From af8d3c7a1f853f3096a9dc1bc02f76770bd77027 Mon Sep 17 00:00:00 2001 From: david-greekas Date: Mon, 15 Jul 2024 15:18:53 -0700 Subject: [PATCH 001/142] Update add-domain mecofficial.com mecofficial.com is a clone of mec.ca and is attempting to phish users via facebook. --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 5d12301..1206315 100644 --- a/add-domain +++ b/add-domain @@ -747,3 +747,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +mecofficial.com From 571915b97433b688408c39276bcd6f7e0816989a Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 17 Jul 2024 05:07:29 +0000 Subject: [PATCH 002/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 1206315..d5beac6 100644 --- a/add-domain +++ b/add-domain @@ -134,6 +134,7 @@ krakenlogins.com kuispb.com localcoronavirus.com lovemachina.com +mecofficial.com newvity.com onlinesupportportal.com hu.pokist.otzo.com @@ -747,4 +748,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -mecofficial.com From 8751065b30642b5e24244bde6a5876ec0fe8d0a1 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Wed, 17 Jul 2024 14:54:03 +0200 Subject: [PATCH 003/142] Update add-link WeTransfer Spam / Virus / Phishing Attempt --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index bab2fed..87dc0c5 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +https://pub-5777c77f32f447619bfd23c7b9521d05.r2.dev/original%20wetransfer.html# https://nysaiwine.co.uk/fff https://barkerpart.com/0/0/0/ff0f22d43573c8376ddf7e3b3adc15c2/27/388-77068/13789-119355-9514 https://storage.googleapis.com/fonews/tracking.html#4_77068_388_13789_119355_9514_27_9_63_08182 From 3ee8ce1183e17d774ba2defe06864a085b39b352 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 20 Jul 2024 12:07:25 -0400 Subject: [PATCH 004/142] add havenhills.za.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index fa64cae..8ab9d66 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -48,6 +48,7 @@ workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com +havenhills.za.com intrinsicisle.za.com race2zerogolf.za.com ucnlkw.cyou From 6595493934fbd4e4a7d863027975545298b87bfa Mon Sep 17 00:00:00 2001 From: Gabe <66077254+MrBrain295@users.noreply.github.com> Date: Wed, 24 Jul 2024 11:01:55 -0500 Subject: [PATCH 005/142] Add a USPS scam --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index d5beac6..dbd1470 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,4 @@ +usop.sobwykro.top gosuslugi.agency coronavirus.app www.coronavirus.app From ad0a67f2400780908e848ae970635ea395e48a10 Mon Sep 17 00:00:00 2001 From: Gabe <66077254+MrBrain295@users.noreply.github.com> Date: Wed, 24 Jul 2024 11:04:26 -0500 Subject: [PATCH 006/142] Add a MrBeast scam --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index d5beac6..1c17ebf 100644 --- a/add-domain +++ b/add-domain @@ -748,3 +748,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +mrbfan.com From 1e80e65b7d9f0acd3cd05f428175b8b8d86d51fb Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 24 Jul 2024 21:14:31 -0400 Subject: [PATCH 007/142] add lebomashilo.co.za to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8ab9d66..1ecf4c3 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -134,3 +134,4 @@ wasabiwallet.uk wisbechguide.uk com-1.xyz yildirim-firsati.xyz +lebomashilo.co.za From 71a7867d32de0d9224b29d6c8b6a881a35642f9a Mon Sep 17 00:00:00 2001 From: spirillen Date: Thu, 25 Jul 2024 01:19:39 +0000 Subject: [PATCH 008/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 1c17ebf..c1bd3b0 100644 --- a/add-domain +++ b/add-domain @@ -135,6 +135,7 @@ kuispb.com localcoronavirus.com lovemachina.com mecofficial.com +mrbfan.com newvity.com onlinesupportportal.com hu.pokist.otzo.com @@ -748,4 +749,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -mrbfan.com From e961810bd5040e5b4113d605ec3a83eabd9d6518 Mon Sep 17 00:00:00 2001 From: Gabe <66077254+MrBrain295@users.noreply.github.com> Date: Thu, 25 Jul 2024 10:57:54 -0500 Subject: [PATCH 009/142] add another MrBeast scam --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index c1bd3b0..5c8a229 100644 --- a/add-domain +++ b/add-domain @@ -749,3 +749,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +mr-beastgifts.com From 08300b69f5ff3101bdf9a2e4c237e6151b51d24e Mon Sep 17 00:00:00 2001 From: spirillen Date: Thu, 25 Jul 2024 22:01:39 +0000 Subject: [PATCH 010/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 3f81934..1201198 100644 --- a/add-domain +++ b/add-domain @@ -1,4 +1,3 @@ -usop.sobwykro.top gosuslugi.agency coronavirus.app www.coronavirus.app @@ -733,6 +732,7 @@ www.moscow-post.su wiflix.tech coronavirus-update.today choicemonitor.top +usop.sobwykro.top us-psues.top www.0202.com.tw gosuslugi.uk From 6d420eac49dd3898d130fd2a68daa6f56f794e8a Mon Sep 17 00:00:00 2001 From: spirillen Date: Thu, 25 Jul 2024 22:27:09 +0000 Subject: [PATCH 011/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 2bb7bc9..c942b68 100644 --- a/add-domain +++ b/add-domain @@ -135,6 +135,7 @@ kuispb.com localcoronavirus.com lovemachina.com mecofficial.com +mr-beastgifts.com mrbfan.com newvity.com onlinesupportportal.com @@ -750,4 +751,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -mr-beastgifts.com From 4eceb2b35b2c11d95d57f948da24a53ac190e57a Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Mon, 29 Jul 2024 15:07:48 +0200 Subject: [PATCH 012/142] Update add-link First National Bank South Africa (FNB) Phishing --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index 87dc0c5..12e0f4d 100644 --- a/add-link +++ b/add-link @@ -1,3 +1,4 @@ +http://9428beb8.centroesserevalverde.it/za?c95b469cc2004bdf9a742bef611e5a18&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQABhAMgYIAhAAGEAyBggDEAAYQ301e38b3 https://pub-5777c77f32f447619bfd23c7b9521d05.r2.dev/original%20wetransfer.html# https://nysaiwine.co.uk/fff https://barkerpart.com/0/0/0/ff0f22d43573c8376ddf7e3b3adc15c2/27/388-77068/13789-119355-9514 From 4435c9349bbcee0e3b6cc1aecd2b62a3ce4d6219 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 29 Jul 2024 13:01:14 -0400 Subject: [PATCH 013/142] add download-binance.online to wildcard domain list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8ab9d66..5ad4667 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -61,6 +61,7 @@ rnws.link ajstelecom.com.mx crypto-wave.net bitflyer-ja.free.nf +download-binance.online robyoc.online bersowir.org mhktricks.org From 13e371467a42ff674d52f65513794595f86d3169 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 29 Jul 2024 13:41:27 -0400 Subject: [PATCH 014/142] add 404024.xyz to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 5ad4667..b98ee3e 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -133,5 +133,6 @@ wellplayed.ug zxvbcrt.ug wasabiwallet.uk wisbechguide.uk +404024.xyz com-1.xyz yildirim-firsati.xyz From 5dc494e3e23646254b6b20be064f127f5a9d6b98 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 29 Jul 2024 14:23:25 -0400 Subject: [PATCH 015/142] add 45.9.74.36 to IP block lists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 4 insertions(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index c4738d3..beb653c 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -5,6 +5,7 @@ 32.39.210.182.5 32.181.237.156.43 32.32.74.9.45 +32.36.74.9.45 32.202.190.137.45 32.173.121.148.45 32.138.121.148.45 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 6359009..26460f2 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -7,6 +7,7 @@ 5.182.210.39/32 43.156.237.181/32 45.9.74.32/32 +45.9.74.36/32 45.137.190.202/32 45.148.121.173/32 45.148.121.138/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 121ef3c..796d647 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -5,6 +5,7 @@ 39.210.182.5 181.237.156.43 32.74.9.45 +36.74.9.45 202.190.137.45 173.121.148.45 138.121.148.45 diff --git a/IP-addr.list b/IP-addr.list index 2158b28..027c030 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -5,6 +5,7 @@ 185.81.115.28 43.156.237.181 45.9.74.32 +45.9.74.36 45.137.190.202 45.148.121.173 45.148.121.138 From ce01efde085bfb69fa26e377451abf8c0dd9de95 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 29 Jul 2024 14:30:19 -0400 Subject: [PATCH 016/142] add domains related to 45.9.74.36 to wildcard list --- add-wildcard-domain | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 5ad4667..0fd6520 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -17,8 +17,10 @@ applesforfred.com azezieldraconous.com bkengineersindia.com cantabriaeventos.com +cloudslimit.com communitybrowserpowered.com cutepoochstore.com +dailywebstats.com ebeyez.com englishplusmore.com fadpakke.com @@ -95,7 +97,15 @@ gloomcutter.shop grike.shop gunigunde.shop haelma.shop +hertrud.shop +hexcrippler.shop hild.shop +hiltrunde.shop +iankian.shop +ironturner.shop +kloisa.shop +liferacer.shop +leopolfa.shop marda.shop the-cartel.shop tothedigital.shop @@ -109,9 +119,11 @@ sxlph.site crypto-wave.store yildirim-firsati.store anjpvv.top +commodityprocess.top crypto-wave.top darnroughonline.top fjwamneg.top +sitefind.top technowide.com.tr hubvera.ac.ug pastratas.ac.ug From 56247188ff2b6c28b5c3d7c2d3ad442435d940e7 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 29 Jul 2024 15:06:14 -0400 Subject: [PATCH 017/142] sort wildcard list --- add-wildcard-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 0fd6520..f4b3830 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -104,8 +104,8 @@ hiltrunde.shop iankian.shop ironturner.shop kloisa.shop -liferacer.shop leopolfa.shop +liferacer.shop marda.shop the-cartel.shop tothedigital.shop From be7e2ea72d31f0f5aca40da559452b80783efb4c Mon Sep 17 00:00:00 2001 From: Samantha Fry Date: Tue, 30 Jul 2024 18:37:38 +0100 Subject: [PATCH 018/142] Add tenz.skin --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index c942b68..b6f08d9 100644 --- a/add-domain +++ b/add-domain @@ -751,3 +751,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +tenz.skin From 23c734f2d685e83ec68ac623255550b8a862de29 Mon Sep 17 00:00:00 2001 From: spirillen Date: Tue, 30 Jul 2024 22:44:55 +0000 Subject: [PATCH 019/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index b6f08d9..a4736dc 100644 --- a/add-domain +++ b/add-domain @@ -723,6 +723,7 @@ sellskin.shop coronavirusapp.site fmovies2.site gos-uslygi.site +tenz.skin fmovies.social gosuslugi.social bigbeans.solutions @@ -751,4 +752,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -tenz.skin From ecc82d37877646f2f22e18beadc07dfce24b4e47 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 31 Jul 2024 10:30:08 -0400 Subject: [PATCH 020/142] add benyex.cl to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 942463d..75987e5 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -10,6 +10,7 @@ ergoterapiacaribu.ch beastlucyspin.click beastsrandompack.click besatsrandompacks.click +benyex.cl sxlph.club abcmueblesbogota.com amarveergroup.com From 280222a7fe7bcaefb0d09852e0aef3bce19ae131 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 31 Jul 2024 10:44:25 -0400 Subject: [PATCH 021/142] sort wildcard list --- add-wildcard-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 75987e5..fd1d437 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -7,10 +7,10 @@ reluzformaturas.com.br quatro-casino.ca theaerie.ca ergoterapiacaribu.ch +benyex.cl beastlucyspin.click beastsrandompack.click besatsrandompacks.click -benyex.cl sxlph.club abcmueblesbogota.com amarveergroup.com From cc2cd0ebec76ff15974fba4084089ae86649bbb0 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 1 Aug 2024 18:36:22 -0400 Subject: [PATCH 022/142] add bkskhcil.top to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 942463d..ba706bc 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -119,6 +119,7 @@ sxlph.site crypto-wave.store yildirim-firsati.store anjpvv.top +bkskhcil.top commodityprocess.top crypto-wave.top darnroughonline.top From f8a583a5fe957e2bc2f1d00b6d377ce970e04701 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 1 Aug 2024 18:52:32 -0400 Subject: [PATCH 023/142] add premium-acc-payment.com to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index ba706bc..99ae8ca 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -33,6 +33,7 @@ jestertunes.com linkedinin.com michaelconstantinebhanos.com pescacancun.com +premium-acc-payment.com reltio-apps.com safecartusa.com simplylovingproducts.com From 2f1792b65d53e29e01534ee821bb9267a726d869 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 1 Aug 2024 19:03:32 -0400 Subject: [PATCH 024/142] add avast-antivirus.com to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index ba706bc..0b02aff 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -14,6 +14,7 @@ sxlph.club abcmueblesbogota.com amarveergroup.com applesforfred.com +avast-antivirus.com azezieldraconous.com bkengineersindia.com cantabriaeventos.com From 8c252839638c27cec360725d4b79aeb0d69c37ae Mon Sep 17 00:00:00 2001 From: Daniel Date: Sun, 4 Aug 2024 11:49:39 +0200 Subject: [PATCH 025/142] Update add-domain --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index a4736dc..72fe050 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,5 @@ +comd-refresh.com +comdire24.com gosuslugi.agency coronavirus.app www.coronavirus.app From 5400dfdb47937d60a1a1ed4468281d78363861fd Mon Sep 17 00:00:00 2001 From: technikamateur Date: Sun, 4 Aug 2024 09:49:50 +0000 Subject: [PATCH 026/142] Hierarchical sorted the lists --- add-domain | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/add-domain b/add-domain index 72fe050..99727b4 100644 --- a/add-domain +++ b/add-domain @@ -1,5 +1,3 @@ -comd-refresh.com -comdire24.com gosuslugi.agency coronavirus.app www.coronavirus.app @@ -42,6 +40,8 @@ bitflyer-global.com business-facebook-covid19.com cheapcorona.com ciel-goshugi.com +comd-refresh.com +comdire24.com confirm-snet.com corona-explained.com corona-power.com From f222c77ac162f09a20e63dab97f87d7c3e0bab84 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 6 Aug 2024 10:23:38 -0400 Subject: [PATCH 027/142] add squad.cl to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index edad33c..d184d1a 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -8,6 +8,7 @@ quatro-casino.ca theaerie.ca ergoterapiacaribu.ch benyex.cl +squad.cl beastlucyspin.click beastsrandompack.click besatsrandompacks.click From d2972eb0c1c1587e4b4abbba31c77d14e6be042c Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 8 Aug 2024 10:38:38 +0200 Subject: [PATCH 028/142] Fixed screenshot fields Fixed the screenshot area of the issue template, as it was set to render as markdown, which made it impossible to paste a screenshot. Also changed the value from placeholder to value, which will prefill the "zone" with screenshot code Removed inactive users from the assign attributes of the issue template. --- .github/ISSUE_TEMPLATE/phishing.yml | 29 ++++++++++++----------------- 1 file changed, 12 insertions(+), 17 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/phishing.yml b/.github/ISSUE_TEMPLATE/phishing.yml index 8ef5cce..c119a9b 100644 --- a/.github/ISSUE_TEMPLATE/phishing.yml +++ b/.github/ISSUE_TEMPLATE/phishing.yml @@ -1,8 +1,5 @@ name: Phishing Report description: File a Phishing report -assignees: - - mitchellkrogza - - funilrys body: - type: textarea attributes: @@ -46,35 +43,33 @@ body: required: true - type: textarea - id: Screenshot + id: screenshot attributes: label: Screenshot description: | - If you feel a screenshot can say more than 1000 hard drives, do - please feel free to add it here :smiley: + Please add screenshot of the phishing site + impersonated domain **INFO** There need to be at least one blank line separating before and after the image line - - Copy and paste the lines to the text area below. - + + Image posting code line + `![Screenshot of phishing](https://full.link/to-image.ext)` + value: | ``` -
Click to expand +
Screenshot, Phishing site
- ``` - render: Markdown - placeholder: | - ``` -
Click to expand + + -------- + +
Screenshot, Impersonated site - ![Screenshot of phishing](https://full.link/to-image.ext)
``` validations: - required: false + required: true - type: textarea attributes: From 3517f478262ae2b6d7d36ef99ed41a40870d2633 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 8 Aug 2024 10:44:24 +0200 Subject: [PATCH 029/142] vonderlee.com | huberwills.com Ref https://github.com/mypdns/matrix/issues/778 Ref https://github.com/badmojr/1Hosts/issues/1816 Ref https://github.com/mypdns/matrix/issues/779 Ref https://github.com/badmojr/1Hosts/issues/1816 --- add-wildcard-domain | 220 ++++++++++++++++++++++---------------------- 1 file changed, 111 insertions(+), 109 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index d184d1a..340f5b0 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,156 +1,158 @@ -dubai-never-sleep.agency -wasabiwallet.app +404024.xyz abbotsleigh.nsw.edu.au -brunotasso.com.br -carnesboinobre.com.br -reluzformaturas.com.br -quatro-casino.ca -theaerie.ca -ergoterapiacaribu.ch -benyex.cl -squad.cl -beastlucyspin.click -beastsrandompack.click -besatsrandompacks.click -sxlph.club abcmueblesbogota.com +ajstelecom.com.mx amarveergroup.com +anjpvv.top applesforfred.com +apsehick.date avast-antivirus.com azezieldraconous.com +badhabits.ug +beastlucyspin.click +beastsrandompack.click +benyex.cl +bersowir.org +besatsrandompacks.click +bitflyer-ja.free.nf bkengineersindia.com +bkskhcil.top +bratiop.ru +brunotasso.com.br cantabriaeventos.com +carnesboinobre.com.br +cbcaps.shop +check-time.ru cloudslimit.com +com-1.xyz +commodityprocess.top communitybrowserpowered.com +confession-best.ru +crypto-wave.net +crypto-wave.store +crypto-wave.top cutepoochstore.com dailywebstats.com +darnroughonline.top +darntoughfactory.shop +darntoughonline-us.shop +darntoughonline.shop +darntoughsales.shop +dgkhj.ru +download-binance.online +dubai-never-sleep.agency ebeyez.com englishplusmore.com +ergoterapiacaribu.ch +estimation-best.ru fadpakke.com +farpetor.shop +fjwamneg.top +flameshamer.shop flyairprestige.com foreverfarley.com fsqaj.com -ijconnects.com -iwan2travel.com -jestertunes.com -linkedinin.com -michaelconstantinebhanos.com -pescacancun.com -premium-acc-payment.com -reltio-apps.com -safecartusa.com -simplylovingproducts.com -skimswanp.com -southerninsurs.com -steamcommumitry.com -steamcommumtiy.com -stecmcommunijty.com -toughknifes.com -utpkz.com -vipbargainhub.com -vpdamai.com -westernautomobileassembly.com -workshopauthor.com -workshopsmaker.com -workshopstyle.com -workshopusers.com -havenhills.za.com -intrinsicisle.za.com -race2zerogolf.za.com -ucnlkw.cyou -apsehick.date -steamcommunity.com.es -wasabiwallet.eu -linkr.it -llcn.link -rnws.link -ajstelecom.com.mx -crypto-wave.net -bitflyer-ja.free.nf -download-binance.online -robyoc.online -bersowir.org -mhktricks.org -bratiop.ru -check-time.ru -confession-best.ru -dgkhj.ru -estimation-best.ru -hoster-test.ru -nicoslag.ru -online-personality.ru -paipaisdvzxc.ru -partaususd.ru -qd34gf23ewrfsd1233.ru -qwertasd.ru -qwerty12346.ru -reputation-best.ru -nico.sa -littleswanaircon.com.sg -wasabiwallet.sh -cbcaps.shop -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -farpetor.shop -flameshamer.shop geriguna.shop gerlia.shop gloomcutter.shop grike.shop gunigunde.shop haelma.shop +havenhills.za.com hertrud.shop hexcrippler.shop hild.shop hiltrunde.shop +hoster-test.ru +huberwills.com +hubvera.ac.ug iankian.shop +ijconnects.com +intrinsicisle.za.com ironturner.shop +iwan2travel.com +jestertunes.com +karimgouss.ug kloisa.shop +lastimaners.ug +lebomashilo.co.za leopolfa.shop liferacer.shop -marda.shop -the-cartel.shop -tothedigital.shop -warcracker.shop -wordbracer.shop -wordmover.shop -wordstaker.shop -zinhice.shop -phsw.site -sxlph.site -crypto-wave.store -yildirim-firsati.store -anjpvv.top -bkskhcil.top -commodityprocess.top -crypto-wave.top -darnroughonline.top -fjwamneg.top -sitefind.top -technowide.com.tr -hubvera.ac.ug -pastratas.ac.ug -badhabits.ug -karimgouss.ug -lastimaners.ug +linkedinin.com +linkr.it +littleswanaircon.com.sg +llcn.link malayska.ug +marda.shop marksidfgs.ug +mhktricks.org +michaelconstantinebhanos.com mistitis.ug +nico.sa +nicoslag.ru +online-personality.ru opesjk.ug opsdjs.ug +paipaisdvzxc.ru +partaususd.ru +pastratas.ac.ug +pescacancun.com +phsw.site playwell.ug +premium-acc-payment.com +qd34gf23ewrfsd1233.ru +quatro-casino.ca +qwertasd.ru +qwerty12346.ru +race2zerogolf.za.com +reltio-apps.com +reluzformaturas.com.br +reputation-best.ru +rnws.link +robyoc.online +safecartusa.com +simplylovingproducts.com +sitefind.top +skimswanp.com +southerninsurs.com +squad.cl +steamcommumitry.com +steamcommumtiy.com +steamcommunity.com.es +stecmcommunijty.com +sxlph.club +sxlph.site +technowide.com.tr +the-cartel.shop +theaerie.ca timebound.ug timecheck.ug timekeeper.ug +tothedigital.shop +toughknifes.com triathlethe.ug tuskslacx.ug -wellplayed.ug -zxvbcrt.ug +ucnlkw.cyou +utpkz.com +vipbargainhub.com +vonderlee.com +vpdamai.com +warcracker.shop +wasabiwallet.app +wasabiwallet.eu +wasabiwallet.sh wasabiwallet.uk +wellplayed.ug +westernautomobileassembly.com wisbechguide.uk -404024.xyz -com-1.xyz +wordbracer.shop +wordmover.shop +wordstaker.shop +workshopauthor.com +workshopsmaker.com +workshopstyle.com +workshopusers.com +yildirim-firsati.store yildirim-firsati.xyz -lebomashilo.co.za +zinhice.shop +zxvbcrt.ug From b23c2bf75fbfee4761609065747c8a69897a7a30 Mon Sep 17 00:00:00 2001 From: spirillen Date: Thu, 8 Aug 2024 08:44:45 +0000 Subject: [PATCH 030/142] Hierarchical sorted the lists --- add-wildcard-domain | 222 ++++++++++++++++++++++---------------------- 1 file changed, 111 insertions(+), 111 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 340f5b0..d17c5b7 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,158 +1,158 @@ -404024.xyz +dubai-never-sleep.agency +wasabiwallet.app abbotsleigh.nsw.edu.au +brunotasso.com.br +carnesboinobre.com.br +reluzformaturas.com.br +quatro-casino.ca +theaerie.ca +ergoterapiacaribu.ch +benyex.cl +squad.cl +beastlucyspin.click +beastsrandompack.click +besatsrandompacks.click +sxlph.club abcmueblesbogota.com -ajstelecom.com.mx amarveergroup.com -anjpvv.top applesforfred.com -apsehick.date avast-antivirus.com azezieldraconous.com -badhabits.ug -beastlucyspin.click -beastsrandompack.click -benyex.cl -bersowir.org -besatsrandompacks.click -bitflyer-ja.free.nf bkengineersindia.com -bkskhcil.top -bratiop.ru -brunotasso.com.br cantabriaeventos.com -carnesboinobre.com.br -cbcaps.shop -check-time.ru cloudslimit.com -com-1.xyz -commodityprocess.top communitybrowserpowered.com -confession-best.ru -crypto-wave.net -crypto-wave.store -crypto-wave.top cutepoochstore.com dailywebstats.com -darnroughonline.top -darntoughfactory.shop -darntoughonline-us.shop -darntoughonline.shop -darntoughsales.shop -dgkhj.ru -download-binance.online -dubai-never-sleep.agency ebeyez.com englishplusmore.com -ergoterapiacaribu.ch -estimation-best.ru fadpakke.com -farpetor.shop -fjwamneg.top -flameshamer.shop flyairprestige.com foreverfarley.com fsqaj.com +huberwills.com +ijconnects.com +iwan2travel.com +jestertunes.com +linkedinin.com +michaelconstantinebhanos.com +pescacancun.com +premium-acc-payment.com +reltio-apps.com +safecartusa.com +simplylovingproducts.com +skimswanp.com +southerninsurs.com +steamcommumitry.com +steamcommumtiy.com +stecmcommunijty.com +toughknifes.com +utpkz.com +vipbargainhub.com +vonderlee.com +vpdamai.com +westernautomobileassembly.com +workshopauthor.com +workshopsmaker.com +workshopstyle.com +workshopusers.com +havenhills.za.com +intrinsicisle.za.com +race2zerogolf.za.com +ucnlkw.cyou +apsehick.date +steamcommunity.com.es +wasabiwallet.eu +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +crypto-wave.net +bitflyer-ja.free.nf +download-binance.online +robyoc.online +bersowir.org +mhktricks.org +bratiop.ru +check-time.ru +confession-best.ru +dgkhj.ru +estimation-best.ru +hoster-test.ru +nicoslag.ru +online-personality.ru +paipaisdvzxc.ru +partaususd.ru +qd34gf23ewrfsd1233.ru +qwertasd.ru +qwerty12346.ru +reputation-best.ru +nico.sa +littleswanaircon.com.sg +wasabiwallet.sh +cbcaps.shop +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +farpetor.shop +flameshamer.shop geriguna.shop gerlia.shop gloomcutter.shop grike.shop gunigunde.shop haelma.shop -havenhills.za.com hertrud.shop hexcrippler.shop hild.shop hiltrunde.shop -hoster-test.ru -huberwills.com -hubvera.ac.ug iankian.shop -ijconnects.com -intrinsicisle.za.com ironturner.shop -iwan2travel.com -jestertunes.com -karimgouss.ug kloisa.shop -lastimaners.ug -lebomashilo.co.za leopolfa.shop liferacer.shop -linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -malayska.ug marda.shop +the-cartel.shop +tothedigital.shop +warcracker.shop +wordbracer.shop +wordmover.shop +wordstaker.shop +zinhice.shop +phsw.site +sxlph.site +crypto-wave.store +yildirim-firsati.store +anjpvv.top +bkskhcil.top +commodityprocess.top +crypto-wave.top +darnroughonline.top +fjwamneg.top +sitefind.top +technowide.com.tr +hubvera.ac.ug +pastratas.ac.ug +badhabits.ug +karimgouss.ug +lastimaners.ug +malayska.ug marksidfgs.ug -mhktricks.org -michaelconstantinebhanos.com mistitis.ug -nico.sa -nicoslag.ru -online-personality.ru opesjk.ug opsdjs.ug -paipaisdvzxc.ru -partaususd.ru -pastratas.ac.ug -pescacancun.com -phsw.site playwell.ug -premium-acc-payment.com -qd34gf23ewrfsd1233.ru -quatro-casino.ca -qwertasd.ru -qwerty12346.ru -race2zerogolf.za.com -reltio-apps.com -reluzformaturas.com.br -reputation-best.ru -rnws.link -robyoc.online -safecartusa.com -simplylovingproducts.com -sitefind.top -skimswanp.com -southerninsurs.com -squad.cl -steamcommumitry.com -steamcommumtiy.com -steamcommunity.com.es -stecmcommunijty.com -sxlph.club -sxlph.site -technowide.com.tr -the-cartel.shop -theaerie.ca timebound.ug timecheck.ug timekeeper.ug -tothedigital.shop -toughknifes.com triathlethe.ug tuskslacx.ug -ucnlkw.cyou -utpkz.com -vipbargainhub.com -vonderlee.com -vpdamai.com -warcracker.shop -wasabiwallet.app -wasabiwallet.eu -wasabiwallet.sh -wasabiwallet.uk wellplayed.ug -westernautomobileassembly.com +zxvbcrt.ug +wasabiwallet.uk wisbechguide.uk -wordbracer.shop -wordmover.shop -wordstaker.shop -workshopauthor.com -workshopsmaker.com -workshopstyle.com -workshopusers.com -yildirim-firsati.store +404024.xyz +com-1.xyz yildirim-firsati.xyz -zinhice.shop -zxvbcrt.ug +lebomashilo.co.za From 5cf5f9fe0f5883ea4ddf787538a47d6b4f557186 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 8 Aug 2024 10:46:58 +0200 Subject: [PATCH 031/142] Fixed a leftover in C/P in issue template Fixed the list order of issues --- .github/ISSUE_TEMPLATE/{phishing.yml => 01-phishing.yml} | 2 -- .../ISSUE_TEMPLATE/{falsepositive.yml => 02-falsepositive.yml} | 0 2 files changed, 2 deletions(-) rename .github/ISSUE_TEMPLATE/{phishing.yml => 01-phishing.yml} (98%) rename .github/ISSUE_TEMPLATE/{falsepositive.yml => 02-falsepositive.yml} (100%) diff --git a/.github/ISSUE_TEMPLATE/phishing.yml b/.github/ISSUE_TEMPLATE/01-phishing.yml similarity index 98% rename from .github/ISSUE_TEMPLATE/phishing.yml rename to .github/ISSUE_TEMPLATE/01-phishing.yml index c119a9b..fda41ee 100644 --- a/.github/ISSUE_TEMPLATE/phishing.yml +++ b/.github/ISSUE_TEMPLATE/01-phishing.yml @@ -55,7 +55,6 @@ body: Image posting code line `![Screenshot of phishing](https://full.link/to-image.ext)` value: | - ```
Screenshot, Phishing site @@ -67,7 +66,6 @@ body:
- ``` validations: required: true diff --git a/.github/ISSUE_TEMPLATE/falsepositive.yml b/.github/ISSUE_TEMPLATE/02-falsepositive.yml similarity index 100% rename from .github/ISSUE_TEMPLATE/falsepositive.yml rename to .github/ISSUE_TEMPLATE/02-falsepositive.yml From e063fc5ab17de8a57c86c75fd872892834c8532f Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 8 Aug 2024 11:06:01 +0200 Subject: [PATCH 032/142] Fixed the attachment of screenshot Changed the checkboxes into a dropdown Changed the 80 line limit, do to Microsoft misbehaviour to wordwrap crap --- .github/ISSUE_TEMPLATE/01-phishing.yml | 1 + .github/ISSUE_TEMPLATE/02-falsepositive.yml | 62 ++++++++------------- 2 files changed, 25 insertions(+), 38 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/01-phishing.yml b/.github/ISSUE_TEMPLATE/01-phishing.yml index fda41ee..6c9f93d 100644 --- a/.github/ISSUE_TEMPLATE/01-phishing.yml +++ b/.github/ISSUE_TEMPLATE/01-phishing.yml @@ -1,3 +1,4 @@ +# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#creating-issue-forms name: Phishing Report description: File a Phishing report body: diff --git a/.github/ISSUE_TEMPLATE/02-falsepositive.yml b/.github/ISSUE_TEMPLATE/02-falsepositive.yml index 79402da..2035463 100644 --- a/.github/ISSUE_TEMPLATE/02-falsepositive.yml +++ b/.github/ISSUE_TEMPLATE/02-falsepositive.yml @@ -8,24 +8,20 @@ body: - type: markdown attributes: value: | - We understand being listed on a Phishing Database like this can be - frustrating and embarrassing for many web site owners. + We understand being listed on a Phishing Database like this can be frustrating and embarrassing for many web site owners. The first step is to remain calm. - The second step is to rest assured one of our maintainers will address - your issue as soon as possible. + The second step is to rest assured one of our maintainers will address your issue as soon as possible. - Please make sure you have provided as much information and details as - possible to help speed up the processing of your whitelisting application. + Please make sure you have provided as much information and details as possible to help speed up the processing of your whitelisting application. - type: textarea id: FPrecord attributes: label: Domain/URL/IP(s) you believe NOT to be Phishing description: | - Please give us a list of FQDN (domains) or complete links (URI's) that - you believe to be false positives. + Please give us a list of FQDN (domains) or complete links (URI's) that you believe to be false positives. Please warn with "NSFW" where applicable. placeholder: | @@ -36,31 +32,34 @@ body: validations: required: true - - type: checkboxes + - type: dropdown id: recordtype + validations: + required: true attributes: label: Whitelist type description: How do you believe the domain or uri should be whitelisted? More help can be found in the [README](https://github.com/mitchellkrogza/phishing#false-positives) + multiple: false options: - - label: '`1 to 1` match' - required: false - - label: '`ALL` subdomains or `REGEX`' - required: false - - label: '`RZD` all sub- and top level domains matching given record(s)' - required: false + - '`1 to 1` match' + - '`ALL` subdomains or `REGEX`' + - '`RZD` all sub- and top level domains matching given record(s)' - - type: checkboxes + - type: dropdown id: source + validations: + required: true attributes: label: More Information description: | How did you discover your IP-address or domain was listed in the Phishing or Phishing.Database? + multiple: true options: - - label: Website was hacked - - label: Phishtank - - label: OpenPhish - - label: VirusTotal - - label: Other (Please fill out the next box) + - Website was hacked + - Phishtank + - OpenPhish + - VirusTotal + - Other (Please fill out the next box) - type: textarea id: ifOther @@ -70,7 +69,6 @@ body: Please let us know where you found this if not listed above. (One link per line.) placeholder: | https://example.org - render: Markdown validations: required: false @@ -79,32 +77,20 @@ body: attributes: label: Screenshot description: | - If you feel a screenshot can say more than 1000 hard drives, do - please feel free to add it here :smiley: - - **INFO** There need to be at least one blank line separating before - and after the image line - - Copy and paste the lines to the text area below and paste the image link between the lines. + If you feel a screenshot can say more than the words on 1000 hard drives, do please feel free to add it here :smiley: - ``` -
Click to expand - - -
- ``` + **INFO** There need to be at least one blank line separating before and after the image line placeholder: | - ```
Click to expand - ![Screenshot of phishing](https://full.link/to-image.ext)
- ``` validations: required: false - type: textarea + validations: + required: false attributes: label: Additional context value: Add any other context about the problem here. From 7292da488a79df8ca7d78f23f07c0deef52e576a Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 8 Aug 2024 11:09:14 +0200 Subject: [PATCH 033/142] Fixed the attachment of screenshot (second try) Forgot to set the `value` from `placeholder` --- .github/ISSUE_TEMPLATE/02-falsepositive.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/02-falsepositive.yml b/.github/ISSUE_TEMPLATE/02-falsepositive.yml index 2035463..323299f 100644 --- a/.github/ISSUE_TEMPLATE/02-falsepositive.yml +++ b/.github/ISSUE_TEMPLATE/02-falsepositive.yml @@ -80,9 +80,9 @@ body: If you feel a screenshot can say more than the words on 1000 hard drives, do please feel free to add it here :smiley: **INFO** There need to be at least one blank line separating before and after the image line - placeholder: | -
Click to expand - + value: | +
Screenshot, Phishing site +
validations: From 2a5f82dd5ce6ff598bfd25d6a80ad68b1501c22e Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 8 Aug 2024 11:11:08 +0200 Subject: [PATCH 034/142] Changed the 80 line limit, do to Microsoft misbehaviour to wordwrap crap --- .github/ISSUE_TEMPLATE/01-phishing.yml | 23 +++++++---------------- 1 file changed, 7 insertions(+), 16 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/01-phishing.yml b/.github/ISSUE_TEMPLATE/01-phishing.yml index 6c9f93d..ddbd2bd 100644 --- a/.github/ISSUE_TEMPLATE/01-phishing.yml +++ b/.github/ISSUE_TEMPLATE/01-phishing.yml @@ -6,17 +6,12 @@ body: attributes: label: Phishing Domain/URL/IP(s) description: | - List the Domain/URI/IP for where the phishing occurs is - **mandatory**. - The backticks (`) surrounding the Domain/URL/IPs are important, - it prevents the URL from becoming clickable. + List the Domain/URI/IP for where the phishing occurs is **mandatory**. + The backticks (`) surrounding the Domain/URL/IPs are important, it prevents the URL from becoming clickable. Warn with "NSFW" where applicable. - **Help** To make the right commit for IP-addresses you have to - also prefix the CIDR notation, if you don't know what a CIDR - notation is, the right value is most likely `/32`, which in short - means exactly this IP address. + **Help** To make the right commit for IP-addresses you have to also prefix the CIDR notation, if you don't know what a CIDR notation is, the right value is most likely `/32`, which in short means exactly this IP address. placeholder: | example.com https://example.org/phishing @@ -38,8 +33,7 @@ body: attributes: label: Describe your experience. description: | - Be as clear as possible: nobody can read your mind, and nobody - is looking at your issue over your shoulder. + Be as clear as possible: nobody can read your mind, and nobody is looking at your issue over your shoulder. validations: required: true @@ -50,11 +44,9 @@ body: description: | Please add screenshot of the phishing site + impersonated domain - **INFO** There need to be at least one blank line separating before - and after the image line + **INFO** There need to be at least one blank line separating before and after the image line - Image posting code line - `![Screenshot of phishing](https://full.link/to-image.ext)` + Image posting code line `![Screenshot of phishing](https://full.link/to-image.ext)` value: |
Screenshot, Phishing site @@ -74,8 +66,7 @@ body: attributes: label: Related external source description: | - If you have found your information in another fora, please paste - link here. + If you have found your information in another fora, please paste link here. One link per line. placeholder: | From bcbb052fd85b271056c8d8e870c486e02240a7df Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Mon, 12 Aug 2024 10:28:55 +0200 Subject: [PATCH 035/142] add-domain and IP --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 1 + add-domain | 2 ++ 5 files changed, 9 insertions(+), 3 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index beb653c..848cbea 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -13,4 +13,5 @@ 32.181.237.156.43 32.120.168.207.45 32.154.197.137.79 -32.223.85.215.91 \ No newline at end of file +32.223.85.215.91 +32.89.121.48.45 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 26460f2..43ffda8 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -14,4 +14,5 @@ 45.148.121.144/32 45.207.168.120/32 79.137.197.154/32 -91.215.85.223/32 \ No newline at end of file +91.215.85.223/32 +45.148.121.89/32 \ No newline at end of file diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 796d647..ddc20c2 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -12,4 +12,5 @@ 144.121.148.45 120.168.207.45 154.197.137.79 -91.215.85.223 \ No newline at end of file +91.215.85.223 +89.121.148.45 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index 027c030..56b6ce9 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -14,3 +14,4 @@ 5.182.210.39 79.137.197.154 91.215.85.223 +45.148.121.89 \ No newline at end of file diff --git a/add-domain b/add-domain index 99727b4..cbf020b 100644 --- a/add-domain +++ b/add-domain @@ -754,3 +754,5 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +wvvw-dofus.com +wvvw-ankama.com \ No newline at end of file From 5d2152a6be6e8949d9545183e06549a61be3fd88 Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 12 Aug 2024 15:23:36 +0000 Subject: [PATCH 036/142] Hierarchical sorted the lists --- add-domain | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/add-domain b/add-domain index cbf020b..0fa0ffc 100644 --- a/add-domain +++ b/add-domain @@ -274,6 +274,8 @@ toromadon.weebly.com mail-109949.weeblysite.com reagan-webmail-102298.weeblysite.com wsetransport.com +wvvw-ankama.com +wvvw-dofus.com www-dofus.com www-dofus-touch.com www-rsblox.com @@ -754,5 +756,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -wvvw-dofus.com -wvvw-ankama.com \ No newline at end of file From 74edd1f2538900af2ca93094fd23c058671b2d0f Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Mon, 2 Sep 2024 22:14:24 -0400 Subject: [PATCH 037/142] add sbic.com.br to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d17c5b7..97b7d26 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -4,6 +4,7 @@ abbotsleigh.nsw.edu.au brunotasso.com.br carnesboinobre.com.br reluzformaturas.com.br +sbic.com.br quatro-casino.ca theaerie.ca ergoterapiacaribu.ch From e3ab31c53615b533a8251b5c37a8e2e6763c4cd2 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 5 Sep 2024 11:52:35 -0400 Subject: [PATCH 038/142] add yanisac.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 97b7d26..15bf5f2 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -57,6 +57,7 @@ workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com +yanisac.com havenhills.za.com intrinsicisle.za.com race2zerogolf.za.com From 3ba567b52a75a11969694336043e0445b3593b05 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 5 Sep 2024 18:40:59 +0200 Subject: [PATCH 039/142] malicious domains Ref https://kb.mypdns.org/issue/MTX-794 Ref https://kb.mypdns.org/issue/MTX-795 Ref https://kb.mypdns.org/issue/MTX-796 Ref https://kb.mypdns.org/issue/MTX-797 Ref https://kb.mypdns.org/issue/MTX-798 Ref https://kb.mypdns.org/issue/MTX-799 Ref https://kb.mypdns.org/issue/MTX-800 Ref https://kb.mypdns.org/issue/MTX-801 Ref https://kb.mypdns.org/issue/MTX-802 Ref https://kb.mypdns.org/issue/MTX-803 Ref https://kb.mypdns.org/issue/MTX-804 Ref https://kb.mypdns.org/issue/MTX-805 Ref https://kb.mypdns.org/issue/MTX-806 Ref https://kb.mypdns.org/issue/MTX-807 Ref https://kb.mypdns.org/issue/MTX-808 Ref https://kb.mypdns.org/issue/MTX-809 Ref https://kb.mypdns.org/issue/MTX-810 Ref https://kb.mypdns.org/issue/MTX-811 Ref https://kb.mypdns.org/issue/MTX-812 Ref https://kb.mypdns.org/issue/MTX-813 Ref https://kb.mypdns.org/issue/MTX-814 Ref https://kb.mypdns.org/issue/MTX-815 Ref: https://github.com/mitchellkrogza/Phishing.Database/issues/908 ## Credit - [@DarkDiabolos](https://github.com/DarkDiabolos) --- add-domain | 1 + add-link | 3 +++ add-wildcard-domain | 20 ++++++++++++++++++++ 3 files changed, 24 insertions(+) diff --git a/add-domain b/add-domain index 0fa0ffc..2cb5ada 100644 --- a/add-domain +++ b/add-domain @@ -7,6 +7,7 @@ dogecoin20-st.web.app kyc-bltflyer.web.app restore637908-coinbase-us.web.app zttmct-tlemp.web.app +cresca.faa.unicen.edu.ar wiiflix.art gocycle.com.au urbanandruraldesign.com.au diff --git a/add-link b/add-link index 12e0f4d..dd1ef16 100644 --- a/add-link +++ b/add-link @@ -1,5 +1,8 @@ http://9428beb8.centroesserevalverde.it/za?c95b469cc2004bdf9a742bef611e5a18&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQABhAMgYIAhAAGEAyBggDEAAYQ301e38b3 https://pub-5777c77f32f447619bfd23c7b9521d05.r2.dev/original%20wetransfer.html# +https://cresca.faa.unicen.edu.ar/2024/02/27/kmspico-windows-10/ +https://www.kmspicoofficial.com/kmspico-download-official/ +https://medlafire.net/kmspico/ https://nysaiwine.co.uk/fff https://barkerpart.com/0/0/0/ff0f22d43573c8376ddf7e3b3adc15c2/27/388-77068/13789-119355-9514 https://storage.googleapis.com/fonews/tracking.html#4_77068_388_13789_119355_9514_27_9_63_08182 diff --git a/add-wildcard-domain b/add-wildcard-domain index 97b7d26..2ce7dad 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -14,11 +14,13 @@ beastlucyspin.click beastsrandompack.click besatsrandompacks.click sxlph.club +kmspi.co abcmueblesbogota.com amarveergroup.com applesforfred.com avast-antivirus.com azezieldraconous.com +balneariodelugo.com bkengineersindia.com cantabriaeventos.com cloudslimit.com @@ -31,14 +33,21 @@ fadpakke.com flyairprestige.com foreverfarley.com fsqaj.com +getkmspico.com huberwills.com ijconnects.com iwan2travel.com jestertunes.com +kmspico-oficial.com +kmspicoofficial.com linkedinin.com michaelconstantinebhanos.com +nicolascoolman.com +officialactivate.com +officialkmspico.com pescacancun.com premium-acc-payment.com +probacons.com reltio-apps.com safecartusa.com simplylovingproducts.com @@ -64,16 +73,26 @@ ucnlkw.cyou apsehick.date steamcommunity.com.es wasabiwallet.eu +kmspico.guru +kmsauto.info +officialkmspico.info +kmspico.io linkr.it llcn.link rnws.link ajstelecom.com.mx +ccm.net crypto-wave.net +medlafire.net +sosvirus.net bitflyer-ja.free.nf download-binance.online robyoc.online bersowir.org +descargarkmspico.org +kmsofficial.org mhktricks.org +windowsactivator.org bratiop.ru check-time.ru confession-best.ru @@ -155,5 +174,6 @@ wasabiwallet.uk wisbechguide.uk 404024.xyz com-1.xyz +lqnfezg.xyz yildirim-firsati.xyz lebomashilo.co.za From e389f17a4f23ff20f3bdaa95b7e4880d3e0e462d Mon Sep 17 00:00:00 2001 From: Spirillen Date: Thu, 5 Sep 2024 18:42:15 +0200 Subject: [PATCH 040/142] Updated sort script to work with python 3.12 --- .github/workflows/master.yml | 4 ++-- tools/hierarchical_sort.sh | 8 +++----- 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index 4d364ea..44a01d8 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -19,10 +19,10 @@ jobs: - name: Checkout the repo uses: actions/checkout@main - - name: Setup Python 3.11 + - name: Setup Python 3.12 uses: actions/setup-python@v5 with: - python-version: 3.11 + python-version: 3.12 - name: Install requirements run: | diff --git a/tools/hierarchical_sort.sh b/tools/hierarchical_sort.sh index 85b57bc..988cb26 100644 --- a/tools/hierarchical_sort.sh +++ b/tools/hierarchical_sort.sh @@ -1,17 +1,15 @@ #!/usr/bin/env bash ## This script should be placed in pre-commit-hooks -set -xe +set -e GIT_DIR="$(git rev-parse --show-toplevel)" if [ -d "$GIT_DIR" ]; then cd "${GIT_DIR}" || exit 1 - - -FILES=('add-domain' 'add-wildcard-domain' 'falsepositive.list' 'falsepositive_regex.list' 'falsepositive_rzd.list') + FILES=('add-domain' 'add-wildcard-domain' 'falsepositive.list' 'falsepositive_regex.list' 'falsepositive_rzd.list') for i in "${FILES[@]}"; do - python3.11 "$GIT_DIR/tools/domain-sort.py" <"${i}" >"${i}.tmp" && + python3 "$GIT_DIR/tools/domain-sort.py" <"${i}" >"${i}.tmp" && sed "/^$/d" "${i}.tmp" >"${i}" && rm "${i}.tmp" done fi From 3335c5014dd61fccf198df49b4ebf80510023640 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 7 Sep 2024 19:38:32 -0400 Subject: [PATCH 041/142] add albapietra.com.br to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8b2f4c8..8564111 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,6 +1,7 @@ dubai-never-sleep.agency wasabiwallet.app abbotsleigh.nsw.edu.au +albapietra.com.br brunotasso.com.br carnesboinobre.com.br reluzformaturas.com.br From 5f7aaddccb79f6b94e7534554ae2d4dc1aebc3c5 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sun, 15 Sep 2024 11:13:04 +0200 Subject: [PATCH 042/142] rbx.bar Ref https://github.com/blocklistproject/Lists/issues/1275 --- add-wildcard-domain | 253 ++++++++++++++++++++++---------------------- 1 file changed, 127 insertions(+), 126 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8564111..7bc8ac1 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,181 +1,182 @@ -dubai-never-sleep.agency -wasabiwallet.app +404024.xyz abbotsleigh.nsw.edu.au -albapietra.com.br -brunotasso.com.br -carnesboinobre.com.br -reluzformaturas.com.br -sbic.com.br -quatro-casino.ca -theaerie.ca -ergoterapiacaribu.ch -benyex.cl -squad.cl -beastlucyspin.click -beastsrandompack.click -besatsrandompacks.click -sxlph.club -kmspi.co abcmueblesbogota.com +ajstelecom.com.mx +albapietra.com.br amarveergroup.com +anjpvv.top applesforfred.com +apsehick.date avast-antivirus.com azezieldraconous.com +badhabits.ug balneariodelugo.com +beastlucyspin.click +beastsrandompack.click +benyex.cl +bersowir.org +besatsrandompacks.click +bitflyer-ja.free.nf bkengineersindia.com +bkskhcil.top +bratiop.ru +brunotasso.com.br cantabriaeventos.com +carnesboinobre.com.br +cbcaps.shop +ccm.net +check-time.ru cloudslimit.com +com-1.xyz +commodityprocess.top communitybrowserpowered.com +confession-best.ru +crypto-wave.net +crypto-wave.store +crypto-wave.top cutepoochstore.com dailywebstats.com +darnroughonline.top +darntoughfactory.shop +darntoughonline-us.shop +darntoughonline.shop +darntoughsales.shop +descargarkmspico.org +dgkhj.ru +download-binance.online +dubai-never-sleep.agency ebeyez.com englishplusmore.com +ergoterapiacaribu.ch +estimation-best.ru fadpakke.com +farpetor.shop +fjwamneg.top +flameshamer.shop flyairprestige.com foreverfarley.com fsqaj.com +geriguna.shop +gerlia.shop getkmspico.com +gloomcutter.shop +grike.shop +gunigunde.shop +haelma.shop +havenhills.za.com +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +hoster-test.ru huberwills.com +hubvera.ac.ug +iankian.shop ijconnects.com +intrinsicisle.za.com +ironturner.shop iwan2travel.com jestertunes.com +karimgouss.ug +kloisa.shop +kmsauto.info +kmsofficial.org +kmspi.co kmspico-oficial.com +kmspico.guru +kmspico.io kmspicoofficial.com +lastimaners.ug +lebomashilo.co.za +leopolfa.shop +liferacer.shop linkedinin.com +linkr.it +littleswanaircon.com.sg +llcn.link +lqnfezg.xyz +malayska.ug +marda.shop +marksidfgs.ug +medlafire.net +mhktricks.org michaelconstantinebhanos.com +mistitis.ug +nico.sa nicolascoolman.com +nicoslag.ru officialactivate.com officialkmspico.com +officialkmspico.info +online-personality.ru +opesjk.ug +opsdjs.ug +paipaisdvzxc.ru +partaususd.ru +pastratas.ac.ug pescacancun.com +phsw.site +playwell.ug premium-acc-payment.com probacons.com +qd34gf23ewrfsd1233.ru +quatro-casino.ca +qwertasd.ru +qwerty12346.ru +race2zerogolf.za.com +rbx.bar reltio-apps.com +reluzformaturas.com.br +reputation-best.ru +rnws.link +robyoc.online safecartusa.com +sbic.com.br simplylovingproducts.com +sitefind.top skimswanp.com +sosvirus.net southerninsurs.com +squad.cl steamcommumitry.com steamcommumtiy.com +steamcommunity.com.es stecmcommunijty.com +sxlph.club +sxlph.site +technowide.com.tr +the-cartel.shop +theaerie.ca +timebound.ug +timecheck.ug +timekeeper.ug +tothedigital.shop toughknifes.com +triathlethe.ug +tuskslacx.ug +ucnlkw.cyou utpkz.com vipbargainhub.com vonderlee.com vpdamai.com +warcracker.shop +wasabiwallet.app +wasabiwallet.eu +wasabiwallet.sh +wasabiwallet.uk +wellplayed.ug westernautomobileassembly.com +windowsactivator.org +wisbechguide.uk +wordbracer.shop +wordmover.shop +wordstaker.shop workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com yanisac.com -havenhills.za.com -intrinsicisle.za.com -race2zerogolf.za.com -ucnlkw.cyou -apsehick.date -steamcommunity.com.es -wasabiwallet.eu -kmspico.guru -kmsauto.info -officialkmspico.info -kmspico.io -linkr.it -llcn.link -rnws.link -ajstelecom.com.mx -ccm.net -crypto-wave.net -medlafire.net -sosvirus.net -bitflyer-ja.free.nf -download-binance.online -robyoc.online -bersowir.org -descargarkmspico.org -kmsofficial.org -mhktricks.org -windowsactivator.org -bratiop.ru -check-time.ru -confession-best.ru -dgkhj.ru -estimation-best.ru -hoster-test.ru -nicoslag.ru -online-personality.ru -paipaisdvzxc.ru -partaususd.ru -qd34gf23ewrfsd1233.ru -qwertasd.ru -qwerty12346.ru -reputation-best.ru -nico.sa -littleswanaircon.com.sg -wasabiwallet.sh -cbcaps.shop -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -farpetor.shop -flameshamer.shop -geriguna.shop -gerlia.shop -gloomcutter.shop -grike.shop -gunigunde.shop -haelma.shop -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -iankian.shop -ironturner.shop -kloisa.shop -leopolfa.shop -liferacer.shop -marda.shop -the-cartel.shop -tothedigital.shop -warcracker.shop -wordbracer.shop -wordmover.shop -wordstaker.shop -zinhice.shop -phsw.site -sxlph.site -crypto-wave.store yildirim-firsati.store -anjpvv.top -bkskhcil.top -commodityprocess.top -crypto-wave.top -darnroughonline.top -fjwamneg.top -sitefind.top -technowide.com.tr -hubvera.ac.ug -pastratas.ac.ug -badhabits.ug -karimgouss.ug -lastimaners.ug -malayska.ug -marksidfgs.ug -mistitis.ug -opesjk.ug -opsdjs.ug -playwell.ug -timebound.ug -timecheck.ug -timekeeper.ug -triathlethe.ug -tuskslacx.ug -wellplayed.ug -zxvbcrt.ug -wasabiwallet.uk -wisbechguide.uk -404024.xyz -com-1.xyz -lqnfezg.xyz yildirim-firsati.xyz -lebomashilo.co.za +zinhice.shop +zxvbcrt.ug From 5f40522b0deae0acc4dbc32ff0c727b1091f109b Mon Sep 17 00:00:00 2001 From: spirillen Date: Sun, 15 Sep 2024 09:13:18 +0000 Subject: [PATCH 043/142] Hierarchical sorted the lists --- add-wildcard-domain | 254 ++++++++++++++++++++++---------------------- 1 file changed, 127 insertions(+), 127 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 7bc8ac1..79cba0e 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,182 +1,182 @@ -404024.xyz +dubai-never-sleep.agency +wasabiwallet.app abbotsleigh.nsw.edu.au -abcmueblesbogota.com -ajstelecom.com.mx +rbx.bar albapietra.com.br +brunotasso.com.br +carnesboinobre.com.br +reluzformaturas.com.br +sbic.com.br +quatro-casino.ca +theaerie.ca +ergoterapiacaribu.ch +benyex.cl +squad.cl +beastlucyspin.click +beastsrandompack.click +besatsrandompacks.click +sxlph.club +kmspi.co +abcmueblesbogota.com amarveergroup.com -anjpvv.top applesforfred.com -apsehick.date avast-antivirus.com azezieldraconous.com -badhabits.ug balneariodelugo.com -beastlucyspin.click -beastsrandompack.click -benyex.cl -bersowir.org -besatsrandompacks.click -bitflyer-ja.free.nf bkengineersindia.com -bkskhcil.top -bratiop.ru -brunotasso.com.br cantabriaeventos.com -carnesboinobre.com.br -cbcaps.shop -ccm.net -check-time.ru cloudslimit.com -com-1.xyz -commodityprocess.top communitybrowserpowered.com -confession-best.ru -crypto-wave.net -crypto-wave.store -crypto-wave.top cutepoochstore.com dailywebstats.com -darnroughonline.top -darntoughfactory.shop -darntoughonline-us.shop -darntoughonline.shop -darntoughsales.shop -descargarkmspico.org -dgkhj.ru -download-binance.online -dubai-never-sleep.agency ebeyez.com englishplusmore.com -ergoterapiacaribu.ch -estimation-best.ru fadpakke.com -farpetor.shop -fjwamneg.top -flameshamer.shop flyairprestige.com foreverfarley.com fsqaj.com -geriguna.shop -gerlia.shop getkmspico.com -gloomcutter.shop -grike.shop -gunigunde.shop -haelma.shop -havenhills.za.com -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -hoster-test.ru huberwills.com -hubvera.ac.ug -iankian.shop ijconnects.com -intrinsicisle.za.com -ironturner.shop iwan2travel.com jestertunes.com -karimgouss.ug -kloisa.shop -kmsauto.info -kmsofficial.org -kmspi.co kmspico-oficial.com -kmspico.guru -kmspico.io kmspicoofficial.com -lastimaners.ug -lebomashilo.co.za -leopolfa.shop -liferacer.shop linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -lqnfezg.xyz -malayska.ug -marda.shop -marksidfgs.ug -medlafire.net -mhktricks.org michaelconstantinebhanos.com -mistitis.ug -nico.sa nicolascoolman.com -nicoslag.ru officialactivate.com officialkmspico.com -officialkmspico.info -online-personality.ru -opesjk.ug -opsdjs.ug -paipaisdvzxc.ru -partaususd.ru -pastratas.ac.ug pescacancun.com -phsw.site -playwell.ug premium-acc-payment.com probacons.com -qd34gf23ewrfsd1233.ru -quatro-casino.ca -qwertasd.ru -qwerty12346.ru -race2zerogolf.za.com -rbx.bar reltio-apps.com -reluzformaturas.com.br -reputation-best.ru -rnws.link -robyoc.online safecartusa.com -sbic.com.br simplylovingproducts.com -sitefind.top skimswanp.com -sosvirus.net southerninsurs.com -squad.cl steamcommumitry.com steamcommumtiy.com -steamcommunity.com.es stecmcommunijty.com -sxlph.club -sxlph.site -technowide.com.tr -the-cartel.shop -theaerie.ca -timebound.ug -timecheck.ug -timekeeper.ug -tothedigital.shop toughknifes.com -triathlethe.ug -tuskslacx.ug -ucnlkw.cyou utpkz.com vipbargainhub.com vonderlee.com vpdamai.com -warcracker.shop -wasabiwallet.app -wasabiwallet.eu -wasabiwallet.sh -wasabiwallet.uk -wellplayed.ug westernautomobileassembly.com -windowsactivator.org -wisbechguide.uk -wordbracer.shop -wordmover.shop -wordstaker.shop workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com yanisac.com -yildirim-firsati.store -yildirim-firsati.xyz +havenhills.za.com +intrinsicisle.za.com +race2zerogolf.za.com +ucnlkw.cyou +apsehick.date +steamcommunity.com.es +wasabiwallet.eu +kmspico.guru +kmsauto.info +officialkmspico.info +kmspico.io +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +ccm.net +crypto-wave.net +medlafire.net +sosvirus.net +bitflyer-ja.free.nf +download-binance.online +robyoc.online +bersowir.org +descargarkmspico.org +kmsofficial.org +mhktricks.org +windowsactivator.org +bratiop.ru +check-time.ru +confession-best.ru +dgkhj.ru +estimation-best.ru +hoster-test.ru +nicoslag.ru +online-personality.ru +paipaisdvzxc.ru +partaususd.ru +qd34gf23ewrfsd1233.ru +qwertasd.ru +qwerty12346.ru +reputation-best.ru +nico.sa +littleswanaircon.com.sg +wasabiwallet.sh +cbcaps.shop +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +farpetor.shop +flameshamer.shop +geriguna.shop +gerlia.shop +gloomcutter.shop +grike.shop +gunigunde.shop +haelma.shop +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +iankian.shop +ironturner.shop +kloisa.shop +leopolfa.shop +liferacer.shop +marda.shop +the-cartel.shop +tothedigital.shop +warcracker.shop +wordbracer.shop +wordmover.shop +wordstaker.shop zinhice.shop +phsw.site +sxlph.site +crypto-wave.store +yildirim-firsati.store +anjpvv.top +bkskhcil.top +commodityprocess.top +crypto-wave.top +darnroughonline.top +fjwamneg.top +sitefind.top +technowide.com.tr +hubvera.ac.ug +pastratas.ac.ug +badhabits.ug +karimgouss.ug +lastimaners.ug +malayska.ug +marksidfgs.ug +mistitis.ug +opesjk.ug +opsdjs.ug +playwell.ug +timebound.ug +timecheck.ug +timekeeper.ug +triathlethe.ug +tuskslacx.ug +wellplayed.ug zxvbcrt.ug +wasabiwallet.uk +wisbechguide.uk +404024.xyz +com-1.xyz +lqnfezg.xyz +yildirim-firsati.xyz +lebomashilo.co.za From 27c1d05d53614500a91aae7d80f138b7838717fc Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 15 Sep 2024 11:04:27 -0400 Subject: [PATCH 044/142] add craigbrimm.com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 79cba0e..877668c 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -27,6 +27,7 @@ bkengineersindia.com cantabriaeventos.com cloudslimit.com communitybrowserpowered.com +craigbrimm.com cutepoochstore.com dailywebstats.com ebeyez.com From 2423cf88edc79adf00aef932390cdb078cad7c88 Mon Sep 17 00:00:00 2001 From: kerta1n <36344851+kerta1n@users.noreply.github.com> Date: Sun, 15 Sep 2024 12:21:20 -0400 Subject: [PATCH 045/142] Update add-domain Fake poshmark site --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index 2cb5ada..1d88d89 100644 --- a/add-domain +++ b/add-domain @@ -757,3 +757,5 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +id829.com +s3-poshmark.id829.com From 82258a91aed49e35f0592cf0652f65fa5317d11d Mon Sep 17 00:00:00 2001 From: kerta1n <36344851+kerta1n@users.noreply.github.com> Date: Sun, 15 Sep 2024 12:23:10 -0400 Subject: [PATCH 046/142] Update add-link Add fake Poshmark site --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index dd1ef16..e7b1710 100644 --- a/add-link +++ b/add-link @@ -62,3 +62,4 @@ https://www-rooblox.com/users/1657067/profile https://www.kepeklian.fr/mm.php https://www.manitowocice.com/Media/Manitowocice/robux1.html https://www.seo-domain.net/0:gateway:checkout/2999994 +https://s3-poshmark.id829.com/211083758 From ccd105aab6d4f9515fd2b2cdfc3eb991cfa994d5 Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 16 Sep 2024 22:10:54 +0000 Subject: [PATCH 047/142] Hierarchical sorted the lists --- add-domain | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/add-domain b/add-domain index 1d88d89..1e768cc 100644 --- a/add-domain +++ b/add-domain @@ -132,6 +132,8 @@ gosoogi.com help-media.com coronavirus-tracker-api.herokuapp.com iamcorona.com +id829.com +s3-poshmark.id829.com igobjectionservices.com krakenlogins.com kuispb.com @@ -757,5 +759,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -id829.com -s3-poshmark.id829.com From 4fc5689ec1536d379af2c304955649e84633ed8f Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 18 Sep 2024 21:38:58 +0200 Subject: [PATCH 048/142] puroligert.com | welkusters.com Ref https://github.com/badmojr/1Hosts/issues/1839 --------- Thanks to Jetbrains, for Sponsoring My Privacy DNS with their Open Source software licenses. Their software helps us develop and maintain My Privacy DNS and other project as they made writing code easier. --- add-wildcard-domain | 256 ++++++++++++++++++++++---------------------- 1 file changed, 129 insertions(+), 127 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 877668c..e08b0c9 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,183 +1,185 @@ -dubai-never-sleep.agency -wasabiwallet.app +404024.xyz abbotsleigh.nsw.edu.au -rbx.bar -albapietra.com.br -brunotasso.com.br -carnesboinobre.com.br -reluzformaturas.com.br -sbic.com.br -quatro-casino.ca -theaerie.ca -ergoterapiacaribu.ch -benyex.cl -squad.cl -beastlucyspin.click -beastsrandompack.click -besatsrandompacks.click -sxlph.club -kmspi.co abcmueblesbogota.com +ajstelecom.com.mx +albapietra.com.br amarveergroup.com +anjpvv.top applesforfred.com +apsehick.date avast-antivirus.com azezieldraconous.com +badhabits.ug balneariodelugo.com +beastlucyspin.click +beastsrandompack.click +benyex.cl +bersowir.org +besatsrandompacks.click +bitflyer-ja.free.nf bkengineersindia.com +bkskhcil.top +bratiop.ru +brunotasso.com.br cantabriaeventos.com +carnesboinobre.com.br +cbcaps.shop +ccm.net +check-time.ru cloudslimit.com +com-1.xyz +commodityprocess.top communitybrowserpowered.com +confession-best.ru craigbrimm.com +crypto-wave.net +crypto-wave.store +crypto-wave.top cutepoochstore.com dailywebstats.com +darnroughonline.top +darntoughfactory.shop +darntoughonline-us.shop +darntoughonline.shop +darntoughsales.shop +descargarkmspico.org +dgkhj.ru +download-binance.online +dubai-never-sleep.agency ebeyez.com englishplusmore.com +ergoterapiacaribu.ch +estimation-best.ru fadpakke.com +farpetor.shop +fjwamneg.top +flameshamer.shop flyairprestige.com foreverfarley.com fsqaj.com +geriguna.shop +gerlia.shop getkmspico.com +gloomcutter.shop +grike.shop +gunigunde.shop +haelma.shop +havenhills.za.com +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +hoster-test.ru huberwills.com +hubvera.ac.ug +iankian.shop ijconnects.com +intrinsicisle.za.com +ironturner.shop iwan2travel.com jestertunes.com +karimgouss.ug +kloisa.shop +kmsauto.info +kmsofficial.org +kmspi.co kmspico-oficial.com +kmspico.guru +kmspico.io kmspicoofficial.com +lastimaners.ug +lebomashilo.co.za +leopolfa.shop +liferacer.shop linkedinin.com +linkr.it +littleswanaircon.com.sg +llcn.link +lqnfezg.xyz +malayska.ug +marda.shop +marksidfgs.ug +medlafire.net +mhktricks.org michaelconstantinebhanos.com +mistitis.ug +nico.sa nicolascoolman.com +nicoslag.ru officialactivate.com officialkmspico.com +officialkmspico.info +online-personality.ru +opesjk.ug +opsdjs.ug +paipaisdvzxc.ru +partaususd.ru +pastratas.ac.ug pescacancun.com +phsw.site +playwell.ug premium-acc-payment.com probacons.com +puroligert.com +qd34gf23ewrfsd1233.ru +quatro-casino.ca +qwertasd.ru +qwerty12346.ru +race2zerogolf.za.com +rbx.bar reltio-apps.com +reluzformaturas.com.br +reputation-best.ru +rnws.link +robyoc.online safecartusa.com +sbic.com.br simplylovingproducts.com +sitefind.top skimswanp.com +sosvirus.net southerninsurs.com +squad.cl steamcommumitry.com steamcommumtiy.com +steamcommunity.com.es stecmcommunijty.com +sxlph.club +sxlph.site +technowide.com.tr +the-cartel.shop +theaerie.ca +timebound.ug +timecheck.ug +timekeeper.ug +tothedigital.shop toughknifes.com +triathlethe.ug +tuskslacx.ug +ucnlkw.cyou utpkz.com vipbargainhub.com vonderlee.com vpdamai.com +warcracker.shop +wasabiwallet.app +wasabiwallet.eu +wasabiwallet.sh +wasabiwallet.uk +welkusters.com +wellplayed.ug westernautomobileassembly.com +windowsactivator.org +wisbechguide.uk +wordbracer.shop +wordmover.shop +wordstaker.shop workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com yanisac.com -havenhills.za.com -intrinsicisle.za.com -race2zerogolf.za.com -ucnlkw.cyou -apsehick.date -steamcommunity.com.es -wasabiwallet.eu -kmspico.guru -kmsauto.info -officialkmspico.info -kmspico.io -linkr.it -llcn.link -rnws.link -ajstelecom.com.mx -ccm.net -crypto-wave.net -medlafire.net -sosvirus.net -bitflyer-ja.free.nf -download-binance.online -robyoc.online -bersowir.org -descargarkmspico.org -kmsofficial.org -mhktricks.org -windowsactivator.org -bratiop.ru -check-time.ru -confession-best.ru -dgkhj.ru -estimation-best.ru -hoster-test.ru -nicoslag.ru -online-personality.ru -paipaisdvzxc.ru -partaususd.ru -qd34gf23ewrfsd1233.ru -qwertasd.ru -qwerty12346.ru -reputation-best.ru -nico.sa -littleswanaircon.com.sg -wasabiwallet.sh -cbcaps.shop -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -farpetor.shop -flameshamer.shop -geriguna.shop -gerlia.shop -gloomcutter.shop -grike.shop -gunigunde.shop -haelma.shop -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -iankian.shop -ironturner.shop -kloisa.shop -leopolfa.shop -liferacer.shop -marda.shop -the-cartel.shop -tothedigital.shop -warcracker.shop -wordbracer.shop -wordmover.shop -wordstaker.shop -zinhice.shop -phsw.site -sxlph.site -crypto-wave.store yildirim-firsati.store -anjpvv.top -bkskhcil.top -commodityprocess.top -crypto-wave.top -darnroughonline.top -fjwamneg.top -sitefind.top -technowide.com.tr -hubvera.ac.ug -pastratas.ac.ug -badhabits.ug -karimgouss.ug -lastimaners.ug -malayska.ug -marksidfgs.ug -mistitis.ug -opesjk.ug -opsdjs.ug -playwell.ug -timebound.ug -timecheck.ug -timekeeper.ug -triathlethe.ug -tuskslacx.ug -wellplayed.ug -zxvbcrt.ug -wasabiwallet.uk -wisbechguide.uk -404024.xyz -com-1.xyz -lqnfezg.xyz yildirim-firsati.xyz -lebomashilo.co.za +zinhice.shop +zxvbcrt.ug From 0dc91fdaceba981499582ac0e80563ae01470ce5 Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 18 Sep 2024 19:39:15 +0000 Subject: [PATCH 049/142] Hierarchical sorted the lists --- add-wildcard-domain | 254 ++++++++++++++++++++++---------------------- 1 file changed, 127 insertions(+), 127 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index e08b0c9..7064d53 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,185 +1,185 @@ -404024.xyz +dubai-never-sleep.agency +wasabiwallet.app abbotsleigh.nsw.edu.au -abcmueblesbogota.com -ajstelecom.com.mx +rbx.bar albapietra.com.br +brunotasso.com.br +carnesboinobre.com.br +reluzformaturas.com.br +sbic.com.br +quatro-casino.ca +theaerie.ca +ergoterapiacaribu.ch +benyex.cl +squad.cl +beastlucyspin.click +beastsrandompack.click +besatsrandompacks.click +sxlph.club +kmspi.co +abcmueblesbogota.com amarveergroup.com -anjpvv.top applesforfred.com -apsehick.date avast-antivirus.com azezieldraconous.com -badhabits.ug balneariodelugo.com -beastlucyspin.click -beastsrandompack.click -benyex.cl -bersowir.org -besatsrandompacks.click -bitflyer-ja.free.nf bkengineersindia.com -bkskhcil.top -bratiop.ru -brunotasso.com.br cantabriaeventos.com -carnesboinobre.com.br -cbcaps.shop -ccm.net -check-time.ru cloudslimit.com -com-1.xyz -commodityprocess.top communitybrowserpowered.com -confession-best.ru craigbrimm.com -crypto-wave.net -crypto-wave.store -crypto-wave.top cutepoochstore.com dailywebstats.com -darnroughonline.top -darntoughfactory.shop -darntoughonline-us.shop -darntoughonline.shop -darntoughsales.shop -descargarkmspico.org -dgkhj.ru -download-binance.online -dubai-never-sleep.agency ebeyez.com englishplusmore.com -ergoterapiacaribu.ch -estimation-best.ru fadpakke.com -farpetor.shop -fjwamneg.top -flameshamer.shop flyairprestige.com foreverfarley.com fsqaj.com -geriguna.shop -gerlia.shop getkmspico.com -gloomcutter.shop -grike.shop -gunigunde.shop -haelma.shop -havenhills.za.com -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -hoster-test.ru huberwills.com -hubvera.ac.ug -iankian.shop ijconnects.com -intrinsicisle.za.com -ironturner.shop iwan2travel.com jestertunes.com -karimgouss.ug -kloisa.shop -kmsauto.info -kmsofficial.org -kmspi.co kmspico-oficial.com -kmspico.guru -kmspico.io kmspicoofficial.com -lastimaners.ug -lebomashilo.co.za -leopolfa.shop -liferacer.shop linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -lqnfezg.xyz -malayska.ug -marda.shop -marksidfgs.ug -medlafire.net -mhktricks.org michaelconstantinebhanos.com -mistitis.ug -nico.sa nicolascoolman.com -nicoslag.ru officialactivate.com officialkmspico.com -officialkmspico.info -online-personality.ru -opesjk.ug -opsdjs.ug -paipaisdvzxc.ru -partaususd.ru -pastratas.ac.ug pescacancun.com -phsw.site -playwell.ug premium-acc-payment.com probacons.com puroligert.com -qd34gf23ewrfsd1233.ru -quatro-casino.ca -qwertasd.ru -qwerty12346.ru -race2zerogolf.za.com -rbx.bar reltio-apps.com -reluzformaturas.com.br -reputation-best.ru -rnws.link -robyoc.online safecartusa.com -sbic.com.br simplylovingproducts.com -sitefind.top skimswanp.com -sosvirus.net southerninsurs.com -squad.cl steamcommumitry.com steamcommumtiy.com -steamcommunity.com.es stecmcommunijty.com -sxlph.club -sxlph.site -technowide.com.tr -the-cartel.shop -theaerie.ca -timebound.ug -timecheck.ug -timekeeper.ug -tothedigital.shop toughknifes.com -triathlethe.ug -tuskslacx.ug -ucnlkw.cyou utpkz.com vipbargainhub.com vonderlee.com vpdamai.com -warcracker.shop -wasabiwallet.app -wasabiwallet.eu -wasabiwallet.sh -wasabiwallet.uk welkusters.com -wellplayed.ug westernautomobileassembly.com -windowsactivator.org -wisbechguide.uk -wordbracer.shop -wordmover.shop -wordstaker.shop workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com yanisac.com -yildirim-firsati.store -yildirim-firsati.xyz +havenhills.za.com +intrinsicisle.za.com +race2zerogolf.za.com +ucnlkw.cyou +apsehick.date +steamcommunity.com.es +wasabiwallet.eu +kmspico.guru +kmsauto.info +officialkmspico.info +kmspico.io +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +ccm.net +crypto-wave.net +medlafire.net +sosvirus.net +bitflyer-ja.free.nf +download-binance.online +robyoc.online +bersowir.org +descargarkmspico.org +kmsofficial.org +mhktricks.org +windowsactivator.org +bratiop.ru +check-time.ru +confession-best.ru +dgkhj.ru +estimation-best.ru +hoster-test.ru +nicoslag.ru +online-personality.ru +paipaisdvzxc.ru +partaususd.ru +qd34gf23ewrfsd1233.ru +qwertasd.ru +qwerty12346.ru +reputation-best.ru +nico.sa +littleswanaircon.com.sg +wasabiwallet.sh +cbcaps.shop +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +farpetor.shop +flameshamer.shop +geriguna.shop +gerlia.shop +gloomcutter.shop +grike.shop +gunigunde.shop +haelma.shop +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +iankian.shop +ironturner.shop +kloisa.shop +leopolfa.shop +liferacer.shop +marda.shop +the-cartel.shop +tothedigital.shop +warcracker.shop +wordbracer.shop +wordmover.shop +wordstaker.shop zinhice.shop +phsw.site +sxlph.site +crypto-wave.store +yildirim-firsati.store +anjpvv.top +bkskhcil.top +commodityprocess.top +crypto-wave.top +darnroughonline.top +fjwamneg.top +sitefind.top +technowide.com.tr +hubvera.ac.ug +pastratas.ac.ug +badhabits.ug +karimgouss.ug +lastimaners.ug +malayska.ug +marksidfgs.ug +mistitis.ug +opesjk.ug +opsdjs.ug +playwell.ug +timebound.ug +timecheck.ug +timekeeper.ug +triathlethe.ug +tuskslacx.ug +wellplayed.ug zxvbcrt.ug +wasabiwallet.uk +wisbechguide.uk +404024.xyz +com-1.xyz +lqnfezg.xyz +yildirim-firsati.xyz +lebomashilo.co.za From c1ae5e27be48359f6b37acfa433cf81448c6fdcc Mon Sep 17 00:00:00 2001 From: vincentayorinde Date: Sun, 22 Sep 2024 20:19:56 +0100 Subject: [PATCH 050/142] add bitnobweb-app.surge.sh to add-domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 1e768cc..8fd2139 100644 --- a/add-domain +++ b/add-domain @@ -759,3 +759,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +bitnobweb-app.surge.sh From 036dedba348fb534090b5728d1db229b992075a2 Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 23 Sep 2024 15:52:21 +0000 Subject: [PATCH 051/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 8fd2139..e4c5289 100644 --- a/add-domain +++ b/add-domain @@ -724,6 +724,7 @@ verify-gosuslugi.ru vgosuslugi.ru wgosuslugi.ru www-gos-uslugi.ru +bitnobweb-app.surge.sh gosuslugi.shop hellothere.shop sellskin.shop @@ -759,4 +760,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -bitnobweb-app.surge.sh From fb0a506986d2eb49dc26d2e9855a6e4bda6d8eed Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 26 Sep 2024 13:05:39 -0400 Subject: [PATCH 052/142] Update add-wildcard-domain add amazonhop[.]co to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 7064d53..3e19516 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -16,6 +16,7 @@ beastlucyspin.click beastsrandompack.click besatsrandompacks.click sxlph.club +amazonhop.co kmspi.co abcmueblesbogota.com amarveergroup.com From bb640dbd1fad12ef5b7303ae1b61bede92e1fbfd Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 26 Sep 2024 13:15:32 -0400 Subject: [PATCH 053/142] Update add-wildcard-domain add draschool[.]org to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 7064d53..d957956 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -96,6 +96,7 @@ download-binance.online robyoc.online bersowir.org descargarkmspico.org +draschool.org kmsofficial.org mhktricks.org windowsactivator.org From ed44479d8452bd934178c01688943df2a6cdba33 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Fri, 27 Sep 2024 23:00:53 +0200 Subject: [PATCH 054/142] amazonhop.co Fix https://github.com/mypdns/matrix/issues/1153 Rel https://github.com/mitchellkrogza/phishing/pull/487 --------- Thanks to Jetbrains, for Sponsoring My Privacy DNS with their Open Source software licenses. Their software helps us develop and maintain My Privacy DNS and other project as they made writing code easier. --- add-wildcard-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 475d71d..d957956 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -16,7 +16,6 @@ beastlucyspin.click beastsrandompack.click besatsrandompacks.click sxlph.club -amazonhop.co kmspi.co abcmueblesbogota.com amarveergroup.com From 5864c05496da0dbcd5f1f8d9b924fb92b2e7c0b2 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 1 Oct 2024 11:51:30 -0400 Subject: [PATCH 055/142] add blueevolution[.]it to wildcard blocklist --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d957956..810011c 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -83,6 +83,7 @@ kmspico.guru kmsauto.info officialkmspico.info kmspico.io +blueevolution.it linkr.it llcn.link rnws.link From 8a016b435c087a2a2a00064d9ecb6050fddf62a1 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 3 Oct 2024 08:10:46 -0400 Subject: [PATCH 056/142] add diezestrellas[.]com to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 810011c..54d0ad8 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -30,6 +30,7 @@ communitybrowserpowered.com craigbrimm.com cutepoochstore.com dailywebstats.com +diezestrellas.com ebeyez.com englishplusmore.com fadpakke.com From 37470ae566d08529597ada3566cab5b9a6d7a7f6 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 5 Oct 2024 12:00:31 -0400 Subject: [PATCH 057/142] add kidsacademyprayagraj[.]com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 54d0ad8..441e84f 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -42,6 +42,7 @@ huberwills.com ijconnects.com iwan2travel.com jestertunes.com +kidsacademyprayagraj.com kmspico-oficial.com kmspicoofficial.com linkedinin.com From 6bc7ad557eccf52c90e504429813d99ac9c3d473 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 8 Oct 2024 18:43:03 -0400 Subject: [PATCH 058/142] add moneybadgers tds domains to add-wildcard-domain --- add-wildcard-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 441e84f..a01bfa5 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -102,6 +102,7 @@ descargarkmspico.org draschool.org kmsofficial.org mhktricks.org +threatdetect.org windowsactivator.org bratiop.ru check-time.ru @@ -184,6 +185,7 @@ wasabiwallet.uk wisbechguide.uk 404024.xyz com-1.xyz +himosteg.xyz lqnfezg.xyz yildirim-firsati.xyz lebomashilo.co.za From 0e23f209d868359d3cb21be18c81a9f3663594e0 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 8 Oct 2024 18:56:41 -0400 Subject: [PATCH 059/142] add additional moneybadgers domains to add-wildcard-domain --- add-wildcard-domain | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index a01bfa5..85e4f06 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -56,6 +56,7 @@ probacons.com puroligert.com reltio-apps.com safecartusa.com +securoscans.com simplylovingproducts.com skimswanp.com southerninsurs.com @@ -104,6 +105,7 @@ kmsofficial.org mhktricks.org threatdetect.org windowsactivator.org +updatenow.pro bratiop.ru check-time.ru confession-best.ru @@ -184,8 +186,12 @@ zxvbcrt.ug wasabiwallet.uk wisbechguide.uk 404024.xyz +bowigarp.xyz com-1.xyz +gomlaner.xyz himosteg.xyz +hirgoles.xyz +kositanh.xyz lqnfezg.xyz yildirim-firsati.xyz lebomashilo.co.za From 17f2b2f5c82812fa5c1c765822b4732d78524361 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 9 Oct 2024 10:20:13 -0400 Subject: [PATCH 060/142] add additional moneybadger$ domains to add-wildcard-domain --- add-wildcard-domain | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 85e4f06..067cb7b 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -82,6 +82,9 @@ ucnlkw.cyou apsehick.date steamcommunity.com.es wasabiwallet.eu +avgs.fun +avastos.fun +daleesh.fun kmspico.guru kmsauto.info officialkmspico.info @@ -188,10 +191,16 @@ wisbechguide.uk 404024.xyz bowigarp.xyz com-1.xyz +dolaxabof.xyz +firengav.xyz gomlaner.xyz himosteg.xyz hirgoles.xyz +hugabedis.xyz +kalestin.xyz kositanh.xyz lqnfezg.xyz +mabikorst.xyz +ragimost.xyz yildirim-firsati.xyz lebomashilo.co.za From 6d06297101173cf53631fff0b9e7d07dab537bf8 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 9 Oct 2024 10:55:41 -0400 Subject: [PATCH 061/142] sort wildcard list --- add-wildcard-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 067cb7b..196fcef 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -82,8 +82,8 @@ ucnlkw.cyou apsehick.date steamcommunity.com.es wasabiwallet.eu -avgs.fun avastos.fun +avgs.fun daleesh.fun kmspico.guru kmsauto.info From fdfd9647f71f578e98a108729873a908b8a0ab48 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 9 Oct 2024 12:24:50 -0400 Subject: [PATCH 062/142] add additional moneybadger$ domains to add-wildcard-domain --- add-wildcard-domain | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 196fcef..1cfa0cf 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -88,6 +88,7 @@ daleesh.fun kmspico.guru kmsauto.info officialkmspico.info +worldwidewebshield.info kmspico.io blueevolution.it linkr.it @@ -189,6 +190,7 @@ zxvbcrt.ug wasabiwallet.uk wisbechguide.uk 404024.xyz +alhocans.xyz bowigarp.xyz com-1.xyz dolaxabof.xyz @@ -198,9 +200,13 @@ himosteg.xyz hirgoles.xyz hugabedis.xyz kalestin.xyz +koruns.xyz kositanh.xyz +kusilong.xyz +ilertonp.xyz lqnfezg.xyz mabikorst.xyz +neburfaw.xyz ragimost.xyz yildirim-firsati.xyz lebomashilo.co.za From 396835345639e74d33f048812a9dfe3a6839635b Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 9 Oct 2024 12:26:21 -0400 Subject: [PATCH 063/142] sort wildcard list --- add-wildcard-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 1cfa0cf..20dfad6 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -199,11 +199,11 @@ gomlaner.xyz himosteg.xyz hirgoles.xyz hugabedis.xyz +ilertonp.xyz kalestin.xyz koruns.xyz kositanh.xyz kusilong.xyz -ilertonp.xyz lqnfezg.xyz mabikorst.xyz neburfaw.xyz From 6197e7aaf167cc257c7b66f3e914f54de843c512 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 9 Oct 2024 14:04:10 -0400 Subject: [PATCH 064/142] add com-trackahc.top to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 20dfad6..d1e2b07 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -163,6 +163,7 @@ crypto-wave.store yildirim-firsati.store anjpvv.top bkskhcil.top +com-trackahc.top commodityprocess.top crypto-wave.top darnroughonline.top From 23bb095d2e55f5e6e39a239b5cf1fe6fe0270dba Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 10 Oct 2024 09:55:46 -0400 Subject: [PATCH 065/142] add floridavacationrentalsbyowners[.]com to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index d1e2b07..8c5bfde 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -34,6 +34,7 @@ diezestrellas.com ebeyez.com englishplusmore.com fadpakke.com +floridavacationrentalsbyowners.com flyairprestige.com foreverfarley.com fsqaj.com From 7fc4425c906a9f7f1b4a0911cbca7f6145bebf83 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 11 Oct 2024 11:12:42 -0400 Subject: [PATCH 066/142] add amazonaiy[.]co to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8c5bfde..37ec6ff 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -16,6 +16,7 @@ beastlucyspin.click beastsrandompack.click besatsrandompacks.click sxlph.club +amazonaiy.co kmspi.co abcmueblesbogota.com amarveergroup.com From 14ea842563a580d4a5a96e22c2197f7a35e776df Mon Sep 17 00:00:00 2001 From: Samantha Fry Date: Tue, 15 Oct 2024 20:46:28 +0100 Subject: [PATCH 067/142] Add sncamcoonmmunumnlty.com --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index e4c5289..a2b3458 100644 --- a/add-domain +++ b/add-domain @@ -760,3 +760,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +sncamcoonmmumnlty.com From c67421ecdfb97562399daaa242fa83859c298130 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Joachim=20R=C3=BCtter?= Date: Wed, 16 Oct 2024 13:08:33 +0200 Subject: [PATCH 068/142] Add DHL phish --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index e4c5289..57826ae 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,5 @@ +25a40529.pws-assistenz.de +25a40529.classen-metallbau.com gosuslugi.agency coronavirus.app www.coronavirus.app From f47a721b2d209c03e7de13a12fcc5dc62529e7e7 Mon Sep 17 00:00:00 2001 From: spirillen <44526987+spirillen@users.noreply.github.com> Date: Wed, 16 Oct 2024 12:04:51 +0000 Subject: [PATCH 069/142] Removed redirecting domain This record are just redirecting to 25a40529.pws-assistenz.de|phishing --- add-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-domain b/add-domain index 57826ae..359c6fb 100644 --- a/add-domain +++ b/add-domain @@ -1,5 +1,4 @@ 25a40529.pws-assistenz.de -25a40529.classen-metallbau.com gosuslugi.agency coronavirus.app www.coronavirus.app From 135d90f51c1d514777ef703445d06efc30cc5150 Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 16 Oct 2024 12:06:56 +0000 Subject: [PATCH 070/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 359c6fb..0698318 100644 --- a/add-domain +++ b/add-domain @@ -1,4 +1,3 @@ -25a40529.pws-assistenz.de gosuslugi.agency coronavirus.app www.coronavirus.app @@ -290,6 +289,7 @@ gosuslugi.contact fmoviesto.cyou wiflix.cyou coronasushi.com.de +25a40529.pws-assistenz.de 1-67c.pages.dev 2-3a2.pages.dev 24715454098-reviewpages.pages.dev From 23363f40d5ff4bd7940e85117af4ae6ad766b524 Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 16 Oct 2024 12:12:39 +0000 Subject: [PATCH 071/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 606bec0..5e21430 100644 --- a/add-domain +++ b/add-domain @@ -162,6 +162,7 @@ wiadomoscionet.pythonanywhere.com reclaim-bittrex.com rinanft.com rxcovid.com +sncamcoonmmumnlty.com steamcommunitc.com steamcomnnulty.com steamconmnunitiy.com @@ -761,4 +762,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -sncamcoonmmumnlty.com From a0fcd4a0ccb5ef2898003f5c8ec36de13eb726f0 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Sun, 20 Oct 2024 13:35:14 +0200 Subject: [PATCH 072/142] New .gitignore Added the ability to share common setting between IDE --------- Thanks to Jetbrains, for Sponsoring My Privacy DNS with their Open Source software licenses. Their software helps us develop and maintain My Privacy DNS and other project as they made writing code easier. --- .gitignore | 94 ++++++++++++++++++++++++++++- .idea/.gitignore | 10 +++ .idea/misc.xml | 9 +++ .idea/modules.xml | 8 +++ .idea/phishing.iml | 9 +++ .idea/vcs.xml | 11 ++++ .pyfunceble/.pyfunceble-env.example | 12 ++++ 7 files changed, 152 insertions(+), 1 deletion(-) create mode 100644 .idea/.gitignore create mode 100644 .idea/misc.xml create mode 100644 .idea/modules.xml create mode 100644 .idea/phishing.iml create mode 100644 .idea/vcs.xml create mode 100644 .pyfunceble/.pyfunceble-env.example diff --git a/.gitignore b/.gitignore index 416d6b5..1112682 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,94 @@ .pyfunceble/.pyfunceble-env -.idea/** + +# VSCode (Visual Basic Code) +**.code-workspace +no-git/** +!.vscode/settings.json +!.vscode/tasks.json +!.vscode/launch.json +!.vscode/extensions.json +!.vscode/*.code-snippets + +# Local History for Visual Studio Code +.history/ + +# Built Visual Studio Code Extensions +*.vsix + +# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider +# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839 + +# User-specific stuff +.idea/**/workspace.xml +.idea/**/tasks.xml +.idea/**/usage.statistics.xml +.idea/**/dictionaries +.idea/**/shelf + +# AWS User-specific +.idea/**/aws.xml + +# Generated files +.idea/**/contentModel.xml + +# Sensitive or high-churn files +.idea/**/dataSources/ +.idea/**/dataSources.ids +.idea/**/dataSources.local.xml +.idea/**/sqlDataSources.xml +.idea/**/dynamic.xml +.idea/**/uiDesigner.xml +.idea/**/dbnavigator.xml + +# Gradle +.idea/**/gradle.xml +.idea/**/libraries + +# Gradle and Maven with auto-import +# When using Gradle or Maven with auto-import, you should exclude module files, +# since they will be recreated, and may cause churn. Uncomment if using +# auto-import. +# .idea/artifacts +# .idea/compiler.xml +# .idea/jarRepositories.xml +# .idea/modules.xml +# .idea/*.iml +# .idea/modules +# *.iml +# *.ipr + +# CMake +cmake-build-*/ + +# Mongo Explorer plugin +.idea/**/mongoSettings.xml + +# File-based project format +*.iws + +# IntelliJ +out/ + +# mpeltonen/sbt-idea plugin +.idea_modules/ + +# JIRA plugin +atlassian-ide-plugin.xml + +# Cursive Clojure plugin +.idea/replstate.xml + +# SonarLint plugin +.idea/sonarlint/ + +# Crashlytics plugin (for Android Studio and IntelliJ) +com_crashlytics_export_strings.xml +crashlytics.properties +crashlytics-build.properties +fabric.properties + +# Editor-based Rest Client +.idea/httpRequests + +# Android studio 3.1+ serialized cache file +.idea/caches/build_file_checksums.ser diff --git a/.idea/.gitignore b/.idea/.gitignore new file mode 100644 index 0000000..0a8642f --- /dev/null +++ b/.idea/.gitignore @@ -0,0 +1,10 @@ +# Default ignored files +/shelf/ +/workspace.xml +# Editor-based HTTP Client requests +/httpRequests/ +# Datasource local storage ignored files +/dataSources/ +/dataSources.local.xml +# Zeppelin ignored files +/ZeppelinRemoteNotebooks/ diff --git a/.idea/misc.xml b/.idea/misc.xml new file mode 100644 index 0000000..1dbc43b --- /dev/null +++ b/.idea/misc.xml @@ -0,0 +1,9 @@ + + + + + + + + + \ No newline at end of file diff --git a/.idea/modules.xml b/.idea/modules.xml new file mode 100644 index 0000000..0ec1779 --- /dev/null +++ b/.idea/modules.xml @@ -0,0 +1,8 @@ + + + + + + + + \ No newline at end of file diff --git a/.idea/phishing.iml b/.idea/phishing.iml new file mode 100644 index 0000000..d6ebd48 --- /dev/null +++ b/.idea/phishing.iml @@ -0,0 +1,9 @@ + + + + + + + + + \ No newline at end of file diff --git a/.idea/vcs.xml b/.idea/vcs.xml new file mode 100644 index 0000000..44611c8 --- /dev/null +++ b/.idea/vcs.xml @@ -0,0 +1,11 @@ + + + + + + + + + + + \ No newline at end of file diff --git a/.pyfunceble/.pyfunceble-env.example b/.pyfunceble/.pyfunceble-env.example new file mode 100644 index 0000000..3073fe4 --- /dev/null +++ b/.pyfunceble/.pyfunceble-env.example @@ -0,0 +1,12 @@ +# Copy this file as .pyfunceble/.pyfunceble-env and fill out the fields +PYFUNCEBLE_DB_CHARSET=utf8mb4 +PYFUNCEBLE_DB_HOST= +PYFUNCEBLE_DB_NAME= +PYFUNCEBLE_DB_PASSWORD='' +PYFUNCEBLE_DB_PORT= +PYFUNCEBLE_DB_USERNAME= +PYFUNCEBLE_OUTPUT_LOCATION= +PYFUNCEBLE_PLATFORM_API_URL=https://api.beta.dead-hosts.com +PYFUNCEBLE_PLATFORM_API_TOKEN="" +PYFUNCEBLE_AUTO_CONFIGURATION=yes +PYFUNCEBLE_PLATFORM_CHECKER_EXCLUDE= From 612e235987353a98f95069ca8323e7c8a8877cad Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Tue, 22 Oct 2024 16:52:13 +0200 Subject: [PATCH 073/142] Add domains & IPs --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 3 ++- add-domain | 3 +++ 5 files changed, 11 insertions(+), 4 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 848cbea..b21061d 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -14,4 +14,5 @@ 32.120.168.207.45 32.154.197.137.79 32.223.85.215.91 -32.89.121.48.45 \ No newline at end of file +32.89.121.48.45 +32.166.121.148.45 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 43ffda8..25872b8 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -15,4 +15,5 @@ 45.207.168.120/32 79.137.197.154/32 91.215.85.223/32 -45.148.121.89/32 \ No newline at end of file +45.148.121.89/32 +45.148.121.166/32 \ No newline at end of file diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index ddc20c2..e3130a9 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -13,4 +13,5 @@ 120.168.207.45 154.197.137.79 91.215.85.223 -89.121.148.45 \ No newline at end of file +89.121.148.45 +166.121.148.45 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index 56b6ce9..6e8a07d 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -14,4 +14,5 @@ 5.182.210.39 79.137.197.154 91.215.85.223 -45.148.121.89 \ No newline at end of file +45.148.121.89 +45.148.121.166 \ No newline at end of file diff --git a/add-domain b/add-domain index 5e21430..b7fcc8c 100644 --- a/add-domain +++ b/add-domain @@ -762,3 +762,6 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +wvvw-store-ankama.com +wvwdofus.com +dcfuspourlesnoobs.com \ No newline at end of file From 8081654c32cc8f4583e1910ec0b4024911477d16 Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 23 Oct 2024 00:13:04 +0000 Subject: [PATCH 074/142] Hierarchical sorted the lists --- add-domain | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/add-domain b/add-domain index b7fcc8c..0763acd 100644 --- a/add-domain +++ b/add-domain @@ -80,6 +80,7 @@ covid19proof.com covid19wny.com covidquarantine.com dashenopticians.com +dcfuspourlesnoobs.com detiktotocakep.com sgp1.digitaloceanspaces.com directmessageviolation.com @@ -280,6 +281,8 @@ reagan-webmail-102298.weeblysite.com wsetransport.com wvvw-ankama.com wvvw-dofus.com +wvvw-store-ankama.com +wvwdofus.com www-dofus.com www-dofus-touch.com www-rsblox.com @@ -762,6 +765,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -wvvw-store-ankama.com -wvwdofus.com -dcfuspourlesnoobs.com \ No newline at end of file From 0a0c19a6b80da53c62a0767bf3a8edb60d469315 Mon Sep 17 00:00:00 2001 From: Samantha Fry Date: Sun, 27 Oct 2024 16:27:59 +0000 Subject: [PATCH 075/142] Add sreannecommnumnlty.com --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 0763acd..760c317 100644 --- a/add-domain +++ b/add-domain @@ -765,3 +765,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +sreannecommnumnlty.com From 35977298d3e6f9c5136c4512c7e75a339b228eca Mon Sep 17 00:00:00 2001 From: spirillen Date: Sun, 27 Oct 2024 18:20:44 +0000 Subject: [PATCH 076/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 760c317..0ae8759 100644 --- a/add-domain +++ b/add-domain @@ -164,6 +164,7 @@ reclaim-bittrex.com rinanft.com rxcovid.com sncamcoonmmumnlty.com +sreannecommnumnlty.com steamcommunitc.com steamcomnnulty.com steamconmnunitiy.com @@ -765,4 +766,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -sreannecommnumnlty.com From e7e51d242fc4ffd2d3b831aadea96dbb94615d6e Mon Sep 17 00:00:00 2001 From: Kalinga Athulathmudali Date: Mon, 28 Oct 2024 23:53:03 +0530 Subject: [PATCH 077/142] Update add-domain sampatnvlshwa.com is a phishing domain link sampatnvlshwa.com/survey trying to impersonate the actual domain www.sampathvishwa.com - samapth bank's internet banking portal --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 0ae8759..4784f82 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,4 @@ +sampatnvlshwa.com gosuslugi.agency coronavirus.app www.coronavirus.app From 9538b9343dc7f3068003d79e41d97fbfd5b384a4 Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 28 Oct 2024 19:19:17 +0000 Subject: [PATCH 078/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 4784f82..6da9117 100644 --- a/add-domain +++ b/add-domain @@ -1,4 +1,3 @@ -sampatnvlshwa.com gosuslugi.agency coronavirus.app www.coronavirus.app @@ -164,6 +163,7 @@ wiadomoscionet.pythonanywhere.com reclaim-bittrex.com rinanft.com rxcovid.com +sampatnvlshwa.com sncamcoonmmumnlty.com sreannecommnumnlty.com steamcommunitc.com From 1dd867646aef70c4b50eeea32eacb3a1baeb0f4d Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Wed, 30 Oct 2024 11:06:58 +0100 Subject: [PATCH 079/142] Add phishing domain --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 6da9117..b95d326 100644 --- a/add-domain +++ b/add-domain @@ -767,3 +767,4 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +wvwv-ankama.com \ No newline at end of file From 65bfb69b8eec44bef63cae1d1eaab5d3f8fe5c38 Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 30 Oct 2024 11:02:30 +0000 Subject: [PATCH 080/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index b95d326..b2a4399 100644 --- a/add-domain +++ b/add-domain @@ -285,6 +285,7 @@ wvvw-ankama.com wvvw-dofus.com wvvw-store-ankama.com wvwdofus.com +wvwv-ankama.com www-dofus.com www-dofus-touch.com www-rsblox.com @@ -767,4 +768,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -wvwv-ankama.com \ No newline at end of file From ecea36d679052523b16f693542a98b9400f0ab4d Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 1 Nov 2024 15:19:54 -0400 Subject: [PATCH 081/142] aff fvfad[.]top to add-wildcard-domain USPS smishing --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8c5bfde..1f642a9 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -169,6 +169,7 @@ commodityprocess.top crypto-wave.top darnroughonline.top fjwamneg.top +fvfad.top sitefind.top technowide.com.tr hubvera.ac.ug From 1b8704b748fab38b526425264472d08743d33b9e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 1 Nov 2024 16:19:53 -0400 Subject: [PATCH 082/142] add additional USPS lures to add-wildcard-domain USPS delivery failure lures hosted at 198.11.173.244 --- add-wildcard-domain | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 1f642a9..32f7769 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -194,10 +194,14 @@ wasabiwallet.uk wisbechguide.uk 404024.xyz alhocans.xyz +ausjcls.xyz bowigarp.xyz com-1.xyz dolaxabof.xyz firengav.xyz +gdijknd.xyz +gliujoi.xyz +glkjliim.xyz gomlaner.xyz himosteg.xyz hirgoles.xyz @@ -207,6 +211,7 @@ kalestin.xyz koruns.xyz kositanh.xyz kusilong.xyz +kusjxka.xyz lqnfezg.xyz mabikorst.xyz neburfaw.xyz From 8c2db9f3380170ced2a61d5afaca43359ed4eaf8 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 1 Nov 2024 16:35:20 -0400 Subject: [PATCH 083/142] Add additional USPS lures to add-wildcard-domain more USPS delivery failure lure domains hosted at 198.11.173.244 --- add-wildcard-domain | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 32f7769..4ede59d 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -171,6 +171,9 @@ darnroughonline.top fjwamneg.top fvfad.top sitefind.top +toolszj.top +toolszw.top +toolszt.top technowide.com.tr hubvera.ac.ug pastratas.ac.ug @@ -197,6 +200,7 @@ alhocans.xyz ausjcls.xyz bowigarp.xyz com-1.xyz +dfsfger.xyz dolaxabof.xyz firengav.xyz gdijknd.xyz @@ -205,9 +209,13 @@ glkjliim.xyz gomlaner.xyz himosteg.xyz hirgoles.xyz +hjhskih.xyz hugabedis.xyz ilertonp.xyz +jdfhgks.xyz kalestin.xyz +kidhnx.xyz +kiiujsh.xyz koruns.xyz kositanh.xyz kusilong.xyz @@ -216,5 +224,13 @@ lqnfezg.xyz mabikorst.xyz neburfaw.xyz ragimost.xyz +sldkhfw.xyz +ushfqu.xyz +ushfym.xyz +ushwu.xyz +ussuie.xyz +uswsin.xyz +uswuys.xyz +uswuzm.xyz yildirim-firsati.xyz lebomashilo.co.za From 63bc1bd81c6429a9704e0a7037428d73d8e1eef7 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 1 Nov 2024 16:37:50 -0400 Subject: [PATCH 084/142] sort wildcard domains --- add-wildcard-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 4ede59d..7903d78 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -172,8 +172,8 @@ fjwamneg.top fvfad.top sitefind.top toolszj.top -toolszw.top toolszt.top +toolszw.top technowide.com.tr hubvera.ac.ug pastratas.ac.ug From efe819b40aecd2de9521f356739830b8b144ded3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Glauber=20Magalh=C3=A3es?= Date: Tue, 5 Nov 2024 13:49:58 -0300 Subject: [PATCH 085/142] =?UTF-8?q?add=20=C9=A1ithub.com?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index b2a4399..0746028 100644 --- a/add-domain +++ b/add-domain @@ -768,3 +768,5 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +gіthսᖯ.com +ɡithub.com From 1ee4aef76c10daa2a023a18774ccd35589220d6e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Glauber=20Magalh=C3=A3es?= Date: Tue, 5 Nov 2024 15:35:28 -0300 Subject: [PATCH 086/142] add extra homograph domains being used for phishing --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index 0746028..1bb7e41 100644 --- a/add-domain +++ b/add-domain @@ -770,3 +770,5 @@ wiflix.yachts coronavirus.zone gіthսᖯ.com ɡithub.com +ɡooɡɩe.com +ɡooɡle.com From 036a9bbb1bff02a4b8b2852f121d3224669f71a7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Glauber=20Magalh=C3=A3es?= Date: Tue, 5 Nov 2024 15:39:16 -0300 Subject: [PATCH 087/142] =?UTF-8?q?added=20gmai=C9=A9.com=20homograph=20do?= =?UTF-8?q?main?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index 1bb7e41..40f888c 100644 --- a/add-domain +++ b/add-domain @@ -772,3 +772,4 @@ gіthսᖯ.com ɡithub.com ɡooɡɩe.com ɡooɡle.com +gmaiɩ.com From a69928066b3947bbf5c6d3204fec7cdc39d7e1e5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Glauber=20Magalh=C3=A3es?= Date: Tue, 5 Nov 2024 15:42:07 -0300 Subject: [PATCH 088/142] remove unregistered domain --- add-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-domain b/add-domain index 40f888c..b16007c 100644 --- a/add-domain +++ b/add-domain @@ -768,7 +768,6 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -gіthսᖯ.com ɡithub.com ɡooɡɩe.com ɡooɡle.com From b80cb620688a4c89ec557e42beb0eced04c7c8be Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Glauber=20Magalh=C3=A3es?= Date: Tue, 5 Nov 2024 15:45:27 -0300 Subject: [PATCH 089/142] add domain similar to paypal.com --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index b16007c..b835407 100644 --- a/add-domain +++ b/add-domain @@ -772,3 +772,4 @@ coronavirus.zone ɡooɡɩe.com ɡooɡle.com gmaiɩ.com +раураɩ.com From 2666f6feb11f051851b8cf6142d88e375fab7e05 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Glauber=20Magalh=C3=A3es?= Date: Tue, 5 Nov 2024 15:48:00 -0300 Subject: [PATCH 090/142] =?UTF-8?q?removing=20=D1=80=D0=B0=D1=83=D1=80?= =?UTF-8?q?=D0=B0l.com=20as=20it=20was=20not=20registered,=20though=20it?= =?UTF-8?q?=20is=20dangerous=20and=20can=20be=20registered?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- add-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-domain b/add-domain index b835407..b16007c 100644 --- a/add-domain +++ b/add-domain @@ -772,4 +772,3 @@ coronavirus.zone ɡooɡɩe.com ɡooɡle.com gmaiɩ.com -раураɩ.com From d08561f012d153daefe7cfe18cba3d12069990f2 Mon Sep 17 00:00:00 2001 From: Glauber Date: Tue, 5 Nov 2024 22:43:39 -0300 Subject: [PATCH 091/142] Update add-domain --- add-domain | 1 - 1 file changed, 1 deletion(-) diff --git a/add-domain b/add-domain index b16007c..964a392 100644 --- a/add-domain +++ b/add-domain @@ -770,5 +770,4 @@ wiflix.yachts coronavirus.zone ɡithub.com ɡooɡɩe.com -ɡooɡle.com gmaiɩ.com From 1cb73446b0f7b8432419ddf215d9192937e3372f Mon Sep 17 00:00:00 2001 From: spirillen <44526987+spirillen@users.noreply.github.com> Date: Wed, 6 Nov 2024 04:48:59 +0000 Subject: [PATCH 092/142] Changed records to punycode --- add-domain | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/add-domain b/add-domain index 964a392..89a483c 100644 --- a/add-domain +++ b/add-domain @@ -768,6 +768,6 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -ɡithub.com -ɡooɡɩe.com -gmaiɩ.com +xn--ooe-8tbc2c.com +xn--gmai-88b.com +xn--ithub-qmc.com From aa17dd69928826067ca6054e65a66b97eef2b3c2 Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 6 Nov 2024 04:49:24 +0000 Subject: [PATCH 093/142] Hierarchical sorted the lists --- add-domain | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/add-domain b/add-domain index 89a483c..64434bc 100644 --- a/add-domain +++ b/add-domain @@ -290,6 +290,9 @@ www-dofus.com www-dofus-touch.com www-rsblox.com wwwdofuspourlesnoobs.com +xn--gmai-88b.com +xn--ithub-qmc.com +xn--ooe-8tbc2c.com xn--www-ofus-touch-j1b.com cpanel01wh.bkk1.cloud.z.com gosuslugi.contact @@ -768,6 +771,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -xn--ooe-8tbc2c.com -xn--gmai-88b.com -xn--ithub-qmc.com From 898e413469fe2a9494de926615e8ae660118437c Mon Sep 17 00:00:00 2001 From: Tomvivi <162036872+Tomvivi@users.noreply.github.com> Date: Fri, 15 Nov 2024 14:30:05 +0100 Subject: [PATCH 094/142] Add 2 domains --- add-domain | 2 ++ 1 file changed, 2 insertions(+) diff --git a/add-domain b/add-domain index 64434bc..d0e91a9 100644 --- a/add-domain +++ b/add-domain @@ -771,3 +771,5 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone +papychat.com +papycha-quetes.fr \ No newline at end of file From a62ea2bf25c5bfe935c52b708a787b8af2f9e44f Mon Sep 17 00:00:00 2001 From: spirillen Date: Sat, 16 Nov 2024 11:19:49 +0000 Subject: [PATCH 095/142] Hierarchical sorted the lists --- add-domain | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/add-domain b/add-domain index d0e91a9..ae02387 100644 --- a/add-domain +++ b/add-domain @@ -146,6 +146,7 @@ mrbfan.com newvity.com onlinesupportportal.com hu.pokist.otzo.com +papychat.com penlabuseoribute.com preview-domain.com psicmaggiecorona.com @@ -535,6 +536,7 @@ dofuspoulesnoobs.fr dofuspourlenoobs.fr dofuspourlesnoobs.fr dofustouch.fr +papycha-quetes.fr www-papycha.fr zt-za.fr fmoviesto.gg @@ -771,5 +773,3 @@ soclaiemx.xyz wiflix.xyz wiflix.yachts coronavirus.zone -papychat.com -papycha-quetes.fr \ No newline at end of file From 55ef8b8645a5ff3ef1faab4fb9d8aff137ef4d8e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 21 Nov 2024 14:58:10 -0500 Subject: [PATCH 096/142] add amazon smishing host IPs to blocklists --- IP-addr.cidr.in-addr.arpa | 4 +++- IP-addr.cidr.list | 2 ++ IP-addr.in-addr.arpa | 2 ++ IP-addr.list | 2 ++ 4 files changed, 9 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index b21061d..06dcd13 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -1,5 +1,7 @@ # example address # 24.1.2.0.192 # rfc:5737 +32.174.209.171.142 +32.59.97.174.184 32.28.115.81.185 32.188.34.139.235 32.39.210.182.5 @@ -15,4 +17,4 @@ 32.154.197.137.79 32.223.85.215.91 32.89.121.48.45 -32.166.121.148.45 \ No newline at end of file +32.166.121.148.45 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 25872b8..7bae879 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -1,5 +1,7 @@ # example address # 192.0.2.1/24 # rfc:5737 +142.171.209.174/32 +184.174.97.59/32 185.81.115.28/32 20.106.143.112/32 235.139.34.188/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index e3130a9..0b41013 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -1,5 +1,7 @@ # example address # 1.2.0.192 # rfc:5737 +174.209.171.142 +59.97.174.184 28.115.81.185 235.139.34.188 39.210.182.5 diff --git a/IP-addr.list b/IP-addr.list index 6e8a07d..264835a 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -1,5 +1,7 @@ # example address # 192.0.2.1 # rfc:5737 +142.171.209.174 +184.174.97.59 185.80.128.14 188.34.139.235 185.81.115.28 From 573cf5e57db10e6ccc3085029e13b813bdf561b9 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 21 Nov 2024 17:45:31 -0500 Subject: [PATCH 097/142] add yotpo[.]com to add-wildcard-domain domain used for metamask phishing --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index a5b5995..e4c139f 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -77,6 +77,7 @@ workshopsmaker.com workshopstyle.com workshopusers.com yanisac.com +yotpo.com havenhills.za.com intrinsicisle.za.com race2zerogolf.za.com From 5fbacdefc8a9ae810017fba27dd0d77b1a8cbae4 Mon Sep 17 00:00:00 2001 From: Gustavo Veloso Date: Fri, 22 Nov 2024 18:07:14 -0300 Subject: [PATCH 098/142] Update add-domain with Correos Chile phishing Add in the wild phishing attempt targeting Correos de Chile --- add-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-domain b/add-domain index ae02387..6cdd377 100644 --- a/add-domain +++ b/add-domain @@ -1,3 +1,4 @@ +megasnc.com gosuslugi.agency coronavirus.app www.coronavirus.app From b19b97ca19ac97797d3ec73ab95cfd4dee4cdee6 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 22 Nov 2024 18:48:23 -0500 Subject: [PATCH 099/142] add 43.153.71.57 to blocklists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 4 insertions(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 06dcd13..566a5c7 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -5,6 +5,7 @@ 32.28.115.81.185 32.188.34.139.235 32.39.210.182.5 +32.57.71.153.43 32.181.237.156.43 32.32.74.9.45 32.36.74.9.45 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 7bae879..75c0459 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -7,6 +7,7 @@ 235.139.34.188/32 27.83.170.52/32 5.182.210.39/32 +43.153.71.57/32 43.156.237.181/32 45.9.74.32/32 45.9.74.36/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 0b41013..a912f48 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -5,6 +5,7 @@ 28.115.81.185 235.139.34.188 39.210.182.5 +57.71.153.43 181.237.156.43 32.74.9.45 36.74.9.45 diff --git a/IP-addr.list b/IP-addr.list index 264835a..d6fc1c4 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -5,6 +5,7 @@ 185.80.128.14 188.34.139.235 185.81.115.28 +43.153.71.57 43.156.237.181 45.9.74.32 45.9.74.36 From d566ad275c5ead30e117b0e2e579ec93e0c435c9 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 22 Nov 2024 20:12:31 -0500 Subject: [PATCH 100/142] add 192.3.55.217 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 4 insertions(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 566a5c7..3287f25 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -3,6 +3,7 @@ 32.174.209.171.142 32.59.97.174.184 32.28.115.81.185 +32.217.55.3.192 32.188.34.139.235 32.39.210.182.5 32.57.71.153.43 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 75c0459..8628dbe 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -3,6 +3,7 @@ 142.171.209.174/32 184.174.97.59/32 185.81.115.28/32 +192.3.55.217/32 20.106.143.112/32 235.139.34.188/32 27.83.170.52/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index a912f48..cbd69a3 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -4,6 +4,7 @@ 59.97.174.184 28.115.81.185 235.139.34.188 +192.3.55.217 39.210.182.5 57.71.153.43 181.237.156.43 diff --git a/IP-addr.list b/IP-addr.list index d6fc1c4..e273fd7 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -5,6 +5,7 @@ 185.80.128.14 188.34.139.235 185.81.115.28 +192.3.55.217 43.153.71.57 43.156.237.181 45.9.74.32 From cb7493cb0b6b1b4f2e6526e55a8a8d0c293adab5 Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 25 Nov 2024 06:30:21 +0000 Subject: [PATCH 101/142] Hierarchical sorted the lists --- add-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-domain b/add-domain index 6cdd377..b249dda 100644 --- a/add-domain +++ b/add-domain @@ -1,4 +1,3 @@ -megasnc.com gosuslugi.agency coronavirus.app www.coronavirus.app @@ -142,6 +141,7 @@ kuispb.com localcoronavirus.com lovemachina.com mecofficial.com +megasnc.com mr-beastgifts.com mrbfan.com newvity.com From 17d26ba6985469dd3a5cf6fdb8ec0d66c0be6ca3 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Mon, 25 Nov 2024 19:14:05 +0100 Subject: [PATCH 102/142] correosces.top CLoses https://github.com/mitchellkrogza/phishing/issues/514 --------- Thanks to Jetbrains, for Sponsoring My Privacy DNS with their Open Source software licenses. Their software helps us develop and maintain My Privacy DNS and other project as they made writing code easier. --- add-wildcard-domain | 351 ++++++++++++++++++++++---------------------- 1 file changed, 176 insertions(+), 175 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index e4c139f..740ba8c 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,232 +1,207 @@ -dubai-never-sleep.agency -wasabiwallet.app +404024.xyz abbotsleigh.nsw.edu.au -rbx.bar -albapietra.com.br -brunotasso.com.br -carnesboinobre.com.br -reluzformaturas.com.br -sbic.com.br -quatro-casino.ca -theaerie.ca -ergoterapiacaribu.ch -benyex.cl -squad.cl -beastlucyspin.click -beastsrandompack.click -besatsrandompacks.click -sxlph.club -amazonaiy.co -kmspi.co abcmueblesbogota.com +ajstelecom.com.mx +albapietra.com.br +alhocans.xyz amarveergroup.com +amazonaiy.co +anjpvv.top applesforfred.com +apsehick.date +ausjcls.xyz avast-antivirus.com +avastos.fun +avgs.fun azezieldraconous.com +badhabits.ug balneariodelugo.com +beastlucyspin.click +beastsrandompack.click +benyex.cl +bersowir.org +besatsrandompacks.click +bitflyer-ja.free.nf bkengineersindia.com +bkskhcil.top +blueevolution.it +bowigarp.xyz +bratiop.ru +brunotasso.com.br cantabriaeventos.com +carnesboinobre.com.br +cbcaps.shop +ccm.net +check-time.ru cloudslimit.com +com-1.xyz +com-trackahc.top +commodityprocess.top communitybrowserpowered.com +confession-best.ru +correosces.top craigbrimm.com +crypto-wave.net +crypto-wave.store +crypto-wave.top cutepoochstore.com dailywebstats.com +daleesh.fun +darnroughonline.top +darntoughfactory.shop +darntoughonline-us.shop +darntoughonline.shop +darntoughsales.shop +descargarkmspico.org +dfsfger.xyz +dgkhj.ru diezestrellas.com +dolaxabof.xyz +download-binance.online +draschool.org +dubai-never-sleep.agency ebeyez.com englishplusmore.com +ergoterapiacaribu.ch +estimation-best.ru fadpakke.com +farpetor.shop +firengav.xyz +fjwamneg.top +flameshamer.shop floridavacationrentalsbyowners.com flyairprestige.com foreverfarley.com fsqaj.com +fvfad.top +gdijknd.xyz +geriguna.shop +gerlia.shop getkmspico.com +gliujoi.xyz +glkjliim.xyz +gloomcutter.shop +gomlaner.xyz +grike.shop +gunigunde.shop +haelma.shop +havenhills.za.com +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +himosteg.xyz +hirgoles.xyz +hjhskih.xyz +hoster-test.ru huberwills.com +hubvera.ac.ug +hugabedis.xyz +iankian.shop ijconnects.com +ilertonp.xyz +intrinsicisle.za.com +ironturner.shop iwan2travel.com +jdfhgks.xyz jestertunes.com +kalestin.xyz +karimgouss.ug +kidhnx.xyz kidsacademyprayagraj.com +kiiujsh.xyz +kloisa.shop +kmsauto.info +kmsofficial.org +kmspi.co kmspico-oficial.com +kmspico.guru +kmspico.io kmspicoofficial.com +koruns.xyz +kositanh.xyz +kusilong.xyz +kusjxka.xyz +lastimaners.ug +lebomashilo.co.za +leopolfa.shop +liferacer.shop linkedinin.com +linkr.it +littleswanaircon.com.sg +llcn.link +lqnfezg.xyz +mabikorst.xyz +malayska.ug +marda.shop +marksidfgs.ug +medlafire.net +mhktricks.org michaelconstantinebhanos.com +mistitis.ug +neburfaw.xyz +nico.sa nicolascoolman.com +nicoslag.ru officialactivate.com officialkmspico.com +officialkmspico.info +online-personality.ru +opesjk.ug +opsdjs.ug +paipaisdvzxc.ru +partaususd.ru +pastratas.ac.ug pescacancun.com +phsw.site +playwell.ug premium-acc-payment.com probacons.com puroligert.com +qd34gf23ewrfsd1233.ru +quatro-casino.ca +qwertasd.ru +qwerty12346.ru +race2zerogolf.za.com +ragimost.xyz +rbx.bar reltio-apps.com +reluzformaturas.com.br +reputation-best.ru +rnws.link +robyoc.online safecartusa.com +sbic.com.br securoscans.com simplylovingproducts.com +sitefind.top skimswanp.com +sldkhfw.xyz +sosvirus.net southerninsurs.com +squad.cl steamcommumitry.com steamcommumtiy.com -stecmcommunijty.com -toughknifes.com -utpkz.com -vipbargainhub.com -vonderlee.com -vpdamai.com -welkusters.com -westernautomobileassembly.com -workshopauthor.com -workshopsmaker.com -workshopstyle.com -workshopusers.com -yanisac.com -yotpo.com -havenhills.za.com -intrinsicisle.za.com -race2zerogolf.za.com -ucnlkw.cyou -apsehick.date steamcommunity.com.es -wasabiwallet.eu -avastos.fun -avgs.fun -daleesh.fun -kmspico.guru -kmsauto.info -officialkmspico.info -worldwidewebshield.info -kmspico.io -blueevolution.it -linkr.it -llcn.link -rnws.link -ajstelecom.com.mx -ccm.net -crypto-wave.net -medlafire.net -sosvirus.net -bitflyer-ja.free.nf -download-binance.online -robyoc.online -bersowir.org -descargarkmspico.org -draschool.org -kmsofficial.org -mhktricks.org -threatdetect.org -windowsactivator.org -updatenow.pro -bratiop.ru -check-time.ru -confession-best.ru -dgkhj.ru -estimation-best.ru -hoster-test.ru -nicoslag.ru -online-personality.ru -paipaisdvzxc.ru -partaususd.ru -qd34gf23ewrfsd1233.ru -qwertasd.ru -qwerty12346.ru -reputation-best.ru -nico.sa -littleswanaircon.com.sg -wasabiwallet.sh -cbcaps.shop -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -farpetor.shop -flameshamer.shop -geriguna.shop -gerlia.shop -gloomcutter.shop -grike.shop -gunigunde.shop -haelma.shop -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -iankian.shop -ironturner.shop -kloisa.shop -leopolfa.shop -liferacer.shop -marda.shop -the-cartel.shop -tothedigital.shop -warcracker.shop -wordbracer.shop -wordmover.shop -wordstaker.shop -zinhice.shop -phsw.site +stecmcommunijty.com +sxlph.club sxlph.site -crypto-wave.store -yildirim-firsati.store -anjpvv.top -bkskhcil.top -com-trackahc.top -commodityprocess.top -crypto-wave.top -darnroughonline.top -fjwamneg.top -fvfad.top -sitefind.top -toolszj.top -toolszt.top -toolszw.top technowide.com.tr -hubvera.ac.ug -pastratas.ac.ug -badhabits.ug -karimgouss.ug -lastimaners.ug -malayska.ug -marksidfgs.ug -mistitis.ug -opesjk.ug -opsdjs.ug -playwell.ug +the-cartel.shop +theaerie.ca +threatdetect.org timebound.ug timecheck.ug timekeeper.ug +toolszj.top +toolszt.top +toolszw.top +tothedigital.shop +toughknifes.com triathlethe.ug tuskslacx.ug -wellplayed.ug -zxvbcrt.ug -wasabiwallet.uk -wisbechguide.uk -404024.xyz -alhocans.xyz -ausjcls.xyz -bowigarp.xyz -com-1.xyz -dfsfger.xyz -dolaxabof.xyz -firengav.xyz -gdijknd.xyz -gliujoi.xyz -glkjliim.xyz -gomlaner.xyz -himosteg.xyz -hirgoles.xyz -hjhskih.xyz -hugabedis.xyz -ilertonp.xyz -jdfhgks.xyz -kalestin.xyz -kidhnx.xyz -kiiujsh.xyz -koruns.xyz -kositanh.xyz -kusilong.xyz -kusjxka.xyz -lqnfezg.xyz -mabikorst.xyz -neburfaw.xyz -ragimost.xyz -sldkhfw.xyz +ucnlkw.cyou +updatenow.pro ushfqu.xyz ushfym.xyz ushwu.xyz @@ -234,5 +209,31 @@ ussuie.xyz uswsin.xyz uswuys.xyz uswuzm.xyz +utpkz.com +vipbargainhub.com +vonderlee.com +vpdamai.com +warcracker.shop +wasabiwallet.app +wasabiwallet.eu +wasabiwallet.sh +wasabiwallet.uk +welkusters.com +wellplayed.ug +westernautomobileassembly.com +windowsactivator.org +wisbechguide.uk +wordbracer.shop +wordmover.shop +wordstaker.shop +workshopauthor.com +workshopsmaker.com +workshopstyle.com +workshopusers.com +worldwidewebshield.info +yanisac.com +yildirim-firsati.store yildirim-firsati.xyz -lebomashilo.co.za +yotpo.com +zinhice.shop +zxvbcrt.ug From b4d71936a237021269efc505903e2dda7aab5271 Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 25 Nov 2024 18:14:22 +0000 Subject: [PATCH 103/142] Hierarchical sorted the lists --- add-wildcard-domain | 352 ++++++++++++++++++++++---------------------- 1 file changed, 176 insertions(+), 176 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 740ba8c..0ccec98 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,239 +1,239 @@ -404024.xyz +dubai-never-sleep.agency +wasabiwallet.app abbotsleigh.nsw.edu.au -abcmueblesbogota.com -ajstelecom.com.mx +rbx.bar albapietra.com.br -alhocans.xyz -amarveergroup.com +brunotasso.com.br +carnesboinobre.com.br +reluzformaturas.com.br +sbic.com.br +quatro-casino.ca +theaerie.ca +ergoterapiacaribu.ch +benyex.cl +squad.cl +beastlucyspin.click +beastsrandompack.click +besatsrandompacks.click +sxlph.club amazonaiy.co -anjpvv.top +kmspi.co +abcmueblesbogota.com +amarveergroup.com applesforfred.com -apsehick.date -ausjcls.xyz avast-antivirus.com -avastos.fun -avgs.fun azezieldraconous.com -badhabits.ug balneariodelugo.com -beastlucyspin.click -beastsrandompack.click -benyex.cl -bersowir.org -besatsrandompacks.click -bitflyer-ja.free.nf bkengineersindia.com -bkskhcil.top -blueevolution.it -bowigarp.xyz -bratiop.ru -brunotasso.com.br cantabriaeventos.com -carnesboinobre.com.br -cbcaps.shop -ccm.net -check-time.ru cloudslimit.com -com-1.xyz -com-trackahc.top -commodityprocess.top communitybrowserpowered.com -confession-best.ru -correosces.top craigbrimm.com -crypto-wave.net -crypto-wave.store -crypto-wave.top cutepoochstore.com dailywebstats.com -daleesh.fun -darnroughonline.top -darntoughfactory.shop -darntoughonline-us.shop -darntoughonline.shop -darntoughsales.shop -descargarkmspico.org -dfsfger.xyz -dgkhj.ru diezestrellas.com -dolaxabof.xyz -download-binance.online -draschool.org -dubai-never-sleep.agency ebeyez.com englishplusmore.com -ergoterapiacaribu.ch -estimation-best.ru fadpakke.com -farpetor.shop -firengav.xyz -fjwamneg.top -flameshamer.shop floridavacationrentalsbyowners.com flyairprestige.com foreverfarley.com fsqaj.com -fvfad.top -gdijknd.xyz -geriguna.shop -gerlia.shop getkmspico.com -gliujoi.xyz -glkjliim.xyz -gloomcutter.shop -gomlaner.xyz -grike.shop -gunigunde.shop -haelma.shop -havenhills.za.com -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -himosteg.xyz -hirgoles.xyz -hjhskih.xyz -hoster-test.ru huberwills.com -hubvera.ac.ug -hugabedis.xyz -iankian.shop ijconnects.com -ilertonp.xyz -intrinsicisle.za.com -ironturner.shop iwan2travel.com -jdfhgks.xyz jestertunes.com -kalestin.xyz -karimgouss.ug -kidhnx.xyz kidsacademyprayagraj.com -kiiujsh.xyz -kloisa.shop -kmsauto.info -kmsofficial.org -kmspi.co kmspico-oficial.com -kmspico.guru -kmspico.io kmspicoofficial.com -koruns.xyz -kositanh.xyz -kusilong.xyz -kusjxka.xyz -lastimaners.ug -lebomashilo.co.za -leopolfa.shop -liferacer.shop linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -lqnfezg.xyz -mabikorst.xyz -malayska.ug -marda.shop -marksidfgs.ug -medlafire.net -mhktricks.org michaelconstantinebhanos.com -mistitis.ug -neburfaw.xyz -nico.sa nicolascoolman.com -nicoslag.ru officialactivate.com officialkmspico.com -officialkmspico.info -online-personality.ru -opesjk.ug -opsdjs.ug -paipaisdvzxc.ru -partaususd.ru -pastratas.ac.ug pescacancun.com -phsw.site -playwell.ug premium-acc-payment.com probacons.com puroligert.com -qd34gf23ewrfsd1233.ru -quatro-casino.ca -qwertasd.ru -qwerty12346.ru -race2zerogolf.za.com -ragimost.xyz -rbx.bar reltio-apps.com -reluzformaturas.com.br -reputation-best.ru -rnws.link -robyoc.online safecartusa.com -sbic.com.br securoscans.com simplylovingproducts.com -sitefind.top skimswanp.com -sldkhfw.xyz -sosvirus.net southerninsurs.com -squad.cl steamcommumitry.com steamcommumtiy.com -steamcommunity.com.es stecmcommunijty.com -sxlph.club -sxlph.site -technowide.com.tr -the-cartel.shop -theaerie.ca -threatdetect.org -timebound.ug -timecheck.ug -timekeeper.ug -toolszj.top -toolszt.top -toolszw.top -tothedigital.shop toughknifes.com -triathlethe.ug -tuskslacx.ug -ucnlkw.cyou -updatenow.pro -ushfqu.xyz -ushfym.xyz -ushwu.xyz -ussuie.xyz -uswsin.xyz -uswuys.xyz -uswuzm.xyz utpkz.com vipbargainhub.com vonderlee.com vpdamai.com -warcracker.shop -wasabiwallet.app -wasabiwallet.eu -wasabiwallet.sh -wasabiwallet.uk welkusters.com -wellplayed.ug westernautomobileassembly.com -windowsactivator.org -wisbechguide.uk -wordbracer.shop -wordmover.shop -wordstaker.shop workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com -worldwidewebshield.info yanisac.com -yildirim-firsati.store -yildirim-firsati.xyz yotpo.com +havenhills.za.com +intrinsicisle.za.com +race2zerogolf.za.com +ucnlkw.cyou +apsehick.date +steamcommunity.com.es +wasabiwallet.eu +avastos.fun +avgs.fun +daleesh.fun +kmspico.guru +kmsauto.info +officialkmspico.info +worldwidewebshield.info +kmspico.io +blueevolution.it +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +ccm.net +crypto-wave.net +medlafire.net +sosvirus.net +bitflyer-ja.free.nf +download-binance.online +robyoc.online +bersowir.org +descargarkmspico.org +draschool.org +kmsofficial.org +mhktricks.org +threatdetect.org +windowsactivator.org +updatenow.pro +bratiop.ru +check-time.ru +confession-best.ru +dgkhj.ru +estimation-best.ru +hoster-test.ru +nicoslag.ru +online-personality.ru +paipaisdvzxc.ru +partaususd.ru +qd34gf23ewrfsd1233.ru +qwertasd.ru +qwerty12346.ru +reputation-best.ru +nico.sa +littleswanaircon.com.sg +wasabiwallet.sh +cbcaps.shop +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +farpetor.shop +flameshamer.shop +geriguna.shop +gerlia.shop +gloomcutter.shop +grike.shop +gunigunde.shop +haelma.shop +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +iankian.shop +ironturner.shop +kloisa.shop +leopolfa.shop +liferacer.shop +marda.shop +the-cartel.shop +tothedigital.shop +warcracker.shop +wordbracer.shop +wordmover.shop +wordstaker.shop zinhice.shop +phsw.site +sxlph.site +crypto-wave.store +yildirim-firsati.store +anjpvv.top +bkskhcil.top +com-trackahc.top +commodityprocess.top +correosces.top +crypto-wave.top +darnroughonline.top +fjwamneg.top +fvfad.top +sitefind.top +toolszj.top +toolszt.top +toolszw.top +technowide.com.tr +hubvera.ac.ug +pastratas.ac.ug +badhabits.ug +karimgouss.ug +lastimaners.ug +malayska.ug +marksidfgs.ug +mistitis.ug +opesjk.ug +opsdjs.ug +playwell.ug +timebound.ug +timecheck.ug +timekeeper.ug +triathlethe.ug +tuskslacx.ug +wellplayed.ug zxvbcrt.ug +wasabiwallet.uk +wisbechguide.uk +404024.xyz +alhocans.xyz +ausjcls.xyz +bowigarp.xyz +com-1.xyz +dfsfger.xyz +dolaxabof.xyz +firengav.xyz +gdijknd.xyz +gliujoi.xyz +glkjliim.xyz +gomlaner.xyz +himosteg.xyz +hirgoles.xyz +hjhskih.xyz +hugabedis.xyz +ilertonp.xyz +jdfhgks.xyz +kalestin.xyz +kidhnx.xyz +kiiujsh.xyz +koruns.xyz +kositanh.xyz +kusilong.xyz +kusjxka.xyz +lqnfezg.xyz +mabikorst.xyz +neburfaw.xyz +ragimost.xyz +sldkhfw.xyz +ushfqu.xyz +ushfym.xyz +ushwu.xyz +ussuie.xyz +uswsin.xyz +uswuys.xyz +uswuzm.xyz +yildirim-firsati.xyz +lebomashilo.co.za From 9b1aa592d1111435c402bd6c57cbaa0fe3d47d9c Mon Sep 17 00:00:00 2001 From: IntelCorei5-8350u <105188534+IntelCorei5-8350u@users.noreply.github.com> Date: Tue, 26 Nov 2024 22:43:29 +0700 Subject: [PATCH 104/142] Malicious phishing OneUI 7 beta program link When you click on this link on a Samsung mobile device (OneUI Android), you will risk your phone being locked - quite similar to iPhone lost mode. --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index e7b1710..d716eef 100644 --- a/add-link +++ b/add-link @@ -63,3 +63,4 @@ https://www.kepeklian.fr/mm.php https://www.manitowocice.com/Media/Manitowocice/robux1.html https://www.seo-domain.net/0:gateway:checkout/2999994 https://s3-poshmark.id829.com/211083758 +https://samsungsecure.com/smartthingsfind.samsung.com/smart-switch From 2eebb7e744ca3571ddf623ea7f9c2e262fdbe49d Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 26 Nov 2024 12:18:56 -0500 Subject: [PATCH 105/142] add 129.226.206.133 to IP block lists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 4 insertions(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 3287f25..06f4e8d 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -1,5 +1,6 @@ # example address # 24.1.2.0.192 # rfc:5737 +32.133.206.226.129 32.174.209.171.142 32.59.97.174.184 32.28.115.81.185 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 8628dbe..6328a31 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -1,5 +1,6 @@ # example address # 192.0.2.1/24 # rfc:5737 +129.226.206.133/32 142.171.209.174/32 184.174.97.59/32 185.81.115.28/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index cbd69a3..624c4c7 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -1,5 +1,6 @@ # example address # 1.2.0.192 # rfc:5737 +133.206.226.129 174.209.171.142 59.97.174.184 28.115.81.185 diff --git a/IP-addr.list b/IP-addr.list index e273fd7..a6ae547 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -1,5 +1,6 @@ # example address # 192.0.2.1 # rfc:5737 +129.226.206.133 142.171.209.174 184.174.97.59 185.80.128.14 From 3c4d72d2f7146a6f9db17b1f74e97cb973a5a26e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 26 Nov 2024 12:59:03 -0500 Subject: [PATCH 106/142] add 198.11.183.177 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 4 insertions(+) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 06f4e8d..7c812de 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -5,6 +5,7 @@ 32.59.97.174.184 32.28.115.81.185 32.217.55.3.192 +32.177.183.11.198 32.188.34.139.235 32.39.210.182.5 32.57.71.153.43 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 6328a31..db731b7 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -5,6 +5,7 @@ 184.174.97.59/32 185.81.115.28/32 192.3.55.217/32 +198.11.183.177/32 20.106.143.112/32 235.139.34.188/32 27.83.170.52/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 624c4c7..9191e38 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -5,6 +5,7 @@ 59.97.174.184 28.115.81.185 235.139.34.188 +177.183.11.198 192.3.55.217 39.210.182.5 57.71.153.43 diff --git a/IP-addr.list b/IP-addr.list index a6ae547..e470ddc 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -7,6 +7,7 @@ 188.34.139.235 185.81.115.28 192.3.55.217 +198.11.183.177 43.153.71.57 43.156.237.181 45.9.74.32 From 29503c0fe98cdc86e5b25da899a2e0378d454992 Mon Sep 17 00:00:00 2001 From: UltimateTitan Date: Wed, 27 Nov 2024 21:23:39 +0000 Subject: [PATCH 107/142] adding new telegram account phishing link Looks like this URL and its associated domain is used for an ongoing phishing campaign for hijacking telegram accounts. --- add-link | 1 + 1 file changed, 1 insertion(+) diff --git a/add-link b/add-link index d716eef..82a9860 100644 --- a/add-link +++ b/add-link @@ -64,3 +64,4 @@ https://www.manitowocice.com/Media/Manitowocice/robux1.html https://www.seo-domain.net/0:gateway:checkout/2999994 https://s3-poshmark.id829.com/211083758 https://samsungsecure.com/smartthingsfind.samsung.com/smart-switch +https://vrum.pics/+xJELB_6H_lEHxFH From 9168337b8d2edc62bf3ddf8fa76f24051cc119c5 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 27 Nov 2024 17:45:45 -0500 Subject: [PATCH 108/142] add 8.221.106.55 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 3 ++- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 7c812de..498d52e 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -22,3 +22,4 @@ 32.223.85.215.91 32.89.121.48.45 32.166.121.148.45 +32.55.106.221.8 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index db731b7..1298574 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -22,4 +22,5 @@ 79.137.197.154/32 91.215.85.223/32 45.148.121.89/32 -45.148.121.166/32 \ No newline at end of file +45.148.121.166/32 +8.221.106.55/32 \ No newline at end of file diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 9191e38..e3e3e21 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -20,4 +20,5 @@ 154.197.137.79 91.215.85.223 89.121.148.45 -166.121.148.45 \ No newline at end of file +166.121.148.45 +55.106.221.8 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index e470ddc..1a6eb56 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -21,4 +21,5 @@ 79.137.197.154 91.215.85.223 45.148.121.89 -45.148.121.166 \ No newline at end of file +45.148.121.166 +8.221.106.55 \ No newline at end of file From 585399afd93705e07d325fbef457e49367ac13e8 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 28 Nov 2024 14:24:38 -0500 Subject: [PATCH 109/142] add additional IPs hosting USPS delivery failrue lures --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 498d52e..ae958ab 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -22,4 +22,5 @@ 32.223.85.215.91 32.89.121.48.45 32.166.121.148.45 -32.55.106.221.8 \ No newline at end of file +32.55.106.221.8 +32.24.93.153.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 1298574..7f464d4 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -11,6 +11,7 @@ 27.83.170.52/32 5.182.210.39/32 43.153.71.57/32 +43.153.93.24/32 43.156.237.181/32 45.9.74.32/32 45.9.74.36/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index e3e3e21..fb7da2a 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -9,6 +9,7 @@ 192.3.55.217 39.210.182.5 57.71.153.43 +24.93.153.43 181.237.156.43 32.74.9.45 36.74.9.45 diff --git a/IP-addr.list b/IP-addr.list index 1a6eb56..8a85fe4 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -22,4 +22,5 @@ 91.215.85.223 45.148.121.89 45.148.121.166 -8.221.106.55 \ No newline at end of file +8.221.106.55 +43.153.93.24 \ No newline at end of file From f5b8d5bbcddd70e2a8d2642de3f25fa4673dd9e7 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 28 Nov 2024 14:48:47 -0500 Subject: [PATCH 110/142] add 156.244.41.195 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index ae958ab..8dd423d 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -23,4 +23,5 @@ 32.89.121.48.45 32.166.121.148.45 32.55.106.221.8 -32.24.93.153.43 \ No newline at end of file +32.24.93.153.43 +32.195.41.244.156 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 7f464d4..8149058 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -2,6 +2,7 @@ # 192.0.2.1/24 # rfc:5737 129.226.206.133/32 142.171.209.174/32 +156.244.41.195/32 184.174.97.59/32 185.81.115.28/32 192.3.55.217/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index fb7da2a..74b1ec1 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -2,6 +2,7 @@ # 1.2.0.192 # rfc:5737 133.206.226.129 174.209.171.142 +195.41.244.156 59.97.174.184 28.115.81.185 235.139.34.188 diff --git a/IP-addr.list b/IP-addr.list index 8a85fe4..d9d33c3 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -23,4 +23,5 @@ 45.148.121.89 45.148.121.166 8.221.106.55 -43.153.93.24 \ No newline at end of file +43.153.93.24 +156.244.41.195 \ No newline at end of file From 53bffd5c2f26db577385569b528aea5eb547de2c Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 28 Nov 2024 16:46:14 -0500 Subject: [PATCH 111/142] add 43.135.128.131 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 8dd423d..7f803ea 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -24,4 +24,5 @@ 32.166.121.148.45 32.55.106.221.8 32.24.93.153.43 -32.195.41.244.156 \ No newline at end of file +32.195.41.244.156 +32.131.128.135.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 8149058..bb3df40 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -11,6 +11,7 @@ 235.139.34.188/32 27.83.170.52/32 5.182.210.39/32 +43.135.128.131 43.153.71.57/32 43.153.93.24/32 43.156.237.181/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 74b1ec1..1c275e0 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -9,6 +9,7 @@ 177.183.11.198 192.3.55.217 39.210.182.5 +131.128.135.43 57.71.153.43 24.93.153.43 181.237.156.43 diff --git a/IP-addr.list b/IP-addr.list index d9d33c3..a89c808 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -24,4 +24,5 @@ 45.148.121.166 8.221.106.55 43.153.93.24 -156.244.41.195 \ No newline at end of file +156.244.41.195 +43.135.128.131 \ No newline at end of file From 5b6a61ce6068a14df9744eade68812cfc42c5d34 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 28 Nov 2024 17:09:14 -0500 Subject: [PATCH 112/142] add 49.51.180.156 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 1 + IP-addr.list | 3 ++- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 7f803ea..943cb77 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -25,4 +25,5 @@ 32.55.106.221.8 32.24.93.153.43 32.195.41.244.156 -32.131.128.135.43 \ No newline at end of file +32.131.128.135.43 +32.156.180.51.49 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index bb3df40..f957a5a 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -11,7 +11,7 @@ 235.139.34.188/32 27.83.170.52/32 5.182.210.39/32 -43.135.128.131 +43.135.128.131/32 43.153.71.57/32 43.153.93.24/32 43.156.237.181/32 @@ -22,6 +22,7 @@ 45.148.121.138/32 45.148.121.144/32 45.207.168.120/32 +49.51.180.156/32 79.137.197.154/32 91.215.85.223/32 45.148.121.89/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 1c275e0..4f78707 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -20,6 +20,7 @@ 138.121.148.45 144.121.148.45 120.168.207.45 +156.180.51.49 154.197.137.79 91.215.85.223 89.121.148.45 diff --git a/IP-addr.list b/IP-addr.list index a89c808..3a93d7b 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -25,4 +25,5 @@ 8.221.106.55 43.153.93.24 156.244.41.195 -43.135.128.131 \ No newline at end of file +43.135.128.131 +49.51.180.156 \ No newline at end of file From daf9f02e321d24453b487832bfd7c325b2d1af18 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 28 Nov 2024 17:39:47 -0500 Subject: [PATCH 113/142] add 49.51.186.70 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 943cb77..f170527 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -26,4 +26,5 @@ 32.24.93.153.43 32.195.41.244.156 32.131.128.135.43 -32.156.180.51.49 \ No newline at end of file +32.156.180.51.49 +32.70.186.51.49 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index f957a5a..dcd7915 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -23,6 +23,7 @@ 45.148.121.144/32 45.207.168.120/32 49.51.180.156/32 +49.51.186.70/32 79.137.197.154/32 91.215.85.223/32 45.148.121.89/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 4f78707..8b74b7d 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -21,6 +21,7 @@ 144.121.148.45 120.168.207.45 156.180.51.49 +70.186.51.49 154.197.137.79 91.215.85.223 89.121.148.45 diff --git a/IP-addr.list b/IP-addr.list index 3a93d7b..5236159 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -26,4 +26,5 @@ 43.153.93.24 156.244.41.195 43.135.128.131 -49.51.180.156 \ No newline at end of file +49.51.180.156 +49.51.186.70 \ No newline at end of file From ae012722ddc83ba110d9183fe9fe00fac2f93239 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 28 Nov 2024 19:25:19 -0500 Subject: [PATCH 114/142] add 49.51.71.26 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 3 ++- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index f170527..c1619f0 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -27,4 +27,5 @@ 32.195.41.244.156 32.131.128.135.43 32.156.180.51.49 -32.70.186.51.49 \ No newline at end of file +32.70.186.51.49 +32.26.71.51.49 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index dcd7915..9dc379b 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -22,6 +22,7 @@ 45.148.121.138/32 45.148.121.144/32 45.207.168.120/32 +49.51.71.26/32 49.51.180.156/32 49.51.186.70/32 79.137.197.154/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 8b74b7d..38462e0 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -26,4 +26,5 @@ 91.215.85.223 89.121.148.45 166.121.148.45 -55.106.221.8 \ No newline at end of file +55.106.221.8 +26.71.51.49 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index 5236159..a942783 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -27,4 +27,5 @@ 156.244.41.195 43.135.128.131 49.51.180.156 -49.51.186.70 \ No newline at end of file +49.51.186.70 +49.51.71.26 \ No newline at end of file From 959676860bcae34d94970e4671e408aeacf89991 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Fri, 29 Nov 2024 13:20:23 -0500 Subject: [PATCH 115/142] add 184.174.97.68 to IP blocklists - Amazon smishing --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 3 ++- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index c1619f0..3c511f1 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -28,4 +28,5 @@ 32.131.128.135.43 32.156.180.51.49 32.70.186.51.49 -32.26.71.51.49 \ No newline at end of file +32.26.71.51.49 +32.68.97.174.184 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 9dc379b..c8d4865 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -4,6 +4,7 @@ 142.171.209.174/32 156.244.41.195/32 184.174.97.59/32 +184.174.97.68/32 185.81.115.28/32 192.3.55.217/32 198.11.183.177/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 38462e0..8a39d99 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -27,4 +27,5 @@ 89.121.148.45 166.121.148.45 55.106.221.8 -26.71.51.49 \ No newline at end of file +26.71.51.49 +68.97.174.184 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index a942783..1ace838 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -28,4 +28,5 @@ 43.135.128.131 49.51.180.156 49.51.186.70 -49.51.71.26 \ No newline at end of file +49.51.71.26 +184.174.97.68 \ No newline at end of file From c74f20883d730d6df51487c80c9c7414d0833fea Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 30 Nov 2024 17:15:29 -0500 Subject: [PATCH 116/142] add 154.205.139.231 to IP blocklists - USPS delivery failure lures --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 3c511f1..dca4408 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -2,6 +2,7 @@ # 24.1.2.0.192 # rfc:5737 32.133.206.226.129 32.174.209.171.142 +32.231.139.205.154 32.59.97.174.184 32.28.115.81.185 32.217.55.3.192 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index c8d4865..b1afa02 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -2,6 +2,7 @@ # 192.0.2.1/24 # rfc:5737 129.226.206.133/32 142.171.209.174/32 +154.205.139.231/32 156.244.41.195/32 184.174.97.59/32 184.174.97.68/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 8a39d99..e0e0985 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -28,4 +28,5 @@ 166.121.148.45 55.106.221.8 26.71.51.49 -68.97.174.184 \ No newline at end of file +68.97.174.184 +231.139.205.154 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index 1ace838..c92f742 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -29,4 +29,5 @@ 49.51.180.156 49.51.186.70 49.51.71.26 -184.174.97.68 \ No newline at end of file +184.174.97.68 +154.205.139.231 \ No newline at end of file From 25a525d8280afa71bfd83370554a72e66a475b72 Mon Sep 17 00:00:00 2001 From: David Osipov Date: Tue, 3 Dec 2024 16:19:40 +0400 Subject: [PATCH 117/142] Update add-wildcard-domain Today received a phishing message via Telegram. It was stated that my friend gifted me a TG premium. However, the website itself https://combo.combo-koleo-glutto.sbs/fixed.type.normal.begin was gonna try to hijack a TG account - a rather popular scheme nowadays. I'm adding the wildcard domain, because it seems to be owned completely my phishers. --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 0ccec98..e43ebe7 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,3 +1,4 @@ +combo-koleo-glutto.sbs dubai-never-sleep.agency wasabiwallet.app abbotsleigh.nsw.edu.au From edeb909d9dc90d8cd93ce23911a2fc2f4e540a1f Mon Sep 17 00:00:00 2001 From: David Osipov Date: Tue, 3 Dec 2024 16:34:41 +0400 Subject: [PATCH 118/142] Update add-wildcard-domain Manually sorted in alphabetic order to get rid of an error --- add-wildcard-domain | 356 ++++++++++++++++++++++---------------------- 1 file changed, 178 insertions(+), 178 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index e43ebe7..8975852 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,234 +1,208 @@ -combo-koleo-glutto.sbs -dubai-never-sleep.agency -wasabiwallet.app +404024.xyz abbotsleigh.nsw.edu.au -rbx.bar -albapietra.com.br -brunotasso.com.br -carnesboinobre.com.br -reluzformaturas.com.br -sbic.com.br -quatro-casino.ca -theaerie.ca -ergoterapiacaribu.ch -benyex.cl -squad.cl -beastlucyspin.click -beastsrandompack.click -besatsrandompacks.click -sxlph.club -amazonaiy.co -kmspi.co abcmueblesbogota.com +ajstelecom.com.mx +albapietra.com.br +alhocans.xyz amarveergroup.com +amazonaiy.co +anjpvv.top applesforfred.com +apsehick.date +ausjcls.xyz avast-antivirus.com +avastos.fun +avgs.fun azezieldraconous.com +badhabits.ug balneariodelugo.com +beastlucyspin.click +beastsrandompack.click +benyex.cl +bersowir.org +besatsrandompacks.click +bitflyer-ja.free.nf bkengineersindia.com +bkskhcil.top +blueevolution.it +bowigarp.xyz +bratiop.ru +brunotasso.com.br cantabriaeventos.com +carnesboinobre.com.br +cbcaps.shop +ccm.net +check-time.ru cloudslimit.com +com-1.xyz +combo-koleo-glutto.sbs +commodityprocess.top communitybrowserpowered.com +com-trackahc.top +confession-best.ru +correosces.top craigbrimm.com +crypto-wave.net +crypto-wave.store +crypto-wave.top cutepoochstore.com dailywebstats.com +daleesh.fun +darnroughonline.top +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +descargarkmspico.org +dfsfger.xyz +dgkhj.ru diezestrellas.com +dolaxabof.xyz +download-binance.online +draschool.org +dubai-never-sleep.agency ebeyez.com englishplusmore.com +ergoterapiacaribu.ch +estimation-best.ru fadpakke.com +farpetor.shop +firengav.xyz +fjwamneg.top +flameshamer.shop floridavacationrentalsbyowners.com flyairprestige.com foreverfarley.com fsqaj.com +fvfad.top +gdijknd.xyz +geriguna.shop +gerlia.shop getkmspico.com +gliujoi.xyz +glkjliim.xyz +gloomcutter.shop +gomlaner.xyz +grike.shop +gunigunde.shop +haelma.shop +havenhills.za.com +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +himosteg.xyz +hirgoles.xyz +hjhskih.xyz +hoster-test.ru huberwills.com +hubvera.ac.ug +hugabedis.xyz +iankian.shop ijconnects.com +ilertonp.xyz +intrinsicisle.za.com +ironturner.shop iwan2travel.com +jdfhgks.xyz jestertunes.com +kalestin.xyz +karimgouss.ug +kidhnx.xyz kidsacademyprayagraj.com -kmspico-oficial.com +kiiujsh.xyz +kloisa.shop +kmsauto.info +kmsofficial.org +kmspi.co +kmspico.guru +kmspico.io kmspicoofficial.com +kmspico-oficial.com +koruns.xyz +kositanh.xyz +kusilong.xyz +kusjxka.xyz +lastimaners.ug +lebomashilo.co.za +leopolfa.shop +liferacer.shop linkedinin.com +linkr.it +littleswanaircon.com.sg +llcn.link +lqnfezg.xyz +mabikorst.xyz +malayska.ug +marda.shop +marksidfgs.ug +medlafire.net +mhktricks.org michaelconstantinebhanos.com +mistitis.ug +neburfaw.xyz +nico.sa nicolascoolman.com +nicoslag.ru officialactivate.com officialkmspico.com +officialkmspico.info +online-personality.ru +opesjk.ug +opsdjs.ug +paipaisdvzxc.ru +partaususd.ru +pastratas.ac.ug pescacancun.com +phsw.site +playwell.ug premium-acc-payment.com probacons.com puroligert.com +qd34gf23ewrfsd1233.ru +quatro-casino.ca +qwertasd.ru +qwerty12346.ru +race2zerogolf.za.com +ragimost.xyz +rbx.bar reltio-apps.com +reluzformaturas.com.br +reputation-best.ru +rnws.link +robyoc.online safecartusa.com +sbic.com.br securoscans.com simplylovingproducts.com +sitefind.top skimswanp.com +sldkhfw.xyz +sosvirus.net southerninsurs.com +squad.cl steamcommumitry.com steamcommumtiy.com -stecmcommunijty.com -toughknifes.com -utpkz.com -vipbargainhub.com -vonderlee.com -vpdamai.com -welkusters.com -westernautomobileassembly.com -workshopauthor.com -workshopsmaker.com -workshopstyle.com -workshopusers.com -yanisac.com -yotpo.com -havenhills.za.com -intrinsicisle.za.com -race2zerogolf.za.com -ucnlkw.cyou -apsehick.date steamcommunity.com.es -wasabiwallet.eu -avastos.fun -avgs.fun -daleesh.fun -kmspico.guru -kmsauto.info -officialkmspico.info -worldwidewebshield.info -kmspico.io -blueevolution.it -linkr.it -llcn.link -rnws.link -ajstelecom.com.mx -ccm.net -crypto-wave.net -medlafire.net -sosvirus.net -bitflyer-ja.free.nf -download-binance.online -robyoc.online -bersowir.org -descargarkmspico.org -draschool.org -kmsofficial.org -mhktricks.org -threatdetect.org -windowsactivator.org -updatenow.pro -bratiop.ru -check-time.ru -confession-best.ru -dgkhj.ru -estimation-best.ru -hoster-test.ru -nicoslag.ru -online-personality.ru -paipaisdvzxc.ru -partaususd.ru -qd34gf23ewrfsd1233.ru -qwertasd.ru -qwerty12346.ru -reputation-best.ru -nico.sa -littleswanaircon.com.sg -wasabiwallet.sh -cbcaps.shop -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -farpetor.shop -flameshamer.shop -geriguna.shop -gerlia.shop -gloomcutter.shop -grike.shop -gunigunde.shop -haelma.shop -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -iankian.shop -ironturner.shop -kloisa.shop -leopolfa.shop -liferacer.shop -marda.shop -the-cartel.shop -tothedigital.shop -warcracker.shop -wordbracer.shop -wordmover.shop -wordstaker.shop -zinhice.shop -phsw.site +stecmcommunijty.com +sxlph.club sxlph.site -crypto-wave.store -yildirim-firsati.store -anjpvv.top -bkskhcil.top -com-trackahc.top -commodityprocess.top -correosces.top -crypto-wave.top -darnroughonline.top -fjwamneg.top -fvfad.top -sitefind.top -toolszj.top -toolszt.top -toolszw.top technowide.com.tr -hubvera.ac.ug -pastratas.ac.ug -badhabits.ug -karimgouss.ug -lastimaners.ug -malayska.ug -marksidfgs.ug -mistitis.ug -opesjk.ug -opsdjs.ug -playwell.ug +theaerie.ca +the-cartel.shop +threatdetect.org timebound.ug timecheck.ug timekeeper.ug +toolszj.top +toolszt.top +toolszw.top +tothedigital.shop +toughknifes.com triathlethe.ug tuskslacx.ug -wellplayed.ug -zxvbcrt.ug -wasabiwallet.uk -wisbechguide.uk -404024.xyz -alhocans.xyz -ausjcls.xyz -bowigarp.xyz -com-1.xyz -dfsfger.xyz -dolaxabof.xyz -firengav.xyz -gdijknd.xyz -gliujoi.xyz -glkjliim.xyz -gomlaner.xyz -himosteg.xyz -hirgoles.xyz -hjhskih.xyz -hugabedis.xyz -ilertonp.xyz -jdfhgks.xyz -kalestin.xyz -kidhnx.xyz -kiiujsh.xyz -koruns.xyz -kositanh.xyz -kusilong.xyz -kusjxka.xyz -lqnfezg.xyz -mabikorst.xyz -neburfaw.xyz -ragimost.xyz -sldkhfw.xyz +ucnlkw.cyou +updatenow.pro ushfqu.xyz ushfym.xyz ushwu.xyz @@ -236,5 +210,31 @@ ussuie.xyz uswsin.xyz uswuys.xyz uswuzm.xyz +utpkz.com +vipbargainhub.com +vonderlee.com +vpdamai.com +warcracker.shop +wasabiwallet.app +wasabiwallet.eu +wasabiwallet.sh +wasabiwallet.uk +welkusters.com +wellplayed.ug +westernautomobileassembly.com +windowsactivator.org +wisbechguide.uk +wordbracer.shop +wordmover.shop +wordstaker.shop +workshopauthor.com +workshopsmaker.com +workshopstyle.com +workshopusers.com +worldwidewebshield.info +yanisac.com +yildirim-firsati.store yildirim-firsati.xyz -lebomashilo.co.za +yotpo.com +zinhice.shop +zxvbcrt.ug From 90e03c7074119f60a6df658050234f100face56a Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 4 Dec 2024 14:02:46 +0000 Subject: [PATCH 119/142] Hierarchical sorted the lists --- add-wildcard-domain | 356 ++++++++++++++++++++++---------------------- 1 file changed, 178 insertions(+), 178 deletions(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 8975852..ab4f588 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,240 +1,240 @@ -404024.xyz +dubai-never-sleep.agency +wasabiwallet.app abbotsleigh.nsw.edu.au -abcmueblesbogota.com -ajstelecom.com.mx +rbx.bar albapietra.com.br -alhocans.xyz -amarveergroup.com +brunotasso.com.br +carnesboinobre.com.br +reluzformaturas.com.br +sbic.com.br +quatro-casino.ca +theaerie.ca +ergoterapiacaribu.ch +benyex.cl +squad.cl +beastlucyspin.click +beastsrandompack.click +besatsrandompacks.click +sxlph.club amazonaiy.co -anjpvv.top +kmspi.co +abcmueblesbogota.com +amarveergroup.com applesforfred.com -apsehick.date -ausjcls.xyz avast-antivirus.com -avastos.fun -avgs.fun azezieldraconous.com -badhabits.ug balneariodelugo.com -beastlucyspin.click -beastsrandompack.click -benyex.cl -bersowir.org -besatsrandompacks.click -bitflyer-ja.free.nf bkengineersindia.com -bkskhcil.top -blueevolution.it -bowigarp.xyz -bratiop.ru -brunotasso.com.br cantabriaeventos.com -carnesboinobre.com.br -cbcaps.shop -ccm.net -check-time.ru cloudslimit.com -com-1.xyz -combo-koleo-glutto.sbs -commodityprocess.top communitybrowserpowered.com -com-trackahc.top -confession-best.ru -correosces.top craigbrimm.com -crypto-wave.net -crypto-wave.store -crypto-wave.top cutepoochstore.com dailywebstats.com -daleesh.fun -darnroughonline.top -darntoughfactory.shop -darntoughonline.shop -darntoughonline-us.shop -darntoughsales.shop -descargarkmspico.org -dfsfger.xyz -dgkhj.ru diezestrellas.com -dolaxabof.xyz -download-binance.online -draschool.org -dubai-never-sleep.agency ebeyez.com englishplusmore.com -ergoterapiacaribu.ch -estimation-best.ru fadpakke.com -farpetor.shop -firengav.xyz -fjwamneg.top -flameshamer.shop floridavacationrentalsbyowners.com flyairprestige.com foreverfarley.com fsqaj.com -fvfad.top -gdijknd.xyz -geriguna.shop -gerlia.shop getkmspico.com -gliujoi.xyz -glkjliim.xyz -gloomcutter.shop -gomlaner.xyz -grike.shop -gunigunde.shop -haelma.shop -havenhills.za.com -hertrud.shop -hexcrippler.shop -hild.shop -hiltrunde.shop -himosteg.xyz -hirgoles.xyz -hjhskih.xyz -hoster-test.ru huberwills.com -hubvera.ac.ug -hugabedis.xyz -iankian.shop ijconnects.com -ilertonp.xyz -intrinsicisle.za.com -ironturner.shop iwan2travel.com -jdfhgks.xyz jestertunes.com -kalestin.xyz -karimgouss.ug -kidhnx.xyz kidsacademyprayagraj.com -kiiujsh.xyz -kloisa.shop -kmsauto.info -kmsofficial.org -kmspi.co -kmspico.guru -kmspico.io -kmspicoofficial.com kmspico-oficial.com -koruns.xyz -kositanh.xyz -kusilong.xyz -kusjxka.xyz -lastimaners.ug -lebomashilo.co.za -leopolfa.shop -liferacer.shop +kmspicoofficial.com linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -lqnfezg.xyz -mabikorst.xyz -malayska.ug -marda.shop -marksidfgs.ug -medlafire.net -mhktricks.org michaelconstantinebhanos.com -mistitis.ug -neburfaw.xyz -nico.sa nicolascoolman.com -nicoslag.ru officialactivate.com officialkmspico.com -officialkmspico.info -online-personality.ru -opesjk.ug -opsdjs.ug -paipaisdvzxc.ru -partaususd.ru -pastratas.ac.ug pescacancun.com -phsw.site -playwell.ug premium-acc-payment.com probacons.com puroligert.com -qd34gf23ewrfsd1233.ru -quatro-casino.ca -qwertasd.ru -qwerty12346.ru -race2zerogolf.za.com -ragimost.xyz -rbx.bar reltio-apps.com -reluzformaturas.com.br -reputation-best.ru -rnws.link -robyoc.online safecartusa.com -sbic.com.br securoscans.com simplylovingproducts.com -sitefind.top skimswanp.com -sldkhfw.xyz -sosvirus.net southerninsurs.com -squad.cl steamcommumitry.com steamcommumtiy.com -steamcommunity.com.es stecmcommunijty.com -sxlph.club -sxlph.site -technowide.com.tr -theaerie.ca -the-cartel.shop -threatdetect.org -timebound.ug -timecheck.ug -timekeeper.ug -toolszj.top -toolszt.top -toolszw.top -tothedigital.shop toughknifes.com -triathlethe.ug -tuskslacx.ug -ucnlkw.cyou -updatenow.pro -ushfqu.xyz -ushfym.xyz -ushwu.xyz -ussuie.xyz -uswsin.xyz -uswuys.xyz -uswuzm.xyz utpkz.com vipbargainhub.com vonderlee.com vpdamai.com -warcracker.shop -wasabiwallet.app -wasabiwallet.eu -wasabiwallet.sh -wasabiwallet.uk welkusters.com -wellplayed.ug westernautomobileassembly.com -windowsactivator.org -wisbechguide.uk -wordbracer.shop -wordmover.shop -wordstaker.shop workshopauthor.com workshopsmaker.com workshopstyle.com workshopusers.com -worldwidewebshield.info yanisac.com -yildirim-firsati.store -yildirim-firsati.xyz yotpo.com +havenhills.za.com +intrinsicisle.za.com +race2zerogolf.za.com +ucnlkw.cyou +apsehick.date +steamcommunity.com.es +wasabiwallet.eu +avastos.fun +avgs.fun +daleesh.fun +kmspico.guru +kmsauto.info +officialkmspico.info +worldwidewebshield.info +kmspico.io +blueevolution.it +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +ccm.net +crypto-wave.net +medlafire.net +sosvirus.net +bitflyer-ja.free.nf +download-binance.online +robyoc.online +bersowir.org +descargarkmspico.org +draschool.org +kmsofficial.org +mhktricks.org +threatdetect.org +windowsactivator.org +updatenow.pro +bratiop.ru +check-time.ru +confession-best.ru +dgkhj.ru +estimation-best.ru +hoster-test.ru +nicoslag.ru +online-personality.ru +paipaisdvzxc.ru +partaususd.ru +qd34gf23ewrfsd1233.ru +qwertasd.ru +qwerty12346.ru +reputation-best.ru +nico.sa +combo-koleo-glutto.sbs +littleswanaircon.com.sg +wasabiwallet.sh +cbcaps.shop +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +farpetor.shop +flameshamer.shop +geriguna.shop +gerlia.shop +gloomcutter.shop +grike.shop +gunigunde.shop +haelma.shop +hertrud.shop +hexcrippler.shop +hild.shop +hiltrunde.shop +iankian.shop +ironturner.shop +kloisa.shop +leopolfa.shop +liferacer.shop +marda.shop +the-cartel.shop +tothedigital.shop +warcracker.shop +wordbracer.shop +wordmover.shop +wordstaker.shop zinhice.shop +phsw.site +sxlph.site +crypto-wave.store +yildirim-firsati.store +anjpvv.top +bkskhcil.top +com-trackahc.top +commodityprocess.top +correosces.top +crypto-wave.top +darnroughonline.top +fjwamneg.top +fvfad.top +sitefind.top +toolszj.top +toolszt.top +toolszw.top +technowide.com.tr +hubvera.ac.ug +pastratas.ac.ug +badhabits.ug +karimgouss.ug +lastimaners.ug +malayska.ug +marksidfgs.ug +mistitis.ug +opesjk.ug +opsdjs.ug +playwell.ug +timebound.ug +timecheck.ug +timekeeper.ug +triathlethe.ug +tuskslacx.ug +wellplayed.ug zxvbcrt.ug +wasabiwallet.uk +wisbechguide.uk +404024.xyz +alhocans.xyz +ausjcls.xyz +bowigarp.xyz +com-1.xyz +dfsfger.xyz +dolaxabof.xyz +firengav.xyz +gdijknd.xyz +gliujoi.xyz +glkjliim.xyz +gomlaner.xyz +himosteg.xyz +hirgoles.xyz +hjhskih.xyz +hugabedis.xyz +ilertonp.xyz +jdfhgks.xyz +kalestin.xyz +kidhnx.xyz +kiiujsh.xyz +koruns.xyz +kositanh.xyz +kusilong.xyz +kusjxka.xyz +lqnfezg.xyz +mabikorst.xyz +neburfaw.xyz +ragimost.xyz +sldkhfw.xyz +ushfqu.xyz +ushfym.xyz +ushwu.xyz +ussuie.xyz +uswsin.xyz +uswuys.xyz +uswuzm.xyz +yildirim-firsati.xyz +lebomashilo.co.za From 09fa9901fde36fcdaf21d0c73938d3c6d7f0eb33 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Thu, 5 Dec 2024 10:45:48 -0500 Subject: [PATCH 120/142] add s-ua[.]eu[.]org to add-wildcard-domain --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index ab4f588..88774ff 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -110,6 +110,7 @@ descargarkmspico.org draschool.org kmsofficial.org mhktricks.org +s-ua.eu.org threatdetect.org windowsactivator.org updatenow.pro From 2d9480187cff25cb46142550a882e4691ecb795d Mon Sep 17 00:00:00 2001 From: spirillen Date: Thu, 5 Dec 2024 18:02:07 +0000 Subject: [PATCH 121/142] Hierarchical sorted the lists --- add-wildcard-domain | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add-wildcard-domain b/add-wildcard-domain index 88774ff..0546c86 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -108,9 +108,9 @@ robyoc.online bersowir.org descargarkmspico.org draschool.org +s-ua.eu.org kmsofficial.org mhktricks.org -s-ua.eu.org threatdetect.org windowsactivator.org updatenow.pro From bd9859e963e369feaa37d2a0b9bb5b93fdea5421 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 8 Dec 2024 11:41:03 -0500 Subject: [PATCH 122/142] add 43.153.72.198 to IP blocklists - USPS delivery failure lure host --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 1 + IP-addr.list | 10 ++++++---- 4 files changed, 10 insertions(+), 5 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index dca4408..d0f3f16 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -10,6 +10,7 @@ 32.188.34.139.235 32.39.210.182.5 32.57.71.153.43 +32.198.72.153.43 32.181.237.156.43 32.32.74.9.45 32.36.74.9.45 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index b1afa02..70b521a 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -31,4 +31,5 @@ 91.215.85.223/32 45.148.121.89/32 45.148.121.166/32 -8.221.106.55/32 \ No newline at end of file +8.221.106.55/32 +43.153.72.198/32 \ No newline at end of file diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index e0e0985..fb2f18a 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -11,6 +11,7 @@ 39.210.182.5 131.128.135.43 57.71.153.43 +198.72.153.43 24.93.153.43 181.237.156.43 32.74.9.45 diff --git a/IP-addr.list b/IP-addr.list index c92f742..f10fabf 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -9,10 +9,16 @@ 192.3.55.217 198.11.183.177 43.153.71.57 +43.135.128.131 +43.153.72.198 +43.153.93.24 +43.135.128.131 43.156.237.181 45.9.74.32 45.9.74.36 45.137.190.202 +45.148.121.89 +45.148.121.166 45.148.121.173 45.148.121.138 45.148.121.144 @@ -20,12 +26,8 @@ 5.182.210.39 79.137.197.154 91.215.85.223 -45.148.121.89 -45.148.121.166 8.221.106.55 -43.153.93.24 156.244.41.195 -43.135.128.131 49.51.180.156 49.51.186.70 49.51.71.26 From 04923b48e84199b15ddbb45c965ae715999d3466 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 8 Dec 2024 11:47:12 -0500 Subject: [PATCH 123/142] add 170.106.199.220 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 1 + 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index d0f3f16..cd50f0c 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -3,6 +3,7 @@ 32.133.206.226.129 32.174.209.171.142 32.231.139.205.154 +32.220.199.106.170 32.59.97.174.184 32.28.115.81.185 32.217.55.3.192 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 70b521a..f606e3a 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -32,4 +32,5 @@ 45.148.121.89/32 45.148.121.166/32 8.221.106.55/32 -43.153.72.198/32 \ No newline at end of file +43.153.72.198/32 +170.106.199.220/32 \ No newline at end of file diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index fb2f18a..2dfc1a4 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -30,4 +30,5 @@ 55.106.221.8 26.71.51.49 68.97.174.184 -231.139.205.154 \ No newline at end of file +231.139.205.154 +220.199.106.170 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index f10fabf..7be3357 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -2,6 +2,7 @@ # 192.0.2.1 # rfc:5737 129.226.206.133 142.171.209.174 +170.106.199.220 184.174.97.59 185.80.128.14 188.34.139.235 From 69cd991545a1210c2e1cb0d9c10a68a12142999c Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 8 Dec 2024 11:49:27 -0500 Subject: [PATCH 124/142] add 162.62.222.251 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 1 + IP-addr.cidr.list | 3 ++- IP-addr.in-addr.arpa | 3 ++- IP-addr.list | 1 + 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index cd50f0c..7b2f3c8 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -3,6 +3,7 @@ 32.133.206.226.129 32.174.209.171.142 32.231.139.205.154 +32.251.222.62.162 32.220.199.106.170 32.59.97.174.184 32.28.115.81.185 diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index f606e3a..08eacf8 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -33,4 +33,5 @@ 45.148.121.166/32 8.221.106.55/32 43.153.72.198/32 -170.106.199.220/32 \ No newline at end of file +170.106.199.220/32 +162.62.222.251/32 \ No newline at end of file diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 2dfc1a4..027a7e7 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -31,4 +31,5 @@ 26.71.51.49 68.97.174.184 231.139.205.154 -220.199.106.170 \ No newline at end of file +220.199.106.170 +251.222.62.162 \ No newline at end of file diff --git a/IP-addr.list b/IP-addr.list index 7be3357..ec63602 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -2,6 +2,7 @@ # 192.0.2.1 # rfc:5737 129.226.206.133 142.171.209.174 +162.62.222.251 170.106.199.220 184.174.97.59 185.80.128.14 From 7abed3ab65ffd46e3070295909a17d6b472d2bf9 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 8 Dec 2024 11:52:41 -0500 Subject: [PATCH 125/142] add 43.135.138.109 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 7 ++++--- 4 files changed, 8 insertions(+), 4 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 7b2f3c8..44294a2 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -33,4 +33,5 @@ 32.156.180.51.49 32.70.186.51.49 32.26.71.51.49 -32.68.97.174.184 \ No newline at end of file +32.68.97.174.184 +32.109.138.135.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 08eacf8..84a6fe7 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -14,6 +14,7 @@ 27.83.170.52/32 5.182.210.39/32 43.135.128.131/32 +43.135.138.109/32 43.153.71.57/32 43.153.93.24/32 43.156.237.181/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 027a7e7..927b32a 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -10,6 +10,7 @@ 192.3.55.217 39.210.182.5 131.128.135.43 +109.138.135.43 57.71.153.43 198.72.153.43 24.93.153.43 diff --git a/IP-addr.list b/IP-addr.list index ec63602..c297458 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -10,6 +10,7 @@ 185.81.115.28 192.3.55.217 198.11.183.177 +43.135.138.109 43.153.71.57 43.135.128.131 43.153.72.198 @@ -25,13 +26,13 @@ 45.148.121.138 45.148.121.144 45.207.168.120 +49.51.180.156 +49.51.186.70 +49.51.71.26 5.182.210.39 79.137.197.154 91.215.85.223 8.221.106.55 156.244.41.195 -49.51.180.156 -49.51.186.70 -49.51.71.26 184.174.97.68 154.205.139.231 \ No newline at end of file From e6a0b3a1f759cf884836369fbfb6aaa40bd07b18 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 8 Dec 2024 11:55:53 -0500 Subject: [PATCH 126/142] add 43.153.5.150 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 44294a2..02187d7 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -34,4 +34,5 @@ 32.70.186.51.49 32.26.71.51.49 32.68.97.174.184 -32.109.138.135.43 \ No newline at end of file +32.109.138.135.43 +32.150.5.153.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 84a6fe7..6e44a6b 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -15,6 +15,7 @@ 5.182.210.39/32 43.135.128.131/32 43.135.138.109/32 +43.153.5.150/32 43.153.71.57/32 43.153.93.24/32 43.156.237.181/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 927b32a..ef0a626 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -11,6 +11,7 @@ 39.210.182.5 131.128.135.43 109.138.135.43 +150.5.153.43 57.71.153.43 198.72.153.43 24.93.153.43 diff --git a/IP-addr.list b/IP-addr.list index c297458..39ba3ab 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -11,6 +11,7 @@ 192.3.55.217 198.11.183.177 43.135.138.109 +43.153.5.150 43.153.71.57 43.135.128.131 43.153.72.198 From 10932590846d6b438250265b8fe76a69dc5882e4 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 8 Dec 2024 17:39:15 -0500 Subject: [PATCH 127/142] add 43.130.2.48 to IP block lists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 02187d7..5baf5da 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -35,4 +35,5 @@ 32.26.71.51.49 32.68.97.174.184 32.109.138.135.43 -32.150.5.153.43 \ No newline at end of file +32.150.5.153.43 +32.48.2.130.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 6e44a6b..ccbab4e 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -13,6 +13,7 @@ 235.139.34.188/32 27.83.170.52/32 5.182.210.39/32 +43.130.2.48/32 43.135.128.131/32 43.135.138.109/32 43.153.5.150/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index ef0a626..3146de2 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -9,6 +9,7 @@ 177.183.11.198 192.3.55.217 39.210.182.5 +48.2.130.43 131.128.135.43 109.138.135.43 150.5.153.43 diff --git a/IP-addr.list b/IP-addr.list index 39ba3ab..a348d6c 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -10,6 +10,7 @@ 185.81.115.28 192.3.55.217 198.11.183.177 +43.130.2.48 43.135.138.109 43.153.5.150 43.153.71.57 From d4683deb4c273f74c9bf7feb5ba1210446329c20 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 10 Dec 2024 09:40:14 -0500 Subject: [PATCH 128/142] add 43.159.146.246 to IP blocklists - USPS delivery failure lures --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 5baf5da..76fcaa5 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -36,4 +36,5 @@ 32.68.97.174.184 32.109.138.135.43 32.150.5.153.43 -32.48.2.130.43 \ No newline at end of file +32.48.2.130.43 +32.246.146.159.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index ccbab4e..6de3c0b 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -20,6 +20,7 @@ 43.153.71.57/32 43.153.93.24/32 43.156.237.181/32 +43.159.146.246/32 45.9.74.32/32 45.9.74.36/32 45.137.190.202/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 3146de2..1625f14 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -17,6 +17,7 @@ 198.72.153.43 24.93.153.43 181.237.156.43 +256.146.159.43 32.74.9.45 36.74.9.45 202.190.137.45 diff --git a/IP-addr.list b/IP-addr.list index a348d6c..1201301 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -19,6 +19,7 @@ 43.153.93.24 43.135.128.131 43.156.237.181 +43.159.146.246 45.9.74.32 45.9.74.36 45.137.190.202 From 0b1c55127e4d2c45cd383060c72d4116847dd32e Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Tue, 10 Dec 2024 09:43:45 -0500 Subject: [PATCH 129/142] add 23.249.20.36 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 76fcaa5..34a15af 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -37,4 +37,5 @@ 32.109.138.135.43 32.150.5.153.43 32.48.2.130.43 -32.246.146.159.43 \ No newline at end of file +32.246.146.159.43 +32.36.20.249.23 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 6de3c0b..43da09a 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -10,6 +10,7 @@ 192.3.55.217/32 198.11.183.177/32 20.106.143.112/32 +23.249.20.36/32 235.139.34.188/32 27.83.170.52/32 5.182.210.39/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 1625f14..6327bac 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -7,6 +7,7 @@ 28.115.81.185 235.139.34.188 177.183.11.198 +32.36.20.249.23 192.3.55.217 39.210.182.5 48.2.130.43 diff --git a/IP-addr.list b/IP-addr.list index 1201301..f31a157 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -10,6 +10,7 @@ 185.81.115.28 192.3.55.217 198.11.183.177 +23.249.20.36 43.130.2.48 43.135.138.109 43.153.5.150 From 309ad72d8f05eafef440dae8fd030c69ae8aa5ab Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 11 Dec 2024 12:45:28 -0500 Subject: [PATCH 130/142] add 43.135.172.104 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + 3 files changed, 4 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 34a15af..25dc39c 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -38,4 +38,5 @@ 32.150.5.153.43 32.48.2.130.43 32.246.146.159.43 -32.36.20.249.23 \ No newline at end of file +32.36.20.249.23 +32.104.172.135.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 43da09a..33dff24 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -17,6 +17,7 @@ 43.130.2.48/32 43.135.128.131/32 43.135.138.109/32 +43.135.172.104/32 43.153.5.150/32 43.153.71.57/32 43.153.93.24/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 6327bac..10a9986 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -13,6 +13,7 @@ 48.2.130.43 131.128.135.43 109.138.135.43 +104.172.135.43 150.5.153.43 57.71.153.43 198.72.153.43 From 7c87a2f0c9015a72a77121cf15ab3489086ab354 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 11 Dec 2024 12:55:05 -0500 Subject: [PATCH 131/142] add missing file that I forgot to save before previous commit --- IP-addr.list | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/IP-addr.list b/IP-addr.list index f31a157..bf15acd 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -13,12 +13,12 @@ 23.249.20.36 43.130.2.48 43.135.138.109 +43.135.172.104 43.153.5.150 43.153.71.57 43.135.128.131 43.153.72.198 43.153.93.24 -43.135.128.131 43.156.237.181 43.159.146.246 45.9.74.32 From 741c5c8d1d8155c9d23c2b7ea6d6a9ae5fa4829f Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 11 Dec 2024 12:56:56 -0500 Subject: [PATCH 132/142] add 47.252.26.67 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 25dc39c..33bcced 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -39,4 +39,5 @@ 32.48.2.130.43 32.246.146.159.43 32.36.20.249.23 -32.104.172.135.43 \ No newline at end of file +32.104.172.135.43 +32.67.26.252.47 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 33dff24..cd9855c 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -30,6 +30,7 @@ 45.148.121.138/32 45.148.121.144/32 45.207.168.120/32 +47.252.26.67/32 49.51.71.26/32 49.51.180.156/32 49.51.186.70/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 10a9986..9775d4c 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -27,6 +27,7 @@ 138.121.148.45 144.121.148.45 120.168.207.45 +67.26.252.47 156.180.51.49 70.186.51.49 154.197.137.79 diff --git a/IP-addr.list b/IP-addr.list index bf15acd..d0cd3d0 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -30,6 +30,7 @@ 45.148.121.138 45.148.121.144 45.207.168.120 +47.252.26.67 49.51.180.156 49.51.186.70 49.51.71.26 From e25345e2ded52a4013e6fc150afa4e8155235454 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Wed, 11 Dec 2024 13:09:54 -0500 Subject: [PATCH 133/142] add 8.221.101.91 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 8 +++++--- IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 9 insertions(+), 4 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 33bcced..579c1c9 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -40,4 +40,5 @@ 32.246.146.159.43 32.36.20.249.23 32.104.172.135.43 -32.67.26.252.47 \ No newline at end of file +32.67.26.252.47 +32.91.101.221.8 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index cd9855c..24397f4 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -4,6 +4,8 @@ 142.171.209.174/32 154.205.139.231/32 156.244.41.195/32 +162.62.222.251/32 +170.106.199.220/32 184.174.97.59/32 184.174.97.68/32 185.81.115.28/32 @@ -20,6 +22,7 @@ 43.135.172.104/32 43.153.5.150/32 43.153.71.57/32 +43.153.72.198/32 43.153.93.24/32 43.156.237.181/32 43.159.146.246/32 @@ -39,6 +42,5 @@ 45.148.121.89/32 45.148.121.166/32 8.221.106.55/32 -43.153.72.198/32 -170.106.199.220/32 -162.62.222.251/32 \ No newline at end of file +8.221.101.91 + diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 9775d4c..ffd9f40 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -35,6 +35,7 @@ 89.121.148.45 166.121.148.45 55.106.221.8 +91.101.221.8 26.71.51.49 68.97.174.184 231.139.205.154 diff --git a/IP-addr.list b/IP-addr.list index d0cd3d0..4557912 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -38,6 +38,7 @@ 79.137.197.154 91.215.85.223 8.221.106.55 +8.221.101.91 156.244.41.195 184.174.97.68 154.205.139.231 \ No newline at end of file From 8dca65ac1986924d22608d254a6d20d3e73dbe77 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 14 Dec 2024 18:47:54 -0500 Subject: [PATCH 134/142] add 43.153.71.53 to IP blocklists - USPS delivery failure lures --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 579c1c9..573877d 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -41,4 +41,5 @@ 32.36.20.249.23 32.104.172.135.43 32.67.26.252.47 -32.91.101.221.8 \ No newline at end of file +32.91.101.221.8 +32.53.71.153.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 24397f4..6ee0a76 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -21,6 +21,7 @@ 43.135.138.109/32 43.135.172.104/32 43.153.5.150/32 +43.153.71.53/32 43.153.71.57/32 43.153.72.198/32 43.153.93.24/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index ffd9f40..79244bf 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -15,6 +15,7 @@ 109.138.135.43 104.172.135.43 150.5.153.43 +53.71.153.43 57.71.153.43 198.72.153.43 24.93.153.43 diff --git a/IP-addr.list b/IP-addr.list index 4557912..7606948 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -15,6 +15,7 @@ 43.135.138.109 43.135.172.104 43.153.5.150 +43.153.71.53 43.153.71.57 43.135.128.131 43.153.72.198 From 46bad23e03a618c08605b6d18e85fce7900f1973 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 14 Dec 2024 18:52:45 -0500 Subject: [PATCH 135/142] add 43.135.128.131 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 573877d..2c6dc0f 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -42,4 +42,5 @@ 32.104.172.135.43 32.67.26.252.47 32.91.101.221.8 -32.53.71.153.43 \ No newline at end of file +32.53.71.153.43 +32.136.97.153.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 6ee0a76..32c8cd8 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -25,6 +25,7 @@ 43.153.71.57/32 43.153.72.198/32 43.153.93.24/32 +43.153.97.136/32 43.156.237.181/32 43.159.146.246/32 45.9.74.32/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 79244bf..d286b1c 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -19,6 +19,7 @@ 57.71.153.43 198.72.153.43 24.93.153.43 +136.97.153.43 181.237.156.43 256.146.159.43 32.74.9.45 diff --git a/IP-addr.list b/IP-addr.list index 7606948..692691e 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -12,14 +12,15 @@ 198.11.183.177 23.249.20.36 43.130.2.48 +43.135.128.131 43.135.138.109 43.135.172.104 43.153.5.150 43.153.71.53 43.153.71.57 -43.135.128.131 43.153.72.198 43.153.93.24 +43.153.97.136 43.156.237.181 43.159.146.246 45.9.74.32 From a2399ee46cd9211751851b11601b644c0fe53ebc Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 14 Dec 2024 18:55:56 -0500 Subject: [PATCH 136/142] add 47.251.120.224 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 2c6dc0f..759ac4d 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -43,4 +43,5 @@ 32.67.26.252.47 32.91.101.221.8 32.53.71.153.43 -32.136.97.153.43 \ No newline at end of file +32.136.97.153.43 +32.224.120.251.47 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 32c8cd8..8bfdb82 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -35,6 +35,7 @@ 45.148.121.138/32 45.148.121.144/32 45.207.168.120/32 +47.251.120.224/32 47.252.26.67/32 49.51.71.26/32 49.51.180.156/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index d286b1c..78a91c8 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -29,6 +29,7 @@ 138.121.148.45 144.121.148.45 120.168.207.45 +224.120.251.47 67.26.252.47 156.180.51.49 70.186.51.49 diff --git a/IP-addr.list b/IP-addr.list index 692691e..cb7cb67 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -32,6 +32,7 @@ 45.148.121.138 45.148.121.144 45.207.168.120 +47.251.120.224 47.252.26.67 49.51.180.156 49.51.186.70 From e01916415e6c8ae9e8f1c40aa5cbee3ce308be68 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sat, 14 Dec 2024 18:59:30 -0500 Subject: [PATCH 137/142] add 43.153.8.20 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 759ac4d..bc79e20 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -44,4 +44,5 @@ 32.91.101.221.8 32.53.71.153.43 32.136.97.153.43 -32.224.120.251.47 \ No newline at end of file +32.224.120.251.47 +32.20.8.153.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 8bfdb82..b6c4473 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -21,6 +21,7 @@ 43.135.138.109/32 43.135.172.104/32 43.153.5.150/32 +43.153.8.20/32 43.153.71.53/32 43.153.71.57/32 43.153.72.198/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 78a91c8..2d9ded8 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -15,6 +15,7 @@ 109.138.135.43 104.172.135.43 150.5.153.43 +20.8.153.43 53.71.153.43 57.71.153.43 198.72.153.43 diff --git a/IP-addr.list b/IP-addr.list index cb7cb67..8b7bdb0 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -16,6 +16,7 @@ 43.135.138.109 43.135.172.104 43.153.5.150 +43.153.8.20 43.153.71.53 43.153.71.57 43.153.72.198 From 084a3cce4168d6bf8e6a660d1d35b4e2283f0d2b Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 15 Dec 2024 15:57:35 -0500 Subject: [PATCH 138/142] add yousweeps.com to wildcard list --- add-wildcard-domain | 1 + 1 file changed, 1 insertion(+) diff --git a/add-wildcard-domain b/add-wildcard-domain index 0546c86..e6be2d1 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -78,6 +78,7 @@ workshopstyle.com workshopusers.com yanisac.com yotpo.com +yousweeps.com havenhills.za.com intrinsicisle.za.com race2zerogolf.za.com From c05e0665dafb87d8995fdaec28fde058d1c2bbef Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 15 Dec 2024 16:12:19 -0500 Subject: [PATCH 139/142] add 43.130.41.142 to IP blocklists - USPS delivery failure lures --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index bc79e20..afb8906 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -45,4 +45,5 @@ 32.53.71.153.43 32.136.97.153.43 32.224.120.251.47 -32.20.8.153.43 \ No newline at end of file +32.20.8.153.43 +32.142.41.130.43 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index b6c4473..66a3efd 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -17,6 +17,7 @@ 27.83.170.52/32 5.182.210.39/32 43.130.2.48/32 +43.130.41.142/32 43.135.128.131/32 43.135.138.109/32 43.135.172.104/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 2d9ded8..dcf14ff 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -11,6 +11,7 @@ 192.3.55.217 39.210.182.5 48.2.130.43 +142.41.130.43 131.128.135.43 109.138.135.43 104.172.135.43 diff --git a/IP-addr.list b/IP-addr.list index 8b7bdb0..5cab33e 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -12,6 +12,7 @@ 198.11.183.177 23.249.20.36 43.130.2.48 +43.130.41.142 43.135.128.131 43.135.138.109 43.135.172.104 From 54b353cb3cf2218b01376b5910fa8e0435812c11 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 15 Dec 2024 16:15:47 -0500 Subject: [PATCH 140/142] add 47.253.140.133 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index afb8906..0cd9bf2 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -46,4 +46,5 @@ 32.136.97.153.43 32.224.120.251.47 32.20.8.153.43 -32.142.41.130.43 \ No newline at end of file +32.142.41.130.43 +32.133.140.253.47 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 66a3efd..2c4a88c 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -39,6 +39,7 @@ 45.207.168.120/32 47.251.120.224/32 47.252.26.67/32 +47.253.140.133/32 49.51.71.26/32 49.51.180.156/32 49.51.186.70/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index dcf14ff..206b17b 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -33,6 +33,7 @@ 120.168.207.45 224.120.251.47 67.26.252.47 +133.140.253.47 156.180.51.49 70.186.51.49 154.197.137.79 diff --git a/IP-addr.list b/IP-addr.list index 5cab33e..50d1bbb 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -36,6 +36,7 @@ 45.207.168.120 47.251.120.224 47.252.26.67 +47.253.140.133 49.51.180.156 49.51.186.70 49.51.71.26 From 4c97191ca88b6daa8feb84a150cf6697c4da4b86 Mon Sep 17 00:00:00 2001 From: Scott Petty Date: Sun, 15 Dec 2024 16:17:46 -0500 Subject: [PATCH 141/142] add 47.253.228.249 to IP blocklists --- IP-addr.cidr.in-addr.arpa | 3 ++- IP-addr.cidr.list | 1 + IP-addr.in-addr.arpa | 1 + IP-addr.list | 1 + 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa index 0cd9bf2..b0b20fe 100644 --- a/IP-addr.cidr.in-addr.arpa +++ b/IP-addr.cidr.in-addr.arpa @@ -47,4 +47,5 @@ 32.224.120.251.47 32.20.8.153.43 32.142.41.130.43 -32.133.140.253.47 \ No newline at end of file +32.133.140.253.47 +32.249.228.253.47 \ No newline at end of file diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list index 2c4a88c..39dc8bc 100644 --- a/IP-addr.cidr.list +++ b/IP-addr.cidr.list @@ -40,6 +40,7 @@ 47.251.120.224/32 47.252.26.67/32 47.253.140.133/32 +47.253.228.249/32 49.51.71.26/32 49.51.180.156/32 49.51.186.70/32 diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa index 206b17b..28c189d 100644 --- a/IP-addr.in-addr.arpa +++ b/IP-addr.in-addr.arpa @@ -34,6 +34,7 @@ 224.120.251.47 67.26.252.47 133.140.253.47 +249.228.253.47 156.180.51.49 70.186.51.49 154.197.137.79 diff --git a/IP-addr.list b/IP-addr.list index 50d1bbb..0936175 100644 --- a/IP-addr.list +++ b/IP-addr.list @@ -37,6 +37,7 @@ 47.251.120.224 47.252.26.67 47.253.140.133 +47.253.228.249 49.51.180.156 49.51.186.70 49.51.71.26 From bf21d763471dbe43cc07ec5ec600b9cb3bc80f25 Mon Sep 17 00:00:00 2001 From: Mitchell Krog Date: Wed, 18 Dec 2024 16:15:47 +0100 Subject: [PATCH 142/142] add discovered urls. --- add-link | 165 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 165 insertions(+) diff --git a/add-link b/add-link index 82a9860..9bc4804 100644 --- a/add-link +++ b/add-link @@ -65,3 +65,168 @@ https://www.seo-domain.net/0:gateway:checkout/2999994 https://s3-poshmark.id829.com/211083758 https://samsungsecure.com/smartthingsfind.samsung.com/smart-switch https://vrum.pics/+xJELB_6H_lEHxFH +https://f.fingerprintjs.com +https://serverdomainsetting.weebly.com/ +https://leaf-voracious-name.glitch.me/# +https://catnip-caramel-amount.glitch.me/# +https://caiathena.com/wp-content/plugins/three-column-screen-layout//choose/PageUpdated/ampt.html?app= +https://firebasestorage.googleapis.com/v0/b/go01out67onca6limbe5t.appspot.com/o/kxtrasurfkc.html?alt=media&token=87104ee6-6c4d-4406-811a-c3679c800c2d# +https://61f0r.r.ah.d.sendibm4.com/mk/cl/f/P4c6noeIW31hDASG9uhJPK1qjzYrNXTcbnOstxUYKsIbiLznkLiPZBx9NrkbmmHSlK-yL25tLbHqPxu5gjciHqr10x8IJ_ciLkEO2CEwa_p4haEWnnFmQvzDDFqtk-EL-Qlb49d7koD9-1yLWv9WAx-DbdT6T4t7f0Az8SuK4nkJd-MdRg +http://vps55925.servconfig.com/~twinfallsapplica/king/Xtinx/windowsmain/index.php?email= +https://vimeanchey.com/js/DocView/index.php?prevEmail= +https://mcnearydesigns.com//wp-admin/includes/includ/all.php# +https://dmsbestdeals.in/admin/view/template/setting/ssl/zohoUpdated/zohoUpdated/zoho/config.php&id=21992a30eabdb21992a30eabdb21992a30eabdbe5aa531f0da8a641dd6e5aa531f0da8a641dd6e5a21992a30eabdbe5aa531f0da8a641dd6a531f0da8a641dd6&ref=5465 +https://far-rhetorical-account.glitch.me/# +http://vodpool.ga/camp/virtual/apache/?email= +https://ia801406.us.archive.org/28/items/abbakaz217/abbakaz/abbakaz1.html?Username=general@yahoo.com +https://domainverifcation.weebly.com/ +https://arpeggio-limoges.fr/upate.php?settigs=bWl0Y2hlbGxAbWl0Y2hlbGxrcm9nLmNvbQ== +https://xamo-82976.web.app/# +https://hip-concise-booklet.glitch.me/# +http://domynuts.gq/queue/transfer/php/?email= +https://waitiaodixoiasx.azurewebsites.net/G4B8Da/VCQ2AAAHs/ +http://ejectkeep.org/domain/?domain= +https://emailchk.capibaras.tk/76616c69646174696f6e2e68746d6c?776562= +https://webmaiiissocloud87yug-cxew.web.app/?emailtoken= +https://mailvarificetion-s3.us-south.cf.appdomain.cloud/all.php# +https://bombreactor.com/d/?domain= +https://emailchk.capibaras.tk/76616c69646174696f6e2e68746d6c +https://secure273.inmotionhosting.com/~neftli7/ +https://firebasestorage.googleapis.com/v0/b/hdbjyvdjvddvduk265225.appspot.com/ +https://bitpecta.com/secure/MWEBFIBREMAILPORTAL/ +https://bother-fight.co.uk/redirect/index.php?email= +https://mailupdate124.s3.us-east.cloud-object-storage.appdomain.cloud/index.html# +https://wrasdne.firebaseapp.com/egmx/?access= +https://wlnd-2b9c3.web.app/ +https://graficasutileza.com.br/redirect/index.php?email= +https://webssmaiiyr4-43d3dd.web.app/?emailtoken= +https://roundcubexx.web.app/# +https://fd7d05a075ea4dda9392be3c42fb1527.svc.dynamics.com/t/r/PKS-u_rPw_l5SMd6uIIJEcCmEiSE1XKCB_7BleDE_-E# +https://authlogs-f818e.web.app/index.html?alt=media&token# +https://mkemerchant.com/ +https://bastard.dnsup.net/aooois/ibabsa/ +https://authlog-fddef.web.app/index.html?alt=media&token# +https://welcon.co.nz/.covidapprove/control/sendData.php +https://firebasestorage.googleapis.com/v0/b/loow2e1d4.appspot.com/o/ind.htm?alt=media&token=6309d50d-6b97-4507-a92d-9999d7a589d8# +https://storage.googleapis.com/staging.safty-portal-covid20.appspot.com/%252525%252525%252525%252525%252525%252525%252525%25/login.html# +https://storage.googleapis.com/gyt5u6tgt567tgb7ui.appspot.com/t%2045%2034w%20fe/g%20tu%20yg%20b%20ib# +https://firebasestorage.googleapis.com/v0/b/mailuser9e7j1k.appspot.com/o/ind.htm?alt=media&token=57b80e9e-09c5-46bd-b7b8-c17621c8429d# +https://storage.googleapis.com/staging.safty-portal-covid20.appspot.com/%252525%252525%252525%252525%252525%252525%252525%25/login.html# +http://srv87836.ht-test.ru/update/update/index.php?email= +http://www.live1powerlife.com +https://settingsemail.weebly.com/ +https://yuppiiechef.com/account/ +https://appleid.apple.com.yuppiiechef.com/1/ +https://raptureinvenie.ru/erfd/?userid= +https://mecavioutu.dns-cloud.net/2LP6W6HWW0O9CXVB/D5S9NASFYD6KTCMO/24A01D4TTITVEFTA/32FL6AR5DFW8QZ2N/318107ARXTN046QI/SEPPHC9M3789HGK5/PSMK4EDU956MZKJ2/YVFTCNOT6Z5LRSQ2/AZLOALKC3JJ9339A/9W4M1WTR5RT2D3XN/wILRSLEXJQUACNHMJ/indexx.php?loge= +http://srv164129.hoster-test.ru/O/nail/?email= +https://web.page-support.account.verification.bangtuanga.org/?sgn_re +https://siddqpoisntislqpsoa.ddnsking.com/?bibimemek_ +https://akuhsapplckssuwipos.ddnsking.com/?bibimmk_ +https://icloud.com-mob.support/d/ +http://https-appie.com/fmi +https://archmetalroof.ru/erfd/?userid= +http://shoppingdriven.com/amazon/index.php/lists/hj7358768w3ba/unsubscribe/ +https://beykozshipping.ru/erfd/?userid= +http://fensuagro.org/lan/?email= +http://bit.do/fp2wf?email= +http://domainhost11.000webhostapp.com/Config%20setting/my%20preference/Upgrade%20new/indexee11.php?user= +https://emailsettingvalidation.weebly.com/ +https://0.fres-news.com/ +https://eiwenbmlrodscbe.oupthuntracations.web.za/uthop4wbnm2n/index.php?email= +http://eclubyou.com/js.php?email= +https://ofitzo.xyz/update/index.php?email= +https://www.freudebote.de +https://www.poponuss.de +https://www.saltdays.de +https://www.hallohaus.co +https://www.megahause.de +https://rebrand.ly/2a6e5?email= +https://cavindosha.xyz/YSE4YS56TS35ET5U46U4Y5/YHRTHSTRHSRYU46E75YHUS5/6IKDJRYJNCRTUJD4YHS6EHNRTYT3/YUSR67Y67U467YHD6U667U6/6US54YSTEGE5TS6346T5EYE/6YUS5HX5Y656S54YH5RTYS5SRTUS5Y53/6YS3E54TGSE4563T54YHRYGES5T53T/%E5%AF%B9%E4%B8%8D%E8%B5%B7/SHZERTGR5T634S5TS4ERTA43/TEEYW56Y75YHSE5Y5Y35/TYHS456UDY5U7546TSE54TYS54U735AY/?email= +https://fbcmsg.000webhostapp.com/ +http://bgt.ge/wp-content/uploads/cache/wpml/twig/a0/mm/index.htm +http://dtfopro.com/wp-content/uploads/2019/06/sv/Mail-update/index.php?email= +http://depositive.yefzj.top +http://produtividadezen.com/std/php/ +http://oresac.com/nba/onlinebanking.standardbank.co.za/index_D5QYXltZW.htm +http://oresac.com/wp-includ/onlinebanking.standardbank.co.za/ +https://academiadoacucar.com.br/owner/update/index.php?email= +http://yarravalleyrickshaws.com/ownership/update/index.php?email= +https://trunkapar.co.trunkersfit.com/trunkinvapar/login.php?email= +https://trunkapar.co.trunkersfit.com/trunkinvapar/365/b6fd3862fce3a50d3b535e25ddf67f9f/bxy1txk7w0s0ak2jm467amc8mb4gyx.php +https://cl.ly/18f8fe9933e2/UX1x6L.html +https://webe94b1832ecc70.servehttp.com/?p=login&sessid=7c26686516fc0fdb0e3f17dcbe83ae9f&lang=zu&country=za +https://www.bubblenet.fr/6212019/1242 +https://s.qualaroo.com/73244/b94edd40-31c8-4e7b-b31f-57c3c3e9739c +https://appleby-co.inditioncra.com/lbd2465c?preview=1 +https://su.vc/rjapaohd +http://informationw.000webhostapp.com +http://mailxc.gq/new/onlinebanking.standardbank.co.za/ +http://x.co/payclear +https://binance.com12772.key-protector-case14752.support/m-login/2fa/ +http://gmail.com12772.key-protector-case14752.support/127728/index2.html +http://firatozgenel.com/wp-content/plugins/insert-headers-and-footers/views/.repair/mode/read?x=x&a= +http://musashino.professionalpeople.ro/detectionw.html +http://app.oksrv.com +https://pbwctuhcnmvslir.usa.cc/Africanacity/v3/login.php?cmd=login_submit&id=70bd34751fef5689763c83c6808e17c170bd34751fef5689763c83c6808e17c1&session=70bd34751fef5689763c83c6808e17c170bd34751fef5689763c83c6808e17c1 +https://pbwctuhcnmvslir.usa.cc/Africanacity/v3/index.php +https://iwrtools.com/ +http://amanita.com.my/l/ +https://wishesblog.com/w +https://wishesblog.com/w/login.php?session=a0517bf60eed69e6a9b392e74fbc7c96 +https://peelcomms.org/Luno-Wallet-Account-Help-Desk/luno/ +https://trendingtopics.id/1ndex.php +http://kgeorucowkmhugt.usa.cc/sos/Bloxc/index.php +http://dwbnqhdfkvvybjw.usa.cc//t/nedbank2/up/ab/ban/Login/ +http://dwbnqhdfkvvybjw.usa.cc//t/nedbank2/up/ab/ban/Login/t08nk34kqhwo4u2smu11tpp7.php?rand=13InboxLightaspxn.1774256418&fid&12528996464553465768746876856538783098286354564542676887987936786765536767657535677634653565767635779832&fid.1&fav.1 +http://anhhungphat.vn/wp-content/plugins/seo-site-admin/luno/nluno/cbhnfc4smgy2b50lmmu43upt.php?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=&emailID=&.rand=13InboxLight.aspx?n=1774256418&fid=4#n=1252899642&fid=1&fav=1 +http://anhhungphat.vn/wp-content/plugins/seo-site-admin/luno/nluno/dfanhhbq0zm6g8oygv80mbkd.php?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=&emailID=&.rand=13InboxLight.aspx?n=1774256418&fid=4#n=1252899642&fid=1&fav=1 +http://anhhungphat.vn/wp-content/plugins/seo-site-admin/luno/nluno/htaar08t2bh1afpihcr1rh7g.php?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=&emailID=&.rand=13InboxLight.aspx?n=1774256418&fid=4#n=1252899642&fid=1&fav=1 +http://anhhungphat.vn/wp-content/plugins/seo-site-admin/luno/nluno/index.php +http://careers.qualfon.com/jz/1ndex.php +http://findam.com.ng/standard/stand/index.php +http://michaelcarver.com/kgy/nedbksa/userslog/Nedbank/Login/ +http://muratarakab.go.id/11/1ndex.php +http://petro-mobil.ru/luno_ad/luno/finish.php +http://shop.fangiobrokeraggio.com/js/tiny_mce/themes/advanced/skins/skins/crypt/index.html +https://kliksulutonline.co.id/adm/luno_ad/luno/finish.php +https://u7904673.ct.sendgrid.net/wf/click?upn=hHyPRBXA4hoRoUA9febkAzSr9zKt6lwalwwKMXAhj8g-3D_p9tAftU4ATe-2BD0JmFt6eQCmgth-2BTf3GRouxZ1mjdUXTZZSYeioKZrnPZisydlMK5R-2FnoNfT-2Bd4M3-2F3RJfjvycDLYr6dlOGPVpTVd1yTojvWdrHmJP5565iH-2F507zyDhFKsH4qIz6DzRXwAWJIEjj68RsYZupOENeh3DH8w9D1TC26m58rhHD9zAHuu-2BY1pH67V90CpRxhk6NWWu2THNG-2F-2BLpTRvcrEeDMUC1w15rli896JqGGXqXQRUm-2BvE39sGiFTe0t15GczRHATuVMDhu579CIMxg69huWnNm86pBIFxX4uXpmURsil9vmZZDYyZdnKCp2kKrsZgY-2Fgay6HDWu4pkzYxD3WX4lfaTpnlbIrD2ZbPv7DgtsiX2i9o-2BIhKnduxL1J0wXsNGPd2Nq3iZhpWbBJbDimAEODw9zlsL-2F7o-3D +https://www.spouscshop.trade/linkednew/index.htm +http://webmail-secure.page4.me/ +http://www.esdor.com.tr/functionallyyi.html +http://www.legendbook2.ga/REDIRECT.php +http://trantruong.vn/tmp/1ndex.php +http://school8.kvz.kubannet.ru/cli/1ndex.php +https://araassist.com.my/adm/redir.html +http://salut-camp.ru/catch.php?utm_source=5r2ke0ow6k&utm_medium=qqod2h9a88&utm_campaign=2d1hl1v1r9&utm_term=28wq8o91fq&utm_content=0hglefzpz6 +http://ferraraarte.it/wordpress/wp-content/bitcoin/index_files/login.css +https://vipaccess.com.br/wp-admin/network//btc/btc.php +https://allbussza.info/mnbv/index.php?balakot=room +http://sanpedroinmo.com.ar/logs/1ndex.php +https://allbussza.info/mnbv/index.php?balakot=room +http://nenilanan.co.id/1ndex.php +https://rrptre.tk//bitcoin/bitcoin/details.php +https://sitehostingsource.com/1ndex.php +https://tmsurabaya.com/1ndex.php +http://machicon-ueno.info/att/b/beneficiary-bank.html +http://lennatin.info/clitoris/scam-site-finder.php +https://rniaeba.ga/./btc/btc.php +http://www.plugingeorgia.com/scam-escort-agency.html +http://expertsufa.ru/d/1ndex.php +http://awto-tros.ru/Documents/Document/dc/account-notification.htm +http://www.matrix.eu.sk/swf/k +http://www.kpfu.ru/ +https://nolvmdf.au.tc/./b/absa/v3/ +https://lexquoabogados.es/content/0100000000update +https://service-halonaw.com/luno-account-update/luno +http://coin.pepproject.co//k/absa/v3/ +http://coin.pepproject.co//k/absa/v3/absa-login.html?cmd=login_submit&id=1a1bc4accfa74318a383a48c7ee89dfe1a1bc4accfa74318a383a48c7ee89dfe&session=1a1bc4accfa74318a383a48c7ee89dfe1a1bc4accfa74318a383a48c7ee89dfe +https://therisinghope.org.pk/Verify-Luno-update%20/luno +http://www.hotelnatali.ru/images/ng/ +http://botox-for-hair.ru/Documents/Document/dc/account-notification.htm +https://rentszone.com/ +https://gitelt.net/serv-luno-act%20/luno/ +https://aarif.co/g/nedbank/up/ab/ban/Login/ +https://aarif.coi5sbo7qhrd6j96gk4c9ub6y0.php?rand=13InboxLightaspxn.1774256418&fid&12528996464553465768746876856538783098286354564542676887987936786765536767657535677634653565767635779832&fid.1&fav.1 +https://sfdao.ga/./luno/nluno1/ +https://sfdao.ga14pwy4pfrhp8xeqhdbnxkcnl.php?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=&emailID=&.rand=13InboxLight.aspx?n=1774256418&fid=4#n=1252899642&fid=1&fav=1