From f2a712de3de35df871bf46efeb1d868a0d6dd404 Mon Sep 17 00:00:00 2001
From: Spirillen <pdns@protonmail.com>
Date: Fri, 5 Jul 2024 00:17:49 +0200
Subject: [PATCH] r2.dev

Closes https://github.com/mypdns/matrix/issues/632

Rel
- https://github.com/mypdns/matrix/issues/607
- https://github.com/mitchellkrogza/phishing/pull/441
---
 source/phishing/domains.list | 415 ++++++++++++++++++++---------------
 1 file changed, 240 insertions(+), 175 deletions(-)

diff --git a/source/phishing/domains.list b/source/phishing/domains.list
index 19a28899d70b..30ac8230b717 100644
--- a/source/phishing/domains.list
+++ b/source/phishing/domains.list
@@ -1,76 +1,34 @@
-00f74ba44b80f08e469019d0c9fef3f3e48564247e-apidata.googleusercontent.com
-0ffice365-1drvve-oneauthmx1drive.glitch.me
-107.64.70.34.bc.googleusercontent.com
-109.245.225.35.bc.googleusercontent.com
-18442025571hotmailpasswordrecovery.wordpress.com
-24.174.232.35.bc.googleusercontent.com
-27.251.247.35.bc.googleusercontent.com
-32.19.192.35.bc.googleusercontent.com
-91frcktxh.visualook.com
-a191bc.myshopify.com
-a2plcpnl0019.prod.iad2.secureserver.net
-a2plcpnl0153.prod.iad2.secureserver.net
-a2plcpnl0166.prod.iad2.secureserver.net
-a2plcpnl0176.prod.iad2.secureserver.net
-a2plcpnl0186.prod.iad2.secureserver.net
-a2plcpnl0192.prod.iad2.secureserver.net
-a2plcpnl0199.prod.iad2.secureserver.net
-a2plcpnl0242.prod.iad2.secureserver.net
-a2plcpnl0253.prod.iad2.secureserver.net
-a2plcpnl0268.prod.iad2.secureserver.net
-a2plcpnl0310.prod.iad2.secureserver.net
-a2plcpnl0351.prod.iad2.secureserver.net
-a2plcpnl0367.prod.iad2.secureserver.net
-a2plcpnl0370.prod.iad2.secureserver.net
-a2plcpnl0396.prod.iad2.secureserver.net
-a2plcpnl0399.prod.iad2.secureserver.net
-a2plcpnl0447.prod.iad2.secureserver.net
-a2plcpnl0467.prod.iad2.secureserver.net
-a2plcpnl0504.prod.iad2.secureserver.net
-a2plcpnl0512.prod.iad2.secureserver.net
-a2plcpnl0523.prod.iad2.secureserver.net
-a2plcpnl0560.prod.iad2.secureserver.net
-a2plcpnl0618.prod.iad2.secureserver.net
-a2plcpnl0680.prod.iad2.secureserver.net
-a2plcpnl0695.prod.iad2.secureserver.net
-a2plcpnl0708.prod.iad2.secureserver.net
-a2plcpnl0711.prod.iad2.secureserver.net
-a2plcpnl0728.prod.iad2.secureserver.net
-a2plcpnl0742.prod.iad2.secureserver.net
-a2plcpnl0795.prod.iad2.secureserver.net
-a2plcpnl0828.prod.iad2.secureserver.net
-a2plcpnl0879.prod.iad2.secureserver.net
-a2plcpnl0910.prod.iad2.secureserver.net
-a2plcpnl0911.prod.iad2.secureserver.net
-a2plcpnl0920.prod.iad2.secureserver.net
-a2plcpnl0935.prod.iad2.secureserver.net
-a2plcpnl0944.prod.iad2.secureserver.net
-a2plcpnl0950.prod.iad2.secureserver.net
-abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
-adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com
-adobepewjgronjgnwkengkjwengrj.pythonanywhere.com
+zc11m.csb.app
+documents-download-almeida-3d331c.netlify.app
+universalent-j2hm84bg1-rosamelxl.vercel.app
 alignmentlidjsonpanz.web.app
-americasupport.wordpress.com
-api.lgin.msa.trafficmanager.net
-app.speedywaiver.io
-att-accsupport-web.chapterandver.se
-att-mail.pages.dev
+dogecoin20-st.web.app
+jascruipler.web.app
+restore637908-coinbase-us.web.app
+web.ncf.ca
+post.handle-ing.cc
+post.material-flow.cc
+oficialwords.2ix.ch
+discord.hypesquad-alist.repl.co
+discord.hypesquad-login.repl.co
+discord.hypesquadgo.repl.co
+login.moderator-discord.repl.co
+dw.adyboh.com
+wy.adyboh.com
+s3.amazonaws.com
+dallas146.arvixeshared.com
+dallas152.arvixeshared.com
+dallas168.arvixeshared.com
+dallas174.arvixeshared.com
+dallas177.arvixeshared.com
+dallas181.arvixeshared.com
+usps.catchfire-parcel.com
 bafybeib4aex5jieyhv62sqgto6xmlbzafhfenth3vimpdzu76kqe6yoc3e.ipfs.cf-ipfs.com
-bafybeib7qftc7bgvhkdew2purmpqalnn2knkwefxjdgeuskqd5spht4jym.ipfs.w3s.link
-begincellcdn.pages.dev
-bitflyer.sviluppo.host
+dmutahad.ddgrils.com
 blog.dularsharma.com
-blurverse.pages.dev
-borsbrietjblrenlgbrlenhjt.pythonanywhere.com
-brainy-low-saturnalia.glitch.me
-brittax.wordpress.com
-cfgxgfxf.pages.dev
-chainsrectify.pages.dev
+klelnanzelgen-de.egyptianrealtor.com
+montclair59108.lt.emlnk.com
 chomatruider.firebaseapp.com
-claim-pork.pages.dev
-clfpages2.pages.dev
-confirmation-dbsandposb.herokuapp.com
-coronasushi.com.de
 coronavirus-2019.firebaseio.com
 coronavirus-266714.firebaseio.com
 coronavirus-3ffb2.firebaseio.com
@@ -85,7 +43,6 @@ coronavirus-daily-status.firebaseio.com
 coronavirus-eba7a.firebaseio.com
 coronavirus-protection-6d180.firebaseio.com
 coronavirus-statistics-710b6.firebaseio.com
-coronavirus-tracker-api.herokuapp.com
 coronavirusmap-eb48d.firebaseio.com
 covid-19-6538f.firebaseio.com
 covid-19-app.firebaseio.com
@@ -96,64 +53,185 @@ covid-19-lk-dev.firebaseio.com
 covid19-a71d9.firebaseio.com
 covid19-dd7f7.firebaseio.com
 covid19-fb3d9.firebaseio.com
-covid19.tfone.ir
 covid19map-269302.firebaseio.com
+flutter-covid19.firebaseio.com
+online-coronavirus-268608.firebaseio.com
+wuhancoronavirustracker-693c1.firebaseio.com
+storage.googleapis.com
+00f74ba44b80f08e469019d0c9fef3f3e48564247e-apidata.googleusercontent.com
+107.64.70.34.bc.googleusercontent.com
+32.19.192.35.bc.googleusercontent.com
+109.245.225.35.bc.googleusercontent.com
+24.174.232.35.bc.googleusercontent.com
+27.251.247.35.bc.googleusercontent.com
+steam.guesskings.com
+confirmation-dbsandposb.herokuapp.com
+coronavirus-tracker-api.herokuapp.com
+o365.hyattmail.com
+personasbancobcr.iceiy.com
+proxy-discord.jeemoo.com
+mngecnttrereff-aprovallnfrmsec.lomeariamos.com
+get.midasbuy-topup.com
+a191bc.myshopify.com
+luisianos.myshopify.com
+mail3.nate.com
+gov.uk.northens.com
+objectstorage.ap-sydney-1.oraclecloud.com
+abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com
+adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com
+adobepewjgronjgnwkengkjwengrj.pythonanywhere.com
+borsbrietjblrenlgbrlenhjt.pythonanywhere.com
+freshloader.eu.pythonanywhere.com
+quicknotice.eu.pythonanywhere.com
+iengjwklengkhwebhfceref.pythonanywhere.com
+jkrngjkernghernhgtehjnhk.pythonanywhere.com
+pesjidgnojensjgerkhvjefdvs.pythonanywhere.com
+thenoticememoir.pythonanywhere.com
+wiadomoscionet.pythonanywhere.com
+email.em.teachable.com
+ff-spinefx1.terbaru-2023.com
+kbpx4fdv.svip.tesucdn.com
+mail.vimalsonic.com
+91frcktxh.visualook.com
+18442025571hotmailpasswordrecovery.wordpress.com
+americasupport.wordpress.com
+brittax.wordpress.com
+pinoyonjobs.wordpress.com
+pinoythings.wordpress.com
+thequietfurnace.wordpress.com
+infobantuanmalay.yushort.com
 cpanel10wh.bkk1.cloud.z.com
 currerentyatt.zohosites.com
-dallas146.arvixeshared.com
-dallas152.arvixeshared.com
-dallas168.arvixeshared.com
-dallas174.arvixeshared.com
-dallas177.arvixeshared.com
-dallas181.arvixeshared.com
-dana-kagett2023.lound.xyz
+coronasushi.com.de
+att-mail.pages.dev
+begincellcdn.pages.dev
+blurverse.pages.dev
+cfgxgfxf.pages.dev
+chainsrectify.pages.dev
+claim-pork.pages.dev
+clfpages2.pages.dev
 dappsyncrectify.pages.dev
 debanksdefi.pages.dev
 decentralizedappauth.pages.dev
 decentrausdchartfil.pages.dev
-dev-v3rg3a.pantheonsite.io
 diamond-hands-halo.pages.dev
-discord-fake-nitro-expiriment.glitch.me
-discord.helpcenter.io
-discord.hypesquad-alist.repl.co
-discord.hypesquad-login.repl.co
-discord.hypesquadgo.repl.co
-dmutahad.ddgrils.com
-dobsmore.glitch.me
 doctored.pages.dev
-documents-download-almeida-3d331c.netlify.app
-dogecoin20-st.web.app
-dw.adyboh.com
-email.em.teachable.com
-existingacountporbkun.italianaconserve.it
-faithful-cotton-blue.glitch.me
-fe-by01p-msa.trafficmanager.net
-ff-spinefx1.terbaru-2023.com
-flutter-covid19.firebaseio.com
-free.s689.xyz
-freshloader.eu.pythonanywhere.com
-get.midasbuy-topup.com
-gov.uk.northens.com
-iengjwklengkhwebhfceref.pythonanywhere.com
-infobantuanmalay.yushort.com
-ipv4.login.msa.akadns6.net
-jascruipler.web.app
 jgeb6c8queuspv.pages.dev
-jkrngjkernghernhgtehjnhk.pythonanywhere.com
-kbpx4fdv.svip.tesucdn.com
-klelnanzelgen-de.egyptianrealtor.com
-lgin.msa.trafficmanager.net
 livedappsrestore.pages.dev
-login.moderator-discord.repl.co
 looksrare-d1x.pages.dev
-luisianos.myshopify.com
-mail.mediafireo.xyz
-mail.vimalsonic.com
-mail3.nate.com
-materialistic-chain-chicory.glitch.me
-mngecnttrereff-aprovallnfrmsec.lomeariamos.com
-montclair59108.lt.emlnk.com
 mykeruais-assets-cubu45.pages.dev
+newwork-6oy.pages.dev
+nodesappfix-io.pages.dev
+pandoraprejeangw6.pages.dev
+paperhander.pages.dev
+paperhands-portfoliotracker-wallet.pages.dev
+pooh-moneydapps.pages.dev
+portal-platform.pages.dev
+proxysync.pages.dev
+rpcrecoveryhub.pages.dev
+sontungmtpmaidinhnhe.pages.dev
+spacexlaunch.pages.dev
+swiftblockresolve.pages.dev
+sync-7xr.pages.dev
+syncblockrectification.pages.dev
+teach-work-onlines2222177.pages.dev
+tesla-2ju.pages.dev
+tl-4-vente-privee-b1j.pages.dev
+uni-swap-protocols.pages.dev
+verifyandfixdapp.pages.dev
+webaqunarmail.pages.dev
+webmial.pages.dev
+woow-seguro-de-viajes.pages.dev
+pub-023f4dfccb2f41bfa571925f96e1ffaa.r2.dev
+pub-0259917d32254fe8ad9ed6707a70637d.r2.dev
+pub-0334284d22f84d10b2472fd742667ba8.r2.dev
+pub-09629487ba124d788b241976d2fe86cf.r2.dev
+pub-0cfe3415fa8c4bf1a3062aea01c52f88.r2.dev
+pub-0f4d3c793e8a478ea29a9906fd715070.r2.dev
+pub-12593f612a3248be91e520847ebf8634.r2.dev
+pub-147549d3891840ab821de31d767c6c84.r2.dev
+pub-187b2d91c0494f3ba5ec3b326cc8fed8.r2.dev
+pub-1c861328e4394134a30770372c6b7a26.r2.dev
+pub-1df06f7132484c6b9502522b54e36ba7.r2.dev
+pub-1eaf8d9fdf504256ad21005c83cb81f5.r2.dev
+pub-2072f07f599f497c92468dc206ee86cf.r2.dev
+pub-2202f5760eea4f5eba334684a3d617f9.r2.dev
+pub-221ef61f179e48f79f931e1342529256.r2.dev
+pub-2383eec70aab4ed3a49d29e42dc41b72.r2.dev
+pub-28dfeb6275f8415ba3e6b97dfff9ccfc.r2.dev
+pub-2af9861a7e9e48a3b45c657d7f829fad.r2.dev
+pub-2edc56a957da4485a7e513f8b429d183.r2.dev
+pub-2f99ca1602494489a730146d1445354a.r2.dev
+pub-30781165e10b47b6b8f68fdf836b82ba.r2.dev
+pub-323694060f084296849c23a93ca80681.r2.dev
+pub-339ed1e572c44e38b332b62b38f3360c.r2.dev
+pub-34529312c5dd453986b0d61ff76b5372.r2.dev
+pub-35aaf76b847448e4bac44c015fe1e7df.r2.dev
+pub-384819f358494f06b5be0b5af5226eb1.r2.dev
+pub-3a226c66bcda41e4bbeec4790c71c89c.r2.dev
+pub-3cdaaa1882ee49b9b86c737c7a415673.r2.dev
+pub-3db84b77bcfa4a4ba70ea134e6534162.r2.dev
+pub-40c506cd57fe4835b8cb3b993bbf4db2.r2.dev
+pub-4c2a13d01dab4ade9268be6759a387c8.r2.dev
+pub-4d7d8582319341bab4de01da24967d41.r2.dev
+pub-4d97631662434b85845e7be2b52b6e61.r2.dev
+pub-4e9d559e11c54314b7639d20c3d13682.r2.dev
+pub-52f45a7ed2554e079cb905f0c23e9b8d.r2.dev
+pub-68edf352d5f54adf86c1b1191639904b.r2.dev
+pub-6d663fb85dd14d5eb780578314065a6f.r2.dev
+pub-8119568960374eaf95754898eb47073c.r2.dev
+pub-8157f386fb5147f89167cfced15f1d55.r2.dev
+pub-8334a0b1a0324fdd9222e4b2545d374b.r2.dev
+pub-8bbbc30421814f1bac74c610fb3d9bf5.r2.dev
+pub-928ffaf37dd04d12b4e22eab0dc5391f.r2.dev
+pub-950afa4f5cd84f7ca09011c3d6e7f1eb.r2.dev
+pub-96fed86dbb194ac88e9e3c705f9e5649.r2.dev
+pub-976621225a0a41a99730fd00df2f79f7.r2.dev
+pub-9d425aa9335c4307a502c0721d499bdd.r2.dev
+pub-a7aa109e9db04b97ba2fc89747a05209.r2.dev
+pub-aa456431547a4e28948699d7c6a22006.r2.dev
+pub-b3fdefdd677647fe8069fd5c0cf6c412.r2.dev
+pub-b558c1ae85844c4f90468f05ab9dc09a.r2.dev
+pub-b6b9f0a2f10b4886a26f1094028c95ec.r2.dev
+pub-b808d49393464900ab418430c76582aa.r2.dev
+pub-c89637694ef84619b8853f66dc50ce61.r2.dev
+pub-c8ae5924edd84c49b96912a5a66b9423.r2.dev
+pub-c92a4cf1fb774dd79b9c7d32023ab3fa.r2.dev
+pub-cdf13789ac034ca29ab43424244b494a.r2.dev
+pub-d150cc0edea74105806ff1de75075324.r2.dev
+pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev
+pub-d8e68521c76b4ecd816eb306fc057a59.r2.dev
+pub-d9d21bff96fe4c7c808353a8e3cd886e.r2.dev
+pub-e13c11a0d7e84db8b9c7e7f4b9dc3ad9.r2.dev
+pub-e4b13c28b9ef4867a84f0a61d1d81aef.r2.dev
+pub-efe8c223714242868bdd2fa750e67f77.r2.dev
+pub-f18c3d444059460880d86ed436e28dd3.r2.dev
+pub-f6db2c0ee1c0404e886e1c7bbc03c06c.r2.dev
+pub-fa147a3cddd04e9588b0d0a71d6d87fb.r2.dev
+pub-fc37d2d339714056b7f16368b49ae532.r2.dev
+bitflyer.sviluppo.host
+wwaf.whatsas.icu
+vipp-bantuan-kerajaan-malaysiaa.oficial.my.id
+discord.helpcenter.io
+dev-v3rg3a.pantheonsite.io
+app.speedywaiver.io
+covid19.tfone.ir
+existingacountporbkun.italianaconserve.it
+bafybeib7qftc7bgvhkdew2purmpqalnn2knkwefxjdgeuskqd5spht4jym.ipfs.w3s.link
+www.b2c.unified.london
+0ffice365-1drvve-oneauthmx1drive.glitch.me
+brainy-low-saturnalia.glitch.me
+discord-fake-nitro-expiriment.glitch.me
+dobsmore.glitch.me
+faithful-cotton-blue.glitch.me
+materialistic-chain-chicory.glitch.me
+rightful-diamond-skiff.glitch.me
+water-opaque-expert.glitch.me
+we3bwebma1l-r0unclcube-web3nail-nailweb-deliv3ry.glitch.me
+qei.vhl.mybluehost.me
+service-fp0eyt3eyh.exilien.my
+ipv4.login.msa.akadns6.net
+vs.login.msa.akadns6.net
 n3plcpnl0001.prod.ams3.secureserver.net
 n3plcpnl0007.prod.ams3.secureserver.net
 n3plcpnl0011.prod.ams3.secureserver.net
@@ -208,12 +286,44 @@ n3plcpnl0277.prod.ams3.secureserver.net
 n3plcpnl0279.prod.ams3.secureserver.net
 n3plcpnl0281.prod.ams3.secureserver.net
 n3plcpnl0285.prod.ams3.secureserver.net
-newwork-6oy.pages.dev
-nodesappfix-io.pages.dev
-o365.hyattmail.com
-objectstorage.ap-sydney-1.oraclecloud.com
-oficialwords.2ix.ch
-online-coronavirus-268608.firebaseio.com
+a2plcpnl0019.prod.iad2.secureserver.net
+a2plcpnl0153.prod.iad2.secureserver.net
+a2plcpnl0166.prod.iad2.secureserver.net
+a2plcpnl0176.prod.iad2.secureserver.net
+a2plcpnl0186.prod.iad2.secureserver.net
+a2plcpnl0192.prod.iad2.secureserver.net
+a2plcpnl0199.prod.iad2.secureserver.net
+a2plcpnl0242.prod.iad2.secureserver.net
+a2plcpnl0253.prod.iad2.secureserver.net
+a2plcpnl0268.prod.iad2.secureserver.net
+a2plcpnl0310.prod.iad2.secureserver.net
+a2plcpnl0351.prod.iad2.secureserver.net
+a2plcpnl0367.prod.iad2.secureserver.net
+a2plcpnl0370.prod.iad2.secureserver.net
+a2plcpnl0396.prod.iad2.secureserver.net
+a2plcpnl0399.prod.iad2.secureserver.net
+a2plcpnl0447.prod.iad2.secureserver.net
+a2plcpnl0467.prod.iad2.secureserver.net
+a2plcpnl0504.prod.iad2.secureserver.net
+a2plcpnl0512.prod.iad2.secureserver.net
+a2plcpnl0523.prod.iad2.secureserver.net
+a2plcpnl0560.prod.iad2.secureserver.net
+a2plcpnl0618.prod.iad2.secureserver.net
+a2plcpnl0680.prod.iad2.secureserver.net
+a2plcpnl0695.prod.iad2.secureserver.net
+a2plcpnl0708.prod.iad2.secureserver.net
+a2plcpnl0711.prod.iad2.secureserver.net
+a2plcpnl0728.prod.iad2.secureserver.net
+a2plcpnl0742.prod.iad2.secureserver.net
+a2plcpnl0795.prod.iad2.secureserver.net
+a2plcpnl0828.prod.iad2.secureserver.net
+a2plcpnl0879.prod.iad2.secureserver.net
+a2plcpnl0910.prod.iad2.secureserver.net
+a2plcpnl0911.prod.iad2.secureserver.net
+a2plcpnl0920.prod.iad2.secureserver.net
+a2plcpnl0935.prod.iad2.secureserver.net
+a2plcpnl0944.prod.iad2.secureserver.net
+a2plcpnl0950.prod.iad2.secureserver.net
 p3plcpnl0238.prod.phx3.secureserver.net
 p3plcpnl0458.prod.phx3.secureserver.net
 p3plcpnl0489.prod.phx3.secureserver.net
@@ -224,29 +334,6 @@ p3plcpnl0721.prod.phx3.secureserver.net
 p3plcpnl0917.prod.phx3.secureserver.net
 p3plcpnl1035.prod.phx3.secureserver.net
 p3plcpnl1040.prod.phx3.secureserver.net
-pandoraprejeangw6.pages.dev
-paperhander.pages.dev
-paperhands-portfoliotracker-wallet.pages.dev
-personasbancobcr.iceiy.com
-pesjidgnojensjgerkhvjefdvs.pythonanywhere.com
-pinoyonjobs.wordpress.com
-pinoythings.wordpress.com
-play.apps.appsplatform.us
-pooh-moneydapps.pages.dev
-portal-platform.pages.dev
-post.handle-ing.cc
-post.material-flow.cc
-proxy-discord.jeemoo.com
-proxysync.pages.dev
-pub-c92a4cf1fb774dd79b9c7d32023ab3fa.r2.dev
-pub-fa147a3cddd04e9588b0d0a71d6d87fb.r2.dev
-qei.vhl.mybluehost.me
-quicknotice.eu.pythonanywhere.com
-restore637908-coinbase-us.web.app
-rightful-diamond-skiff.glitch.me
-rpcrecoveryhub.pages.dev
-s3.amazonaws.com
-service-fp0eyt3eyh.exilien.my
 sg2plcpnl0033.prod.sin2.secureserver.net
 sg2plcpnl0046.prod.sin2.secureserver.net
 sg2plcpnl0075.prod.sin2.secureserver.net
@@ -260,36 +347,14 @@ sg3plcpnl0013.prod.sin3.secureserver.net
 sg3plcpnl0061.prod.sin3.secureserver.net
 sg3plcpnl0072.prod.sin3.secureserver.net
 sg3plcpnl0150.prod.sin3.secureserver.net
-sontungmtpmaidinhnhe.pages.dev
-spacexlaunch.pages.dev
-steam.guesskings.com
-storage.googleapis.com
-swiftblockresolve.pages.dev
-sync-7xr.pages.dev
-syncblockrectification.pages.dev
-teach-work-onlines2222177.pages.dev
-tesla-2ju.pages.dev
-thenoticememoir.pythonanywhere.com
-thequietfurnace.wordpress.com
-tl-4-vente-privee-b1j.pages.dev
-uni-swap-protocols.pages.dev
-universalent-j2hm84bg1-rosamelxl.vercel.app
-usps.catchfire-parcel.com
-verifyandfixdapp.pages.dev
-vipp-bantuan-kerajaan-malaysiaa.oficial.my.id
-vs.login.msa.akadns6.net
-water-opaque-expert.glitch.me
-we3bwebma1l-r0unclcube-web3nail-nailweb-deliv3ry.glitch.me
-web.ncf.ca
-webaqunarmail.pages.dev
-webmial.pages.dev
-wiadomoscionet.pythonanywhere.com
-woow-seguro-de-viajes.pages.dev
-wuhancoronavirustracker-693c1.firebaseio.com
-wwaf.whatsas.icu
-www.0202.com.tw
-www.b2c.unified.london
-wy.adyboh.com
+fe-by01p-msa.trafficmanager.net
+lgin.msa.trafficmanager.net
+api.lgin.msa.trafficmanager.net
 xml.lgin.msa.trafficmanager.net
-zc11m.csb.app
+att-accsupport-web.chapterandver.se
+www.0202.com.tw
 zreyawq68vpcvzqw6ylywa-on.drv.tw
+play.apps.appsplatform.us
+dana-kagett2023.lound.xyz
+mail.mediafireo.xyz
+free.s689.xyz