Well, it appears that malware manufacturers do not rest, nor do they forgive. There is already a list of domains related to Swine Influenza (Mexican Flu in Europe / Swine Flu in USA). They do not yet appear to be spreading malware or running donation campaigns, however at least one (symptoms-of-swine-flu.com) appears to be offering medicines of dubious origin.
It appears that most of the domains seem to be only “parked” trying to collect Google ads points.
| h1n1swineflu.com | links to birdflu site (google ads) |
| human-swine-influenza.com | under construction |
| humanswineflu.com | same as h1n1swineflu.com |
| pandemicswineflu.com | same as h1n1swineflu.com |
| swine-flu-info.co.nz | info site (google ads) |
| swine-flu-information.com | info site (google ads) |
| swine-flu-news.com | info site (google ads) |
| swine-flu-symptoms.com | info site |
| swine-flu-symptoms.info | info site (link to google ads) |
| swine-flu-vaccine.sdfgdfd.us | junk search / link site |
| swine-flu.info | godaddy parked |
| swine-flu.net | godaddy parked |
| swine-flu.org | godaddy parked |
| swine-influenza-news.org | info site (google ads) |
| swineflu-symptoms.com | godaddy parked |
| swineflu.biz | same as h1n1swineflu.com |
| swineflu.info | same as h1n1swineflu.com |
| swineflu.us | same as h1n1swineflu.com |
| swineflubase.com | under construction (wordpress site) |
| swineflublog.comv | info site (google ads) |
| swinefludrugs.com | same as h1n1swineflu.com |
| swinefluforum.com | swineflu.org, forum |
| swineflumaps.com | info site (google ads) |
| swineflupost.com | under construction |
| swinefluprecaution.com | godaddy parked |
| swinefluprecautions.com | godaddy parked |
| swineflusymptoms.net | directory index / under construction |
| swineflusymptoms.us | info site / onclose ads |
| swineflusymtoms.com | unrelated info / ebay ads / amazon ads |
| swineflusyptoms.com | godaddy parked |
| swineflusyptoms.net | godaddy parked |
| swineflutv.com | same as h1n1swineflu.com |
| swinefluvaccine.info | godaddy parked |
| swinefluvaccines.com | same as h1n1swineflu.com |
| swinefluvirussymptoms.com | godaddy parked |
| swineinfluenzasymptoms.com | junk site / parked |
| symptoms-of-swine-flu.com | pharma ad, tamiflu UK (legit?) |
| symptoms-of-swine-flu.info | info site (google ads) |
| theswineflu.com | parked/ads |
| theswineflusymptoms.com | info site (google ads) |
F-Secure has published an updated list of sites related to Swine Influenza, which you can find here: www.f-secure.com/weblog/archives/swineflu_domains.txt
I cannot overemphasize enough that extreme measures should be taken when entering these sites, or when clicking on links from emails about this pandemic. Most of the sites must be infected with malware, or at least will try to infect PCs, steal banking information, and other illegal activities.
Here you can find an example of a spam attack related to swine flu, thanks to the people at McAfee: http://www.avertlabs.com/research/blog/index.php/2009/04/27/swine-flue-spam/
Source: isc.sans.org