Sponsored by..

Monday, 5 November 2012

Dynamic DNS sites you might want to block

These domains belong to ChangeIP.com, which I guess is a legitimate company providing Dynamic DNS services, but one that is being abused by the bad guys. These will be used with some random subdomain unless it's a corporate site (like ChangeIP.com itself) pointing to a random IP address somewhere.. so blocking IPs won't work here.

There are two versions of this list, one links through to the Google Safe Browsing diagnostics report in case you want to review them on a case-by-case basis before blocking them (yellow highlighted ones have some malware, red highlighted ones are blocked by Google). The second one is a plain list of everything in case you want to block them completely.

You might notice one of the domains is called b0tnet.com which is a peculiar name for a legitimate business to register.

1dumb.com [report]
25u.com [report]
2waky.com [report]
3-a.net [report]
4dq.com [report]
4mydomain.com [report]
4pu.com [report]
acmetoy.com [report]
almostmy.com [report]
americanunfinished.com [report]
anastasion.com [report]
authorizeddns.net [report]
authorizeddns.org [report]
authorizeddns.us [report]
b0tnet.com [report]
bigmoney.biz [report]
changeip.biz [report]
changeip.co.uk [report]
changeip.me [report]
changeip.name [report]
changeip.net [report]
changeip.org [report]
changeip.us [report]
cleansite.biz [report]
cleansite.info [report]
cleansite.us [report]
compress.to [report]
ddns.com.co [report]
ddns.info [report]
ddns.me.uk [report]
ddns.mobi [report]
ddns.ms [report]
ddns.name [report]
ddns.us [report]
dhcp.biz [report]
dns-dns.com [report]
dns-report.com [report]
dns-stuff.com [report]
dns04.com [report]
dns05.com [report]
dns1.us [report]
dns2.us [report]
dnsfailover.net [report]
dnsrd.com [report]
dnyp.com [report]
dsmtp.com [report]
dumb1.com [report]
dynamicdns.biz [report]
dynamicdns.co [report]
dynamicdns.co.uk [report]
dynamicdns.com.co [report]
dynamicdns.me.uk [report]
dynamicdns.org.uk [report]
dyndns.pro [report]
edns.biz [report]
epac.to [report]
esmtp.biz [report]
ezua.com [report]
faqserv.com [report]
fartit.com [report]
freeddns.com [report]
freetcp.com [report]
freewww.biz [report]
freewww.info [report]
ftp1.biz [report]
ftpserver.biz [report]
gettrials.com [report]
got-game.org [report]
gr8domain.biz [report]
gr8name.biz [report]
https443.net [report]
https443.org [report]
instanthq.com [report]
iownyour.biz [report]
iownyour.org [report]
isasecret.com [report]
itemdb.com [report]
itsaol.com [report]
jetos.com [report]
jkub.com [report]
jungleheart.com [report]
justdied.com [report]
lflink.com [report]
lflinkup.com [report]
lflinkup.net [report]
lflinkup.org [report]
longmusic.com [report]
mefound.com [report]
misecure.com [report]
moneyhome.biz [report]
monitorip.com [report]
mrbasic.com [report]
mrbonus.com [report]
mrface.com [report]
mrnorris.com [report]
mrslove.com [report]
my03.com [report]
mydad.info [report]
myddns.com [report]
myftp.info [report]
myftp.name [report]
mymom.info [report]
mynumber.org [report]
mypicture.info [report]
mypop3.net [report]
mypop3.org [report]
mysecondarydns.com [report]
mywww.biz [report]
myz.info [report]
ninth.biz [report]
ns01.biz [report]
ns01.info [report]
ns01.us [report]
ns02.biz [report]
ns02.info [report]
ns02.us [report]
ns1.name [report]
ns2.name [report]
ns3.name [report]
ocry.com [report]
onedumb.com [report]
onmypc.biz [report]
onmypc.info [report]
onmypc.net [report]
onmypc.org [report]
onmypc.us [report]
organiccrap.com [report]
otzo.com [report]
ourhobby.com [report]
pcanywhere.net [report]
poppop.com [report]
port25.biz [report]
portrelay.com [report]
privatename.org [report]
proxydns.com [report]
qhigh.com [report]
qpoe.com [report]
rebatesrule.net [report]
sellclassics.com [report]
sendsmtp.com [report]
serveuser.com [report]
serveusers.com [report]
sexidude.com [report]
sexxxy.biz [report]
sixth.biz [report]
squirly.info [report]
ssl443.org [report]
ssmailer.com [report]
theblacklist.org [report]
toh.info [report]
toythieves.com [report]
trickip.net [report]
trickip.org [report]
vizvaz.com [report]
wha.la [report]
wikaba.com [report]
www1.biz [report]
wwwhost.biz [report]
x24hr.com [report]
xxuz.com [report]
xxxy.biz [report]
xxxy.info [report]
ygto.com [report]
youdontcare.com [report]
yourtrap.com [report]
zaantek.com [report]
zyns.com [report]
zzux.com [report]


If you want to block all of these sites, then the domains I can find are as follows:
1dumb.com
25u.com
2waky.com
3-a.net
4dq.com
4mydomain.com
4pu.com
acmetoy.com
almostmy.com
americanunfinished.com
anastasion.com
authorizeddns.net
authorizeddns.org
authorizeddns.us
b0tnet.com
bigmoney.biz
changeip.biz
changeip.co.uk
changeip.me
changeip.name
changeip.net
changeip.org
changeip.us
cleansite.biz
cleansite.info
cleansite.us
compress.to
ddns.com.co
ddns.info
ddns.me.uk
ddns.mobi
ddns.ms
ddns.name
ddns.us
dhcp.biz
dns-dns.com
dns-report.com
dns-stuff.com
dns04.com
dns05.com
dns1.us
dns2.us
dnsfailover.net
dnsrd.com
dnyp.com
dsmtp.com
dumb1.com
dynamicdns.biz
dynamicdns.co
dynamicdns.co.uk
dynamicdns.com.co
dynamicdns.me.uk
dynamicdns.org.uk
dyndns.pro
edns.biz
epac.to
esmtp.biz
ezua.com
faqserv.com
fartit.com
freeddns.com
freetcp.com
freewww.biz
freewww.info
ftp1.biz
ftpserver.biz
gettrials.com
got-game.org
gr8domain.biz
gr8name.biz
https443.net
https443.org
instanthq.com
iownyour.biz
iownyour.org
isasecret.com
itemdb.com
itsaol.com
jetos.com
jkub.com
jungleheart.com
justdied.com
lflink.com
lflinkup.com
lflinkup.net
lflinkup.org
longmusic.com
mefound.com
misecure.com
moneyhome.biz
monitorip.com
mrbasic.com
mrbonus.com
mrface.com
mrnorris.com
mrslove.com
my03.com
mydad.info
myddns.com
myftp.info
myftp.name
mymom.info
mynumber.org
mypicture.info
mypop3.net
mypop3.org
mysecondarydns.com
mywww.biz
myz.info
ninth.biz
ns01.biz
ns01.info
ns01.us
ns02.biz
ns02.info
ns02.us
ns1.name
ns2.name
ns3.name
ocry.com
onedumb.com
onmypc.biz
onmypc.info
onmypc.net
onmypc.org
onmypc.us
organiccrap.com
otzo.com
ourhobby.com
pcanywhere.net
poppop.com
port25.biz
portrelay.com
privatename.org
proxydns.com
qhigh.com
qpoe.com
rebatesrule.net
sellclassics.com
sendsmtp.com
serveuser.com
serveusers.com
sexidude.com
sexxxy.biz
sixth.biz
squirly.info
ssl443.org
ssmailer.com
theblacklist.org
toh.info
toythieves.com
trickip.net
trickip.org
vizvaz.com
wha.la
wikaba.com
www1.biz
wwwhost.biz
x24hr.com
xxuz.com
xxxy.biz
xxxy.info
ygto.com
youdontcare.com
yourtrap.com
zaantek.com
zyns.com
zzux.com

No comments: