dns-blocklists/submit_pullrequest_here/deny_tif.txt

# Domains to be added to the threat intelligence feeds list.

# Malicious Domains
all3do.com
cfybcxklngstyb31.top
cfyhsksheuebe30.top
cfyjhcvbhdhkb32.top
exlleteline.space
ibomma.one
mytime1.top
vsrecruitingagency.com

# Crypto Scam
centrodent.com

# https://github.com/hagezi/dns-blocklists/issues/4780
loveclickeve.site

# https://github.com/hagezi/dns-blocklists/issues/4778
updateicybd.top/us
informed.updateicybd.top

# https://github.com/hagezi/dns-blocklists/issues/4776
supporthubcenter.eu

# https://github.com/hagezi/dns-blocklists/issues/4768
postcanadaadbyv.top
postcanadafoowy.top

# https://github.com/hagezi/dns-blocklists/issues/4765 
maxsecurityultimate.com

# https://github.com/hagezi/dns-blocklists/issues/4758
casefollowup.com

# https://github.com/hagezi/dns-blocklists/issues/4757
48095uqslydirvr761.fiheos.co.in
fiheos.co.in

# https://github.com/hagezi/dns-blocklists/issues/4752
tet67.pages.dev

# Phishing
post-austria.bar

# https://github.com/hagezi/dns-blocklists/issues/4723
ds-milwaukee.com

# https://github.com/hagezi/dns-blocklists/issues/4721
icloud.apple.pariet.mhudr.cn
icloud.apple.street.oanvd.cn

# https://github.com/hagezi/dns-blocklists/issues/4708
ultrahome.cz
tlapka.cz
bimi.cz

# https://github.com/hagezi/dns-blocklists/issues/4706
2aбdcdvwhuqa83y31c.gtrewe.co.in

# Badware
onlywins24.com

# Telegram scam
telegrma.co

# https://github.com/hagezi/dns-blocklists/issues/4696
com-tracking-helpsenf.xyz
usps.com-tracking-helpsenf.xyz

# Phishing
magentamoments-besonderenvorteilen.com

# https://github.com/hagezi/dns-blocklists/issues/4690
editthiscookies.com
adblock-site.pages.dev
chrome.videoflix.live
chrome-stg.videoflix.live
webbooster.online
chrome.fastdownload.online
chrome-stg.fastdownload.online

# Crypto Scam
placesbids-market.com

# https://github.com/hagezi/dns-blocklists/issues/4680
xai467k.com
xaiwallets.net

# https://github.com/hagezi/dns-blocklists/issues/4670
cshrewards.net

# https://github.com/hagezi/dns-blocklists/issues/4667
bitbitquark.com
bvox11.cc
fxnovus.co
hkeusy.com
kcczai.com
maicoinmn.com
uslasry.com

# Phishing - Fake Ledger mails
ledger-clearsign-request.com

# Malware hosts
volam2k5.com
yilutech.com

# https://github.com/hagezi/dns-blocklists/issues/4663
happymod.cloud

# https://github.com/hagezi/dns-blocklists/issues/4654
crm-b2c-26477.de

# https://github.com/hagezi/dns-blocklists/issues/4637
paquet1nfopabox.com

# Lago666 Malware C&C
lago666.com
lago666.xyz
lago666.pw
lago666.top
lago666.site
lago666.bid
lago666.space
lago666.website
lago666.space
lago666.online
lago666.trade
lago666.webcam
lago666.tech
lago666.host
lago666.press

# Lago666 Malware Host
cdn.che.moe

# Malicious ISO Files Host
valeplaz.com

# RAT
golden-scalen.com
xoomep1.com
xoomep2.com

# VajraSpy C&C
hello-chat-c47ad-default-rtdb.firebaseio.com
chit-chat-e9053-default-rtdb.firebaseio.com
meetme-abc03-default-rtdb.firebaseio.com
chatapp-6b96e-default-rtdb.firebaseio.com
tiktalk-2fc98-default-rtdb.firebaseio.com
wave-chat-e52fe-default-rtdb.firebaseio.com
privchat-6cc58-default-rtdb.firebaseio.com
glowchat-33103-default-rtdb.firebaseio.com
letschat-5d5e3-default-rtdb.firebaseio.com
quick-chat-1d242-default-rtdb.firebaseio.com
yooho-c3345-default-rtdb.firebaseio.com
rafaqat-d131f-default-rtdb.asia-southeast1.firebasedatabase.app

# Any.run finds of Malicious Mails
quantumlinktrack.com
technojoyhaven.com
fowev.org
chenglp.com
peakperformancedeal.com
verified-realtime-trusted-improper.top
shandongfleet.com
rapidspan.com
bonamisoft.com
valuevortexsearch.com
rughaups.net
acenursng.org
selitone.ru

# romcom 0-day
1drv.us.com
correctiv.sbs

# Various phishing domains from emails I have received, all appear to redirect to formally-up.com...
38imounzh6.blob.core.windows.net
um6f0ru069.blob.core.windows.net
vujpo85d1g.blob.core.windows.net

# https://github.com/hagezi/dns-blocklists/issues/4009
# https://github.com/rustdesk/rustdesk/discussions/9679
rustdesk.co.nz
rustdesk.io
rustdesk.pl
rustdesk.secure-box.de

# Scam
ai-chats-supporst-busines2024.top
complaint-confirmation-case.top
auth.izuchai.dance

# Same crowd as the "Shein Mystery Box Giveaway Winner" Phishing below is back again, this time something about "United Health Group"...
# Directs to formally-up.com
zwbufziw6o4q92.s3.amazonaws.com

# "Shein Mystery Box Giveaway Winner" Phishing
formally-up.com
lvrv0gkspz.blob.core.windows.net

# Netflix phishing
aktivierung-info.com

# Credit Card Skimmer Domain in TLS SNI
techtnee.com

# Phishing [sub]domains: https://unit42.paloaltonetworks.com/phishing-platform-sniper-dz-unique-tactics/
6627c220b5daa507c6cca1c5--votedme.netlify.app
automaticgiveaway.000webhostapp.com
climbing-green-botany.glitch.me
dev-cdn370.pantheonsite.io
facebookbusiness0078.blogspot.be
ff-rewards-redeem-codes-org.github.io
free-fire-reward-garena-bd-nepazl.epizy.com
freefirefff.github.io
instagram-cutequeen57.netlify.app
pro.riccardomalisano.com
pubg-tournament-official.github.io
raviral.com
sniperdz.com
v0tingsystem.github.io

# https://infosec.exchange/@divested/113226945978043050
bromite.org

# Misc
accountconfirm-managerpage-requestreview-verifynow.pages.dev
aderisci-ora02.com
bitegifts.com
business.help-privacy-center-com.com
dhlgvcot.top
edigitalsurvey.com
equitehub.com 
g-site.site
g-site.store
hairma.cc
hapdw.gdsdsgskd8.com
help-privacy-center-com.com
hott.lat
indlapost.net
indlapost.one
kebeckirgon.net
localmeets.link
loginmycard.in
marugroup.net
max0001.top
mein-ind.world
min0001.top
myaxbk.in
rap194.top
safesystemfile3.site
teiegram.org-cc.org
telegram.fans
tempisite.com
xxxi.porn
yeqbx.top

# https://media.defense.gov/2024/Sep/18/2003547016/-1/-1/0/CSA-PRC-LINKED-ACTORS-BOTNET.PDF
acqv.w8510.com
aewreiuicajo.w8510.com
apdfhhjcxcb.w8510.com
asdvxzzxvza.w8510.com
awbpxtpi.w8510.com
bzbatflwb.w8510.com
cansqra.w8510.com
canwtrow.w8510.com
cccasdqawer.w8510.com
ccccasdasdq.w8510.com
cccvbsdfsdf.w8510.com
ccmmkmnkna.w8510.com
cpooooim.w8510.com
dftiscasdwe.w8510.com
dvasrdftqgqg.w8510.com
iiiiopasdfcasd.w8510.com
iikljhg.w8510.com
iuyrdfvv.w8510.com
iyasdasfda.w8510.com
kliscjaisdjhi.w8510.com
lkljjhidjaiwd.w8510.com
lkopiyut.w8510.com
lyblqwesfawe.w8510.com
mjiudwajhkf.w8510.com
mmjkjiu.w8510.com
mmnajsdh.w8510.com
mnbghjj.w8510.com
ocmnusdjdik.w8510.com
oiuiasdads.w8510.com
plllkkoasdko.w8510.com
poiaqqrjk.w8510.com
pojkkaka.w8510.com
poooooiioasd.w8510.com
ppppoiiua.w8510.com
qacassdfawemp.w8510.com
qmmklou.w8510.com
qwertdvvaaz.w8510.com
ssacawfafwa.w8510.com
testate.w8510.com
testateone.w8510.com
tuisasdcxzd.w8510.com
uqooapp.w8510.com
uuiyiyasd.w8510.com
wmllxwkg.w8510.com
zasdfgasd.w8510.com
zda4g4.w8510.com
zda896.w8510.com
zda9ol.w8510.com
zdaaac.w8510.com
zdaasdafq.w8510.com
zdabnv.w8510.com
zdacasc.w8510.com
zdacasdc.w8510.com
zdacawca.w8510.com
zdacccz.w8510.com
zdacppao.w8510.com
zdacscswc.w8510.com
zdacvb.w8510.com
zdacvbzzs.w8510.com
zdacwaca.w8510.com
zdacwrf.w8510.com
zdacx46.w8510.com
zdacxdawdas.w8510.com
zdacxzd.w8510.com
zdaczcaaw.w8510.com
zdaczcvs1.w8510.com
zdaczsc.w8510.com
zdaczvs.w8510.com
zdaczxc1.w8510.com
zdafaa.w8510.com
zdamkl.w8510.com
zdaplm.w8510.com
zdapoi.w8510.com
zdapoq.w8510.com
zdaqggh.w8510.com
zdaqwfasf.w8510.com
zdavva.w8510.com
zdaxcxzc.w8510.com
zdazzz.w8510.com
zdcacaw.w8510.com
zdcawca.w8510.com
zdpoa.w8510.com
zdpog.w8510.com
zdqqqqwe.w8510.com
zdzvbs.w8510.com
zzxnjiq.w8510.com
zzzcmsq.w8510.com

# https://github.com/hagezi/dns-blocklists/issues/3740
bsnwritingservices.com

# https://github.com/hagezi/dns-blocklists/issues/3514
alaskasworld.cfd
bilbocine.com
creditcardchase.click
direct2hr.click
marykayintouch.autos
mymercy.click
mymorri.click
onecognizant.click
onevanilla.click
panoramacharter.click
paybyplatema.cfd
surgecardinfo.click
unionplus-card.click

# https://github.com/hagezi/dns-blocklists/issues/3484
kms.teevee.asia

# Facebook scam
helfs-busiines9043.online

# Phishing
indian-now.mom
hier-im-netz.de
swiftnet.world
dhl.swiftnet.world

# https://github.com/hagezi/dns-blocklists/issues/3381
transiouratwat.com
undenentionin.com

# https://github.com/hagezi/dns-blocklists/issues/3374
softzspot.com
afiletoget.click
redis08.sbs
filexstorage.site
jourl.live
sleetposition.website
funfilenow.com

# From Trendmicro XDR
furiouspogrom.space
todaystrackisfast.com

# Misc
786718.com
antymalwarecheckgood.top
brandscallioncommonwealth.com
ceonacca.co.in
curoax.com
cy.tracking-alert.net
datikap.com
docalbae.com
fowme.ru
lyingleisurelycontagious.com
maticfortune.world
mondenubills.com
notecanyon.com
selfmicrosofrtenabletrue.top
softkeyget.com
stationacutwo.shop
sweetthedate.life
unitiverks.com
uu5n4xs7feit.azureedge.net
xxx24chat.com

# Spam
cyberfriendsclub.com
hotladies.xyz
trefferchat.com
cdedate.live
kdedating.live

# https://github.com/hagezi/dns-blocklists/issues/3258
discordvip.createsocialcard.top

# https://github.com/hagezi/dns-blocklists/issues/3257
zeyang.net

# Phishing
cy-app.com
alpha360.cy-app.com

# https://github.com/hagezi/dns-blocklists/issues/3247
gamingbeasts.com

bill.remote-otp.com

# https://github.com/hagezi/dns-blocklists/issues/3205
bestcontentsite.top

# "Redirect Chain" at IP ranges: 172.240.41.0/24 | 172.240.83.0/24
# More info: https://www.cloudsek.com/blog/redirect-chain-advertisement-services-being-abused-by-threat-actors-to-redirect-users-to-malware-betting-adult-websites
abpancvun.com
aclpitquxfad.com
akftfiam.com
amxntatujo.com
aqcrasadtdh.com
axvwpydaphix.com
basketembezzlefool.com
bfeoktgty.com
bivqasthu.com
caktahab.com
cigdizwu.com
dataretinalsubtotal.com
dcuawmcikdud.com
dispenseglitterlucid.com
dupgacnamopt.com
eastboundhardcoverpremises.com
explainplaysettwisting.com
fidokhffekm.com
fkabzoarsoz.com
fxproglobalgroup.com
gzefitkcep.com
gzenzuapgf.com
hasanjbam.com
hhoqipmup.com
hindisurveys.com
jwuobtag.com
kimxzutzutug.com
knelphyfr.com
levitatormonkhoodsneak.com
luvbcoawrlu.com
mikobqcusg.com
nruzpaonz.com
obzsijqreji.com
ogqfahrwua.com
omwawgzi.com
oqdtuqat.com
othhugcce.com
oxwzmeojb.com
peppersurveys.com
pzalcikh.com
qpexrabravma.com
qpigulofbwah.com
ragagqgacog.com
rwuruwrufmp.com
siporsoflr.com
smyvuljawh.com
tadqhinpe.com
tizjryocx.com
vanmhoqm.com
vujctuqi.com
wiwosxoszabb.com
wruojgvanxib.com
wziharasgcra.com
xhukhimipal.com
xhusamxabox.com
zamawzakhn.com
zihtbp41q.com
zpavtuokkj.com

# Scam
# https://www.bild.de/leben-wissen/sparfochs/bild-leser-eigentlich-reich-online-casino-zahlt-mir-168000-euro-nicht-aus-6683d837efaec85f78bb615b
slootz.io

# https://github.com/hagezi/dns-blocklists/issues/3142
http.com
https.com

# Phishing
bljsd.top
openstaandebelasting.nl

# https://github.com/hagezi/dns-blocklists/issues/3104
unsubscribe-me-now.net

# https://github.com/hagezi/dns-blocklists/issues/3103
highwaycpmrevenue.social-previews.top
clicksocialimage.top
playbones.xyz
golink.icu
pdfnexus.com

# Malicious
32979c00fcc59b5.com
adm668.com
czdqhyo1.net
fellzobr.com
googleadsl.com
krixyncbsyhju.com
linkefdin.com
love-odyssey.com
mgcicjfqyfik.com
owkuwquf.com
slvlrcalpodewn.com
tcgnclibk.xyz
watch-netfiix.com

# SMS Phishing
pepe.air-drops.at
6891.me
linkr.it
mrhop.com
1click2deliver.com

# TG Report - BTC Scam via SMS
usonkd.com

zipmatepro.com
buddyfnd.com
iamnotice.club
smartadblock.net
wavebrowser.co
mywavehome.net

uniquely-peaceful-hagfish.edgecompute.app

go8.getsecurify.com
install.securifyguard.com
pcapp.store
convertwithwave.com
upload.advgroup.ru
getsecurify.com
securifyguard.com
advgroup.ru

x-phones.eu

criticizewiggle.com
salesonline.shop2024online.ru
shop2024online.ru
soapmaking.blogspot.com
valid-check-tl.azurewebsites.net
webgalahsllc.azurewebsites.net

capitalxm.com
bundle.africa
the-turboxbt.com
turboxbt.com
markuptrade.com
maranbet.com
fxcentrum.com
fourstrading.com
novelleafrica.com
mira.fund
algoos.com
metatrace.me
caravelpartners.net
dedicatedcyber.com
1337x.so
2024za.com
badui.de
empion.io
exinariuminix.info
gigroupholding.com
mobileinfoscotiabank.com
onetoluck.com
url01.top

# https://github.com/hagezi/dns-blocklists/issues/3012
npm-compare.com
bunjs.run
json-5.com
copilot-chat.com
fe-tool.com

# https://thehackernews.com/2024/06/over-110000-websites-affected-by.html
# https://www.heise.de/news/Jetzt-handeln-Schadcode-ueber-CDN-des-JavaScript-Service-Polyfill-io-verteilt-9778256.html
polyfill.io
cdn.polyfill.io
# https://github.com/hagezi/dns-blocklists/issues/3062
# https://www.golem.de/news/grossteil-aus-deutschland-fast-400-000-webhosts-verbreiten-malware-via-polyfill-io-2407-186716.html
bootcdn.net
cdn.bootcdn.net
bootcss.com
cdn.bootcss.com
chartjs.bootcss.com
codeguide.bootcss.com
ejs.bootcss.com
eslint.bootcss.com
expo.bootcss.com
jekyll.bootcss.com
koa.bootcss.com
less.bootcss.com
open.bootcss.com
reactjs.bootcss.com
sass.bootcss.com
stylus.bootcss.com
tippyjs.bootcss.com
v3.bootcss.com
v4.bootcss.com
v5.bootcss.com
vitejs.bootcss.com
wasm.bootcss.com
yarn.bootcss.com
staticfile.net
cdn.staticfile.net
staticfile.org
cdn.staticfile.org

monopolygox.xyz

# https://github.com/hagezi/dns-blocklists/issues/2936
midjourney.co

# https://github.com/hagezi/dns-blocklists/issues/2933
gameportal.casa

# Telegram Phishing
teg-bol.pics

# https://github.com/hagezi/dns-blocklists/issues/2923
meltedpleasandtws.shop

# Phishing
lieferungs-hilfezentrum.de

# Discord spam (info stealer)
egirl-paradise.xyz

# https://github.com/hagezi/dns-blocklists/issues/2895
# https://www.virustotal.com/gui/domain/invitezoeyoc.ru.com/details
invitezoeyoc.ru.com

# https://x.com/1ZRR4H/status/1798926893246447708
githubcareers.online
githubtalentcommunity.online

# https://github.com/hagezi/dns-blocklists/issues/2854
joathath.com
mp3y.info

# https://github.com/hagezi/dns-blocklists/issues/2848
hawaintel.org
natalsled.com
quernzein.site
propertrail.sbs
oceanssurf.org
boardshape.cfd

# https://github.com/hagezi/dns-blocklists/issues/2847
sweemnet.org

# https://www.bleepingcomputer.com/news/security/microsoft-indias-x-account-hijacked-in-roaring-kitty-crypto-scam-to-push-wallet-drainers/
presale-roaringkitty.com

vvtasapp.cfd
winsim.co

# https://github.com/hagezi/dns-blocklists/issues/2796
bn6yedf.cfd

alzo.gr

transportkontrolle.net
sendungs-versand-post.com
ups-findxr.com
dpost-versendung.de

chovayicloud.com
chovayicloudiphone.com
chovaytragopngay.com
tinchapaeon57.top
tinchapnganhang.info
tinchapshinhanbank.com
tinchapvaynhanh.com
tinchapvietnam.com.vn
tinchapvpbank.com

sp-s1.net

signalgroupslinks.com
invitelinks.com
siggrouplink.com
socialgrouplink.com
theeversite.com
allgrouplink.com

industrialsgrowthpartners.com
dhlwrd.com
buyway-secure.info

# https://github.com/hagezi/dns-blocklists/issues/2697
spy.pet
spy.pm

# https://github.com/hagezi/dns-blocklists/issues/2684
hassampc.com

# Phishing campaign
# https://urlscan.io/result/035f4905-9d09-41a3-a047-8b6dd908df21/
myguestlist.com
withdrawal.vaults-ftx.com
appplecoredirection.com

# https://github.com/hagezi/dns-blocklists/issues/2652
# https://www.amnesty.org/en/documents/asa21/7974/2024/en/
afrinews.co.za
afrinews.eu
aqaf.net
coolbrandlabs.com
dakaractu.news
expressotelecom.com
expressotelecom.eu
galaxyupdate.network
gelora.org
jeuneafrique.com
jeuneafrique.eu
jeuneafrique.news
jotnanews.co
jotnanews.com
jotnanews.fr
jotnanews.live
lidarfirmwareupdate.network
neuropathynews.net
nusantaraqurban.com
senedroid.com
senedroid.net
senego.com
senego.fr
senego.info
seneweb.com
seneweb.eu
seneweb.news

hornebrew.mom
willowsushi.com

# https://github.com/hagezi/dns-blocklists/issues/2624
tracker.istole.it
bttracker.crunchbanglinux.org

massgira.fun

# JS/Redirector.QKM
leostop.com

# https://github.com/hagezi/dns-blocklists/issues/2568
ejuiashsateam.info

devrimsdemo.com # Wallet recovery phishing

# Gymshark scam
# https://www.virustotal.com/en/domain/gym-sharkfinland.com/information/
gym-sharkfinland.com

# https://github.com/hagezi/dns-blocklists/issues/2536
dbdb.addea.workers.dev
google.kt9.site

# https://github.com/hagezi/dns-blocklists/issues/2531
mailcommunity.ru

# https://www.zscaler.com/blogs/security-research/malvertising-campaign-targeting-it-teams-madmxshell
advaanced-ip-scanner.com
advaanced-ip-scanner.net
advanceb-ip-scanner.com
advanceb-lp-scanner.com
advanced-ip-saaner.com
advanced-ip-scaaner.com
advanced-ip-scaer.com
advanced-ip-scaer.net
advanced-ip-scanel.com
advanced-ip-scanel.net
advanced-ip-scanerr.com
advanced-ip-scanerr.net
advanced-ip-scanir.com
advanced-ip-scanir.net
advanced-ip-scanr.com
advanced-ip-scanr.net
advanced-ip-scanz.com
advanced-ip-scanz.net
advanced-lp-saanel.com
advanced-lp-saaner.com
advanced-lp-scanel.com
advanced-lp-scannel.com
advansed-ip-scanner.com
advansed-ip-scanner.net
advvanced-ip-scanner.com
advvanced-ip-scanner.net
angryipscan.net
angryipscaner.com
ipscannerprtg.com
keystore-explore.com
manageeengines.com
manageeengines.net
managengines.com
managengines.net
managengins.com
managengins.net
networkipscan.com
networkscanip.com
paesslers.com
prtgscan.com

googly11.in # Forum spam

grapheneos.fr

watersoftenergurus.com
universalhealing.org
dimax.one
sxlph.site
sxlph.club
generators.world
dhl-dek.cn
petition-president.com
geroiua.com

# https://notepad-plus-plus.org/news/help-to-take-down-parasite-site/
notepad.plus

serve-uspsxi.com
usps.norsenscc.com
softwarecrackguru.com
vpnonly.site
cb-webfilialie.de
postislan.top
mmtro.com
externalcheats.com
meine-db-reaktivierung.app

# https://github.com/hagezi/dns-blocklists/issues/2449
perishop.gr
peristore.gr
peristores.gr
b2bmobiles.gr
planc.gr

# https://github.com/hagezi/dns-blocklists/issues/2435
alliance-capital24.ru
alliance-happy.ru
alliance-happy24.ru
alliance-headway.ru
alliance-headway24.ru
alliance-luck.ru
alliance-luck24.ru
alliance-moscow24.ru
alliance-online24.ru
alliance-people.ru
alliance-people24.ru
alliance-russia24.ru
alliance-success.ru
alliance-success24.ru
bizxp.ru
capital-alliance.ru
capital-alliance24.ru
capital-happy.ru
capital-happy24.ru
happy-alliance.ru
happy-alliance24.ru
happy-capital.ru
happy-capital24.ru
happy-moscow24.ru
happy-online24.ru
happy-people24.ru
happy-russia24.ru
happy-world24.ru
headway-alliance.ru
headway-alliance24.ru
luck-alliance.ru
luck-alliance24.ru
mail.capital-alliance.ru
moscow-alliance24.ru
moscow-happy.ru
moscow-happy24.ru
mx.online-happy.ru
online-alliance.ru
online-alliance24.ru
online-happy.ru
online-happy24.ru
people-alliance.ru
people-happy24.ru
russia-alliance.ru
russia-alliance24.ru
russia-happy.ru
russia-happy24.ru
success-alliance.ru
success-alliance24.ru
v350679.hosted-by-vdsina.ru
world-happy24.ru

# Scam
authwalletsolutiiondapps.com
rpcsosconfig.net
selscronet.com

# https://github.com/hagezi/dns-blocklists/issues/2422
sonicglyde.com

activator-kmspico.net
ativadorkmspico.com
dazactivator.com
get-kmspico.com
getkmspico.com
kms-tool.com
kmsautoplus.su
kmspico-activator-crack.com
kmspico-activator-free.com
kmspico-activator.in
kmspico-mafia.com
kmspico-official.xyz
kmspico-oficial.com
kmspico-tools2.site
kmspico.co
kmspico.icu
kmspico.io
kmspico.space
kmspico.uno
kmspico.ws
kmspico10.com
kmspicoactivator.net
kmspicoativador.org
kmspicodownloads.com
kmspicofficial.com
kmspicoofficial.com
kmspicoportable.com
mrkmspico.com
official-kmspico.co
official-kmspico.com
official-kmspico.org
officialkmspico.com
officialkmspico.download
officialkmspico.net
officials-kmspico.com
oficial-kmspico.com

massgraves.online
massgrav.shop

# https://github.com/hagezi/dns-blocklists/issues/2413
# https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-proxylib-and-lumiapps-transform-mobile-devices-into-proxy-nodes
lumiapps.io

# https://github.com/hagezi/dns-blocklists/issues/2405
usps-delivery-a.com

ggogle.de
iosvpndefender.com
dlhpotsdegroup.top

# https://github.com/hagezi/dns-blocklists/issues/2389
fling-trainer.com

# https://github.com/hagezi/dns-blocklists/issues/2381
wwss.pages.dev

# https://github.com/hagezi/dns-blocklists/issues/2377
cartevitale2024.info/

vpn-access-protection.com
o2-dienst.net
rtlf.de
happy-nachrichten.de
vorteilsguru.de
deputyordeal.com
zealouscapitalvest.com # Scam
globelounge.top # Scam

# https://www.reddit.com/r/androidroot/comments/78914h/spyware_kingroot_kingoroot_iroot_etc/
# https://www.reddit.com/r/AndroidQuestions/comments/jimv8s/is_kingoroot_legit/
# https://forum.xda-developers.com/t/kingroot-malware-adware-root.3563090/
# https://xdaforums.com/t/why-is-kingroot-connecting-these-ips-all-the-time-2-months-after-rooting.3247710/
# https://www.reddit.com/r/androidroot/comments/xcz8ev/comment/io84a1q/
kingoapp.com
kingroot.org

bh.ke # scam links
oneclickroot.com # Scam

# Whatsapp scam/phishing
d.whatsappp.xyz
vvhatsapp-gf.com
vvhatsapp.cloud
web-whatsapp.live
whatsappao.com
whatsappeo.com
whatsappp.xyz
whastsapp.work
whatsapp-iii.com

# https://github.com/hagezi/dns-blocklists/issues/2345
spacex-starship.org

# https://github.com/hagezi/dns-blocklists/issues/2341
uk-news.pro

# https://github.com/hagezi/dns-blocklists/issues/2338
host.cloudsonicwave.com
ttincoming.traveltraffic.cc

uyap-uzlasma.com # Phishing / NRD
04326b.com # Phishing
rewards-emirates.com # Phishing / NRD

invoice-aun.pages.dev # Phishing

# https://www.reddit.com/r/PiratedGames/comments/1baxtpf/a_fake_zippyshare_exists_i_havent_used_it_so/
zippyshare.day

# https://github.com/hagezi/dns-blocklists/issues/2313
cvbuilder.staging.standout-cv.com
liveinfo.xyz
ww3.weweekly.us
cards2024.org
timesofeuropnews.com
getaccess.w3spaces.com
ourhealthy.life
klospike.online
re-captha-version-3-16.live
kimona01.com
getspins.info
vbbv.store
vibuxion.top
rangerbow.world

# https://github.com/hagezi/dns-blocklists/issues/2304
vast-conexxion.com
bllthbatnthes.life

# Phishing - DHL tracking
dusps.click

# https://github.com/hagezi/dns-blocklists/issues/2293
dynamiclink.lol
dynamic-linx.com

# https://github.com/hagezi/dns-blocklists/issues/2288
revancedapps.com
revancedapp.download

# Mail Phish (source TG)
heytrhrerght.buzz
meryruytss.buzz
premium-gifts-2024.xyz
rus-loto.premium-gifts-2024.xyz
removalsinrotherham.co.uk
s7txw.removalsinrotherham.co.uk
dlnhighpressurecleaningservicesltd.co.uk
suiueopzgd.dlnhighpressurecleaningservicesltd.co.uk
tutyutyutyu.buzz
v9xq2.shop

clankexpelledidentification.com # NRD

wgmojill.wixsite.com # Phishing
113912-coinbase.com # Phishing

foreverinprofitmaking.com # Scam Crypto/Investment
pp.45-61-158-129.cprapid.com # PayPal Phish
globalserviceslogistics.com # Parcel Scam
luxurysgift.com # Fake Shop
athletic-harmony.com # Influencer Scam
knkpublishingsoftware.com # Task Scam

# Phishing
vontos.buzz
eglob.vontos.buzz
1oleads.net
go.1oleads.net
phalangette.in.net

giveawayscord.xyz # Malware - Spreaded through Discord Trap Server Bots
z-lib.id # z-lib scam

studyforts.com
pogothere.xyz
amunfezanttor.com

googlesavedata.ru # Phish/Malicious

# UPS phishing
de-sendungs-post.com

# DHL Phish
dhl-de-track-ui.cc # Phishing
dhl-de-track-uo.cc
dhl-de-track-uu.cc

# Account Stealer for Fortnite and Co.
freevbucks2022.online
eyx092.github.io
davbuckgenerator.weebly.com
gemsforfree.com
hackzone.me

# eMail phishing
fenarqwi.buzz
obrtga.buzz
otnsos.buzz
pigurde.buzz
redakt.top
ofdakk.top
hotoffers.info
c6ooe.shop
doorhousebigleft.motorcycles

# These Domains belong to the DarkGate Botnet
# 237.245.94.34.bc.googleusercontent.com # PTR, won't block yet to prevent false/positives in future
04oc.com
2yorlk4pesejzjm37q.ru
3ar5.com
3glytldqdo.xyz
3kna.com
411d5f25.top
4655rife.com
48j.co
572881fb.top
7xmw.com
88r771r2.ru
8eoj.com
8fc922dc.top
9o2b.com
a8te.com
aa123a9d19596b46c393fd7d145db60d40.com
access-webs.biz
amobisc.com
apps-update.com
asbgwhgj.com
balkan-hosting.net
bozabam.info
breadlanguage.net
candyjoyapp.com
ci0z.com
cinelinz.com
cl43.com
clientstaticserv.com
countstatsregion.com
dcmsservices.com
dd1g.com
doubround.net
drwm.in
errapi.com
faithsanon.com
finalocean.info
fkn0.com
foultouch.com
frhoqqcy.com
gbm9.com
gdn6.com
geholso.com
gentlethird.net
glostoreen.com
hangreach.net
hf6b.com
hqe5.com
icoproject.net
inputdatacloud.com
inputgenserv.com
iomvnlis.com
js3.in
k3tn.com
kebobcapital.com
knowfish.net
koz1.net
ks1n8yamb.ru
l1hf.com
lakusdvroa.com
litepdfreader.net
lronman4x4.com
maccleansepro.com
mailtransfersagents.com
mby8.com
mi1w.com
mmmmmmanyu.com
morgem.ru
mozillaupdates.com
mywebshield-ww1.com
mywebshield-ww5.com
newstaticclientstack.com
newstaticdatacloud.com
offensivejokescolin.com
ogrovom.xyz
ourclientinputsrv.com
ourinfoonlinestack.com
ourstaticdatastorage.com
p36z.com
pmyadxuvmfmcajv.com
putaoya112.com
qdfs.in
qqqrhhpeumyk.ru
qxsf.in
rohgoruhgsorhugih.ru
rscz.in
scmpacdn.com
shopstoregamese.com
simonettemaddison.net
soet.in
srksbbbh.com
stephaniemiddlesworth.net
suibianmaimaicom.com
syncerjpi.com
tev7.com
ts7.top
uc4i.com
unpollutemymac.com
uyt4.com
veryhurt.net
wdzbt76z.ru
xqzdkh56y.ru
xrwfwaoj.com
xsw4.com
ymokymakyfe.biz
z1p3.com
# End of DarkGate Botnet Domains

citaconsulr.com # Dildo Lumma

# https://github.com/hagezi/dns-blocklists/issues/2193
i-soon.net
i-soon.com.cn

# Fake Tech Support RAT
13001.ru
ctrl02.ru
12001.ru
supos911.org
supos123.org

deezusty.net
qjdptxpxgymscjm.com
inspiringperiods.com
rubxt.online

# Vibrator S** Toys Lumma Stealer
gemcreedarticulateod.shop
secretionsuitcasenioise.shop
claimconcessionrebe.shop
liabilityarrangemenyit.shop
modestessayevenmilwek.shop
triangleseasonbenchwj.shop
culturesketchfinanciall.shop
sofahuntingslidedine.shop

# https://github.com/hagezi/dns-blocklists/issues/2178
guidesite.info
ustrack.online
safety-andro1d-n0tice.co
unhaka.com
safety-andr-sys.info
update-macos.com
acephouths.com

wtmbook.com # Crypto Coaching
passwordfix.blogspot.com
97tool.github.io
apkzpure.com
wattfo.com
networkpcigniter.com # Browser Hijacking / Extension Installer
cpmpri.com # Browser Hijacking
karan.mobi # Randomizing Hijacking Links
manizx.com # Browser Hijacking
poperblocker.com # Pretends to be Popup-Blocker Software
mobdrovip.com # Fake Mobdro App
theapkhunter.com
ehallpasses.info
kmspico.io # Fake KMS Tool
kmspico.ws # Fake KMS Tool
kms-full.com # Fake KMS Tool
kmspico.de.download.it Fake KMS Tool
kmspico.to
kmspi.co
get-kmspico.com
kmsauto.info
official-kmspico.com
dlhk.acehprov.go.id
softwared.click
kmsauto.org
kmsauto.pw
kmsavto-net.ru
kmsauto.xyz
okx.com # Shady Crypto Exchange
paydayloans.com
gomovies4u.xyz # Malicious Scripts
roidigitalcraft.online # Malicious Scripts
cashjuice.com # Loan Scam to aquire personal credentials
esigningapp.com # cashjuice scam
fastloanassist.com # cashjuice scam
myrequestresults.com # cashjuice scam
myresources-join.resourcesify.com # cashjuice scam
taxreturnoptions.com # cashjuice scam
247lendinggroup.com # cashjuice scam
theconsumerhq.com # cashjuice scam
banktoday.de
secureexpressrequest.com
cashusa.com
choicecreditrepair.life
swagbucks.com
americanunsecured.com
grantsreach.com

# Misc

000free.us
1312stealer.ru
2jnsdu731gr.buzz
5gtower.in
7altgr.buzz
7ng6v3lu3c.execute-api.us-east-1.amazonaws.com
activate-now-securease.com
adsurveys.co.in
adultbtgr.sbs
aemetblog.es
air-up-turkiye.com
air-upfrance.com
airtoff.com
airup-bottlegreece.com
airup-gr.com
airup-nederland.com
airup-romania.com
airupbelgiums.com
airupbulgaria.com
airupespana.com
airupfrance.fr
airupgreece.net
airupitaly.it
airupnederlands.com
airupromania.ro
airupsrbija.com
akbartravels.com
akrtgr.buzz
aligr.sbs
allinoursite.com
amlbot.request.report
anatu-snd.com
aocgr.buzz
apple-net.com
aqgr.buzz
asian-cam-models.online
astronomyfitmisguided.com
atlaspvs.com
atoins.com
axbgr.buzz
axjjygr.sbs
babgr.sbs
beeaar.com
bertasxt.com
bisertravel.com.mk
black-sales.cloud
blackoutarchertender.com
blsindiavisa.kr
bolgr.buzz
brenttbrevetbsagr.sbs
bsnl-tower.com
bsnl-tower.in
bsnl5gtower.com
bsnltower.com
bsnltowerinstallations.com
bsnltowersite.in
btwvisas.com
bwergr.buzz
carngr.sbs
cdn-defac13.techresource.shop
cdn-defac18.studyzone-investmentguru.com
chesssorrydescend.com
cibtvisas.com
cndgr.buzz
cognatesyringe.com
comdinew.com
config-action-now.com
confirm-page-manage.com
cooperation-odoo.com
covex.it
cqtgr.buzz
cuigr.buzz
cumngr.buzz
cutfygr.sbs
czcgr.buzz
daughterwqnxgr.sbs
dcrfgr.buzz
dfgtgr.buzz
dhygr.buzz
diteringion.com
dollarian.my.id
doorsstormsy.shop
dungr.buzz
e-indianvisa.com
e-touristvisa.com
e-touristvisaindia.com
e-visa.ie
e-visaindia.com
e-visaindiaonline.com
e-visums.nl
eajgr.buzz
eangr.buzz
editproai.org
editproai.pro
efkgr.buzz
eglgr.buzz
ellamayellgaemigr.sbs
eltacogr.buzz
eltangr.buzz
eltaongr.buzz
eltaxgr.buzz
eltdpgr.buzz
eltesagr.buzz
eltjkgr.buzz
eltsjgr.buzz
eltsngr.buzz
elttkgr.buzz
eltysgr.buzz
eltzsgr.buzz
emailservicesnetau.com
eset.co.il
etaindia.org
etaindiaonline.com
etv-in.com
euromaillinnk.com
evisa-india-online.com
evisa-indian.com
evisa.express
evisaindia.com
evisaindia.org
evisaindiaonline.org
evisasindia.org
evisatoindia.org
ewqgr.buzz
facebook-support-team-980.pages.med.br
fddgr.buzz
feji.us
fgtgr.buzz
fhygr.buzz
findthorman.shop
fingr.buzz
fkpgr.buzz
flubrex.com
geekupdates.notion.site
gfbgr.buzz
ggrgdgr.buzz
giagr.sbs
glaters.com
globalvisacorp.com
goindiavisa.com
gov.2jnsdu731gr.buzz
gov.7altgr.buzz
gov.achggr.sbs
gov.adultbtgr.sbs
gov.akrtgr.buzz
gov.aligr.sbs
gov.aocgr.buzz
gov.aqgr.buzz
gov.axbgr.buzz
gov.axjjygr.sbs
gov.babgr.sbs
gov.bolgr.buzz
gov.brenttbrevetbsagr.sbs
gov.bwergr.buzz
gov.carngr.sbs
gov.cndgr.buzz
gov.cqtgr.buzz
gov.cuigr.buzz
gov.cutfygr.sbs
gov.czcgr.buzz
gov.daughterwqnxgr.sbs
gov.dcrfgr.buzz
gov.dfgtgr.buzz
gov.dhygr.buzz
gov.dungr.buzz
gov.eajgr.buzz
gov.eangr.buzz
gov.efkgr.buzz
gov.eglgr.buzz
gov.ellamayellgaemigr.sbs
gov.ewqgr.buzz
gov.fddgr.buzz
gov.fgtgr.buzz
gov.fhygr.buzz
gov.fingr.buzz
gov.fkpgr.buzz
gov.gfbgr.buzz
gov.ggrgdgr.buzz
gov.giagr.sbs
gov.gr.sbs
gov.gregr.buzz
gov.gwjgr.buzz
gov.hisgr.buzz
gov.hnigr.buzz
gov.howgr.buzz
gov.htgr.buzz
gov.htygr.buzz
gov.husgr.sbs
gov.hydgr.buzz
gov.icugr.buzz
gov.igqgr.sbs
gov.ihggr.sbs
gov.imfgr.buzz
gov.insgr.buzz
gov.ironykibbekniggr.sbs
gov.iufgr.sbs
gov.ivgr.buzz
gov.jdjgr.sbs
gov.jyfgr.buzz
gov.kegr.buzz
gov.kihgr.buzz
gov.kikuigr.buzz
gov.kiygr.buzz
gov.kuigr.sbs
gov.leastfxgygr.sbs
gov.lecgr.buzz
gov.livegr.sbs
gov.liyugr.buzz
gov.lonzomalapimalgr.sbs
gov.ltrgr.sbs
gov.lukgr.sbs
gov.m2ud685sgr.buzz
gov.mogr.buzz
gov.mtdgr.buzz
gov.nergr.sbs
gov.nezgr.buzz
gov.nsdgr.sbs
gov.nvsgr.sbs
gov.nwfwgr.buzz
gov.ohtrgr.sbs
gov.olegr.sbs
gov.ongr.buzz
gov.otegr.buzz
gov.pkgr.buzz
gov.propertybxphgr.sbs
gov.ptrgr.sbs
gov.pujgr.sbs
gov.pyggr.buzz
gov.qcsgr.buzz
gov.qsggr.sbs
gov.qwlgr.buzz
gov.reolgr.buzz
gov.rhfgr.buzz
gov.riskifgr.sbs
gov.roegr.sbs
gov.rrwgr.buzz
gov.rsdgr.sbs
gov.ruogr.buzz
gov.rvgr.buzz
gov.scoigr.buzz
gov.sdbgr.buzz
gov.sdlgr.sbs
gov.sdqgr.buzz
gov.seagr.buzz
gov.sf6d79u8gr.buzz
gov.sfdgr.sbs
gov.shiagr.sbs
gov.shygr.buzz
gov.sibgr.buzz
gov.sicgr.sbs
gov.singr.buzz
gov.smzgr.buzz
gov.srgr.buzz
gov.successfuloizzgr.sbs
gov.surgr.buzz
gov.surigr.buzz
gov.szigr.sbs
gov.szsgr.sbs
gov.tbfgr.buzz
gov.tfngr.buzz
gov.tgngr.sbs
gov.thanpcgr.sbs
gov.themjqwbgr.sbs
gov.tnggr.sbs
gov.trngr.buzz
gov.udsgr.buzz
gov.ukjyugr.buzz
gov.umagr.sbs
gov.uogr.buzz
gov.vikgr.buzz
gov.vixgr.buzz
gov.vkjygr.buzz
gov.wdxgr.buzz
gov.wmgr.buzz
gov.xiirgr.buzz
gov.xnmgr.buzz
gov.xukgr.buzz
gov.yearnvmrgr.sbs
gov.yengr.sbs
gov.yhtrytgr.buzz
gov.ykfgr.buzz
gov.ylyigr.sbs
gov.ynsgr.sbs
gov.yujgr.buzz
gov.zcrhgr.sbs
gov.zcwegr.buzz
gov.zeogr.buzz
gov.zfcgr.sbs
gov.zfegr.sbs
gov.zfrgr.buzz
gov.zikgr.buzz
gov.zwbgr.sbs
gr.sbs
gregr.buzz
gwjgr.buzz
hisgr.buzz
hnigr.buzz
howgr.buzz
hoydeportes.online
hp-search.com
htgr.buzz
htygr.buzz
huana-pay.cc
husgr.sbs
hydgr.buzz
i-visaindia.com
icugr.buzz
igqgr.sbs
ihggr.sbs
ilwltd.org
imfgr.buzz
india-e-visa.com
india-visa-online.com
india-visa-online.org
india-visaonline.org
india-visas.org
india.evisa-agency.com
india.travisa.com
indiae-visa.com
indiaeta.com
indiaevisas.org
indiaevisaservice.com
indiaimmigration.org
indian-e-visa.com
indian-evisa.com
indian-visa.in
indian-visaonline.org
indianetouristvisacoin.wordpress.com
indianevisaonline.com
indianimmigration.org
indianonlinevisas.org
indiantravelvisa.com
indianvisa-online.org
indianvisa.online
indianvisagov.com
indianvisaonline.org
indianvisaonlinegov.com
indianvisaservice.org.in
indiaonlinevisa.org
indiavisa-online.org
indiavisa.co.uk
indiavisa.com
indiavisa.com.sg
indiavisa.my
indiavisa.org
indiavisainfo.com
indiavisaonline.org
infolokeerindonesiaa.gets-offcial.com
insgr.buzz
iphonedefender.com
ironykibbekniggr.sbs
itseasy.com
iufgr.sbs
ivgr.buzz
ivisa.com
iwantplay.games
jdjgr.sbs
jiu234.cc
jmballestin.blogia.com
jothefu5.sellpass.io
jsdimmigration.com
jsdimmigrations.com
jyfgr.buzz
jyfrsjdkkhue.com
karan-pc.com
karanpcofficial.blogspot.com
kegr.buzz
keydoordasher.shop
kihgr.buzz
kikuigr.buzz
kiygr.buzz
knrmgr.buzz
kometacasinougr.buzz
kra18.com
kuigr.sbs
ladiesmeetnow.top
lander1.s-drc2.cloud.gcore.lu
larcenterni.com
leastfxgygr.sbs
lecgr.buzz
lesivs.com
livegr.sbs
liyugr.buzz
log-hype.com
lonzomalapimalgr.sbs
lowongaan-pekerjaan-terbaruu.gets-offcial.com
ltrgr.sbs
lukgr.sbs
m2ud685sgr.buzz
makitfornows.com
megasnc.com
milusocarga.com
mogr.buzz
monicarelino13512-carelino.click
monpaquet9trackpobox.com
ms-analytics.mywire.org
ms-cdn.viewdns.net
ms-defender-analytics.line.pm
mslfgl434.pages.dev
mtdgr.buzz
mybach.xyz
mypamperparty.online
natvisa.com
nayatowerinstallation.in.net
nbaxgr.sbs
nergr.sbs
nezgr.buzz
nippon.estedentufa.ru
nsdgr.sbs
nvsgr.sbs
nwfwgr.buzz
offer.shirem.com
ohtrgr.sbs
oilembargo40.org
olegr.sbs
olive121407.studio.site
ongr.buzz
online-eta.com
onlinevisa.com
otegr.buzz
ovlonstar56.site
p.updateinfohq.top
panaceapro.lv
paquetsuivi7noti.com
paradisevs.com
pekanbaru.one
pkgr.buzz
porlasombrita.wordpress.com
powerforxes.shop
proai.club
propertybxphgr.sbs
psomsoorsa.com
ptrgr.sbs
pujgr.sbs
pyggr.buzz
qcsgr.buzz
qsggr.sbs
quationitical.co.in
qwlgr.buzz
redeem700.com
remotearbeitt-work.com
reolgr.buzz
request.report
reviewtimmies.com
rhfgr.buzz
riskifgr.sbs
roegr.sbs
rrwgr.buzz
rsdgr.sbs
ruogr.buzz
rvgr.buzz
sale-friday.store
scoigr.buzz
sdbgr.buzz
sdlgr.sbs
sdqgr.buzz
seagr.buzz
secrity2redline.com
securevault.top
sf6d79u8gr.buzz
sfdgr.sbs
shiagr.sbs
shygr.buzz
sibgr.buzz
sicgr.sbs
silicon-dolls.ru
singr.buzz
smvisa.co.il
smzgr.buzz
solution7energieqc.com
srgr.buzz
stage2024.club
stage3-last.club
stage3-last.info
stage3-last.live
stage3-last.pro
stage3-last.store
stage3x.site
stage3x.store
stepnseat.com
studyzone-investmentguru.com
successfuloizzgr.sbs
surgr.buzz
surigr.buzz
szigr.sbs
szsgr.sbs
tbfgr.buzz
techresource.shop
teslamaked.com
tfngr.buzz
tgngr.sbs
thanpcgr.sbs
thebestpdf.com
themjqwbgr.sbs
threeneptuneboot.com
tnggr.sbs
toprevenuegate.com
touristvisaonline.com
towerinstallation5g.com
traveldocs.com
travelexpress.us.com
travelvisabookings.com
travisa.com
treuepunkte-tauschenonline.com
trezor.activate-now-securease.com
trkucibqy.com
trngr.buzz
trump-drop.org
twinlistcasino-7pgr.buzz
ucureo.com
udemy-creators.com
udsgr.buzz
ukjyugr.buzz
ultrawa.com
umagr.sbs
uogr.buzz
updateinfohq.top
vikgr.buzz
visa-to-india.com
visacentral.com
visadone.com
visafirst.com
visagov.com
visahq.com
visasimple.com
visatoindia.org
visumbuitenland.nl
vixgr.buzz
vkjygr.buzz
vodsnap.com
vt.gistallse.hz.cz
wazirx.com
wazirx.zendesk.com
wdxgr.buzz
weddingfestora.com
wmgr.buzz
xborders.io
xiirgr.buzz
xn--airupespaa-19a.com
xn--airuptrkiye-yhb.com
xnmgr.buzz
xukgr.buzz
yearnvmrgr.sbs
yengr.sbs
yhtrytgr.buzz
ykfgr.buzz
ylyigr.sbs
ynsgr.sbs
yqpgr.buzz
yujgr.buzz
zcrhgr.sbs
zcwegr.buzz
zeogr.buzz
zfcgr.sbs
zfegr.sbs
zfrgr.buzz
zikgr.buzz
zwbgr.sbs