From 996a0ec78c8721becbb6da2f0fe36b1ee546d955 Mon Sep 17 00:00:00 2001 From: Rashid Rasab <149575688+sarakhan10@users.noreply.github.com> Date: Thu, 30 Nov 2023 16:41:43 +0500 Subject: [PATCH 001/108] Update falsepositive.list Website was hacked. As soon as we noticed website hacked. We hired the team they thoroughly reviewed the website and removed malicious code. We have cleaned the website sometime ago but one of my customer told me he can't load my website then I found out it was false positive on number of websites. I found out from VirusTotal.com website. --- falsepositive.list | 1 + 1 file changed, 1 insertion(+) diff --git a/falsepositive.list b/falsepositive.list index 3625f10..d0ad7c0 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,5 +1,6 @@ # This list is used to match 1 to 1 xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test +surreycarsguildford.com nvidia.com voicemod.net zenodo.org From e87eea4f7a5569646a39b0feb2d9e024e138212c Mon Sep 17 00:00:00 2001 From: Andrea Olivato Date: Wed, 13 Mar 2024 17:55:45 +0800 Subject: [PATCH 002/108] lnk.at false positive --- falsepositive.list | 2 ++ 1 file changed, 2 insertions(+) diff --git a/falsepositive.list b/falsepositive.list index 071d491..ce9dce5 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -47,3 +47,5 @@ injective.talis.art mailsuite.com mailtrack.io haproxy-vip.quicksign.fr +https://lnk.at/jsjssgs +lnk.at From c1138cf5fe349220b40faa7910c480add08807eb Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Wed, 20 Mar 2024 07:56:38 +0200 Subject: [PATCH 003/108] Update falsepositive.list --- falsepositive.list | 1 + 1 file changed, 1 insertion(+) diff --git a/falsepositive.list b/falsepositive.list index 31a3494..7b3cc38 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,4 +1,5 @@ # This list is used to match 1 to 1 +surveysparrow.com xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test off---line.com imo.net.au From b14021995e2bc8c92292af0dea68af098e3ef468 Mon Sep 17 00:00:00 2001 From: Andrea Olivato Date: Wed, 20 Mar 2024 14:02:07 +0800 Subject: [PATCH 004/108] Removed URL --- falsepositive.list | 1 - 1 file changed, 1 deletion(-) diff --git a/falsepositive.list b/falsepositive.list index ce9dce5..f661495 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -47,5 +47,4 @@ injective.talis.art mailsuite.com mailtrack.io haproxy-vip.quicksign.fr -https://lnk.at/jsjssgs lnk.at From 74b35e25bb688c5b27081818f913c7d0b7a13254 Mon Sep 17 00:00:00 2001 From: milad ardehali Date: Thu, 21 Mar 2024 10:02:55 +0100 Subject: [PATCH 005/108] add domains lumberjack link shortener in falsepositive.list --- falsepositive.list | 3 +++ 1 file changed, 3 insertions(+) diff --git a/falsepositive.list b/falsepositive.list index c3b7e5e..42f4dc1 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -65,3 +65,6 @@ mailsuite.com mailtrack.io haproxy-vip.quicksign.fr lnk.at +l-k.io +s.l-k.io +lumberjack-link.com \ No newline at end of file From f976251ebd6e2071622d46b4aafe95b51701cb9f Mon Sep 17 00:00:00 2001 From: milad ardehali Date: Thu, 21 Mar 2024 10:19:45 +0100 Subject: [PATCH 006/108] add domains lumberjack link shortener in falsepositive.list --- falsepositive.list | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/falsepositive.list b/falsepositive.list index 42f4dc1..fda5d63 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -66,5 +66,4 @@ mailtrack.io haproxy-vip.quicksign.fr lnk.at l-k.io -s.l-k.io -lumberjack-link.com \ No newline at end of file +s.l-k.io \ No newline at end of file From 0fb844d8f9c4ad7b74245b71db4bcd1e64429bee Mon Sep 17 00:00:00 2001 From: milad ardehali Date: Thu, 21 Mar 2024 10:21:18 +0100 Subject: [PATCH 007/108] add domains lumberjack link shortener in falsepositive.list --- falsepositive.list | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/falsepositive.list b/falsepositive.list index fda5d63..42f4dc1 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -66,4 +66,5 @@ mailtrack.io haproxy-vip.quicksign.fr lnk.at l-k.io -s.l-k.io \ No newline at end of file +s.l-k.io +lumberjack-link.com \ No newline at end of file From e33a59308ba730c601c66dbcb0a0a5b6667a2fa0 Mon Sep 17 00:00:00 2001 From: milad ardehali Date: Thu, 21 Mar 2024 10:23:25 +0100 Subject: [PATCH 008/108] add domains lumberjack link shortener in falsepositive.list --- falsepositive.list | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/falsepositive.list b/falsepositive.list index 42f4dc1..fda5d63 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -66,5 +66,4 @@ mailtrack.io haproxy-vip.quicksign.fr lnk.at l-k.io -s.l-k.io -lumberjack-link.com \ No newline at end of file +s.l-k.io \ No newline at end of file From 44ddc5b2fd8d3db2ea1a19e63e8b61df59de97cd Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Fri, 22 Mar 2024 13:47:06 +0100 Subject: [PATCH 009/108] Update add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 967d9f1..719f645 100644 --- a/add-domain +++ b/add-domain @@ -344,3 +344,4 @@ postcovid19.world gosuslugi.xyz soclaiemx.xyz coronavirus.zone +wwwdofuspourlesnoobs.com From fb25ade294a55d8b5b20adc2b6c4749116d45828 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sat, 23 Mar 2024 15:22:43 +0100 Subject: [PATCH 010/108] steamcommumtiy.com ref https://github.com/blocklistproject/Lists/issues/1199 --- add-wildcard-domain | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 4a54cba..477918e 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,20 +1,21 @@ -firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list -beastsrandompack.click +abbotsleigh.nsw.edu.au beastlucyspin.click +beastsrandompack.click besatsrandompacks.click -abbotsleigh.nsw.edu.au ebeyez.com fadpakke.com firebaseio.com +firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list linkedinin.com linkr.it llcn.link +mhktricks.org +reltio-apps.com rnws.link robyoc.online skimswanp.com southerninsurs.com -mhktricks.org -reltio-apps.com +steamcommumtiy.com wasabiwallet.app wasabiwallet.eu wasabiwallet.sh From f3d5e3c4aaa2aa4bf6ece29f45c14860d3da43b0 Mon Sep 17 00:00:00 2001 From: Mods HD <85879710+mods-hd@users.noreply.github.com> Date: Mon, 25 Mar 2024 00:00:33 +0700 Subject: [PATCH 011/108] Update add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 719f645..e9496ed 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,4 @@ +valoxino.com roblox.com.af gosuslugi.agency coronavirus.app From 450ab1d30c29359ddbddae374d8a82eeec0c1fab Mon Sep 17 00:00:00 2001 From: abdil112 <161658101+abdil112@users.noreply.github.com> Date: Sun, 24 Mar 2024 19:28:00 +0100 Subject: [PATCH 012/108] Update add-link --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index f57dfb6..49cdca6 100644 --- a/add-link +++ b/add-link @@ -32,3 +32,4 @@ https://kyc-bltflyer.web.app https://bitflyerjp.com/ja-login.php https://bflyer.app https://dpdhuposts.top/track +https://dein-o2-vertrag.de/o22 From 5835da350a2b0172bc7f9e19ee9b2cd3737ba84e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 26 Mar 2024 20:18:00 -0400 Subject: [PATCH 013/108] Update add-domain remove ajstelecom[.]com[.]mx from domain list --- add-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-domain b/add-domain index e9496ed..73a9acc 100644 --- a/add-domain +++ b/add-domain @@ -171,7 +171,6 @@ water-opaque-expert.glitch.me covid-19.media covid19.media covid-19.miami -ajstelecom.com.mx ipv4.login.msa.akadns6.net vs.login.msa.akadns6.net bcryp.net From 12a928f6d81917683c060beea6054b86a27aefda Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 26 Mar 2024 20:20:33 -0400 Subject: [PATCH 014/108] Update add-wildcard-domain add ajstelecom[.]com[.]mx to wildcard-domain list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 477918e..ac02a70 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,4 +1,5 @@ abbotsleigh.nsw.edu.au +ajstelecom.com.mx beastlucyspin.click beastsrandompack.click besatsrandompacks.click From 86634191e0d55e5aee5222011837270c8828fe6b Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Sat, 30 Mar 2024 05:51:29 +0200 Subject: [PATCH 015/108] Update add-link Eskom Refund Phishing --- add-link | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-link b/add-link index 49cdca6..b7a7622 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,5 @@ +https://asb-wohnstaette.de/chase +https://newcape.tempurl.host/samak/eskom_beta/web/login.php?searchvalue=Z533489067HU&token=c924d5b9e4da7f0ee91e3e68a999b6c7d2444762 http://pilatesboutique.com.au/css/commlog/ https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html https://storageapi.fleek.co/1feb1999-9414-490f-9fd9-660d6a626ce1-bucket/encrypttwopentttmrrmukart.html From 8b00f730a3c5064f777ca208a0096261361e598d Mon Sep 17 00:00:00 2001 From: patrickrabaja <61625031+patrickrabaja@users.noreply.github.com> Date: Sat, 30 Mar 2024 17:58:29 +0800 Subject: [PATCH 016/108] Update add-wildcard-domain phishing website here in the philippines --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index ac02a70..cff8c96 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -21,3 +21,4 @@ wasabiwallet.app wasabiwallet.eu wasabiwallet.sh wasabiwallet.uk +globe.sxlph.site From af88b9a93f2cafce2f686987911e72ba3c4bed3e Mon Sep 17 00:00:00 2001 From: spirillen <44526987+spirillen@users.noreply.github.com> Date: Sat, 30 Mar 2024 16:48:34 +0000 Subject: [PATCH 017/108] Update add-wildcard-domain --- add-wildcard-domain | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index cff8c96..f9a23d7 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,3 +1,4 @@ +firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list abbotsleigh.nsw.edu.au ajstelecom.com.mx beastlucyspin.click @@ -6,7 +7,6 @@ besatsrandompacks.click ebeyez.com fadpakke.com firebaseio.com -firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list linkedinin.com linkr.it llcn.link @@ -17,8 +17,8 @@ robyoc.online skimswanp.com southerninsurs.com steamcommumtiy.com +sxlph.site wasabiwallet.app wasabiwallet.eu wasabiwallet.sh wasabiwallet.uk -globe.sxlph.site From b93a223babe1510ca869e8d27ef960a0ea9dcabe Mon Sep 17 00:00:00 2001 From: Mods HD <85879710+mods-hd@users.noreply.github.com> Date: Sun, 31 Mar 2024 21:54:04 +0700 Subject: [PATCH 018/108] Update add-domain --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index 73a9acc..ca62851 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,5 @@ +souq-deals.website +plhn.pw valoxino.com roblox.com.af gosuslugi.agency From e67af065b545c36f5a3b76d44ac53574e0f961e8 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 1 Apr 2024 18:50:17 -0400 Subject: [PATCH 019/108] add nico.sa to add-wildcard-domain The site is serving the phishing kit that was previously hosted at ajstelecom[.]com[.]mx --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index f9a23d7..f5254d7 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -11,6 +11,7 @@ linkedinin.com linkr.it llcn.link mhktricks.org +nico.sa reltio-apps.com rnws.link robyoc.online From b03bce919bced517e56a0ec6a942075f69060bd0 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 2 Apr 2024 12:50:00 -0400 Subject: [PATCH 020/108] add theaerie.ca to add-wildcard-domain theaerie[.]ca is now hosting the kit that was previously on nico[.]sa and before that ajstelecom[.]com[.]mx --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index f5254d7..1c10aec 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -19,6 +19,7 @@ skimswanp.com southerninsurs.com steamcommumtiy.com sxlph.site +theaerie.ca wasabiwallet.app wasabiwallet.eu wasabiwallet.sh From a5720274b3ff8f4d32e76e9159c5e91cfb96a851 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 3 Apr 2024 00:13:07 +0200 Subject: [PATCH 021/108] Various Phishing domains Ref https://matrix.rocks/notes/9rmh5gjkor --- add-wildcard-domain | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 1c10aec..7a64a35 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,12 +1,17 @@ -firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list abbotsleigh.nsw.edu.au ajstelecom.com.mx beastlucyspin.click beastsrandompack.click besatsrandompacks.click +darnroughonline.top +darntoughfactory.shop +darntoughonline-us.shop +darntoughonline.shop +darntoughsales.shop ebeyez.com fadpakke.com firebaseio.com +firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list linkedinin.com linkr.it llcn.link @@ -20,6 +25,9 @@ southerninsurs.com steamcommumtiy.com sxlph.site theaerie.ca +toughknifes.com +vipbargainhub.com +vpdamai.com wasabiwallet.app wasabiwallet.eu wasabiwallet.sh From f8dbeeb92c007b22eb2ee05a5da121380654466c Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Wed, 3 Apr 2024 16:42:29 +0200 Subject: [PATCH 022/108] Update add-link DHL Parcel Payment Scam / Phishing --- add-link | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-link b/add-link index b7a7622..0d694ff 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,5 @@ +http://wordrecords.com/tracker.cfm +https://dh-invoice.com/pay.php https://asb-wohnstaette.de/chase https://newcape.tempurl.host/samak/eskom_beta/web/login.php?searchvalue=Z533489067HU&token=c924d5b9e4da7f0ee91e3e68a999b6c7d2444762 http://pilatesboutique.com.au/css/commlog/ From 4d75a6a26753cc387314004e0ddc96193f84c339 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Thu, 4 Apr 2024 12:01:11 +0200 Subject: [PATCH 023/108] Update add-link DHL Payment Scam / Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index 0d694ff..892e3ff 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://khaine.nl/Loigi/DHL-track/index.php?request-id= http://wordrecords.com/tracker.cfm https://dh-invoice.com/pay.php https://asb-wohnstaette.de/chase From 6a4a0400f4fa9b653acfe922e72d8121ab4c7ecc Mon Sep 17 00:00:00 2001 From: Samantha Fry Date: Thu, 4 Apr 2024 12:43:43 +0100 Subject: [PATCH 024/108] Update add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 73a9acc..b37bdf9 100644 --- a/add-domain +++ b/add-domain @@ -345,3 +345,4 @@ gosuslugi.xyz soclaiemx.xyz coronavirus.zone wwwdofuspourlesnoobs.com +epulze-live.com From 3d8d1d497e7c4334d48e64b3886390076db78c60 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 4 Apr 2024 17:43:45 -0400 Subject: [PATCH 025/108] add applesforfred.com to add-wildcard-domain This site is now hosting the kit that was previously at theaerie[.]ca --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 7a64a35..6b131f4 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,5 +1,6 @@ abbotsleigh.nsw.edu.au ajstelecom.com.mx +applesforfred.com beastlucyspin.click beastsrandompack.click besatsrandompacks.click From 44f2bc5fdd28e4c3de7ea5e9518967be156f59aa Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Fri, 5 Apr 2024 05:56:22 +0200 Subject: [PATCH 026/108] Update add-link Courier IT Parcel Payment Scam Phishing --- add-link | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-link b/add-link index 892e3ff..b35bca3 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,5 @@ +https://www.bespokebychronos.com/ablo +https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce https://khaine.nl/Loigi/DHL-track/index.php?request-id= http://wordrecords.com/tracker.cfm https://dh-invoice.com/pay.php From 172b9c05d329cdcbd82fd65c76d7589920f80e0e Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Fri, 5 Apr 2024 06:31:43 +0200 Subject: [PATCH 027/108] Update add-link Domain Renewal Scam / Phishing / Paypal / Credit Card --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index b35bca3..ec3c34b 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://www.seo-domain.net/0:gateway:checkout/2999994 https://www.bespokebychronos.com/ablo https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce https://khaine.nl/Loigi/DHL-track/index.php?request-id= From e61667f15dd492d2bba51a0d81c2785b9e85db59 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Fri, 5 Apr 2024 09:47:05 +0200 Subject: [PATCH 028/108] Update add-link DHL Parcel Payment Scam / Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index ec3c34b..f473fdf 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://revenue.cynojine.online/shipment-delivery/?client-id= https://www.seo-domain.net/0:gateway:checkout/2999994 https://www.bespokebychronos.com/ablo https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce From 52d487dacd4684d1283edafabb210ba66de443c6 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Fri, 5 Apr 2024 17:45:37 +0200 Subject: [PATCH 029/108] Update add-link DHL Payment Scam Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index f473fdf..f6b6576 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://sindclub.org.pk/id/home/info.php https://revenue.cynojine.online/shipment-delivery/?client-id= https://www.seo-domain.net/0:gateway:checkout/2999994 https://www.bespokebychronos.com/ablo From 649bc396afe8fc7a42fe220322debd329626858f Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 5 Apr 2024 12:05:41 -0400 Subject: [PATCH 030/108] Update add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 6b131f4..794b1f2 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -13,6 +13,7 @@ ebeyez.com fadpakke.com firebaseio.com firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list +iwan2travel.com linkedinin.com linkr.it llcn.link From d2e6b73430aef160ce577012804080fe002cb0e9 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Sat, 6 Apr 2024 12:14:39 +0200 Subject: [PATCH 031/108] Update add-link Parcel Fee Payment Scam / Phishing --- add-link | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-link b/add-link index f6b6576..37fcc2f 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,5 @@ +https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl +https://lessevero-zapada.ru/ar/ https://sindclub.org.pk/id/home/info.php https://revenue.cynojine.online/shipment-delivery/?client-id= https://www.seo-domain.net/0:gateway:checkout/2999994 From b5788aaadc1191fe4d32cd9c04bfd175afaf9bcf Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Sat, 6 Apr 2024 12:15:38 +0200 Subject: [PATCH 032/108] Update add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index b37bdf9..30d1a4b 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,4 @@ +rxzxssx.fiduciaracking.com valoxino.com roblox.com.af gosuslugi.agency From b0a9716a89974482c90c596f5900a673346832c3 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Sat, 6 Apr 2024 13:12:26 +0200 Subject: [PATCH 033/108] Update add-link Parcel Payment Scam / Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index 37fcc2f..b3ae1a2 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl https://lessevero-zapada.ru/ar/ https://sindclub.org.pk/id/home/info.php From 54d342a141fd1fed1f8ffeea1cd075bc8afcb237 Mon Sep 17 00:00:00 2001 From: Patrick Rabaja <61625031+patrickrabaja@users.noreply.github.com> Date: Sun, 7 Apr 2024 09:46:58 +0800 Subject: [PATCH 034/108] add sxlph.club, phsw.site to add-wildcard-domain I have received a phishing link globe.sxlph.club/ph, it's the as the globe.sxlph.site/tt that I had reported before. for globe.phsw.site/tt page no longer shows the same webpage as the two links but it acts the same as the two links --- add-wildcard-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 794b1f2..5d2f7cc 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -34,3 +34,5 @@ wasabiwallet.app wasabiwallet.eu wasabiwallet.sh wasabiwallet.uk +sxlph.club +phsw.site From 92994519c3ee0fce24ca6ca8c867a2e7a6f23ee8 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sun, 7 Apr 2024 12:36:16 +0200 Subject: [PATCH 035/108] Sorted the lists --- add-domain | 12 ++++---- add-link | 70 +++++++++++++++++++++++----------------------- falsepositive.list | 48 +++++++++++-------------------- 3 files changed, 58 insertions(+), 72 deletions(-) diff --git a/add-domain b/add-domain index a7251e5..a6571c7 100644 --- a/add-domain +++ b/add-domain @@ -1,7 +1,3 @@ -souq-deals.website -plhn.pw -rxzxssx.fiduciaracking.com -valoxino.com roblox.com.af gosuslugi.agency coronavirus.app @@ -83,9 +79,11 @@ dofus-mmorpg.com dofusevents.com dofuspourlenoobs.com easytogets.com +epulze-live.com jocoly.esvnpe.com facebooks-copyright.com feenixlanguage.com +rxzxssx.fiduciaracking.com coronavirus-2019.firebaseio.com coronavirus-266714.firebaseio.com coronavirus-3ffb2.firebaseio.com @@ -139,11 +137,13 @@ surveysparrow.com tokenukraine.com tokopb.com vaccine-coronavirus.com +valoxino.com violationhelp.com bur.vueleslie.com vww-roblox.com wsetransport.com www-dofus.com +wwwdofuspourlesnoobs.com xn--www-ofus-touch-j1b.com cpanel01wh.bkk1.cloud.z.com gosuslugi.contact @@ -283,6 +283,7 @@ vibrant-kirch.95-181-157-21.plesk.page loratech.pe vietnam.zing.photos corona-extra.pw +plhn.pw accounts-mail.ru coronavirus-monitor.ru coronavirus-update.ru @@ -343,9 +344,8 @@ dating4free.us dating4sex.us perfectdating.us corona77.vip +souq-deals.website postcovid19.world gosuslugi.xyz soclaiemx.xyz coronavirus.zone -wwwdofuspourlesnoobs.com -epulze-live.com \ No newline at end of file diff --git a/add-link b/add-link index b3ae1a2..3198f2c 100644 --- a/add-link +++ b/add-link @@ -1,48 +1,48 @@ -https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o -https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl -https://lessevero-zapada.ru/ar/ -https://sindclub.org.pk/id/home/info.php -https://revenue.cynojine.online/shipment-delivery/?client-id= -https://www.seo-domain.net/0:gateway:checkout/2999994 -https://www.bespokebychronos.com/ablo -https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce -https://khaine.nl/Loigi/DHL-track/index.php?request-id= -http://wordrecords.com/tracker.cfm -https://dh-invoice.com/pay.php -https://asb-wohnstaette.de/chase -https://newcape.tempurl.host/samak/eskom_beta/web/login.php?searchvalue=Z533489067HU&token=c924d5b9e4da7f0ee91e3e68a999b6c7d2444762 +https://bflyer.app +https://kyc-bltflyer.web.app http://pilatesboutique.com.au/css/commlog/ -https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html -https://storageapi.fleek.co/1feb1999-9414-490f-9fd9-660d6a626ce1-bucket/encrypttwopentttmrrmukart.html -https://storageapi.fleek.co/09995281-88e7-402f-88a9-89d148c049bd-bucket/Mail.html -https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html -https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1 -https://storage.cloud.google.com/riltool/karasecondautoindex.html -https://storage.cloud.google.com/indettn/oscman4.html -http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm +http://wordrecords.com/tracker.cfm http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb -https://officelog253.knack.com/customerports -https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ -http://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ -https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D +https://www.bespokebychronos.com/ablo https://email.em.teachable.com/c/eJw1UEtuhTAMPA3sQPmQQBYsKlXvGsgYUyLlpyS8RU_foLaSLdnjmbFlWrnWctHS6Lk_1l2BYqh7u2opcEFDUuGybFyaU8-LUsLQ1E3MpoGzgQ1c84FPeiQUow2VcgA3erCuv5oDP5kyaM6FmOLTDjOfZtoRaALUvHfrVWsqnfzoxKuFp6EMBa8YnWBjJcALdkcjRt-mqeUJmRr_dVe_lXhnpE5-0rNvcwRH2Z6Scif0w_B02Nv_M_5ABJ_AfoUGP5LWp3pn2jCG02YP1cbQ_1pmQrKpbvZYuWBGciOl6vOarlhje4Kzbxu-EMIbSjty_IYfdv5rpw +https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1 +https://officelog253.knack.com/customerports https://tinyurl.com/pcpdecrapifier https://app.waiverelectronic.com/render/templateByRefId/6285d92a4ea2063b0d8e8efe https://www-rooblox.com/users/1657067/profile -https://www.kepeklian.fr/mm.php -https://s.id/newgpt5 +https://main.d1uywey79p2cj9.amplifyapp.com/werrx01USAHTM/?bcda=034956-3836-66 +http://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ +https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ +https://asb-wohnstaette.de/chase +https://dein-o2-vertrag.de/o22 https://totoko.in/tokoto/methericumes/mthudlsolpamnd/slendgerthadscGt/hUNDFGSTHshssd/xgBNASDRWEm/p0lmjsCbnml/kIDSNETWRODK/pcscGbVCSXgkl/csncdsVgfgcvTSks/weLSHSGthslasgide/TokoshsGiOksuthbamkTHER/wzmp.hp/app/ -https://app.speedywaiver.io/fill/GxsUZ3DNyRqI2KYgzusi +http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm +https://storageapi.fleek.co/09995281-88e7-402f-88a9-89d148c049bd-bucket/Mail.html +https://storageapi.fleek.co/1feb1999-9414-490f-9fd9-660d6a626ce1-bucket/encrypttwopentttmrrmukart.html +https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html +https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html +https://storage.cloud.google.com/indettn/oscman4.html +https://storage.cloud.google.com/riltool/karasecondautoindex.html https://absorbed-neighborly-lyre.glitch.me/Pay-palsecurealerts.html https://knowing-merciful-toaster.glitch.me/polkghd.html +https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D https://ispsongo.ac.mz/aaheygreaa/PageUpdated/ampt.html?app= https://costa-performance.online/kindex/albuquerqye/yeyrtretr/osbcoinss/malokiyresd/fufazasAzzi.html?id= -https://7i.se/debitreview -https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 -https://service-survey.vip/warranty -https://main.d1uywey79p2cj9.amplifyapp.com/werrx01USAHTM/?bcda=034956-3836-66 -https://kyc-bltflyer.web.app +https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o +https://s.id/newgpt5 +https://app.speedywaiver.io/fill/GxsUZ3DNyRqI2KYgzusi +https://www.seo-domain.net/0:gateway:checkout/2999994 +https://revenue.cynojine.online/shipment-delivery/?client-id= https://bitflyerjp.com/ja-login.php -https://bflyer.app +https://dh-invoice.com/pay.php +https://www.kepeklian.fr/mm.php +https://sindclub.org.pk/id/home/info.php +https://khaine.nl/Loigi/DHL-track/index.php?request-id= +https://newcape.tempurl.host/samak/eskom_beta/web/login.php?searchvalue=Z533489067HU&token=c924d5b9e4da7f0ee91e3e68a999b6c7d2444762 +https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce +https://lessevero-zapada.ru/ar/ +https://7i.se/debitreview https://dpdhuposts.top/track -https://dein-o2-vertrag.de/o22 +https://service-survey.vip/warranty +https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 +https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl diff --git a/falsepositive.list b/falsepositive.list index fda5d63..d4e4c27 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,28 +1,14 @@ # This list is used to match 1 to 1 -surveysparrow.com -xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test -surreycarsguildford.com -nvidia.com -voicemod.net -zenodo.org -han.gl -sakthivel.com -da.gd -androidauthority.com -aliexpress.us -magloft.com -forms.office.com -share.hsforms.com -denisemortati.com -signin.quicken.com -ipfs.subutai.io -off---line.com +injective.talis.art +lnk.at +osky.com.au imo.net.au -shortifyme.co existential.audio +shortifyme.co aave.com app.aave.com androidauthority.com +claritysecure.claritycrm.com cognitivzen.com denisemortati.com discordstatus.com @@ -32,20 +18,31 @@ portal.indcomleasing.com www.indcomleasing.com outlook.live.com magloft.com +mailsuite.com nvidia.com +off---line.com forms.office.com +forms.onepagecrm.com pitch.com signin.quicken.com sakthivel.com online1.snapsurveys.com +surreycarsguildford.com +surveysparrow.com trustmary.com form.trustmary.com widget.trustmary.com weareindy.com +quicksign.fr +haproxy-vip.quicksign.fr da.gd han.gl enovation.ie +degree37.io ipfs.io +l-k.io +s.l-k.io +mailtrack.io ipfs.subutai.io ftp.jaist.ac.jp clover.co.jp @@ -54,16 +51,5 @@ stats.sender.net voicemod.net westandsons.co.nz zenodo.org +xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test aliexpress.us -degree37.io -quicksign.fr -forms.onepagecrm.com -osky.com.au -claritysecure.claritycrm.com -injective.talis.art -mailsuite.com -mailtrack.io -haproxy-vip.quicksign.fr -lnk.at -l-k.io -s.l-k.io \ No newline at end of file From 0a7d337ccde4d815adf1f20d286d7fcc2845b362 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sun, 7 Apr 2024 12:39:03 +0200 Subject: [PATCH 036/108] Fixed title in default MR temp --- .github/PULL_REQUEST_TEMPLATE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md index 891b7c7..3d5f71a 100644 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -1,4 +1,4 @@ -## Domain/URL/IP(s) where you have found the Phishing: +## Phishing Domain/URL/IP(s): From 29602fd113bb1f1ee77ed2849131f7ba9504b736 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 7 Apr 2024 18:11:55 -0400 Subject: [PATCH 037/108] add littleswanaircon.com.sg to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 5d2f7cc..6f58a82 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -16,6 +16,7 @@ firebaseio.com # NOTE: This is not necessarily an actual domain to become blocke iwan2travel.com linkedinin.com linkr.it +littleswanaircon.com.sg llcn.link mhktricks.org nico.sa From 72de1254ba21d75c78e738e56f95021ea89da047 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Mon, 8 Apr 2024 06:52:30 +0200 Subject: [PATCH 038/108] Update add-link Apple ID/Account HJijacking Scam / Phishing --- add-link | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-link b/add-link index 3198f2c..dd25a44 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,5 @@ +https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 +https://clientswesh.com/ZA/ https://bflyer.app https://kyc-bltflyer.web.app http://pilatesboutique.com.au/css/commlog/ From 1643b6b3fe64d8dff319ee62e132740a46ab2794 Mon Sep 17 00:00:00 2001 From: Adam Berry Date: Mon, 8 Apr 2024 10:12:10 +0100 Subject: [PATCH 039/108] Adding phishing domain that is being used to impersonate Porkbun the domain registrar --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index a6571c7..571f65e 100644 --- a/add-domain +++ b/add-domain @@ -346,6 +346,7 @@ perfectdating.us corona77.vip souq-deals.website postcovid19.world +existingacountporbkun.italianaconserve.it gosuslugi.xyz soclaiemx.xyz coronavirus.zone From 969cc1eac3bef7e36b4ef41953324ef7a02a7166 Mon Sep 17 00:00:00 2001 From: SiGe Date: Tue, 9 Apr 2024 16:10:59 +0200 Subject: [PATCH 040/108] Update add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 571f65e..7af9c2a 100644 --- a/add-domain +++ b/add-domain @@ -350,3 +350,4 @@ existingacountporbkun.italianaconserve.it gosuslugi.xyz soclaiemx.xyz coronavirus.zone +bill-overdue.net From 46db1ff95596cf2cae30742b4f9ee4ba23dd00d5 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Thu, 11 Apr 2024 06:22:21 +0200 Subject: [PATCH 041/108] Update add-link Courier IT Parcel Payment Scam Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index dd25a44..f7215c7 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 https://clientswesh.com/ZA/ https://bflyer.app From e2de61d3b8c3e5952ccae72d7d23d8b775a76d43 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Thu, 11 Apr 2024 06:25:21 +0200 Subject: [PATCH 042/108] Update add-link South African Post Office Payment Scam Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index f7215c7..aee2ff1 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 https://clientswesh.com/ZA/ From 838942a93cc9ddbb35db6cb2e42223df88bd08dc Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Thu, 11 Apr 2024 06:26:48 +0200 Subject: [PATCH 043/108] Update add-link Domain Name Hijack Scam / Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index aee2ff1..6bcece8 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://chunkytpis.activehosted.com/f/1 https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 From 06878938b612856b8f80044024a81150e1ac94fd Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 15 Apr 2024 08:26:04 -0400 Subject: [PATCH 044/108] add westernautomobileassembly.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 6f58a82..da50635 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -35,5 +35,6 @@ wasabiwallet.app wasabiwallet.eu wasabiwallet.sh wasabiwallet.uk +westernautomobileassembly.com sxlph.club phsw.site From de955883378b18e7db21e5e111c44a451d11a3d9 Mon Sep 17 00:00:00 2001 From: Mert Sarac Date: Tue, 16 Apr 2024 12:20:37 +0300 Subject: [PATCH 045/108] Update add-link --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index 6bcece8..991b982 100644 --- a/add-link +++ b/add-link @@ -51,3 +51,4 @@ https://dpdhuposts.top/track https://service-survey.vip/warranty https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl +https://bookmarkcalculusstandinges.pro/m2bFtY?__sid=cc29c8cb-81a8-4b60-a84d-d3e01427fb4c&blp=1&eng_click=4e5def3629a64434b12b8a53a732fd74&eng_creative_id=1025071101&eng_source=168243&eng_subid=null&eng_website_id=168243&eng_widget_id=140485&p=1891%3Futm_source%3Dengageya&push=1&redir=1&stream_uuid=60dd34e6-d9e1-4f05-a73d-4dacbda5f978&subid1=%5Bcampaign_id%5D&t_id=4&thank_you_page=1552&tup=1&utm_source=engageya&utm_term=111212 From 681de716fe1b551517b2a409726e914051e75f37 Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Tue, 16 Apr 2024 18:27:21 +0200 Subject: [PATCH 046/108] Update add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 7af9c2a..601afb9 100644 --- a/add-domain +++ b/add-domain @@ -351,3 +351,4 @@ gosuslugi.xyz soclaiemx.xyz coronavirus.zone bill-overdue.net +dofuspoulesnoobs.fr From 73d7af9bfb8c0acfdf38cbfb45c785502d8634c6 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Wed, 17 Apr 2024 08:12:16 +0200 Subject: [PATCH 047/108] Update add-link Courier Payment Scam / Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index 991b982..de3f9a7 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://2m.ma/ar/ https://chunkytpis.activehosted.com/f/1 https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 From d03d9b882f52debafa93d4b129a209f3d68f76f6 Mon Sep 17 00:00:00 2001 From: bilalag Date: Wed, 17 Apr 2024 15:54:58 +0300 Subject: [PATCH 048/108] Added saudi-k.com to falsepositive_regex.list Added saudi-k.com as false postiive to be removed. --- falsepositive_regex.list | 1 + 1 file changed, 1 insertion(+) diff --git a/falsepositive_regex.list b/falsepositive_regex.list index c4c4caa..665bd58 100644 --- a/falsepositive_regex.list +++ b/falsepositive_regex.list @@ -4,3 +4,4 @@ nvidia.com rtu.lv surveysparrow.com vuagame.store +saudi-k.com From d0e361c692808076b75335f979318ac624ab6c2b Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Sat, 20 Apr 2024 06:08:23 +0200 Subject: [PATCH 049/108] Update add-link RAM Couriers Payment Phishing Scam --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index de3f9a7..a058f13 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html https://2m.ma/ar/ https://chunkytpis.activehosted.com/f/1 https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 From 3bc501ce291e6795044f21543937de37e7cfd5d6 Mon Sep 17 00:00:00 2001 From: Tarald Riise Date: Mon, 22 Apr 2024 09:19:39 +0200 Subject: [PATCH 050/108] whitelist false positive domain Domain was incorrectly classified by CRDF and other security vendors piled on. See CRDFs reversal here: https://threatcenter.crdf.fr/false_positive.php?ref=20240411303024 --- falsepositive_regex.list | 1 + 1 file changed, 1 insertion(+) diff --git a/falsepositive_regex.list b/falsepositive_regex.list index c4c4caa..652addd 100644 --- a/falsepositive_regex.list +++ b/falsepositive_regex.list @@ -4,3 +4,4 @@ nvidia.com rtu.lv surveysparrow.com vuagame.store +idtech.no From 9e496d5f803bdc59a9ad92a03241bed19d4d923e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 22 Apr 2024 14:11:26 -0400 Subject: [PATCH 051/108] Update add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index da50635..ac89f0d 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,6 +1,7 @@ abbotsleigh.nsw.edu.au ajstelecom.com.mx applesforfred.com +azezieldraconous.com beastlucyspin.click beastsrandompack.click besatsrandompacks.click From a818864357ed433e6b7afdb40531bedc0090ce20 Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Thu, 25 Apr 2024 16:33:34 +0200 Subject: [PATCH 052/108] Update IP-addr.list --- IP-addr.list | 1 + 1 file changed, 1 insertion(+) diff --git a/IP-addr.list b/IP-addr.list index ac445d0..92f769a 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -5,3 +5,4 @@ 45.148.121.173 45.148.121.138 45.148.121.144 +5.182.210.39 From c05a5fd85ca6249ec2ac9cc725797c681965203a Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 26 Apr 2024 15:27:20 -0400 Subject: [PATCH 053/108] add malicious link from foreverfarley[.]com --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index a058f13..3fcdbeb 100644 --- a/add-link +++ b/add-link @@ -54,3 +54,4 @@ https://service-survey.vip/warranty https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl https://bookmarkcalculusstandinges.pro/m2bFtY?__sid=cc29c8cb-81a8-4b60-a84d-d3e01427fb4c&blp=1&eng_click=4e5def3629a64434b12b8a53a732fd74&eng_creative_id=1025071101&eng_source=168243&eng_subid=null&eng_website_id=168243&eng_widget_id=140485&p=1891%3Futm_source%3Dengageya&push=1&redir=1&stream_uuid=60dd34e6-d9e1-4f05-a73d-4dacbda5f978&subid1=%5Bcampaign_id%5D&t_id=4&thank_you_page=1552&tup=1&utm_source=engageya&utm_term=111212 +https://foreverfarley.com/M08yODZmOEwyZDBxOXA= From bd9aef6ee8f96e002e05038c9f99786760a17f9b Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 26 Apr 2024 15:28:08 -0400 Subject: [PATCH 054/108] add foreverfarley[.]com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index ac89f0d..d7a83d2 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -14,6 +14,7 @@ ebeyez.com fadpakke.com firebaseio.com firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list +foreverfarley.com iwan2travel.com linkedinin.com linkr.it From 64057f61471b4210a04cee921dd469766c0ffdf7 Mon Sep 17 00:00:00 2001 From: spirillen <44526987+spirillen@users.noreply.github.com> Date: Fri, 26 Apr 2024 23:28:28 +0000 Subject: [PATCH 055/108] Update IP-addr.cidr.in-addr.arpa 1 of 3 missing addresses to https://github.com/mitchellkrogza/phishing/pull/383 --- IP-addr.cidr.in-addr.arpa | 1 + 1 file changed, 1 insertion(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 5e2c442..e131a00 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -2,3 +2,4 @@ # 24.1.2.0.192 # rfc:5737 32.188.34.139.235 32.52.170.83.27 +32.39.210.182.5 From f6816972e5062776f578e7e09aa64df336176d15 Mon Sep 17 00:00:00 2001 From: spirillen <44526987+spirillen@users.noreply.github.com> Date: Fri, 26 Apr 2024 23:29:15 +0000 Subject: [PATCH 056/108] Update IP-addr.cidr.list 2 of 3 missing addresses to https://github.com/mitchellkrogza/phishing/pull/383 --- IP-addr.cidr.list | 1 + 1 file changed, 1 insertion(+) diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 17a7a67..f7218fa 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -5,3 +5,4 @@ 235.139.34.188/32 27.83.170.52/32 52.229.21.156/32 +5.182.210.39/32 From d2b8e62dab8dd93ed053b58aa0b5f6f3684e5670 Mon Sep 17 00:00:00 2001 From: spirillen <44526987+spirillen@users.noreply.github.com> Date: Fri, 26 Apr 2024 23:30:13 +0000 Subject: [PATCH 057/108] Update IP-addr.in-addr.arpa 3 of 3 missing addresses for https://github.com/mitchellkrogza/phishing/pull/383 --- IP-addr.in-addr.arpa | 1 + 1 file changed, 1 insertion(+) diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 92e3534..1f43bc0 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -2,3 +2,4 @@ # 1.2.0.192 # rfc:5737 235.139.34.188 27.83.170.52 +182.210.39.5 From 490718dad8682bd11628f1f085b66e1ac0ffd20b Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Sat, 27 Apr 2024 14:21:33 +0200 Subject: [PATCH 058/108] Update IP-addr.cidr.in-addr.arpa --- IP-addr.cidr.in-addr.arpa | 3 +++ 1 file changed, 3 insertions(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index e131a00..ab939b9 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -3,3 +3,6 @@ 32.188.34.139.235 32.52.170.83.27 32.39.210.182.5 +32.173.121.148.45 +32.138.121.148.45 +32.144.121.148.45 From de7b2e7b89241c5080337a365951b6b2cc9556c2 Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Sat, 27 Apr 2024 14:24:21 +0200 Subject: [PATCH 059/108] Update IP-addr.in-addr.arpa I think you made an entry error for IP 5.182.210.39 -> 39.210.182.5 --- IP-addr.in-addr.arpa | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 1f43bc0..33eaad0 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -2,4 +2,7 @@ # 1.2.0.192 # rfc:5737 235.139.34.188 27.83.170.52 -182.210.39.5 +39.210.182.5 +173.121.148.45 +138.121.148.45 +144.121.148.45 From a584d8361fe5e09979bb7839ae1cb462df6e64ee Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Sat, 27 Apr 2024 14:33:55 +0200 Subject: [PATCH 060/108] Update IP-addr.cidr.list --- IP-addr.cidr.list | 3 +++ 1 file changed, 3 insertions(+) diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index f7218fa..f9a4d41 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -6,3 +6,6 @@ 27.83.170.52/32 52.229.21.156/32 5.182.210.39/32 +45.148.121.173/32 +45.148.121.138/32 +45.148.121.144/32 From 5b488ea13d7ae73e1120d520b002560278198da3 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 27 Apr 2024 14:25:12 -0400 Subject: [PATCH 061/108] add safecartusa[.]com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d7a83d2..a250a6d 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -25,6 +25,7 @@ nico.sa reltio-apps.com rnws.link robyoc.online +safecartusa.com skimswanp.com southerninsurs.com steamcommumtiy.com From f356ef6c5aa84aae481b72df751a1c59a999f138 Mon Sep 17 00:00:00 2001 From: Daniel Date: Sun, 28 Apr 2024 23:51:56 +0200 Subject: [PATCH 062/108] Update add-link --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index 3fcdbeb..3196c40 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://Myhermes-Sendungs.com https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html https://2m.ma/ar/ https://chunkytpis.activehosted.com/f/1 From 7c44910b20ab9020e392fc1cb532fa7332da1c7b Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 30 Apr 2024 20:13:14 -0400 Subject: [PATCH 063/108] add jestertunes[.]com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d7a83d2..9996cc0 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -16,6 +16,7 @@ firebaseio.com firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list foreverfarley.com iwan2travel.com +jestertunes.com linkedinin.com linkr.it littleswanaircon.com.sg From f9097ba762873b2196d3bfa5999b780dab28fc8b Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 1 May 2024 18:29:18 +0200 Subject: [PATCH 064/108] qei.vhl.mybluehost.me ref https://github.com/mypdns/matrix/issues/468 --- add-link | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/add-link b/add-link index 3fcdbeb..e90261f 100644 --- a/add-link +++ b/add-link @@ -1,19 +1,16 @@ -https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html -https://2m.ma/ar/ -https://chunkytpis.activehosted.com/f/1 -https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 -https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 -https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 -https://clientswesh.com/ZA/ https://bflyer.app https://kyc-bltflyer.web.app http://pilatesboutique.com.au/css/commlog/ http://wordrecords.com/tracker.cfm http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb +https://foreverfarley.com/M08yODZmOEwyZDBxOXA= +https://clientswesh.com/ZA/ https://www.bespokebychronos.com/ablo https://email.em.teachable.com/c/eJw1UEtuhTAMPA3sQPmQQBYsKlXvGsgYUyLlpyS8RU_foLaSLdnjmbFlWrnWctHS6Lk_1l2BYqh7u2opcEFDUuGybFyaU8-LUsLQ1E3MpoGzgQ1c84FPeiQUow2VcgA3erCuv5oDP5kyaM6FmOLTDjOfZtoRaALUvHfrVWsqnfzoxKuFp6EMBa8YnWBjJcALdkcjRt-mqeUJmRr_dVe_lXhnpE5-0rNvcwRH2Z6Scif0w_B02Nv_M_5ABJ_AfoUGP5LWp3pn2jCG02YP1cbQ_1pmQrKpbvZYuWBGciOl6vOarlhje4Kzbxu-EMIbSjty_IYfdv5rpw https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1 https://officelog253.knack.com/customerports +https://chunkytpis.activehosted.com/f/1 +https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 https://tinyurl.com/pcpdecrapifier https://app.waiverelectronic.com/render/templateByRefId/6285d92a4ea2063b0d8e8efe https://www-rooblox.com/users/1657067/profile @@ -30,6 +27,7 @@ https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.ht https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html https://storage.cloud.google.com/indettn/oscman4.html https://storage.cloud.google.com/riltool/karasecondautoindex.html +https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html https://absorbed-neighborly-lyre.glitch.me/Pay-palsecurealerts.html https://knowing-merciful-toaster.glitch.me/polkghd.html https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D @@ -38,20 +36,23 @@ https://costa-performance.online/kindex/albuquerqye/yeyrtretr/osbcoinss/malokiyr https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o https://s.id/newgpt5 https://app.speedywaiver.io/fill/GxsUZ3DNyRqI2KYgzusi +https://2m.ma/ar/ https://www.seo-domain.net/0:gateway:checkout/2999994 https://revenue.cynojine.online/shipment-delivery/?client-id= https://bitflyerjp.com/ja-login.php https://dh-invoice.com/pay.php https://www.kepeklian.fr/mm.php +https://qei.vhl.mybluehost.me/YS/DN/Login.php https://sindclub.org.pk/id/home/info.php +https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 https://khaine.nl/Loigi/DHL-track/index.php?request-id= https://newcape.tempurl.host/samak/eskom_beta/web/login.php?searchvalue=Z533489067HU&token=c924d5b9e4da7f0ee91e3e68a999b6c7d2444762 https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce +https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 +https://bookmarkcalculusstandinges.pro/m2bFtY?__sid=cc29c8cb-81a8-4b60-a84d-d3e01427fb4c&blp=1&eng_click=4e5def3629a64434b12b8a53a732fd74&eng_creative_id=1025071101&eng_source=168243&eng_subid=null&eng_website_id=168243&eng_widget_id=140485&p=1891%3Futm_source%3Dengageya&push=1&redir=1&stream_uuid=60dd34e6-d9e1-4f05-a73d-4dacbda5f978&subid1=%5Bcampaign_id%5D&t_id=4&thank_you_page=1552&tup=1&utm_source=engageya&utm_term=111212 https://lessevero-zapada.ru/ar/ https://7i.se/debitreview https://dpdhuposts.top/track https://service-survey.vip/warranty https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl -https://bookmarkcalculusstandinges.pro/m2bFtY?__sid=cc29c8cb-81a8-4b60-a84d-d3e01427fb4c&blp=1&eng_click=4e5def3629a64434b12b8a53a732fd74&eng_creative_id=1025071101&eng_source=168243&eng_subid=null&eng_website_id=168243&eng_widget_id=140485&p=1891%3Futm_source%3Dengageya&push=1&redir=1&stream_uuid=60dd34e6-d9e1-4f05-a73d-4dacbda5f978&subid1=%5Bcampaign_id%5D&t_id=4&thank_you_page=1552&tup=1&utm_source=engageya&utm_term=111212 -https://foreverfarley.com/M08yODZmOEwyZDBxOXA= From 6aaa3c280231d10629fccef99ba422560eacee97 Mon Sep 17 00:00:00 2001 From: ninjacatcher <168637961+ninjacatcher@users.noreply.github.com> Date: Wed, 1 May 2024 20:48:37 +0300 Subject: [PATCH 065/108] Update add-domain --- add-domain | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/add-domain b/add-domain index 601afb9..29fe4cf 100644 --- a/add-domain +++ b/add-domain @@ -352,3 +352,7 @@ soclaiemx.xyz coronavirus.zone bill-overdue.net dofuspoulesnoobs.fr +alphaumi.com +wasabiwallet.is +wasabiwallet.app +wasabiwallet.eu From a6e8b7e87561fc4b4a8b4066d1d22f05ee0dd94e Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 2 May 2024 02:17:31 +0200 Subject: [PATCH 066/108] Added a PyFunceble overwrite file for the project --- .pyfunceble/.PyFunceble.overwrite.yaml | 144 +++++++++++++++++++++++++ 1 file changed, 144 insertions(+) create mode 100644 .pyfunceble/.PyFunceble.overwrite.yaml diff --git a/.pyfunceble/.PyFunceble.overwrite.yaml b/.pyfunceble/.PyFunceble.overwrite.yaml new file mode 100644 index 0000000..bc21721 --- /dev/null +++ b/.pyfunceble/.PyFunceble.overwrite.yaml @@ -0,0 +1,144 @@ +cli_decoding: + adblock: false + aggressive: false + rpz: false + wildcard: false +cli_testing: + autocontinue: true + chancy_tester: false + cidr_expand: false + complements: false + cooldown_time: 0.0 + days_between: + db_clean: 28 + db_retest: 7 + db_type: csv + display_mode: + all: true + colour: true + dots: false + execution_time: true + less: true + max_registrar: 0 + percentage: true + quiet: false + registrar: false + simple: false + status: all + file_filter: null + file_generation: + analytic: true + hosts: false + merge_output_dirs: false + no_file: false + plain: true + unified_results: false + hosts_ip: 0.0.0.0 + inactive_db: true + local_network: false + max_workers: null + mining: false + sorting_mode: + hierarchical: true + standard: true + testing_mode: + availability: true + platform_contribution: false + reputation: false + syntax: false + whois_db: false +collection: + preferred_status_origin: recommended + push: true +debug: + active: false + level: info +dns: + delay: 0.0 + follow_server_order: true + protocol: UDP + server: + - 9.9.9.10 + - 149.112.112.10 + trust_server: true +http_codes: + list: + potentially_down: + - 400 + - 402 + - 404 + - 409 + - 410 + - 412 + - 414 + - 415 + - 416 + - 451 + potentially_up: + - 300 + - 301 + - 302 + - 303 + - 304 + - 305 + - 307 + - 308 + - 403 + - 405 + - 406 + - 407 + - 408 + - 411 + - 413 + - 417 + - 418 + - 421 + - 422 + - 423 + - 424 + - 426 + - 428 + - 431 + - 500 + - 501 + - 502 + - 503 + - 504 + - 505 + - 506 + - 507 + - 508 + - 510 + - 511 + up: + - 100 + - 101 + - 102 + - 200 + - 201 + - 202 + - 203 + - 204 + - 205 + - 206 + - 207 + - 208 + - 226 + - 429 + self_managed: false +lookup: + collection: true + dns: true + http_status_code: true + netinfo: true + reputation: false + special: true + timeout: 5 + whois: true +max_http_retries: 3 +share_logs: false +user_agent: + browser: firefox + custom: null + platform: linux +verify_ssl_certificate: true From 29eb530a75417d588cb08f77ffbea6ab36f4307d Mon Sep 17 00:00:00 2001 From: ninjacatcher <168637961+ninjacatcher@users.noreply.github.com> Date: Thu, 2 May 2024 13:10:09 +0300 Subject: [PATCH 067/108] Update add-domain --- add-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-domain b/add-domain index 29fe4cf..083216a 100644 --- a/add-domain +++ b/add-domain @@ -354,5 +354,4 @@ bill-overdue.net dofuspoulesnoobs.fr alphaumi.com wasabiwallet.is -wasabiwallet.app wasabiwallet.eu From 13d079971113a66df6ed03835b6bd9a0d450ed34 Mon Sep 17 00:00:00 2001 From: spirillen Date: Sat, 4 May 2024 13:52:58 +0000 Subject: [PATCH 068/108] Removed dead records --- add-domain | 103 +++++++++++++++++++++------------------ add-wildcard-domain | 47 +++++++++--------- falsepositive.list | 8 +-- falsepositive_regex.list | 9 ++-- falsepositive_rzd.list | 6 ++- 5 files changed, 95 insertions(+), 78 deletions(-) diff --git a/add-domain b/add-domain index 083216a..833cd71 100644 --- a/add-domain +++ b/add-domain @@ -1,13 +1,16 @@ -roblox.com.af +# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io +# Date of generation: 2024-05-03T23:21:25.371681 + + gosuslugi.agency coronavirus.app +www.coronavirus.app zc11m.csb.app documents-download-almeida-3d331c.netlify.app kyc-bltflyer.web.app restore637908-coinbase-us.web.app zttmct-tlemp.web.app gocycle.com.au -schooluniformtrading.com.au urbanandruraldesign.com.au coronatec.com.br coronavirus.cc @@ -15,7 +18,6 @@ covid19tracker.cc youareanidiot.cc discord.lossantossanto1.repl.co socialearn.co -support-1oakyf-league-of-legends.000webhostapp.com 8vjejn.com 8vpro.com 8vproe.com @@ -26,18 +28,14 @@ support-1oakyf-league-of-legends.000webhostapp.com 8vprow.com absenpbz.com actionagainstcovid19.com -dw.adyboh.com -wy.adyboh.com coronavirus.oss-accelerate.aliyuncs.com +alphaumi.com beritapb.com bitflyer-global.com business-facebook-covid19.com cheapcorona.com ciel-goshugi.com confirm-snet.com -corona-explained.com -corona-power.com -corona-ratgeber.com coronaai.com coronaaway.com coronadetection.com @@ -48,19 +46,22 @@ coronadocommunityacupuncture.com coronadocreatives.com coronadodirectory.com coronadoo.com +corona-explained.com coronaperformancemotors.com -coronavirus-map.com -coronavirus-monitor.com -coronavirus-realtime.com -coronavirus-testing.com +corona-power.com +corona-ratgeber.com coronavirusbabys.com coronaviruscenters.com coronaviruscomms.com coronavirusforgyms.com coronavirushealthclinic.com +coronavirus-map.com +coronavirus-monitor.com coronavirusnet.com coronaviruspracticeupdate.com +coronavirus-realtime.com coronavirustechhandbook.com +coronavirus-testing.com coronavirut.com coronavit.com covid19defense.com @@ -74,9 +75,10 @@ dashenopticians.com sgp1.digitaloceanspaces.com directmessageviolation.com discordsgift.com +discqrde.com dispatchweekly.com -dofus-mmorpg.com dofusevents.com +dofus-mmorpg.com dofuspourlenoobs.com easytogets.com epulze-live.com @@ -84,31 +86,31 @@ jocoly.esvnpe.com facebooks-copyright.com feenixlanguage.com rxzxssx.fiduciaracking.com -coronavirus-2019.firebaseio.com -coronavirus-266714.firebaseio.com coronavirus-3ffb2.firebaseio.com coronavirus-44a93.firebaseio.com +coronavirus-2019.firebaseio.com coronavirus-53337.firebaseio.com coronavirus-54646.firebaseio.com +coronavirus-266714.firebaseio.com coronavirus-a600f.firebaseio.com coronavirus-alert.firebaseio.com -coronavirus-d526b.firebaseio.com coronavirus-d9a66.firebaseio.com +coronavirus-d526b.firebaseio.com coronavirus-daily-status.firebaseio.com coronavirus-eba7a.firebaseio.com +coronavirusmap-eb48d.firebaseio.com coronavirus-protection-6d180.firebaseio.com coronavirus-statistics-710b6.firebaseio.com -coronavirusmap-eb48d.firebaseio.com -covid-19-6538f.firebaseio.com +covid19-a71d9.firebaseio.com covid-19-app.firebaseio.com +covid19-dd7f7.firebaseio.com covid-19-e9057.firebaseio.com +covid19-fb3d9.firebaseio.com covid-19-healthlynked.firebaseio.com covid-19-live-news-statistics.firebaseio.com covid-19-lk-dev.firebaseio.com -covid19-a71d9.firebaseio.com -covid19-dd7f7.firebaseio.com -covid19-fb3d9.firebaseio.com covid19map-269302.firebaseio.com +covid-19-6538f.firebaseio.com flutter-covid19.firebaseio.com online-coronavirus-268608.firebaseio.com wuhancoronavirustracker-693c1.firebaseio.com @@ -117,7 +119,6 @@ getcoronavirusassistance.com gosoogi.com help-media.com coronavirus-tracker-api.herokuapp.com -bmy.hqoohoa.com iamcorona.com igobjectionservices.com krakenlogins.com @@ -125,33 +126,40 @@ kuispb.com localcoronavirus.com lovemachina.com newvity.com +onlinesupportportal.com hu.pokist.otzo.com penlabuseoribute.com preview-domain.com psicmaggiecorona.com rinanft.com +rxcovid.com steamcommunitc.com steamcomnnulty.com studentschoicedwi.com +supportscontact.com surveysparrow.com tokenukraine.com tokopb.com vaccine-coronavirus.com valoxino.com violationhelp.com -bur.vueleslie.com vww-roblox.com wsetransport.com www-dofus.com wwwdofuspourlesnoobs.com +www-dofus-touch.com +www-rsblox.com xn--www-ofus-touch-j1b.com cpanel01wh.bkk1.cloud.z.com gosuslugi.contact coronasushi.com.de gosuslugi.directory me2.do +wasabiwallet.eu gosuslugi.express dofus-mmorpg.fr +dofuspoulesnoobs.fr +dofuspourlenoobs.fr dofuspourlesnoobs.fr dofustouch.fr www-papycha.fr @@ -159,11 +167,12 @@ disceord.gift discrods.gift disocrds.gift bitflyer.sviluppo.host +gosuslug.info gos-uslugi.info rcubebit.bitbucket.io covid19.egreen.io -ac19.ir covid19.tfone.ir +wasabiwallet.is pescaturismocorona.it covid19.jp correos-update.life @@ -177,6 +186,7 @@ covid-19.miami ipv4.login.msa.akadns6.net vs.login.msa.akadns6.net bcryp.net +bill-overdue.net corona-club.net coronavirustestfinders.net alili2020.ddns.net @@ -192,6 +202,7 @@ api.lgin.msa.trafficmanager.net xml.lgin.msa.trafficmanager.net gosuslugi.network coronavirusalert.news +gosuslugii.online lokal-vr.online meldung-vols.online cdcgov.org @@ -199,10 +210,11 @@ cdcgov.org vahlallha.duckdns.org tabitha-cambodia.org stopcoronavirus.us.org -s5.fso.ovh gosuslugi.page plesk.page thirsty-solomon.13-67-133-60.plesk.page +adoring-dhawan.45-138-72-99.plesk.page +loving-chatelet.45-138-72-99.plesk.page www.hungry-poitras.13-93-165-215.plesk.page kind-villani.13-93-165-215.plesk.page serene-shirley.13-93-165-215.plesk.page @@ -210,6 +222,15 @@ www.serene-shirley.13-93-165-215.plesk.page silly-driscoll.13-93-165-215.plesk.page www.silly-driscoll.13-93-165-215.plesk.page vigilant-fermi.13-93-165-215.plesk.page +peaceful-joliot.45-136-204-40.plesk.page +recursing-perlman.45-156-26-247.plesk.page +lucid-moser.45-156-27-107.plesk.page +flamboyant-curran.52-148-188-66.plesk.page +wonderful-carver.52-229-21-156.plesk.page +goofy-lamport.95-181-157-21.plesk.page +gracious-bardeen.95-181-157-21.plesk.page +suspicious-meninsky.95-181-157-21.plesk.page +vibrant-kirch.95-181-157-21.plesk.page 34-125-197-109.plesk.page www.adoring-shamir.34-125-197-109.plesk.page amazing-poitras.34-125-197-109.plesk.page @@ -267,19 +288,8 @@ upbeat-elion.34-125-197-109.plesk.page xenodochial-liskov.34-125-197-109.plesk.page youthful-engelbart.34-125-197-109.plesk.page www.youthful-engelbart.34-125-197-109.plesk.page -peaceful-joliot.45-136-204-40.plesk.page -adoring-dhawan.45-138-72-99.plesk.page -loving-chatelet.45-138-72-99.plesk.page -recursing-perlman.45-156-26-247.plesk.page -lucid-moser.45-156-27-107.plesk.page -flamboyant-curran.52-148-188-66.plesk.page -wonderful-carver.52-229-21-156.plesk.page competent-edison.95-181-157-141.plesk.page eager-pare.95-181-157-141.plesk.page -goofy-lamport.95-181-157-21.plesk.page -gracious-bardeen.95-181-157-21.plesk.page -suspicious-meninsky.95-181-157-21.plesk.page -vibrant-kirch.95-181-157-21.plesk.page loratech.pe vietnam.zing.photos corona-extra.pw @@ -289,25 +299,29 @@ coronavirus-monitor.ru coronavirus-update.ru covideo.ru ecovida.ru -gos-uslug.ru gosmslugi.ru gosrslugi.ru +gossusluggi.ru gosulgi.ru gosulsugl.ru gosulugi-anticovid.ru gosulugl.ru +gosulugy.ru gosulvgi.ru gosushlugi.ru gosusligu.ru +gosusloogi.ru +gos-uslug.ru gosuslugee.ru -gosuslugi-kultura.ru -gosuslugi-pay.ru -gosuslugi-payment.ru gosuslugi2.ru gosuslugianticovid.ru gosuslugicovid-cert.ru +gosuslugi-covid-qr.ru gosuslugigov.ru +gosuslugi-kultura.ru gosuslugipay.ru +gosuslugi-pay.ru +gosuslugi-payment.ru gosuslugji.ru gosuslugt.ru gosusluslugi.ru @@ -316,8 +330,8 @@ gosusrugi.ru grosuslugi.ru hotelsochipark.ru igosuslugi.ru -sochi-park-otel.ru sochipark-hotel.ru +sochi-park-otel.ru verify-gosuslugi.ru vgosuslugi.ru wgosuslugi.ru @@ -332,7 +346,6 @@ bigbeans.solutions covid19x.solutions gosyslugi.su moscow-post.su -harborohe.moscow-post.su www.moscow-post.su coronavirus-update.today choicemonitor.top @@ -346,12 +359,6 @@ perfectdating.us corona77.vip souq-deals.website postcovid19.world -existingacountporbkun.italianaconserve.it gosuslugi.xyz soclaiemx.xyz coronavirus.zone -bill-overdue.net -dofuspoulesnoobs.fr -alphaumi.com -wasabiwallet.is -wasabiwallet.eu diff --git a/add-wildcard-domain b/add-wildcard-domain index 5e77307..13b2a28 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,44 +1,47 @@ +# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io +# Date of generation: 2024-05-03T23:21:25.326515 + + +wasabiwallet.app abbotsleigh.nsw.edu.au -ajstelecom.com.mx -applesforfred.com -azezieldraconous.com +theaerie.ca beastlucyspin.click beastsrandompack.click besatsrandompacks.click -darnroughonline.top -darntoughfactory.shop -darntoughonline-us.shop -darntoughonline.shop -darntoughsales.shop +sxlph.club +applesforfred.com +azezieldraconous.com ebeyez.com fadpakke.com firebaseio.com -firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list foreverfarley.com iwan2travel.com jestertunes.com linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -mhktricks.org -nico.sa reltio-apps.com -rnws.link -robyoc.online safecartusa.com skimswanp.com southerninsurs.com steamcommumtiy.com -sxlph.site -theaerie.ca toughknifes.com vipbargainhub.com vpdamai.com -wasabiwallet.app +westernautomobileassembly.com wasabiwallet.eu +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +robyoc.online +mhktricks.org +nico.sa +littleswanaircon.com.sg wasabiwallet.sh -wasabiwallet.uk -westernautomobileassembly.com -sxlph.club +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop phsw.site +sxlph.site +darnroughonline.top +wasabiwallet.uk diff --git a/falsepositive.list b/falsepositive.list index d4e4c27..e8da4fc 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,4 +1,7 @@ -# This list is used to match 1 to 1 +# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io +# Date of generation: 2024-05-03T23:21:25.314911 + + injective.talis.art lnk.at osky.com.au @@ -20,8 +23,8 @@ outlook.live.com magloft.com mailsuite.com nvidia.com -off---line.com forms.office.com +off---line.com forms.onepagecrm.com pitch.com signin.quicken.com @@ -51,5 +54,4 @@ stats.sender.net voicemod.net westandsons.co.nz zenodo.org -xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test aliexpress.us diff --git a/falsepositive_regex.list b/falsepositive_regex.list index 613d33b..902022b 100644 --- a/falsepositive_regex.list +++ b/falsepositive_regex.list @@ -1,8 +1,11 @@ -# This list will tell the system to explicitly check for the given regex. +# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io +# Date of generation: 2024-05-03T23:21:25.336003 + + campaign-statistics.com -idtech.no nvidia.com -rtu.lv saudi-k.com surveysparrow.com +rtu.lv +idtech.no vuagame.store diff --git a/falsepositive_rzd.list b/falsepositive_rzd.list index 8c310af..0f9d594 100644 --- a/falsepositive_rzd.list +++ b/falsepositive_rzd.list @@ -1,3 +1,5 @@ -# This list will tell the system to explicitly check for the given -# string plus all possible TLD. +# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io +# Date of generation: 2024-05-03T23:21:25.309917 + + vodafone.de From f1bddcccfd6a9807dfcda1138d36b74153a5c14c Mon Sep 17 00:00:00 2001 From: spirillen Date: Sat, 4 May 2024 14:09:02 +0000 Subject: [PATCH 069/108] Removed dead records --- add-link | 65 ++++++++++++++++---------------------------------------- 1 file changed, 18 insertions(+), 47 deletions(-) diff --git a/add-link b/add-link index e90261f..870283e 100644 --- a/add-link +++ b/add-link @@ -1,58 +1,29 @@ -https://bflyer.app -https://kyc-bltflyer.web.app +# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io +# Date of generation: 2024-05-04T14:06:50.869806 + + http://pilatesboutique.com.au/css/commlog/ -http://wordrecords.com/tracker.cfm -http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb +https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html +https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html https://foreverfarley.com/M08yODZmOEwyZDBxOXA= -https://clientswesh.com/ZA/ -https://www.bespokebychronos.com/ablo -https://email.em.teachable.com/c/eJw1UEtuhTAMPA3sQPmQQBYsKlXvGsgYUyLlpyS8RU_foLaSLdnjmbFlWrnWctHS6Lk_1l2BYqh7u2opcEFDUuGybFyaU8-LUsLQ1E3MpoGzgQ1c84FPeiQUow2VcgA3erCuv5oDP5kyaM6FmOLTDjOfZtoRaALUvHfrVWsqnfzoxKuFp6EMBa8YnWBjJcALdkcjRt-mqeUJmRr_dVe_lXhnpE5-0rNvcwRH2Z6Scif0w_B02Nv_M_5ABJ_AfoUGP5LWp3pn2jCG02YP1cbQ_1pmQrKpbvZYuWBGciOl6vOarlhje4Kzbxu-EMIbSjty_IYfdv5rpw -https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1 -https://officelog253.knack.com/customerports -https://chunkytpis.activehosted.com/f/1 +http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm +http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb +https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html +https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ +https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 -https://tinyurl.com/pcpdecrapifier https://app.waiverelectronic.com/render/templateByRefId/6285d92a4ea2063b0d8e8efe -https://www-rooblox.com/users/1657067/profile -https://main.d1uywey79p2cj9.amplifyapp.com/werrx01USAHTM/?bcda=034956-3836-66 -http://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ -https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ -https://asb-wohnstaette.de/chase -https://dein-o2-vertrag.de/o22 +https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o +https://www.kepeklian.fr/mm.php https://totoko.in/tokoto/methericumes/mthudlsolpamnd/slendgerthadscGt/hUNDFGSTHshssd/xgBNASDRWEm/p0lmjsCbnml/kIDSNETWRODK/pcscGbVCSXgkl/csncdsVgfgcvTSks/weLSHSGthslasgide/TokoshsGiOksuthbamkTHER/wzmp.hp/app/ -http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm -https://storageapi.fleek.co/09995281-88e7-402f-88a9-89d148c049bd-bucket/Mail.html -https://storageapi.fleek.co/1feb1999-9414-490f-9fd9-660d6a626ce1-bucket/encrypttwopentttmrrmukart.html -https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html -https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html -https://storage.cloud.google.com/indettn/oscman4.html -https://storage.cloud.google.com/riltool/karasecondautoindex.html -https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html +https://2m.ma/ar/ https://absorbed-neighborly-lyre.glitch.me/Pay-palsecurealerts.html https://knowing-merciful-toaster.glitch.me/polkghd.html -https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D +https://qei.vhl.mybluehost.me/YS/DN/Login.php https://ispsongo.ac.mz/aaheygreaa/PageUpdated/ampt.html?app= -https://costa-performance.online/kindex/albuquerqye/yeyrtretr/osbcoinss/malokiyresd/fufazasAzzi.html?id= -https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o -https://s.id/newgpt5 -https://app.speedywaiver.io/fill/GxsUZ3DNyRqI2KYgzusi -https://2m.ma/ar/ https://www.seo-domain.net/0:gateway:checkout/2999994 -https://revenue.cynojine.online/shipment-delivery/?client-id= -https://bitflyerjp.com/ja-login.php -https://dh-invoice.com/pay.php -https://www.kepeklian.fr/mm.php -https://qei.vhl.mybluehost.me/YS/DN/Login.php -https://sindclub.org.pk/id/home/info.php -https://levraisupport.com/St/no4/tracking/j0pl1n/details.php?id=66359035 -https://khaine.nl/Loigi/DHL-track/index.php?request-id= -https://newcape.tempurl.host/samak/eskom_beta/web/login.php?searchvalue=Z533489067HU&token=c924d5b9e4da7f0ee91e3e68a999b6c7d2444762 -https://newcape.tempurl.host/clientt130/clients/web/login.php?searchvalue=Z667722302HU&token=9f33ece367639e9c7f6d6e8694f3f3a910c935ce -https://ionos-se.tempurl.host/clients/web/login.php?searchvalue=Z834605932HU&token=ad06150a3763cfa6a08527ef7c52f294db6f2985 -https://bookmarkcalculusstandinges.pro/m2bFtY?__sid=cc29c8cb-81a8-4b60-a84d-d3e01427fb4c&blp=1&eng_click=4e5def3629a64434b12b8a53a732fd74&eng_creative_id=1025071101&eng_source=168243&eng_subid=null&eng_website_id=168243&eng_widget_id=140485&p=1891%3Futm_source%3Dengageya&push=1&redir=1&stream_uuid=60dd34e6-d9e1-4f05-a73d-4dacbda5f978&subid1=%5Bcampaign_id%5D&t_id=4&thank_you_page=1552&tup=1&utm_source=engageya&utm_term=111212 -https://lessevero-zapada.ru/ar/ +https://riveroaks.edu.pk/wp-includes/ed/ https://7i.se/debitreview -https://dpdhuposts.top/track -https://service-survey.vip/warranty https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 -https://creasyofferzapp.world/c/EkNBmbGv4r38IBvU1Ga1MsN0VenN9?s1=102aa3b0a757d1709d56b6ec212d4a&s2=1043&s3=244458&offer_id=24506&s4=&first=&last=&country=&zip=&city=&address=&email=&phone={aff_sub6}#rafl +https://cdejl27wywlpneivx7vfia-on.drv.tw/block2/ +https://service-survey.vip/warranty From fac225119b3a79b19b7041ab48b7f46ca355b4d2 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sat, 4 May 2024 16:16:31 +0200 Subject: [PATCH 070/108] Ip address cleanup --- IP-addr.cidr.in-addr.arpa | 1 - IP-addr.cidr.list | 2 -- IP-addr.in-addr.arpa | 1 - IP-addr.list | 1 - 4 files changed, 5 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index ab939b9..55895ce 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -1,7 +1,6 @@ # example address # 24.1.2.0.192 # rfc:5737 32.188.34.139.235 -32.52.170.83.27 32.39.210.182.5 32.173.121.148.45 32.138.121.148.45 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index f9a4d41..18bd4ae 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -1,10 +1,8 @@ # example address # 192.0.2.1/24 # rfc:5737 -13.67.133.60/32 20.106.143.112/32 235.139.34.188/32 27.83.170.52/32 -52.229.21.156/32 5.182.210.39/32 45.148.121.173/32 45.148.121.138/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 33eaad0..cde7ee0 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -1,7 +1,6 @@ # example address # 1.2.0.192 # rfc:5737 235.139.34.188 -27.83.170.52 39.210.182.5 173.121.148.45 138.121.148.45 diff --git a/IP-addr.list b/IP-addr.list index 92f769a..72650ed 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -1,7 +1,6 @@ # example address # 192.0.2.1 # rfc:5737 188.34.139.235 -52.170.83.27 45.148.121.173 45.148.121.138 45.148.121.144 From 37ab8ccb75bd8a073494df2ac713713e329a38bf Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Tue, 7 May 2024 07:49:25 +0200 Subject: [PATCH 071/108] Update add-link Courier IT Parcel Payment Scam / Phishing --- add-link | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/add-link b/add-link index 870283e..d8fea38 100644 --- a/add-link +++ b/add-link @@ -1,7 +1,8 @@ # Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io # Date of generation: 2024-05-04T14:06:50.869806 - +https://bahri-ambulanter-pflegedienst.de/ea81a724d12cdb1642a63b91af127860 +https://updatepay.tempurl.host/so/clients/web/login.php?searchvalue=Z648470348HU&token=b92f8658ee9f15ca481b29480804e7b921d28f9f http://pilatesboutique.com.au/css/commlog/ https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html From 530cefa6aea11e9ffae9e1e6d44509af4ea9d05e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 7 May 2024 11:24:14 -0400 Subject: [PATCH 072/108] add technowide.com.tr to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 13b2a28..d27650e 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -23,6 +23,7 @@ safecartusa.com skimswanp.com southerninsurs.com steamcommumtiy.com +technowide.com.tr toughknifes.com vipbargainhub.com vpdamai.com From 39eefe8bc5cabdc77a2493cc6b397c30f94997ae Mon Sep 17 00:00:00 2001 From: John Marti Buntia <141903111+jmtb095@users.noreply.github.com> Date: Wed, 8 May 2024 11:44:51 +0800 Subject: [PATCH 073/108] add https://www.manitowocice.com/Media/Manitowocice/robux1.html to add-link This webpage lures the victim into thinking that they got free Robux (an in-game currency that can be purchased in the popular game Roblox). It then proceeds to make the user complete tasks to unlock the said prize. --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index e042a76..67e48e2 100644 --- a/add-link +++ b/add-link @@ -29,3 +29,4 @@ https://7i.se/debitreview https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 https://cdejl27wywlpneivx7vfia-on.drv.tw/block2/ https://service-survey.vip/warranty +https://www.manitowocice.com/Media/Manitowocice/robux1.html From d57a6583c9aadb7251c867df1dfbb5d3c43bed8d Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 13 May 2024 16:59:48 -0400 Subject: [PATCH 074/108] Update add-wildcard-domain to include carnesboinobre.com.br --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d27650e..99abf48 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -46,3 +46,4 @@ phsw.site sxlph.site darnroughonline.top wasabiwallet.uk +carnesboinobre.com.br From 7ce1f4c35c981233bf67762c3ab2b8c1deb145f9 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 14 May 2024 08:27:16 -0400 Subject: [PATCH 075/108] add reclaim-bittrex.com to add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 833cd71..d0d6819 100644 --- a/add-domain +++ b/add-domain @@ -362,3 +362,4 @@ postcovid19.world gosuslugi.xyz soclaiemx.xyz coronavirus.zone +reclaim-bittrex.com From b37a77d218fcb7699c47f5f1479f90fb02fb307f Mon Sep 17 00:00:00 2001 From: Spirillen Date: Tue, 14 May 2024 21:50:06 +0200 Subject: [PATCH 076/108] t.co Ref https://github.com/mypdns/matrix/issues/470 --- add-link | 39 ++++++++++++++++++++------------------- 1 file changed, 20 insertions(+), 19 deletions(-) diff --git a/add-link b/add-link index 67e48e2..749a583 100644 --- a/add-link +++ b/add-link @@ -1,32 +1,33 @@ # Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io # Date of generation: 2024-05-04T14:06:50.869806 -https://bahri-ambulanter-pflegedienst.de/ea81a724d12cdb1642a63b91af127860 -https://updatepay.tempurl.host/so/clients/web/login.php?searchvalue=Z648470348HU&token=b92f8658ee9f15ca481b29480804e7b921d28f9f -https://myhermes-sendungs.com/ -http://pilatesboutique.com.au/css/commlog/ -https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html -https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html -https://foreverfarley.com/M08yODZmOEwyZDBxOXA= http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb -https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html -https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ +http://pilatesboutique.com.au/css/commlog/ +https://2m.ma/ar/ https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D -https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 +https://7i.se/debitreview +https://absorbed-neighborly-lyre.glitch.me/Pay-palsecurealerts.html https://app.waiverelectronic.com/render/templateByRefId/6285d92a4ea2063b0d8e8efe +https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 +https://bahri-ambulanter-pflegedienst.de/ea81a724d12cdb1642a63b91af127860 +https://cdejl27wywlpneivx7vfia-on.drv.tw/block2/ https://em.yotpo.com/ss/c/u001.wn-COKalR4CP0fC0Rew92tAy50a4Wz2vxyAQGss8b7gYxJj7EkbbBIDBTsk538lnz_KWI3YOlCs18kDrKbpcfVL64wbwHb2VWamqW-2mQokWUPRG1A-rpsS9WBLYhr7FX6LFFsvMC1Yjq6fKhGdoYJYGBBJrwQEj2hS945H6uSRNdJ5YBf7OHaK2cJUShTiYokXXKbT38FwFJdvIq6JxojUZfhJEguD00-SbslPH2YMmSwD3-629QVTGyWSmFWNb7nNEY4VgfHkfO8-HLY2DEEY7SY5ovfqelZwGH8Ww6_LRAEA15-4yKFdP1ZAegPn8HpTxvqeigPUnLhqbaSsKlvfCopQT9Kded4MX8-XMlDFwPTbrXFWbsgLSc8YR3ijoo16sjDI-RDNvxOH1Ifsn0IoDmvdcaZ-eOTbtcJMWW0qvCitm5mf7cqP7VqgAsREONmpiYoJGz51zEWE3d1F-yQuvDCUugJejl8WFipeDtBPt4Tf_pD10mC0iW89HMCLVGghuWaMAoT1LoRpoIaVcvg/45a/GZhMXpR8T8-EyPbQtJx6Vw/h1/h001.i8rtg3oYPPoKaWqhmziD-zSeLTD1wNXaIx94QN1Kf_o -https://www.kepeklian.fr/mm.php -https://totoko.in/tokoto/methericumes/mthudlsolpamnd/slendgerthadscGt/hUNDFGSTHshssd/xgBNASDRWEm/p0lmjsCbnml/kIDSNETWRODK/pcscGbVCSXgkl/csncdsVgfgcvTSks/weLSHSGthslasgide/TokoshsGiOksuthbamkTHER/wzmp.hp/app/ -https://2m.ma/ar/ -https://absorbed-neighborly-lyre.glitch.me/Pay-palsecurealerts.html +https://foreverfarley.com/M08yODZmOEwyZDBxOXA= +https://ispsongo.ac.mz/aaheygreaa/PageUpdated/ampt.html?app= https://knowing-merciful-toaster.glitch.me/polkghd.html +https://lahoyws2.com/wp-content/uploads/2024/04/R/compatlog/tracking/pag1.html +https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ +https://myhermes-sendungs.com/ https://qei.vhl.mybluehost.me/YS/DN/Login.php -https://ispsongo.ac.mz/aaheygreaa/PageUpdated/ampt.html?app= -https://www.seo-domain.net/0:gateway:checkout/2999994 https://riveroaks.edu.pk/wp-includes/ed/ -https://7i.se/debitreview -https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 -https://cdejl27wywlpneivx7vfia-on.drv.tw/block2/ +https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html https://service-survey.vip/warranty +https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 +https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html +https://t.co/GmnTcF2cYi +https://totoko.in/tokoto/methericumes/mthudlsolpamnd/slendgerthadscGt/hUNDFGSTHshssd/xgBNASDRWEm/p0lmjsCbnml/kIDSNETWRODK/pcscGbVCSXgkl/csncdsVgfgcvTSks/weLSHSGthslasgide/TokoshsGiOksuthbamkTHER/wzmp.hp/app/ +https://updatepay.tempurl.host/so/clients/web/login.php?searchvalue=Z648470348HU&token=b92f8658ee9f15ca481b29480804e7b921d28f9f +https://www.kepeklian.fr/mm.php https://www.manitowocice.com/Media/Manitowocice/robux1.html +https://www.seo-domain.net/0:gateway:checkout/2999994 From 6cb379312f9f2fbf9391ed5b866e5d52791175dd Mon Sep 17 00:00:00 2001 From: Spirillen Date: Tue, 14 May 2024 21:50:11 +0200 Subject: [PATCH 077/108] t.co Ref https://github.com/mypdns/matrix/issues/470 --- add-domain | 500 ++++++++++++++++++++++++++--------------------------- 1 file changed, 250 insertions(+), 250 deletions(-) diff --git a/add-domain b/add-domain index 833cd71..79144b5 100644 --- a/add-domain +++ b/add-domain @@ -1,23 +1,9 @@ # Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io # Date of generation: 2024-05-03T23:21:25.371681 - -gosuslugi.agency -coronavirus.app -www.coronavirus.app -zc11m.csb.app -documents-download-almeida-3d331c.netlify.app -kyc-bltflyer.web.app -restore637908-coinbase-us.web.app -zttmct-tlemp.web.app -gocycle.com.au -urbanandruraldesign.com.au -coronatec.com.br -coronavirus.cc -covid19tracker.cc -youareanidiot.cc -discord.lossantossanto1.repl.co -socialearn.co +109.197.125.34.bc.googleusercontent.com +2020logs.duckdns.org +34-125-197-109.plesk.page 8vjejn.com 8vpro.com 8vproe.com @@ -27,15 +13,36 @@ socialearn.co 8vprot.com 8vprow.com absenpbz.com +accounts-mail.ru actionagainstcovid19.com -coronavirus.oss-accelerate.aliyuncs.com +adoring-dhawan.45-138-72-99.plesk.page +alili2020.ddns.net alphaumi.com +amazing-poitras.34-125-197-109.plesk.page +api.lgin.msa.trafficmanager.net +awesome-wescoff.34-125-197-109.plesk.page +bcryp.net beritapb.com +bigbeans.solutions +bill-overdue.net bitflyer-global.com +bitflyer.sviluppo.host +bold-kalam.34-125-197-109.plesk.page +brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com +cdcgov.org +charming-satoshi.34-125-197-109.plesk.page cheapcorona.com +choicemonitor.top ciel-goshugi.com +competent-edison.95-181-157-141.plesk.page confirm-snet.com +corona-club.net +corona-explained.com +corona-extra.pw +corona-power.com +corona-ratgeber.com +corona77.vip coronaai.com coronaaway.com coronadetection.com @@ -46,319 +53,312 @@ coronadocommunityacupuncture.com coronadocreatives.com coronadodirectory.com coronadoo.com -corona-explained.com coronaperformancemotors.com -corona-power.com -corona-ratgeber.com +coronasushi.com.de +coronatec.com.br +coronavirus-2019.firebaseio.com +coronavirus-266714.firebaseio.com +coronavirus-3ffb2.firebaseio.com +coronavirus-44a93.firebaseio.com +coronavirus-53337.firebaseio.com +coronavirus-54646.firebaseio.com +coronavirus-a600f.firebaseio.com +coronavirus-alert.firebaseio.com +coronavirus-d526b.firebaseio.com +coronavirus-d9a66.firebaseio.com +coronavirus-daily-status.firebaseio.com +coronavirus-eba7a.firebaseio.com +coronavirus-map.com +coronavirus-monitor.com +coronavirus-monitor.ru +coronavirus-protection-6d180.firebaseio.com +coronavirus-realtime.com +coronavirus-statistics-710b6.firebaseio.com +coronavirus-testing.com +coronavirus-tracker-api.herokuapp.com +coronavirus-update.ru +coronavirus-update.today +coronavirus.app +coronavirus.cc +coronavirus.oss-accelerate.aliyuncs.com +coronavirus.uno +coronavirus.zone +coronavirusalert.news +coronavirusapp.site coronavirusbabys.com coronaviruscenters.com coronaviruscomms.com coronavirusforgyms.com coronavirushealthclinic.com -coronavirus-map.com -coronavirus-monitor.com +coronavirusmap-eb48d.firebaseio.com coronavirusnet.com coronaviruspracticeupdate.com -coronavirus-realtime.com coronavirustechhandbook.com -coronavirus-testing.com +coronavirustestfinders.net coronavirut.com coronavit.com +correos-update.life +covid-19-6538f.firebaseio.com +covid-19-app.firebaseio.com +covid-19-e9057.firebaseio.com +covid-19-healthlynked.firebaseio.com +covid-19-live-news-statistics.firebaseio.com +covid-19-lk-dev.firebaseio.com +covid-19.media +covid-19.miami +covid19-a71d9.firebaseio.com +covid19-dd7f7.firebaseio.com +covid19-fb3d9.firebaseio.com +covid19.egreen.io +covid19.jp +covid19.media +covid19.tfone.ir covid19defense.com covid19japan.com covid19lascruces.com +covid19map-269302.firebaseio.com covid19mayhem.com covid19proof.com +covid19tracker.cc covid19wny.com +covid19x.solutions +covideo.ru covidquarantine.com +cpanel01wh.bkk1.cloud.z.com +cranky-kalam.34-125-197-109.plesk.page +crazy-pare.34-125-197-109.plesk.page dashenopticians.com -sgp1.digitaloceanspaces.com +dating4free.us +dating4sex.us directmessageviolation.com +disceord.gift +discord.lossantossanto1.repl.co discordsgift.com discqrde.com +discrods.gift +disocrds.gift dispatchweekly.com -dofusevents.com +documents-download-almeida-3d331c.netlify.app dofus-mmorpg.com +dofus-mmorpg.fr +dofusevents.com +dofuspoulesnoobs.fr dofuspourlenoobs.com +dofuspourlenoobs.fr +dofuspourlesnoobs.fr +dofustouch.fr +eager-pare.95-181-157-141.plesk.page easytogets.com +ecovida.ru +eloquent-lumiere.34-125-197-109.plesk.page +epic-feynman.34-125-197-109.plesk.page epulze-live.com -jocoly.esvnpe.com facebooks-copyright.com +fe-by01p-msa.trafficmanager.net feenixlanguage.com -rxzxssx.fiduciaracking.com -coronavirus-3ffb2.firebaseio.com -coronavirus-44a93.firebaseio.com -coronavirus-2019.firebaseio.com -coronavirus-53337.firebaseio.com -coronavirus-54646.firebaseio.com -coronavirus-266714.firebaseio.com -coronavirus-a600f.firebaseio.com -coronavirus-alert.firebaseio.com -coronavirus-d9a66.firebaseio.com -coronavirus-d526b.firebaseio.com -coronavirus-daily-status.firebaseio.com -coronavirus-eba7a.firebaseio.com -coronavirusmap-eb48d.firebaseio.com -coronavirus-protection-6d180.firebaseio.com -coronavirus-statistics-710b6.firebaseio.com -covid19-a71d9.firebaseio.com -covid-19-app.firebaseio.com -covid19-dd7f7.firebaseio.com -covid-19-e9057.firebaseio.com -covid19-fb3d9.firebaseio.com -covid-19-healthlynked.firebaseio.com -covid-19-live-news-statistics.firebaseio.com -covid-19-lk-dev.firebaseio.com -covid19map-269302.firebaseio.com -covid-19-6538f.firebaseio.com +festive-jones.34-125-197-109.plesk.page +flamboyant-curran.52-148-188-66.plesk.page flutter-covid19.firebaseio.com -online-coronavirus-268608.firebaseio.com -wuhancoronavirustracker-693c1.firebaseio.com +focused-swirles.34-125-197-109.plesk.page +gallant-kalam.34-125-197-109.plesk.page getcoronavirusassistance.com -109.197.125.34.bc.googleusercontent.com +gocycle.com.au +goofy-lamport.95-181-157-21.plesk.page +gos-uslug.ru +gos-uslugi.info +gos-uslygi.site +gosmslugi.ru gosoogi.com +gosrslugi.ru +gossusluggi.ru +gosulgi.ru +gosulsugl.ru +gosulugi-anticovid.ru +gosulugl.ru +gosulugy.ru +gosulvgi.ru +gosushlugi.ru +gosusligu.ru +gosusloogi.ru +gosuslug.info +gosuslugee.ru +gosuslugi-covid-qr.ru +gosuslugi-kultura.ru +gosuslugi-pay.ru +gosuslugi-payment.ru +gosuslugi.agency +gosuslugi.contact +gosuslugi.directory +gosuslugi.express +gosuslugi.life +gosuslugi.live +gosuslugi.network +gosuslugi.page +gosuslugi.shop +gosuslugi.social +gosuslugi.uk +gosuslugi.xyz +gosuslugi2.ru +gosuslugianticovid.ru +gosuslugicovid-cert.ru +gosuslugigov.ru +gosuslugii.online +gosuslugipay.ru +gosuslugji.ru +gosuslugt.ru +gosusluslugi.ru +gosusnugi.ru +gosusrugi.ru +gosusslugi.net +gosyslugi.su +gracious-bardeen.95-181-157-21.plesk.page +great-williamson.34-125-197-109.plesk.page +grosuslugi.ru +happy-antonelli.34-125-197-109.plesk.page +happy-sutherland.34-125-197-109.plesk.page +hellothere.shop help-media.com -coronavirus-tracker-api.herokuapp.com +hotelsochipark.ru +hovafmd.ddns.net +hu.pokist.otzo.com +hungry-ptolemy.34-125-197-109.plesk.page iamcorona.com igobjectionservices.com +igosuslugi.ru +ipv4.login.msa.akadns6.net +jocoly.esvnpe.com +jolly-keldysh.34-125-197-109.plesk.page +kadina-sidetesusma.net +kind-villani.13-93-165-215.plesk.page krakenlogins.com kuispb.com +kyc-bltflyer.web.app +lgin.msa.trafficmanager.net +lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page +lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page localcoronavirus.com +lokal-vr.online +loratech.pe lovemachina.com +loving-chatelet.45-138-72-99.plesk.page +lucid-moser.45-156-27-107.plesk.page +magical-kirch.34-125-197-109.plesk.page +materialistic-chain-chicory.glitch.me +me2.do +meldung-vols.online +moscow-post.su +naughty-faraday.34-125-197-109.plesk.page newvity.com +nice-curran.34-125-197-109.plesk.page +ns2.brave-ramanujan.34-125-197-109.plesk.page +online-coronavirus-268608.firebaseio.com onlinesupportportal.com -hu.pokist.otzo.com +optimistic-wright.34-125-197-109.plesk.page +pcdecrapifier.net +peaceful-carson.34-125-197-109.plesk.page +peaceful-joliot.45-136-204-40.plesk.page +pedantic-feynman.34-125-197-109.plesk.page +pedantic-satoshi.34-125-197-109.plesk.page penlabuseoribute.com +perfectdating.us +pescaturismocorona.it +plesk.page +plhn.pw +postcovid19.world preview-domain.com psicmaggiecorona.com +r.crazy-pare.34-125-197-109.plesk.page +rcubebit.bitbucket.io +recursing-perlman.45-156-26-247.plesk.page +restore637908-coinbase-us.web.app rinanft.com rxcovid.com +rxzxssx.fiduciaracking.com +sellskin.shop +serene-shirley.13-93-165-215.plesk.page +sgp1.digitaloceanspaces.com +sharp-kowalevski.34-125-197-109.plesk.page +silly-driscoll.13-93-165-215.plesk.page +sochi-park-otel.ru +sochipark-hotel.ru +socialearn.co +soclaiemx.xyz +souq-deals.website +spiffcoin.net steamcommunitc.com steamcomnnulty.com +stearnconmunity.net +stoic-elion.34-125-197-109.plesk.page +stopcoronavirus.us.org studentschoicedwi.com supportscontact.com surveysparrow.com +suspicious-meninsky.95-181-157-21.plesk.page +t.co +tabitha-cambodia.org +thirsty-solomon.13-67-133-60.plesk.page tokenukraine.com tokopb.com +trusting-lumiere.34-125-197-109.plesk.page +upbeat-elion.34-125-197-109.plesk.page +urbanandruraldesign.com.au +us-psues.top vaccine-coronavirus.com +vahlallha.duckdns.org valoxino.com +verify-gosuslugi.ru +vgosuslugi.ru +vibrant-kirch.95-181-157-21.plesk.page +vietnam.zing.photos +vigilant-fermi.13-93-165-215.plesk.page violationhelp.com +vs.login.msa.akadns6.net vww-roblox.com -wsetransport.com -www-dofus.com -wwwdofuspourlesnoobs.com -www-dofus-touch.com -www-rsblox.com -xn--www-ofus-touch-j1b.com -cpanel01wh.bkk1.cloud.z.com -gosuslugi.contact -coronasushi.com.de -gosuslugi.directory -me2.do wasabiwallet.eu -gosuslugi.express -dofus-mmorpg.fr -dofuspoulesnoobs.fr -dofuspourlenoobs.fr -dofuspourlesnoobs.fr -dofustouch.fr -www-papycha.fr -disceord.gift -discrods.gift -disocrds.gift -bitflyer.sviluppo.host -gosuslug.info -gos-uslugi.info -rcubebit.bitbucket.io -covid19.egreen.io -covid19.tfone.ir wasabiwallet.is -pescaturismocorona.it -covid19.jp -correos-update.life -gosuslugi.life -gosuslugi.live -materialistic-chain-chicory.glitch.me water-opaque-expert.glitch.me -covid-19.media -covid19.media -covid-19.miami -ipv4.login.msa.akadns6.net -vs.login.msa.akadns6.net -bcryp.net -bill-overdue.net -corona-club.net -coronavirustestfinders.net -alili2020.ddns.net -hovafmd.ddns.net -gosusslugi.net -kadina-sidetesusma.net -pcdecrapifier.net -spiffcoin.net -stearnconmunity.net -fe-by01p-msa.trafficmanager.net -lgin.msa.trafficmanager.net -api.lgin.msa.trafficmanager.net -xml.lgin.msa.trafficmanager.net -gosuslugi.network -coronavirusalert.news -gosuslugii.online -lokal-vr.online -meldung-vols.online -cdcgov.org -2020logs.duckdns.org -vahlallha.duckdns.org -tabitha-cambodia.org -stopcoronavirus.us.org -gosuslugi.page -plesk.page -thirsty-solomon.13-67-133-60.plesk.page -adoring-dhawan.45-138-72-99.plesk.page -loving-chatelet.45-138-72-99.plesk.page -www.hungry-poitras.13-93-165-215.plesk.page -kind-villani.13-93-165-215.plesk.page -serene-shirley.13-93-165-215.plesk.page -www.serene-shirley.13-93-165-215.plesk.page -silly-driscoll.13-93-165-215.plesk.page -www.silly-driscoll.13-93-165-215.plesk.page -vigilant-fermi.13-93-165-215.plesk.page -peaceful-joliot.45-136-204-40.plesk.page -recursing-perlman.45-156-26-247.plesk.page -lucid-moser.45-156-27-107.plesk.page -flamboyant-curran.52-148-188-66.plesk.page +wgosuslugi.ru wonderful-carver.52-229-21-156.plesk.page -goofy-lamport.95-181-157-21.plesk.page -gracious-bardeen.95-181-157-21.plesk.page -suspicious-meninsky.95-181-157-21.plesk.page -vibrant-kirch.95-181-157-21.plesk.page -34-125-197-109.plesk.page +wsetransport.com +wuhancoronavirustracker-693c1.firebaseio.com +www-dofus-touch.com +www-dofus.com +www-gos-uslugi.ru +www-papycha.fr +www-rsblox.com +www.0202.com.tw www.adoring-shamir.34-125-197-109.plesk.page -amazing-poitras.34-125-197-109.plesk.page www.amazing-poitras.34-125-197-109.plesk.page -awesome-wescoff.34-125-197-109.plesk.page -bold-kalam.34-125-197-109.plesk.page -brave-ramanujan.34-125-197-109.plesk.page -ns2.brave-ramanujan.34-125-197-109.plesk.page -charming-satoshi.34-125-197-109.plesk.page www.charming-satoshi.34-125-197-109.plesk.page -cranky-kalam.34-125-197-109.plesk.page -crazy-pare.34-125-197-109.plesk.page -r.crazy-pare.34-125-197-109.plesk.page +www.coronavirus.app www.crazy-pare.34-125-197-109.plesk.page -eloquent-lumiere.34-125-197-109.plesk.page -epic-feynman.34-125-197-109.plesk.page -festive-jones.34-125-197-109.plesk.page www.festive-jones.34-125-197-109.plesk.page -focused-swirles.34-125-197-109.plesk.page -gallant-kalam.34-125-197-109.plesk.page www.gallant-moser.34-125-197-109.plesk.page -great-williamson.34-125-197-109.plesk.page www.great-williamson.34-125-197-109.plesk.page -happy-antonelli.34-125-197-109.plesk.page -happy-sutherland.34-125-197-109.plesk.page www.happy-sutherland.34-125-197-109.plesk.page -hungry-ptolemy.34-125-197-109.plesk.page -lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page -lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page +www.hungry-poitras.13-93-165-215.plesk.page www.hungry-ptolemy.34-125-197-109.plesk.page www.intelligent-gould.34-125-197-109.plesk.page www.jolly-jennings.34-125-197-109.plesk.page -jolly-keldysh.34-125-197-109.plesk.page www.jolly-keldysh.34-125-197-109.plesk.page www.jolly-nightingale.34-125-197-109.plesk.page -magical-kirch.34-125-197-109.plesk.page www.magical-kirch.34-125-197-109.plesk.page -naughty-faraday.34-125-197-109.plesk.page -nice-curran.34-125-197-109.plesk.page +www.moscow-post.su www.nifty-mahavira.34-125-197-109.plesk.page -optimistic-wright.34-125-197-109.plesk.page www.optimistic-wright.34-125-197-109.plesk.page -peaceful-carson.34-125-197-109.plesk.page -pedantic-feynman.34-125-197-109.plesk.page -pedantic-satoshi.34-125-197-109.plesk.page www.pensive-wing.34-125-197-109.plesk.page www.serene-hertz.34-125-197-109.plesk.page -sharp-kowalevski.34-125-197-109.plesk.page +www.serene-shirley.13-93-165-215.plesk.page www.sharp-kowalevski.34-125-197-109.plesk.page -stoic-elion.34-125-197-109.plesk.page +www.silly-driscoll.13-93-165-215.plesk.page www.suspicious-wilson.34-125-197-109.plesk.page -trusting-lumiere.34-125-197-109.plesk.page www.trusting-lumiere.34-125-197-109.plesk.page -upbeat-elion.34-125-197-109.plesk.page +www.youthful-engelbart.34-125-197-109.plesk.page +wwwdofuspourlesnoobs.com xenodochial-liskov.34-125-197-109.plesk.page +xml.lgin.msa.trafficmanager.net +xn--www-ofus-touch-j1b.com +youareanidiot.cc youthful-engelbart.34-125-197-109.plesk.page -www.youthful-engelbart.34-125-197-109.plesk.page -competent-edison.95-181-157-141.plesk.page -eager-pare.95-181-157-141.plesk.page -loratech.pe -vietnam.zing.photos -corona-extra.pw -plhn.pw -accounts-mail.ru -coronavirus-monitor.ru -coronavirus-update.ru -covideo.ru -ecovida.ru -gosmslugi.ru -gosrslugi.ru -gossusluggi.ru -gosulgi.ru -gosulsugl.ru -gosulugi-anticovid.ru -gosulugl.ru -gosulugy.ru -gosulvgi.ru -gosushlugi.ru -gosusligu.ru -gosusloogi.ru -gos-uslug.ru -gosuslugee.ru -gosuslugi2.ru -gosuslugianticovid.ru -gosuslugicovid-cert.ru -gosuslugi-covid-qr.ru -gosuslugigov.ru -gosuslugi-kultura.ru -gosuslugipay.ru -gosuslugi-pay.ru -gosuslugi-payment.ru -gosuslugji.ru -gosuslugt.ru -gosusluslugi.ru -gosusnugi.ru -gosusrugi.ru -grosuslugi.ru -hotelsochipark.ru -igosuslugi.ru -sochipark-hotel.ru -sochi-park-otel.ru -verify-gosuslugi.ru -vgosuslugi.ru -wgosuslugi.ru -www-gos-uslugi.ru -gosuslugi.shop -hellothere.shop -sellskin.shop -coronavirusapp.site -gos-uslygi.site -gosuslugi.social -bigbeans.solutions -covid19x.solutions -gosyslugi.su -moscow-post.su -www.moscow-post.su -coronavirus-update.today -choicemonitor.top -us-psues.top -www.0202.com.tw -gosuslugi.uk -coronavirus.uno -dating4free.us -dating4sex.us -perfectdating.us -corona77.vip -souq-deals.website -postcovid19.world -gosuslugi.xyz -soclaiemx.xyz -coronavirus.zone +zc11m.csb.app +zttmct-tlemp.web.app From a816827f3c4538227a51a56cbd764075026bb92b Mon Sep 17 00:00:00 2001 From: Ethan Vogelsang <38506314+evogelsa@users.noreply.github.com> Date: Fri, 17 May 2024 22:00:48 -0500 Subject: [PATCH 078/108] Update falsepositive.list --- falsepositive.list | 1 + 1 file changed, 1 insertion(+) diff --git a/falsepositive.list b/falsepositive.list index e8da4fc..0cfab88 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -55,3 +55,4 @@ voicemod.net westandsons.co.nz zenodo.org aliexpress.us +ethans.link From d6bebed72e527192bc5ee31befb3a164f1af6efa Mon Sep 17 00:00:00 2001 From: Spirillen Date: Tue, 21 May 2024 17:36:29 +0200 Subject: [PATCH 079/108] stecmcommunijty.com Ref https://github.com/blocklistproject/Lists/issues/1235 --- add-domain | 5 +--- add-link | 3 --- add-wildcard-domain | 49 +++++++++++++++++++--------------------- falsepositive.list | 4 ---- falsepositive_regex.list | 4 ---- falsepositive_rzd.list | 4 ---- 6 files changed, 24 insertions(+), 45 deletions(-) diff --git a/add-domain b/add-domain index 7d1930d..04b74bb 100644 --- a/add-domain +++ b/add-domain @@ -1,6 +1,3 @@ -# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io -# Date of generation: 2024-05-03T23:21:25.371681 - 109.197.125.34.bc.googleusercontent.com 2020logs.duckdns.org 34-125-197-109.plesk.page @@ -362,4 +359,4 @@ xn--www-ofus-touch-j1b.com youareanidiot.cc youthful-engelbart.34-125-197-109.plesk.page zc11m.csb.app -zttmct-tlemp.web.app \ No newline at end of file +zttmct-tlemp.web.app diff --git a/add-link b/add-link index 749a583..e0991fe 100644 --- a/add-link +++ b/add-link @@ -1,6 +1,3 @@ -# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io -# Date of generation: 2024-05-04T14:06:50.869806 - http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb http://pilatesboutique.com.au/css/commlog/ diff --git a/add-wildcard-domain b/add-wildcard-domain index 99abf48..31c0a5b 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,16 +1,16 @@ -# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io -# Date of generation: 2024-05-03T23:21:25.326515 - - -wasabiwallet.app abbotsleigh.nsw.edu.au -theaerie.ca +ajstelecom.com.mx +applesforfred.com +azezieldraconous.com beastlucyspin.click beastsrandompack.click besatsrandompacks.click -sxlph.club -applesforfred.com -azezieldraconous.com +carnesboinobre.com.br +darnroughonline.top +darntoughfactory.shop +darntoughonline-us.shop +darntoughonline.shop +darntoughsales.shop ebeyez.com fadpakke.com firebaseio.com @@ -18,32 +18,29 @@ foreverfarley.com iwan2travel.com jestertunes.com linkedinin.com +linkr.it +littleswanaircon.com.sg +llcn.link +mhktricks.org +nico.sa +phsw.site reltio-apps.com +rnws.link +robyoc.online safecartusa.com skimswanp.com southerninsurs.com steamcommumtiy.com +stecmcommunijty.com +sxlph.club +sxlph.site technowide.com.tr +theaerie.ca toughknifes.com vipbargainhub.com vpdamai.com -westernautomobileassembly.com +wasabiwallet.app wasabiwallet.eu -linkr.it -llcn.link -rnws.link -ajstelecom.com.mx -robyoc.online -mhktricks.org -nico.sa -littleswanaircon.com.sg wasabiwallet.sh -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -phsw.site -sxlph.site -darnroughonline.top wasabiwallet.uk -carnesboinobre.com.br +westernautomobileassembly.com diff --git a/falsepositive.list b/falsepositive.list index e8da4fc..cd898a9 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,7 +1,3 @@ -# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io -# Date of generation: 2024-05-03T23:21:25.314911 - - injective.talis.art lnk.at osky.com.au diff --git a/falsepositive_regex.list b/falsepositive_regex.list index 902022b..b60a658 100644 --- a/falsepositive_regex.list +++ b/falsepositive_regex.list @@ -1,7 +1,3 @@ -# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io -# Date of generation: 2024-05-03T23:21:25.336003 - - campaign-statistics.com nvidia.com saudi-k.com diff --git a/falsepositive_rzd.list b/falsepositive_rzd.list index 0f9d594..e55807c 100644 --- a/falsepositive_rzd.list +++ b/falsepositive_rzd.list @@ -1,5 +1 @@ -# Generated by PyFunceble (v4.2.16.dev) / https://pyfunceble.github.io -# Date of generation: 2024-05-03T23:21:25.309917 - - vodafone.de From 9a9a8b2040b13f3900635cf3b4a5fa153310528a Mon Sep 17 00:00:00 2001 From: smed79 <1873139+smed79@users.noreply.github.com> Date: Sat, 25 May 2024 06:58:10 +0100 Subject: [PATCH 080/108] fake streaming sites --- add-domain | 40 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) diff --git a/add-domain b/add-domain index 04b74bb..b81bedc 100644 --- a/add-domain +++ b/add-domain @@ -1,4 +1,5 @@ 109.197.125.34.bc.googleusercontent.com +123movies.faith 2020logs.duckdns.org 34-125-197-109.plesk.page 8vjejn.com @@ -150,12 +151,25 @@ ecovida.ru eloquent-lumiere.34-125-197-109.plesk.page epic-feynman.34-125-197-109.plesk.page epulze-live.com +f-movie.org facebooks-copyright.com fe-by01p-msa.trafficmanager.net feenixlanguage.com festive-jones.34-125-197-109.plesk.page flamboyant-curran.52-148-188-66.plesk.page flutter-covid19.firebaseio.com +fmovies-to.me +fmovies-to.online +fmovies.direct +fmovies.email +fmovies.social +fmovies.us.com +fmovies.vet +fmovies2.site +fmovies4.org +fmoviesto.cyou +fmoviesto.gg +fmoviestv.me focused-swirles.34-125-197-109.plesk.page gallant-kalam.34-125-197-109.plesk.page getcoronavirusassistance.com @@ -220,6 +234,7 @@ hovafmd.ddns.net hu.pokist.otzo.com hungry-ptolemy.34-125-197-109.plesk.page iamcorona.com +ifmovies.net igobjectionservices.com igosuslugi.ru ipv4.login.msa.akadns6.net @@ -261,6 +276,7 @@ perfectdating.us pescaturismocorona.it plesk.page plhn.pw +pobreflix.icu postcovid19.world preview-domain.com psicmaggiecorona.com @@ -294,6 +310,7 @@ surveysparrow.com suspicious-meninsky.95-181-157-21.plesk.page t.co tabitha-cambodia.org +the-fmovies.com thirsty-solomon.13-67-133-60.plesk.page tokenukraine.com tokopb.com @@ -316,6 +333,28 @@ wasabiwallet.eu wasabiwallet.is water-opaque-expert.glitch.me wgosuslugi.ru +wiflix.autos +wiflix.blog +wiflix.boats +wiflix.cyou +wiflix.eu +wiflix.fit +wiflix.guru +wiflix.icu +wiflix.in +wiflix.info +wiflix.makeup +wiflix.motorcycles +wiflix.network +wiflix.org +wiflix.re +wiflix.tech +wiflix.work +wiflix.xyz +wiflix.yachts +wiiflix.art +wiiflix.autos +wiiflix.beauty wonderful-carver.52-229-21-156.plesk.page wsetransport.com wuhancoronavirustracker-693c1.firebaseio.com @@ -359,4 +398,5 @@ xn--www-ofus-touch-j1b.com youareanidiot.cc youthful-engelbart.34-125-197-109.plesk.page zc11m.csb.app +zt-za.fr zttmct-tlemp.web.app From 7053ec62e062a7c859918f8ea4acbbfa2fb562dd Mon Sep 17 00:00:00 2001 From: Daniel Date: Sun, 26 May 2024 15:55:52 +0200 Subject: [PATCH 081/108] Update add-link --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index e0991fe..300269a 100644 --- a/add-link +++ b/add-link @@ -28,3 +28,4 @@ https://updatepay.tempurl.host/so/clients/web/login.php?searchvalue=Z648470348HU https://www.kepeklian.fr/mm.php https://www.manitowocice.com/Media/Manitowocice/robux1.html https://www.seo-domain.net/0:gateway:checkout/2999994 +https://amberpine.site/924e51fb09663fed5b4af7db241c3153 From a647cb00f4019cc8cb9cac833822da58488efe20 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sun, 26 May 2024 23:07:54 +0200 Subject: [PATCH 082/108] https://t.co/BEYYahj0KH | /BxNz3Re1Rf Fixes https://github.com/mypdns/matrix/issues/470 --- add-link | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-link b/add-link index e0991fe..235010a 100644 --- a/add-link +++ b/add-link @@ -22,6 +22,8 @@ https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html https://service-survey.vip/warranty https://smoton.com/irwsro47-lpid4tzr-qo1hjyo6-r25 https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html +https://t.co/BEYYahj0KH +https://t.co/BxNz3Re1Rf https://t.co/GmnTcF2cYi https://totoko.in/tokoto/methericumes/mthudlsolpamnd/slendgerthadscGt/hUNDFGSTHshssd/xgBNASDRWEm/p0lmjsCbnml/kIDSNETWRODK/pcscGbVCSXgkl/csncdsVgfgcvTSks/weLSHSGthslasgide/TokoshsGiOksuthbamkTHER/wzmp.hp/app/ https://updatepay.tempurl.host/so/clients/web/login.php?searchvalue=Z648470348HU&token=b92f8658ee9f15ca481b29480804e7b921d28f9f From 769fa4193d4378e6b897177f631ca867caf6225d Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 28 May 2024 14:46:04 -0400 Subject: [PATCH 083/108] add englishplusmore.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 31c0a5b..db99c73 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -12,6 +12,7 @@ darntoughonline-us.shop darntoughonline.shop darntoughsales.shop ebeyez.com +englishplusmore.com fadpakke.com firebaseio.com foreverfarley.com From 27daa470bf673adb40c1d6759356e7ed7e132011 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 29 May 2024 08:34:51 +0200 Subject: [PATCH 084/108] bitflyer-ja.free.nf closing https://github.com/mitchellkrogza/phishing/pull/403 --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index db99c73..e999e93 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -5,6 +5,7 @@ azezieldraconous.com beastlucyspin.click beastsrandompack.click besatsrandompacks.click +bitflyer-ja.free.nf carnesboinobre.com.br darnroughonline.top darntoughfactory.shop From a5c35f81df7647997f499800f296dbdf21c6213d Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 29 May 2024 18:26:54 -0400 Subject: [PATCH 085/108] add bkengineersindia.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index e999e93..296ae80 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -6,6 +6,7 @@ beastlucyspin.click beastsrandompack.click besatsrandompacks.click bitflyer-ja.free.nf +bkengineersindia.com carnesboinobre.com.br darnroughonline.top darntoughfactory.shop From cd99c597ff4eca793b0a6b368a03082f7307e155 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 2 Jun 2024 09:49:24 -0400 Subject: [PATCH 086/108] add pescacancun.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 296ae80..1072154 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -27,6 +27,7 @@ llcn.link mhktricks.org nico.sa phsw.site +pescacancun.com reltio-apps.com rnws.link robyoc.online From 6da9c32b6701edc6c1fdc406416e74d39c2ddc53 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 4 Jun 2024 09:04:52 -0400 Subject: [PATCH 087/108] Update add-wildcard-domain to include wisbechguide.uk --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 1072154..7ec1a4e 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -48,3 +48,4 @@ wasabiwallet.eu wasabiwallet.sh wasabiwallet.uk westernautomobileassembly.com +wisbechguide.uk From 6429bafb5fddadbe530bc60307f894422a8b36df Mon Sep 17 00:00:00 2001 From: Effy Elden Date: Thu, 6 Jun 2024 12:07:23 +1000 Subject: [PATCH 088/108] Add thoughtworkis.com domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index b81bedc..ba090e1 100644 --- a/add-domain +++ b/add-domain @@ -312,6 +312,7 @@ t.co tabitha-cambodia.org the-fmovies.com thirsty-solomon.13-67-133-60.plesk.page +thoughtworkis.com tokenukraine.com tokopb.com trusting-lumiere.34-125-197-109.plesk.page From db37c0e3faf2f6c43f1f9edf021b353de9227ef5 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 10 Jun 2024 11:18:09 -0400 Subject: [PATCH 089/108] add cantabriaeventos.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 7ec1a4e..d602ba5 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -7,6 +7,7 @@ beastsrandompack.click besatsrandompacks.click bitflyer-ja.free.nf bkengineersindia.com +cantabriaeventos.com carnesboinobre.com.br darnroughonline.top darntoughfactory.shop From aeb98bacb07796d6e20661bad4a717a3ebe01af1 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 14 Jun 2024 18:33:29 -0400 Subject: [PATCH 090/108] Update add-wildcard-domain to include brunotasso.com.br --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d602ba5..f352557 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -7,6 +7,7 @@ beastsrandompack.click besatsrandompacks.click bitflyer-ja.free.nf bkengineersindia.com +brunotasso.com.br cantabriaeventos.com carnesboinobre.com.br darnroughonline.top From eb9cb02c4bac138c6ec79019ef2199178a754c86 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 17 Jun 2024 11:57:15 -0400 Subject: [PATCH 091/108] Update add-link list to include malicious redirects being hosted at srv214734[.]hoster-test[.]ru --- add-link | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/add-link b/add-link index f2ad625..1a8de43 100644 --- a/add-link +++ b/add-link @@ -30,4 +30,9 @@ https://updatepay.tempurl.host/so/clients/web/login.php?searchvalue=Z648470348HU https://www.kepeklian.fr/mm.php https://www.manitowocice.com/Media/Manitowocice/robux1.html https://www.seo-domain.net/0:gateway:checkout/2999994 -https://amberpine.site/924e51fb09663fed5b4af7db241c3153 +https://amberpine.site/924e51fb09663fed5b4af7db241c3153 +https://actimerluider.firebaseapp.com/ +https://chomatruider.firebaseapp.com/ +https://jascruipler.web.app/ +https://itsssl.com/Zqcp9 +http://u.to/w2G7IA From 8bf253dcf5145498b4c4b6ca648b3b630ca5f3d4 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 17 Jun 2024 12:00:07 -0400 Subject: [PATCH 092/108] Update add-wildcard-domain to include hoster[.]ru and hoster-test[.]ru --- add-wildcard-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index f352557..270e11f 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -20,6 +20,8 @@ englishplusmore.com fadpakke.com firebaseio.com foreverfarley.com +hoster.ru +hoster-test.ru iwan2travel.com jestertunes.com linkedinin.com From 924ae1f3069a892c9776883aa62affe9b4aea808 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 17 Jun 2024 14:42:10 -0400 Subject: [PATCH 093/108] add fjwamneg.top to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index f352557..9175b6d 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -19,6 +19,7 @@ ebeyez.com englishplusmore.com fadpakke.com firebaseio.com +fjwamneg.top foreverfarley.com iwan2travel.com jestertunes.com From 367539b73cae693b64f109735163e28bc1376670 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 18 Jun 2024 13:46:31 -0400 Subject: [PATCH 094/108] Update add-wildcard-domain to include bersowir.org --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 9175b6d..1c6ba20 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -4,6 +4,7 @@ applesforfred.com azezieldraconous.com beastlucyspin.click beastsrandompack.click +bersowir.org besatsrandompacks.click bitflyer-ja.free.nf bkengineersindia.com From a67d56324576dd91ae44481bb55e7e001f3efe2b Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 18 Jun 2024 14:12:39 -0400 Subject: [PATCH 095/108] remove hoster.ru from staged PR until can be supported with additional evidence --- add-wildcard-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index ac570ee..8cc9e28 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -21,7 +21,6 @@ fadpakke.com firebaseio.com fjwamneg.top foreverfarley.com -hoster.ru hoster-test.ru iwan2travel.com jestertunes.com From 4b5592ab4536a08a2b061e14ea1f087a39c6798f Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 19 Jun 2024 08:15:40 -0400 Subject: [PATCH 096/108] add cbcaps.shop to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 95e26b8..0435f85 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -11,6 +11,7 @@ bkengineersindia.com brunotasso.com.br cantabriaeventos.com carnesboinobre.com.br +cbcaps.shop darnroughonline.top darntoughfactory.shop darntoughonline-us.shop From 763c1f0f4b007115d2cf3c675c7d311c263e1146 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 21 Jun 2024 08:54:35 -0400 Subject: [PATCH 097/108] add race2zerogolf.za.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 0435f85..753fe2f 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -34,6 +34,7 @@ mhktricks.org nico.sa phsw.site pescacancun.com +race2zerogolf.za.com reltio-apps.com rnws.link robyoc.online From 0097fecf170a484c9f6adcb019b23df5a0bbab73 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 21 Jun 2024 10:41:06 -0400 Subject: [PATCH 098/108] add steamcommumitry.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 753fe2f..9a37918 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -43,6 +43,7 @@ skimswanp.com southerninsurs.com steamcommumtiy.com stecmcommunijty.com +steamcommumitry.com sxlph.club sxlph.site technowide.com.tr From 37daebb74116e08e86f90e6c6bab126935a160fb Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 22 Jun 2024 08:28:02 -0400 Subject: [PATCH 099/108] add ijconnects.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 9a37918..4599c45 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -24,6 +24,7 @@ firebaseio.com fjwamneg.top foreverfarley.com hoster-test.ru +ijconnects.com iwan2travel.com jestertunes.com linkedinin.com From 6c03d047c132a74ff7eb7048135e7c382efd66cb Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 09:47:51 -0400 Subject: [PATCH 100/108] add malicious pythonanywhere.com subdomains to domain list --- add-domain | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/add-domain b/add-domain index ba090e1..e92ceba 100644 --- a/add-domain +++ b/add-domain @@ -13,6 +13,9 @@ absenpbz.com accounts-mail.ru actionagainstcovid19.com +adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com +abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com +adobepewjgronjgnwkengkjwengrj.pythonanywhere.com adoring-dhawan.45-138-72-99.plesk.page alili2020.ddns.net alphaumi.com @@ -26,6 +29,7 @@ bill-overdue.net bitflyer-global.com bitflyer.sviluppo.host bold-kalam.34-125-197-109.plesk.page +borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com cdcgov.org @@ -234,10 +238,12 @@ hovafmd.ddns.net hu.pokist.otzo.com hungry-ptolemy.34-125-197-109.plesk.page iamcorona.com +iengjwklengkhwebhfceref.pythonanywhere.com ifmovies.net igobjectionservices.com igosuslugi.ru ipv4.login.msa.akadns6.net +jkrngjkernghernhgtehjnhk.pythonanywhere.com jocoly.esvnpe.com jolly-keldysh.34-125-197-109.plesk.page kadina-sidetesusma.net @@ -274,6 +280,7 @@ pedantic-satoshi.34-125-197-109.plesk.page penlabuseoribute.com perfectdating.us pescaturismocorona.it +pesjidgnojensjgerkhvjefdvs.pythonanywhere.com plesk.page plhn.pw pobreflix.icu From 8f9bd23f585e76550efff6583ed7858fef80930a Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 10:46:09 -0400 Subject: [PATCH 101/108] add pages-dev subdomains discovered via pythonanywhere --- add-domain | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/add-domain b/add-domain index e92ceba..5161abe 100644 --- a/add-domain +++ b/add-domain @@ -13,7 +13,9 @@ absenpbz.com accounts-mail.ru actionagainstcovid19.com +adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com +adobeli.pages.dev abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com adobepewjgronjgnwkengkjwengrj.pythonanywhere.com adoring-dhawan.45-138-72-99.plesk.page @@ -29,6 +31,7 @@ bill-overdue.net bitflyer-global.com bitflyer.sviluppo.host bold-kalam.34-125-197-109.plesk.page +borsbrietjblrenlgbrlenhjt.pages.dev borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com @@ -238,11 +241,13 @@ hovafmd.ddns.net hu.pokist.otzo.com hungry-ptolemy.34-125-197-109.plesk.page iamcorona.com +iengjwklengkhwebhfceref.pages.dev iengjwklengkhwebhfceref.pythonanywhere.com ifmovies.net igobjectionservices.com igosuslugi.ru ipv4.login.msa.akadns6.net +jkrngjkernghernhgtehjnhk.pages.dev jkrngjkernghernhgtehjnhk.pythonanywhere.com jocoly.esvnpe.com jolly-keldysh.34-125-197-109.plesk.page @@ -264,6 +269,19 @@ magical-kirch.34-125-197-109.plesk.page materialistic-chain-chicory.glitch.me me2.do meldung-vols.online +mi-d1m.pages.dev +micro-service-alertc0277sb-dev-err.pages.dev +micro-service-alertc0277sb-erro.pages.dev +micro-soft-failed-error.pages.dev +micro-soft-virus-alert-warning.pages.dev +microsoft-error-pages-check-errors.pages.dev +microsoft-help-and-services.pages.dev +microsoft-sales-hhgdygfg-asd.pages.dev +microsoft-suppor-number.pages.dev +microsoft-support-alrt-altr-fds.pages.dev +microsoft-support-alrt-altr-fds-098.pages.dev +microsoft-support-alrt-altr87785.pages.dev +microsoft-terms-policyalr.pages.dev moscow-post.su naughty-faraday.34-125-197-109.plesk.page newvity.com @@ -284,6 +302,7 @@ pesjidgnojensjgerkhvjefdvs.pythonanywhere.com plesk.page plhn.pw pobreflix.icu +portalpaxum.cokiwe2297.workers.dev postcovid19.world preview-domain.com psicmaggiecorona.com @@ -295,6 +314,7 @@ restore637908-coinbase-us.web.app rinanft.com rxcovid.com rxzxssx.fiduciaracking.com +sd-74h.pages.dev sellskin.shop serene-shirley.13-93-165-215.plesk.page sgp1.digitaloceanspaces.com @@ -323,6 +343,7 @@ thoughtworkis.com tokenukraine.com tokopb.com trusting-lumiere.34-125-197-109.plesk.page +ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev upbeat-elion.34-125-197-109.plesk.page urbanandruraldesign.com.au us-psues.top @@ -363,6 +384,7 @@ wiflix.yachts wiiflix.art wiiflix.autos wiiflix.beauty +win-defender-sec-64csvxxvxxvxx0x665.pages.dev wonderful-carver.52-229-21-156.plesk.page wsetransport.com wuhancoronavirustracker-693c1.firebaseio.com From 471d5aca4ae52d051e4794c0a82188c6b029106d Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 10:55:42 -0400 Subject: [PATCH 102/108] add additional domains discovered while investigating pages.dev --- add-domain | 2 ++ add-wildcard-domain | 5 ++++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 5161abe..45c2d7d 100644 --- a/add-domain +++ b/add-domain @@ -35,6 +35,7 @@ borsbrietjblrenlgbrlenhjt.pages.dev borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com +calm-wave-01c7f9910.5.azurestaticapps.net cdcgov.org charming-satoshi.34-125-197-109.plesk.page cheapcorona.com @@ -409,6 +410,7 @@ www.intelligent-gould.34-125-197-109.plesk.page www.jolly-jennings.34-125-197-109.plesk.page www.jolly-keldysh.34-125-197-109.plesk.page www.jolly-nightingale.34-125-197-109.plesk.page +www.irsusa-tax.net.dogfoodkart.com www.magical-kirch.34-125-197-109.plesk.page www.moscow-post.su www.nifty-mahavira.34-125-197-109.plesk.page diff --git a/add-wildcard-domain b/add-wildcard-domain index 4599c45..3c4dea2 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,5 +1,6 @@ abbotsleigh.nsw.edu.au -ajstelecom.com.mx +ajstelecom.com. +amarveergroup.com applesforfred.com azezieldraconous.com beastlucyspin.click @@ -49,6 +50,8 @@ sxlph.club sxlph.site technowide.com.tr theaerie.ca +the-cartel.shop +tothedigital.shop toughknifes.com vipbargainhub.com vpdamai.com From 49695f71f0fcf86b8123dc49d67a2550dbb91cdc Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 11:00:41 -0400 Subject: [PATCH 103/108] Revert "add additional domains discovered while investigating pages.dev" This reverts commit 471d5aca4ae52d051e4794c0a82188c6b029106d. --- add-domain | 2 -- add-wildcard-domain | 5 +---- 2 files changed, 1 insertion(+), 6 deletions(-) diff --git a/add-domain b/add-domain index 45c2d7d..5161abe 100644 --- a/add-domain +++ b/add-domain @@ -35,7 +35,6 @@ borsbrietjblrenlgbrlenhjt.pages.dev borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com -calm-wave-01c7f9910.5.azurestaticapps.net cdcgov.org charming-satoshi.34-125-197-109.plesk.page cheapcorona.com @@ -410,7 +409,6 @@ www.intelligent-gould.34-125-197-109.plesk.page www.jolly-jennings.34-125-197-109.plesk.page www.jolly-keldysh.34-125-197-109.plesk.page www.jolly-nightingale.34-125-197-109.plesk.page -www.irsusa-tax.net.dogfoodkart.com www.magical-kirch.34-125-197-109.plesk.page www.moscow-post.su www.nifty-mahavira.34-125-197-109.plesk.page diff --git a/add-wildcard-domain b/add-wildcard-domain index 3c4dea2..4599c45 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,6 +1,5 @@ abbotsleigh.nsw.edu.au -ajstelecom.com. -amarveergroup.com +ajstelecom.com.mx applesforfred.com azezieldraconous.com beastlucyspin.click @@ -50,8 +49,6 @@ sxlph.club sxlph.site technowide.com.tr theaerie.ca -the-cartel.shop -tothedigital.shop toughknifes.com vipbargainhub.com vpdamai.com From b84db06bc479a86f2240ac374b10428bcfcba1e4 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 11:01:08 -0400 Subject: [PATCH 104/108] Revert "add pages-dev subdomains discovered via pythonanywhere" This reverts commit 8f9bd23f585e76550efff6583ed7858fef80930a. --- add-domain | 22 ---------------------- 1 file changed, 22 deletions(-) diff --git a/add-domain b/add-domain index 5161abe..e92ceba 100644 --- a/add-domain +++ b/add-domain @@ -13,9 +13,7 @@ absenpbz.com accounts-mail.ru actionagainstcovid19.com -adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com -adobeli.pages.dev abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com adobepewjgronjgnwkengkjwengrj.pythonanywhere.com adoring-dhawan.45-138-72-99.plesk.page @@ -31,7 +29,6 @@ bill-overdue.net bitflyer-global.com bitflyer.sviluppo.host bold-kalam.34-125-197-109.plesk.page -borsbrietjblrenlgbrlenhjt.pages.dev borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com @@ -241,13 +238,11 @@ hovafmd.ddns.net hu.pokist.otzo.com hungry-ptolemy.34-125-197-109.plesk.page iamcorona.com -iengjwklengkhwebhfceref.pages.dev iengjwklengkhwebhfceref.pythonanywhere.com ifmovies.net igobjectionservices.com igosuslugi.ru ipv4.login.msa.akadns6.net -jkrngjkernghernhgtehjnhk.pages.dev jkrngjkernghernhgtehjnhk.pythonanywhere.com jocoly.esvnpe.com jolly-keldysh.34-125-197-109.plesk.page @@ -269,19 +264,6 @@ magical-kirch.34-125-197-109.plesk.page materialistic-chain-chicory.glitch.me me2.do meldung-vols.online -mi-d1m.pages.dev -micro-service-alertc0277sb-dev-err.pages.dev -micro-service-alertc0277sb-erro.pages.dev -micro-soft-failed-error.pages.dev -micro-soft-virus-alert-warning.pages.dev -microsoft-error-pages-check-errors.pages.dev -microsoft-help-and-services.pages.dev -microsoft-sales-hhgdygfg-asd.pages.dev -microsoft-suppor-number.pages.dev -microsoft-support-alrt-altr-fds.pages.dev -microsoft-support-alrt-altr-fds-098.pages.dev -microsoft-support-alrt-altr87785.pages.dev -microsoft-terms-policyalr.pages.dev moscow-post.su naughty-faraday.34-125-197-109.plesk.page newvity.com @@ -302,7 +284,6 @@ pesjidgnojensjgerkhvjefdvs.pythonanywhere.com plesk.page plhn.pw pobreflix.icu -portalpaxum.cokiwe2297.workers.dev postcovid19.world preview-domain.com psicmaggiecorona.com @@ -314,7 +295,6 @@ restore637908-coinbase-us.web.app rinanft.com rxcovid.com rxzxssx.fiduciaracking.com -sd-74h.pages.dev sellskin.shop serene-shirley.13-93-165-215.plesk.page sgp1.digitaloceanspaces.com @@ -343,7 +323,6 @@ thoughtworkis.com tokenukraine.com tokopb.com trusting-lumiere.34-125-197-109.plesk.page -ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev upbeat-elion.34-125-197-109.plesk.page urbanandruraldesign.com.au us-psues.top @@ -384,7 +363,6 @@ wiflix.yachts wiiflix.art wiiflix.autos wiiflix.beauty -win-defender-sec-64csvxxvxxvxx0x665.pages.dev wonderful-carver.52-229-21-156.plesk.page wsetransport.com wuhancoronavirustracker-693c1.firebaseio.com From b858a7ae7af2861bf6e1e544ab8ea7adaf7cdec8 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 11:07:42 -0400 Subject: [PATCH 105/108] add subdmains discovered at pages.dev while following up on pythonanywhere.com --- add-domain | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/add-domain b/add-domain index e92ceba..5161abe 100644 --- a/add-domain +++ b/add-domain @@ -13,7 +13,9 @@ absenpbz.com accounts-mail.ru actionagainstcovid19.com +adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com +adobeli.pages.dev abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com adobepewjgronjgnwkengkjwengrj.pythonanywhere.com adoring-dhawan.45-138-72-99.plesk.page @@ -29,6 +31,7 @@ bill-overdue.net bitflyer-global.com bitflyer.sviluppo.host bold-kalam.34-125-197-109.plesk.page +borsbrietjblrenlgbrlenhjt.pages.dev borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com @@ -238,11 +241,13 @@ hovafmd.ddns.net hu.pokist.otzo.com hungry-ptolemy.34-125-197-109.plesk.page iamcorona.com +iengjwklengkhwebhfceref.pages.dev iengjwklengkhwebhfceref.pythonanywhere.com ifmovies.net igobjectionservices.com igosuslugi.ru ipv4.login.msa.akadns6.net +jkrngjkernghernhgtehjnhk.pages.dev jkrngjkernghernhgtehjnhk.pythonanywhere.com jocoly.esvnpe.com jolly-keldysh.34-125-197-109.plesk.page @@ -264,6 +269,19 @@ magical-kirch.34-125-197-109.plesk.page materialistic-chain-chicory.glitch.me me2.do meldung-vols.online +mi-d1m.pages.dev +micro-service-alertc0277sb-dev-err.pages.dev +micro-service-alertc0277sb-erro.pages.dev +micro-soft-failed-error.pages.dev +micro-soft-virus-alert-warning.pages.dev +microsoft-error-pages-check-errors.pages.dev +microsoft-help-and-services.pages.dev +microsoft-sales-hhgdygfg-asd.pages.dev +microsoft-suppor-number.pages.dev +microsoft-support-alrt-altr-fds.pages.dev +microsoft-support-alrt-altr-fds-098.pages.dev +microsoft-support-alrt-altr87785.pages.dev +microsoft-terms-policyalr.pages.dev moscow-post.su naughty-faraday.34-125-197-109.plesk.page newvity.com @@ -284,6 +302,7 @@ pesjidgnojensjgerkhvjefdvs.pythonanywhere.com plesk.page plhn.pw pobreflix.icu +portalpaxum.cokiwe2297.workers.dev postcovid19.world preview-domain.com psicmaggiecorona.com @@ -295,6 +314,7 @@ restore637908-coinbase-us.web.app rinanft.com rxcovid.com rxzxssx.fiduciaracking.com +sd-74h.pages.dev sellskin.shop serene-shirley.13-93-165-215.plesk.page sgp1.digitaloceanspaces.com @@ -323,6 +343,7 @@ thoughtworkis.com tokenukraine.com tokopb.com trusting-lumiere.34-125-197-109.plesk.page +ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev upbeat-elion.34-125-197-109.plesk.page urbanandruraldesign.com.au us-psues.top @@ -363,6 +384,7 @@ wiflix.yachts wiiflix.art wiiflix.autos wiiflix.beauty +win-defender-sec-64csvxxvxxvxx0x665.pages.dev wonderful-carver.52-229-21-156.plesk.page wsetransport.com wuhancoronavirustracker-693c1.firebaseio.com From f67d29e72fd3244a22d80693d394d14c63b2e62c Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 11:14:39 -0400 Subject: [PATCH 106/108] add additional domains discovered while following up on pages.dev --- add-domain | 2 ++ add-wildcard-domain | 3 +++ 2 files changed, 5 insertions(+) diff --git a/add-domain b/add-domain index 5161abe..d686670 100644 --- a/add-domain +++ b/add-domain @@ -36,6 +36,7 @@ borsbrietjblrenlgbrlenhjt.pythonanywhere.com brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com cdcgov.org +calm-wave-01c7f9910.5.azurestaticapps.net charming-satoshi.34-125-197-109.plesk.page cheapcorona.com choicemonitor.top @@ -409,6 +410,7 @@ www.intelligent-gould.34-125-197-109.plesk.page www.jolly-jennings.34-125-197-109.plesk.page www.jolly-keldysh.34-125-197-109.plesk.page www.jolly-nightingale.34-125-197-109.plesk.page +www.irsusa-tax.net.dogfoodkart.com www.magical-kirch.34-125-197-109.plesk.page www.moscow-post.su www.nifty-mahavira.34-125-197-109.plesk.page diff --git a/add-wildcard-domain b/add-wildcard-domain index 4599c45..313050d 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,5 +1,6 @@ abbotsleigh.nsw.edu.au ajstelecom.com.mx +amarveergroup.com applesforfred.com azezieldraconous.com beastlucyspin.click @@ -49,6 +50,8 @@ sxlph.club sxlph.site technowide.com.tr theaerie.ca +the-cartel.shop +tothedigital.shop toughknifes.com vipbargainhub.com vpdamai.com From 8a2fdc0a7b87ee4b4f81aa28f31004db441fb7d9 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 11:41:16 -0400 Subject: [PATCH 107/108] add anjpvv.top to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 4599c45..81b6d7a 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,5 +1,6 @@ abbotsleigh.nsw.edu.au ajstelecom.com.mx +anjpvv.top applesforfred.com azezieldraconous.com beastlucyspin.click From e36e70c50050f6fb03b55379d7527cc17d960a38 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 24 Jun 2024 14:08:57 -0400 Subject: [PATCH 108/108] add yidirim-firsati.xyz and .shop to wildcard list --- add-wildcard-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 313050d..d57f07f 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -61,3 +61,5 @@ wasabiwallet.sh wasabiwallet.uk westernautomobileassembly.com wisbechguide.uk +yildirim-firsati.store +yildirim-firsati.xyz \ No newline at end of file