root 1 週間 前
親
コミット
cbb1260075
4 ファイル変更、2506 行追加、828 行削除
  1. 637 268
      yoroi_malware_level1.dns
  2. 1308 134
      yoroi_malware_level2.dns
  3. 169 196
      yoroi_suspicious_level1.dns
  4. 392 230
      yoroi_suspicious_level2.dns

ファイルの差分が大きいため隠しています
+ 637 - 268
yoroi_malware_level1.dns


ファイルの差分が大きいため隠しています
+ 1308 - 134
yoroi_malware_level2.dns


+ 169 - 196
yoroi_suspicious_level1.dns

@@ -9,118 +9,138 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
-zh.wave-whatsapp.com
-order-dpihckhmxrid.edgeone.dev
-www.bc8.now.sh
-transcript.strongholpayreviewpolicy.co
-usbank.xmldation.com
-try.sigma-whatsapp.com
-www.bitflyer.vip
-secure.orbit-whatsapp.com
-webportal.edgeone.dev
-www.mmontreal.hostel.town
-www.hesap.evergreenfin.ltd
-supprtrcb-dpldxysyz96q.edgeone.dev
-cityonedesign.live-shared-m36504.workers.dev
-solitary-sunset-9e63.adeshsinghbest.workers.dev
-www.bizlerdengordunuz.shop
-wsaofhs.cam
-www.usuariosmxonline.com
-efficient-aquamarine-wycf9prq.edgeone.dev
-www.ingresseroblox.site
-startio-terrzor.zapier.app
-www.allegrolokalnie.pl-ogloszenie-prywatne765256384.click
-www.allegrolokalne.1039837h53.shop
-allegrolokalnie.962854th.top
+www.castribuneonline.gb.net
+lntermatico.website
+menuu-aktivasi-gopayslaters.grates.beauty
+amazon.iqraashraf.dev
+www.imtaken.pro
+www.www.paypal-pay.com
+www.83670536365.com
+webtorton.edgeone.dev
+geberaloffer02.onrender.com
+main.wave-whatsapp.com
+www.tokeonpoaket.com
+www.rbxcursor.cc
+www.ww38.login.colnbasee.us
+www.r3novar44.freepage.cc
+www.kissmyaster.co
+dbsbanking.online
+static.wave-whatsapp.com
+www.eng-usa.app
+www.napthepubg.mobi
+mtoken.homes
+staging.d6bkdpdctugto.amplifyapp.com
+www.noreply-notification.icu
+www.parceldashboardwelcomeclientstationonlineopacketofficeshipment.artkiyotomotiv.com
+www.ramqprofessionnel.com
+sigma-whatsapp.com
+icon.sigma-whatsapp.com
+light-aquamarine-o9esov3l-dpdycnoyj29j.edgeone.dev
+www.0432js13.am.coinbase.cm
+connect.wave-whatsapp.com
+selfcarearubacc.online
+allegrolokalnie.pl74646.top
+driving.review-gb.com
+fabulous-embeds-059788.framer.app
+gjcrb.nourtperrlio.click
+morgenland.pt
+oorth.bablisly.click
+ruceive-rakntanpointapp.com
+receove-rakntanpointapp.com
+receive-rekntanpointapp.com
 raku-point-cebinde.com
 raku-point-edia.com
-selfcarearubacc.online
 raku-point-gche.com
-allegrolokalnie.pl74646.top
 rakupoint-rwunda.com
-receove-rakntanpointapp.com
-ruceive-rakntanpointapp.com
 raku-point-ianzi.com
 raku-point-oltys.com
 rakupoint-iaoyu.com
 raku-point-exinxi.com
 raku-point-ensheng.com
-rakupoint-edjacket.com
-receive-rekntanpointapp.com
-sasioncarid-iwang.com
 rakupoint-nsoltys.com
 raku-point-style.com
+receuve-rakntanpointapp.com
+recoverypro.live
+sasioncarid-iwang.com
+sasioncarid-mustee.com
+solarservicehouse.com
+tax-crypto-declare.com
 update7043j.rjvs4571248.pro
 update7263j.rjvs4571248.pro
-ww.rjvs4571248.pro
 update5643r.rjvs4571248.pro
+ww.rjvs4571248.pro
+www.hesap.evergreenfin.ltd
+supprtrcb-dpldxysyz96q.edgeone.dev
+cityonedesign.live-shared-m36504.workers.dev
+solitary-sunset-9e63.adeshsinghbest.workers.dev
+www.bizlerdengordunuz.shop
+wsaofhs.cam
+www.usuariosmxonline.com
+efficient-aquamarine-wycf9prq.edgeone.dev
+www.ingresseroblox.site
+www.bc8.now.sh
+zh.wave-whatsapp.com
+order-dpihckhmxrid.edgeone.dev
+transcript.strongholpayreviewpolicy.co
+usbank.xmldation.com
+try.sigma-whatsapp.com
+www.bitflyer.vip
+secure.orbit-whatsapp.com
+webportal.edgeone.dev
+www.mmontreal.hostel.town
+startio-terrzor.zapier.app
+www.allegrolokalnie.pl-ogloszenie-prywatne765256384.click
+www.allegrolokalne.1039837h53.shop
+allegrolokalnie.962854th.top
+allegro.ippoferta75635423412.sbs
+allegrolokalnie.pl-54242.top
+web-start-trezo-us.typedream.app
+svv-x-up-hold-com-x-adth.typedream.app
+bnpparibasgroup.flowsparks.com
+allegrolokalnie.pl-oferta8432.sbs
+allegrolokalnie.lokalna-ofera894032475.lol
+allegrolokalnie.lokalna412955.cfd
+allegro.lokalna-ofera894032475.lol
+rakupoint-edjacket.com
 www.solarservicehouse.com
-solarservicehouse.com
-fabulous-embeds-059788.framer.app
-sasioncarid-mustee.com
 evr.1e92830.com
 bet.hkjc.com
-recoverypro.live
 hm.revenue-declarations.com
-tax-crypto-declare.com
-driving.review-gb.com
-gjcrb.nourtperrlio.click
-morgenland.pt
-oorth.bablisly.click
 allegrolokalne.pl-ogloszenie5672993186.top
 allegro-lokalnie.pl-ogloszenie5672993186.top
 allegrolokalnie.pl-ogloszenie5672993186.top
 allegro.pl-ogloszenie5672993186.top
 allegrolokainie.pl-ogloszenie5672993186.top
-allegrolokalnie.lokalna-ofera894032475.lol
-allegrolokalnie.lokalna412955.cfd
-allegro.lokalna-ofera894032475.lol
-www.uspstdf.click
-web-start-trezo-us.typedream.app
-login-outlook365.yzz.me
-www.hari.gemez.de.page.moonton-zone.com
-verify-mobile-esl-org.sbs
-svv-x-up-hold-com-x-adth.typedream.app
-6381863365.com
-tkau.info
-bnpparibasgroup.flowsparks.com
-mail-oos.ru
-horizonvestmarket.com
-power76.net
-ww547.loutlook.com
-mawnowvasnanz-dpleh6oql3aj.edgeone.dev
-r3novar44.freepage.cc
-allegrolokalnie.pl-oferta8432.sbs
-receuve-rakntanpointapp.com
-allegro.ippoferta75635423412.sbs
-allegrolokalnie.pl-54242.top
-teliou.com
+allegro.5498h45j564.cfd
 allegro.prowar8u237h45.cfd
-akses.finglobesmbc.com
-allegro-lokalnie.pl-ogloszenie-prywatne765256384.click
-allegrolokalnie.pl-ogloszenie-prywatne765256384.click
-allegro.3298418244129h54.xyz
 allegro.prywanm4328239.rest
-allegrolokainie.pl-ogloszenie-prywatne765256384.click
-allegrolokalnie.pl-oferta2839376.lol
-allegro.5498h45j564.cfd
+akses.finglobesmbc.com
 akaes-finglobe-smbc.com
-allegro.12-1-h593g4.lol
 atualizando.help
+avancement9230e.a6fbb0jc.pro
 bradesco.sincronizacaopjonline.info
-fiche-655231.com
 finglobesmsbc.finglobesmbc.com
-idself-care.shop
 infos-destinataire.bolt.host
+idself-care.shop
+m-relai-be.bolt.host
+pro-dgrfo.com
 pushtan.scure.org
 raku-point-unda.com
+suportesaude.lovable.app
 tempoquayx.click
+allegro.3298418244129h54.xyz
+allegrolokainie.pl-ogloszenie-prywatne765256384.click
+allegrolokalnie.pl-oferta2839376.lol
+allegrolokalnie.pl-ogloszenie-prywatne765256384.click
+allegro-lokalnie.pl-ogloszenie-prywatne765256384.click
+allegro.12-1-h593g4.lol
+fiche-655231.com
 allegrolokalnie.pl-aukcja834736245.shop
-avancement9230e.a6fbb0jc.pro
 allegrolokalne.pl-ogloszenie-prywatne765256384.click
-m-relai-be.bolt.host
-pro-dgrfo.com
-suportesaude.lovable.app
+bancodelpacifico.onrender.com
+www.parceldashboardwelcomeclientstationonlinepacket.artkiyotomotiv.com
+hs0f10450e870118083da2265d502a5387.nexusqalinka2.quest
+hs696c66ed7a7c108a267ddc4bad5cc0f0.nexusqalinka2.quest
 allegrolokalne.pl-ogloszenie-prywatne763637483.click
 resgatlivelx.com
 www.hsd5905f2078e2789383ef4e04cc5f7b7d.nexusqalinka2.quest
@@ -129,10 +149,6 @@ en-en-coinbase.com
 www.alwayssecuredhub.net
 www.wiki.evergreenfin.ltd
 adhconlinedocumenttxt-y6h6n.ondigitalocean.app
-bancodelpacifico.onrender.com
-www.parceldashboardwelcomeclientstationonlinepacket.artkiyotomotiv.com
-hs0f10450e870118083da2265d502a5387.nexusqalinka2.quest
-hs696c66ed7a7c108a267ddc4bad5cc0f0.nexusqalinka2.quest
 www.allegro.pl-ogloszenie-prywatne763637483.click
 www.allegro-lokalnie.pl55998.top
 prime.gerermonespacech.com
@@ -143,6 +159,7 @@ cumsalvadornetsv2.hstn.me
 eet-lzip--wespack.replit.app
 allegrolokainie.pl-ogloszenie4567998231.top
 allegrolokalnie.pl-ogloszenie4567998231.top
+www.hebhg.com
 www.allegro-lokalnie.pl-ogloszenie4567998231.top
 raku-point-karpet.com
 www.allegrolokalne.pl-ogloszenie4567998231.top
@@ -152,33 +169,32 @@ www.cotacao-nacional.online
 www.a6fbb0jc.pro
 www.xuaoka.com
 www.jcsxnuj.com
-www.hebhg.com
 www.lumber3.com
 www.yqdyi.com
 allegro.pl-ogloszenie-prywatne765256384.click
 www.webjidi.com
 bradesco.onlinesuportepj.online
 connexion-recouvrement.com
-allegrolokalnie.lokalna-63282.sbs
 bac-ccaospa.com
+credi-en-linia--ecu-emprende.replit.app
+docwirelosszip--ftomasmiguel.replit.app
+evitale-index.com
+evitale-central.com
 informations-bourso.bolt.host
 informations-bpop.bolt.host
-mysubcription-neftlix.com
 notification-relai-fr.bolt.host
-portail-certi-code.bolt.host
+mysubcription-neftlix.com
 portail-services.com
+portail-certi-code.bolt.host
 programtion-474967.pro
-security-server-landing-page--dianneaagroo.replit.app
-v-sn.com
-yheuged.com
-credi-en-linia--ecu-emprende.replit.app
-docwirelosszip--ftomasmiguel.replit.app
-evitale-index.com
-evitale-central.com
 prime-sos.com
 s-push000021845106.scure.org
+security-server-landing-page--dianneaagroo.replit.app
 swingcresty.click
+v-sn.com
 vp-m3.com
+allegrolokalnie.lokalna-63282.sbs
+yheuged.com
 arubapagerestart.online
 allegrolokainie.pl-ogloszenie-tomaszkaraszewski-52.click
 allegrolokalnie.pl-ogloszenie-tomaszkaraszewski-52.click
@@ -231,12 +247,6 @@ allegrolokalnie.pl02.my
 mail.bhd-personal.com
 auspost-ticket.com
 tcyoinvest.com
-allegrolokalne.pl-ogloszenie-tomaszkaraszewski-52.click
-allegro.01230120hj5n.top
-allegro.04192281.me
-allegro.pl-ogloszenie-tomaszkaraszewski-52.click
-www.agenziaentrateriscossione.cg-32918273.site
-allegrolokalnie.lokalna429081.xyz
 aws-bedrock-support.com
 allegrolokalnie.pl-74162.top
 outgeud.com
@@ -245,9 +255,16 @@ allegro.031209h58h45.me
 staging.d8yffvk7rzff1.amplifyapp.com
 main.d1xdn5bib8f7no.amplifyapp.com
 free-5338447.webadorsite.com
+allegrolokalne.pl-ogloszenie-tomaszkaraszewski-52.click
 www.agenziaentrateriscossione.cg-938172634.site
-www.prime-sos.com
-allegro.pl-ogloszenie-pawelwisniewski9-29.click
+allegro.01230120hj5n.top
+allegro.04192281.me
+allegro.pl-ogloszenie-tomaszkaraszewski-52.click
+www.agenziaentrateriscossione.cg-32918273.site
+allegrolokalnie.lokalna429081.xyz
+stark-vermolt.com
+uninetaprende.blog
+www.crbncr.cc
 allegrolokalnie.smart-oferta49321.lol
 www.crbnicr.cc
 www.bancofalabella-colombia.co
@@ -261,19 +278,25 @@ cookjohnstoncpadapp.com
 allegro-lokalnie.pl-l2r3s.sbs
 www.allegro.pl-ogloszenie-tomaszkaraszewski-52.click
 www.allegrolokainie.pl-ogloszenie-tomaszkaraszewski-52.click
-stark-vermolt.com
-uninetaprende.blog
-www.crbncr.cc
+www.prime-sos.com
+allegro.pl-ogloszenie-pawelwisniewski9-29.click
 allegro.pfw498tr2323.homes
 allegro.9458323ffo.beauty
-allegrolokalnie.lokalna-709814.lol
 allegrolokalnie.pl-oferta73654223.click
+allegrolokalnie.lokalna-709814.lol
 ca-secupassinfo.com
 gdubeyle.com
 allegrolokalnie.pl-ogloszenie-prywatne7584645.click
 allegro.smarpt342832012.homes
+www.connect-1inch.com
+credi-pichi-1-ch-0--pich1ch.replit.app
+imagens-icloud.com
+applefotos.support
+cieloangular.space
+quantitive.top
 www.tackleoutplayed.com
 www.m.jinwanglai.com
+146377.xyz
 www.uspshelpers.top
 hutsoysnotsbi--crediecuador1.replit.app
 allegrolokalnie.335544ip.top
@@ -291,14 +314,7 @@ icloudbr.support
 icloudoficial.live
 rastreioicloud.support
 contrarioescuchar.site
-www.connect-1inch.com
 icloud-oficial.com
-credi-pichi-1-ch-0--pich1ch.replit.app
-imagens-icloud.com
-applefotos.support
-cieloangular.space
-quantitive.top
-146377.xyz
 allegrolokalnie.pl-75512.top
 allegro.01201290.beauty
 staging.d3r48mrbv1uana.amplifyapp.com
@@ -309,31 +325,22 @@ allegro.365345230132f.beauty
 dac8flattax.com
 allegrolokalnie.pl741921502.xyz
 ax-italy.eu.cc
+ecuadorayudas--ayudasecu.replit.app
+mastercardcrc.gu.cc
 uytrfgvujhgbtfoiuh--ubiipagoscred.replit.app
 vendredi-4-sep.com
 vendredi-5.com
-ecuadorayudas--ayudasecu.replit.app
-mastercardcrc.gu.cc
 dshsgnx.cqlingdong.com
 mastevisa.sbs
 linux-hp-prodesk-600-g2-sff.tailbe60c2.ts.net
-admin-instagram.orderyuk.info
-cn-spotify.cn
-arubaselfcareloginrestart.site
-www.r3m8w5tj1ctl.rironicmall.com
-www.tiktok-mall.store
-www.67455.xyz
-www.y50v.top
-www.venvoox6.pro
-allegrolokalnie.smart-94832.cfd
 m36502847-shared-docu.live-document-m365022.workers.dev
 consultsur.com
 www.validainfomsn.zya.me
 643467.xyz
 intermaticopacifico.onrender.com
 523486.xyz
-www.megaconnet.com
 www.22195986365.com
+www.megaconnet.com
 www.woneyi.com
 link.bitpie-blockchain.com
 www.entertainmentmembers.com
@@ -341,28 +348,37 @@ www.roxbro.wallst.ru
 paypal-login-secure.help
 pc-spotify.cn
 www.medicalremforuhd.com
+admin-instagram.orderyuk.info
+cn-spotify.cn
+arubaselfcareloginrestart.site
+www.r3m8w5tj1ctl.rironicmall.com
+www.tiktok-mall.store
+www.67455.xyz
+www.y50v.top
+www.venvoox6.pro
+allegrolokalnie.smart-94832.cfd
 www.allegro.pl-ogloszenie5722931873.lol
 payonline.mom
 www.allegro.pl-25294.click
+store-sync-ta1c.p-apygrrjc.workers.dev
 www.allegrolokalnie.pl-25294.click
 allegrolokalnie.smart-94852.cfd
 allegrolokalnie.pl73626.top
 allegrolokalnie.pl01.top
 www.allegrolokainie.pl-25294.click
-store-sync-ta1c.p-apygrrjc.workers.dev
 allegrolokalnie.63293872.xyz
 espace-recouvrement.com
-allegro.smar9439012g.casa
-allegro.pryi40-23gf2.casa
 allegro.00123192s.casa
+allegro.pryi40-23gf2.casa
 bradesco.sincronizacaopjonline.pro
 c8reg200ev8222ee.bitrix24.site
 coin-base-hub-us.zapier.app
+diagnostico.agropacks.com
 kleinanzeigen-bestellung.my111.net
+msx-italia.eu.cc
 sol-card.com
+allegro.smar9439012g.casa
 www.allegro-lokalnie.1039837h53.shop
-diagnostico.agropacks.com
-msx-italia.eu.cc
 bradesco.sincronizacaopjonline.click
 bradesco.apoiocorporativo.com
 allegrolokalne.pl-7543235678.click
@@ -378,25 +394,32 @@ allegrolokalnie.pl64378.top
 dcanconformite.com
 home-ndax-docx.zapier.app
 newcomc.weeblysite.com
-www.0ut927-lve828-365k.iceiy.com
-www.mydocusign.eu.cc
-stang.lol
+www.rafflessentosasgapore.spahotel.guru
+www.jathemanordubai.spahotel.guru
+www.metamonetization.live
+www.mx648.com
+www.2m2kaejt.6lnov0.cn
+irsly.sbs
+www.steamcommunity.vov.ru
+googleproject-emailtexverifyicagion-dpc7xpqkkma8.edgeone.dev
+www.allegroreg.com
+www.dhl-rpa-portal.infanion.com
+www.srva.closer.website
 www.eurostarsmateralasuite.spahotel.guru
 unipark-pay.top
 www.cliff.spahotel.guru
+www.tracking.usps-prioritymails.com
 www.valor.pulse-whatapp.hl.cn
 www.solicitar-ahorabhd.iceiy.com
 435467.xyz
 www.hakunamatata.hostel.town
-www.rafflessentosasgapore.spahotel.guru
-www.jathemanordubai.spahotel.guru
-www.metamonetization.live
 h5.trezor.beauty
 www.deltasbymarriottrega.spahotel.guru
-www.mx648.com
 www.43179986365.com
-www.2m2kaejt.6lnov0.cn
+www.0ut927-lve828-365k.iceiy.com
+www.mydocusign.eu.cc
 i1p7-l1uj-8pgw.help-ndcparking-com-s-account.workers.dev
+stang.lol
 www.67407.xyz
 www.us-usps-xf.xyz
 www.i0jhrz.tokeonptoket.com
@@ -404,74 +427,24 @@ adminnfupanel-dpg54ztfrzuf.edgeone.dev
 www.hillbark.spahotel.guru
 www.armoniaholidayvillage.spahotel.guru
 www.nachocebu.hostel.town
-irsly.sbs
 1xlite-64426.today
-www.steamcommunity.vov.ru
-googleproject-emailtexverifyicagion-dpc7xpqkkma8.edgeone.dev
-www.allegroreg.com
-www.dhl-rpa-portal.infanion.com
-www.srva.closer.website
-secureppl-login.help
-www.allegro.ofep23891.shop
-www.monoption-creneaumr.help
-allegro.012031928g.lol
-vod-renouvellement.com
-www.free-5555167.webadorsite.com
-msgg-serves.surge.sh
-free-5555167.webadorsite.com
+formulario-cita-digital-apjsh-2026.cr-web.workers.dev
 www.msgg-serves.surge.sh
 www.blogerinstagr.iceiy.com
 www.my-new-bnb-bsccoin.surge.sh
 www.custoezcenyr.dynv6.net
 free-5532335.webadorsite.com
 www.free-5532335.webadorsite.com
-formulario-cita-digital-apjsh-2026.cr-web.workers.dev
-gov-pl-web.com
 allegro.pl-ogloszenie5722931873.lol
 allegrolokalnie.752976.lol
 allegro.pl-25294.click
 allegro.0901209ghgh.beauty
-towerbanks.com
-www.96037586365.com
-www.nextbeu.com
-www.67438.xyz
-www.b45xxx.com
-www.schweizerhofbern.spahotel.guru
-www.dsignpost.com
-webupgrade394949-dp94sdn9spre.edgeone.cool
-cpcalendars.20-62-198-13.cprapid.com
-www.gleneaglestownhouse.spahotel.guru
-www.steamcommunity.pips.ru
-www.1w21.am.coinbase.cm
-www.61918.xyz
-www.67426.xyz
-www.asianagr.spahotel.guru
-rude-black-4tow5jpt.edgeone.dev
-www.bet-365.pt
-www.pegasus.spahotel.guru
-www.7t83kwq8goz9zkbc.23.32.qjgarden.com
-bancoitauconsig.com
-freeflow-2026.tarifaviasbrasil.site
-www.s7xnc4.tokeonpqaket.com
-app.bitpie-blockchain.com
-www.11123436365.com
-www.steamcommunitty.wallst.ru
-midasplay.gamerstored.com
-www.centralhouselisbonbaixa.hostel.town
-www.httpverfi-cecompte-buro-wbemai-id-retrunsectionusl-inboxwhct.usluga.me
-www.infogmx.de
-www.birt.club
-www.dromhondatuning.hop.ru
-www.aulamexiverifica.gt.tc
-www.enlinaea.9e.cz
-www.inform.viptop.ru
-www.web2.pancake.run
-apexstpark.shop
-www.alkhoorycourtyard.spahotel.guru
-trustcapitallogini.webador.com
-gratuit-5538115.webadorsite.com
-outlookwebs.softr.app
-10qin-wps.api-ms365-cloud.workers.dev
-poductividad--createrapp000.replit.app
-berachainairdrop.surge.sh
-www.berachainairdrop.surge.sh
+secureppl-login.help
+www.allegro.ofep23891.shop
+www.monoption-creneaumr.help
+allegro.012031928g.lol
+vod-renouvellement.com
+www.free-5555167.webadorsite.com
+msgg-serves.surge.sh
+free-5555167.webadorsite.com
+gov-pl-web.com

ファイルの差分が大きいため隠しています
+ 392 - 230
yoroi_suspicious_level2.dns


この差分においてかなりの量のファイルが変更されているため、一部のファイルを表示していません