root hace 3 años
padre
commit
cbfa9fc99c
Se han modificado 4 ficheros con 529 adiciones y 662 borrados
  1. 36 117
      yoroi_malware_level1.dns
  2. 270 163
      yoroi_malware_level2.dns
  3. 1 160
      yoroi_suspicious_level1.dns
  4. 222 222
      yoroi_suspicious_level2.dns

+ 36 - 117
yoroi_malware_level1.dns

@@ -33,8 +33,6 @@ tugshila.com
 56708.com
 520jj.net
 626124626124.626124.neshuafoods.com
-70019.dailycrick.com
-7c29d5de.getlastnews.com
 82.departments.dhysor.ru
 8km.usfpgl9x9d.com
 a0a435a4243a6a4d0.salesforce.news
@@ -55,17 +53,13 @@ abashinstructor.com
 ad405353fde3f90a4-a9dc4b6921b9a8c8f.salesforce.news
 accesso-restrizione.com
 adb21a0180336f2d9ae87dfb60e5c15f37.salesforce.news
-adulttime.ru
 aggregationmulecontribution.com
-agilitymastery.expandingu.com
 aidanmooremusic.com
 agsig.org
 allaboutmygarden.com
-aloft.relay34.cicindi.ru
 aliastryalways.com
 albumsignaturerequested.com
 alignedcoach.marduk.app.theplaygroundcase.net.brickell100.com
-angviopn.com
 anenttatting.com
 api.us3.app.liongard.com
 appserverafe45ecba6f45190a.salesforce.news
@@ -86,11 +80,11 @@ bakiret.com.sillanwali.pk
 bestfreecounter.com
 bdhmdlkjyxgs.com
 best-dark-web-sites-for-cc.ru
-benzo-kem.ru
 bbm.dailycrick.com
 bdgvocdl.ws
 bless.anakembok.de
 birthtothreeipswich.org
+bigger96.allow.endanger.hokoldar.ru
 birlerskababs.com
 bly1hf.com
 brainsevior.live
@@ -99,8 +93,6 @@ burgerjolly.com
 bsagij.com
 bsd02.acaf015aaf6fbac40.salesforce.news
 bwhvwcnr.ws
-buzzgone.rest
-c6ea9ba085e7a.mariademattiassec.sc.tz
 cabronsiblog.blog.test.ssl.ecolado.top
 cache3a928596ba28c8a8b4.salesforce.news
 catchinfo.org
@@ -114,20 +106,16 @@ cf4d883f.sarahthelwell.co.uk
 claim.approvedurls7.info
 chr82.zhubint.ru
 close42.dzhehant.ru
-cloud-repository.com
 close97.dzhehant.ru
 cleanskycloud.com
-cogentwarden.com
 comprehendbighearted.com
 concealbeakerdough.com
 corientass.com
 contactsupportdesk.com
 contanti.org
 computeria.ru
-costcosurvey.shop
 counterparadise.com
 cpcontacts.breakfast-bites.com
-cpanel.bricklawgroup.com
 cpcontacts.parkysplace.com
 cpcontacts.gobarji.si
 cragconcluded.com
@@ -160,7 +148,6 @@ edureviews.net
 dyeingjaun.com
 elthamwildcats.com.au
 englishpetals.com
-eki-net.com.juwb.top
 equifaxlaw.com
 ep1btc.com
 etherscxan.link
@@ -170,12 +157,9 @@ etwibyh.ws
 exclusivett.site
 excelmedicalpk.com
 eveningproclamationarched.com
-ewsindia.net
 farfehtch.com
-fansteek.ru
 fgcdjbylba.ws
 filesoftox.info
-firsttravel.am
 fiw7qst.aj4wnw5wx6.dkogar.cl
 fiz4tl.com
 flameofhumanity.com
@@ -190,7 +174,6 @@ gatewaytoworld.com
 gainde.qanet.gm
 gceog.com
 geodaljoyless.com
-git.git.booking.cardimania.com
 go.9t5.me
 go.getfreadom.com
 golo.fm
@@ -200,7 +183,6 @@ gnam.spk-update-terminal.com
 goog.istakechau.autos
 goog.evelopedsev.autos
 grammarlychrome.com
-googe.ca
 grenzenloskochen.erne.com
 growyourdiscord.com
 gscare.cc
@@ -208,7 +190,6 @@ gumrrajxhjm.ws
 hardtotake.com
 handbagcordial.com
 hatchetsiegecleverness.com
-hg.shovelbland.com
 hgvip3786.com
 hkllyhq.ws
 homer.ae2b111133ea59c91.salesforce.news
@@ -225,7 +206,6 @@ idesalud.com
 iceboxlitre.com
 imagelinetechnologies.com
 j2.galerix.ru
-jeehaish.com
 jpivxtsxpkn.com
 jsc5-129.mailidemo.secure.ecolado.top
 jkeur-d8808.web.app
@@ -240,7 +220,6 @@ kerattogeist.com
 jteuyf.top
 knowingeffectiveresource.bancoprovinar.repl.co
 kristenbelltattoos.com
-krik2w.directionheart.co.in
 lajmereale.com
 laboratorytests.org
 konasaphie.com
@@ -256,16 +235,13 @@ links.detectionrole.one
 luhlbixiarh.velocity.company
 livealifeyoulove.com
 lsthlsy0u.link
-mail.acteristic.monster
 mail.antsnor.beauty
 mahkotamaju.com
 mail.axasegurosagenciacadiz.com
 ltjss.net
 mail.boostaros.rest
 mail.bestfloridapublicadjuster.com
-mail.brainsevior.live
 mail.bladderknives.online
-mail.buzzgone.rest
 mail.dventure.monster
 mail.dventure.beauty
 mail.kerrcialu.monster
@@ -276,11 +252,9 @@ mail.mpetitive.monster
 mail.meditatio.monster
 mail.lluisallullevents.com
 mail.mecanica83.com
-mail.mpetition.monster
 mail.normesduie.beauty
 mail.ollective.beauty
 mail.nstpictures.jp
-mail.qemesdize.monster
 mail.skeptifat.beauty
 mail.usabilidrone.pics
 mail.warnblack.com
@@ -331,7 +305,6 @@ page.deeperhard.com
 organexpectationsmaintain.com
 pabzlp.biz
 pc01a9e72057512269beb.salesforce.news
-pfiryv.miracleclub.quest
 pcsszerviz.hu
 pc29aa6b94e1d631878c9.salesforce.news
 pc31afc32161b44cca1f9.salesforce.news
@@ -353,7 +326,6 @@ progress.cashdigger.com
 pronunciationawarenessunemployment.com
 pussyboo.com
 pushnest.com
-pwr1mq.com
 qbzkgzkc.ws
 qjfokdzhkyjf.com
 qvffi.ws
@@ -375,94 +347,32 @@ rsntcgoowyxsu.com
 root.ns1.ns2.kalarada.com
 s1656690294407.listellos.com
 s4036075871068.listellos.com
-saciceacsnace.cqwnqk.top
 s298.a5261f99cd6381908.salesforce.news
-saciceacssace.ruwymh.top
-saciccacsaacn.otpyob.top
-sacicesccsnace.czwota.top
-sacicesccsnace.ehekrx.top
-saciceacssace.cqwnqk.top
-sacicesccsnace.gbdoua.top
 saciecacsaacn.pynwaj.top
-saciecacsaacn.bifjvh.top
-sacicsacscacn.taegng.top
-saciecacsaacn.tmerzz.top
-sacicsacscacn.klvynj.top
-sacicesccsnace.tvkxwn.top
 sacicsancscascen.brjqsy.top
-saciecacsaacn.pywjsj.top
-sacieeacsnace.ejfisj.top
-sacicsacscace.taegng.top
-sacicsacscace.pynwaj.top
-saciscacsaacn.jrnmkk.top
 saciseacssace.bmfobi.top
-sacieesccsnace.rkiglj.top
-sacieesccsnace.ikkkdk.top
-sacieeacsnace.pxgjez.top
 saciscacsaacn.qaeftk.top
-sacieesccsnace.eefurs.top
 saciesacscacn.pynwaj.top
 saciseacsnace.tvkxwn.top
-saciseacsnace.ehekrx.top
-sacieesccsnace.ptrkur.top
-saciesacscace.sdgzim.top
-saciseacssace.tvkxwn.top
-sacisesccssace.wlkehb.top
-sacisesccssace.hstuuy.top
-sacisesccsnace.wdxrob.top
-sacisesccsnace.ptrkur.top
-sacisesccsnace.ehekrx.top
-saciseacssace.gtplhd.top
-sacisoacsnace.sdgzim.top
-sacisesccssace.xzngwt.top
-sacisesccsnace.cwjzww.top
 sacisoacsnace.imfgws.top
-sacisesccsnace.wlkehb.top
 sacisoacsnace.wpkbmz.top
-sacissacscacn.cwjzww.top
-sacissacscace.yjbkym.top
-sacisosccsnace.hstuuy.top
-sacisoacssace.klvynj.top
-sacisoacsnace.vymalq.top
-sacisosccsnace.sdgzim.top
-sacissacscacn.pgoicb.top
 sacisoacsnace.xkbwcu.top
-sacisoacsnace.xzngwt.top
-sacisosccsnace.klvynj.top
-sacisosccsnace.yircqw.top
 safemacpc.xyz
-sacissacsnace.ruwymh.top
-sacissacssace.wlkehb.top
-sacissacssace.yjbkym.top
 sacisssccssace.qaeftk.top
-sacissacssace.msqzhx.top
-sacisssccssace.wdxrob.top
-sacissacsnace.rkiglj.top
 sacisssccsnace.iqgaah.top
-sacissacscacn.pywjsj.top
-sacissacsnace.klvynj.top
-sasiscacsaacn.ptrkur.top
 saismiami.com
 sasiscacsaacn.cqwnqk.top
-sasiscacsaacn.pgoicb.top
 sasisesccsnace.eefurs.top
-sasissacscacn.kcjtvn.top
-sasissacscacn.pxgjez.top
-sasisesccsnace.wdxrob.top
 sasiseacsnace.imfgws.top
-sasissacscace.cqwnqk.top
 sasiseacsnace.taegng.top
 sawariyacargopackersmovers.co.in
 sasisesccsnace.iqgaah.top
 sasissacscace.kcjtvn.top
 schseels.com
 secure-access-22cf4qeheh9a435c.gate33.xyz
-sdgzim.top
-secure-access-52a3dibj6eja2545.gate43.xyz
 secure-access-54818uo9la4ej354.gate43.xyz
 secure-access-5091ej2a3ira0d35.gate43.xyz
 secure-access-7acfbibuop21z6c9.gate43.xyz
-secure-access-88a863v2tejhe496.gate43.xyz
 secure-access-7467dhom7usvc807.gate36.xyz
 secure-access-9e846uoqduqfy9d1.gate43.xyz
 secure-access-e705cp2h96ja2522.gate36.xyz
@@ -475,19 +385,15 @@ sextgpgalleriesfree.biz
 services-team.onomsblinks.com.ng
 sftuxj.ws
 shein-ok.website
-sharktop2.xyz
 shandongbaobiao.cn
 shop-cvv-carder.ru
 shop.computing-age.com
 silencilhardmale.online
-sistemasocr.com
 sickdeal.net
 simultaneouslyagreeingcontradiction.com
-sjmta.iyuvbogym.com
 sincalled.com
 sliceofg.com
 so21.american-public.org
-smalltownbigband.nl
 so35.american-public.org
 smartsegment.ru
 skechers-portugallojas.com
@@ -495,10 +401,8 @@ so44.american-public.org
 so61.american-public.org
 somacase.ml
 socketbuild.com
-specialistinsensitive.com
 solutiontrackers.com
 springfield.a057722a7bc304b8e.salesforce.news
-sterlingstatesbank.net
 stooped.faith12.chaeog.org
 stata1ea3c0cf2bbdeb77.salesforce.news
 steelcitysafe.org
@@ -521,7 +425,6 @@ techsmashwru.ru
 thehrstrategies.com
 tinhightech.net
 themasystem.dailycrick.com
-tldbm-industry.com
 tntl4ever.com
 tolerant-technology.co.uk
 track.pnicnik.live
@@ -534,14 +437,11 @@ traitorpenthouse.com
 tradingpancreasdevice.com
 transportadoradegranos.com
 tunnel23concepts.com
-tv.aleksandrow-lodzki.pl
 twimzy.com
 umarketz.net
 uxthnfho.ws
 unusual.branizericing.net
-unsaltyalemmal.com
 unwurgwaaau.ws
-urokccp.cn
 vandervalkhotelparijs.com
 video.hellhorn.shop
 uzvgkfet.ws
@@ -570,20 +470,16 @@ wilfridamendment.com
 woodmoreestateshoa.com
 worldtribune1.xyz
 worldtimes1.xyz
-wolfsecurity.co.za
 woncherish.com
-www.aceneurotonix.ltd
 www.accesso-restrizione.com
 www.aceeoa.aescooen.hvcgrs.top
 www.aceeean.aecsoecon.nsbjrf.top
 woywkmam.ws
-www.acteristic.monster
 www.airraining.co
 www.advb9fyxlf2v.com
 www.apexelite.com
 www.aeeesan.ascececon.ixrnff.top
 www.babycouture.in
-www.boosthard.live
 www.breadbasket.host22.com
 www.blastsite.rest
 www.dailysarkariupdate.com
@@ -608,18 +504,13 @@ www.greywish.com
 www.heartlandracingco.com
 www.hjtd.com
 www.jefebing.monster
-www.jersdeui.monster
 www.huzhoupeiziguanwang.cn
 www.langlasses.com
-www.jpvnegocios.com
 www.margoun.com
 www.mb102.com
 www.maykke.com
 www.mon-assu-vital.info
 www.mikeidea.com
-www.myloxxer.com
-www.myjceasceb.myjeaacecb.owkbzp.top
-www.myjaecsceb.myjoaacecb.bazujq.top
 www.myra-simon.com
 www.myjcecsceb.myjaascecb.xakv.top
 www.northamptonassessor.us
@@ -637,13 +528,11 @@ www.sacisesccssace.rkiglj.top
 www.sacissacscace.tmerzz.top
 www.sacisoancsnascen.kfjzvl.top
 www.sacisoacssace.zyiily.top
-www.sacissacsnace.wlkehb.top
 www.sasiseacsnace.gtplhd.top
 www.saisoen-co-jp.aesesnse.dpzuhj.top
 www.seo101.net
 www.silencilhardmale.online
 www.silknaturals.com
-www.standwithsam.com
 www.shopping.a6dc8bc2fbf1fe6a5.salesforce.news
 www.stephcurry.us
 www.sportaction.eu.pel.mk
@@ -666,7 +555,6 @@ xissidearm.com
 xisdavhycjy.ws
 wwwarkaplus.com
 xmzzhxkuznckx.com
-xunniuwang.cn
 xtfrfdjb.casny.org
 ykmkr.server-on.net
 yn3344.com
@@ -687,7 +575,40 @@ lndth.zpwctoqpd.com
 rankertorten.com
 sacisssccsnace.otpyob.top
 www.hongbotv.com
-23y41c8l664dol2.directorio-w.com
+493.lorv.org
+41decrease.hungzo.ru
+autoconfig.daprofesional.com
+interior.ru
+m4ufree.kim
+meh.onelittle.top
+mail.dronair.beauty
+oricopdtwli545ven4lcs0.musops.live
+potsalonescuresrvieonecom-bbd7ee.ingress-florina.ewp.live
+rg1t8ioux.teafatting.quest
+luxchecker.pm
+matryoshkaby.com
+pltw.com
+telete.in
+vardosvideo.com
+thisservermustbeprime.com
+vm.o4k4z.chileinsumos.cl
+www.edelweissranch.com
+1440889672.tutarama.ru
+beststudwelders.com
+baleiambwee.com
+passionsakinsola.net
+maloprotect.xyz
+gooo.com
+mail.wafminbs.com
+hvms.kxzuvrtnj.com
+mail.coiuikne.beauty
+marshagalea.com
+www.adolescen.beauty
+verploton.ru
+www.attractiv.monster
+webcamsluts.cfd
+www.contactforhelpnumber.com
+www.thefineyounggentleman.com
 akbhnatbk.ws
 aphmp.ws
 aveihav.ws
@@ -715,7 +636,6 @@ vrvhaulnqtk.ws
 wdzjly.ws
 wgmnxjbb.ws
 wfeexzscg.ws
-www.firstride.co
 www.itemboxpubg.com
 xcsfhufxn.ws
 xzeiegkwyei.ws
@@ -765,6 +685,7 @@ callback.22-709.sg1cloud.com
 elvnetworks.com
 fofapohelo.com
 getinteriorartstudio.com
+m4x.bbcinternationalnews.com
 mtaxservice.com
 paloaltocloud.online
 pabowape.com
@@ -777,14 +698,12 @@ upd.kasperskyupdates.com
 www.usts.site
 xazuzucem.com
 z3a1.ssndob.cn.com
-vmovee.cc
 buroher.com
 cs.imalloc.cn
 danalogs.ru.xsph.ru
 scriptslibs.mcdir.me
 plutonglatov.ru.xsph.ru
 apple.gps-33.top
-mining-bb.gives
 deibknvgfqyaupr.com
 tvkviglitracrxd.com
 irlvihxehqqfcrv.com

La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 270 - 163
yoroi_malware_level2.dns


+ 1 - 160
yoroi_suspicious_level1.dns

@@ -138,13 +138,11 @@ sky-109779.weeblysite.com
 www.acikdeniz-mobilsube-kredi.cf
 ekle-kampanya-bizde-var-haydi-com.cf
 evrak-dogrulama-e-devlet.com
-irb8d7.webwave.dev
 kependable.top
 pt.phone-location.info
 supportteam26495126.click
 traducator-ungaria.ro
 ww8acessodocliente.shop
-xn--edevletkaqs-8zbb.com
 mjigosagri.web.app
 www.unisonsouthayr.org.uk
 www.reinscindusera.com
@@ -273,6 +271,7 @@ cancel81884140-binance-com.web.app
 cancel98785117-binance-com.web.app
 sunscreenproducts.com.au
 www.denizbankcom.cf
+anzsecure-log.com
 business-land-blog-online.cfd
 emdiamaggaziconsult.com
 metamask.io-1r2s.omkstyakobus.org
@@ -361,9 +360,7 @@ elaborateagitatedcondition--allsummerring.repl.co
 facebook-service.servehttp.com
 spring-watery-opinion.glitch.me
 amshoph.com
-bjmxzcll.net
 mobildhl-parcel.com
-anzsecure-log.com
 mynabsecured.com
 mtbs42bv.pages.dev
 chasebkkk.com
@@ -1023,161 +1020,5 @@ bbscoke.com
 iccuvf.link
 document3e-cbde2.web.app
 authwallet.pages.dev
-mensorganichaircare.com
-netflix.com.my-device.net
-chek.fedex-track.me
-netflixgen.cyber-matrix.systems
-imowel.de-session55127-haus2-92kxt.de.eventoblue.com
-kampamyam-ekli-burada-onlime.cf
-976403029071152.ga
-mtb0nline-s3n.pages.dev
-supportteam5526410.asia
-yahoologinsupportonline.lel-us.com
-credit-agricole-assistance.com
-trustwallets.website
-sopeccj.top
-u1849331.cp.regruhosting.ru
-att-109867.weeblysite.com
-att-teamloh.weeblysite.com
-34569875.09886.repl.co
-cardingnts.com
-vipi63online-secure.pages.dev
-staemconmunyti.ru
-www.claimreward.link
-res53rd.web.app
-gerenciadordecoletafull.online
-att-103285-106803.weeblysite.com
-att-mailupgrade-0.weeblysite.com
-package.generalcarpentermd.com
-m-se-109-180.weeblysite.com
-yahoo-att-104809-102534.weeblysite.com
-my-site-108680-107662.weeblysite.com
-yahoo-107813.weeblysite.com
-sp413661.sitebeat.crazydomains.com
-consultador.cl
-hhhfhfh.weeblysite.com
-playlist-cheats-gregory-circumstances.trycloudflare.com
-dkzp7j.webwave.dev
-rakoten.co.ip.skgwbjso.cf
-jhui-248a2.web.app
-asass-2eb7a.web.app
-hayde-bakalim-onlinr-islemler-burda-900tl-com.cf
-yahoo-100370.weeblysite.com
-att-106276.weeblysite.com
-gentinfantil.com
-kundenportal.wozasoccer.com
-bitpurvey.com
-lg-rights-fast.tk
-att-deactivationatt.weeblysite.com
-att-109702.weeblysite.com
-lg-help-all.tk
-microsoft-line.surge.sh
-link-accountvalidate.com
-www.track-us.org
-bjmscels.net
-aamazons.xyz
-kundenportal.pavaotech.com
-att-team-108308-102462.weeblysite.com
-att-102260.weeblysite.com
-k0pppt.webwave.dev
-xyuh1j.webwave.dev
-suncoastcreditunioon.link
-supportteam99235458.co.vu
-zentrum-kunden.northlakecdj.com
-supportteam659854257.co.vu
-huissier-justice-montlucon.com
-portal.n-fact.com
-supportteam6588456.co.vu
-allask.za.com
-b2.13-50-16-182.cprapid.com
-www.bancociudad.online
-signup.media-spire.com
-id.sevincegh.com
-num.natxs.com
-livinglocal.homes
-eagle-wyoallteaccessedandpat-app-64zdp.ondigitalocean.app
-verifyid818574.com
-coinbazze.com
-verifyid818374.com
-fe2yanagricosite.web.app
-30bimcell.net
-tantqasg.wwwaz1-ts105.a2hosted.com
-108060997791300.gq
-bigfortechance.web.app
-qiandangbao.com
-1453-547661354-7983-06.gq
-paxful-es.pro
-amshophp.com
-www.banetlkjf.online
-cok.natxs.com
-www.verifyid817574.com
-www.verifyid818379.com
-verifyid818571.com
-denizbanklogin-com.net
-www.verifyid818773.com
-denizbanksiolineisjemler-com.net
-c25fb524-9055-4d33-869b-94cd7d51717e.id.repl.co
-verifyid818238.com
-markulit.top
-dsjidsijodsiojdsoij.com
-wwwdbspay.shop
-poooo-158a6.web.app
-dcspay.top
-www.order-parceldh.com
-metamask3.cn
-my-site-103819-100375.weeblysite.com
-att-103486.weeblysite.com
-nbg-banking.web.app
-server.rvjradio.com
-facerecruit.co
-ciqrjrzk.tk
-rakoten.co.ip.ciqrjrzk.tk
-dbssg.club
-020k365.com
-kunde.dianekeltner.com
-miccheckradio.com
-mtb0nline-s5n.pages.dev
-mtb0nline-s8n.pages.dev
-yashevents.top
-3115dd.me
-bafybeicir2h3wjs2hwys4h22lbfh5p363yhp56ofsie2qhct5ax3yrb6fm.ipfs.dweb.link
-itesmanagehss357145.co.vu
-ofonxceqpe.web.app
-check.fedex-tracking.me
-tladesanla.online
-pa-s-s.fiohkajbdmasd.repl.co
-pubganiversary.work.gd
-netflix-eight-sigma.vercel.app
-ibbankfio.com
-wwwdbspay.today
-iuaniceeoaea.com
-rakoten.co.ip.skgwbjso.gq
-skgwbjso.gq
-allowinfmeing.com
-bridge-arbitrum.xyz
-onuraolbillspayment.weeblysite.com
-yahoo-107935.weeblysite.com
-online-bcb992-viewer-e0536f8-ab27c9e-5cc766-6b72d5.pages.dev
-trmku.texastight.ltd
-vfyd.actgraphic.icu
-jsul.okmodified.icu
-package2021.blogspot.ba
-knfzh.htmlstrong.ltd
-opzc.octfederal.icu
-ohmq.unionideal.icu
-whatstapt.com
-afosi.org
-sac-uol291.node.cloudlets.zone
-agregion.monster
-rakduten.top
-sleanncomunitli.ru
-vendaonlineblack.com
-blackvirtualbr.com
-virtualofertasbr.com
-lojascarrinhonet.com
-ofertasblackfriiday.com
-sube-siz-gi-ris-denizban-k.tk
-gijr.unionideal.icu
-kfcu.buzz
 ofdore.xyz
 noiress.xyz

La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 222 - 222
yoroi_suspicious_level2.dns


Algunos archivos no se mostraron porque demasiados archivos cambiaron en este cambio