root 2 years ago
parent
commit
582bdea2be
4 changed files with 2412 additions and 2016 deletions
  1. 630 555
      yoroi_malware_level1.dns
  2. 1119 886
      yoroi_malware_level2.dns
  3. 430 344
      yoroi_suspicious_level1.dns
  4. 233 231
      yoroi_suspicious_level2.dns

File diff suppressed because it is too large
+ 630 - 555
yoroi_malware_level1.dns


File diff suppressed because it is too large
+ 1119 - 886
yoroi_malware_level2.dns


+ 430 - 344
yoroi_suspicious_level1.dns

@@ -9,6 +9,426 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+ing.es-panelcliente.info
+thank-environmetal-usa.com
+geared1prom3ingre2o--andreitamlb.repl.co
+ultimatewhichroutine--000033.repl.co
+3656a2.xyz
+att-105941-100643.weeblysite.com
+desktop-opendocs.com
+23469-5681.s3.webspace.re
+private-quicksand.surge.sh
+www.lforgot-appie-info.mipaginaweb.us
+5tghjhjth4g3f3fdgdghfrfrd3.blogspot.com.co
+kraftons-rwd.bzt.social
+freefire-membeship-garena.com
+bb04329.com
+2023-105067.weeblysite.com
+2023-106411.weeblysite.com
+dhl-mybill.accountis.net
+bafybeigqlyfkabtwy756lp7v6sfbjg6m3l7b7lrrictlbhjv3jobntynha.ipfs.dweb.link
+facebooksecuritys.blogspot.ba
+att-attmailupdatenow.weeblysite.com
+att-106035.weeblysite.com
+asb-login.info
+3656jj.com
+amfcu-click.web.app
+www.188bet25.com
+365ok18.com
+correossns.shop
+bmmlc.net
+facebooksecuritys.blogspot.am
+occidente--lacteoslozanos3.repl.co
+zjgidgjss.club
+54wsqcor4b9jxdcnbl6vtgefpvla2f5-73175826753.shopifypreview.com
+att-109720-101090.weeblysite.com
+coinbase.account-recovery.org
+jdhdkddk.weeblysite.com
+www.reviewonline-helpdesk.com
+currentlyattmailservice-100637.weeblysite.com
+3656cc.vip
+www.credit-agricole-acceder-a-mes-comptes.smartboxdirect.com
+basvur-mobildenizdehediye.com
+screen-102160.weeblysite.com
+screen-105244.weeblysite.com
+leweu.progressives.media
+sbcattff.ukit.me
+att-verse.weeblysite.com
+att-100700-109016.weeblysite.com
+facebooksecuritys.blogspot.com.co
+3659lll.com
+twrsc.org.nz
+security-page-community-standards.blogspot.hk
+patient-water-fc18.lrw9enl4.workers.dev
+bafybeiefti2h427bdwy3och4jmpmfq2l5kndqkbevq5s5se674upjwi4wm.ipfs.dweb.link
+bimcluponlm.com
+3656yyy.com
+securityprotectionaccount694569.site
+codeli.d1nwwpzg44eop6.amplifyapp.com
+ympzrty.cn
+bet988z.com
+swap.pnkarmy.eth.limo
+www--wellsfargo--com--0849329d48d6c.wsipv6.com
+www--wellsfargo--com--0749329d48d6c.wsipv6.com
+login.defisolutech.com
+www--wellsfargo--com--kl49329d48d6c.wsipv6.com
+attmnsgd.weeblysite.com
+attmailservice-108757.weeblysite.com
+attmncsx.weeblysite.com
+jgfgdffuygioh.weeblysite.com
+currentlyattmail-109641.weeblysite.com
+currentlytattservice.weeblysite.com
+v-optus.com
+passionfruit16699753.brizy.site
+www.in-azamna-ouan-co-jp.akaodn.uaa7.cn
+att-109396.weeblysite.com
+jioefsdsf.dns-dns.com
+vredsfsfd.dsmtp.com
+dsewresad.almostmy.com
+www.informeddelivery.dnset.com
+dafsesds.25u.com
+jeccscojpess.top
+dewsdfsf.ezua.com
+jaccsscardess.top
+bafybeihouic6imban6yi2qlym7lzcdp7juceqm3rf3vc5ezijmt5gud2rm.ipfs.dweb.link
+periodic-checker.glitch.me
+google-drive.zip
+hello-world-green-band-0614.shambonoso.workers.dev
+pass-source2.com
+ing-support-authorization.com
+walletverification-app.com
+cafdron22.weeblysite.com
+secure-login-helpdesk.com
+ib-citibank.com
+www2boaportal.com
+qwdghdk.weeblysite.com
+helpformygovaus.com
+p1.193-42-32-244.cprapid.com
+derekelridge.tk
+aminehafid.tk
+www.wwwshortsales.com
+www.omsteelchd.com
+sp85865.sitebeat.crazydomains.com
+www.keertejixie.com
+sp800396.sitebeat.crazydomains.com
+sp843498.sitebeat.crazydomains.com
+sp602648.sitebeat.crazydomains.com
+sp514871.sitebeat.crazydomains.com
+sp382472.sitebeat.crazydomains.com
+sp678069.sitebeat.crazydomains.com
+sp215702.sitebeat.crazydomains.com
+sp449797.sitebeat.crazydomains.com
+sp545462.sitebeat.crazydomains.com
+sp377911.sitebeat.crazydomains.com
+japan-aeon.shop
+bafkreiah3xjj5sl2ep4y7avs5svi3ggko6uq7fqwbgso3pmcfmsgm7uu2q.ipfs.dweb.link
+durabletextile.com
+ancient-salad-4674.mmrctliacetgliue504.workers.dev
+saffsdgdgg--yormanborjas3.repl.co
+frontiersistem.ro
+revokemycash.xyz
+cuddly-petalite-slime.glitch.me
+zimbtbrauth.x24hr.com
+aluminum-snowy-titanoceratops.glitch.me
+haregfa2.otzo.com
+www.uyiidf.com
+institutopangoa.edu.pe
+bafybeidgnmf65zoc23br2x3l5dgmpznkuoezmhcddtxqqfewxyhyyg2aly.ipfs.dweb.link
+bafybeiftb5ystpsrclk7zmun2wgrbtwsuz3derhosy5pihoau4wnxe64na.ipfs.dweb.link
+bafybeifmvsuuyikanymcarcdvcit7qbqqef427edvcsbdetiu2nz3prpo4.ipfs.dweb.link
+voicemail-109669.weeblysite.com
+excited-cod-galoshes.cyclic.app
+c9f261df.2f33db4dbf57bc9221135a11.workers.dev
+walletconnect-kappa.vercel.app
+www.49amelden49conto.com
+serc.vikib93779.workers.dev
+statr.weeblysite.com
+doc-7o2.pages.dev
+bafybeicjm4ppw5jvcpdisyd4bhucqd3n4wlk2il6xdtimol4p3zoqnu5ha.ipfs.dweb.link
+round-fire-9dfb.sharepoint2751.workers.dev
+auth-097.pages.dev
+deutsche-b.de
+we-optus.com
+zonapromericangtenlinea.com
+gyoumitozxa.top
+charlestonswarm.com
+bafybeidb6muvm3ee4xqn4hgcj7axc5vjmtiz6bv7xsor6jor7fprbnjahu.ipfs.dweb.link
+sp300322.sitebeat.crazydomains.com
+inspiremillworks.com
+mail-101783.weeblysite.com
+bafybeidirxdotkljpamfxcfumprkxxwmwoviq6jya5gmcthx463445ovbi.ipfs.cf-ipfs.com
+mail-att-update.weeblysite.com
+bafkreiczgefcc3bmkay6zsqbb6wqz5hnasxb6bsybti3andxuve5qehjke.ipfs.dweb.link
+bafkreihte6fb3wjlwxbqwnsiguooimpe6kmzk3coi3mqnhddevwaevpnku.ipfs.dweb.link
+bafybeianczmi7cknxw3vy5aknpxl2am2mkfbirk4nzqyy5zxpzyorkfbha.ipfs.nftstorage.link
+help-id1759628348.web.app
+octogonolibros.com
+sparkasse.anmelden.com.de
+webwhatsopp.cyou
+www.usjo.fit
+www.zhejiushi.me
+v3-pancakeswaps.site
+1inch-drop23.pro
+revokecash.tools
+ibanking-dbs.cc
+dbs-65.com
+b9.loan-top.top
+xgtogaro.com
+dbs-65.info
+dbsbank.shop
+mainnetdapp.web.app
+dbsbanksg.life
+banca-bogotaonline--bancabogotaonli.repl.co
+421f9bda-85bd-41bd-acf9-10890be94d71.id.repl.co
+banca-bogotaonline.bancabogotaonli.repl.co
+f35093b2-d5eb-489d-8f39-bba478fcbbf9.id.repl.co
+ehafdsgt32.ocry.com
+deadfsa.longmusic.com
+dircclientsuporte.domova-sprava.sk
+dqwgesdfs.mylftv.com
+mtrdssd.toshibanetcam.com
+srhydzsh3.4pu.com
+rejdcg435.dns05.com
+rejdmhvy5446.lflink.com
+ytfdsfs.b0tnet.com
+trjhgdf6.dns-stuff.com
+trjhfgt65.ocry.com
+dbsbanksg.shop
+paylah-dbs.info
+weghgfj656.mrslove.com
+dbsbanksg.top
+www.amarilogroup.com
+virginmedia-ecare-login.com
+bluemandarin.cz
+6e1335ca-2646-43e1-aff2-f77510bad9dc.id.repl.co
+tangnickmienphi.com
+bgzz.par1lbass.cloud
+antai-dossiergouv.info
+impot-gouv-enregistrement.org
+alshayashop.com
+amendesgouvantai.net
+infosms-amendes-gouv.com
+client-amendes-gouv.com
+gouvernement-amende.info
+impots-regularisation.info
+serviceantai-gouv.com
+suivis-amendesgouv.com
+ziibpq.webwave.dev
+gouv-stationner.com
+deep-waves.com
+gouv-contraventions-amendes.com
+lcdigital.screening.live
+h5brzd.webwave.dev
+spkpush.net
+spk-verein.info
+spk-upgrade.net
+hizli-mobildenizonay.com
+bafybeiccxpg5sryckulw4qjci55cmwo4h5wgtt3sif546onwdxscnixexa.ipfs.dweb.link
+www--wellsfargo--com--t349329d48d6c.wsipv6.com
+fb-restriction-case-cefcb.web.app
+fb-restriction-case-8ebec.web.app
+fb-restriction-case-32938.web.app
+fb-restriction-case-2d7ce.web.app
+fb-restriction-case-deb4d.web.app
+fb-restriction-case-6712d.web.app
+fb-restriction-case-983bd.web.app
+fb-restriction-case-959d6.web.app
+fb-restriction-case-14bfa.web.app
+fb-restriction-case-b71f7.web.app
+fb-restriction-case-78058.web.app
+fb-restriction-case-3f109.web.app
+fb-restriction-case-8aec3.web.app
+fb-restriction-case-937d1.web.app
+fb-restriction-case-d047b.web.app
+fb-restriction-case-a270e.web.app
+fb-restriction-case-fd325.web.app
+fb-restriction-case-b5ac4.web.app
+fb-restriction-case-353dc.web.app
+fb-restriction-case-245ae.web.app
+fb-restriction-case-e1e08.web.app
+fb-restriction-case-9c209.web.app
+fb-restriction-case-88c5e.web.app
+fb-restriction-case-31ea4.web.app
+fb-restriction-case-63883.web.app
+fb-restriction-case-c2837.web.app
+fb-restriction-case-177a8.web.app
+fb-restriction-case-417d9.web.app
+fb-restriction-case-52783.web.app
+fb-restriction-case-6f77e.web.app
+fb-restriction-case-402ed.web.app
+www--wellsfargo--com--u749329d48d6c.wsipv6.com
+www--wellsfargo--com--vd49329d48d6c.wsipv6.com
+applesupport-findmy.cloud
+att-108716.weeblysite.com
+fb-restriction-case-f16e4.web.app
+fb-restriction-case-1099d.web.app
+dd365z.cc
+att-104119.weeblysite.com
+metamask.red
+adjoining-cup.surge.sh
+365n1.3656zz.vip
+bafkreifjxrv3hwk6i2ypr2y6pvxdcyqrnlierciftt5niwits4vhixkyr4.ipfs.dweb.link
+binaryresistor.com
+bafybeih52ziicxasq2g3tyfsphqwylaruiwggfpbgbp3rhhidzbuv4lpma.ipfs.dweb.link
+mainmu.d3obb2hzz41ocr.amplifyapp.com
+ca26106.tw1.ru
+btak-102010.weeblysite.com
+cloud-service8888.tk
+att-102716.weeblysite.com
+www.basvur-hizlimobildeniz.com
+noitbill.com
+onedrive.kinhdown.workers.dev
+www--wellsfargo--com--6f49329d48d6c.wsipv6.com
+www.coinbase-term.net
+www--wellsfargo--com--x949329d48d6c.wsipv6.com
+7365004.vip
+confirmations.profiles-male.workers.dev
+d44f.notif-chatt.workers.dev
+gb-apple.web.app
+profitoptionx.com
+fidmysupport-mxn.com
+proyecto-final-electiva-ii.vercel.app
+bafkreib3ridrdmns7pnhi2kwycuus6hczsldchkehitherup5gbqkayt2y.ipfs.dweb.link
+fb-restriction-case-51989.web.app
+www--wellsfargo--com--vk49329d48d6c.wsipv6.com
+iade-islem.bkmiadeleri.com
+m.ebayshow.com
+www.fake-instagram.win
+afcu-x.web.app
+wbwhatswbf.ru
+att-100368.weeblysite.com
+k365a.com
+popermagik.ru
+bancolombia--com360i.repl.co
+hw2dl3zuef.web.app
+hml1f7wqxy.web.app
+newj-2254e.web.app
+kk3a6g5d.xyz
+www--wellsfargo--com--m349329d48d6c.wsipv6.com
+www.coinbase-wallrktscorn.com
+groupc-agrcoleprojet.web.app
+whvisqxp.club
+paypal.interbyss.net
+package2021.blogspot.bg
+mobilelegend24170.iwowjsndns.cfd
+authorization-bek.pages.dev
+freenitro.fsamudi.repl.co
+fb-restriction-case-9ff40.web.app
+fb-restriction-case-6afa0.web.app
+fb-restriction-case-52327.web.app
+fb-restriction-case-85246.web.app
+fb-restriction-case-a1c45.web.app
+fb-restriction-case-a7b33.web.app
+fb-restriction-case-eb13a.web.app
+fb-restriction-case-bbb0f.web.app
+fb-restriction-case-19e6d.web.app
+fb-restriction-case-a7eea.web.app
+fb-restriction-case-14750.web.app
+fb-restriction-case-6e2e4.web.app
+fb-restriction-case-20a34.web.app
+fb-restriction-case-55e30.web.app
+fb-restriction-case-fa85e.web.app
+2r3-mi-cloud.mipaginaweb.us
+bancolombia--mua1entra.repl.co
+fb-restriction-case-a9708.web.app
+www--wellsfargo--com--x249329d48d6c.wsipv6.com
+www--wellsfargo--com--aa49329d48d6c.wsipv6.com
+fb-restriction-case-661fb.web.app
+3659rrr.com
+parcelsdepartoff.h4080016.hostingrd.pl
+facebooksecuritys.blogspot.com.mt
+36560077.com
+d-view-maps.us
+aa-morgan.com
+b-3-6-5-9.com
+verboses.com
+feceboolk.blogspot.is
+feceboolk.blogspot.my
+365okw.com
+5gfhfg4g4g3f.blogspot.com.cy
+www.365okh.com
+onedrive.tk
+admin-ods.insolvency-development.co.uk
+www--wellsfargo--com--4k49329d48d6c.wsipv6.com
+help-meta-id-487931.30122548.com
+bafkreibq2ml232dozi5pykatwyzdkmvm75yyble6aq3jr67jbmrh5qmo6m.ipfs.dweb.link
+help-meta-id-782874.30122548.com
+help-meta-id-284292.30122548.com
+oddam-tobie.pl
+amende-service-support.fr
+motogielda-zachod.pl
+ralkuten.xyz
+www-what-worlrb.com
+dev-check-export-certificate.marineservices.org.uk
+istealisveris.site
+optusnet-com.blogspot.am
+facebooksecuritys.blogspot.si
+www.lbplacces.lagnome.com
+lbplacces.lagnome.com
+5tghgjhrg3f3f3f.blogspot.pe
+sgfdhgfdfdh.blogspot.hu
+help-meta-id-358138.30122548.com
+login-auth.update-ourtime.workers.dev
+facebooksecuritys.blogspot.ug
+freebest902718club.32-b.it
+auth-dkb.com
+dmarket.date
+skinxbaronx.com
+bkmujf.cyou
+bkmujfco.cyou
+bkmujf.icu
+123657748857463.work.gd
+bkmujfco.icu
+dbs.inteernet-bannkiing-digital-web.com
+veeam-soft.com
+silentsvelterouter.spekfreerous.repl.co
+venrx.ventures
+att-102279.weeblysite.com
+att-103625.weeblysite.com
+att-103996.weeblysite.com
+oc.ocibestslotxca.repl.co
+erjheergh.weeblysite.com
+itau.fullingreso.repl.co
+stitch-private-pastry.glitch.me
+mailer-101321-106069.weeblysite.com
+skinsmonkey.in
+sparkasse-vorgang.net
+tab3rivers-portal.web.app
+vereinigte-spk.info
+statusgd-3rivers.web.app
+spk.wechsel.com.de
+frm-3rivers-protect.web.app
+registroresgatiatacadaoser.com
+credappmaiswsite.com
+3659h.cc
+3656sss.com
+3659004.com
+3115tt.com
+tawlczwaue.com
+exezunwwqq.com
+yonhvdbo.com
+jojddgiyis.com
+zissbrmaey.com
+pyclthhmdr.com
+wqakgrjkao.com
+rlrcldeycm.com
+zwrmniobcp.com
+3bancobradesco-prime-beneficios.site
+dlguskvo.com
+wfgmapewbh.com
+fmxgwmaemn.com
+mgrnktrq.com
+fgkptyucjh.com
+iljivjqxve.com
+9bancobradesco-private.site
+mickydweb.com
+benefitlnterbank.portalinmediato-com.top
+sejabemvindoappbra.dns.army
+wwr.acessodispositivos.dynv6.net
+function-descorush-5hpzr5755q-uc.a.run.app
+www.022k365.com
+uytfdsa.vizvaz.com
+spk.update-tan.com.de
 atacadaosolucoes.app
 nfsc-br3.pages.dev
 sfd09-yruf23.web.app
@@ -26,14 +446,12 @@ gainful-general-trouser.glitch.me
 att-message-att-mail.weeblysite.com
 ff.member.grarena.vn
 tuhb--vane-lore-coron.repl.co
-cafdron22.weeblysite.com
 www.ga.renm4maxys.com
 amazony.shop
 www--wellsfargo--com--pk49329d48d6c.wsipv6.com
 xn--haberlertvimdi-4zc.app
 www.metasupport.mailvalidated.ajyelxwcuxfyvorw.buzz
 ysb288.net
-sp602648.sitebeat.crazydomains.com
 0087b3k.pages.dev
 kicknbrasslabradors.com
 elpallaso.shop
@@ -45,7 +463,6 @@ bill-amend.com
 lmo.h1maiaya1n.cfd
 login.basetoolsss.click
 ing.es-areaccesos.info
-inspiremillworks.com
 5tghjhjth4g3f3fdgdghfrfrd3.blogspot.qa
 ff.menber.garema.vn
 36slwl56.lol
@@ -80,7 +497,6 @@ www--wellsfargo--com--cq49329d48d6c.wsipv6.com
 www--wellsfargo--com--cp49329d48d6c.wsipv6.com
 www--wellsfargo--com--bm49329d48d6c.wsipv6.com
 www--wellsfargo--com--9y49329d48d6c.wsipv6.com
-aminehafid.tk
 www--wellsfargo--com--0e49329d48d6c.wsipv6.com
 sup.imsolusindo.com
 www--wellsfargo--com--0q49329d48d6c.wsipv6.com
@@ -91,14 +507,12 @@ floral-sun-6049.on.fleek.co
 mrkrxlx.click
 postall.org
 amazensopmei.top
-derekelridge.tk
 help-id-28716762187652.web.app
 suportecadastrocoleta.online
 apple-care.cloud
 nhanquaff.click
 isaelb33.click
 krazylizardstudio.com
-ancient-salad-4674.mmrctliacetgliue504.workers.dev
 donserver.d2xcsif2sd3fr7.amplifyapp.com
 odkupuje24.pl
 oddam-komus.pl
@@ -116,17 +530,10 @@ mccaaccountants.com
 www.gruhinicollections.com
 lensprotocool.site
 congecko.net
-bafkreihte6fb3wjlwxbqwnsiguooimpe6kmzk3coi3mqnhddevwaevpnku.ipfs.dweb.link
-diksnq.csb.app
 jakedamon.com
-octogonolibros.com
-sparkasse.anmelden.com.de
-webwhatsopp.cyou
-www.usjo.fit
 xn--mtamask-t8a.net
 bkmujfuco.icu
 yellowcard.digital
-www.wwwshortsales.com
 xtremeliquidex.website
 internet-ibanking-dbs.top
 fredsds.4pu.com
@@ -161,7 +568,6 @@ vaweit.com
 yafarm.com
 zohalim.com
 zagsrl.com
-www.in-azamna-ouan-co-jp.akaodn.uaa7.cn
 trwolff.com
 yiwuyc.com
 vppart.com
@@ -196,8 +602,6 @@ amozoiontcvxxs.top
 rupees.tk
 cryptoo.gq
 amazoonsaeiss.top
-help-id1759628348.web.app
-rexx.nftstorestaking.co
 dbs-sg-paylah.info
 usrepe.com
 princessingainteasy.com
@@ -213,20 +617,17 @@ pancakefinance.space
 1891571174463137120.work.gd
 dbspaylah-sg.best
 dbs-sg-paylah.top
-f35093b2-d5eb-489d-8f39-bba478fcbbf9.id.repl.co
 exhub.bio
 dbspaylah-sg.live
 online.ib-internet-bakking-sg.com
 www.saisoncarard.co.jp.vloelw.cn
 www.saiconcacard.co.jp.wxybjx.cn
 zimbraconnect.instanthq.com
-gaaaaaaaarannnintr.site
 etc-acea.cam
 frayedenviouscommands--daravicltd.repl.co
 www.3656bbb.com
 round-bonus-57f1.z57lqmq6.workers.dev
 3656ggg.com
-att-103996.weeblysite.com
 hayyrra-n.com
 edi3dhltest.edistrada.pl
 grup-whatsapp18.news1.cfd
@@ -262,7 +663,6 @@ kesalahan-tautanlsntgram.bit-brl.ga
 whattsafishk.ru
 perbortrt.ru
 secure05c-verify-account.chaseeee.com
-att-103625.weeblysite.com
 repsolhoper.ru
 www--wellsfargo--com--uu49329d48d6c.wsipv6.com
 facebooksecuritys.blogspot.md
@@ -286,7 +686,6 @@ oddajemy-razem.pl
 getting-married.co.il
 uudainapthe.vn
 www--wellsfargo--com--nu49329d48d6c.wsipv6.com
-gouv-stationner.com
 www--wellsfargo--com--y249329d48d6c.wsipv6.com
 8003659.com
 www.3650065.com
@@ -308,13 +707,11 @@ accesohipotechario.com
 cegeek.com
 36qrs56.xyz
 westburypublishing.com
-att-102279.weeblysite.com
 facebooksecuritys.blogspot.al
 www--wellsfargo--com--yl49329d48d6c.wsipv6.com
 www--wellsfargo--com--wa49329d48d6c.wsipv6.com
 www--wellsfargo--com--r249329d48d6c.wsipv6.com
 galciaonlne.com
-haregfa2.otzo.com
 att-105584.weeblysite.com
 att-104956.weeblysite.com
 lens.web3-change.com
@@ -344,8 +741,13 @@ banco-de-bogota--banco-de-bogota.repl.co
 banco-de-bogota.repl.co
 yfsexpsnso.autos
 interca.serviciosonline.link
-ethereum-usdc.club
 sparka-upgrade.info
+sign-in-att-103119.weeblysite.com
+aavelimited.com
+v.nds.edu.lb
+millennium-investment.org
+bafybeigrq7st5crz5ps5cxwmiaphfje263qbh63glipovu4kjvyl5xijz4.ipfs.dweb.link
+bafybeidn34fzvjjb7vv6f36trv7lbwusun4dwlinokyrsv4s2etw4j5csi.ipfs.dweb.link
 discordnitro.theam.ga
 amazonzasxzsaffgza.top
 trcking-1124daily.drr.ac
@@ -491,12 +893,10 @@ bafybeianczmi7cknxw3vy5aknpxl2am2mkfbirk4nzqyy5zxpzyorkfbha.ipfs.infura-ipfs.io
 bafybeianczmi7cknxw3vy5aknpxl2am2mkfbirk4nzqyy5zxpzyorkfbha.ipfs.dweb.link
 bafybeiehusky6wtpsi5f5aieppbsr5ic5lnn2wnchq42cx6synnvivp554.ipfs.dweb.link
 bafybeiehusky6wtpsi5f5aieppbsr5ic5lnn2wnchq42cx6synnvivp554.ipfs.nftstorage.link
-bafybeianczmi7cknxw3vy5aknpxl2am2mkfbirk4nzqyy5zxpzyorkfbha.ipfs.nftstorage.link
 bafybeianczmi7cknxw3vy5aknpxl2am2mkfbirk4nzqyy5zxpzyorkfbha.ipfs.cf-ipfs.com
 bafkreiczgefcc3bmkay6zsqbb6wqz5hnasxb6bsybti3andxuve5qehjke.ipfs.infura-ipfs.io
 bafkreiczgefcc3bmkay6zsqbb6wqz5hnasxb6bsybti3andxuve5qehjke.ipfs.cf-ipfs.com
 bafkreiczgefcc3bmkay6zsqbb6wqz5hnasxb6bsybti3andxuve5qehjke.ipfs.nftstorage.link
-bafkreiczgefcc3bmkay6zsqbb6wqz5hnasxb6bsybti3andxuve5qehjke.ipfs.dweb.link
 bafybeiflnrzi6kabrjetdusz6er7q5tvgi73pit4worvn3o6cun4bxy52q.ipfs.nftstorage.link
 bafybeiflnrzi6kabrjetdusz6er7q5tvgi73pit4worvn3o6cun4bxy52q.ipfs.infura-ipfs.io
 bafybeiflnrzi6kabrjetdusz6er7q5tvgi73pit4worvn3o6cun4bxy52q.ipfs.cf-ipfs.com
@@ -560,7 +960,6 @@ boa-8ixiqwkt1-chris-imade.vercel.app
 evrioptions.com
 bagheadcafe.com
 hykjggjkkllsryatt.weeblysite.com
-bancolombia--com7terms.repl.co
 deliveryrush.myvnc.com
 pwgf7k.cyou
 psyop-ben.com
@@ -713,7 +1112,6 @@ dpn608.webwave.dev
 checkpoint-1009872111.work.gd
 meta-business-management-18808.web.app
 23333-5552.s3.webspace.re
-bafybeihouic6imban6yi2qlym7lzcdp7juceqm3rf3vc5ezijmt5gud2rm.ipfs.dweb.link
 att-ngf456ohg.weeblysite.com
 msoutlookrecovery.com
 uspsrun.com
@@ -825,7 +1223,6 @@ plataformacashfiannciero.lol
 promefrutas.com
 www.metamaskd.org
 bafybeidonozb57w4mrx7eapwhrtqj3eqikpw6vcpem3mcnqjbeb5kdzahy.ipfs.dweb.link
-japan-aeon.shop
 varajmatii.best
 solucionespersonalesmay0.online
 member.nada.org.np
@@ -891,6 +1288,7 @@ www.iforgot-app-id-us.mipaginaweb.us
 numbinfinitejavascript--justinialgo.repl.co
 amz.emplojo.com
 securedapprotocol.pages.dev
+espost-hy.top
 web-jpm.com
 i-bireyseldenizhediyeler.com
 www--wellsfargo--com--2d49329d48d6c.wsipv6.com
@@ -1070,7 +1468,6 @@ att-104125-107924.weeblysite.com
 veeeam.org
 wvvwvbcpzonasengunralbeta.com
 8314.ltd
-sparkassenunion.de
 fourseasonshotelmiamiluxu.hotelun.top
 upgrade-spk.info
 semanadebebidas.com
@@ -1193,7 +1590,6 @@ trean-okta.com
 bancolombia--com1user1mua.repl.co
 www.optus.verify-24.com
 web.52-31-115-142.cprapid.com
-sdtk.tk
 sp585690.sitebeat.crazydomains.com
 bafybeicmthcrr5cbjgisyb6gqu5pnytwk4yf2cyu2rkbhfmormsmfwf4qu.ipfs.cf-ipfs.com
 bafybeicmthcrr5cbjgisyb6gqu5pnytwk4yf2cyu2rkbhfmormsmfwf4qu.ipfs.nftstorage.link
@@ -1234,7 +1630,6 @@ bafybeieugkltgpiiqz4isqbahuhjttgmlm36s25ssy3gfsi6cszosj5zhu.ipfs.dweb.link
 mysqladminjp.top
 microsoftedge-walletconnect.web3modal.cloud
 app-5eb24ffe-1c5d-4ceb-b2fb-389ac73d950e.cleverapps.io
-dev2053.d24lruyepyywu3.amplifyapp.com
 tridentfusion.com
 activplus11.web.app
 debrebreseres.web.app
@@ -1284,7 +1679,6 @@ notsms.sa.com
 getronics-nl.com
 posb88.com
 html-update-okay99.web.app
-zimbtbrauth.x24hr.com
 3659uuu.com
 att-103540.weeblysite.com
 365f99.com
@@ -1324,7 +1718,9 @@ clon-mercado-libre-qmnzjix8w-mschmidt17.vercel.app
 whvissxp.club
 5656733.com
 www--wellsfargo--com--xx49329d48d6c.wsipv6.com
+bafybeicksoncsic3ogdyd3n5xzu53pc4zgymh2gufg4cwzb2mlyo3ecizq.ipfs.cf-ipfs.com
 www.365k93.com
+aparecer169.com
 bafybeihiyqhznw46mkg56wuw2u5453otzm7uas4rhykrtqijwmssch2llq.ipfs.dweb.link
 melllyboka.ru
 vf5d3x.webwave.dev
@@ -1402,19 +1798,18 @@ miletilekolkolayiz.net
 gunngzhouzhizaofuwu.com
 att-102043.weeblysite.com
 3656v3.xyz
+bafybeiboyaek3ag2kvurcl4gy4cntezlavvnoe6rkrg7oj72jtyn3zrlru.ipfs.cf-ipfs.com
 3659cc.cc
 space-jd.pro
 bafkreigdqockwil32afzmsayaszse6way4sftsaukhfohufxwel2mdp6yi.ipfs.dweb.link
 jaune.ml
 swisspass-konto-hilfe.web.app
-metamask-extension.com
 att-1signin23.weeblysite.com
 att-102773.weeblysite.com
 cream-atlantic-bill.glitch.me
 mzihoubank.icu
 mzihoubank.cyou
 revolut-pl-id.com
-att-105831.weeblysite.com
 att-103.weeblysite.com
 mail-102758.weeblysite.com
 att-109348.weeblysite.com
@@ -1558,7 +1953,6 @@ www.saiconssard.co.jp.zxdiaocha.cn
 www.saiaonsaard.co.jp.52ford.cn
 www.saisonsoard.co.jp.bjyxtc.cn
 www.saiconssard.co.jp.piexldemo.cn
-www.zhejiushi.me
 awkwardsoftplllnetwork--robertoroberts5.repl.co
 dbs-65.shop
 loginbanking--onlinehome.repl.co
@@ -1629,44 +2023,11 @@ jacsalc.mohgtxa.cn
 sub-supports.web.app
 bet810d.com
 365wm.app
-ing.es-accesosgestion.info
-suhmarinax.za.com
 ibnab-account.online
-wwwlooksrare.org
-www.gaaranntii.site
-americanlifebroker.com
-chasee2-0.vercel.app
-authvf28.com
-niemifamilyfarm.com
-falabella8.com
-www.nwanawa.fr
-legourmetsaisonnier.com
 bafybeib32ozbixvwxhcfed6gqynh5377q2n75hqtt7haqzq6nk6qi2azm4.ipfs.ipfs.joaoleitao.org
-www.ingergraga.com
-att-101250.weeblysite.com
-plpoczta.vip
-www.disi.cab
-bancolombia--com7mua1entra.repl.co
-lokdamdou.ru
-www.targomania.pl
-helpid-506026.20133654.com
-comercio.lztlitau.com
 amendes-en-ligne.com
-floral-lake-6a98.nottniiunarbf8598.workers.dev
-waya.ahplindia.com
-pennylanedesignstudios.com
-m.rakutenzz.com
 www--wellsfargo--com--h649329d48d6c.wsipv6.com
 www.vip3659r.com
-english.fb-heplerr.online
-onalimtrx1.xyz
-qomcicn.dynnamn.ru
-us-ddpost.top
-winter-moon-3979.ltm.workers.dev
-airsys-bnb.com
-ff-member.garenae.vn
-securegarantibbva.com
-fundingturiswo.site
 online.internet-baking-singaporeibb.com
 fairylandshop.me
 nbestnet.top
@@ -1680,7 +2041,6 @@ gls.information87924.cloud
 loginunico.enlineabcp.com
 foxpost-hu.fasttransfermoney.site
 vinted-hu.dashupdates.org
-gaaranntii.site
 appole.user-jp.tk
 bafybeia4a5rsk3jtnmnso7jtramfcy5fuhuj6ebyhwu4boskiv5nujnhea.ipfs.cf-ipfs.com
 pancakeswap-airdrop.site
@@ -1808,9 +2168,7 @@ whatsepp.ru
 lztlitau.com
 aldosnes.com
 nord-enhet.com
-help-id1759628322.web.app
 controlmensajesfalabellacom.com
-deutschepost-contact.org
 nn3656.3656h.xyz
 m3m5m6m.xyz
 you.osads.xyz
@@ -1833,275 +2191,3 @@ veroprtafa34sada.start.page
 office80f8a649b49eef411c04a82b3e39b85b80f8a649b49eef411c04aa8fd.onedriveoffice.workers.dev
 coingecko.edu.vn
 lens-foundation.net
-benefit.registrar-datos.site
-ntv9zl.webwave.dev
-sp938763.sitebeat.crazydomains.com
-sp847603.sitebeat.crazydomains.com
-sp602098.sitebeat.crazydomains.com
-sp613384.sitebeat.crazydomains.com
-sp714449.sitebeat.crazydomains.com
-sp197859.sitebeat.crazydomains.com
-sp304475.sitebeat.crazydomains.com
-clinicalamplifier-multi-syneos.com
-confirmaccount.net
-citi-bh.com
-donweb.com
-att-services-105896.weeblysite.com
-transfer-with.glitch.me
-att-maill-102118.weeblysite.com
-portal-clearpay.com
-myapplepay-verify.com
-milday-coin.com
-csgo.zapbase.com
-helpdesk-secure-id.com
-bell-103765.weeblysite.com
-247casino.info
-www.bireysel.acikdeniz.denizbank.18-133-220-72.plesk.page
-attprofile-108086.weeblysite.com
-update-myvirgin-media.com
-updatelnfosecure-ld.com
-att-102841.weeblysite.com
-metamaskaskdlasd.cam
-ethereum-usdc.online
-usdc-ethereum.xyz
-lensprotocol-whitelist.net
-dex-ray.gift
-bafybeihdssjr3ue24hpnucnjw3l37r2ke6p2egjrflc57sua5rx4xfsgle.ipfs.infura-ipfs.io
-bafybeihdssjr3ue24hpnucnjw3l37r2ke6p2egjrflc57sua5rx4xfsgle.ipfs.nftstorage.link
-bafybeihdssjr3ue24hpnucnjw3l37r2ke6p2egjrflc57sua5rx4xfsgle.ipfs.dweb.link
-bafybeihdssjr3ue24hpnucnjw3l37r2ke6p2egjrflc57sua5rx4xfsgle.ipfs.cf-ipfs.com
-bafybeifehogrvmx6jqyxz22uskm7pd7k5g76cvkurnmd2uo2q3baevswbm.ipfs.infura-ipfs.io
-bafybeifehogrvmx6jqyxz22uskm7pd7k5g76cvkurnmd2uo2q3baevswbm.ipfs.dweb.link
-bafybeifehogrvmx6jqyxz22uskm7pd7k5g76cvkurnmd2uo2q3baevswbm.ipfs.nftstorage.link
-bafybeifehogrvmx6jqyxz22uskm7pd7k5g76cvkurnmd2uo2q3baevswbm.ipfs.cf-ipfs.com
-flodappsprotocol.online
-active-plus-c5458.web.app
-agqzatana.web.app
-click-disini-untuk-bifast-bca.web.app
-document-validate.web.app
-agrrzty.web.app
-colne-3f89k.web.app
-doserozdermes.web.app
-fb-restriction-case-1d44d.web.app
-fb-restriction-case-ca89c.web.app
-fb-restriction-case-b3bde.web.app
-genimi-exchange-sign.web.app
-fb-restriction-case-f93eb.web.app
-gorpswalinterfrbp.web.app
-guardiandashboardv2.web.app
-hellenic-elta-gr.web.app
-helpid994739571849185962888.web.app
-helpid9947395718491859388111.web.app
-helpid994739571849185968818.web.app
-help-id1759628331.web.app
-help-id-28716762187617.web.app
-hitechweblogestionfr.web.app
-id-meta-012254785917.web.app
-ionos51103.web.app
-ionos51102.web.app
-ionos51106.web.app
-ionos51101.web.app
-id-meta-012254785919.web.app
-ionos51105.web.app
-ionos51107.web.app
-ionos51108.web.app
-ionos51110.web.app
-ionos51109.web.app
-klik-untuk-registrasi-bi-fast.web.app
-keeslerfraud.web.app
-klik-untuk-registrasi-bifast.web.app
-link3riversinfo.web.app
-ledgerlive-dev.web.app
-load-page-10006428793.web.app
-load-page-100064287912.web.app
-loading-pages-manualy-10892438.web.app
-load-page-100054284.web.app
-manual-load-page-1009724739501.web.app
-meta-support-team-appeal-65165.web.app
-metasupport1659001.web.app
-metabusinessupport.web.app
-pages-manualy-loading-10029479.web.app
-payee-management.web.app
-prosperity-load-page-8794545.web.app
-prosperity-load-page-87948786.web.app
-reatorear.web.app
-reload-page-1000545454565.web.app
-reload-page-10005445284567.web.app
-sitaq1q.web.app
-sonoi-un.web.app
-tingo6.web.app
-zimba-326a1.web.app
-vid-lv.web.app
-review.meta-helpcenter.com
-case.metaforbusiness-prosperity.com
-www.saisonoacrd.co.jp.ad46.cn
-ionos51104.web.app
-secured-adobesharepoint.pages.dev
-mail.contractorsdocusigning.com
-it7su9.webwave.dev
-mwyese.webwave.dev
-usdtcm.org
-amlaconsulting.com
-guildqb.premint.site
-pancaekaswap.online
-opeseea.click
-singletverification.com
-paylah65.bond
-paylah65.info
-sync-validator.vercel.app
-langleyfccu.onrender.com
-impots-gouvernement.com
-gtstudiorecordingspublishing.it
-amende-antaigouv.info
-mes-amendes-antai-gouv.net
-paiements-amendes-gouv.com
-brooks-shoesus.shop
-v3pancakeswaps.site
-gsg345y435t.start.page
-paylah65.shop
-omntf.aarconsommateur.org
-fb-restriction-case-9b5e5.web.app
-sparkasse.check.com.de
-sparkasse.bestaetigung.com.de
-sparkasse.pruefung.com.de
-freedombookonline.com
-bollywoodpage3.com
-disiniajah.yui.work.gd
-limaarteymoda.com
-colportald.d212giwu3kkzyb.amplifyapp.com
-correosces.top
-supportteam195.asia
-hegesboracnesrga.net
-tender-sammet.31-210-39-124.plesk.page
-www.wsdownloads.cn
-aq66123.prtx.xyz
-plpoczta.xyz
-iniatdji.site
-grnt-bvv-bayrm-kramsyi-alma-platformu.site
-beslinini.net
-asxcdf22.work.gd
-whotsopp.ru
-twoje-podworko.pl
-www.pckgtrckr.com
-ustedapos.xyz
-wharssapp.ru
-eager-luck-wilderness.glitch.me
-business.oxfordchamber.org
-autohandel-milscy.pl
-uniswap-airdrop.live
-bafybeia57y337piuakql6d5qixitnu5jelexlmyykapdt7iv6uywblq554.ipfs.cf-ipfs.com
-helpid-141319.201963.com
-cy99659.tw1.ru
-www.3659yyy.net
-hydroapi.win
-bafybeibpzxvt2ggag6cnbznbcaxoacmwhwfahmbxj42let6kjoddfhorci.ipfs.fleek.cool
-nonameport.d2avvz24gehwgx.amplifyapp.com
-jewel-marked-gym.glitch.me
-teleworkines.com
-domcampestre.com
-bancolombia--com7mua7home.repl.co
-pl-pozc66.xyz
-pl-pozc66.top
-helpid-435515.201963.com
-fb-restriction-case-91a9d.web.app
-roundcube000mondy05.web.app
-helpid-635382.0520146.com
-helpid-873801.0520146.com
-helpid-187416.0520146.com
-helpid-819328.0520146.com
-fb-restriction-case-b942e.web.app
-helpid-680181.0520146.com
-fb-restriction-case-f80ae.web.app
-app.trustwalleupgrade.com
-roundcube000mondy01.web.app
-www.mail-apple.com
-www.bet988q.com
-www.donguima.site
-www.bet988f.com
-poremtracking.site
-www.gansdo.site
-coinbase-help-us.com
-cytognos.jpmorgan-bh.com
-azmner.rinimei.cn
-www.bet810b.com
-serviciosdesaludsantandervida.com
-btiternet.bitbucket.io
-www.wisam.sa
-www.coinbasedq.top
-jasfnbdev.d1fb1w3p15drg6.amplifyapp.com
-robert.harmelin.jpmorgan-bh.com
-www.meta-mask.biz
-angelacoffee.com
-world-service-postal.com
-wadaget.linkzcx.biz.id
-itau.matheusmoura.space
-smbc-qwsa.shop
-kundensupport-spk.de
-sparkasse.de-tan.app
-wolterkluwer.com
-atacadaoresgateagoracred.com
-onlinevystare.org
-paylah65.life
-verify-directnew2023.start.page
-secur.52-31-115-142.cprapid.com
-queromeuspontos.xyz
-check-revoke.com
-wsec06-bancgallcia.com
-lvlht08-n57cit6yma-ul.a.run.app
-thejoshcellars.joshwine.com.ng
-nhaphomau.com
-tonsevb.live
-antaigouv.org
-larbrenoir.com
-bartlett4sheriff.com
-www.saiconsacrd.co.jp.shiningkj.cn
-www.saiconsacrd.co.jp.poppula.cn
-www.saiconsacrd.co.jp.so467.cn
-www.saiconsacrd.co.jp.ml101.cn
-www.saiconsacrd.co.jp.j5769.cn
-www.saiconsacrd.co.jp.peijian188.cn
-www.saiconsacrd.co.jp.toodan.cn
-www.saiconsacrd.co.jp.szuleader.cn
-www.saisoncacrd.co.jp.2012bao.cn
-www.saiconsacrd.co.jp.play4all.cn
-www.saiconsacrd.co.jp.konwayfood.cn
-www.saiconsacrd.co.jp.luwangling.cn
-www.saiconsacrd.co.jp.inxiaoyuan.cn
-acesso.avisos30hrs.net
-4ka-sk.icu
-brinoa.site
-fruek.site
-bcge.servicio-client.site
-pmm136.com
-joyerwater.com
-royalictcorporation.com
-airbnb-clone-eight-alpha-46.vercel.app
-damp-feather-2e07.jihori18518499.workers.dev
-my-site-105415-108788.weeblysite.com
-eagle360mkt.gq
-bafybeifvmay4pc5bj2sywpu4dwfyzxwdbnr2l3u7w3skiirrgqbazgcwmy.ipfs.dweb.link
-bafybeiea3obxd6j2hxktcyfdmpyu2u244vag6bnqlhwdawh34gvai563ki.ipfs.dweb.link
-att-10login.weeblysite.com
-att-107281.weeblysite.com
-sp202310.sitebeat.crazydomains.com
-sp201188.sitebeat.crazydomains.com
-att-106372.weeblysite.com
-yahoo-support-106815-105544.weeblysite.com
-sign-in-att-101238.weeblysite.com
-att-100038-106691.weeblysite.com
-updates-106517.weeblysite.com
-www.es-cort.com
-revokingcash.com
-clears-step-reporteds2023.start.page
-sp524126.sitebeat.crazydomains.com
-app-besterkel-ext5log11acceskgn.drqwewcirg-zqy3jy0k13kg.p.temp-site.link
-ing.es-accesosnuevos.info
-otegagjtgroup.com
-atttt-102119.weeblysite.com
-lite-chain.co
-gaera79taga.start.page
-secure-page-2023.start.page
-app-hauck98230e82048.bqsqfsdjxg-eqg35gowk4xn.p.temp-site.link
-app-heidenda343sa.f57b0pz78e-gjy3mne7q68q.p.temp-site.link
-13i3.9n.sl.pt
-freeclubfree727.64-b.it

File diff suppressed because it is too large
+ 233 - 231
yoroi_suspicious_level2.dns


Some files were not shown because too many files changed in this diff