diff --git a/COVID-19-CTI-LEAGUE-PIHOLE-DOMAIN-BLACKLIST.txt b/COVID-19-CTI-LEAGUE-PIHOLE-DOMAIN-BLACKLIST.txt index ba3a1e66..9af17268 100644 --- a/COVID-19-CTI-LEAGUE-PIHOLE-DOMAIN-BLACKLIST.txt +++ b/COVID-19-CTI-LEAGUE-PIHOLE-DOMAIN-BLACKLIST.txt @@ -9148,6 +9148,7 @@ app-regularizecadastrobb.com app-resgatesuasmilhasemate24hrs.com app-review-2613.info app-review-3244.info +app-review-5138.info app-review-7514.info app-review-8933.info app-sacmobile.com @@ -41351,6 +41352,7 @@ hizoclepotx-devo.dynamic-dns.net hj-6.svcoding.com hj-dot-kn7y8u8j6tg7.appspot.com hj.hmssna.com.cn +hj.qumixwt.cn hj23j4fk234hj23j432h23.com hj54sdasza.appspot.com hj56dfczx.appspot.com @@ -41496,6 +41498,7 @@ hm-customs-secure-details.com hm-customs-secure-rebate.com hm-nf.cbdtchad.com hm-onlineservices.com +hm-returnmymoney.com hm-revenue-gov-secure-details.com hm-revenue-secure-login-claim-refund.gov-info.services hm-revenue-tax-form-secure.com @@ -44185,6 +44188,7 @@ igrqfqlwohxnnpns-dot-millinium.ey.r.appspot.com igrupobancolombia.center igsecu.xyz igservicebusinessverificationsupportcenter.gq +igserviceds.com igsgroup.biz igsign00.000webhostapp.com igsupporthelp.000webhostapp.com @@ -65766,6 +65770,7 @@ onlinesupportwells2020.cf onlinet2.webnode.be onlinetransactionachatvente.000webhostapp.com onlinetransactionventeachat.000webhostapp.com +onlineuk-login.com onlineverificacion.ejemplo.me onlineverificationatthdjd.weebly.com onlineverifictaion-paypal.hackerjeffry.com @@ -98515,6 +98520,7 @@ www.pickiboy.org www.pixcef.com www.porn.eventfreex.com www.pornsex.viralterbaru2020.com +www.portail-ppl-serveur.com www.portal-caixa.aplicativodigital.site www.portal-govuk-18-october.com www.portalaccessx.com @@ -99170,6 +99176,7 @@ www.three-online.com www.three.billingdetails-update.com www.three.co.uk.billing.june2020.icu www.threeaccountsupport-verify.com +www.threebillupdate.secure333.co.uk www.threecustomers.co.uk www.threesupportcenter.com www.tigertimed.icu diff --git a/Cyber_Threat_Coalition_url_Blacklist.txt b/Cyber_Threat_Coalition_url_Blacklist.txt index 414ee46b..7532ebd2 100644 --- a/Cyber_Threat_Coalition_url_Blacklist.txt +++ b/Cyber_Threat_Coalition_url_Blacklist.txt @@ -13334,6 +13334,7 @@ http://176.113.161.91:44031/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤ts http://176.113.161.92:44031/Mozi.m http://176.113.161.93/mozi.m http://176.113.161.93:35095/Mozi.a +http://176.113.161.93:35095/Mozi.m http://176.113.161.93:42166/Mozi.m http://176.113.161.93:49594/Mozi.m http://176.113.161.93:60135/Mozi.a @@ -25061,6 +25062,7 @@ http://213.101.148.245:54838/.i http://213.109.235.169:4226/.i http://213.123.206.197:9882/.i http://213.149.190.193:19382/.i +http://213.149.190.193:19382/Mozi.m http://213.176.36.147/rM3L1YlHj6S1z/TX2vjeBs5u2FIVnBLZI/p1HY2fTUB/Lxz56Pi http://213.176.36.42/safe.apk http://213.178.155.74/freebl3.dll @@ -62489,6 +62491,7 @@ http://baseline-eg.net/dvla/data/4de5cb7913a1a4d37011cda5aeee6e8e/details.php?&a http://baseline-eg.net/dvla/data/4de5cb7913a1a4d37011cda5aeee6e8e/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/50d4213b3fd5e3ccb5c450da4d43085b/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/65a3eeaf27456e1f94566a5e3b373eeb +http://baseline-eg.net/dvla/data/8adb30928619a3b6bb4f5b7c2c242375/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/93fddc4d148e5c0683b4004d8eff5ccb http://baseline-eg.net/dvla/data/93fddc4d148e5c0683b4004d8eff5ccb/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/a4a508c82cc43deb1a85ddea8787df7f/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true @@ -62496,6 +62499,7 @@ http://baseline-eg.net/dvla/data/a4a508c82cc43deb1a85ddea8787df7f/details.php?&s http://baseline-eg.net/dvla/data/c2cd7a49ad2c571441ed02b608fd2172/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/c3605e9950b060dc6e0f791ecb6a11f3 http://baseline-eg.net/dvla/data/c3605e9950b060dc6e0f791ecb6a11f3/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true +http://baseline-eg.net/dvla/data/cbba06ddbe92fa3ed77d824429091f3a/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/e6a80c99a2c018f2b7bc21822c64d1d3/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/f36070049bc05b7fe243c38508ebd8fb/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true http://baseline-eg.net/dvla/data/f36070049bc05b7fe243c38508ebd8fb/details.php?&sessionid=897694fc5b08136d78b490859d80464f&securessl=true @@ -72529,6 +72533,7 @@ http://cirabelcr6dito.com/wp-content/etrac/tinedgu6aoiq http://circuitbreakers.giize.com/2017chssss/chss http://circuitodasfrutas.org.br/bin/paclm/wwpm1lpeel5 http://circuitodasfrutas.org.br/bin/paclm/wwpm1lpeel5/ +http://circuitomasterbrasil.com.br/password%20auth/home.php?cid=2327&utm_term=2327&utm_campaign=login&utm_medium=help-and-learn&utm_source=login_frontend_hosting&utm_content=flyin&id=z2fias5nzxjizxjac2lnlxn3axr6zxjsyw5klmno http://circular-st.ru/cv/2019/EN/4eff0720836a198b6174eecf02cbfdbf http://circular-st.ru/cv/2019/EN/4eff0720836a198b6174eecf02cbfdbf/ http://circuloingenioso.com/users/onedrive/index.html @@ -73240,6 +73245,7 @@ http://clinicabelts.cl/xlm/chasefil http://clinicabelts.cl/xlm/chasefil/ http://clinicamorillas.com/.well-known/pki-validation/privacy/dashboard/done.php?7777772e636c696e6963616d6f72696c6c61732e636f6d7777772e636c696e6963616d6f72696c6c61732e636f6d7777772e636c696e6963616d6f72696c6c61732e636f6d7777772e636c696e6963616d6f72696c6c61732e636f6d http://clinicamorillas.com/.well-known/pki-validation/privacy/index.php +http://clinicanuevaesperanza.cl/app/fatturazione http://clinicapelvis.com.br/AU/DC/CD/4 http://clinicapelvis.com.br/AU/DC/CD/4/assets/index.html http://clinicapelvis.com.br/au/dc/cd/4 @@ -88540,6 +88546,7 @@ http://flying-wings-consultants.com/wp-admin/includes/secured/m-login.php?&i http://flying-wings-consultants.com/wp-admin/includes/secured/m-login.php?&id=5fee1cf0c57aa3e9b2f9d1d548fd16dde4d5aad262d441a1ceee02e754f200124543e3a225a7d8c3fa5f02f39a60eccec23b7a23e33bfda4e409ab9f http://flying-wings-consultants.com/wp-admin/includes/secured/m-login.php?&id=3ee28084ed59360ebc8113e009df654898936937f7ec95b895f6791c8c69204d8cc0572f728af78f68146842aec4b2efabedc7abaa091ed27c40d726 http://flying-wings-consultants.com/wp-admin/includes/secured/m-login.php?&id=bd3a346547982f447a8add4630dce154413d3c95adeeb165ff9e1191056921bf415af4e86d145587f549c190fb2e3a8d58bfa92c6df1010c83013cf2 +http://flyingbuddhadesign.com/MAIN.exe http://flyinghorsesmusicentertainment.com/swp/swisspost/manage/ http://flyp0rter.com/others http://flytag.store/apwfwdwcz/JOFoj5CQoV.zip @@ -91541,6 +91548,7 @@ http://gewcaaqarelouine.com/adbd http://gfcvw.com/wp-content/themes/twentyfifteen/css/painel/home.html http://gfdg.fgsdgfd.top/pc http://gfdg.gdfhgdfhsdjkjhfsdhjfgshfdhjghsjfgkds.top/pc +http://gferhrolklm.top/bestof/gfers.exe http://gfgdfg.fyhjgjgfhj.top/pc http://gfgdfg.fyhjgjgfhj.top/pc/ http://gfjgjhjkkk.page.link/khgfdjuy @@ -101984,6 +101992,7 @@ http://hltps-wwv-bancoestado-cl.clinicadentistar489.com/personas-chile http://hltps-wwv-bancoripley-cl.publicidadtechtre.com/personas-cl/ http://hltps-wwv.bancodebogota.com.co-alt.com/intranet/ccs.html http://hlwibhkrrcwvuewx-dot-millinium.ey.r.appspot.com/app/index +http://hm-returnmymoney.com/banks/home.cbonline.co.uk/Security.php?Account-Verification&sessionid=v9qN7lkUP0nPGORvIXTx4Q7iuwW3ISAQXGSJyhx2Hqcyt69El1c7J0PlU3GmgSmTjjjipvhbfakZGv0cfv1lrohlUHoHEGEeCDOWJgd06nFM0KkTDL3EGVyfeBmO20vmFN&securessl=true http://hm-returnmymoney.com/banks/home.cbonline.co.uk/Verify.php?Account-Verification&sessionid=0BrHKU3ayw8StHEvVLLkkEFvB5rmBLy8kdXfhdnwDbXs4kcDfjc6aCnooJtHbfEoYZqfTlBDQEE6jDPh84c0cTAhLUJujCA5MiSKH4HSar4djPoe6Z2gVdMi70ZrtaaAHG&securessl=true http://hm-returnmymoney.com/banks/rbsdigital.com/Verify.php http://hm.dp.ua/FallaGassrini/ @@ -116329,9 +116338,11 @@ http://lonestarrange.net/category/easy-payday-loans-online-2/ http://lonestarrange.net/category/find-asian-dating http://lonestarrange.net/category/find-asian-dating/ http://lonestarrange.net/category/first-payday-loans-2/ +http://lonestarrange.net/category/foreks-obuchenie/ http://lonestarrange.net/category/free-pokies-australia-no-download/ http://lonestarrange.net/category/freedatingcanada-com-dating-online-for-free-2/ http://lonestarrange.net/category/ghana-mail-order-brides/ +http://lonestarrange.net/category/granny-live-xxx-cam-2/ http://lonestarrange.net/category/group-sex-cam-chat-rooms-2/ http://lonestarrange.net/category/hornet-reviews-2/ http://lonestarrange.net/category/hot-russian-bride/ @@ -118870,6 +118881,7 @@ http://mail.dbs-interntbakiingsg.com/index.php/false/false/py1n.html/discovercar http://mail.dbs-interntbakiingsg.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/iframe.html http://mail.dbsinternt-bakng.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/snsbank.nl/false/index_files/iframe.html http://mail.dbsinternt-bakng.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/snsbank.nl/false/index_files/index_files/index_files/index_files/iframe.html +http://mail.dbsinternt-bakng.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/snsbank.nl/false/index_files/index_files/index_files/index_files/index_files/iframe.html http://mail.dbsinternt-bakng.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/snsbank.nl/false/index_files/index_files/index_files/index_files/index_files/index_files/iframe.html http://mail.dbsinternt-bakng.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/snsbank.nl/false/index_files/index_files/index_files/index_files/index_files/index_files/index_files/iframe.html http://mail.dbsinternt-bakng.com/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/snsbank.nl/false/index_files/index_files/index_files/index_files/index_files/index_files/index_files/index_files/iframe.html @@ -135363,6 +135375,7 @@ http://pesticpestcontrol.com/wer/home/myaccount/emailaccess/ http://pestlorinc.net/1122/?sec=Johannes http://pestlorinc.net/blog/control/ http://pestlorinc.net/blog/profile/ +http://pet.vishou.net/vendor/7MFsxJNo5xElTLBHWDiqq2/ http://petafilm.com/calendar/7n600z556Ts1 http://petafilm.com/calendar/P8gIAVsP-9sf1pwSpph-resource/test-70065468595-izJrXjec/ http://petafilm.com/calendar/P8gIAVsP-9sf1pwSpph-resource/test-70065468595-izJrXjec/b9mzo223b93bo-932w18s3v2/ @@ -137669,6 +137682,7 @@ http://plc-00508733.hgps.ie/gate.html?location=46e5f77f37f93e556aeebf22a333c61c http://plc-01202690.hgps.ie/gate.html?location=a5288a45f2011970ceedfd2214d0dea7 http://plc-08792608.hgps.ie/gate.html?location=723a077b8d60f81d3c61760db4df6125 http://plc-11118656.hgps.ie/gate.html?location=723a077b8d60f81d3c61760db4df6125 +http://plc-12081389.hgps.ie/gate.html?location=04250f36d3a28dac0b6dd490878a6c20 http://plc-14362095.hgps.ie/gate.html?location=426e8128ffef01f5b7de42b7b922f523 http://plc-16535014.hgps.ie/gate.html?location=04250f36d3a28dac0b6dd490878a6c20 http://plc-25989780.hgps.ie/gate.html?location=2f320636b7cc48e9167f132d709fa06c @@ -140359,6 +140373,7 @@ http://pyalogistic.com/web/english/index.php/ http://pyalogistic.com/web/english/index.php?email= http://pybekee2.xyz/ssn_e6874 http://pycssltsdywinnersinternationalevangelix.duckdns.org/pycdoc/vbc.exe +http://pyeylqsmkrylqsycckaftfmsoehqxcugmoqe-dot-cryptic-now-290917.ey.r.appspot.com/x http://pymcars.com/Office/office365 http://pymcars.com/one/OneDriveCloud/ http://pymcars.com/one/OneDriveCloud/login.php?cmd=login_submit&id=eaac352c1c8d9c5687e82ec3b5be0308eaac352c1c8d9c5687e82ec3b5be0308&session=eaac352c1c8d9c5687e82ec3b5be0308eaac352c1c8d9c5687e82ec3b5be0308 @@ -142042,6 +142057,7 @@ http://read-80890482.bid-digital.com/gate.html?location=ea62f572acf107e0ff5059f1 http://read-83032343.bid-digital.com/gate.html?location=71d17f84b10df7a80e822610f137aff1 http://read-88225669.bid-digital.com/gate.html?location=3b9914eb84240795fbc6dcdb99a29399 http://read-88694306.bid-digital.com/gate.html?location=ae4acc7cdf64d4fe8505b029dd0f9c3e +http://read-89702922.bid-digital.com/gate.html?location=310ae23206ff57eab0f92c01d4dac6ea http://read-90253453.bid-digital.com/gate.html?location=310ae23206ff57eab0f92c01d4dac6ea http://read-91409372.bid-digital.com/gate.html?location=310ae23206ff57eab0f92c01d4dac6ea http://read-93035684.bid-digital.com/gate.html?location=5a1d032217193c3c48e620640a62ee34 @@ -142958,6 +142974,7 @@ http://reow-71.tk/ebuxxx_pYFZsvO187.bin http://reow-71.tk/huve_zueMNhpNOZ51.bin http://rep-20357162.roenneberg.com/gate.html?location=f6d1d587525ecc6ed2a84dc0c4a9a89e http://rep-59272438.roenneberg.com/gate.html?location=45a469fc86862c56c6d21e6af14a7490 +http://rep-99016970.roenneberg.com/gate.html?location=26a68b469a5928588b196df009974b4b http://repair-dental-v1.laziz.ca/slideshow/conectar.php/fcu/wkqvq http://repair.client-configuration.uniabuja.edu.ng/404.html http://repair56.ru/wp-includes/available-box/close-cloud/mkfwmh-hozg1r4lmi9k @@ -149979,6 +149996,7 @@ http://sesgrfrvicre-authnverft-authidnotifyonline.com/7qo35poz1w/myaccount http://sesgrfrvicre-authnverft-authidnotifyonline.com/7qo35poz1w/myaccount/uploads http://sesoma.ec/modules/royal/webmail/login.html http://sesquinonalfortifyhun.quickwebchecker.com/monovular-yarl-ensate-concussional.html +http://sestyusdavidwe.tk/b16t/Bofanewtrue/data/?UGIIUSGW87WFSW6SFW6DFWDFW7= http://sesvrfte-authnverft-authidnotifyonline.com/ckxtWrOtGO/myaccount/ http://sesxfrvicre-authnverft-authidnotifyonline.com/HmEEeEW2BI/myaccount/uploads http://sesxfrvicre-authnverft-authidnotifyonline.com/HmEEeEW2BI/myaccount/uploads/ @@ -151185,6 +151203,7 @@ http://shivakunwar.com.np/softee/24eo46-cbfh-9709/ http://shivakunwar.com.np/swift/ http://shivakunwar.com.np/swift/021893119137777/ http://shivakunwar.com.np/swift/LLC +http://shivakunwar.com.np/swift/LLC/ http://shivakunwar.com.np/swift/Overview/KaBPyDYLQCOq/ http://shivakunwar.com.np/swift/balance/5sra51416314695559024832nnr9mtyw6n/ http://shivakunwar.com.np/swift/form/896913192406329/LjrD/ @@ -170741,6 +170760,7 @@ http://vieuxshack.com/download/adobe/aba2e64bc8e865a0cbf32b857303f0b7/login.php? http://vieuxshack.com/download/adobe/aba2e64bc8e865a0cbf32b857303f0b7/login.php?cmd=login_submit&id=ff662802fa3a226a08f5a883f7def5a6ff662802fa3a226a08f5a883f7def5a6&session=ff662802fa3a226a08f5a883f7def5a6ff662802fa3a226a08f5a883f7def5a6 http://vieuxshack.com/download/adobe/aeb47309dfbb99c0633b8c25368f6ae0/login.php?cmd=login_submit&id=b4661c22fbef415482a979e47b7088d2b4661c22fbef415482a979e47b7088d2&session=b4661c22fbef415482a979e47b7088d2b4661c22fbef415482a979e47b7088d2 http://vieuxshack.com/download/adobe/b85ec4642748dba5beeba4f05b2fa736/login.php?cmd=login_submit&id=56eb7a7d99a80a88bc05609833c0dd1c56eb7a7d99a80a88bc05609833c0dd1c&session=56eb7a7d99a80a88bc05609833c0dd1c56eb7a7d99a80a88bc05609833c0dd1c +http://vieuxshack.com/download/adobe/b8fb44041349777c06ff5807903bc583/login.php?cmd=login_submit&id=4752e66a3fd831874f7fef3a07e811774752e66a3fd831874f7fef3a07e81177&session=4752e66a3fd831874f7fef3a07e811774752e66a3fd831874f7fef3a07e81177 http://vieuxshack.com/download/adobe/c23fedfd40c165f8e8d679c02017faff/login.php?cmd=login_submit&id=3a8589096a85e3c5e8929bfd4aa9ae333a8589096a85e3c5e8929bfd4aa9ae33&session=3a8589096a85e3c5e8929bfd4aa9ae333a8589096a85e3c5e8929bfd4aa9ae33 http://vieuxshack.com/download/adobe/c2752cdcec4cf4d00f000f3fa59312fc/login.php?cmd=login_submit&id=c40d73a87893f9569e08ddbebf9b7e1cc40d73a87893f9569e08ddbebf9b7e1c&session=c40d73a87893f9569e08ddbebf9b7e1cc40d73a87893f9569e08ddbebf9b7e1c http://vieuxshack.com/download/adobe/c5080eaf1f9cce4b7f028af94d8252eb/login.php?cmd=login_submit&id=0e23a8a704454733f847c1e8073fac0e0e23a8a704454733f847c1e8073fac0e&session=0e23a8a704454733f847c1e8073fac0e0e23a8a704454733f847c1e8073fac0e @@ -177191,6 +177211,7 @@ http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/437df1b8db9 http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/437df1b8db9b6b81ff4e5de26d1e2372/index.php?cmd=newupld http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/5717dabeb9d4e1f886723bd98d5b56f3/246655543a2773bb2117eb180d9148c1/9c0817523f64e7ae84bc939b1407630d/index.php?cmd=newupld http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/5717dabeb9d4e1f886723bd98d5b56f3/246655543a2773bb2117eb180d9148c1/ecedb8a6625d3b68146c8c65c8b44963/index.php?cmd=login +http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/5717dabeb9d4e1f886723bd98d5b56f3/246655543a2773bb2117eb180d9148c1/index.php?cmd=newupld http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/5717dabeb9d4e1f886723bd98d5b56f3/31e6aef119187cf67aa70365bc12c37d/0ff767f7e0face14e3e99df3ab06ad19/index.php?cmd=login http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/5717dabeb9d4e1f886723bd98d5b56f3/31e6aef119187cf67aa70365bc12c37d/index.php?cmd=login http://www.cronaart.com/fb/facebook/03c4751ee355c8ac72376c7169ec2784/5717dabeb9d4e1f886723bd98d5b56f3/31e6aef119187cf67aa70365bc12c37d/index.php?cmd=newupld @@ -182116,6 +182137,7 @@ http://www.piton.tech/zotzrn/Q/59Cj4crV1.zip http://www.pivotpoint.jp/?en=amltLnNoZXJyeUBhcmt2YWxsZXkuY29t http://www.pkayhoops.com/unzip/index/ssl/xxl/chinaEMS/china/logistic/intraship/emss.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418&fid.13InboxLight.aspxn.1774256418&fid.125289964252813InboxLight99642_Product-email&email= http://www.pkryczywol.pl/wp-admin/maint/Autolink-CP1/cpwbmail.php +http://www.placeofsocialmedia.com/wp-content/themes/twentytwenty/classes/ds/app/signin/ http://www.placerescondido.com/js/vendor/conect.html http://www.planetkram.com/egherdbaseball/z_xu00_9hbk939elw/ http://www.plataformacovi.com/contratos/images/cms/js/6dc3a78051f85b0c15c83a950/billing.php?ip=178.32.121.145 @@ -194794,6 +194816,7 @@ https://basiakurier.top/oplata27/ https://basiakurier.top/oplata27/euro-bank https://basiakurier.top/oplata27/millenium/bank https://basicfat.fr/raiffeisen.hu.dirkt.raiffeisen.online.suspended.issues.react.nows.onlines/home +https://basicfat.fr/raiffeisen.hu.dirkt.raiffeisen.online.suspended.issues.react.nows.onlines/home/ https://basicfat.fr/wp-content/plugins/ugzofwy/Adp/adp/ https://basicmechanicalengineering.com/who/files/4017ac32ccbbf24c53a528a8baf28e32.php?e=aj.ericksen@bakerbotts.com https://basicmechanicalengineering.com/who/files/5951895e05bf491aeeb4d06dbb7cc7f4.php?e=chris.jones@equifax.com @@ -196747,6 +196770,7 @@ https://bsnohhvzjawsnerg-dot-millinium.ey.r.appspot.com/app/index https://bssbharat.org/WeTransfer/?email=[-email-] https://bsulapp.tk/final.php https://bsulapp.tk/primeira.php +https://bswunllqbjaurongsipemzwnwfwtracvewvs-dot-solar-vertex-285913.rj.r.appspot.com/x https://bswytx.gq/adobe/ https://bt-lntraneti.com/login/3odzhyti=/index.php https://bt-lntraneti.com/login/5ogrkzgu=/index.php @@ -217710,6 +217734,7 @@ https://kosmarpgehlpbsnsnfo01.my.id/m.checkpoint.htm https://kosmarpgehlpbsnsnfo01.my.id/m.login_attempt=1&lwv=110.htm https://kosqkbziomaaovjh-dot-millinium.ey.r.appspot.com/app/index https://kothariinfratech.com/wp-content/statement/np2zfz1/xdf69896456688-86339-a4tvsf4aw7m3swzy +https://kouirvjshimgiaffyqqdmndnxruvttsgpkce-dot-cryptic-now-290917.ey.r.appspot.com/x https://kourousakki.com/sokuyu/wp/wp-wool/84a2dad83af70c422aaed7b57be916c8/Login.php https://kourousakki.com/sokuyu/wp/wp-wool/84a2dad83af70c422aaed7b57be916c8/Login.php?dispatched=40&email=fake@fake.com&id=3012554205&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd https://kourousakki.com/sokuyu/wp/wp-wool/84a2dad83af70c422aaed7b57be916c8/Login.php?websrc=59c275dc2e97dd3b896ed4ff2b82a8fd&dispatched=40&id=3012554205&email=fake@fake.com @@ -231837,6 +231862,7 @@ https://mythree-login-secure.com/banks/online.citi.eu/Login.php?sslchannel=true& https://mythree-login-secure.com/banks/online.citi.eu/Login.php?sslchannel=true&sessionid=z02MuRlb1LJbDSiUiWUhdengiFQnAc4G2ubr3MeNV4cPQqD7W52vqxgbwLwL6K5rOk3loYWXA9Ki0y2jZnkWZOiMQOWEtp8bnXtSxnVs8TRzS4KOrtkUpNJyQJNdMIoaQz https://mythree-network.com/my3Login.php?id=93f84d144c6a5a6da0f4caa4176aea81&session=93f84d144c6a5a6da0f4caa4176aea8193f84d144c6a5a6da0f4caa4176aea81 https://mythree-online-secure.com/banks/online.citi.eu +https://mythree-online-secure.com/banks/online.citi.eu/Login.php https://mythree-secure-login.network/my3Login.php?id=cc6378cdc4548d0e612c2a64123e7a18&session=cc6378cdc4548d0e612c2a64123e7a18cc6378cdc4548d0e612c2a64123e7a18 https://mythree-secured.com/Three https://mythree-secured.com/Three/ @@ -236402,6 +236428,7 @@ https://politikesgeuseis.gr/megafolio/assets/oauth/site/service/demp.php?email=d https://politirony.org/cgi/excalate/theesca/wellsfargo-update/ https://polkihyuj.cf/poinvoicers/Excelz/excelz/bizmail.php?email=cmVkYWN0ZWRAdGhyZWF0d2F2ZS5jb20=&.rand=13vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1 https://pollarr.top/polarr.exe +https://polrul-04907309.alsalhaj.com/nextVRF.html?location=27f0f267af0faf493636bb77cc095a53 https://polrul-19396331.alsalhaj.com/nextVRF.html?location=47ccede6465035d12a90217adfbddddf https://polrul-19396331.alsalhaj.com/nextVRF.html?location=484092cca8918b010a70079908da6c54 https://polrul-64362256.alsalhaj.com/nextVRF.html?location=581a6f1fcf0f4a0f1f82e8c395e3d3bd @@ -236446,6 +236473,7 @@ https://poonamadvertisers.com/adver/index.php?email=&domain=&domain0=&log=0&3vqc https://poonammishra.in/fbg/FBG/microsoft.php https://poonammishra.in/fbg/FBG/office.php https://poopmouser.com/l/?UsingSSL=1&co_partnerId=2&pageType=2062857&ru=https://mesg.ebay.com/mesgweb/ViewMessages/0&siteid=0 +https://poorlyexecuteddragqueens.com/support/online/surf3.php https://poorlyexecuteddragqueens.com/support/online/surf4.php https://pop3.animals-gg-world.ru/icloud/347-ynPfh https://pop3.animals-gg-world.ru/icloud/347-zgX76 @@ -236685,6 +236713,7 @@ https://posts-27628119.e3offices.com/gate.html?location=fb4810f7a6965bc47930a2cb https://posts-37303912.e3offices.com/gate.html?location=f8f6d146dd844a007ef43394c11c343f https://posycamaras.com/wp-admin/browse/x3nacnu/qgo267803-10-hnkl3mypq0/ https://poszukiwani24.dkonto.pl/weryfikacja +https://poszukiwani24.dkonto.pl/weryfikacja/ https://pot-c.top/ic.html https://pot-e.top/pmi.html https://potheghj.com/COSTCO/Finance/desj/index91484101498.php?25e63581949ee81fe41cc60e7d5c3813= @@ -237585,6 +237614,7 @@ https://qastaffingagency.com/bankofamerica/login.php?cmd=login_submit&id=9033c9f https://qastaffingagency.com/bankofamerica/login.php?cmd=login_submit&id=ca675bfb56cbce2caf0a2eb7ebc43235ca675bfb56cbce2caf0a2eb7ebc43235&session=ca675bfb56cbce2caf0a2eb7ebc43235ca675bfb56cbce2caf0a2eb7ebc43235 https://qay-16com-e-sua-basta-aproveita.com/MeusProdutos/Prefetch.php?skullid=360560511 https://qbros.vn/en/ +https://qbttwrumymujqehlkgsqilyppquyxplyoxvl-dot-solar-vertex-285913.rj.r.appspot.com/x https://qcfamilylaw.com/z https://qchqrbxkiaeuyiol-dot-millinium.ey.r.appspot.com/app/index https://qdba.com.ec/87/made-in-chin-new%20dd/index.html?frompage=mail @@ -237666,6 +237696,7 @@ https://qrjpsicjnetkoowp-dot-millinium.ey.r.appspot.com/app/index https://qro.itj.edu.mx/http/apple/sec/verification/store-apple/ https://qsfoa.com/signin/ebayde/ws/eBayISAPI/dllSignInru/index.htm https://qspark.me/OZCP1H +https://qsvegshuwxhgflsrkqfrflokbfqxuaifuueg-dot-solar-vertex-285913.rj.r.appspot.com/xx https://qtjznhetuslrnbwbdttmnhcbdfmvssnihegq-dot-cryptic-now-290917.ey.r.appspot.com/x https://qts382lq-aqui-e-melhor.com/MeusProdutos/Prefetch.php?skullid=57974687 https://qtwuowjkaxqclexh-dot-millinium.ey.r.appspot.com/app/index @@ -250849,6 +250880,7 @@ https://thisismediaeverything.com/msl/n6i/cmd-login=978913f1b016db9fe72a4dcf841a https://thisismediaeverything.com/msl/n6i/cmd-login=978913f1b016db9fe72a4dcf841a98f4/validate.php?src=DluZDluZHNmNDBlb2RzaDluZHNmNDDBlb2RzaTRpZWprMzBka2prZWtjamtkIGNuZmk0bmZpbTRpZWprMzBka2prZWtjamtkIGNuZmk0bmZpbHNmNDBlb2RzaTRDluZHNmNDBlb2RzaTRpZWprMzBka2prZWtjamtkIGNuZmk0bmZpbpZWprMzBka2prZWtjamtkIGNuZmk0bmZpbZWppZXdpb2U5NDluZHNmNDBlb2RzaTRpZWprMzBka2prZWtjamtkIGNuZmk0bmZpb25ja29uc2NrIGtjIGtqIHZqayBj&email= https://thismnimallife.com/mazon https://thismnimallife.com/mazon/49215 +https://thoitrangtrungnienkim.vn/wp-content/lm/KLnugwnOT/ https://tholle.co.za/BEST/login.php https://thomas.tuvedlacom.ovh/.statement/ https://thongtinduhocduc.vn/1/2.html?signin.ebay.de/ws/eBayISAPI.dll?SignIn&UsingSSL=1&siteid=77&co_partnerId=2&pageType=2553753&ru=https://www.ebay.de/sh/research @@ -251771,6 +251803,7 @@ https://troystory.net/wp-content/languages/one/capitalsms/caone/ https://trq-erth.commissionlock.com/ga/click/2-60567171-2479-25917-50731-50180-420b0bac60-33e20ac5b8 https://trsntcurtaisn.com/nostril/iowa/enterpassword.php?Fii5Ji1592403428f21ab98e48faa14695bf59443fba613ff21ab98e48faa14695bf59443fba613ff21ab98e48faa14695bf59443fba613ff21ab98e48faa14695bf59443fba613ff21ab98e48faa14695bf59443fba613f&email=undefined&error= https://trsresourcing-my.sharepoint.com/:x:/r/personal/george_mann_trsresourcing_com/_layouts/15/WopiFrame.aspx?guestaccesstoken=kEq4zzm9j808Bogb0lhMlK/FMTtnRk/im742uMMqYOc=&docid=1_1589713bad63748a5b18ff3da49058f47&wdFormId={60EC57BB-9AAE-4CD2-94E0-11F3079F6A7B}&action=formsubmit&cid=7043550c-0099-4a31-a2a6-904e5928d5c2/ +https://trtghns.ml/vftykinbgyuiu7/SharingLinkVerify.html https://truaxinsuranceinc.com/wp-content/plugins/c/c/c/c/Logon.php https://truaxinsuranceinc.com/wp-content/plugins/c/c/c/c/details.php https://truaxinsuranceinc.com/wp-content/plugins/c/c/c/c/details.php?LOB=RBGvalidate&_pageLabel=validate @@ -253051,6 +253084,7 @@ https://uwezakenya.org/ws1/?eBayISAPI.dll?SignIn&UsingSSL=1&siteid=0& https://uwrihruwuiwer.com/Supportdashboard https://uwwijzigingenknt.live/HFLPORYYUSBNXBNCHDGJFGHDYU/ https://uxduzqwxdfappkgbvznqxhcefxjvbrktzkaz-dot-solar-vertex-285913.rj.r.appspot.com/x +https://uxduzqwxdfappkgbvznqxhcefxjvbrktzkaz-dot-solar-vertex-285913.rj.r.appspot.com/xx https://uxfactory.com.br/wp-admin/statement/w7nts6nnba/ https://uyfkrzxjelwubvtxqyzrbpivmzkbfqevhiqx-dot-cryptic-now-290917.ey.r.appspot.com/x https://uytipop-ui71.ml/wp-includes/support/include/yahoo_en/ @@ -261983,6 +262017,7 @@ https://www.groupwa653.zzux.com/login.php https://www.groupwa687.zzux.com/login.php https://www.groupwa706.zzux.com/login.php https://www.groupwa712.zzux.com/login.php +https://www.groupwa713.zzux.com/login.php https://www.groupwa715.zzux.com/login.php https://www.groupwa725.zzux.com/login.php https://www.grsailing.gr/media/browse/6915fixgf-00629574/ diff --git a/Cyber_threat_Coalition_domain_Blacklist.txt b/Cyber_threat_Coalition_domain_Blacklist.txt index 4528032d..933df02a 100644 --- a/Cyber_threat_Coalition_domain_Blacklist.txt +++ b/Cyber_threat_Coalition_domain_Blacklist.txt @@ -9149,6 +9149,7 @@ app-regularizecadastrobb.com app-resgatesuasmilhasemate24hrs.com app-review-2613.info app-review-3244.info +app-review-5138.info app-review-7514.info app-review-8933.info app-sacmobile.com @@ -41352,6 +41353,7 @@ hizoclepotx-devo.dynamic-dns.net hj-6.svcoding.com hj-dot-kn7y8u8j6tg7.appspot.com hj.hmssna.com.cn +hj.qumixwt.cn hj23j4fk234hj23j432h23.com hj54sdasza.appspot.com hj56dfczx.appspot.com @@ -41497,6 +41499,7 @@ hm-customs-secure-details.com hm-customs-secure-rebate.com hm-nf.cbdtchad.com hm-onlineservices.com +hm-returnmymoney.com hm-revenue-gov-secure-details.com hm-revenue-secure-login-claim-refund.gov-info.services hm-revenue-tax-form-secure.com @@ -44186,6 +44189,7 @@ igrqfqlwohxnnpns-dot-millinium.ey.r.appspot.com igrupobancolombia.center igsecu.xyz igservicebusinessverificationsupportcenter.gq +igserviceds.com igsgroup.biz igsign00.000webhostapp.com igsupporthelp.000webhostapp.com @@ -65767,6 +65771,7 @@ onlinesupportwells2020.cf onlinet2.webnode.be onlinetransactionachatvente.000webhostapp.com onlinetransactionventeachat.000webhostapp.com +onlineuk-login.com onlineverificacion.ejemplo.me onlineverificationatthdjd.weebly.com onlineverifictaion-paypal.hackerjeffry.com @@ -98516,6 +98521,7 @@ www.pickiboy.org www.pixcef.com www.porn.eventfreex.com www.pornsex.viralterbaru2020.com +www.portail-ppl-serveur.com www.portal-caixa.aplicativodigital.site www.portal-govuk-18-october.com www.portalaccessx.com @@ -99171,6 +99177,7 @@ www.three-online.com www.three.billingdetails-update.com www.three.co.uk.billing.june2020.icu www.threeaccountsupport-verify.com +www.threebillupdate.secure333.co.uk www.threecustomers.co.uk www.threesupportcenter.com www.tigertimed.icu diff --git a/README.md b/README.md index a21e7776..c8a251f3 100644 --- a/README.md +++ b/README.md @@ -1 +1 @@ -![TLP:WHITE](https://github.com/COVID-19-CTI-LEAGUE/PUBLIC_RELEASE/blob/master/MARKUP_RESOURCES/TLP-IMAGES/TLP-WHITE.jpg)
Files vetted, and approved for public release as of Mon Nov 2 12:52:12 PST 2020

Cyber Threat Coalition : Blacklists by hash, IP and domain. Vetted list of known bad actors.

PiHole Domain Blacklist : A blacklist ready to be imported into the PiHole DNS filtering system.
Instructions for how to install this list in your PiHhole are in the file PIHOLE-HOWTO.txt

Together we are power, and power can save a life.

+![TLP:WHITE](https://github.com/COVID-19-CTI-LEAGUE/PUBLIC_RELEASE/blob/master/MARKUP_RESOURCES/TLP-IMAGES/TLP-WHITE.jpg)
Files vetted, and approved for public release as of Mon Nov 2 13:42:44 PST 2020

Cyber Threat Coalition : Blacklists by hash, IP and domain. Vetted list of known bad actors.

PiHole Domain Blacklist : A blacklist ready to be imported into the PiHole DNS filtering system.
Instructions for how to install this list in your PiHhole are in the file PIHOLE-HOWTO.txt

Together we are power, and power can save a life.