root 5 days ago
parent
commit
4c8c73922e
6 changed files with 39698 additions and 39044 deletions
  1. 375 354
      nethesis_level3.netset
  2. 110 110
      whitelist.global
  3. 11361 11915
      yoroi_malware_level1.dns
  4. 27008 25972
      yoroi_malware_level2.dns
  5. 386 422
      yoroi_suspicious_level1.dns
  6. 458 271
      yoroi_suspicious_level2.dns

File diff suppressed because it is too large
+ 375 - 354
nethesis_level3.netset


+ 110 - 110
whitelist.global

@@ -14,6 +14,63 @@
 62.149.128.154
 62.149.128.151
 62.149.128.160
+164.90.194.17
+157.245.65.18
+167.71.11.73
+161.35.149.158
+164.90.178.60
+46.101.171.161
+167.71.76.184
+207.154.244.91
+157.230.26.3
+188.166.24.24
+164.92.158.210
+167.99.140.13
+164.92.237.75
+167.172.96.183
+164.92.177.241
+188.166.46.90
+159.65.192.201
+161.35.154.149
+146.190.239.2
+159.89.10.30
+167.172.47.117
+146.190.238.76
+161.35.81.200
+134.122.51.35
+104.248.207.61
+164.90.204.45
+164.90.176.213
+161.35.93.220
+167.71.73.171
+46.101.204.179
+165.232.68.239
+167.99.208.235
+161.35.153.110
+161.35.153.85
+165.232.94.151
+46.101.238.151
+134.122.90.171
+165.22.192.54
+134.209.91.165
+146.190.237.107
+138.68.84.193
+159.223.213.107
+167.99.210.125
+64.226.89.119
+164.92.152.2
+188.166.37.143
+206.189.3.65
+152.42.138.49
+164.92.209.202
+165.22.27.110
+164.92.215.172
+188.166.85.242
+64.227.119.244
+46.101.209.37
+64.226.86.118
+188.166.85.76
+167.172.35.81
 188.166.73.43
 134.209.253.247
 207.154.246.181
@@ -21,17 +78,17 @@
 165.245.244.77
 178.62.221.146
 139.59.147.35
-46.101.217.111
-46.101.116.231
 159.223.0.121
 68.183.7.251
 167.71.78.224
 209.38.237.246
-128.199.43.100
-188.166.9.247
+46.101.217.111
+46.101.116.231
 159.65.198.47
 178.128.248.28
 178.62.206.20
+128.199.43.100
+188.166.9.247
 134.122.56.28
 159.223.237.208
 139.59.152.247
@@ -41,112 +98,112 @@
 188.166.91.192
 167.99.40.163
 164.92.234.226
-157.230.23.131
 188.166.17.142
 164.92.156.249
 134.122.58.90
+157.230.23.131
 188.166.29.153
 165.232.89.253
-164.92.145.142
-206.189.62.73
 142.93.230.36
 104.248.201.37
+164.92.145.142
+206.189.62.73
 188.166.68.157
 167.99.243.169
 188.166.36.213
 164.90.197.63
-207.154.226.241
 104.248.95.189
 167.99.209.133
 207.154.242.82
 146.190.232.37
-167.172.176.238
-207.154.209.38
+207.154.226.241
 188.166.80.143
 206.189.2.123
 167.172.177.249
 64.225.68.114
+167.172.176.238
+207.154.209.38
 188.166.38.161
 159.223.218.42
 164.92.158.193
-134.209.242.46
-167.99.252.173
-209.38.236.168
 128.199.34.191
 104.248.132.107
 142.93.170.58
 134.209.249.190
-188.166.125.205
+134.209.242.46
+167.99.252.173
+209.38.236.168
 134.122.58.16
 167.99.40.4
 161.35.203.204
 68.183.72.75
-174.138.15.108
-167.71.57.137
-164.92.241.94
+188.166.125.205
 209.38.195.15
 167.99.46.183
 188.166.31.25
 146.190.226.124
-164.92.241.115
+174.138.15.108
+167.71.57.137
+164.92.241.94
 206.189.99.25
 104.248.194.112
 178.128.254.142
 128.199.52.246
-134.209.92.178
-46.101.197.42
+164.92.241.115
 165.22.205.55
 178.62.240.117
 167.71.68.193
 159.223.223.100
+134.209.92.178
+46.101.197.42
 188.166.95.89
 64.227.78.25
 134.122.63.170
 159.89.16.213
-159.223.236.108
-178.62.230.155
-104.248.137.50
 188.166.112.196
 167.99.217.178
 188.166.89.180
-159.223.212.220
-165.22.23.86
-46.101.243.215
+159.223.236.108
+178.62.230.155
+104.248.137.50
 167.71.78.214
 146.190.225.217
 146.190.238.159
-134.209.193.225
-152.42.133.210
+159.223.212.220
+165.22.23.86
+46.101.243.215
 188.166.15.149
 159.223.215.38
 142.93.137.213
+134.209.193.225
+152.42.133.210
 167.71.8.45
 167.99.42.32
 167.71.64.103
-161.35.155.167
-64.226.110.43
-68.183.8.80
 188.166.163.93
 188.166.91.80
 178.62.247.86
 104.248.205.106
 64.226.125.27
-128.199.43.246
-152.42.136.190
+161.35.155.167
+64.226.110.43
+68.183.8.80
 165.22.197.93
 167.172.38.137
 152.42.138.25
 188.166.64.212
-46.101.208.189
+128.199.43.246
+152.42.136.190
 167.71.10.219
 104.248.82.252
 46.101.184.98
 46.101.230.158
-142.93.138.82
-134.122.85.110
+46.101.208.189
 167.172.45.223
 146.190.18.242
 161.35.148.219
+142.93.138.82
+134.122.85.110
 174.138.2.121
 159.223.7.204
 139.59.137.11
@@ -156,55 +213,55 @@
 167.99.216.203
 178.62.192.199
 164.92.157.134
-178.128.244.136
-104.248.46.0
 161.35.95.211
 104.248.88.58
 164.92.142.172
-165.245.243.177
+178.128.244.136
+104.248.46.0
 159.223.215.77
 178.62.240.209
 188.166.105.213
 161.35.71.6
+165.245.243.177
 188.166.109.135
 161.35.84.164
 206.81.28.71
 188.166.63.108
 167.99.211.228
 164.92.219.226
-188.166.93.86
-104.248.82.87
 188.166.73.117
 64.227.75.231
 159.223.214.180
 142.93.131.251
+188.166.93.86
+104.248.82.87
 188.166.77.48
 146.190.29.122
 152.42.139.15
 165.227.157.248
-159.223.229.75
 188.166.70.107
 167.71.71.43
 206.189.0.226
 146.190.234.168
+159.223.229.75
 167.71.62.233
 104.248.32.7
 64.226.87.54
 164.90.232.24
 159.223.19.185
-165.232.95.75
-165.22.28.7
-164.92.137.212
 188.166.83.149
 161.35.88.180
 188.166.87.159
 68.183.15.129
-161.35.72.43
-206.81.18.90
+165.232.95.75
+165.22.28.7
+164.92.137.212
 188.166.48.29
 134.209.94.125
 209.38.110.236
 139.59.209.243
+161.35.72.43
+206.81.18.90
 188.166.116.155
 152.42.128.247
 167.99.136.179
@@ -215,74 +272,17 @@
 164.90.167.204
 165.22.92.33
 188.166.72.23
-161.35.149.158
-164.90.178.60
-46.101.171.161
-164.90.194.17
-157.245.65.18
-167.71.11.73
-167.71.76.184
-207.154.244.91
-157.230.26.3
-167.172.96.183
-164.92.177.241
-188.166.24.24
-164.92.158.210
-167.99.140.13
-164.92.237.75
-159.89.10.30
-188.166.46.90
-159.65.192.201
-161.35.154.149
-146.190.239.2
-167.172.47.117
-146.190.238.76
-161.35.81.200
-134.122.51.35
-104.248.207.61
-164.90.204.45
-164.90.176.213
-167.99.208.235
-161.35.93.220
-167.71.73.171
-46.101.204.179
-165.232.68.239
-134.122.90.171
-161.35.153.110
-161.35.153.85
-165.232.94.151
-46.101.238.151
-165.22.192.54
-134.209.91.165
-146.190.237.107
-138.68.84.193
-159.223.213.107
-167.99.210.125
-64.226.89.119
-164.92.209.202
-165.22.27.110
-164.92.152.2
-188.166.37.143
-206.189.3.65
-152.42.138.49
-64.226.86.118
-164.92.215.172
-188.166.85.242
-64.227.119.244
-46.101.209.37
-188.166.85.76
-167.172.35.81
+159.65.203.7
 167.71.3.241
-146.190.231.227
 146.190.22.43
+146.190.231.227
+64.225.76.28
 164.92.155.126
 174.138.12.82
-64.225.76.28
 167.99.33.146
-167.71.1.225
 164.92.221.220
 104.248.194.203
-159.65.203.7
+167.71.1.225
 134.209.136.185
 134.209.206.121
 138.197.176.207
@@ -304,8 +304,8 @@
 167.99.44.237
 174.138.107.200
 178.156.230.249
-185.199.108.153
-185.199.111.153
+185.199.109.153
+185.199.110.153
 185.236.106.196
 188.166.103.4
 188.166.10.67

File diff suppressed because it is too large
+ 11361 - 11915
yoroi_malware_level1.dns


File diff suppressed because it is too large
+ 27008 - 25972
yoroi_malware_level2.dns


+ 386 - 422
yoroi_suspicious_level1.dns

@@ -9,113 +9,269 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-cm304030111133.xhost.live
-fortcheack.top
-start-io-treazr-public.typedream.app
-amazon-clone-f73c.panda.new
-www.netflix.abenether.com
-faq-suit-io.typedream.app
-appfinanciamentoo.fun
-lockerfort.xyz
-welcome-hardware.typedream.app
+ledger.check-tx.com
+www.mobil-deniz-promosyyon-bilgi-ekranim.theworkpc.com
+www.adidas.menu
+65.jj38142.vip
+65.jj37899.vip
+65.jj38175.vip
+65.jj37927.vip
+65.jj38127.vip
+guide-ledger-desktops-com.typedream.app
+trustwallet.com-two-factor-authentication12.ao.yesixrq.com
+www.18133.xyz
+trustwallet.com-two-factor-authentication12.vv.xtkuwd.com
+22266.de-infokonto.com
+www.nanz.rumahsakit.de
+www.vt.mlulxpl.com
+www.managementservices973724507-emaild.online
+x55x.xyz
+mood-posting-graph-cnet.trycloudflare.com
+banners-fence-reservation-hats.trycloudflare.com
+yordemi.online
+passes-barrier-workshops-feelings.trycloudflare.com
+ig-verify.apps.prov.cx
+easier-sparrow-457507.framer.app
+aged-union-2448.joeawoodward815.workers.dev
+fangbian.shop
+gzbet367.vip
+nc6c-q1it-v225.bemir67147-kierko-com-s-account.workers.dev
+z8rc-l8ma-x9n4.bemir67147-kierko-com-s-account.workers.dev
+kfee-m8hv-yoi3.review-docusigntrello-com-s-account.workers.dev
+tr.padisahbetingirisi.top
+ay4431.craftum.io
+757cd1be-caf3-4f80-a41c-cce6f5c7cf14-00-n6g9vgcw7z72.spock.replit.dev
+www.16755.xyz
+www.16287.xyz
+autoscouts24de.com
+padisahbetingirisi.top
+www.j126q.vip
+quick-blue-tick.surge.sh
+ji2362.craftum.io
+raiffiesen.social
+whatsapp-me.pc-chat-whatsapps.hi.cn
+chezipolitebeachclub.hostel.town
+www.x17q.top
+www.x17p.top
+www.x36m.top
+personnelcompte.moncompte.site
+www.x21c.vip
+www.x36n.top
+www.x30m.top
+n19ssvip.top
+start-bridge-trezor-public.typedream.app
+amazon-ae-relay.apps.prov.cx
+www.goldasia.cc
+185-217-0-181.ip.obe.net
+statutory-blush-jnxb8kdq.edgeone.dev
+ig-auth.apps.prov.cx
+justcharterupdate.framer.website
+helptrezor-suite.wasmer.app
+intelligent-fact-583157.framer.app
+www.link.quantum-financialsystems.com
+treazore-suiite.wasmer.app
+cheerful-rose-tkryjfc0.edgeone.dev
+www.quick-blue-tick.surge.sh
+secure-eng-trzzr.typedream.app
+link.quantum-financialsystems.com
+noble-yak-959506.framer.app
+mmssynchrodonneesfr.t.mydomain.zone
+20287.de-infokonto.com
+freeflowbron.shop
+freebrflow.shop
+freebrasilflow.shop
+fifthyteherd.best
+coachwithcbw.com
+www.swisscomlei.com
+offeroasis.cfd
+uzbey.com
+marianswoman.org
+mail.beleberdon.com
+kaitaaskjdjkx123x123.cfd
+pc-instagram.cn
+qbactivationcode.com
+amazonenterprise3.com
+chartertimeupdate.framer.website
+whatsapp-desk.pc-chat-whatsapps.hi.cn
+beleberdon.com
+conversemy.today
+allegrolokainie.pl-92133.click
+allegro.1230129g8g734.click
+allegro-lokalnie.pl-m8s8f.click
+allegrolokalnie.htmll.sbs
+allegro.3214982398r243g.click
+allegro.12430129h8gh8g.click
+allegro-lokalnie.pl-92133.click
+allegro.294287139489235r23g234.click
+allegrolokalinie.pl-87432.cyou
+allegrolokalnie.kup-teraz-transakcja0315794327.online
+mes-facture-prime.com
+www.serv464564.pro
+prime-magistral-deflagration.fr
+aloufa.serv464564.pro
+rachid.serv464564.pro
+allegrolokalnie.sshtp.sbs
+mamoud.serv464564.pro
+rufin.serv464564.pro
+registro-digital-ahnm-2026.cr-web.workers.dev
+allegro.3459349g34.lat
+allegrolokalnie.oferta93931.cfd
+allegrolokalnie.ogloszenie723823729323134.shop
+allegrolokalnie.lokalna-ofera9123491296.shop
+allegrolokalne.pl-m8s8f.click
+www.allegrolokalne.pl-92133.click
+www.allegro-lokalnie.pl-m8s8f.click
+www.allegrolokainie.pl-m8s8f.click
+www.allegro-lokalnie.pl-92133.click
+allegro.lokalna-ofera9123491296.shop
+www.allegro.wfz56.top
+www.allegrolokalnie.pl-oferta84df858hf4d.click
+allegrolokalnie.pl-m8s8f.click
+allegro.smart9438213.click
+allegrolokalinie.pl-26394.click
+allegrolokalnie.7124712664.lol
+allegrolokalne.pl-92133.click
+allegro.oferta93931.cfd
+allegro.pl-m8s8f.click
+bienestareconomicopichincha2026.zya.me
+allegro.dt191.top
+allegro.lokalna0340-902.shop
+allegro.53423199gg88.biz
+id.ionos.at-identifier.com
+sso-tangem.com
+allegrolokalnie.lokalna0340-902.shop
+pass-checkch.com
+allegro.pl-92133.click
+allegrolokainie.pl-m8s8f.click
+idpaypai.pass-checkch.net
+pass-checkch.net
+beneficioslivelox.com
+immunology-main-archived-websites.trycloudflare.com
+securpassinfo-sg.com
+beneficiosmilhas.online
+allegrolokalnie.lokalna--ofeta2989125.sbs
+solicitudyserviciobhddominicana.xo.je
+allegrolokalnie.pl-oferta658.shop
+alertdeiivery.com
+allegro.nr-2834sd2m43.click
+allegro.99571.click
+allegro.ofeta84271.cfd
+allegrolokalnie.nr-23843idms23.click
+allegrolokalnie.79057.top
+allegrolokalnie.lokalna-49285.sbs
+allegrolokalnie.lokalna-1900191.biz
+allegro.2131239129ghgh.qpon
+allegro.3012998gg.click
+allegro.lokalna-oferta94291.cfd
+bouquet-video.com
+bradesco.novocadastro.digital
+bradesco.chatdeatualizacao.pro
+felfecirdom.co
+ibpenviarrsolicituddrddominicana.xo.je
+info-vitale.fr
+my-xfinity.me
+relanceclient-espacevitales.renewoptions-abonnes.digital
+secure-static-page--andrewkhan89.replit.app
+spacesordinancesduplicates.us
+24.benefits-access.com
+allegro-lokalnie.cas7337jks.cyou
+allegrolokalnie.lokalna-67382.sbs
+allegrolokalnie.lokalna-ofera9123491295.shop
+allegro.52300t92g3223.qpon
+allegro.id-32843nda3242.click
+allegro.12909128.qpon
+allegro.3529238g8g8.click
+allegrolokalnie.oferta31314.cfd
+allegrolokalnie.pl-oferta742831.com
+bradesco.chatdeatualizacao.click
+bradesco.chatdeatualizacao.live
+bradesco.chatdeatualizacao.digital
+calm-perspective-580819.framer.app
+prime-deflagrations.fr
+user-subscribe.com
+allegro-lokalnie.2309h034h843.qpon
+allegrolokalnie.htmml.sbs
+allegrolokalnie.oferta39231.cfd
+netatualiza.info
 www.facebook.alheekmah.edu.pk
-lockervalue.top
-mamalocheck.top
 fnstat.lol
-fortdoto.top
-fortxl.top
-fnlocker.life
 g4educacao-google.com
 fortnitearena.cc
+forstash.lol
+new-bridge.typedream.app
+facebook.szcpit.com
+cn.lumxza.com
+www.morcosit.com
+fortvent.pro
+mbq001.com
+j101p.vip
 83463.xyz
+www.lcdxw.cn
+j92g.vip
 89419.xyz
 83405.xyz
 18438.xyz
 www.whatsappidn.com
 h5.nmetamasks.top
 immense-crimson-4bnmix7f.edgeone.dev
-humorous-methods-192582.framer.app
 1jpa-e90u-9ti8.gahasim575-kierko-com-s-account.workers.dev
 pubg-mobile.specialvent.com
 3tk5-js3w-usjf.gahasim575-kierko-com-s-account.workers.dev
 documentsecureservice.online
 facebook.alheekmah.edu.pk
-g87365.com
-netflix.abenether.com
 forthyper.com
 www.dksahib.rumahsakit.de
 www.dc.crsorgi.gov.in.index.crs.certificate4.com
 fortrow.top
-felfecirdom.co
-kontosicherung.com
-faq-en-start-io.typedream.app
-en-treezer-login-us.typedream.app
-help-bridge-desk.typedream.app
-forstash.lol
-new-bridge.typedream.app
-facebook.szcpit.com
-cn.lumxza.com
-www.morcosit.com
-fortvent.pro
-mbq001.com
-j101p.vip
-www.lcdxw.cn
-j92g.vip
-charter384492.framer.website
-txt-transactions-esl.top
-www.wall-node.com
-transactions-esl-text.sbs
-transactions-esl-text.top
-www.hockeytalkontario.ca
-txt-transactions-esl.sbs
-absicherung-kontakt.com
-elitee.site
-18744.xyz
-18490.xyz
-mostbet26849.help
-www.centralfinanciamentoo.fun
-web.whatsapp.nr.hl.cn
-www.y35p.top
-www.lisa238.com
-www.centralsimplesfinanciamentoo.fun
-fortinfo.lol
-whatsapp.nr.hl.cn
-secure-static-page--andrewkhan89.replit.app
+allegro.12301028g.qpon
+allegro.2309h034h843.qpon
+cm304030111133.xhost.live
+fortcheack.top
+amazon-clone-f73c.panda.new
+www.netflix.abenether.com
+lockerfort.xyz
+welcome-hardware.typedream.app
+fortdoto.top
+fortxl.top
+fnlocker.life
 chocolate-advantage-077384.framer.app
-calm-perspective-580819.framer.app
-fortvl.live
-fnlock.lol
-fnscan.top
-temporary-plum-5whaicdx.edgeone.dev
-fnskin.pro
-fortwz.lol
-epicstats.live
-netflixpaymentportalsa.zite.so
-indonnsianz-formdnaa.vircoco.biz.id
 congrts-invite-blue-badge.surge.sh
-allegrolokalnie.pl43984.top
-allegrolokalnie.pl-oferta828012479.click
 allegrolokalnie.pl-oferta189572.click
-allegro.12909128.qpon
 allegro.oferta-lokalna6853496234.lol
 allegrolokalnie.pl-5tfs4818.shop
 allegrolokalnie.0oferta2937zvw993.forum
-allegrolokalnie.pl-oferta742831.com
-allegrolokalnie.htmml.sbs
 allegrolokalnie.oferta-lokalna6853496234.lol
 allegrolokalnie.pl-oferta-komputer-apple-mac-studio-m4-max.lat
 allegrolokalnie.0oferta92847zcw299.forum
 allegrolokalnie.89623.top
-allegrolokalnie.lokalna-49285.sbs
-relanceclient-espacevitales.renewoptions-abonnes.digital
 formule-bouquet.com
-allegrolokalnie.lokalna-ofera9123491295.shop
-info-vitale.fr
 allegro.lokalna-ofera9123491295.shop
-spacesordinancesduplicates.us
+allegro.oferta39231.cfd
+bradesco.chatdeatualizacao.online
+autenticarusuario.com
+atendimentoexclusivopj.online
+bradesco.chatdeatualizacao.site
+bradesco.clientesnetcnpj.online
+prime-souscriptions.com
+allegro.lokalna-1900191.biz
+allegro.oferta90695401.shop
+allegrolokalnie.ofeta84271.cfd
+duolingo-remboursement.bolt.host
+allegrolokalnie.lokalna-oferta94291.cfd
+allegrolokalnie.oferta90695401.shop
+allegrolokalnie.282119.pl
+allegrolokalnie.pl199622.icu
+allegro.8758185812.click
+pycsfy.co
+allegrolokalnie.oferta28472zve388.forum
+allegro.oferta91284.cfd
+www.wetrl-file18273892.viewf-sso827362.online
+allegro.nr-23843idms23.click
+allegrolokalnie.pl-oferta292179.click
 allegrolokalnie.nr-2834sd2m43.click
+allegrolokalnie.id-32843nda3242.click
 allegrolokalnie.pl-oferta126542.click
-allegro.id-32843nda3242.click
+allegrolokalnie.oferta19922.cfd
 infoprimvideo-support.com
 allegro.239423812jh6.click
 allegro.prywant82391111g.xyz
@@ -125,81 +281,20 @@ allegro-lokalnie.pl-oferta84df858hf4d.click
 allegro.9483434h3.lat
 allegro.wfz56.top
 pginasolicitudesbhddominicana.xo.je
-ibpenviarrsolicituddrddominicana.xo.je
 allegro.mdsmas882199.xyz
 allegrolokalnie.pl-oferta84df858hf4d.click
 allegrolokalnie.pl-promowane2026.click
-allegro.12301028g.qpon
-allegrolokalnie.79057.top
-allegro.99571.click
-allegro.2131239129ghgh.qpon
-allegrolokalnie.lokalna-67382.sbs
+allegrolokalnie.pl43984.top
+allegrolokalnie.pl-oferta828012479.click
 allegro.12041928h8h.cyou
-allegro.52300t92g3223.qpon
-allegrolokalnie.oferta31314.cfd
 allegro.oferta31314.cfd
 allegrolokalnie.68472.lat
-allegrolokalnie.nr-23843idms23.click
-allegro.nr-2834sd2m43.click
-prime-deflagrations.fr
-allegro.nr-23843idms23.click
-allegrolokalnie.pl-oferta292179.click
 www.prime-deflagrations.fr
-allegrolokalnie.id-32843nda3242.click
 allegro.oferta19922.cfd
-allegrolokalnie.oferta19922.cfd
-bradesco.clientesnetcnpj.online
-prime-souscriptions.com
-allegro.lokalna-1900191.biz
-allegrolokalnie.lokalna-1900191.biz
-bouquet-video.com
-allegro.3012998gg.click
-allegro-lokalnie.2309h034h843.qpon
-allegro.2309h034h843.qpon
-duolingo-remboursement.bolt.host
-allegro.lokalna-oferta94291.cfd
-allegro.oferta90695401.shop
-allegrolokalnie.ofeta84271.cfd
-allegro.ofeta84271.cfd
-allegrolokalnie.lokalna-oferta94291.cfd
-24.benefits-access.com
-allegrolokalnie.oferta90695401.shop
-allegrolokalnie.282119.pl
-user-subscribe.com
-alertdeiivery.com
-allegrolokalnie.pl199622.icu
-allegrolokalnie.pl-oferta658.shop
-allegrolokalnie.oferta39231.cfd
-allegro.oferta39231.cfd
-bradesco.chatdeatualizacao.online
-my-xfinity.me
-allegro-lokalnie.cas7337jks.cyou
-netatualiza.info
-allegro.3529238g8g8.click
-autenticarusuario.com
-bradesco.novocadastro.digital
-bradesco.chatdeatualizacao.click
-bradesco.chatdeatualizacao.digital
-bradesco.chatdeatualizacao.pro
-bradesco.chatdeatualizacao.live
-atendimentoexclusivopj.online
-bradesco.chatdeatualizacao.site
-allegro.oferta91284.cfd
-www.wetrl-file18273892.viewf-sso827362.online
-allegro.8758185812.click
-pycsfy.co
-allegrolokalnie.oferta28472zve388.forum
+your-spectrum-email-update-account.weeblysite.com
 centered-forms-762969.framer.app
 sso-kucoin-log-in-eng.typedream.app
-your-spectrum-email-update-account.weeblysite.com
 staticfile-sntandre.wasmer.app
-en-sule-trezo.wasmer.app
-garcanocan.co
-fortytrack.top
-f4m1-9ls0-1mr4.w-novak-geuckc-com-s-account.workers.dev
-f.clyxe.biz.id
-wwvintermatico.space
-login-check-sog-fr.osc-fr1.scalingo.io
 cmeradeseguranalentedupla.lovable.app
 support--legderlive-us--learn.typedream.app
 adobesigne9913-c589-87cb-8021-50067cafdcc.daniel-ereiramendoza-co-uk-s-account.workers.dev
@@ -217,43 +312,42 @@ trezor-help-us.wasmer.app
 trezir-app-bridge.wasmer.app
 trezar-io-suit-sunnu.wasmer.app
 trezor-io-start-en-es.wasmer.app
+en-sule-trezo.wasmer.app
+garcanocan.co
+fortytrack.top
+f4m1-9ls0-1mr4.w-novak-geuckc-com-s-account.workers.dev
+f.clyxe.biz.id
+wwvintermatico.space
+login-check-sog-fr.osc-fr1.scalingo.io
 www.lifetime-markapplynow-bluebadge.surge.sh
 pentlowe-health-au.kosteradredging.workers.dev
 www.all-set-invitaionhere.surge.sh
+allegrolokalnie.oferta94281.cfd
+confirm-login.com
+mvm-energetikai.vusisizwefunerals.co.za
+allegrolokalnie.ogloszenie62191.shop
+allegrolokalnie.pl-oferta837419830.shop
 allegrolokalnie.letnie-okazje33754615.cyou
 allegrolokalnie.lokalna-473921.sbs
 allegro.oferta41231.sbs
-allegrolokalnie.ogloszenie62191.shop
-allegrolokalnie.oferta94281.cfd
 allegrolokalnie.pl-049.sbs
 allegrolokalnie.pl-3i21.shop
-allegrolokalnie.pl-oferta837419830.shop
-confirm-login.com
 dkonto.online.musing-chaum.91-218-65-6.plesk.page
 allegrolokalnie.lokalna-ofera970220303.biz
-mvm-energetikai.vusisizwefunerals.co.za
 particular-reassurance-715713.framer.app
+allegrolokalnie.pl-oferta8321939.com
 allegrolokalnie.pl-94423.icu
 police-ugyintezes.org
 manage-kucoiin-en-us.framer.ai
 renewed-mercury-286922.framer.app
 secure-index-edit--chris-tct.replit.app
 allegrolokalnie.pl-oferta12048892123.shop
-allegrolokalnie.lokalna--ofeta2891021.sbs
-allegrolokalnie.723562352.lol
-resolvecenprot.com
-baps.assistenzarecapiti.workers.dev
-allegrolokalnie.pl49354.top
-allegro.pl-oferta5821989.shop
-allegrolokalnie.pl-7938485.click
-chavez.serv5780315.pro
-maduraud.serv5780315.pro
-www.serv5780315.pro
-prime-renewal.com
-millet.serv5780315.pro
-escobar.serv5780315.pro
-allegrolokalnie.pl89233.top
+allegro.pl-03819.sbs
+allegrolokalnie.pl-oferta181644.click
+allegrolokalnie.pl-oferta817287832.icu
+allegro.pl-049.sbs
 allegrolokalnie.51925.lat
+olx.pl-049.sbs
 allegrolokalnie.pl-55345.sbs
 allegrolokalnie.oferta278429.click
 allegro.pl-3i21.shop
@@ -271,54 +365,43 @@ allegro.nr-232843isd324.click
 bafkreidyzoqqerrmmjezjvhzuyrb6fbpcwkt54cj6solctnfan4fhnraiu.ipfs.inbrowser.link
 dazzlefruit.world
 allegrolokalnie.pl-03819.sbs
+allegrolokalnie.lokalna--ofeta2891021.sbs
 allegrolokalnie.pl-02739571.click
-worldcupdeals.online
-www.exclusivequotes.me
-www.b30p.top
-www.b30s.top
-www.f27k.top
+allegrolokalnie.723562352.lol
+resolvecenprot.com
+baps.assistenzarecapiti.workers.dev
+allegrolokalnie.pl49354.top
+allegro.pl-oferta5821989.shop
+chavez.serv5780315.pro
+millet.serv5780315.pro
+allegrolokalnie.pl-7938485.click
+maduraud.serv5780315.pro
+www.serv5780315.pro
+prime-renewal.com
+escobar.serv5780315.pro
+allegrolokalnie.pl89233.top
+amazon.acc-prime.com
+allegrolokalnie.lokalna-oferta57521.sbs
 www.76503.xyz
 mo88-j8eq-68mq.9wv3sjcc3foahe940yyeqx.workers.dev
 metawarning.yabogatisiaia.workers.dev
 allegrolokalnie.63573632.xyz
 allegrolokalnie.854378.lat
-allegro.pl-03819.sbs
 allegro.pl-add.shop
 allegro.nr-28432ms8423.lol
 allegrolokalnie.nr-28432ms8423.lol
 allegrolokalnie.pl-oferta73491263.click
-allegrolokalnie.pl-oferta181644.click
-allegrolokalnie.pl-oferta817287832.icu
-allegrolokalnie.pl-oferta8321939.com
-allegro.pl-049.sbs
-olx.pl-049.sbs
-amazon.acc-prime.com
-allegrolokalnie.lokalna-oferta57521.sbs
+worldcupdeals.online
+www.exclusivequotes.me
+www.b30p.top
+www.b30s.top
+www.f27k.top
 thrilled-vacation-511802.framer.app
 secure-server-page--burgersquadllc.replit.app
 request-submit-here-form.surge.sh
-bet365ok20.com
-3658friy59233.cc
-3658coni564.cc
-3658nike5254.cc
-www.ziliangwx.com
-3658coni560.cc
-3658coni563.cc
-3658coni557.cc
-3658coni562.cc
-3658coni561.cc
-3658coni566.cc
-3658nike5251.cc
-3658nike5252.cc
-3658coni559.cc
-3658coni558.cc
-webmail-customs-go-kr.reha-stims.com
-mail-mzkt-by.reha-stims.com
-65.jj37731.vip
-reha-stims.com
 www.heliumcompliance.info
-www.inforalz.com
 www.fireblocksdocusign.icu
+www.inforalz.com
 2026it66.vip
 u31w.top
 www.j110w.vip
@@ -328,10 +411,29 @@ j92f.vip
 fcpdigitals.com
 mailalert.edgeone.dev
 uqwn-1b5l-5yog.lee-kneadhd-com-s-account.workers.dev
+3658coni563.cc
+3658coni557.cc
+3658coni562.cc
+3658nike5251.cc
+3658nike5252.cc
+3658coni559.cc
 9cpn-na0i-gdzl.laurent-guenee-electropoli-com-s-account.workers.dev
 css.okak.fun
 www.request-submit-here-form.surge.sh
 www.user-remove-restriction-request-now.surge.sh
+bet365ok20.com
+3658friy59233.cc
+3658coni564.cc
+3658nike5254.cc
+www.ziliangwx.com
+3658coni560.cc
+3658coni561.cc
+3658coni566.cc
+3658coni558.cc
+webmail-customs-go-kr.reha-stims.com
+mail-mzkt-by.reha-stims.com
+65.jj37731.vip
+reha-stims.com
 secure-site-editor--djhef2.replit.app
 server-docs--myproperty5041.replit.app
 xfinity-sigin.framer.website
@@ -342,15 +444,6 @@ tough-anything-130269.framer.app
 log-pplsurvey.com
 submit-application.surge.sh
 promosoins2026bhdleons2626.iceiy.com
-allegrolokalnie.zakup85234903.shop
-allegro.2848124.sbs
-allegrolokalnie.lokalna-93882713232.sbs
-allegro.zakup85234903.shop
-allegrolokalnie.2848124.sbs
-allegrolokalnie.pl-oferta8298749.click
-allegrolokalnie.pl-oferta0183001830101898.click
-sso-regeneron.com
-cz-cuni-cz1.pfbt-pf.online
 www.user-panel-apply-blue-badge.surge.sh
 dt3-161255673571.southamerica-east1.run.app
 dt2-161255673571.southamerica-east1.run.app
@@ -363,10 +456,19 @@ formulario-de-cita-digital-abhn-2026.cr-web.workers.dev
 allegro.lokalna-oferta857521.sbs
 allegrolokalnie.lokalna-oferta857521.sbs
 allegro.lokalna-93882713232.sbs
+allegrolokalnie.zakup85234903.shop
+allegro.2848124.sbs
+allegrolokalnie.lokalna-93882713232.sbs
+allegro.zakup85234903.shop
+allegrolokalnie.2848124.sbs
+allegrolokalnie.pl-oferta8298749.click
+allegrolokalnie.pl-oferta0183001830101898.click
+sso-regeneron.com
+cz-cuni-cz1.pfbt-pf.online
 mighty-information-818875.framer.app
-finanzasbhd-tu-aliado-en-creditos-7a980d53aa0e.replit.app
-heartwarming-notes-259621.framer.app
 simple-docs--webmailprompt1.replit.app
+heartwarming-notes-259621.framer.app
+finanzasbhd-tu-aliado-en-creditos-7a980d53aa0e.replit.app
 withered-sound-fcec.agnes-terrieux.workers.dev
 msoftnow.ignorelist.com
 3658994.cc
@@ -375,30 +477,15 @@ dc.crsorgi.gov.in.verify.net.in
 dc.crs.gov.in.viewcarde.in
 dev.webapps.non-steam.com
 housepaintersfortlauderdale.com
-www.fill-form-here-for-blue.surge.sh
-emul7xmhwzx6m71c.tiktok67932.com
-news-moba5vs5.evgmz.biz.id
-vast-team-222500.framer.app
-soulful-patterns-028706.framer.app
-eztrackitdelivery.info
-eztrackingsolutions.info
-eztrackitgroup.info
-informal-workshops-577601.framer.app
-empty-train-cexd8.sites.repaint.com
-precise-gold-dqunb3zf.edgeone.dev
-cute-language-110013.framer.app
-eztrackitco.info
-secure-page-builder--daklmk.replit.app
-eztrackit.com
-eztrackingteam.info
-eztrackingcentral.info
 recargagarena.com
 acessarsafra.digital
 ufficialepaginaruba.it
-redirect-pro-site.xyz
-2ww-umb.com
 ydgu-gb7q-a054.amahler-livful-com-s-account.workers.dev
+redirect-pro-site.xyz
 www.uspssmartpackagelockers.com
+2ww-umb.com
+www.fill-form-here-for-blue.surge.sh
+emul7xmhwzx6m71c.tiktok67932.com
 www.18551.xyz
 www.tagesgeldkonto45.com
 8s.non-steam.com
@@ -413,82 +500,90 @@ dev.ryjnq38.non-steam.com
 admin.notexistsefgetjgpgcbeta.non-steam.com
 appgoldnu.fun
 www.bet365p5.cc
+0w1a-kw9k-9vif.warrnambool-zambrero-com-s-account.workers.dev
 pubgm.specialvent.com
 www.bet365p3.cc
-0w1a-kw9k-9vif.warrnambool-zambrero-com-s-account.workers.dev
 pedagiodigitallive.food
 yielding-beige-m5hbsijz.edgeone.dev
 careers.candidateworkflow.com
-j61o.vip
-j105m.vip
-j107c.vip
-j101y.vip
-j110s.vip
-j56g.vip
-www.u19f.top
-j110q.vip
-j111c.vip
-j110m.vip
-j106z.vip
-j39i.vip
-k69h.top
-www.bet365k1.cc
-www.y27v.top
-www.y27x.top
-u19c.top
-7365w1.com
-net-amaranth-vmfipfnj.edgeone.dev
-www.y27t.top
+news-moba5vs5.evgmz.biz.id
+vast-team-222500.framer.app
+soulful-patterns-028706.framer.app
+eztrackitdelivery.info
+eztrackingsolutions.info
+eztrackitgroup.info
+informal-workshops-577601.framer.app
+empty-train-cexd8.sites.repaint.com
+precise-gold-dqunb3zf.edgeone.dev
+cute-language-110013.framer.app
+eztrackitco.info
+secure-page-builder--daklmk.replit.app
+eztrackit.com
+eztrackingteam.info
+eztrackingcentral.info
+j93j.vip
+j95n.vip
 www.j110u.vip
+j98y.vip
 www.no-mura.vip
+j95r.vip
+www.j111a.vip
 j97w.vip
 na-pg.com
 www.maajiang.vip
 sweet-bar-23d8.npm22.workers.dev
 www.jdnsn.cc
+dc.crsorgi.gov.in.auth.verifycert.shop
+www.birth.5gsewa.cyou
+100489.cc
+b47j.vip
+b47i.vip
+b40z.top
+b47h.vip
+b47k.vip
+b40x.top
+www.71398.xyz
+www.instagram.123zoeken.be
+www.qq00.vip
+www.b41c.top
+www.g12d.top
+www.g15a.top
+www.f31d.top
+www.14136.xyz
+www.b27z.top
+dating.tksellers-center.com
+www.g21s.top
+www.g13x.top
+120huimin.com
+www.14016.xyz
+www.61871.xyz
+g22l.top
+g13z.top
+asiawin168slot.com
+14091.xyz
+www.dc.crsorgi.gov.in.auth.verifycert.shop
 j105p.vip
 16724.xyz
 fort.skin
 j62i.vip
 j105n.vip
+j61o.vip
+j105m.vip
+j107c.vip
 j105r.vip
 j106w.vip
+j101y.vip
 j106r.vip
 j107j.vip
 j107d.vip
 j109s.vip
 j51m.vip
 j109u.vip
-www.b41c.top
-g22l.top
-g13z.top
-asiawin168slot.com
-14091.xyz
-dc.crsorgi.gov.in.auth.verifycert.shop
-www.birth.5gsewa.cyou
-100489.cc
-b47j.vip
-www.dc.crsorgi.gov.in.auth.verifycert.shop
-b47i.vip
-b40z.top
-b47h.vip
-b47k.vip
-b40x.top
-www.71398.xyz
-j93j.vip
-j95n.vip
-j98y.vip
-j95r.vip
-www.j111a.vip
-3658sora758200.cc
-www.kelidabattery.cn
-3658e104.cc
+j110s.vip
+j56g.vip
+www.u19f.top
 3658sora1058200.cc
 3658sora658200.cc
-www.3658e105.cc
-3658sora958200.cc
-www.3658sora458200.cc
-3658hifi291.cc
 3658e105.cc
 3658sora358200.cc
 3658e102.cc
@@ -497,164 +592,33 @@ www.blogs-robinhood.com
 www.3658e101.cc
 www.66771775.com
 www.f31h.top
-v36o.top
-www.f27p.top
-www.g10q.top
 www.f25h.top
+v36o.top
 www.f31e.top
 www.f38g.top
 www.f37p.top
+www.f27p.top
+www.g10q.top
 www.f36y.top
 www.f36w.top
-www.instagram.123zoeken.be
-www.qq00.vip
-www.g12d.top
-www.g15a.top
-www.f31d.top
-www.14136.xyz
-www.b27z.top
-dating.tksellers-center.com
 www.f31g.top
-www.g21s.top
-www.g13x.top
-120huimin.com
-www.14016.xyz
-www.61871.xyz
-ht1.ht.htamzoj.icu
-spectrumwebmailurl.systeme.io
-amazonglobal6.com
-amazonglobal8.com
-data-finanzas-cdmxi.live
-galabet.girismobil.one
-fortycheck.life
-roblox-com.info
-silkevoss.de
-auspost.customerservicea.cc
-suissecred.com
-fortinaitik.top
-padisahbet.padisahbetresmisurum.com
-www.tsi18kk.co
-www.trustwallet.com-two-factor-authentication05.ao.yesixrq.com
-trustwallet.com-two-factor-authentication08.ao.yesixrq.com
-support.support-desk.tech
-www.allegrostatus.pl
-bet365--canada.ca
-www.61916.xyz
-www.16371.xyz
-spify567.com
-www.b28n.top
-www.18799.xyz
-www.61395.xyz
-www.61401.xyz
-www.18838.xyz
-www.18841.xyz
-www.18840.xyz
-www.13791.xyz
-www.71231.xyz
-www.18889.xyz
-www.18361.xyz
-www.61384.xyz
-www.18832.xyz
-www.nasdaq-cn.shop
-13920.xyz
-married-chocolate-1y2n8olx.edgeone.dev
-www.18321.xyz
-www.18362.xyz
-www.18336.xyz
-www.18337.xyz
-www.17196.xyz
-www.16322.xyz
-www.18307.xyz
-www.18325.xyz
-www.17112.xyz
-www.18308.xyz
-www.18320.xyz
-www.61676.xyz
-www.61958.xyz
-www.61971.xyz
-www.18310.xyz
-www.18311.xyz
-www.18322.xyz
-www.18368.xyz
-www.18373.xyz
-www.18066.xyz
-www.16338.xyz
-www.16345.xyz
-www.17116.xyz
-www.61681.xyz
-www.17207.xyz
-www.16326.xyz
-www.17885.xyz
-www.61811.xyz
-www.71599.xyz
-www.13829.xyz
-www.13839.xyz
-www.13827.xyz
-www.71623.xyz
-www.71523.xyz
-www.13910.xyz
-www.61806.xyz
-www.18328.xyz
-www.13915.xyz
-www.18323.xyz
-www.18375.xyz
-www.18330.xyz
-www.17899.xyz
-www.16049.xyz
-www.18140.xyz
-www.61370.xyz
-www.18083.xyz
-www.16293.xyz
-www.18078.xyz
-www.18062.xyz
-www.61381.xyz
-www.18072.xyz
-www.18296.xyz
-www.18299.xyz
-www.18058.xyz
-www.18129.xyz
-www.18156.xyz
-www.18155.xyz
-www.18874.xyz
-www.16307.xyz
-www.61491.xyz
-61427.cc
-17198.xyz
-61415.xyz
-16309.xyz
-18831.xyz
-13842.xyz
-61477.xyz
-16773.xyz
-16332.xyz
-c02a.top
-61915.xyz
-14260.xyz
-17199.xyz
-61812.xyz
-16084.xyz
-16054.xyz
-14030.xyz
-18421.xyz
-16390.xyz
-18895.xyz
-13830.xyz
-rodovias-br.live
-www.mfakeysetup.com
-spotify-premium-pay.stripe-app-active.com
-dhl.lieferung-direkt.com
-assurance-remboursement.info
-www.itkeyregister.com
-awsforensicl3ns-west1apprunner-dprd03feve9j.edgeone.dev
-www.servifulbeneficiosverde.com
-nomurajp.top
-roofcover.xyz
-kefort.lol
-fortmax.top
-fortl.lol
-www.ht1.ht.htamzoj.icu
-trustwallet.com-two-factor-authentication06.ao.yesixrq.com
-trustwallet.com-two-factor-authentication05.ao.yesixrq.com
-www.trustwallet.com-two-factor-authentication10.ao.yesixrq.com
-www.17653.xyz
-trustwallet.com-two-factor-authentication10.ao.yesixrq.com
+j110q.vip
+j111c.vip
+j110m.vip
+j106z.vip
+j39i.vip
+k69h.top
+www.bet365k1.cc
+www.y27v.top
+www.y27x.top
+u19c.top
+7365w1.com
+net-amaranth-vmfipfnj.edgeone.dev
+www.y27t.top
+3658sora758200.cc
+www.kelidabattery.cn
+3658e104.cc
+www.3658e105.cc
+3658sora958200.cc
+www.3658sora458200.cc
+3658hifi291.cc

File diff suppressed because it is too large
+ 458 - 271
yoroi_suspicious_level2.dns


Some files were not shown because too many files changed in this diff