root 3 tahun lalu
induk
melakukan
f5b232fbf6
6 mengubah file dengan 1757 tambahan dan 1413 penghapusan
  1. 46 87
      nethesis_level3.netset
  2. 20 20
      whitelist.global
  3. 450 264
      yoroi_malware_level1.dns
  4. 803 792
      yoroi_malware_level2.dns
  5. 201 14
      yoroi_suspicious_level1.dns
  6. 237 236
      yoroi_suspicious_level2.dns

File diff ditekan karena terlalu besar
+ 46 - 87
nethesis_level3.netset


+ 20 - 20
whitelist.global

@@ -16,6 +16,26 @@
 62.149.128.160
 8.8.8.8
 8.8.4.4
+161.35.155.65
+178.128.251.154
+167.71.78.214
+164.90.194.17
+188.166.70.107
+178.62.222.164
+188.166.36.213
+188.166.46.90
+178.128.254.64
+167.99.46.183
+104.248.194.112
+167.172.38.97
+188.166.69.24
+188.166.103.15
+159.223.213.107
+188.166.85.76
+188.166.91.192
+188.166.63.108
+159.223.0.121
+104.248.192.120
 188.166.17.46
 128.199.61.15
 178.62.221.146
@@ -172,26 +192,6 @@
 188.166.112.196
 178.128.254.180
 159.223.215.77
-161.35.155.65
-178.128.251.154
-167.71.78.214
-164.90.194.17
-188.166.70.107
-178.62.222.164
-188.166.36.213
-188.166.46.90
-178.128.254.64
-167.99.46.183
-104.248.194.112
-167.172.38.97
-188.166.69.24
-188.166.103.15
-159.223.213.107
-188.166.85.76
-188.166.91.192
-188.166.63.108
-159.223.0.121
-104.248.192.120
 146.190.24.139
 159.65.205.104
 134.209.136.185

+ 450 - 264
yoroi_malware_level1.dns

@@ -9,554 +9,733 @@
 # Category        : Malware
 # Confidence      : 10
 #
-callback.22-709.sg1cloud.com
-elvnetworks.com
-fofapohelo.com
-getinteriorartstudio.com
-mtaxservice.com
-paloaltocloud.online
-pabowape.com
-rest1.bbcinternationalnews.com
-service-3bbcy0mh-1312435925.bj.apigw.tencentcs.com
-service-bum9h8g2-1310216285.hk.apigw.tencentcs.com
-service-gcnqmcp3-1307217324.bj.apigw.tencentcs.com
-system-view.top
-upd.kasperskyupdates.com
-www.usts.site
-xazuzucem.com
-z3a1.ssndob.cn.com
 xtvklujmo.com
 0eedff63ca.info
-xqzdkh56y.ru
 zbum2hkm.ru
+xqzdkh56y.ru
 czhqassc.com
 tugshila.com
 ixvkfwue.com
+0005e4ed.mysolarcost.rest
 00061ab2.easydental.cloud
 0001c95f.sam-club.rest
-0005e4ed.mysolarcost.rest
 00061abf.mysolarcost.rest
 00067b94.wifi-router.rest
+0006c3c7.cholibrium.icu
 0071fc3a.aspirecreditcard.rest
 00c8ed85.sam-club.rest
+018ba275.easydental.cloud
 00ae3233.enhancemente.shop
+018fbcc0.ymmyfoods.shop
 00e4f9df.wifi-router.rest
-0006c3c7.cholibrium.icu
-018ba275.easydental.cloud
 039338bd.nortonx.rest
-018fbcc0.ymmyfoods.shop
 1.mo03.biz
+1.a0bd418a3623a7bbe.salesforce.news
 1000308494.coridas.ru
-1792187375.tutarama.ru
 19569.dailycrick.com
-23y41c8l664dol2.directorio-w.com
+1792187375.tutarama.ru
 24388.dailycrick.com
 27006.dailycrick.com
+23y41c8l664dol2.directorio-w.com
 5.approvedurls.info
-56708.com
-517942117.tutarama.ru
+520jj.net
 50e7h2uu5v.potenz-ohne-rezept.de
+517942117.tutarama.ru
 60983.dailycrick.com
-67452.dailycrick.com
 64803.dailycrick.com
 6bqfxa.com
-70019.dailycrick.com
+67452.dailycrick.com
+56708.com
 73381.dailycrick.com
+70019.dailycrick.com
 7c29d5de.getlastnews.com
 80996.dailycrick.com
-a5byyes.ataipb8idb.dkogar.cl
+a0a435a4243a6a4d0.a5a317dd9c0072f1f.salesforce.news
 8km.usfpgl9x9d.com
+a4730ea1de089a5a7a16e7b03f9ab37cce.salesforce.news
+a0d8d15e5bdba2dc1a0e03a31e3176b9ae.salesforce.news
+a0a435a4243a6a4d0.salesforce.news
+a64ffd68110687c0c.a51803a0aff7f01bc.salesforce.news
+a5a429a928ba9bbfb.salesforce.news
+abc53a377356d43a2a95aad110e73ef5da.salesforce.news
+a86ce1b9adab83eff-a04ec08919b3e3737.salesforce.news
+ac4666304d04cc165.northamerica.salesforce.news
+aca4914148c93e7bf.azure.salesforce.news
 abealkalsiaxc.freewww.biz
-account-update-info.vdrn.top
+ad405353fde3f90a4-a9dc4b6921b9a8c8f.salesforce.news
 acikdeniz-kredi-mobil.tk
+adb21a0180336f2d9ae87dfb60e5c15f37.salesforce.news
+a5byyes.ataipb8idb.dkogar.cl
+account-update-info.vdrn.top
 adulttime.ru
 aidanmooremusic.com
-agilitymastery.expandingu.com
 agricalchar.com
-aloft.relay34.cicindi.ru
 allaboutmygarden.com
-angviopn.com
+agilitymastery.expandingu.com
+alignedcoach.marduk.app.theplaygroundcase.net.brickell100.com
+aloft.relay34.cicindi.ru
 amanda-nn.com
+angviopn.com
 ardentig.top
+app01ade2c98c556a289d2.salesforce.news
+appserverafe45ecba6f45190a.salesforce.news
 artapi.ru
+asmad6befe05ae275a37.salesforce.news
 attendancemeaningleaped.com
-au-poyccy.aeseaaoaeoy.tvxp.top
 audiotop.ru
+attarbesets.com
+au-poyccy.aeseaaoaeoy.tvxp.top
 bafybeieznx7etvf7hrhi65ayggbiti32z7mujfxzww2dq44jveo3wojvcy.ipfs.w3s.link
 backseatrunners.com
 benzo-kem.ru
 bdhmdlkjyxgs.com
-bly1hf.com
+bless.anakembok.de
 blog.winesofargentina.com
+bly1hf.com
+brainsevior.live
+bsd02.acaf015aaf6fbac40.salesforce.news
 burgerjolly.com
 buzzgone.rest
-bvvvwv-metamas.top
 c21ad.bautetlroats.com
-capitalcitycarwash.com
-cakes-world.co.uk
+cache3a928596ba28c8a8b4.salesforce.news
+bvvvwv-metamas.top
 c6ea9ba085e7a.mariademattiassec.sc.tz
+cakes-world.co.uk
+capitalcitycarwash.com
 camomileamazingbench.com
 carfulsranquel.com
 cclarks.com
 cctraff.ru
 cf273668ffb06.aarkinpharma.com
 cie-revolver.com
-cjrmzdyxv.iyuvbogym.com
 cifgajlw.zpwctoqpd.com
+cjrmzdyxv.iyuvbogym.com
+close97.dzhehant.ru
 cloud-repository.com
-collectsours-orders.com
-collectsyourordernow.com
 cogentwarden.com
+collectsyourordernow.com
+collectsours-orders.com
+contactsupportdesk.com
 costcosurvey.email
 costcosurvey.shop
 counterparadise.com
 cpanel.confeccion-demo.renova-sa.net
 cpanel.bricklawgroup.com
+cpcontacts.etereosounds.com
 cpcontacts.gobarji.si
 cpcontacts.parkysplace.com
-cpcontacts.etereosounds.com
 crm.pelegisr.com
-cylbyzants.com
+cutegirlsporn.com
+cust115-a40e29919cdc185ca.salesforce.news
+cust35ab18a4306f0432e17.salesforce.news
 cvwwv-metams.top
+cylbyzants.com
+dayxmdny.ws
+desty.page
 device-review-uk.web.app
+demos.a3257364aab5f5c32.salesforce.news
 dl.teamobi.com
-drintelmanndesigns.com
-doubleluckofthewolves.xyz
 docker.33577a8c.website.roblox.com.tl
+doubleluckofthewolves.xyz
+dragon.a96a1f31c369b1d59.salesforce.news
 drjeremynicholson.com
+drintelmanndesigns.com
+dyeingjaun.com
 eesmithdesign.com
 ejwyxb.com
-eki-net.com.juwb.top
 ep1btc.com
-evantrck.com
 equifaxlaw.com
-exgfsexbook.com
+eki-net.com.juwb.top
+etherscxan.link
+evantrck.com
 evgvqnbvcrtkvan.velocity.company
-existingcraziness.com
+exgfsexbook.com
+excelmedicalpk.com
+events-a309d62b2ed658b0c.salesforce.news
 ewsindia.net
-exwc.vr-controlcenter.com
+existingcraziness.com
 facebook-business-help-center-fanpage-checkpoint739.ml
-ferromet.ru
 fansteek.ru
-firsttravel.am
 filmsoneonline.com
+ferromet.ru
+flameofhumanity.com
+firsttravel.am
 fiw7qst.aj4wnw5wx6.dkogar.cl
+fqdky.yvooobfzx.com
+fwsm1-ac27efc0de33ef907.salesforce.news
 fw-2.procompany.top
 fuklrdxvfk.velocity.company
 fusionbars.co.uk
+gceog.com
 ghostquest.net
 git.git.booking.cardimania.com
 git.gitlab.git.git.mail6.turobzorchik.ru
+goog.evelopedsev.autos
+go.9t5.me
 glistini.com
+goog.istakechau.autos
 grbxa.iyuvbogym.com
-grefagroon.com
 googl.ca
+grefagroon.com
 growyourdiscord.com
-hackstudio.net
 h19z.usfpgl9x9d.com
 gtjs.iyuvbogym.com
+grenzenloskochen.erne.com
+gvhwuh.ws
 guoxinpeizi.cn
+gscare.cc
 have.approvedurls.info
+hackstudio.net
+hardtotake.com
 have.approvedurls3.info
 hallowed-shame.surge.sh
-hgvip3786.com
 highdesertdaily.com
+hgvip3786.com
 hg.shovelbland.com
-historydj2.xyz
 hilarioussewingartsy.com
+homer.ae2b111133ea59c91.salesforce.news
 hlunlean.com
-i7ko6bz.cn
+historydj2.xyz
+i59f62b50.versanet.de
 hvq3vxvsers3.jolotras.ru
 hunanjijinguanwang.cn
-imagelinetechnologies.com
+i7ko6bz.cn
+ibm.acb5c7400015c8e37.salesforce.news
 iamrobertmiller.com
-ironside-ftw.top
-ja.scenic-america.com
-j2.galerix.ru
-itsallinclusive.com
+igdyjtrq.ws
+imagelinetechnologies.com
+ilxbfagmjc.ws
 ix26as.potenz-ohne-rezept.de
-jackpotplace.life
 iwebauto.123stones.com
+ironside-ftw.top
+itsallinclusive.com
+issxljyssnn.ws
+ja.scenic-america.com
 jam.hellhorn.shop
-jeehaish.com
+j2.galerix.ru
 javaautorun.duia.ro
+jackpotplace.life
 jpovulldaghw.com
-kglo.link
+jeehaish.com
+kansascity.ad3d05d762e279e0d.salesforce.news
+jqngbfyjvot.ws
+jteuyf.top
 kbnfm5.com
-lajmereale.com
-koranicseimas.com
+kefulz.com
+kglo.link
+knowingeffectiveresource.bancoprovinar.repl.co
 kxlv6zy0e.vitalprostet.live
-lanboomchina.com
+laboratorytests.org
+kuauoshf.ws
 krik2w.directionheart.co.in
+koranicseimas.com
+lanaffda1669c87a4493.salesforce.news
+lajmereale.com
+lanboomchina.com
+lambrechtsbats.com
+lawjyebj.ws
 lgfloral.com
+letempstg.com
 lizminelli.com
-mail.alphaectremale.shop
+ljnisyw.ws
+lmentkhclf.ws
+lvqczopusf.net
+lvfiix.ws
+luhlbixiarh.velocity.company
 mail.acteristic.monster
+mail.alphaectremale.shop
 mail.backtolifes.online
-lvqczopusf.net
 mail.buzzgone.rest
-mail.buerseut.cam
 mail.brainsevior.live
+mail.buerseut.cam
 mail.costcosurvey.email
-mail.dventure.beauty
 mail.costcosurvey.shop
+mail.dventure.beauty
 mail.emonstrat.monster
 mail.flexorols.bar
-mail.groceriback.pics
 mail.gesiuel.monster
+mail.groceriback.pics
 mail.homdeptsz.com
 mail.kunicaen.monster
-mail.mesdiude.beauty
-mail.mpetition.monster
+mail.meditatio.monster
+mail.litglasviw.beauty
 mail.host.centraldecursos.com
-mail.merrage.beauty
 mail.mesdnef.monster
-mail.nstpictures.jp
+mail.merrage.beauty
+mail.mesdiude.beauty
+mail.mpetition.monster
+mail.qemesdize.monster
+mail.rthermore.monster
 mail.onstration.monster
+mail.nstpictures.jp
 mail.oresonde.beauty
-mail.protivtb.pics
 mail.ppreciate.beauty
-mail.qemesdize.monster
-mail.rthermore.monster
+mail.protivtb.pics
 mail.silencilhardmale.online
 mail.traomerus.monster
-mamago.xyz
 mail.wirelesdoor.pics
+mamago.xyz
+managementa51f5e38d38d91b3b.salesforce.news
+maletasgreenwich.com
 marchingsmug.com
+marayv.ws
+maps.root.org.cn
 mathsuna.nft20.io
+marormesole.com
+miguidolacel.com
+midwest.a56c6f1e4c20fb853.salesforce.news
 metalicanar.com
-morganans.co.uk
+melongetplume.com
+mobilehomedoors.us
 modulusoctodon.uno
+morganans.co.uk
 mt.hostingzion.com
-my.mixtape.moe
 mx12.besprof.ru
+multecihaklari.org
+mtu-a5741e2763b64248b.salesforce.news
+my.mixtape.moe
 myfilesrs.ru
-myjeecscsb.myjoascecb.amuxj.top
+myjaeasosb.myjoaceecb.ryjzhp.top
 myjecsosb.myjoacb.akfg.top
-myjeecscsb.myjoascecb.grtyue.top
 nemik.mx
+myjeecscsb.myjoascecb.grtyue.top
+myjeecscsb.myjoascecb.amuxj.top
 news-firiyi.cc
+newlinepackers.com
 nnubz.tthematt.xyz
-oks.maximum.plus
+ns2.uberaddis.com
 om.de
+oks.maximum.plus
+one.flowdeal.xyz
 onlinefilmshome.com
+org.a5a317dd9c0072f1f.salesforce.news
 paarx.com
+pc29aa6b94e1d631878c9.salesforce.news
 pfiryv.miracleclub.quest
+pc01a9e72057512269beb.salesforce.news
+peeredfoggy.com
+pc31afc32161b44cca1f9.salesforce.news
+pics123.pw
 pillowforhome.com
 pinkgoat.com
 premium-news-for.me
 prldetails.info
-pushnest.com
+profileaaf603f86698f075d.salesforce.news
 pwr1mq.com
+pxvcxvdhln.ws
+pushnest.com
+pykxbcfhng.ws
+quatanghoanglong.com
 r.durationstall.cn
+qymhe.ws
+rastledundo.com
 qsdgg.com
 recomwings.com
 renamedineffective.com
+role.tongift.shop
 runtedforcut.com
-s51.x8top.net
+s298.a5261f99cd6381908.salesforce.news
 sacicesccsnace.czwota.top
-saciceacssace.ruwymh.top
-saciccacsaacn.otpyob.top
-saciceacsnace.cqwnqk.top
+s51.x8top.net
 sacicesccsnace.ehekrx.top
-saciecacsaacn.bifjvh.top
-sacieeacsnace.ejfisj.top
-saciecacsaacn.tmerzz.top
-sacicsacscace.pynwaj.top
-sacicsacscacn.taegng.top
 sacicsacscacn.klvynj.top
+saciceacsnace.cqwnqk.top
+saciecacsaacn.bifjvh.top
+sacicesccsnace.gbdoua.top
 sacicesccsnace.tvkxwn.top
-saciecacsaacn.pywjsj.top
-sacicsacscace.taegng.top
+sacicsacscacn.taegng.top
+saciceacssace.ruwymh.top
+saciccacsaacn.otpyob.top
 saciceacssace.cqwnqk.top
-sacieeacsnace.pxgjez.top
-sacicesccsnace.gbdoua.top
-sacieesccsnace.ptrkur.top
-sacieesccsnace.eefurs.top
+sacicsacscace.taegng.top
+sacicsacscace.pynwaj.top
+saciecacsaacn.pywjsj.top
 sacieesccsnace.ikkkdk.top
-saciesacscace.sdgzim.top
-sacieesccsnace.rkiglj.top
 saciesacscacn.pynwaj.top
-sacisesccsnace.ehekrx.top
-saciseacssace.gtplhd.top
-sacisesccsnace.ptrkur.top
+sacieesccsnace.ptrkur.top
+sacieeacsnace.pxgjez.top
 saciseacsnace.ehekrx.top
-saciseacssace.tvkxwn.top
 saciscacsaacn.jrnmkk.top
-sacisesccsnace.wdxrob.top
-sacisesccsnace.cwjzww.top
+saciecacsaacn.tmerzz.top
+sacieeacsnace.ejfisj.top
+saciesacscace.sdgzim.top
+sacieesccsnace.eefurs.top
+sacieesccsnace.rkiglj.top
+saciseacssace.gtplhd.top
 saciseacssace.bmfobi.top
 saciseacsnace.tvkxwn.top
+saciseacssace.tvkxwn.top
+sacisesccssace.wlkehb.top
+sacisesccsnace.ptrkur.top
+sacisoacsnace.sdgzim.top
 sacisesccsnace.wlkehb.top
 sacisesccssace.xzngwt.top
-sacisoacsnace.sdgzim.top
 sacisesccssace.hstuuy.top
+sacisesccsnace.cwjzww.top
+sacisesccsnace.ehekrx.top
+sacisesccsnace.wdxrob.top
+sacissacscacn.pywjsj.top
+sacissacsnace.klvynj.top
 sacisoacsnace.xzngwt.top
-sacisoacsnace.vymalq.top
 sacisoacssace.klvynj.top
-sacisesccssace.wlkehb.top
+sacisoacsnace.vymalq.top
+sacisosccsnace.sdgzim.top
 sacisosccsnace.klvynj.top
-sacissacscacn.pgoicb.top
-sacissacsnace.ruwymh.top
+sacisosccsnace.hstuuy.top
 sacisosccsnace.yircqw.top
+sacissacscacn.pgoicb.top
+sacissacscace.yjbkym.top
 sacissacscacn.cwjzww.top
-sacissacsnace.rkiglj.top
-sacissacsnace.klvynj.top
-sacisosccsnace.hstuuy.top
-sacisosccsnace.sdgzim.top
+sacissacsnace.ruwymh.top
+sacissacssace.yjbkym.top
 sacissacssace.msqzhx.top
+sacissacsnace.rkiglj.top
 sacisssccssace.wdxrob.top
-sacissacssace.yjbkym.top
 sacissacssace.wlkehb.top
 sacisssccssace.qaeftk.top
-sacissacscacn.pywjsj.top
-sacissacscace.yjbkym.top
 sasiscacsaacn.pgoicb.top
+sasiscacsaacn.ptrkur.top
+sasiseacsnace.taegng.top
+sasiscacsaacn.cqwnqk.top
+sasissacscacn.kcjtvn.top
 sasisesccsnace.wdxrob.top
 sasissacscace.cqwnqk.top
-sasiscacsaacn.ptrkur.top
 sasissacscacn.pxgjez.top
-sasissacscacn.kcjtvn.top
 sdgzim.top
 secure-access-52a3dibj6eja2545.gate43.xyz
 secure-access-13340uom7vciba8c.gate43.xyz
 secure-access-1de219r2tzwk2532.gate36.xyz
-sasiseacsnace.taegng.top
 secure-access-7467dhom7usvc807.gate36.xyz
+secure-access-7acfbibuop21z6c9.gate43.xyz
 secure-access-88a863v2tejhe496.gate43.xyz
-seolinkexchange.nft20.io
+secure-access-e705cp2h96ja2522.gate36.xyz
 secure-access-fb5e8rna9a5rna7e.gate36.xyz
+servers.a5afc1e0051fac057.salesforce.news
+seolinkexchange.nft20.io
+shauptab.net
 sharktop2.xyz
 sextgpgalleriesfree.biz
-shauptab.net
-sjmta.iyuvbogym.com
+silencilhardmale.online
+sickdeal.net
+smalltownbigband.nl
+sliceofg.com
 sistemasocr.com
+sjmta.iyuvbogym.com
+smtp.njelec.com
 sincalled.com
-so17.american-public.org
-sliceofg.com
 so15.american-public.org
-smalltownbigband.nl
-smtp.njelec.com
+so17.american-public.org
 soluckyyousurvey.top
-so24.american-public.org
 so60.american-public.org
 soldierreproduceadmiration.com
-specialistinsensitive.com
 somacase.ml
-sterlingstatesbank.net
+so24.american-public.org
+specialistinsensitive.com
+springfield.a057722a7bc304b8e.salesforce.news
+stata1ea3c0cf2bbdeb77.salesforce.news
+suivi-chronopost-support.com
+sttkmr.ws
 stooped.faith12.chaeog.org
 stun.ipshka.com
+sterlingstatesbank.net
 supportdroopbox.com
+suppliers-a94dad2daed6cfea7.salesforce.news
 swampgillspersonnel.com
+swagger.a6da4e74d2d46c556.salesforce.news
+suvffg.yvooobfzx.com
+system-aa936779f1c63d855.salesforce.news
 technob2bzone.com
-themeflying.com
+techbloggerji.com
+testsql-a9e72057512269beb.salesforce.news
 terrorskins.ca
 test.niirit.com
+themeflying.com
+themasystem.dailycrick.com
 tldbm-industry.com
 tomcleaneraddon.com
-thuswobill.live
+tntl4ever.com
 tonghuapeizi.cn
-transportadoradegranos.com
+thuswobill.live
+tpqmcsxrn.ws
 trafiq.trade
-tunnel23concepts.com
+transportadoradegranos.com
 tv.aleksandrow-lodzki.pl
+tunnel23concepts.com
 twimzy.com
-uatstats.nft20.io
 ujjhcsvmd.zpwctoqpd.com
+uatstats.nft20.io
 unsaltyalemmal.com
+umarketz.net
+ukqqntvrl.ws
 urokccp.cn
-vmovee.cc
-webmail.discordcreators.net
+vandervalkhotelparijs.com
+vcorzmduzmn.biz
+video.hellhorn.shop
+vpn.salesforce.news
+wap3a4dbe241f1d0ba87e.salesforce.news
+w8-webdoc.salesforce.news
 web-homepage.net
+webmail.discordcreators.net
+webservices-software.com
 wemeettoday.com
+werremlp.zpwctoqpd.com
 wells.my-id-3949901949.com
+wilfridamendment.com
 whatisyours-onorder.com
-werremlp.zpwctoqpd.com
+woodmoreestateshoa.com
 wjbr.vyvmyrzob.com
-wilfridamendment.com
 wolfsecurity.co.za
 worldtribune1.xyz
+worldtimes1.xyz
 wucj.iyuvbogym.com
 www.acteristic.monster
 www.aceneurotonix.ltd
+www.airraining.co
+www.attacker.com
 www.apexelite.com
-www.au-poaay.aucsaom.ufjyvb.top
-www.bengbupeizigongsi.cn
+www.boosthard.live
 www.blastsite.rest
-www.attacker.com
+www.bengbupeizigongsi.cn
+www.au-poaay.aucsaom.ufjyvb.top
 www.cncncheerful.xyz
-www.boosthard.live
-www.cl.iziibuy.pw
+www.costcosurvey.email
 www.diamondcity.live
+www.dev-a954a7d8e5912517d.salesforce.news
+www.cl.iziibuy.pw
 www.doggiedistrict.com
-www.dwhobby.com
-www.feilele.cn
 www.embacal.com
+www.dwhobby.com
 www.frossweddingcollections.co.uk
-www.ftte.xyz
 www.firstride.co
-www.git.platinum.lemoncraft.ru
+www.feilele.cn
+www.ftte.xyz
 www.git.git.accounts.antonchernov.ru
+www.git.git.git.gitlab.git.ce1e96ikbfgsqp2epj90.bscslcan.info
+www.git.platinum.lemoncraft.ru
+www.git.git.gitlab.911-shop.zakandaiev.com
+www.goldsurvey.email
 www.git.git.gitlab.gitlab.git.gitlab.911-shop.zakandaiev.com
+www.heartlandracingco.com
+www.greywish.com
+www.hcpc-org.uk
 www.guizhouzhengquanwangzhi.cn
 www.huzhoupeiziguanwang.cn
-www.hcpc-org.uk
-www.jersdeui.monster
-www.kdministra.co.in
 www.icloud.map-alert.info
+www.kdministra.co.in
+www.jersdeui.monster
 www.jpvnegocios.com
+www.margoun.com
 www.legalpath.airmanselectiontest.com
+www.maykke.com
 www.monicaek.ga
 www.monicaek.gq
 www.localtasteblog.com
-www.myjaecsceb.myjoaacecb.bazujq.top
+www.myra-simon.com
 www.myloxxer.com
+www.northamptonassessor.us
 www.naked-teen-pictures.com
+www.myjaeasceb.myjaaacecb.wymgje.top
+www.myjaecsceb.myjoaacecb.bazujq.top
 www.myjceasceb.myjeaacecb.owkbzp.top
 www.myjceasceb.myjoaacecb.sfuk.top
-www.myjaeasceb.myjaaacecb.wymgje.top
+www.plb4a96a1f31c369b1d59.salesforce.news
 www.rametuio.co.in
 www.qinhuangdaogupiaowang.cn
-www.saciccacsaacn.iqgaah.top
 www.royalcaribbeanbeddingcollection.com
+www.saciccacsaacn.iqgaah.top
 www.saciccacsaacn.pynwaj.top
 www.puzzlegamestudio2022.top
-www.saciccacsaacn.imfgws.top
-www.saciceacssace.gtplhd.top
-www.sacicesccsnace.iqgaah.top
 www.saciceacsnace.klvynj.top
 www.saciceacssace.xkbwcu.top
+www.saciccacsaacn.imfgws.top
 www.saciceacssace.kcjtvn.top
+www.saciceacssace.gtplhd.top
+www.sacicesccsnace.iqgaah.top
 www.sacicesccsnace.gtplhd.top
 www.sacicesccsnace.xzngwt.top
 www.sacicsacscace.xzngwt.top
 www.saciecacsaacn.rulqiu.top
 www.saciecacsaacn.qaeftk.top
-www.saciecacsaacn.vymalq.top
 www.saciecacsaacn.tvkxwn.top
-www.saciscacsaacn.fxirgl.top
-www.saciesacscacn.imfgws.top
-www.saciesacscacn.tmerzz.top
+www.saciecacsaacn.vymalq.top
 www.sacieesccsnace.vymalq.top
+www.saciesacscacn.tmerzz.top
+www.saciesacscacn.imfgws.top
 www.saciscacsaacn.pywjsj.top
+www.saciscacsaacn.fxirgl.top
 www.saciseacsnace.xkbwcu.top
-www.sacisesccsnace.wpkbmz.top
 www.saciseacsnace.oigmja.top
 www.sacisoacsnace.msqzhx.top
+www.sacisesccsnace.wpkbmz.top
+www.saciseancssascen.wdvbgs.top
 www.sacisoacsnace.yjbkym.top
-www.sacissacscace.imfgws.top
+www.sacisoancsnascen.kfjzvl.top
+www.sacisoacssace.zyiily.top
 www.sacissacscace.hzehzg.top
+www.sacisosccsnace.otpyob.top
+www.sacissacscace.imfgws.top
 www.sacissacscacn.rulqiu.top
-www.sacisoacssace.zyiily.top
+www.sacissacssace.iqgaah.top
 www.sacissacsnace.otpyob.top
 www.sacissacsnace.wlkehb.top
-www.sacisosccsnace.otpyob.top
+www.sacisssccssace.pxgjez.top
 www.sacisssccsnace.yjbkym.top
-www.sacissacssace.iqgaah.top
+www.sasiseacsnace.lpqwcw.top
+www.sacisssccssace.wpkbmz.top
 www.sasiscacsaacn.fxirgl.top
 www.sasiseacsnace.gtplhd.top
-www.sacisssccssace.wpkbmz.top
-www.sasiseacsnace.lpqwcw.top
-www.sacisssccssace.pxgjez.top
 www.sasissacscace.qaeftk.top
-www.sasissacscacn.xkbwcu.top
-www.sasissacscacn.fxirgl.top
 www.sasissacscacn.taegng.top
+www.sasissacscacn.fxirgl.top
+www.sasissacscacn.xkbwcu.top
+www.silencilhardmale.online
+www.shopping.a6dc8bc2fbf1fe6a5.salesforce.news
+www.tiespecialist.com
 www.see-all.com.tw
-www.suqianzhengquanxinxi.cn
 www.standwithsam.com
+www.thegummybear.com
+www.suqianzhengquanxinxi.cn
 www.vitalprostet.live
+www.twopera.net
 www.weathe.com
 www.xingxingpeizi.cn
+www69.abab240adfd66ccad.salesforce.news
 wwwarkaplus.com
+xbid.online
+wx97.com
+xgfdc.ws
+xgvsaivsgrj.ws
 xxxinsta.ru
 xunniuwang.cn
+yn3344.com
+yqxylrjquva.ws
+ykmkr.server-on.net
+zippy.a371d0291fdc6e5e0.salesforce.news
 zblk.pro-land.org
 yyoutube.com
-bless.anakembok.de
-goog.istakechau.autos
-goog.evelopedsev.autos
-luhlbixiarh.velocity.company
-fqdky.yvooobfzx.com
-etherscxan.link
-letempstg.com
-marormesole.com
-secure-access-7acfbibuop21z6c9.gate43.xyz
-pics123.pw
-myjaeasosb.myjoaceecb.ryjzhp.top
-sickdeal.net
-www.git.git.git.gitlab.git.ce1e96ikbfgsqp2epj90.bscslcan.info
-suivi-chronopost-support.com
-www.git.git.gitlab.911-shop.zakandaiev.com
-flameofhumanity.com
-520jj.net
-cutegirlsporn.com
-hardtotake.com
-gceog.com
-miguidolacel.com
-mobilehomedoors.us
-lambrechtsbats.com
-maletasgreenwich.com
-mail.litglasviw.beauty
-peeredfoggy.com
-umarketz.net
-tntl4ever.com
-techbloggerji.com
-vandervalkhotelparijs.com
-woodmoreestateshoa.com
-www.airraining.co
-worldtimes1.xyz
-www.twopera.net
+zmzlrlqtmzb.ws
 zzdabaoji.com
-yn3344.com
-wx97.com
+16delivered.hungzo.ru
+discover.zizoze.com
+close42.dzhehant.ru
+claim.approvedurls7.info
+diportal.ru
+englishpetals.com
+bafybeid3fxryldbeoppklbamgdor2guyi3xh3atdb2kmrfa3j3m4ezjwaa.ipfs.dweb.link
+gatewaytoworld.com
+db.vpn.org.cn
+fiz4tl.com
+ledgerlivesupdate.com
+mattioliwoods.verajamesgc.org
+sacisoacsnace.imfgws.top
+roambedroom.com
+secure-access-eab39p2fv9zuqd9c.gate36.xyz
+send24.hoanzo.ru
+tinhightech.net
+shop.computing-age.com
+vzsqbn.top
+unusual.branizericing.net
+woncherish.com
+www.sacisesccssace.rkiglj.top
+axongear.com
+cc639.com
+chr82.zhubint.ru
+freedownloadhq.com
+birthtothreeipswich.org
+eagles-astoria.com
+holity.fr
+iciao.gr
+mail.bladderknives.online
+modart-paris.ir
+motimok.cfd
+dailythesouthernpost.com
+rivianchargerinstallation.com
+schseels.com
+surfsl.com
+www.sportaction.eu.pel.mk
+zqwdp.iyuvbogym.com
+youtune-xiao.com
+branizericing.net
+akbhnatbk.ws
+capitalinvestmentprivate.com
+aveihav.ws
+catchinfo.org
+go.getfreadom.com
+goniforas.com
+edureviews.net
+grammarlychrome.com
+geodaljoyless.com
+huyontop.com
+jpivxtsxpkn.com
+kcjxuf.ws
+jeizvkvggig.ws
+ijmxnp.ws
+iyarfb.ws
+legacyshave.com
+konasaphie.com
+jebrp.ws
+kydfvyeted.ws
+procrackfile.com
+necessaryratio.pro
+mail.antsnor.beauty
+mail.ollective.beauty
+platform.trendingsubject.com
+ns2.pearhouse.com
+phsksiye.ws
+mainportmedia.com
+pcsszerviz.hu
+ns1.pearhouse.com
+planetbleedsagacious.com
+trendingsubject.com
+progress.cashdigger.com
+qjfokdzhkyjf.com
+solutiontrackers.com
+qpkin.ws
+tolerant-technology.co.uk
+socketbuild.com
+takomwdfhh.ws
+sacicsancscascen.brjqsy.top
+rfinsrylo.ws
+webseomasters.com
+tqauzis.ws
+www.breadbasket.host22.com
+www.advb9fyxlf2v.com
+www3.advb9fyxlf2v.com
+www5.advb9fyxlf2v.com
+www4.advb9fyxlf2v.com
+weathe.com
+www.windowserrorhelps.com
+www6.advb9fyxlf2v.com
+www7.advb9fyxlf2v.com
+zchitqv.ws
+zheetj.ws
+xtfrfdjb.casny.org
+ypxocqby.ws
+xcsfhufxn.ws
+callback.22-709.sg1cloud.com
+elvnetworks.com
+fofapohelo.com
+getinteriorartstudio.com
+mtaxservice.com
+paloaltocloud.online
+pabowape.com
+rest1.bbcinternationalnews.com
+service-3bbcy0mh-1312435925.bj.apigw.tencentcs.com
+service-bum9h8g2-1310216285.hk.apigw.tencentcs.com
+service-gcnqmcp3-1307217324.bj.apigw.tencentcs.com
+system-view.top
+upd.kasperskyupdates.com
+www.usts.site
+xazuzucem.com
+z3a1.ssndob.cn.com
+exwc.vr-controlcenter.com
+vmovee.cc
 buroher.com
 cs.imalloc.cn
 danalogs.ru.xsph.ru
 scriptslibs.mcdir.me
 plutonglatov.ru.xsph.ru
 apple.gps-33.top
-contactsupportdesk.com
-brainsevior.live
-close97.dzhehant.ru
-i59f62b50.versanet.de
-go.9t5.me
-desty.page
-igdyjtrq.ws
-grenzenloskochen.erne.com
-gscare.cc
-ilxbfagmjc.ws
-mail.meditatio.monster
-issxljyssnn.ws
-lvfiix.ws
-marayv.ws
-lmentkhclf.ws
-ns2.uberaddis.com
-one.flowdeal.xyz
-role.tongift.shop
-silencilhardmale.online
-pykxbcfhng.ws
-qymhe.ws
-quatanghoanglong.com
-rastledundo.com
-pxvcxvdhln.ws
-sasiscacsaacn.cqwnqk.top
-video.hellhorn.shop
-www.costcosurvey.email
-www.goldsurvey.email
-vcorzmduzmn.biz
-sttkmr.ws
-www.greywish.com
-www.northamptonassessor.us
-ukqqntvrl.ws
-webservices-software.com
-www.silencilhardmale.online
-www.thegummybear.com
-zmzlrlqtmzb.ws
-xgfdc.ws
-xbid.online
-www.saciseancssascen.wdvbgs.top
-www.sacisoancsnascen.kfjzvl.top
 mining-bb.gives
 ahkm.3e5-s5a.icu
 avgqwyykakd.ws
@@ -673,23 +852,30 @@ internetcoca.in
 meganetwork.top
 dendexmm.com
 laplas.app
-bertfxxetssggbl.com
+cmfhwonqxutrbrg.ru
+hmkqxsiyxbxmspx.ru
+gqikxfrpqfcinki.ru
+ffwkkfqurrdkaib.ru
+mudbrik.com
 dghnmiauhjoifbxmxl.com
-uuruegdkdnlwc.com
-rdnyskxjlifp.com
+bertfxxetssggbl.com
+ndgkbtdjoxyqah.com
 kubpycxdvfqudgmjep.com
-mudbrik.com
+fjsvowkh.com
+pgsuheymwaxxtevhinx.com
+rdnyskxjlifp.com
 rhcmitisdtxyfomtke.com
+vhdtiyxswqjdw.com
+uuruegdkdnlwc.com
 xtapctoxjpoetylmdn.com
 vyfsxqnneor.com
 vbtwrlpdfbcvqgrfxa.com
-hmkqxsiyxbxmspx.ru
-ffwkkfqurrdkaib.ru
-cmfhwonqxutrbrg.ru
-fjsvowkh.com
-pgsuheymwaxxtevhinx.com
-ndgkbtdjoxyqah.com
-vhdtiyxswqjdw.com
+hssuspgsymdbxkk.com
+deibknvgfqyaupr.com
+nqimlvamasimogj.com
+tvkviglitracrxd.com
+irlvihxehqqfcrv.com
+laifwakcxfvrlyi.com
 exywnwcffrxuva.com
 fpjkyvqwiieesfjwou.com
 rdesvqtebymxymvmbfgl.com

File diff ditekan karena terlalu besar
+ 803 - 792
yoroi_malware_level2.dns


+ 201 - 14
yoroi_suspicious_level1.dns

@@ -9,6 +9,207 @@
 # Category        : Suspicious
 # Confidence      : 10
 #
+rakoten.co.ip.orshrxsu.ml
+lnstagramcopyrright-187294809823750.ml
+opensea-sale.best
+raspy-boat-37f0.wive1929.workers.dev
+cakkeswab.click
+orshrxsu.ml
+dev5544.d1rn6sai1qt9qe.amplifyapp.com
+bireyselkampanya-katilimformu-2022-ozel.ml
+main.d366jz2ebrxri9.amplifyapp.com
+attmailaccount.weeblysite.com
+afcu0nline-s5n.pages.dev
+eaidat-ode.tk
+afcu0nline-ssl.glitch.me
+shrill-forest-05b8.lloydherm6255.workers.dev
+meine-postbank-6f37b.web.app
+login-office365-authorize.ms2022.workers.dev
+nhanquatrian-freefire.com
+accrpro.asia
+yahoo-team-103519-102688.weeblysite.com
+myoffice365.w3spaces.com
+tyui-86f13.web.app
+ritow-f3a33.web.app
+vk.data-info.me
+lffacebook.com
+4abimcell.net
+ncourage.world
+myoffice36.w3spaces.com
+www.fb-video.gq
+supportteam8893670.tokyo
+collecteventpubg2022.hatsu-ygy.biz.id
+rafsid.alphagg7.cyou
+cajitasmercadolibre.withspotify.com
+supportteam5526150.xyz
+mercadolibre-asia.com
+moncompte.notigate.fr
+querellass-cls.c1.biz
+att-101958.weeblysite.com
+dhico-djkcowpc-mail-101483.weeblysite.com
+r020ym.webwave.dev
+qfcu7a.webwave.dev
+iiyhn-23c67.web.app
+sdm.alphagg7.cyou
+bafybeiendwkst4pqifpwlvn4yvaixhr32emfwtyol35nzalahudercascq.ipfs.w3s.link
+bt-100623.weeblysite.com
+as-39-isus9jsij029ui-28s.achjgauyscgu.repl.co
+rriott-f9c0b.web.app
+identity.co.vu
+metamasku.cc
+digitaleconsoleauth.web.app
+000ccee008762200ccceecc.pages.dev
+loviza.sk
+lioer-95e7b.web.app
+addt-b4c89.web.app
+revenuedrives.com
+acikdeniz-internetsube-kredi.tk
+frametox.ga
+kentanga.wwwaz1-ts105.a2hosted.com
+acikdeniz-internetsube-kredi.ga
+yahoo-att-104802.weeblysite.com
+currently-108725.weeblysite.com
+att-101088.weeblysite.com
+email-service-login778.weeblysite.com
+www.sunrocoast.com
+login-att-12.weeblysite.com
+xjxlxljxx.net
+acikdeniz-internetsube-kredi.ml
+authaconsoledigit.web.app
+bi1ncll.net
+att-mail-106477.weeblysite.com
+qc1x1e.webwave.dev
+yahoo-106283-101780.weeblysite.com
+plmfns.webwave.dev
+vk-channel-online.net.ru
+whatgs-app.com
+www.pfisd-googleforms-signin.com
+zb970.cc
+defi.walleteth-us.com
+hd7zoo.webwave.dev
+irb8d7.webwave.dev
+japan-smbcbank.iomggi.top
+pt.phone-location.info
+smbc-bank-japancojp.ycrsjg.cn
+supportteam26495126.click
+traducator-ungaria.ro
+amshoph.com
+createmetamask.org
+ekle-kampanya-bizde-var-haydi-com.cf
+evrak-dogrulama-e-devlet.com
+mynabsupport.com
+att-13456789.weeblysite.com
+att-yahoo-mail-106940.weeblysite.com
+att-102152.weeblysite.com
+metamask-eip-1559.rf.gd
+accessosicuro.45-12-2-110.cprapid.com
+layanan-netbangking.skematarifindonesia.com
+www.officesecuredrive.com
+9ea7c835-4a67-4ec3-a4e5-3a76594c84b5.id.repl.co
+fb-restriction-case-9a2eb.web.app
+document.d1t8gs0zx4d8to.amplifyapp.com
+ch09830.tw1.ru
+vrtualpersna-tuscursal.com
+foreshorecaravanpark.com.au
+assiststeampowered.com
+www.tk668.com
+batlegrounds19.in
+mobildhl-parcel.com
+klapinetti.fi
+www.afddbc.com
+signin.cash.app-squareapp.mrvozalp.com
+monitoring.wuerth-itensis.support
+app.wuerth-itensis.support
+login.wuerth-itensis.support
+dbs.fgnjau.com
+900tlonline-bireyselkampanya-katilimformu-2022-ozel.ml
+citrix.wuerth-itensis.support
+bafkreif5e3mlorkolxgg5dym3kscvswicibzlelnnk2naoeax76ohb6vua.ipfs.w3s.link
+commbank.secure-alerts.com.au
+certificaportale-bpm.com
+sectgjrptbp.online
+spk-reaktivierung.de
+kfcu.pics
+onbing.top
+metamask.io.merge.blueadvanced.com
+metamask.io.merge.bsptv24.com
+metamask.io.merge.techmxd.com
+metamask.io.merge.quantux.net
+metamask.io.merge.supmxd.com
+metamask.io.merge.youngwealthcreation.com
+metamask.io.merge.interfacevfx.com
+metamask.io.merge.fundicom.com.co
+commbank.secure-alert.com.au
+instagramreelsdushyanth.blogspot.lt
+instagramreelsdushyanth.blogspot.com.by
+taxchinfo.com
+creality-shop.ml
+susgdfryecj.top
+whsts-app.com
+austyd.top
+www.nweveentgatcha.com
+bet6811.com
+dxqsecurities.com
+join-grup56803.pft.lol
+briskematarif.apppp.asia
+dbsapp.live
+c2471429.ferozo.com
+w12primecompany.com
+metamaskx.cc
+commbank.myaccount-alert.com
+elookr.tk
+rnknteo-jp.kuangqia.cn
+gunklie.com
+help.clientpage.onlinecashhelp.com
+101416551507145.ga
+activities-coinbase.com
+bafybeif34l5sfhl7kt7byz5btxbllp6sjbswgpxjea5ereix7ib6bnl46m.ipfs.cf-ipfs.com
+att-supporting6.weeblysite.com
+1453-547661354-7983-03.tk
+nileview.d26duooens9nt0.amplifyapp.com
+attmailsupportgp.weeblysite.com
+mynabsecured.com
+www.pichweb.website
+recreate.pages.dev
+rbfccu.zhongrua.com
+blue-verifications.com
+tangyrine.ca
+authenthrupass.web.app
+authaconsoledigital.web.app
+cledigitdocumentation.web.app
+consoledigitalauth.web.app
+fb-restriction-case-11e64.web.app
+e-docauthentification.web.app
+ksjkahsadkakkjsdkjakda.web.app
+dropnoww-768eb.web.app
+mjigosagri.web.app
+genecept.shop
+sevriraleportail.web.app
+twobrothersimports.store
+cg60867.tw1.ru
+cm13200.tw1.ru
+ct44575.tw1.ru
+co20341.tw1.ru
+cj68144.tw1.ru
+pvc.acessosupervisionado.com
+rnknteo-jp.duanzeng.cn
+revistaelclub.com
+autumn-haze-7528.grm123.workers.dev
+microsoft-microsoft.pppunit.go.ug
+whatpsappa.com
+weus.top
+mep-c2.ml
+thegaragestudio.com.au
+www.3659xxx.cc
+www.thermalbeadscreedfloors.com
+ofertaseletrosuper.shop
+business-help-service-85a9f.web.app
+help-recove.start.page
+centralzs.ga
+meta-appeal-page-19826717.web.app
+www.assure7c-mtb.com
+mail.hsjjsjsjsjjdjdjnnnnn.namcv.cf
+meta-appeal-business-19067182.web.app
 mtb0nline-c6.pages.dev
 office2-elc.pages.dev
 www.trustswallet.cc
@@ -75,12 +276,7 @@ videoviralhots18.cf
 inofrakotno.mengshai.cn
 xn--socit-gnral-secur-pass-e8bbcb.com
 paxful-request.info
-defi.walleteth-us.com
-ekle-kampanya-bizde-var-haydi-com.cf
-evrak-dogrulama-e-devlet.com
 hentaino1.xyz
-japan-smbcbank.iomggi.top
-traducator-ungaria.ro
 yahoo-att-bellsouthupdate.weeblysite.com
 attdomaingee5services.weeblysite.com
 att-107029.weeblysite.com
@@ -131,7 +327,6 @@ www.id6238342verify.com
 www.crpteo.com
 server-panellle-7.tk
 wxsjhprf.tk
-mynabsupport.com
 id9236342verify.com
 giris-denizmobil-com-tr.ml
 aktifasitarif2.appop.asia
@@ -145,12 +340,6 @@ f3m2wc.cvvindustrials.com
 www.103-13-206-134.cprapid.com
 mail.103-13-206-134.cprapid.com
 reichert.gbtefxryt7-95m32xerr6rv.p.temp-site.link
-createmetamask.org
-hd7zoo.webwave.dev
-irb8d7.webwave.dev
-pt.phone-location.info
-supportteam26495126.click
-smbc-bank-japancojp.ycrsjg.cn
 steamcommunityv.asia
 neitflix.com
 atrixfdse.pages.dev
@@ -239,7 +428,6 @@ ms-sharedfile-nd.web.app
 www.netflix.morandiandrea.com
 hatdieausleihegeradeoffen.de
 identivacy.co.vu
-amshoph.com
 americafirts.us
 fatrura-ofc.com
 newdayconnections.com
@@ -431,7 +619,6 @@ bjxmczl.net
 bimcelltlyuklemeonline.gq
 bjmcczxll.net
 confirma004.liveblog365.com
-bafybeid3fxryldbeoppklbamgdor2guyi3xh3atdb2kmrfa3j3m4ezjwaa.ipfs.dweb.link
 maraquitas.online
 kampanya-iade-online-bizde-form-com.cf
 smbc-bank-japancojp.zjwzk3.cn

File diff ditekan karena terlalu besar
+ 237 - 236
yoroi_suspicious_level2.dns


Beberapa file tidak ditampilkan karena terlalu banyak file yang berubah dalam diff ini