# Domains to be added to the threat intelligence feeds list. # Malicious Domains all3do.com cfybcxklngstyb31.top cfyhsksheuebe30.top cfyjhcvbhdhkb32.top exlleteline.space ibomma.one mytime1.top vsrecruitingagency.com # Crypto Scam centrodent.com # https://github.com/hagezi/dns-blocklists/issues/4780 loveclickeve.site # https://github.com/hagezi/dns-blocklists/issues/4778 updateicybd.top/us informed.updateicybd.top # https://github.com/hagezi/dns-blocklists/issues/4776 supporthubcenter.eu # https://github.com/hagezi/dns-blocklists/issues/4768 postcanadaadbyv.top postcanadafoowy.top # https://github.com/hagezi/dns-blocklists/issues/4765 maxsecurityultimate.com # https://github.com/hagezi/dns-blocklists/issues/4758 casefollowup.com # https://github.com/hagezi/dns-blocklists/issues/4757 48095uqslydirvr761.fiheos.co.in fiheos.co.in # https://github.com/hagezi/dns-blocklists/issues/4752 tet67.pages.dev # Phishing post-austria.bar # https://github.com/hagezi/dns-blocklists/issues/4723 ds-milwaukee.com # https://github.com/hagezi/dns-blocklists/issues/4721 icloud.apple.pariet.mhudr.cn icloud.apple.street.oanvd.cn # https://github.com/hagezi/dns-blocklists/issues/4708 ultrahome.cz tlapka.cz bimi.cz # https://github.com/hagezi/dns-blocklists/issues/4706 2aбdcdvwhuqa83y31c.gtrewe.co.in # Badware onlywins24.com # Telegram scam telegrma.co # https://github.com/hagezi/dns-blocklists/issues/4696 com-tracking-helpsenf.xyz usps.com-tracking-helpsenf.xyz # Phishing magentamoments-besonderenvorteilen.com # https://github.com/hagezi/dns-blocklists/issues/4690 editthiscookies.com adblock-site.pages.dev chrome.videoflix.live chrome-stg.videoflix.live webbooster.online chrome.fastdownload.online chrome-stg.fastdownload.online # Crypto Scam placesbids-market.com # https://github.com/hagezi/dns-blocklists/issues/4680 xai467k.com xaiwallets.net # https://github.com/hagezi/dns-blocklists/issues/4670 cshrewards.net # https://github.com/hagezi/dns-blocklists/issues/4667 bitbitquark.com bvox11.cc fxnovus.co hkeusy.com kcczai.com maicoinmn.com uslasry.com # Phishing - Fake Ledger mails ledger-clearsign-request.com # Malware hosts volam2k5.com yilutech.com # https://github.com/hagezi/dns-blocklists/issues/4663 happymod.cloud # https://github.com/hagezi/dns-blocklists/issues/4654 crm-b2c-26477.de # https://github.com/hagezi/dns-blocklists/issues/4637 paquet1nfopabox.com # Lago666 Malware C&C lago666.com lago666.xyz lago666.pw lago666.top lago666.site lago666.bid lago666.space lago666.website lago666.space lago666.online lago666.trade lago666.webcam lago666.tech lago666.host lago666.press # Lago666 Malware Host cdn.che.moe # Malicious ISO Files Host valeplaz.com # RAT golden-scalen.com xoomep1.com xoomep2.com # VajraSpy C&C hello-chat-c47ad-default-rtdb.firebaseio.com chit-chat-e9053-default-rtdb.firebaseio.com meetme-abc03-default-rtdb.firebaseio.com chatapp-6b96e-default-rtdb.firebaseio.com tiktalk-2fc98-default-rtdb.firebaseio.com wave-chat-e52fe-default-rtdb.firebaseio.com privchat-6cc58-default-rtdb.firebaseio.com glowchat-33103-default-rtdb.firebaseio.com letschat-5d5e3-default-rtdb.firebaseio.com quick-chat-1d242-default-rtdb.firebaseio.com yooho-c3345-default-rtdb.firebaseio.com rafaqat-d131f-default-rtdb.asia-southeast1.firebasedatabase.app # Any.run finds of Malicious Mails quantumlinktrack.com technojoyhaven.com fowev.org chenglp.com peakperformancedeal.com verified-realtime-trusted-improper.top shandongfleet.com rapidspan.com bonamisoft.com valuevortexsearch.com rughaups.net acenursng.org selitone.ru # romcom 0-day 1drv.us.com correctiv.sbs # Various phishing domains from emails I have received, all appear to redirect to formally-up.com... 38imounzh6.blob.core.windows.net um6f0ru069.blob.core.windows.net vujpo85d1g.blob.core.windows.net # https://github.com/hagezi/dns-blocklists/issues/4009 # https://github.com/rustdesk/rustdesk/discussions/9679 rustdesk.co.nz rustdesk.io rustdesk.pl rustdesk.secure-box.de # Scam ai-chats-supporst-busines2024.top complaint-confirmation-case.top auth.izuchai.dance # Same crowd as the "Shein Mystery Box Giveaway Winner" Phishing below is back again, this time something about "United Health Group"... # Directs to formally-up.com zwbufziw6o4q92.s3.amazonaws.com # "Shein Mystery Box Giveaway Winner" Phishing formally-up.com lvrv0gkspz.blob.core.windows.net # Netflix phishing aktivierung-info.com # Credit Card Skimmer Domain in TLS SNI techtnee.com # Phishing [sub]domains: https://unit42.paloaltonetworks.com/phishing-platform-sniper-dz-unique-tactics/ 6627c220b5daa507c6cca1c5--votedme.netlify.app automaticgiveaway.000webhostapp.com climbing-green-botany.glitch.me dev-cdn370.pantheonsite.io facebookbusiness0078.blogspot.be ff-rewards-redeem-codes-org.github.io free-fire-reward-garena-bd-nepazl.epizy.com freefirefff.github.io instagram-cutequeen57.netlify.app pro.riccardomalisano.com pubg-tournament-official.github.io raviral.com sniperdz.com v0tingsystem.github.io # https://infosec.exchange/@divested/113226945978043050 bromite.org # Misc accountconfirm-managerpage-requestreview-verifynow.pages.dev aderisci-ora02.com bitegifts.com business.help-privacy-center-com.com dhlgvcot.top edigitalsurvey.com equitehub.com g-site.site g-site.store hairma.cc hapdw.gdsdsgskd8.com help-privacy-center-com.com hott.lat indlapost.net indlapost.one kebeckirgon.net localmeets.link loginmycard.in marugroup.net max0001.top mein-ind.world min0001.top myaxbk.in rap194.top safesystemfile3.site teiegram.org-cc.org telegram.fans tempisite.com xxxi.porn yeqbx.top # https://media.defense.gov/2024/Sep/18/2003547016/-1/-1/0/CSA-PRC-LINKED-ACTORS-BOTNET.PDF acqv.w8510.com aewreiuicajo.w8510.com apdfhhjcxcb.w8510.com asdvxzzxvza.w8510.com awbpxtpi.w8510.com bzbatflwb.w8510.com cansqra.w8510.com canwtrow.w8510.com cccasdqawer.w8510.com ccccasdasdq.w8510.com cccvbsdfsdf.w8510.com ccmmkmnkna.w8510.com cpooooim.w8510.com dftiscasdwe.w8510.com dvasrdftqgqg.w8510.com iiiiopasdfcasd.w8510.com iikljhg.w8510.com iuyrdfvv.w8510.com iyasdasfda.w8510.com kliscjaisdjhi.w8510.com lkljjhidjaiwd.w8510.com lkopiyut.w8510.com lyblqwesfawe.w8510.com mjiudwajhkf.w8510.com mmjkjiu.w8510.com mmnajsdh.w8510.com mnbghjj.w8510.com ocmnusdjdik.w8510.com oiuiasdads.w8510.com plllkkoasdko.w8510.com poiaqqrjk.w8510.com pojkkaka.w8510.com poooooiioasd.w8510.com ppppoiiua.w8510.com qacassdfawemp.w8510.com qmmklou.w8510.com qwertdvvaaz.w8510.com ssacawfafwa.w8510.com testate.w8510.com testateone.w8510.com tuisasdcxzd.w8510.com uqooapp.w8510.com uuiyiyasd.w8510.com wmllxwkg.w8510.com zasdfgasd.w8510.com zda4g4.w8510.com zda896.w8510.com zda9ol.w8510.com zdaaac.w8510.com zdaasdafq.w8510.com zdabnv.w8510.com zdacasc.w8510.com zdacasdc.w8510.com zdacawca.w8510.com zdacccz.w8510.com zdacppao.w8510.com zdacscswc.w8510.com zdacvb.w8510.com zdacvbzzs.w8510.com zdacwaca.w8510.com zdacwrf.w8510.com zdacx46.w8510.com zdacxdawdas.w8510.com zdacxzd.w8510.com zdaczcaaw.w8510.com zdaczcvs1.w8510.com zdaczsc.w8510.com zdaczvs.w8510.com zdaczxc1.w8510.com zdafaa.w8510.com zdamkl.w8510.com zdaplm.w8510.com zdapoi.w8510.com zdapoq.w8510.com zdaqggh.w8510.com zdaqwfasf.w8510.com zdavva.w8510.com zdaxcxzc.w8510.com zdazzz.w8510.com zdcacaw.w8510.com zdcawca.w8510.com zdpoa.w8510.com zdpog.w8510.com zdqqqqwe.w8510.com zdzvbs.w8510.com zzxnjiq.w8510.com zzzcmsq.w8510.com # https://github.com/hagezi/dns-blocklists/issues/3740 bsnwritingservices.com # https://github.com/hagezi/dns-blocklists/issues/3514 alaskasworld.cfd bilbocine.com creditcardchase.click direct2hr.click marykayintouch.autos mymercy.click mymorri.click onecognizant.click onevanilla.click panoramacharter.click paybyplatema.cfd surgecardinfo.click unionplus-card.click # https://github.com/hagezi/dns-blocklists/issues/3484 kms.teevee.asia # Facebook scam helfs-busiines9043.online # Phishing indian-now.mom hier-im-netz.de swiftnet.world dhl.swiftnet.world # https://github.com/hagezi/dns-blocklists/issues/3381 transiouratwat.com undenentionin.com # https://github.com/hagezi/dns-blocklists/issues/3374 softzspot.com afiletoget.click redis08.sbs filexstorage.site jourl.live sleetposition.website funfilenow.com # From Trendmicro XDR furiouspogrom.space todaystrackisfast.com # Misc 786718.com antymalwarecheckgood.top brandscallioncommonwealth.com ceonacca.co.in curoax.com cy.tracking-alert.net datikap.com docalbae.com fowme.ru lyingleisurelycontagious.com maticfortune.world mondenubills.com notecanyon.com selfmicrosofrtenabletrue.top softkeyget.com stationacutwo.shop sweetthedate.life unitiverks.com uu5n4xs7feit.azureedge.net xxx24chat.com # Spam cyberfriendsclub.com hotladies.xyz trefferchat.com cdedate.live kdedating.live # https://github.com/hagezi/dns-blocklists/issues/3258 discordvip.createsocialcard.top # https://github.com/hagezi/dns-blocklists/issues/3257 zeyang.net # Phishing cy-app.com alpha360.cy-app.com # https://github.com/hagezi/dns-blocklists/issues/3247 gamingbeasts.com bill.remote-otp.com # https://github.com/hagezi/dns-blocklists/issues/3205 bestcontentsite.top # "Redirect Chain" at IP ranges: 172.240.41.0/24 | 172.240.83.0/24 # More info: https://www.cloudsek.com/blog/redirect-chain-advertisement-services-being-abused-by-threat-actors-to-redirect-users-to-malware-betting-adult-websites abpancvun.com aclpitquxfad.com akftfiam.com amxntatujo.com aqcrasadtdh.com axvwpydaphix.com basketembezzlefool.com bfeoktgty.com bivqasthu.com caktahab.com cigdizwu.com dataretinalsubtotal.com dcuawmcikdud.com dispenseglitterlucid.com dupgacnamopt.com eastboundhardcoverpremises.com explainplaysettwisting.com fidokhffekm.com fkabzoarsoz.com fxproglobalgroup.com gzefitkcep.com gzenzuapgf.com hasanjbam.com hhoqipmup.com hindisurveys.com jwuobtag.com kimxzutzutug.com knelphyfr.com levitatormonkhoodsneak.com luvbcoawrlu.com mikobqcusg.com nruzpaonz.com obzsijqreji.com ogqfahrwua.com omwawgzi.com oqdtuqat.com othhugcce.com oxwzmeojb.com peppersurveys.com pzalcikh.com qpexrabravma.com qpigulofbwah.com ragagqgacog.com rwuruwrufmp.com siporsoflr.com smyvuljawh.com tadqhinpe.com tizjryocx.com vanmhoqm.com vujctuqi.com wiwosxoszabb.com wruojgvanxib.com wziharasgcra.com xhukhimipal.com xhusamxabox.com zamawzakhn.com zihtbp41q.com zpavtuokkj.com # Scam # https://www.bild.de/leben-wissen/sparfochs/bild-leser-eigentlich-reich-online-casino-zahlt-mir-168000-euro-nicht-aus-6683d837efaec85f78bb615b slootz.io # https://github.com/hagezi/dns-blocklists/issues/3142 http.com https.com # Phishing bljsd.top openstaandebelasting.nl # https://github.com/hagezi/dns-blocklists/issues/3104 unsubscribe-me-now.net # https://github.com/hagezi/dns-blocklists/issues/3103 highwaycpmrevenue.social-previews.top clicksocialimage.top playbones.xyz golink.icu pdfnexus.com # Malicious 32979c00fcc59b5.com adm668.com czdqhyo1.net fellzobr.com googleadsl.com krixyncbsyhju.com linkefdin.com love-odyssey.com mgcicjfqyfik.com owkuwquf.com slvlrcalpodewn.com tcgnclibk.xyz watch-netfiix.com # SMS Phishing pepe.air-drops.at 6891.me linkr.it mrhop.com 1click2deliver.com # TG Report - BTC Scam via SMS usonkd.com zipmatepro.com buddyfnd.com iamnotice.club smartadblock.net wavebrowser.co mywavehome.net uniquely-peaceful-hagfish.edgecompute.app go8.getsecurify.com install.securifyguard.com pcapp.store convertwithwave.com upload.advgroup.ru getsecurify.com securifyguard.com advgroup.ru x-phones.eu criticizewiggle.com salesonline.shop2024online.ru shop2024online.ru soapmaking.blogspot.com valid-check-tl.azurewebsites.net webgalahsllc.azurewebsites.net capitalxm.com bundle.africa the-turboxbt.com turboxbt.com markuptrade.com maranbet.com fxcentrum.com fourstrading.com novelleafrica.com mira.fund algoos.com metatrace.me caravelpartners.net dedicatedcyber.com 1337x.so 2024za.com badui.de empion.io exinariuminix.info gigroupholding.com mobileinfoscotiabank.com onetoluck.com url01.top # https://github.com/hagezi/dns-blocklists/issues/3012 npm-compare.com bunjs.run json-5.com copilot-chat.com fe-tool.com # https://thehackernews.com/2024/06/over-110000-websites-affected-by.html # https://www.heise.de/news/Jetzt-handeln-Schadcode-ueber-CDN-des-JavaScript-Service-Polyfill-io-verteilt-9778256.html polyfill.io cdn.polyfill.io # https://github.com/hagezi/dns-blocklists/issues/3062 # https://www.golem.de/news/grossteil-aus-deutschland-fast-400-000-webhosts-verbreiten-malware-via-polyfill-io-2407-186716.html bootcdn.net cdn.bootcdn.net bootcss.com cdn.bootcss.com chartjs.bootcss.com codeguide.bootcss.com ejs.bootcss.com eslint.bootcss.com expo.bootcss.com jekyll.bootcss.com koa.bootcss.com less.bootcss.com open.bootcss.com reactjs.bootcss.com sass.bootcss.com stylus.bootcss.com tippyjs.bootcss.com v3.bootcss.com v4.bootcss.com v5.bootcss.com vitejs.bootcss.com wasm.bootcss.com yarn.bootcss.com staticfile.net cdn.staticfile.net staticfile.org cdn.staticfile.org monopolygox.xyz # https://github.com/hagezi/dns-blocklists/issues/2936 midjourney.co # https://github.com/hagezi/dns-blocklists/issues/2933 gameportal.casa # Telegram Phishing teg-bol.pics # https://github.com/hagezi/dns-blocklists/issues/2923 meltedpleasandtws.shop # Phishing lieferungs-hilfezentrum.de # Discord spam (info stealer) egirl-paradise.xyz # https://github.com/hagezi/dns-blocklists/issues/2895 # https://www.virustotal.com/gui/domain/invitezoeyoc.ru.com/details invitezoeyoc.ru.com # https://x.com/1ZRR4H/status/1798926893246447708 githubcareers.online githubtalentcommunity.online # https://github.com/hagezi/dns-blocklists/issues/2854 joathath.com mp3y.info # https://github.com/hagezi/dns-blocklists/issues/2848 hawaintel.org natalsled.com quernzein.site propertrail.sbs oceanssurf.org boardshape.cfd # https://github.com/hagezi/dns-blocklists/issues/2847 sweemnet.org # https://www.bleepingcomputer.com/news/security/microsoft-indias-x-account-hijacked-in-roaring-kitty-crypto-scam-to-push-wallet-drainers/ presale-roaringkitty.com vvtasapp.cfd winsim.co # https://github.com/hagezi/dns-blocklists/issues/2796 bn6yedf.cfd alzo.gr transportkontrolle.net sendungs-versand-post.com ups-findxr.com dpost-versendung.de chovayicloud.com chovayicloudiphone.com chovaytragopngay.com tinchapaeon57.top tinchapnganhang.info tinchapshinhanbank.com tinchapvaynhanh.com tinchapvietnam.com.vn tinchapvpbank.com sp-s1.net signalgroupslinks.com invitelinks.com siggrouplink.com socialgrouplink.com theeversite.com allgrouplink.com industrialsgrowthpartners.com dhlwrd.com buyway-secure.info # https://github.com/hagezi/dns-blocklists/issues/2697 spy.pet spy.pm # https://github.com/hagezi/dns-blocklists/issues/2684 hassampc.com # Phishing campaign # https://urlscan.io/result/035f4905-9d09-41a3-a047-8b6dd908df21/ myguestlist.com withdrawal.vaults-ftx.com appplecoredirection.com # https://github.com/hagezi/dns-blocklists/issues/2652 # https://www.amnesty.org/en/documents/asa21/7974/2024/en/ afrinews.co.za afrinews.eu aqaf.net coolbrandlabs.com dakaractu.news expressotelecom.com expressotelecom.eu galaxyupdate.network gelora.org jeuneafrique.com jeuneafrique.eu jeuneafrique.news jotnanews.co jotnanews.com jotnanews.fr jotnanews.live lidarfirmwareupdate.network neuropathynews.net nusantaraqurban.com senedroid.com senedroid.net senego.com senego.fr senego.info seneweb.com seneweb.eu seneweb.news hornebrew.mom willowsushi.com # https://github.com/hagezi/dns-blocklists/issues/2624 tracker.istole.it bttracker.crunchbanglinux.org massgira.fun # JS/Redirector.QKM leostop.com # https://github.com/hagezi/dns-blocklists/issues/2568 ejuiashsateam.info devrimsdemo.com # Wallet recovery phishing # Gymshark scam # https://www.virustotal.com/en/domain/gym-sharkfinland.com/information/ gym-sharkfinland.com # https://github.com/hagezi/dns-blocklists/issues/2536 dbdb.addea.workers.dev google.kt9.site # https://github.com/hagezi/dns-blocklists/issues/2531 mailcommunity.ru # https://www.zscaler.com/blogs/security-research/malvertising-campaign-targeting-it-teams-madmxshell advaanced-ip-scanner.com advaanced-ip-scanner.net advanceb-ip-scanner.com advanceb-lp-scanner.com advanced-ip-saaner.com advanced-ip-scaaner.com advanced-ip-scaer.com advanced-ip-scaer.net advanced-ip-scanel.com advanced-ip-scanel.net advanced-ip-scanerr.com advanced-ip-scanerr.net advanced-ip-scanir.com advanced-ip-scanir.net advanced-ip-scanr.com advanced-ip-scanr.net advanced-ip-scanz.com advanced-ip-scanz.net advanced-lp-saanel.com advanced-lp-saaner.com advanced-lp-scanel.com advanced-lp-scannel.com advansed-ip-scanner.com advansed-ip-scanner.net advvanced-ip-scanner.com advvanced-ip-scanner.net angryipscan.net angryipscaner.com ipscannerprtg.com keystore-explore.com manageeengines.com manageeengines.net managengines.com managengines.net managengins.com managengins.net networkipscan.com networkscanip.com paesslers.com prtgscan.com googly11.in # Forum spam grapheneos.fr watersoftenergurus.com universalhealing.org dimax.one sxlph.site sxlph.club generators.world dhl-dek.cn petition-president.com geroiua.com # https://notepad-plus-plus.org/news/help-to-take-down-parasite-site/ notepad.plus serve-uspsxi.com usps.norsenscc.com softwarecrackguru.com vpnonly.site cb-webfilialie.de postislan.top mmtro.com externalcheats.com meine-db-reaktivierung.app # https://github.com/hagezi/dns-blocklists/issues/2449 perishop.gr peristore.gr peristores.gr b2bmobiles.gr planc.gr # https://github.com/hagezi/dns-blocklists/issues/2435 alliance-capital24.ru alliance-happy.ru alliance-happy24.ru alliance-headway.ru alliance-headway24.ru alliance-luck.ru alliance-luck24.ru alliance-moscow24.ru alliance-online24.ru alliance-people.ru alliance-people24.ru alliance-russia24.ru alliance-success.ru alliance-success24.ru bizxp.ru capital-alliance.ru capital-alliance24.ru capital-happy.ru capital-happy24.ru happy-alliance.ru happy-alliance24.ru happy-capital.ru happy-capital24.ru happy-moscow24.ru happy-online24.ru happy-people24.ru happy-russia24.ru happy-world24.ru headway-alliance.ru headway-alliance24.ru luck-alliance.ru luck-alliance24.ru mail.capital-alliance.ru moscow-alliance24.ru moscow-happy.ru moscow-happy24.ru mx.online-happy.ru online-alliance.ru online-alliance24.ru online-happy.ru online-happy24.ru people-alliance.ru people-happy24.ru russia-alliance.ru russia-alliance24.ru russia-happy.ru russia-happy24.ru success-alliance.ru success-alliance24.ru v350679.hosted-by-vdsina.ru world-happy24.ru # Scam authwalletsolutiiondapps.com rpcsosconfig.net selscronet.com # https://github.com/hagezi/dns-blocklists/issues/2422 sonicglyde.com activator-kmspico.net ativadorkmspico.com dazactivator.com get-kmspico.com getkmspico.com kms-tool.com kmsautoplus.su kmspico-activator-crack.com kmspico-activator-free.com kmspico-activator.in kmspico-mafia.com kmspico-official.xyz kmspico-oficial.com kmspico-tools2.site kmspico.co kmspico.icu kmspico.io kmspico.space kmspico.uno kmspico.ws kmspico10.com kmspicoactivator.net kmspicoativador.org kmspicodownloads.com kmspicofficial.com kmspicoofficial.com kmspicoportable.com mrkmspico.com official-kmspico.co official-kmspico.com official-kmspico.org officialkmspico.com officialkmspico.download officialkmspico.net officials-kmspico.com oficial-kmspico.com massgraves.online massgrav.shop # https://github.com/hagezi/dns-blocklists/issues/2413 # https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-proxylib-and-lumiapps-transform-mobile-devices-into-proxy-nodes lumiapps.io # https://github.com/hagezi/dns-blocklists/issues/2405 usps-delivery-a.com ggogle.de iosvpndefender.com dlhpotsdegroup.top # https://github.com/hagezi/dns-blocklists/issues/2389 fling-trainer.com # https://github.com/hagezi/dns-blocklists/issues/2381 wwss.pages.dev # https://github.com/hagezi/dns-blocklists/issues/2377 cartevitale2024.info/ vpn-access-protection.com o2-dienst.net rtlf.de happy-nachrichten.de vorteilsguru.de deputyordeal.com zealouscapitalvest.com # Scam globelounge.top # Scam # https://www.reddit.com/r/androidroot/comments/78914h/spyware_kingroot_kingoroot_iroot_etc/ # https://www.reddit.com/r/AndroidQuestions/comments/jimv8s/is_kingoroot_legit/ # https://forum.xda-developers.com/t/kingroot-malware-adware-root.3563090/ # https://xdaforums.com/t/why-is-kingroot-connecting-these-ips-all-the-time-2-months-after-rooting.3247710/ # https://www.reddit.com/r/androidroot/comments/xcz8ev/comment/io84a1q/ kingoapp.com kingroot.org bh.ke # scam links oneclickroot.com # Scam # Whatsapp scam/phishing d.whatsappp.xyz vvhatsapp-gf.com vvhatsapp.cloud web-whatsapp.live whatsappao.com whatsappeo.com whatsappp.xyz whastsapp.work whatsapp-iii.com # https://github.com/hagezi/dns-blocklists/issues/2345 spacex-starship.org # https://github.com/hagezi/dns-blocklists/issues/2341 uk-news.pro # https://github.com/hagezi/dns-blocklists/issues/2338 host.cloudsonicwave.com ttincoming.traveltraffic.cc uyap-uzlasma.com # Phishing / NRD 04326b.com # Phishing rewards-emirates.com # Phishing / NRD invoice-aun.pages.dev # Phishing # https://www.reddit.com/r/PiratedGames/comments/1baxtpf/a_fake_zippyshare_exists_i_havent_used_it_so/ zippyshare.day # https://github.com/hagezi/dns-blocklists/issues/2313 cvbuilder.staging.standout-cv.com liveinfo.xyz ww3.weweekly.us cards2024.org timesofeuropnews.com getaccess.w3spaces.com ourhealthy.life klospike.online re-captha-version-3-16.live kimona01.com getspins.info vbbv.store vibuxion.top rangerbow.world # https://github.com/hagezi/dns-blocklists/issues/2304 vast-conexxion.com bllthbatnthes.life # Phishing - DHL tracking dusps.click # https://github.com/hagezi/dns-blocklists/issues/2293 dynamiclink.lol dynamic-linx.com # https://github.com/hagezi/dns-blocklists/issues/2288 revancedapps.com revancedapp.download # Mail Phish (source TG) heytrhrerght.buzz meryruytss.buzz premium-gifts-2024.xyz rus-loto.premium-gifts-2024.xyz removalsinrotherham.co.uk s7txw.removalsinrotherham.co.uk dlnhighpressurecleaningservicesltd.co.uk suiueopzgd.dlnhighpressurecleaningservicesltd.co.uk tutyutyutyu.buzz v9xq2.shop clankexpelledidentification.com # NRD wgmojill.wixsite.com # Phishing 113912-coinbase.com # Phishing foreverinprofitmaking.com # Scam Crypto/Investment pp.45-61-158-129.cprapid.com # PayPal Phish globalserviceslogistics.com # Parcel Scam luxurysgift.com # Fake Shop athletic-harmony.com # Influencer Scam knkpublishingsoftware.com # Task Scam # Phishing vontos.buzz eglob.vontos.buzz 1oleads.net go.1oleads.net phalangette.in.net giveawayscord.xyz # Malware - Spreaded through Discord Trap Server Bots z-lib.id # z-lib scam studyforts.com pogothere.xyz amunfezanttor.com googlesavedata.ru # Phish/Malicious # UPS phishing de-sendungs-post.com # DHL Phish dhl-de-track-ui.cc # Phishing dhl-de-track-uo.cc dhl-de-track-uu.cc # Account Stealer for Fortnite and Co. freevbucks2022.online eyx092.github.io davbuckgenerator.weebly.com gemsforfree.com hackzone.me # eMail phishing fenarqwi.buzz obrtga.buzz otnsos.buzz pigurde.buzz redakt.top ofdakk.top hotoffers.info c6ooe.shop doorhousebigleft.motorcycles # These Domains belong to the DarkGate Botnet # 237.245.94.34.bc.googleusercontent.com # PTR, won't block yet to prevent false/positives in future 04oc.com 2yorlk4pesejzjm37q.ru 3ar5.com 3glytldqdo.xyz 3kna.com 411d5f25.top 4655rife.com 48j.co 572881fb.top 7xmw.com 88r771r2.ru 8eoj.com 8fc922dc.top 9o2b.com a8te.com aa123a9d19596b46c393fd7d145db60d40.com access-webs.biz amobisc.com apps-update.com asbgwhgj.com balkan-hosting.net bozabam.info breadlanguage.net candyjoyapp.com ci0z.com cinelinz.com cl43.com clientstaticserv.com countstatsregion.com dcmsservices.com dd1g.com doubround.net drwm.in errapi.com faithsanon.com finalocean.info fkn0.com foultouch.com frhoqqcy.com gbm9.com gdn6.com geholso.com gentlethird.net glostoreen.com hangreach.net hf6b.com hqe5.com icoproject.net inputdatacloud.com inputgenserv.com iomvnlis.com js3.in k3tn.com kebobcapital.com knowfish.net koz1.net ks1n8yamb.ru l1hf.com lakusdvroa.com litepdfreader.net lronman4x4.com maccleansepro.com mailtransfersagents.com mby8.com mi1w.com mmmmmmanyu.com morgem.ru mozillaupdates.com mywebshield-ww1.com mywebshield-ww5.com newstaticclientstack.com newstaticdatacloud.com offensivejokescolin.com ogrovom.xyz ourclientinputsrv.com ourinfoonlinestack.com ourstaticdatastorage.com p36z.com pmyadxuvmfmcajv.com putaoya112.com qdfs.in qqqrhhpeumyk.ru qxsf.in rohgoruhgsorhugih.ru rscz.in scmpacdn.com shopstoregamese.com simonettemaddison.net soet.in srksbbbh.com stephaniemiddlesworth.net suibianmaimaicom.com syncerjpi.com tev7.com ts7.top uc4i.com unpollutemymac.com uyt4.com veryhurt.net wdzbt76z.ru xqzdkh56y.ru xrwfwaoj.com xsw4.com ymokymakyfe.biz z1p3.com # End of DarkGate Botnet Domains citaconsulr.com # Dildo Lumma # https://github.com/hagezi/dns-blocklists/issues/2193 i-soon.net i-soon.com.cn # Fake Tech Support RAT 13001.ru ctrl02.ru 12001.ru supos911.org supos123.org deezusty.net qjdptxpxgymscjm.com inspiringperiods.com rubxt.online # Vibrator S** Toys Lumma Stealer gemcreedarticulateod.shop secretionsuitcasenioise.shop claimconcessionrebe.shop liabilityarrangemenyit.shop modestessayevenmilwek.shop triangleseasonbenchwj.shop culturesketchfinanciall.shop sofahuntingslidedine.shop # https://github.com/hagezi/dns-blocklists/issues/2178 guidesite.info ustrack.online safety-andro1d-n0tice.co unhaka.com safety-andr-sys.info update-macos.com acephouths.com wtmbook.com # Crypto Coaching passwordfix.blogspot.com 97tool.github.io apkzpure.com wattfo.com networkpcigniter.com # Browser Hijacking / Extension Installer cpmpri.com # Browser Hijacking karan.mobi # Randomizing Hijacking Links manizx.com # Browser Hijacking poperblocker.com # Pretends to be Popup-Blocker Software mobdrovip.com # Fake Mobdro App theapkhunter.com ehallpasses.info kmspico.io # Fake KMS Tool kmspico.ws # Fake KMS Tool kms-full.com # Fake KMS Tool kmspico.de.download.it Fake KMS Tool kmspico.to kmspi.co get-kmspico.com kmsauto.info official-kmspico.com dlhk.acehprov.go.id softwared.click kmsauto.org kmsauto.pw kmsavto-net.ru kmsauto.xyz okx.com # Shady Crypto Exchange paydayloans.com gomovies4u.xyz # Malicious Scripts roidigitalcraft.online # Malicious Scripts cashjuice.com # Loan Scam to aquire personal credentials esigningapp.com # cashjuice scam fastloanassist.com # cashjuice scam myrequestresults.com # cashjuice scam myresources-join.resourcesify.com # cashjuice scam taxreturnoptions.com # cashjuice scam 247lendinggroup.com # cashjuice scam theconsumerhq.com # cashjuice scam banktoday.de secureexpressrequest.com cashusa.com choicecreditrepair.life swagbucks.com americanunsecured.com grantsreach.com # Misc 000free.us 1312stealer.ru 2jnsdu731gr.buzz 5gtower.in 7altgr.buzz 7ng6v3lu3c.execute-api.us-east-1.amazonaws.com activate-now-securease.com adsurveys.co.in adultbtgr.sbs aemetblog.es air-up-turkiye.com air-upfrance.com airtoff.com airup-bottlegreece.com airup-gr.com airup-nederland.com airup-romania.com airupbelgiums.com airupbulgaria.com airupespana.com airupfrance.fr airupgreece.net airupitaly.it airupnederlands.com airupromania.ro airupsrbija.com akbartravels.com akrtgr.buzz aligr.sbs allinoursite.com amlbot.request.report anatu-snd.com aocgr.buzz apple-net.com aqgr.buzz asian-cam-models.online astronomyfitmisguided.com atlaspvs.com atoins.com axbgr.buzz axjjygr.sbs babgr.sbs beeaar.com bertasxt.com bisertravel.com.mk black-sales.cloud blackoutarchertender.com blsindiavisa.kr bolgr.buzz brenttbrevetbsagr.sbs bsnl-tower.com bsnl-tower.in bsnl5gtower.com bsnltower.com bsnltowerinstallations.com bsnltowersite.in btwvisas.com bwergr.buzz carngr.sbs cdn-defac13.techresource.shop cdn-defac18.studyzone-investmentguru.com chesssorrydescend.com cibtvisas.com cndgr.buzz cognatesyringe.com comdinew.com config-action-now.com confirm-page-manage.com cooperation-odoo.com covex.it cqtgr.buzz cuigr.buzz cumngr.buzz cutfygr.sbs czcgr.buzz daughterwqnxgr.sbs dcrfgr.buzz dfgtgr.buzz dhygr.buzz diteringion.com dollarian.my.id doorsstormsy.shop dungr.buzz e-indianvisa.com e-touristvisa.com e-touristvisaindia.com e-visa.ie e-visaindia.com e-visaindiaonline.com e-visums.nl eajgr.buzz eangr.buzz editproai.org editproai.pro efkgr.buzz eglgr.buzz ellamayellgaemigr.sbs eltacogr.buzz eltangr.buzz eltaongr.buzz eltaxgr.buzz eltdpgr.buzz eltesagr.buzz eltjkgr.buzz eltsjgr.buzz eltsngr.buzz elttkgr.buzz eltysgr.buzz eltzsgr.buzz emailservicesnetau.com eset.co.il etaindia.org etaindiaonline.com etv-in.com euromaillinnk.com evisa-india-online.com evisa-indian.com evisa.express evisaindia.com evisaindia.org evisaindiaonline.org evisasindia.org evisatoindia.org ewqgr.buzz facebook-support-team-980.pages.med.br fddgr.buzz feji.us fgtgr.buzz fhygr.buzz findthorman.shop fingr.buzz fkpgr.buzz flubrex.com geekupdates.notion.site gfbgr.buzz ggrgdgr.buzz giagr.sbs glaters.com globalvisacorp.com goindiavisa.com gov.2jnsdu731gr.buzz gov.7altgr.buzz gov.achggr.sbs gov.adultbtgr.sbs gov.akrtgr.buzz gov.aligr.sbs gov.aocgr.buzz gov.aqgr.buzz gov.axbgr.buzz gov.axjjygr.sbs gov.babgr.sbs gov.bolgr.buzz gov.brenttbrevetbsagr.sbs gov.bwergr.buzz gov.carngr.sbs gov.cndgr.buzz gov.cqtgr.buzz gov.cuigr.buzz gov.cutfygr.sbs gov.czcgr.buzz gov.daughterwqnxgr.sbs gov.dcrfgr.buzz gov.dfgtgr.buzz gov.dhygr.buzz gov.dungr.buzz gov.eajgr.buzz gov.eangr.buzz gov.efkgr.buzz gov.eglgr.buzz gov.ellamayellgaemigr.sbs gov.ewqgr.buzz gov.fddgr.buzz gov.fgtgr.buzz gov.fhygr.buzz gov.fingr.buzz gov.fkpgr.buzz gov.gfbgr.buzz gov.ggrgdgr.buzz gov.giagr.sbs gov.gr.sbs gov.gregr.buzz gov.gwjgr.buzz gov.hisgr.buzz gov.hnigr.buzz gov.howgr.buzz gov.htgr.buzz gov.htygr.buzz gov.husgr.sbs gov.hydgr.buzz gov.icugr.buzz gov.igqgr.sbs gov.ihggr.sbs gov.imfgr.buzz gov.insgr.buzz gov.ironykibbekniggr.sbs gov.iufgr.sbs gov.ivgr.buzz gov.jdjgr.sbs gov.jyfgr.buzz gov.kegr.buzz gov.kihgr.buzz gov.kikuigr.buzz gov.kiygr.buzz gov.kuigr.sbs gov.leastfxgygr.sbs gov.lecgr.buzz gov.livegr.sbs gov.liyugr.buzz gov.lonzomalapimalgr.sbs gov.ltrgr.sbs gov.lukgr.sbs gov.m2ud685sgr.buzz gov.mogr.buzz gov.mtdgr.buzz gov.nergr.sbs gov.nezgr.buzz gov.nsdgr.sbs gov.nvsgr.sbs gov.nwfwgr.buzz gov.ohtrgr.sbs gov.olegr.sbs gov.ongr.buzz gov.otegr.buzz gov.pkgr.buzz gov.propertybxphgr.sbs gov.ptrgr.sbs gov.pujgr.sbs gov.pyggr.buzz gov.qcsgr.buzz gov.qsggr.sbs gov.qwlgr.buzz gov.reolgr.buzz gov.rhfgr.buzz gov.riskifgr.sbs gov.roegr.sbs gov.rrwgr.buzz gov.rsdgr.sbs gov.ruogr.buzz gov.rvgr.buzz gov.scoigr.buzz gov.sdbgr.buzz gov.sdlgr.sbs gov.sdqgr.buzz gov.seagr.buzz gov.sf6d79u8gr.buzz gov.sfdgr.sbs gov.shiagr.sbs gov.shygr.buzz gov.sibgr.buzz gov.sicgr.sbs gov.singr.buzz gov.smzgr.buzz gov.srgr.buzz gov.successfuloizzgr.sbs gov.surgr.buzz gov.surigr.buzz gov.szigr.sbs gov.szsgr.sbs gov.tbfgr.buzz gov.tfngr.buzz gov.tgngr.sbs gov.thanpcgr.sbs gov.themjqwbgr.sbs gov.tnggr.sbs gov.trngr.buzz gov.udsgr.buzz gov.ukjyugr.buzz gov.umagr.sbs gov.uogr.buzz gov.vikgr.buzz gov.vixgr.buzz gov.vkjygr.buzz gov.wdxgr.buzz gov.wmgr.buzz gov.xiirgr.buzz gov.xnmgr.buzz gov.xukgr.buzz gov.yearnvmrgr.sbs gov.yengr.sbs gov.yhtrytgr.buzz gov.ykfgr.buzz gov.ylyigr.sbs gov.ynsgr.sbs gov.yujgr.buzz gov.zcrhgr.sbs gov.zcwegr.buzz gov.zeogr.buzz gov.zfcgr.sbs gov.zfegr.sbs gov.zfrgr.buzz gov.zikgr.buzz gov.zwbgr.sbs gr.sbs gregr.buzz gwjgr.buzz hisgr.buzz hnigr.buzz howgr.buzz hoydeportes.online hp-search.com htgr.buzz htygr.buzz huana-pay.cc husgr.sbs hydgr.buzz i-visaindia.com icugr.buzz igqgr.sbs ihggr.sbs ilwltd.org imfgr.buzz india-e-visa.com india-visa-online.com india-visa-online.org india-visaonline.org india-visas.org india.evisa-agency.com india.travisa.com indiae-visa.com indiaeta.com indiaevisas.org indiaevisaservice.com indiaimmigration.org indian-e-visa.com indian-evisa.com indian-visa.in indian-visaonline.org indianetouristvisacoin.wordpress.com indianevisaonline.com indianimmigration.org indianonlinevisas.org indiantravelvisa.com indianvisa-online.org indianvisa.online indianvisagov.com indianvisaonline.org indianvisaonlinegov.com indianvisaservice.org.in indiaonlinevisa.org indiavisa-online.org indiavisa.co.uk indiavisa.com indiavisa.com.sg indiavisa.my indiavisa.org indiavisainfo.com indiavisaonline.org infolokeerindonesiaa.gets-offcial.com insgr.buzz iphonedefender.com ironykibbekniggr.sbs itseasy.com iufgr.sbs ivgr.buzz ivisa.com iwantplay.games jdjgr.sbs jiu234.cc jmballestin.blogia.com jothefu5.sellpass.io jsdimmigration.com jsdimmigrations.com jyfgr.buzz jyfrsjdkkhue.com karan-pc.com karanpcofficial.blogspot.com kegr.buzz keydoordasher.shop kihgr.buzz kikuigr.buzz kiygr.buzz knrmgr.buzz kometacasinougr.buzz kra18.com kuigr.sbs ladiesmeetnow.top lander1.s-drc2.cloud.gcore.lu larcenterni.com leastfxgygr.sbs lecgr.buzz lesivs.com livegr.sbs liyugr.buzz log-hype.com lonzomalapimalgr.sbs lowongaan-pekerjaan-terbaruu.gets-offcial.com ltrgr.sbs lukgr.sbs m2ud685sgr.buzz makitfornows.com megasnc.com milusocarga.com mogr.buzz monicarelino13512-carelino.click monpaquet9trackpobox.com ms-analytics.mywire.org ms-cdn.viewdns.net ms-defender-analytics.line.pm mslfgl434.pages.dev mtdgr.buzz mybach.xyz mypamperparty.online natvisa.com nayatowerinstallation.in.net nbaxgr.sbs nergr.sbs nezgr.buzz nippon.estedentufa.ru nsdgr.sbs nvsgr.sbs nwfwgr.buzz offer.shirem.com ohtrgr.sbs oilembargo40.org olegr.sbs olive121407.studio.site ongr.buzz online-eta.com onlinevisa.com otegr.buzz ovlonstar56.site p.updateinfohq.top panaceapro.lv paquetsuivi7noti.com paradisevs.com pekanbaru.one pkgr.buzz porlasombrita.wordpress.com powerforxes.shop proai.club propertybxphgr.sbs psomsoorsa.com ptrgr.sbs pujgr.sbs pyggr.buzz qcsgr.buzz qsggr.sbs quationitical.co.in qwlgr.buzz redeem700.com remotearbeitt-work.com reolgr.buzz request.report reviewtimmies.com rhfgr.buzz riskifgr.sbs roegr.sbs rrwgr.buzz rsdgr.sbs ruogr.buzz rvgr.buzz sale-friday.store scoigr.buzz sdbgr.buzz sdlgr.sbs sdqgr.buzz seagr.buzz secrity2redline.com securevault.top sf6d79u8gr.buzz sfdgr.sbs shiagr.sbs shygr.buzz sibgr.buzz sicgr.sbs silicon-dolls.ru singr.buzz smvisa.co.il smzgr.buzz solution7energieqc.com srgr.buzz stage2024.club stage3-last.club stage3-last.info stage3-last.live stage3-last.pro stage3-last.store stage3x.site stage3x.store stepnseat.com studyzone-investmentguru.com successfuloizzgr.sbs surgr.buzz surigr.buzz szigr.sbs szsgr.sbs tbfgr.buzz techresource.shop teslamaked.com tfngr.buzz tgngr.sbs thanpcgr.sbs thebestpdf.com themjqwbgr.sbs threeneptuneboot.com tnggr.sbs toprevenuegate.com touristvisaonline.com towerinstallation5g.com traveldocs.com travelexpress.us.com travelvisabookings.com travisa.com treuepunkte-tauschenonline.com trezor.activate-now-securease.com trkucibqy.com trngr.buzz trump-drop.org twinlistcasino-7pgr.buzz ucureo.com udemy-creators.com udsgr.buzz ukjyugr.buzz ultrawa.com umagr.sbs uogr.buzz updateinfohq.top vikgr.buzz visa-to-india.com visacentral.com visadone.com visafirst.com visagov.com visahq.com visasimple.com visatoindia.org visumbuitenland.nl vixgr.buzz vkjygr.buzz vodsnap.com vt.gistallse.hz.cz wazirx.com wazirx.zendesk.com wdxgr.buzz weddingfestora.com wmgr.buzz xborders.io xiirgr.buzz xn--airupespaa-19a.com xn--airuptrkiye-yhb.com xnmgr.buzz xukgr.buzz yearnvmrgr.sbs yengr.sbs yhtrytgr.buzz ykfgr.buzz ylyigr.sbs ynsgr.sbs yqpgr.buzz yujgr.buzz zcrhgr.sbs zcwegr.buzz zeogr.buzz zfcgr.sbs zfegr.sbs zfrgr.buzz zikgr.buzz zwbgr.sbs