root 1 هفته پیش
والد
کامیت
ebedc1de88
6فایلهای تغییر یافته به همراه11625 افزوده شده و 6062 حذف شده
  1. 86 85
      nethesis_level3.netset
  2. 51 51
      whitelist.global
  3. 4249 2195
      yoroi_malware_level1.dns
  4. 6634 3277
      yoroi_malware_level2.dns
  5. 208 194
      yoroi_suspicious_level1.dns
  6. 397 260
      yoroi_suspicious_level2.dns

تفاوت فایلی نمایش داده نمی شود زیرا این فایل بسیار بزرگ است
+ 86 - 85
nethesis_level3.netset


+ 51 - 51
whitelist.global

@@ -14,6 +14,54 @@
 62.149.128.154
 62.149.128.151
 62.149.128.160
+68.183.8.80
+159.223.237.208
+159.223.215.242
+188.166.64.212
+167.71.64.103
+128.199.52.246
+161.35.81.169
+164.92.215.172
+188.166.17.142
+188.166.85.76
+152.42.136.190
+164.90.204.45
+146.190.226.124
+104.248.95.189
+104.248.194.112
+64.225.71.102
+167.99.210.125
+188.166.29.153
+146.190.237.107
+178.62.192.199
+167.172.38.137
+167.71.73.171
+188.166.77.48
+188.166.85.242
+167.71.66.0
+152.42.138.49
+134.209.93.118
+104.248.205.106
+165.22.205.55
+188.166.55.209
+64.227.75.231
+178.128.244.136
+159.65.198.47
+161.35.149.158
+164.90.197.63
+167.71.11.73
+167.172.38.180
+178.62.247.86
+159.223.7.204
+146.190.234.168
+68.183.7.251
+174.138.8.207
+174.138.2.121
+161.35.80.152
+134.122.51.35
+178.62.210.100
+167.99.40.163
+161.35.157.15
 146.190.238.76
 167.99.217.178
 167.71.8.45
@@ -158,57 +206,6 @@
 167.99.219.82
 64.227.78.25
 178.62.221.146
-68.183.8.80
-159.223.237.208
-159.223.215.242
-188.166.64.212
-167.71.64.103
-128.199.52.246
-161.35.81.169
-164.92.215.172
-188.166.17.142
-188.166.85.76
-152.42.136.190
-164.90.204.45
-146.190.226.124
-104.248.95.189
-104.248.194.112
-64.225.71.102
-167.99.210.125
-188.166.29.153
-146.190.237.107
-178.62.192.199
-167.172.38.137
-167.71.73.171
-188.166.77.48
-188.166.85.242
-167.71.66.0
-152.42.138.49
-134.209.93.118
-104.248.205.106
-165.22.205.55
-188.166.55.209
-64.227.75.231
-178.128.244.136
-159.65.198.47
-161.35.149.158
-164.90.197.63
-167.71.11.73
-167.172.38.180
-178.62.247.86
-159.223.7.204
-146.190.234.168
-68.183.7.251
-174.138.8.207
-174.138.2.121
-161.35.80.152
-134.122.51.35
-178.62.210.100
-167.99.40.163
-161.35.157.15
-152.42.132.115
-188.166.37.242
-206.189.106.156
 178.62.253.220
 164.90.199.105
 159.65.198.16
@@ -218,6 +215,9 @@
 161.35.95.105
 134.122.55.131
 161.35.88.95
+152.42.132.115
+188.166.37.242
+206.189.106.156
 104.248.80.57
 134.209.136.185
 134.209.206.121

تفاوت فایلی نمایش داده نمی شود زیرا این فایل بسیار بزرگ است
+ 4249 - 2195
yoroi_malware_level1.dns


تفاوت فایلی نمایش داده نمی شود زیرا این فایل بسیار بزرگ است
+ 6634 - 3277
yoroi_malware_level2.dns


+ 208 - 194
yoroi_suspicious_level1.dns

@@ -9,10 +9,141 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+www.admin.yqbjdb.app
+dailyworkidpro.com
+fanting.top
+www.admin.768139.vip
+www.login.68698.vip
+www.api.yqbjdb.app
+www.whtsaapp-zl.com
+www.sdfczttkk.tech
+layananid-froomcstmr.veiter.biz.id
+cyfdg.sbs
+tiempo-oso.site
+www.stream.cyfdg.sbs
+sd.tex-transaction.com
+atebet.digitlplet.dpdns.org
+1165tt.com
+683952.win
+www.saibo11.com
+www.1665ddd.com
+yjzdq.sbs
+www.15659966.com
+www.u80h.xyz
+www.b365007.com
+www.1565nnnnn.com
+www.195qq195.com
+www.17753377.com
+www.1565lllll.com
+www.1665nnn.com
+www.17755599.com
+www.2025baofu026.shop
+www.samtdpp.com
+www.3656ss.com
+25369.pet
+gemini2026.zeabur.app
+minhareformacasa.online
+coopergemini.zeabur.app
+brasilobras.website
+tk29.2025baofu026.shop
+danacostmerservice.suncou.biz.id
+cardcare.cc
+uissea.zeabur.app
+lendwyse.com
+www.lendwyse.com
+allegrolokalnie.oferty-kategoria-popularne-15504681.sbs
+allegrolokalnie.pl-567883457.icu
+allegrolokalnie.pl-65654468.cfd
+firmafirmafirmafirma.onrender.com
+cvcvcvbcvbcvbvcb.onrender.com
+www.mouvcaxd.com
+www.beinkl.com
+dkb.de-908uio9.cc
+www.bivimx.com
+public-carte-sante.com
+beinkl.com
+rsven.com
+www.rsven.com
+bivimx.com
+www.public-carte-sante.com
+www.yb0.biz
+lmtokens.com
+gallery.billy-chiu.com
+www.staging.nksgzrktao.my
+charliemanarix-facebook-login-clone-spy-edition.static.hf.space
+www.whtasapp-am.com
+www.nkt-kuio.com
+peter-gemini.zeabur.app
+mlraclesasia.com
+ldr-df45-df76df.sd98.workers.dev
+www.post-luxo.com
+avantajli.sbs
+whantsapp.us.cc
+allegro.pl-oferta6521785.sbs
+allegrolokalnie.pl-oferta6521785.sbs
+ecarte-infoameli.com
+vinted.pl-oferta6521785.sbs
+mouvcaxd.com
+allegrolokalnie.oferty-kategoria-popularne-145547.sbs
+allegrolokalnie.oferty-kategoria-popularne-135847.sbs
+allegrolokalnie.oferty-kategoria-popularne-1644681.sbs
+allegrolokalnie.pl-85473945.cfd
+vinted.pl-oferta-7940917277.shop
+allegrolokalnie.pl-039492854735453.sbs
+allegrolokalnie.oferty-kategoria-popularne-129847.sbs
+recovery-ledgersupport.com
+recover-signer.com
+account-dash.com
+devby.io
+3af6ecca-afca-4403-86c9-3db828ef425a-00-3geei3zmz4mju.picard.replit.dev
+allegrolokalnie.plsd9hsheas14xk.icu
+allegrolokalnie.pl-744531.cfd
+allegrolokalnie.pl-8756234567.icu
+allegrolokalnie.43kvdjxsjsoe.sbs
+allegrolokalnie.p728x2630px834412.us
+allegrolokalnie.ogl0szenie795183.top
+allegrolokalnie.oferty-kategoria-popularne-14503671.sbs
+allegrolokalnie.oferty-kategoria-popularne-12503474.sbs
+allegrolokalnie.oferty-kategoria-popularne-16404681.sbs
+avaleca.pickupstransit-app.com
+capron.dhi-avispassage.com
+cota-reservada.com
+dameme.dhi-avispassage.com
+damien.pickupexpd-app.com
+daelman.pickupexpd-app.com
+drame.dhi-avispassage.com
+etcmebnt.top
+hometrade-nomura.9uhnvj.top
+jouanne.pickupexpd-app.com
+marion.dhi-avispassage.com
+metamasksecurity.unaux.com
+miles-and-more.kartenabrechnungs.de
+nassab.pickupstransit-app.com
+ntflx-compte-premium.com
+noobs.pickupstransit-app.com
+noobs.dhi-avispassage.com
+petitpede.pickupexpd-app.com
+petipede.pickupstransit-app.com
+regulation-gouv.com
+sacksteder.pickupexpd-app.com
+tafiole.pickupexpd-app.com
+tsum.ngrok.app
+triuduc.pickupstransit-app.com
+welcome-en-us-exoduse-auth.typedream.app
+whaatspp.com
+zjoih5qiwq22i.mocha.app
+etape1redistribution.com
+etaperedistribution.com
 wallet.register-robinhood.com
 www.66mkfsq.magalional.dpdns.org
 www.whtasapp-at.com
+www.bet365-kf.com
+www.s97k.xyz
+zggemini.zeabur.app
+m.imdowna.icu
+q365.vip
 bet9705365.com
+h365.vip
 ccwav2.zeabur.app
 c365.vip
 albyang.zeabur.app
@@ -23,155 +154,35 @@ www.amazondspbc.com
 1615000666.com
 h83v.xyz
 allegrolokalnie.plsd9hshgss15xk.icu
-www.bet365-kf.com
-www.s97k.xyz
-zggemini.zeabur.app
-m.imdowna.icu
-q365.vip
-h365.vip
 naturalsmokingleaf.com
-allegro.745695.vu
 www.naturalsmokingleaf.com
-www.rvj45.com
-www.195222444.com
-www.195lll195.com
-www.1957799.com
-fb51-11-en.ad-facebook.shop
-www.nn1565.com
-www.195l195.com
-kemitraanbersama.com
-www.195263.com
-www.1165rrrr.com
-balance.970211.xyz
-www.15657722.com
-www.195233.com
-geminiapi.hub42.space
-bafybeif3ixjydo2gj7coj7j6tkvqv76l6vp5ckpry4oknuqoucsf4hipc4.ipfs.infura-ipfs.io
-www.yy1615.com
-www.1615oo.com
-awazonzon.com
-www.8822365.com
-aimquesto.click
-devby.io
-allegrolokalnie.pl-744532.cfd
-bdgbetvip.com
-noobs.pickupstransit-app.com
-triuduc.pickupstransit-app.com
-petipede.pickupstransit-app.com
-nassab.pickupstransit-app.com
-avaleca.pickupstransit-app.com
-allegrolokalnie.plsd9hsheas14xk.icu
-cota-reservada.com
-welcome-en-us-exoduse-auth.typedream.app
-dameme.dhi-avispassage.com
-drame.dhi-avispassage.com
-marion.dhi-avispassage.com
-capron.dhi-avispassage.com
-noobs.dhi-avispassage.com
-allegrolokalnie.pl-744531.cfd
-www.dhi-avispassage.com
-whaatspp.com
-bordereau-ajour.com
-fabfd1e2-5a1a-42af-a633-17b0686ec70f-00-3syxs4rtuodhk.worf.replit.dev
-rubrique-offre-sncf.info
-regulation-gouv.com
-allegrolokalnie.oferty-kategoria-popularne-12503474.sbs
-allegrolokalnie.pl-16774523.rest
-allegrolokalnie.oferty-kategoria-popularne-16404681.sbs
-3655.services
-instagramox0j.rollout.site
-www.prjbk.com
-www.83655.com
-supporservichotmicros.kesug.com
-bulky-tours-026452.framer.app
-3651.services
-smtptelstrawebmailswifttviewtelstra.framer.website
-www.cyfree.ggff.net
-www.25575.com
-195917.com
-cyfree.ggff.net
-51578888.com
-www.amcl.now.sh
-www.195174.com
-etcmebnt.top
-trsevxup.top
-www.195882.com
-klantportaal38201184.com
-www.19522.com
-brasilreformar.website
-minhareformabr.online
-www.pinbo01.com
-www.www_guoluchina_com.tjrifeng.com
-21btcmax.cc
-bitcoinyukle.cc
-www.a61y.xyz
-www.x89x.xyz
-1056ww.com
-www.195tttt.com
-www.msygsc.com
-pigeonteensindonesia.com
-freejobsid.com
-www-usps-authenticate.saccessful.dpdns.org
-www.17755544.com
-dana-id.help-callcnter.biz.id
-pengaajuaann-danaa-paylaateerr.armeiza.works
-etape1redistribution.com
 allegro.pl-oferta16171.cfd
-etaperedistribution.com
-hometrade-nomura.9uhnvj.top
 allegrolokalnie.pl-oferta16171.cfd
-metamasksecurity.unaux.com
 cnbs34s3546fg.d34.workers.dev
-zjoih5qiwq22i.mocha.app
-tsum.ngrok.app
-3af6ecca-afca-4403-86c9-3db828ef425a-00-3geei3zmz4mju.picard.replit.dev
 ledger-recoverysupport.com
-allegrolokalnie.p728x2630px834412.us
-allegrolokalnie.ogl0szenie795183.top
-allegrolokalnie.oferty-kategoria-popularne-14503671.sbs
-allegrolokalnie.pl-8756234567.icu
-allegrolokalnie.43kvdjxsjsoe.sbs
-qfshq.additioisnt.dpdns.org
-www.16655511.com
-www.dd1615.com
-www.bet5365888.com
-www.tpke.me
-www.11654488.com
-www.195167.com
-www.7665p.com
-weteranfierts.r-monecaoe.co
-www.16653388.com
-www.7765yy.com
-www.1615444222.com
-www.76651144.com
-www.2365222444.com
-www.15051155.com
-www_guoluchina_com.tjrifeng.com
-www.1665ee.com
-www.www-1565.com
-www.nn1505.com
-www.195333555.com
+fabfd1e2-5a1a-42af-a633-17b0686ec70f-00-3syxs4rtuodhk.worf.replit.dev
+rubrique-offre-sncf.info
+allegrolokalnie.pl-16774523.rest
 www.flare.shafultonb.com
+allegrolokalnie.pl-744532.cfd
+bdgbetvip.com
+www.dhi-avispassage.com
+bordereau-ajour.com
+www.pickupexpd-app.com
+allegro.903847.vu
+allegrolokalnie.836210.vu
+customer-101085.weeblysite.com
+recover-signe.com
+sso-exodus--com-t-auth.typedream.app
+sncf-connect.cc
+swiiiscss.com
+allegrolokalnie.917391100djuh1983.cfd
 allegrolokalnie.plad5ashsas12xk.icu
 allegrolokalnie.plad2sshsgs18xk.icu
 allegrolokalnie.plsd9hshgss14xk.icu
-allegrolokalnie.917391100djuh1983.cfd
 allegrolokalnie.pl-758753.cfd
-customer-101085.weeblysite.com
 mondial-transit-clients.com
-recover-signe.com
-sncf-connect.cc
-sso-exodus--com-t-auth.typedream.app
-allegro.903847.vu
-44ee30e2-8b5c-4f54-b0df-356e9abad6bc-00-12sjejdojjjn7.kirk.replit.dev
-www.qvqmahripv.yoga
-gemini.243026.xyz
-www.a57v.xyz
-www.p5115p.com
 www.z5115z.com
-www.r5115r.com
-www.k5115k.com
-www.q5115q.com
 www.whatsapp-sa.eu.cc
 www.jainmzco.com
 www.x89z.xyz
@@ -185,14 +196,6 @@ www.w45v.xyz
 www.b233t.xyz
 www.y114l.xyz
 www.e121f.xyz
-allegrolokalnie.836210.vu
-swiiiscss.com
-www.195000999.com
-www.195111111.com
-consulter-suivi-amendes.info
-allegro.pl-oferta16171.icu
-allegro.pl-kategorie84792747804.sbs
-allegro.pl-kategorie3127509749274.sbs
 u79q.xyz
 r33s.xyz
 g33u.xyz
@@ -205,37 +208,42 @@ p111u.xyz
 f216q.xyz
 s97h.xyz
 h83j.xyz
-wogenzhulo.cc
 wpodabjy.cc
+www.qvqmahripv.yoga
+gemini.243026.xyz
+www.a57v.xyz
+www.p5115p.com
+www.r5115r.com
+www.k5115k.com
+www.q5115q.com
+wogenzhulo.cc
 hakenwpo.cc
 www.19500003333.com
 www.195111666.com
-advancepages.ghost.io
-quicklive.ghost.io
-systemweb.ghost.io
-trzkdsref.er4fd.workers.dev
+www.195000999.com
+www.195111111.com
+consulter-suivi-amendes.info
+allegro.pl-oferta16171.icu
+allegro.pl-kategorie84792747804.sbs
+allegro.pl-kategorie3127509749274.sbs
+44ee30e2-8b5c-4f54-b0df-356e9abad6bc-00-12sjejdojjjn7.kirk.replit.dev
 vv8636.com
 www.dhi-relivraison.com
 vv2991.cc
 www.mondial-transit-clients.com
+trzkdsref.er4fd.workers.dev
+advancepages.ghost.io
+quicklive.ghost.io
+systemweb.ghost.io
 anders-rnlxhz2au5nhwal4.builder-preview.com
-allegrolokalnie.pl-90834587125.cfd
-allegrolokalnie.7372837234.sbs
 app.ativacaodecliente.pro
-allegrolokalnie.78x62278xi288122.sbs
-allegrolokalnie.pl-8994918hdaxvbnnm662895321ftuewm7.cyou
-allegrolokalnie.pl-8931264.pro
-allegrolokalnie.pl-8215552lajeyyw71614153jagatgbfb7ff.sbs
 app.ativacaodeponto.pro
 app.ativacaodeponto.art
-app.ativacaodeclientes.pro
 app.ativacaodepontos.pro
+beckoficew4.smplebking.com
 colisenvoi-relay.com
 courageous-functions-281241.framer.app
-evri.lsepost.cfd
-evri.lseposts.cfd
 garagedoorcompanymarlborough.com
-labs.gcoders.cfd
 myapp-pp.com
 noobs.pickuppackets-expd.com
 roniziamagau.com
@@ -243,22 +251,28 @@ sdworxupdaten.com
 soft-communication-575008.framer.app
 tapinet.pickuppackets-expd.com
 visionmediacom.com
-williem.pickuppackets-expd.com
+warm.cityofylaris.com
 willem.pickuppackets-expd.com
+williem.pickuppackets-expd.com
 yanistap.pickuppackets-expd.com
-allegro.53945.cfd
+allegrolokalnie.pl-8931264.pro
+beatrice.pickuppackets-expd.com
 en-ledger-io-live-us.typedream.app
-warm.cityofylaris.com
+allegrolokalnie.78x62278xi288122.sbs
+allegrolokalnie.7372837234.sbs
+app.ativacaodeclientes.pro
+allegrolokalnie.pl-8994918hdaxvbnnm662895321ftuewm7.cyou
+allegrolokalnie.pl-90834587125.cfd
+allegrolokalnie.pl-8215552lajeyyw71614153jagatgbfb7ff.sbs
+labs.gcoders.cfd
+evri.lsepost.cfd
+evri.lseposts.cfd
 allegrolokalnie.pl-92763782.cfd
 allegrolokalnie.pl-oferta896478.sbs
 allegrolokalnie.pl-oferta869352.sbs
-convitecenturionvipexclusive.com
+allegro.53945.cfd
 iglrc.top
-beckoficew4.smplebking.com
-beatrice.pickuppackets-expd.com
-amazon.codecipher.dev
-learning-about.com
-offre-fr-carte-avantage.info
+convitecenturionvipexclusive.com
 spotify-de.org
 www.ucfreecodashop.xyz
 www.diihhietk.shop
@@ -267,25 +281,24 @@ www.w45p.xyz
 r33d.xyz
 www.f216d.xyz
 e120j.xyz
-allegro.pl-90834587125.cfd
-allegro.pl-oferta896478.sbs
-allegro.pl-oferta869352.sbs
-formulario-firma-2026-lkmna.cr-web.workers.dev
-www.remboursement-factures.com
-remboursement-factures.com
-allegrolokalnie.238748273482.cfd
-allegrolokalnie.9238497238472.cfd
-oficialsitemegabr.cfd
-novbnc.online
-www.virada-caixa.click
+amazon.codecipher.dev
+learning-about.com
+offre-fr-carte-avantage.info
 allegro.pl-oferta798349.sbs
 allegro.pl-kategorie489268903.sbs
 allegro.pl-oferta4614303.cfd
 allegrolokalnie.pl-oferta4614303.cfd
-www.ilerisideniz.ooguy.com
-www.proamerica.site
-www.businssstrategy198.vip
-cnlkdq_com.148dg.com
+allegrolokalnie.9238497238472.cfd
+oficialsitemegabr.cfd
+novbnc.online
+www.virada-caixa.click
+formulario-firma-2026-lkmna.cr-web.workers.dev
+www.remboursement-factures.com
+remboursement-factures.com
+allegrolokalnie.238748273482.cfd
+allegro.pl-90834587125.cfd
+allegro.pl-oferta896478.sbs
+allegro.pl-oferta869352.sbs
 www.ht.ht1.htgyuguuu.xyz
 edevletyukleniyor.teknikservislistesi.com
 gemini.oracle.gyronee.top
@@ -297,26 +310,30 @@ bancolombiafinanciaciondirecta.zeabur.app
 www.studio--studio-8985795712-9ab09.us-central1.hosted.app
 lyanidfromdana.blencou.biz.id
 indonsiaxnresmy.xperiaindo.biz.id
+www.ilerisideniz.ooguy.com
+www.proamerica.site
+www.businssstrategy198.vip
+cnlkdq_com.148dg.com
 onedrives6242.appwrite.network
 uzlasmadosyasorgu.org
 paypalcustomer.support
-www.coinbase666.com
-www.j247l.xyz
-b4inxs.magalional.dpdns.org
-www.66t05dm7.additioisnt.dpdns.org
-www.a56i.xyz
 www.bancoprovinciapersonas.server22.net
 www.mjcq.org
 www.x0kjgi4hs.saccessful.dpdns.org
 hh4ao.saccessful.dpdns.org
-5z8slmxmg.operational.dpdns.org
 www.cma0a5vr1.additioisnt.dpdns.org
 www.mj5oenb.magalional.dpdns.org
+www.j247l.xyz
+b4inxs.magalional.dpdns.org
+www.a56i.xyz
+5z8slmxmg.operational.dpdns.org
 www.kmv4z.saccessful.dpdns.org
 www.hd8bjh0y1.magalional.dpdns.org
 j250f.xyz
-exclusivobprovincia.lat
+www.coinbase666.com
+www.66t05dm7.additioisnt.dpdns.org
 www.resgatar-pontosbradesco.com
+exclusivobprovincia.lat
 mail.applyings-submits.problematic-request.com
 applyings-submits.problematic-request.com
 www.kalibites.cc
@@ -324,10 +341,7 @@ www.s96c.xyz
 www.r32y.xyz
 82324.xyz
 www.w45a.xyz
+peeldsb-rnicrosoft-login.work.gd
 www_fdzkjs_com.gzmaxf.com
 gdgeruite_com.gzmaxf.com
 www_lepumuye_com.gzmaxf.com
-modfol.com
-allegrolokalnie.pl-989103.sbs
-www.malkfjgkd.cc
-x.fu7997.com

تفاوت فایلی نمایش داده نمی شود زیرا این فایل بسیار بزرگ است
+ 397 - 260
yoroi_suspicious_level2.dns


برخی فایل ها در این مقایسه diff نمایش داده نمی شوند زیرا تعداد فایل ها بسیار زیاد است