1
0
root vor 3 Jahren
Ursprung
Commit
806842eeb4
6 geänderte Dateien mit 3176 neuen und 3397 gelöschten Zeilen
  1. 78 77
      nethesis_level3.netset
  2. 52 52
      whitelist.global
  3. 336 355
      yoroi_malware_level1.dns
  4. 2278 2602
      yoroi_malware_level2.dns
  5. 195 79
      yoroi_suspicious_level1.dns
  6. 237 232
      yoroi_suspicious_level2.dns

Datei-Diff unterdrückt, da er zu groß ist
+ 78 - 77
nethesis_level3.netset


+ 52 - 52
whitelist.global

@@ -16,6 +16,58 @@
 62.149.128.160
 8.8.8.8
 8.8.4.4
+178.62.219.148
+206.189.99.25
+128.199.48.140
+64.227.64.202
+134.209.192.110
+178.128.240.183
+188.166.21.67
+167.71.76.184
+188.166.126.240
+188.166.112.196
+143.198.131.11
+142.93.134.189
+134.122.51.143
+161.35.157.15
+178.62.204.160
+161.35.88.180
+167.99.43.70
+178.128.254.180
+178.62.229.70
+159.223.215.77
+188.166.36.213
+161.35.155.65
+178.128.251.154
+167.71.78.214
+164.90.194.17
+188.166.70.107
+178.62.222.164
+188.166.46.90
+178.128.254.64
+167.99.46.183
+104.248.194.112
+167.172.38.97
+188.166.69.24
+188.166.103.15
+159.223.213.107
+188.166.85.76
+188.166.91.192
+188.166.63.108
+159.223.0.121
+104.248.192.120
+188.166.17.46
+128.199.61.15
+178.62.221.146
+188.166.91.80
+188.166.86.111
+104.248.202.179
+161.35.82.120
+165.22.207.243
+164.92.219.73
+167.71.68.193
+146.190.234.168
+146.190.17.61
 64.227.78.25
 188.166.31.25
 188.166.85.242
@@ -141,58 +193,6 @@
 104.248.196.207
 134.209.93.118
 178.62.238.76
-178.62.219.148
-206.189.99.25
-128.199.48.140
-64.227.64.202
-134.209.192.110
-178.128.240.183
-188.166.21.67
-167.71.76.184
-188.166.126.240
-188.166.112.196
-143.198.131.11
-142.93.134.189
-134.122.51.143
-161.35.157.15
-178.62.204.160
-161.35.88.180
-167.99.43.70
-178.128.254.180
-178.62.229.70
-159.223.215.77
-188.166.36.213
-161.35.155.65
-178.128.251.154
-167.71.78.214
-164.90.194.17
-188.166.70.107
-178.62.222.164
-188.166.46.90
-178.128.254.64
-167.99.46.183
-104.248.194.112
-167.172.38.97
-188.166.69.24
-188.166.103.15
-159.223.213.107
-188.166.85.76
-188.166.91.192
-188.166.63.108
-159.223.0.121
-104.248.192.120
-188.166.17.46
-128.199.61.15
-178.62.221.146
-188.166.91.80
-188.166.86.111
-104.248.202.179
-161.35.82.120
-165.22.207.243
-164.92.219.73
-167.71.68.193
-146.190.234.168
-146.190.17.61
 159.223.236.83
 188.166.45.111
 134.209.136.185

Datei-Diff unterdrückt, da er zu groß ist
+ 336 - 355
yoroi_malware_level1.dns


Datei-Diff unterdrückt, da er zu groß ist
+ 2278 - 2602
yoroi_malware_level2.dns


+ 195 - 79
yoroi_suspicious_level1.dns

@@ -9,6 +9,200 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+shttlsonxws3.online
+mycommsafety.com
+consolecdigital.web.app
+tusucrsal-vrtualpsona.com
+consoleadigital.web.app
+llrire.web.app
+ggdss-ac89e.web.app
+etygu-75eb8.web.app
+fb-com-1023442367-review.web.app
+fftyy-911c8.web.app
+ppuy-24dc5.web.app
+iouo-b38a9.web.app
+scietegeneralconfirmoviles.web.app
+zzju-59d0b.web.app
+cj02582.tw1.ru
+ca32431.tw1.ru
+cx58885.tw1.ru
+att-mail-109977.weeblysite.com
+att-106806.weeblysite.com
+yahoomail894hlkm.weeblysite.com
+crafton-claimevent.com
+cibc-a.club
+new.operacionsss.repl.co
+att-jdjdk.weeblysite.com
+bet553.cc
+80058230-8945-4c9a-939c-9d4d02daa16f.id.repl.co
+new--operacionsss.repl.co
+c9d27627-8bb9-44d0-a68a-e7fe5fe59fe0.id.repl.co
+login.diebafin.de
+tj6qhe.webwave.dev
+ai23023.com
+att-108681.weeblysite.com
+010bimcell.net
+c79mex.webwave.dev
+cibc-a.cc
+att-107987.weeblysite.com
+bafybeia4trl4bklena3dkydttjbx2dmoxihyrnoro6oug3r23hdjabkvee.ipfs.w3s.link
+yahoomail893hj.weeblysite.com
+usaabutler.web.app
+att-104381.weeblysite.com
+att-yahoojackburna103517.weeblysite.com
+att-ybellsouth-webmail.weeblysite.com
+hd7zoo.webwave.dev
+att12.bookmark.com
+feyzy0.webwave.dev
+q0t3xz.cf
+3659jjj.net
+gotas.evoluir.sbs
+perubahan-layanan.app-ka.com
+acarroll.gbtefxryt7-95m32xerr6rv.p.temp-site.link
+a0739963.xsph.ru
+anz-secure.info
+washingtonhealth.online
+cibc-a.net
+dd365k.com
+toppbooz.com
+www.ecu-svccenter1.ddns.info
+eiqdjdrn.gq
+bet988v.com
+sunctroast.com
+www.alert-usaabank.com
+americanfirst.tk
+www3.amozozhnou.co.jp.aijxttp.cn
+reservas.hostfree.pw
+www.dijitalsube-acikdenizv11-com.tk
+dijitalsube-acikdenizv14-com.tk
+c43c.c34c.repl.co
+c43c--c34c.repl.co
+4ee08920-f6e9-411f-803f-a9e151513078.id.repl.co
+www.accesonlinecityweb.com
+jp-trustoptions.xyz
+realtorm.pmarks.workers.dev
+serviceattestetabac.com
+apasd33.aksdksad.repl.co
+365k02.com
+vodafone-internet.it
+aaewr-8658f.web.app
+bafybeid6z7oq5jqzf3ssgjjkoospf6ynugofi6ungpyqioovy53pxoyb24.ipfs.w3s.link
+tarif-perubahan.updatevx.com
+sigue-tu-envio-correos.com
+flaunfrt.klugtred.repl.co
+jasgscsc.us
+mail.got.krafton-rewards.click
+if8tofyiugkjihk.wqbsdoecuisrj4845.workers.dev
+lwv.dkhb.ga
+a0sreadn.surge.sh
+login-docusign-auth-uncommon.johoneh4.workers.dev
+incomparablewigglylogic.unders345.repl.co
+userbanca002.userbanca002.repl.co
+www.holidaydestinationswithjohn.com
+www.argo-vatera.gr
+www.dijitalsube-acikdenizv13-com.tk
+tngpay.top
+patmak.net
+supportteam97845525.co.vu
+briamtifasitarif.hltml.com
+rakoten.co.ip.xqqvwexy.tk
+s567o-2yaaa-aaaad-qen3q-cai.raw.ic0.app
+dijitalsube-acikdenizv9-com.tk
+acikmobildenizv2ka.tk
+bafybeiaokxzny3hyfdmgvzhfeyp65qcxe3lidedrtjdotdjvllottfgepq.ipfs.dweb.link
+biblegiftcatalog.com
+bmcellsabahtarife.tk
+cosycroissant.com
+d-card-sniw.tokyo
+junkaro.com
+secure.mynab-log.in
+gggbet365ok.com
+denizs4-acikdeniz.tk
+a801fec7-1506-45f0-84c4-433776c6fce3.id.repl.co
+gerenciandor-ssl-intern0-denlhome.tech
+fudia.tgzxrond.com
+7e9eaec1-6980-403b-ad59-4cc3d682d639.id.repl.co
+swisersystem.web.app
+xn--edeveltkaps-8zbb.com
+mmanndt.pages.dev
+ka.5dufi.com
+goserhaser990.co.vu
+9fb116a9-6c1f-4e6d-9613-c65562e71d73.id.repl.co
+seekjoyproductions.com
+test.rasterfill.com
+mp-ddados.rf.gd
+dibsipayi.top
+be-agb-sessie-f4ha5f.xyz
+metamask.eip-1559.network
+www.dijitalsubeacik-denizsubev3.net
+mynabsecurity.com
+www.verifyid318274.com
+konfirmasitarif.web-indo.com
+remove-user-web.com
+www.kredibasvurusistemi.com
+www.lisafabrega.es
+verifyid218274.com
+9f798fa3-b881-46a3-92e3-e9fed4078c55.id.repl.co
+dicksord.com
+www.mmtoken.win
+athins.in
+kinkfellowship.com
+bijlsdbsg.top
+support-usps.com
+galiciaahome.com
+dev2753.d2xvn6nqq3i7sx.amplifyapp.com
+facebook.wodans-son.com
+defosbim.net
+netflix-egkhowk2a-ndtrang121.vercel.app
+twilight-disk-9e96.hanavarshney86.workers.dev
+app-uniswap.site
+1453-547661354-7983-02.ga
+auth-labnet.pages.dev
+apreeqpoagena30.pages.dev
+bloodc.tk
+acikdenizv3-com.tk
+mycommbank2factor.app
+lapacupatubrutacauru.shop
+business-help-service-56361.web.app
+coindex.buzz
+3659ppp.cc
+lnsanpaolo.net
+www2.amozozhnou.co.jp.yhrsgak.cn
+solreconbin.shop
+www.korhogo.fr
+sea-lion-app-3kpgj.ondigitalocean.app
+configuiddemanage430213.co.vu
+indfrescvdf.co.vu
+whataswappapp.com
+withered-base-8544.ascinonsse1970.workers.dev
+att-107619-106188.weeblysite.com
+wuerth-itensis.support
+ktgxegzy.tk
+xqqvwexy.ml
+americanfirst.ga
+round-sunset-79d6.a3qge91d.workers.dev
+clouds-leaf-8dd4.sfxqacze.workers.dev
+dbspay.live
+xt-trust.top
+bet376.cc
+karenxxxxxxxxxx65.web.app
+docs-sound-6644.ww0gf02i.workers.dev
+dbso.top
+dbspay.one
+dbspay65.top
+acikdenizv2-com.tk
+email-ttx.com
+rakoten.co.ip.ktgxegzy.tk
+createmetamask.org
+www.createmetamask.org
+apple-gsx2-online-support.com
+www.molretu.xyz
+vrtual-persnasucrsalsegur.com
+defi.walleteth-us.com
+late-bar-b251.gucondidest1978.workers.dev
+soft-sun-e33b.lihangcahat1985.workers.dev
+rakoten.co.ip.xqqvwexy.ml
+dry-rain-61ad.ulliahanti1974.workers.dev
 aeinfon.live
 www.tylosco.com
 dijitalsube-acikdeniz-com.tk
@@ -126,11 +320,6 @@ facebook-business-suite-help-center-checkpoint26.ml
 verify33627indentity.com
 renqnnes.wwwaz1-ts105.a2hosted.com
 aunabsupport.com
-biblegiftcatalog.com
-cosycroissant.com
-d-card-sniw.tokyo
-gggbet365ok.com
-junkaro.com
 accessbanci.com
 att-108510.weeblysite.com
 interconexx.repl.co
@@ -257,10 +446,8 @@ whatssapp8.com
 metamask.zendesk.io.secureportal.in
 pancakeing.com
 citizesecurity.org
-secure.mynab-log.in
 ofdore.xyz
 noiress.xyz
-bmcellsabahtarife.tk
 114233953642910.ga
 211673528851174.gq
 h9s.d1xisxm4g6bu5e.amplifyapp.com
@@ -277,6 +464,7 @@ xn--firsthrizon-wfb.com
 instagram-dogrula.ml
 verify31127indentity.com
 hooverdull0009.bitbucket.io
+22k365.com
 accepacound.co.vu
 365ok17.com
 encyptedmail.ml
@@ -315,7 +503,6 @@ attmailservers.weeblysite.com
 deutchesec.es-seguridad.org
 writerscorner.nu
 swissposten.com
-acikmobildenizv2ka.tk
 letxoscore.xyz
 agrseguro.es
 att-101252.weeblysite.com
@@ -607,7 +794,6 @@ widelikablepatterns.asesorcomercial.repl.co
 636899.com
 kunden-pp-prozess.de
 gentle-salad-c104.smellme8901.workers.dev
-bafybeiaokxzny3hyfdmgvzhfeyp65qcxe3lidedrtjdotdjvllottfgepq.ipfs.dweb.link
 qeiw-e0b65.web.app
 layanantarlfbrl.uk
 bah-a087eh.web.app
@@ -1110,73 +1296,3 @@ jetwaylodge.com
 ntkbmpel.ml
 trusted-fishy-water.glitch.me
 helpconfrim.co.vu
-aergstroma.gbtefxryt7-95m32xerr6rv.p.temp-site.link
-usaafeb1.web.app
-securec0nnect.com
-servicios--bgaliciaar.repl.co
-crimsonblanddatabases.galiciaara.repl.co
-servicios.bgaliciaar.repl.co
-a5b94334-7664-4808-9609-96fbfa0976e2.id.repl.co
-crimsonblanddatabases--galiciaara.repl.co
-6bffc059-4149-4375-975f-31ba6a805a1a.id.repl.co
-banehtejarat.com
-curut.swwgl.com
-654fdaf6-40dc-43e6-a3e7-afbb40e6fe60.id.repl.co
-www.haydi-kampanyaya-login-basvuru-com.ml
-www.haydi-kampanyaya-login-basvuru-com.kampanya-destek-basvuu-onlany-com.online
-2f4c2c68-9436-4d3f-87a2-741a12185eaf.id.repl.co
-bancogaliciahomebanking.galiciaar22.repl.co
-www-denizbank-acik-gov-tr.ml
-bancogaliciahomebanking--galiciaar22.repl.co
-care-desktop-support.dnset.com
-darwizargali1--galicianoarg.repl.co
-36987fac-be2a-4b89-8f8c-2ccbe7419264.id.repl.co
-seguridad--galiciahr.repl.co
-substantialtastynanotechnology.asmfgalicia.repl.co
-servicios--galiciahl.repl.co
-ca6ab6e2-d934-4e38-a88b-930ca12f0825.id.repl.co
-allneew.co.vu
-servicios.galiciahd.repl.co
-servicios.galiciahh.repl.co
-servicios--galiciahd.repl.co
-servicios--galiciahh.repl.co
-usaanovv.web.app
-freiburgmadison.com
-blttrex-platformsglob.com
-premiumseguritystart.shop
-reimancor-openivoices-log-app-huo5a.ondigitalocean.app
-www.metamaskmerge.live
-informationdata69667.com
-winterbox22.com
-dependentevilarchives.cuidadswe2.repl.co
-yylfdli.cn
-informationdata34626.com
-att-105194-106333.weeblysite.com
-informationdata59239.com
-informationdata29437.com
-x11.fr
-cloud-reconncet-9f0e.czwl05dv.workers.dev
-accounts-google.euskodata.com
-restaurerleluxe.versacommerce.de
-icscards.online-identificatie.royal-crown.info
-nanang.rumahbolte.com
-online-aidatiniz-iade-devet-com.kampanya-destek-basvuu-onlany-com.online
-contoh.cs-resmi.com
-microsoft.com.metasoption.com
-attmailonline.boxmode.io
-trackingbuddy.click
-abortive-act.surge.sh
-swanshotel95849.meetspace.sa.com
-y3byt-pqaaa-aaaad-qemaa-cai.raw.ic0.app
-oldschool.com-os.net
-runescapeplay.com
-yahoo-107331-100191.weeblysite.com
-dev5477.d3p2hisi0cjl2e.amplifyapp.com
-green-dust-fb08.1340389217.workers.dev
-merhababendeniz.tk
-vual.in
-texasdisabilityaid.com
-reomondremese.web.app
-denizacikkv2.tk
-sibylig.bond
-onlayn-basvuru-iform-kampanyan-com.ml

Datei-Diff unterdrückt, da er zu groß ist
+ 237 - 232
yoroi_suspicious_level2.dns


Einige Dateien werden nicht angezeigt, da zu viele Dateien in diesem Diff geändert wurden.