.0.0.1 www.cleanleans.com
- 127.0.0.1 www.technicaldigitalreporting.com
- 127.0.0.1 www.z1ddu.com
- 127.0.0.1 www.cobranewsource.com
- 127.0.0.1 www.dt1blog.com
- 127.0.0.1 www.forboringbusinesses.com
- 127.0.0.1 www.bana1fun.net
- 127.0.0.1 www.cds4arab.com
- 127.0.0.1 www.globalnetworkanalys.com
- 127.0.0.1 www.timelywebsitehostesses.com
- 127.0.0.1 www.mysaltychocolateballs.com
- 127.0.0.1 www.heapsandpayed.com
- 127.0.0.1 www.thedealsdealsdeals.com
- 127.0.0.1 www.yawntincain.com
- 127.0.0.1 www.advancing-technology.com
- 127.0.0.1 www.bikedlong.com
- 127.0.0.1 www.hamricetoteach.com
- 127.0.0.1 www.slayinglance.com
- 127.0.0.1 www.snow4edunder.com
- 127.0.0.1 www.mows4your.com
- 127.0.0.1 www.charging-technology.com
- #nothing found for 195[.]128[.]235[.]231
- #nothing found for 195[.]128[.]235[.]235
- #nothing found for 195[.]81[.]34[.]67
- #nothing found for 203[.]150[.]231[.]73
- #nothing found for 212[.]61[.]54[.]239
- #nothing found for 81[.]31[.]34[.]175
- #nothing found for 81[.]31[.]36[.]174
- #nothing found for 81[.]31[.]38[.]163
- #nothing found for 81[.]31[.]38[.]166
- #nothing found for 84[.]233[.]205[.]99
- #----------END OF LIST----------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement