root 3 anni fa
parent
commit
a77635dad6

File diff suppressed because it is too large
+ 80 - 72
nethesis_level3.netset


+ 86 - 86
whitelist.global

@@ -16,88 +16,6 @@
 62.149.128.160
 8.8.8.8
 8.8.4.4
-188.166.28.60
-64.227.71.52
-159.65.197.198
-165.22.192.54
-188.166.38.161
-188.166.41.33
-188.166.72.23
-134.209.91.165
-206.189.103.231
-104.248.207.61
-64.225.71.170
-174.138.5.216
-188.166.83.149
-188.166.24.24
-167.71.79.14
-165.22.199.90
-161.35.153.110
-161.35.159.44
-142.93.131.113
-161.35.95.211
-165.22.198.217
-167.99.210.125
-165.22.197.37
-157.245.67.209
-167.172.45.223
-159.223.225.41
-206.189.110.255
-167.172.38.137
-167.99.212.195
-161.35.93.220
-167.99.42.32
-161.35.144.29
-188.166.68.157
-159.65.198.26
-134.122.60.110
-164.90.206.223
-174.138.2.121
-167.99.40.250
-64.225.71.115
-167.71.11.73
-157.245.78.190
-104.248.205.106
-167.71.73.171
-178.62.247.86
-104.248.196.207
-134.209.93.118
-178.62.238.76
-64.227.75.231
-178.62.219.148
-206.189.99.25
-128.199.48.140
-64.227.64.202
-134.209.192.110
-178.128.240.183
-188.166.21.67
-167.71.76.184
-188.166.126.240
-143.198.131.11
-142.93.134.189
-134.122.51.143
-161.35.157.15
-178.62.204.160
-161.35.88.180
-167.99.43.70
-188.166.112.196
-178.128.254.180
-159.223.215.77
-161.35.155.65
-178.128.251.154
-167.71.78.214
-164.90.194.17
-188.166.70.107
-178.62.222.164
-188.166.36.213
-188.166.46.90
-178.128.254.64
-167.99.46.183
-104.248.194.112
-167.172.38.97
-188.166.69.24
-188.166.103.15
-159.65.192.201
 159.223.213.107
 188.166.85.76
 188.166.91.192
@@ -123,7 +41,6 @@
 188.166.97.199
 188.166.17.142
 178.62.240.117
-164.92.152.178
 167.71.10.219
 188.166.55.209
 206.189.101.65
@@ -131,6 +48,7 @@
 188.166.11.226
 188.166.2.236
 188.166.95.89
+164.92.152.178
 146.190.225.217
 174.138.8.207
 178.62.240.195
@@ -150,7 +68,6 @@
 206.189.11.13
 134.122.56.28
 161.35.150.89
-164.92.215.172
 188.166.92.136
 167.71.8.45
 206.189.2.123
@@ -158,6 +75,7 @@
 167.71.71.43
 167.99.219.82
 64.225.71.102
+164.92.215.172
 146.190.228.120
 104.248.94.94
 104.248.93.140
@@ -184,16 +102,98 @@
 167.99.211.228
 159.223.237.208
 188.166.104.96
-188.166.91.196
 104.248.87.189
 134.209.202.70
 164.92.222.171
 206.189.0.226
 167.172.34.27
 134.122.63.204
+188.166.91.196
 159.223.218.42
-134.209.81.137
+64.227.71.52
+159.65.197.198
+165.22.192.54
+188.166.38.161
+188.166.41.33
+188.166.72.23
+134.209.91.165
+188.166.28.60
+206.189.103.231
+104.248.207.61
+64.225.71.170
+174.138.5.216
+188.166.83.149
+188.166.24.24
+167.71.79.14
+165.22.199.90
+161.35.153.110
+161.35.159.44
+142.93.131.113
+161.35.95.211
+165.22.198.217
+167.99.210.125
+165.22.197.37
+157.245.67.209
+167.172.45.223
+159.223.225.41
+206.189.110.255
+167.172.38.137
+167.99.212.195
+161.35.93.220
+167.99.42.32
+161.35.144.29
+188.166.68.157
+159.65.198.26
+134.122.60.110
+174.138.2.121
+167.99.40.250
+64.225.71.115
+167.71.11.73
+157.245.78.190
+164.90.206.223
+167.71.73.171
+178.62.247.86
+104.248.196.207
+134.209.93.118
+178.62.238.76
+64.227.75.231
+104.248.205.106
+178.62.219.148
+206.189.99.25
+128.199.48.140
+64.227.64.202
+134.209.192.110
+178.128.240.183
+188.166.21.67
+167.71.76.184
+188.166.126.240
+142.93.134.189
+134.122.51.143
+161.35.157.15
+178.62.204.160
+161.35.88.180
+167.99.43.70
+188.166.112.196
+143.198.131.11
+178.128.254.180
+159.223.215.77
+178.128.251.154
+167.71.78.214
+164.90.194.17
+188.166.70.107
+178.62.222.164
+188.166.36.213
+161.35.155.65
+188.166.46.90
+178.128.254.64
+167.99.46.183
+104.248.194.112
+167.172.38.97
+188.166.69.24
+188.166.103.15
+159.65.192.201
 142.93.134.27
+134.209.81.137
 134.209.136.185
 134.209.206.121
 143.198.250.79

+ 276 - 414
yoroi_malware_level1.dns

@@ -9,583 +9,490 @@
 # Category        : Malware
 # Confidence      : 10
 #
+qxcrbliabignczlmuc.com
 esb7cg54.ru
+187ddbf44e.com
 xqzdkh56y.ru
+eikwseakgayaigia.org
 0.takecontent.net
 018396a7.cholibrium.icu
 0af06f28.aceneurotonix.ltd
 123-movies.cloud
-1.mo03.biz
-1.a0bd418a3623a7bbe.salesforce.news
-1421894023.tutarama.ru
-1443028221.tutarama.ru
-1440889672.tutarama.ru
 1436284004.tutarama.ru
-1792187375.tutarama.ru
-1d09b54f.sarahthelwall.uk
+1443028221.tutarama.ru
 1578770639.tutarama.ru
-16delivered.hungzo.ru
+1421894023.tutarama.ru
+1440889672.tutarama.ru
+1680742966.coridas.ru
 2108402645.tutarama.ru
-2gop.ig9fkgih10.com
-22197e2a.sarahthelwall.uk
-36.designed.dafilas.ru
+1d09b54f.sarahthelwall.uk
 41decrease.hungzo.ru
-3rdeyedeveloper.com
+22197e2a.sarahthelwall.uk
 41612dc5.api.microsoft-ns1.com
+3rdeyedeveloper.com
+2gop.ig9fkgih10.com
+36.designed.dafilas.ru
+493.lorv.org
+424281077.tutarama.ru
 45.departments.dhysor.ru
+36233.www.dfsmp.com
 4delicacy.hungzo.ru
-493.lorv.org
-520jj.net
 595d6534.sarahthelwall.uk
-36233.www.dfsmp.com
 626124626124.626124.neshuafoods.com
 9.approvedurls7.info
 82.departments.dhysor.ru
 71descendant.erinaceuso.ru
-956507363.tutarama.ru
-a4730ea1de089a5a7a16e7b03f9ab37cce.salesforce.news
-a0a435a4243a6a4d0.salesforce.news
-a64ffd68110687c0c.a51803a0aff7f01bc.salesforce.news
-a5a429a928ba9bbfb.salesforce.news
 93destitute.sohrabt.ru
-a0d8d15e5bdba2dc1a0e03a31e3176b9ae.salesforce.news
-a0a435a4243a6a4d0.a5a317dd9c0072f1f.salesforce.news
-a5byyes.ataipb8idb.dkogar.cl
 98823.dailycrick.com
-a86ce1b9adab83eff-a04ec08919b3e3737.salesforce.news
-abc53a377356d43a2a95aad110e73ef5da.salesforce.news
-aca4914148c93e7bf.azure.salesforce.news
-ac4666304d04cc165.northamerica.salesforce.news
+956507363.tutarama.ru
 accesso-restrizione.com
 abashinstructor.com
+ab.gl
 acikdeniz-mobilsube-kredi.cf
-adb21a0180336f2d9ae87dfb60e5c15f37.salesforce.news
-ad405353fde3f90a4-a9dc4b6921b9a8c8f.salesforce.news
 aggregationmulecontribution.com
 agsig.org
-aliastryalways.com
 albumsignaturerequested.com
-allaboutmygarden.com
-alignedcoach.marduk.app.theplaygroundcase.net.brickell100.com
+all-deal.com
+aliastryalways.com
 api.us3.app.liongard.com
-app01ade2c98c556a289d2.salesforce.news
-appserverafe45ecba6f45190a.salesforce.news
 anenttatting.com
 ascensionmonksurround.com
 astronomyisawesome.com
-asmad6befe05ae275a37.salesforce.news
+axozo.xyz
 audio-edge-ey5nr.ams.s.radiomast.io
-attarbesets.com
 autoconfig.daprofesional.com
-axongear.com
-bafybeid3fxryldbeoppklbamgdor2guyi3xh3atdb2kmrfa3j3m4ezjwaa.ipfs.dweb.link
-bakiret.com.sillanwali.pk
 balokyalokd.com
 battlegrounds-kr.co
-basementfloorsealant.com
 bbm.dailycrick.com
 baleiambwee.com
+bafybeiecyu5jykm4nufzctz2elgt6m3j4hxzdjyxlg64mrthpiepgpre3u.ipfs.dweb.link
+basementfloorsealant.com
 bedmantaximan.com
 bestfreecounter.com
-bigger96.allow.endanger.hokoldar.ru
 beststudwelders.com
-best-dark-web-sites-for-cc.ru
-bless.anakembok.de
-birthtothreeipswich.org
+bakiret.com.sillanwali.pk
+bigger96.allow.endanger.hokoldar.ru
 birlerskababs.com
-brainsevior.live
+best-dark-web-sites-for-cc.ru
 bmqgyia.u4tx4qrhnd.dkogar.cl
-bly1hf.com
-blogsme.link
-bsd02.acaf015aaf6fbac40.salesforce.news
-bsagij.com
-branizericing.net
 bricklawgroup.com
+bsagij.com
 btsbomb.com
-capitalinvestmentprivate.com
 cabronsiblog.blog.test.ssl.ecolado.top
-cache3a928596ba28c8a8b4.salesforce.news
-catchinfo.org
-cc639.com
+captivateholscrook.com
 cc-landing.com
 cdn.xn--cumpleaosdefamosos-t0b.com
 cdn.jquery-cdn.com
-chr82.zhubint.ru
+centurybending.com
 cf4d883f.sarahthelwell.co.uk
-claim.approvedurls7.info
 cleanskycloud.com
-close42.dzhehant.ru
-close97.dzhehant.ru
+cn.shunde-qd.com
 collectsyour-neworder.com
-contactsupportdesk.com
-corientass.com
 comprehendbighearted.com
-concealbeakerdough.com
 computeria.ru
-cn.shunde-qd.com
+concealbeakerdough.com
+corientass.com
 contanti.org
 cpcontacts.breakfast-bites.com
-cutegirlsporn.com
-cust35ab18a4306f0432e17.salesforce.news
-cust115-a40e29919cdc185ca.salesforce.news
-crpcruynxxc.com
 cragconcluded.com
-dailythesouthernpost.com
+crpcruynxxc.com
 daniellaharel.com
-desty.page
-db.vpn.org.cn
-desponddietist.com
-demos.a3257364aab5f5c32.salesforce.news
 delivery.imaginedbyjess.co
-discover.zizoze.com
-dentamasmulia.com
-diportal.ru
-disbaramulla.com
+desponddietist.com
 devotedfootprintsinterstate.com
+dentamasmulia.com
 disabledincomprehensiblecitizens.com
-dominos.bafdili.com
+disbaramulla.com
 dk.7pkf6.chileinsumos.cl
 dnsseed.bitcoin.dashjr.org
+dominos.bafdili.com
 download.100sofrecipes.com
-dragon.a96a1f31c369b1d59.salesforce.news
 dramasoloist.com
-drjeremynicholson.com
+easynofaxingloans.com
 drownprice.co
-eagles-astoria.com
+dsqagosckj.martfashion.in
 dump-card-means.ru
-dyeingjaun.com
-easynofaxingloans.com
-edureviews.net
-englishpetals.com
+ecomboos.com
 elthamwildcats.com.au
-ep1btc.com
-etherscxan.link
 errresound.com
-events-a309d62b2ed658b0c.salesforce.news
-eveningproclamationarched.com
-excelmedicalpk.com
 exclusivett.site
-filesoftox.info
+eveningproclamationarched.com
 farfehtch.com
-flameofhumanity.com
-fiz4tl.com
-freedownloadhq.com
+filesoftox.info
 fpgroup.us
-fqdky.yvooobfzx.com
-forums.dashhacks.com
 for84.dzhieyi.ru
-fwsm1-ac27efc0de33ef907.salesforce.news
-fw-2.procompany.top
-gatewaytoworld.com
+forums.dashhacks.com
 gainde.qanet.gm
-gceog.com
-geodaljoyless.com
 ggypg.onderndbe.club
-go.getfreadom.com
-go.9t5.me
 go.approvedurls7.info
 gitlab.gitlab.git.git.coingeckjo.click
-goog.evelopedsev.autos
-goog.istakechau.autos
+gnam.spk-update-terminal.com
 golo.fm
 gooo.com
-goniforas.com
-gnam.spk-update-terminal.com
-grammarlychrome.com
-grenzenloskochen.erne.com
-gscare.cc
-hardtotake.com
+gratertiedbubble.com
+habithate.com
 handbagcordial.com
 hatchetsiegecleverness.com
 hockeyunderstatementspinal.com
-home.googlemobilecenter.info
-holity.fr
-homer.ae2b111133ea59c91.salesforce.news
-iciao.gr
-i59f62b50.versanet.de
 hvms.kxzuvrtnj.com
-ibm.acb5c7400015c8e37.salesforce.news
-iceboxlitre.com
-huyontop.com
-iftwivjguf.thewholesale.market
-imagelinetechnologies.com
+home.googlemobilecenter.info
 idesalud.com
-interior.ru
+iftwivjguf.thewholesale.market
+iceboxlitre.com
 intentionsplacingextraordinary.com
-j2.galerix.ru
-jpivxtsxpkn.com
-junetko.de
-jteuyf.top
+interior.ru
 jkeur-d8808.web.app
+junetko.de
 jsc5-129.mailidemo.secure.ecolado.top
-kcsz.info
+jklolbwzk.yvooobfzx.com
 k2car.ro
-kefulz.com
-kbnfm5.com
-kansascity.ad3d05d762e279e0d.salesforce.news
+kcsz.info
 kangqiangyiliao.com
 kerattogeist.com
-klubfiatstilo.pl
-konasaphie.com
-knowingeffectiveresource.bancoprovinar.repl.co
 kristenbelltattoos.com
-lambrechtsbats.com
-lanaffda1669c87a4493.salesforce.news
-laboratorytests.org
-legacyshave.com
-ledgerlivesupdate.com
+kidhumiliateessay.com
+klubfiatstilo.pl
+lagunaplayhouse.us
 lewdstars.online
-letempstg.com
 legitdumpsites.ru
+links.detectionrole.one
 lndth.zpwctoqpd.com
+lpukkuvmte.smtpserviceproviders.review
 livealifeyoulove.com
 m4ufree.kim
-luxchecker.pm
-lpukkuvmte.smtpserviceproviders.review
 lsthlsy0u.link
-luhlbixiarh.velocity.company
 ltjss.net
-mail.antsnor.beauty
+mahkotamaju.com
+luxchecker.pm
+mail.ampionsh.monster
 mail.bestfloridapublicadjuster.com
 mail.axasegurosagenciacadiz.com
-mahkotamaju.com
 mail.boostaros.rest
+mail.cesgiedop.monster
 mail.coiuikne.beauty
-mail.bladderknives.online
-mail.dronair.beauty
 mail.dventure.monster
+mail.dronair.beauty
 mail.homdeptoz.com
 mail.improvestore.yachts
-mail.lerseyfe.monster
 mail.kerrcialu.monster
-mail.litglasviw.beauty
+mail.lerseyfe.monster
 mail.mecanica83.com
 mail.lluisallullevents.com
-mail.ollective.beauty
-mail.mpetitive.monster
-mail.nstpictures.jp
-mail.meditatio.monster
 mail.normesduie.beauty
+mail.mpetitive.monster
 mail.surveyextras.email
 mail.skeptifat.beauty
-mail.wafminbs.com
-mail.usabilidrone.pics
 mail.warnblack.com
-mainportmedia.com
+mail.wafminbs.com
 mail.waexrsui.monster
-maletasgreenwich.com
-managementa51f5e38d38d91b3b.salesforce.news
+mail.usabilidrone.pics
+mastergamenameper.club
 maloprotect.xyz
-marormesole.com
-maps.root.org.cn
 marshagalea.com
-mastergamenameper.club
+matmechanic.com
 meh.onelittle.top
 matryoshkaby.com
-matmechanic.com
-melongetplume.com
-mattioliwoods.verajamesgc.org
-mathecorge.com
-miguidolacel.com
-midwest.a56c6f1e4c20fb853.salesforce.news
 mobile.affairalert.com
-mobilehomedoors.us
-modart-paris.ir
-mtu-a5741e2763b64248b.salesforce.news
-mrgreen.ws
-motimok.cfd
+modernfashionideas.com
 mpm.dailycrick.com
 mulrqulhdd.evarest.biz
+my.delivery-package.slb-9.com
+mrgreen.ws
 myfood.silverspringfoodproject.org
 myjeascsb.myjoscb.rfba.top
-myjaeasosb.myjoaceecb.ryjzhp.top
-multecihaklari.org
-my.delivery-package.slb-9.com
 n63b16.info
+neckar-group.de
 neighborhoodpassage.com
-necessaryratio.pro
 new-goordian.com
-newlinepackers.com
+news-cazefo.cc
+news-heceye.cc
 news-wumepa.com
 nkrkynwksh.brainylearn.ch
 ns13.npdns.net
-ns1.pearhouse.com
-ns2.uberaddis.com
-ns2.pearhouse.com
 nudistcrop.com
 octcbmzvi.zpwctoqpd.com
 onrunningshoes-greece.com
-org.a5a317dd9c0072f1f.salesforce.news
-oricopdtwli545ven4lcs0.musops.live
+o7car.com
+outlooks.one
 page.deeperhard.com
+oricopdtwli545ven4lcs0.musops.live
+open-internet.nl
 organexpectationsmaintain.com
-pabzlp.biz
 passionsakinsola.net
-pc01a9e72057512269beb.salesforce.news
-pc31afc32161b44cca1f9.salesforce.news
-pc29aa6b94e1d631878c9.salesforce.news
-pcsszerviz.hu
-peacocktypewriter.com
-peeredfoggy.com
+pabzlp.biz
 permissioncornshrine.com
-platform.trendingsubject.com
+peacocktypewriter.com
 pltw.com
-pics123.pw
-pollingsagacioustopple.com
-planetbleedsagacious.com
-pretty.intention52.homopt.ru
 poseyoung.com
+pollingsagacioustopple.com
 potsalonescuresrvieonecom-bbd7ee.ingress-florina.ewp.live
-procrackfile.com
-primerewardz.com
-progress.cashdigger.com
-profileaaf603f86698f075d.salesforce.news
+pretty.intention52.homopt.ru
 pronunciationawarenessunemployment.com
-quatanghoanglong.com
 pussyboo.com
 qwwnvw.irevibele.com
-rbfccu.zhongrua.com
-rastledundo.com
 rankertorten.com
-rg1t8ioux.teafatting.quest
+rbfccu.zhongrua.com
 rescuemac.ru
-rivianchargerinstallation.com
 responsebody8.dzhehant.ru
 releasedgrievedeye.com
 resourcescleopatra.com
+rg1t8ioux.teafatting.quest
 retireblotch.com
-role.tongift.shop
 robertjaso.com
 rootsweb.blog
-roambedroom.com
+root.ns1.ns2.kalarada.com
 rsntcgoowyxsu.com
-s1656690294407.listellos.com
-s298.a5261f99cd6381908.salesforce.news
 s4036075871068.listellos.com
-root.ns1.ns2.kalarada.com
-sacicsancscascen.brjqsy.top
+s1656690294407.listellos.com
 saciecacsaacn.pynwaj.top
 saciscacsaacn.qaeftk.top
-saciseacssace.bmfobi.top
-sacisoacsnace.imfgws.top
 sacisoacsnace.xkbwcu.top
 sacisoacsnace.wpkbmz.top
-sacisssccsnace.otpyob.top
 sacisssccsnace.iqgaah.top
-saismiami.com
+sacisssccsnace.otpyob.top
 safemacpc.xyz
+saismiami.com
 sarwa.co.za
-sasiscacsaacn.cqwnqk.top
 sasiseacsnace.imfgws.top
 sasisesccsnace.eefurs.top
-sasisesccsnace.iqgaah.top
-sasissacscace.kcjtvn.top
 sawariyacargopackersmovers.co.in
-schseels.com
+sasissacscace.kcjtvn.top
+sasisesccsnace.iqgaah.top
+secure-access-22cf4qeheh9a435c.gate33.xyz
+secure-access-30593uotl9lk2218.gate43.xyz
 secure-access-54818uo9la4ej354.gate43.xyz
 secure-access-5091ej2a3ira0d35.gate43.xyz
-secure-access-22cf4qeheh9a435c.gate33.xyz
-secure-access-7acfbibuop21z6c9.gate43.xyz
 secure-access-d5bcdftkty9nt1da.gate33.xyz
 secure-access-9e846uoqduqfy9d1.gate43.xyz
-secure-access-eab39p2fv9zuqd9c.gate36.xyz
-secure-access-e705cp2h96ja2522.gate36.xyz
-services-team.onomsblinks.com.ng
-send24.hoanzo.ru
-servers.a5afc1e0051fac057.salesforce.news
 seolto.club
+services-team.onomsblinks.com.ng
+semicoloninadequacypleasantly.com
 shandongbaobiao.cn
 shop-cvv-carder.ru
-shein-ok.website
-shop.computing-age.com
-silencilhardmale.online
-simultaneouslyagreeingcontradiction.com
-sickdeal.net
 sinensis.ru
-smartsegment.ru
+simultaneouslyagreeingcontradiction.com
 skechers-portugallojas.com
+smartsegment.ru
+skinneroverturn.com
 so21.american-public.org
+so61.american-public.org
 so44.american-public.org
 so35.american-public.org
-so61.american-public.org
-solutiontrackers.com
-socketbuild.com
 soulproduction.co.id
-stata1ea3c0cf2bbdeb77.salesforce.news
 steampwoered.com
-springfield.a057722a7bc304b8e.salesforce.news
+st7impianti.it
 steelcitysafe.org
-suivi-chronopost-support.com
-suppliers-a94dad2daed6cfea7.salesforce.news
-surfsl.com
+sufficientridiculevenison.com
 support.patientportals-login.com
 suqccirvqu.loyaltees.club
-swagger.a6da4e74d2d46c556.salesforce.news
-suvffg.yvooobfzx.com
 svfwyyxzbjrd.com
 synergy.do
-system-aa936779f1c63d855.salesforce.news
 teknolojiweb.net
 techsmashwru.ru
-techbloggerji.com
-tinhightech.net
-themasystem.dailycrick.com
-thehrstrategies.com
-testsql-a9e72057512269beb.salesforce.news
 telete.in
-thisservermustbeprime.com
+tenemos.com
+thehrstrategies.com
 tjrnltjexv.76pp.site
-tntl4ever.com
-tolerant-technology.co.uk
-track.pnicnik.live
+thisservermustbeprime.com
+tolerableinflectionkazan.com
+tradingpancreasdevice.com
 toolsthwartgrim.com
 totalcoolblog.com
-trendingsubject.com
+track.pnicnik.live
 trancrafts.com
-trafiq.trade
 traitorpenthouse.com
-tradingpancreasdevice.com
-umarketz.net
-us-npjrbi.us
-unusual.branizericing.net
-us-west.lazerpenguin.com
-vandervalkhotelparijs.com
-video.hellhorn.shop
+utgameserver325.opendns.be
 vakifkatilimkredimnerede.net
-verploton.ru
+us-west.lazerpenguin.com
+us-npjrbi.us
 vardosvideo.com
-vcorzmduzmn.biz
-utgameserver325.opendns.be
-volumenthol.beauty
+verploton.ru
+uygew83.co.vu
 virmer.com
-vpn.salesforce.news
+volumenthol.beauty
 vm.o4k4z.chileinsumos.cl
 volunteerboutique.com
-vqkkajbyuwy.biz
-wap3a4dbe241f1d0ba87e.salesforce.news
-vzsqbn.top
-weathe.com
-webcamsluts.cfd
-w8-webdoc.salesforce.news
 webdisk.mysoulcircle.in
-webmail.golegend.store
-webmail.lifeinsuranceprograms.com
+webcamsluts.cfd
 webmail.etereosounds.com
+webmail.golegend.store
+vqkkajbyuwy.biz
 webmail.xtralink.my
-webservices-software.com
-webseomasters.com
-wenzhoupeizi.cn
+webmail.lifeinsuranceprograms.com
 websmuybaratas.com
-woodmoreestateshoa.com
-wilfridamendment.com
-worldtimes1.xyz
-woncherish.com
+while46.zhubint.ru
+wenzhoupeizi.cn
+wv.sizzn.salocinuy.com
 www.accesso-restrizione.com
 www.adolescen.beauty
 www.aceeoa.aescooen.hvcgrs.top
-www.advb9fyxlf2v.com
-www.attractiv.monster
-www.aeeesan.ascececon.ixrnff.top
-www.airraining.co
 www.aprende-ingles-ya.bodybuilding-update.com
 www.aceeean.aecsoecon.nsbjrf.top
-www.au-poay.aeucoaom.xybvbs.top
+www.aeeesan.ascececon.ixrnff.top
+www.attractiv.monster
 www.babycouture.in
-www.costcosurvey.email
+www.carseatcoversdirect.com
+www.au-poay.aeucoaom.xybvbs.top
 www.dailysarkariupdate.com
 www.contactforhelpnumber.com
 www.dfaenvironmentalcorp.com
-www.dev-a954a7d8e5912517d.salesforce.news
-www.carseatcoversdirect.com
-www.breadbasket.host22.com
-www.frossweddingcollections.co.uk
 www.edelweissranch.com
 www.geruient.monster
-www.git.enter.pay-id634986.top
 www.gastroenterology.edoriuminternational.com
-www.git.git.gitlab.911-shop.zakandaiev.com
-www.goldsurvey.email
+www.git.enter.pay-id634986.top
 www.gitlab.oa.polkastqrtter.com
-www.greywish.com
 www.gitlab.git.git.git.git.mail6.turobzorchik.ru
-www.heartlandracingco.com
-www.jefebing.monster
 www.hjtd.com
-www.hongbotv.com
-www.huzhoupeiziguanwang.cn
 www.immobiliarestella.com
-www.margoun.com
-www.maykke.com
-www.mb102.com
+www.hongbotv.com
+www.jefebing.monster
 www.lmshousing.com
-www.langlasses.com
+www.mb102.com
 www.mon-assu-vital.info
+www.langlasses.com
 www.mikeidea.com
+www.myjcecsceb.myjaascecb.xakv.top
 www.opera-historica.com
-www.northamptonassessor.us
-www.myra-simon.com
 www.news.techmahesh.in
-www.myjcecsceb.myjaascecb.xakv.top
-www.plb4a96a1f31c369b1d59.salesforce.news
 www.r-e-b-u-s.ru
-www.sacicesccsnace.gtplhd.top
 www.saciceancssascen.vrsjxk.top
 www.sacicsancscascen.pzaujf.top
-www.saciesancscascnn.wssuzy.top
 www.saciesacscace.pynwaj.top
-www.saciseancssascen.wdvbgs.top
-www.sacisesccssace.rkiglj.top
-www.sacisoancsnascen.kfjzvl.top
+www.saciesancscascnn.wssuzy.top
 www.sacissacscace.tmerzz.top
+www.sarda.gratis.es
+www.saiseoan-co-jp.accaordecoe.zbpeld.top
 www.saisoen-co-jp.aesesnse.dpzuhj.top
-www.sasiseacsnace.gtplhd.top
 www.seo101.net
-www.shopping.a6dc8bc2fbf1fe6a5.salesforce.news
-www.surveyhistory.com
-www.silencilhardmale.online
-www.sportaction.eu.pel.mk
 www.stephcurry.us
-www.thecarnivoredietcoach.com
 www.sleamcomumnity.ru
-www.tiespecialist.com
-www.thegummybear.com
-www.twopera.net
+www.surveyhistory.com
+www.tesla2drop.net
 www.thefineyounggentleman.com
-www.vc.fastmeets.com
-www.weathe.com
-www3.advb9fyxlf2v.com
-www4.advb9fyxlf2v.com
-www5.advb9fyxlf2v.com
+www.thecarnivoredietcoach.com
+www.us-qtnh.us
 www.yesiwantit.com
-www69.abab240adfd66ccad.salesforce.news
-www6.advb9fyxlf2v.com
-www.windowserrorhelps.com
-www7.advb9fyxlf2v.com
-xbid.online
-xtfrfdjb.casny.org
-wx97.com
+www.vc.fastmeets.com
+www.yell.ge
 xissidearm.com
-ykmkr.server-on.net
-yn3344.com
 yziagwfy.info
-zippy.a371d0291fdc6e5e0.salesforce.news
 zomnwvhqmw5f7cbap3ycizomnwvhqmw5f7cbap3yci.theplayoftheweek.com
-zqwdp.iyuvbogym.com
-dsqagosckj.martfashion.in
-links.detectionrole.one
-qjfokdzhkyjf.com
-o7car.com
-ab.gl
-bafybeiecyu5jykm4nufzctz2elgt6m3j4hxzdjyxlg64mrthpiepgpre3u.ipfs.dweb.link
-mail.ampionsh.monster
-news-heceye.cc
+asussupportnumber.com
+bafybeid2nqm7eyyylj6fwkubvrcssm43jblgc674vwoxtcjmadh2zmuleq.ipfs.w3s.link
+aparvibices.com
+cab.mykfn.com
+blazegrana.com
+bekadi.org
+countessbridge.com
+earhlink.net
+getobject92.kiang.ru
+ged-lenos.com
+garrymania.ru
+mirror.rsdsl.com
+qiopfoundation.org
+nupharbakongo.com
+u21drwj6mp.com
+triflingzenithenergetic.com
+www.prozkohls.shop
+www.coronavirus-realtime.com
+www.dstainton.delta-enterprises.com
+b.virginsmart.shop
+aurumenergia.com
+1402682147.coridas.ru
+axes.com
+bargaincontainers.co.za
+cashiercrevice.com
+ervets4pets.com
+doropey.ru
+kfun888.com
+creativeoutreach.blog
+global-app.phx-iot.com
+gianpaoloparodifoto.com
+escambau.org
+logixstone.com
+ifatpfrntij.ws
+metalasfuck420.com
+quranfromcovertocover.com
+omhealingindia.com
+oqssydkw.ws
+rbxgamespro.com
+octagonlodge.com
+qlmtccvmtp.ws
+perilastronaut.com
+qcmebuzmr.ws
+taxfuturology.com
+server.escortsmexico.mx
+speakenglishcenter.com
+tigclients.com
+top10community.com
+store.dontkinhooot.tw
+stick.travelinskydream.ga
+tf.pzjdn.salocinuy.com
+tknhwydk.ws
+tgg.clinic
+syhovus.com
+uldkurven.com
+turpentineseminarconfer.com
+txrdtexv.ws
+wkgga.ws
+uhmxmvjwup.com
+uninvitedcurly.com
+toyys.tmxljbvgz.com
+wilfulkilometre.com
+usa-torents.com
+while81.deyyu.ru
+www.adoiueio.monster
+www.rebelliondisk.shop
+www.whoswhoplatinum.shop
+www.highjfvkfbfchfxvbfcvhbfhk8.ml
+www.highjfvkfbfchfxvbfcvhbfhk6.ml
+www.highjfvkfbfchfxvbfcvhbfhk4.ml
+www.ndshelter.org
+www.highjfvkfbfchfxvbfcvhbfhk7.ml
+ws.balajituitions.com
+wwwdcaa9744a92f2e415bfcaeef4e5f0a5d.8d6aadbdbb206e0b8b4e8d1c482cc4db.dcaa9744a92f2e415bfcaeef4e5f0a5d.8d6aadbdbb206e0b8b4e8d1c482cc4db.semi-tool.com
+x5-fintech.name
+zufoloodylize.com
+www.saiaeecn-co-jp.acaecesen.jqxqrg.top
+ac7946fd.planemove.com
+84dentist.hungzo.ru
+babyreva.com
+aysmot.ws
+divideoutdoors.com
+flqtvucru.kxzuvrtnj.com
+coaxcopenhagen.com
+dingdb.me
+auxshqf.ws
+eyewitnessstreak.com
+jerenga.click
+hqnwha.xyz
+gplggzme.ws
+jxajfriizzs.ws
+idorenu.top
+loidjony.net
+dcmwae.com
+lipfqkyc.ws
+mail.hqnwha.xyz
+mobile.xswipes.com
+nmvkff.ws
+produbancopayphone.dq-cloud.com
+russiangirlsonline.life
+secure-access-9d393sy2t8r4k3f8.gate36.xyz
+t-mobiie.theworkpc.com
+order.yodobashi.comloginindex.html.xsnnr8.cn
+usbwnctci.ws
+uus3.pulmad.ee
+skierseatmileage.com
+www.bookexpocast.com
+vwbyheyywg.ws
+xn--m3cdgb1h0af7ola4b.com
+blogsme.link
+shein-ok.website
 bdgvocdl.ws
 cassidyday9639.homes
 cxxllsbe.ws
 fgcdjbylba.ws
 fyqtmmo.ws
-youtune-xiao.com
-zzdabaoji.com
 xmzzhxkuznckx.com
 bwhvwcnr.ws
 etwibyh.ws
@@ -611,62 +518,23 @@ woywkmam.ws
 www.silknaturals.com
 xisdavhycjy.ws
 zbcdrgwoifi.ws
-akbhnatbk.ws
 aphmp.ws
-aveihav.ws
 elurl.ws
 faqisimtyr.ws
 gijqxqb.ws
-ijmxnp.ws
-iyarfb.ws
-jebrp.ws
-jeizvkvggig.ws
 jlyqkkeyzd.ws
-kcjxuf.ws
 kzlaxsmww.ws
-kydfvyeted.ws
 kqlgmnjc.ws
 mbkorpkb.ws
-phsksiye.ws
-qpkin.ws
 qygxvbucfm.ws
-rfinsrylo.ws
-takomwdfhh.ws
-tqauzis.ws
 vigmkjjsr.ws
 vrvhaulnqtk.ws
 wdzjly.ws
 wgmnxjbb.ws
 wfeexzscg.ws
 www.itemboxpubg.com
-xcsfhufxn.ws
 xzeiegkwyei.ws
-ypxocqby.ws
-zheetj.ws
-zchitqv.ws
 bit-bonus.gives
-dayxmdny.ws
-gvhwuh.ws
-igdyjtrq.ws
-ilxbfagmjc.ws
-issxljyssnn.ws
-jqngbfyjvot.ws
-kuauoshf.ws
-lawjyebj.ws
-ljnisyw.ws
-lmentkhclf.ws
-lvfiix.ws
-marayv.ws
-pxvcxvdhln.ws
-pykxbcfhng.ws
-qymhe.ws
-sttkmr.ws
-tpqmcsxrn.ws
-ukqqntvrl.ws
-xgfdc.ws
-xgvsaivsgrj.ws
-yqxylrjquva.ws
-zmzlrlqtmzb.ws
 chechoa.com
 onlynetwork.top
 optinetwork.top
@@ -676,40 +544,19 @@ fuzetec-tw.com
 alonsorojasmudanzasnacionales.com
 ftp.alonsorojasmudanzasnacionales.com
 dana-world.com
-mail.buerseut.cam
-one.flowdeal.xyz
-www.git.git.git.gitlab.git.ce1e96ikbfgsqp2epj90.bscslcan.info
-callback.22-709.sg1cloud.com
-elvnetworks.com
-fofapohelo.com
-getinteriorartstudio.com
-m4x.bbcinternationalnews.com
-mtaxservice.com
-paloaltocloud.online
-pabowape.com
-rest1.bbcinternationalnews.com
-service-3bbcy0mh-1312435925.bj.apigw.tencentcs.com
-service-bum9h8g2-1310216285.hk.apigw.tencentcs.com
-service-gcnqmcp3-1307217324.bj.apigw.tencentcs.com
-system-view.top
-upd.kasperskyupdates.com
-www.usts.site
-xazuzucem.com
-z3a1.ssndob.cn.com
-buroher.com
-cs.imalloc.cn
-danalogs.ru.xsph.ru
-scriptslibs.mcdir.me
-plutonglatov.ru.xsph.ru
-apple.gps-33.top
-ccvtpoeupldidorkfwdw.com
 fjsvowkh.com
+ccvtpoeupldidorkfwdw.com
+fosphllwsxhapyew.com
 gjbjyfynihtfnpmi.com
 pgsuheymwaxxtevhinx.com
 ndgkbtdjoxyqah.com
 mifxlympab.com
+tavdbeguvddvgcgkkjeax.com
+ugwupuiqdsk.com
+qrrkicsyqoviwpnyei.com
 vhdtiyxswqjdw.com
 wtlplyrqrbgp.com
+kamintrewftor.com
 deibknvgfqyaupr.com
 tvkviglitracrxd.com
 irlvihxehqqfcrv.com
@@ -725,10 +572,22 @@ rdnyskxjlifp.com
 vyfsxqnneor.com
 rhcmitisdtxyfomtke.com
 hmkqxsiyxbxmspx.ru
-bertfxxetssggbl.com
-dghnmiauhjoifbxmxl.com
-xtapctoxjpoetylmdn.com
-uuruegdkdnlwc.com
+callback.22-709.sg1cloud.com
+cs.imalloc.cn
+elvnetworks.com
+fofapohelo.com
+m4x.bbcinternationalnews.com
+mtaxservice.com
+pabowape.com
+paloaltocloud.online
+rest1.bbcinternationalnews.com
+service-3bbcy0mh-1312435925.bj.apigw.tencentcs.com
+service-bum9h8g2-1310216285.hk.apigw.tencentcs.com
+service-gcnqmcp3-1307217324.bj.apigw.tencentcs.com
+system-view.top
+upd.kasperskyupdates.com
+www.usts.site
+z3a1.ssndob.cn.com
 kudnxj21.top
 kudjcs34.top
 tyslia13.top
@@ -740,8 +599,9 @@ tysozr11.top
 kudbcn31.top
 tysxri32.top
 pabmab02.top
-kudcfe312.top
-kudokq112.top
+xazuzucem.com
+getinteriorartstudio.com
+buroher.com
 tysyge28.top
 tystiu56.top
 tyswdf46.top
@@ -799,12 +659,14 @@ moreqc06.top
 tysdyo510.top
 morxpa04.top
 moracd07.top
+kudokq112.top
 kudidn210.top
 kudqay33.top
 kudziv29.top
 kudoqw39.top
 kudfyk310.top
 kudgfs23.top
+kudcfe312.top
 supernetwork.top
 mederaogs.com
 meganetwork.top

+ 7 - 87
yoroi_malware_level1.ipset

@@ -14,7 +14,6 @@
 2.83.12.243
 2.50.47.109
 5.135.159.50
-5.161.177.194
 5.11.45.181
 5.61.55.34
 5.61.37.48
@@ -27,7 +26,6 @@
 8.219.160.65
 31.41.244.167
 31.184.192.44
-31.13.195.81
 31.167.254.199
 31.207.46.124
 37.222.44.37
@@ -49,11 +47,9 @@
 46.249.38.141
 46.161.27.19
 59.93.16.203
-61.139.17.156
 62.204.41.6
-62.204.41.252
-63.141.242.45
 63.141.242.44
+63.141.242.46
 64.207.172.247
 64.20.42.26
 64.62.197.62
@@ -92,13 +88,11 @@
 64.62.197.131
 64.62.197.129
 64.62.197.136
-64.62.197.80
 64.62.197.77
 64.62.197.78
 64.62.197.219
 64.62.197.113
 64.62.197.194
-64.62.197.72
 64.62.197.69
 64.62.197.45
 64.62.197.111
@@ -117,27 +111,20 @@
 64.62.197.188
 64.62.197.191
 64.62.197.43
-64.62.197.17
-64.62.197.30
-64.62.197.87
 64.235.39.82
 64.52.169.174
-64.44.135.198
 65.49.20.122
 65.49.20.73
-65.49.20.72
 65.49.20.92
 65.49.20.68
 65.49.20.108
 65.49.20.67
 65.49.20.79
-65.49.20.104
 65.87.120.114
 65.30.139.145
 67.205.162.175
 67.231.51.214
 67.143.81.209
-68.96.47.2
 68.63.180.151
 68.239.42.16
 69.175.242.212
@@ -167,21 +154,18 @@
 74.82.47.14
 74.82.47.42
 74.82.47.39
-74.82.47.7
 74.50.66.90
 75.161.233.194
 75.115.14.189
 76.11.14.249
 77.247.183.150
 77.247.183.152
-77.247.183.151
+77.247.183.155
 77.83.36.43
-77.73.133.72
 78.189.161.83
 78.163.33.44
 78.100.230.10
 78.17.157.5
-79.127.42.129
 79.19.239.130
 79.61.46.17
 79.141.169.220
@@ -195,15 +179,10 @@
 82.151.125.200
 82.11.242.219
 82.223.21.224
-83.222.8.68
 83.7.54.186
-83.79.150.24
-84.21.172.205
 84.17.52.135
-84.219.213.130
 84.215.202.22
 84.32.128.36
-85.193.83.110
 85.245.221.87
 85.231.105.49
 86.122.120.75
@@ -233,8 +212,6 @@
 87.236.176.62
 87.236.176.33
 87.236.176.152
-87.236.176.178
-87.236.176.172
 87.223.84.190
 87.223.89.157
 87.223.91.46
@@ -263,7 +240,6 @@
 95.163.237.12
 95.234.166.74
 95.217.221.146
-103.186.66.83
 103.114.163.197
 103.27.203.197
 103.5.132.93
@@ -281,7 +257,6 @@
 108.170.31.115
 108.62.118.70
 108.62.141.221
-109.239.60.72
 109.149.148.184
 109.177.245.176
 109.206.243.141
@@ -292,32 +267,26 @@
 114.132.168.133
 115.68.227.76
 118.123.1.31
-119.148.41.198
 119.82.121.63
 119.59.103.152
 122.185.43.226
 124.43.129.91
 124.122.55.68
 124.220.178.26
-125.71.214.63
 128.199.16.165
 128.14.225.228
 128.14.209.234
-128.14.133.58
-128.14.134.134
 128.14.233.176
 128.1.248.34
 128.1.42.245
 128.31.0.34
 128.31.0.39
 131.188.40.189
-137.184.194.129
 137.184.232.238
 137.184.59.144
 137.184.72.73
 137.184.18.113
 141.98.87.124
-141.98.6.102
 141.255.166.2
 142.93.210.152
 142.93.144.238
@@ -341,11 +310,11 @@
 159.89.202.34
 162.241.189.135
 162.142.125.7
+162.142.125.220
+162.221.192.26
 168.80.174.2
 172.104.249.218
-172.104.11.51
 172.104.251.154
-172.105.128.11
 172.105.226.75
 173.255.211.88
 173.82.206.184
@@ -377,8 +346,8 @@
 182.162.143.56
 185.180.143.140
 185.180.143.141
-185.180.143.81
 185.180.143.142
+185.167.96.146
 185.167.96.150
 185.224.128.2
 185.153.199.169
@@ -391,7 +360,6 @@
 185.4.135.165
 187.63.160.88
 188.165.87.98
-188.166.238.42
 188.152.189.223
 188.54.99.243
 188.48.123.229
@@ -412,8 +380,6 @@
 192.241.212.152
 192.241.212.248
 192.241.212.126
-192.241.212.247
-192.241.212.228
 192.241.200.121
 192.241.200.104
 192.241.200.194
@@ -435,21 +401,14 @@
 192.241.194.144
 192.241.194.73
 192.241.201.104
-192.241.201.75
 192.241.198.224
 192.241.197.8
 192.241.197.80
 192.241.197.30
-192.241.197.252
 192.241.210.31
 192.241.208.82
-192.241.208.203
 192.241.195.65
 192.241.204.96
-192.241.211.84
-192.241.211.238
-192.241.203.184
-192.241.140.229
 192.137.101.205
 192.137.101.46
 192.137.100.98
@@ -475,16 +434,11 @@
 198.199.95.11
 198.199.95.159
 198.199.95.71
-198.199.95.208
-198.199.95.19
 198.199.92.127
 198.199.93.135
 198.199.93.114
 198.199.118.88
-198.199.104.235
-198.199.103.251
 198.235.24.57
-198.235.24.42
 198.235.24.56
 198.235.24.38
 198.235.24.178
@@ -492,14 +446,7 @@
 198.235.24.33
 198.235.24.153
 198.235.24.55
-198.235.24.131
-198.235.24.141
-198.235.24.25
-198.235.24.173
-198.235.24.134
-198.235.24.144
 198.23.149.111
-198.23.206.25
 199.58.81.140
 201.208.139.250
 201.210.107.223
@@ -518,20 +465,12 @@
 205.210.31.49
 205.210.31.153
 205.210.31.54
-205.210.31.22
-205.210.31.55
-205.210.31.163
-205.210.31.41
-205.210.31.171
-205.210.31.52
 206.189.140.98
 206.189.139.26
 206.189.28.199
 206.81.22.147
 206.191.152.37
 206.191.152.58
-208.67.105.162
-208.67.105.148
 209.141.36.231
 209.141.36.112
 209.141.49.169
@@ -551,10 +490,6 @@
 216.218.206.75
 216.218.206.83
 216.218.206.123
-216.218.206.68
-216.218.206.72
-216.218.206.90
-216.218.206.114
 216.45.55.3
 216.45.55.30
 216.219.80.208
@@ -566,7 +501,6 @@
 104.152.52.223
 104.152.52.96
 104.152.52.153
-104.152.52.125
 104.128.116.123
 104.217.8.100
 104.219.233.41
@@ -598,7 +532,6 @@
 139.59.56.73
 139.59.126.41
 139.162.7.59
-139.99.83.24
 139.60.163.161
 143.198.37.195
 143.244.165.134
@@ -609,7 +542,6 @@
 157.245.46.44
 157.245.46.197
 157.245.193.98
-157.230.93.107
 153.126.146.25
 153.92.5.27
 164.92.143.142
@@ -623,8 +555,8 @@
 167.172.112.67
 167.172.199.165
 167.172.253.162
-167.248.133.63
 167.248.133.60
+167.94.138.120
 167.71.168.118
 170.64.130.229
 170.64.138.14
@@ -632,14 +564,11 @@
 170.64.148.186
 170.64.146.250
 170.64.146.193
-170.64.156.17
 170.187.164.181
 171.225.184.119
-171.225.184.115
 171.225.184.77
 171.225.184.79
 171.225.184.145
-171.225.185.114
 171.225.185.101
 171.225.185.9
 171.225.185.81
@@ -655,8 +584,6 @@
 197.92.135.188
 197.204.18.30
 197.242.150.244
-24.199.86.144
-24.199.84.69
 24.199.80.130
 24.199.80.138
 24.199.80.110
@@ -666,7 +593,6 @@
 3.73.117.245
 23.248.184.131
 23.227.198.246
-23.95.247.234
 23.106.215.82
 23.106.215.230
 23.106.223.1
@@ -678,9 +604,6 @@
 35.178.210.205
 35.171.47.239
 45.137.64.40
-45.79.181.251
-45.79.181.94
-45.79.181.223
 45.55.41.10
 45.227.254.49
 45.227.254.48
@@ -707,8 +630,6 @@
 47.243.236.221
 47.93.60.109
 51.11.211.224
-51.79.211.201
-51.79.237.37
 51.161.73.194
 51.83.254.187
 54.37.131.158
@@ -739,8 +660,6 @@
 71.79.170.148
 101.0.33.111
 101.50.0.91
-42.193.155.84
-15.235.131.89
 120.61.1.185
 120.55.77.27
 163.44.196.120
@@ -754,3 +673,4 @@
 97.242.150.244
 160.16.142.56
 166.62.145.54
+42.193.155.84

File diff suppressed because it is too large
+ 900 - 654
yoroi_malware_level2.dns


File diff suppressed because it is too large
+ 123 - 54
yoroi_malware_level2.ipset


+ 217 - 336
yoroi_suspicious_level1.dns

@@ -9,6 +9,223 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+sg.internetbakiing.com
+fadwal.my03.com
+validatemetamaskxx.dedyn.io
+mizuhobonk.jp
+mabe.canjear-ahora.com
+mizuhobank.erce13.com
+office365.ridgewaytechnology.co.uk
+test-1.chinamoonrestarant.com
+www.assistant-compte-sgfr.com
+lojarenner.shop
+amazon-jp-com.top
+luckyladyscharm.de
+rakoten.co.ip.xybzzbgn.tk
+100fmusic.com
+postal-sessionbach0025.web.app
+ffjhbhhb.jsbhjhsghbff.repl.co
+haolive.tv
+www.365ok44.com
+rbfcuxxxtexas.dedyn.io
+116ks.cc
+happy-rubin.45-142-114-254.plesk.page
+bienvenidolinea.insdusgt.repl.co
+arc9823421.royalwebhosting.net
+mttbmobileservice.web.app
+se-cu-ri-ty-bi-e-n-line-a.c1.biz
+jkfdjsfljdkjlfldljgjldfjlgj.web.app
+skype-chat.live
+trimurtipharma.com
+onmicrosoft.bundesfinanzminislerium.de
+www.bofaindex.tecnointelligence.com
+square-pine-5019.on.fleek.co
+webpageconsulting.net
+hawesconstruction-ohio.com
+bofaindex.tecnointelligence.com
+myctzn-alert.myftp.org
+amazonlink.cn
+opensea.io.offer.fuelclean.cl
+connexion.espaceca.fr
+monespaceprosocietegenerale.com
+opensea.io.offer.fundacober.cl
+woerner.motexsa.com
+eclipse-gear.com
+gjexc.top
+sbitryfh.wwwaz1-ss106.a2hosted.com
+agencenote009.web.app
+pvbjimubile.com
+pourreveni-tchato.web.app
+steamcommunlty.store
+facebook-1a2b3c.glitch.me
+wwxzxrandolphsxiked.dedyn.io
+www.gggbet365ok.com
+orca-app-p7kle.ondigitalocean.app
+1569561730141.ml
+5050505023464.ml
+dev.casaderincon.com
+1569561730143.ml
+5050505023452.ml
+36363425789214518.ml
+5050505023465.ml
+5050505023463.ml
+36363425789214540.ml
+5050505023458.ml
+1569561730145.ml
+rakoten.co.ip.xybzzbgn.gq
+5050505023451.ml
+5050505023454.ml
+1569561730144.ml
+cancel47679595-binance-com.web.app
+meine-postbank-de-75077.web.app
+www.sumancoast.com
+sign-in-to-btfhdfhehewh73837j.weeblysite.com
+www.immobiliere-iyadh.tn
+shareswana.d64qz7yk9ff2d.amplifyapp.com
+serverinformation.mattse8789.repl.co
+informaciongalicia.comprobargal.repl.co
+www1.softbnok-jp.mrfzda.xyz
+galiciaeminent--ericalopez4.repl.co
+ppgzor.shop
+datacity.sk
+junkhousesd.com
+desafioonline.com
+dookls.tk
+bjhzxcjll.net
+cancel56399676-binance-com.web.app
+cancel05938326-binance-com.web.app
+eposcardcoojp.monster
+zaynxzy18.cf
+bimcellkxd.net
+medsmailer.com
+picturenew.b0tnet.com
+whtap.pro
+ww8acessodocliente.shop
+www.gyvd.xyz
+www.unisonsouthayr.org.uk
+access-device-request.com
+dear-shade-cloud.glitch.me
+gonudener.icu
+instagram-remove.pages.dev
+secvredmtlogin.com
+www.portail-assure.fr
+rexco.alphagg7.cyou
+vwvcbdiigiibank.vietcoombank.com
+cxvbdszfgf.top
+confirm-messges.address-match.workers.dev
+cusrlqau.tk
+zaynxzy18.tk
+2dogsandatabby.info
+10mgbimcell.net
+d44f.notif-chatt.workers.dev
+myworkingthing.h4bd9098ayhcsascvv.workers.dev
+mfacebookveritify.line.pm
+20223656.com
+commdank.top
+3656a.net
+infoespcustomer.com
+wellsfargonline.info
+rullor.com
+dbsgpo.top
+www.accessed-bankinofamerica.workplaceradio.com.ng
+223microsoftcdn.linkpc.net
+3659sss.com
+3659vvv.com
+commonwealth-log.in
+www.troudya.com
+whtappscc.me
+mrfzdk.xyz
+stearmcomnunity.ru
+attmonticeproag.web.app
+dbspaylah.vip
+whtap.top
+fotoshop-instagram.b0tnet.com
+3tmg.com
+princesensi.top
+iskaim.com
+brimoobrri.apppss.asia
+layanantarifbriterbaru.rlinpay.co
+suncoast2022bonus.com
+myzxcvbnm.ga
+us-amazon.net
+oa-encrypt.com
+2dogsandatabby.com
+www.mmskairdrop.com
+dbspaylah.live
+auspost.consignment-status-online.com
+vxxbvw.top
+www.xiaoyuanqiang.xyz
+www.agrlcqle.site
+101dbspay.top
+well00.ml
+luckspiv.com
+taiju.tw
+www.utahbankindepentservice.run.place
+agencesg-societegenerale.fr
+facebook-checkpoint-policy-violation-social-network5.ml
+login-made-ln-chlna-com.glitch.me
+dappmetro.pages.dev
+dev3825.d3nknc1mrkp5o5.amplifyapp.com
+vvcbdigiiibank.vvwietcombank.com
+livee-emaill-ajuda.node.cloudlets.zone
+www.lokozo.com
+app.crononodes.com
+lannccellot.co.vu
+kartparaempezar.com
+3656hh.com
+link-junonetworkvalidate.live
+javapro-577bc.web.app
+cancel11074903-binance-com.web.app
+feefhporch.xyz
+servicios.bancogaliciahd.repl.co
+sebung.at
+cancel04172902-binance-com.web.app
+www.opensea.io.offer.futuroltda.cl
+cancel86651127-binance-com.web.app
+95bimcell.net
+cancel01788399-binance-com.web.app
+cancel16616624-binance-com.web.app
+cancel82422488-binance-com.web.app
+cancel50144070-binance-com.web.app
+terererwlle.top
+eupphyju.ml
+trust-wallet.noramelk.com
+avanticorporate.elenoxsteel.com
+support-mm-wallets.ru
+bergluke.bond
+www.codtz.org
+103187154.co.vu
+document.files-downloads.workers.dev
+webmail-105188.weeblysite.com
+www.maskdao.site
+confirmdata55158user.shop
+confirmdata55155user.shop
+bunince.online
+confirmdata58825user.shop
+confirmdata55160user.shop
+www.confirmdata55162user.shop
+confirmdata55169user.shop
+opensae.cyou
+opensae.club
+confirmdata55166user.shop
+confirmdata55165user.shop
+delivery.attempt.intexlinkbd.net
+cloudylapwing.build067.wpsandbox.app
+xybzzbgn.ml
+tumkullanicilarabmwx5baceklisideeeznzv6basvuru.net
+apple-team.net
+365666n.cc
+systemathailand.com
+de-agb-session-ojf2f4a.xyz
+rakoten.co.ip.xybzzbgn.ml
+schoenat.dz4i6dmjgn-ez94ddnyz4mr.p.temp-site.link
+bafybeiebnfacngbd544hnnbx45ylieqkw6zlcwogd3g7izhnp7libneboq.ipfs.dweb.link
+www--wellsfargo--com--lt49329d48d6c.wsipv6.com
+update.infotariflayanan.com
+za011102206ced.click
+oldtimesmc.com
+j7401g.webwave.dev
+pancakeswap.trading
 meta-business-page-19798012.web.app
 dynocheck.info
 cuentasonlineaccessbanking.com
@@ -51,7 +268,6 @@ conseillercode.blogspot.com.ee
 conseillercode.blogspot.com.uy
 ooko-e35b1.web.app
 www.secure-revoke-web.com
-access-device-request.com
 steanncommuniliy.site
 cancel11202930-binance-com.web.app
 cancel03893688-binance-com.web.app
@@ -80,7 +296,6 @@ ebank.tmpob.com
 www.apple-id-services.itech-server.us
 bimcellbro.net
 bjmcellhaktan.net
-picturenew.b0tnet.com
 www.opensea.io.offer.cranecare.cl
 opensea.io.offer.drcastilloroig.cl
 dcaridting.com
@@ -91,12 +306,6 @@ dhlhr.webauthor.com
 conseillercode.blogspot.ba
 purchaseevent.xyz
 dcaridmiute.com
-medsmailer.com
-dear-shade-cloud.glitch.me
-mjigosagri.web.app
-oldtimesmc.com
-secvredmtlogin.com
-ww8acessodocliente.shop
 vfffrf.com
 pubgbedavaskin.gq
 tffds.com
@@ -120,7 +329,6 @@ www.canpost-adjust.com
 metamaskxx.dedyn.io
 whtappstt.pro
 xybzzbgn.gq
-whtap.pro
 cancel36935767-binance-com.web.app
 cancel70948671-binance-com.web.app
 www.kctfvn.com
@@ -133,7 +341,6 @@ kdg.doesntexist.com
 freememberfree02.ml
 servicesclientsbe.com
 rakoten.co.ip.eupphyju.ml
-www.portail-assure.fr
 ark-egy.net
 os.aupsd.xyz
 xybzzbgn.tk
@@ -163,7 +370,6 @@ www.acikdenizmobilv2lz.tk
 www.acikdenizmobilv2lz.ml
 mnb.mobi
 b392spxb.pages.dev
-www.gyvd.xyz
 osmosisbusiness.com
 bafybeieohlo7uztawc4ozexmwj4gawieq2juymsyod2v6ms5tzcnls22ly.ipfs.cf-ipfs.com
 microsoftt.boxmode.io
@@ -186,18 +392,14 @@ cancel62875667-binance-com.web.app
 interruption-paiement-netflix.com
 cancel70447652-binance-com.web.app
 thermovies.com
-www.unisonsouthayr.org.uk
 1devie2o.pages.dev
 metamaskwallejustverify.run.place
 fcsouthwest.com
-pancakeswap.trading
 www.metamask.cash
 www.stamp-royalmail.com
 ourtime.dashboard-accounts.workers.dev
 microsoft-datamaturity.noisehq.nl
 anzsecure-log.com
-kependable.top
-instagram-remove.pages.dev
 237792366283625.ga
 vddew-a4395.web.app
 problem.co.vu
@@ -348,7 +550,6 @@ helpcenter-servicesde24.net
 helpcenter-servicesde24.com
 urfckgo-rza-1.ml
 cancel91694461-binance-com.web.app
-bimcellkxd.net
 cancel16648112-binance-com.web.app
 n3rtg-kiaaa-aaaad-qepqq-cai.raw.ic0.app
 assistantsteampowered.com
@@ -373,7 +574,6 @@ testnewversionbnp.surge.sh
 netfix.news
 user3254324verify.xyz
 tcheodore.top
-gonudener.icu
 kecpipolanter.top
 zachariahmei.bond
 womphreyi.top
@@ -466,7 +666,6 @@ vkath.ru
 ff-memnber-garena.vn
 bafybeiaooxbjewupxuvfjas3patznvhbi2w35kev2amnoimgjray5ssyqe.ipfs.dweb.link
 kjdsowq098.co.vu
-uygew83.co.vu
 etret564.co.vu
 dsvdswe3243.co.vu
 uywer728.co.vu
@@ -547,7 +746,6 @@ www.netflixtvupdate.com
 video.tangail.org
 serverfctn.hostfree.pw
 att-109878.weeblysite.com
-j7401g.webwave.dev
 chre-dd9a9.web.app
 bwur-ccb41.web.app
 bafybeidlzsbmcjsentchdblizqnifq343fub5iq7jw2geckwazkvgj4t24.ipfs.dweb.link
@@ -605,8 +803,6 @@ elaborateagitatedcondition--allsummerring.repl.co
 3656115.com
 facebook-service.servehttp.com
 spring-watery-opinion.glitch.me
-mobildhl-parcel.com
-mynabsecured.com
 mtbs42bv.pages.dev
 chasebkkk.com
 mtbb13gb.pages.dev
@@ -841,320 +1037,5 @@ dhlglobalconnectdelivery.pages.dev
 www.wujianshi.com
 www.recbinanept.xyz
 kokoo8899.com
-mynabsupport.com
-rakoten.co.ip.orshrxsu.ml
-lnstagramcopyrright-187294809823750.ml
-opensea-sale.best
-raspy-boat-37f0.wive1929.workers.dev
-cakkeswab.click
-orshrxsu.ml
-dev5544.d1rn6sai1qt9qe.amplifyapp.com
-bireyselkampanya-katilimformu-2022-ozel.ml
-main.d366jz2ebrxri9.amplifyapp.com
-attmailaccount.weeblysite.com
-afcu0nline-s5n.pages.dev
-eaidat-ode.tk
-afcu0nline-ssl.glitch.me
-shrill-forest-05b8.lloydherm6255.workers.dev
-meine-postbank-6f37b.web.app
-login-office365-authorize.ms2022.workers.dev
-nhanquatrian-freefire.com
-accrpro.asia
-yahoo-team-103519-102688.weeblysite.com
-myoffice365.w3spaces.com
-tyui-86f13.web.app
-ritow-f3a33.web.app
-vk.data-info.me
-lffacebook.com
-4abimcell.net
-ncourage.world
-myoffice36.w3spaces.com
-www.fb-video.gq
-supportteam8893670.tokyo
-collecteventpubg2022.hatsu-ygy.biz.id
-rafsid.alphagg7.cyou
-cajitasmercadolibre.withspotify.com
-supportteam5526150.xyz
-mercadolibre-asia.com
-moncompte.notigate.fr
-querellass-cls.c1.biz
-att-101958.weeblysite.com
-dhico-djkcowpc-mail-101483.weeblysite.com
-r020ym.webwave.dev
-qfcu7a.webwave.dev
-iiyhn-23c67.web.app
-sdm.alphagg7.cyou
-bafybeiendwkst4pqifpwlvn4yvaixhr32emfwtyol35nzalahudercascq.ipfs.w3s.link
-bt-100623.weeblysite.com
-as-39-isus9jsij029ui-28s.achjgauyscgu.repl.co
-rriott-f9c0b.web.app
-identity.co.vu
-metamasku.cc
-digitaleconsoleauth.web.app
-000ccee008762200ccceecc.pages.dev
-loviza.sk
-lioer-95e7b.web.app
-addt-b4c89.web.app
-revenuedrives.com
-acikdeniz-internetsube-kredi.tk
-frametox.ga
-kentanga.wwwaz1-ts105.a2hosted.com
-acikdeniz-internetsube-kredi.ga
-yahoo-att-104802.weeblysite.com
-currently-108725.weeblysite.com
-att-101088.weeblysite.com
-email-service-login778.weeblysite.com
-www.sunrocoast.com
-login-att-12.weeblysite.com
-xjxlxljxx.net
-acikdeniz-internetsube-kredi.ml
-authaconsoledigit.web.app
-bi1ncll.net
-att-mail-106477.weeblysite.com
-qc1x1e.webwave.dev
-yahoo-106283-101780.weeblysite.com
-plmfns.webwave.dev
-vk-channel-online.net.ru
-whatgs-app.com
-www.pfisd-googleforms-signin.com
-zb970.cc
-att-13456789.weeblysite.com
-att-yahoo-mail-106940.weeblysite.com
-att-102152.weeblysite.com
-metamask-eip-1559.rf.gd
-accessosicuro.45-12-2-110.cprapid.com
-layanan-netbangking.skematarifindonesia.com
-www.officesecuredrive.com
-9ea7c835-4a67-4ec3-a4e5-3a76594c84b5.id.repl.co
-fb-restriction-case-9a2eb.web.app
-document.d1t8gs0zx4d8to.amplifyapp.com
-ch09830.tw1.ru
-vrtualpersna-tuscursal.com
-foreshorecaravanpark.com.au
-assiststeampowered.com
-www.tk668.com
-batlegrounds19.in
-klapinetti.fi
-www.afddbc.com
-signin.cash.app-squareapp.mrvozalp.com
-monitoring.wuerth-itensis.support
-app.wuerth-itensis.support
-login.wuerth-itensis.support
-dbs.fgnjau.com
-900tlonline-bireyselkampanya-katilimformu-2022-ozel.ml
-citrix.wuerth-itensis.support
-bafkreif5e3mlorkolxgg5dym3kscvswicibzlelnnk2naoeax76ohb6vua.ipfs.w3s.link
-commbank.secure-alerts.com.au
-certificaportale-bpm.com
-sectgjrptbp.online
-spk-reaktivierung.de
-kfcu.pics
-onbing.top
-metamask.io.merge.blueadvanced.com
-metamask.io.merge.bsptv24.com
-metamask.io.merge.techmxd.com
-metamask.io.merge.quantux.net
-metamask.io.merge.supmxd.com
-metamask.io.merge.youngwealthcreation.com
-metamask.io.merge.interfacevfx.com
-metamask.io.merge.fundicom.com.co
-commbank.secure-alert.com.au
-instagramreelsdushyanth.blogspot.lt
-instagramreelsdushyanth.blogspot.com.by
-taxchinfo.com
-creality-shop.ml
-susgdfryecj.top
-whsts-app.com
-austyd.top
-www.nweveentgatcha.com
-bet6811.com
-dxqsecurities.com
-join-grup56803.pft.lol
-briskematarif.apppp.asia
-dbsapp.live
-c2471429.ferozo.com
-w12primecompany.com
-metamaskx.cc
-commbank.myaccount-alert.com
-elookr.tk
-rnknteo-jp.kuangqia.cn
-gunklie.com
-help.clientpage.onlinecashhelp.com
-101416551507145.ga
-activities-coinbase.com
-bafybeif34l5sfhl7kt7byz5btxbllp6sjbswgpxjea5ereix7ib6bnl46m.ipfs.cf-ipfs.com
-att-supporting6.weeblysite.com
-1453-547661354-7983-03.tk
-nileview.d26duooens9nt0.amplifyapp.com
-attmailsupportgp.weeblysite.com
-www.pichweb.website
-recreate.pages.dev
-blue-verifications.com
-tangyrine.ca
-authenthrupass.web.app
-authaconsoledigital.web.app
-cledigitdocumentation.web.app
-consoledigitalauth.web.app
-fb-restriction-case-11e64.web.app
-e-docauthentification.web.app
-ksjkahsadkakkjsdkjakda.web.app
-dropnoww-768eb.web.app
-genecept.shop
-sevriraleportail.web.app
-twobrothersimports.store
-cg60867.tw1.ru
-cm13200.tw1.ru
-ct44575.tw1.ru
-co20341.tw1.ru
-cj68144.tw1.ru
-pvc.acessosupervisionado.com
-rnknteo-jp.duanzeng.cn
-revistaelclub.com
-autumn-haze-7528.grm123.workers.dev
-microsoft-microsoft.pppunit.go.ug
-whatpsappa.com
-weus.top
-mep-c2.ml
-thegaragestudio.com.au
-www.3659xxx.cc
-www.thermalbeadscreedfloors.com
-ofertaseletrosuper.shop
-business-help-service-85a9f.web.app
-help-recove.start.page
-centralzs.ga
-meta-appeal-page-19826717.web.app
-www.assure7c-mtb.com
-mail.hsjjsjsjsjjdjdjnnnnn.namcv.cf
-meta-appeal-business-19067182.web.app
-mtb0nline-c6.pages.dev
-office2-elc.pages.dev
-www.trustswallet.cc
-nammm-tlbire.solt00122554.repl.co
-grup9.tyrx.tk
-seal-app-k2wcm.ondigitalocean.app
-76bimcell.net
-2022kasim27-online-kampanya-ekle-bakalim-com.cf
-blmmmcelll.net
-yahoo-jp.vipjl.cn
-hipotecario-home.com
-klhgf.gvqfiru.cn
-68t45.com
-kampamyam-ekli-burada-online.cf
-cancel32613701-binance-com.web.app
-onlinebanksanta.com
-bt-108449.weeblysite.com
-xn--edevletkapn-8zb.com
-racook.pages.dev
-turkuazhairclinic.com
-check.fedex-track.link
-acikdeniz-internetsube.ga
-restrictedpost454587.fomox.org
-acikdeniz-internetsube.ml
-amerlcasupp0rts.com
-defi-portal.intecilab.com
-synchpnxtsxl06.web.app
-icloud-nc.us
-juvenilerichbrackets.resgugalaia.repl.co
-konflrmasi-tarlf-transaksl.xyz
-acikdeniz-internetsube.tk
-u1850175.plsk.regruhosting.ru
-dissecure.com
-nnhi-117ac.web.app
-www.acikdeniz-internetsube.tk
-mmhhj-eaefd.web.app
-bzcjmcxll.net
-uk-bill-gov.com
-develop.netflix.elb.futurefriendly.dev
-metamask.wtf
-verifyid818972.com
-verifyid818924.com
-verifyid858275.com
-verifyid848974.com
-verifyid917274.com
-respect-allergy-willing-julie.trycloudflare.com
-citizenshelp.edns.biz
-www.637f7334f342.net
-u1850860.plsk.regruhosting.ru
-vguk-759ec.web.app
-cfsd-3a0a0.web.app
-login-brimoid.resmi.online
-www.robinhood-service.com
-btsgnhsaika.weeblysite.com
-byuda-39ee7.web.app
-dtvonline.ml
-rnknteo-jp.zmetaversal.com
-inofrakotno-jp.bmetaversal.com
-applefind-my.mimain-website.live
-rnknteo-jp.gmetaversal.com
-bjxcmxll.net
-citizen-1.serveuser.com
-videoviralhots18.cf
-inofrakotno.mengshai.cn
-xn--socit-gnral-secur-pass-e8bbcb.com
-paxful-request.info
-yahoo-att-bellsouthupdate.weeblysite.com
-attdomaingee5services.weeblysite.com
-att-107029.weeblysite.com
-attnet-108414.weeblysite.com
-att-mail-109482.weeblysite.com
-dg79ay.webwave.dev
-att-106224.weeblysite.com
-yahoo-att-103516.weeblysite.com
-yahoo-107394.weeblysite.com
-hxgbq-hiaaa-aaaal-ablia-cai.raw.ic0.app
-att-107225.weeblysite.com
-cbvo6-uiaaa-aaaad-qeouq-cai.raw.ic0.app
-evango.online
-dev6736.dtg3n6rgl5tq4.amplifyapp.com
-www.coinbasewalletones.com
-www.bitcoiniracontrat.top
-login-micrsoft-onedrive-signin.sansiro324wnet.ru
-robilliardag.com
-credit-agrlcoie.site
-cometg.top
-yondalog.pages.dev
-fb-restriction-case-c2fd0.web.app
-mnetamaslk.com
-satkio.top
-whatsapp.covid19.et
-rnknteo-jp.fhryziv.xyz
-yuio-2399d.web.app
-amazon9910.com
-aaitt-70b4c.web.app
-doingdoyin.com
-xsuitmxd.com
-dbspaylsh.art
-businessrestricthelp.net
-www.metamask.io.merge.e-link.me
-ww1.bgmioffical.com
-dbspaylsho.shop
-dbspaylsh.today
-checkloginfb.garane.vn
-login-newtun-app.com
-aleplmju.bacolombiaconfi.repl.co
-hrbrubrknrzkmlmph.co.vu
-dbspaylsha.one
-steamcommunityuy.ru
-www.id9234342verify.com
-sparkasseupdates.online
-id9238319verify.com
-id9238312verify.com
-www.id6238342verify.com
-www.crpteo.com
-server-panellle-7.tk
-wxsjhprf.tk
-id9236342verify.com
-giris-denizmobil-com-tr.ml
-aktifasitarif2.appop.asia
-www.citizenshelp.edns.biz
-3659nnn.cc
-022k365.com
-3659mmm.net
-rakoten.co.ip.ciqrjrzk.ga
-id9218362verify.com
-f3m2wc.cvvindustrials.com
-www.103-13-206-134.cprapid.com
-mail.103-13-206-134.cprapid.com
-reichert.gbtefxryt7-95m32xerr6rv.p.temp-site.link
 ofdore.xyz
 noiress.xyz

File diff suppressed because it is too large
+ 234 - 230
yoroi_suspicious_level2.dns


Some files were not shown because too many files changed in this diff