root hace 3 años
padre
commit
994ea24769
Se han modificado 8 ficheros con 2772 adiciones y 25852 borrados
  1. 470 2
      nethesis_level3.netset
  2. 43 43
      whitelist.global
  3. 358 348
      yoroi_malware_level1.dns
  4. 29 203
      yoroi_malware_level1.ipset
  5. 1258 1146
      yoroi_malware_level2.dns
  6. 25 23593
      yoroi_malware_level2.ipset
  7. 93 218
      yoroi_suspicious_level1.dns
  8. 496 299
      yoroi_suspicious_level2.dns

La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 470 - 2
nethesis_level3.netset


+ 43 - 43
whitelist.global

@@ -16,58 +16,67 @@
 62.149.128.160
 8.8.8.8
 8.8.4.4
+161.35.159.44
+142.93.131.113
+167.71.79.14
+165.22.199.90
+161.35.153.110
+161.35.95.211
+165.22.198.217
+167.99.210.125
+165.22.197.37
+167.172.38.137
+167.99.212.195
 157.245.67.209
 167.172.45.223
 159.223.225.41
 206.189.110.255
-167.172.38.137
-167.99.212.195
+159.65.198.26
+134.122.60.110
 161.35.93.220
 167.99.42.32
 161.35.144.29
 188.166.68.157
-159.65.198.26
-134.122.60.110
+64.225.71.115
+167.71.11.73
 157.245.78.190
 164.90.206.223
 174.138.2.121
 167.99.40.250
-64.225.71.115
-167.71.11.73
+178.62.238.76
 64.227.75.231
 104.248.205.106
 167.71.73.171
 178.62.247.86
 104.248.196.207
 134.209.93.118
-178.62.238.76
+134.209.192.110
 178.62.219.148
 206.189.99.25
 128.199.48.140
 64.227.64.202
-134.209.192.110
 178.128.240.183
 188.166.21.67
 167.71.76.184
 188.166.126.240
+161.35.88.180
+167.99.43.70
 188.166.112.196
 143.198.131.11
 142.93.134.189
 134.122.51.143
 161.35.157.15
 178.62.204.160
-161.35.88.180
-167.99.43.70
 178.128.254.180
 178.62.229.70
 159.223.215.77
+178.62.222.164
 188.166.36.213
 161.35.155.65
 178.128.251.154
 167.71.78.214
 164.90.194.17
 188.166.70.107
-178.62.222.164
 188.166.46.90
 178.128.254.64
 167.99.46.183
@@ -76,23 +85,23 @@
 188.166.69.24
 188.166.103.15
 159.223.213.107
+104.248.192.120
 188.166.85.76
 188.166.91.192
 188.166.63.108
 159.223.0.121
-104.248.192.120
 188.166.17.46
 128.199.61.15
 178.62.221.146
 188.166.91.80
 188.166.86.111
 104.248.202.179
+146.190.234.168
+146.190.17.61
 161.35.82.120
 165.22.207.243
 164.92.219.73
 167.71.68.193
-146.190.234.168
-146.190.17.61
 64.227.78.25
 188.166.31.25
 188.166.85.242
@@ -100,55 +109,55 @@
 188.166.97.199
 188.166.17.142
 178.62.240.117
+188.166.11.226
+188.166.2.236
 188.166.95.89
 164.92.152.178
 167.71.10.219
 188.166.55.209
 206.189.101.65
 188.166.73.117
-188.166.11.226
-188.166.2.236
 146.190.225.217
 174.138.8.207
 178.62.240.195
 167.99.216.203
 128.199.53.157
 164.92.209.130
+164.92.220.56
 167.71.64.103
 188.166.34.36
 128.199.60.18
 167.99.40.163
 188.166.77.48
-164.92.220.56
+206.189.11.13
+134.122.56.28
 161.35.150.89
 188.166.80.143
 178.128.246.16
 188.166.109.135
 188.166.85.49
-206.189.11.13
-134.122.56.28
+167.71.71.43
+167.99.219.82
 64.225.71.102
 164.92.215.172
 188.166.92.136
 167.71.8.45
 206.189.2.123
 157.245.65.18
-167.71.71.43
-167.99.219.82
 146.190.228.120
+68.183.7.251
+167.172.47.117
 146.190.18.242
 104.248.94.94
 104.248.93.140
 134.209.80.130
 188.166.89.164
-68.183.7.251
-167.172.47.117
+178.62.242.162
+178.62.232.61
 165.22.196.33
 134.122.50.84
 188.166.48.29
 159.65.199.185
-178.62.242.162
-178.62.232.61
 188.166.23.162
 178.62.192.199
 142.93.129.129
@@ -156,44 +165,35 @@
 188.166.116.155
 167.99.40.27
 146.190.29.122
+188.166.104.96
 165.22.205.55
 206.189.101.48
 167.99.211.228
 159.223.237.208
-188.166.104.96
+206.189.0.226
+167.172.34.27
 134.122.63.204
 188.166.91.196
 104.248.87.189
 134.209.202.70
 164.92.222.171
-206.189.0.226
-167.172.34.27
 159.223.218.42
+188.166.41.33
+188.166.72.23
 134.209.91.165
 188.166.28.60
 64.227.71.52
 159.65.197.198
 165.22.192.54
 188.166.38.161
-188.166.41.33
-188.166.72.23
+188.166.83.149
+188.166.24.24
 206.189.103.231
 104.248.207.61
 64.225.71.170
 174.138.5.216
-188.166.83.149
-188.166.24.24
-167.71.79.14
-165.22.199.90
-161.35.153.110
-161.35.159.44
-142.93.131.113
-161.35.95.211
-165.22.198.217
-167.99.210.125
-165.22.197.37
-206.189.3.139
 164.92.211.252
+206.189.3.139
 134.209.136.185
 134.209.206.121
 143.198.250.79
@@ -207,7 +207,7 @@
 167.99.16.60
 167.99.248.251
 178.128.138.188
-185.199.111.153
+185.199.109.153
 188.166.103.4
 188.166.105.16
 188.166.105.32

+ 358 - 348
yoroi_malware_level1.dns

@@ -9,570 +9,625 @@
 # Category        : Malware
 # Confidence      : 10
 #
+ansima.com
+apurposedrivenmom.com
+design-renata.com
+healthyonyours.com
+howbeautifullifeis.com
+mewingappliance.com
+rollerworksfamilyskating.com
+sanditon-inv.com
+thegroves-sa.com
+vadentist.com
+wisconsinearlychildhood.org
+0eedff63ca.info
+xtvklujmo.com
 ceddi8ub.ru
-lg82n82g.ru
+00065d1a.sam-club.rest
 000627f4.mysolarcost.rest
+0865e213.sam-club.rest
+0865e22b.cholibrium.icu
 0006c398.selfsufficientbackyad.shop
-00065d1a.sam-club.rest
-0ludjp.com
+03b80c25.ymmyfoods.shop
+00c6dea0.easydental.cloud
 0camsite.site
-11302.hebeuqd.com
-1422.howgininch.live
-151.howgininch.live
-157.howgininch.live
-159.exitairap.live
-153.howgininch.live
+0df50d7b.getlastnews.com
+020shoes.com
+0ludjp.com
 277288d.com
 335588.cc
+51sifu.cn
+4f4cf8f1.getlastnews.com
 465320164.coridas.ru
-51526dsuvnbyeh.com
 4l3rbfq.vogukqnfk8.dkogar.cl
-51sifu.cn
-5otz.short.gy
+54jets.com
 62314347.getlastnews.com
+5otz.short.gy
 665la.com
 7ii.co.uk
-76.defense-mob.com
+75b4aeb0.getlastnews.com
 83.defense-mob.com
-973707.com
-a4medicine.co.uk
+809547809547.809547.neshuafoods.com
+949613949613.949613.neshuafoods.com
 a.trustedstream.life
-aaf8554a.getlastnews.com
 abangikhwan.com
+aaf8554a.getlastnews.com
+a4medicine.co.uk
 accept-ios-4f332.web.app
 accnt-manages.dedyn.io
+adelaidekoalarescue.org
 adsforcomputerweb.com
 adsoftware.top
-adelaidekoalarescue.org
 affiliates.natifico112.com
+agikdnjs.com
 africancranesafaris.com
 aiugff.com
 albatros.network
+allenmonuments.com
 alboraaq.ru
 allamericansales.us
-allenmonuments.com
+allthingsrugged.com
 altakamulia.com
-alternativeads.net
-americalatinavidros.com
+alteratus.com
+ameli-la-carte.org
 ananasa.online
 amps-elemcos.com
 aniogvn.com
-antcam.surfoff.com
+aoaemail.com
 aoo.com
-appleid.d-aple.com
 aquavita.org
-asbud-management.com
+ashley-and-jennifer.com
 attsucursalbancolombia.bancamovil2.repl.co
-augiesnola.com
-azadeh-ghorashi.com
-babescam.site
+autodiscover.mark8er.com
+autokrasota.ru
+ayrdgzxa.ga
+b.catgirlsare.sexy
+b.captchaverifier.top
 bankmellat.xyz
+barefootedleisurelypizza.com
 bb222.getlastnews.com
+benjaminliew.com
 bdkxsk4u.cytobuen.co
-barefootedleisurelypizza.com
-best-garment-steamers.com
-besotoindia.com
 betterhelpsfb.org
-bibliopilot.org
+best-garment-steamers.com
 bhongircollege.com
-bodekh.com
+billionlink.net
 blekchecker.su
+blog.bellerbyandco.com
+bodekh.com
 bomb-wish7.com
+boydjeuken.online
 briancrabs.cm
-buromilan.us
 browser-api.clara-labs.com
-btopenwould.com
+bubuxflow.com
+buromilan.us
 c08d.petscondy.com
 caprasoutdoors.com
+case-review1812.xyz
 carders-heaven.ru
-cars.byteshop.co.za
+cartoonnodeachievement.com
 casttravel2.xyz
-cartersafaris.com
 cataractweedcove.com
-cfsgj.com
+cars.byteshop.co.za
+cb2d00b3.getlastnews.com
 centrumaugustow.pl
 chairtookli.com
-chelseynn.com
-champdeslicornes.be
+cfsgj.com
+challenger.edmena.com
+cesiumsemboite.com
 check-this-message.xyz
+champdeslicornes.be
+chengdegupiaoxinxi.cn
+chelseynn.com
 clientbackarea.site
 clinkeasiestopponent.com
-clothingstyle.us
-cn71dh.com
 coingotrade.com
+cockyincreasinglymicrowave.com
 coiffurebio.fr
-colanbalkily.com
 coinusewinemanh.com
-cockyincreasinglymicrowave.com
+colanbalkily.com
+commissionepochknuckle.com
 conoverphoto.net
-compulsionspotsbeacon.com
+connecticutsfinestmovers.com
 contentmentweek.com
-continue-site.website
 cpanel.rbservhel.com
-craftrans.com
-crickmenia.com
-crm.makmedia.us
-dailyjournal1.xyz
-danceagenda.com
 deevinekreations.com
 ddxze.uishoaarran.top
 dgacblebe.com
 disillusioninventorsoften.com
 dna-logistics.com
+dolphinmops.com
 dressageclinic.com
-duckkub.com
-dynct.com
-duobaoai.com
 dullmensclub.com
+duckkub.com
 eduww.net
 eb4a4e4c.getlastnews.com
 e39ff99e.getlastnews.com
-electronicskenya.co.ke
-epistemeinstituto.com
+ehgoogle.com
+enggimn8.ru
+evhnuet.717s.site
 everythingplusonline.com
-expandremittance.com
+faithfully.allocate66.buckso.ru
 fasrtuaskjdasd.shop
+feenandfung.associates
 feedfreezone.com
-favsfuture.br.com
-fangzuyisheng.com
 familylaw.news
-feenandfung.associates
+fangzuyisheng.com
 fermentools.com
+fikapower.com
 fiscal-solutions.tv
-fjhsglass.com
+fluiddeliverymanagement.com
 fotosparafondo.com
 fplecnih.com
-fluiddeliverymanagement.com
 framemymirror.com
+freegamingreward.com
 friendlybulb.com
-gacorweb88.com
 fw-main.adsblocker.top
+gamergirl.pro
+gacorweb88.com
 gee.su
 germanmart.online
-gdczsh.com
+gesmsk.ru
 git.git.git.git.in.adwords2000.ru
+godforexrd.com
+goldluckinvestment.com
+gorgeousgetaways.com
 grandrush.com
 greenriverrental.com
-greetingirritation.com
+grapefort.com
 growvideo.biz
 gucci-nansha.com
+gwccontractor.com
 gulfshoresrentals.net
-hanuman-admin-uat.codingate.com
-hamster.fund
+hartwoodcrafts.com
+hacker-newbie.org
+heathcarres.xyz
+hg2862.com
 hermonfieldng.com
-hiims.in
 hipsuper3.xyz
-hjylctd.com
+heppar.com
+hiims.in
 homeownersofamerica.net
-horoscope.hosuronline.com
-hongxinda.cn
+hoxi360.com
 hostfleek.com
-hqcc.ru
+horoscope.hosuronline.com
 hth.sinocare.com
-huongdecal.com
-hoxi360.com
-hubforfun.com
+hqcc.ru
 hugkcica.com
+hub.samsungmediahub.net
+huongdecal.com
 i13lc8k.cn
 hwbch.com
-ibtr-ykle.net
-icloud-support.in
+iamplanner.co
 iddense.com
 ifknittedhurtful.com
+ilovenailsandwax.com
 imenttogethe.xyz
 inforising.com
-inmotion.evolution.mu
+inkcontractors.com
+intendbiochemistry.com
 inwraptsekane.com
+internusamandiri.com
 iphone.location-setup.us
-intendbiochemistry.com
 irusa.app
 ixzc4t.irevibele.com
+jhpst.com
 joannakaniewska.com
-jw-eva.com
-k3n4ikm2h2.potenz-ohne-rezept.de
-karpoff.org
 kbw-vloerverwarming.com
-kellywalkerrd.com
+k3n4ikm2h2.potenz-ohne-rezept.de
+jw-eva.com
+jxsiwang.com
 kingstore.ru
-knockedfrothgrievously.com
+kitesgcc.com
+koszczynski.net
 korovka.info
-kryptoshorts.com
-leashmotto.com
+knockedfrothgrievously.com
 laurieinevitablyhistorian.com
-lensvisiontop.newruths.site
+lentes.us
 lescharmois-bainslesbains.com
 leotechbd.com
-licenceattribute.com
+leashmotto.com
+list1.cliniofsurgery.com
+list.cliniofsurgery.com
+list2.cliniofsurgery.com
 localmilf.com
 longbucks.com
 loutedpewing.com
-lplinvest.com
-m215-records.com
 mail.achardwereo.com
 mail.achrsadrw.com
+mail.backcorrectorz.shop
 mail.articular.monster
+mail.barkultras.pics
 mail.airproff.ru
-mail.backcorrectorz.shop
-mail.sorderatoluca.com
-mail.surveygoods.shop
+mail.begalkinggift.rest
+mail.concentr.link
 mail.comeuioip.link
-mail.wholefoodssurvey.us
+mail.couikesx.beauty
+mail.ehomdepots.com
+mail.cowholesalz.com
+mail.finiseute.monster
+mail.hardwresaturday.com
+mail.homeiidepot.com
+mail.kohlznow.com
+mail.kisoiuiyui.co.in
+mail.lowesurvey.email
+mail.memesize.monster
+mail.piedmontrescue.org
+mail.samsurveymachine.shop
 mail.untilfed.rest
+mail.sorderatoluca.com
+mail.smcliubmarkt.com
+mail.surveygoods.shop
 maiscredonlinenet.com
+mail.wholefoodssurvey.us
 makmedia.us
-majorityevaluatewiped.com
-mainecoin.info
-mannendokter.com
 mamoni.app
-mapper.space
+majorityevaluatewiped.com
 marcusgram.com
 mcfhelp.us
-massagebahrain.xyz
-mentoryourmind.org
+md333.life
+mbdsiopf.ga
 midlandvenisondollars.com
+miibikef.us
 misionerosmsp.com
-monitorinflictmotivation.com
-moscowlegalcenter.ru
-mrbin.ws
 mrhoodhealing.aiu.ac.ug
 mrssperry.com
-mx.theclassyhearts.com
+mrbin.ws
 myjaeasceb.myjoaacecb.gesnaf.top
-myjcecsoeb.myjaaseecb.gesnaf.top
 mystatestreetusbenefits.com
+myjcecsoeb.myjaaseecb.gesnaf.top
+myjceesoeb.myjoascecb.mjsipu.top
+naturalwaterresources.com
+neworleansskydiving.us
 news-fedaka.cc
+news-gijeve.cc
+nhomkinhthienbinh.com
 news-xivasa.cc
 nipaloz.com
-nhachay.mobi
-nhomkinhthienbinh.com
+northmead.online
 ns2.prohoster.cc
 nun.mail2you.club
 ny-laser.com
-odgsah.me
-odunv.me
 olderdeserved.com
-opennic2.eth-services.de
-osagecasinosukg.com
+onlayer.com
 onlyvalid.biz
+opennic2.eth-services.de
+oversizetights.com
 ouxh4.tterismyperson.xyz
+packoihs.info
+parrotuncle.com
 pardonsuccessionassassin.com
-passuvb.me
-patch.b4c251f49.net
 pdsnub.me
+patch.b4c251f49.net
+passuvb.me
 peekslap.com
-ping.crnv-fi-hel-04-4rmdv02a.adguard.io
 penza-its.ru
 penuchefirms.com
-pinprickplums.com
 pionwaney.com
-populardatings.life
+pinprickplums.com
+ping.crnv-fi-hel-04-4rmdv02a.adguard.io
 podcasts.momsgrabcoffee.com
+playgoogle.live
 pnfdsov.me
-pornotopless.top
-postedaccounts.com
 porncamz.com
-preloanflubs.com
+pornotopless.top
 privatelands.biz
 primatexpertise.com
+preloanflubs.com
+project-cloud-folder.mature-voice.workers.dev
 prodigalpromotion.com
 profilesuper3.xyz
 prowishinfo.ru
-proitadvice.co.uk
 public.youengage.me
-pvdnsi.me
+pzextpcgv.ga
 pvdsniv.me
-psuwmgnjezjko.casny.org
+pvdnsi.me
+raccoon.biz
 qzpdj.adashiscloth.xyz
 radiohero.ru
+regusse-tourisme.fr
 redmdeia.biz
-relativelyweptcurls.com
 repentancematernity.com
 revoketypes.com
+righteouscentral.com
+rnkasb.me
+rnakslv.me
+rndbsb.me
+roapsvn.me
+roinvab.me
 rundezvous.net
-rugiomyh2vmr.com
 rsmultiservicess.com
-safam-plants.com
-sadjune.com
+rugiomyh2vmr.com
+rustiquegardencreations.com
 salecomics2.xyz
 search-dur.com
+secure-access-2a47amyxsocgmc7f.gate36.xyz
 secure-access-1a241fvbgtlci870.gate43.xyz
-secure-access-f0cbfscy9zwnt24f.gate36.xyz
-secure-access-a3328rn37tlhqfe4.gate36.xyz
 secure-access-9eec31nk2usg6161.gate36.xyz
+secure-access-f74e8ktq5ika309b.gate43.xyz
+secure-access-a3328rn37tlhqfe4.gate36.xyz
 secure-accesss-4ccytvgt6o.gate36.xyz
+secure-access-f0cbfscy9zwnt24f.gate36.xyz
 secure-accesss-eh69na9ixs.gate36.xyz
 sentrade-dubai.com
 securespend.org
 server.masudgroup.com
 shirtronics.com
+shamelessmessengerdescription.com
 shoperian.com
-shopsaleium2.xyz
 skovlunden.com
-smilingdefectcue.com
+smtper.org
 smartlive.ir
+smilingdefectcue.com
+sniffstring.com
 soldsecurity.com
-solacs-tec.ru
 solublearcher.com
-spectrumtop3.xyz
+solacs-tec.ru
 spplus.ru
-srims.com.my
-staturereactioncollect.com
+spectrumtop3.xyz
+steamcommuntly.com
 stay.colorimetric.org
+staturereactioncollect.com
 stoppage.stoppage12.alborzt.ru
-surveyprocessing.com
+stylishcelebrations.co.za
+superbstuff.info
 syncbanjo.com
+tbpvfp.cn
+tbs.apply-pcr-test.com
+tf2illumination.com
 test.irusa.app
-thelearningbeezzz.com
-theactualnewz.com
 thehealingartist.org
+theactualnewz.com
 thisteenlife.com
-tobepartou.com
-tiuzd.ucationininanceen.xyz
 tirazhy.ru
+tiuzd.ucationininanceen.xyz
+tobepartou.com
 todosamsung.com
 thony.us
 top-dating-center.com
+topazfaugh.com
 toprankinradio.com
 topnflnhl.us
-topazfaugh.com
-toyota-prius-club.ru
-true-carders.ru
+totaltopposts.com
+toyota2022.com
 transfer24.me
+true-carders.ru
 tu6eopa4o.potenz-ohne-rezept.de
 tuplancontable.com
+uboungera.com
+ufa.mashinkastiraet.ru
 udb.vr-system85397.com
 ufagen.ru
 uksprite.com
-uspbmedpacr.com
 uslawyersdb.com
-usp-sjczo.top
-uspqobw.top
+uspbmedpacr.com
 usps.ooo
-uspsshippingauthentication.com
+usptakjobs.info
+valid-market.ru
+velocityspring.com
 v987947.hosted-by-vdsina.ru
 viewsnet.jp.com.fhwa.top
-velocityspring.com
-valid-market.ru
+vmca.pt
+walmartdiscountcard.com
+wakecar.cn
 watch-this-leaked.video
 vypar.ru
 waterfront.vn
-webdisk.denizsubev2giris.net
+webmail.arnerisolar-usa.com
+weedbymail.com
 wfverify.mobi
-whereaboutsconclusive.com
-wpad.ttechu.com
+wimge.everalyearsfou.xyz
+wlzwlb.cn
 woreinformed.com
-worldjournal1.xyz
 ww1-123moviesfree.freeflix.info
-ww.w-roblox.com
 ww38.ipowercreditservices.com
-www.7seasproshopthai.com
-www.aficar.es
+wpad.ttechu.com
+wws-entsorgung.de
 www.arenda-riga.com
-www.buildbest.quest
+www.aficar.es
 www.benzing.cc
+www.cfapsj.com
 www.cytobuen.co
-www.dekoffiemachinezaak.nl
 www.crustacea.net
 www.directwholesale.com.sg
+www.dekoffiemachinezaak.nl
 www.dsp1.wadsoncables.co.za
 www.eki-net.comn-aesceosneiesa.tdehzx.top
 www.dwasoft2019.com
-www.ekl-net.comnn-aoasccesaa.tqlcvt.top
-www.hercorping.us
+www.essand.com
+www.fredshead.info
 www.git.git.szzatk6kyrv.blog.root.lovegirls24.club
+www.git.git.skqexk6x5do9zc1.yourstartupinterviewsftp.turobzorchik.ru
 www.git.webmail.mail.lovegirls24.club
-www.hirenexus.com
+www.grantsassistance.shop
+www.hercorping.us
+www.ipanemausawebsite.com
+www.jestmefon.beauty
+www.jcb-co-jp.acascmeaaa.ofapuf.top
 www.mehmetaydemir.net
-www.mzofcvulblu.info
-www.progento.com
 www.productdatasheet.neptune-ecli.com
-www.pssy.xyz
 www.plateever.link
 www.ragemaker.net
+www.progento.com
+www.pssy.xyz
 www.sacicssccan.hbzatu.top
-www.rippedknees.co.uk
-www.sacieescnae.vrhhjw.top
 www.sacisescnae.tvrjrg.top
-www.saicocn-co-jp.aacardonesen.btfgyp.top
-www.saiseocn-co-jp.aecardesen.wkqssz.top
-www.saicocn-co-jp.acsardoeese.uxwxza.top
-www.saicscn-co-jp.accardeseen.btfgyp.top
-www.saisooan-co-jp.aecaordscose.dcrsvw.top
+www.sacieescnae.vrhhjw.top
+www.rippedknees.co.uk
+www.rrcp.net
 www.scrimination.co.in
 www.shoephilippines.com
+www.sasisssccan.pzomzx.top
+www.singlecolomian.shop
 www.sitemap.zakandaiev.com
-www.ups-frusa.us
 www.ventionail.co.in
 www.translator-divce.rest
 www.underarmour-us.com
+www.ups-frusa.us
+www.vapingjust.com
 www.viasevceceesvi.vsccveeaaavsi.slruwb.top
+www.ytrdcuiju.ga
 www.wivikiosk.com
-www992577.com
-wwwawyy35.xyz
+wwwyoutube.com
+wxyowsed.ga
 xmeets.com
 xojfp.utricewbgaterh.xyz
+xn--80acc2cqdj.kz
 yankpainkiller.com
-yawyawvaryyaaaa.com
-yogashoppen.com
+ybp3j.reseynatcreative.xyz
+yihuit.cn
 yogaskin.ru
 youengage.me
-yogya.transtech.co.id
 yukonearshot.com
 yyzf999.com
+zbyuma.com
+zpxywl.com
+zparty.net
+20ups-update.com
+blog.19850120.xyz
+autheeukhomebroadband.com
+a06139ce.getlastnews.com
+crimefiles.net
+cpcalendars.clearanceclothes.co.uk
+cloud-basedstorage.com
+devadvancedtools.com
+d0766e3c.getlastnews.com
+distributionyour.ml
+diamondrelationscrm.us
+deaclub.ru
+git.mail01.secureserverlogin.app
+hpn2019.humasjatim.id
+handangupiaogongsi.cn
+julysoft.cn
+intorno.pe
+moy-zakaz.ru
+mx3.hotgirlxx.org
+morbidlocally.com
+litiernode.cyou
+secure-access-2a862m7mya32tc3d.gate43.xyz
+rosagentmsk.ru
+transcorcontainer.co.za
+worldchronicles1.xyz
+vinceandjoes.com
+www.frifox.com
+wowody.cn
+wt10.52zsoft.com
+www.handangupiaogongsi.cn
+0ad4289d.lowes-surevy.rest
+1.brokenbad.biz
+179.gohillzoo.live
+178.gohillzoo.live
+4106.nkmtechnicalservices.com
+blog.abit.vn
+calendar.googloe.com
+brightstart.5bjms0ndxo-xlm41wjok3dy.p.temp-site.link
+eases.net
+freesknscs.xyz
+girlsdivine.life
+iugga.com
+news-cokica.cc
+search.hometailer.com
+wjl92lmrp.slimbytea.life
+wendle.lt.emlnk.com
+www.git.booking.cardimania.com
+www.paypalsurvy.shop
+www.selfsufficientbackyad.shop
+www.methodsofhealing.com
+www.ekl-net.com-asoceecces.xfkkfe.top
+www.slimbytea.life
+www.panjinpeizixinwen.cn
+youtibe.com
+utabsxmb.org
+0865e223.cholibrium.icu
+bakofamerica.com
+atozdeals.co
+buygunss.com
+bhmsfmfkc.ws
+apple-gps-36.top
+child-international.org
+course.netpickstrading.com
+cmggstayauf.ws
+1711.fivenotmatt.live
+1710.fivenotmatt.live
+179.fivenotmatt.live
+dns.greatwesterncomm.com
+help-netfiix-c.constantcontactsites.com
+extraverions.com
+globotecgroup.com
+hzkter.com
+fctzwzvr.ws
+ghoexd.ws
+in-itinere.com
+mail.heatwell.email
+kokoko-24.online
+ksokzawyno.ws
+newtouzend.com
+nft.claim-mint.com
+piratia-life.ru
+positivestar.org
+secure-access-7514chqwf164p481.gate36.xyz
+sportstemplates.net
+rss.ikwb.com
+qjhog.ws
+skvdaf.ws
+surveyhardware.email
+symrjnp.ws
+us04.biz
+vuinuo.ws
+wifi-router.rest
+uffem.ws
+valerainingexplain.com
+www.timelynewstoday.com
+www.hornplace.com
+www.wifi-router.rest
+www.tarpontown.com
+www.surveyhardware.email
+worldofwellpath.us
+www.qutougu.cn
+www.salem-news.com
+zgcfno.ws
+zzvzvecrtyl.ws
+1422.howgininch.live
+151.howgininch.live
+157.howgininch.live
+159.exitairap.live
+153.howgininch.live
+epistemeinstituto.com
+odgsah.me
+odunv.me
 yzedhlqjum.com
 zrukecdcv.com
-zparty.net
-zmaflab.com
-00c6dea0.easydental.cloud
-03b80c25.ymmyfoods.shop
-809547809547.809547.neshuafoods.com
-aoaemail.com
-autokrasota.ru
-challenger.edmena.com
-ashley-and-jennifer.com
-cesiumsemboite.com
-commissionepochknuckle.com
-goldluckinvestment.com
-dolphinmops.com
-internusamandiri.com
-hacker-newbie.org
-iamplanner.co
-mail.comfortably.pics
-mail.concentr.link
-mail.couikesx.beauty
-lentes.us
-mail.finiseute.monster
-mail.ehomdepots.com
-hub.samsungmediahub.net
-mail.hardwresaturday.com
-mail.homeiidepot.com
-mail.iterature.beauty
-mail.kisoiuiyui.co.in
-mail.jstc6ic.com
-mail.kohlznow.com
-mail.kiersedule.monster
-mail.nordstromsurvey.us
-mail.ncorporate.co.in
-mail.memesize.monster
-mail.piedmontrescue.org
-mail.samsurveymachine.shop
-md333.life
-onlayer.com
-regusse-tourisme.fr
-secure-access-2a47amyxsocgmc7f.gate36.xyz
-oversizetights.com
-steamcommuntly.com
-shamelessmessengerdescription.com
-smtper.org
-uboungera.com
-www.jestmefon.beauty
-webmail.arnerisolar-usa.com
-weedbymail.com
-www.jcb-co-jp.acascmeaaa.ofapuf.top
-wimge.everalyearsfou.xyz
-www.essand.com
-www.manyana.pelegisr.com
-xn--80acc2cqdj.kz
-yihuit.cn
-www.sasisssccan.pzomzx.top
-0865e213.sam-club.rest
-020shoes.com
-54jets.com
-b.catgirlsare.sexy
-ameli-la-carte.org
-alteratus.com
-autodiscover.mark8er.com
-benjaminliew.com
-b.captchaverifier.top
-allthingsrugged.com
-billionlink.net
-bubuxflow.com
-boydjeuken.online
-case-review1812.xyz
-cartoonnodeachievement.com
-freegamingreward.com
-hartwoodcrafts.com
-godforexrd.com
-heathcarres.xyz
-fikapower.com
-heppar.com
-enggimn8.ru
-gwccontractor.com
-hg2862.com
-koszczynski.net
-jxsiwang.com
-ilovenailsandwax.com
-kitesgcc.com
-jhpst.com
-inkcontractors.com
-ehgoogle.com
-mail.lowesurvey.email
-miibikef.us
-northmead.online
-neworleansskydiving.us
-naturalwaterresources.com
-packoihs.info
-playgoogle.live
-sniffstring.com
-tf2illumination.com
-rustiquegardencreations.com
-superbstuff.info
-righteouscentral.com
-totaltopposts.com
-www.singlecolomian.shop
-www.fredshead.info
-www.grantsassistance.shop
-vmca.pt
-wxyowsed.ga
-zpxywl.com
-zbyuma.com
 us-nation-ny.cf
 transfer.sh
-0865e22b.cholibrium.icu
-949613949613.949613.neshuafoods.com
-agikdnjs.com
-ayrdgzxa.ga
-blog.bellerbyandco.com
-apurposedrivenmom.com
-faithfully.allocate66.buckso.ru
-gamergirl.pro
-mail.smcliubmarkt.com
-news-gijeve.cc
-parrotuncle.com
-rnkasb.me
-secure-access-f74e8ktq5ika309b.gate43.xyz
-roinvab.me
-rndbsb.me
-usptakjobs.info
-wakecar.cn
-www.ipanemausawebsite.com
-ybp3j.reseynatcreative.xyz
 mail.samiclubi.com
 www.htowerlaw.com.profetionals.com
 choedfqmn.com
 fatecorepart.live
 instantimaginative.com
 mail.nsciousness.buzz
-mxp6.com
 nfudis.me
 www85.rudyvalencia.pro
 147.coathowoff.live
 1323.apelocklit.live
 approvedurls.info
 1410.seenbatwage.live
-pe-1nf.co
-www.sdfsdflog-ap.domainsssse.com
+fpjkyvqwiieesfjwou.com
+exywnwcffrxuva.com
 pnbjkjjgyrrgsv.com
 aloeahrvpewvhaysfosf.com
+rdesvqtebymxymvmbfgl.com
 smaacmeownfigwxllj.com
-wafscobccgucsbukkyygh.com
+syndvqctdjrdye.com
+vdmdxmgsbsgilh.com
 uhlvajqpyefm.com
 vipemmrpxemmmu.com
 wnrjdbaday.com
-vdmdxmgsbsgilh.com
+yyxxcykgwexj.us
+wafscobccgucsbukkyygh.com
 vbtwrlpdfbcvqgrfxa.com
 blackresoldoola.ru
 knmbbjypnhpg.ru
+aurasantisflork.com
 xinmoshiwang.com
 sbm.xinmoshiwang.com
 qekwbtlatjocgqk.com
@@ -580,35 +635,12 @@ jipafmwkrj.com
 bhagexathgpgj.la
 teeikmkjqaxibgsvf.com
 tkmbyvpal.com
-africaschildrensfund.us
-axiommortgagebankers.com
-cc.claughs.ga
-cdn2.whereismyip.cf
-cs.bluerivershealthcare.com
-data.mlcro50ft.com
-go.gogogocdn.uk
-img.bandu.cf
-ipulsecloud.com
-linux-update.youtubb.tk
 m4x.bbcinternationalnews.com
-service-5dqdv2h6-1304865419.gz.apigw.tencentcs.com
-service-d27rg2y2-1256209700.gz.apigw.tencentcs.com
-service-mlulm54w-1257046868.hk.apigw.tencentcs.com
 stakerelease.com
-unknow.lays-stax.com
-update.falsh.cf
-vulmachine.win
-web.bbcinternationalnews.com
-vop774578104.softether.net
-us-central1-tenacious-camp-347220.cloudfunctions.net
-tajivedeg.com
 kicknocisd.com
-iconnectgs.com
-bayernbadabum.com
 cultura.educad.pe
 isc.net.ua
 www.chawkyfrenn.com
-020-rce500.r1z.rocks
 towwnk510.top
 towjaz68.top
 towivl69.top
@@ -634,24 +666,6 @@ towrxp39.top
 towohk38.top
 toweiy58.top
 towerj53.top
-kyrjwt45.top
-kyrsti44.top
-suqosk04.top
-pefjfw62.top
-suqoyw07.top
-suqpvu08.top
-suqycd05.top
-okwyeg04.top
-suqyjb01.top
-suqyqu10.top
-okwerh01.top
-suqzpe02.top
-suqzyt03.top
-okwnyw02.top
-towcqx32.top
-okwydg05.top
-towspd42.top
-towhfs22.top
 dwlesdaaiyf.com
 demo.cansunoto.com
 m-ainsurance.com
@@ -668,10 +682,6 @@ chist.com
 onaltiyadokuz.net
 cepasvirtual.com.ar
 irdudetrusthill.com
-nrwmarkettoys.com
-germanysupportspk.com
-data-file-data-7.com
-hazertofichamda.com
 intolove.co.uk
 audioselec.com
 geringer-muehle.de

+ 29 - 203
yoroi_malware_level1.ipset

@@ -9,21 +9,38 @@
 # Category        : Malware
 # Confidence      : 10
 #
+45.61.161.61
+45.61.187.40
+45.139.105.181
+45.79.128.205
+45.79.181.179
+45.79.181.251
+45.95.146.116
+45.95.147.40
+45.138.74.209
+45.15.156.19
+45.248.169.101
+45.118.115.99
+45.235.8.30
+45.176.232.124
+149.28.133.134
+149.28.143.92
+149.129.215.226
+149.56.131.28
+94.102.61.26
+94.23.45.86
+94.232.46.35
+94.70.37.145
 8.214.87.1
 8.218.106.104
-8.210.152.211
 162.142.125.210
 162.142.125.10
 162.142.125.220
-162.142.125.219
 162.142.125.7
 162.142.125.213
-162.142.125.222
 162.241.189.135
 162.221.192.26
-162.221.192.90
 103.195.236.159
-103.13.113.61
 103.144.139.150
 103.144.139.158
 103.75.201.2
@@ -31,11 +48,10 @@
 103.55.67.180
 103.43.75.120
 103.132.242.26
-101.35.199.165
 101.50.0.91
 104.248.9.108
 104.244.75.234
-104.244.78.26
+104.152.52.240
 104.152.52.133
 104.152.52.85
 104.152.52.219
@@ -43,15 +59,12 @@
 104.152.52.125
 104.152.52.203
 104.168.155.143
-104.219.233.38
-107.189.4.253
 107.189.7.214
 107.189.7.248
 107.189.13.247
 107.170.39.149
 107.211.155.113
 107.150.104.174
-107.172.206.242
 109.239.57.240
 109.239.48.140
 109.239.58.6
@@ -61,7 +74,6 @@
 109.107.166.93
 109.74.204.123
 109.205.214.4
-109.206.243.107
 109.11.175.42
 109.152.70.207
 109.145.27.139
@@ -69,7 +81,6 @@
 109.149.147.221
 112.255.151.253
 115.68.227.76
-115.178.55.22
 116.105.220.26
 116.98.162.42
 116.31.232.13
@@ -93,36 +104,25 @@
 137.184.149.97
 137.186.193.226
 138.68.165.154
-138.68.177.200
 138.207.238.47
 139.59.107.94
 139.59.65.76
 139.59.56.73
 139.59.126.41
-139.59.21.0
 139.162.190.203
-139.216.164.122
 143.198.212.117
 143.244.130.158
 143.244.132.188
 143.244.138.182
 143.244.138.37
 143.244.140.94
-143.110.218.101
 144.76.136.153
 146.190.24.86
 146.190.76.112
 146.190.71.214
-146.59.116.242
 146.70.149.43
 147.139.166.154
-149.129.215.226
-149.28.133.134
-149.28.143.92
-149.56.131.28
-152.89.196.211
 152.32.150.67
-152.32.201.23
 157.245.74.122
 157.245.196.132
 154.12.37.157
@@ -136,37 +136,27 @@
 159.65.169.200
 159.203.174.77
 159.89.202.34
-159.89.168.63
 159.146.61.203
 164.52.0.90
 164.92.132.107
 164.92.85.232
-164.92.246.119
 164.90.165.20
 164.90.222.65
 164.90.146.32
 164.68.99.3
 165.22.22.240
 165.232.184.164
-165.73.81.45
 167.172.199.165
 167.172.253.162
-167.99.152.171
 167.99.251.24
 167.248.133.63
 167.248.133.45
 167.248.133.62
-167.248.133.46
 167.248.133.61
 167.94.138.60
 167.94.138.45
-167.94.138.119
-167.94.138.44
 167.94.138.47
 167.94.138.61
-167.94.138.118
-167.94.145.58
-167.94.145.60
 167.94.145.57
 167.94.146.59
 167.94.146.57
@@ -180,7 +170,6 @@
 171.225.184.85
 171.22.30.164
 171.22.30.147
-170.178.211.194
 170.249.59.153
 170.253.25.35
 175.130.250.109
@@ -190,16 +179,11 @@
 178.169.196.115
 178.147.24.70
 179.43.154.151
-179.43.156.182
 179.60.147.13
-179.13.5.152
-18.207.132.63
 18.207.136.34
-18.246.13.131
 18.170.218.83
 18.133.181.43
 18.133.229.190
-18.206.177.137
 18.228.115.60
 18.229.248.167
 18.197.239.109
@@ -211,12 +195,10 @@
 183.82.100.110
 183.111.227.137
 183.111.227.244
-185.132.53.220
 185.209.230.4
 185.167.96.138
 185.167.96.146
 185.167.97.229
-185.167.98.76
 185.180.143.80
 185.180.143.71
 185.180.143.141
@@ -224,16 +206,10 @@
 185.180.143.6
 185.180.143.81
 185.180.143.12
-185.180.143.11
 185.190.24.11
-185.213.175.12
 185.106.93.197
 185.216.71.252
-185.224.128.201
-185.215.113.114
-185.122.204.249
 185.4.135.165
-185.206.225.51
 188.166.87.67
 188.54.79.88
 188.92.64.68
@@ -242,7 +218,6 @@
 188.44.20.25
 187.63.160.88
 187.199.224.16
-187.135.153.221
 192.241.201.173
 192.241.201.86
 192.241.198.202
@@ -254,7 +229,6 @@
 192.241.203.134
 192.241.205.139
 192.241.205.22
-192.241.205.202
 192.241.213.53
 192.241.208.117
 192.241.208.184
@@ -266,18 +240,15 @@
 192.241.200.236
 192.241.200.131
 192.241.200.55
-192.241.200.178
 192.241.206.120
 192.241.206.25
 192.241.206.190
 192.241.206.49
 192.241.206.204
 192.241.206.112
-192.241.206.152
 192.241.209.210
 192.241.209.55
 192.241.209.11
-192.241.209.147
 192.241.195.38
 192.241.195.189
 192.241.195.77
@@ -290,7 +261,6 @@
 192.241.212.86
 192.241.212.210
 192.241.212.209
-192.241.212.6
 192.241.192.62
 192.241.199.91
 192.241.199.126
@@ -298,15 +268,9 @@
 192.241.194.23
 192.241.197.145
 192.241.197.156
-192.241.211.199
-192.241.211.246
 192.187.111.222
 192.187.111.219
 192.81.129.251
-192.3.251.168
-192.236.208.19
-192.119.120.22
-192.119.87.45
 186.152.98.121
 186.188.80.154
 186.188.2.193
@@ -315,14 +279,8 @@
 186.194.240.217
 190.144.161.145
 190.203.178.131
-190.17.66.162
-190.199.161.250
 190.11.198.68
-190.204.83.110
-190.27.77.14
-190.36.189.154
 190.74.23.139
-190.79.133.56
 190.78.64.132
 190.75.110.239
 193.122.143.76
@@ -332,11 +290,7 @@
 193.118.53.210
 193.118.55.170
 193.56.146.194
-193.56.146.243
-193.56.146.174
-193.56.146.29
 193.149.185.203
-193.149.189.213
 193.106.99.6
 193.106.191.157
 193.92.233.183
@@ -345,16 +299,12 @@
 194.116.237.135
 194.163.142.251
 194.26.29.11
-194.55.186.199
 194.54.56.42
 195.3.220.132
-195.2.70.68
-195.144.21.56
 195.54.163.133
 197.26.174.95
 197.156.100.192
 197.1.200.71
-197.204.243.188
 197.148.17.17
 197.14.218.253
 197.242.150.244
@@ -362,20 +312,16 @@
 200.84.201.101
 200.44.208.217
 201.236.181.164
-201.102.237.203
 201.94.166.162
 202.129.205.13
 206.189.28.199
 206.81.23.191
-206.1.199.69
 206.1.223.209
 207.46.13.237
-203.217.65.6
 208.67.105.161
 208.67.105.148
 208.67.105.162
 208.67.105.179
-208.83.234.113
 209.97.154.162
 209.97.152.163
 209.97.163.214
@@ -385,7 +331,6 @@
 213.239.212.5
 213.91.235.146
 213.67.255.57
-211.237.37.234
 223.111.175.4
 3.15.3.250
 3.136.23.179
@@ -420,63 +365,33 @@
 35.205.96.143
 35.172.114.228
 35.86.201.111
-35.92.32.1
-37.8.1.8
 37.14.229.220
 37.139.128.192
 37.139.128.187
 37.139.128.195
 37.139.128.196
-37.139.128.164
 37.128.17.176
-36.152.128.7
 40.77.167.38
 41.109.78.231
 41.99.249.38
-41.230.166.34
 41.228.223.122
 41.62.227.225
 41.97.183.39
 41.35.196.18
 41.96.224.19
-41.96.68.5
-41.216.183.61
 42.200.93.114
-45.139.105.181
-45.79.128.205
-45.79.181.179
-45.79.181.251
-45.95.146.116
-45.95.147.40
-45.61.161.61
-45.61.187.40
-45.138.74.209
-45.15.156.19
-45.15.156.46
-45.11.57.48
-45.147.228.94
-45.63.99.23
-45.248.169.101
-45.227.252.248
-45.59.127.4
-45.118.115.99
-45.235.8.30
-45.176.232.124
 43.134.171.185
 43.134.234.251
 44.192.83.250
-44.192.82.22
 44.234.62.182
 46.101.154.177
 46.177.99.230
-46.190.93.247
 47.243.185.50
 47.243.98.143
 47.41.154.250
 47.176.30.75
 47.16.73.77
 47.185.141.97
-47.254.255.74
 49.207.181.205
 49.51.19.119
 52.15.140.91
@@ -486,9 +401,7 @@
 5.135.159.50
 5.253.207.185
 5.188.210.227
-5.188.206.238
 5.182.210.92
-5.189.161.70
 5.176.232.124
 54.215.94.44
 54.90.47.154
@@ -499,7 +412,6 @@
 51.161.73.194
 50.37.154.115
 50.90.249.161
-62.204.41.25
 62.233.50.179
 62.35.67.88
 58.153.180.71
@@ -544,18 +456,11 @@
 64.62.197.231
 64.62.197.101
 64.62.197.56
-64.62.197.25
-64.62.197.109
-64.62.197.211
-64.62.197.122
-64.62.197.198
 64.227.107.236
-64.227.111.193
 64.44.102.239
 64.44.135.140
 64.121.161.102
 64.79.47.117
-67.10.175.47
 67.143.121.245
 67.23.200.176
 69.133.162.35
@@ -571,15 +476,12 @@
 74.82.47.43
 74.82.47.18
 74.82.47.42
-74.82.47.48
-74.82.47.54
 74.66.134.24
 70.71.125.50
 70.120.228.205
 70.121.198.103
 70.51.153.72
 70.50.3.214
-70.66.199.12
 70.231.28.214
 70.95.236.129
 68.183.54.115
@@ -588,44 +490,26 @@
 68.111.190.80
 68.247.66.215
 84.32.128.147
-85.31.46.78
 85.31.44.178
-85.62.137.34
 85.184.243.204
 85.184.243.76
 85.255.9.74
 85.241.105.6
-85.59.61.52
-85.61.165.153
 85.74.158.150
 85.139.176.42
-85.209.134.253
-80.85.156.9
 80.66.76.32
 80.94.92.40
-80.82.77.139
 80.103.77.44
 80.13.179.151
 80.121.8.212
 80.189.213.49
 80.233.87.78
-94.23.45.86
-94.102.61.26
-94.102.56.151
-94.232.46.35
-94.232.43.216
-94.232.43.213
-94.232.43.215
-94.63.65.146
-94.70.37.145
-94.140.112.105
 92.106.70.62
 92.109.39.207
 92.189.214.236
 92.149.205.238
 92.27.86.48
 92.137.74.174
-92.25.139.40
 92.207.132.174
 92.191.49.255
 89.248.163.214
@@ -640,10 +524,8 @@
 89.129.109.27
 89.216.114.163
 89.240.102.164
-89.185.85.43
 89.79.229.50
 89.152.120.181
-95.18.193.65
 95.214.107.21
 95.213.216.247
 95.94.33.189
@@ -653,7 +535,6 @@
 86.158.3.195
 86.171.75.63
 86.45.66.141
-86.157.12.148
 86.195.32.149
 86.99.15.243
 86.130.9.167
@@ -685,11 +566,6 @@
 87.236.176.159
 87.236.176.202
 87.236.176.171
-87.236.176.22
-87.236.176.28
-87.236.176.71
-87.241.168.49
-87.120.254.252
 87.223.80.45
 87.223.88.205
 87.223.83.164
@@ -705,14 +581,9 @@
 184.105.139.110
 184.105.139.86
 184.105.139.75
-184.105.139.95
-184.105.139.111
-184.153.132.82
-184.162.156.115
 184.176.154.83
 184.20.10.236
 174.45.15.123
-174.101.111.4
 174.60.47.98
 174.115.87.57
 63.251.235.76
@@ -733,23 +604,17 @@
 91.213.50.107
 75.143.236.149
 75.191.246.70
-72.80.249.39
-72.53.103.56
 72.82.136.90
 72.140.137.221
 72.133.240.122
 72.15.201.15
 79.13.248.144
-79.137.197.181
-79.137.35.198
 79.37.204.67
 79.92.15.6
 79.166.120.168
 79.169.119.144
-173.255.211.88
+79.137.35.198
 173.239.94.212
-173.209.185.159
-173.238.202.233
 173.18.126.3
 173.212.193.249
 2.227.146.124
@@ -759,9 +624,6 @@
 2.88.219.187
 2.99.47.198
 2.8.39.175
-2.103.22.24
-31.41.244.60
-31.41.244.15
 31.160.167.250
 31.190.68.212
 61.3.185.132
@@ -770,10 +632,8 @@
 65.49.20.70
 65.49.20.76
 65.49.20.69
-65.49.20.91
 65.190.156.10
 65.127.225.18
-65.25.116.200
 76.80.180.154
 76.127.192.23
 76.20.42.45
@@ -784,7 +644,6 @@
 77.247.183.152
 77.247.183.151
 77.83.36.43
-77.232.37.114
 77.126.81.208
 77.129.205.124
 78.69.251.252
@@ -799,7 +658,6 @@
 81.129.134.53
 81.250.33.243
 81.156.198.115
-81.69.198.61
 82.223.21.224
 82.121.237.106
 82.121.73.56
@@ -823,19 +681,15 @@
 88.152.182.39
 99.229.146.120
 99.238.106.45
-99.254.117.30
 108.6.249.139
 110.232.117.186
 119.59.103.152
 124.156.222.254
-124.223.86.128
 131.106.168.223
 142.93.138.68
 142.119.40.220
 142.161.27.232
-151.237.76.117
 151.32.168.124
-151.80.89.233
 168.121.116.143
 172.105.128.12
 172.105.226.75
@@ -843,7 +697,6 @@
 172.86.122.167
 172.90.139.138
 172.104.251.154
-176.123.0.55
 176.142.207.63
 176.151.15.101
 176.137.187.206
@@ -856,9 +709,6 @@
 198.235.24.11
 198.235.24.171
 198.235.24.149
-198.235.24.39
-198.235.24.12
-198.235.24.21
 198.199.93.153
 198.199.92.190
 198.199.114.126
@@ -874,52 +724,34 @@
 205.210.31.131
 205.210.31.167
 205.210.31.186
-205.210.31.132
 205.210.31.57
-205.210.31.143
 205.210.31.41
 205.210.31.56
 205.210.31.128
 205.210.31.2
 205.210.31.180
-205.210.31.174
-205.210.31.8
-205.210.31.38
-205.210.31.137
-205.210.31.161
-205.210.31.155
 205.215.20.201
-212.32.237.91
 212.32.237.101
 212.24.98.99
-212.33.201.187
 216.218.206.113
 216.218.206.72
 216.218.206.106
 216.218.206.85
 216.218.206.76
 216.218.206.93
-23.82.12.30
 23.251.102.74
-23.251.102.90
-23.90.160.122
-23.90.160.130
 23.106.160.137
 23.108.57.200
 23.240.47.58
-23.227.198.232
 130.211.54.158
 24.199.90.150
-24.142.218.202
 24.28.121.122
 24.228.132.224
-24.64.114.59
 24.49.232.96
 106.75.164.143
 106.75.79.129
 106.75.81.218
 106.75.32.201
-158.228.217.76
 163.44.196.120
 60.246.119.114
 60.217.75.70
@@ -933,20 +765,12 @@
 13.231.235.64
 113.118.13.192
 191.232.208.253
-90.55.65.118
-90.89.95.158
-90.104.22.28
-90.78.85.59
-90.221.5.105
-90.4.98.190
-90.162.45.154
 100.16.107.117
 100.6.8.7
 105.103.27.80
 105.103.50.1
 105.103.33.225
 105.111.45.51
-105.184.161.175
 105.184.161.242
 105.105.232.103
 120.48.29.38
@@ -965,11 +789,13 @@
 71.31.101.183
 71.67.96.151
 73.230.28.7
-73.29.92.128
-73.60.227.230
 73.22.121.210
+90.89.95.158
+90.78.85.59
+90.221.5.105
+90.4.98.190
+90.162.45.154
 97.242.150.244
-98.145.23.67
 98.30.233.14
 98.147.155.235
 98.187.21.2

La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 1258 - 1146
yoroi_malware_level2.dns


La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 25 - 23593
yoroi_malware_level2.ipset


+ 93 - 218
yoroi_suspicious_level1.dns

@@ -9,12 +9,104 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+aergstroma.gbtefxryt7-95m32xerr6rv.p.temp-site.link
+usaafeb1.web.app
+securec0nnect.com
+servicios--bgaliciaar.repl.co
+crimsonblanddatabases.galiciaara.repl.co
+servicios.bgaliciaar.repl.co
+a5b94334-7664-4808-9609-96fbfa0976e2.id.repl.co
+crimsonblanddatabases--galiciaara.repl.co
+6bffc059-4149-4375-975f-31ba6a805a1a.id.repl.co
+banehtejarat.com
+curut.swwgl.com
+654fdaf6-40dc-43e6-a3e7-afbb40e6fe60.id.repl.co
+www.haydi-kampanyaya-login-basvuru-com.ml
+www.haydi-kampanyaya-login-basvuru-com.kampanya-destek-basvuu-onlany-com.online
+2f4c2c68-9436-4d3f-87a2-741a12185eaf.id.repl.co
+bancogaliciahomebanking.galiciaar22.repl.co
+www-denizbank-acik-gov-tr.ml
+bancogaliciahomebanking--galiciaar22.repl.co
+care-desktop-support.dnset.com
+darwizargali1--galicianoarg.repl.co
+36987fac-be2a-4b89-8f8c-2ccbe7419264.id.repl.co
+seguridad--galiciahr.repl.co
+substantialtastynanotechnology.asmfgalicia.repl.co
+servicios--galiciahl.repl.co
+ca6ab6e2-d934-4e38-a88b-930ca12f0825.id.repl.co
+allneew.co.vu
+servicios.galiciahd.repl.co
+servicios.galiciahh.repl.co
+servicios--galiciahd.repl.co
+servicios--galiciahh.repl.co
+usaanovv.web.app
+freiburgmadison.com
+blttrex-platformsglob.com
+premiumseguritystart.shop
+reimancor-openivoices-log-app-huo5a.ondigitalocean.app
+www.metamaskmerge.live
+informationdata69667.com
+winterbox22.com
+dependentevilarchives.cuidadswe2.repl.co
+yylfdli.cn
+informationdata34626.com
+att-105194-106333.weeblysite.com
+informationdata59239.com
+informationdata29437.com
+x11.fr
+cloud-reconncet-9f0e.czwl05dv.workers.dev
+accounts-google.euskodata.com
+restaurerleluxe.versacommerce.de
+icscards.online-identificatie.royal-crown.info
+nanang.rumahbolte.com
+online-aidatiniz-iade-devet-com.kampanya-destek-basvuu-onlany-com.online
+contoh.cs-resmi.com
+microsoft.com.metasoption.com
+attmailonline.boxmode.io
+trackingbuddy.click
+abortive-act.surge.sh
+swanshotel95849.meetspace.sa.com
+bancolombia.asistenciabanco.repl.co
+hartleyoukn.top
+hz-zhuangshi.com
+intesasanpaolo.com.cemiterioaraca.com
+mynab-alert.com.au
+ntflixabonnement.fr
+pancakzeswap.com
+postal-myusps.com
+pushtan-sparkasse.de
+reumebremese.web.app
+twistersa.co.za
+usdelivery.us
+wellsfargo-fraud-alert.com
+www.vietcomvcb.com
+edilsmart.com
+grippingthirdcache689678.bienvenidoslmxd.repl.co
+informationdata15386.com
+www.netbank.cba-commbank.com.au.ecodeafrique.com
+y3byt-pqaaa-aaaad-qemaa-cai.raw.ic0.app
+oldschool.com-os.net
+runescapeplay.com
+yahoo-107331-100191.weeblysite.com
+dev5477.d3p2hisi0cjl2e.amplifyapp.com
+green-dust-fb08.1340389217.workers.dev
+merhababendeniz.tk
+vual.in
+texasdisabilityaid.com
+reomondremese.web.app
+denizacikkv2.tk
+sibylig.bond
+onlayn-basvuru-iform-kampanyan-com.ml
+acikdenizmobilv2lz.ml
+e234164ba82be.arpanmshah.com
+ganador27txt.ganador27.repl.co
+wvv-denlhome-ssl-l0gin.com
+bdsdiemphat.net
 264532223743082.ga
 amazdn.live
 worried-lead.surge.sh
 portal.kumarconnects.com
 activationsecurpass.fr
-bdsdiemphat.net
 anxiouscol--233112.repl.co
 ab85dd93-7deb-4730-82d0-cd910d6e6ba9.id.repl.co
 mortifiednano--012312.repl.co
@@ -39,7 +131,6 @@ trackinger.info
 attnetwork101.boxmode.io
 aol-100766.weeblysite.com
 pionexglobal.com
-intesasanpaolo.com.cemiterioaraca.com
 confirmardatos.info
 pl.inv-program.site
 loginunph.com
@@ -80,30 +171,9 @@ confirma.reactivalotuyo.repl.co
 lightheartedenormousdevelopments.dami87.repl.co
 my-site-105124-105889.weeblysite.com
 client0orange.a.cdnify.io
-bafkreiems77lmmyz4a3zxacpij6xfttdbta24fjgpimymhmtyw42b3a5cq.ipfs.w3s.link
-bancolombia.asistenciabanco.repl.co
-e234164ba82be.arpanmshah.com
-edilsmart.com
-grippingthirdcache689678.bienvenidoslmxd.repl.co
-hartleyoukn.top
-hz-zhuangshi.com
 informationdata96948.com
-pancakzeswap.com
-reumebremese.web.app
 svorus.buzz
-umstellen.ctmortgagerates.com
-usdelivery.us
-wellsfargo-fraud-alert.com
-wvv-denlhome-ssl-l0gin.com
 www.informationdata25486.com
-www.netbank.cba-commbank.com.au.ecodeafrique.com
-www.vietcomvcb.com
-x6s599.webwave.dev
-mynab-alert.com.au
-ntflixabonnement.fr
-postal-myusps.com
-pushtan-sparkasse.de
-twistersa.co.za
 pubgmclaren.com
 www.dd365s.net
 moon-5f45.efdhd.workers.dev
@@ -113,7 +183,6 @@ haydi-bakalim-kampanyan-bizde-online-iade-900tl-com.kampanya-destek-basvuu-onlan
 denizmobilgirisc.net
 denizmobil-com-tr.net
 denizmobilegiris.net
-informationdata15386.com
 21a25b68-6231-4a53-b4fe-abe719d324c2.id.repl.co
 post.updatecom.co
 nowg.top
@@ -147,7 +216,6 @@ daisy-wealthy-ocelot.glitch.me
 www.xn--intagram-owb.com
 botondesolucionesyasistenciaenlineadecorreodeactivacion.enlace365.repl.co
 www.3659e.com
-bulkpvaservices.com
 asidirabichhof.blogspot.ba
 www.qtxrwzn.xyz
 asidirabichhof.blogspot.sn
@@ -170,7 +238,6 @@ bafkreidhkuysicwtoadai6lwz4uhrsccn2ldoo3ahxffetokohig25prvu.ipfs.w3s.link
 ceramaret.offkce.ch
 www.3659x.com
 www.3659z.com
-acikdenizmobilv2lz.ml
 minuetsd43.weeblysite.com
 info650283562.ru
 www.tvtermtradings.com
@@ -238,7 +305,6 @@ qgo.co.za
 sirtronic.co.za
 parstec.co.za
 retailimpact.co.za
-stylishcelebrations.co.za
 shadowsigns.co.za
 webdiva.co.za
 projectorcentral.co.za
@@ -606,7 +672,6 @@ metroblock.com.au
 secure01-verifyme-redirect.net.root.sx
 espace-clientsfr.com
 sp-tan.de
-ganador27txt.ganador27.repl.co
 vvvietcombank.com
 pmgc2022.com
 zei.gognai.xyz
@@ -698,193 +763,3 @@ opensea-tools.net
 seguridaddeoutlook-1.caanceell.repl.co
 old-firefly-ec6a.fefefefef.workers.dev
 business-page-appeal-12-085091.web.app
-itt.helukable.biz
-verification.faqserv.com
-rcube111114.web.app
-bancolombiawebco.confimar5.repl.co
-kaijoseitokai.com
-www.xnwsqch.xyz
-amazonzo.club
-opensea.io.intersuiteshotel.com
-netbank.cba-commbank.com.au.ezix.in
-metamask.io.verfypage.in
-xn--fcebook-pwa.vn
-att-expired-4de4.att-expiredms1.workers.dev
-fwrd-canadapost.ca
-bmedonline.club
-viabcp.registroinmediato.com
-sideways-calico-spear.glitch.me
-bamlombiacool.bamt.repl.co
-opensea.io.brazukadamarines.com
-loko.gaylordlhotels.com
-statisticdiscord.com
-wrappedupingolf.com
-hot.binalz.gq
-agonizingclientsideagent.bancolombia2111.repl.co
-ups-myorder.ca
-bancaolombiacoweb.validar05.repl.co
-mtulnks.us
-canadapost-fwd.ca
-3659002.vip
-wvvwportalpersonasseguro.ydavivenda.repl.co
-tender-satoshi.45-88-108-231.plesk.page
-officenewlink44-123ddns.pollarda.com
-www.openscrypt.com
-facebooknewupdate.learn99.xyz
-officenewlink44.123ddns.com
-bancolombia1.bancolomb1.repl.co
-polisheddoc01.dropboks.workers.dev
-alpacaranchhouse.com
-canadapostals.ca
-officednsfaq.instanthq.com
-bancolombia-1.bancolomn.repl.co
-bancolombia5.bancolomn.repl.co
-www.prepgem.com
-coloffres.com
-business-live.live
-uniswap-token.org
-acikdenizkredim.cf
-www.emergencyredalert.com
-cd7573bd-c72b-4478-9fa1-31e7e6eaa477.id.repl.co
-seal-app-k2wcm.ondigitalocean.app
-verify-email-e8a07.web.app
-pubg-newevenet.liv3.icu
-www.officenewlink44-123ddns.pollarda.com
-acikdenizkredimv2.ml
-mac-s00tla202.c1.biz
-acikdenizkredim.gq
-verificar-identidadoutlook.microsoftlogi.repl.co
-sbc-102723.weeblysite.com
-hjcbhjdsjbsd.weeblysite.com
-a-108748.weeblysite.com
-wfargosecurity.com
-netflix-new.com
-enminutos.abrelasqui.repl.co
-portal.daviviendawebs1.repl.co
-www9.amlozbbnou.pitmado.cn
-bancolombiainfosas.ftv10.repl.co
-acikdenizkredimv2.tk
-secins.nimacode.dev
-bancolombia.bancolomn.repl.co
-luxuriousincrediblesite--9878452.repl.co
-appeal-status-10058946773156.web.app
-ejgy.bglandholdings.org
-convertbp.skom.id
-bet810.net
-alaskausa.sbs
-stearncommuninty.ru
-ebank.tnmog.com
-sk-login.de
-myvjsmarket.com
-gobjudicial.royalwebhosting.net
-nitrodicsord-giveaway.com
-acikdeniz-mobilbasvuru-onay.cf
-naiweddingfavors.com
-netflix.protocode.xyz
-whatsapp.im-chat.workers.dev
-help-center-ac.constantcontactsites.com
-rbbfcu.link
-fmjysg.webwave.dev
-t4lxo0.webwave.dev
-www.facebooknewupdate.learn99.xyz
-togg2023denizsubegiris.tk
-statsdiscord.com
-valuesbot.com
-verbraucher-zentrale-spk.de
-online-prozess-spk.de
-sk-verbraucher-zentrale.de
-acikdenizkredim.ga
-gede.bgmic6.cyou
-luxuriousincrediblesite.9878452.repl.co
-my-site-109358-103029.weeblysite.com
-dfvrfbhj.weeblysite.com
-c73ef34f-27b1-421b-a9f1-717320c7e57d.id.repl.co
-projetonew324.com
-428860a8-2423-4774-90c1-21302b0e72a8.id.repl.co
-dl3bel.webwave.dev
-dgydusuk-wsdgucjhk-102949.weeblysite.com
-my-site-109810-106991.weeblysite.com
-000000web.repl.co
-acikdenizkredim.tk
-acikdenizkredim.ml
-uspsps.tk
-freeclub7054.16-b.it
-eiztumqz.tk
-apps-login-response.appsnetworking.com
-binaanresolllv.click
-app-fbscurebb.zzuctyvisv-e92495lzd6kr.p.temp-site.link
-eventsofficialz.xyz
-bkddfll.net
-chicosoft.com
-psd2-umstellung.kinirytravel.com
-my-tmobile.tk
-grapefruit14394445.brizy.site
-galliicciaonlinee.ingresaya.repl.co
-spinbox24.com
-infotrackerbot.com
-danskepankki-fi.com
-rdyautx.cn
-bireyseldenizsubehizmet.tk
-www.fromdarknesstolight.co.za
-bireyselsubesizgirisdeniz.ml
-get-a-glance.com
-sgfdgdertgf.weeblysite.com
-tpw-netflexo-luoggian.2ix.ch
-denizv7otoaracekiliss.net
-www.informationdata128738.com
-bt-10cvgbgb566gg.weeblysite.com
-informationdata35848.com
-informationdata98122.com
-www.informationdata46588.com
-rbrfcu.info
-polkadotwear.com
-mark8er.com
-authdigitalcle.web.app
-karenxxxxxxxxxx11.web.app
-karenxxxxxxxxxx10.web.app
-karenxxxxxxxxxx9.web.app
-supportsector15.com
-njiex.pages.dev
-wetr-sfer.pages.dev
-main.d1sm4qqrm5nth5.amplifyapp.com
-login-att-login.boxmode.io
-maconsoledigital.web.app
-szaxcv.ykbrkr.cn
-promo-teams.com
-data-app.site
-cnfdelivery.site
-www.21981-4426.s3.webspace.re
-humanres9020.edns.biz
-www.humanres9020.edns.biz
-metaldetectorvideos.com
-u1821480.plsk.regruhosting.ru
-appcentralpanam.co.vu
-elmstreetfurniture.com
-appsbins.qfhv5wsook-ewx3ldk9m6zq.p.temp-site.link
-pubgmfreecollet.2waky.com
-pitmado.cn
-apk2wch0.dzm6cg6zn4slf.amplifyapp.com
-karenxxxxxxxxxx5.web.app
-www.365okq.com
-karenxxxxxxxxxx7.web.app
-8059a925-e9c2-48eb-9c7d-32a30acf6503.id.repl.co
-theposhhouse.com
-acerbiplatchglance.web.app
-bddkiade.online
-ups.package-tracking-tool.huikaihao.com
-access-afcu.web.app
-www.netbank.cba-commbank.com.au.ezix.in
-ups.package-tracking-tool.udijhx.top
-uykktckn.ga
-dream1now.com
-www.nfcuhelp-secured.authorizeddns.us
-uykktckn.ml
-uykktckn.gq
-ups.package-tracking-tool.tksfbn.top
-meta-review-details-109816137.web.app
-afcu-x.web.app
-mycommsec-app.support
-olqn.top
-meta-review-details-1290004.web.app
-c1382069.ferozo.com
-login-support-users-identity.com

La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 496 - 299
yoroi_suspicious_level2.dns


Algunos archivos no se mostraron porque demasiados archivos cambiaron en este cambio