root 2 tygodni temu
rodzic
commit
3be0a6453a
6 zmienionych plików z 5796 dodań i 3073 usunięć
  1. 4 1
      nethesis_level3.netset
  2. 45 46
      whitelist.global
  3. 3625 2277
      yoroi_malware_level1.dns
  4. 1440 500
      yoroi_malware_level2.dns
  5. 132 97
      yoroi_suspicious_level1.dns
  6. 550 152
      yoroi_suspicious_level2.dns

+ 4 - 1
nethesis_level3.netset

@@ -2432,6 +2432,7 @@
 35.254.84.169
 35.254.167.98
 35.255.109.80
+35.255.160.25
 35.255.199.143
 35.255.242.128
 36.0.8.0/21
@@ -9208,7 +9209,6 @@
 135.237.123.168
 136.38.68.55
 136.64.39.43
-136.65.161.194
 136.67.133.193
 136.70.66.20
 136.70.130.84
@@ -9457,6 +9457,7 @@
 138.197.174.62
 138.197.175.93
 138.197.197.27
+138.197.213.121
 138.199.42.130
 138.199.42.136
 138.199.42.138
@@ -9974,6 +9975,7 @@
 145.223.130.79
 145.223.130.81
 145.223.130.84
+145.223.130.101
 145.223.130.111
 145.223.130.124
 145.223.130.126
@@ -13533,6 +13535,7 @@
 183.251.208.44
 184.70.159.86
 184.72.64.42
+184.72.84.154
 184.72.95.195
 184.72.120.145
 184.72.121.94

+ 45 - 46
whitelist.global

@@ -14,69 +14,83 @@
 62.149.128.154
 62.149.128.151
 62.149.128.160
-167.172.176.238
+188.166.29.153
+165.232.89.253
+206.189.62.73
+142.93.230.36
+104.248.201.37
+164.92.145.142
+188.166.68.157
+167.99.243.169
+188.166.36.213
+164.90.197.63
+104.248.95.189
+167.99.209.133
+207.154.242.82
+146.190.232.37
+207.154.226.241
 207.154.209.38
 188.166.80.143
 206.189.2.123
 167.172.177.249
 64.225.68.114
+167.172.176.238
 188.166.38.161
 159.223.218.42
 164.92.158.193
-134.209.242.46
 167.99.252.173
 209.38.236.168
 128.199.34.191
 104.248.132.107
 142.93.170.58
 134.209.249.190
-188.166.125.205
+134.209.242.46
 134.122.58.16
 167.99.40.4
 68.183.72.75
-174.138.15.108
+188.166.125.205
 167.71.57.137
 164.92.241.94
 209.38.195.15
 167.99.46.183
 188.166.31.25
 146.190.226.124
-164.92.241.115
+174.138.15.108
 206.189.99.25
 104.248.194.112
 178.128.254.142
 128.199.52.246
-134.209.92.178
+164.92.241.115
 46.101.197.42
 165.22.205.55
 178.62.240.117
 167.71.68.193
 159.223.223.100
+134.209.92.178
 188.166.95.89
 64.227.78.25
 134.122.63.170
 159.89.16.213
-159.223.236.108
 178.62.230.155
 104.248.137.50
 188.166.112.196
 167.99.217.178
 188.166.89.180
-159.223.212.220
+159.223.236.108
 165.22.23.86
 46.101.243.215
 167.71.78.214
 146.190.225.217
 146.190.238.159
-134.209.193.225
+159.223.212.220
 152.42.133.210
 188.166.15.149
 159.223.215.38
 142.93.137.213
+134.209.193.225
 167.71.8.45
 167.99.42.32
 167.71.64.103
-161.35.155.167
 64.226.110.43
 68.183.8.80
 188.166.163.93
@@ -84,22 +98,23 @@
 178.62.247.86
 104.248.205.106
 64.226.125.27
+161.35.155.167
 128.199.43.246
 152.42.136.190
 165.22.197.93
 167.172.38.137
 152.42.138.25
 188.166.64.212
-46.101.208.189
 167.71.10.219
 104.248.82.252
 46.101.184.98
 46.101.230.158
-142.93.138.82
+46.101.208.189
 134.122.85.110
 167.172.45.223
 146.190.18.242
 161.35.148.219
+142.93.138.82
 174.138.2.121
 159.223.7.204
 139.59.137.11
@@ -109,28 +124,28 @@
 167.99.216.203
 178.62.192.199
 164.92.157.134
-178.128.244.136
 104.248.46.0
 161.35.95.211
 104.248.88.58
 164.92.142.172
-165.245.243.177
+178.128.244.136
 159.223.215.77
 178.62.240.209
 188.166.105.213
 161.35.71.6
+165.245.243.177
 188.166.109.135
 161.35.84.164
 206.81.28.71
 188.166.63.108
 167.99.211.228
 164.92.219.226
-188.166.93.86
 104.248.82.87
 188.166.73.117
 64.227.75.231
 159.223.214.180
 142.93.131.251
+188.166.93.86
 188.166.77.48
 146.190.29.122
 152.42.139.15
@@ -145,19 +160,19 @@
 64.226.87.54
 164.90.232.24
 159.223.19.185
-165.232.95.75
 165.22.28.7
 164.92.137.212
 188.166.83.149
 161.35.88.180
 188.166.87.159
 68.183.15.129
-161.35.72.43
+165.232.95.75
 206.81.18.90
 188.166.48.29
 134.209.94.125
 209.38.110.236
 139.59.209.243
+161.35.72.43
 188.166.116.155
 152.42.128.247
 167.99.136.179
@@ -168,21 +183,21 @@
 164.90.167.204
 165.22.92.33
 188.166.72.23
-161.35.149.158
 164.90.178.60
 46.101.171.161
 164.90.194.17
 157.245.65.18
 167.71.11.73
+161.35.149.158
 167.71.76.184
 207.154.244.91
 157.230.26.3
-167.172.96.183
 164.92.177.241
 188.166.24.24
 164.92.158.210
 167.99.140.13
 164.92.237.75
+167.172.96.183
 159.89.10.30
 188.166.46.90
 159.65.192.201
@@ -195,20 +210,20 @@
 104.248.207.61
 164.90.204.45
 164.90.176.213
-167.99.208.235
 161.35.93.220
 167.71.73.171
 46.101.204.179
 165.232.68.239
-134.122.90.171
+167.99.208.235
 161.35.153.110
 161.35.153.85
 165.232.94.151
 46.101.238.151
-188.166.162.163
+134.122.90.171
 165.22.192.54
 134.209.91.165
 146.190.237.107
+188.166.162.163
 159.223.213.107
 167.99.210.125
 64.226.89.119
@@ -218,11 +233,11 @@
 188.166.37.143
 206.189.3.65
 152.42.138.49
-64.226.86.118
 164.92.215.172
 188.166.85.242
 64.227.119.244
 46.101.209.37
+64.226.86.118
 188.166.85.76
 167.172.35.81
 188.166.73.43
@@ -232,17 +247,17 @@
 165.245.244.77
 178.62.221.146
 139.59.147.35
-46.101.217.111
 46.101.116.231
 159.223.0.121
 68.183.7.251
 167.71.78.224
 209.38.237.246
-128.199.43.100
+46.101.217.111
 188.166.9.247
 159.65.198.47
 178.128.248.28
 178.62.206.20
+128.199.43.100
 134.122.56.28
 159.223.237.208
 139.59.152.247
@@ -252,25 +267,14 @@
 188.166.91.192
 167.99.40.163
 164.92.234.226
-157.230.23.131
 188.166.17.142
 164.92.156.249
 134.122.58.90
-188.166.29.153
-165.232.89.253
-164.92.145.142
-206.189.62.73
-142.93.230.36
-104.248.201.37
-188.166.68.157
-167.99.243.169
-188.166.36.213
-164.90.197.63
-207.154.226.241
-104.248.95.189
-167.99.209.133
-207.154.242.82
-146.190.232.37
+157.230.23.131
+104.248.198.62
+209.38.101.97
+167.99.213.219
+167.71.3.241
 146.190.26.170
 64.225.76.28
 164.92.155.126
@@ -278,10 +282,6 @@
 167.99.33.146
 167.71.1.225
 104.248.194.203
-104.248.198.62
-209.38.101.97
-167.99.213.219
-167.71.3.241
 134.209.136.185
 134.209.205.92
 134.209.206.121
@@ -303,7 +303,6 @@
 167.99.44.237
 174.138.107.200
 178.156.183.49
-185.199.109.153
 185.199.110.153
 185.236.106.196
 188.166.103.4

Plik diff jest za duży
+ 3625 - 2277
yoroi_malware_level1.dns


Plik diff jest za duży
+ 1440 - 500
yoroi_malware_level2.dns


+ 132 - 97
yoroi_suspicious_level1.dns

@@ -9,17 +9,67 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-linux-hp-prodesk-600-g2-sff.tailbe60c2.ts.net
-m36502847-shared-docu.live-document-m365022.workers.dev
-mtoken.baby
-frosttreasurycomect.corn-iu-baking.top
-megaofertss.com
-consultsur.com
-367363.xyz
+www.connect-1inch.com
+credi-pichi-1-ch-0--pich1ch.replit.app
+cieloangular.space
+quantitive.top
+www.tackleoutplayed.com
+www.m.jinwanglai.com
+146377.xyz
+www.uspshelpers.top
+hutsoysnotsbi--crediecuador1.replit.app
+allegrolokalnie.335544ip.top
+allegro.12012094759.autos
+allegro.prot34u7391.homes
+allegro.034g934h834jj.xyz
+allegrolokalnie.pl292829.cyou
+www.allegro.pl-7543235678.click
+mhkx-1tsc-e9j4.xftjksrjk.workers.dev
+www.24086.xyz
+appleimagens.com
+suporteapple.info
+oiuytfghjkdfgvbn--crediecuador1.replit.app
+icloudbr.support
+icloudoficial.live
+rastreioicloud.support
+contrarioescuchar.site
+icloud-oficial.com
+imagens-icloud.com
+applefotos.support
+allegrolokalnie.pl-75512.top
+allegro.01201290.beauty
+deltaliquid.app
+www.sharedfilepreview.cfd
+staging.d3r48mrbv1uana.amplifyapp.com
+allegro.smarpt342832012.homes
+allegro.pfw498tr2323.homes
+allegrolokalnie.pl01.me
+allegrolokalnie.pl-oferta73654223.click
+allegro.9458323ffo.beauty
+allegrolokalnie.hplts.sbs
+www.nehsbe.cn
+docusfilesdownloadhelper.info
+www.wegoupupup.com
+www.das.hostel.town
+amazon-v2.isha-dev.com
+good.h5-whatsapp-zn.hl.cn
+jongahicoop.com
+www.ysn984ld.51f8y981ds.com
+supportxfinty.weeblysite.com
+allegrolokalnie.oferta743821.lol
+allegro.365345230132f.beauty
+allegrolokalnie.lokalna-709814.lol
+ax-italy.eu.cc
+dshsgnx.cqlingdong.com
+ecuadorayudas--ayudasecu.replit.app
+mastevisa.sbs
+mastercardcrc.gu.cc
 uytrfgvujhgbtfoiuh--ubiipagoscred.replit.app
+vendredi-4-sep.com
+vendredi-5.com
+linux-hp-prodesk-600-g2-sff.tailbe60c2.ts.net
 www.validainfomsn.zya.me
 643467.xyz
-intermaticopacifico.onrender.com
 523486.xyz
 www.megaconnet.com
 www.22195986365.com
@@ -27,12 +77,6 @@ www.woneyi.com
 link.bitpie-blockchain.com
 www.entertainmentmembers.com
 www.roxbro.wallst.ru
-ax-italy.eu.cc
-ks-gov.us-onedrive.com
-www.web-spotify.cn
-www.74239.vip
-www.verrification-smeta-supporst-team-notification.one
-www.collabland.online
 paypal-login-secure.help
 pc-spotify.cn
 www.medicalremforuhd.com
@@ -43,37 +87,24 @@ www.r3m8w5tj1ctl.rironicmall.com
 www.tiktok-mall.store
 www.67455.xyz
 www.y50v.top
-686792.venvoox6.pro
 www.venvoox6.pro
-vendredi-4-sep.com
 allegrolokalnie.smart-94832.cfd
-ecuadorayudas--ayudasecu.replit.app
+ks-gov.us-onedrive.com
+www.web-spotify.cn
+www.74239.vip
+www.verrification-smeta-supporst-team-notification.one
+www.collabland.online
+m36502847-shared-docu.live-document-m365022.workers.dev
+mtoken.baby
+frosttreasurycomect.corn-iu-baking.top
+megaofertss.com
+consultsur.com
+367363.xyz
+intermaticopacifico.onrender.com
 www.allegro.pl-ogloszenie5722931873.lol
-www.allegro.pl-25294.click
 payonline.mom
-bn-cr.eu.cc
-mastevisa.sbs
-mastercardcrc.gu.cc
-visagcr.gu.cc
-dshsgnx.cqlingdong.com
-www.allegrolokalnie.pl-25294.click
-allegrolokalnie.pl-oferta20172841.lol
-allegrolokalnie.pl73626.top
-allegrolokalnie.pl01.top
-www.allegrolokainie.pl-25294.click
-allegrolokalnie.oferta78206.lol
-allegrolokalnie.pl-73462535.shop
-allegrolokalnie.pl-ofertaa.lol
-vendredi-5.com
-www.ethltd.cc
-www.82785.xyz
-www.82803.xyz
-www.tiktokchinesespy.com
-mtoken.click
-www.hyenh2.top
+www.allegro.pl-25294.click
 www.autii.com
-store-sync-ta1c.p-apygrrjc.workers.dev
-allegrolokalnie.smart-94852.cfd
 www.lowndeslondonajumeirahpartner.spahotel.guru
 www.skymavis.online
 www.kucoinv.com
@@ -90,33 +121,46 @@ s47p.top
 www.proprog.xyz
 n-cafe-posts.com
 www.swap-1inch.com
+www.allegrolokalnie.pl-25294.click
+allegrolokalnie.smart-94852.cfd
+allegrolokalnie.pl73626.top
+allegrolokalnie.pl01.top
+www.allegrolokainie.pl-25294.click
+www.ethltd.cc
+www.82785.xyz
+www.82803.xyz
+www.tiktokchinesespy.com
+mtoken.click
+www.hyenh2.top
+store-sync-ta1c.p-apygrrjc.workers.dev
 allegrolokalnie.63293872.xyz
-allegrolokainie.pl-7543235678.click
-allegro.smar9439012g.casa
-allegro.pryi40-23gf2.casa
-allegrolokalne.pl-7543235678.click
-allegrolokalne.pl-ogloszenie5722931873.lol
+espace-recouvrement.com
 allegrolokalne.pl-25294.click
+allegro.pryi40-23gf2.casa
 allegro-lokalnie.pl-25294.click
-allegrolokalnie.pl-7543235678.click
-allegro.00123192s.casa
-allegrolokalnie.pl64378.top
 allegrolokalnie.pl-oferta87292344.shop
+allegrolokalnie.pl-7543235678.click
 allegrolokalnie.pl78453.top
 bradesco.apoiocorporativo.com
-coin-base-hub-us.zapier.app
-conformitecan.com
-dcanconformite.com
+bradesco.sincronizacaopjonline.click
+bradesco.sincronizacaopjonline.pro
+c8reg200ev8222ee.bitrix24.site
 diagnostico.agropacks.com
-home-ndax-docx.zapier.app
+kleinanzeigen-bestellung.my111.net
 msx-italia.eu.cc
 sol-card.com
-c8reg200ev8222ee.bitrix24.site
+allegro.smar9439012g.casa
+conformitecan.com
+allegrolokalne.pl-7543235678.click
+allegrolokainie.pl-7543235678.click
+coin-base-hub-us.zapier.app
+allegrolokalne.pl-ogloszenie5722931873.lol
+allegrolokalnie.pl64378.top
+allegro.00123192s.casa
+dcanconformite.com
+home-ndax-docx.zapier.app
 newcomc.weeblysite.com
-bradesco.sincronizacaopjonline.click
-bradesco.sincronizacaopjonline.pro
 i1p7-l1uj-8pgw.help-ndcparking-com-s-account.workers.dev
-stang.lol
 www.67407.xyz
 www.us-usps-xf.xyz
 www.i0jhrz.tokeonptoket.com
@@ -128,8 +172,6 @@ irsly.sbs
 www.steamcommunity.vov.ru
 googleproject-emailtexverifyicagion-dpc7xpqkkma8.edgeone.dev
 www.allegroreg.com
-www.0ut927-lve828-365k.iceiy.com
-www.mydocusign.eu.cc
 www.dhl-rpa-portal.infanion.com
 www.srva.closer.website
 www.eurostarsmateralasuite.spahotel.guru
@@ -147,6 +189,9 @@ www.deltasbymarriottrega.spahotel.guru
 www.mx648.com
 www.43179986365.com
 www.2m2kaejt.6lnov0.cn
+www.0ut927-lve828-365k.iceiy.com
+www.mydocusign.eu.cc
+stang.lol
 formulario-cita-digital-apjsh-2026.cr-web.workers.dev
 secureppl-login.help
 www.allegro.ofep23891.shop
@@ -163,7 +208,6 @@ www.custoezcenyr.dynv6.net
 free-5532335.webadorsite.com
 www.free-5532335.webadorsite.com
 allegro.pl-ogloszenie5722931873.lol
-kleinanzeigen-bestellung.my111.net
 allegrolokalnie.752976.lol
 allegro.pl-25294.click
 www.allegro-lokalnie.1039837h53.shop
@@ -172,8 +216,11 @@ gov-pl-web.com
 towerbanks.com
 trustcapitallogini.webador.com
 gratuit-5538115.webadorsite.com
+www.inform.viptop.ru
 www.96037586365.com
+apexstpark.shop
 www.nextbeu.com
+www.alkhoorycourtyard.spahotel.guru
 www.67438.xyz
 www.b45xxx.com
 www.schweizerhofbern.spahotel.guru
@@ -186,15 +233,14 @@ www.1w21.am.coinbase.cm
 www.61918.xyz
 www.67426.xyz
 www.asianagr.spahotel.guru
-www.bet-365.pt
-www.pegasus.spahotel.guru
+www.infogmx.de
+www.aulamexiverifica.gt.tc
 www.enlinaea.9e.cz
-www.inform.viptop.ru
 www.web2.pancake.run
-apexstpark.shop
-www.alkhoorycourtyard.spahotel.guru
+www.bet-365.pt
 www.7t83kwq8goz9zkbc.23.32.qjgarden.com
 bancoitauconsig.com
+www.pegasus.spahotel.guru
 freeflow-2026.tarifaviasbrasil.site
 www.s7xnc4.tokeonpqaket.com
 app.bitpie-blockchain.com
@@ -203,62 +249,47 @@ www.steamcommunitty.wallst.ru
 midasplay.gamerstored.com
 www.centralhouselisbonbaixa.hostel.town
 www.httpverfi-cecompte-buro-wbemai-id-retrunsectionusl-inboxwhct.usluga.me
-www.infogmx.de
 www.birt.club
 www.dromhondatuning.hop.ru
-www.aulamexiverifica.gt.tc
 outlookwebs.softr.app
 10qin-wps.api-ms365-cloud.workers.dev
 poductividad--createrapp000.replit.app
 berachainairdrop.surge.sh
 www.berachainairdrop.surge.sh
 ggggdjjjjjzip--farma26.replit.app
+60844.xyz
+fgfgij.top
+60941.xyz
 www.mand-xude.com
 www.whastapp-center.help
 mtoken.loan
 www.my-whastapp.help
 www.whastapp-center.my
+ss.idms-service-cloud2-651246814854185.workers.dev
 www.whastapp-user.help
 www.whastapp-team.my
+2m2kaejt.6lnov0.cn
 www.whastapp-chat.my
 www.whastapp-user.my
-ss.idms-service-cloud2-651246814854185.workers.dev
-2m2kaejt.6lnov0.cn
 cerainvoice.edgeone.dev
 1xlite-41992.com
 robinhood.toys
 16274.xyz
 sikencserbug-00--creditdispon.replit.app
 www.wp.pl-zadluzenie-informacja.cfd.vh13647.vh.net.pl
-60844.xyz
-fgfgij.top
 www.182onlinee.com
 lykaworld.de
-60941.xyz
-www.go-for-free-verify-badge-here.surge.sh
-www.valide-cuenta-ahora.iceiy.com
-m3650273853-cloud-preview-shared-document-n2.live-document-m36592056.workers.dev
 free-5464113.webadorsite.com
 www.onlydotas2.hop.ru
 www.candy.bos.ru
 www.freedonat.hop.ru
+www.go-for-free-verify-badge-here.surge.sh
+www.valide-cuenta-ahora.iceiy.com
+m3650273853-cloud-preview-shared-document-n2.live-document-m36592056.workers.dev
 activarcuentabhd-acceso.zya.me
 b24-1uvnew.bitrix24.site
 tuweb-cr3d1t-001.hstn.me
-finanzcuador--ecayuda.replit.app
-bh-ddesembolso-2026--bhdenlinea2026.replit.app
-wp.pl-krajowyrejestdlugow.info
-out-look-2026.com
-m.trezor.love
-www.6lnov0.cn
-personal-projects-new-project-6a95727500127b12d0de.appwrite.network
-api.trezor.love
-www.j168w.vip
-eager-lifecycle-829561.framer.app
-microsoftworldofwarcraft.com
-www.paypal-login-support.com
 solitary-resonance-1d1b.nd-d67.workers.dev
-stubcode.edgeone.dev
 admin.bybit.im9996.cc
 subscriptions.updatemybilling.app
 ihrswisspassskanderkonto.ilitedevelopment.com
@@ -273,21 +304,25 @@ home.ioo-gate.cn
 fdvcxdfgsd.sbs
 www.new-click-app-99.surge.sh
 www.connect-center.com
-login-microsoftonline.cz
 security-server-page--tubiezphill1.replit.app
+login-microsoftonline.cz
 steamcomunity.ru
 www.sieradenbycelin.nl
+finanzcuador--ecayuda.replit.app
+bh-ddesembolso-2026--bhdenlinea2026.replit.app
+wp.pl-krajowyrejestdlugow.info
+out-look-2026.com
+m.trezor.love
+www.6lnov0.cn
+personal-projects-new-project-6a95727500127b12d0de.appwrite.network
+api.trezor.love
+www.j168w.vip
+eager-lifecycle-829561.framer.app
+microsoftworldofwarcraft.com
+www.paypal-login-support.com
+stubcode.edgeone.dev
 allegro.lokalna-ofeta9914122115.sbs
 daugsce.com
 kq5848.craftum.io
 p01--ar24securitydoc--ztbdptjpg9dv.code.run
 tractcomp1y-y04b-n8i0.larryk-iit-sourcetech-com-s-account.workers.dev
-paypaynejp781.replit.app
-php-web-server--uniteceduc.replit.app
-doc-share-mtu1.james-maverick2019.workers.dev
-www.emailru.bos.ru
-ypojbl.top
-portal-auth-io.typedream.app
-www.leboncoin.pagereservation.com
-welcome-bitbuy-com.typedream.app
-odenocp.today

Plik diff jest za duży
+ 550 - 152
yoroi_suspicious_level2.dns


Niektóre pliki nie zostały wyświetlone z powodu dużej ilości zmienionych plików