root преди 6 дни
родител
ревизия
b232ad0f70
променени са 4 файла, в които са добавени 4316 реда и са изтрити 1760 реда
  1. 376 283
      yoroi_malware_level1.dns
  2. 3407 1061
      yoroi_malware_level2.dns
  3. 168 146
      yoroi_suspicious_level1.dns
  4. 365 270
      yoroi_suspicious_level2.dns

Файловите разлики са ограничени, защото са твърде много
+ 376 - 283
yoroi_malware_level1.dns


Файловите разлики са ограничени, защото са твърде много
+ 3407 - 1061
yoroi_malware_level2.dns


+ 168 - 146
yoroi_suspicious_level1.dns

@@ -9,117 +9,161 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-allegro.pl-oferta8492648.click
+ccygemini.zeabur.app
+air3.goairhotel.com
+www.piayexchangecoin.shop
+www.tk789.vip
+www.82509.xyz
+www.dianpuguanli.com
+www.51570066.com
+b252j.xyz
+x110u.xyz
+e138s.xyz
+9857.greenfrienndlypaint.com
+www.axi.bet
+www.get-verify-acces.lol
+allegro.23099g89283.bond
+allegrolokalnie.hmptl.sbs
+allegrolokalnie.pl-ogloszenie28766721.sbs
+allegrolokalnie.pl-oferta-780318312.sbs
+help-stream.com
+inlantasnzirdvrevnue.netsons.org
+docomo.one
+skinsmonkeys.at
+allegrolokalnie.net-priv-aukcja-nr-92192-kup.online
+www.cottagefarm.com.my
+wechatau.org
+padisahbets.gercek-resmi-giris-siteniz.vip
+garena.zdtvam.sbs
+videos.binzaminrandow.site
+www.digitaler-fitness-check.de
+03829009382procedure4allemployeemandatory08392928482.nassvsa.com
+www.4875ledger.com
+whatsapp.ikshar.ru
+member023.partner-connect-marketing.com
+motoristsettlement.us
+web2fadesystemlog-aktiv.up.railway.app
+allegrolokalnie.pl-firmowe-84828.sbs
+allegrolokalnie.pl-oferta25323.cfd
+allegro.prowu1y2673f8239.bond
+allegro.zrpoyie83-2032982.cfd
+allegrolokalnie.pl-oferta-52588539.sbs
+unepatekourolex.com
+allegrolokalnie.net-ogloszenie-nr-291031-kup.online
+suivi-paquet-fr.com
+allegrolokalnie.pl77184.cfd
+allegrolokalnie.y6614214.click
+allegrolokalnie.47389.sbs
+allegrolokalnie.pl-oferta6.sbs
+allegrolokalnie.oprvpcdskvejkvr.sbs
+allegrolokalnie.pl-oferta027428.cfd
+allegro.pl8324rezerwacja6792.sbs
+www.werkonban.online
+allegro.pl-34222.sbs
+allegrolokalnie.pl-9445431.sbs
+gradescope.info
+exod-us-wlt.zapier.app
+fr-xoom.info
+guide-waallet.zapier.app
+pointinfos-ameli.com
+frompayltersdnaid.blackopium.biz.id
+konfirmas1hadi4h.klik.hair
+www.requirements-approved-renewal.xyz
+trezor-backup.com
+pedagiodlgital.com
+projectconsulte.online
+www.monoyonline.com
+yummy-experience-599824.framer.app
+ooteeqweiohgiudgyh.fly.dev
+bontagram.net
+ancient-language-834393.framer.app
+mindful-platform-724782.framer.app
+relay-colis-redirection.com
+khaki-communication-866608.framer.app
+xujgindesxgfh.framer.website
+touu.framer.ai
+mytrack-lux.com
+touttmorts.com
+parofonc.com
+mytrack-uy.com
+www-citas-sre-gob-online.com
+cartao-premium.top
+www.novobanco.pt
+trust-wallet-com.framer.ai
+reprogrammer-paquet-fr.com
+allegro.919d0d-1.bond
+btinternetjhsdjs.weeblysite.com
+olx-confirmare.info
+frosttreasuryconnect-login.com
+dhltransporter.com
+actu-ntfx.com
+okta-ticket.com
+allegrolokalnie.pl-38463423.click
+allegrolokalnie.smart-96642.cfd
+gmxauth.framer.website
+inquisitive-mermaid-735530.framer.app
+suivi-service-mrelay.com
+swisspass-aktualiseren.com
+tiny-grocery-629411.framer.app
+allegro.2837383293743982.click
+allegrolokalnie.pl-oferta6382647.click
+allegrolokalnie.pl-oferta6383648.click
+blackci.com
+dispatch-track.com
+mgbworkspacepartners.com
+rubrique-contestation-xoom.info
+zigtdkqp.com
+allegrolokalnie.pl-oferta6482463.click
+allegrolokalnie.pl-firmowe-26953.sbs
+smbc-wevox.co.jp
+allegro.34y34y934.cfd
 www.64.188.74.204.sslip.io
 64.188.74.204.sslip.io
-testboberts.com.openset.co
-e138a.xyz
 j240u.xyz
 v3x1fp.xyz
 www.limpe-hoje-2026.info
+allegro.pl-oferta8492648.click
 allegro.pl-38463423.click
-allegrolokalnie.pl-38463423.click
 allegro.pl-oferta95394964.click
-gmxauth.framer.website
 allegro.pl-oferta6382647.click
-allegrolokalnie.pl-oferta6382647.click
-colegiadomexicoproteccion.fwh.is
-giris.galabet1063resmi.com
-m.padlisahbet.com
-xn--trpadiahbet-wgc.com
-km03.zjczwl.cn
-wechathk.org
-member28.partner-connect-marketing.com
-tk8879.com
-integrityengagementapplication.xyz
-borobudur777.com
-apple-style-landin13te.rollout.site
-www.cardstrustwallet.info
-nagalangit138.com
-fil.h5.feoctoe.com
-discord-proxy.cedcn.qzz.io
-imtokenvip.click
-ce1ebrati0n-1nvite.gzc55.top
-www.docomo.one
-makedeal.top
-betlink20.pro
-kage99.com
-sonhaberler2026.co
-bg.mycheckfanpages.sbs
-tr.galabetorj.vip
-de.mycheckfanpages.sbs
-m.imajbetoriginal.vip
-nassvsa.com
-tr.1060galabet-giris-yap.com
-greenfrienndlypaint.com
-galabet.2025-2026giris.click
-m.jojobet-anasayfagiris.com
-tr.galabet1059giris.com
-pogkdkmdfgdfgd.sbs
-extrabet2451.com
-loweii.org
-4mb1l-had14h.vornsixid.com
-www.2wsms.com
-allegrolokalnie.pl-oferta6383648.click
 allegro.pl-oferta3649562.click
-allegrolokalnie.pl-oferta6482463.click
 allegro.pl-oferta9943593.click
 ldrscv6gh.anastasia32.workers.dev
 www.suivi-service-mrelay.com
 trozr-df87sd.randolfa20.workers.dev
-suivi-service-mrelay.com
-t50a.xyz
-63390.xyz
-b253c.xyz
-g89g.xyz
-68147.xyz
-1xlite-0032263.bar
-p208a.xyz
-lenong99.com
-member88.partner-connect-marketing.com
-swisspass-aktualiseren.com
-3436.greenfrienndlypaint.com
-inquisitive-mermaid-735530.framer.app
-tiny-grocery-629411.framer.app
-allegrolokalnie.smart-96642.cfd
-allegro.2837383293743982.click
-blackci.com
-smbc-wevox.co.jp
-rubrique-contestation-xoom.info
-dispatch-track.com
-allegrolokalnie.pl-firmowe-26953.sbs
-ellenorzes-netfilxhu.com
-kednezh.com
-allegrolokalnie.10278900.sbs
+www.zigtdkqp.com
 allegro.oferta7655590.click
 allegrolokalnie.23492385523.cfd
-allegro.pzpo51251.cfd
-allegro.x152989110.cyou
-allegrolokalnie.pl-6002485.sbs
-allegrolokalnie.oferta638464623923763.sbs
-allegrolokalnie.73458763745.sbs
-allegrolokalnie.pl-oferta3153590.click
 allegrolokalnie.pl-ld0900700.cfd
 allegrolokalnie.pl-ld0900790.cfd
 allegrolokalnie.pl-oferta819482.cfd
-allegrolokalnie.pl-oferta73951.cfd
-allegrolokalnie.pl-oferta6482946.click
-allegrolokalnie.pl-oferta6392638.click
-allegrolokalnie.pl-oferta7375936.click
-allegrolokalnie.pl-oferta6482648.click
-allegrolokalnie.pl-oferta6927193.click
+allegrolokalnie.pl-oferta8492648.click
+allegrolokalnie.pl-6002485.sbs
+allegrolokalnie.oferta7655590.click
+allegrolokalnie.oferta638464623923763.sbs
 allegrolokalnie.smart-94842.cfd
+allegrolokalnie.pl-oferta7462946.click
+allegrolokalnie.pl-oferta999676761.sbs
 allegrolokalnie.pl-oferta830538.cfd
-allegrolokalnie.pl-oferta8492648.click
+allegrolokalnie.pl-prywatne-28492.sbs
+ellenorzes-netfilxhu.com
 hitmantest.club
-instruction-suivis.com
+kednezh.com
 mrelaypickup.com
 pagedattente.com
-allegrolokalnie.pl-oferta7462946.click
-allegrolokalnie.pl-oferta999676761.sbs
-allegrolokalnie.pl-prywatne-28492.sbs
-allegrolokalnie.oferta7655590.click
+allegrolokalnie.pl-oferta3153590.click
+allegrolokalnie.pl-oferta6392638.click
+allegrolokalnie.10278900.sbs
+allegrolokalnie.73458763745.sbs
 centre-public-sante.com
+allegrolokalnie.pl-oferta6927193.click
+allegrolokalnie.pl-oferta73951.cfd
+allegrolokalnie.pl-oferta6482946.click
+allegrolokalnie.pl-oferta7375936.click
+allegrolokalnie.pl-oferta6482648.click
+allegro.pzpo51251.cfd
+allegro.x152989110.cyou
+instruction-suivis.com
 wck-whatsapp.com
 verificarseguranca.online
 www.p365777.com
@@ -129,12 +173,12 @@ www.boltzmannbrain.cfd
 www.cocktailparty.cfd
 www.josephsonjunction.cfd
 www.phononlaser.cfd
-allegro.pl-oferta830538.cfd
-www.centre-public-sante.com
-allegro.pl-oferta999676761.sbs
-allegro.pl-oferta6482648.click
-8563-coinbase.com
-allegro.pl-oferta7462946.click
+www.syndromemeasurement.cfd
+www.kednezh.com
+www.moenaqbrw.com
+www.fjiaobd.com
+www.locale-tri.com
+www.mdlr-perso5.pro
 allegro.pl-oferta819482.cfd
 allegro.pl-ogloszenia-firmowe-888232.click
 allegro.pl-oferta3153590.click
@@ -145,24 +189,24 @@ allegro.pl-oferta7375936.click
 allegro.pl-oferta239452.sbs
 allegro.pl-oferta6482946.click
 allegro.pl-oferta6392638.click
-www.syndromemeasurement.cfd
-www.kednezh.com
-www.moenaqbrw.com
-www.fjiaobd.com
-www.locale-tri.com
-www.mdlr-perso5.pro
+www.centre-public-sante.com
+allegro.pl-oferta999676761.sbs
+allegro.pl-oferta6482648.click
+8563-coinbase.com
+allegro.pl-oferta7462946.click
+allegro.pl-oferta830538.cfd
 couverture-biometrie-sante.com
 ea0c2799-05b6-445f-b873-5bf327e10ceb-00-11pp7c9ksv5og.janeway.replit.dev
-glad-circle-676416.framer.app
 prosperous-pattern-245063.framer.app
+glad-circle-676416.framer.app
 abrbpay.com
 www.bacroblox.store
 www.63393.xyz
 att.tyrrellanalytics.com
 sorteo-bmw.maketoprint.com
+www.couverture-biometrie-sante.com
 sigafreeflowdigital.it.com
 original-happen-900509.framer.app
-www.couverture-biometrie-sante.com
 40d63b49-fe70-4cdb-98f2-5a5183be202c-00-3n6n06v132hwl.picard.replit.dev
 2641a5c4-12a4-4577-aa81-730fabb9ff5c-00-20wmleubp0mgw.picard.replit.dev
 allegrolokalnie.pl-82736357716156281zamowienie7162727y8262728.sbs
@@ -192,20 +236,20 @@ www.bet431.cc
 bet426.cc
 allegro.pl-id73838392.sbs
 artsy-taxonomy-582688.framer.app
-btinternethjjkkk.weeblysite.com
-exec3-webme-ktun2-bn.framer.website
-lkjhfdsdfghjoiuytrertyw.framer.website
+delightful-point-322947.framer.app
+effective-bookings-486180.framer.app
+jumpy-methodologies-882270.framer.app
 massive-encounter-356813.framer.app
 particular-founders-665677.framer.app
+short-millions-408003.framer.app
 started-home.zapier.app
 talented-listening-361596.framer.app
 tedious-beet-978789.framer.app
 xfinity-email-service-102915.weeblysite.com
 6cd1f2d2-2c73-4070-9e40-9a15f91cab19-00-2evect6l7wxt7.janeway.replit.dev
-effective-bookings-486180.framer.app
-jumpy-methodologies-882270.framer.app
-short-millions-408003.framer.app
-delightful-point-322947.framer.app
+exec3-webme-ktun2-bn.framer.website
+lkjhfdsdfghjoiuytrertyw.framer.website
+btinternethjjkkk.weeblysite.com
 allegrolokalnie.pl-917263682829zamowienie82727281f9262728.sbs
 accounts-25355.bubbleapps.io
 q58.ad5.mytemp.website
@@ -224,36 +268,29 @@ ts67811.com
 www.bet433.cc
 www.u0333428.isp.regruhosting.ru
 thegamehaus.com
-64797d60-94fd-4385-8fd3-8498a40fe1cf-00-3fryz88hq2lkx.riker.replit.dev
 7dec9639-b949-45e2-9581-93223850397d-00-hwmb2gap300y.spock.replit.dev
-95a542b5-c4d0-487f-95d6-01f77811349f-00-h5277fwuyoho.riker.replit.dev
-b315d6df-3da2-4b93-bc0f-537fe12deb09-00-1nqi18mqrvoxo.worf.replit.dev
+9c478f88-3519-4d20-a4b1-f7bc89d94adc-00-3cfttr0fvx1ft.riker.replit.dev
+9c75c5a0-77d0-4287-9a52-6e83fe9d11fc-00-291j116g1egbi.riker.replit.dev
 bisque-hands-888029.framer.app
-complex-path-586888.framer.app
-comfortable-teacher-603852.framer.app
 eb84f314-e8b4-4a81-a16a-5b8415ae9ab7-00-2xqz63vny9gdl.riker.replit.dev
 favorite-result-798368.framer.app
 full-circle-607510.framer.app
 grey-brand-869308.framer.app
+high-instance-167244.framer.app
 ineffable-vacation-367899.framer.app
 joyous-course-233115.framer.app
 poised-haggis-013894.framer.app
 relieved-software-706324.framer.app
 xmission-webmail.weeblysite.com
-9c478f88-3519-4d20-a4b1-f7bc89d94adc-00-3cfttr0fvx1ft.riker.replit.dev
-9c75c5a0-77d0-4287-9a52-6e83fe9d11fc-00-291j116g1egbi.riker.replit.dev
-high-instance-167244.framer.app
+64797d60-94fd-4385-8fd3-8498a40fe1cf-00-3fryz88hq2lkx.riker.replit.dev
+b315d6df-3da2-4b93-bc0f-537fe12deb09-00-1nqi18mqrvoxo.worf.replit.dev
+comfortable-teacher-603852.framer.app
+complex-path-586888.framer.app
+95a542b5-c4d0-487f-95d6-01f77811349f-00-h5277fwuyoho.riker.replit.dev
 69fc5388-670d-4c88-8908-afdb2f107291-00-262hqjqycxqhv.picard.replit.dev
 distinct-plans-399313.framer.app
 oxico.blogdns.com
 326a8eb8-4983-45a9-850d-7684b4fde14b-00-2r2poq9hy00ir.worf.replit.dev
-passediretoflow.com
-p207f.xyz
-www.f234m.xyz
-dvo-us.com
-info-signere-digitilsynet.com
-owasxwheks-mph9pg.fly.dev
-app-pancakeswap.to
 voudet.com
 www.facebookstartopup.info
 stylebourg.com
@@ -269,31 +306,16 @@ fabkwads.club
 6csgnd.ccsng.com
 onedrivelmcro-sharedpointers2026.bolt.host
 dvo-a.com
-bybmarket.xyz
 nexmunatt.com
 xz.appleld.sbs
+bybmarket.xyz
 keepalive.update-defender.workers.dev
 www.wns967.com
 key-friday-461837.framer.app
-19f58955-0d72-401a-98fa-5315104825f2-00-33iefp7ze55tp.worf.replit.dev
-d7d48e11-35ad-4806-b220-e15dacb9ee16-00-2oavpvtd2rl9y.janeway.replit.dev
-8da87598-ea8a-4cb9-8e4b-985045c9e6ea-00-22kfspdv1yj1.riker.replit.dev
-mon-renouvellement-securipass.com
-feiwohs.com
-whatscvpp.top
-63442.xyz
-www.h103c.xyz
-b251j.xyz
-a85p.xyz
-pedagionlinedigital.com
-shop.otkhi.com
-ardimasnoedi.lokmanelporso.com
-www.betnett.sbs
-www.g87g.xyz
-shop.cdxtkp.com
-www.qruryoykgj.sbs
-www.zktwsqwzub.my
-www.estxkmiego.my
-charliemanarix-facebook-login-clone-spy-edition.static.hf.space
-online-skysports.com
-www.mon-renouvellement-securipass.com
+passediretoflow.com
+p207f.xyz
+www.f234m.xyz
+dvo-us.com
+info-signere-digitilsynet.com
+owasxwheks-mph9pg.fly.dev
+app-pancakeswap.to

Файловите разлики са ограничени, защото са твърде много
+ 365 - 270
yoroi_suspicious_level2.dns


Някои файлове не бяха показани, защото твърде много файлове са промени