I want to block the virus laden co.cc domain that is the source for nearly 100% of the attacks on my network. I asked the SWGFL and was told to just add co.cc into the filtering but this clearly isn't working as I'm still being attacked.

I also have ISA2006 any idea how to block this TLD without hosing the Internet?