From cfd317c57fc9d6b7cacef86d008068883a195244 Mon Sep 17 00:00:00 2001
From: Scott Petty <scott.petty@owasp.org>
Date: Tue, 25 Jun 2024 11:22:16 -0400
Subject: [PATCH 1/6] sort add-domain list

---
 add-domain | 626 ++++++++++++++++++++++++++---------------------------
 1 file changed, 313 insertions(+), 313 deletions(-)

diff --git a/add-domain b/add-domain
index 6ac62bc..eb250fb 100644
--- a/add-domain
+++ b/add-domain
@@ -1,26 +1,7 @@
-gosuslugi.agency
-coronavirus.app
-www.coronavirus.app
-zc11m.csb.app
-documents-download-almeida-3d331c.netlify.app
-kyc-bltflyer.web.app
-restore637908-coinbase-us.web.app
-zttmct-tlemp.web.app
-wiiflix.art
-gocycle.com.au
-urbanandruraldesign.com.au
-wiflix.autos
-wiiflix.autos
-wiiflix.beauty
-wiflix.blog
-wiflix.boats
-coronatec.com.br
-coronavirus.cc
-covid19tracker.cc
-youareanidiot.cc
-discord.lossantossanto1.repl.co
-socialearn.co
-t.co
+109.197.125.34.bc.googleusercontent.com
+123movies.faith
+2020logs.duckdns.org
+34-125-197-109.plesk.page
 8vjejn.com
 8vpro.com
 8vproe.com
@@ -29,19 +10,45 @@ t.co
 8vpros.com
 8vprot.com
 8vprow.com
+abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
 absenpbz.com
+accounts-mail.ru
 actionagainstcovid19.com
-coronavirus.oss-accelerate.aliyuncs.com
+adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev
+adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com
+adobeli.pages.dev
+adobepewjgronjgnwkengkjwengrj.pythonanywhere.com
+adoring-dhawan.45-138-72-99.plesk.page
+alili2020.ddns.net
 alphaumi.com
+amazing-poitras.34-125-197-109.plesk.page
+api.lgin.msa.trafficmanager.net
+awesome-wescoff.34-125-197-109.plesk.page
+bcryp.net
 beritapb.com
+bigbeans.solutions
+bill-overdue.net
 bitflyer-global.com
+bitflyer.sviluppo.host
+bold-kalam.34-125-197-109.plesk.page
+borsbrietjblrenlgbrlenhjt.pages.dev
+borsbrietjblrenlgbrlenhjt.pythonanywhere.com
+brave-ramanujan.34-125-197-109.plesk.page
 business-facebook-covid19.com
+calm-wave-01c7f9910.5.azurestaticapps.net
+cdcgov.org
+charming-satoshi.34-125-197-109.plesk.page
 cheapcorona.com
+choicemonitor.top
 ciel-goshugi.com
+competent-edison.95-181-157-141.plesk.page
 confirm-snet.com
+corona-club.net
 corona-explained.com
+corona-extra.pw
 corona-power.com
 corona-ratgeber.com
+corona77.vip
 coronaai.com
 coronaaway.com
 coronadetection.com
@@ -53,386 +60,379 @@ coronadocreatives.com
 coronadodirectory.com
 coronadoo.com
 coronaperformancemotors.com
+coronasushi.com.de
+coronatec.com.br
+coronavirus-2019.firebaseio.com
+coronavirus-266714.firebaseio.com
+coronavirus-3ffb2.firebaseio.com
+coronavirus-44a93.firebaseio.com
+coronavirus-53337.firebaseio.com
+coronavirus-54646.firebaseio.com
+coronavirus-a600f.firebaseio.com
+coronavirus-alert.firebaseio.com
+coronavirus-d526b.firebaseio.com
+coronavirus-d9a66.firebaseio.com
+coronavirus-daily-status.firebaseio.com
+coronavirus-eba7a.firebaseio.com
 coronavirus-map.com
 coronavirus-monitor.com
+coronavirus-monitor.ru
+coronavirus-protection-6d180.firebaseio.com
 coronavirus-realtime.com
+coronavirus-statistics-710b6.firebaseio.com
 coronavirus-testing.com
+coronavirus-tracker-api.herokuapp.com
+coronavirus-update.ru
+coronavirus-update.today
+coronavirus.app
+coronavirus.cc
+coronavirus.oss-accelerate.aliyuncs.com
+coronavirus.uno
+coronavirus.zone
+coronavirusalert.news
+coronavirusapp.site
 coronavirusbabys.com
 coronaviruscenters.com
 coronaviruscomms.com
 coronavirusforgyms.com
 coronavirushealthclinic.com
+coronavirusmap-eb48d.firebaseio.com
 coronavirusnet.com
 coronaviruspracticeupdate.com
 coronavirustechhandbook.com
+coronavirustestfinders.net
 coronavirut.com
 coronavit.com
+correos-update.life
+covid-19-6538f.firebaseio.com
+covid-19-app.firebaseio.com
+covid-19-e9057.firebaseio.com
+covid-19-healthlynked.firebaseio.com
+covid-19-live-news-statistics.firebaseio.com
+covid-19-lk-dev.firebaseio.com
+covid-19.media
+covid-19.miami
+covid19-a71d9.firebaseio.com
+covid19-dd7f7.firebaseio.com
+covid19-fb3d9.firebaseio.com
+covid19.egreen.io
+covid19.jp
+covid19.media
+covid19.tfone.ir
 covid19defense.com
 covid19japan.com
 covid19lascruces.com
+covid19map-269302.firebaseio.com
 covid19mayhem.com
 covid19proof.com
+covid19tracker.cc
 covid19wny.com
+covid19x.solutions
+covideo.ru
 covidquarantine.com
+cpanel01wh.bkk1.cloud.z.com
+cranky-kalam.34-125-197-109.plesk.page
+crazy-pare.34-125-197-109.plesk.page
 dashenopticians.com
-sgp1.digitaloceanspaces.com
+dating4free.us
+dating4sex.us
 directmessageviolation.com
+disceord.gift
+discord.lossantossanto1.repl.co
 discordsgift.com
 discqrde.com
+discrods.gift
+disocrds.gift
 dispatchweekly.com
+documents-download-almeida-3d331c.netlify.app
 dofus-mmorpg.com
+dofus-mmorpg.fr
 dofusevents.com
+dofuspoulesnoobs.fr
 dofuspourlenoobs.com
-www.irsusa-tax.net.dogfoodkart.com
+dofuspourlenoobs.fr
+dofuspourlesnoobs.fr
+dofustouch.fr
+eager-pare.95-181-157-141.plesk.page
 easytogets.com
+ecovida.ru
+eloquent-lumiere.34-125-197-109.plesk.page
+epic-feynman.34-125-197-109.plesk.page
 epulze-live.com
-jocoly.esvnpe.com
+f-movie.org
 facebooks-copyright.com
+fe-by01p-msa.trafficmanager.net
 feenixlanguage.com
-rxzxssx.fiduciaracking.com
-coronavirus-2019.firebaseio.com
-coronavirus-266714.firebaseio.com
-coronavirus-3ffb2.firebaseio.com
-coronavirus-44a93.firebaseio.com
-coronavirus-53337.firebaseio.com
-coronavirus-54646.firebaseio.com
-coronavirus-a600f.firebaseio.com
-coronavirus-alert.firebaseio.com
-coronavirus-d526b.firebaseio.com
-coronavirus-d9a66.firebaseio.com
-coronavirus-daily-status.firebaseio.com
-coronavirus-eba7a.firebaseio.com
-coronavirus-protection-6d180.firebaseio.com
-coronavirus-statistics-710b6.firebaseio.com
-coronavirusmap-eb48d.firebaseio.com
-covid-19-6538f.firebaseio.com
-covid-19-app.firebaseio.com
-covid-19-e9057.firebaseio.com
-covid-19-healthlynked.firebaseio.com
-covid-19-live-news-statistics.firebaseio.com
-covid-19-lk-dev.firebaseio.com
-covid19-a71d9.firebaseio.com
-covid19-dd7f7.firebaseio.com
-covid19-fb3d9.firebaseio.com
-covid19map-269302.firebaseio.com
+festive-jones.34-125-197-109.plesk.page
+flamboyant-curran.52-148-188-66.plesk.page
 flutter-covid19.firebaseio.com
-online-coronavirus-268608.firebaseio.com
-wuhancoronavirustracker-693c1.firebaseio.com
+fmovies-to.me
+fmovies-to.online
+fmovies.direct
+fmovies.email
+fmovies.social
+fmovies.us.com
+fmovies.vet
+fmovies2.site
+fmovies4.org
+fmoviesto.cyou
+fmoviesto.gg
+fmoviestv.me
+focused-swirles.34-125-197-109.plesk.page
+freshloader.eu.pythonanywhere.com
+gallant-kalam.34-125-197-109.plesk.page
 getcoronavirusassistance.com
-109.197.125.34.bc.googleusercontent.com
+gocycle.com.au
+goofy-lamport.95-181-157-21.plesk.page
+gos-uslug.ru
+gos-uslugi.info
+gos-uslygi.site
+gosmslugi.ru
 gosoogi.com
+gosrslugi.ru
+gossusluggi.ru
+gosulgi.ru
+gosulsugl.ru
+gosulugi-anticovid.ru
+gosulugl.ru
+gosulugy.ru
+gosulvgi.ru
+gosushlugi.ru
+gosusligu.ru
+gosusloogi.ru
+gosuslug.info
+gosuslugee.ru
+gosuslugi-covid-qr.ru
+gosuslugi-kultura.ru
+gosuslugi-pay.ru
+gosuslugi-payment.ru
+gosuslugi.agency
+gosuslugi.contact
+gosuslugi.directory
+gosuslugi.express
+gosuslugi.life
+gosuslugi.live
+gosuslugi.network
+gosuslugi.page
+gosuslugi.shop
+gosuslugi.social
+gosuslugi.uk
+gosuslugi.xyz
+gosuslugi2.ru
+gosuslugianticovid.ru
+gosuslugicovid-cert.ru
+gosuslugigov.ru
+gosuslugii.online
+gosuslugipay.ru
+gosuslugji.ru
+gosuslugt.ru
+gosusluslugi.ru
+gosusnugi.ru
+gosusrugi.ru
+gosusslugi.net
+gosyslugi.su
+gracious-bardeen.95-181-157-21.plesk.page
+great-williamson.34-125-197-109.plesk.page
+grosuslugi.ru
+happy-antonelli.34-125-197-109.plesk.page
+happy-sutherland.34-125-197-109.plesk.page
+hellothere.shop
 help-media.com
-coronavirus-tracker-api.herokuapp.com
+hotelsochipark.ru
+hovafmd.ddns.net
+hu.pokist.otzo.com
+hungry-ptolemy.34-125-197-109.plesk.page
 iamcorona.com
+iengjwklengkhwebhfceref.pages.dev
+iengjwklengkhwebhfceref.pythonanywhere.com
+ifmovies.net
 igobjectionservices.com
+igosuslugi.ru
+ipv4.login.msa.akadns6.net
+jkrngjkernghernhgtehjnhk.pages.dev
+jkrngjkernghernhgtehjnhk.pythonanywhere.com
+jocoly.esvnpe.com
+jolly-keldysh.34-125-197-109.plesk.page
+kadina-sidetesusma.net
+kind-villani.13-93-165-215.plesk.page
 krakenlogins.com
 kuispb.com
+kyc-bltflyer.web.app
+lgin.msa.trafficmanager.net
+lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page
+lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page
 localcoronavirus.com
+lokal-vr.online
+loratech.pe
 lovemachina.com
-newvity.com
-onlinesupportportal.com
-hu.pokist.otzo.com
-penlabuseoribute.com
-preview-domain.com
-psicmaggiecorona.com
-abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
-adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com
-adobepewjgronjgnwkengkjwengrj.pythonanywhere.com
-borsbrietjblrenlgbrlenhjt.pythonanywhere.com
-freshloader.eu.pythonanywhere.com
-quicknotice.eu.pythonanywhere.com
-iengjwklengkhwebhfceref.pythonanywhere.com
-jkrngjkernghernhgtehjnhk.pythonanywhere.com
+loving-chatelet.45-138-72-99.plesk.page
+lucid-moser.45-156-27-107.plesk.page
+magical-kirch.34-125-197-109.plesk.page
+materialistic-chain-chicory.glitch.me
+me2.do
+meldung-vols.online
+mi-d1m.pages.dev
+micro-service-alertc0277sb-dev-err.pages.dev
+micro-service-alertc0277sb-erro.pages.dev
+micro-soft-failed-error.pages.dev
+micro-soft-virus-alert-warning.pages.dev
+microsoft-error-pages-check-errors.pages.dev
+microsoft-help-and-services.pages.dev
+microsoft-sales-hhgdygfg-asd.pages.dev
+microsoft-suppor-number.pages.dev
+microsoft-support-alrt-altr-fds-098.pages.dev
+microsoft-support-alrt-altr-fds.pages.dev
+microsoft-support-alrt-altr87785.pages.dev
+microsoft-terms-policyalr.pages.dev
+moscow-post.su
+naughty-faraday.34-125-197-109.plesk.page
+newvity.com
+nice-curran.34-125-197-109.plesk.page
+ns2.brave-ramanujan.34-125-197-109.plesk.page
+online-coronavirus-268608.firebaseio.com
+onlinesupportportal.com
+optimistic-wright.34-125-197-109.plesk.page
+pcdecrapifier.net
+peaceful-carson.34-125-197-109.plesk.page
+peaceful-joliot.45-136-204-40.plesk.page
+pedantic-feynman.34-125-197-109.plesk.page
+pedantic-satoshi.34-125-197-109.plesk.page
+penlabuseoribute.com
+perfectdating.us
+pescaturismocorona.it
 pesjidgnojensjgerkhvjefdvs.pythonanywhere.com
-thenoticememoir.pythonanywhere.com
-wiadomoscionet.pythonanywhere.com
+plesk.page
+plhn.pw
+pobreflix.icu
+portalpaxum.cokiwe2297.workers.dev
+postcovid19.world
+preview-domain.com
+psicmaggiecorona.com
+quicknotice.eu.pythonanywhere.com
+r.crazy-pare.34-125-197-109.plesk.page
+rcubebit.bitbucket.io
 reclaim-bittrex.com
+recursing-perlman.45-156-26-247.plesk.page
+restore637908-coinbase-us.web.app
 rinanft.com
 rxcovid.com
+rxzxssx.fiduciaracking.com
+sd-74h.pages.dev
+sellskin.shop
+serene-shirley.13-93-165-215.plesk.page
+sgp1.digitaloceanspaces.com
+sharp-kowalevski.34-125-197-109.plesk.page
+silly-driscoll.13-93-165-215.plesk.page
+sochi-park-otel.ru
+sochipark-hotel.ru
+socialearn.co
+soclaiemx.xyz
+souq-deals.website
+spiffcoin.net
 steamcommunitc.com
 steamcomnnulty.com
+stearnconmunity.net
+stoic-elion.34-125-197-109.plesk.page
+stopcoronavirus.us.org
 studentschoicedwi.com
 supportscontact.com
 surveysparrow.com
+suspicious-meninsky.95-181-157-21.plesk.page
+t.co
+tabitha-cambodia.org
 the-fmovies.com
+thenoticememoir.pythonanywhere.com
+thirsty-solomon.13-67-133-60.plesk.page
 thoughtworkis.com
 tokenukraine.com
 tokopb.com
-fmovies.us.com
+trusting-lumiere.34-125-197-109.plesk.page
+ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev
+upbeat-elion.34-125-197-109.plesk.page
+urbanandruraldesign.com.au
+us-psues.top
 vaccine-coronavirus.com
+vahlallha.duckdns.org
 valoxino.com
+verify-gosuslugi.ru
+vgosuslugi.ru
+vibrant-kirch.95-181-157-21.plesk.page
+vietnam.zing.photos
+vigilant-fermi.13-93-165-215.plesk.page
 violationhelp.com
+vs.login.msa.akadns6.net
 vww-roblox.com
-wsetransport.com
-www-dofus.com
-www-dofus-touch.com
-www-rsblox.com
-wwwdofuspourlesnoobs.com
-xn--www-ofus-touch-j1b.com
-cpanel01wh.bkk1.cloud.z.com
-gosuslugi.contact
-fmoviesto.cyou
-wiflix.cyou
-coronasushi.com.de
-adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev
-adobeli.pages.dev
-borsbrietjblrenlgbrlenhjt.pages.dev
-iengjwklengkhwebhfceref.pages.dev
-jkrngjkernghernhgtehjnhk.pages.dev
-mi-d1m.pages.dev
-micro-service-alertc0277sb-dev-err.pages.dev
-micro-service-alertc0277sb-erro.pages.dev
-micro-soft-failed-error.pages.dev
-micro-soft-virus-alert-warning.pages.dev
-microsoft-error-pages-check-errors.pages.dev
-microsoft-help-and-services.pages.dev
-microsoft-sales-hhgdygfg-asd.pages.dev
-microsoft-suppor-number.pages.dev
-microsoft-support-alrt-altr-fds.pages.dev
-microsoft-support-alrt-altr-fds-098.pages.dev
-microsoft-support-alrt-altr87785.pages.dev
-microsoft-terms-policyalr.pages.dev
-sd-74h.pages.dev
-ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev
-win-defender-sec-64csvxxvxxvxx0x665.pages.dev
-portalpaxum.cokiwe2297.workers.dev
-fmovies.direct
-gosuslugi.directory
-me2.do
-fmovies.email
 wasabiwallet.eu
+wasabiwallet.is
+water-opaque-expert.glitch.me
+wgosuslugi.ru
+wiadomoscionet.pythonanywhere.com
+wiflix.autos
+wiflix.blog
+wiflix.boats
+wiflix.cyou
 wiflix.eu
-gosuslugi.express
-123movies.faith
 wiflix.fit
-dofus-mmorpg.fr
-dofuspoulesnoobs.fr
-dofuspourlenoobs.fr
-dofuspourlesnoobs.fr
-dofustouch.fr
-www-papycha.fr
-zt-za.fr
-fmoviesto.gg
-disceord.gift
-discrods.gift
-disocrds.gift
 wiflix.guru
-bitflyer.sviluppo.host
-pobreflix.icu
 wiflix.icu
 wiflix.in
-gos-uslugi.info
-gosuslug.info
 wiflix.info
-rcubebit.bitbucket.io
-covid19.egreen.io
-covid19.tfone.ir
-wasabiwallet.is
-pescaturismocorona.it
-covid19.jp
-correos-update.life
-gosuslugi.life
-gosuslugi.live
 wiflix.makeup
-fmovies-to.me
-fmoviestv.me
-materialistic-chain-chicory.glitch.me
-water-opaque-expert.glitch.me
-covid-19.media
-covid19.media
-covid-19.miami
 wiflix.motorcycles
-ipv4.login.msa.akadns6.net
-vs.login.msa.akadns6.net
-calm-wave-01c7f9910.5.azurestaticapps.net
-bcryp.net
-bill-overdue.net
-corona-club.net
-coronavirustestfinders.net
-alili2020.ddns.net
-hovafmd.ddns.net
-gosusslugi.net
-ifmovies.net
-kadina-sidetesusma.net
-pcdecrapifier.net
-spiffcoin.net
-stearnconmunity.net
-fe-by01p-msa.trafficmanager.net
-lgin.msa.trafficmanager.net
-api.lgin.msa.trafficmanager.net
-xml.lgin.msa.trafficmanager.net
-gosuslugi.network
 wiflix.network
-coronavirusalert.news
-fmovies-to.online
-gosuslugii.online
-lokal-vr.online
-meldung-vols.online
-cdcgov.org
-2020logs.duckdns.org
-vahlallha.duckdns.org
-f-movie.org
-fmovies4.org
-tabitha-cambodia.org
-stopcoronavirus.us.org
 wiflix.org
-gosuslugi.page
-plesk.page
-thirsty-solomon.13-67-133-60.plesk.page
-www.hungry-poitras.13-93-165-215.plesk.page
-kind-villani.13-93-165-215.plesk.page
-serene-shirley.13-93-165-215.plesk.page
-www.serene-shirley.13-93-165-215.plesk.page
-silly-driscoll.13-93-165-215.plesk.page
-www.silly-driscoll.13-93-165-215.plesk.page
-vigilant-fermi.13-93-165-215.plesk.page
-34-125-197-109.plesk.page
+wiflix.re
+wiflix.tech
+wiflix.work
+wiflix.xyz
+wiflix.yachts
+wiiflix.art
+wiiflix.autos
+wiiflix.beauty
+win-defender-sec-64csvxxvxxvxx0x665.pages.dev
+wonderful-carver.52-229-21-156.plesk.page
+wsetransport.com
+wuhancoronavirustracker-693c1.firebaseio.com
+www-dofus-touch.com
+www-dofus.com
+www-gos-uslugi.ru
+www-papycha.fr
+www-rsblox.com
+www.0202.com.tw
 www.adoring-shamir.34-125-197-109.plesk.page
-amazing-poitras.34-125-197-109.plesk.page
 www.amazing-poitras.34-125-197-109.plesk.page
-awesome-wescoff.34-125-197-109.plesk.page
-bold-kalam.34-125-197-109.plesk.page
-brave-ramanujan.34-125-197-109.plesk.page
-ns2.brave-ramanujan.34-125-197-109.plesk.page
-charming-satoshi.34-125-197-109.plesk.page
 www.charming-satoshi.34-125-197-109.plesk.page
-cranky-kalam.34-125-197-109.plesk.page
-crazy-pare.34-125-197-109.plesk.page
-r.crazy-pare.34-125-197-109.plesk.page
+www.coronavirus.app
 www.crazy-pare.34-125-197-109.plesk.page
-eloquent-lumiere.34-125-197-109.plesk.page
-epic-feynman.34-125-197-109.plesk.page
-festive-jones.34-125-197-109.plesk.page
 www.festive-jones.34-125-197-109.plesk.page
-focused-swirles.34-125-197-109.plesk.page
-gallant-kalam.34-125-197-109.plesk.page
 www.gallant-moser.34-125-197-109.plesk.page
-great-williamson.34-125-197-109.plesk.page
 www.great-williamson.34-125-197-109.plesk.page
-happy-antonelli.34-125-197-109.plesk.page
-happy-sutherland.34-125-197-109.plesk.page
 www.happy-sutherland.34-125-197-109.plesk.page
-hungry-ptolemy.34-125-197-109.plesk.page
-lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page
-lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page
+www.hungry-poitras.13-93-165-215.plesk.page
 www.hungry-ptolemy.34-125-197-109.plesk.page
 www.intelligent-gould.34-125-197-109.plesk.page
+www.irsusa-tax.net.dogfoodkart.com
 www.jolly-jennings.34-125-197-109.plesk.page
-jolly-keldysh.34-125-197-109.plesk.page
 www.jolly-keldysh.34-125-197-109.plesk.page
 www.jolly-nightingale.34-125-197-109.plesk.page
-magical-kirch.34-125-197-109.plesk.page
 www.magical-kirch.34-125-197-109.plesk.page
-naughty-faraday.34-125-197-109.plesk.page
-nice-curran.34-125-197-109.plesk.page
+www.moscow-post.su
 www.nifty-mahavira.34-125-197-109.plesk.page
-optimistic-wright.34-125-197-109.plesk.page
 www.optimistic-wright.34-125-197-109.plesk.page
-peaceful-carson.34-125-197-109.plesk.page
-pedantic-feynman.34-125-197-109.plesk.page
-pedantic-satoshi.34-125-197-109.plesk.page
 www.pensive-wing.34-125-197-109.plesk.page
 www.serene-hertz.34-125-197-109.plesk.page
-sharp-kowalevski.34-125-197-109.plesk.page
+www.serene-shirley.13-93-165-215.plesk.page
 www.sharp-kowalevski.34-125-197-109.plesk.page
-stoic-elion.34-125-197-109.plesk.page
+www.silly-driscoll.13-93-165-215.plesk.page
 www.suspicious-wilson.34-125-197-109.plesk.page
-trusting-lumiere.34-125-197-109.plesk.page
 www.trusting-lumiere.34-125-197-109.plesk.page
-upbeat-elion.34-125-197-109.plesk.page
+www.youthful-engelbart.34-125-197-109.plesk.page
+wwwdofuspourlesnoobs.com
 xenodochial-liskov.34-125-197-109.plesk.page
+xml.lgin.msa.trafficmanager.net
+xn--www-ofus-touch-j1b.com
+youareanidiot.cc
 youthful-engelbart.34-125-197-109.plesk.page
-www.youthful-engelbart.34-125-197-109.plesk.page
-peaceful-joliot.45-136-204-40.plesk.page
-adoring-dhawan.45-138-72-99.plesk.page
-loving-chatelet.45-138-72-99.plesk.page
-recursing-perlman.45-156-26-247.plesk.page
-lucid-moser.45-156-27-107.plesk.page
-flamboyant-curran.52-148-188-66.plesk.page
-wonderful-carver.52-229-21-156.plesk.page
-competent-edison.95-181-157-141.plesk.page
-eager-pare.95-181-157-141.plesk.page
-goofy-lamport.95-181-157-21.plesk.page
-gracious-bardeen.95-181-157-21.plesk.page
-suspicious-meninsky.95-181-157-21.plesk.page
-vibrant-kirch.95-181-157-21.plesk.page
-loratech.pe
-vietnam.zing.photos
-corona-extra.pw
-plhn.pw
-wiflix.re
-accounts-mail.ru
-coronavirus-monitor.ru
-coronavirus-update.ru
-covideo.ru
-ecovida.ru
-gos-uslug.ru
-gosmslugi.ru
-gosrslugi.ru
-gossusluggi.ru
-gosulgi.ru
-gosulsugl.ru
-gosulugi-anticovid.ru
-gosulugl.ru
-gosulugy.ru
-gosulvgi.ru
-gosushlugi.ru
-gosusligu.ru
-gosusloogi.ru
-gosuslugee.ru
-gosuslugi-covid-qr.ru
-gosuslugi-kultura.ru
-gosuslugi-pay.ru
-gosuslugi-payment.ru
-gosuslugi2.ru
-gosuslugianticovid.ru
-gosuslugicovid-cert.ru
-gosuslugigov.ru
-gosuslugipay.ru
-gosuslugji.ru
-gosuslugt.ru
-gosusluslugi.ru
-gosusnugi.ru
-gosusrugi.ru
-grosuslugi.ru
-hotelsochipark.ru
-igosuslugi.ru
-sochi-park-otel.ru
-sochipark-hotel.ru
-verify-gosuslugi.ru
-vgosuslugi.ru
-wgosuslugi.ru
-www-gos-uslugi.ru
-gosuslugi.shop
-hellothere.shop
-sellskin.shop
-coronavirusapp.site
-fmovies2.site
-gos-uslygi.site
-fmovies.social
-gosuslugi.social
-bigbeans.solutions
-covid19x.solutions
-gosyslugi.su
-moscow-post.su
-www.moscow-post.su
-wiflix.tech
-coronavirus-update.today
-choicemonitor.top
-us-psues.top
-www.0202.com.tw
-gosuslugi.uk
-coronavirus.uno
-dating4free.us
-dating4sex.us
-perfectdating.us
-fmovies.vet
-corona77.vip
-souq-deals.website
-wiflix.work
-postcovid19.world
-gosuslugi.xyz
-soclaiemx.xyz
-wiflix.xyz
-wiflix.yachts
-coronavirus.zone
+zc11m.csb.app
+zt-za.fr
+zttmct-tlemp.web.app

From 060396f97a11b53c19452902fc7e518ea830cb45 Mon Sep 17 00:00:00 2001
From: Scott Petty <scott.petty@owasp.org>
Date: Tue, 25 Jun 2024 11:25:38 -0400
Subject: [PATCH 2/6] add malicious subdomains from glitch.me to add-domain
 list

---
 add-domain | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/add-domain b/add-domain
index eb250fb..8bb4f5a 100644
--- a/add-domain
+++ b/add-domain
@@ -1,3 +1,4 @@
+0ffice365-1drvve-oneauthmx1drive.glitch.me
 109.197.125.34.bc.googleusercontent.com
 123movies.faith
 2020logs.duckdns.org
@@ -11,6 +12,7 @@
 8vprot.com
 8vprow.com
 abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
+adobsmore.glitch.me
 absenpbz.com
 accounts-mail.ru
 actionagainstcovid19.com
@@ -139,6 +141,7 @@ dating4sex.us
 directmessageviolation.com
 disceord.gift
 discord.lossantossanto1.repl.co
+discord-fake-nitro-expiriment.glitch.me
 discordsgift.com
 discqrde.com
 discrods.gift
@@ -161,6 +164,7 @@ epic-feynman.34-125-197-109.plesk.page
 epulze-live.com
 f-movie.org
 facebooks-copyright.com
+faithful-cotton-blue.glitch.me
 fe-by01p-msa.trafficmanager.net
 feenixlanguage.com
 festive-jones.34-125-197-109.plesk.page
@@ -249,6 +253,7 @@ ifmovies.net
 igobjectionservices.com
 igosuslugi.ru
 ipv4.login.msa.akadns6.net
+item-trck-uk-royal-mail.dmaqpay.com.br
 jkrngjkernghernhgtehjnhk.pages.dev
 jkrngjkernghernhgtehjnhk.pythonanywhere.com
 jocoly.esvnpe.com
@@ -314,6 +319,7 @@ rcubebit.bitbucket.io
 reclaim-bittrex.com
 recursing-perlman.45-156-26-247.plesk.page
 restore637908-coinbase-us.web.app
+rightful-diamond-skiff.glitch.me
 rinanft.com
 rxcovid.com
 rxzxssx.fiduciaracking.com
@@ -362,6 +368,7 @@ vigilant-fermi.13-93-165-215.plesk.page
 violationhelp.com
 vs.login.msa.akadns6.net
 vww-roblox.com
+we3bwebma1l-r0unclcube-web3nail-nailweb-deliv3ry.glitch.me
 wasabiwallet.eu
 wasabiwallet.is
 water-opaque-expert.glitch.me

From 3da51bb2c76732734ce63c719d3652e062e6060c Mon Sep 17 00:00:00 2001
From: Scott Petty <scott.petty@owasp.org>
Date: Tue, 25 Jun 2024 12:34:18 -0400
Subject: [PATCH 3/6] add additional malicious glitch.me subdomain

---
 add-domain | 1 +
 1 file changed, 1 insertion(+)

diff --git a/add-domain b/add-domain
index 8bb4f5a..851ba20 100644
--- a/add-domain
+++ b/add-domain
@@ -276,6 +276,7 @@ magical-kirch.34-125-197-109.plesk.page
 materialistic-chain-chicory.glitch.me
 me2.do
 meldung-vols.online
+melodious-rift-castanet.glitch.me
 mi-d1m.pages.dev
 micro-service-alertc0277sb-dev-err.pages.dev
 micro-service-alertc0277sb-erro.pages.dev

From 499807a6da101548bc3d5db82daa7f5a63f22997 Mon Sep 17 00:00:00 2001
From: Scott Petty <rspetty@student.hagerstowncc.edu>
Date: Tue, 25 Jun 2024 13:18:43 -0400
Subject: [PATCH 4/6] attempt to fix mistaken sorting error

---
 add-domain | 632 ++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 316 deletions(-)

diff --git a/add-domain b/add-domain
index 851ba20..14a2a36 100644
--- a/add-domain
+++ b/add-domain
@@ -1,8 +1,27 @@
-0ffice365-1drvve-oneauthmx1drive.glitch.me
-109.197.125.34.bc.googleusercontent.com
-123movies.faith
-2020logs.duckdns.org
-34-125-197-109.plesk.page
+gosuslugi.agency
+coronavirus.app
+www.coronavirus.app
+zc11m.csb.app
+documents-download-almeida-3d331c.netlify.app
+kyc-bltflyer.web.app
+restore637908-coinbase-us.web.app
+zttmct-tlemp.web.app
+wiiflix.art
+gocycle.com.au
+urbanandruraldesign.com.au
+wiflix.autos
+wiiflix.autos
+wiiflix.beauty
+wiflix.blog
+wiflix.boats
+coronatec.com.br
+item-trck-uk-royal-mail.dmaqpay.com.br
+coronavirus.cc
+covid19tracker.cc
+youareanidiot.cc
+discord.lossantossanto1.repl.co
+socialearn.co
+t.co
 8vjejn.com
 8vpro.com
 8vproe.com
@@ -11,46 +30,19 @@
 8vpros.com
 8vprot.com
 8vprow.com
-abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
-adobsmore.glitch.me
 absenpbz.com
-accounts-mail.ru
 actionagainstcovid19.com
-adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev
-adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com
-adobeli.pages.dev
-adobepewjgronjgnwkengkjwengrj.pythonanywhere.com
-adoring-dhawan.45-138-72-99.plesk.page
-alili2020.ddns.net
+coronavirus.oss-accelerate.aliyuncs.com
 alphaumi.com
-amazing-poitras.34-125-197-109.plesk.page
-api.lgin.msa.trafficmanager.net
-awesome-wescoff.34-125-197-109.plesk.page
-bcryp.net
 beritapb.com
-bigbeans.solutions
-bill-overdue.net
 bitflyer-global.com
-bitflyer.sviluppo.host
-bold-kalam.34-125-197-109.plesk.page
-borsbrietjblrenlgbrlenhjt.pages.dev
-borsbrietjblrenlgbrlenhjt.pythonanywhere.com
-brave-ramanujan.34-125-197-109.plesk.page
 business-facebook-covid19.com
-calm-wave-01c7f9910.5.azurestaticapps.net
-cdcgov.org
-charming-satoshi.34-125-197-109.plesk.page
 cheapcorona.com
-choicemonitor.top
 ciel-goshugi.com
-competent-edison.95-181-157-141.plesk.page
 confirm-snet.com
-corona-club.net
 corona-explained.com
-corona-extra.pw
 corona-power.com
 corona-ratgeber.com
-corona77.vip
 coronaai.com
 coronaaway.com
 coronadetection.com
@@ -62,385 +54,393 @@ coronadocreatives.com
 coronadodirectory.com
 coronadoo.com
 coronaperformancemotors.com
-coronasushi.com.de
-coronatec.com.br
-coronavirus-2019.firebaseio.com
-coronavirus-266714.firebaseio.com
-coronavirus-3ffb2.firebaseio.com
-coronavirus-44a93.firebaseio.com
-coronavirus-53337.firebaseio.com
-coronavirus-54646.firebaseio.com
-coronavirus-a600f.firebaseio.com
-coronavirus-alert.firebaseio.com
-coronavirus-d526b.firebaseio.com
-coronavirus-d9a66.firebaseio.com
-coronavirus-daily-status.firebaseio.com
-coronavirus-eba7a.firebaseio.com
 coronavirus-map.com
 coronavirus-monitor.com
-coronavirus-monitor.ru
-coronavirus-protection-6d180.firebaseio.com
 coronavirus-realtime.com
-coronavirus-statistics-710b6.firebaseio.com
 coronavirus-testing.com
-coronavirus-tracker-api.herokuapp.com
-coronavirus-update.ru
-coronavirus-update.today
-coronavirus.app
-coronavirus.cc
-coronavirus.oss-accelerate.aliyuncs.com
-coronavirus.uno
-coronavirus.zone
-coronavirusalert.news
-coronavirusapp.site
 coronavirusbabys.com
 coronaviruscenters.com
 coronaviruscomms.com
 coronavirusforgyms.com
 coronavirushealthclinic.com
-coronavirusmap-eb48d.firebaseio.com
 coronavirusnet.com
 coronaviruspracticeupdate.com
 coronavirustechhandbook.com
-coronavirustestfinders.net
 coronavirut.com
 coronavit.com
-correos-update.life
-covid-19-6538f.firebaseio.com
-covid-19-app.firebaseio.com
-covid-19-e9057.firebaseio.com
-covid-19-healthlynked.firebaseio.com
-covid-19-live-news-statistics.firebaseio.com
-covid-19-lk-dev.firebaseio.com
-covid-19.media
-covid-19.miami
-covid19-a71d9.firebaseio.com
-covid19-dd7f7.firebaseio.com
-covid19-fb3d9.firebaseio.com
-covid19.egreen.io
-covid19.jp
-covid19.media
-covid19.tfone.ir
 covid19defense.com
 covid19japan.com
 covid19lascruces.com
-covid19map-269302.firebaseio.com
 covid19mayhem.com
 covid19proof.com
-covid19tracker.cc
 covid19wny.com
-covid19x.solutions
-covideo.ru
 covidquarantine.com
-cpanel01wh.bkk1.cloud.z.com
-cranky-kalam.34-125-197-109.plesk.page
-crazy-pare.34-125-197-109.plesk.page
 dashenopticians.com
-dating4free.us
-dating4sex.us
+sgp1.digitaloceanspaces.com
 directmessageviolation.com
-disceord.gift
-discord.lossantossanto1.repl.co
-discord-fake-nitro-expiriment.glitch.me
 discordsgift.com
 discqrde.com
-discrods.gift
-disocrds.gift
 dispatchweekly.com
-documents-download-almeida-3d331c.netlify.app
 dofus-mmorpg.com
-dofus-mmorpg.fr
 dofusevents.com
-dofuspoulesnoobs.fr
 dofuspourlenoobs.com
-dofuspourlenoobs.fr
-dofuspourlesnoobs.fr
-dofustouch.fr
-eager-pare.95-181-157-141.plesk.page
+www.irsusa-tax.net.dogfoodkart.com
 easytogets.com
-ecovida.ru
-eloquent-lumiere.34-125-197-109.plesk.page
-epic-feynman.34-125-197-109.plesk.page
 epulze-live.com
-f-movie.org
+jocoly.esvnpe.com
 facebooks-copyright.com
-faithful-cotton-blue.glitch.me
-fe-by01p-msa.trafficmanager.net
 feenixlanguage.com
-festive-jones.34-125-197-109.plesk.page
-flamboyant-curran.52-148-188-66.plesk.page
+rxzxssx.fiduciaracking.com
+coronavirus-2019.firebaseio.com
+coronavirus-266714.firebaseio.com
+coronavirus-3ffb2.firebaseio.com
+coronavirus-44a93.firebaseio.com
+coronavirus-53337.firebaseio.com
+coronavirus-54646.firebaseio.com
+coronavirus-a600f.firebaseio.com
+coronavirus-alert.firebaseio.com
+coronavirus-d526b.firebaseio.com
+coronavirus-d9a66.firebaseio.com
+coronavirus-daily-status.firebaseio.com
+coronavirus-eba7a.firebaseio.com
+coronavirus-protection-6d180.firebaseio.com
+coronavirus-statistics-710b6.firebaseio.com
+coronavirusmap-eb48d.firebaseio.com
+covid-19-6538f.firebaseio.com
+covid-19-app.firebaseio.com
+covid-19-e9057.firebaseio.com
+covid-19-healthlynked.firebaseio.com
+covid-19-live-news-statistics.firebaseio.com
+covid-19-lk-dev.firebaseio.com
+covid19-a71d9.firebaseio.com
+covid19-dd7f7.firebaseio.com
+covid19-fb3d9.firebaseio.com
+covid19map-269302.firebaseio.com
 flutter-covid19.firebaseio.com
-fmovies-to.me
-fmovies-to.online
-fmovies.direct
-fmovies.email
-fmovies.social
-fmovies.us.com
-fmovies.vet
-fmovies2.site
-fmovies4.org
-fmoviesto.cyou
-fmoviesto.gg
-fmoviestv.me
-focused-swirles.34-125-197-109.plesk.page
-freshloader.eu.pythonanywhere.com
-gallant-kalam.34-125-197-109.plesk.page
+online-coronavirus-268608.firebaseio.com
+wuhancoronavirustracker-693c1.firebaseio.com
 getcoronavirusassistance.com
-gocycle.com.au
-goofy-lamport.95-181-157-21.plesk.page
-gos-uslug.ru
-gos-uslugi.info
-gos-uslygi.site
-gosmslugi.ru
+109.197.125.34.bc.googleusercontent.com
 gosoogi.com
-gosrslugi.ru
-gossusluggi.ru
-gosulgi.ru
-gosulsugl.ru
-gosulugi-anticovid.ru
-gosulugl.ru
-gosulugy.ru
-gosulvgi.ru
-gosushlugi.ru
-gosusligu.ru
-gosusloogi.ru
-gosuslug.info
-gosuslugee.ru
-gosuslugi-covid-qr.ru
-gosuslugi-kultura.ru
-gosuslugi-pay.ru
-gosuslugi-payment.ru
-gosuslugi.agency
-gosuslugi.contact
-gosuslugi.directory
-gosuslugi.express
-gosuslugi.life
-gosuslugi.live
-gosuslugi.network
-gosuslugi.page
-gosuslugi.shop
-gosuslugi.social
-gosuslugi.uk
-gosuslugi.xyz
-gosuslugi2.ru
-gosuslugianticovid.ru
-gosuslugicovid-cert.ru
-gosuslugigov.ru
-gosuslugii.online
-gosuslugipay.ru
-gosuslugji.ru
-gosuslugt.ru
-gosusluslugi.ru
-gosusnugi.ru
-gosusrugi.ru
-gosusslugi.net
-gosyslugi.su
-gracious-bardeen.95-181-157-21.plesk.page
-great-williamson.34-125-197-109.plesk.page
-grosuslugi.ru
-happy-antonelli.34-125-197-109.plesk.page
-happy-sutherland.34-125-197-109.plesk.page
-hellothere.shop
 help-media.com
-hotelsochipark.ru
-hovafmd.ddns.net
-hu.pokist.otzo.com
-hungry-ptolemy.34-125-197-109.plesk.page
+coronavirus-tracker-api.herokuapp.com
 iamcorona.com
-iengjwklengkhwebhfceref.pages.dev
-iengjwklengkhwebhfceref.pythonanywhere.com
-ifmovies.net
 igobjectionservices.com
-igosuslugi.ru
-ipv4.login.msa.akadns6.net
-item-trck-uk-royal-mail.dmaqpay.com.br
-jkrngjkernghernhgtehjnhk.pages.dev
-jkrngjkernghernhgtehjnhk.pythonanywhere.com
-jocoly.esvnpe.com
-jolly-keldysh.34-125-197-109.plesk.page
-kadina-sidetesusma.net
-kind-villani.13-93-165-215.plesk.page
 krakenlogins.com
 kuispb.com
-kyc-bltflyer.web.app
-lgin.msa.trafficmanager.net
-lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page
-lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page
 localcoronavirus.com
-lokal-vr.online
-loratech.pe
 lovemachina.com
-loving-chatelet.45-138-72-99.plesk.page
-lucid-moser.45-156-27-107.plesk.page
-magical-kirch.34-125-197-109.plesk.page
-materialistic-chain-chicory.glitch.me
-me2.do
-meldung-vols.online
-melodious-rift-castanet.glitch.me
-mi-d1m.pages.dev
-micro-service-alertc0277sb-dev-err.pages.dev
-micro-service-alertc0277sb-erro.pages.dev
-micro-soft-failed-error.pages.dev
-micro-soft-virus-alert-warning.pages.dev
-microsoft-error-pages-check-errors.pages.dev
-microsoft-help-and-services.pages.dev
-microsoft-sales-hhgdygfg-asd.pages.dev
-microsoft-suppor-number.pages.dev
-microsoft-support-alrt-altr-fds-098.pages.dev
-microsoft-support-alrt-altr-fds.pages.dev
-microsoft-support-alrt-altr87785.pages.dev
-microsoft-terms-policyalr.pages.dev
-moscow-post.su
-naughty-faraday.34-125-197-109.plesk.page
 newvity.com
-nice-curran.34-125-197-109.plesk.page
-ns2.brave-ramanujan.34-125-197-109.plesk.page
-online-coronavirus-268608.firebaseio.com
 onlinesupportportal.com
-optimistic-wright.34-125-197-109.plesk.page
-pcdecrapifier.net
-peaceful-carson.34-125-197-109.plesk.page
-peaceful-joliot.45-136-204-40.plesk.page
-pedantic-feynman.34-125-197-109.plesk.page
-pedantic-satoshi.34-125-197-109.plesk.page
+hu.pokist.otzo.com
 penlabuseoribute.com
-perfectdating.us
-pescaturismocorona.it
-pesjidgnojensjgerkhvjefdvs.pythonanywhere.com
-plesk.page
-plhn.pw
-pobreflix.icu
-portalpaxum.cokiwe2297.workers.dev
-postcovid19.world
 preview-domain.com
 psicmaggiecorona.com
+abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
+adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com
+adobepewjgronjgnwkengkjwengrj.pythonanywhere.com
+borsbrietjblrenlgbrlenhjt.pythonanywhere.com
+freshloader.eu.pythonanywhere.com
 quicknotice.eu.pythonanywhere.com
-r.crazy-pare.34-125-197-109.plesk.page
-rcubebit.bitbucket.io
+iengjwklengkhwebhfceref.pythonanywhere.com
+jkrngjkernghernhgtehjnhk.pythonanywhere.com
+pesjidgnojensjgerkhvjefdvs.pythonanywhere.com
+thenoticememoir.pythonanywhere.com
+wiadomoscionet.pythonanywhere.com
 reclaim-bittrex.com
-recursing-perlman.45-156-26-247.plesk.page
-restore637908-coinbase-us.web.app
-rightful-diamond-skiff.glitch.me
 rinanft.com
 rxcovid.com
-rxzxssx.fiduciaracking.com
-sd-74h.pages.dev
-sellskin.shop
-serene-shirley.13-93-165-215.plesk.page
-sgp1.digitaloceanspaces.com
-sharp-kowalevski.34-125-197-109.plesk.page
-silly-driscoll.13-93-165-215.plesk.page
-sochi-park-otel.ru
-sochipark-hotel.ru
-socialearn.co
-soclaiemx.xyz
-souq-deals.website
-spiffcoin.net
 steamcommunitc.com
 steamcomnnulty.com
-stearnconmunity.net
-stoic-elion.34-125-197-109.plesk.page
-stopcoronavirus.us.org
 studentschoicedwi.com
 supportscontact.com
 surveysparrow.com
-suspicious-meninsky.95-181-157-21.plesk.page
-t.co
-tabitha-cambodia.org
 the-fmovies.com
-thenoticememoir.pythonanywhere.com
-thirsty-solomon.13-67-133-60.plesk.page
 thoughtworkis.com
 tokenukraine.com
 tokopb.com
-trusting-lumiere.34-125-197-109.plesk.page
-ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev
-upbeat-elion.34-125-197-109.plesk.page
-urbanandruraldesign.com.au
-us-psues.top
+fmovies.us.com
 vaccine-coronavirus.com
-vahlallha.duckdns.org
 valoxino.com
-verify-gosuslugi.ru
-vgosuslugi.ru
-vibrant-kirch.95-181-157-21.plesk.page
-vietnam.zing.photos
-vigilant-fermi.13-93-165-215.plesk.page
 violationhelp.com
-vs.login.msa.akadns6.net
 vww-roblox.com
-we3bwebma1l-r0unclcube-web3nail-nailweb-deliv3ry.glitch.me
-wasabiwallet.eu
-wasabiwallet.is
-water-opaque-expert.glitch.me
-wgosuslugi.ru
-wiadomoscionet.pythonanywhere.com
-wiflix.autos
-wiflix.blog
-wiflix.boats
+wsetransport.com
+www-dofus.com
+www-dofus-touch.com
+www-rsblox.com
+wwwdofuspourlesnoobs.com
+xn--www-ofus-touch-j1b.com
+cpanel01wh.bkk1.cloud.z.com
+gosuslugi.contact
+fmoviesto.cyou
 wiflix.cyou
+coronasushi.com.de
+adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev
+adobeli.pages.dev
+borsbrietjblrenlgbrlenhjt.pages.dev
+iengjwklengkhwebhfceref.pages.dev
+jkrngjkernghernhgtehjnhk.pages.dev
+mi-d1m.pages.dev
+micro-service-alertc0277sb-dev-err.pages.dev
+micro-service-alertc0277sb-erro.pages.dev
+micro-soft-failed-error.pages.dev
+micro-soft-virus-alert-warning.pages.dev
+microsoft-error-pages-check-errors.pages.dev
+microsoft-help-and-services.pages.dev
+microsoft-sales-hhgdygfg-asd.pages.dev
+microsoft-suppor-number.pages.dev
+microsoft-support-alrt-altr-fds.pages.dev
+microsoft-support-alrt-altr-fds-098.pages.dev
+microsoft-support-alrt-altr87785.pages.dev
+microsoft-terms-policyalr.pages.dev
+sd-74h.pages.dev
+ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev
+win-defender-sec-64csvxxvxxvxx0x665.pages.dev
+portalpaxum.cokiwe2297.workers.dev
+fmovies.direct
+gosuslugi.directory
+me2.do
+fmovies.email
+wasabiwallet.eu
 wiflix.eu
+gosuslugi.express
+123movies.faith
 wiflix.fit
+dofus-mmorpg.fr
+dofuspoulesnoobs.fr
+dofuspourlenoobs.fr
+dofuspourlesnoobs.fr
+dofustouch.fr
+www-papycha.fr
+zt-za.fr
+fmoviesto.gg
+disceord.gift
+discrods.gift
+disocrds.gift
 wiflix.guru
+bitflyer.sviluppo.host
+pobreflix.icu
 wiflix.icu
 wiflix.in
+gos-uslugi.info
+gosuslug.info
 wiflix.info
+rcubebit.bitbucket.io
+covid19.egreen.io
+covid19.tfone.ir
+wasabiwallet.is
+pescaturismocorona.it
+covid19.jp
+correos-update.life
+gosuslugi.life
+gosuslugi.live
 wiflix.makeup
+fmovies-to.me
+fmoviestv.me
+0ffice365-1drvve-oneauthmx1drive.glitch.me
+adobsmore.glitch.me
+discord-fake-nitro-expiriment.glitch.me
+faithful-cotton-blue.glitch.me
+materialistic-chain-chicory.glitch.me
+melodious-rift-castanet.glitch.me
+rightful-diamond-skiff.glitch.me
+water-opaque-expert.glitch.me
+we3bwebma1l-r0unclcube-web3nail-nailweb-deliv3ry.glitch.me
+covid-19.media
+covid19.media
+covid-19.miami
 wiflix.motorcycles
+ipv4.login.msa.akadns6.net
+vs.login.msa.akadns6.net
+calm-wave-01c7f9910.5.azurestaticapps.net
+bcryp.net
+bill-overdue.net
+corona-club.net
+coronavirustestfinders.net
+alili2020.ddns.net
+hovafmd.ddns.net
+gosusslugi.net
+ifmovies.net
+kadina-sidetesusma.net
+pcdecrapifier.net
+spiffcoin.net
+stearnconmunity.net
+fe-by01p-msa.trafficmanager.net
+lgin.msa.trafficmanager.net
+api.lgin.msa.trafficmanager.net
+xml.lgin.msa.trafficmanager.net
+gosuslugi.network
 wiflix.network
+coronavirusalert.news
+fmovies-to.online
+gosuslugii.online
+lokal-vr.online
+meldung-vols.online
+cdcgov.org
+2020logs.duckdns.org
+vahlallha.duckdns.org
+f-movie.org
+fmovies4.org
+tabitha-cambodia.org
+stopcoronavirus.us.org
 wiflix.org
-wiflix.re
-wiflix.tech
-wiflix.work
-wiflix.xyz
-wiflix.yachts
-wiiflix.art
-wiiflix.autos
-wiiflix.beauty
-win-defender-sec-64csvxxvxxvxx0x665.pages.dev
-wonderful-carver.52-229-21-156.plesk.page
-wsetransport.com
-wuhancoronavirustracker-693c1.firebaseio.com
-www-dofus-touch.com
-www-dofus.com
-www-gos-uslugi.ru
-www-papycha.fr
-www-rsblox.com
-www.0202.com.tw
+gosuslugi.page
+plesk.page
+thirsty-solomon.13-67-133-60.plesk.page
+www.hungry-poitras.13-93-165-215.plesk.page
+kind-villani.13-93-165-215.plesk.page
+serene-shirley.13-93-165-215.plesk.page
+www.serene-shirley.13-93-165-215.plesk.page
+silly-driscoll.13-93-165-215.plesk.page
+www.silly-driscoll.13-93-165-215.plesk.page
+vigilant-fermi.13-93-165-215.plesk.page
+34-125-197-109.plesk.page
 www.adoring-shamir.34-125-197-109.plesk.page
+amazing-poitras.34-125-197-109.plesk.page
 www.amazing-poitras.34-125-197-109.plesk.page
+awesome-wescoff.34-125-197-109.plesk.page
+bold-kalam.34-125-197-109.plesk.page
+brave-ramanujan.34-125-197-109.plesk.page
+ns2.brave-ramanujan.34-125-197-109.plesk.page
+charming-satoshi.34-125-197-109.plesk.page
 www.charming-satoshi.34-125-197-109.plesk.page
-www.coronavirus.app
+cranky-kalam.34-125-197-109.plesk.page
+crazy-pare.34-125-197-109.plesk.page
+r.crazy-pare.34-125-197-109.plesk.page
 www.crazy-pare.34-125-197-109.plesk.page
+eloquent-lumiere.34-125-197-109.plesk.page
+epic-feynman.34-125-197-109.plesk.page
+festive-jones.34-125-197-109.plesk.page
 www.festive-jones.34-125-197-109.plesk.page
+focused-swirles.34-125-197-109.plesk.page
+gallant-kalam.34-125-197-109.plesk.page
 www.gallant-moser.34-125-197-109.plesk.page
+great-williamson.34-125-197-109.plesk.page
 www.great-williamson.34-125-197-109.plesk.page
+happy-antonelli.34-125-197-109.plesk.page
+happy-sutherland.34-125-197-109.plesk.page
 www.happy-sutherland.34-125-197-109.plesk.page
-www.hungry-poitras.13-93-165-215.plesk.page
+hungry-ptolemy.34-125-197-109.plesk.page
+lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page
+lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page
 www.hungry-ptolemy.34-125-197-109.plesk.page
 www.intelligent-gould.34-125-197-109.plesk.page
-www.irsusa-tax.net.dogfoodkart.com
 www.jolly-jennings.34-125-197-109.plesk.page
+jolly-keldysh.34-125-197-109.plesk.page
 www.jolly-keldysh.34-125-197-109.plesk.page
 www.jolly-nightingale.34-125-197-109.plesk.page
+magical-kirch.34-125-197-109.plesk.page
 www.magical-kirch.34-125-197-109.plesk.page
-www.moscow-post.su
+naughty-faraday.34-125-197-109.plesk.page
+nice-curran.34-125-197-109.plesk.page
 www.nifty-mahavira.34-125-197-109.plesk.page
+optimistic-wright.34-125-197-109.plesk.page
 www.optimistic-wright.34-125-197-109.plesk.page
+peaceful-carson.34-125-197-109.plesk.page
+pedantic-feynman.34-125-197-109.plesk.page
+pedantic-satoshi.34-125-197-109.plesk.page
 www.pensive-wing.34-125-197-109.plesk.page
 www.serene-hertz.34-125-197-109.plesk.page
-www.serene-shirley.13-93-165-215.plesk.page
+sharp-kowalevski.34-125-197-109.plesk.page
 www.sharp-kowalevski.34-125-197-109.plesk.page
-www.silly-driscoll.13-93-165-215.plesk.page
+stoic-elion.34-125-197-109.plesk.page
 www.suspicious-wilson.34-125-197-109.plesk.page
+trusting-lumiere.34-125-197-109.plesk.page
 www.trusting-lumiere.34-125-197-109.plesk.page
-www.youthful-engelbart.34-125-197-109.plesk.page
-wwwdofuspourlesnoobs.com
+upbeat-elion.34-125-197-109.plesk.page
 xenodochial-liskov.34-125-197-109.plesk.page
-xml.lgin.msa.trafficmanager.net
-xn--www-ofus-touch-j1b.com
-youareanidiot.cc
 youthful-engelbart.34-125-197-109.plesk.page
-zc11m.csb.app
-zt-za.fr
-zttmct-tlemp.web.app
+www.youthful-engelbart.34-125-197-109.plesk.page
+peaceful-joliot.45-136-204-40.plesk.page
+adoring-dhawan.45-138-72-99.plesk.page
+loving-chatelet.45-138-72-99.plesk.page
+recursing-perlman.45-156-26-247.plesk.page
+lucid-moser.45-156-27-107.plesk.page
+flamboyant-curran.52-148-188-66.plesk.page
+wonderful-carver.52-229-21-156.plesk.page
+competent-edison.95-181-157-141.plesk.page
+eager-pare.95-181-157-141.plesk.page
+goofy-lamport.95-181-157-21.plesk.page
+gracious-bardeen.95-181-157-21.plesk.page
+suspicious-meninsky.95-181-157-21.plesk.page
+vibrant-kirch.95-181-157-21.plesk.page
+loratech.pe
+vietnam.zing.photos
+corona-extra.pw
+plhn.pw
+wiflix.re
+accounts-mail.ru
+coronavirus-monitor.ru
+coronavirus-update.ru
+covideo.ru
+ecovida.ru
+gos-uslug.ru
+gosmslugi.ru
+gosrslugi.ru
+gossusluggi.ru
+gosulgi.ru
+gosulsugl.ru
+gosulugi-anticovid.ru
+gosulugl.ru
+gosulugy.ru
+gosulvgi.ru
+gosushlugi.ru
+gosusligu.ru
+gosusloogi.ru
+gosuslugee.ru
+gosuslugi-covid-qr.ru
+gosuslugi-kultura.ru
+gosuslugi-pay.ru
+gosuslugi-payment.ru
+gosuslugi2.ru
+gosuslugianticovid.ru
+gosuslugicovid-cert.ru
+gosuslugigov.ru
+gosuslugipay.ru
+gosuslugji.ru
+gosuslugt.ru
+gosusluslugi.ru
+gosusnugi.ru
+gosusrugi.ru
+grosuslugi.ru
+hotelsochipark.ru
+igosuslugi.ru
+sochi-park-otel.ru
+sochipark-hotel.ru
+verify-gosuslugi.ru
+vgosuslugi.ru
+wgosuslugi.ru
+www-gos-uslugi.ru
+gosuslugi.shop
+hellothere.shop
+sellskin.shop
+coronavirusapp.site
+fmovies2.site
+gos-uslygi.site
+fmovies.social
+gosuslugi.social
+bigbeans.solutions
+covid19x.solutions
+gosyslugi.su
+moscow-post.su
+www.moscow-post.su
+wiflix.tech
+coronavirus-update.today
+choicemonitor.top
+us-psues.top
+www.0202.com.tw
+gosuslugi.uk
+coronavirus.uno
+dating4free.us
+dating4sex.us
+perfectdating.us
+fmovies.vet
+corona77.vip
+souq-deals.website
+wiflix.work
+postcovid19.world
+gosuslugi.xyz
+soclaiemx.xyz
+wiflix.xyz
+wiflix.yachts
+coronavirus.zone

From 8269e735a511d797c93b5fefc6e67b7e5f44ea08 Mon Sep 17 00:00:00 2001
From: Scott Petty <rspetty@student.hagerstowncc.edu>
Date: Tue, 25 Jun 2024 18:29:19 -0400
Subject: [PATCH 5/6] add additional malicious subdomains from pages.dev

---
 add-domain | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/add-domain b/add-domain
index 14a2a36..2ad81ce 100644
--- a/add-domain
+++ b/add-domain
@@ -177,9 +177,30 @@ wiflix.cyou
 coronasushi.com.de
 adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev
 adobeli.pages.dev
+ariamanonux03p.pages.dev
+att-mail.pages.dev
+begincellcdn.pages.dev
+blurverse.pages.dev
 borsbrietjblrenlgbrlenhjt.pages.dev
+cfgxgfxf.pages.dev
+chainsrectify.pages.dev
+claim-pork.pages.dev
+clfpages2.pages.dev
+dappsyncrectify.pages.dev
+debanksdefi.pages.dev
+decentralizedappauth.pages.dev
+decentrausdchartfil.pages.dev
+diamond-hands-halo.pages.dev
+doctored.pages.dev
+dogecoin20-st.web.app
+fq703w52zt.pages.dev
 iengjwklengkhwebhfceref.pages.dev
+ixs.pages.dev
+jgeb6c8queuspv.pages.dev
 jkrngjkernghernhgtehjnhk.pages.dev
+livedappsrestore.pages.dev
+looksrare-d1x.pages.dev
+lourdesthompsonnf1r6.pages.dev
 mi-d1m.pages.dev
 micro-service-alertc0277sb-dev-err.pages.dev
 micro-service-alertc0277sb-erro.pages.dev
@@ -193,9 +214,34 @@ microsoft-support-alrt-altr-fds.pages.dev
 microsoft-support-alrt-altr-fds-098.pages.dev
 microsoft-support-alrt-altr87785.pages.dev
 microsoft-terms-policyalr.pages.dev
+mykeruais-assets-cubu45.pages.dev
+newwork-6oy.pages.dev
+nodesappfix-io.pages.dev
+oscarcampbellb1eoi.pages.dev
+pandoraprejeangw6.pages.dev
+paperhander.pages.dev
+paperhands-portfoliotracker-wallet.pages.dev
+pooh-moneydapps.pages.dev
+portal-platform.pages.dev
+proxysync.pages.dev
+pub-fa147a3cddd04e9588b0d0a71d6d87fb.r2.dev
+rpcrecoveryhub.pages.dev
 sd-74h.pages.dev
+sontungmtpmaidinhnhe.pages.dev
+spacexlaunch.pages.dev
+swiftblockresolve.pages.dev
+sync-7xr.pages.dev
+syncblockrectification.pages.dev
+teach-work-onlines2222177.pages.dev
+tesla-2ju.pages.dev
+tl-4-vente-privee-b1j.pages.dev
 ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev
+uni-swap-protocols.pages.dev
+verifyandfixdapp.pages.dev
+webaqunarmail.pages.dev
+webmial.pages.dev
 win-defender-sec-64csvxxvxxvxx0x665.pages.dev
+woow-seguro-de-viajes.pages.dev
 portalpaxum.cokiwe2297.workers.dev
 fmovies.direct
 gosuslugi.directory

From 58ee6d824fdb7e11330847f169344d0d31fb1aff Mon Sep 17 00:00:00 2001
From: Scott Petty <rspetty@student.hagerstowncc.edu>
Date: Tue, 25 Jun 2024 21:02:54 -0400
Subject: [PATCH 6/6] remove subdomain lacking sufficent supporting evidence

---
 add-domain | 1 -
 1 file changed, 1 deletion(-)

diff --git a/add-domain b/add-domain
index 2ad81ce..15a5c18 100644
--- a/add-domain
+++ b/add-domain
@@ -232,7 +232,6 @@ spacexlaunch.pages.dev
 swiftblockresolve.pages.dev
 sync-7xr.pages.dev
 syncblockrectification.pages.dev
-teach-work-onlines2222177.pages.dev
 tesla-2ju.pages.dev
 tl-4-vente-privee-b1j.pages.dev
 ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev