root há 1 semana atrás
pai
commit
02c8cfb32f
5 ficheiros alterados com 2664 adições e 2075 exclusões
  1. 39 40
      whitelist.global
  2. 1342 1101
      yoroi_malware_level1.dns
  3. 763 436
      yoroi_malware_level2.dns
  4. 187 218
      yoroi_suspicious_level1.dns
  5. 333 280
      yoroi_suspicious_level2.dns

+ 39 - 40
whitelist.global

@@ -14,6 +14,41 @@
 62.149.128.154
 62.149.128.151
 62.149.128.160
+161.35.93.220
+167.71.73.171
+46.101.204.179
+165.232.68.239
+167.99.208.235
+161.35.153.110
+161.35.153.85
+165.232.94.151
+46.101.238.151
+134.122.90.171
+165.22.192.54
+134.209.91.165
+146.190.237.107
+188.166.162.163
+159.223.213.107
+167.99.210.125
+64.226.89.119
+164.92.152.2
+188.166.37.143
+206.189.3.65
+152.42.138.49
+164.92.209.202
+165.22.27.110
+164.92.215.172
+188.166.85.242
+64.227.119.244
+46.101.209.37
+64.226.86.118
+188.166.85.76
+167.172.35.81
+188.166.73.43
+134.209.253.247
+207.154.246.181
+178.62.219.148
+165.245.244.77
 178.62.221.146
 139.59.147.35
 159.223.0.121
@@ -237,52 +272,17 @@
 104.248.207.61
 164.90.204.45
 164.90.176.213
-161.35.93.220
-167.71.73.171
-46.101.204.179
-165.232.68.239
-167.99.208.235
-161.35.153.110
-161.35.153.85
-165.232.94.151
-46.101.238.151
-134.122.90.171
-165.22.192.54
-134.209.91.165
-146.190.237.107
-188.166.162.163
-159.223.213.107
-167.99.210.125
-64.226.89.119
-164.92.152.2
-188.166.37.143
-206.189.3.65
-152.42.138.49
-164.92.209.202
-165.22.27.110
-164.92.215.172
-188.166.85.242
-64.227.119.244
-46.101.209.37
-64.226.86.118
-188.166.85.76
-167.172.35.81
-188.166.73.43
-134.209.253.247
-207.154.246.181
-178.62.219.148
-165.245.244.77
-167.71.3.241
-188.166.20.72
-68.183.3.129
+64.225.76.28
 164.92.155.126
 174.138.12.82
-64.225.76.28
 164.92.215.227
 167.99.33.146
 167.71.1.225
 159.65.197.166
 104.248.194.203
+188.166.20.72
+167.71.3.241
+68.183.3.129
 134.209.136.185
 134.209.206.121
 138.197.176.207
@@ -305,7 +305,6 @@
 174.138.107.200
 178.156.230.249
 185.199.108.153
-185.199.109.153
 185.236.106.196
 188.166.103.4
 188.166.10.67

Diff do ficheiro suprimidas por serem muito extensas
+ 1342 - 1101
yoroi_malware_level1.dns


Diff do ficheiro suprimidas por serem muito extensas
+ 763 - 436
yoroi_malware_level2.dns


+ 187 - 218
yoroi_suspicious_level1.dns

@@ -9,112 +9,124 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-b7a0a9.icefactory.cl
-menu-aktivasipayc.paylater.buzz
+transcript.bitrefillreviewpolicy.com
+solicitudcancelacionbnp.proceso-digital.com
+www.solicitudcancelacionbnp.proceso-digital.com
+sock-zizifn-us.ludeaphd.workers.dev
+transcript.bnktothefuturepolicyreview.com
+acba01.icefactory.cl
+www.bwdocusignsetup.icu
+www.srv1898231.hstgr.cloud
+apptalktalk.mailhelpdesksupport.com
+www.grvtdocusignsetup.icu
+portaltarifa.sbs
+transcript.coinfundpolicyreview.com
+www.onlinehomespersona.zip
+627012.xyz
+www.xxccskkdjojomknoibyuv.top
+www.pintaelsevillano.com
+documentssign.info
+www.xamanpolicy.live
+docusignnet.work
+www.hopev.eu.cc
+opensea-session443.onrender.com
+www.connect.resourcecloud.shop
+transcript.emurgopolicyreview.com
+www.docusignsetup.icu
+www.j110q.vip
+alldbgdhhdhhdhhhchhchdhdm-dp9hzij3r3mr.edgeone.dev
+allegrolokalnie.624354er.top
+roblox.com.kz
+midaspeciall.gamerstored.com
+otponnline.mom
+7628bb.icefactory.cl
+cooktownfood.com
+limitlessdubai-dp8oxsl60kva.edgeone.dev
+veepee-fr.com
+www.veepee-fr.com
+f786a3.icefactory.cl
+2f8b66.icefactory.cl
+a587ef.icefactory.cl
+www.bybbxh.com
+86765b.icefactory.cl
+fa5d91.icefactory.cl
+003569.icefactory.cl
+7a7d96.icefactory.cl
+572783.icefactory.cl
+metahelper-support.tiiny.site
+worker-purple-sky-dcfb.mohamad-asghari74.workers.dev
+exodas-web3-started.wasmer.app
+exodas-web3start.wasmer.app
+sock-zizifn-hkgoogle.254052671.workers.dev
+274755.icefactory.cl
+rbcverify.com
+f7eb54.icefactory.cl
+1fed4c.icefactory.cl
+ledgerr-live-hubb.wasmer.app
+sock-zizifn-sg.ludea-liu.workers.dev
+allegrolokalnie.oferta712273848492.xyz
+person-sp.com
+club4patas.com
+duckroblox.com
+steammwork-pistols.shop
+www.tkvoro.cyou
+www.allegro-park.ch
+simple-security-page--weekkiol.replit.app
+plain-rain-a434.junayd-aarya.workers.dev
+1e9c15.icefactory.cl
+95410b.icefactory.cl
+rbc-montreal.com
+1a4a0b.icefactory.cl
+xpayllternewlyans.repairing.biz.id
+db9431.icefactory.cl
+4397b9.icefactory.cl
+9fe757.icefactory.cl
+watery-pink-ycvk2lnd.edgeone.dev
+renewabonne3ds.com
+allegrolokalnie.pi-0910.shop
+boudgetd.com
+action-sante.site
+amaz-annuel.com
+support-creneauoption.com
+vdclient.websiteisdown.com
+bafkreiexrtpkkflfywi6lyfj7zc5bw6zrcvv4dib4wbfjrxnkyxuiohdfm.ipfs.inbrowser.link
+bafkreihql7542hbekhfae4355pumneesu37jvm2yqy22hi5wahk5pvyoci.ipfs.inbrowser.link
+allegro.320029h8h8.forum
+monprime-espace.info
+ca.acces-verifca.com
+notificationprime-annuelle.com
+www.monprime-espace.info
+www.notificationprime-annuelle.com
+zgsstr.com
+pai.qixujie.com
+xoompay-pal.com
+seguranca-novobanco.com
+sunshine-spending-blast-devices.trycloudflare.com
 b5e786.icefactory.cl
-b35fcb.icefactory.cl
+b7a0a9.icefactory.cl
+authentication-user-log.com
+igjreoijgre1488.com
+loglnportalesbanchile.com
+ma-securite-ca.com
+obnovenie-platby.com
+uk-rev-summer.bolt.host
+allegro.ok3927812899.biz
+allegrolokalnie.letnie-okazje874661501.cyou
+b-populaire-info.bolt.host
 tzr-jern.maxwell15.workers.dev
-www.lsoiehrf.com
-www.lsoehd.com
-www.lsioeh.com
 www.ffp.rjg.temporary.site
 cyberblow.onrender.com
 www.shop88.shop
 gift.steampowered.ink
 www.www-connect.secure.werllsfargo.com.jmvlogistics.in
-84f7a2.icefactory.cl
-betyeni.pro
-a77e56.icefactory.cl
-4f94f8.icefactory.cl
-b3765e.icefactory.cl
-5272c7.icefactory.cl
-a9bd1a.icefactory.cl
-30d318.icefactory.cl
-upgrade-dp2c1xqj8ejo.edgeone.dev
-7249b1.icefactory.cl
-m.pgjt216.com
-d1353d.icefactory.cl
-159604.icefactory.cl
-ba74c5.icefactory.cl
-7af1c9.icefactory.cl
-d1e5fe.icefactory.cl
-28b0c0.icefactory.cl
-70f263.icefactory.cl
-029d21.icefactory.cl
-4b2f61.icefactory.cl
-22b47a.icefactory.cl
-7fc798.icefactory.cl
-2b1b87.icefactory.cl
-meta-accountscenter.com
-aed0ce.icefactory.cl
-8337e8.icefactory.cl
+menu-aktivasipayc.paylater.buzz
+begin-new-trezrio-strt.typedream.app
 flow-hub-jf8a.p-4bpdi3hp.workers.dev
-lp.path-diepostbox.com
-hilfe-telekom.de
-old4.jiaozuo31.com
-eb6436.icefactory.cl
-www.by-crypto.sbs
-xenvoras.whahoola.info
-b180ac.icefactory.cl
-zoventra.whahoola.info
-jojolandings.com
-auth-ibb.com
-j157y.vip
-jsesun15.top
-recibidarelevantecaso.fwh.is
-seguranca-novobanco.com
-b-populaire-info.bolt.host
-sol-convert.com
-igjreoijgre1488.com
-ma-securite-ca.com
-obnovenie-platby.com
-uk-rev-summer.bolt.host
-authentication-user-log.com
-formulario-de-cita-digital-anjm-2026.cr-web.workers.dev
-connecting-plus.digital
-99801459.xyz
-24de4e.icefactory.cl
-shoppingonamazon1.com
-enaimertnhlans89.wasmer.app
-002958.icefactory.cl
-7d609d.icefactory.cl
 xfinityupdate25.weeblysite.com
-uspsglobal.delivery
-emirecrui90mens.wasmer.app
-matineseriennhlans89.wasmer.app
 sock-zizifn-sg.pennyphd.workers.dev
-99801456.xyz
-4e236b.icefactory.cl
-832432.icefactory.cl
-da56a2.icefactory.cl
-21b804.icefactory.cl
-7a4338.icefactory.cl
-157b63.icefactory.cl
-www.lcdgcr-live.com
-89beba.icefactory.cl
-begin-new-trezrio-strt.typedream.app
-46faeb.icefactory.cl
-48d305.icefactory.cl
-b54456.icefactory.cl
-a4d56c.icefactory.cl
-ed95cf.icefactory.cl
-389bf0.icefactory.cl
-92d0ea.icefactory.cl
-c68146.icefactory.cl
-m.43943.one
-allegrolokalnie.pl29333.top
-allegrolokalnie.pi-lokaina391.sbs
-be-duolinguo.bolt.host
-chatbradesco.com
-cmut-monespace.bolt.host
-cm.acces-verifcm.com
-duo-lingo.bolt.host
-drives-workspace.com
-novalisari.sbs
-programmation-duolinguo.bolt.host
-secu-reactiv.com
-vdclient.ruthweinberg.com
-vdclient.insofar.com
+sol-convert.com
+formulario-de-cita-digital-anjm-2026.cr-web.workers.dev
+allegrolokalnie.oferta394zqg2j93f9ml9.online
 centralhouselisbonbaixa.hostel.town
 bfc66c.icefactory.cl
 f62399.icefactory.cl
@@ -122,50 +134,8 @@ platinumdeluxeshoppingapartments.hostel.town
 biichoios133.on-forge.com
 feminist-peach-thq3u1dk.edgeone.dev
 9682bc.icefactory.cl
-www.viewdetail1108qznwkt.srvflowcenter.com
-roviasdigitaisblog.com
-iii.tkteam.top
 18c23b.icefactory.cl
 portal.roviasdigitaisblog.com
-c1e3b2.icefactory.cl
-b736f1.icefactory.cl
-4b3183.icefactory.cl
-137662coinbase.com
-asia-draws-photographer-mlb.trycloudflare.com
-www.shopee-vn.shop
-fernjaipurseriesbymarriott-rajasthan.spahotel.guru
-www.giscsvopsip.com
-allegro.1000h5g4g4.casa
-allegrolokalnie.624454hr.top
-www.bookinapp.top
-amz0p3.eu.cc
-fa2e9b.icefactory.cl
-eager-river-255.packagesdirectorysub.workers.dev
-f66d01.icefactory.cl
-www.tiktok-shop.info
-6d4bb2.icefactory.cl
-main.d1xk6yfxdxtpzr.amplifyapp.com
-main.d1m0ow86j91yrd.amplifyapp.com
-hhelllaioss1333.on-forge.com
-9202cf.icefactory.cl
-b44a6b.icefactory.cl
-39932a.icefactory.cl
-dalerewardd.co
-relate-chocolate-diamonds-dozens.trycloudflare.com
-e41ed0.icefactory.cl
-326989.xyz
-26c30d.icefactory.cl
-m.hg4310.com
-cdf807.icefactory.cl
-cpcalendars.40-81-244-109.cprapid.com
-da631e.icefactory.cl
-9b85eb.icefactory.cl
-37b67b.icefactory.cl
-kontosicherheitsdienst.com
-app.fingo-itau-development.com
-www.invited-company.pro
-ledger-wallet.co
-28c9c5.icefactory.cl
 c88696.icefactory.cl
 560532.icefactory.cl
 d34c0c.icefactory.cl
@@ -187,25 +157,70 @@ d09c18.icefactory.cl
 1f2d0f.icefactory.cl
 50f91a.icefactory.cl
 solicitud-firma-digital-electronica-2025-fi-cr80.webnode.com.co
-securitycheck-coinbase.com
+hhelllaioss1333.on-forge.com
+9202cf.icefactory.cl
+b44a6b.icefactory.cl
+39932a.icefactory.cl
+dalerewardd.co
+relate-chocolate-diamonds-dozens.trycloudflare.com
+e41ed0.icefactory.cl
+326989.xyz
+26c30d.icefactory.cl
+m.hg4310.com
+cdf807.icefactory.cl
+cpcalendars.40-81-244-109.cprapid.com
+da631e.icefactory.cl
+9b85eb.icefactory.cl
+37b67b.icefactory.cl
+kontosicherheitsdienst.com
+app.fingo-itau-development.com
+www.invited-company.pro
+ledger-wallet.co
+28c9c5.icefactory.cl
+www.viewdetail1108qznwkt.srvflowcenter.com
+roviasdigitaisblog.com
+iii.tkteam.top
+c1e3b2.icefactory.cl
+b736f1.icefactory.cl
+4b3183.icefactory.cl
+137662coinbase.com
+asia-draws-photographer-mlb.trycloudflare.com
+www.shopee-vn.shop
+fernjaipurseriesbymarriott-rajasthan.spahotel.guru
+www.giscsvopsip.com
+www.bookinapp.top
+amz0p3.eu.cc
+fa2e9b.icefactory.cl
+eager-river-255.packagesdirectorysub.workers.dev
+f66d01.icefactory.cl
+www.tiktok-shop.info
+6d4bb2.icefactory.cl
+main.d1xk6yfxdxtpzr.amplifyapp.com
+main.d1m0ow86j91yrd.amplifyapp.com
 sock-zizifn-kr.ludea-liu.workers.dev
-bancbancochile-sitiospublicos-contactos.cmg-cl.sbs
-www.tiktokning.com
-monespace-primefr.info
-www.drives-workspace.com
-www.secu-reactiv.com
 bhdactivarusuario-validaracceso.hstn.me
+comacastnet.weeblysite.com
+comcsat.weeblysite.com
 everymailteam.weeblysite.com
 my-site-101371-101178.weeblysite.com
 sign-in-to-xfinity-100289.weeblysite.com
 solisitudcupoecuador-2026--solisitudecuado.replit.app
-comacastnet.weeblysite.com
-comcsat.weeblysite.com
 xfinitycomservice.weeblysite.com
 ec857f.arcadejafet.cl
+6efc9f.arcadejafet.cl
+2c74f3.arcadejafet.cl
+6d8c0c.arcadejafet.cl
+bireysel-islemlerim-garanti.freemyip.com
+sucrsalpersonastdc.site
 cxqhsyzql.xyz
-fiture-menupay-id.gredfu.hair
+www.0ffice365qrcodeconfirmation.un-cnd.org
+www.88417.xyz
 fiturrr-menuupayz.gredfu.hair
+accounts.relayauth.online
+74cbf3.arcadejafet.cl
+88bdc7.arcadejafet.cl
+feb6cd.icefactory.cl
+fiture-menupay-id.gredfu.hair
 626984.xyz
 326968.xyz
 626981.xyz
@@ -214,17 +229,6 @@ www.cashprodeskchat.com
 6f3fb389-505d-4271-85be-559253652574-00-1da2kwibr6ek8.janeway.replit.dev
 17570.xyz
 p2pbybit-audit.com
-feb6cd.icefactory.cl
-accounts.relayauth.online
-74cbf3.arcadejafet.cl
-88bdc7.arcadejafet.cl
-6efc9f.arcadejafet.cl
-2c74f3.arcadejafet.cl
-6d8c0c.arcadejafet.cl
-bireysel-islemlerim-garanti.freemyip.com
-sucrsalpersonastdc.site
-www.0ffice365qrcodeconfirmation.un-cnd.org
-www.88417.xyz
 aruba8855768977086878989conferma-id-sessione-accesso-certific.othersmx.workers.dev
 farshid.ali-azizi2672.workers.dev
 sterychnace07.onrender.com
@@ -232,7 +236,6 @@ licksquest071.onrender.com
 vseczatomi.ukit.me
 welcome-begin-trezo-en.typedream.app
 fellroriana.com
-www.h5-app.top
 transcript.katanareviewpolicy.com
 www.money-guard.online
 326945.xyz
@@ -242,9 +245,10 @@ cbgroupca.com
 bybiititnc.com
 www.mooshimooshe.com
 326952.xyz
+www.acessoregularizacaocnh.online
+www.h5-app.top
 breeding-metabolism-tel-talked.trycloudflare.com
 www.teams-go.com
-www.acessoregularizacaocnh.online
 secure-portal-email.edgeone.dev
 326948.xyz
 lntermatico.virtual-ecuador.online
@@ -255,7 +259,6 @@ authenticate-ledger.com.rahmanlegal.com
 www.gbkilt.com
 www.y36l.top
 www.navigator.follow.solutions.forward.ch.matrassenstock.be
-www.designskou.com
 io-public-trzors-com.typedream.app
 start-io-trezr-public-cdn.typedream.app
 faq-public-trezro-us.typedream.app
@@ -263,25 +266,20 @@ web-trezor-io-start-app.typedream.app
 sock-zizifn-jp.ludea-lau.workers.dev
 creditopichinchaecuador-2026--creditoenline3.replit.app
 01c2e787-6c49-4365-8be5-e5d1c9e19ed3-00-2y5i0zdquflg3.worf.replit.dev
-achievefundraising.com
-creditos-pichincha-miles--pichincmiles.replit.app
-creditos-pichicha--rondonpokemon0.replit.app
 creditopichincha-2026--creditoenline3.replit.app
 creditoecuador-46--ecuadorcredit3.replit.app
-easybenefitsaccess.com
+creditos-pichincha-miles--pichincmiles.replit.app
+creditos-pichicha--rondonpokemon0.replit.app
 e720639b-3fe0-4f60-9dac-c851a51c27a4-00-1wfhaq8e2y5kg.worf.replit.dev
-irs.digitalasset-platform.com
-irs.digitalcomplianceportal.com
-irs.digital-asset-platform.com
 mibhd-2026--tubhd.replit.app
 february-taxes-tent-cancellation.trycloudflare.com
-www.damnchangeventq8.shop.page.midasbuy-zone.com
-app-payment-console-redirect.online
-www.j132l.vip
 staging.dfhwvp9zy8m7p.amplifyapp.com
 worker-curly-sun-aghamohammadhossein.mhkh831221.workers.dev
 www.1336ooo7.com
 www.15377.xyz
+www.damnchangeventq8.shop.page.midasbuy-zone.com
+app-payment-console-redirect.online
+www.j132l.vip
 wandering-sky-4330.2415054122105.workers.dev
 still-meadow-5d62.othersmx.workers.dev
 p01--ar24docsecurity--qmjhcscz5dnb.code.run
@@ -296,19 +294,27 @@ sock-zizifn-kr.ludeaphd.workers.dev
 registro-digital-apkjm-2026.cr-web.workers.dev
 placid-checkbox-480096.framer.app
 sweet-food-431701.framer.app
-www.rluxsends.com
-www.rpsrescue.org
-r08h.xyz
-docs.gustavodev.xyz
+w3ma11-s3tt1ng-acqu1r3d-n0w-q234hjd.iceiy.com
 www.x98k.xyz
 www.74009.xyz
 68765.xyz
 www.auroravaultgame.com
 www.coincheck.pro
-w3ma11-s3tt1ng-acqu1r3d-n0w-q234hjd.iceiy.com
+imap.frogrocket.org
+www.instgram-ais.link
+www.999coin.top
+www.tuitui19999.com
+www.paribcardsegu.bond
+www.jndaj.top
+73047.xyz
+www.whatsapp.123zoeken.be
+www.rluxsends.com
+www.rpsrescue.org
+r08h.xyz
+docs.gustavodev.xyz
+www.365bet6.com
 www.17568.xyz
 www.17534.xyz
-www.365bet6.com
 www.17557.xyz
 www.yqluvyr.shop
 p7v3w.motnatelly.xyz
@@ -317,53 +323,16 @@ retry-icloud.com
 keep-icloud.com
 facebook.com.login.affixlink.app
 9dra9hlj.1wpvsox.com
-imap.frogrocket.org
 comfortable-amethyst-wkaujes3.edgeone.dev
 woen-dc91.urdgiusf.workers.dev
-www.instgram-ais.link
-www.999coin.top
-www.tuitui19999.com
-www.paribcardsegu.bond
-www.jndaj.top
-73047.xyz
-www.whatsapp.123zoeken.be
 rapid-scene-df90.2415054122105.workers.dev
 fr-empty-voice-330d.2415054122105.workers.dev
-lucky-union-e0ff.bncvc23wqdaa6.workers.dev
-shy-leaf-0a77.2415054122105.workers.dev
-www.logins-msn-365.iceiy.com
-worker-calm-water-4bc2.hs1hg-po.workers.dev
 ms-06a-zaku-ii.prorsa.workers.dev
 aged-tree-3d1f.ikfmaolaogmern.workers.dev
 zizifn-anycast.cyliuhao01.workers.dev
 still-bonus-f2eb.2415054122105.workers.dev
 bitter-mode-7090.2415054122105.workers.dev
-8f7ca6e9-caad-43f6-8127-163a8338dda1-00-3ru9u0ud1dsu0.worf.replit.dev
-ambitious-manager-454206.framer.app
-artsy-pudding-938445.framer.app
-contextual-successes-226876.framer.app
-creditecuador--credit004.replit.app
-creditopichincha--micreditoseguro.replit.app
-energized-building-236557.framer.app
-eduauthfun-1.framer.wiki
-fuchsia-workshops-221572.framer.app
-sapienzahomeaccesuniroma.framer.ai
-trustworthy-shallot-648391.framer.app
-sucurpanamigoc360.fly.dev
-banshee.retusus.workers.dev
-ntflx-actualizar.top
-sztds.vincentlee.workers.dev
-www.89584.xyz
-www.89561.xyz
-www.limpahoje.lol
-www.rubaclava.com
-5-9-7-0-0.bioprodeintal.workers.dev
-7f1aqd9z.e7v11h1.com
-www.cen4_open_mail_15.tatenengo.ru
-www.yh9969.cn
-cen4_open_mail_15.tatenengo.ru
-www.shichengyinxiang.com
-www.y45f.top
-myaol-serv.cwrdl.workers.dev
-odd-rice-59bf.escekolyaes.workers.dev
-faqs-trezcom-web-doc.typedream.app
+lucky-union-e0ff.bncvc23wqdaa6.workers.dev
+shy-leaf-0a77.2415054122105.workers.dev
+www.logins-msn-365.iceiy.com
+worker-calm-water-4bc2.hs1hg-po.workers.dev

Diff do ficheiro suprimidas por serem muito extensas
+ 333 - 280
yoroi_suspicious_level2.dns


Alguns ficheiros não foram mostrados porque muitos ficheiros mudaram neste diff