root 1 week ago
parent
commit
bb3a6495ba
4 changed files with 16419 additions and 14416 deletions
  1. 11024 9892
      yoroi_malware_level1.dns
  2. 4781 4132
      yoroi_malware_level2.dns
  3. 159 158
      yoroi_suspicious_level1.dns
  4. 455 234
      yoroi_suspicious_level2.dns

File diff suppressed because it is too large
+ 11024 - 9892
yoroi_malware_level1.dns


File diff suppressed because it is too large
+ 4781 - 4132
yoroi_malware_level2.dns


+ 159 - 158
yoroi_suspicious_level1.dns

@@ -9,96 +9,118 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-m28u.top
-www.wgcondominiums-detail.surge.sh
-www.apply-user-now-blue-badge-here.surge.sh
-ldgkowkowkd.pabla5.workers.dev
+17646.xyz
+h36d.top
+aspeducators.onrender.com
+text-secure-esl.sbs
+billion-exchange-lone-spouse.trycloudflare.com
+whatsapp-web-design.onrender.com
+yfhic8qt.gfiwpu3459btgoeiprubnvoey458r.workers.dev
+half-life-2.online
+envisn.onrender.com
+p38k.top
+j62m.vip
+d.dawnpe.workers.dev
+625r-7dkl-5grd.ar-royalcases-org-s-account.workers.dev
+www.tiktokshopcn.shop
+lop9-vct2-flce.alan-alanlparis-com-s-account.workers.dev
+www.3oq.xgfc8888.top
+j93o.vip
+641923-apple.com
+www.70365app.net
+www.16284.xyz
+paiementleboncoin.trxf.fr
+apple-japan.club
+supportcoinsqurelognn.zapier.app
+fortfocus.top
+thelightrays.com
+msg-secure-esl.top
+padisahbet1218.com
+facebooks-logins.onrender.com
+www.wishlist.com.de
+whatsapp.ih.hl.cn
+www.whatsapp.ih.hl.cn
+app.whatsapp.ih.hl.cn
+bet365p4.cc
+m.whatsapp.ih.hl.cn
+web.whatsapp.ih.hl.cn
+fabrockl.spahotel.guru
+suryaanewdelhi.spahotel.guru
+almondz.spahotel.guru
+wap.whatsapp.ih.hl.cn
+avaloncourtyardresidencesuites.spahotel.guru
+wishlist.com.de
+vefort.lol
+uspsslogistics.com
+skinwatch.info
+aciaa.org.br
+text-secure-esl.top
+dhl-towcester.consultationonline.co.uk
+u15k.top
+u15e.top
+www.g86365.cc
+www.dhl-towcester.consultationonline.co.uk
+www.u15r.top
+allegrolokalnie.lokalna-73992132.sbs
+amazonglobal1.com
+comicheaseis.click
+ferreira.jour2685494.pro
+martine.jour2685494.pro
+mostbet24618.help
+pago-online.sbs
+2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev
+sheriwins.com
+us1-files-document-storage-files-s9046-k590577.storage-id-406936.workers.dev
+www.all-done-form-here-me.surge.sh
+www.usahelpcenter.com
 dhl.pl.qas.edistrada.pl
 whatsapp-clone-32do.onrender.com
 central-suporte.lat
 instagram-fwuk.onrender.com
+m28u.top
+www.wgcondominiums-detail.surge.sh
+www.apply-user-now-blue-badge-here.surge.sh
+ldgkowkowkd.pabla5.workers.dev
 yourmailaccount.edgeone.dev
 amount.coinbases.vip
 book-bet365.com
 eager-oak-964.injaltransferwillgonabaid.workers.dev
-us1-files-document-storage-files-s9046-k590577.storage-id-406936.workers.dev
-www.all-done-form-here-me.surge.sh
-www.usahelpcenter.com
-2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev
-allegro.lokalna-329131.sbs
+allegrolokalnie.pl-552418352829oferta91625382537.site
+allegrolokalnie.oferta727273848314.xyz
+allegrolokalnie.pl-ticketnumber2094.lat
+allegrolokalnie.89757827638751.lat
 allegrolokalnie.pl-91793.top
 allegrolokalnie.pl-oferta02876236672.xyz
-allegro.lokalna-099171.club
 registro-digital-akjm-2026.cr-web.workers.dev
-allegrolokalnie.zakup827382395.shop
 cita-registro-prhj-2026.cr-web.workers.dev
 allegrolokalnie.pl-oferta0017301973018208.xyz
 allegrolokalnie.ofetalokalana94837914312.lol
-suportedigital.net
 irsgovtax.xyz
-allegrolokalnie.pll-d-offer-4828163.xyz
 allegro.ofetalokalana94837914312.lol
-allegrolokalnie.pl-443793.sbs
 allegro.pl-443793.sbs
 allegrolokalnie.ofeta-lokalana6583491214.lol
 allegro.ofeta-lokalana6583491214.lol
 allegrolokalnie.pl-oferta2894799.click
-noobs.jour2685494.pro
-martine.jour2685494.pro
-ferreira.jour2685494.pro
-allegro.3000h0h.forum
-allegro.3299g88g2909.pl
 allegrolokalnie.0oferta3649ztsn80.forum
 allegrolokalnie.pl-54sa495da.lol
-allegro.00239g8g8g8.pl
-btinternetertytu-107698.weeblysite.com
+allegrolokalnie.pl-oferta091783992073001.shop
+smiling-bronze-ybcsxxoi.edgeone.dev
 hvflexo.com
-btinternetmaintenanceupdate-101995-109972.weeblysite.com
 allegrolokalnie.pl-526145272526oferta09261628267.site
-allegrolokalnie.pl58d82185dsh.click
 allegrolokalnie.pl-oferta001782002802010.shop
-allegrolokalnie.zueb2740oferta948.click
 allegrolokalnie.pl-oferta53791428.click
-allegrolokalnie.oferta92829383983.shop
-allegrolokalnie.pl-oferta091783992073001.shop
-allegro.oferta92829383983.shop
-smiling-bronze-ybcsxxoi.edgeone.dev
-receptive-narwhal-419031.framer.app
-alimentationcompte.com
-allegrolokalnie.lokalna-73992132.sbs
-allegrolokalnie.pl-552418352829oferta91625382537.site
-allegro.oferta813502.click
-allegrolokalnie.oferta8219.click
-allegrolokalnie.oferta727273848314.xyz
-allegrolokalnie.oferta813502.click
-allegrolokalnie.hlttm.sbs
-allegrolokalnie.pl-ticketnumber2094.lat
-allegrolokalnie.89757827638751.lat
-p26x.top
-www.y109e.xyz
-p105k.xyz
-s23i.top
-p26y.top
-88108.xyz
-h19y.top
 b228l.xyz
 79477.xyz
 80448.xyz
 g13b.top
 79765.xyz
 f28g.top
-pago-online.sbs
 b29j.top
 liqconnect.com
 www.onboarding-bpce-recette-sf5.itroom.fr
 s23l.top
 h19z.top
 p26u.top
-sheriwins.com
-comicheaseis.click
-mostbet24618.help
-amazonglobal1.com
-gev-khqx.wasmer.app
 f28i.top
 s23m.top
 cbu-adobestudent.com
@@ -113,25 +135,37 @@ tobat.girlss.eu.cc
 m.365bet990.com
 avalonhouse.hostel.town
 autenticacion.sucursalv.173.212.243.5.nip.io
+gev-khqx.wasmer.app
+p26x.top
+www.y109e.xyz
+p105k.xyz
+s23i.top
+p26y.top
+88108.xyz
+h19y.top
 spectrumwebmailnet.systeme.io
 account.msauth.live
-www.instagramhelp.whf.bz
-happy-star-985.injaltransferwillgonabaid.workers.dev
-trozr-kasoj.allyse10.workers.dev
-www.serbiainyourhands.world
-reddcewy-dp3b659qrun4.edgeone.app
+www.app.amahezon.com
+allegrolokalnie.pl-541836158152oferta9726173626.site
 allegrolokalnie.pl-oferta92733729.click
 allegrolokalnie.80248476245.click
 allegrolokalnie.897238h943h34.click
+allegro.id-38247ns4.click
+allegrolokalnie.id-38247ns4.click
 allegrolokalnie.83g23g023g2392.click
 allegro.oferta128947.click
 renuev-acces-net.com
 www.watch-user.com
 allegrolokalnie.oferta328016.click
 allegro.oferta328016.click
-sub-informacion-net.com
 www.sub-informacion-net.com
+www.instagramhelp.whf.bz
+happy-star-985.injaltransferwillgonabaid.workers.dev
+sub-informacion-net.com
 allegrolokalnie.oferta280zywn09.forum
+trozr-kasoj.allyse10.workers.dev
+www.serbiainyourhands.world
+reddcewy-dp3b659qrun4.edgeone.app
 www.68771.xyz
 www.68818.xyz
 www.feiraochat.digital
@@ -139,23 +173,34 @@ pkcs-sfci-4ftw.nandana-odozoconstruction-com-s-account.workers.dev
 devloper-eur0-bucket-projectmanagement-file3830084.blessingmummy03.workers.dev
 www.17867.xyz
 18442.xyz
-www.app.amahezon.com
-allegrolokalnie.pl-541836158152oferta9726173626.site
-allegro.id-38247ns4.click
-allegrolokalnie.id-38247ns4.click
 5rli-gnnr-fv74.alan-alanlparis-com-s-account.workers.dev
-www.load-hermes--elfnuupv.dev.autobricksai.run
+915e2c5b-7a6c-4b99-81ae-9470445d0a64-00-h9uyr8arb0zy.spock.replit.dev
+secure-page-editor--brightclark222.replit.app
 www.kali.secure-curious-shield-d0ccbd13.dh4.onhexcorearena.com
+www.load-hermes--elfnuupv.dev.autobricksai.run
 www.bright-playful-spark-b9e828fe.dh4.onhexcorearena.com
-secure-page-editor--brightclark222.replit.app
-915e2c5b-7a6c-4b99-81ae-9470445d0a64-00-h9uyr8arb0zy.spock.replit.dev
+www.ingest.dev.autobricksai.run
+www.load-hermes--ecm0vc57.dev.autobricksai.run
+www.kwbot--muildw34.dev.autobricksai.run
+www.clever-witty-compass-945d22ea.dh4.onhexcorearena.com
+www.kali.secure-curious-gadget-dbf39449.dh4.onhexcorearena.com
 www.y26w.top
 m18w.top
+www.load-hermes--h5vj3egp.dev.autobricksai.run
+www.load-hermes--2jj4bn5u.dev.autobricksai.run
+www.kali.curious-safe-puzzle-3f035317.dh4.onhexcorearena.com
 www.16149.xyz
+www.kali.safe-smart-shield-237a2750.dh4.onhexcorearena.com
+www.friendly-techy-pixel.dh4.onhexcorearena.com
+www.kali.clever-techy-key-63bd9232.dh4.onhexcorearena.com
+www.bebppa.top
 www.x17c.top
+www.brave-safe-spark-b595143f.dh4.onhexcorearena.com
+www.kali.secure-quick-compass-51c0bf15.dh4.onhexcorearena.com
+www.kali.brave-techy-rocket-451bb16e.dh4.onhexcorearena.com
+imtekcen.com
 auth-portal-up-old.tem3.io
 m26l.top
-imtekcen.com
 b28a.top
 tricky-center-067034.framer.app
 doc-signinbox-e59pp.ondigitalocean.app
@@ -169,22 +214,6 @@ fhwrekh.pro
 abhd-qmj1-33z0.roopa-kotecha-cassioroaddental-co-uk-s-account.workers.dev
 trdfgwo56.org
 paypalus.dpdns.org
-www.load-hermes--d9xynuua.dev.autobricksai.run
-www.ingest.dev.autobricksai.run
-www.load-hermes--ecm0vc57.dev.autobricksai.run
-www.kwbot--muildw34.dev.autobricksai.run
-www.clever-witty-compass-945d22ea.dh4.onhexcorearena.com
-www.kali.secure-curious-gadget-dbf39449.dh4.onhexcorearena.com
-www.load-hermes--h5vj3egp.dev.autobricksai.run
-www.load-hermes--2jj4bn5u.dev.autobricksai.run
-www.kali.curious-safe-puzzle-3f035317.dh4.onhexcorearena.com
-www.kali.safe-smart-shield-237a2750.dh4.onhexcorearena.com
-www.friendly-techy-pixel.dh4.onhexcorearena.com
-www.kali.clever-techy-key-63bd9232.dh4.onhexcorearena.com
-www.bebppa.top
-www.brave-safe-spark-b595143f.dh4.onhexcorearena.com
-www.kali.secure-quick-compass-51c0bf15.dh4.onhexcorearena.com
-www.kali.brave-techy-rocket-451bb16e.dh4.onhexcorearena.com
 wcqj-t4a4-e2th.stephane-sarllamip-onmicrosoft-com-s-account.workers.dev
 whatsap.hl.cn
 ww547.scltiabank.com
@@ -203,20 +232,21 @@ jhgdfe7w.com
 m3t5-mmrj-8iur.notifyesecuredocs-transcript-outlook-com-s-account.workers.dev
 ngfdeo0e.com
 kadi.gurdit.com
+www.load-hermes--d9xynuua.dev.autobricksai.run
 novels-muslim-interventions-technician.trycloudflare.com
 y4r8abgz.sibpages.com
 bd-venezuelaa-1--tubdvenlinea.replit.app
-www.centralgoldnu.fun
 secure-page-editor--successfulot9.replit.app
+www.centralgoldnu.fun
 memorable-level-493021.framer.app
+www.prom-tig.de
+www.promhoy.de
+www.numresatunerosat.com
 www.redirect.blf.cuj.temporary.site
 wvvwintermatico.lat
 www.acessocx.uk
 brave-ocean-800.injaltransferwillgonabaid.workers.dev
 www.tgo-dtohoy.de
-www.prom-tig.de
-www.promhoy.de
-www.numresatunerosat.com
 cprh-8ekx-8t2q.stacey-sherfy-miller-insulation-com-s-account.workers.dev
 jwsi-q9rj-ofjr.stuart-boones-outlook-com-s-account.workers.dev
 main.d16ms213k1m9dj.amplifyapp.com
@@ -225,72 +255,47 @@ rnft-anew-27v1.mscloudconfirmation-storageonline.workers.dev
 registro-digital-2026-anjm.cr-web.workers.dev
 registro-digital-amjh-2026.cr-web.workers.dev
 polite-bush-0fd60b610.7.azurestaticapps.net
-7db280b2-7cb1-4c89-8f10-4f68ad7708e3-00-1z7d2k7mgp38u.janeway.replit.dev
-affectionate-time-494119.framer.app
 average-share-136644.framer.app
+convivial-lynx-418603.framer.app
 coral-recipient-681609.framer.app
 greenhills-communication.weeblysite.com
+gvuafgiuew.weeblysite.com
+i-nfo-xqgkqzqx.weeblysite.com
 magnificent-attributes-502045.framer.app
+midwest-108329youu.weeblysite.com
+mn-107051.weeblysite.com
 odd-midnight-906700.framer.app
 original-jargon-909381.framer.app
 paul-bunyan-communications.weeblysite.com
 prosperous-llama-710520.framer.app
-spiky-homework-492143.framer.app
-spectrum-residential.weeblysite.com
-telstra-106971.weeblysite.com
-thoughtful-beginning-333779.framer.app
+secureserversecureserverdoc.framer.ai
 talk-100578.weeblysite.com
+telstra-106971.weeblysite.com
+tedious-project-155491.framer.app
 various-cause-653755.framer.app
-verify-microsoft-account.framer.wiki
 visual-start-609462.framer.app
+webmail-center.framer.website
 welcome-to-webmail-101362.weeblysite.com
 witty-usage-297136.framer.app
 wrbsserv.weeblysite.com
-xfinitycustomerloginappsuitauth.framer.website
 xfny.weeblysite.com
+xfinitycustomerloginappsuitauth.framer.website
 ybussinessd.weeblysite.com
 zziimmbbrraa.framer.ai
-mn-107051.weeblysite.com
-secureserversecureserverdoc.framer.ai
-smaller-whoever-060378.framer.app
+spectrum-residential.weeblysite.com
+spiky-homework-492143.framer.app
 support-managements.framer.website
-webmail-center.framer.website
-midwest-108329youu.weeblysite.com
-convivial-lynx-418603.framer.app
-i-nfo-xqgkqzqx.weeblysite.com
-tedious-project-155491.framer.app
-gvuafgiuew.weeblysite.com
+thoughtful-beginning-333779.framer.app
+verify-microsoft-account.framer.wiki
+smaller-whoever-060378.framer.app
+7db280b2-7cb1-4c89-8f10-4f68ad7708e3-00-1z7d2k7mgp38u.janeway.replit.dev
+affectionate-time-494119.framer.app
 d4f6ef67-1794-4bc4-9103-09a41669f007-00-3myr5rwk9xx3f.worf.replit.dev
 patient-scone-248609.framer.app
 xxfinirtytrscom.weeblysite.com
 electronics-souls-ports-jar.trycloudflare.com
 lucky-whatsapp.hl.cn
 runim-whatsapp.hl.cn
-www.tkshoplode.com
-swiftreach.world
-www.zenithmap.world
-id-apple.biz.id
-netflix-payment.creditcard
-www.365etop1.co
-docs.b656a0555be44376d9ba08df9f49e08d.workers.dev
-www.shopifywellc.com
-www.masisdoc.org
-lunocrpto.top
-lunobtc.top
-www.hojeflowdigital.online
-webmailadminhelpdesk.serveousercontent.com
-felabzamexico.com
-am.kblgu.lol
-ofhood.xyz
-www.nexaverses.world
-unitedpulse.world
-worker-aged-sky-4e36.workersdev40050.workers.dev
-billowing-fg.amsterdamschipholairportvendor.workers.dev
-teams-6f389e3d8f952226.portal-01783827.workers.dev
-web3.chouyi.cc
-ecezamgib.org
-www.ehukukteblig.org
-amazongenerator.edgeone.dev
 web3.oyuzh.biz
 web3.snouxyifpx.com
 web3.ouzhyi.pink
@@ -303,6 +308,31 @@ web3.oyigwzh.info
 web3.oyigwzh.biz
 web3.gwoyexafcx.com
 web3.ouyishozyk.com
+lunocrpto.top
+lunobtc.top
+www.hojeflowdigital.online
+webmailadminhelpdesk.serveousercontent.com
+worker-aged-sky-4e36.workersdev40050.workers.dev
+billowing-fg.amsterdamschipholairportvendor.workers.dev
+teams-6f389e3d8f952226.portal-01783827.workers.dev
+web3.chouyi.cc
+ecezamgib.org
+www.ehukukteblig.org
+amazongenerator.edgeone.dev
+felabzamexico.com
+am.kblgu.lol
+ofhood.xyz
+www.nexaverses.world
+www.tkshoplode.com
+swiftreach.world
+www.zenithmap.world
+unitedpulse.world
+id-apple.biz.id
+netflix-payment.creditcard
+www.365etop1.co
+docs.b656a0555be44376d9ba08df9f49e08d.workers.dev
+www.shopifywellc.com
+www.masisdoc.org
 alfin-pe.princeastaroth04.workers.dev
 lightseagreen-oryx-428476.hostingersite.com
 reviewonlinedocument-ycz83.ondigitalocean.app
@@ -313,37 +343,8 @@ con1irmac1on3656.wuaze.com
 formulario-digital-ahbm-2026.cr-web.workers.dev
 secure-web-editor--microsoft-ok.replit.app
 server-index-edit--microsoft-ads.replit.app
-security-server-home--joeylandon06.replit.app
 956c0ff0-1584-4ba1-a1dc-7eb401042d74-00-dhi9f362orh4.spock.replit.dev
+security-server-home--joeylandon06.replit.app
 allegrolokalnie.pl-440242.sbs
 home-coinsqurre.zapier.app
 allegrolokalnie.lokalna-319428.sbs
-help-ledgerlive-com-web.typedream.app
-centralfinanciamento.fun
-auth-web-ledger-live-desktop.typedream.app
-allegrolokainie.pl-943293.sbs
-galabet.galam.cam
-rnh3rdznhe.eu-west-2.awsapprunner.com
-auth-docs-trizorr-sso.typedream.app
-7c5cf92e-d2bf-450e-9a95-1c5948c85ce8-00-26dcaix0olp0.spock.replit.dev
-eg1xbet.com
-spindesignerelnido.hostel.town
-prosoftelektrik.com
-j62g.vip
-m26m.top
-www.ecuador360.travel
-gets-hidden-gazette-replies.trycloudflare.com
-www-facebook-com.collectasone.com
-166798365756.com
-mobilelegendsid.com
-kleinaze.click
-wswaim-whatsapp.hl.cn
-oeruexta.com
-begin-ledger-support.typedream.app
-audsyncvaultsmainblock.xyz
-docs-led-ger-live-cloud.typedream.app
-fortluna.top
-j57l.vip
-king-bet365.com
-allegro-lokalnie.pl-przvf.sbs
-allegrolokalnie.lokalne-ofety5943.click

File diff suppressed because it is too large
+ 455 - 234
yoroi_suspicious_level2.dns


Some files were not shown because too many files changed in this diff