##
# Host Database # Updated 20260619
#
# The latest update can be found at
# https://raw.githubusercontent.com/TechnologyClassroom/HOSTS/master/filters/spamsec.txt
#
# Copyright © Michael McMahon 2011-2021. Except where otherwise specified, the
# text on HOSTS by Michael McMahon is licensed under the Creative Commons
# Attribution-ShareAlike License 4.0 (International) (CC-BY-SA 4.0).
#
# This list does not attempt to be complete and further lists are suggested.
##

# Spam / Sec
# This includes game websites that require browser addons (many of which add ads to every website and have the virus user experience)
127.0.0.1	20160810-20160810.id2.clickvalidate.com
127.0.0.1	20160810-30835.id2.clickvalidate.com
127.0.0.1	188.138.88.184 #Locky Ransomware
127.0.0.1	23.235.39.249
127.0.0.1	31.41.47.37 #Locky Ransomware
127.0.0.1	303l.fairfieldclassof63.com
127.0.0.1	4302-avredlrect.com
127.0.0.1	515srver.xyz
127.0.0.1	555-123abvbcz99a50a11.com
127.0.0.1	555-123abvbcz99a50all.com
127.0.0.1	85.25.138.187 #Locky Ransomware
127.0.0.1	a.tribalfusion.com
127.0.0.1	ad.directrev.com
127.0.0.1	adboss.com
127.0.0.1	agar.bio
127.0.0.1	agar.io.biz.tr
127.0.0.1	agario.biz
127.0.0.1	agario.biz.tr
127.0.0.1	agario.pw
127.0.0.1	agariohack.com
127.0.0.1	agariohack.info
127.0.0.1	agariomods.com
127.0.0.1	agarioplay.org
127.0.0.1	agariotool.com
127.0.0.1	alert.desktopsupportmessage.com
127.0.0.1	alert.internetsecurity.com.prioritysupport-pc247-us16.com
127.0.0.1	alwaysnew.newperfectupgrade.org
127.0.0.1	arcadewow.com
127.0.0.1	attentionneeded.media4.netdna-cdn.com
127.0.0.1	bd.summit.net # Picture with embedded Malware
127.0.0.1	besttechheadlinenow.com
127.0.0.1	blackra1n.com
127.0.0.1	blog.eduelects.com
127.0.0.1	bot.jlynx.net
127.0.0.1	broswerfailure.xyz
127.0.0.1	cdn.filmon-ads.com
127.0.0.1	cdn.mirror-codes.net
127.0.0.1	cgurrkser.com
127.0.0.1	chrome-my.updatebrowse.com
127.0.0.1	click.sportsreviews.com
127.0.0.1	clickppcbuzz.com
127.0.0.1	clicks.bestqualitysearch.com
127.0.0.1	clicks.findplex.com
127.0.0.1	com---macupdate.info
127.0.0.1	connect5364.com
127.0.0.1	consumerintelligenceusa.com
127.0.0.1	crpsro.com
127.0.0.1	download.fromdoctopdf.com
127.0.0.1	download.howtosimplified.com
127.0.0.1	downloadzipfree.com
127.0.0.1	ehrth.com
127.0.0.1	filter.onwardclick.com
127.0.0.1	firewall-security-alert.1-dx23e-error.com
127.0.0.1	free-mac-download.org
127.0.0.1	freemaintenance.check4free.top
127.0.0.1	freesearchquick.com
127.0.0.1	funwebproducts.com
127.0.0.1	gamescrystal.com
127.0.0.1	gamesyard.com
127.0.0.1	garageband.soft32.com
127.0.0.1	genieo.com
127.0.0.1	greenp0ison.com
127.0.0.1	gws.beesway.com
127.0.0.1	hereforadollar.com
127.0.0.1	homesecurityspecial.com
127.0.0.1	hot2014rewards.com
127.0.0.1	hotyoungpussy.org
127.0.0.1	icanhazip.com # Ransomware
127.0.0.1	ifindyouhere.info
127.0.0.1	image.jordan13acheap.com # Picture with embedded Malware
127.0.0.1	important-update.netsecurityalerts.com
127.0.0.1	inkcanvas.net
127.0.0.1	internet-protocol-server-alert.us
127.0.0.1	iridiumsearch.com
127.0.0.1	iur.ezanan.com
127.0.0.1	j30.mediavos.com
127.0.0.1	jorber.org
127.0.0.1	kaboho.com
127.0.0.1	keyupgrade.set2updatenow.tech
127.0.0.1	kraft.promo.eprize.com
127.0.0.1	ldugkh.com
127.0.0.1	loadfasterplease.com
127.0.0.1	lp.baboom.audio
127.0.0.1	luxyad.com
127.0.0.1	mackeeper.en.softonic.com
127.0.0.1	mackeeper.kromtech.net
127.0.0.1	mackeeper.soft32.com
127.0.0.1	mackeeperapp2.mackeeper.com
127.0.0.1	mackeeperapp3.mackeeper.com
127.0.0.1	macsecuritycheck.com
127.0.0.1	massivecomputer.com
127.0.0.1	mbvdnv.com
127.0.0.1	message.system-virus.org
127.0.0.1	monitorthecomputerstatus.com
127.0.0.1	myrewardfee.com
127.0.0.1	myway.com
127.0.0.1	news.thaprior.net
127.0.0.1	np.myway.com
127.0.0.1	okdownloads.com
127.0.0.1	onlinepctuner.com
127.0.0.1	playfree.terasgames.com
127.0.0.1	playpopgames.com
127.0.0.1	premiumpromorerewards.com
127.0.0.1	pro.25pp.com
127.0.0.1	quickdomainfwd.com
127.0.0.1	rdsa2012.com
127.0.0.1	readupdate.free2update.site
127.0.0.1	registry-error.info
127.0.0.1	s.arclk.net
127.0.0.1	s.update.tubemogul.com # Picture with embedded Malware
127.0.0.1	search.beesq.net
127.0.0.1	search.myway.com
127.0.0.1	searchnow.com
127.0.0.1	security-law-cokcgjpu.in # Fake NSA Site
127.0.0.1	seeyourprize.com
127.0.0.1	serve.popads.net
127.0.0.1	signup.sweepstakesshopping.com
127.0.0.1	sindprevs-sc.org.br
127.0.0.1	sites.securepaynet.net # Picture with embedded Malware
127.0.0.1	softwareupdaterlp.com
127.0.0.1	sponsor.adverstitial.com
127.0.0.1	srv23.api-performanc.com
127.0.0.1	status.sublineover.net
127.0.0.1	superfolder.net
127.0.0.1	supergiftland.guuz.info
127.0.0.1	supersmashflash3x.com # leads to malware
127.0.0.1	surveyrewards-netweb.com
127.0.0.1	trafficbauss.com
127.0.0.1	tt.gamescrystal.com
127.0.0.1	ttkkx21.xyz
127.0.0.1	us.com-daily-rewards.com
127.0.0.1	us.wow.com
127.0.0.1	videopuginupdates.net
127.0.0.1	virus--scan.com
127.0.0.1	warning0314.16hb20160810.security-breach.bid
127.0.0.1	welcome2cali.com # Picture with embedded Malware
127.0.0.1	windowssoftwaresite.com
127.0.0.1	winsecurity247.com
127.0.0.1	wiz.globalcartrepair.com
127.0.0.1	ww1.poptropica.com # THIS IS MY PROBLEM
127.0.0.1	ww1.warriorcats.com
127.0.0.1	www.555-123abvbcz99a50a11.com
127.0.0.1	www.555-123abvbcz99a50all.com
127.0.0.1	www.adnetworkperformance.com
127.0.0.1	www.agar.io.net
127.0.0.1	www.agario.com.tr
127.0.0.1	www.buyhyundai.com
127.0.0.1	www.choicegiftrewards.com
127.0.0.1	www.clpxserver6.com
127.0.0.1	www.clpxserver6.com.php53-4.ord1-1websitetestlink.com
127.0.0.1	www.consumers-surveys.org
127.0.0.1	www.coupons.com
127.0.0.1	www.default-search.net
127.0.0.1	www.electronicpromotionscenter.com
127.0.0.1	www.fastupdater.com
127.0.0.1	www.fizipop.com
127.0.0.1	www.freepctuning.com
127.0.0.1	www.freezipmac.net
127.0.0.1	www.friq.com
127.0.0.1	www.fromdoctopdf.com
127.0.0.1	www.gamescrystal.com
127.0.0.1	www.gamesflight.com
127.0.0.1	www.gamesyard.com
127.0.0.1	www.genieo.com
127.0.0.1	www.girlsgogames.com
127.0.0.1	www.gomady.info
127.0.0.1	www.grandascent.com
127.0.0.1	www.hotyoungpussy.org
127.0.0.1	www.macboost.net
127.0.0.1	www.mackeeper.com
127.0.0.1	www.newcomeshoes.com # Picture with embedded Malware
127.0.0.1	www.odd1.net
127.0.0.1	www.ok5xoil.com
127.0.0.1	www.osx-error.com
127.0.0.1	www.rawkfroggy.co
127.0.0.1	www.s9a13szm.com # Picture with embedded Malware
127.0.0.1	www.search.com # This search engine is usually set by adware
127.0.0.1	www.soft32.com
127.0.0.1	www.sportsreviews.com
127.0.0.1	www.surveysandpromotionsonline.com
127.0.0.1	www.sushichefgames.com
127.0.0.1	www.svqdys.com
127.0.0.1	www.syncios.com # Picture with embedded Malware
127.0.0.1	www.tapbreaker.com
127.0.0.1	www.theagario.com
127.0.0.1	www.theimages.biz # Picture with embedded Malware
127.0.0.1	www.thewebshoppee.com
127.0.0.1	www.track300.com
127.0.0.1	www.tradeadexchange.com
127.0.0.1	www.viracure.com
127.0.0.1	www.yieldtraffic.com
127.0.0.1	xb11766.com
127.0.0.1	www.y8.cm
127.0.0.1	y8.cm
127.0.0.1	yourcomputerhaveaseriousproblemspleasecallonnumberbelowtollfree.yourcomputerhaveaseriousproblemspleasecallonnumberbelowtollfree.yourcomputerhaveaseriousproblemspleasecallonnumberbelowtollfree.internet-protocol-server-alert.us
127.0.0.1	zb1.zeroredirect1.com
127.0.0.1	zb1.zeroredirect2.com
127.0.0.1	zg.zeroredirect1.com
127.0.0.1	zg.zeroredirect2.com
127.0.0.1	ziparcade.com
127.0.0.1	zj.zeroredirect1.com
127.0.0.1	zj.zeroredirect2.com
# Bright Data
# Source: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/
127.0.0.1	brdtnet.com
127.0.0.1	clientsdk.brdtnet.com
127.0.0.1	clientsdk.bright-sdk.com
127.0.0.1	luminatinet.com
127.0.0.1	proxyjs.brdtnet.com
127.0.0.1	proxyjs.brdtnet.com
127.0.0.1	proxyjs.bright-sdk.com
127.0.0.1	proxyjs.luminatinet.com
# Vo1d / Popa Botnet
# Source: https://github.com/synthient/public-research/blob/main/2026/06/popa/Popa.md
# Source: https://github.com/deepfield/public-research/blob/main/reports/2026-06-18-robovpn-neunative.md
127.0.0.1	api.vpns.robovpn.com
127.0.0.1	axe-net.com
127.0.0.1	byte-armor.com
127.0.0.1	byte-buff.com
127.0.0.1	cool-horizon.com
127.0.0.1	digiproxy.cc
127.0.0.1	download.robovpn.com
127.0.0.1	earth2trust.com
127.0.0.1	enigmaproxy.net
127.0.0.1	fast-mob.com
127.0.0.1	flashproxy.com
127.0.0.1	flexible-networks.com
127.0.0.1	ginuary.com
127.0.0.1	gmslb.net
127.0.0.1	grid-push.com
127.0.0.1	gw-flashproxy-eu.netnut.net
127.0.0.1	gw-xunjie-ca.netnut.net
127.0.0.1	gw.rainproxy.io
127.0.0.1	house-spirit.com
127.0.0.1	iprocket.io
127.0.0.1	lb.gmslb.net
127.0.0.1	link-flux.com
127.0.0.1	litics-net.com
127.0.0.1	mob-hit.com
127.0.0.1	net-echo.com
127.0.0.1	nice-protect.com
127.0.0.1	ninjatech.io
127.0.0.1	nova-lan.com
127.0.0.1	novel-layer.com
127.0.0.1	noverland.com
127.0.0.1	pixellog.io
127.0.0.1	presi-eu.enigmaproxy.net
127.0.0.1	proxy.iprocket.io
127.0.0.1	pulse-vol.com
127.0.0.1	rainproxy.io
127.0.0.1	resi-digiproxy.netnut.net
127.0.0.1	residential.digiproxy.cc
127.0.0.1	robovpn-windows-default-rtdb.firebaseio.com
127.0.0.1	robovpn.com
127.0.0.1	s01679.gmslb.net
127.0.0.1	s01683.flexible-networks.com
127.0.0.1	s01687.gmslb.net
127.0.0.1	s01689.grid-push.com
127.0.0.1	s01691.novel-layer.com
127.0.0.1	s01692.tera-home.com
127.0.0.1	s01693.gmslb.net
127.0.0.1	s01695.grid-push.com
127.0.0.1	s01696.noverland.com
127.0.0.1	s01697.gmslb.net
127.0.0.1	s01698.gmslb.net
127.0.0.1	s01699.nova-lan.com
127.0.0.1	s01700.novel-layer.com
127.0.0.1	s1.gmslb.net
127.0.0.1	s100.gmslb.net
127.0.0.1	s1234.gmslb.net
127.0.0.1	s1235.gmslb.net
127.0.0.1	s1236.gmslb.net
127.0.0.1	s1237.gmslb.net
127.0.0.1	s1238.gmslb.net
127.0.0.1	s1239.gmslb.net
127.0.0.1	s1240.gmslb.net
127.0.0.1	s1244.gmslb.net
127.0.0.1	s1246.gmslb.net
127.0.0.1	s1248.gmslb.net
127.0.0.1	s1250.gmslb.net
127.0.0.1	s1252.gmslb.net
127.0.0.1	s1254.gmslb.net
127.0.0.1	s1256.gmslb.net
127.0.0.1	s1258.gmslb.net
127.0.0.1	s1262.gmslb.net
127.0.0.1	s1266.gmslb.net
127.0.0.1	s1272.gmslb.net
127.0.0.1	s1278.gmslb.net
127.0.0.1	s1296.net-echo.com
127.0.0.1	s1310.gmslb.net
127.0.0.1	s1312.gmslb.net
127.0.0.1	s1314.noverland.com
127.0.0.1	s1314.sdkmob.org
127.0.0.1	s1316.fast-mob.com
127.0.0.1	s1318.noverland.com
127.0.0.1	s1320.gmslb.net
127.0.0.1	s1322.gmslb.net
127.0.0.1	s1324.gmslb.net
127.0.0.1	s1326.gmslb.net
127.0.0.1	s1328.gmslb.net
127.0.0.1	s1330.sdkmob.org
127.0.0.1	s1368.byte-buff.com
127.0.0.1	s1372.nice-protect.com
127.0.0.1	s1374.grid-push.com
127.0.0.1	s1380.swift-zip.com
127.0.0.1	s1382.sdkmob.org
127.0.0.1	s1386.sdkmob.org
127.0.0.1	s1480.byte-buff.com
127.0.0.1	s1483.grid-push.com
127.0.0.1	s1484.novel-layer.com
127.0.0.1	s1487.noverland.com
127.0.0.1	s1488.viki-play.com
127.0.0.1	s1489.nova-lan.com
127.0.0.1	s1491.worker-net.com
127.0.0.1	s1503.nice-protect.com
127.0.0.1	s1507.worker-net.com
127.0.0.1	s1511.net-echo.com
127.0.0.1	s1515.link-flux.com
127.0.0.1	s1517.viki-play.com
127.0.0.1	s1519.tera-home.com
127.0.0.1	s1523.swift-zip.com
127.0.0.1	s1529.nova-lan.com
127.0.0.1	s1539.link-flux.com
127.0.0.1	s1541.net-echo.com
127.0.0.1	s1549.gmslb.net
127.0.0.1	s1573.pulse-vol.com
127.0.0.1	s1587.viki-play.com
127.0.0.1	s1589.gmslb.net
127.0.0.1	s1591.gmslb.net
127.0.0.1	s1593.gmslb.net
127.0.0.1	s1595.nova-lan.com
127.0.0.1	s1597.nova-lan.com
127.0.0.1	s1599.gmslb.net
127.0.0.1	s1601.grid-push.com
127.0.0.1	s1605.viki-play.com
127.0.0.1	s1607.link-flux.com
127.0.0.1	s1664.link-flux.com
127.0.0.1	s1688.tera-home.com
127.0.0.1	s1690.nova-lan.com
127.0.0.1	s1692.litics-net.com
127.0.0.1	s1772.nova-lan.com
127.0.0.1	s1820.net-echo.com
127.0.0.1	s1822.pulse-vol.com
127.0.0.1	s1830.net-echo.com
127.0.0.1	s1832.link-flux.com
127.0.0.1	s1834.link-flux.com
127.0.0.1	s1836.gmslb.net
127.0.0.1	s1838.net-echo.com
127.0.0.1	s1840.gmslb.net
127.0.0.1	s1842.gmslb.net
127.0.0.1	s1844.nova-lan.com
127.0.0.1	s1846.gmslb.net
127.0.0.1	s1848.gmslb.net
127.0.0.1	s1850.gmslb.net
127.0.0.1	s1851.gmslb.net
127.0.0.1	s1852.gmslb.net
127.0.0.1	s1854.gmslb.net
127.0.0.1	s1856.gmslb.net
127.0.0.1	s1858.gmslb.net
127.0.0.1	s1860.gmslb.net
127.0.0.1	s1861.gmslb.net
127.0.0.1	s1862.gmslb.net
127.0.0.1	s1863.gmslb.net
127.0.0.1	s1864.gmslb.net
127.0.0.1	s1865.gmslb.net
127.0.0.1	s1866.gmslb.net
127.0.0.1	s1868.gmslb.net
127.0.0.1	s1870.gmslb.net
127.0.0.1	s1872.gmslb.net
127.0.0.1	s1874.gmslb.net
127.0.0.1	s1876.byte-buff.com
127.0.0.1	s1878.nova-lan.com
127.0.0.1	s1880.net-echo.com
127.0.0.1	s1884.gmslb.net
127.0.0.1	s2.net-echo.com
127.0.0.1	s205.link-flux.com
127.0.0.1	s206.sdkmob.org
127.0.0.1	s209.worker-net.com
127.0.0.1	s212.nova-lan.com
127.0.0.1	s217.fast-mob.com
127.0.0.1	s228.nova-lan.com
127.0.0.1	s231.worker-net.com
127.0.0.1	s232.fast-mob.com
127.0.0.1	s242.link-flux.com
127.0.0.1	s246.sdkmob.org
127.0.0.1	s247.fast-mob.com
127.0.0.1	s251.pulse-vol.com
127.0.0.1	s256.sky-borders.com
127.0.0.1	s269.sdkmob.org
127.0.0.1	s34.flexible-networks.com
127.0.0.1	s7.nova-lan.com
127.0.0.1	s72.byte-buff.com
127.0.0.1	s88.fast-mob.com
127.0.0.1	sdkmob.org
127.0.0.1	shield-sky.com
127.0.0.1	sky-borders.com
127.0.0.1	star-layer.com
127.0.0.1	swift-zip.com
127.0.0.1	tera-home.com
127.0.0.1	vault-sentinel.com
127.0.0.1	viki-play.com
127.0.0.1	voltix-net.com
127.0.0.1	vpn.uk1.vpns.robovpn.com
127.0.0.1	worker-net.com
127.0.0.1	world2trust.com
127.0.0.1	yoursfind.com
127.0.0.1	zen-tava.com
127.0.0.1	zync-stream.com
# Aisuru
# https://github.com/deepfield/public-research/blob/main/aisuru/iocs/domains.csv
127.0.0.1	approach.ilovegaysex.su
127.0.0.1	coerece.ilovegaysex.su
127.0.0.1	dvrexpert.st
127.0.0.1	dvrsupport.st
127.0.0.1	dvrxpert.tiananmensquare1989.su
127.0.0.1	foxnointel.ru
127.0.0.1	lane.ilovegaysex.su
127.0.0.1	ministry.ilovegaysex.su
127.0.0.1	ohbro.krebstresser.st
127.0.0.1	printerconsulting.ru
127.0.0.1	public.dvrexpert.st
127.0.0.1	stevenfromcoinbase.fk3.su
127.0.0.1	xorisapedophile.st
# Kimwolf
# Source: https://github.com/deepfield/public-research/blob/main/kimwolf/iocs/domains.csv
127.0.0.1	pawsatyou.eth
127.0.0.1	re6ce.eth
127.0.0.1	byniggasforniggas.eth
127.0.0.1	14emeliaterracewestroxburyma02132.su
127.0.0.1	hahakrebsisacrybaby.su
127.0.0.1	a.6mv1eyr328y6due83u3js6whtzuxfyhw.ru
127.0.0.1	new-endpoints.byteconnect.io