root 1 semana atrás
pai
commit
115e11a334
4 arquivos alterados com 3169 adições e 2770 exclusões
  1. 710 1948
      yoroi_malware_level1.dns
  2. 1906 433
      yoroi_malware_level2.dns
  3. 210 169
      yoroi_suspicious_level1.dns
  4. 343 220
      yoroi_suspicious_level2.dns

Diferenças do arquivo suprimidas por serem muito extensas
+ 710 - 1948
yoroi_malware_level1.dns


Diferenças do arquivo suprimidas por serem muito extensas
+ 1906 - 433
yoroi_malware_level2.dns


+ 210 - 169
yoroi_suspicious_level1.dns

@@ -9,6 +9,131 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+ge-civil-documentportal.gcecivli.com
+www.account.docusign.us.ci
+www.vklink.hop.ru
+683436.xyz
+197352.xyz
+rab1p.top
+www.netflix-registro.com
+checkouts-paypal.lat
+www.nassaucountymls.net
+transaction1-esl.sbs
+yrc1dcd.top
+ma1eqd.top
+transaction1-esl.cfd
+www.imdoge.top
+985757.xyz
+doronhi.top
+www.walmart.scot.mx
+mi-solicitud-card-9194.andres457646.workers.dev
+mtoken.sarl
+www.free-5338447.webadorsite.com
+traditional-violet-gzelm9rw.edgeone.dev
+allegrolokalnie.oferta3859.cfd
+numereactiv.com
+auction.evergreenfin.ltd
+form.loginco.casa
+www.form.loginco.casa
+www.auth-portal.sbs
+s0l1c1tud56.freepage.cc
+agent.mgm568.vip
+install-mew-documents.icu
+adfs.evergreenfin.ltd
+excortlex.cloudrix.workers.dev
+chase.phntm.com
+imcoin.me
+aad.evergreenfin.ltd
+xfinty-email-update.weeblysite.com
+word.en-coda.shop
+xfinity-mail-id.weeblysite.com
+xfinity090.weeblysite.com
+mfa-gocbil.org
+www.bubers.xyz
+hsd05e53837dec3946be106277583f5550.nexusqalinka2.lol
+netflix.patelrudra.in
+aws-support-bedrock.com
+lylib.fun
+webmail-dpqh147uyypl.edgeone.dev
+www.word.en-coda.shop
+mail.word.en-coda.shop
+durand.ope8622501.pro
+allegro.1231230h8h5.beer
+marche.ope8622501.pro
+alouf.ope8622501.pro
+www.ope8622501.pro
+kharchi.ope8622501.pro
+www.soi6406484.pro
+jean-marie.soi6406484.pro
+jean-paul.soi6406484.pro
+jean-pascal.soi6406484.pro
+jean-marc.soi6406484.pro
+450507.mercredizyt50hc.pro
+secpasssverif-caisssedep.com
+www.mercredizyt50hc.pro
+secpasssverif-cm.com
+teamyk.com
+app-sushiswaps.net
+sub.parsnetsecure.ir
+www.virtualnextpartner.com
+conver.summitleadf.com
+ctrip.evergreenfin.ltd
+trezr-io-cloud-sso.typedream.app
+mtoken.me.uk
+blockbook-vtc-1.nodes.zelcore.io
+connectxfinitysignin.weeblysite.com
+authlogin.evergreenfin.ltd
+staging.d21fuecwzi5di9.amplifyapp.com
+auth2.evergreenfin.ltd
+reprogramapaque.hostedbyfps.com
+au.evergreenfin.ltd
+welcomedashboardoppeservicesptclientstationonlinespotionline.bisnu.com.np
+www.shopbidaithanroblox.com
+allegro.32120319hh57.mom
+fatima.res9681822.pro
+fgenerftion.click
+le-registre-societes-francaises.fr
+allegrolokalnie.pl-ogloszenie-prywatne75438439342.click
+issam.res9681822.pro
+www.res9681822.pro
+pascal.res9681822.pro
+karine.res9681822.pro
+allegrolokalnie.pl-aukcja823134.sbs
+formulario-cita-digital-2026-aythn.cr-web.workers.dev
+allegrolokalnie.pl-49092.top
+instruction-consigne-prime.com
+aloufa.bdll4571163.pro
+yassim.bdll4571163.pro
+zoubi.bdll4571163.pro
+ww.bdll4571163.pro
+nassab.bdll4571163.pro
+allegrolokalnie.pl-oferta77542.cfd
+contractbreeze.com
+www.ameknc.com
+banco.bradecso.com
+hlwmw.com
+ai-app.icu
+allegrolokalnie.lokalna-4019.sbs
+account.docusign.us.ci
+allegrolokalnie.lokaina-48234.sbs
+allegrolokalnie.pl-aukcja83472547.sbs
+basahslot.org
+blog-whatsappx.hl.cn
+cmut-mobl.com
+docusign-verify.co
+hotflix.eu.cc
+maga-zine-luiza.com
+music.test20025.shop
+mtoken.online
+quantum-flares.com
+q86365.com
+secu-passsverif.com
+security-server-page--jhalskov68.replit.app
+sunio.mov
+trezarsuiteapp.wasmer.app
+usps-email.com
+v4lidarcu3nta4.freepage.cc
+dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev
 selector1._domainkey.135nb.top
 _domainkey.135nb.top
 retired-crimson-irxib1ps.edgeone.dev
@@ -22,63 +147,39 @@ www.amaa.foo
 www.risepine.info
 allegro.774721.lat
 allegrolokalnie.774721.lat
+wedfgbnmoijhgcxvbnm-dpyjx01bl5o7.edgeone.dev
 allegrolokalnie.oferta384hw2nd8.click
+secure-meta.official-program.online
+www.id71841.info
 connect-wallet.xyz
-q86365.com
-ai-app.icu
 app.sellcordclient.com
 www._domainkey.135nb.top
 www.selector1._domainkey.135nb.top
-music.test20025.shop
 www.onfo.finance
 www.888qpf3.com
-docusign-verify.co
-v4lidarcu3nta4.freepage.cc
-usps-email.com
 hello-world-shiny-darkness-c320.vclh0389.workers.dev
-dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev
-maga-zine-luiza.com
-sunio.mov
 ledioyyary-tree-4618.samedeal05.workers.dev
-basahslot.org
-quantum-flares.com
 muebler-aadfinanciera.onrender.com
-allegrolokalnie.lokaina-48234.sbs
+staging.d3kw313lgg38m8.amplifyapp.com
+allegro.491290h45h.help
 allegro.prywanrm2388129.beer
 www.markvexo-de.com
 www.allegrolokalnie.73049531.xyz
-secu-passsverif.com
-allegrolokalnie.pl-aukcja83472547.sbs
-staging.d3kw313lgg38m8.amplifyapp.com
-hotflix.eu.cc
-allegrolokalnie.lokalna-4019.sbs
-allegro.491290h45h.help
-security-server-page--jhalskov68.replit.app
-secure-meta.official-program.online
-blog-whatsappx.hl.cn
-trezarsuiteapp.wasmer.app
-account.docusign.us.ci
-mtoken.online
-www.id71841.info
-wedfgbnmoijhgcxvbnm-dpyjx01bl5o7.edgeone.dev
-allegro.058ji56i56g35g3.skin
+www.allegro.pl-ogloszenie-prywatne765833653.click
 acces-sante-vitale.com
-cssm.66ghz.com
-intrepid-amused-analysts--vdsbwa.replit.app
 irsrefundservice.us
-ledgeiostart.zapier.app
 open.core-whatapps.com
+intrepid-amused-analysts--vdsbwa.replit.app
+cssm.66ghz.com
+ledgeiostart.zapier.app
+allegro.058ji56i56g35g3.skin
 start-linkedin.com
-www.allegrolokainie.pl-ogloszenie-prywatne748362548.click
-mbankekonto.xyz
-allegrolokalnie.pl-72739.sbs
-wp.pl-krajowyrejestdlugow.info.vh13647.vh.net.pl
-verif-mail.cloud
-staging.d2vcbrxbzugw3i.amplifyapp.com
-www.mclarencar.ebaymclaren-austin.eventshouse.app
-www.collectableswall.ebaymclaren-austin.eventshouse.app
-www.mclarenf1car.ebaymclaren-austin.eventshouse.app
-testbclomb.rudofopelomi.workers.dev
+www.17vip07.com
+lntermaticopacifico.online
+alto-norte-comercial.onrender.com
+lively-field-d81c.rudofopelomi.workers.dev
+www.financesantanderm.tu.lahmtm.com
+394532.xyz
 walletconnectportal.onrender.com
 www.parceldashboardclientstationopacketofficeshipmentdelivery.artkiyotomotiv.com
 netflix.tailbe60c2.ts.net
@@ -89,23 +190,20 @@ intermaticopersonasecu.onrender.com
 www.iman158.com
 wp.pl-zadluzenie-informacja.cfd.vh13647.vh.net.pl
 lntermatico-personas.online
+allegro.pl-ogloszenie-prywatne765833653.click
 docusigns.info
+wetransferswiftserverr.edgeone.dev
 leutumn-shadow-c659.eugeniebenoits397.workers.dev
 743867.xyz
-allegro.pl-oferta748223.sbs
-staging.dtbf2az168uk3.amplifyapp.com
-www.17vip07.com
-www.fyshur.com
-lntermaticopacifico.online
-alto-norte-comercial.onrender.com
-lively-field-d81c.rudofopelomi.workers.dev
-www.financesantanderm.tu.lahmtm.com
-394532.xyz
-wetransferswiftserverr.edgeone.dev
 allegro.pl-pg2i1.sbs
 www.beta.cuidamostubolsillo.com
-allegro.pl-ogloszenie-prywatne765833653.click
+verif-mail.cloud
+staging.d2vcbrxbzugw3i.amplifyapp.com
+www.mclarencar.ebaymclaren-austin.eventshouse.app
+www.collectableswall.ebaymclaren-austin.eventshouse.app
+www.mclarenf1car.ebaymclaren-austin.eventshouse.app
 user19.kesiy52257.workers.dev
+testbclomb.rudofopelomi.workers.dev
 mclarencar.ebaymclaren-austin.eventshouse.app
 www.xmsnilia.tegav2.com
 collectableswall.ebaymclaren-austin.eventshouse.app
@@ -113,59 +211,53 @@ mclarenf1car.ebaymclaren-austin.eventshouse.app
 inbox.wave-whatsapp.com
 info.sigma-whatsapp.com
 alpha.sigma-whatsapp.com
+allegro.pl-oferta748223.sbs
+staging.dtbf2az168uk3.amplifyapp.com
+www.fyshur.com
+mbankekonto.xyz
+allegrolokalnie.pl-72739.sbs
+wp.pl-krajowyrejestdlugow.info.vh13647.vh.net.pl
 allegro.878279jsmar889.lol
 www.allegrolokalne.pl-pg2i1.sbs
 allegro.pl-003849-oferta.click
-allegro-lokalnie.pl-ogloszenie-prywatne78865449.click
+www.allegrolokainie.pl-ogloszenie-prywatne748362548.click
 allegrolokalnie.lokalnie-34891.sbs
-allegrolokalne.pl-ogloszenie-prywatne78865449.click
-allegrolokalnie.pl-ogloszenie-prywatne78865449.click
-allegrolokalnie.pl-ogloszenie-prywatne7584953412.click
-allegrolokalnie.pl-31595175.click
-allegrolokalnie.pl-oferta2192971.click
+allegrolokainie.pl-kce6w.sbs
+allegrolokainie.pl-ogloszenie-prywatne7584953412.click
+allegrolokalne.pl-kce6w.sbs
 allegrolokalnie.ofertaa9455241593275.cfd
+allegro-lokalnie.pl-ogloszenie-prywatne78865449.click
 allegro-lokalnie.pl-ogloszenie-prywatne7584953412.click
 allegro-lokalnie.pl-kce6w.sbs
+allegrolokalnie.pl-31595175.click
+allegrolokalnie.pl-oferta2192971.click
+allegrolokalne.pl-ogloszenie-prywatne78865449.click
 allegrolokalne.pl-ogloszenie-prywatne7584953412.click
-allegrolokainie.pl-kce6w.sbs
-allegrolokainie.pl-ogloszenie-prywatne7584953412.click
-allegrolokalne.pl-kce6w.sbs
+allegrolokalnie.pl-ogloszenie-prywatne78865449.click
+allegrolokalnie.pl-ogloszenie-prywatne7584953412.click
 bradescoatualizabrasil.com
 polimix.info
-sm-b6.com
 rubrique-service-transfert-gestion.fr
+sm-b6.com
 sog-reactivation.com
-robinhood-reward-connect.onrender.com
-airbnb.frngrgqb46.workers.dev
-docrevlew.onrender.com
-www.ohereceramics.cn
-allegro.lokalna-8943209.lol
 apps--coinsquare-login.typedream.app
 bashful-purpose-845969.framer.app
 allegrolokalnie.oferta3059.cfd
 allegrolokalnie.lokalna-8943209.lol
 allegrolokalnie.pi-zam8413249.cfd
-allegrolokalnie.366554th.top
-allegrolokalnie.pl32895.top
-allegrolokalnie.smart-93632.cfd
-allegrolokalnie.pln448.top
-get-login-leddgr-live.framer.website
-extraordinary-circle-902401.framer.app
-creative-architecture-445726.framer.app
 allegro.smar96340203.lol
 allegro.98j657503f23.homes
+allegrolokalnie.366554th.top
 allegro.pryo4j34nm34889.skin
 allegro.012398h574h5j.skin
+allegrolokalnie.pl32895.top
+allegrolokalnie.smart-93632.cfd
+allegrolokalnie.pln448.top
+protecpackonlinedocument-ymafg.ondigitalocean.app
+quick-communication-854182.framer.app
+mytelstraupdatings.framer.website
 view-coisquared.zapier.app
-splendid-types-053247.framer.app
-telstrawacvvetydwwiysaz.framer.website
-trzbridge.zapier.app
-security-server-landing-page--verifyadmin90.replit.app
-gateway.okta-whatsapp.com
-www.allegrolokalnie.html-produkt34894389.top
-www.allegrolokainie.pl-ogloszenie-prywatne78865449.click
-allegro.pl-kce6w.sbs
-allegro.pl-ogloszenie-prywatne7584953412.click
+allegro.lokalna-8943209.lol
 worker-blue-sun-a05a.nojitam138.workers.dev
 startapps-trxor-io.readme.io
 ldgr-frm.sdhsged.workers.dev
@@ -174,59 +266,77 @@ verifone-report.com
 tinsweat.com
 allegrolokalnie.html-produkt34894389.top
 allegrolokalne.html-produkt34894389.top
+allegrolokainie.html-produkt34894389.top
 irenekosch.us
 allegro.html-produkt34894389.top
-allegrolokainie.html-produkt34894389.top
 allegro-lokalnie.html-produkt34894389.top
 www.v2cwvnpa4k278jrfdqkqkcip.fe8qxo.top
 www.9j8xlwyet7pqkoyu4oo1g60l.p2uzna.cyou
-protecpackonlinedocument-ymafg.ondigitalocean.app
+gateway.okta-whatsapp.com
+www.allegrolokalnie.html-produkt34894389.top
+www.allegrolokainie.pl-ogloszenie-prywatne78865449.click
+allegro.pl-kce6w.sbs
+allegro.pl-ogloszenie-prywatne7584953412.click
+robinhood-reward-connect.onrender.com
+airbnb.frngrgqb46.workers.dev
+docrevlew.onrender.com
+www.ohereceramics.cn
 security-server-landing-page--shippingrool.replit.app
-quick-communication-854182.framer.app
-mytelstraupdatings.framer.website
-menuu-aktivasi-gopayslaters.grates.beauty
-amazon.iqraashraf.dev
-www.imtaken.pro
+splendid-types-053247.framer.app
+telstrawacvvetydwwiysaz.framer.website
+trzbridge.zapier.app
+security-server-landing-page--verifyadmin90.replit.app
+get-login-leddgr-live.framer.website
+extraordinary-circle-902401.framer.app
+creative-architecture-445726.framer.app
 geberaloffer02.onrender.com
 www.ww38.login.colnbasee.us
 www.r3novar44.freepage.cc
 www.castribuneonline.gb.net
 lntermatico.website
+menuu-aktivasi-gopayslaters.grates.beauty
+amazon.iqraashraf.dev
+www.imtaken.pro
 staging.d6bkdpdctugto.amplifyapp.com
 fabulous-embeds-059788.framer.app
 gjcrb.nourtperrlio.click
 morgenland.pt
 oorth.bablisly.click
-receuve-rakntanpointapp.com
-receive-rekntanpointapp.com
-receove-rakntanpointapp.com
 raku-point-cebinde.com
 raku-point-gche.com
-rakupoint-rwunda.com
 raku-point-ianzi.com
 raku-point-oltys.com
-rakupoint-iaoyu.com
 raku-point-exinxi.com
 raku-point-ensheng.com
-rakupoint-nsoltys.com
 raku-point-style.com
-solarservicehouse.com
-ruceive-rakntanpointapp.com
+receove-rakntanpointapp.com
+receive-rekntanpointapp.com
+receuve-rakntanpointapp.com
 sasioncarid-iwang.com
 sasioncarid-mustee.com
+ruceive-rakntanpointapp.com
+rakupoint-rwunda.com
+rakupoint-iaoyu.com
+rakupoint-nsoltys.com
+solarservicehouse.com
 tax-crypto-declare.com
 driving.review-gb.com
 raku-point-edia.com
-allegrolokalnie.pl74646.top
-recoverypro.live
 selfcarearubacc.online
+allegrolokalnie.pl74646.top
+supprtrcb-dpldxysyz96q.edgeone.dev
+cityonedesign.live-shared-m36504.workers.dev
+solitary-sunset-9e63.adeshsinghbest.workers.dev
 www.bizlerdengordunuz.shop
 wsaofhs.cam
 www.usuariosmxonline.com
 www.3672063365.com
 efficient-aquamarine-wycf9prq.edgeone.dev
 www.ingresseroblox.site
+recoverypro.live
 www.bc8.now.sh
+zh.wave-whatsapp.com
+order-dpihckhmxrid.edgeone.dev
 transcript.strongholpayreviewpolicy.co
 usbank.xmldation.com
 try.sigma-whatsapp.com
@@ -235,20 +345,14 @@ secure.orbit-whatsapp.com
 webportal.edgeone.dev
 www.mmontreal.hostel.town
 www.hesap.evergreenfin.ltd
-supprtrcb-dpldxysyz96q.edgeone.dev
-cityonedesign.live-shared-m36504.workers.dev
-solitary-sunset-9e63.adeshsinghbest.workers.dev
 update7043j.rjvs4571248.pro
 update7263j.rjvs4571248.pro
 update5643r.rjvs4571248.pro
-zh.wave-whatsapp.com
-order-dpihckhmxrid.edgeone.dev
 ww.rjvs4571248.pro
 startio-terrzor.zapier.app
 www.allegrolokalnie.pl-ogloszenie-prywatne765256384.click
 www.allegrolokalne.1039837h53.shop
 allegrolokalnie.962854th.top
-allegrolokainie.pl-ogloszenie5672993186.top
 allegro.ippoferta75635423412.sbs
 allegrolokalnie.pl-54242.top
 web-start-trezo-us.typedream.app
@@ -267,67 +371,4 @@ allegrolokalne.pl-ogloszenie5672993186.top
 allegro-lokalnie.pl-ogloszenie5672993186.top
 allegrolokalnie.pl-ogloszenie5672993186.top
 allegro.pl-ogloszenie5672993186.top
-allegro.prywanm4328239.rest
-bradesco.sincronizacaopjonline.info
-atualizando.help
-finglobesmsbc.finglobesmbc.com
-infos-destinataire.bolt.host
-idself-care.shop
-m-relai-be.bolt.host
-pro-dgrfo.com
-raku-point-unda.com
-pushtan.scure.org
-suportesaude.lovable.app
-tempoquayx.click
-akses.finglobesmbc.com
-akaes-finglobe-smbc.com
-allegro.prowar8u237h45.cfd
-avancement9230e.a6fbb0jc.pro
-allegro.5498h45j564.cfd
-allegrolokalnie.pl-oferta2839376.lol
-allegrolokalnie.pl-ogloszenie-prywatne765256384.click
-allegro.3298418244129h54.xyz
-allegrolokainie.pl-ogloszenie-prywatne765256384.click
-allegro-lokalnie.pl-ogloszenie-prywatne765256384.click
-allegro.12-1-h593g4.lol
-fiche-655231.com
-allegrolokalnie.pl-aukcja834736245.shop
-allegrolokalne.pl-ogloszenie-prywatne765256384.click
-allegrolokalne.pl-ogloszenie-prywatne763637483.click
-resgatlivelx.com
-www.hsd5905f2078e2789383ef4e04cc5f7b7d.nexusqalinka2.quest
-hsd5905f2078e2789383ef4e04cc5f7b7d.nexusqalinka2.quest
-en-en-coinbase.com
-www.alwayssecuredhub.net
-www.wiki.evergreenfin.ltd
-adhconlinedocumenttxt-y6h6n.ondigitalocean.app
-bancodelpacifico.onrender.com
-www.parceldashboardwelcomeclientstationonlinepacket.artkiyotomotiv.com
-hs0f10450e870118083da2265d502a5387.nexusqalinka2.quest
-hs696c66ed7a7c108a267ddc4bad5cc0f0.nexusqalinka2.quest
-www.allegro.pl-ogloszenie-prywatne763637483.click
-www.allegro-lokalnie.pl55998.top
-prime.gerermonespacech.com
-www.kern-kapithal.com
-www.webmail-aruba.pms-areaclienti.top
-adobe-sharefile24-mail.marcel-fajdiga.workers.dev
-cumsalvadornetsv2.hstn.me
-eet-lzip--wespack.replit.app
-allegrolokainie.pl-ogloszenie4567998231.top
-allegrolokalnie.pl-ogloszenie4567998231.top
-www.allegro-lokalnie.pl-ogloszenie4567998231.top
-raku-point-karpet.com
-www.allegrolokalne.pl-ogloszenie4567998231.top
-activacion-suscripcion.com
-reconduction-forfait.com
-www.cotacao-nacional.online
-www.a6fbb0jc.pro
-www.xuaoka.com
-www.jcsxnuj.com
-www.hebhg.com
-www.lumber3.com
-www.yqdyi.com
-allegro.pl-ogloszenie-prywatne765256384.click
-www.webjidi.com
-bradesco.onlinesuportepj.online
-connexion-recouvrement.com
+allegrolokainie.pl-ogloszenie5672993186.top

Diferenças do arquivo suprimidas por serem muito extensas
+ 343 - 220
yoroi_suspicious_level2.dns


Alguns arquivos não foram mostrados porque muitos arquivos mudaram nesse diff