root преди 3 години
родител
ревизия
c4861548cf
променени са 4 файла, в които са добавени 2180 реда и са изтрити 1737 реда
  1. 471 399
      yoroi_malware_level1.dns
  2. 1008 881
      yoroi_malware_level2.dns
  3. 252 144
      yoroi_suspicious_level1.dns
  4. 449 313
      yoroi_suspicious_level2.dns

Файловите разлики са ограничени, защото са твърде много
+ 471 - 399
yoroi_malware_level1.dns


Файловите разлики са ограничени, защото са твърде много
+ 1008 - 881
yoroi_malware_level2.dns


+ 252 - 144
yoroi_suspicious_level1.dns

@@ -9,6 +9,258 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+aeinfon.live
+www.tylosco.com
+dijitalsube-acikdeniz-com.tk
+www.gek.hdkdy.ml
+cr48790.tw1.ru
+dijitalsube-acikdenizv2-com.tk
+acikmobildenizvl2.tk
+acikmobildenizvk2.tk
+rakoten.co.ip.eiqdjdrn.cf
+abdezrt7.tk
+www.loadmypartial.com
+abang.lombokabang.com
+xtprmzv.cn
+notificacionsucursalenlineadinamica.com
+cv10674.tw1.ru
+yahoo-team-101268.weeblysite.com
+auuidujed.weeblysite.com
+japan-smbcbank.eykdya.top
+e57q9z.webwave.dev
+japan-smbcbank.hrrlzj.top
+japan-smbcbank.hfjeog.top
+japan-smbcbank.hiwxjt.top
+japan-smbcbank.exrlsr.top
+facebok.shesma.org
+bjmczcll.net
+microsoft365.com.admin-mcas-df.ms
+japan-smbcbank.bgpbxv.top
+g3vnv-eiaaa-aaaao-aaxsa-cai.raw.ic0.app
+japan-smbcbank.dfxjyw.top
+attyahoo-109484.weeblysite.com
+8675345eminent--98675323ths.repl.co
+trcsuckerrods-duedateforinve-app-vn4yd.ondigitalocean.app
+japan-smbcbank.cdlolk.top
+japan-smbcbank.irwqxp.top
+8675345eminent.98675323ths.repl.co
+374cc9a4-f337-4273-9636-92a6e999bbd8.id.repl.co
+cj47817.tw1.ru
+ci71775.tw1.ru
+cf28378.tw1.ru
+japan-smbcbank.iomggi.top
+japan-smbcbank.vcktda.top
+japan-smbcbank.kwuiub.top
+japan-smbcbank.voypzp.top
+consolebdigital.web.app
+consolecdigitale.web.app
+authconsoledigit.web.app
+bbgyu-eb375.web.app
+ccyu-4192f.web.app
+cchrr-6390e.web.app
+authdigitale.web.app
+iuui-22021.web.app
+hdee-373a3.web.app
+ireer-83ebf.web.app
+pdfdocument-745a0.web.app
+fytgyu-d3ea2.web.app
+digitaleconsole.web.app
+asiyankonaklari.com
+meta-business-appeal-1092707.web.app
+scietegeneraleconfimobilesty.web.app
+hjxkjhjdfhf.weeblysite.com
+yahoo-mail-105717.weeblysite.com
+pdfdocument-42258.web.app
+pdfdocument-b1c0e.web.app
+oddballfinestructs--231233.repl.co
+tyttt-5db0c.web.app
+sjkdkdshkdkskkkhskhkssdkhkdhk.web.app
+sitioweeb--glaci.repl.co
+sitioweeb.glaci.repl.co
+tyty-11a7e.web.app
+oddballfinestructs.231233.repl.co
+6817d43d-c0cf-420a-86e8-cc323f6f8237.id.repl.co
+eb473ad1-7ef4-4a5f-a0d0-2ccf7aace893.id.repl.co
+yuyy-2a747.web.app
+racqr-zyaaa-aaaag-qa4na-cai.raw.ic0.app
+bjmcxzll.net
+approveddocmicrosoftonline.spreetial.com
+caa1a2cd562b6.infinixcourier.com
+aol-109795.weeblysite.com
+yahoo-att-104920.weeblysite.com
+1dcu-0rg-ver1fy.tk
+polite-plant-08de94610.2.azurestaticapps.net
+japan-smbcbank.jusycj.top
+link.bukner.com
+em5jf9.webwave.dev
+sp342694.sitebeat.crazydomains.com
+auspost-switch-au.cc
+auspost-move-au.cc
+rakoten.co.ip.lfegvrvc.gq
+pswv.top
+apple.l-phonecloud.info
+usaps-track.ixibob.top
+qwaerg.boxmode.io
+kvlxjn.webwave.dev
+h3h556.webwave.dev
+dv9um1.webwave.dev
+login-att-100.weeblysite.com
+ff1mpa4d.hisonguan.com
+hy-108491.weeblysite.com
+kbrhslanknciksksn.co.vu
+attdomainglad4services.weeblysite.com
+fdre-e589c.web.app
+eiqdjdrn.ga
+mjilqa.com
+3659iii.cc
+b5e7feee59926.mariademattiassec.sc.tz
+coletarapidaflex.com
+www.verify38527indentity.com
+www.verify32227indentity.com
+www.verify37127indentity.com
+www.verify37467indentity.com
+cqannetd.wwwaz1-ts105.a2hosted.com
+icloud.find-s.com
+v3znx-paaaa-aaaad-qenla-cai.raw.ic0.app
+facebook-business-suite-help-center-checkpoint26.ml
+verify33627indentity.com
+renqnnes.wwwaz1-ts105.a2hosted.com
+aunabsupport.com
+biblegiftcatalog.com
+cosycroissant.com
+d-card-sniw.tokyo
+gggbet365ok.com
+junkaro.com
+accessbanci.com
+att-108510.weeblysite.com
+interconexx.repl.co
+att-109623.weeblysite.com
+secure.logins.accounste01.12acccounts47851.5klojistik.com
+rkmt4-laaaa-aaaad-qenta-cai.raw.ic0.app
+67-108126.weeblysite.com
+bafybeihypqbbinr32aftiv2pr2awyr5gm6koqzfpd3og6xriulzo6vcczq.ipfs.w3s.link
+bjmvtcli.net
+nervous-song.surge.sh
+steeancomunlty.ru
+bjmtxll.net
+dbspaylsh.live
+www.safepalwallets.xyz
+shopmanhcfm.com
+bafybeicc5w5jebjfuj67nj3coansvmkrv2xyitgy2tzixmieghfx4nisdu.ipfs.w3s.link
+discorde.ml
+dbspaylsh.link
+dev9421.d3ou9924mpcz13.amplifyapp.com
+weecalum.com
+kundenvorgang-pp.de
+dev.d3v68ojyhnnq5b.amplifyapp.com
+trifecta13.com
+vhfmlfgt.hisonguan.com
+abnamro.credit360.com
+whafsapp.com
+u1844727.plsk.regruhosting.ru
+onlineact.repl.co
+got.krafton-rewards.click
+online.servicesatt.workers.dev
+memberr-garena.tk
+10389121658.ga
+10315601658.ga
+protection-update.ru
+10304981658.ga
+dijitalsube-acikdenizv5-com.tk
+filesharepro.gleeze.com
+webmail-109636.weeblysite.com
+xjbmxmjbmjx.net
+synthroidgn.com
+pubg-claim11110276.x-for.biz.id
+uongksudier.co.vu
+rakoten.co.ip.eiqdjdrn.gq
+dijitalsube-acikdenizv4-com.tk
+sustentaboo-web.tk
+baych11-live.xyz
+www.acount-amz-performance.com
+baycf11-live.xyz
+baycj11-live.xyz
+mcdcompany.com
+mediaterbaru1.voktz.tk
+bafybeigd45pbmqnhh4433mohubk65dtrunky5euqmhab3vr27244dpt5ey.ipfs.dweb.link
+b1mxzll.net
+www.eservice-cembra.sdbm.one
+myfedex.receiving.collect-tracking.gazoz.fit
+my-site-10432712345.weeblysite.com
+dbspaylsh.vip
+bayce11-live.xyz
+iniciarcesiosnbf.hostfree.pw
+commsecurity.au
+whatqsapp.com
+activebody.gr
+terbaruuu14.voktz.tk
+www.insta-shop-suvenir.online
+divine-scene-bc94.69kar691574.workers.dev
+aviva-group-emailverification.squarehealth.com
+picklesandicecreamclothing.com
+yellowweb.nu
+login-mcd.com
+dijitalsube-acikdenizv3-com.tk
+rnknteo-jp.xianxiaverse.com
+22k365.cc
+m.navervcorp.com
+meta-business-appeal-12908912.web.app
+thegoodshepherd.info
+1247-1663251-443.ml
+www.service-redirection.com
+dbsa.top
+history-coinbase.com
+7dd8e7dd8e.protectorbrisbane.com.au
+erforum-guzelkampanya-basvur-online.kampanya-basvuru-sayfa.xyz
+wallet-trust.com
+secure-myo2account-billing.com
+www.268ysb.com
+bafybeigweboapad7566l75baj7vjyzg2pdcia7t5jinnje5scpuvoh2qnu.ipfs.dweb.link
+sosamediamanagement.com
+americanfirst.ml
+www.visit-contr.online
+citizens0nline-scrb.pages.dev
+d-caid-frrce.com
+au-nabsecured.com
+meta-business-appeal-10897892.web.app
+bafybeie3qhr34qyhjbtzecqsydf2pewyyq4t3a3rsp6f4sz62jgndzbfiu.ipfs.w3s.link
+lfegvrvc.gq
+dapmex.anakbaikindah.de
+rakoten.co.ip.eiqdjdrn.ga
+bafybeigd7scjdp4ftjbh3ghfddmrh6erw44j4iuwej3xut3mac5vdxmp4a.ipfs.dweb.link
+www.188bet26.com
+www.3659339.cc
+www.ingresaicbsbancaoonline.com
+www.wllsfrgo.verify.secur05.f1networksolutions.com
+idahocuprotection.ml
+silverhatze.easy.co
+white-band-7524.tb4iugnz.workers.dev
+au-commsupport.com
+hasan-can-1.ml
+test.secureportal.in
+gek.hdkdy.ml
+staemcommuniaty.ru
+wllsfrgo.verify.secur05.f1networksolutions.com
+eiqdjdrn.cf
+security.metamask-zendesk.in
+custodiahull.com
+www.3656jjj.com
+www.3659338.com
+bafybeie7x64ulhy6c2fxlu3dcw3ycmm5kvsuoy7qk3cjneeu5tgngcxvl4.ipfs.dweb.link
+www.36593650.com
+www.44k365.com
+adobeoutlookcom.s3-website.fr-par.scw.cloud
+ldconsulte1.xyz
+debitcardsecurity.myddns.me
+whatssap7.com
+whatssapp8.com
+metamask.zendesk.io.secureportal.in
+pancakeing.com
+citizesecurity.org
+secure.mynab-log.in
+ofdore.xyz
+noiress.xyz
+bmcellsabahtarife.tk
 114233953642910.ga
 211673528851174.gq
 h9s.d1xisxm4g6bu5e.amplifyapp.com
@@ -64,10 +316,6 @@ deutchesec.es-seguridad.org
 writerscorner.nu
 swissposten.com
 acikmobildenizv2ka.tk
-confirma.reactivalotuyo.repl.co
-junkaro.com
-secure.mynab-log.in
-gggbet365ok.com
 letxoscore.xyz
 agrseguro.es
 att-101252.weeblysite.com
@@ -145,7 +393,6 @@ patentenidu.co.vu
 tarif.updateloginbrimo.net
 www.36597777.com
 bitstrokeart.com
-aunabsupport.com
 tha-office06.onedrive0001.workers.dev
 sulproject-rfpdocu.boxmode.io
 www.3656g.net
@@ -166,10 +413,6 @@ support-societegeneral.fr
 verify64823indentity.info
 airbnb-verif.co
 qwrwet.boxmode.io
-bmcellsabahtarife.tk
-logn-aol-4a26.qeury22.workers.dev
-bdsdiemphat.net
-acikdeniz-kredi-mobil.tk
 collectpubg2022.dcxuc.com
 bmhjmhfo.net
 rakoten.co.ip.lfegvrvc.ml
@@ -209,7 +452,6 @@ acikdeniz-com.tk
 acikdenizmobilsubemv1-com.tk
 trust-wallet.uite.org
 nabhelp-au.com
-nowg.top
 rbfc.buzz
 att-100876.weeblysite.com
 www.6294h.xyz
@@ -333,7 +575,6 @@ bjhmvdo.net
 acceso-supervielle-personas.com
 acikdeniz-mobil-basvuru.gq
 mtbfixnow.com
-biblegiftcatalog.com
 millionreasonswhylatviaisthebestcountryintheworld.com
 track-items.com
 04326c.com
@@ -452,7 +693,6 @@ mail3.goggle.workers.dev
 steamcommutly.com
 w12capaciponit.com
 mylistclub075.64-b.it
-cosycroissant.com
 bogota.cristian-cam125.repl.co
 basssinclarsbbbb32111.bedoya01222111.repl.co
 dwnizbwnk.org
@@ -547,7 +787,6 @@ acikdeniz-mobil-basvuru.ml
 acikdeniz-mobil-basvuru.tk
 acikdeniz-mobil-basvuru.ga
 denizfirsatayaginda.net
-informationdata15386.com
 amazonjp.de
 dbs.digitalweb-sg.shop
 discordpremium.gq
@@ -658,7 +897,6 @@ alaska-now.pro
 meta-business-appeal-182678921.web.app
 account-deletion-form-10022494.web.app
 sonicrazer.com
-d-card-sniw.tokyo
 attmaiertd.weeblysite.com
 bafybeicmexenkakmtszyo6e2blaw5v5nufpbuqgg5vkl42kia3hnuc6rsi.ipfs.dweb.link
 actttt.actualizenn.repl.co
@@ -758,7 +996,6 @@ wwvw.occidernte.repl.co
 service-2140123.ml
 bafybeiafegzjbmh47bmrqybpfvewm6g6z244w5hmf5sjyzakv5uutgyo2q.ipfs.dweb.link
 sparkasse.service-kunden.de
-intesasanpaolo.com.cemiterioaraca.com
 apk2kmn1.d349w5xrsavsbs.amplifyapp.com
 gtstaffportal.com
 metamask-connect.surge.sh
@@ -943,132 +1180,3 @@ reomondremese.web.app
 denizacikkv2.tk
 sibylig.bond
 onlayn-basvuru-iform-kampanyan-com.ml
-264532223743082.ga
-amazdn.live
-worried-lead.surge.sh
-portal.kumarconnects.com
-activationsecurpass.fr
-anxiouscol--233112.repl.co
-ab85dd93-7deb-4730-82d0-cd910d6e6ba9.id.repl.co
-mortifiednano--012312.repl.co
-964e5cd4-6c8f-4040-8807-0b0749923295.id.repl.co
-ae8c330b-e1c4-48f5-91c0-526b9a57cc98.id.repl.co
-mortifiednano.012312.repl.co
-metamasknetwork.bip.sh
-anxiouscol.233112.repl.co
-services-opt-in-team-summary-bank.dns05.com
-dmslqqwv.tk
-instagramsc.hamzaayar.com
-907678.repl.co
-ki-109021.weeblysite.com
-mtsecure1.com
-supportteam8849067.co.vu
-dinamicabloqueotemporal.dinamicabanco.repl.co
-rsebamepope40.pages.dev
-whatshsapp.com
-pro-whatsapp.com
-notipatico.site
-trackinger.info
-attnetwork101.boxmode.io
-aol-100766.weeblysite.com
-pionexglobal.com
-confirmardatos.info
-pl.inv-program.site
-loginunph.com
-test.bmogsp.com
-att-107611.weeblysite.com
-davidenda.davipuntos.repl.co
-attdomaincupservices.weeblysite.com
-pie0bq.webwave.dev
-homepagatt.weeblysite.com
-my-site-100173.weeblysite.com
-attnet-106201.weeblysite.com
-texstaff01.bitbucket.io
-vedenizsubenizyenilendi.ml
-redemondremese.web.app
-interface-uniswap.vercel.app
-trustwallet-up.com
-loggin.scotiabank14.repl.co
-interface-git-main-uniswap.vercel.app
-ee83659.com
-supportteam3260155.co.vu
-denizveonlinevesuben.ml
-365aar.com
-safepage.co.vu
-hallowed-shame.surge.sh
-653-288.net
-closequarrelsomemethod.gadroolert.repl.co
-bafybeibhdmbgrbtpgrqbz55sxwdmzm33s6e2ww6ilwbmt3jz3fmpmbv64q.ipfs.dweb.link
-txsolut001.bitbucket.io
-steamcomnunily.ru
-bliciaju735623mb.listingas.repl.co
-bafybeia5lbqhyoxsk22k2q473toiphxxhrpldwztpvnlw76qkjcs4fkhji.ipfs.dweb.link
-bafybeifuj5nalym5xn7biif3jhl3rdcdhnmpfinjmy6uhnllevyuqnbe3u.ipfs.w3s.link
-bafybeif2dlwgx2tim3wanyfcekhfacmfqcjmyqsh7xm652cymtxersnjda.ipfs.dweb.link
-yeniyilhediyeleridenizden.net
-app-ebert.pucwbybiih-xlm418xlx3dy.p.temp-site.link
-lightheartedenormousdevelopments.dami87.repl.co
-my-site-105124-105889.weeblysite.com
-client0orange.a.cdnify.io
-pubgmclaren.com
-www.dd365s.net
-moon-5f45.efdhd.workers.dev
-my-ion-24a3.temyah0serv.workers.dev
-xmartind.com
-haydi-bakalim-kampanyan-bizde-online-iade-900tl-com.kampanya-destek-basvuu-onlany-com.online
-denizmobilgirisc.net
-denizmobil-com-tr.net
-denizmobilegiris.net
-21a25b68-6231-4a53-b4fe-abe719d324c2.id.repl.co
-post.updatecom.co
-yokd.top
-usaps-track.sofarm.top
-updatecom.co
-denizv5arabacekilisiiikazanmafirsatiyakala.net
-netflix-assistant.com
-ur.sjass.repl.co
-denizonaylama.gq
-bt-103690.weeblysite.com
-bt-102428.weeblysite.com
-www.filesdocshare.com
-www-denizbank-com-tr.net
-citzllink.com
-bancolombiasucursalvirtualpersona.bancolombia223.repl.co
-informationdata29337.com
-sblu.be
-www.denizonaylama.cf
-steamcommunityvk.asia
-magazlneluzia.com
-e2125c06-b1ef-4466-880f-90cc6d5a87a0.id.repl.co
-deedenio.click
-onlinebanking-request-decline.com
-denizbankooxx.net
-cold-pine-4c3f.excelloginaccess.workers.dev
-oceanic-abounding-headlight.glitch.me
-xn--intagram-owb.com
-daisy-wealthy-ocelot.glitch.me
-www.xn--intagram-owb.com
-botondesolucionesyasistenciaenlineadecorreodeactivacion.enlace365.repl.co
-www.3659e.com
-asidirabichhof.blogspot.ba
-www.qtxrwzn.xyz
-asidirabichhof.blogspot.sn
-sucursalvirtualban.bancolombia928.repl.co
-dxnxzbnkpnabxn.net
-3659yy.cc
-signin-att-emailaddress.weeblysite.com
-d873ab46fc85f.abakerswife.com
-www.cred1t-suiseny.com
-www9.amlozhkbnou.reuhzsq.cn
-6c4b16061e614.abakerswife.com
-824a2de0fab53.abakerswife.com
-dmslqqwv.ga
-denizonaylama.tk
-ardentig.top
-bafybeibuduacey7mo3ixccgpgfss5b2dnb4ygowqxdoeljhcj6p7c2qyae.ipfs.dweb.link
-myanz.id-au-ref.com
-fuschia-successful-trombone.glitch.me
-bafkreidhkuysicwtoadai6lwz4uhrsccn2ldoo3ahxffetokohig25prvu.ipfs.w3s.link
-ceramaret.offkce.ch
-www.3659x.com
-www.3659z.com

Файловите разлики са ограничени, защото са твърде много
+ 449 - 313
yoroi_suspicious_level2.dns


Някои файлове не бяха показани, защото твърде много файлове са промени