root 1 周之前
父节点
当前提交
7ae30171c3
共有 4 个文件被更改,包括 9415 次插入5852 次删除
  1. 5657 4250
      yoroi_malware_level1.dns
  2. 3180 1217
      yoroi_malware_level2.dns
  3. 271 132
      yoroi_suspicious_level1.dns
  4. 307 253
      yoroi_suspicious_level2.dns

文件差异内容过多而无法显示
+ 5657 - 4250
yoroi_malware_level1.dns


文件差异内容过多而无法显示
+ 3180 - 1217
yoroi_malware_level2.dns


+ 271 - 132
yoroi_suspicious_level1.dns

@@ -9,52 +9,179 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-www.16049.xyz
-www.18140.xyz
-www.61370.xyz
-www.b28n.top
-www.61395.xyz
-www.61401.xyz
-www.18838.xyz
-www.18841.xyz
-www.18840.xyz
-www.18062.xyz
-www.61381.xyz
-www.18072.xyz
-www.13791.xyz
-www.71231.xyz
-www.18889.xyz
-www.18874.xyz
-www.16307.xyz
-www.61491.xyz
-www.61384.xyz
-www.18832.xyz
-www.13827.xyz
-www.71623.xyz
-www.71523.xyz
-www.13910.xyz
-www.61806.xyz
-www.18328.xyz
-www.13915.xyz
-www.18323.xyz
-www.18375.xyz
-www.18321.xyz
-www.18362.xyz
-www.18336.xyz
-www.18337.xyz
-www.17196.xyz
-www.16322.xyz
-www.17112.xyz
-www.61676.xyz
-www.61958.xyz
-www.61971.xyz
-www.18310.xyz
-spectrumwebmailurl.systeme.io
-www.tsi18kk.co
-www.trustwallet.com-two-factor-authentication05.ao.yesixrq.com
-trustwallet.com-two-factor-authentication08.ao.yesixrq.com
-support.support-desk.tech
-www.allegrostatus.pl
+ydgu-gb7q-a054.amahler-livful-com-s-account.workers.dev
+www.uspssmartpackagelockers.com
+vast-team-222500.framer.app
+eztrackitdelivery.info
+eztrackingsolutions.info
+eztrackitgroup.info
+informal-workshops-577601.framer.app
+empty-train-cexd8.sites.repaint.com
+precise-gold-dqunb3zf.edgeone.dev
+cute-language-110013.framer.app
+eztrackitco.info
+secure-page-builder--daklmk.replit.app
+eztrackit.com
+eztrackingteam.info
+eztrackingcentral.info
+recargagarena.com
+acessarsafra.digital
+simple-docs--webmailprompt1.replit.app
+ufficialepaginaruba.it
+redirect-pro-site.xyz
+msoftnow.ignorelist.com
+2ww-umb.com
+dev.h5.non-steam.com
+api.argo.non-steam.com
+api.www.core.non-steam.com
+dev.ryjnq38.non-steam.com
+heartwarming-notes-259621.framer.app
+appgoldnu.fun
+finanzasbhd-tu-aliado-en-creditos-7a980d53aa0e.replit.app
+www.bet365p5.cc
+pubgm.specialvent.com
+www.bet365p3.cc
+logi-trezraz.wasmer.app
+0w1a-kw9k-9vif.warrnambool-zambrero-com-s-account.workers.dev
+pedagiodigitallive.food
+yielding-beige-m5hbsijz.edgeone.dev
+sheer-red-lwi8kl5b.edgeone.dev
+careers.candidateworkflow.com
+news-moba5vs5.evgmz.biz.id
+soulful-patterns-028706.framer.app
+3658994.cc
+8s.non-steam.com
+dev.webapps.non-steam.com
+admin.www.gtest.non-steam.com
+demo.4svmggsbuoy6wcy4.non-steam.com
+admin.go.non-steam.com
+2022-12-30znegeulfluxsisilafamille.qa.non-steam.com
+admin.notexistsefgetjgpgcbeta.non-steam.com
+exotic-lime-olunrtbr.edgeone.dev
+www.fill-form-here-for-blue.surge.sh
+emul7xmhwzx6m71c.tiktok67932.com
+www.18551.xyz
+www.tagesgeldkonto45.com
+withered-sound-fcec.agnes-terrieux.workers.dev
+j39i.vip
+k69h.top
+www.bet365k1.cc
+www.y27v.top
+www.y27x.top
+u19c.top
+7365w1.com
+net-amaranth-vmfipfnj.edgeone.dev
+www.y27t.top
+3658sora758200.cc
+www.kelidabattery.cn
+3658e104.cc
+3658sora1058200.cc
+3658sora658200.cc
+www.3658e105.cc
+3658sora958200.cc
+www.3658sora458200.cc
+3658hifi291.cc
+j93j.vip
+j95n.vip
+j98y.vip
+j95r.vip
+www.j111a.vip
+j97w.vip
+www.f38g.top
+www.f37p.top
+www.f36w.top
+www.instagram.123zoeken.be
+www.qq00.vip
+www.b41c.top
+www.g12d.top
+www.g15a.top
+www.f31d.top
+www.14136.xyz
+www.b27z.top
+dating.tksellers-center.com
+www.f31g.top
+www.g21s.top
+www.g13x.top
+120huimin.com
+www.14016.xyz
+www.61871.xyz
+g22l.top
+g13z.top
+j61o.vip
+j105m.vip
+j107c.vip
+j106w.vip
+j101y.vip
+j106r.vip
+j107j.vip
+j107d.vip
+j109s.vip
+j51m.vip
+j109u.vip
+j110s.vip
+j56g.vip
+www.u19f.top
+j110q.vip
+j111c.vip
+j110m.vip
+j106z.vip
+3658yohu8200.cc
+3658e105.cc
+3658sora358200.cc
+3658e102.cc
+3658e101.cc
+www.blogs-robinhood.com
+www.3658e101.cc
+www.facebook-marketplace-listings.myaddr.tools
+www.66771775.com
+www.f31h.top
+www.f25h.top
+v36o.top
+www.f31e.top
+www.f27p.top
+www.g10q.top
+www.f36y.top
+housepaintersfortlauderdale.com
+www.j110u.vip
+www.no-mura.vip
+na-pg.com
+www.maajiang.vip
+sweet-bar-23d8.npm22.workers.dev
+www.jdnsn.cc
+j105p.vip
+16724.xyz
+fort.skin
+j62i.vip
+j105n.vip
+j105r.vip
+asiawin168slot.com
+14091.xyz
+dc.crsorgi.gov.in.auth.verifycert.shop
+www.birth.5gsewa.cyou
+100489.cc
+b47j.vip
+www.dc.crsorgi.gov.in.auth.verifycert.shop
+b47i.vip
+dc.crsorgi.gov.in.verify.net.in
+b40z.top
+b47h.vip
+b47k.vip
+b40x.top
+dc.crs.gov.in.viewcarde.in
+www.71398.xyz
+amazonglobal8.com
+amazonglobal6.com
+data-finanzas-cdmxi.live
+fortycheck.life
+galabet.girismobil.one
+roblox-com.info
+silkevoss.de
+auspost.customerservicea.cc
+ht1.ht.htamzoj.icu
+spify567.com
+suissecred.com
+fortinaitik.top
+padisahbet.padisahbetresmisurum.com
 bet365--canada.ca
 www.61916.xyz
 www.16371.xyz
@@ -69,86 +196,119 @@ www.61811.xyz
 www.71599.xyz
 www.13829.xyz
 www.13839.xyz
-www.18307.xyz
-www.18325.xyz
-www.18308.xyz
+www.13827.xyz
+www.71623.xyz
+www.71523.xyz
+www.13910.xyz
+www.61806.xyz
+spectrumwebmailurl.systeme.io
+www.tsi18kk.co
+www.trustwallet.com-two-factor-authentication05.ao.yesixrq.com
+trustwallet.com-two-factor-authentication08.ao.yesixrq.com
+support.support-desk.tech
+www.allegrostatus.pl
 www.18320.xyz
-www.18311.xyz
-www.18322.xyz
 www.18368.xyz
 www.18373.xyz
 www.18330.xyz
 www.17899.xyz
+www.16049.xyz
+www.18140.xyz
 www.18066.xyz
 www.18083.xyz
 www.16293.xyz
 www.18078.xyz
+www.18062.xyz
+www.61381.xyz
 www.18296.xyz
 www.18299.xyz
 www.18058.xyz
 www.18129.xyz
 www.18156.xyz
 www.18155.xyz
-16309.xyz
-18831.xyz
-13842.xyz
-c02a.top
-61915.xyz
-17199.xyz
-61812.xyz
-16084.xyz
-16390.xyz
-18895.xyz
-13830.xyz
-www.18799.xyz
-www.18361.xyz
-www.nasdaq-cn.shop
+www.18874.xyz
 61427.cc
 17198.xyz
 61415.xyz
+16309.xyz
+18831.xyz
+13842.xyz
 61477.xyz
 16773.xyz
 16332.xyz
+c02a.top
 13920.xyz
 14260.xyz
+17199.xyz
 married-chocolate-1y2n8olx.edgeone.dev
 16054.xyz
 14030.xyz
 18421.xyz
+www.61370.xyz
+www.b28n.top
+www.18799.xyz
+www.61395.xyz
+www.61401.xyz
+www.18838.xyz
+www.18841.xyz
+www.18840.xyz
+www.18072.xyz
+www.13791.xyz
+www.71231.xyz
+www.18889.xyz
+www.18361.xyz
+www.16307.xyz
+www.61491.xyz
+www.61384.xyz
+www.18832.xyz
+www.nasdaq-cn.shop
+61915.xyz
+61812.xyz
+16084.xyz
+16390.xyz
+18895.xyz
+13830.xyz
+www.18328.xyz
+www.13915.xyz
+www.18323.xyz
+www.18375.xyz
+www.18321.xyz
+www.18362.xyz
+www.18336.xyz
+www.18337.xyz
+www.17196.xyz
+www.16322.xyz
+www.18307.xyz
+www.18325.xyz
+www.17112.xyz
+www.18308.xyz
+www.61676.xyz
+www.61958.xyz
+www.61971.xyz
+www.18310.xyz
+www.18311.xyz
+www.18322.xyz
+www.ht1.ht.htamzoj.icu
+trustwallet.com-two-factor-authentication05.ao.yesixrq.com
+www.trustwallet.com-two-factor-authentication10.ao.yesixrq.com
+www.17653.xyz
+netflixpaymentportal.org
+trustwallet.com-two-factor-authentication10.ao.yesixrq.com
 rodovias-br.live
 www.mfakeysetup.com
-fortinaitik.top
 spotify-premium-pay.stripe-app-active.com
+dhl.lieferung-direkt.com
 smart-apricot-c4akcfaw.edgeone.dev
 assurance-remboursement.info
-dhl.lieferung-direkt.com
 www.itkeyregister.com
 awsforensicl3ns-west1apprunner-dprd03feve9j.edgeone.dev
 www.servifulbeneficiosverde.com
-galabet.girismobil.one
 nomurajp.top
-amazonglobal6.com
-silkevoss.de
-padisahbet.padisahbetresmisurum.com
-suissecred.com
 roofcover.xyz
-data-finanzas-cdmxi.live
 kefort.lol
-auspost.customerservicea.cc
 fortmax.top
-spify567.com
 fortl.lol
-amazonglobal8.com
-www.ht1.ht.htamzoj.icu
 trustwallet.com-two-factor-authentication06.ao.yesixrq.com
-trustwallet.com-two-factor-authentication05.ao.yesixrq.com
-www.trustwallet.com-two-factor-authentication10.ao.yesixrq.com
-www.17653.xyz
-netflixpaymentportal.org
-fortycheck.life
-trustwallet.com-two-factor-authentication10.ao.yesixrq.com
-roblox-com.info
-ht1.ht.htamzoj.icu
 supportcoinsqurelognn.zapier.app
 aspeducators.onrender.com
 envisn.onrender.com
@@ -161,10 +321,10 @@ yfhic8qt.gfiwpu3459btgoeiprubnvoey458r.workers.dev
 facebooks-logins.onrender.com
 www.wishlist.com.de
 wishlist.com.de
+martine.jour2685494.pro
+ferreira.jour2685494.pro
 2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev
 allegrolokalnie.lokalna-73992132.sbs
-ferreira.jour2685494.pro
-martine.jour2685494.pro
 www.wgcondominiums-detail.surge.sh
 www.apply-user-now-blue-badge-here.surge.sh
 ldgkowkowkd.pabla5.workers.dev
@@ -176,13 +336,6 @@ dhl.pl.qas.edistrada.pl
 whatsapp-clone-32do.onrender.com
 central-suporte.lat
 instagram-fwuk.onrender.com
-allegrolokalnie.pl-552418352829oferta91625382537.site
-allegrolokalnie.oferta727273848314.xyz
-allegrolokalnie.pl-ticketnumber2094.lat
-allegrolokalnie.89757827638751.lat
-allegrolokalnie.pl-91793.top
-allegrolokalnie.pl-oferta02876236672.xyz
-registro-digital-akjm-2026.cr-web.workers.dev
 cita-registro-prhj-2026.cr-web.workers.dev
 allegrolokalnie.pl-oferta0017301973018208.xyz
 allegrolokalnie.ofetalokalana94837914312.lol
@@ -197,6 +350,13 @@ allegrolokalnie.pl-54sa495da.lol
 allegrolokalnie.pl-oferta091783992073001.shop
 smiling-bronze-ybcsxxoi.edgeone.dev
 hvflexo.com
+allegrolokalnie.pl-552418352829oferta91625382537.site
+allegrolokalnie.oferta727273848314.xyz
+allegrolokalnie.pl-ticketnumber2094.lat
+allegrolokalnie.89757827638751.lat
+allegrolokalnie.pl-91793.top
+allegrolokalnie.pl-oferta02876236672.xyz
+registro-digital-akjm-2026.cr-web.workers.dev
 allegrolokalnie.pl-526145272526oferta09261628267.site
 allegrolokalnie.pl-oferta001782002802010.shop
 allegrolokalnie.pl-oferta53791428.click
@@ -221,12 +381,10 @@ www.app.amahezon.com
 915e2c5b-7a6c-4b99-81ae-9470445d0a64-00-h9uyr8arb0zy.spock.replit.dev
 secure-page-editor--brightclark222.replit.app
 www.kali.secure-curious-shield-d0ccbd13.dh4.onhexcorearena.com
-www.load-hermes--elfnuupv.dev.autobricksai.run
 www.bright-playful-spark-b9e828fe.dh4.onhexcorearena.com
-fhwrekh.pro
+www.load-hermes--elfnuupv.dev.autobricksai.run
 abhd-qmj1-33z0.roopa-kotecha-cassioroaddental-co-uk-s-account.workers.dev
 trdfgwo56.org
-paypalus.dpdns.org
 wcqj-t4a4-e2th.stephane-sarllamip-onmicrosoft-com-s-account.workers.dev
 whatsap.hl.cn
 ww547.scltiabank.com
@@ -245,7 +403,20 @@ jhgdfe7w.com
 m3t5-mmrj-8iur.notifyesecuredocs-transcript-outlook-com-s-account.workers.dev
 ngfdeo0e.com
 kadi.gurdit.com
+www.load-hermes--d9xynuua.dev.autobricksai.run
+www.ingest.dev.autobricksai.run
+www.load-hermes--ecm0vc57.dev.autobricksai.run
+www.kwbot--muildw34.dev.autobricksai.run
+www.clever-witty-compass-945d22ea.dh4.onhexcorearena.com
 www.kali.secure-curious-gadget-dbf39449.dh4.onhexcorearena.com
+www.load-hermes--h5vj3egp.dev.autobricksai.run
+www.load-hermes--2jj4bn5u.dev.autobricksai.run
+www.kali.curious-safe-puzzle-3f035317.dh4.onhexcorearena.com
+www.kali.safe-smart-shield-237a2750.dh4.onhexcorearena.com
+www.friendly-techy-pixel.dh4.onhexcorearena.com
+www.brave-safe-spark-b595143f.dh4.onhexcorearena.com
+www.kali.secure-quick-compass-51c0bf15.dh4.onhexcorearena.com
+www.kali.brave-techy-rocket-451bb16e.dh4.onhexcorearena.com
 www.y26w.top
 m18w.top
 www.16149.xyz
@@ -254,7 +425,6 @@ www.bebppa.top
 www.x17c.top
 auth-portal-up-old.tem3.io
 m26l.top
-www.kali.brave-techy-rocket-451bb16e.dh4.onhexcorearena.com
 imtekcen.com
 b28a.top
 tricky-center-067034.framer.app
@@ -265,39 +435,8 @@ staging15151.d6p2x5damsyrv.amplifyapp.com
 crucial-blush-quax49lg.edgeone.dev
 onedrive-confirmation.dynamicpdfpage.com
 conclusive-fade-279239.framer.app
-www.load-hermes--d9xynuua.dev.autobricksai.run
-www.ingest.dev.autobricksai.run
-www.load-hermes--ecm0vc57.dev.autobricksai.run
-www.kwbot--muildw34.dev.autobricksai.run
-www.clever-witty-compass-945d22ea.dh4.onhexcorearena.com
-www.load-hermes--h5vj3egp.dev.autobricksai.run
-www.load-hermes--2jj4bn5u.dev.autobricksai.run
-www.kali.curious-safe-puzzle-3f035317.dh4.onhexcorearena.com
-www.kali.safe-smart-shield-237a2750.dh4.onhexcorearena.com
-www.friendly-techy-pixel.dh4.onhexcorearena.com
-www.brave-safe-spark-b595143f.dh4.onhexcorearena.com
-www.kali.secure-quick-compass-51c0bf15.dh4.onhexcorearena.com
+fhwrekh.pro
+paypalus.dpdns.org
+y4r8abgz.sibpages.com
 novels-muslim-interventions-technician.trycloudflare.com
 servicios-unitec-validacion--pinotop21.replit.app
-y4r8abgz.sibpages.com
-kd-production-e4bb.up.railway.app
-secure-page-editor--successfulot9.replit.app
-bd-venezuelaa-1--tubdvenlinea.replit.app
-www.centralgoldnu.fun
-memorable-level-493021.framer.app
-www.tgo-dtohoy.de
-www.prom-tig.de
-www.promhoy.de
-www.numresatunerosat.com
-www.redirect.blf.cuj.temporary.site
-wvvwintermatico.lat
-www.acessocx.uk
-brave-ocean-800.injaltransferwillgonabaid.workers.dev
-60cf-x8lc-uyzv.alan-alanlparis-com-s-account.workers.dev
-cprh-8ekx-8t2q.stacey-sherfy-miller-insulation-com-s-account.workers.dev
-jwsi-q9rj-ofjr.stuart-boones-outlook-com-s-account.workers.dev
-main.d16ms213k1m9dj.amplifyapp.com
-rnft-anew-27v1.mscloudconfirmation-storageonline.workers.dev
-registro-digital-2026-anjm.cr-web.workers.dev
-registro-digital-amjh-2026.cr-web.workers.dev
-polite-bush-0fd60b610.7.azurestaticapps.net

文件差异内容过多而无法显示
+ 307 - 253
yoroi_suspicious_level2.dns


部分文件因为文件数量过多而无法显示