The domain
hotmailbox.com often comes up when looking at malicious domains, it's a domain used to provide a bulletproof email address for domain registration. The registrar for hotmailbox.com is the scammer's favourite, BIZCN which probably explains why it has lingered for so long.
There are several hundred domains registered through email accounts at hotmailbox.com, all of them are bogus and follow a similar pattern with bogus US addresses. Most of the domains with active websites are hosted in Romania, in netblocks that have a known bad reputation.
You can download a list of domains, IPs and MyWOT ratings for at least some of these domains
here [CSV], or if you just want a plain list then keep scrolling down.
Because the hotmailbox.com domains are all in bad blocks or dedicated servers, then it is possible to block access to these IP ranges or individual boxes to prevent infection. I would recommend blocking the following:
84.247.61.0/24 (Sistem Soft Network, Romania)
91.217.162.0/24 (Voejkova Nadezhda, Russia)
94.63.149.0/24 (SC CORAL IT OFFICE SRL, Romania)
94.244.80.7 (Uab Kauno Interneto Sistemos, Lithunia)
95.64.55.0/24 (Netserv Consult SRL, Romania)
96.9.139.208/28 (UAB "Dominant Plius", c/o HOSTNOC, US)
141.136.16.14 (MORE SECURE SRL, Romania)
173.236.34.238 (Inferno Solutions, UK)
184.105.178.85 (Hurricane Electric, US [parked])
188.138.90.110 (Intergenia AG, Germany)
188.138.116.223 (Intergenia AG, Germany)
188.229.0.0/17 (Netserv Consult SRL, Romania)
202.75.41.42 (TM VADS DC Hosting, Malaysia)
209.212.157.208/29 (BONHOST, Ukraine)
212.117.164.39 (root SA, Luxembourg)
217.23.9.247 (Worldstream, Netherlands)
220.112.0.0/18 (Guangzhou For Great Wall Broadband Network, China)
Not every site in those ranges is part of this group, and indeed there may be a few legitimate sites, but you are much more likely to come into contact with a malware site on these IP addresses than a real one, so treat them as "high risk".
If you have any examples of domains using hotmailbox.com that are not listed, then please consider adding them to the Comments.
| 8nm2.com |
| aaaholic.com |
| aaoutfit.com |
| aarocket.com |
| abcartel.com |
| abminute.com |
| abutable.com |
| acgoblin.com |
| aemodern.com |
| afchalet.com |
| agfiesta.com |
| alexblane.com |
| alisa-carter.com |
| analitycscredit.com |
| asweds.com |
| automaticsecurityscan.com |
| awesomepornofree.com |
| awfulice.com |
| bcrocket.com |
| bdcartel.com |
| bestipdns.com |
| bookaros.com |
| bookarra.com |
| bookavio.com |
| bookdolo.com |
| bookfula.com |
| bookgusa.com |
| bookmonn.com |
| bookmono.com |
| bookmylo.com |
| booknunu.com |
| bookpolo.com |
| booksgou.com |
| booksoco.com |
| booksolo.com |
| booktuba.com |
| bookvila.com |
| bookvivi.com |
| bookvoxy.com |
| bookzoul.com |
| bookzula.com |
| caldnsserver.com |
| calmsearch.org |
| cbhammer.com |
| cblender.com |
| cebistro.com |
| cfaholic.com |
| clickabundant.org |
| clickaccept.org |
| clickadvice.org |
| clickahead.org |
| clickalmost.org |
| clickan.org |
| clickancient.org |
| clickany.org |
| clickanybody.org |
| clickanybody.org |
| clickarrogant.org |
| clickarvada.org |
| clickattempt.org |
| clickautomatic.org |
| clickbad.org |
| clickbatonrouge.org |
| clickber.org |
| clickboa.org |
| clickbored.org |
| clickbrake.org |
| clickbury.org |
| clickcharleston.org |
| clickclear.org |
| clickclever.org |
| clickdesmoines.org |
| clickdowe.org |
| clickdrea.org |
| clickdreadful.org |
| clickfer.org |
| clickflat.org |
| clickfortlauderdale.org |
| clickfremont.org |
| clickhartford.org |
| clickicy.org |
| clickill.org |
| clickjacksonville.org |
| clickmesquite.org |
| clicknorman.org |
| clickodd.org |
| clickolathe.org |
| clicksalem.org |
| clickshy.org |
| clicksyracuse.org |
| clickwet.org |
| comasians.com |
| comchemicalsns.com |
| daily-basis.com |
| daletter.com |
| darksecurityscan.com |
| dateoncount.com |
| dbchalet.com |
| dnseasy.ru |
| dnsforwebuse.com |
| dns-good-you.com |
| dnshot.ru |
| dnssuperb.com |
| dnsundservice.com |
| dnsvip.ru |
| domainforuse.com |
| dowpolenas.org |
| dynamicip-dns.com |
| e48i.com |
| easysecurityscan.com |
| edsawake.org |
| edsawake.org |
| edsback.org |
| edsbang.org |
| edsbang.org |
| edsbeautiful.com |
| edsbent.com |
| edsbent.com |
| edsbid.com |
| edsblew.com |
| edscold.com |
| edsfull.com |
| edsfull.com |
| edswoken.org |
| emptywin.com |
| engduates.com |
| excellentdnshost.com |
| fastsapere.com |
| fastsofgeld.com |
| findacid.org |
| findaddition.org |
| findadvertisem.org |
| findalert.org |
| findangry.org |
| findattack.org |
| findawful.org |
| findbitter.org |
| findblow.org |
| findbrake.org |
| findbrave.org |
| findcaret.org |
| findchalk.org |
| findchance.org |
| findcheeks.org |
| findclumsy.org |
| findcolorful.org |
| findconsonant.org |
| findcopper.org |
| findcurly.org |
| finddamaged.org |
| finddistribution.org |
| finddrawer.org |
| finddriving.org |
| finddrop.org |
| findear.org |
| findearly.org |
| findears.org |
| findearth.org |
| findeast.org |
| findexperie.org |
| findeyes.org |
| findfertile.org |
| findfierce.org |
| findforeign.org |
| findforget.org |
| findfort.org |
| findforth.org |
| findharsh.org |
| findinexpensive.org |
| findinnocent.org |
| findjolly.org |
| findjoyous.org |
| findjuicy.org |
| findlate.org |
| findsister.org |
| findsize.org |
| findsky.org |
| findsour.org |
| findstage.org |
| findstart.org |
| findstation.org |
| findstem.org |
| findstep.org |
| findstitch.org |
| findstone.org |
| findstraight.org |
| findstrange.org |
| finduneven.org |
| findunsightly.org |
| findvoiceless.org |
| findwandering.org |
| findwet.org |
| findwicked.org |
| fixtracker.com |
| forumaccept.org |
| forumadd.org |
| forumadmire.org |
| forumadmit.org |
| forumadvise.org |
| forumafford.org |
| forumallow.org |
| forumamuse.org |
| forumanalyze.org |
| forumbusy.org |
| forumcalm.org |
| forumcold.org |
| forumcute.org |
| forumdamp.org |
| frailwin.com |
| frequentwin.com |
| gcocgle.com |
| goodworkdns.com |
| goodworkdns.com |
| googletrackgeo.com |
| hotmailbox.com |
| ibtable.com |
| ibtable.com |
| imageacid.org |
| imagebad.org |
| imagebent.org |
| imagefipe.org |
| imagelue.org |
| install-internet.com |
| ipbestdns.com |
| IpCodesNet.com |
| IpInternetExplorer.com |
| ipmagicnet.com |
| ipnetworklegal.com |
| ipsecurityuse.com |
| ip-tracing.com |
| IpWebDirectory.com |
| koxtable.com |
| lizamoon.com |
| m0o0.com |
| malineip.com |
| milapop.com |
| netlinksgo.com |
| networkdnstrust.com |
| nondeip.com |
| op0o.com |
| ottomip.com |
| ottomip.com |
| phlorip.com |
| pornootrada.com |
| portalkey.org |
| s0po.com |
| searchabout.org |
| searchact.org |
| searchadorable.org |
| searchadvice.org |
| searchaffect.org |
| searchafternoon.org |
| searchago.org |
| searchairplane.org |
| searchalaska.org |
| searchalice.org |
| searchalike.org |
| searchallow.org |
| searchaloud.org |
| searchalphabet.org |
| searchalready.org |
| searchalready.org |
| searchalso.org |
| searchalso.org |
| searchalthough.org |
| searcham.org |
| searchamount.org |
| searchamusement.org |
| searchand.org |
| searchangle.org |
| searchanimal.org |
| searchanswer.org |
| searchant.org |
| searchapparatus.org |
| searcharound.org |
| searcharrange.org |
| searcharrow.org |
| searchas.org |
| searchaside.org |
| searchask.org |
| searchasleep.org |
| searchaswe.org |
| searchat.org |
| searchate.org |
| searchatlantic.org |
| searchatmosphere.org |
| searchatom.org |
| searchatomic.org |
| searchattached.org |
| searchattention.org |
| searchbad.org |
| searchbase.org |
| searchbat.org |
| searchbattery.org |
| searchbattle.org |
| searchbegan.org |
| searchbeginning.org |
| searchbegun.org |
| searchbehavior.org |
| searchbehind.org |
| searchbet.org |
| searchbetsy.org |
| searchbeyond.org |
| searchbigger.org |
| searchbiggest.org |
| searchbilly.org |
| searchbirth.org |
| searchborn.org |
| searchbottle.org |
| searchbound.org |
| searchbow.org |
| searchbowl.org |
| searchbread.org |
| searchbreak.org |
| searchbreathe.org |
| searchbreathing.org |
| searchbreeze.org |
| searchbreeze.org |
| searchbrick.org |
| searchbrick.org |
| searchbrief.org |
| searchclumsy.com |
| searchcruel.org |
| searchdead.com |
| searchdear.org |
| searchdepressed.org |
| searchdrab.com |
| searchdrab.org |
| searchdull.com |
| searchelated.org |
| searchfertile.org |
| searchfindestablish.org |
| searchfindfix.org |
| searchfindfund.org |
| searchfoggy.org |
| searchgrieving.org |
| searchhuge.org |
| searchhumid.org |
| searchhushed.org |
| searchjewel.org |
| searchlarge.org |
| searchlazy.org |
| searchmany.org |
| searchmeat.org |
| searchmedical.org |
| searchmemory.org |
| searchmetal.org |
| searchmilk.org |
| searchminiature.org |
| searchmisty.org |
| searchmixed.org |
| searchmodern.org |
| searchnumber.org |
| searchodd.org |
| searchof.org |
| searchplant.org |
| searchrelieved.org |
| searchways.org |
| seardall.org |
| static-ipdns.com |
| t02j.com |
| tadygus.com |
| trafficjoyous.com |
| u98i.com |
| ultradnshost.com |
