From 5b1d4fdda0e578121166ee54e2541dd020d3f5e8 Mon Sep 17 00:00:00 2001 From: curbengh Date: Fri, 6 Dec 2024 00:21:01 +0000 Subject: [PATCH] deploy: d7145f19e1ecd9f535686ae8518c14a7d078741e --- .nojekyll | 0 phishing-filter-ag.txt | 475 +++++++++++++++++ phishing-filter-ag.txt.br | Bin 0 -> 5918 bytes phishing-filter-ag.txt.gz | Bin 0 -> 6121 bytes phishing-filter-agh.txt | 454 +++++++++++++++++ phishing-filter-agh.txt.br | Bin 0 -> 5496 bytes phishing-filter-agh.txt.gz | Bin 0 -> 5697 bytes phishing-filter-bind.conf | 454 +++++++++++++++++ phishing-filter-bind.conf.br | Bin 0 -> 5788 bytes phishing-filter-bind.conf.gz | Bin 0 -> 5958 bytes phishing-filter-dnscrypt-blocked-ips.txt | 7 + phishing-filter-dnscrypt-blocked-ips.txt.br | Bin 0 -> 186 bytes phishing-filter-dnscrypt-blocked-ips.txt.gz | Bin 0 -> 213 bytes phishing-filter-dnscrypt-blocked-names.txt | 454 +++++++++++++++++ phishing-filter-dnscrypt-blocked-names.txt.br | Bin 0 -> 5432 bytes phishing-filter-dnscrypt-blocked-names.txt.gz | Bin 0 -> 5612 bytes phishing-filter-dnsmasq.conf | 454 +++++++++++++++++ phishing-filter-dnsmasq.conf.br | Bin 0 -> 5606 bytes phishing-filter-dnsmasq.conf.gz | Bin 0 -> 5819 bytes phishing-filter-domains.txt | 454 +++++++++++++++++ phishing-filter-domains.txt.br | Bin 0 -> 5427 bytes phishing-filter-domains.txt.gz | Bin 0 -> 5613 bytes phishing-filter-hosts.txt | 454 +++++++++++++++++ phishing-filter-hosts.txt.br | Bin 0 -> 5563 bytes phishing-filter-hosts.txt.gz | Bin 0 -> 5753 bytes phishing-filter-rpz.conf | 459 +++++++++++++++++ phishing-filter-rpz.conf.br | Bin 0 -> 5649 bytes phishing-filter-rpz.conf.gz | Bin 0 -> 5854 bytes phishing-filter-snort2.rules | 475 +++++++++++++++++ phishing-filter-snort2.rules.br | Bin 0 -> 7808 bytes phishing-filter-snort2.rules.gz | Bin 0 -> 8258 bytes phishing-filter-snort3.rules | 475 +++++++++++++++++ phishing-filter-snort3.rules.br | Bin 0 -> 7739 bytes phishing-filter-snort3.rules.gz | Bin 0 -> 8135 bytes phishing-filter-splunk.csv | 476 ++++++++++++++++++ phishing-filter-splunk.csv.br | Bin 0 -> 6166 bytes phishing-filter-splunk.csv.gz | Bin 0 -> 6396 bytes phishing-filter-suricata.rules | 475 +++++++++++++++++ phishing-filter-suricata.rules.br | Bin 0 -> 7782 bytes phishing-filter-suricata.rules.gz | Bin 0 -> 8250 bytes phishing-filter-unbound.conf | 454 +++++++++++++++++ phishing-filter-unbound.conf.br | Bin 0 -> 5646 bytes phishing-filter-unbound.conf.gz | Bin 0 -> 5866 bytes phishing-filter-vivaldi.txt | 475 +++++++++++++++++ phishing-filter-vivaldi.txt.br | Bin 0 -> 5956 bytes phishing-filter-vivaldi.txt.gz | Bin 0 -> 6176 bytes phishing-filter.tpl | 457 +++++++++++++++++ phishing-filter.tpl.br | Bin 0 -> 5509 bytes phishing-filter.tpl.gz | Bin 0 -> 5706 bytes phishing-filter.txt | 475 +++++++++++++++++ phishing-filter.txt.br | Bin 0 -> 5815 bytes phishing-filter.txt.gz | Bin 0 -> 6001 bytes 52 files changed, 7427 insertions(+) create mode 100644 .nojekyll create mode 100644 phishing-filter-ag.txt create mode 100644 phishing-filter-ag.txt.br create mode 100644 phishing-filter-ag.txt.gz create mode 100644 phishing-filter-agh.txt create mode 100644 phishing-filter-agh.txt.br create mode 100644 phishing-filter-agh.txt.gz create mode 100644 phishing-filter-bind.conf create mode 100644 phishing-filter-bind.conf.br create mode 100644 phishing-filter-bind.conf.gz create mode 100644 phishing-filter-dnscrypt-blocked-ips.txt create mode 100644 phishing-filter-dnscrypt-blocked-ips.txt.br create mode 100644 phishing-filter-dnscrypt-blocked-ips.txt.gz create mode 100644 phishing-filter-dnscrypt-blocked-names.txt create mode 100644 phishing-filter-dnscrypt-blocked-names.txt.br create mode 100644 phishing-filter-dnscrypt-blocked-names.txt.gz create mode 100644 phishing-filter-dnsmasq.conf create mode 100644 phishing-filter-dnsmasq.conf.br create mode 100644 phishing-filter-dnsmasq.conf.gz create mode 100644 phishing-filter-domains.txt create mode 100644 phishing-filter-domains.txt.br create mode 100644 phishing-filter-domains.txt.gz create mode 100644 phishing-filter-hosts.txt create mode 100644 phishing-filter-hosts.txt.br create mode 100644 phishing-filter-hosts.txt.gz create mode 100644 phishing-filter-rpz.conf create mode 100644 phishing-filter-rpz.conf.br create mode 100644 phishing-filter-rpz.conf.gz create mode 100644 phishing-filter-snort2.rules create mode 100644 phishing-filter-snort2.rules.br create mode 100644 phishing-filter-snort2.rules.gz create mode 100644 phishing-filter-snort3.rules create mode 100644 phishing-filter-snort3.rules.br create mode 100644 phishing-filter-snort3.rules.gz create mode 100644 phishing-filter-splunk.csv create mode 100644 phishing-filter-splunk.csv.br create mode 100644 phishing-filter-splunk.csv.gz create mode 100644 phishing-filter-suricata.rules create mode 100644 phishing-filter-suricata.rules.br create mode 100644 phishing-filter-suricata.rules.gz create mode 100644 phishing-filter-unbound.conf create mode 100644 phishing-filter-unbound.conf.br create mode 100644 phishing-filter-unbound.conf.gz create mode 100644 phishing-filter-vivaldi.txt create mode 100644 phishing-filter-vivaldi.txt.br create mode 100644 phishing-filter-vivaldi.txt.gz create mode 100644 phishing-filter.tpl create mode 100644 phishing-filter.tpl.br create mode 100644 phishing-filter.tpl.gz create mode 100644 phishing-filter.txt create mode 100644 phishing-filter.txt.br create mode 100644 phishing-filter.txt.gz diff --git a/.nojekyll b/.nojekyll new file mode 100644 index 000000000..e69de29bb diff --git a/phishing-filter-ag.txt b/phishing-filter-ag.txt new file mode 100644 index 000000000..f866479d7 --- /dev/null +++ b/phishing-filter-ag.txt @@ -0,0 +1,475 @@ +! Title: Phishing URL Blocklist (AdGuard) +! Updated: 2024-12-06T00:21:00Z +! Expires: 1 day (update frequency) +! Homepage: https://gitlab.com/malware-filter/phishing-filter +! License: https://gitlab.com/malware-filter/phishing-filter#license +! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +||1nvest.bigbantbaz.top$all +||25116414.cc$all +||365365news.com$all +||365f09.com$all +||750115.cc$all +||823pages.pages.dev$all +||95564339.awi.za.com$all +||999fc.vip$all +||a.yyyy.cf$all +||aaaa.whilefish.xyz$all +||accounts-microsoft365.weebly.com$all +||accounts.0ffice365.support$all +||aidanochka-tabys.kz$all +||airbnb-clone-sahinur.vercel.app$all +||akbarinewv2.morteza638n.workers.dev$all +||alaindemeuron.wixsite.com$all +||alexa81o.github.io$all +||alienv2ray.pages.dev$all +||allegr0llokalne753724pl.art$all +||allhrteam.com$all +||amazon-clone-by-sudip.netlify.app$all +||ammuvicm.work$all +||amyr.iran-cyber-net.workers.dev$all +||antaidossiersuivamendimpayeerf33.zynekcctv.com$all +||anuragrauniyar.github.io$all +||appeal-voilation-policy-issues.github.io$all +||apple-id.cc$all +||apri.154-203-197-141.cprapid.com$all +||arvestcreditcard.embarkdigitalonboarding.com$all +||asdfjeiod.com$all +||ashleyproberts.wixsite.com$all +||astounding-trifle-b88a2b.netlify.app$all +||att-101397.weeblysite.com$all +||att-102641.weeblysite.com$all +||att-107756-104508.square.site$all +||att-108102.weeblysite.com$all +||att-108651.square.site$all +||att-mail-101246.weeblysite.com$all +||att-mail-105533.weeblysite.com$all +||att-mail-109459.weeblysite.com$all +||att-servicce-mail.weebly.com$all +||att-sign-in-107078.weeblysite.com$all +||att-yahoo-mail-105061.weeblysite.com$all +||attcom-101415.weeblysite.com$all +||attinc-101356.weeblysite.com$all +||attmailonlineaccountupdate.weebly.com$all +||attnet-100294.weeblysite.com$all +||attonlineservicesa.wixstudio.com$all +||attonlineservicesa.wixstudio.io$all +||attweadminservices.weebly.com$all +||auth-sharepoint-asr.vercel.app$all +||avertisystems.com$all +||b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev$all +||b35ccc.com$all +||b35lll.com$all +||b35www.com$all +||bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz$all +||bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz$all +||bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link$all +||bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz$all +||bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link$all +||bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link$all +||bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link$all +||bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link$all +||bbf-alpha.vercel.app$all +||bet365t3.com$all +||bet938y.com$all +||bet958c.com$all +||bhngfd3.pages.dev$all +||blackdasblacks.shop$all +||blsckdagsever.pages.dev$all +||bridge-9wdpjmsoa.pancake.run$all +||brubreumummeddoi-4514.vercel.app$all +||bscusdty.top$all +||bsozvycr.icu$all +||bt-102368.weeblysite.com$all +||bt-106861.weeblysite.com$all +||btjfh.weebly.com$all +||bussinessaccounthelppage.click$all +||bwfujmww.icu$all +||bx.sfdsb.icu$all +||c.cting365k.cc$all +||c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev$all +||can-post.cyou$all +||celery.sa.com$all +||cen4-six.vercel.app$all +||cf-worker-pages-proxy.1352562939.workers.dev$all +||cf.13084493.workers.dev$all +||cf.iwoai.cc$all +||cfcf-8.pages.dev$all +||cfr-reed-taxi-wayne.trycloudflare.com$all +||chain-trt.online$all +||chainsolapprove.pages.dev$all +||chat-wa.xyz$all +||check282.tempisite.com$all +||chore.pink$all +||ciftcininbankasiziraatbankasi.com$all +||claudiorojas.cl$all +||clivenicoll44.wixsite.com$all +||cloudflare-workers-pages-vless-a2j.pages.dev$all +||codt.digitasianetwork.workers.dev$all +||coinbase-com-18690.subttrepimop1005.workers.dev$all +||coinbasewallet-verification.198-46-89-184.cprapid.com$all +||company0rder943.weebly.com$all +||completar-la-verificacion.vercel.app$all +||conductibili.fun$all +||correosprepago.bnext.es$all +||crenadenuddoi-2258.vercel.app$all +||cryptorectification.com$all +||currently5267.weebly.com$all +||currently70.weebly.com$all +||currentlyatt909.weebly.com$all +||d.afirkz56924.workers.dev$all +||datagivers.com/3961f442eqd80b4e3c28f75c4ba682dd68f9.html$all +||dio.azrealonce.workers.dev$all +||ditgong.com$all +||doc-online-1881.on.fleek.co$all +||docsignauthorizationrequest.vercel.app$all +||docusign.com.bestfinancebroker.com$all +||duang-5dh.pages.dev$all +||duvhkeq.pages.dev$all +||easyaccesscommagebn.com$all +||ebay8787.shop$all +||ee-account-home.web.app$all +||ee-service-help.web.app$all +||ee-service-portal.web.app$all +||eln3.vercel.app$all +||enormous-orchid-howler.glitch.me$all +||espaceparticulier.life$all +||ets3qe9ooms8t6i8.pages.dev$all +||excelorgo.com$all +||falabellacom.dominiquepg.com$all +||fdesq4.pages.dev$all +||fdsfjiwe.com$all +||fdsjfkweow.com$all +||fekoulamevebouna.freewebhostmost.com$all +||felomane390.wixsite.com$all +||ferngos.de$all +||fieg.84yr483rhfwieujro348ur84.workers.dev$all +||figinstenatecom.pages.dev$all +||finansfaizsizbasvurum.online$all +||flow.page/uebj3h3j$all +||forested-mirage-samba.glitch.me$all +||formtools.com$all +||fortradesetup.hamidamnaie.workers.dev$all +||free-5436781.webadorsite.com$all +||frogsrus.wixsite.com$all +||fshraha.pages.dev$all +||fukshumx.world$all +||gateway.ipfs.io/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq$all +||gazruinv.web.app$all +||geaoolsv.pink$all +||geminiwallete.godaddysites.com$all +||ghjhyu.wixsite.com$all +||gimennlouin.gitbook.io$all +||goldenrod-rowan-submarine.glitch.me$all +||gorgeoushome67.wixsite.com$all +||group11-vvip-hot-girls-combi.viplch.online$all +||gruppeflorian.com$all +||hanisfir.shop$all +||hedayatfreedom.hedayatkhakpour.workers.dev$all +||hello-world-morning.freekite.workers.dev$all +||hello-world-muddy-cloud-f45b.mfoster0425.workers.dev$all +||helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com$all +||heluapla.shop$all +||hemanlau1.pages.dev$all +||hezhouruan.552008598.workers.dev$all +||hgcdhbxnf.weebly.com$all +||hjrhd.top$all +||hk04-123.pages.dev$all +||hkmqo.top$all +||hm.ru/medoeu$all +||home-100317.weeblysite.com$all +||home-102207.weeblysite.com$all +||home-107257.weeblysite.com$all +||homelogin7t6sdfcgvhb.weebly.com$all +||htaflytz.baby$all +||htaflytz.black$all +||httap.l-teiegram.com$all +||httpsbellsouthnet-102649sitecom.weeblysite.com$all +||hup6r.com$all +||hy.fuckgwf.eu.org$all +||hypophysecto.fun$all +||hzuayvvl.red$all +||id2.xbenihime.us.kg$all +||ikergalindez.github.io$all +||info-delivery-bg.com$all +||info-trackingcs.cc$all +||info-trackingiax.cc$all +||informed.deliveryhbo.top$all +||informed.deliverytcw.top$all +||informed.deliveryxs.top$all +||infringement-service.com$all +||instagram-clone-in.vercel.app$all +||interbenefitprestaciones.referidosweb.click$all +||iouwerty.weebly.com$all +||ipfs.io/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq$all +||isnworldwide88.com$all +||jaydeep8806.github.io$all +||jeanandpeterwilkin.wixsite.com$all +||jetconstructionsgroup.com.au$all +||joeandvelma.wixsite.com$all +||journey-x-pro.com$all +||jsdfchkdsds.weebly.com$all +||jshattkee.weebly.com$all +||juliusmasih27.github.io$all +||jung-sohn.de$all +||katiebllair.wixstudio.com$all +||katiebllair.wixstudio.io$all +||kdlmo.top$all +||kenzmail0.wixsite.com$all +||ketura2010.github.io$all +||keucroilluxibrou-2718.vercel.app$all +||kuconlogin-ui.godaddysites.com$all +||latam-onipojes.vercel.app$all +||layanan-bntuan-resmi-dna.prbu2.my.id$all +||ledger-com-updatefirmware.aparecidovisentin.com.br$all +||levappoprauqueu-4688.vercel.app$all +||leyoixoimmecou-5619.vercel.app$all +||linkbokepviralindo009.vipp.blog$all +||liveairdclazmersn.pages.dev$all +||lo6-cas-projects-64947843.vercel.app$all +||maatamicklogginns.gitbook.io$all +||madebybmr.in$all +||madhu821.github.io$all +||mailupdate87.weebly.com$all +||maine619.github.io$all +||mainnetverify.pages.dev$all +||mazulyta.pages.dev$all +||megrebeikenneu-2106.vercel.app$all +||mendhfjpl.weebly.com$all +||metacareer.com-case37169314276.com$all +||metagalaxy.pages.dev$all +||metamacksiologus.godaddysites.com$all +||metemrsblogin.gitbook.io$all +||meyetamaskiwalt.gitbook.io$all +||mianfeijiedian.lawcpacpv.workers.dev$all +||milanharvestfestival.com$all +||mirobitsgt.github.io$all +||mocp90.pages.dev$all +||mostafa2.mehdi84888.workers.dev$all +||movie-firebase.vercel.app$all +||mubki.hp.peraichi.com$all +||my-site-104564-105934.weeblysite.com$all +||myaccountsignup.net$all +||navy-nose-4544.typedream.app$all +||net-flix-front-end.netlify.app$all +||netzero-webmail-105996.weeblysite.com$all +||new-currently-1-23-24.weeblysite.com$all +||newattupdatemailboxkidlyverifynow.weebly.com$all +||nfty-proj5.vercel.app$all +||nnbsscnaceesngsetr.com$all +||occinamete.cfd$all +||odovsccs.weebly.com$all +||officalourtime.weebly.com$all +||office36503.com$all +||ohscorgza.github.io$all +||okm.znt.temporary.site$all +||oliver752.github.io$all +||online-e-commerce10.com$all +||online-e-commerce11.com$all +||online-e-commerce12.com$all +||online-e-commerce5.com$all +||online-e-commerce7.com$all +||online-e-commerce9.com$all +||orange234.wixsite.com$all +||orgmail.weebly.com$all +||ourtime.datings-information.workers.dev$all +||p.updateinfocl.top$all +||p.updateinfocs.top$all +||p.updateinfoga.top$all +||p.updateinfojq.top$all +||p.updateinfolw.top$all +||p.updateinfoor.top$all +||p.updateinfooy.top$all +||p.updateinfoqv.top$all +||p.updateinfove.top$all +||p.updateinfovt.top$all +||p.updateinfowu.top$all +||p.updateinfoxb.top$all +||p.usertracktxz.top$all +||pages-108-tg-cfzz-ip.pages.dev$all +||pages.tempisite.com$all +||pageverifycenter.com$all +||patjimmy323.wixsite.com$all +||paypalloginin-usa.blogspot.com$all +||paypalloginin-usa.blogspot.hr$all +||pcmag.anycubic.vip$all +||port01-acf.pages.dev$all +||portal.chiaveggies.com$all +||pruhuffopraussou-5681.vercel.app$all +||pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev$all +||pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev$all +||pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev$all +||pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev$all +||pub-2801359d2be54bfd8701132626efeb73.r2.dev$all +||pub-3096005ebeae423182ccd89665564d8a.r2.dev$all +||pub-46a5f86348ae4aceb3591d126020999f.r2.dev$all +||pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev$all +||pub-51f896deb233450089fc1a520e6ed957.r2.dev$all +||pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev$all +||pub-682ad3b65d944376b919745aae3c56d4.r2.dev$all +||pub-722720be67154192a1102b2cf085d306.r2.dev$all +||pub-7d056bfeb6b04852801553620fe62c0a.r2.dev$all +||pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev$all +||pub-873fc6a3edb941c6a17f50911dfca518.r2.dev$all +||pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev$all +||pub-aab4be29317b4ec296517a557db12622.r2.dev$all +||pub-ba5a046c69974217b0431bca4ba43740.r2.dev$all +||pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev$all +||pub-c59cf4e950b142949df8861e60b3689d.r2.dev$all +||pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev$all +||pub-e5855431d98545b38408f52af50ab8a1.r2.dev$all +||pub-ff0271d87324424a9aec83337e844a54.r2.dev$all +||puertaselectricasprincipal.netlify.app$all +||qaffixledger.com$all +||qbstdfda.com$all +||qpownthenewyhadvanceweb.weebly.com$all +||raj-tiwarii.github.io$all +||rebrand.ly/46wjpyr$all +||rebrand.ly/910428$all +||rebrand.ly/cdmd94193ab$all +||rebrand.ly/n3yi7p6$all +||rebrand.ly/vre1p3j$all +||restrict-policy-nonadherence.vercel.app$all +||reviewboss.github.io$all +||rfgxg.top$all +||riaayaoman.com$all +||roadmap.binarydesignhub.com$all +||robinhooldloegins.gitbook.io$all +||rouzhda03.kambizmedia.workers.dev$all +||rsjxzl.com$all +||rtyuiuytgf.weebly.com$all +||rubinhuud____llginnh.godaddysites.com$all +||rudra-choudhary.github.io$all +||s.id/p8w69$all +||s.team-s22.com$all +||sadekk.com$all +||safebank.onl/107519/c90488/4a1f04e6-1517-4254-abda-f0aee8fe0ab9$all +||sajsa.icu$all +||salarahmad786.github.io$all +||santanderpod.fsthosting.com$all +||satinnaaoabbs.weebly.com$all +||satyarthi.uk$all +||scarce-army-wide.on-fleek.app$all +||scearmcommnymnlty.com/cert/loks/mir$all +||scearmcommnymnlty.com/cuce/rit/pil$all +||scearmcommnymnlty.com/qinmot/truklop/poli$all +||scearmcommnymnlty.com/trawbe/nunty/loki$all +||scearmcommnymnlty.com/xul/lex/ponu$all +||sdfvgbcvb668.weebly.com$all +||sea.6e2efhxz.eu.org$all +||secrbnsuppotyu9.weebly.com$all +||secure-ledger-m-auth.webflow.io$all +||server.2rk3.com$all +||server.pxs7.com$all +||setshinobi.vip$all +||sextelegramxxx.pages.dev$all +||shareorder711.weebly.com$all +||shaw-101342.weeblysite.com$all +||shaw-103098.weeblysite.com$all +||shaw-106054.weeblysite.com$all +||shaw-106665.weeblysite.com$all +||shawsyncmailservercommunicationworkspace.weebly.com$all +||sherman-relate-rev-baskets.trycloudflare.com$all +||shobhit245.github.io$all +||shopifysite.cn$all +||shoptkoo.com$all +||shoutout.wix.com/so/e1p6lravu/$all +||sign-in-att-108611.weebly.com$all +||sign-in-att-108611.weeblysite.com$all +||simxtrackredirecttszz.pages.dev$all +||sites.google.com/view/ghghdgfdgfc/home/$all +||sjhsjjs82.weebly.com$all +||skill-meta.com$all +||sky-107842.weeblysite.com$all +||smithjamessv328.wixsite.com$all +||socx.ly$all +||sparq.eu$all +||spicyhotcoolsoup.s3.us-east-005.backblazeb2.com$all +||spotifyl.vip$all +||ssfgsfg.wixsite.com$all +||sss.k999955.workers.dev$all +||stonemartin1001.wixsite.com$all +||stringroll.com$all +||sukienffvip.doiqua-garena.io.vn$all +||supportsecurity981.tempisite.com$all +||talktalkserver897.weebly.com$all +||tareq088.github.io$all +||tbsl.by-on28.my$all +||tcaconnect.ac-page.com$all +||tejlksdoisd.com$all +||telegcm.me$all +||telegramjessica.pages.dev$all +||telegrampx.com$all +||telegramsexgroups.pages.dev$all +||telezelm-ivee.icu$all +||telgramsignal4.sg-host.com$all +||telstra-102379.weeblysite.com$all +||telstra-104033.weeblysite.com$all +||telstra-104394.square.site$all +||telstra-106968.weeblysite.com$all +||test1.workersdev40050.workers.dev$all +||tg-logrom.com$all +||tktk.tktsk.shop$all +||tokecn.im$all +||tokeni-1601.vercel.app$all +||towrewds.com$all +||tpwalllet.com$all +||trustwallet-zendesk.com$all +||tuviaje10.com$all +||tvjbqiyv.guru$all +||twcht.twimobie.cc$all +||twimobie.cc$all +||uedy.pages.dev$all +||ultsyncingsolana.pages.dev$all +||upheldlog8.godaddysites.com$all +||upholdloginorofficialsigin9.godaddysites.com$all +||upholld-lligon.godaddysites.com$all +||urlz.fr/tlly$all +||usol.shop$all +||usps.com-cgkzkukp.vip$all +||usps.com-trackaxd.top$all +||usps.com-trackbrs.top$all +||usps.com-trackdht.top$all +||usps.com-trackgee.top$all +||usps.com-trackhsk.top$all +||usps.com-trackivo.top$all +||usps.com-trackjjx.top$all +||usps.com-trackmra.top$all +||usps.com-trackmvz.top$all +||usps.com-trackuqg.top$all +||usps.com-trackvgb.top$all +||usps.com-trackwbv.top$all +||usps.com-trackyqb.top$all +||uspsdana.com$all +||uspsdant.com$all +||uspsservicetrack.blogspot.co.id$all +||uzomadj.shop$all +||vedi.154-203-197-141.cprapid.com$all +||vgmrm.top$all +||vkkvdkdcmm.weebly.com$all +||vl1.spaceysen.cn$all +||vobroffexagru-4404.vercel.app$all +||vrvtn.top$all +||w1.5114559.workers.dev$all +||waassistance.com$all +||wallet-diagnostic.com$all +||walletsecured.pages.dev$all +||web-lupqrbm0k-uniswap.vercel.app$all +||web.tlgrm.app$all +||webmailserv3038z.wixsite.com$all +||wk.xzte.eu.org$all +||wodjrvrisixc.wixsite.com$all +||worker-dark-queen-529e.servers5555599.workers.dev$all +||worker-hidden-frost-ba39.yoveli7450.workers.dev$all +||worker-site.aopages.workers.dev$all +||workflowy.com/s/att-support/6ca3iebztzztx2gi$all +||wsa.osmqone.org.cn$all +||wwwwwwsasasasasmmmsszz.vercel.app$all +||x.tovip.eu.org$all +||xhjxkj.cn$all +||xixiajiaju.com$all +||yahoomailquthorization.weebly.com$all +||yungtee3.wixsite.com$all +||zagbasamothega.dnsget.org$all +||ziraat-kampanyasi-besbintl.xyz$all +||zxl.cbbnbbc.nyc.mn$all +||zzpov.top$all diff --git a/phishing-filter-ag.txt.br b/phishing-filter-ag.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..0397f4494a8cf06a1f5865a899eb9ef1120a9e7d GIT binary patch literal 5918 zcmV+(7vbpPKGytwr2i?{1@#&~k7FQ~2)a6)GNFs$a zoJOV8I_5mAl#t#r`LZg*p2u+2r5KpdhJd z-Rr0pAJ+WKuRrYS=FTAa`z_S;%dbB@Lao33&;mi>bKk%CSwdTTep+buXrKMJl9vZw z^l7Dk0}bf@3I6iC-;L?S+NcSOfz%8oYK^d0M z6a6p;=9uI#jxwdH8K+lmr9U-0JR`sAETs~h&lIjeAIN6FJkQ?JGgN0F(EGk`YJJ#t z0HEg&f#J53e(&d&KiyJIB}@hwN`+iWdLf#4mmz?f>EL~^_{8@n;YkY)j^28V4M+oX zSGtw*-a;|S5F2wsQeh3L7kXl`7%3c;{(Ck9B_zB~M)zDAKA^Zx^vY$!LI@2a91c@v z$6j)xSNQg9s=ECmenF3!Hf}@6k*6Inovgr3T=4?m{v>6HF>eqPPLfYd9FYQ!dW>rs zp;T!dJ3KjI*UQ|bb{CEVpccg7@5j)6?`N<(LSp#0dlwoCBw}xag(PhFo;#^QaJkli zrS@>bj>(1nfE%%R&gpX}+^lV9)x1f)z*3;6a6=)*GRJ`s$(cjszd>?BrfR}2m`PG1 zlHj^19xe7t=qLqY11IA=kx`7)9(%E)sv?!qLO3aK$spZAWN_nrH94^+7-80A`K$A9 z3^^-r>l*PsN;X(pZS&UJa!;S%B55V~h{R|O%rr*-*2p-Fe4cu_ZFUHAm6;Ob!%mY_ zWE_MXH09S4{h;Bt>6fsdmZFs$GthSkv8EiEP(0w(lalkRI14$8=c}l;dJSvv!<#8A ziG+my42MZ)heC;1y*LL&$wr&^=cSEelwjwDWaH$L5^zW6OP)oM*@umYl92RE8`vze zB-s&~Xjq}U-65^JkU=fu#%S$A(M7ms)ywE@B@?)C5|)GnDramzv9vI6Q`5-VGoz6> z3r8fAo(Kz;XoZY$1=bJF88=O27|4$J*u}m@KX$r>vRx?R>7lWiJcdhaZT=a!j4=j+ zkaod01%4|SF#2mt{rwzgzIP_Rt5h44razK0@oI>qC@KDYf^(kZZ=AjH+Dv9MqcCLi`Z z_lL#L6JgRWWy=p)sWGY2$6y#30@$le=yBE(-0w z#J5Om{g$O7-lpxYvuMt(sm|EJl2PAJMe%bjZr5E%)`aEYHuy~W$m}i7Skv>l&QJNA z@>-tb8~I^B_So*_bG;_F4ubjEkZP2cJ*%7E%WaE1(0`B{NQtZKxUNrN%l=O0F{*#8 z$$jbTG);UH)8Wb|hohZWXAsv1>=N?ywEUflkW6OjJ=8P9)tY3*!-@Ld&HFIn%Rby} zxK|gl;SetV{&Z=@mC|uW!5DrUD!kH+C%OP*6e$LUnux}`a6#B+uJ6!DsRu&AYg)YH z!UD?BnuGeYQmG;!#%`#?mVf#LBkg-B!7WJU%N_5%W}pWo3mekX6WFh*n}U7s`;N}# zK!h9xQn{<`)wNspd{k5ObKbVlVEZdhW*oTE2ojglTsn(sZ@;oF-Sk@7U$C-VJnS2g zm8o(h+~>P|fA7~-q1<0uy{jg;5=(6hY2iw4!o`PT`M{=Obc8GGh!~L*gA53pIYS9z zKqom{c|Hsmmi}HpjTy;l4F9TF5N-~rjoLdGoDUk3P}a;4>dfY0JH!qu^e^eK_$PTQX6Bu3MZyubBscWbrx*-W(d}M=~SbW5MXbl zwrAIW^#pPXE`Z5z7{)UywM3!rtm?#NVMGBsv_ z7K-(~SHT1hQ|ByK!kE+**m55&7qksIYb}*tELo1?Et#5-5J2Lch6e}G+C0qf-Z=_B zl<_4~=AQvI%lX>x3ja~?bAEyT+kXxqxB&{%@G;>aAKW{))$if^lg{Pp} z5z}HB3qxD7Dze>WOGeaJBcs+M&58PmxKW#-KrjY5&d4P^G((d|jN0g{yKH+3C`F>S z9^Q~dPB}TElzrMA(n6$LdwAilpX-L7IIxfrJCkbjZb=+rnyv&Ixb>u`sj3-~aB!Iz z`(QS;RJRUMCs2?u_%I@(OFiAW7QfZx zdOS{CXX-Ivp{6PU;9F>we{jxuuezzgHcQ~wV$5Zc*K0gj&XfqWr}kBq7Cs%1)-KpP ztRInMN$;wEhYO)g)VJR*%vZ!RxaA&U#}n5JQGi<7dR=JNT-!bYS;5`KyhB1h4@}SG zv7{weL%8!}z=djY7omAs{S~mkOXfoNq6bP@AC{16!vqacw#N#(-8WJ_gr|nbKs|fu z`?LXuQ%pPX)zQ59%HNSnF2;JZBYP;Y*l|w18)!pZL}x+EIjSmP%C0G}*wDAw`axIN zgM&Rm7>YnXGm(O;NlPY~47gnGo%)iOTDl>?iLYyc6>vBAt*(9l7Friw1X#bDF1Y1M zHRRXN!I#4DVM9DkPvr@UZMc?H9#?LN@tyd4YER*^7Ma(F$&w=5Wb_+8Sr_z_9@057 z)CGYwBhD#QS+GZv8KoD}B|C6V5ThvQXj$Lu-4QOggdJ0gxrb!3!KGa+_h77kN=zj? zQt}0f)NXd`ntiLSUs@N;z48KJ?ToUXwB&w_BRS7-kTo}A-pGs5LcUhfcpsw3suxF?- zY3sIsGVr7AwDi}GE@KZ?^Nto14t$(=po_uSz;$90{U2UUO;zXZa;^rk!y5Q_w}-lQ z?88A16JJ-{;GmH-47e0aE&2^$Enu?6W&iMdi$ci~iVK|fRpQ*P=m3|THuu`fX- z##MOaW4$ZdmW8rMTb~a1c}7~0@w|%Q82uVdVGTRdUg?&PIc!)Kh=%Ra9}{dxNInzS z@kuu^6BtGd9-(QrsuuLyDFS@&JIjua<{Gh@?qCnXx!Ehqx88xr4jqnytU%Wo7rR;) z+->G#1rb*`(=G4%!*#FZCJJj zZ@3+Ti)%fo1`K^8BuLKHne_^B3qFgJ-q`$ma^<`L(?X#?dzcZDJ2CE%$zi#dgg5!B zsZ<<{EeGr7s;iIg-gSl6HpFO8dJMhpP{Yb5yo&U+keb&duz0;e3ut15Pzfd28Ic~Q-)|v8 zgPr6Qj{L@&ks9G{-FHPyY8?_OSoc6&0(unF8QpIh#=aE2)pAieiHRDQSOl--GgCOA zpbajcp<-%5Nw}dT?tQ{>W}^>7^2nJnIY(f;u+X4UKnI z$T2UyK9DP3XQR58+Lla~P}}j&OsN~oIaZ5QCP4BS-T@us<}Siz53t9{f$X)12x-;r z35W!0Yt&FOb|c2p+9FG~$2{z(oUhl>Q($z*)delIW_%DJ(Mo(MD28D*#@Fg*3v@l` zfdztH!$rACrJ>4BQ9?DvVdkQKzZKm^SW?&J@}YoiS&pP!kq9XSy_QhL6?L#>JAk!l z^D%r0IwKju zkn%;OM)K`GlE;u$`t?#Wwb}$0v8JVBwXuK-Z!`l`~_KV3I5;5$K@cPull6VjPOJ zkFoXRRTRV(3~!KLVJyED>XBQ-`n8-_WOrC7q}z5A zKtv$qb1;kqtluXh|0`|R04FX>7?MJd(%0@i>rzuIS8@@0JXelx$RIRV9*r5j70O!> zpe4fh^3e=p7{LPw6nX|>M>ULQKp~CwseCrMNi*#LtPg_oOD|dk1I#7XXVf^&V?KX_bqrkf@A|KbhDhC@08S5`)M4+fC9x} z+^DowPAHs==HPs$88~i~bh8kAQf40KNk{pZ#nDv8} zjt^>i5;sU?JQ`&Np=A?!DJ55I@Tiz=MZaljHCQn-kSInsnZbi&lJf~b&AuGJ>4|%* zfTJ_B7_EYF@^YBR(RmAUq%FUJ9sz_gUUMy!(V%BGYw4shmV;V-17L(fHuG^Z0xg@B z94C-+a%N4ekstc)Lo9F^0v_J%pXNG+w{ zqnou9(r_&X?Ii;*2QV5&_X52i*fcslaV7*4Faui6-wH-81jy44EDi1U5E3rYz5N=-pPu@^Mn zFQKmYahE^`^Ee2m&t6!!yIG7g2NS_b;&+%1_1<+B91n>cV@m{zRP%NDgodIMF>?J51+y9a8MHxlpEH}BXY%9?DahT*dzwA5+ ztzQC0KL}K0l;cDMlY)S8K>PrR+T#GGy!r610Kf30LWBbA4sOz7E2+Xx%O!{9$d3Bj z)LAw_O{ub&&JsWdW7z&jtx5rn+@9W5^&IdbxF258@;_XYZBW|Os z_gdfYs@bV^3o#NQ7abtoN~7^Lyg zZstr<6|$Qur@a!x8;Rh4P{o%X;X%_a=R0x>{*H%)!|Ipnmu=8%rJGILm{PHbhDOA4 zE9p24V;)k|p@8`l74V|^7BG2#hJ(5sJ{`ycpq?%oGCc{2*kfR?;5f8<*5jNL%$DFc zIS^v$S)6*E8x;HuT0cuOHBxhvoS3G2O}8`)=2$9N@{WYp@boAx_len^Q=Ez2aACGImY6?fFb4;Y1t*wT3Y*!|QL$XuGidULePHI7~Ikt_~>yfHBvCH;seLFfH zF&um92>2@dZB}lkRBmo<+!jP`Yu&hoGjn^tzZ~}hft?Sx{#m%4i{W;eGwS_GD>)Lf zwjlA|T;mnpm=7g{vnT-b^(XJ(-c5arPjnVkspqnn{mp}O+fKJRyYKzBamJA{G4t+< ziMvqGZ0Oh{{K8T?5n@1;r=I0(>Ba3eQaO%7N{DmF1yF0a5v~#TlRx%bU4SLc7)H0@ zgj*fm9hAS03k`|=_!P4b8|f+33yuwid31&rm$Lf{EL}D}aQ%#_gdP#P4EoRhQWkhX^R(w_U$%r~Wh&5I_fJl^{}#HCuOD?4F8aRj zmEE(ib~t!}?V#%~$9H{yw|9mWe#1AwJHWfwA{v6hdBg`G%OG5*cTY=0lyLWYU@=f( zzd5wx3s9Hpf^Ay};9MgcfU7Hp8i>JaLTVAy{_M{;Qfo{y#?o|Kx^MZs=Q(nJ06_(9 A#sB~S literal 0 HcmV?d00001 diff --git a/phishing-filter-ag.txt.gz b/phishing-filter-ag.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..fe40e12a6a5a9defc130a42ffd845e279a06ba95 GIT binary patch literal 6121 zcmV*FknEyVZ!8wUbau|J`5x^{@XNII)8N@hb|V#0w)Y$o>=re?;LQLGWLo|I>Al zT9`k6g}*pie*NvZ_WxCCaT!I=7RTdXR3`>fVZz$l!Tj;{RbhTYeWtpvjzvU2abTV`}WJ@jA)0GODy#o<9pg+hxQ5+075i5)yTN%s326+h+&KNv~Ml z5D&6ijNiOwkec??W3B3iX9xs3YJUitSQcaV2@E{Kvsc^&&{oPmw0ePO$hXDjl?~YDn9QQyQP5WWf5q z_t&;HRz7n7jvs&p9Z1^Yo>6B*pm83!Ln+v?8@Lj*RJ~`O@#3Rqr@WbGa$kwegO0v%!9-Yz@ zI`HQ@6-ior?qr09ZZfg6!F1rF$vR;U1ZPJ zvr0cp!Of)l7GC4wp6-$7a1&4lunVFh`N;0h>Mjpq$f{}QvmULvgOsdM7 zbeJauEs@TwXX-Xj$&Fu2WxKiRr$pF^B*~xSSw)f#QF@DRx8)MGms^{*)1cFm(_!wT z+hw^nic;3pL!Ts7*3a_6lh1j#+WmnP6Sjo|C>dS6vw)7HT^_ zMlGEhn~hO4L_N)}m!B57@?>?Fq>)WnOn5^sCpD<(oJ_6hZ(l8J zH_2(>`l94ur+JJ>Ti*z)q&nTKx}G#Pk*c&TiJ27nkzp+co|tn-&jXd$=n~TgS`I^^ zF_Ck8zKkhL=Dr`MHi;r}wIUNA7}C-s?NF1w1ySJujg7bJD{K+x%Wo}d{$>PqUzI%G z0R`F;)^K9h-^Mrf3;fa6I0{q%YuJy|l2^hjWFvk%^SC1?334^8d4toJU9jsPNXedghA z0hI^0QJ(=oyv|}S$8!gNv02R3HzhZ8(*#+=!&f+(<{MbBIEYR`$l=Bq_mWV=9u*Ps zq9Tq&N|HeE)Oocy2xg(jbA7Q0^FU4I-mNj>fDMp3Thwb((F(ozW(%B=9V7^F*S(-w z>D>XDw;rYk2y$I~1f(dgoAuW~!vH?kzsIF*vr#R!qtzt#Q`E$Q^TrP$@nKDrM?ON$Ab(Q` zRx8Xpd|MoorG;;iJse3xjJyHL68reD9oP~V8nrqT#IN?%DksrPrrH+ndk^WpcltO2 z^EiX4h4y(QI`226IF5hCmPQgpdpGdt5R_Z95#9aG5fu9l+$SZF$t}%_C^?WlARVcoFM0()UvZIzWs*eV!t;P8B4$xu zo)9T0$?}NvEH4Ycw%t?L955p{EnLdM#1VgKEA^I!aK*g4HQ`9}5SE3&Ed)H3`tIRC zvBPjm%iAiiwcG)Rvy&}4kFK|y!Kdg_${yZdP_3|(?YtvF5|i?Jr`>#<>PB34?ShyE z&KO1kE**$;du)P|B|qh-ZI}|mdw6fJR-MDjbhA`YABfd+&iymhW&Wi7o!<8Ge*2KX^lxDT$n0AI6_N&$vTm0_nv4j~2gZ={VvJsiOMu0D0L~G)UD3t0<4ivd}nc|8` zm9Dl}y(BH6qD7>J+_?f8mpGwed(tHr=928VAy}1XIg7WR=3F+jP+K5eibjnslJZGV zh?Mvx+%{xVBk*)<@Y!^2RR_Nm!{O{5UMX~6DYt}YgA|pYCyP$>YPV?$+N_4_F#@TXUlU{lr0a=1GD9aiFHPd?lsi;H30L}eDQQ(1 zJsuSSN>gi6ll{KO#?)hXbrZJy(O5x9h^luiDb<(z{q;x|NITK7*Eg9(ji@#L;(Ecb zb042i_NL?1=v39WDAj!%H4dL&UTklAl>PLZRaAmFu}s_WSqZ0&_h=&gN^!#Z3c|M1 ztLk&Tj0c;oWGDI_F;e!fTtk&=zH`q?wea;?aZjrmAPCW|TPth36RTh^0*2}QfOG5n zd9)gbF!ZKL4lrBmRZ_RcMNTSRt+55SHx;V%I3T}(AtD5C7}cbg22OtKh-$$JVuCw% z*rxyZ*wmyM)Tj>>#1&?hx1OWdDc!r$ksIB(MgN)Z2z`sUq6)7}QtEdltW)S9iPGbt z14Fcz903vNNtak71>gq&cKFxlVRFgF%#>9cm&7NC-?ChAZZG>ZO0Bt$QN=B zC7wXpX@skm#NmfR*`q@g1wVHGdZC8GkeW^Sy9AMUq zN4LRiCBeV42ByHwcUtjAkmUMK(Ku@V$+4zeRoIa&n|~r-%{vut2A&OQ?}-!MR%@)Q zN_UTXxjcZkvWHPZMxvBPu$H zMV@cwIg^D8G30rW?GEoO2*NHO;Nr9_=k$Hj;JINsj{n4w{aU-vL`Z?Y4@|wLfDGwEJMGK{A#8iUL(%iPJP!w#CLOYQhQqyQcTQv?K80Bk zhe>qGe(MO=Pp$`x1F3UGMyVh|#ETEAihiQghOR1oAY`$uj7;O;rakBYs8$MjmV!Ib z){>ba5gVoh^wG(d^!5E-uf+dyBHMccqz8&hYbv`x2gL>?KD#{vg^`lLU_{Mjp5*xv z=;>e}?tULf0zn=e#7Guo zl%7nB*DE8uBux_EE`tCv1jzVagM$@iE3Y1M6ofyh#=-R?T5duElnVO1BrA#!*IT`q zy;teP3%w}zqU2*&xbnMoIKEU}8_C<{uJt{#x}AddrCnAlPWR&Mduj~pk&Fw|S4iEq zI7l&uOw#F`&&sEZQ*dF1v4be1+-m^>+>NZh6CddAH9@c~(5u=oK&%_t>5*zW|JK{J zMyWJ$#oX`9Q?-JUQyT4u-HSPE(XVs+MfliEx1)wXQlp=!=}*MdPsHtu5bO;|DvFPa zqmaz;Rqa#C&;#Hwc&jO)ePP56Bym=A=Cd?1`J9|-OIfuQs!!t#M| znLZFE@rhtR5a#g%;Y!~L0JJNjw%6^8pLj2xEYlF%R1FhkTI~1R6gk!Hd48LK;#O1LFf@y z?)P)A{lU?aNg%ktg`+`_^;niGY%yj1sRlygE@mXs_ed0Zp`NdlhJ zAmj&gL?IP|BoR+ALm7xXrfD2!v>+@lf`A;1$lWuAf=5)O2`zbk3c@gsvM58=LQnC2 zL>v@Z5Tt+@L?lrh<`H8&FS5+N@8bEv97#sfGSA{9#|XG)iU~s=Mp+OA?(NsX2+G4a z3o{<%41#8PQ6xlUBuFVo*h%&y(y+uDfXSjbPSPOAi;{&TjRKJgULcX*jmXlR<>d*% z6$c=a08?f;%XpHB6V2m;ePnq=cucdD7fBMIAl9%rB`F~yW+?{lN1USQ6a`ddr!Y;z zA|fHucN(!W$WtBznC(aKAk8R5pFvsj)E!Tn##t1UB8%A33Faxw2}{5{6-mfXG$;v= zaO@{SvZ6egBR|C@%SbFZEs_v_g{LwNiZDdVMbhv-=!=ePjPJ*Km zS$fJ6k|2jo1kQs3gh9Q60>>`I!3dTXtV~3a1{7$vND5x&c@~N+pmCNLd_O{jBH;l| zpxzwX4ah@Fz%i(1UgRY`*oR2-G{w?61O&r|z=FI?BLWc~uh02DK5*)s`md4Sq31R&*lPvbU@?m~^_CEwm9Uj{Y1 zTX6ugr6zoGmprauv5VB2oIMLXuBF^z6`))Mf9|)-SCY-=VbOa+0gH?BeLLeF>?$l` zLifZzUgT-W_Jm1`aClYwUD*XPvCn6Lz3P#a2>?-cfW5TiYtt1rT9YGojRH+v(9QJ;^#(nhwtyZe#trG5%W1qqx*}v7C07EvUqY}w0QketD zqs{qx+h#1_2}juNB;lt)wV8&tv}^pdgPjTtX3nh9Vq=>6vmhQYslxU zcs01Eq@IbkSkfRLZko3SI5E;UuE_os2B$PEzE}aDmVYHAgbj(z3*i&IBuW#HP)@uu zAVTD&fStVNB4>pD@23|A`KBf{QteZ|FIgG)s!0B{9>@vuU0kY3(4ir zJx3CL&SR0G4m1Wh0oT{rbupYFZo(MS>{2M}evH+-_8 zd)P+@K%)G|4q1>UKX=Ho^m7NZ^vtDA_l>(_8~evY2j?i(%jcuj3uI8Pz}F%#z^@4r z(=-s%#|Js4R7_*Xe~Ynt1ZkH7Dc4cH ziL|Y8|KE)uFAhqn7R)a}p6`^`Qq%f$@l+4tcTXu>Mwse*sEkjTcYh4{%}bmy7glZf zTPvIi>%Q-ypWfw+qlHQC^zKO?uD^3ZBfQgkVPX!4-9+1YauQ+_|Ioe;bnkcC#5a{! zzdzML2OI@iA5fk?yqy2;lLVih;BWdM={$Jt|J@-gKE2e0$=UF!PS{)mWepD0%T^we zd#$!NpSH1$j~}MlUP4>d2-f?u+kEb&=kn-1zO!o9V&+@0V+Z$cp%rf;)1$GE$8k3S z_+Yj;#*ULD=l7zUozC=1#(_pRl=WfXj0F&|s&yu7P@sh0G6 zMH+`%I2c*wpMV^CtUwcJPwBNdDM@SG+nVCXAuadXR#vM2*h{xJztms0eL1KRtK6Q; zXa;k?E~uJYGd9D<>AYyGmnPTkMgKdEYV(oCYx|K_3GtCu<1|0fqIPTPEb9(nC`&-lFl6&Q`Ex>(W{*5=}JN&#o<_RJ8 zFZkC}Q`PBiv#P0SCf;z?b$g#ZwV}TPn8k?x8(B<>Ivo~QQt8o4lHlMq`J^Y?Z>E_; zKMlhqO^=>8&xF838|(7g&GZkuN6uCCE?Zzb+8wF#ok0SudhIw|H0^@M10XXqa>3mq zT@G#Gw7d7VC!C9eIKLgl)4B1lH?+K=>RIu#o-`ukl^u<_zxd`vH{N9wqW99MfYV+B zrb*pbaVVPmxLR_KF{OqafE44xU(_U8c}fnQ_G8q#2BPlLIqu~!{XN4lU+X`~x(EEP zjFDIhdb78iy++kDIhm31Dbrm5Io#gAbz)w>40-(5b)9igZzpnRxDIl>$?jU8ug&?J z*;QWQ*YQ1WB)I+~Fn2VU?c>WYKvEsi&s%d;kBP`)ghJN^`pxcO4aHb|rhpveLgS`%=;oTEddw)d(Lt8ZJc&+yIc@-u!fd41t8 znUth|3k{h6P5tt_-;L?S+Nk!chSW5?wB_Uf{_?xuF*%Nt7zH&Z$;KziC)q?$JN;PY zh9#w7mcuy80=i zQV4V`i{8(BLyxKysYI86-gp5%NqQmb@YKuT>~wI>8+@b^gO7%{uzS`VJCFwYsdTUW zv-zTvCMM*Bq{8M?FZ9G>Fi<#9{Bpa7;uBscqcN9;FHBq|dgZcXq1J!^yScQ9*h^0I z^0&mQ?;6LBYr-G2)81rjlj#zGP{x_-RWz}sA_$5OjLA!4#V z9`GO*$2onUgu5~AM906>3#AZPYLbB4*Glm9*d)d|=UGl<9E2PcRi~W3 zR{Sj~FmchO~>qtIe;8_(bXT8D>=x z+6F30dooPyT5fWDI*d__66RE&%${&bG~ANWiYgDH_Sb>ANXXp77}z2zBNY+y4XhwL z_q=uMGaMCptF;S_1$HIH#p-P%<0U)hNn-+4Ri#fX&5x0)&i?uIs3k7K63L_^!hj)a zLPq!m#tqhLJI`boNJMP=H)SwEb7_pJ`HozM5K_PhI`R{N+Y5RO z?%GrTyvLcJ$i%(LX=kSDw^C;AFCG2KqPMv2d~VkfQ=2^XhpW_uo%}%6Kdp2@?u4n= zDJc@Ky zA6H`U_qq41wb{2L39(M;@|RM3p{Bv7{qf{SFUUZAP9~#i_$d>bxQ35NTfNI#5g*;6 z?JVeXZ&PRNU`bE+7e)M72%0Sl$(k@6><-^KADMl`8ESgJ*ZD2qQ(o(P+<_nFYmWU{ zzgG)FW5MgM@u>!B*t^;Jvp%NC1Kk(7hLrep9oO~sY>l6!Up@8r1)(c_o9CJDVm@s7 zW`DHv>I}m6f?0i@-cj~Jglgns6U7HH~VtEW31L^&B0&%^X<}z zE2ZNMf-$@sPIxi2BL=msZwQU{LZWdYeE@6=S5MLoQi->VEv?S-F&QmS!$SRDRBAqx ztYhnD>;FkYR_e19Z&xJCWsgs+8R!AYz>c)^1k;OM7woaeh}LFLgd7F(G(nQNIE2CSI<8;&ov# z{-)L0s?(m&P}6)``6Tyo`x`NQVDm6q!Y5;i7?Bf=3x%J`5L@{@K2b zX)C0jdl3fAg}mCRdGhuqV!-myYEpVKm;|Z*=Hd$Dh*6`F2I?+3O1>XDa>?Yx7QUD~ zzm{=yzYKN_?9=tj^hj~WS zs7MC(eN++(lg(JJCl+e1nQHIWpje-a3MR0adWXL<#-y5u zDbLYzLDNWKXo+6pFfPL**)*ff^7m*S?p;A^%doupYbiKi_E$~|6YK@k#Duq?;k+Az zHwUyeThfCz8zRcDPe!FiniF*aai=DOfZ+!wjFpRji9^47SG94$wAplUsGQS~0*zOY zBO5L$oAl5jtwh>Q(%jg7ZaaQ6ApSz47`n+ZPPIhywE{IfYF4v8Ux`T6pGJa6FuG9W zVu-e_K%yGgCmVdtogut63W?KcVajD)idQDNn9Wg&atXCc@e)+=dRBM2L~ZSs zL|DAq88%41I$!J?T6mywe#quX zlgxdCJ+drqAc%=YGGS<##Ai`<`Hty&!>78n4;l9UIpT!WG`d_HmO(ICw)ikm(c6M? zRu;@;E0(+yYDe*%`c&O2xdRIE2p#m_s)SxUh7LynHxW{RK1ztO;k%@YtwW+x<9H zi^9m$YV4-(xR$UO23kP_Vz8RH@g|$Zf<^!BI&m85 z$5ax;L#J09>*Xl+C3{H53mo~_o{FaBalg~{c6iP+(1LySU3kmrtugt{N2I;dy|~@) zSXKx@!a8rTE8~;PWNvNsL$rp*JQgpHnQD91z8>h|zRQ+~mR6S7bSuj9l{Itic-LE) zz`*$zHqce!hYSB45sqQUy52%!hy0{-Ah-aK*32jaE1jN!s3NE`)xYrMbHA{(M+6LC zQ&)u9j<`}e`UjpFj3!DA6E~e7gapY>%(T9I*nK4SpbxgG2(2n705B-@C!aGyvL}WJ z#V6%n56sPyEH-IVM@=(pD;cf#h;U`_4aMA!O8Nnx{Qd-DL37eNAn}P5Y;qBpR zkkf;>7S!l>ObI(-<1kU<7L(oF=Lr7dI%@Rz>5vMH`9;X*aa#B&*gQeDTp_@Xk%Exgrr#2zn+#VT+lG<_%Ib z<$}M7`L-#+WNjaM!e-+hCKqb_zOQAOMiO3Rh596rkuXk}2pfZj%tNYEbiQ|Q!!vFh zrF@MwE4lVexq7nQ-aI8;t4UxGYg#KdQE$t}_yi-!qQ+TYmo}f(m}5G*5&R^C+>7~n zodLk+m>9UXww)ue!TQ3eaOOSIH#P7^&joNSYNye%3~n?_7KyB`5gg&MVu^9cM!x$T zj^~WcOx~Zf`J@F6{kvuyDLPaxs~LzjAt5tFD^WoR;31m`(SvqA1dE#>(Q5acZ4J3X z$j>)qxI*W0wol0K8T!PtZ6U9I!CQ-p%g~(J+x>2cx^-b36lp6l?tO_rjy1$X4idsH zGKUC1r0UIU`}i0i&UklP2Rz5ADEW#eTBKKyg15FFxrK^s<^DxYgq1>iOxND@52%T& zVI*K&@d=vpSZ4EZ;=1}nz4Iu2>(0sdNUhTQqSW|f9bJ<_C_XvVdUQri&VT@A7?bE` z%YZ9dScd9)oQX3Z~ptGG7Qx?EX!Wj;VFJb^OSfz*2 z=I|VB)QBLM6_35>22@;2&L_Qq;ma_9Dkdgj|Z=fg4$ zgG7yhg7Hx?W2{=HiF>h2t8(~6Vgl*Z#DxMBU{G_pjCN$xzy@B1^zI{RJMw9q?4XQL z+^A&{fD;T-Tj|b9yrdkRS|*E{aW3RAxGp&}f@A|uXcsxVz)n&b<>qk^0}2#_w&SGC zWW|KDRvcVF6$8ulB<&&upC`SH%Pb@Saw8{OpuolJqRVc!fz@0#0G~GGhG!_C5-|j76uZ43 z>P3uZf^l|oSjN#h19BWUK?OAe2(6vsN=#aTTG*nbm0BAP(^mRYcI)`Q@qHXt+zK8qnrFef=r0)#~rI8Ry&r3~s}VFMz% zw_@aCoWMm6dK7FCi*?SgX~b#Jd{T>bfyEJp9kiGxX@ynGGHEvmIZjqB%4z0;CY6+e zk9JW~NX?ZPl#>jc96&1=-P?3-VDo6z%$X2OzyfF#e|3RM2#|L}SQ`AZLvqC%sO(Lt zwv+b-=ls1wVTY%RuddBH3x4{MFH>43;q`31JXrTigrXk>KBV~ziubY~*3HAkn?{qF zoN@xYVL?z{a?m66xn?@on#{0U?^S5niU)WAlvT5zJA;jIQ0)_xhmc2UWF$yC?bDWX zupuMvD$|``wdDS876wjth}yr*Jn3_;)X)8@%3e!*y6;b0aVb%Hev^B*|L_0(zyBA) zN@)5`)o)w6EkMkcyWJG1+B$>8%RwZS={xsR!Q#IAtol^2So&8XK!GiSoz;{U5TDv5 zi{;3cy4t|)YUU8H`it8HkU?urv15hyKxvz&efP5&CgrB| z6iTK^n)OLW6(yAf4K~)3fel708e8N=Hn2os;;{lWBn40MzjK;FwdeX&x2!kcn2;kW zv*p9PQY}utBW=$)HswPx?$$b5Z@mK5R@LzF))2#mN!zT|_w6B%pRImARk1vhyAOe^ zv8#OfgW1kNb(a-=+vv$H>&cl?6`eJkn}+Al`~%9DVt=rC^K7}%uz5w?Y?aeq31OHM z%PxZCcL?yJp1Ko{+`N0j=yP4&THTtdSu5Qs`1K_mkECeAGH*T(!x)=4bQ5^ms_#4M zyT|0*=?`kN|8^iNm~GS4XL@!ap_Ae)dl0@oiyAd-pjE?9GUj%v7C7cQG${BTlzNq> zYoPieIWa|JE3Rq=SmHVu^2zSz)9@4aYO}A_I}>m<(Hz4js;dvy>J5;?0_=R;2{;PG ziZ>!UO^vkZ{m2r3A|61Eh9Mf*cJDt3T350e|N1XhZ3Xx#q2{G3(C)>+H>}E&P{k!`jAS(SP4k41*koNo89}$ZN?lX64>?+V)m=6AYfOKWh^8(L+z3tPNyB z__UUZNpQ!t8tzXfkYGprXJ3spCpOdb=H2CvhW^1%v zK4$F^^Ot!w>S&QOy@z%Hgq3!)93Tw^(GME_>>;m8)LQ-6auCa>TmTN!L#Wo*87^_2 zj9^I!e$6S^>Y78_8oeGn%ZXX{cklZ#+tm$^Y6-ZFRg#MWU8(}RH3ci8g01cf{FxPe zKDUxs;9{Jwg8p32v4j8;jd+SDPRG&eW()2cy?4=_&X=vA;Qj{dC$5JJB+* zv*#L1eD&$v_tWmy#CR06&M;EZJM>gc!cjl79%(+}4QuH{h=B~3JArR^7VqFSfI||v4yon zPo{0O~FZ=;!7El4I}qYPisTOs)}A%HB^W8QtU_kMhFo4p_wqn_G zB-xHr{CGY&iPwsgb-2Yk`|Q1}mRhY=tNZJg{_@wqOQ*!|zy76_wv|Kk>p%YWpMU+G z(yUX`x?g|#TmFv|G5ps*>0bQxU;O2-{}?%Og8%+2iIOaclOQVoJ&Jx$;@_j_KSBS8 z>nM$|zyFGVakBpU)3o*fRU2`c#K2b1!}A(RgIQbWM*I73zcmno(2(i=x1Okl7!lM` zIbnVqA96juG5Vh+6NCN#4E`&19||V_rYFO^n0ge$*3FOqn_uA7P7hwvu~sP68Qt8- zZ%+kl)`e6ylnjoNTj=!oUmzrT92Z%fg^c;nw8-&i5R3JkA1!rM zJ-<$Q6vz3abD5-GIX1li&Bg3nt2{5VG_69i$nZvZoDF)(jJCRVkR)7$plW^ceD(>Wx`x7h2Rn_UHg2OzP6o}|js(!d zYQyf%SQd zIg?%tT=pYbg)nuRhPQPP9b<0ZMS=cEW5_hfm6*eF$59X!%vvhqBm^EcEPD;4wG$S9 z?5ji|`NO!#Xk-}YS&&3&5Lc%l&f<`bhK#<;V`}5Ani;`y0&w<2(PQH}F2R^UHB_U~ zpM+g{`ip^Wl~_lkp$(YPaSN@3d3gqbGqQ$sv@A(N-}LNU5Jz!ZogVi2!ek>R zIAcE&Pp7=VKUp4?p}oL~iO_fY>QI8gkE6>Xk3S9TiBw*!BrARx`{+yJcx@?9(4t|xdpu$RK0Y=biR$VUi&1wwt3Mdgi>Qp zsa$9;=cJchG+laf%h(UDkf9uF8`i1|wqG8u|G}`%m|bpJPv*<4o1)9dWk!$?`N9UK zZ_AwB__fxqUz%aggqum0{UO69k#tP*TXMUtmqcA|Dp&Jp@|x3e8Is#&y>^;X*0tl1 zWlb?G^1+ZVf`-`7?!gV-Q~Om*^Tk}|d}(guRiz`lu(4a4%g^F5P9(iB zn3u{~a%=hN+^o#xqo^+;1qv9_Vi}j^B9o>+5A;Th>1S@WncCColy=!^HMyj;g9YPk(3Hp}Jzu7rWy>&( zv&xc0T%9PyCvLP3h#FgRI2TlStl-k!K!vN)a{d09mtUsc4o%I|*LX}7VI3!S``3oH zy`v?ntZ&8+W5&Y>BY7i&YT@I#w^;p121Ys&nrXPxCu+phPkk>q*D}a*pss`9mQ9ws z^$E_X)wda&7D_g4-&-h2i%))ZqZQ>x-$~uMZV&E-PKfbvQ1;;q0U$@eppYR#-_^U+ z)49hvf6jglZOtuxenW$BxeZj^Jz_RXqvRCD9L|REAd5vBP?3-zsnSH`B#Q*kz3)k* zXc1;Qw-<+K3ItLgoDU-&DgdyuRo~|lN|-gYJDdbO&JbL#2Mw}1xC5GC+nfNQ{knz- z2}xc+is}e=SPf!SW?7YfAjw4&`CMBK-sS6_v)Tkk2o8LCmBB&)jY4Nupt6bA$_M19 zv@MV#K!gkLVPS8xT0wH7XK~=%5(kD)4*_`3x};1(c=}O(-&)pcOfx=C1e3MHk(UF` zcSo$e0qha?_}GUi;^UCfXM(7q?oDzQgJfDM_|O9k`dZFIxAvjjS;2e)lAI5+YmSZF zFqoADvDA-x)2{YHS`lnPy)3E-(49I5JCMB|5q(ge1HQ)`|Sr=z$}+9~>p0%%c1)q%=G zQX|UW@}f$zqiQ`YAvYsDXlCM_>KgrpqPb?l-Hf5^GKNVbq6q;fpdVxp`aFEmM&7oC zZ8r_y(mZ$Qx`*I$~Ca1gx<$}=V~tOC3|H8k6xeUBEI_AbKNaM@A$43ot_jD!C6qKi-a|N9#-AL zLHC=Je)dzk$9Ye2mJcqZ7G`L)pL6??q6y1vHCdUOwqB%|&PJzMIhpd!G;27L0SI>h zQuoVx72X?+t%kaDJ(JeD{bVY&0jFZ=ru*PSc*-bvnw>NaXbc9J?HR7EZP99(hTl z6}*g{^|iqx@q3FSW2gd$l(R8kC9$o@>b;-U2tD@{J}I)wOW+;H2YIHk*uzY_ zBB-;jS?W+sA*}n}IO?%oErPUu#{Bj+k#(LGAnSHcB~QXD1$t_6ra~O|ZW}7GHw{s~ zKzMsCbjhLC0T&)}nKhuhci!6JdRPZzW%hwPUs@%(erqqldLjo;`TDs9Y-3>y)#EgLR_Z3C&#`fGo>IoSD zGM(4$mv-2W;Uc*x%V+DEtXzn(ETiI8lV?HT|M>{tXBMfTp`#-@3kTe0o$<&Gzif_a z!y9DFE6y4$_$*XU-iG494Pp(hK8e^Hz1_AQxBOVHIa@$>*NI~}>5Paz*&a~1O-={# zCjc9(+u;!xJ76UYRRmt|t)%pscxTjc)$hCCiQ(oeU2j3SLqIbmiQ?#0j8064agVdMO+&T$4*@W)n1z|e?QBV3Pe?pZXpw;rB%c=e)67XiY7 zH@r@Uw07i zl_JtpTvTbCC8y$hFL+3DJxYW2-j`jZhKAr!KbadkiQZVc+2m1yV%=ES&Lbmtqyl8r zLY}4I9&RYIFu?C|KE~5tDl)Y9D~1~X%bDy2P{2t|rL&DY=vcE6==XIwzz?J*uyWCI zS!QMV7P@;_wZ964x}mD0k|)~9upPru7$T8G>_V)8SIKsBP-MPxUZtN3*8TdtCqu3^ zZMQ_ec_8x|3>qnTmLutR>nMO@5KkZT`UqMpc@2PL5fHG|$9oTa-h=^i67*TSuc}YA z_dzVdo}C79kfcG9eeMSzdbeuNk?LzFxmxcwJ0K-_wX>mi>vr7ogU*J5A_W|fRS7#Z zK=ON-*Nh=&@YWNudhv2b;xA=R?lf!^}X1x_gdcP>R>*o}2r1)o2@*^q#k#hQxvR?pW4S)zq z`c@^v+CN+YJ=KRD1+=ii9e&)49fw0OhWCy4U6^`CvzJ!;skI@WTF;kHt!nwys?EpN z^;7F*{?s~)kFD-g>oR?6z0z;30ACy8bJzWz{$6p5qcU(!!0OvAkmIYLxqrMB2z~SY z{4n7$+E=?fBOIxshzY9`08UGVbAJu66FmqnVD=njWSF;&dtq==HpzsWdu zr#w!JxZqLApi@>>RYpWXqMUMg_w3L;k84Z~ypp78mLoB(Y8DfusG<7V{I0 zYQht2?1_+~s*l{uQ(Civq=M5bi}720s`IFdVG(${40dXCh zoKo0Zaoi?CXhuZ>M0KK>U`bWv@rmU5iBoKCk{r5Il9MPaSW!WL3C2VjP5@2`CD3aY zy>&10Q<0GjX;&tocM8-3(}^l@uQmfe3&5p-)(wKa9g+Vs3D0&!Iv0X~f4yfXPuFyz*72I}H&T~T zFa8=0AZBd|pM53U=e(~0(U5cC085ROuW{e!%n-sopU4b)0PYvSOzemVjR0I+sJ4d} zG^TE@%`;#aNsx5;g6uxECcGy|X8?cp#>Y8Is%1nN)Y2yElAEkU2)P98dX5xkftkn~5J$QOq zua9=fIc>6I9gEbd>%P9uh)j>$N{dXxkQT|*sXUYstbg=0aA8Kx!`eDu*#7ov$a?HD z5TXgCN0bQKN{j<2pSHS&McTteKn%dSFJgpx2=137kG-?Jo*T+$TI{#DJ1;@PLL{PY z5%#}oP*yNQhwWV()LFd^0Kc#a4za^njER$;J>zQT#U2`O2oz zUr(6q)JZYaHD(OCmY0bH4e?jD*v)XhZ{PhX>2|`TTPpz1H*^iy+WG(Q_EuKMQj7!7 zON5O7#Z(-%Dx_sAz{J&A;yD+ID z>#wHpB#zgY!Dzwp-m0PYeZWnqK0tOVp3W1E+Yo=RtFq8GLHq6E4^$|aY;RLepB@T+ zb;zQRZw{ zonS*K`{&0X1D_Wh0$Xl`+dxhs2NEi%VN_Hf4HQSU!|PJ$n*W|MN>`S~ncD>59+U>aND1A9|`46`6_aUX$L zo2|GZiL(CYwfecg;(=1KK_>sP3&hy!xmep7fotc{Fm}FRES%)Y#7i z-n!3(Mu^XZ7F+R=AZPuVa6Vr@6M92_Ak4SVgz3_JCIAzBCMu4UG>|y z`~Lm7&)J54Pv;+n_vr?t$j|$R&4?}k*X!%K=}rHXVeYz_cbxV8!2`}J4!5woS}{BV z7~(W3Ple zUgEE(19&M=(|9qokGcSe!7jkbuOfLU@8AXdZw*hRkw$5GJI0))3$HhPej&L<^Rt-^ z0?3uU^}fGa6jT7RnPIV&tPH5I n$U2;QKB~K2fd(iYkYR_z%EEq=@pc>aAGBb2I<|kl-)o literal 0 HcmV?d00001 diff --git a/phishing-filter-bind.conf b/phishing-filter-bind.conf new file mode 100644 index 000000000..1addee3f2 --- /dev/null +++ b/phishing-filter-bind.conf @@ -0,0 +1,454 @@ +# Title: Phishing Domains BIND Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +zone "1nvest.bigbantbaz.top" { type master; notify no; file "null.zone.file"; }; +zone "25116414.cc" { type master; notify no; file "null.zone.file"; }; +zone "365365news.com" { type master; notify no; file "null.zone.file"; }; +zone "365f09.com" { type master; notify no; file "null.zone.file"; }; +zone "750115.cc" { type master; notify no; file "null.zone.file"; }; +zone "823pages.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "95564339.awi.za.com" { type master; notify no; file "null.zone.file"; }; +zone "999fc.vip" { type master; notify no; file "null.zone.file"; }; +zone "a.yyyy.cf" { type master; notify no; file "null.zone.file"; }; +zone "aaaa.whilefish.xyz" { type master; notify no; file "null.zone.file"; }; +zone "accounts-microsoft365.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "accounts.0ffice365.support" { type master; notify no; file "null.zone.file"; }; +zone "aidanochka-tabys.kz" { type master; notify no; file "null.zone.file"; }; +zone "airbnb-clone-sahinur.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "akbarinewv2.morteza638n.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "alaindemeuron.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "alexa81o.github.io" { type master; notify no; file "null.zone.file"; }; +zone "alienv2ray.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "allegr0llokalne753724pl.art" { type master; notify no; file "null.zone.file"; }; +zone "allhrteam.com" { type master; notify no; file "null.zone.file"; }; +zone "amazon-clone-by-sudip.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "ammuvicm.work" { type master; notify no; file "null.zone.file"; }; +zone "amyr.iran-cyber-net.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "antaidossiersuivamendimpayeerf33.zynekcctv.com" { type master; notify no; file "null.zone.file"; }; +zone "anuragrauniyar.github.io" { type master; notify no; file "null.zone.file"; }; +zone "appeal-voilation-policy-issues.github.io" { type master; notify no; file "null.zone.file"; }; +zone "apple-id.cc" { type master; notify no; file "null.zone.file"; }; +zone "apri.154-203-197-141.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "arvestcreditcard.embarkdigitalonboarding.com" { type master; notify no; file "null.zone.file"; }; +zone "asdfjeiod.com" { type master; notify no; file "null.zone.file"; }; +zone "ashleyproberts.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "astounding-trifle-b88a2b.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "att-101397.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-102641.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-107756-104508.square.site" { type master; notify no; file "null.zone.file"; }; +zone "att-108102.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-108651.square.site" { type master; notify no; file "null.zone.file"; }; +zone "att-mail-101246.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-mail-105533.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-mail-109459.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-servicce-mail.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "att-sign-in-107078.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-yahoo-mail-105061.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attcom-101415.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attinc-101356.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attmailonlineaccountupdate.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "attnet-100294.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attonlineservicesa.wixstudio.com" { type master; notify no; file "null.zone.file"; }; +zone "attonlineservicesa.wixstudio.io" { type master; notify no; file "null.zone.file"; }; +zone "attweadminservices.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "auth-sharepoint-asr.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "avertisystems.com" { type master; notify no; file "null.zone.file"; }; +zone "b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev" { type master; notify no; file "null.zone.file"; }; +zone "b35ccc.com" { type master; notify no; file "null.zone.file"; }; +zone "b35lll.com" { type master; notify no; file "null.zone.file"; }; +zone "b35www.com" { type master; notify no; file "null.zone.file"; }; +zone "bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz" { type master; notify no; file "null.zone.file"; }; +zone "bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz" { type master; notify no; file "null.zone.file"; }; +zone "bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; }; +zone "bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz" { type master; notify no; file "null.zone.file"; }; +zone "bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; }; +zone "bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; }; +zone "bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; }; +zone "bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; }; +zone "bbf-alpha.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "bet365t3.com" { type master; notify no; file "null.zone.file"; }; +zone "bet938y.com" { type master; notify no; file "null.zone.file"; }; +zone "bet958c.com" { type master; notify no; file "null.zone.file"; }; +zone "bhngfd3.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "blackdasblacks.shop" { type master; notify no; file "null.zone.file"; }; +zone "blsckdagsever.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "bridge-9wdpjmsoa.pancake.run" { type master; notify no; file "null.zone.file"; }; +zone "brubreumummeddoi-4514.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "bscusdty.top" { type master; notify no; file "null.zone.file"; }; +zone "bsozvycr.icu" { type master; notify no; file "null.zone.file"; }; +zone "bt-102368.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "bt-106861.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "btjfh.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "bussinessaccounthelppage.click" { type master; notify no; file "null.zone.file"; }; +zone "bwfujmww.icu" { type master; notify no; file "null.zone.file"; }; +zone "bx.sfdsb.icu" { type master; notify no; file "null.zone.file"; }; +zone "c.cting365k.cc" { type master; notify no; file "null.zone.file"; }; +zone "c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev" { type master; notify no; file "null.zone.file"; }; +zone "can-post.cyou" { type master; notify no; file "null.zone.file"; }; +zone "celery.sa.com" { type master; notify no; file "null.zone.file"; }; +zone "cen4-six.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "cf-worker-pages-proxy.1352562939.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "cf.13084493.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "cf.iwoai.cc" { type master; notify no; file "null.zone.file"; }; +zone "cfcf-8.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "cfr-reed-taxi-wayne.trycloudflare.com" { type master; notify no; file "null.zone.file"; }; +zone "chain-trt.online" { type master; notify no; file "null.zone.file"; }; +zone "chainsolapprove.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "chat-wa.xyz" { type master; notify no; file "null.zone.file"; }; +zone "check282.tempisite.com" { type master; notify no; file "null.zone.file"; }; +zone "chore.pink" { type master; notify no; file "null.zone.file"; }; +zone "ciftcininbankasiziraatbankasi.com" { type master; notify no; file "null.zone.file"; }; +zone "claudiorojas.cl" { type master; notify no; file "null.zone.file"; }; +zone "clivenicoll44.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "cloudflare-workers-pages-vless-a2j.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "codt.digitasianetwork.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "coinbase-com-18690.subttrepimop1005.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "coinbasewallet-verification.198-46-89-184.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "company0rder943.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "completar-la-verificacion.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "conductibili.fun" { type master; notify no; file "null.zone.file"; }; +zone "correosprepago.bnext.es" { type master; notify no; file "null.zone.file"; }; +zone "crenadenuddoi-2258.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "cryptorectification.com" { type master; notify no; file "null.zone.file"; }; +zone "currently5267.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "currently70.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "currentlyatt909.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "d.afirkz56924.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "dio.azrealonce.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "ditgong.com" { type master; notify no; file "null.zone.file"; }; +zone "doc-online-1881.on.fleek.co" { type master; notify no; file "null.zone.file"; }; +zone "docsignauthorizationrequest.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "docusign.com.bestfinancebroker.com" { type master; notify no; file "null.zone.file"; }; +zone "duang-5dh.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "duvhkeq.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "easyaccesscommagebn.com" { type master; notify no; file "null.zone.file"; }; +zone "ebay8787.shop" { type master; notify no; file "null.zone.file"; }; +zone "ee-account-home.web.app" { type master; notify no; file "null.zone.file"; }; +zone "ee-service-help.web.app" { type master; notify no; file "null.zone.file"; }; +zone "ee-service-portal.web.app" { type master; notify no; file "null.zone.file"; }; +zone "eln3.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "enormous-orchid-howler.glitch.me" { type master; notify no; file "null.zone.file"; }; +zone "espaceparticulier.life" { type master; notify no; file "null.zone.file"; }; +zone "ets3qe9ooms8t6i8.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "excelorgo.com" { type master; notify no; file "null.zone.file"; }; +zone "falabellacom.dominiquepg.com" { type master; notify no; file "null.zone.file"; }; +zone "fdesq4.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "fdsfjiwe.com" { type master; notify no; file "null.zone.file"; }; +zone "fdsjfkweow.com" { type master; notify no; file "null.zone.file"; }; +zone "fekoulamevebouna.freewebhostmost.com" { type master; notify no; file "null.zone.file"; }; +zone "felomane390.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "ferngos.de" { type master; notify no; file "null.zone.file"; }; +zone "fieg.84yr483rhfwieujro348ur84.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "figinstenatecom.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "finansfaizsizbasvurum.online" { type master; notify no; file "null.zone.file"; }; +zone "forested-mirage-samba.glitch.me" { type master; notify no; file "null.zone.file"; }; +zone "formtools.com" { type master; notify no; file "null.zone.file"; }; +zone "fortradesetup.hamidamnaie.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "free-5436781.webadorsite.com" { type master; notify no; file "null.zone.file"; }; +zone "frogsrus.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "fshraha.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "fukshumx.world" { type master; notify no; file "null.zone.file"; }; +zone "gazruinv.web.app" { type master; notify no; file "null.zone.file"; }; +zone "geaoolsv.pink" { type master; notify no; file "null.zone.file"; }; +zone "geminiwallete.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "ghjhyu.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "gimennlouin.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "goldenrod-rowan-submarine.glitch.me" { type master; notify no; file "null.zone.file"; }; +zone "gorgeoushome67.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "group11-vvip-hot-girls-combi.viplch.online" { type master; notify no; file "null.zone.file"; }; +zone "gruppeflorian.com" { type master; notify no; file "null.zone.file"; }; +zone "hanisfir.shop" { type master; notify no; file "null.zone.file"; }; +zone "hedayatfreedom.hedayatkhakpour.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "hello-world-morning.freekite.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "hello-world-muddy-cloud-f45b.mfoster0425.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com" { type master; notify no; file "null.zone.file"; }; +zone "heluapla.shop" { type master; notify no; file "null.zone.file"; }; +zone "hemanlau1.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "hezhouruan.552008598.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "hgcdhbxnf.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "hjrhd.top" { type master; notify no; file "null.zone.file"; }; +zone "hk04-123.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "hkmqo.top" { type master; notify no; file "null.zone.file"; }; +zone "home-100317.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "home-102207.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "home-107257.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "homelogin7t6sdfcgvhb.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "htaflytz.baby" { type master; notify no; file "null.zone.file"; }; +zone "htaflytz.black" { type master; notify no; file "null.zone.file"; }; +zone "httap.l-teiegram.com" { type master; notify no; file "null.zone.file"; }; +zone "httpsbellsouthnet-102649sitecom.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "hup6r.com" { type master; notify no; file "null.zone.file"; }; +zone "hy.fuckgwf.eu.org" { type master; notify no; file "null.zone.file"; }; +zone "hypophysecto.fun" { type master; notify no; file "null.zone.file"; }; +zone "hzuayvvl.red" { type master; notify no; file "null.zone.file"; }; +zone "id2.xbenihime.us.kg" { type master; notify no; file "null.zone.file"; }; +zone "ikergalindez.github.io" { type master; notify no; file "null.zone.file"; }; +zone "info-delivery-bg.com" { type master; notify no; file "null.zone.file"; }; +zone "info-trackingcs.cc" { type master; notify no; file "null.zone.file"; }; +zone "info-trackingiax.cc" { type master; notify no; file "null.zone.file"; }; +zone "informed.deliveryhbo.top" { type master; notify no; file "null.zone.file"; }; +zone "informed.deliverytcw.top" { type master; notify no; file "null.zone.file"; }; +zone "informed.deliveryxs.top" { type master; notify no; file "null.zone.file"; }; +zone "infringement-service.com" { type master; notify no; file "null.zone.file"; }; +zone "instagram-clone-in.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "interbenefitprestaciones.referidosweb.click" { type master; notify no; file "null.zone.file"; }; +zone "iouwerty.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "isnworldwide88.com" { type master; notify no; file "null.zone.file"; }; +zone "jaydeep8806.github.io" { type master; notify no; file "null.zone.file"; }; +zone "jeanandpeterwilkin.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "jetconstructionsgroup.com.au" { type master; notify no; file "null.zone.file"; }; +zone "joeandvelma.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "journey-x-pro.com" { type master; notify no; file "null.zone.file"; }; +zone "jsdfchkdsds.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "jshattkee.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "juliusmasih27.github.io" { type master; notify no; file "null.zone.file"; }; +zone "jung-sohn.de" { type master; notify no; file "null.zone.file"; }; +zone "katiebllair.wixstudio.com" { type master; notify no; file "null.zone.file"; }; +zone "katiebllair.wixstudio.io" { type master; notify no; file "null.zone.file"; }; +zone "kdlmo.top" { type master; notify no; file "null.zone.file"; }; +zone "kenzmail0.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "ketura2010.github.io" { type master; notify no; file "null.zone.file"; }; +zone "keucroilluxibrou-2718.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "kuconlogin-ui.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "latam-onipojes.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "layanan-bntuan-resmi-dna.prbu2.my.id" { type master; notify no; file "null.zone.file"; }; +zone "ledger-com-updatefirmware.aparecidovisentin.com.br" { type master; notify no; file "null.zone.file"; }; +zone "levappoprauqueu-4688.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "leyoixoimmecou-5619.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "linkbokepviralindo009.vipp.blog" { type master; notify no; file "null.zone.file"; }; +zone "liveairdclazmersn.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "lo6-cas-projects-64947843.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "maatamicklogginns.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "madebybmr.in" { type master; notify no; file "null.zone.file"; }; +zone "madhu821.github.io" { type master; notify no; file "null.zone.file"; }; +zone "mailupdate87.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "maine619.github.io" { type master; notify no; file "null.zone.file"; }; +zone "mainnetverify.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "mazulyta.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "megrebeikenneu-2106.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "mendhfjpl.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "metacareer.com-case37169314276.com" { type master; notify no; file "null.zone.file"; }; +zone "metagalaxy.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "metamacksiologus.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "metemrsblogin.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "meyetamaskiwalt.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "mianfeijiedian.lawcpacpv.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "milanharvestfestival.com" { type master; notify no; file "null.zone.file"; }; +zone "mirobitsgt.github.io" { type master; notify no; file "null.zone.file"; }; +zone "mocp90.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "mostafa2.mehdi84888.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "movie-firebase.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "mubki.hp.peraichi.com" { type master; notify no; file "null.zone.file"; }; +zone "my-site-104564-105934.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "myaccountsignup.net" { type master; notify no; file "null.zone.file"; }; +zone "navy-nose-4544.typedream.app" { type master; notify no; file "null.zone.file"; }; +zone "net-flix-front-end.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "netzero-webmail-105996.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "new-currently-1-23-24.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "newattupdatemailboxkidlyverifynow.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "nfty-proj5.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "nnbsscnaceesngsetr.com" { type master; notify no; file "null.zone.file"; }; +zone "occinamete.cfd" { type master; notify no; file "null.zone.file"; }; +zone "odovsccs.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "officalourtime.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "office36503.com" { type master; notify no; file "null.zone.file"; }; +zone "ohscorgza.github.io" { type master; notify no; file "null.zone.file"; }; +zone "okm.znt.temporary.site" { type master; notify no; file "null.zone.file"; }; +zone "oliver752.github.io" { type master; notify no; file "null.zone.file"; }; +zone "online-e-commerce10.com" { type master; notify no; file "null.zone.file"; }; +zone "online-e-commerce11.com" { type master; notify no; file "null.zone.file"; }; +zone "online-e-commerce12.com" { type master; notify no; file "null.zone.file"; }; +zone "online-e-commerce5.com" { type master; notify no; file "null.zone.file"; }; +zone "online-e-commerce7.com" { type master; notify no; file "null.zone.file"; }; +zone "online-e-commerce9.com" { type master; notify no; file "null.zone.file"; }; +zone "orange234.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "orgmail.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "ourtime.datings-information.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfocl.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfocs.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfoga.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfojq.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfolw.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfoor.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfooy.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfoqv.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfove.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfovt.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfowu.top" { type master; notify no; file "null.zone.file"; }; +zone "p.updateinfoxb.top" { type master; notify no; file "null.zone.file"; }; +zone "p.usertracktxz.top" { type master; notify no; file "null.zone.file"; }; +zone "pages-108-tg-cfzz-ip.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "pages.tempisite.com" { type master; notify no; file "null.zone.file"; }; +zone "pageverifycenter.com" { type master; notify no; file "null.zone.file"; }; +zone "patjimmy323.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "paypalloginin-usa.blogspot.com" { type master; notify no; file "null.zone.file"; }; +zone "paypalloginin-usa.blogspot.hr" { type master; notify no; file "null.zone.file"; }; +zone "pcmag.anycubic.vip" { type master; notify no; file "null.zone.file"; }; +zone "port01-acf.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "portal.chiaveggies.com" { type master; notify no; file "null.zone.file"; }; +zone "pruhuffopraussou-5681.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-2801359d2be54bfd8701132626efeb73.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-3096005ebeae423182ccd89665564d8a.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-46a5f86348ae4aceb3591d126020999f.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-51f896deb233450089fc1a520e6ed957.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-682ad3b65d944376b919745aae3c56d4.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-722720be67154192a1102b2cf085d306.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-7d056bfeb6b04852801553620fe62c0a.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-873fc6a3edb941c6a17f50911dfca518.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-aab4be29317b4ec296517a557db12622.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-ba5a046c69974217b0431bca4ba43740.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c59cf4e950b142949df8861e60b3689d.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-e5855431d98545b38408f52af50ab8a1.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-ff0271d87324424a9aec83337e844a54.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "puertaselectricasprincipal.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "qaffixledger.com" { type master; notify no; file "null.zone.file"; }; +zone "qbstdfda.com" { type master; notify no; file "null.zone.file"; }; +zone "qpownthenewyhadvanceweb.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "raj-tiwarii.github.io" { type master; notify no; file "null.zone.file"; }; +zone "restrict-policy-nonadherence.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "reviewboss.github.io" { type master; notify no; file "null.zone.file"; }; +zone "rfgxg.top" { type master; notify no; file "null.zone.file"; }; +zone "riaayaoman.com" { type master; notify no; file "null.zone.file"; }; +zone "roadmap.binarydesignhub.com" { type master; notify no; file "null.zone.file"; }; +zone "robinhooldloegins.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "rouzhda03.kambizmedia.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "rsjxzl.com" { type master; notify no; file "null.zone.file"; }; +zone "rtyuiuytgf.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "rubinhuud____llginnh.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "rudra-choudhary.github.io" { type master; notify no; file "null.zone.file"; }; +zone "s.team-s22.com" { type master; notify no; file "null.zone.file"; }; +zone "sadekk.com" { type master; notify no; file "null.zone.file"; }; +zone "sajsa.icu" { type master; notify no; file "null.zone.file"; }; +zone "salarahmad786.github.io" { type master; notify no; file "null.zone.file"; }; +zone "santanderpod.fsthosting.com" { type master; notify no; file "null.zone.file"; }; +zone "satinnaaoabbs.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "satyarthi.uk" { type master; notify no; file "null.zone.file"; }; +zone "scarce-army-wide.on-fleek.app" { type master; notify no; file "null.zone.file"; }; +zone "sdfvgbcvb668.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sea.6e2efhxz.eu.org" { type master; notify no; file "null.zone.file"; }; +zone "secrbnsuppotyu9.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "secure-ledger-m-auth.webflow.io" { type master; notify no; file "null.zone.file"; }; +zone "server.2rk3.com" { type master; notify no; file "null.zone.file"; }; +zone "server.pxs7.com" { type master; notify no; file "null.zone.file"; }; +zone "setshinobi.vip" { type master; notify no; file "null.zone.file"; }; +zone "sextelegramxxx.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "shareorder711.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-101342.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-103098.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-106054.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-106665.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shawsyncmailservercommunicationworkspace.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sherman-relate-rev-baskets.trycloudflare.com" { type master; notify no; file "null.zone.file"; }; +zone "shobhit245.github.io" { type master; notify no; file "null.zone.file"; }; +zone "shopifysite.cn" { type master; notify no; file "null.zone.file"; }; +zone "shoptkoo.com" { type master; notify no; file "null.zone.file"; }; +zone "sign-in-att-108611.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sign-in-att-108611.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "simxtrackredirecttszz.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "sjhsjjs82.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "skill-meta.com" { type master; notify no; file "null.zone.file"; }; +zone "sky-107842.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "smithjamessv328.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "socx.ly" { type master; notify no; file "null.zone.file"; }; +zone "sparq.eu" { type master; notify no; file "null.zone.file"; }; +zone "spicyhotcoolsoup.s3.us-east-005.backblazeb2.com" { type master; notify no; file "null.zone.file"; }; +zone "spotifyl.vip" { type master; notify no; file "null.zone.file"; }; +zone "ssfgsfg.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "sss.k999955.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "stonemartin1001.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "stringroll.com" { type master; notify no; file "null.zone.file"; }; +zone "sukienffvip.doiqua-garena.io.vn" { type master; notify no; file "null.zone.file"; }; +zone "supportsecurity981.tempisite.com" { type master; notify no; file "null.zone.file"; }; +zone "talktalkserver897.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "tareq088.github.io" { type master; notify no; file "null.zone.file"; }; +zone "tbsl.by-on28.my" { type master; notify no; file "null.zone.file"; }; +zone "tcaconnect.ac-page.com" { type master; notify no; file "null.zone.file"; }; +zone "tejlksdoisd.com" { type master; notify no; file "null.zone.file"; }; +zone "telegcm.me" { type master; notify no; file "null.zone.file"; }; +zone "telegramjessica.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "telegrampx.com" { type master; notify no; file "null.zone.file"; }; +zone "telegramsexgroups.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "telezelm-ivee.icu" { type master; notify no; file "null.zone.file"; }; +zone "telgramsignal4.sg-host.com" { type master; notify no; file "null.zone.file"; }; +zone "telstra-102379.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "telstra-104033.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "telstra-104394.square.site" { type master; notify no; file "null.zone.file"; }; +zone "telstra-106968.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "test1.workersdev40050.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "tg-logrom.com" { type master; notify no; file "null.zone.file"; }; +zone "tktk.tktsk.shop" { type master; notify no; file "null.zone.file"; }; +zone "tokecn.im" { type master; notify no; file "null.zone.file"; }; +zone "tokeni-1601.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "towrewds.com" { type master; notify no; file "null.zone.file"; }; +zone "tpwalllet.com" { type master; notify no; file "null.zone.file"; }; +zone "trustwallet-zendesk.com" { type master; notify no; file "null.zone.file"; }; +zone "tuviaje10.com" { type master; notify no; file "null.zone.file"; }; +zone "tvjbqiyv.guru" { type master; notify no; file "null.zone.file"; }; +zone "twcht.twimobie.cc" { type master; notify no; file "null.zone.file"; }; +zone "twimobie.cc" { type master; notify no; file "null.zone.file"; }; +zone "uedy.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "ultsyncingsolana.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "upheldlog8.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "upholdloginorofficialsigin9.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "upholld-lligon.godaddysites.com" { type master; notify no; file "null.zone.file"; }; +zone "usol.shop" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-cgkzkukp.vip" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackaxd.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackbrs.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackdht.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackgee.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackhsk.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackivo.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackjjx.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackmra.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackmvz.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackuqg.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackvgb.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackwbv.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackyqb.top" { type master; notify no; file "null.zone.file"; }; +zone "uspsdana.com" { type master; notify no; file "null.zone.file"; }; +zone "uspsdant.com" { type master; notify no; file "null.zone.file"; }; +zone "uspsservicetrack.blogspot.co.id" { type master; notify no; file "null.zone.file"; }; +zone "uzomadj.shop" { type master; notify no; file "null.zone.file"; }; +zone "vedi.154-203-197-141.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "vgmrm.top" { type master; notify no; file "null.zone.file"; }; +zone "vkkvdkdcmm.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "vl1.spaceysen.cn" { type master; notify no; file "null.zone.file"; }; +zone "vobroffexagru-4404.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "vrvtn.top" { type master; notify no; file "null.zone.file"; }; +zone "w1.5114559.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "waassistance.com" { type master; notify no; file "null.zone.file"; }; +zone "wallet-diagnostic.com" { type master; notify no; file "null.zone.file"; }; +zone "walletsecured.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "web-lupqrbm0k-uniswap.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "web.tlgrm.app" { type master; notify no; file "null.zone.file"; }; +zone "webmailserv3038z.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "wk.xzte.eu.org" { type master; notify no; file "null.zone.file"; }; +zone "wodjrvrisixc.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "worker-dark-queen-529e.servers5555599.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "worker-hidden-frost-ba39.yoveli7450.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "worker-site.aopages.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "wsa.osmqone.org.cn" { type master; notify no; file "null.zone.file"; }; +zone "wwwwwwsasasasasmmmsszz.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "x.tovip.eu.org" { type master; notify no; file "null.zone.file"; }; +zone "xhjxkj.cn" { type master; notify no; file "null.zone.file"; }; +zone "xixiajiaju.com" { type master; notify no; file "null.zone.file"; }; +zone "yahoomailquthorization.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "yungtee3.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "zagbasamothega.dnsget.org" { type master; notify no; file "null.zone.file"; }; +zone "ziraat-kampanyasi-besbintl.xyz" { type master; notify no; file "null.zone.file"; }; +zone "zxl.cbbnbbc.nyc.mn" { type master; notify no; file "null.zone.file"; }; +zone "zzpov.top" { type master; notify no; file "null.zone.file"; }; diff --git a/phishing-filter-bind.conf.br b/phishing-filter-bind.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..37f6d690c5bd41257e1198b24fd091bbac9b4acd GIT binary patch literal 5788 zcmV;N7Gvpx%@Tn8tr_&)=W^H>-x+w`wI1g>%T2 zNF+icdGo6(^R_b0Q9aF(a3-8HcfvWx9@hueZ&g4=wu}re%)x!T!}1Uo7uj;;$ThZP z$&w{YMn=ZV$jFwF$bJk}x~039cu)~JX-7Z3E?eAjKfnHV4RsA^dDV8jzJCAD{`wDJ zgt9Y++J5-y^-sqhJoodfas3@+WMokPI1E3t@#kUq_aA{b)MFDHcwDw*KQU zumArAX_+xOj!KMzT8k>emE=ki1mpt;Qcu=k&P~Zq~N5 zxZ6YO1(pImg&PXV9&sE9k(@b1esw?s*ewzEN{;Cr6Y9S5T%CVo$cb(rb&Yr*B^xZQc84pq z<(@LzF-R-HMCQsVDKUy@3QR2QUB&!pb#0MLdK`>^WPU$77QIW7QS~Rd(B%UUmlA(_k`uys) z?n1_oIrN9ET`1ymPEwS0*xO2^Lr#Q0GYHfv%-V^i1xXUFtl{4?qmeiZMvP+$C7lA>2|~a>v9MqcCLi`Z_lL#L6Jmgle=yBE(-0w#J5Om{g$O7 z-lpxYvuMt(sm|EJl2PAJk&yR!FuU$TvL-ACx4~!1M`mwv#+shbb$-g{l-Kec-^dU9 zvB!2VpVM5Jbr8(QhE$`p>{;FPUT$0Df&PQsKuTO)$8~)ITlRM{k5T8z$R$riId5BNu>F}#zfIvv1Hr40(({!nnD+K73mTYSE7Lrv^9bS}4v5mF ztEhPA{9eAl_v@;eynbo*t{PlrX{l`?EnLY>e)p$XKCo#R9pTD4B1YuIAOpf?&QO9F z&`Eyya6Swdmi}HpjTtGe3jSGG5O3zNHfrx&F8RfX<)(Fstr09HL2CH+4o_K6gxW6Y zAiD)QO8(w-kBD}jx_iNa>1RD zwsId!1dl>CR0`O;LP(^QMyKGo_}*J{ydng2II$FRx0wgfF-}7QXA2=iEv^HHpeK0sQ)rjX8p#X zp82WBV*>&9rlS|KYjhpu=^8+1M~?BrregiGW>$emaqcTlZ;xA zG$-mK;zn&o4GT;lG7obJ4{;LRMICCR{=jA1cLRmMsiG&-BBjThGTu@&4bUMiM7niE zssq>0b;A!r(B7pwu%6Akmh*T`yDuynxb>tbdCAj=WP0inm1mHmVOI7CaSc=;nexhn z7Ifs2hxlqjOq{+$Ou2Z8|9p~*U4tWQz9JU7L|xkC=+3pXYaZhq4{U+IE2k>OPtx<{c99d6-^AJeIWN`oP=z zjDQQ(;x0n-vid7vf0xXK?nSc&hx)LDR2wE}NSYE55)6VhXRZ0t^vD&4v7Q^nQY5BE_#D)&#*xBm5$N+L08y=gFQiDxu6L|i4VkVD6O-gn6V4Me(^M_hTH%d4_|mxe=>4Uga>t1bdORqg{JE68fmH2l|*x0N(mR zyFv=phZ0@U!40h^deP;b{wUa1*z6Uh=;**sYnVxc9}sInGWPSW2Bq6i(4D(=_z&xj zcp(kleMV}_Aeh|e?!!XG;0jt9I;MP1yq@nv-6%e)tLhiYJy6&WmE(mCmjE8v7&{yh z>R^Wyp^rVgzv2`4DAFNODQ$htkh3oFMp&#{%{O_WOs4C*tZvoWTerc+QU(o!Y}al7 z2Mb*?y>kNZiyZKy0}@#U5x55n+iQ`B?9Y zwq<#L*{x59`#d8p$m5>if@Ab+FoiYjNPDGQHlty~vOqLCRNyg&S`W!*;wdBDn-~cQ z!Rc7dCu!>%`jszf2l$>h%8rg^I@#6q+E>SGROHjz>xds;}%Ym%w9kqufv6C;FTK6D+3 z5i>p6&BcAB2sTWQwU-=%?Z}3$7x2d&w{COd>&+oO z$kaMQga$jwDIEEYHOXFtySF^m5tCYnL<-hD5SM@+#dJpZn+Cp+M|VnY(G#Nfek2As z_|^Gp3I`Ol!R0elOf4*AkFo4=_X)?5j{-ezwG~7tUAMD{h<6U(9QGY;?nJ6_#(q>t zo5>p+c6fTc8(^G4;8M_F*f1sRgpGru#=5}dR{uVX&PmjIcC@;H4H{CZBcDb!^HH!# z?V%D2MEKTJfDLvNqWTFr=B3vmExKdFz0___j%6Kx$2-}gZmU{KG|YztNFKvGpj#4Y ziU^lIz#gZ}_%(ZokXAP+jxRpk681vLt`2orT0c;QY>#;$t?rR)0}qVuxVoT)*5Y^K z?r??pP*7)BijH9FcC!V#9`wKh!LH#fZqkg1cN3w6cL-BvF5t2K_JtOPC3TNbXehz= z=3yk|ibO~uC@SHK`zp+`1*z?-kKs$4PFg`QIbSzk!sgNQC32zhzhTNeD|k8KMKo|5 zh>V1B!o)sC&^%;7F7}xG-GYnvIBY`7*O(M0-)>e;1=(IspedPJZ32r}(^9dOb0k|E z5{ww>QS0X;b&*{@tFfGjU_A2jiAmrsT4? zmvXuW>Kb~vlBEu6pdtgqvwYA&0?;RFqvY;NjLKBdW&zOV{Q+&_1^VOy%G{vM=LCID z1Z5g%b9K14zeZG4&&}3u?faaFwP*(z2Tj^StbZO7j=32{B!{suprkx2^>&Z^+!XB{ z_WkCJcl)se?gOF}0%Z2X3Q|{F>yaDw=Cc?;3{IP2bU8YJjRp|} zbK-6m;Rn>*NY0g+!SZ<+;D&2Ils&@im_aFwcX}Geku${pa0w#o^GlhGWY zr_c->H%hu$2tFw@kMkrX0CFppE4bcbVr*iAK{bt1j5C9A9GGF&4_Z1tsMF`TK`P_X zC^HBxn^N15k}EcNRLnNf-a<>O!HSuIL@~O_3?3YloKFC1_Uh)tChn~Qj?T<5L$C_Q z$;)9LN9QfbQA1w=dIS*0c+Is?MuVQ&tfiC2SPtscI{+AAkj;FYj6lm~CC3S*oSYe% zVhnl@0}=+IteWRZuyHbj;G?l13%Qh7rD__XC?orzg&YU;<`9tNBw6pcVpTzxE=Q1{Vfqvjht@rkWJe{MUTI z`|#ByL1iZk`!TgS?*Nx~mYH-DeR;&w&l2j!)?Qq>brvH%GOXJLVHNJL+q5!hjtShFAG~T_k`E#;gpMUWIl;X=|W;!xgbmERwj5oG9AA zKyxCFi7@-?PpHnHi?OFso?~(IUDgOxAw$1@AN!_QMO#dY-DXF-`<&2q+Y1tGGDem=f+;w{SLQZ^1p#O8e)hC-_V?BDNKT1a9@kl3L{ zOygM1{t8#@5?urXhS@Sc%o=P{gA`zrQWAoCC%Z&Si4<0HM?E>*1MY%2Rg$ABeJr~| z`Ugd5ND7|hI`~nj`hjf;buuZmYIp>naH*#WBNz&S`3pqZ? z`Cw&VH;X~o}Q;6-fMlot7c`fvV|Clt}HS(e%qKUq`R+h4{Z%vU5R>frkBq0 zSF`=nc%#YV0p&xnpCiHEYi>crd9}ogR8D&(;jTIHKuerlWE|l^!(zL~-;XzrrnOQ1 zQvFgHL9KKPbgzbV7eYdo(-`n}jKeUdmN%XFaZnLr{14Ovg|y^la|Y01XO$2CZSrHB%!sH_3@U z9$4~*o81z|cigJWp*nO~MqKRf=E-4xPnG{a@c^$|n-%*#(k@L5C>z3fdNHOGnB zXjt1g>?~}R5W^scVW_BWAu%r{@9!nswzko>wYs^WDr(Cc+C;;S$V-9fe#jtvzq{qD zjMqsxMLWCzCLFQ#ohzOB>d)_k$zk2ly8UoJkTtqXv7K-83HM2tUOKMwyzJU&yTYDL zKwm8~pfaJOv;6aVY!iOaT(%)cNJCrDj};d?^jWlMKJ3SuQHLSrVn7iDh}FBSV)MS5 zC^`~jSaL$2Zq2ce@_RiJQ&eJ??b-Tv%vKhWlG%8&@O46Wl^cUhsbG*>8yK`8f4Hndw>1mL8hp8mSydA!Ve$9Tz~Yp*Hm*)Vg3C`HBm$q_uMeEK<6rs(|AVXA2h^ z68rHfW*;`vQ>Ygl)eP!cS+}^99htKVRtY|E{m4i2eQosnG+aGz9anbma+XlT*QStA zb&NPD8#z*?*AU5Oq_Rv=;CzDnz=0fpL=~6RX7LxzSlJ|2^t76eIQLoroUW%*Y|gO=eI<^;Tzx`;N3}= z9DN0B@A`z`l3{qOkGrR(A=;vyOdnVbRM>M{aRKU5U9eRO4Xf#s4dNM=D%3y>RufW- afkmg^^NrLRlZ>%6-Inh4KB?z9GMfv%e;UaE literal 0 HcmV?d00001 diff --git a/phishing-filter-bind.conf.gz b/phishing-filter-bind.conf.gz new file mode 100644 index 0000000000000000000000000000000000000000..2728595092316e876679dc220cc7c1fea9d6e361 GIT binary patch literal 5958 zcmV-M7rE#kiwFP!000021GHRCkMlTkzUNmob}k7JY4mM*=C;@X2@nJUvU|y`NR}j8 z6e*LGWI4!xPf_l7g2m<(avJa3ZFgG_i^XEqQ^k*;zWyw|!e74reUfgHdi?s6SwL#{ z^~Zntw?BRTQ5ilf>HOdQ^!1ljfJgDmS5;I^R#sWj{kbT9smfo9;y>x{|MXg=Mfb~B z`6b}|`upwr{MTUdxuNFgKhS6X*(|uiNbODDukM$he;%oMU^zF-&kLvnEM|jL9_`QT zw?yCX>FIx!9JTxZJp7aTJW3${VK&Qym}W(NeJnixk6(l}ZQoeZ^9hxjtr_3&^AFYJ ze*zB-2<2@we*K};J35~;IWo|m!8`Y6{lnLPefe|6uLT@6{OgxCUJfVy`1Olqp~v*5 zR2~rW@cs|Ke*O2a-+)zHmR(aeIp;Ajb=T5AjfV@pi9{NTdo0SWEy}Wu>{MUX!Ejvu z`7UseLA$qY*VOerhePIXi0$G1ejj+g%c#+Z{G_j(4^bfWl^+xRb_kaJI^R)foSRL1 zmo1W8dzCNLYkWgj_c}j}ozX^HI4JVs0vFt@AyD~p(qr_P zDSSa+n*7^YN)v}BQSX(7GtHz1rEs)`Qf3CF@z&P2s#$5EB27xEiG~N3XzeXPFTRb5 zotfK&Tyu?H5kj;%Ez7n`zFhVb2Xxw8S|CABhBhPllG&v8G(U}VlE5~(!-87KWrY*b z4t1TsPmMF@evei)%~KdHY+9aR6PfF}BB*RPQh}E=kgFk9ac0uFjf^){8wxWiB7-HY zR_0~fWK~gT<^7hGO_}r6!Wy6>Rciz5;T8q4B(NgKg&f%|Bq;#Mw3(q_2DTL2juXQJ zrHL2VO$yJ|8nR{zH>q5q^Ax^9M>B8bK%>U`9x9e>K6{^)MOoi(-|;qy&=+V$95XrS z?bdemqiKsich8NecpkvxfqN1-xwL)PmMO)glu3o*s+umbtl!9OOYZS^LB2QbJu$LF zOQDG4)kG?~7;xpNGpU2M6}LXI&?ijB{HE@rOFTsgAs9$gwrO#t=9iyn6B}Mogwcu! z>NipUr1R-Ull&wJUR3uct>7P_KPHF{E`RTdX_?;@J2LEhe;|lO>L1vt^t|~ga}&9_ z)ky6#aLLjag7MOw^xzU*XJ933@!p86t=b`LIPk3Ru*&KV_)rMJ#O;<9MYbTm`N$v5 zwl4WB?VMA`l=QL0l+`WgJh~TktLSg>D93R`qrfm*l&FSd*4yK~?&e&o<~6n5TmfU& z-fDTUMefxi1&(ul^T)bq-^pCAgUbgsXV;6!62iA2L&M$iZWh>|yBWK=U5}kUiS5BP zH}7L_-r_YFzZ|398}vIg&F><}SV^{4?Ynxv&u68cZ`G=Owe29-dg$u?JYTb6jL*}m zn`Z3vA-@F?2eO>z{~Rd=WmOWI$6mDy_xP|K@?}(yMo;c#M~8Sazlg0;Y@dC%Rn=N) z*1ev|)o}^Jr=@8t-|!m549}ZcP4#GY<@Eb`>`(jL+hcsMFIBJn$=CTDpXt@X1xWVf zskMZQTU2%9~%|PqAJJ#cP%4%F5n!Q=KrI%u`+jP6#>bbeC!aj{${eEl} zsOb%Sl;-yK=5@2AuGX}}0B$#sUWy4<(YVLL9xIct>RGdyJS@c+R)ak1$8&3Wb7;Np zs;Me`dF(Ky6l};qtrH}Q6AVMm(AUup4gJ0D&lE6iAMffXJr1HyQ@3IY_$?b+0RIp(#+b zfeY6~aiHBE)6-WhRA`4pWSB!JZ91Rx)5Pfn71}d*(aUQbbwkPjE0Jg5L-r|XXP0x# zR%>2oPAPQNcBJKds&Y3U2(;*%=3Xa+l!pNsYhwfHpidJU_+T@OC^8Q(nH_M_XS_YR zGMgAwD6qwj{sdBI-unELen(?DqsW4+*)fp@Ch*kpSVqn#-AtT6fUu!5%f<_-&OXf997(9pBRfO!jdy%`1c~9{|E@mx@qD|e@5f)>8 zMh;sJl3(j(d3o=%rpx*}$bE^tPfm%t{+n6E4%J58 z*Iu1%)!kAJ{}0Stks1-azZdsJs3M0!+WFmf_o_)Xg+nI_a%1KDGR$k=BGKS9mQO8gp^2b?oDuFIH6_u=tReMA zt7QW{X04dgL?f~7(~QqFUkkm}MFx3IWg!Am5ZzQqHh% zc3TqU_yh4vdPrmoC8}fCw!1J$h9Ku;xGeYY!aijW^{H-wvBFZlZ6QqS=2VWXp!vqu+V zMhwB=lUZXv8UaFFCI4u19H+;0ZmGs}lnZLD3@I?|ie<*kk^5stqbM7-Mr76;pfk6z z<=Q--W?GLFw~_cupnxHVOr!>DwzVv?eU~dyBA<=YDi>-nOop=}isX*>cB9?a6$hdo z5~6wa1X?=ED5H7xgaRnl4PJ;SO#c0Lo?u?hW>Y!2a7N2y*JRHYV|Cbd9GaZN==~mT zY&7Art0b5WP0R9SFafY=sy1PJD+h;CSPHeo&j(T=13t6uT1v}B**v?gbHmuy1LUx* zVY@N;sOZ5*wZW<&!Qc~9Qm~b2y!wRiiHwFa+`Mh8qUhUupG?~$7ZZEwAyGkQde}+C zt~gI~5zbd8+FdZs%hN=QM4mD1)~w5v+tI&KtE%`NP;XV68dVvh!8hMIG4OGpSSq9O zFsReNa|Y~80~B_W#36ZDbCr3d^uop;eYy_phOE|^%}<}Lzg5@V!^nh$BH=h~YZqNk zo6daL_&gp%j$2ObAP#Ib>vTHg-o)1Wr}qZuzN_3~6u*_C%3ln%oQSLCMCa$IE=uyn zBdBoT@SWx$l+=UC1coI&duA-U`f=e=%Ef0Q3EV}lpZ^t_gjWJMyP(K_ba-OX9{X=F zJwK9TzFY!G;_;N(p#E`g1mnlr`EdAe`95kXQ?1%bO;6CQ!9n^p6dA51K?>0p2ejd2 zV@MaH_clqh9ccZTD7;9gFZy~&fqfr~_JC6$u60wA@v7=fbnW#i?HJ;fkY(|O(3;bl7g%hcckv!Z4-p`oo z_|Icga&z>coT^(QGurf+IWy_Vdg=^bQWq6a7M$$p(Ekk@*Wp>HB|1vXsNdnFSF)n^ zjDE9F6=jiTSZCb0HBzbVB^k}%th$w{HY3a%xrd9>XPZn~PgCG2`WP)&^B}Y|;wm_U zr_7l4lnZARe-@bu4f$%>R^`i?%P3B$P>g7=Jwl(eeuK12xKoD&r|+EN+b$i&Y5Bc~ zZR1+oNgrmlust{2vZm`(jjO`b$d{4JLb=73wOx5ng)H^V%#75yW zjB(IAl6w$b!FxgLbeim6nJ(jS?Qwlj0^%}Cx|&0VN zPPW)w>PVbv>#H)2Hwv!uGdKEFTaChHTNo@fm4KSE>ubkaqFYrKcyH?TiI!*<94#`W zgpuSVZ(b6OOk|0u#WXzDR0qx%BzjMN@3T24Od_mrWp}U3rn+@0&?#evSE^AWyd@kT zl7?m?CG;u78G++s9lK&>stJzgC9<2tik44>DnSn@9}-1a4pDIM75KWRsuwR(fu25B zpbYe1?ht+8cahdG>D}lP`2fS$dy&Yj3?;b(5WB!h$iC_OWTp3o*hILlkK6%GtyE56 zW3$YsHDA$!6&me#Jx^=VZn0#xCc#+db@6eihlO4!@+`VzXr@YHTIpFY=Bf zbJcrqZIwvC&kpYEK*|z~xh$ep_&1PcddMm{WSboEmK-tq0$8#^Jz`ZSJC#LqCE?Xl zKimR&a7m6Z`z&*O4yPm{J8S+45CNL2*s9%Mp}CZ3Bcw!oJX4~nBPE)#Nzu-fXwN+* z+Kx%ld`h%qONsVk3D6wcYh~BJqVMzmoD?mKKJ#P7hxa>^Ynr_51Cs2ZaDe;pRgPhe zGak=B=|OfkOj5uc{V@ zo2a1fb6Z6#g_O{@d#l0(v78wFIRbBQK=c2!NUAWI*^r?E&bkGicS2sO1LkTjYu9c#!x}qw=UH_?? zVWO0A8Pdgws9q&5!woZhA>qb?RVSLV%Vd09AGzMaC+jr5v*y@v}G+C0;Q;i>3G}qOtm}{IV)P$%D!o;TveGUtEQDi!>C*_nF)rL zU!vh}Tbx80<7i8pw&?|xY!q)eM{!70FI@al-Lj_V1)x>~>RnDWOy6fkjca~g7K{}P zT2Nh6;_OrnW58)_8lG#wsabX2>JHr7>b29j^QH3Sf1vO6`OPAU-AaCh^Rk!G%weCm zIRfq6s*Y;}xd+CDkfTZCII{3cygtBcP2(30Ii)BZ|Jzz(H7m$bSrv#lXg1PT?OGke zIHHafwja(R_MmJvzy+beI$9(KL89lu+X74Cis%@C1F5Dd9_8gAmbKEs3>L-(@F+@@&h0{zpH(XRHZtv<4+IPZ z-C$hs&949kgrJHFBIX6wk2>9=^7UN@XqgkR%aw#A`_!z-my{^dRy*16gXnfq{mmL1 zea{NgN)@Uf&zqpO$*InY_37J&W}+p#$ZoSL`AJA!l0eH8D)IZ-9I@)DY+yw$>{P~I z{tu{C#feefwRRyq`c=>n#og8)vc0ggcnFoq#Hj4@B%{yZ6~66w&U6#1Gc5o{+=^Ry6j`qTSaIX-D zfydd=_%1Nvgep8&rkhI?A|-)+_93{K;Z`Dkd;NYsJ4dgit{?E5Ob~eBo?3iyGO7^g z@ofprcx#?zIoXx^P?2j*d@CcjOH0RpuwTJLm^GrQkb!Ou=n`>Sno zx@fqEc?v(@^|NWINcuC%!<}xiJIZQgU+lgn(q|4bOg zpC8KH$#^K-&UQ;A#nbPm_=WZr_d+yF)Gz4!B)LgM!tMK0rR?Y~@K*DZ=v}E;X90pe zml$|*XO_Al83~9L5fu#%JiSqB%0`s`0JDs=cjh0!Wy`3#i2j3GwWK{_ymCJOU2;&L z7_PS&)e_`~WHzX=(F8Gm@>7bx+!Ree<;|qJHPuTj$f}c&_d(=%_vWzbkkQ^v{|*d* zvx=X2c60uRr~g)~R4&>n>9<|Oiy)iZ?=SJu*PafWjWb$DH~Q2cdND$)NS+oVm`zEd zs=saa;jkaFmdy++(XzI^M->7cLqqD8N7yHRGU(OVr+7lc>;kiFOFzymlX=#IS!tp1 zF-O~{&Ar{Xq;#0>X`9}$CzZbepOZM8(FAn=1{BuO0?N_T0uD;i0*+`3Ndfh4XaQfZ zlNNBXKn%Fww1C@Zpat9qK?`_@ofh!=kX)e*OGC8jdvH7j&JWMmbBlkbaYquEY`0lJ zzM>8EuB1+L&XOW4lf12yoaI#QiuPf#ORP-yY1-u^yJaErOzd->K4F2&sWs9ez8eu% zcXh&Gw}i2bs-fp@cfZCyx+70{o-@wLy8Img&S~dEYEi5les<$h!?1?9c}D~Iji*YQ z-Ql4`GH>sX6-zcH+p66GZz2(g)GR*_b|C=zjewO|+1ymV(PK)_8)4!j=ZBFmyIbw_ z*^yn{x2vTDJ0+h@sWst6tJ1F@)A8_X>Gb|P*r=t%fqIMjng}S{^fJ4ebaU;q{c0u@IRDjr0qMNmxG_LWm#N^htW)qu;B}y^myGn$JaT%BJcIoC!Y23 zdy7@u3r1tYbp8CnyS8=kN|Du}-7pB0?PC0>21w=V2IXS~@@=V^Oz`wF1g8_B ooY1SEW1EWJ=bUyztU`3@dUfd%CG-1!n}{v$Up;7OT5Xm90Jp2tm;e9( literal 0 HcmV?d00001 diff --git a/phishing-filter-dnscrypt-blocked-ips.txt b/phishing-filter-dnscrypt-blocked-ips.txt new file mode 100644 index 000000000..13153c7ac --- /dev/null +++ b/phishing-filter-dnscrypt-blocked-ips.txt @@ -0,0 +1,7 @@ +# Title: Phishing IPs Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database + diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.br b/phishing-filter-dnscrypt-blocked-ips.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..cc3019d544f28f069617f7476a84396851ece411 GIT binary patch literal 186 zcmV;r07d_yXbAuy7QesxmNW-w^RWr-eL!YAVBc;y+1<;wK*G9$E{-8hG(A~}irH~! z0yOYj+>3EF%-AqJ9hYm2{#YF|PN;!b0PG55rhbfO^U-wuoKAT@|MU!M_J1^g7T1V|C_U6ZsT&n9`I!Z;xT)eHH$bKK0EHL5; PlV$J%Lw43WE&%`lgBD>6 literal 0 HcmV?d00001 diff --git a/phishing-filter-dnscrypt-blocked-names.txt b/phishing-filter-dnscrypt-blocked-names.txt new file mode 100644 index 000000000..3774dabfa --- /dev/null +++ b/phishing-filter-dnscrypt-blocked-names.txt @@ -0,0 +1,454 @@ +# Title: Phishing Names Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +1nvest.bigbantbaz.top +25116414.cc +365365news.com +365f09.com +750115.cc +823pages.pages.dev +95564339.awi.za.com +999fc.vip +a.yyyy.cf +aaaa.whilefish.xyz +accounts-microsoft365.weebly.com +accounts.0ffice365.support +aidanochka-tabys.kz +airbnb-clone-sahinur.vercel.app +akbarinewv2.morteza638n.workers.dev +alaindemeuron.wixsite.com +alexa81o.github.io +alienv2ray.pages.dev +allegr0llokalne753724pl.art +allhrteam.com +amazon-clone-by-sudip.netlify.app +ammuvicm.work +amyr.iran-cyber-net.workers.dev +antaidossiersuivamendimpayeerf33.zynekcctv.com +anuragrauniyar.github.io +appeal-voilation-policy-issues.github.io +apple-id.cc +apri.154-203-197-141.cprapid.com +arvestcreditcard.embarkdigitalonboarding.com +asdfjeiod.com +ashleyproberts.wixsite.com +astounding-trifle-b88a2b.netlify.app +att-101397.weeblysite.com +att-102641.weeblysite.com +att-107756-104508.square.site +att-108102.weeblysite.com +att-108651.square.site +att-mail-101246.weeblysite.com +att-mail-105533.weeblysite.com +att-mail-109459.weeblysite.com +att-servicce-mail.weebly.com +att-sign-in-107078.weeblysite.com +att-yahoo-mail-105061.weeblysite.com +attcom-101415.weeblysite.com +attinc-101356.weeblysite.com +attmailonlineaccountupdate.weebly.com +attnet-100294.weeblysite.com +attonlineservicesa.wixstudio.com +attonlineservicesa.wixstudio.io +attweadminservices.weebly.com +auth-sharepoint-asr.vercel.app +avertisystems.com +b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev +b35ccc.com +b35lll.com +b35www.com +bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz +bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz +bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link +bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz +bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link +bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link +bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link +bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link +bbf-alpha.vercel.app +bet365t3.com +bet938y.com +bet958c.com +bhngfd3.pages.dev +blackdasblacks.shop +blsckdagsever.pages.dev +bridge-9wdpjmsoa.pancake.run +brubreumummeddoi-4514.vercel.app +bscusdty.top +bsozvycr.icu +bt-102368.weeblysite.com +bt-106861.weeblysite.com +btjfh.weebly.com +bussinessaccounthelppage.click +bwfujmww.icu +bx.sfdsb.icu +c.cting365k.cc +c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev +can-post.cyou +celery.sa.com +cen4-six.vercel.app +cf-worker-pages-proxy.1352562939.workers.dev +cf.13084493.workers.dev +cf.iwoai.cc +cfcf-8.pages.dev +cfr-reed-taxi-wayne.trycloudflare.com +chain-trt.online +chainsolapprove.pages.dev +chat-wa.xyz +check282.tempisite.com +chore.pink +ciftcininbankasiziraatbankasi.com +claudiorojas.cl +clivenicoll44.wixsite.com +cloudflare-workers-pages-vless-a2j.pages.dev +codt.digitasianetwork.workers.dev +coinbase-com-18690.subttrepimop1005.workers.dev +coinbasewallet-verification.198-46-89-184.cprapid.com +company0rder943.weebly.com +completar-la-verificacion.vercel.app +conductibili.fun +correosprepago.bnext.es +crenadenuddoi-2258.vercel.app +cryptorectification.com +currently5267.weebly.com +currently70.weebly.com +currentlyatt909.weebly.com +d.afirkz56924.workers.dev +dio.azrealonce.workers.dev +ditgong.com +doc-online-1881.on.fleek.co +docsignauthorizationrequest.vercel.app +docusign.com.bestfinancebroker.com +duang-5dh.pages.dev +duvhkeq.pages.dev +easyaccesscommagebn.com +ebay8787.shop +ee-account-home.web.app +ee-service-help.web.app +ee-service-portal.web.app +eln3.vercel.app +enormous-orchid-howler.glitch.me +espaceparticulier.life +ets3qe9ooms8t6i8.pages.dev +excelorgo.com +falabellacom.dominiquepg.com +fdesq4.pages.dev +fdsfjiwe.com +fdsjfkweow.com +fekoulamevebouna.freewebhostmost.com +felomane390.wixsite.com +ferngos.de +fieg.84yr483rhfwieujro348ur84.workers.dev +figinstenatecom.pages.dev +finansfaizsizbasvurum.online +forested-mirage-samba.glitch.me +formtools.com +fortradesetup.hamidamnaie.workers.dev +free-5436781.webadorsite.com +frogsrus.wixsite.com +fshraha.pages.dev +fukshumx.world +gazruinv.web.app +geaoolsv.pink +geminiwallete.godaddysites.com +ghjhyu.wixsite.com +gimennlouin.gitbook.io +goldenrod-rowan-submarine.glitch.me +gorgeoushome67.wixsite.com +group11-vvip-hot-girls-combi.viplch.online +gruppeflorian.com +hanisfir.shop +hedayatfreedom.hedayatkhakpour.workers.dev +hello-world-morning.freekite.workers.dev +hello-world-muddy-cloud-f45b.mfoster0425.workers.dev +helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com +heluapla.shop +hemanlau1.pages.dev +hezhouruan.552008598.workers.dev +hgcdhbxnf.weebly.com +hjrhd.top +hk04-123.pages.dev +hkmqo.top +home-100317.weeblysite.com +home-102207.weeblysite.com +home-107257.weeblysite.com +homelogin7t6sdfcgvhb.weebly.com +htaflytz.baby +htaflytz.black +httap.l-teiegram.com +httpsbellsouthnet-102649sitecom.weeblysite.com +hup6r.com +hy.fuckgwf.eu.org +hypophysecto.fun +hzuayvvl.red +id2.xbenihime.us.kg +ikergalindez.github.io +info-delivery-bg.com +info-trackingcs.cc +info-trackingiax.cc +informed.deliveryhbo.top +informed.deliverytcw.top +informed.deliveryxs.top +infringement-service.com +instagram-clone-in.vercel.app +interbenefitprestaciones.referidosweb.click +iouwerty.weebly.com +isnworldwide88.com +jaydeep8806.github.io +jeanandpeterwilkin.wixsite.com +jetconstructionsgroup.com.au +joeandvelma.wixsite.com +journey-x-pro.com +jsdfchkdsds.weebly.com +jshattkee.weebly.com +juliusmasih27.github.io +jung-sohn.de +katiebllair.wixstudio.com +katiebllair.wixstudio.io +kdlmo.top +kenzmail0.wixsite.com +ketura2010.github.io +keucroilluxibrou-2718.vercel.app +kuconlogin-ui.godaddysites.com +latam-onipojes.vercel.app +layanan-bntuan-resmi-dna.prbu2.my.id +ledger-com-updatefirmware.aparecidovisentin.com.br +levappoprauqueu-4688.vercel.app +leyoixoimmecou-5619.vercel.app +linkbokepviralindo009.vipp.blog +liveairdclazmersn.pages.dev +lo6-cas-projects-64947843.vercel.app +maatamicklogginns.gitbook.io +madebybmr.in +madhu821.github.io +mailupdate87.weebly.com +maine619.github.io +mainnetverify.pages.dev +mazulyta.pages.dev +megrebeikenneu-2106.vercel.app +mendhfjpl.weebly.com +metacareer.com-case37169314276.com +metagalaxy.pages.dev +metamacksiologus.godaddysites.com +metemrsblogin.gitbook.io +meyetamaskiwalt.gitbook.io +mianfeijiedian.lawcpacpv.workers.dev +milanharvestfestival.com +mirobitsgt.github.io +mocp90.pages.dev +mostafa2.mehdi84888.workers.dev +movie-firebase.vercel.app +mubki.hp.peraichi.com +my-site-104564-105934.weeblysite.com +myaccountsignup.net +navy-nose-4544.typedream.app +net-flix-front-end.netlify.app +netzero-webmail-105996.weeblysite.com +new-currently-1-23-24.weeblysite.com +newattupdatemailboxkidlyverifynow.weebly.com +nfty-proj5.vercel.app +nnbsscnaceesngsetr.com +occinamete.cfd +odovsccs.weebly.com +officalourtime.weebly.com +office36503.com +ohscorgza.github.io +okm.znt.temporary.site +oliver752.github.io +online-e-commerce10.com +online-e-commerce11.com +online-e-commerce12.com +online-e-commerce5.com +online-e-commerce7.com +online-e-commerce9.com +orange234.wixsite.com +orgmail.weebly.com +ourtime.datings-information.workers.dev +p.updateinfocl.top +p.updateinfocs.top +p.updateinfoga.top +p.updateinfojq.top +p.updateinfolw.top +p.updateinfoor.top +p.updateinfooy.top +p.updateinfoqv.top +p.updateinfove.top +p.updateinfovt.top +p.updateinfowu.top +p.updateinfoxb.top +p.usertracktxz.top +pages-108-tg-cfzz-ip.pages.dev +pages.tempisite.com +pageverifycenter.com +patjimmy323.wixsite.com +paypalloginin-usa.blogspot.com +paypalloginin-usa.blogspot.hr +pcmag.anycubic.vip +port01-acf.pages.dev +portal.chiaveggies.com +pruhuffopraussou-5681.vercel.app +pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev +pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev +pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev +pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev +pub-2801359d2be54bfd8701132626efeb73.r2.dev +pub-3096005ebeae423182ccd89665564d8a.r2.dev +pub-46a5f86348ae4aceb3591d126020999f.r2.dev +pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev +pub-51f896deb233450089fc1a520e6ed957.r2.dev +pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev +pub-682ad3b65d944376b919745aae3c56d4.r2.dev +pub-722720be67154192a1102b2cf085d306.r2.dev +pub-7d056bfeb6b04852801553620fe62c0a.r2.dev +pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev +pub-873fc6a3edb941c6a17f50911dfca518.r2.dev +pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev +pub-aab4be29317b4ec296517a557db12622.r2.dev +pub-ba5a046c69974217b0431bca4ba43740.r2.dev +pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev +pub-c59cf4e950b142949df8861e60b3689d.r2.dev +pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev +pub-e5855431d98545b38408f52af50ab8a1.r2.dev +pub-ff0271d87324424a9aec83337e844a54.r2.dev +puertaselectricasprincipal.netlify.app +qaffixledger.com +qbstdfda.com +qpownthenewyhadvanceweb.weebly.com +raj-tiwarii.github.io +restrict-policy-nonadherence.vercel.app +reviewboss.github.io +rfgxg.top +riaayaoman.com +roadmap.binarydesignhub.com +robinhooldloegins.gitbook.io +rouzhda03.kambizmedia.workers.dev +rsjxzl.com +rtyuiuytgf.weebly.com +rubinhuud____llginnh.godaddysites.com +rudra-choudhary.github.io +s.team-s22.com +sadekk.com +sajsa.icu +salarahmad786.github.io +santanderpod.fsthosting.com +satinnaaoabbs.weebly.com +satyarthi.uk +scarce-army-wide.on-fleek.app +sdfvgbcvb668.weebly.com +sea.6e2efhxz.eu.org +secrbnsuppotyu9.weebly.com +secure-ledger-m-auth.webflow.io +server.2rk3.com +server.pxs7.com +setshinobi.vip +sextelegramxxx.pages.dev +shareorder711.weebly.com +shaw-101342.weeblysite.com +shaw-103098.weeblysite.com +shaw-106054.weeblysite.com +shaw-106665.weeblysite.com +shawsyncmailservercommunicationworkspace.weebly.com +sherman-relate-rev-baskets.trycloudflare.com +shobhit245.github.io +shopifysite.cn +shoptkoo.com +sign-in-att-108611.weebly.com +sign-in-att-108611.weeblysite.com +simxtrackredirecttszz.pages.dev +sjhsjjs82.weebly.com +skill-meta.com +sky-107842.weeblysite.com +smithjamessv328.wixsite.com +socx.ly +sparq.eu +spicyhotcoolsoup.s3.us-east-005.backblazeb2.com +spotifyl.vip +ssfgsfg.wixsite.com +sss.k999955.workers.dev +stonemartin1001.wixsite.com +stringroll.com +sukienffvip.doiqua-garena.io.vn +supportsecurity981.tempisite.com +talktalkserver897.weebly.com +tareq088.github.io +tbsl.by-on28.my +tcaconnect.ac-page.com +tejlksdoisd.com +telegcm.me +telegramjessica.pages.dev +telegrampx.com +telegramsexgroups.pages.dev +telezelm-ivee.icu +telgramsignal4.sg-host.com +telstra-102379.weeblysite.com +telstra-104033.weeblysite.com +telstra-104394.square.site +telstra-106968.weeblysite.com +test1.workersdev40050.workers.dev +tg-logrom.com +tktk.tktsk.shop +tokecn.im +tokeni-1601.vercel.app +towrewds.com +tpwalllet.com +trustwallet-zendesk.com +tuviaje10.com +tvjbqiyv.guru +twcht.twimobie.cc +twimobie.cc +uedy.pages.dev +ultsyncingsolana.pages.dev +upheldlog8.godaddysites.com +upholdloginorofficialsigin9.godaddysites.com +upholld-lligon.godaddysites.com +usol.shop +usps.com-cgkzkukp.vip +usps.com-trackaxd.top +usps.com-trackbrs.top +usps.com-trackdht.top +usps.com-trackgee.top +usps.com-trackhsk.top +usps.com-trackivo.top +usps.com-trackjjx.top +usps.com-trackmra.top +usps.com-trackmvz.top +usps.com-trackuqg.top +usps.com-trackvgb.top +usps.com-trackwbv.top +usps.com-trackyqb.top +uspsdana.com +uspsdant.com +uspsservicetrack.blogspot.co.id +uzomadj.shop +vedi.154-203-197-141.cprapid.com +vgmrm.top +vkkvdkdcmm.weebly.com +vl1.spaceysen.cn +vobroffexagru-4404.vercel.app +vrvtn.top +w1.5114559.workers.dev +waassistance.com +wallet-diagnostic.com +walletsecured.pages.dev +web-lupqrbm0k-uniswap.vercel.app +web.tlgrm.app +webmailserv3038z.wixsite.com +wk.xzte.eu.org +wodjrvrisixc.wixsite.com +worker-dark-queen-529e.servers5555599.workers.dev +worker-hidden-frost-ba39.yoveli7450.workers.dev +worker-site.aopages.workers.dev +wsa.osmqone.org.cn +wwwwwwsasasasasmmmsszz.vercel.app +x.tovip.eu.org +xhjxkj.cn +xixiajiaju.com +yahoomailquthorization.weebly.com +yungtee3.wixsite.com +zagbasamothega.dnsget.org +ziraat-kampanyasi-besbintl.xyz +zxl.cbbnbbc.nyc.mn +zzpov.top diff --git a/phishing-filter-dnscrypt-blocked-names.txt.br b/phishing-filter-dnscrypt-blocked-names.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..9cd88818119986e83f813d2e4c2944534a183f77 GIT binary patch literal 5432 zcmV-8702q~D0v~Gm=Ay=WSIMB&i?uOX{!74CiqHFeD!W0;{guJNN@-``uD1;?X)`8 zsnlUgAC^+7O>okeAuHeeA3A@KDW7BtAbJ2O=Z?*H0Hs_==zEn%${X#8W`` zJ}O$1e!IZQ(k5quH?KL_7+UqFMiG%R`8Ait6Euz@Pb&rGE0&*|#7A|Y`FWP}L(08T#^8#OV(!_+EkW|=w>V=+I3Y!(U?oa2PUo(y>i*HbV-8%7gh0z*h^0I@?WVV1a%Ae1vO^M`l0*$g5WWotia8b zwm-f0h{_N`-XSEMC7+o%0tL$T5VkT)NUenkPfj#f=$q7T{c-W5Oz`f0w8q#^Zz7rJ z#0%nGs4tL+xiuD&u+cwwse!k-R*$82e?r7$eLUbsERJ*f+zEGM+DSsN)C;Tydh$1v zt~EFggh0;hgMN#X10Kc5baW}44M@Bd54;4{@z7BU!Uj&pWhSE-sX5MXjx@=N6cW7z zIwwv~$T7a_kwi`t9pn}_=v=LPqtBZ+r)~l7qhyVx)se~8mV5db0n&Q8Q3d9{3O0#xoAWFuG7drxifT4SKWK?b>Sa2fdRLPiH_{{cK#L?36D{&; zrR4k-7a^Cnqc+5hcP~yPcr*Dm5uZA>#$i@fpgC?MW0}LmllM%H&wY(zlm%|_$t;u0 z{=prw3v^l&ZRAZ z>48Ai9r+VW^R|a5$UjbxTH+!skxV)w3>cy&WQ0#(++eM?^Gt?;M8wCe<}LaW>F&$^ zC;cXTo3bUEOJhu(MJ_`Kzk)+?(HVi;3wjLh+Eaf&$C>ZQ#CMa^&V0UKrOe!4I{K4E zZ*krE+^!?0HhJm~SE&m-c>s+|YaA0gVe0jW2$J<`I(VS7OiS{_a_8vu{TdVx7|EugdL(ng*Zt zr|WM$CIIn1nT)34yG&@}8r~vp^;_18cu3$OM3c#h{MmZh}oi$tO>)x z?(muOk=a|Ep{D0^ouBeK<+VP?H}J!J%(36==Xy+HEO`AfKGh%%dp0}2*V`0%p!*=# zkP@G+2^E~ri%!e(X?2mR{ok7?hFssk=)ADyNLNb}9b5PF= zSO3c!9#+(M)bB(4FZ*!4W31L^&B0&%{pr$(E2ZNMf-(FyobXE1j(DJg#B+_NIN7)u zegNCT)%|-)DxuxtmR4uE=|kU4vrvELl{%REONW|1+xp)KA(X%Hi?=J1<+8^+)(rH3 zWMD^HdV1;7b-^BcjA(84M95JPX|1ML+iovrFS_REyiK9r^p{rXt@24><}xOw+1AqS z?KX9w>t3rWiC1NX7YqjC73x0QU;1+W9j~iN>z7t%t4{DU)HI(~KFQrA4v66cn}^X7 zJ{e2Ih@5C-K-j_=N)Q8DsU`gRFkD#rd;2t|E&3epl^Za?`>c(cJNK8tfaRvu(ef~u z1gZYZo_6DiQ=kxr51$+*e{VW+$>hWqzPJp{G>(pZP(my`FXyiezAN8!#t}7q$7@_6 z1<{fQUr#Q$6Vg`h1Msn6@{m6J20oEi8r94sarK(RdAu%hVx^W18o6NpV*H>p#b}iJ zh94-C*>XV|G5WlWcg^_ZQ{dDcs(*X|XbEHkCB!rzD)|kSn(!IapP0PKAqe3FOagabX?HlxY=-sr+xNX&Gqky0wCbkNFsfL2kn?r*Vl! z0;^%taZyA}L@i`g!jqy=k;hOhmPK&!h3t<6Y*0vmDz7wxlyu6;cGFHHwm@A^uamD# z<$5lh`kJW@$Qo0uFHY_AO>~AE!i{^C}%Ev9vg$eF~UDx3$=s7OU;BC6C*^kWFY={W%nT$$}G$-l;;!aJ@2fql6 zzmbc7I)Rbj618)avoQz#9f5qWpkIu{w|pd)r*oTU*}h!YQqE#yWpf1 zhWvolfq$xhG}N<~9`%~)a)AKNmPB7*jXGD48rX`9a%5W0!EFRkEKy+Dk`ZYApc_PQ zAtvxL4E;3|Dfl!ido@*q&E>v7uH?0r9t72Mbt|v|;pV>At;cWWI}7%;!c)3Wr+la@ z0%fsNtMV1cizuQBq-(Zdt&Jq4*Il>wcK25ORv$5?kh@RuAg;>*_kc0&6;sKUlzc%V zwd)viJK1vinq4vXD&e3bgqrtQazDnAoTop?mK%ZMSXHQ8dpKcoFdOr6(G=T(F6822 zDm`L@`M$Br;)EoWOP{b8IJV`U>ma+B5wP6_qlN(kZ1}b`65O|Z(EqMuxBcXN_pQ%sPt&%&S5RbSudPjP8Ukn|N09%fb z0`zgXwGE%8HB226l@d+vK`x34kJZ>sf0NU$x$Rvx>p`j8K44>lFPGo;_{jxs$`N}X z20n()^lhRT8>D9@5itxpx2alZ)^pRel{IkTZV!b(ohjf|?(em=1_uqKp~tnLD2S|q z>Onw~#E?3h#L{f^&Yg%%Kc?~&x$0RtS*M><=(f@X2MetEBxVS_@)^jD2!b-7E2JvWM?|u|%}A zj^w7t!##5%nz`Qo);mC-5j>X-1*Ha;Y#A4i*wdWeMUaowNTF+7w?%1Agoc%(>Hsi- zCL#W?htK`O((Yl@d`2-RzPFQa5CZ`Ft2GYIi9!7u$k>uo${KmSm8sO&snG&5^heQh2=!s20kD@!H@uuFs z!VU_hc(Vkp!Bw>Yu--p~0}2{%^XV(5=G~*lb*P+@47z@y0;*DceW>jFV+NjB9@xemL=qg7>Ia+ztOZx zCb5WF2``98U`r5h_K?@rr&R41?20JUw~mGSl<>{1D>e=Zj2vOcoXWG!M(_!HBNjJO z!sdeu(6C2@r-!>i@+jh3P@~^5CG3Qa!$h?wCcC-!5n4@SgF{h65_Em1$meld_$b&s z6Bn;aII{PWuRWkOJ_9&7>&4DuY^)&4);D~iSq>` zDv^o%?0WZfJLrK0yxIIcze&dt+2xZ!JX>A3cst(v9}K^y4$QOH?!iVR<%&c|A?Q+T z+!j0^+5`KObHRVf&aGO4$)eC|!nXTw3b|0@tgSA~^nSvNL`7RgM#4B@qF@Rdhzj-D zbpGz%hFj{YQocmSNUq&;V-CrjeW#>rH34zw7){w2pFkD@Q{(I_+k94I9;7Gv zRp40&xtAcEdshh4BnO_SY(FDy_4R?}Yt4J4Piii{nhW3=fR8I#dsWSn6(`OcdekhA zeR3Rn?cVK)j8A~ghulAb`RWCunM+|DL+CM=6>pd44T;qzE78!zMHbfEK0r&AU^Vo_K8KhUxA782-xfR*xR$hmRuu@33 z>Dosy!LhD0j0B7uQ{ruRH=BnO*VT(q>rwjFol}B|TD9D>)Hqm2*JKciPY$&noe`5W zAV3+$B)Zu$;EEPDoC~pQGV)OmVi>^z2o!1oVa90~^?*WZ>9IC3_z2_5R0 zH%HEgWf}&F8UY34qhiKbwMD0u90u*3SbGeLmWYfTg0J69{C2dDO zjguXe5sDkNECO(XL24`0qr@)d=+rV<)Qoc>hanBanGqx#a6-GtIfXt+Wt5x8K@2ER z4BC#9GLsb(&RTIuAu9%!>q**02tH4G8JAf|0OUqac059#8JpRlahgXd#)ZK+4ooxS z1|=;Yre+Uzkdt<(Cp`!yXL&QE;J`A;`3x{EuHRv+ znL9H9N2?bxnhD0)$zd5s>kPyh-yH6z}yY_;6E- zH!X%=o^k@aVL{~7DV+%Yrbg#ldtkWryGm|T@c=hKZe)1d&R`=PRQm+w=J8M}3VYdf zlfQ6-^DLV0CdTDoGsuWBwNW3^63Cs=fAF#@BQaF}?Tn8&V zuY-Aa9p5^$Mjwi0J&)r^Xd7H?fQW+8&aZ|Ki+WYl zAcf>KNxk05*kWX2z<5jb6qbPX3$bmNan!Ix@AszyG$aL2^56H&s|K?I)Gh1HHzwrT zP}uU}-IypTE7SIzTgtYOsUU9iXSzx_rb_eiYd6IUFRrH5=b81M@2$SyRk2=YcOL?A z^Jo^kQMh@jgH+0LvA^o!&AsKupJWw+F;z}`B}_j? z0$K=W76Lq|x2V!1H}CGS?)0O&wYqgEdaZP)%+5tZrO03;l+a$rVHoSN24w-Gl4KoG z-#sShPJd9F{ig$2AzIa$`b^LCqKM&!&@bQaMU6Hk@E+kKS!0$|i%b8S4GMk+rB0;j z8mPWWPE65wznTH|rV56fN$u_6JM7hFUu|AC;A$f7EpI|~-dL+Q7=YY$vEy6MQXp3R zLSA#L#V0+F9PuZjsL~pS3J}Ta8U(E?*#acd)~KyOJUrsOI7%!-3~VE3Q_UAaV{$x~ zF)d;CV#C_TMH}6(Ervl3i`w2+67pJdtYhEXPTSt<4sqj;#?F~Uef&yIp4hvBrntx-#DV@Yk-N!R(=UadLebTj;{%V)m8f}-4S$hOv zg|DkRS_DPyp@|ys>uPd5^t)oxAnKX*>JbpXu$E4Q82B!^vz#rRf6g^hIgUa~B8TMysMY^i z`IvdoO(APNtjS85-E<-L!R&So9-Rv{3H|sK9fzIt8`h6PODNVVueV4QN>c6HeP68vebA`~-ONe9(QmM?Ve4E=cp`;dJode2td2OBs zzR)|L82l`x4XuMiO+ubxvCIQ2&|KpuCpDLKQ7G42s=`5!F;?a4oExw{gX*D^X!>sN z@BXgd;OoC0-X7k)K{h4q=lBo|g!Q05cTa0W#4joyST$6LKS9581!_}Wu?>yzTr{!+ i`=cRLPc&BTQwzkIV|~7X8m*JohNj!lm|o9w%)Qi!mrRmwsrsW&p z#9-1kkmRqQ$B?HADzm1gIdwS@w!`6YIO2&g|M>AA(kb!xkALr^?c~`0_@87D_Q$^} z&3YxR`})U^|2=Wy1poU-5+zv>CqY#FM-=^?#D7Q8|3UkIe@xN{`}dFd2PfN)f13CH zKN=(Mvl!X-&*<}SdJq$7F;VB-WdHu_uNLzX8ZtfnH4wEDBZ5XMC(K{dOO)3;M*k1V z#AyG22LD4HL&4;K>De$Zrk=#Ock|=_G$*SAi>|3)041YF{A z5!QuNwv>#Hl4t1j^p)gsTx4+;GWL}gIsT4fwVtDYZK8UAEb}OibKj>*Qm+de9{+Q( zeARhgWNBK5WR>BQ>;vk$Zdka;>5GILenQrK5&VQ}CzWXY0v_A*i!i3=(b-^-%xJ3{ zhe^X#2&%T7&v%C~Y8q(6x7vA{v~gcVax!Yx^(4RwHyifgCk-8Gz?2?EU6R;QoGb3 zNii;oA=^nIL@CjlNGaVDHHtD%%Osm1ftOmT4)c=X;5d+{9$)g(EwD3}Q#cBzWV0O- z55v4jHtZteZ8M=X1Vc6|On{zO*+&PpXlo@Xvs`cmI9MeNR zq%~w7P=6$X~V#NO|6hz^V-#V38>mlr>a^AC-3WV?>@Piymh^{8<6UPt=yw7-doEdz@vsk09(j^W2Dg(bTY zI2;)LUw819>f9;_ALRJm;WGE^y1;hWtVzq!1;k$c2A-X?n{{G1oFk2CF6xX2d6G9l z#s~|lLL@<25Y|MTQ(l%q6a|A2Pu8+qHcvy?OVfv#LP@tDSDNOGv4dZlE2X|4*L6J} zNz)r4g=*G*oNv!*(c6$@k1j9zgivZsnaY(8a!CfsMcb#PTc=@kg$(7?*sxK3us?Wj z`{LGQ%&yODAj^HxZPDk`y1*%md}Slk&vnV3{LyGPtnIjD!Yw4r{>-gSB%PA{nLMA{ zJyG|k%GENNyy0|O$K-k69=)cN_1!dPSzC;&d~xHepdogw_pIQ~B*|_|k`K&@n<)ev zT6N3D&OS_Qh1jSY_?#%Z^sbnbWJ*R_Jno+b+qtoB$nwNxEG4`r_fk(fxn+y8XoNF0mIRMI8K+9&!-L@kbYV~u$ZiJG}UvzioY4PUa_J*Q*_iEJLn(pih z=#20QH)3Co3ZQE8f`<$t5E@&X`8MEu?$bR&+i*+w7w82(u!ZV+9}Za>C1n(IxCF+7 zEEZ`%MM8q4P7{%nED}8T9wLpRRhaqK-5r7!qIq+65sdiY3*5#wjVXi@W((~BvVaaV zIQGX`HLM8^KoIQ84iGXQTL`C|o2+R7UNUDLAq-boeFn zOKJ9{wMAk71Crd%Vrq^p*|Cb11d+-QxvEWjsjLY0Fj*CK1h7h-!*fi^5-52hilpb&lQ=GE%nQnv`TkR+LYNTkxD%(s}rKW3EDdwBe zX;#gqy4q8NV?6@gjew+H{F9u1yKO_{6Rrk_b(zgPeEYNp_K#5<=_~RmpK&6gIjI!w zgVS0akP&ar;6Pac@Edjnh>Z**kyrcmYYp-&Ey~KrDoVIEzZQq&-kSNE05!HVq$6jc z=iYYn@bHWk|7vkmW;rfDZKD;$OSK#xwH1D^4kskSR&&Dn9v=^}+wRtF^JT_XBCj0b zJmu(fL8^7{A$F@3+=bCRFnUGYg7X{pbo-=|7WN`whTgipe>ihBdY*K6OAe$unK=-by! zbg(Nb7_=FE{^`f{UaUWMgiqXpJ$wXBmeX)(V3)!~S(5)gXku{jlEYIX?3o4 z3=c9w9%uJrE^O20X+uH+2acQ-n{=#7sF_TPe6I=ykKh)cwz?C~4oiXy3iCXPqAIVe zs{}3M9es?=*|T;x)A1cWb$#UPVrLxJ^}}5sjo2igkEQWj+WcxtlITxOWs-kvQW|Hi zbOrKz)-D~r$mK|*HunrEq1)-rBTBqFGKDH|NQheVs-WyuHScz;h9^JrMJ0qhOG$9MGDi?;^H z*3S(O`%TB$!{J7B{SFc@Nv!i#pW#(^k{5V@>{l49Q#8^|-o5Pr0;XXET&piGc`tHc zVX0?8SK#o|7D_wrXJkb_T2(vgMm8?QR8>)N($Y;3xK=*F>6le2=-}cFZo&bnSZ6#| z!Ncwy_9#r|ubakTz6dpt>mVG3QEb7(}4uE%E zQl2H95#O!uMjupqAO(z21it24f%x2l@jX|=v5CDHpS}`u4Ou+`f+0y1N2f`9F*Bp3 zQu9LsY|KGY#uotA&(P0)n1WfpyKO}rc36*c(l?M!0~LHBG#}8>!EFG`+d&2#VRkZf zPQqaeCI3`|$KZykKG8Z7WXgCQ)^!nEWI8W{{(z+MBY&ItT7;A?deScy%` zhnC3dfN+Ami0ex;Vi5(Xnid38f2MQ0j0o<(L z^&5__4d4N?vdS(9XdqrCuv>70)<%1dT>}C$-ROWca`Z3VTqW^oJN&L4il{EA7W7g0 zm0Y@xa6~))K9_|D@|@w$&VhP>BNIsFVHYDbmLNsFNGwL)HMi+f%^Lvl8Mfd+pMKdQ zE#sn2<18tQpIzXW$m23Sh=b3}rG^6Fz}`#-J;Y!v-Hqy^9I@?#ZSP@%yEGvHH$vW| z;64;9vNFKPX}QFpK`JtKNBOtGKe>>j)CJt6sdTn=XZ>k50o0u&M{FexfoY14%POm? zYls_QivAJ>s)RBw3Y=*#!)^*EVTc6oJ!ahkzv#WHTV%f4S*LFW$6@=vdjR^M_oDpQ zNR}-aH8Q*`M=I&INg%Ex68X7&>}iyI1ORF9xY)W&1scy!VE`Zm{jRar^;@NM6l?G^ zBMRamNrNQ&&PIiR+762wfuc|5GB$48&qaP#%s5gcA|n95uwx5EdIUwy zkXjRO2O(?tm&PHtj9omZ_7^e8yJqAGgLrH4S2WR4Ino_c9n(I^X>WBugwN6K>Ag0@ z*D`!A_15_qeltqsM=sC!gv0XL9+Od|ZG*R)o?dz19z~y5DQ< z-+IB`Ao$wgh|WiPe74ysJoeAGGqneY3(3BbTJlD^-QP%ReIse}PTJl`_vMYWh$;Sd!$TDS1NDDm2M42l~co zOrtD{;rmD?vZ^K-i;DprMeJg*XQ}cw1JfjV-$|#Q0q(}e{cQx!o7;^4gCP|q@6!~qOXK|g77&!?|ScB}0rwH-q zzC6kc3RM=^>MHl@&hxZLqDB-6yY5Amvx=|`40DmiyrfY>c!I4f2`TF4!nZ2Zh7}}5 zwpnK}p5n5}qdJZOhe;k^?15A<42;sIN~^4(6{+f^hNwBEFr?zL7lhD^iUeq*q?uqz zUF2~|^1S2}o0lZ#zLex7$_iH0P*s8fQ3i{K$x{LqX3@28k(WhAGGq#wfPN{$Jj^1h zv2{XR`m(%cO(yC*qQE?LR`aH+idYm8O^d4L=e{Bq8INcNBjm6_gk0Jn?8BIeqqtJh!^y)7n5cs!_@WmG(eHM0#JBHi> z2XtnnJjGC-zhPGQeSbgd5ztluUa$*JG6D!{rP`kF_D$11+TCj#Nsu%6a@#SNCVW6D zPJtB+Qag{3UZ0_Sc|13ES}U%!@I|#VSVS80>^K2F=*d7OU_3zMB`g|ydpr+ph`e%^ z^XA%1<-*LK|2*^m#E()Q$9L~Y*38_HfOUH2od+4e7UiQ0@*;Asw=SvN~t1)_-1sT;EKZhmCc<9{K&bg7xu!Bt#QRFL((J8!-;hbMC(^fIAZb zF@T^xK@Rm892IH53rJO$ma>HwKku&&7J`I@NJP^iioS{!Rxm@y{aYC5slIjxf)v3k zgBt>0;`XJ#MgbZ6WeDRh;}X-Sum1b{^swdY-T6<4^ig%g>%$4PS6m*C$0-c%*X7z@ zLzHoR5uhXM{v|;6_HD$g36Y}uLsJpu*`Jz)KcO z1R$Bue32vz{953CEV6L>;Udd+ns(A9S$?*JPERUw>Y0lvSq`2Gy!H{JZH z_1B8z@Ypev|4zo=uQ>aBp4EQq?CoZ&N(DZ}d%bSH0#|+5fB}oR`S0ZHk|xy! zJXy^iq1wKnFms2Y;Q>yg(~kLSu`j>a6p$_u#Ja#=X6=Pcq~nOT2Ll)*)S?c%u}zD= z*BRhodW82nzm`d@(<4$DK<6=zqWC(-`7)N#udgHQ+)FVw4WZa-v2wSrK&IKyaTIyg#7Z?UOQ@4NVh1EhQ!60k(=P2d$YQ)M97w;y2W1+-r z!DhDZb&vW)>MiWy)ZM&Da{Epl-EyOMxh-Kk8|ZIk9nzUq4sdnC7hliMv*73I$*i1r zGd`!&ij3z?oTpCsaMxDvfe3ATC`6pnW>1hMQP$r!)qm)$c%YPQkuJWsW9mayvz_cw z{b~DWKljsq;(k(h_dy;#~@|jXS$F4)Zw9^8ES{ z$4Us?igg|o?i0L@0iabodW6DG)B_vvll1}^1Ztk{h7M65AaL3h(C#FF2bvC^X83;l z4z+2NR?my8Uiu+yWk7`m4t8q)Xy*AqXry#Rx)zQb3y1OR`JD7|82&HqI%&Kn GF8}~zF#hiV literal 0 HcmV?d00001 diff --git a/phishing-filter-dnsmasq.conf b/phishing-filter-dnsmasq.conf new file mode 100644 index 000000000..2cabacff1 --- /dev/null +++ b/phishing-filter-dnsmasq.conf @@ -0,0 +1,454 @@ +# Title: Phishing Domains dnsmasq Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +address=/1nvest.bigbantbaz.top/0.0.0.0 +address=/25116414.cc/0.0.0.0 +address=/365365news.com/0.0.0.0 +address=/365f09.com/0.0.0.0 +address=/750115.cc/0.0.0.0 +address=/823pages.pages.dev/0.0.0.0 +address=/95564339.awi.za.com/0.0.0.0 +address=/999fc.vip/0.0.0.0 +address=/a.yyyy.cf/0.0.0.0 +address=/aaaa.whilefish.xyz/0.0.0.0 +address=/accounts-microsoft365.weebly.com/0.0.0.0 +address=/accounts.0ffice365.support/0.0.0.0 +address=/aidanochka-tabys.kz/0.0.0.0 +address=/airbnb-clone-sahinur.vercel.app/0.0.0.0 +address=/akbarinewv2.morteza638n.workers.dev/0.0.0.0 +address=/alaindemeuron.wixsite.com/0.0.0.0 +address=/alexa81o.github.io/0.0.0.0 +address=/alienv2ray.pages.dev/0.0.0.0 +address=/allegr0llokalne753724pl.art/0.0.0.0 +address=/allhrteam.com/0.0.0.0 +address=/amazon-clone-by-sudip.netlify.app/0.0.0.0 +address=/ammuvicm.work/0.0.0.0 +address=/amyr.iran-cyber-net.workers.dev/0.0.0.0 +address=/antaidossiersuivamendimpayeerf33.zynekcctv.com/0.0.0.0 +address=/anuragrauniyar.github.io/0.0.0.0 +address=/appeal-voilation-policy-issues.github.io/0.0.0.0 +address=/apple-id.cc/0.0.0.0 +address=/apri.154-203-197-141.cprapid.com/0.0.0.0 +address=/arvestcreditcard.embarkdigitalonboarding.com/0.0.0.0 +address=/asdfjeiod.com/0.0.0.0 +address=/ashleyproberts.wixsite.com/0.0.0.0 +address=/astounding-trifle-b88a2b.netlify.app/0.0.0.0 +address=/att-101397.weeblysite.com/0.0.0.0 +address=/att-102641.weeblysite.com/0.0.0.0 +address=/att-107756-104508.square.site/0.0.0.0 +address=/att-108102.weeblysite.com/0.0.0.0 +address=/att-108651.square.site/0.0.0.0 +address=/att-mail-101246.weeblysite.com/0.0.0.0 +address=/att-mail-105533.weeblysite.com/0.0.0.0 +address=/att-mail-109459.weeblysite.com/0.0.0.0 +address=/att-servicce-mail.weebly.com/0.0.0.0 +address=/att-sign-in-107078.weeblysite.com/0.0.0.0 +address=/att-yahoo-mail-105061.weeblysite.com/0.0.0.0 +address=/attcom-101415.weeblysite.com/0.0.0.0 +address=/attinc-101356.weeblysite.com/0.0.0.0 +address=/attmailonlineaccountupdate.weebly.com/0.0.0.0 +address=/attnet-100294.weeblysite.com/0.0.0.0 +address=/attonlineservicesa.wixstudio.com/0.0.0.0 +address=/attonlineservicesa.wixstudio.io/0.0.0.0 +address=/attweadminservices.weebly.com/0.0.0.0 +address=/auth-sharepoint-asr.vercel.app/0.0.0.0 +address=/avertisystems.com/0.0.0.0 +address=/b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev/0.0.0.0 +address=/b35ccc.com/0.0.0.0 +address=/b35lll.com/0.0.0.0 +address=/b35www.com/0.0.0.0 +address=/bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz/0.0.0.0 +address=/bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz/0.0.0.0 +address=/bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link/0.0.0.0 +address=/bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz/0.0.0.0 +address=/bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link/0.0.0.0 +address=/bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link/0.0.0.0 +address=/bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link/0.0.0.0 +address=/bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link/0.0.0.0 +address=/bbf-alpha.vercel.app/0.0.0.0 +address=/bet365t3.com/0.0.0.0 +address=/bet938y.com/0.0.0.0 +address=/bet958c.com/0.0.0.0 +address=/bhngfd3.pages.dev/0.0.0.0 +address=/blackdasblacks.shop/0.0.0.0 +address=/blsckdagsever.pages.dev/0.0.0.0 +address=/bridge-9wdpjmsoa.pancake.run/0.0.0.0 +address=/brubreumummeddoi-4514.vercel.app/0.0.0.0 +address=/bscusdty.top/0.0.0.0 +address=/bsozvycr.icu/0.0.0.0 +address=/bt-102368.weeblysite.com/0.0.0.0 +address=/bt-106861.weeblysite.com/0.0.0.0 +address=/btjfh.weebly.com/0.0.0.0 +address=/bussinessaccounthelppage.click/0.0.0.0 +address=/bwfujmww.icu/0.0.0.0 +address=/bx.sfdsb.icu/0.0.0.0 +address=/c.cting365k.cc/0.0.0.0 +address=/c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev/0.0.0.0 +address=/can-post.cyou/0.0.0.0 +address=/celery.sa.com/0.0.0.0 +address=/cen4-six.vercel.app/0.0.0.0 +address=/cf-worker-pages-proxy.1352562939.workers.dev/0.0.0.0 +address=/cf.13084493.workers.dev/0.0.0.0 +address=/cf.iwoai.cc/0.0.0.0 +address=/cfcf-8.pages.dev/0.0.0.0 +address=/cfr-reed-taxi-wayne.trycloudflare.com/0.0.0.0 +address=/chain-trt.online/0.0.0.0 +address=/chainsolapprove.pages.dev/0.0.0.0 +address=/chat-wa.xyz/0.0.0.0 +address=/check282.tempisite.com/0.0.0.0 +address=/chore.pink/0.0.0.0 +address=/ciftcininbankasiziraatbankasi.com/0.0.0.0 +address=/claudiorojas.cl/0.0.0.0 +address=/clivenicoll44.wixsite.com/0.0.0.0 +address=/cloudflare-workers-pages-vless-a2j.pages.dev/0.0.0.0 +address=/codt.digitasianetwork.workers.dev/0.0.0.0 +address=/coinbase-com-18690.subttrepimop1005.workers.dev/0.0.0.0 +address=/coinbasewallet-verification.198-46-89-184.cprapid.com/0.0.0.0 +address=/company0rder943.weebly.com/0.0.0.0 +address=/completar-la-verificacion.vercel.app/0.0.0.0 +address=/conductibili.fun/0.0.0.0 +address=/correosprepago.bnext.es/0.0.0.0 +address=/crenadenuddoi-2258.vercel.app/0.0.0.0 +address=/cryptorectification.com/0.0.0.0 +address=/currently5267.weebly.com/0.0.0.0 +address=/currently70.weebly.com/0.0.0.0 +address=/currentlyatt909.weebly.com/0.0.0.0 +address=/d.afirkz56924.workers.dev/0.0.0.0 +address=/dio.azrealonce.workers.dev/0.0.0.0 +address=/ditgong.com/0.0.0.0 +address=/doc-online-1881.on.fleek.co/0.0.0.0 +address=/docsignauthorizationrequest.vercel.app/0.0.0.0 +address=/docusign.com.bestfinancebroker.com/0.0.0.0 +address=/duang-5dh.pages.dev/0.0.0.0 +address=/duvhkeq.pages.dev/0.0.0.0 +address=/easyaccesscommagebn.com/0.0.0.0 +address=/ebay8787.shop/0.0.0.0 +address=/ee-account-home.web.app/0.0.0.0 +address=/ee-service-help.web.app/0.0.0.0 +address=/ee-service-portal.web.app/0.0.0.0 +address=/eln3.vercel.app/0.0.0.0 +address=/enormous-orchid-howler.glitch.me/0.0.0.0 +address=/espaceparticulier.life/0.0.0.0 +address=/ets3qe9ooms8t6i8.pages.dev/0.0.0.0 +address=/excelorgo.com/0.0.0.0 +address=/falabellacom.dominiquepg.com/0.0.0.0 +address=/fdesq4.pages.dev/0.0.0.0 +address=/fdsfjiwe.com/0.0.0.0 +address=/fdsjfkweow.com/0.0.0.0 +address=/fekoulamevebouna.freewebhostmost.com/0.0.0.0 +address=/felomane390.wixsite.com/0.0.0.0 +address=/ferngos.de/0.0.0.0 +address=/fieg.84yr483rhfwieujro348ur84.workers.dev/0.0.0.0 +address=/figinstenatecom.pages.dev/0.0.0.0 +address=/finansfaizsizbasvurum.online/0.0.0.0 +address=/forested-mirage-samba.glitch.me/0.0.0.0 +address=/formtools.com/0.0.0.0 +address=/fortradesetup.hamidamnaie.workers.dev/0.0.0.0 +address=/free-5436781.webadorsite.com/0.0.0.0 +address=/frogsrus.wixsite.com/0.0.0.0 +address=/fshraha.pages.dev/0.0.0.0 +address=/fukshumx.world/0.0.0.0 +address=/gazruinv.web.app/0.0.0.0 +address=/geaoolsv.pink/0.0.0.0 +address=/geminiwallete.godaddysites.com/0.0.0.0 +address=/ghjhyu.wixsite.com/0.0.0.0 +address=/gimennlouin.gitbook.io/0.0.0.0 +address=/goldenrod-rowan-submarine.glitch.me/0.0.0.0 +address=/gorgeoushome67.wixsite.com/0.0.0.0 +address=/group11-vvip-hot-girls-combi.viplch.online/0.0.0.0 +address=/gruppeflorian.com/0.0.0.0 +address=/hanisfir.shop/0.0.0.0 +address=/hedayatfreedom.hedayatkhakpour.workers.dev/0.0.0.0 +address=/hello-world-morning.freekite.workers.dev/0.0.0.0 +address=/hello-world-muddy-cloud-f45b.mfoster0425.workers.dev/0.0.0.0 +address=/helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com/0.0.0.0 +address=/heluapla.shop/0.0.0.0 +address=/hemanlau1.pages.dev/0.0.0.0 +address=/hezhouruan.552008598.workers.dev/0.0.0.0 +address=/hgcdhbxnf.weebly.com/0.0.0.0 +address=/hjrhd.top/0.0.0.0 +address=/hk04-123.pages.dev/0.0.0.0 +address=/hkmqo.top/0.0.0.0 +address=/home-100317.weeblysite.com/0.0.0.0 +address=/home-102207.weeblysite.com/0.0.0.0 +address=/home-107257.weeblysite.com/0.0.0.0 +address=/homelogin7t6sdfcgvhb.weebly.com/0.0.0.0 +address=/htaflytz.baby/0.0.0.0 +address=/htaflytz.black/0.0.0.0 +address=/httap.l-teiegram.com/0.0.0.0 +address=/httpsbellsouthnet-102649sitecom.weeblysite.com/0.0.0.0 +address=/hup6r.com/0.0.0.0 +address=/hy.fuckgwf.eu.org/0.0.0.0 +address=/hypophysecto.fun/0.0.0.0 +address=/hzuayvvl.red/0.0.0.0 +address=/id2.xbenihime.us.kg/0.0.0.0 +address=/ikergalindez.github.io/0.0.0.0 +address=/info-delivery-bg.com/0.0.0.0 +address=/info-trackingcs.cc/0.0.0.0 +address=/info-trackingiax.cc/0.0.0.0 +address=/informed.deliveryhbo.top/0.0.0.0 +address=/informed.deliverytcw.top/0.0.0.0 +address=/informed.deliveryxs.top/0.0.0.0 +address=/infringement-service.com/0.0.0.0 +address=/instagram-clone-in.vercel.app/0.0.0.0 +address=/interbenefitprestaciones.referidosweb.click/0.0.0.0 +address=/iouwerty.weebly.com/0.0.0.0 +address=/isnworldwide88.com/0.0.0.0 +address=/jaydeep8806.github.io/0.0.0.0 +address=/jeanandpeterwilkin.wixsite.com/0.0.0.0 +address=/jetconstructionsgroup.com.au/0.0.0.0 +address=/joeandvelma.wixsite.com/0.0.0.0 +address=/journey-x-pro.com/0.0.0.0 +address=/jsdfchkdsds.weebly.com/0.0.0.0 +address=/jshattkee.weebly.com/0.0.0.0 +address=/juliusmasih27.github.io/0.0.0.0 +address=/jung-sohn.de/0.0.0.0 +address=/katiebllair.wixstudio.com/0.0.0.0 +address=/katiebllair.wixstudio.io/0.0.0.0 +address=/kdlmo.top/0.0.0.0 +address=/kenzmail0.wixsite.com/0.0.0.0 +address=/ketura2010.github.io/0.0.0.0 +address=/keucroilluxibrou-2718.vercel.app/0.0.0.0 +address=/kuconlogin-ui.godaddysites.com/0.0.0.0 +address=/latam-onipojes.vercel.app/0.0.0.0 +address=/layanan-bntuan-resmi-dna.prbu2.my.id/0.0.0.0 +address=/ledger-com-updatefirmware.aparecidovisentin.com.br/0.0.0.0 +address=/levappoprauqueu-4688.vercel.app/0.0.0.0 +address=/leyoixoimmecou-5619.vercel.app/0.0.0.0 +address=/linkbokepviralindo009.vipp.blog/0.0.0.0 +address=/liveairdclazmersn.pages.dev/0.0.0.0 +address=/lo6-cas-projects-64947843.vercel.app/0.0.0.0 +address=/maatamicklogginns.gitbook.io/0.0.0.0 +address=/madebybmr.in/0.0.0.0 +address=/madhu821.github.io/0.0.0.0 +address=/mailupdate87.weebly.com/0.0.0.0 +address=/maine619.github.io/0.0.0.0 +address=/mainnetverify.pages.dev/0.0.0.0 +address=/mazulyta.pages.dev/0.0.0.0 +address=/megrebeikenneu-2106.vercel.app/0.0.0.0 +address=/mendhfjpl.weebly.com/0.0.0.0 +address=/metacareer.com-case37169314276.com/0.0.0.0 +address=/metagalaxy.pages.dev/0.0.0.0 +address=/metamacksiologus.godaddysites.com/0.0.0.0 +address=/metemrsblogin.gitbook.io/0.0.0.0 +address=/meyetamaskiwalt.gitbook.io/0.0.0.0 +address=/mianfeijiedian.lawcpacpv.workers.dev/0.0.0.0 +address=/milanharvestfestival.com/0.0.0.0 +address=/mirobitsgt.github.io/0.0.0.0 +address=/mocp90.pages.dev/0.0.0.0 +address=/mostafa2.mehdi84888.workers.dev/0.0.0.0 +address=/movie-firebase.vercel.app/0.0.0.0 +address=/mubki.hp.peraichi.com/0.0.0.0 +address=/my-site-104564-105934.weeblysite.com/0.0.0.0 +address=/myaccountsignup.net/0.0.0.0 +address=/navy-nose-4544.typedream.app/0.0.0.0 +address=/net-flix-front-end.netlify.app/0.0.0.0 +address=/netzero-webmail-105996.weeblysite.com/0.0.0.0 +address=/new-currently-1-23-24.weeblysite.com/0.0.0.0 +address=/newattupdatemailboxkidlyverifynow.weebly.com/0.0.0.0 +address=/nfty-proj5.vercel.app/0.0.0.0 +address=/nnbsscnaceesngsetr.com/0.0.0.0 +address=/occinamete.cfd/0.0.0.0 +address=/odovsccs.weebly.com/0.0.0.0 +address=/officalourtime.weebly.com/0.0.0.0 +address=/office36503.com/0.0.0.0 +address=/ohscorgza.github.io/0.0.0.0 +address=/okm.znt.temporary.site/0.0.0.0 +address=/oliver752.github.io/0.0.0.0 +address=/online-e-commerce10.com/0.0.0.0 +address=/online-e-commerce11.com/0.0.0.0 +address=/online-e-commerce12.com/0.0.0.0 +address=/online-e-commerce5.com/0.0.0.0 +address=/online-e-commerce7.com/0.0.0.0 +address=/online-e-commerce9.com/0.0.0.0 +address=/orange234.wixsite.com/0.0.0.0 +address=/orgmail.weebly.com/0.0.0.0 +address=/ourtime.datings-information.workers.dev/0.0.0.0 +address=/p.updateinfocl.top/0.0.0.0 +address=/p.updateinfocs.top/0.0.0.0 +address=/p.updateinfoga.top/0.0.0.0 +address=/p.updateinfojq.top/0.0.0.0 +address=/p.updateinfolw.top/0.0.0.0 +address=/p.updateinfoor.top/0.0.0.0 +address=/p.updateinfooy.top/0.0.0.0 +address=/p.updateinfoqv.top/0.0.0.0 +address=/p.updateinfove.top/0.0.0.0 +address=/p.updateinfovt.top/0.0.0.0 +address=/p.updateinfowu.top/0.0.0.0 +address=/p.updateinfoxb.top/0.0.0.0 +address=/p.usertracktxz.top/0.0.0.0 +address=/pages-108-tg-cfzz-ip.pages.dev/0.0.0.0 +address=/pages.tempisite.com/0.0.0.0 +address=/pageverifycenter.com/0.0.0.0 +address=/patjimmy323.wixsite.com/0.0.0.0 +address=/paypalloginin-usa.blogspot.com/0.0.0.0 +address=/paypalloginin-usa.blogspot.hr/0.0.0.0 +address=/pcmag.anycubic.vip/0.0.0.0 +address=/port01-acf.pages.dev/0.0.0.0 +address=/portal.chiaveggies.com/0.0.0.0 +address=/pruhuffopraussou-5681.vercel.app/0.0.0.0 +address=/pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev/0.0.0.0 +address=/pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev/0.0.0.0 +address=/pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev/0.0.0.0 +address=/pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev/0.0.0.0 +address=/pub-2801359d2be54bfd8701132626efeb73.r2.dev/0.0.0.0 +address=/pub-3096005ebeae423182ccd89665564d8a.r2.dev/0.0.0.0 +address=/pub-46a5f86348ae4aceb3591d126020999f.r2.dev/0.0.0.0 +address=/pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev/0.0.0.0 +address=/pub-51f896deb233450089fc1a520e6ed957.r2.dev/0.0.0.0 +address=/pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev/0.0.0.0 +address=/pub-682ad3b65d944376b919745aae3c56d4.r2.dev/0.0.0.0 +address=/pub-722720be67154192a1102b2cf085d306.r2.dev/0.0.0.0 +address=/pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/0.0.0.0 +address=/pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev/0.0.0.0 +address=/pub-873fc6a3edb941c6a17f50911dfca518.r2.dev/0.0.0.0 +address=/pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev/0.0.0.0 +address=/pub-aab4be29317b4ec296517a557db12622.r2.dev/0.0.0.0 +address=/pub-ba5a046c69974217b0431bca4ba43740.r2.dev/0.0.0.0 +address=/pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev/0.0.0.0 +address=/pub-c59cf4e950b142949df8861e60b3689d.r2.dev/0.0.0.0 +address=/pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev/0.0.0.0 +address=/pub-e5855431d98545b38408f52af50ab8a1.r2.dev/0.0.0.0 +address=/pub-ff0271d87324424a9aec83337e844a54.r2.dev/0.0.0.0 +address=/puertaselectricasprincipal.netlify.app/0.0.0.0 +address=/qaffixledger.com/0.0.0.0 +address=/qbstdfda.com/0.0.0.0 +address=/qpownthenewyhadvanceweb.weebly.com/0.0.0.0 +address=/raj-tiwarii.github.io/0.0.0.0 +address=/restrict-policy-nonadherence.vercel.app/0.0.0.0 +address=/reviewboss.github.io/0.0.0.0 +address=/rfgxg.top/0.0.0.0 +address=/riaayaoman.com/0.0.0.0 +address=/roadmap.binarydesignhub.com/0.0.0.0 +address=/robinhooldloegins.gitbook.io/0.0.0.0 +address=/rouzhda03.kambizmedia.workers.dev/0.0.0.0 +address=/rsjxzl.com/0.0.0.0 +address=/rtyuiuytgf.weebly.com/0.0.0.0 +address=/rubinhuud____llginnh.godaddysites.com/0.0.0.0 +address=/rudra-choudhary.github.io/0.0.0.0 +address=/s.team-s22.com/0.0.0.0 +address=/sadekk.com/0.0.0.0 +address=/sajsa.icu/0.0.0.0 +address=/salarahmad786.github.io/0.0.0.0 +address=/santanderpod.fsthosting.com/0.0.0.0 +address=/satinnaaoabbs.weebly.com/0.0.0.0 +address=/satyarthi.uk/0.0.0.0 +address=/scarce-army-wide.on-fleek.app/0.0.0.0 +address=/sdfvgbcvb668.weebly.com/0.0.0.0 +address=/sea.6e2efhxz.eu.org/0.0.0.0 +address=/secrbnsuppotyu9.weebly.com/0.0.0.0 +address=/secure-ledger-m-auth.webflow.io/0.0.0.0 +address=/server.2rk3.com/0.0.0.0 +address=/server.pxs7.com/0.0.0.0 +address=/setshinobi.vip/0.0.0.0 +address=/sextelegramxxx.pages.dev/0.0.0.0 +address=/shareorder711.weebly.com/0.0.0.0 +address=/shaw-101342.weeblysite.com/0.0.0.0 +address=/shaw-103098.weeblysite.com/0.0.0.0 +address=/shaw-106054.weeblysite.com/0.0.0.0 +address=/shaw-106665.weeblysite.com/0.0.0.0 +address=/shawsyncmailservercommunicationworkspace.weebly.com/0.0.0.0 +address=/sherman-relate-rev-baskets.trycloudflare.com/0.0.0.0 +address=/shobhit245.github.io/0.0.0.0 +address=/shopifysite.cn/0.0.0.0 +address=/shoptkoo.com/0.0.0.0 +address=/sign-in-att-108611.weebly.com/0.0.0.0 +address=/sign-in-att-108611.weeblysite.com/0.0.0.0 +address=/simxtrackredirecttszz.pages.dev/0.0.0.0 +address=/sjhsjjs82.weebly.com/0.0.0.0 +address=/skill-meta.com/0.0.0.0 +address=/sky-107842.weeblysite.com/0.0.0.0 +address=/smithjamessv328.wixsite.com/0.0.0.0 +address=/socx.ly/0.0.0.0 +address=/sparq.eu/0.0.0.0 +address=/spicyhotcoolsoup.s3.us-east-005.backblazeb2.com/0.0.0.0 +address=/spotifyl.vip/0.0.0.0 +address=/ssfgsfg.wixsite.com/0.0.0.0 +address=/sss.k999955.workers.dev/0.0.0.0 +address=/stonemartin1001.wixsite.com/0.0.0.0 +address=/stringroll.com/0.0.0.0 +address=/sukienffvip.doiqua-garena.io.vn/0.0.0.0 +address=/supportsecurity981.tempisite.com/0.0.0.0 +address=/talktalkserver897.weebly.com/0.0.0.0 +address=/tareq088.github.io/0.0.0.0 +address=/tbsl.by-on28.my/0.0.0.0 +address=/tcaconnect.ac-page.com/0.0.0.0 +address=/tejlksdoisd.com/0.0.0.0 +address=/telegcm.me/0.0.0.0 +address=/telegramjessica.pages.dev/0.0.0.0 +address=/telegrampx.com/0.0.0.0 +address=/telegramsexgroups.pages.dev/0.0.0.0 +address=/telezelm-ivee.icu/0.0.0.0 +address=/telgramsignal4.sg-host.com/0.0.0.0 +address=/telstra-102379.weeblysite.com/0.0.0.0 +address=/telstra-104033.weeblysite.com/0.0.0.0 +address=/telstra-104394.square.site/0.0.0.0 +address=/telstra-106968.weeblysite.com/0.0.0.0 +address=/test1.workersdev40050.workers.dev/0.0.0.0 +address=/tg-logrom.com/0.0.0.0 +address=/tktk.tktsk.shop/0.0.0.0 +address=/tokecn.im/0.0.0.0 +address=/tokeni-1601.vercel.app/0.0.0.0 +address=/towrewds.com/0.0.0.0 +address=/tpwalllet.com/0.0.0.0 +address=/trustwallet-zendesk.com/0.0.0.0 +address=/tuviaje10.com/0.0.0.0 +address=/tvjbqiyv.guru/0.0.0.0 +address=/twcht.twimobie.cc/0.0.0.0 +address=/twimobie.cc/0.0.0.0 +address=/uedy.pages.dev/0.0.0.0 +address=/ultsyncingsolana.pages.dev/0.0.0.0 +address=/upheldlog8.godaddysites.com/0.0.0.0 +address=/upholdloginorofficialsigin9.godaddysites.com/0.0.0.0 +address=/upholld-lligon.godaddysites.com/0.0.0.0 +address=/usol.shop/0.0.0.0 +address=/usps.com-cgkzkukp.vip/0.0.0.0 +address=/usps.com-trackaxd.top/0.0.0.0 +address=/usps.com-trackbrs.top/0.0.0.0 +address=/usps.com-trackdht.top/0.0.0.0 +address=/usps.com-trackgee.top/0.0.0.0 +address=/usps.com-trackhsk.top/0.0.0.0 +address=/usps.com-trackivo.top/0.0.0.0 +address=/usps.com-trackjjx.top/0.0.0.0 +address=/usps.com-trackmra.top/0.0.0.0 +address=/usps.com-trackmvz.top/0.0.0.0 +address=/usps.com-trackuqg.top/0.0.0.0 +address=/usps.com-trackvgb.top/0.0.0.0 +address=/usps.com-trackwbv.top/0.0.0.0 +address=/usps.com-trackyqb.top/0.0.0.0 +address=/uspsdana.com/0.0.0.0 +address=/uspsdant.com/0.0.0.0 +address=/uspsservicetrack.blogspot.co.id/0.0.0.0 +address=/uzomadj.shop/0.0.0.0 +address=/vedi.154-203-197-141.cprapid.com/0.0.0.0 +address=/vgmrm.top/0.0.0.0 +address=/vkkvdkdcmm.weebly.com/0.0.0.0 +address=/vl1.spaceysen.cn/0.0.0.0 +address=/vobroffexagru-4404.vercel.app/0.0.0.0 +address=/vrvtn.top/0.0.0.0 +address=/w1.5114559.workers.dev/0.0.0.0 +address=/waassistance.com/0.0.0.0 +address=/wallet-diagnostic.com/0.0.0.0 +address=/walletsecured.pages.dev/0.0.0.0 +address=/web-lupqrbm0k-uniswap.vercel.app/0.0.0.0 +address=/web.tlgrm.app/0.0.0.0 +address=/webmailserv3038z.wixsite.com/0.0.0.0 +address=/wk.xzte.eu.org/0.0.0.0 +address=/wodjrvrisixc.wixsite.com/0.0.0.0 +address=/worker-dark-queen-529e.servers5555599.workers.dev/0.0.0.0 +address=/worker-hidden-frost-ba39.yoveli7450.workers.dev/0.0.0.0 +address=/worker-site.aopages.workers.dev/0.0.0.0 +address=/wsa.osmqone.org.cn/0.0.0.0 +address=/wwwwwwsasasasasmmmsszz.vercel.app/0.0.0.0 +address=/x.tovip.eu.org/0.0.0.0 +address=/xhjxkj.cn/0.0.0.0 +address=/xixiajiaju.com/0.0.0.0 +address=/yahoomailquthorization.weebly.com/0.0.0.0 +address=/yungtee3.wixsite.com/0.0.0.0 +address=/zagbasamothega.dnsget.org/0.0.0.0 +address=/ziraat-kampanyasi-besbintl.xyz/0.0.0.0 +address=/zxl.cbbnbbc.nyc.mn/0.0.0.0 +address=/zzpov.top/0.0.0.0 diff --git a/phishing-filter-dnsmasq.conf.br b/phishing-filter-dnsmasq.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..21195e64d6725bfe5522e0a293f5643ec1c3998c GIT binary patch literal 5606 zcmVq1a&yLL5vQg!!dE7lgwFEfAO9R%++x4|`TNb+&8PLJw%67lyCXvV{O#eI#zh&cZhv7ee`Qx9zyANNm{`P15vGDx-MQX(#cQ9hk zWS+nL<&S?#-sXT6fBUnwc67&*)wci|jT0h-3ks5)7Jof5rvBSizx?sffOTs}kpJU4 zy7HGl{%I3N{p}An5EMRd_%}bRZ(EPg^v(GD+;}f}ec@LOZKr<=4KSbo1=YXf55JD- z#M-F#tA^AxytL)x*MWYW0on;B$8i#)pvC|=_$2uxs}M8b`WeCv%l!?{au`P$wV@ct z_GqO)J&MH>t{WC9C&Bqb;qvr_bmp}zi!=1}Wt$(+=XoA#+}#@ifbOdVy7tr2`*|EN6<_@uUHwFi<#(ePY=)6rb=q8I8F#d|~1$(JPl73$9HF;Jni&VlO$-%isNwQp!mI zZ%|{VZL*@za0z=%CoAw&@bKTSyI+?fguFvYI7>b=aRdqovqIR)*h9(Lt_W{Vs2Zmq zQoHqsmsgbF-Sb!)V?Vu#*l`6}K2M>(KqBVRSV+Q#$CH=Tz}sA_$5OjLA!4#V9`GO* z$2onUgu5~AEJpfMFR&Kq$v;p~yufiF1af8{=B7N^S=9&`O1*@B@qonJPKo|?KZcG{ z5H@f!E;AX$NX>EddX#MQGQzNF2&R}kJ^sr4K5Z0o8rNZPBE%r8TK7Sp6Ua{80zOB{ z8cVAUb9-&Mr{tCiX~nyML@NbMw}Q#7k#QLLGWTn0A_zVdY!c(5^DHMa4nhu!PM4g1 zkb-PbFSo{1oobR}v{nQk3aFfkNewe(QgVLg7a^D79gd6`#?-?w3U3a-CgKw=YaeEn z2-2FvMX7$6D(ec9<8$4k7-fi4eKOT^iB`BWI!T=v7|r3S{32mR*FCUBB*YS72sW`o zPkFgpw?2n*A2jUNE+lWYlZP_cy={cv)Ard@3xPUe?L4tGPw`PGjDJp#TH+!skxV)w z3>cy&WQ0#(++eM?^Gt?;M8wyu<|FzM>F&$^mo*3QZNQeIxirS48js5m!u`MsoPpm2 zZZGIDxNA@S^B!k@A`|x}r=78He@dCTzjX8`i{9e8^SNC|Ol|ViAFfgtcJhlmL82zH zBISgs*DE5N-!re%E|2T<0a0EinfzX-c=ia8y*uj#X?r-+-b0x%VQApN=;b3?8&iTmfBhFCM`@PO@`JVDx-{TJa zFkf@*&-y*Bh!_iAe~nKyNWn2Cf2@eO(zkh@ z`7Y+emT&e)JFm_lY%iGA=lN~HS-1q?m&=-eDwSTex}v0!h_HC2whUmQ$C=Lz))q z&!SRB*cEVfz1{l%pFxlDcr4zoNS4bUpI9@{1CoIqY3V7%!JzAcJ@y#U+U$vtqd=C7 zYI?QpVb40IYktqi6zWZXMbbnWpAiTdld#q>jrD1=E*seg8|D!D_fel!6ZoacimrU9APSS(g2qSIZD1C zI&#V6#1_7=99c7tj(ku;EF3t7zcP3X#&*UL)dPO4afK8_OB&psT<|2Mtvq{U<$(|- zU}540K9N=$B|0cj53M;I_HpnN^C4k_MlP5EP#|S7#i-cRr*GPgn=Kcl$EY^ec-M?i zKFR7PL-nsO0PPPhtyn=xY!CR2Mugc&hR9iFmztLtxhK8jlqf#TyiMoKeQo=dj|%|WKan2;X~qBwlU?h{?ccYT+HSz z+42>z&^3stE73Uat4Hd6DIWX%boAh{P)WZVY?rsnzqsTat7?;VJIrnbYUgB}3N<2ja-;K0;`Zabkxv@a1pd9E$1LG0Ig)9z`AkE zr1gVt5WR(%zzd4QL(veadFJ zYh&97RWV(f5NF%tH%GBHN33%g_^3iq;RlDYVGw2}Q9qxBxlPqNv!0tq$(RN%Jnf|x z2xJhDp18iIs=+}6Y3Ok+3OUq(!@P?o1Wc%Hu}LgtfhojW$)faQDtC*A8pM>Wm!sH? zEZo3SaO7iqDw>w5{!VRghvz&4EjaS-N8U1eYfOIg5oxbjsDV7&C@ z6b>k8yv?Vtn3`v<@3O=*{)FSmM}fZTZyiKT3KIu|fKT>!_A#Q#oycii!Yt&|uJew^ z>B~TTMIMHC%O3|dJ9E8u^NHY#H38m;rKWkmB;<)0kjZA_gQit7iABsxFvKE4^`zaK zJ>+%uDOCy??BeFF9~}$z2_p8^6&u?dG+b6oWhlWB7|n6Ss)q>el(0$G=yp4aM|gX9 z8o(U{a4o3O@0b#H!p333UJEeU&3%qgl&i48-)90aP)VsoK9AGFN5SSP+)G#?z+Em2 z8$@MMbA1kZ?X@f764XX4wZVB|h0KUg5~A+BSQ!nzjfdpWe>_^&q!j@!bAUNcTKIa= z2S}Saj%I;L$+_W6Hd_t8w)PM|n`0S}rssvOGXso9+^knZDRLc+N4FE_3(Ac>G>ES0 zdiQiY=z#^i+5AmBq>9kWMohx$L)pT`rSY-Rv;CU7jhG7{SO_mfQm#mZ6oRg{E^IMA zbI&tSxI0|%H!*mvgJ80DM@GVCBfObhsO?phEz7he;YB37EhZyjoG=lx2+j5cQk=7KSFoO&nNZ(d?552z7BTDlg>6@B@$;bute(rWxdZv%V&yq#RS)YRhFc4$~^08Oe`U!kjSW3VjF~J!m(8 zKmkmk1!u$cv*x%$j-PLi;mS3aem*&V&svn5VQJ5RY?CpL}s3Yy-aZseK z#JKk*{+PGe-Coqh0LaEi=2t;_ZAJU|7$44f!?q82j@>)(Rl97HUV%b=X6un#m`Yo@ zrp82ADWu1A?Tz3;&m(;p2^fbUrVUEUY#vTrS5Nws9;I*HIqJSpE49AvYCKsvx+a5A zd~&Gu=!}@00RhS|Ceh870avuJto;}0nv8tZgBV6|00M7mdKs5lNC4zUPB!a3V`gk- zgT`qdr5G0m<2W$Qj2o1+e3(w3VFx*BhkDY3P_pW?A|;>L;BaE5q4WwRjRGSU1`@?+ zXFWKuOmaR0Op8msSE!jgGXY1d7crU%#@WeX8At03$gzF*3Q!|}(Ap`k#H1Cdg)K^2 zskPxSolp1xT4-boA7?Gluw|0t3{uWkk8EOW>p2=E3}Q0Vvdn^wvmOK=wE>|)@L3EI z^oB{!lK^261e{Tc0AU>YG7H?5@On01 zMUc^w$-6Wc_>kr=DBjc1AphN5ylGA^V^dCGH!Nt9LY|74^I>$IYfU18TknHIF^F0PVC-Th76TjM{a&WZ-j4?(b${;B<$m{p%g+;YmuV zpZg6NXhD0r?@wEGXQK3cj_uw4-~avJ|AipcDt8l(v@P8hAZE+mZVVF@<3N$cfk-Oj zS|nAlxbOFe_*AeNO?`y`1-1xwR>FE-ownK~i{;3cy4uVzX#PsP@*T}c02#FAQae_m zJy6=_Y2P6n28u!AMazl8VI$3nm_NC<-H)l(ovSvdo~(Q+DW?sAPRP)0_p2Q%sc4E$ zK8f|Tr!SH2GQA)X35!Tfu)r1p9G3|w6dBd6Hyf+j+%!CQHhMt$QtUT}H_w*a(h0ok9UYa^UWt=GCpN%n6cQ`Ii+YfjbL8gT z6MAe@s#~jDvu@Q&_XRe}k!CBn00LW4qMmUW#+Z52MZ*dW6qxVScaO=r(;w7k|Ls6l zFz|g*>N7nXEOX<=aj{9hJ&PKp39$46d}sZ%3bm+d&gKRMzk^as)N~D0KO`rnXsqq4 zn}Iba3^3$_l3+~#FQkZQ%?BRlg{17C!{?u?IWr^S(p6sr{oRFWkh%lweK{YJT)m_1{OGTLPP+EeggSqjt z8#+Mvj#krX^w1`6kX}d60aEu7{a8Sy-jG*CcH8~fasb<>TofOchfu9{@0KNoRtHN$ z@M}(i!qgmEi`nZDFbQJT{oVV1%nrk#I0pxT+eB}UvtnJUV!JiPE2849?uz}H6@Nar z@>n3}^HtoxtKxIjiZ6WzeZDbr+W{!e3nBX0RLe3cq zNa;&haskxp_gU@7ysP8ycI#nHe6nu?%6LcLc7!{yU#Lmw$G7M>?4&1OFF1+{BBXdN ztR;eIJkd+w16MDFDDT?o{Wj#3GjnD8DQEH3-zGN1EhlSh>16G#>k-Koq;#LC@=IAu z4X|j~T3cX8u&QQD17GNqPYiw*GrSrJW^@!X<~;;DeFd6p{O0uNxvVWwzrGYJ+^iU5 z<&enL1j8H9)FjL{d~ct7|D>3L+ut5O9zGq_xVi^i@9=d4qj$FEJUy)qQAaoKg;hg^ zxI^aOH@L5a+R8KTk?NbYmsZ00Xff}uo)`q6X&{+1Tc;6!rsWN5l A0RR91 literal 0 HcmV?d00001 diff --git a/phishing-filter-dnsmasq.conf.gz b/phishing-filter-dnsmasq.conf.gz new file mode 100644 index 0000000000000000000000000000000000000000..13574bd6ffa04b5bef50a3e9dfe1a93d7365042b GIT binary patch literal 5819 zcmV;s7DVYEiwFP!000021Dsn)kK{UXzWY}c@GdrBsU>QEfG@@v@WBTI9$$Rp5|o&t zL?x*umA~FWW%U~jT4Ls#UaG5-AA@8tmM=*5Z(n~^vxeWl{<~AIQ)Bz}7c)>bx-T)h zfx7$GziY#Lt=#-izkU7hB6f7U z*FP@@{!3c8FEH}`Ul8-3W`K#dIAk}^ll%S0j}~V@S#WY1x=2_OnbW`z@o{!NqjpXsFPS!=^9e>4Ko;2aF zcq!Ww&b2st8lkg5)U{oJZYKLW4syLgT2r* z)#z0M23V{?sCqax!^H|UJZPPo_}df6_|JHPELSztzO{$Sp!m@d&e4a=%d2Ff6O$!=ah8=H151QWUx~uo237qr-8= z9W~A=ge+>M1B^lq6Wsx<%(D2okI-{IuNOX3A@Do%?$B1smdO% zYpQRb4h(QW3C73|p;c9s_)lIWb?oj7M*i4$xq{ay{6oogS)}hpVw%)`aU?H4lKYJ> z3N+L|fp7An`3Ud8qO);0I)+22N2_*>)adn?RP{##?6foHk7Xp~M;nEodnM&*@d;Xu z{IHkeBbEB8m{DUW{!R)nzVUADXt6j*LYn-OL0$vAlnag?UNU3sGyg!3(||G08&EMI z=lbpup8qm;k?YVjC!@wWqV7$y!p2#--OVsuunU&50-9Vz1u0~dbIPN-1QKN>c{BpLvoyydrinTEJmwvTZVTFvLdnq>v&{9?qc&{|)%ZQFLyMrCh7ftFi8F1P2j zntdSoqbtguP{ypSGPSWmtz=LF+CHo1Z5qb8RI!?*i>2&uz`0;vvmEZ0)$_Ft0Sv|AhFKC^nJeNuJOBPW1h$3%yRZkb+Iy zNS^oo(Hq8i-%Vqlx8=C0Z}DOS7Nc$Tr?N4JDw^L`QVe{Cn=OG4t-j@B=N`6o06Uup zu@KGHel8b6CNi?}asP1Yhj`u%c|qo!XH@j`UYW^|TfS;HKJVLlxA(Q!+UNAp*~IUB z>i72k>D0NPirqQ7fi5_CcA~nqJGaFI@(vkt>oF_0Y1{6Kw8L#=PgX9U%9eKNs;bKR zyqbi)8#T@Awh*ejC*`d&)pItF%Hq-rQ%FhOYUro3JD5c7ZUehbOg+dwV?BBrdOORg z+OpeyDR{n(FFIr2c3^#^&8%{SQv!#rD%VLJONSo{E#Kd26nl1_ZfL1GI<$H5S)5ijioc+&DpF#gWY3yQIcXUpCgHR1oxfG z=v7cehw(*7bsu|-^nw&6&b|qk8(bnZsq?(a-U8KTs5;l4#97oK>*vx&7C>N)`cTnE zv51LhyJMxb2&p{@J=Z{o6(y4KIern23xqQobz{v6!8vqv#-Y!nKktC|q$V+Ph)G?W zHSY{gb~=q{T*(=OyBaZ)_tdE;7JhX8{^3HLrk*ufbEC*y^cg^{Fe+}e#ta-RU;d`d zZ;No>Cb4R4k0`kXwPOSt@lkU*MUg*x8E%`&34$+KY4@mL&-+DOws2IPLgpp%(V zEEqwU(khl`0h=3Z!MMr#gFh3q5wl2Bi z$S32Efc{jH>Ht)aSy00;8atT9MaJ?@37q1FSut+4Kc0?S7Uh;Oi=K^2^!m8l)RE^%0MF%L^BWuD_MoMGhJAw6yWZ8XgFjl@}@Sp z>hEr{-@shdh!T3UXgVP0WVo#~mY7>{2Rfu0!$CLBducOZWX~{82NQ_|JGREp{G?4m z8`t@6^E$Jg+!QP~YqGpvZ2iXZB_@{24{3$S^%7^5A`%M^DM>ufrVRJ{pSeiNc1&&sOy^q5g$ zY(UA@w9YPXjwGe)EbVAeS4;1@WqA0>Y4K}&i@|nL<9h9)El{tF^@7&4;LZJ&qakjM zz?OsfU#PF`Zr#3w*VU>4#t{jN8vRK#Gp0X1Ickl@TxpGntl5xEBfl7qi;2+ow&=%z z5yb~Pp9_N%v1XalG+I|RVd$BoR$1*lqhZS525B7Q%I;dbOjx>O*g(Q`F219qa+nz} zB6A0VVtVzKgFz+!{;}_9Kbggb&COrkndsQ`XfSs4C*)pG@7MZyPvjwcbWq1g<^_uf zi2(#`l9S@Cl!+sGQ}{DS>TM-1f?=tQb)7HkVv*+eaw(l`i%im(BJomkM+>}A73hUd znqI03V;8dJG~^2%JUdhz=HIv|NRre=Q@>e7%SFc?qYToU?q)l2URig2;;)H=Ckb6Y z+|5OIv{8Rjo2Bos55BR4Bp+idQhbKh27_}omrh9Dt{n@jW2RE?^D}0Y?V)CWa&p!_ z(<#=`446#p)n(jq`|WeCGf3KA2il~}8@~>pKHjcsnaT@-*6m2*dEag_h9$;maR!;p z)a?$5w>fA0-E*P)y6V`%Nz_$>#1Dp*TZfS@#xUQX45H93TdMt~=`(cUrbcNZ0lpNp zd&DkS$AQAc#d{0|+?`hHe}_@@aS5^mi1_D_9lNmJUyw83K14p;B@p8~<{T_Nev-_q z^}5+#bq?Pbwkll1sS(2(?g&UVPo6LwWgoh%1tdKF&ebQ#i?b(XmJRH@2i-!s@d&D$ z5>VIYm>b;%z*N^s8QSq1P-H-2!i;M-rE#~yY3v3w)~If_zDmV!j1I&8 zSV0f;jaUq(Bka+`A1hrze8lK_;Y9dS=jJ-BBYOy6UEPq+FaA-E>PQt-(1InFGu?Q~ zQhTiLa1c!~^S-&vI)|PO*$X{f_(2cj)8Ev+A=W(-N=r$SCZVPEuyAXX*2_a-nYl!y zO2dZ){eqi+MDS=)A22jcXY?8~s>$3C6B4bFkf0?-Y@9KxM)={NB7r5xWZ6REVUN{G z^wS_(u*bR3>%I~x(BK~~;UM^xqqnWfp@*yQ!rGq6SaC*XvUI^xYl-r*4r@WfZq&o5 zVZi*bL`9i4VLY;3hE@EuV%gw>ut}1}bG``^mub&Btbk@BxTenm8O0dN`P!5b(j)IU zH%uZf!qk;lbsjE;2kN&5Ll8~?w{vtsc06E_!ge;;SdFKx-BOb@WNY4NUprKX4~_hT zIq(_{3mY*{AE#=;H#-A;E=Ul9WzB%p02pA3M49LVDF)1-=3o?^yiMU}0Rv#zM+Teg`GUF|&ecf0=fqr|WFCW=#c>|yBE~R(_c7gx}xa~vy( zCk=Un>4*3^&d24FvDDxBoxZs;2RE(?5)}42^FFR!2Cq`26X#R=1(<#cBp(8c4{_Cp zxQhqCs52}HNcQFi4EN#f!?2&5j@FE2hKpW>$?IYz7=EVseGxSk$Eff3@@`B;Af}JZ-)ua}b z@-mk^qjlEg3C$Bxvm_Pakx9w`Xih|qE#TjUWt)oJmnv zNt$M)Bqg9Gsw~(!OPVrC3gplfa+0Mr;at>BS^EDCA?onRc}WXdmswt8XH3crr;&=3 zlnF`v|C9)KW+KhXv=m9rao2d=G&zNmCIu77Q}STvB9%BvtZPV?N}DP#D20p{C?nXp zBBUY-gR)ACJZ%U~(}Xa>Wl|R+!`da-StLcta7#YZ;YfacujeZ zLl%&yqGE}pf}oLAl$MPQk6c%oIK)0vo zoaqn{LLm8aDI%{Y$yk+^kNoz8JbzMxVwR@C&IEEuvPbnOafebIA<6KBj# zIzRH~BZG`G6cXHLg4hE^JSkDg7z=l<^0KNkR^|yo$XI42t&8GuV~>Q~A4N%no!O0L zG$9$DL5fEZO?FZv^uUu+ltoR#Yi4iU~p-wNYjP=C4}ML5yUrl!6M$Y-By?6;N{8 zTMCF`dKd`b2kRXO8@x()>+W#^D6>s`+DsFUo2kjpahm8~_!7c;wAu@f5j9Z-QPs+c zwiYY}xNWU57$Ti|5Q_%N`rg;pp>^cU7u6s@K|27d{-C2?+k&l;GWC))uC=i#7~WbX zZ866PAc2rDLPg3AlxcZ9IieA|0+iAS)UZW1*bvJx`lLQN@;gC0f0Wl?BTmhFbhRjo$=Adn+6%Rws*Qh?{LlKp+yse=}-U-6Q+2WcKP-l9rn^ z%Y&z@l`m8=pOuX6cGF8wXy;e|^{aS0+eIIFfRTJy4}@up7j2TJ(fb~hsjk&sr;9W^ zlb#C^S&y=>eY3Is;)=Kp$lVSG{4n3sA`CUPtkzgKBKjx|>Ww#os|8hPD@|oHh-}PJ z-w}65477=C{_l|xB49^*-t$bnMsSOT=d|j&!S~6uQ6cw;O3M5sWknk~vccvJj<+Pa zos4R199l_V5tp8N&c?dNdB;@p_XJS`Hn|riIi6j@`YGW)?nG|35<%~YCjsGfZ+|~$ zv?#+N8iP-NCq)rDP=;s`lP!`X%EI8-X;VQZ#}P$2hAR4$V>lniI-D1-TT>qaUb5BT zOwjsWz#V?VJ12Btex$E8@EB~zYyF6M>$AajCWeU5jJXv*k{rX?Tw#&Lx`|qELM76o zkibzp^E@wL{g*sTF4V{VL4HTf9IVy-m-bO!sNzAx%iMlP1v!=BNln5>$25_U$YD>i zj_FMw;~(97(zlH4SvAIda5s%Svi_K$`EBH)*g`!vqj}j3MZtV~r6z5@bp|^_gH3yk zLNm=AI}q)hsyKf&3i-}|Y5xi!N- zWQYER)svq0UoxWf6*AhID`X90SIAlvwF_i?mRHESZoNV_D7Zv6?^npCcXNddQN|Ur zh0IsTws&AOYK7k;T1Tt#w|=wAj)(l|On0WTOgrLr+IfU^M!WC-ecQ#{3~F$%Ywr7* z_Ou#?pq`(_Ek4ZiO|#Ky7SEE{Gt5?K)D&e|5-uH`)oe!hl$KkZ-)>o+pVSd90I15f zv2GgotiN|J<w~OCPU0Hu_NVB59{)g~r`los9IU-lU-V=shtuMtNGIqCadto!eJ=#{JI_EvFQ_ z*9!TISnOWLo1B^8&+JUQe+M`w3G&1Ba0d;s)WaL?X}f->6fVb0!}n(x25r$%Xp8LC zX6%`_B2am9MC`@jbcOe0;Nq-Qf41C1AmWwoPMW7(0p2?a(0Zg+ZE@H4xKL zH)w=7r~fGkje0oh6+!ceFirSqgu5tpUlDr{G7?h7<5tCkW8M4ylK;I<{{}Ua@q6%0 F0083BSKt5u literal 0 HcmV?d00001 diff --git a/phishing-filter-domains.txt b/phishing-filter-domains.txt new file mode 100644 index 000000000..e59541a0f --- /dev/null +++ b/phishing-filter-domains.txt @@ -0,0 +1,454 @@ +# Title: Phishing Domains Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +1nvest.bigbantbaz.top +25116414.cc +365365news.com +365f09.com +750115.cc +823pages.pages.dev +95564339.awi.za.com +999fc.vip +a.yyyy.cf +aaaa.whilefish.xyz +accounts-microsoft365.weebly.com +accounts.0ffice365.support +aidanochka-tabys.kz +airbnb-clone-sahinur.vercel.app +akbarinewv2.morteza638n.workers.dev +alaindemeuron.wixsite.com +alexa81o.github.io +alienv2ray.pages.dev +allegr0llokalne753724pl.art +allhrteam.com +amazon-clone-by-sudip.netlify.app +ammuvicm.work +amyr.iran-cyber-net.workers.dev +antaidossiersuivamendimpayeerf33.zynekcctv.com +anuragrauniyar.github.io +appeal-voilation-policy-issues.github.io +apple-id.cc +apri.154-203-197-141.cprapid.com +arvestcreditcard.embarkdigitalonboarding.com +asdfjeiod.com +ashleyproberts.wixsite.com +astounding-trifle-b88a2b.netlify.app +att-101397.weeblysite.com +att-102641.weeblysite.com +att-107756-104508.square.site +att-108102.weeblysite.com +att-108651.square.site +att-mail-101246.weeblysite.com +att-mail-105533.weeblysite.com +att-mail-109459.weeblysite.com +att-servicce-mail.weebly.com +att-sign-in-107078.weeblysite.com +att-yahoo-mail-105061.weeblysite.com +attcom-101415.weeblysite.com +attinc-101356.weeblysite.com +attmailonlineaccountupdate.weebly.com +attnet-100294.weeblysite.com +attonlineservicesa.wixstudio.com +attonlineservicesa.wixstudio.io +attweadminservices.weebly.com +auth-sharepoint-asr.vercel.app +avertisystems.com +b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev +b35ccc.com +b35lll.com +b35www.com +bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz +bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz +bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link +bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz +bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link +bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link +bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link +bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link +bbf-alpha.vercel.app +bet365t3.com +bet938y.com +bet958c.com +bhngfd3.pages.dev +blackdasblacks.shop +blsckdagsever.pages.dev +bridge-9wdpjmsoa.pancake.run +brubreumummeddoi-4514.vercel.app +bscusdty.top +bsozvycr.icu +bt-102368.weeblysite.com +bt-106861.weeblysite.com +btjfh.weebly.com +bussinessaccounthelppage.click +bwfujmww.icu +bx.sfdsb.icu +c.cting365k.cc +c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev +can-post.cyou +celery.sa.com +cen4-six.vercel.app +cf-worker-pages-proxy.1352562939.workers.dev +cf.13084493.workers.dev +cf.iwoai.cc +cfcf-8.pages.dev +cfr-reed-taxi-wayne.trycloudflare.com +chain-trt.online +chainsolapprove.pages.dev +chat-wa.xyz +check282.tempisite.com +chore.pink +ciftcininbankasiziraatbankasi.com +claudiorojas.cl +clivenicoll44.wixsite.com +cloudflare-workers-pages-vless-a2j.pages.dev +codt.digitasianetwork.workers.dev +coinbase-com-18690.subttrepimop1005.workers.dev +coinbasewallet-verification.198-46-89-184.cprapid.com +company0rder943.weebly.com +completar-la-verificacion.vercel.app +conductibili.fun +correosprepago.bnext.es +crenadenuddoi-2258.vercel.app +cryptorectification.com +currently5267.weebly.com +currently70.weebly.com +currentlyatt909.weebly.com +d.afirkz56924.workers.dev +dio.azrealonce.workers.dev +ditgong.com +doc-online-1881.on.fleek.co +docsignauthorizationrequest.vercel.app +docusign.com.bestfinancebroker.com +duang-5dh.pages.dev +duvhkeq.pages.dev +easyaccesscommagebn.com +ebay8787.shop +ee-account-home.web.app +ee-service-help.web.app +ee-service-portal.web.app +eln3.vercel.app +enormous-orchid-howler.glitch.me +espaceparticulier.life +ets3qe9ooms8t6i8.pages.dev +excelorgo.com +falabellacom.dominiquepg.com +fdesq4.pages.dev +fdsfjiwe.com +fdsjfkweow.com +fekoulamevebouna.freewebhostmost.com +felomane390.wixsite.com +ferngos.de +fieg.84yr483rhfwieujro348ur84.workers.dev +figinstenatecom.pages.dev +finansfaizsizbasvurum.online +forested-mirage-samba.glitch.me +formtools.com +fortradesetup.hamidamnaie.workers.dev +free-5436781.webadorsite.com +frogsrus.wixsite.com +fshraha.pages.dev +fukshumx.world +gazruinv.web.app +geaoolsv.pink +geminiwallete.godaddysites.com +ghjhyu.wixsite.com +gimennlouin.gitbook.io +goldenrod-rowan-submarine.glitch.me +gorgeoushome67.wixsite.com +group11-vvip-hot-girls-combi.viplch.online +gruppeflorian.com +hanisfir.shop +hedayatfreedom.hedayatkhakpour.workers.dev +hello-world-morning.freekite.workers.dev +hello-world-muddy-cloud-f45b.mfoster0425.workers.dev +helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com +heluapla.shop +hemanlau1.pages.dev +hezhouruan.552008598.workers.dev +hgcdhbxnf.weebly.com +hjrhd.top +hk04-123.pages.dev +hkmqo.top +home-100317.weeblysite.com +home-102207.weeblysite.com +home-107257.weeblysite.com +homelogin7t6sdfcgvhb.weebly.com +htaflytz.baby +htaflytz.black +httap.l-teiegram.com +httpsbellsouthnet-102649sitecom.weeblysite.com +hup6r.com +hy.fuckgwf.eu.org +hypophysecto.fun +hzuayvvl.red +id2.xbenihime.us.kg +ikergalindez.github.io +info-delivery-bg.com +info-trackingcs.cc +info-trackingiax.cc +informed.deliveryhbo.top +informed.deliverytcw.top +informed.deliveryxs.top +infringement-service.com +instagram-clone-in.vercel.app +interbenefitprestaciones.referidosweb.click +iouwerty.weebly.com +isnworldwide88.com +jaydeep8806.github.io +jeanandpeterwilkin.wixsite.com +jetconstructionsgroup.com.au +joeandvelma.wixsite.com +journey-x-pro.com +jsdfchkdsds.weebly.com +jshattkee.weebly.com +juliusmasih27.github.io +jung-sohn.de +katiebllair.wixstudio.com +katiebllair.wixstudio.io +kdlmo.top +kenzmail0.wixsite.com +ketura2010.github.io +keucroilluxibrou-2718.vercel.app +kuconlogin-ui.godaddysites.com +latam-onipojes.vercel.app +layanan-bntuan-resmi-dna.prbu2.my.id +ledger-com-updatefirmware.aparecidovisentin.com.br +levappoprauqueu-4688.vercel.app +leyoixoimmecou-5619.vercel.app +linkbokepviralindo009.vipp.blog +liveairdclazmersn.pages.dev +lo6-cas-projects-64947843.vercel.app +maatamicklogginns.gitbook.io +madebybmr.in +madhu821.github.io +mailupdate87.weebly.com +maine619.github.io +mainnetverify.pages.dev +mazulyta.pages.dev +megrebeikenneu-2106.vercel.app +mendhfjpl.weebly.com +metacareer.com-case37169314276.com +metagalaxy.pages.dev +metamacksiologus.godaddysites.com +metemrsblogin.gitbook.io +meyetamaskiwalt.gitbook.io +mianfeijiedian.lawcpacpv.workers.dev +milanharvestfestival.com +mirobitsgt.github.io +mocp90.pages.dev +mostafa2.mehdi84888.workers.dev +movie-firebase.vercel.app +mubki.hp.peraichi.com +my-site-104564-105934.weeblysite.com +myaccountsignup.net +navy-nose-4544.typedream.app +net-flix-front-end.netlify.app +netzero-webmail-105996.weeblysite.com +new-currently-1-23-24.weeblysite.com +newattupdatemailboxkidlyverifynow.weebly.com +nfty-proj5.vercel.app +nnbsscnaceesngsetr.com +occinamete.cfd +odovsccs.weebly.com +officalourtime.weebly.com +office36503.com +ohscorgza.github.io +okm.znt.temporary.site +oliver752.github.io +online-e-commerce10.com +online-e-commerce11.com +online-e-commerce12.com +online-e-commerce5.com +online-e-commerce7.com +online-e-commerce9.com +orange234.wixsite.com +orgmail.weebly.com +ourtime.datings-information.workers.dev +p.updateinfocl.top +p.updateinfocs.top +p.updateinfoga.top +p.updateinfojq.top +p.updateinfolw.top +p.updateinfoor.top +p.updateinfooy.top +p.updateinfoqv.top +p.updateinfove.top +p.updateinfovt.top +p.updateinfowu.top +p.updateinfoxb.top +p.usertracktxz.top +pages-108-tg-cfzz-ip.pages.dev +pages.tempisite.com +pageverifycenter.com +patjimmy323.wixsite.com +paypalloginin-usa.blogspot.com +paypalloginin-usa.blogspot.hr +pcmag.anycubic.vip +port01-acf.pages.dev +portal.chiaveggies.com +pruhuffopraussou-5681.vercel.app +pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev +pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev +pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev +pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev +pub-2801359d2be54bfd8701132626efeb73.r2.dev +pub-3096005ebeae423182ccd89665564d8a.r2.dev +pub-46a5f86348ae4aceb3591d126020999f.r2.dev +pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev +pub-51f896deb233450089fc1a520e6ed957.r2.dev +pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev +pub-682ad3b65d944376b919745aae3c56d4.r2.dev +pub-722720be67154192a1102b2cf085d306.r2.dev +pub-7d056bfeb6b04852801553620fe62c0a.r2.dev +pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev +pub-873fc6a3edb941c6a17f50911dfca518.r2.dev +pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev +pub-aab4be29317b4ec296517a557db12622.r2.dev +pub-ba5a046c69974217b0431bca4ba43740.r2.dev +pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev +pub-c59cf4e950b142949df8861e60b3689d.r2.dev +pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev +pub-e5855431d98545b38408f52af50ab8a1.r2.dev +pub-ff0271d87324424a9aec83337e844a54.r2.dev +puertaselectricasprincipal.netlify.app +qaffixledger.com +qbstdfda.com +qpownthenewyhadvanceweb.weebly.com +raj-tiwarii.github.io +restrict-policy-nonadherence.vercel.app +reviewboss.github.io +rfgxg.top +riaayaoman.com +roadmap.binarydesignhub.com +robinhooldloegins.gitbook.io +rouzhda03.kambizmedia.workers.dev +rsjxzl.com +rtyuiuytgf.weebly.com +rubinhuud____llginnh.godaddysites.com +rudra-choudhary.github.io +s.team-s22.com +sadekk.com +sajsa.icu +salarahmad786.github.io +santanderpod.fsthosting.com +satinnaaoabbs.weebly.com +satyarthi.uk +scarce-army-wide.on-fleek.app +sdfvgbcvb668.weebly.com +sea.6e2efhxz.eu.org +secrbnsuppotyu9.weebly.com +secure-ledger-m-auth.webflow.io +server.2rk3.com +server.pxs7.com +setshinobi.vip +sextelegramxxx.pages.dev +shareorder711.weebly.com +shaw-101342.weeblysite.com +shaw-103098.weeblysite.com +shaw-106054.weeblysite.com +shaw-106665.weeblysite.com +shawsyncmailservercommunicationworkspace.weebly.com +sherman-relate-rev-baskets.trycloudflare.com +shobhit245.github.io +shopifysite.cn +shoptkoo.com +sign-in-att-108611.weebly.com +sign-in-att-108611.weeblysite.com +simxtrackredirecttszz.pages.dev +sjhsjjs82.weebly.com +skill-meta.com +sky-107842.weeblysite.com +smithjamessv328.wixsite.com +socx.ly +sparq.eu +spicyhotcoolsoup.s3.us-east-005.backblazeb2.com +spotifyl.vip +ssfgsfg.wixsite.com +sss.k999955.workers.dev +stonemartin1001.wixsite.com +stringroll.com +sukienffvip.doiqua-garena.io.vn +supportsecurity981.tempisite.com +talktalkserver897.weebly.com +tareq088.github.io +tbsl.by-on28.my +tcaconnect.ac-page.com +tejlksdoisd.com +telegcm.me +telegramjessica.pages.dev +telegrampx.com +telegramsexgroups.pages.dev +telezelm-ivee.icu +telgramsignal4.sg-host.com +telstra-102379.weeblysite.com +telstra-104033.weeblysite.com +telstra-104394.square.site +telstra-106968.weeblysite.com +test1.workersdev40050.workers.dev +tg-logrom.com +tktk.tktsk.shop +tokecn.im +tokeni-1601.vercel.app +towrewds.com +tpwalllet.com +trustwallet-zendesk.com +tuviaje10.com +tvjbqiyv.guru +twcht.twimobie.cc +twimobie.cc +uedy.pages.dev +ultsyncingsolana.pages.dev +upheldlog8.godaddysites.com +upholdloginorofficialsigin9.godaddysites.com +upholld-lligon.godaddysites.com +usol.shop +usps.com-cgkzkukp.vip +usps.com-trackaxd.top +usps.com-trackbrs.top +usps.com-trackdht.top +usps.com-trackgee.top +usps.com-trackhsk.top +usps.com-trackivo.top +usps.com-trackjjx.top +usps.com-trackmra.top +usps.com-trackmvz.top +usps.com-trackuqg.top +usps.com-trackvgb.top +usps.com-trackwbv.top +usps.com-trackyqb.top +uspsdana.com +uspsdant.com +uspsservicetrack.blogspot.co.id +uzomadj.shop +vedi.154-203-197-141.cprapid.com +vgmrm.top +vkkvdkdcmm.weebly.com +vl1.spaceysen.cn +vobroffexagru-4404.vercel.app +vrvtn.top +w1.5114559.workers.dev +waassistance.com +wallet-diagnostic.com +walletsecured.pages.dev +web-lupqrbm0k-uniswap.vercel.app +web.tlgrm.app +webmailserv3038z.wixsite.com +wk.xzte.eu.org +wodjrvrisixc.wixsite.com +worker-dark-queen-529e.servers5555599.workers.dev +worker-hidden-frost-ba39.yoveli7450.workers.dev +worker-site.aopages.workers.dev +wsa.osmqone.org.cn +wwwwwwsasasasasmmmsszz.vercel.app +x.tovip.eu.org +xhjxkj.cn +xixiajiaju.com +yahoomailquthorization.weebly.com +yungtee3.wixsite.com +zagbasamothega.dnsget.org +ziraat-kampanyasi-besbintl.xyz +zxl.cbbnbbc.nyc.mn +zzpov.top diff --git a/phishing-filter-domains.txt.br b/phishing-filter-domains.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..056b3541d7152a72beb62b02a17b929ff5a3b22b GIT binary patch literal 5427 zcmV-370l}4IC&wWm=Ay=WSIMB&i?uOX{!74CiqHFeD!W0;{guJNN@-``uD18YMbiR zhc$gzN~JczNneJndhdPc{6VICk|}`X0ic{aHs1l1av`Y;KHMwiG)if9r&1A5A>I3^ zXifU<0w>FxoC)5%=44}N)tefFh?McyT;4*wN_%`b4ZNCH@^?Sy7PqxuKYzdZy7{#J z^me@d$VhSUwY`4#^Djr`y8ZPtu7-n*j11F155q4u{u+k=eEsg{@4kmGSbzPDKNjwv zzt~Ii$DM?jJ(>G2U%&flah(HJ{PnZ7b__$u>RSNKzOo46f`Wv?U{Q*?C|sUCu+h;k%i;_@{qX{N-}g<8djSB@BY?nw$VA?t^P$jkOum$bbnspi%y!DkQ0&$n@_#a6N|w>;W%EfYbZY9 zbut=rY52gzRialeJC-IH5a7Zpbt3kX6TSRb?uejX0l%QeOj$p2pI;C>rjr%8nbQ8p z*B(|GLdZLWgtO!`6Gxyxxf#M%#tGG$i}2(`bBVr5?baU`KuQJg?nh^g{q!c1c}~0_ z-i7)CiI`hsAqgA(!RB=1WUcZTA(L?Lup!r z<3I@H%syzi7&+uolnh9Z!s&p-Tk*ilU>yq`r66qJWL#!4ijkV*4CiQw)0Gefkec|tmZBH5$W#B{zv`B zeH*d`noDC$op~-p2)}|$ap`G++Y5RO?%Gp-KgXHx$i#P()6TrUU!~04Upo4eMQ?H4 z`P{A}rZ#!%4_B!RJ9z+&%W51KI$`SdhzRHB%*so0Vk~(5F+SBG4SO~_zt`Iod7%3s*N_sQ zuH(8so~`kn^rNT#F)neXZ}U9!UCf6qpX`rzUY$YM9x$uV^V9NoEgi%&<^@7L~e~=1Yf~KFj(a2_cog@Qb%AlI60;JJt;JfMj4t zT6%iv(sjWedyHsp_C&~05b3O@SKDqcW)HgN=e$j!-t?DN=&kZeVdhdMrP*o zVCr70Dv4EPg%=G5;x+0(m%sGo`a53NE}dUmovk{do}s4swDL*rCUHm%AJ{yMmhj0~ zB1YsyBLl(~&QO9F&`K>)pAW-@rN6gNW7?w6=3a#X1H9MTsJU~084Or%S{*GPgGrF; zzwGHSjyMGxVfg6DQS$euBbQ80Y~hQ`&`jg#$Ok3F!t*lz%HW&wO=lcY-FK|U6;co_ zY4G*rf;%B?Ysc-m> zvY9Oxq%mWim+`I{pL`0PdPDV(F90opHqb&;^P!U8P^k%@LH&uzn;e1=?t_bN#<*C$ z=V!1}MS#6YO=a7tztUMf1ScM>56$j7oS?EH3gHip8=BF20cck$?>f2~g!VMv{_lIoWR7iNxlp>*;m+mC0Ps zhSOX#)gf79iuGj*Ca{?LID83XQjNfr`)IkKX@nykq8H4dX1FDrW&+jBrO(4d4QOo{ zmiOS6g7am6qZ0^@Jx z;-5xfl=p2sj=N>+!DFG3_NZRiD*xb;bF8XOUK^C**I>wHb;9Bf!h8{c zThd7&W&Nk)(Hom}7VAfB-^Mzxq@gCTQ3MH?7d+ z`>hWAQ~jf%p1t&_*L0T)2xzw?`T}dzxoXtFR$P`N)p8DQBfw(u0t=U%h1L(cLG%`4 z0x!eRUOSP3PqVUDQ#9CI?g!&aUTf(=P%T%t0vix+?|a>P{8qlBU|%adrTcWshrS|E z7Cp79Sh2rI5tSfavjuByB#~Zo-QL^X_gZiD5mO4e`xFo2$_#K1DAOJ>m264L7bH@< zjv=?3Emy7S6?3l=4mv`rdAB9^V;sqO`h#q_5ipKdg(|d%6D9?-F&~#rDLc@GTs#b= zM{JOMb-vg)v~WY?XP3>9CYk#NJL)L&9B`9(Cd`Tv;0|Su@1#vzVY6F%hwkTMx5Npl zX>_?ZEQ4Tj!_vb*MQ;m2Zz{f}E@E*w)Q;ja^{Kj5at9RR5x2J8QOoX&p~Dei^AS>j zK6baU;j_4gtwW+x;>mr;MN#3i8oTLla@sYsy~}1jD1F-pY)tayvfCa%xxlSCV*kUy z$IzL*O%P*)^2{V+hC$~xRqM=pZko2D1}@y~p&+O`1-#0Ay|&iipn){>xE2%zku^{~ z2uV^5X|hQyyKTGkCL-03sr)8x3ZFaH%Ter0vNV2e_mPk7u4q~|jzhLR9q#iCw4i-? z%jj2Q@|%xHd!_sO@;jCl0%SDn1B~Q+a+yq)blgO1LCjFmPhqNiCBIGb@V(EMh?dro z*mQq*XHGyf*W2HE2lz9>=c=J#)Zn5m7sVp>G`n{Z)MGU=@ETWc(V7!sV5PV^08F4s z$RGCcxnEe?-HnE?X`BE+9akz@f5VM9e_p9!;*|4^kRVwUeJz&{y9eAV-q=86t!fC! zJsTAI>zxsjJuyVsuqgME@Frj1mr_C0*4%bmZOrfgt{b$rBW48Z!S@=W`i;%h7WK4} znzv+Fnzcjos6zl>P>5;BE%f=d+Ymd_+%Y|9h=Px>wz!2+$ysocxjBSU1)K+}uB1qEqXTNWmICu?gr=bZ0c))Z15> zqR@&rOK1(Qs|A4dz9}3~(0H3qUokcB9yKnnfF~SBJ__^&ovMkL6wzZD@Xr35eT-;w zCvqB>B8`07b>8tfeHmBpQwJ#>Sx%UzF+KCMgMh!{O^c^Cf$7$iCVDnUL z%@qQCNieZNjLyG}&mph9iVZHFrN>e^?qS@Gh<62|?ykb@ExV3~*&NG2y_OfxY6>tKakE|trOX`8Kc$KD1tTh% ziF@sO_jEhxfd#zT{JpqI!x7mPlR!LMUATBV-t!NZUsDI>`D=o(5lOis5mE@c*qX2f z&xiei{mHoCzhru=nqaahw4Sg{08Ss@P9_f>sh_B}Y`V7#IYnggg%#sBs;SD8f9!sAX zhorraJ(2MVuz8T@Coo^PpgnU5jO!5k%w^TLt8GKp+C(K3nnYx2+$Ij%hY%)i0)ddd zAG=0gA@chZIb1E|^4NFe&)LF>kKH0){pPP073H3++1vNoP{neFwx?Csd;?W5?Q2IpdVkV9=QeC>sDTeiLg>gx9Qqj zFhQ`cF^mL^D=A6az0Ky~#C7#csPia&>&_9uc&$|KS!x`vqiZq<#V3bakIsn684#ch zV-nqL8E{1l%jZJunv8tZgBV6|00M5Y zuuQ`sQ6r#Wd{oRBtCndp5-)C5+NUKZkWNipC_n)QHJ8h1M>Y*?Fd)mPlhStN(>U2d z8KJmQ%OU_L7^Jq+Jxc6Uj!rF;Ma?)Dav0nwoEbr~0VlMJoL%UXR7SaZ9K?VE#h~pt zDKl9y;j9%07qVhtxt^q5gy8d}mvNbe1VC=&WXloy%-GBZjnh0zF)j?oabTJmHz;ZO zFm1cBgPgQOJ?TLx+2qZTl22@KI5E>7VJm4A7_l&rC`LQ$!GUFx^BG`TT-sr)nL9H9 zN2?bxnhD0)$zd5s>kPqc zbO&SPVw}K54tf-95sP&$$TZ?KXg;aMy3lb%VFxXyNm^mmvP{|yLXMMFi*lN|u%wbw z@X;JEh39oyD_<$tlradDq@FvY)P`sz3Aj3^A-ZUG2 zamoqoh6OdJ?$wC^I8{2=ntFS=9vzwLc5`~&C|ZWs)1sV0Hrt)l2bG%qLqf8*g>`KT(vp% zWW%Clwue9`WazfGPi6@iU#Q#mD5HTTO20o9pdl%ElK;PFZq=9-pl(@jzA+(3LvG85 zcO}u1SE}tf?+k6BLP5ORXPQE|YGwHN<(py!8CTWn^EAEhd#mqvRV?ZB?n5AA9`oY2 z7H)2;6Rhal1~FW-o}4KL>hNneUmEULJ)nFj_E$Z;xwqU9l)S27Y?aeq3D%DjgBB_? za{(UIGpg{&&AU5{ok3K$R=4J2)=GEK>>Q-36fukh3hiechA|#*sw}`%lGkDN-D7g@ z^ar)se>#vAtX18q&-6?$h!{?ULHTwsYUC*a`3N6r#4N5Bk^VIs6#NWI9Z%CWP<@k} zn4}}vX?A2yptzSCeYNFm-okBI|l^YunCiieZpLSC_YyguIp<TG zFWOqOm;X&uJR#K+TW=UadLebTj;{%V)m8f}-4S$kB#N?%uW zv>Ft>hqly!TvwF?q>dE*fV2(}@~ViD)sHP7w|vS)NH#r$YH^yECBl{kOG5B#PGLG~ z4$WosdU%%-v+mE{_hZ(zzu^*+fUlO{V^`9pD%q_mt%yon-Ie^AmEP~KVl2?o`6%_z zs&uYe>C)#S_a{8Jy+_T79yd0oB*$2i+z9&6!v5q4_TBuS;6#gb%$#d1@iD-;@2B0Z ziE){+&M;E4WZo4M1<}u}hetsC!df~JV!*p(&T_VN|2fx4 zO@*}euqG~LR&#{-gIVne9-9j_3H|sK9fzItc1u|R)G`XxkiBL1w^t1>8dQMd^e}1q7;j8=b&Y~sy0spU+A4r z41N}?4U2=hCLq^X4)eeYG}rjaNzY~N3hjEAtZ*@7jFtGhTLZ>3kRDb=+jo0^_jmLL zU;p*+_VDf-qAB4#+XrAEjf275J*^EWmdP;r!EJ44Tr-|JQ3y}KmJ2HCI0^LzdC6CqY#FM-=^?#D7Q8|3&@3Jtk>{{rgA!gOlyYKh1ml zAB_?BS&VG^XSDfuJ&1|4n5uJbvVZ^eSBsem4VfPP8i-nn5kVuB6Xvh!CCuv`z5l0V zVzmFA&i_zHR}AvM^=z0IQ%_>toB96#;|Ip-=GR!#u}&z}8{Iz1U*B2@|CKmG2}X&> zMOYV7*-|n(N}i$9(^rzmagoJY$kF&UAWTn*kyzo9gaZZNZ_Sbs>8fwI7S@EQ;#os=@!_T%PAa%Q?l6( ziHBicBpY@S@wS;z8iFnx6(&H-tL&qLTC}wiC9_<}AVw~SiEKicCQZZVHj17xw;a<$ zJ)|{c9_2>Nd0EpWhzb@h6>$<0P8!Cz1=89Xi@Y>cB9Pph2APZu<2(zJC=KGe4B{*f z*<{G%>-}`bTOc!n!&Zsmp%}0oJ(n1dKm}Bz(A(_Z*z)Ekq<(d^of6w*G*%63xa^8` zFcIG`a7H!|hgKCy=v9r*1#uLob@{TcU)}eb1ZUuLOB18z%MU;7Uv%-<;Zp&=bzT*$JL|4*?S%718IK~6I+HMqNL6~3~_WnRw*pm zjlki+=>NKbw^Zj=LHGa<@oI3Hdv;x5J8agZ<>&%puegC{C+%jP7!GixG0jDt@gPs~ zCde3JK~;z(NDIQ6h;z!zGKivJ5aP*NcFX2z2zzPz5K}1W_Tx&^oH2Hcm*z^T@5gmr zk4Mt}%QEe=a^mK$<>Z!iPKfHBgtbzaPp2QHf#A8$n}*m$lRpgAiHT?S zHqhHdC z%{-!Vrbf)eJPd+!ErTovK{*R(*=)Jnb_PSOelFOJP_p@p?qHr4ZwR+n6xBPbQFm*) zGZfGn?h`O#UqA&?HF?291{Vm8t<8KJa6b3x9-(cxrTYu?0t{@Sy574(mPSb##T<~p zc#y>+4X8*+kkn}+a*{=Y=N=)_C|ZS?Z{6L&X~CN}XNX|LJ74fNwrNZulrURp50V9T zm;u-yXVtJKI0!+oD?5P8d~6{=ImrvmTwmw{YfuwaSyrdNm&;WXxi6!^kkx7HSYrYs z1PAMS$Y3R46rnR4ILyo&<=x#bTL%^ehwQ=wm5&0e6@)Z;5$6Fr;xNvBc0plTpHxW* zpq=E;O=6wKxRbY7CL4#7C`TN-o>=(=9U|`aax_-NgTB!>0<2bemx~xB(@Fuz&eY+T z%rB+cm(~`A{SQcTJBz6~wq)ljRuXtB-{q<{?WM9J*xh7R)Dg%kbq?Dp2R*^DWhUUBIqy!! z!sn&y#r;$wh~0oFuq*T#P)rYf2}-uAtjYr~g$Q1-6LbhWLl4wm43xiUOW^V7Q@Ia{ zi27Bd#`L@pF={jD*#_FMPI3&t0!zYH`M5D0#FwxWVK4y@9X2DZG4K!#ik(gGqSkt_ z6==m73B&_~YttSCtU=&J5r7h}DXu}ZB(ymlJJE1q@7bv@P_wzoRlI8Lt?5^x57yI& zUe5}#%OWULK|+M%0_*C4gTs!6dn1K-e-tTB+4)R2!i=ra15sll-xLGDISQZN2VPQTr@A@T{R!C_ryGY{XG*1-PJiz9qR9OWZU1T-g= zqJD5%tAjG)%^4ghD?on3j)1X|VI=ZuzkaPjo~1=ud0#~d*XGya5ZqfcUjv}Vc7}B1 zEcD#lZXO$9FA1@TfX2covZ@6`c9B5XA$obUee5WDSe-8NrlY$f8# z5#T9D9}7~gdrz@jtpFEB^T6m8ehc6??BVuFB`xelzzn^0dwe*LYVb$#UXVrL%L^}}5smDnU7kEQWj*!-$WlITxWWs-laQW|Hi zbOqvj)-D~r$mK|*HunrEq1)-rGfKQVGKDH|2#8wq%Ao97H4i&h1Ids05y5=zr}QWJ zcLC<9I8eLW;QUzMu1zTB5LStjNl)Eo;nMW(7`x|8wq;S^WBg0`JiP4$0;XXEpw%arJc=A# zSn3(n6+Ha3h0>1u8CemJR@Gi~BO4cDs;a0sY3U{ipp{Pm9kWUW9bC}hCLEZGb;ffQ zJnZPOdtowv-84G$MW}&XJK-pdVhbLg_Z}tQ%(|Xieu?*Qi1nT8#U%l8gWH?!0D9LY z}2Si zgu@m}{-p%sGqW?tt}oT_MHHlJTHs9mnbHyHAaH-e`Pc22H*TnwgWf*}pxbzYETxM8Fza{y zhU04kAV5}D*@XcO#H$2$i_xI9(Vl(R0LM%>Iv|W3{Yy7jNqpK4ziWpgstc?2R}R9j z4gOALmh5`U!Zzh8lVlbBOMs-n+*!Ir0_cXy>s^EYdA#YM} z?}`;!8EE9RTzt?V6&brD{oCN5T*#5?0&mh(I@`Ll{xq9F>Q0iww~~gyG)2c{l~vW% z#SJh;e~AKBLKznY&a{_dH-(chM1uDovu=T3^q$o%GN0|N)3=1fc?*VQvPcs z%NC3p5nh%flyuu9;Md`a{9NAmG)g`KkTf7Jw(gRF#`9Ac5C}oPbF6j!mMI;@8vKli zf;dRhAjv*70(c$P=*Ob^(Mztj!{SD;=##mOjobEfk)IVajue5&2*NMy*n*KBPEj+2 z*2LRE$Qu5oamX!W7v$9bA_j5Sj5uKsZ#DjkCOR@lx=22@gK^Q&*k~&;_`FxaRCNd;YySAnm@qme$Tak z>jirQ=WBz*J0Ick*=DEk*gs#-)b1QEMfR4WMhMoiwEr92{SzzJCd zT*(VQCo^|*)9en=+TFt;ggYI&X{JGhShQ#arE$ZuqG2Q>6-$y_G$l_+T7@P#=0Mvx zjcJrcF|dzhBCBeWvABp(C=hc%q;uPnmsL`6LRgVCEG1Q1XA#LFUePG#mvNJr3PG}j zXBf4KM3vG!O$%BRhG;q>m$sF^(W!YtMV`@yS7j8(X;LHw=pZfAbK5kkizv$B(1^&A zG_DfHcvTmLzaZw-W!$VFc~cb##?clqL@`OsN+E$ zAW=>^Kr}nI&Ep0$!j~s$n&pUx>W0Mxk&!3_uMv@)+7@}ms-}b+fI>wUVVa_11m4p;^a~ZcP(}oo! zMYLIGF`nYG$)h@sL5E2mU+jTYF$|2-rb?@sW*e#eko z;K0s|lqVnR<2TIezVGixJ%ZW_&Gc`Pm*;b1r?uir3!hXwlSPCv&yExDgPsgjg2sb1UfiOwx5x9~hKMU? zId87LWG>9?$De2Z|L~)f=keV;lQlCpBw(GMdFM&SuSI$9g1E>g2RX2y{eAy>yuly% ziyRB;Y)FSFpsdajtM#8(Al5gN=3!%<&qscLu3){t9|_Tf(hFZg#YT(+^_=@J3*yd1 zKny6T50FDW21iEP?*c;ArKN14#n1bzV+cXQLL{Q;;6-1_3M-hQd(^vcbeR|mP_3r$qL;A?N;q~E!+A}VX$K&J%_v>=) zuOZ4fz6j8fb^j6|d;2!xRRvE`{h_Le^6XDlMUj81vfIc!4?7m(iQ7EBt|Yu|?Ro91 zd;*lrN4^M>1%54nAB!m5ez?f8ou-|1NtT~2q0D!B~XOQixI;=NuspMk4BY`}m;+(7ZIUDBkw zkSD9zBUIZL6lU%)G&}$_I_;Rx7W?#zO+o1bL97e>W!9d^L^uv_dkg?$gj&>LH@0c< z_c{XrriXj4^J|*aIz1wk0d*eZD2lIroKIsJ{rWn>&b<_4(_o5_Yk8kZ&=P-Bg?$MZ z?8WhU*nSA4+iFm-E1v{)>;1pOTB`aI&N~csj}Tw}+G|Ix3h5T;5$YPYFUJVe2-lel z2@8&!Vc%2SFeW6j{Pm7A!v>%8{ysi8C>?fr+RN{n>G7)%UUB61beH|D=~Jj7K%^vg zm_o_k*xzEQEVOOVeP52C3Th+!U3mHSvCyyDEPDUa=u`^|dHICtS5;BJU$FyxUHrYR z5IKX1M3-#_=Lg+3`bgcn-t{5=v;C3YcDfgA4CSytjWY0D_w1#dUX57!0r76~Hx^2~ z7HnqgUiYX^gxk!VYasbo`pL{((&w`(`C$n-M zW_(Pi6&cT)I8UAM?yjxg9TDnwR|r3)%^o02qO8Ads{hbf@jxlrB3yj0$JB?aW;@v< z`_uN%e(tCJ#QiMY;e$Mm4F9#18vCJ?ckV-JE5wJ=4yt`Gm5csRdb>S7ln#b`DqWr* zO6Pm~p%iZNL+MJF52f4vS6l9P?oj3a;(oro66AZ2bIj;-q4N{ehu;p>FF@u0^ee}u z9n7%Lxb*$Pd(MX83^9v}!`&rqR*c?zESh@L5D(ItImoi;@~z8a7B}w0t#O#gahB)T zk2qFB04vscQn*j>ItHLt?dTZ_JCz>XfS;@v#2`@fbT@Q}`T&m8uAp`&0X)%kK$_wE z?c3F+QCdAOP`&oyY$`}yO7vkh$X*g7Guxr--hK|{!(!Sq`a z^3k?HH$T(yjY|O1?7#dVRt8j9@L;F*k7k|^xJF7xglplrv2Yl_p3g}ihvEMNaCjWe HC@%m2C1>zl literal 0 HcmV?d00001 diff --git a/phishing-filter-hosts.txt b/phishing-filter-hosts.txt new file mode 100644 index 000000000..49373d966 --- /dev/null +++ b/phishing-filter-hosts.txt @@ -0,0 +1,454 @@ +# Title: Phishing Hosts Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +0.0.0.0 1nvest.bigbantbaz.top +0.0.0.0 25116414.cc +0.0.0.0 365365news.com +0.0.0.0 365f09.com +0.0.0.0 750115.cc +0.0.0.0 823pages.pages.dev +0.0.0.0 95564339.awi.za.com +0.0.0.0 999fc.vip +0.0.0.0 a.yyyy.cf +0.0.0.0 aaaa.whilefish.xyz +0.0.0.0 accounts-microsoft365.weebly.com +0.0.0.0 accounts.0ffice365.support +0.0.0.0 aidanochka-tabys.kz +0.0.0.0 airbnb-clone-sahinur.vercel.app +0.0.0.0 akbarinewv2.morteza638n.workers.dev +0.0.0.0 alaindemeuron.wixsite.com +0.0.0.0 alexa81o.github.io +0.0.0.0 alienv2ray.pages.dev +0.0.0.0 allegr0llokalne753724pl.art +0.0.0.0 allhrteam.com +0.0.0.0 amazon-clone-by-sudip.netlify.app +0.0.0.0 ammuvicm.work +0.0.0.0 amyr.iran-cyber-net.workers.dev +0.0.0.0 antaidossiersuivamendimpayeerf33.zynekcctv.com +0.0.0.0 anuragrauniyar.github.io +0.0.0.0 appeal-voilation-policy-issues.github.io +0.0.0.0 apple-id.cc +0.0.0.0 apri.154-203-197-141.cprapid.com +0.0.0.0 arvestcreditcard.embarkdigitalonboarding.com +0.0.0.0 asdfjeiod.com +0.0.0.0 ashleyproberts.wixsite.com +0.0.0.0 astounding-trifle-b88a2b.netlify.app +0.0.0.0 att-101397.weeblysite.com +0.0.0.0 att-102641.weeblysite.com +0.0.0.0 att-107756-104508.square.site +0.0.0.0 att-108102.weeblysite.com +0.0.0.0 att-108651.square.site +0.0.0.0 att-mail-101246.weeblysite.com +0.0.0.0 att-mail-105533.weeblysite.com +0.0.0.0 att-mail-109459.weeblysite.com +0.0.0.0 att-servicce-mail.weebly.com +0.0.0.0 att-sign-in-107078.weeblysite.com +0.0.0.0 att-yahoo-mail-105061.weeblysite.com +0.0.0.0 attcom-101415.weeblysite.com +0.0.0.0 attinc-101356.weeblysite.com +0.0.0.0 attmailonlineaccountupdate.weebly.com +0.0.0.0 attnet-100294.weeblysite.com +0.0.0.0 attonlineservicesa.wixstudio.com +0.0.0.0 attonlineservicesa.wixstudio.io +0.0.0.0 attweadminservices.weebly.com +0.0.0.0 auth-sharepoint-asr.vercel.app +0.0.0.0 avertisystems.com +0.0.0.0 b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev +0.0.0.0 b35ccc.com +0.0.0.0 b35lll.com +0.0.0.0 b35www.com +0.0.0.0 bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz +0.0.0.0 bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz +0.0.0.0 bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link +0.0.0.0 bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz +0.0.0.0 bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link +0.0.0.0 bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link +0.0.0.0 bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link +0.0.0.0 bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link +0.0.0.0 bbf-alpha.vercel.app +0.0.0.0 bet365t3.com +0.0.0.0 bet938y.com +0.0.0.0 bet958c.com +0.0.0.0 bhngfd3.pages.dev +0.0.0.0 blackdasblacks.shop +0.0.0.0 blsckdagsever.pages.dev +0.0.0.0 bridge-9wdpjmsoa.pancake.run +0.0.0.0 brubreumummeddoi-4514.vercel.app +0.0.0.0 bscusdty.top +0.0.0.0 bsozvycr.icu +0.0.0.0 bt-102368.weeblysite.com +0.0.0.0 bt-106861.weeblysite.com +0.0.0.0 btjfh.weebly.com +0.0.0.0 bussinessaccounthelppage.click +0.0.0.0 bwfujmww.icu +0.0.0.0 bx.sfdsb.icu +0.0.0.0 c.cting365k.cc +0.0.0.0 c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev +0.0.0.0 can-post.cyou +0.0.0.0 celery.sa.com +0.0.0.0 cen4-six.vercel.app +0.0.0.0 cf-worker-pages-proxy.1352562939.workers.dev +0.0.0.0 cf.13084493.workers.dev +0.0.0.0 cf.iwoai.cc +0.0.0.0 cfcf-8.pages.dev +0.0.0.0 cfr-reed-taxi-wayne.trycloudflare.com +0.0.0.0 chain-trt.online +0.0.0.0 chainsolapprove.pages.dev +0.0.0.0 chat-wa.xyz +0.0.0.0 check282.tempisite.com +0.0.0.0 chore.pink +0.0.0.0 ciftcininbankasiziraatbankasi.com +0.0.0.0 claudiorojas.cl +0.0.0.0 clivenicoll44.wixsite.com +0.0.0.0 cloudflare-workers-pages-vless-a2j.pages.dev +0.0.0.0 codt.digitasianetwork.workers.dev +0.0.0.0 coinbase-com-18690.subttrepimop1005.workers.dev +0.0.0.0 coinbasewallet-verification.198-46-89-184.cprapid.com +0.0.0.0 company0rder943.weebly.com +0.0.0.0 completar-la-verificacion.vercel.app +0.0.0.0 conductibili.fun +0.0.0.0 correosprepago.bnext.es +0.0.0.0 crenadenuddoi-2258.vercel.app +0.0.0.0 cryptorectification.com +0.0.0.0 currently5267.weebly.com +0.0.0.0 currently70.weebly.com +0.0.0.0 currentlyatt909.weebly.com +0.0.0.0 d.afirkz56924.workers.dev +0.0.0.0 dio.azrealonce.workers.dev +0.0.0.0 ditgong.com +0.0.0.0 doc-online-1881.on.fleek.co +0.0.0.0 docsignauthorizationrequest.vercel.app +0.0.0.0 docusign.com.bestfinancebroker.com +0.0.0.0 duang-5dh.pages.dev +0.0.0.0 duvhkeq.pages.dev +0.0.0.0 easyaccesscommagebn.com +0.0.0.0 ebay8787.shop +0.0.0.0 ee-account-home.web.app +0.0.0.0 ee-service-help.web.app +0.0.0.0 ee-service-portal.web.app +0.0.0.0 eln3.vercel.app +0.0.0.0 enormous-orchid-howler.glitch.me +0.0.0.0 espaceparticulier.life +0.0.0.0 ets3qe9ooms8t6i8.pages.dev +0.0.0.0 excelorgo.com +0.0.0.0 falabellacom.dominiquepg.com +0.0.0.0 fdesq4.pages.dev +0.0.0.0 fdsfjiwe.com +0.0.0.0 fdsjfkweow.com +0.0.0.0 fekoulamevebouna.freewebhostmost.com +0.0.0.0 felomane390.wixsite.com +0.0.0.0 ferngos.de +0.0.0.0 fieg.84yr483rhfwieujro348ur84.workers.dev +0.0.0.0 figinstenatecom.pages.dev +0.0.0.0 finansfaizsizbasvurum.online +0.0.0.0 forested-mirage-samba.glitch.me +0.0.0.0 formtools.com +0.0.0.0 fortradesetup.hamidamnaie.workers.dev +0.0.0.0 free-5436781.webadorsite.com +0.0.0.0 frogsrus.wixsite.com +0.0.0.0 fshraha.pages.dev +0.0.0.0 fukshumx.world +0.0.0.0 gazruinv.web.app +0.0.0.0 geaoolsv.pink +0.0.0.0 geminiwallete.godaddysites.com +0.0.0.0 ghjhyu.wixsite.com +0.0.0.0 gimennlouin.gitbook.io +0.0.0.0 goldenrod-rowan-submarine.glitch.me +0.0.0.0 gorgeoushome67.wixsite.com +0.0.0.0 group11-vvip-hot-girls-combi.viplch.online +0.0.0.0 gruppeflorian.com +0.0.0.0 hanisfir.shop +0.0.0.0 hedayatfreedom.hedayatkhakpour.workers.dev +0.0.0.0 hello-world-morning.freekite.workers.dev +0.0.0.0 hello-world-muddy-cloud-f45b.mfoster0425.workers.dev +0.0.0.0 helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com +0.0.0.0 heluapla.shop +0.0.0.0 hemanlau1.pages.dev +0.0.0.0 hezhouruan.552008598.workers.dev +0.0.0.0 hgcdhbxnf.weebly.com +0.0.0.0 hjrhd.top +0.0.0.0 hk04-123.pages.dev +0.0.0.0 hkmqo.top +0.0.0.0 home-100317.weeblysite.com +0.0.0.0 home-102207.weeblysite.com +0.0.0.0 home-107257.weeblysite.com +0.0.0.0 homelogin7t6sdfcgvhb.weebly.com +0.0.0.0 htaflytz.baby +0.0.0.0 htaflytz.black +0.0.0.0 httap.l-teiegram.com +0.0.0.0 httpsbellsouthnet-102649sitecom.weeblysite.com +0.0.0.0 hup6r.com +0.0.0.0 hy.fuckgwf.eu.org +0.0.0.0 hypophysecto.fun +0.0.0.0 hzuayvvl.red +0.0.0.0 id2.xbenihime.us.kg +0.0.0.0 ikergalindez.github.io +0.0.0.0 info-delivery-bg.com +0.0.0.0 info-trackingcs.cc +0.0.0.0 info-trackingiax.cc +0.0.0.0 informed.deliveryhbo.top +0.0.0.0 informed.deliverytcw.top +0.0.0.0 informed.deliveryxs.top +0.0.0.0 infringement-service.com +0.0.0.0 instagram-clone-in.vercel.app +0.0.0.0 interbenefitprestaciones.referidosweb.click +0.0.0.0 iouwerty.weebly.com +0.0.0.0 isnworldwide88.com +0.0.0.0 jaydeep8806.github.io +0.0.0.0 jeanandpeterwilkin.wixsite.com +0.0.0.0 jetconstructionsgroup.com.au +0.0.0.0 joeandvelma.wixsite.com +0.0.0.0 journey-x-pro.com +0.0.0.0 jsdfchkdsds.weebly.com +0.0.0.0 jshattkee.weebly.com +0.0.0.0 juliusmasih27.github.io +0.0.0.0 jung-sohn.de +0.0.0.0 katiebllair.wixstudio.com +0.0.0.0 katiebllair.wixstudio.io +0.0.0.0 kdlmo.top +0.0.0.0 kenzmail0.wixsite.com +0.0.0.0 ketura2010.github.io +0.0.0.0 keucroilluxibrou-2718.vercel.app +0.0.0.0 kuconlogin-ui.godaddysites.com +0.0.0.0 latam-onipojes.vercel.app +0.0.0.0 layanan-bntuan-resmi-dna.prbu2.my.id +0.0.0.0 ledger-com-updatefirmware.aparecidovisentin.com.br +0.0.0.0 levappoprauqueu-4688.vercel.app +0.0.0.0 leyoixoimmecou-5619.vercel.app +0.0.0.0 linkbokepviralindo009.vipp.blog +0.0.0.0 liveairdclazmersn.pages.dev +0.0.0.0 lo6-cas-projects-64947843.vercel.app +0.0.0.0 maatamicklogginns.gitbook.io +0.0.0.0 madebybmr.in +0.0.0.0 madhu821.github.io +0.0.0.0 mailupdate87.weebly.com +0.0.0.0 maine619.github.io +0.0.0.0 mainnetverify.pages.dev +0.0.0.0 mazulyta.pages.dev +0.0.0.0 megrebeikenneu-2106.vercel.app +0.0.0.0 mendhfjpl.weebly.com +0.0.0.0 metacareer.com-case37169314276.com +0.0.0.0 metagalaxy.pages.dev +0.0.0.0 metamacksiologus.godaddysites.com +0.0.0.0 metemrsblogin.gitbook.io +0.0.0.0 meyetamaskiwalt.gitbook.io +0.0.0.0 mianfeijiedian.lawcpacpv.workers.dev +0.0.0.0 milanharvestfestival.com +0.0.0.0 mirobitsgt.github.io +0.0.0.0 mocp90.pages.dev +0.0.0.0 mostafa2.mehdi84888.workers.dev +0.0.0.0 movie-firebase.vercel.app +0.0.0.0 mubki.hp.peraichi.com +0.0.0.0 my-site-104564-105934.weeblysite.com +0.0.0.0 myaccountsignup.net +0.0.0.0 navy-nose-4544.typedream.app +0.0.0.0 net-flix-front-end.netlify.app +0.0.0.0 netzero-webmail-105996.weeblysite.com +0.0.0.0 new-currently-1-23-24.weeblysite.com +0.0.0.0 newattupdatemailboxkidlyverifynow.weebly.com +0.0.0.0 nfty-proj5.vercel.app +0.0.0.0 nnbsscnaceesngsetr.com +0.0.0.0 occinamete.cfd +0.0.0.0 odovsccs.weebly.com +0.0.0.0 officalourtime.weebly.com +0.0.0.0 office36503.com +0.0.0.0 ohscorgza.github.io +0.0.0.0 okm.znt.temporary.site +0.0.0.0 oliver752.github.io +0.0.0.0 online-e-commerce10.com +0.0.0.0 online-e-commerce11.com +0.0.0.0 online-e-commerce12.com +0.0.0.0 online-e-commerce5.com +0.0.0.0 online-e-commerce7.com +0.0.0.0 online-e-commerce9.com +0.0.0.0 orange234.wixsite.com +0.0.0.0 orgmail.weebly.com +0.0.0.0 ourtime.datings-information.workers.dev +0.0.0.0 p.updateinfocl.top +0.0.0.0 p.updateinfocs.top +0.0.0.0 p.updateinfoga.top +0.0.0.0 p.updateinfojq.top +0.0.0.0 p.updateinfolw.top +0.0.0.0 p.updateinfoor.top +0.0.0.0 p.updateinfooy.top +0.0.0.0 p.updateinfoqv.top +0.0.0.0 p.updateinfove.top +0.0.0.0 p.updateinfovt.top +0.0.0.0 p.updateinfowu.top +0.0.0.0 p.updateinfoxb.top +0.0.0.0 p.usertracktxz.top +0.0.0.0 pages-108-tg-cfzz-ip.pages.dev +0.0.0.0 pages.tempisite.com +0.0.0.0 pageverifycenter.com +0.0.0.0 patjimmy323.wixsite.com +0.0.0.0 paypalloginin-usa.blogspot.com +0.0.0.0 paypalloginin-usa.blogspot.hr +0.0.0.0 pcmag.anycubic.vip +0.0.0.0 port01-acf.pages.dev +0.0.0.0 portal.chiaveggies.com +0.0.0.0 pruhuffopraussou-5681.vercel.app +0.0.0.0 pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev +0.0.0.0 pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev +0.0.0.0 pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev +0.0.0.0 pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev +0.0.0.0 pub-2801359d2be54bfd8701132626efeb73.r2.dev +0.0.0.0 pub-3096005ebeae423182ccd89665564d8a.r2.dev +0.0.0.0 pub-46a5f86348ae4aceb3591d126020999f.r2.dev +0.0.0.0 pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev +0.0.0.0 pub-51f896deb233450089fc1a520e6ed957.r2.dev +0.0.0.0 pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev +0.0.0.0 pub-682ad3b65d944376b919745aae3c56d4.r2.dev +0.0.0.0 pub-722720be67154192a1102b2cf085d306.r2.dev +0.0.0.0 pub-7d056bfeb6b04852801553620fe62c0a.r2.dev +0.0.0.0 pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev +0.0.0.0 pub-873fc6a3edb941c6a17f50911dfca518.r2.dev +0.0.0.0 pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev +0.0.0.0 pub-aab4be29317b4ec296517a557db12622.r2.dev +0.0.0.0 pub-ba5a046c69974217b0431bca4ba43740.r2.dev +0.0.0.0 pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev +0.0.0.0 pub-c59cf4e950b142949df8861e60b3689d.r2.dev +0.0.0.0 pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev +0.0.0.0 pub-e5855431d98545b38408f52af50ab8a1.r2.dev +0.0.0.0 pub-ff0271d87324424a9aec83337e844a54.r2.dev +0.0.0.0 puertaselectricasprincipal.netlify.app +0.0.0.0 qaffixledger.com +0.0.0.0 qbstdfda.com +0.0.0.0 qpownthenewyhadvanceweb.weebly.com +0.0.0.0 raj-tiwarii.github.io +0.0.0.0 restrict-policy-nonadherence.vercel.app +0.0.0.0 reviewboss.github.io +0.0.0.0 rfgxg.top +0.0.0.0 riaayaoman.com +0.0.0.0 roadmap.binarydesignhub.com +0.0.0.0 robinhooldloegins.gitbook.io +0.0.0.0 rouzhda03.kambizmedia.workers.dev +0.0.0.0 rsjxzl.com +0.0.0.0 rtyuiuytgf.weebly.com +0.0.0.0 rubinhuud____llginnh.godaddysites.com +0.0.0.0 rudra-choudhary.github.io +0.0.0.0 s.team-s22.com +0.0.0.0 sadekk.com +0.0.0.0 sajsa.icu +0.0.0.0 salarahmad786.github.io +0.0.0.0 santanderpod.fsthosting.com +0.0.0.0 satinnaaoabbs.weebly.com +0.0.0.0 satyarthi.uk +0.0.0.0 scarce-army-wide.on-fleek.app +0.0.0.0 sdfvgbcvb668.weebly.com +0.0.0.0 sea.6e2efhxz.eu.org +0.0.0.0 secrbnsuppotyu9.weebly.com +0.0.0.0 secure-ledger-m-auth.webflow.io +0.0.0.0 server.2rk3.com +0.0.0.0 server.pxs7.com +0.0.0.0 setshinobi.vip +0.0.0.0 sextelegramxxx.pages.dev +0.0.0.0 shareorder711.weebly.com +0.0.0.0 shaw-101342.weeblysite.com +0.0.0.0 shaw-103098.weeblysite.com +0.0.0.0 shaw-106054.weeblysite.com +0.0.0.0 shaw-106665.weeblysite.com +0.0.0.0 shawsyncmailservercommunicationworkspace.weebly.com +0.0.0.0 sherman-relate-rev-baskets.trycloudflare.com +0.0.0.0 shobhit245.github.io +0.0.0.0 shopifysite.cn +0.0.0.0 shoptkoo.com +0.0.0.0 sign-in-att-108611.weebly.com +0.0.0.0 sign-in-att-108611.weeblysite.com +0.0.0.0 simxtrackredirecttszz.pages.dev +0.0.0.0 sjhsjjs82.weebly.com +0.0.0.0 skill-meta.com +0.0.0.0 sky-107842.weeblysite.com +0.0.0.0 smithjamessv328.wixsite.com +0.0.0.0 socx.ly +0.0.0.0 sparq.eu +0.0.0.0 spicyhotcoolsoup.s3.us-east-005.backblazeb2.com +0.0.0.0 spotifyl.vip +0.0.0.0 ssfgsfg.wixsite.com +0.0.0.0 sss.k999955.workers.dev +0.0.0.0 stonemartin1001.wixsite.com +0.0.0.0 stringroll.com +0.0.0.0 sukienffvip.doiqua-garena.io.vn +0.0.0.0 supportsecurity981.tempisite.com +0.0.0.0 talktalkserver897.weebly.com +0.0.0.0 tareq088.github.io +0.0.0.0 tbsl.by-on28.my +0.0.0.0 tcaconnect.ac-page.com +0.0.0.0 tejlksdoisd.com +0.0.0.0 telegcm.me +0.0.0.0 telegramjessica.pages.dev +0.0.0.0 telegrampx.com +0.0.0.0 telegramsexgroups.pages.dev +0.0.0.0 telezelm-ivee.icu +0.0.0.0 telgramsignal4.sg-host.com +0.0.0.0 telstra-102379.weeblysite.com +0.0.0.0 telstra-104033.weeblysite.com +0.0.0.0 telstra-104394.square.site +0.0.0.0 telstra-106968.weeblysite.com +0.0.0.0 test1.workersdev40050.workers.dev +0.0.0.0 tg-logrom.com +0.0.0.0 tktk.tktsk.shop +0.0.0.0 tokecn.im +0.0.0.0 tokeni-1601.vercel.app +0.0.0.0 towrewds.com +0.0.0.0 tpwalllet.com +0.0.0.0 trustwallet-zendesk.com +0.0.0.0 tuviaje10.com +0.0.0.0 tvjbqiyv.guru +0.0.0.0 twcht.twimobie.cc +0.0.0.0 twimobie.cc +0.0.0.0 uedy.pages.dev +0.0.0.0 ultsyncingsolana.pages.dev +0.0.0.0 upheldlog8.godaddysites.com +0.0.0.0 upholdloginorofficialsigin9.godaddysites.com +0.0.0.0 upholld-lligon.godaddysites.com +0.0.0.0 usol.shop +0.0.0.0 usps.com-cgkzkukp.vip +0.0.0.0 usps.com-trackaxd.top +0.0.0.0 usps.com-trackbrs.top +0.0.0.0 usps.com-trackdht.top +0.0.0.0 usps.com-trackgee.top +0.0.0.0 usps.com-trackhsk.top +0.0.0.0 usps.com-trackivo.top +0.0.0.0 usps.com-trackjjx.top +0.0.0.0 usps.com-trackmra.top +0.0.0.0 usps.com-trackmvz.top +0.0.0.0 usps.com-trackuqg.top +0.0.0.0 usps.com-trackvgb.top +0.0.0.0 usps.com-trackwbv.top +0.0.0.0 usps.com-trackyqb.top +0.0.0.0 uspsdana.com +0.0.0.0 uspsdant.com +0.0.0.0 uspsservicetrack.blogspot.co.id +0.0.0.0 uzomadj.shop +0.0.0.0 vedi.154-203-197-141.cprapid.com +0.0.0.0 vgmrm.top +0.0.0.0 vkkvdkdcmm.weebly.com +0.0.0.0 vl1.spaceysen.cn +0.0.0.0 vobroffexagru-4404.vercel.app +0.0.0.0 vrvtn.top +0.0.0.0 w1.5114559.workers.dev +0.0.0.0 waassistance.com +0.0.0.0 wallet-diagnostic.com +0.0.0.0 walletsecured.pages.dev +0.0.0.0 web-lupqrbm0k-uniswap.vercel.app +0.0.0.0 web.tlgrm.app +0.0.0.0 webmailserv3038z.wixsite.com +0.0.0.0 wk.xzte.eu.org +0.0.0.0 wodjrvrisixc.wixsite.com +0.0.0.0 worker-dark-queen-529e.servers5555599.workers.dev +0.0.0.0 worker-hidden-frost-ba39.yoveli7450.workers.dev +0.0.0.0 worker-site.aopages.workers.dev +0.0.0.0 wsa.osmqone.org.cn +0.0.0.0 wwwwwwsasasasasmmmsszz.vercel.app +0.0.0.0 x.tovip.eu.org +0.0.0.0 xhjxkj.cn +0.0.0.0 xixiajiaju.com +0.0.0.0 yahoomailquthorization.weebly.com +0.0.0.0 yungtee3.wixsite.com +0.0.0.0 zagbasamothega.dnsget.org +0.0.0.0 ziraat-kampanyasi-besbintl.xyz +0.0.0.0 zxl.cbbnbbc.nyc.mn +0.0.0.0 zzpov.top diff --git a/phishing-filter-hosts.txt.br b/phishing-filter-hosts.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..ffdb1b5a96effb3e9f8776a19e00ac35d01217bf GIT binary patch literal 5563 zcmV;s6-4UcDCr@hm=Ay=WSIMy^Z)<9zfHA&3h+_{vGl(#0hfS_tP|h>IDs}INA{d! z8Cs8v77&iC<6YKO=hnLnr*kPmEJRj%Zeys~IsYB8N)+Mfi2cFO*y7&(*U#T?zHUCP zKYy2Nt3M?qG5Fek`-7iN#-va2w8xkR0P>_T#_PZlE;h3CEh@@MsJ>+Wg3nYn!KyO+Ga@Vj(bM*j*L zq__6lKwrP)&zMfEjcUJYNKL~_TRtG(jLC7F#3-mS(@lJme3H2YzS*98x?!1IW0u1> zO8cr}JpBeL{dA|r)A+Y8Qci;Ng~H|O3yw{)EQ>Sr^nsfU=<_@eHE!wx0HDhgf$H}d zdOz=0TmVzF60`#-rcFLcdLioY_$2|G>EN6vjkz>@Vd5&$E0-Nh(r6H1R+%Odd&!Aj{x0>5 zfDa3JgBmj}0^9m*?8##~S%D|f!+#R)KT?Je@(v;4EcwjD5h%o14`C~{nBnWn2yaet z9i$&pyYt<~R@nIkOM=IzkrU)KAch150HAiMPcW=P>&` zbd-Xyfs=8W$tXr@j`7Zjdeebu@T`s`eH)Ggq1 zl&rC|S|XO!mV0t@29Q>~3rMt5z;qT3Z;gz@$d|cBaGXS_tH35P?sJ~yM8-kLK~aoP z>4OD1UtQMWRGOOP=!hP{hcF9fViG~Gs+62x=|#vTy!4BH!zJ+%2i#14O~j|f81XPG zCy~qv2Q%kkO50maj^|QGF-pKwd@?z6nJ%y+?XZaENbBY#N=m})D0N_qaF#epQb@xJ z1@bv+-TDk{t7S%O7m`NOnjb!+w~dep(qdjlK%nB-6(^SFX#++>_2cPLOI(B{l1WE| z0YlV;jPMDJ8?4oKp2;wfi1?b-d_+GY-F?~r^y2M(Ls4~TE{!pMROB**Fc}EK(|;py zdqI!EU3==E_c-$tnYcGO?TmK+PRh*vrK3Mt^cL5h&+R&5YLln_aFx2SlP|WGPIP%z z=!B`)D zJc@KyA6H`U_qq41wb{2L39(M;@~f%rg_;JR_S3va&k8_%P9~#i_$d>bxQ35NTfNI# z5g*;6?JVeXZ&PRNU`bE+H?a7ejhHP8$(k@6><-^KADMl`8ESgJ*ZD2qQ(o(P+<_nF zYmWU{zw23vvEcRB_*8>5?A`4ASszp6f$oc3LrQ$Qj_dk*w#HA=ub%p2R^m$E=6UA3 zm=9aN*&pq^I)kviU{;^!x8-{-LNb}9b5PF=tN&#i9#+&()SpB9n|-<7F;?rd=HM^> z`F3fD3|c)KE5E_-}p%|H)G26m*SC&2x=>w-P@7}477iIAg+WbJBt zwe6vXThcYZ=VJ=>reCpv6vQWmKsind(^u8)<2H1s>s~ABj8vqJGo(Z0Wy-c$_Vrw@ zf8uoot@cf;vsD|kW2k99t$dO@Df6uuKCpQhE#Z@~M2yIZMh1i}oS_6Upp{s$IUj}# zOaE-&#x%v2(p?n;1l0@HM$MDGuLlE`hgQPgqroId^>;ShW*i|3Ws>2&Cr8QmLq{%| zoY=w_lChhNqaz=b5DSMX_g4m=1l62zL=~&gYg{1((UJzYCl@>kX)DiyC21g0?C}}8 zfls8BMq50F;qEnu@#H-pZK*>+;-E%jxsEYaUo+K$j@>9$m_Y>- zSWF#1T_IyqwP4C~v|P}%h}y%e^dg~i9UjT1IYJUp?(=YP39T)|a`)d-aK7xXoE9c> z1?W2+-hv!XE(W)IYis6v7T9b^75Z&tRBEI-Q5O(*YBC(q+dvE&x%f8`P(qWnwj|SS zHr)>RMX69qlz5S4VsPqjkh9f&{Dn3es2{gqm@lJgaL+wJ#1p$dQGf~!2VJPQTw83X>=wL- z93dfJ2K;AoSkjsUWZ4}LJg!uUrwGN%<}Q!@Q!*E-7gaZ!I=}i<8zyL&1iUyx5&d1O z1OHb4YN%%~J+>>V%SF{-wj}xjtF$R!)R2wX2~dHSb6|r&7#}UrUD6C_{h%8}Zy_e| zbrsUhOr+q`tmv4^8f-56(QqZNwRE9`TUWON8${UL_qz3Xdwz4UMh&m*!CbRe^*Q;TT=1` ziPWy62#=TSbJk@m=3Z+y;9#zg?^tp_#*v(-KggCFQ8Cck@G07hIrkdOmg(3jR09XP zkc$Tta}72~zB*sb8(Mgv<=;Y^Bb}u08|*q3eqMvTIGRajM2NZq>kQqaux^(0ZtWuy zJP>tDoRFGEmutf^2qqmEd>E+cZ9xTuB;}X7^7$mxj^aD@sk&8i2NdEVzv|mDQsC-h z=x_vZ7a;}cW3kgVe7hbpbx2f7ZQBUsqC)9$HFnc?a;;$b_9>g?5Y%lSbP8PFroy(z zZ?HK+6psoaB1_WQB$nXy?VJU+KtHB3Re7i~Gj6>c#oj@d)wIncAKO#Wv`l2R zvb`Oi^9-~gLiroKW%SmV{N^LlUg_?d+3#3Z2qN}Wui$s3Pc9P`_g)^NTPXyPbXVJ% z%2wEKd-ZVdSCxpCx}9Ou<%11$5t_L&-gO6BMpTkYgaRw{*hSY#ktoAY?MYc_3B97q z68r0t8_}y_rP@>w%mapI@S`4m?iZH!6f@1&gfBo%xxG@x>IWYEV=<+MDJSAT2nmwa ztv-Xxhutee_V{2^DasYo0@Q94`nd}-Lb4}@2o5FWUJ^d!<~bRrP=#D>yREh!y?^Qk zt?h^azV_gIjZpo@=2%YA(@JXI5`obzJ2a0v1n@<=>Hx~>c7ff7Sitlh(<=>jK<1cs zY`wq_5O@LIuXpUGWFJDmy)L;EHjhlo^1Yj!5YGrn_f2vS12l*vCx7G*R>#x;PwpQP zqEqXTNWmICu?gr=bZ0a^)K_&H6zFo{9*J}tdwm3j>ibhTprG+KpT1&ho*me@SRZ`C zapa>w?{=^_5tEAC{v7bh{?0x|G`SNwjSJ{>KJ7a1c$~iAms|5N+;x8(RLgDM_3A|M z#hL(b#8Ol95f}1A3`juy|Db7=OkxqU64bpCAzA(OW)FE?eM*&{0Tufc`q8mapA4#P zU9mCip~R3xO|3Y}Wf6SB)Zkk;Qo_bFb5)QYBfLF44UG3=TnlRSJEnx4uyL4T?H-fe z+~?5DU{{UepJ)I^kdz%qK9AGFN5SR^y!r|O?x5<}AW9`i)8~-aUW+w$HL1o@bJ_th zsYQGoRO(K$rfy(OJS2zyMRA6f2#zX{l+IKgDKqH4kh z%UMJ&)OtEW%Q7uacoC_|i%LeqIAJ0}44U!{(jTJpy?Yy;xg>AO7bzRbwWke8DGT}c zNlDjg5*Wmq){2dhGG$|Y0@{2GHO_juw)w2a^k(F%JuHKedjZur3kC3q3h94vDAHD9-1`!Lw4UU@4&?UWPv&+4!(*Mi zw~vqU;fzy@almuD_b*+g{08Y2_=zW_9=QeGW-IHCmE{BnTaj%d_ z8yhp5hZEP;cY*Oo>05V>nTpoRC0(c*PZUSjWDtr^4z(Vg5tB0@KpDm)y4f<|iWWBg z|KhI6$VWYhVFU*tP^blj8K+^?0}82)ix=?O&Wb4uU?$-V2gMgLfEcXO!)T}V8f?^v zAea@~{n-tuxR#txdI7_iVSpu7D2xCumT8niJFDhl966iVgbwx07oVID%QOrUH3AC8 zN5zb>YMCZ5Tz0Fb^^L>?(y56H1t`Fv=5iVB$fkh}Kso;ED``9OX`Jk!j8NRDWf6cA z3{qR^&Q!dm9GzMwi<)sR(&y3A%&^XPb6yw5R90#VEaf6bU57Xiu>>wxY zP)~XgN>*7nNXaKQIGmWN*PttD6d18EkSInw>%oC#lJgm0THLgPu4eAc1RSki#AqfM zXD5ec9IZ1TN16*ds1ZPD?G#sH(hAhV7A39J+Hjbbfd$Y)BU|`5Yk`I>lN@J|a<+P8 z6JzeUp+UkRCNnL|EZ8{fLGV!<5E=xZ#Skyplbk03!XgTsC#{822KBJ80TJCtF>*0Z z;35Y-3bu&FI_Kv!;xuSJsl~d$SvRC#x3aG;=|fN=m^;yC^B7 z=1L68Nd`_1pcRbnV>&mmd9-TgOb8}m0W^vqU7->Je{Tc;GrJ*Qtq!zcs(0X8zd_{p1`jHAJY5<#d|&pWHgJ4Hx0{}m~sNU zVL=TXuN5Zn>Y_T=n&9Kzdapg8sd#_~R3wai?K^{wa8T_Nln1{pLXfTDnrWZ5oP!M+ z6(HP!&%2h~-_63n=?+o*7t+n&S19#!zvCS5r9IvEr>)XjrSv=`_HO_0|Nig)LKqvT zxsBqQmTn6Wv*m6#MwL@Q(8E`NNGf9_>#AUJ-~YYmrveDW-wFW=Y!U3Nrt|^w+ALWt zN4C_}rmJE?Luus+-6wzyTJ!KNRcH^Cwt3oj50imnkihXN5yCB?IT7uujWXV(T6eD6 zoO;5vFp}>i0-cbd+wNB|8&}a3o$%5nw5KmgtTeqKk=7`YsBuBf1J(`pqEN5^eG0L% z^EA-!@{YUCw87i^vj)ZLrQQue&eb5^_s!BElo0I*^3UU#X>EfGT^W*KVz8^ihechb zX^=wjG)cWa$&49DVZfjx))Nc><`>l2I(RJ_mMBG=EI>n2@Fc%3E!_%g@v&}MZ@w`h zsdeR+5ASliY4R%2_M8(F(XkT5*GYLh3dt!A&BvQhj}$wRqOHDf6?^_{_4BEUO>)`p zLm=WEmKS}rD(R|9H==KwK~D90a;6ye7pmFZG(7)%;RDK-V&9m&dA8i_kZ2WEn<}Th z5{ns1fG(&Es}$fx-O|)^{N=CN)p@MEA2oHWC~cA^GX-7Wb*q7I7w>99&OzSlqH60xt$;V_0LJy zUh1yB%WRFd%g3xeDgwFx&)d;Tpw%8)(+_f>qB%e!Jf$B7bR~woD(1%M$CkqxKIJ0B z(>;WWNZFhv;)@$B3Bj*9h22Zdp_;T_k6=?1v+nQS_oLMchrp&h1Kiql#!{#*RjA#X z&=pbWR(GNP%tAk(TW~B8>iG)o-&N?jYN3}tvpnDU)KV3rI?>~do2X32)NJx6n;x#7 z{^khwLk^F?iPlo8{9I#+M<369KkaT!jNO58hLN&8k9#U6PDDMkCUc+hhP8Ae#DMcI zKg-$D{>8XPD#uYs2{4Yk0BZFg*OkOv#3o~z^{^(cJ(UST_}^4^4&Fa6)FkxdTXYOdb{y@ubtj+L%zK$u53T$EWY~N#KoeZ#2i>A=ECLzWKrS(U*wa>^xyEl!d*rf` zfPCG>Ds1!^V`UO~r3&*gurREmsc~rK9ZR4%=a#?#Z< z5aqjrURX6$h@X@;^$OIcx?;-}!E2WqrVS{s@kL*uJh J@V-ZGAOPE*$Ugu8 literal 0 HcmV?d00001 diff --git a/phishing-filter-hosts.txt.gz b/phishing-filter-hosts.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..44a64cdc6ea32be2709321dcd2148778665557d0 GIT binary patch literal 5753 zcmV-<7KZ5`iwFP!000021Dsk*kL0{=-RD;{@NE(x_Smxgnq`mxcacSa+-$Pb(^grQ zT#_H<`t_k)J>BIVRnJA{(GQcNB#JydlAz5UJl*}wgpwrtSK z&;Rt-+y6|Q%!2=XLm9$Jj*_hUdzSq~`Ohr-Uy%RDZBkD7pKtjaC;Qt!FNgk{bmF=Q z!}fmxoxj;pOr(Q}`gxxG&mTWJn3vF$+409n^hTUWq|&o+Kc@Gky#EfP|5Gtx{Qqb0 zU-~f=jQqD<91F{|lQ4%`82_(tV5?u=ZK;{{LhHfV?oNLE@=5ydWG0k=l`K8}zU5{W zeom?CC^0i7_jI}<$3u$wn0VkolhTM zxmZ6$ZCO^hDB6^4D!r4Fp|))$OIP)|Fp}=@CuQ>U3H(X7UTGnNLvH*1Q^c5E%{gDXl$FfQ(-DjJh+)(yg)-9j``hKo@w&Vq)zc{PjkqP4h@ zCb#MP@hkfzQo^jrkv-yYqP6H;rnMc2Hli+z8sQ06`n+4MdsrVC&ohqXZq55X>7Mw7 zt0^^N)=KW@osQ$ODmETldwRONR5=1Bb}C!~BjbBFGq~G&uRyY>m5jo0HBMv~!pWjY z@4FELWAl1m9=M%!jx0v)#Kqh)O@ioTwMvs&!A>R%$+aiS`vsg79iT;`_;V=#qM z*J7WX1+PJrMx(*c5W>M;GCL(<*|cd0qVeOI=OoYaqOISv;dgU~1_BKDUZbwd3cleo zYf^t*0LIdw`9-S%Q{UTZsxp6RU?fV1^&(t-XXRb3EFnVvtk&YP{Z7pb2NBG~p&tc} zprksJC=(o!)y;S2cG6q>vBa$U&ad!m*e=e?Z5h7Jp;%Vea7_;mHwtobtL(vMd>exU-I3@G_0*pxltclv>Rv zc%ntg7(3f9O0D(RN87fY9}zh?p@f#(V3x~$TJ1g}eCx|OyUFR4W=47u`_Q z^EQoUu2iZf=~JnP-X|7^8GicYA!qx*foB7MEOMC8yJ7(EYmK21_X$`pID2Rc2G~R{17q3K1|o zn*`Wb1YcHEj%*eeR|z(D`hrdGZ?5w~>~tRaf;3%+xmpmKkfGJ>`u#!=tE?Y!iDt|S z!UuA#?PSpfuiBgYbz86Qx|UmapKiLC*p*Gg-d+E&P{xU(R|cV}ONQ<}uP@!sTsaAO z6$Q{HQ&iiuZC8c5@nYzmR?8nuO1JcNT^9qcC+@CRP4l`fi0J-KSf^}#pY5%7u#wW1 zQWC#f@&}W>m^k*AkzOXMZs=Oj0iqw$j21*~#pSw`3~$CvtHub4+bk;a(j=7$(Nj-i z*+oU5Pjhh&X)(7&v;X$2Y`!E&Z#v0~2pyrCuz?eQeD|sEpJ*u6KFA<2U_G(1PVr78 z?Z&6e=)qMJF^mi%b&GjYTBsAtxQwIV+^PhZKx|_h^lb5b-cL-JdV62t)KkTl&xc2G zEUK4?e<)PVYm}$+MfNeMqYKa;fKC4n*g)o|ujmv7*=Gc&T zZShL3HcQlL`x2&VA|b`3OPmlKSpH2V8v&-7&Ta?JyKt!kJvr^A2bKyo= zCZYH`dm&I8_0w~;3Zt0S8VW*;T7K^R{c!yI>8u*!G$H5`+n(hRA_v#?iU6|+L*vI| z!|J_A4%*XHZ3fL3oo5I$HQEUXN%`%#Ei^Q90@0+Pc{_-Gnzv1YtE6ecAda$g_!+=r z&m0%7#YHR?g9=zCF45$}JPYPyk!uZKAk(PQDwR+0!>n_{`pJdc1DjF<5S$ACDR;sU zF3fUZ6GCMZHShLmhSP@`J~nw;>jJZwS??vP>gZ;EDb(4wVjyH~*2YwLN+d9%ds(#z zM^7YhJ92j-bT>@AP?ZU%|Ga-_9SWkL81{zLJ%Le&74Nd~?e6p-mBUh%nZTcJYaItXCYS-vFD_ zPKW!Vbo>M^;U~f%RDnpdMMDD)3_(7LXJ1@JYwhS8prtVc6*rjNy6)T%NTLZ98j3ue z2)97^6`bC5js(etzv75ZsA}?}Ht|KeG1C zsFSj`BfwJus1w6JDV*tSSj^`mCAzf1yTeW4dbugFT%0X%v$!Un7ZPC5KvQC%^$OdM z>@S3;mqgtG!U5FQ#VzC4nj#_p!3s}C0QoN5G>w!*ju7<5*;;*Wf#B)v0BF2`CNS*@ zbQokbM8)$o_$(=LQPoZ0FqClXes_+uop($8LPGl9k)Fghy9~Zx##@+J^N+_JK*yrY z`ddtQf`r|y=gQZK5JL~}7iniX;r!rP=WTcWrQet63Oh9lW1zSx6YhSfwZn63+F1>- z>?}{5-GJXfQ5uiyyNJs>h<5?$6|y?uZ)`SamnqMabyX9j-<)*HX&;InRpE+LgT*fg z-nnIhW&@H5D(J~rPmJ<_#%Flx1t$RD;p`y8()VA7o(z*+T=bm7U9nA$gGff}Ot_B< zPKMsJJwI>HXNF*+4I!eed;WCWMSA!=8C0lW*WI&6Ygq2d@{lIzy=}mc#uhmj{ z*_DMPDS-m4#CtI`2-WiQF^1mYkNrY6d-E&w4~tF zJEFt&`aN>#tBkY>7l9VLJ)!3cbqE1R*#Mcs{Buij5-D=~Ds#|&roZg=^c)+%Da>s9 zUg74y$^n}I6oJM4A_-qs?&okjKEB`It0;|C2J#pDCZw9DP;L&w3!&`T7iwJ#lB*c_A2Ucu~i>5h=E@bCIOihzjkyE$`0ws}80Pb#68hjc>)r**cdHdM~ z?hQX2D0{Fz^4W)8EEwaf&?AW(0cbE{Pi~>#JWE3Q^aJ-idM|nL(8SGyh+e2(fIcmL zg!ZRLb!>+V@J?@g^Gq%VV76dM6TtTP&1ziZ$?m}Qcn+>Xn0vShj#Hcg2!SIg%d^NL z2eB|`mDbBm0eM~$ROitKWmw=G4$w&!^|~BuGD8Gfqb7R+QN)mjngu7HP%{HuLoe<} zm2jYOlcNht$30b_X|4tDggZLN$IUj>#4)@~1(WcVLBOucLrSRkR=_FSh zbb)rUiEd1b-Kv{a;|NH$BxRMiQ8nNu6q<`^1#%X!#b(e(L0z8!M{W0{w+c8q4(<4T zgz94=r9;~)fifAQ@d9w?6F^d2H#o}dM-p5L`3SRs_l=KnnGuK|-RbC3Wu71QOM~*r zv4?1RIJAj&lOQ)Dcp^H~Kmj=V<=E@Tk=z$3FEL^`LSYe906v2S2(=uLA+}>-crPzg z^sUSY4LgIQe{^}ljiRXYsx5Mi>gqRDr~~8{T_y;}a3iTKI2H=X%a8_5F*;9=;Ey_A z?1wQw1iCs$Re<10p)N}BK=m})7_?#28s#XX(!}(S*NYPVtCgHzJwSh8shWK^$Ii#H z37VbAj)A)oNg%~U&sBq)CQgw?NU88)1vn~jZuEc_I;gat(n&a?px->NZcl;}kGF;u z4sXNS;^hmcasTyh9=iGEc-j0RGi2QpW4%aliE%pblK@@`%;b43fs073ZV5CiP#Ga~ zqHjdu*ez2B_B5?NuHo0LHHYGC=!os3bv`e4T|giks$`U*GL!} zIqygQmoWz$L%nAP8g=1K2OZs+L|Mk5pA2!CGWiLX7QoOm7OiA9eDHw)lZU>46fZTx zMwM>t2iYm!j+XQnZTKqWPt0TV9H8^s5N?@C<;lS%{AA~U zRIUFcJQEv9mlCtHg{t$Xs={SrmM4VC*zO)TjR50h6+kh*l)uR>{UYT-q`W^EQj^C( zYg%ZM;ijmhpfr~ZSCSD-8ir6QWX%yNn$)55+%P6Da+={RhuTE2z)edq%c~3?3S3fH za%@b^>jpKP5LRKy3eprU&IrzUL$jPm=Rr9Yf?&ik%px<<6tpaginfFmZI+Sfm?nGz zqveQ-5>v^WI?M9{Rj7h?iPlAIOp&!!mX$zsh`^}G8^joI+Nug4gyT(g9$b-9HdTQe z7z40RVbYxEsLD_lJ|q_%LwR0QdBwAaf!kTrwwQ>DWF_TL+;D76nM+s+a79!UxXiMq zl`JPE%0wl2Th_5LRoSpc)=!qp|LSFLN&^$sOr4Ld5cJ%XNV#uv!>()P{r67o|P4aqo^Q+nlc<$Sr!$_q^J;! zpJ`LFhA<2hlmh3xrkNxhK`7LORIQB8)6|7z6)6O#EzaSmyq0Cw<~g*Fq|Br7Mw%P~ zno`*m4X$WInijRNm6B2j*eZIagiuTc0ybMyEEsC5GOtNl)|^5xAQT%zNl7wXv8n|Z zBN&)r$S6oXO2G9vi;t}A`%sD5Ek}MBd5(O!+b`mBukK_A=-GlUYj}z*e z!!9hOK^nsODSRK0E6o85;k0oQ=c)5~SQJMQ9)ZGGH~?V0AkL#Jfx!u^cyZ0i^8myZ zujlO=hS!iJgk|v!Tgu`vB$3145D|cGThK2FV5A zPVEBt^C3o4*atA2OF{=zm@-)v2Of~5_B2?7tSSdaGWi*-PQP`GTyRi223VRoak*qb z?qe#HOY11}Vk)fYCo2LjZptI}ngpR80j&kblrv=pnZM-6yD{i3g=lFjm??g^NRJf# zQc?mu*^n-+K!-tooG?eKdRlCbBlX-@{j3XTrdIam{(VpX!>4TxFD}0`IN4K4ysQ*G zEe%NhZ5$KbN$07n4I&k2b<-T0YQ*2Y07HRdN>YMt|HQ6Lmojo!PMLfN>gP(EI@M7Y zstg|Fgb0$RPW+AmGm#optN$eC6o_!fJR(84Oajgq+}kRvd#_M5ABr>^()(XMi+yQE z{5!j{yaYNrBxM!LWXe~qH1;ELPX|+C-YZknd8UMGN<4WB=Cd~glSbromCfxie{FwE z>gUj|jkH~C)stQGq*=RWsHbUiz?oG>C`{S^=W=l_xFqAMtPHVqgjV%C|E1E${te>u;leTcYZw6{8zHwb4OnwJfgftxHwcD!w{z z*Hmrmnbgjqc{UZ5_+-O77^4QIR%*CiV<%WwBAfj7Q%AwZ$R}QyT>}p3Qs~T7GfkRW z-9SA&MwIr9$Ym{rwPXSMvM-F63ubR^KUaByU-wFIz&C(}N#riWDJ?kbOo^Xgg5cu5 zhBoB{DGsVu)i)L6d5)#{R8-HNcm**E7Wj!j?0jPT`o#M3S9(rB3Ecb$)S@x}Ht&uT zXSz}27SAA#9X_d3)%xk|365>)KGxS6$pq(c6rW_?rl8wjk=3{-o`IpM+8@WdAl7RHH2#iPB#Rn22GX1E+y(lH$MJT zja}Z=qG1{LtIlfSm1nr13+-qzN;XnE)a!>)47BWENZBj>(vd9;u~^wbUH3yp>SGE@ z4|V#i=D{y|x!bofE48o3szYdE`y!yLt!LDgeePRrj(w8@5-s5_r|TajGw`a2zXKbL zSs@tkkC1BuuOh87YLw(3lUnMvZB+<7}JU=`9#L=`FFf-+QY;ob=Z9bkf^Na@IR6C%yf%IOzpEJLw(M;iPwd{+>&X zN7-AsHtJuEuR`*ArG4&cUxVuxPy|}rt}q}<|F3UJ4MitAYlTD8478zH*SSK$&|dr% z^300yJqj5_YFwO6q>#NAhJjP#J;*_G>vrSCk1m%mirnJjkq{jFN*j`9E#!4vfU*?a zAok4ByJ27IczXeWy|#ZmW!eRe2SBGrP%6iQ4KdV+1l_Uq4GC|-Enb`%^7`qzP8opcu&8;54SYG6Wh(2bsrQ$h zstKn)etXM2>o>WK^`Cn&s>@gBo)?-icW!qf1>iX8gf3Y@e9BdUsI*_vrseiPj*U{8 rsLD&30QZa)COrTEp1Tke literal 0 HcmV?d00001 diff --git a/phishing-filter-rpz.conf b/phishing-filter-rpz.conf new file mode 100644 index 000000000..892b968a6 --- /dev/null +++ b/phishing-filter-rpz.conf @@ -0,0 +1,459 @@ +; Title: Phishing Domains RPZ Blocklist +; Updated: 2024-12-06T00:21:00Z +; Expires: 1 day (update frequency) +; Homepage: https://gitlab.com/malware-filter/phishing-filter +; License: https://gitlab.com/malware-filter/phishing-filter#license +; Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database + +$TTL 30 +@ IN SOA rpz.curben.gitlab.io. hostmaster.rpz.curben.gitlab.io. 1733444460 86400 3600 604800 30 + NS localhost. + +1nvest.bigbantbaz.top CNAME . +25116414.cc CNAME . +365365news.com CNAME . +365f09.com CNAME . +750115.cc CNAME . +823pages.pages.dev CNAME . +95564339.awi.za.com CNAME . +999fc.vip CNAME . +a.yyyy.cf CNAME . +aaaa.whilefish.xyz CNAME . +accounts-microsoft365.weebly.com CNAME . +accounts.0ffice365.support CNAME . +aidanochka-tabys.kz CNAME . +airbnb-clone-sahinur.vercel.app CNAME . +akbarinewv2.morteza638n.workers.dev CNAME . +alaindemeuron.wixsite.com CNAME . +alexa81o.github.io CNAME . +alienv2ray.pages.dev CNAME . +allegr0llokalne753724pl.art CNAME . +allhrteam.com CNAME . +amazon-clone-by-sudip.netlify.app CNAME . +ammuvicm.work CNAME . +amyr.iran-cyber-net.workers.dev CNAME . +antaidossiersuivamendimpayeerf33.zynekcctv.com CNAME . +anuragrauniyar.github.io CNAME . +appeal-voilation-policy-issues.github.io CNAME . +apple-id.cc CNAME . +apri.154-203-197-141.cprapid.com CNAME . +arvestcreditcard.embarkdigitalonboarding.com CNAME . +asdfjeiod.com CNAME . +ashleyproberts.wixsite.com CNAME . +astounding-trifle-b88a2b.netlify.app CNAME . +att-101397.weeblysite.com CNAME . +att-102641.weeblysite.com CNAME . +att-107756-104508.square.site CNAME . +att-108102.weeblysite.com CNAME . +att-108651.square.site CNAME . +att-mail-101246.weeblysite.com CNAME . +att-mail-105533.weeblysite.com CNAME . +att-mail-109459.weeblysite.com CNAME . +att-servicce-mail.weebly.com CNAME . +att-sign-in-107078.weeblysite.com CNAME . +att-yahoo-mail-105061.weeblysite.com CNAME . +attcom-101415.weeblysite.com CNAME . +attinc-101356.weeblysite.com CNAME . +attmailonlineaccountupdate.weebly.com CNAME . +attnet-100294.weeblysite.com CNAME . +attonlineservicesa.wixstudio.com CNAME . +attonlineservicesa.wixstudio.io CNAME . +attweadminservices.weebly.com CNAME . +auth-sharepoint-asr.vercel.app CNAME . +avertisystems.com CNAME . +b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev CNAME . +b35ccc.com CNAME . +b35lll.com CNAME . +b35www.com CNAME . +bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz CNAME . +bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz CNAME . +bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link CNAME . +bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz CNAME . +bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link CNAME . +bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link CNAME . +bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link CNAME . +bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link CNAME . +bbf-alpha.vercel.app CNAME . +bet365t3.com CNAME . +bet938y.com CNAME . +bet958c.com CNAME . +bhngfd3.pages.dev CNAME . +blackdasblacks.shop CNAME . +blsckdagsever.pages.dev CNAME . +bridge-9wdpjmsoa.pancake.run CNAME . +brubreumummeddoi-4514.vercel.app CNAME . +bscusdty.top CNAME . +bsozvycr.icu CNAME . +bt-102368.weeblysite.com CNAME . +bt-106861.weeblysite.com CNAME . +btjfh.weebly.com CNAME . +bussinessaccounthelppage.click CNAME . +bwfujmww.icu CNAME . +bx.sfdsb.icu CNAME . +c.cting365k.cc CNAME . +c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev CNAME . +can-post.cyou CNAME . +celery.sa.com CNAME . +cen4-six.vercel.app CNAME . +cf-worker-pages-proxy.1352562939.workers.dev CNAME . +cf.13084493.workers.dev CNAME . +cf.iwoai.cc CNAME . +cfcf-8.pages.dev CNAME . +cfr-reed-taxi-wayne.trycloudflare.com CNAME . +chain-trt.online CNAME . +chainsolapprove.pages.dev CNAME . +chat-wa.xyz CNAME . +check282.tempisite.com CNAME . +chore.pink CNAME . +ciftcininbankasiziraatbankasi.com CNAME . +claudiorojas.cl CNAME . +clivenicoll44.wixsite.com CNAME . +cloudflare-workers-pages-vless-a2j.pages.dev CNAME . +codt.digitasianetwork.workers.dev CNAME . +coinbase-com-18690.subttrepimop1005.workers.dev CNAME . +coinbasewallet-verification.198-46-89-184.cprapid.com CNAME . +company0rder943.weebly.com CNAME . +completar-la-verificacion.vercel.app CNAME . +conductibili.fun CNAME . +correosprepago.bnext.es CNAME . +crenadenuddoi-2258.vercel.app CNAME . +cryptorectification.com CNAME . +currently5267.weebly.com CNAME . +currently70.weebly.com CNAME . +currentlyatt909.weebly.com CNAME . +d.afirkz56924.workers.dev CNAME . +dio.azrealonce.workers.dev CNAME . +ditgong.com CNAME . +doc-online-1881.on.fleek.co CNAME . +docsignauthorizationrequest.vercel.app CNAME . +docusign.com.bestfinancebroker.com CNAME . +duang-5dh.pages.dev CNAME . +duvhkeq.pages.dev CNAME . +easyaccesscommagebn.com CNAME . +ebay8787.shop CNAME . +ee-account-home.web.app CNAME . +ee-service-help.web.app CNAME . +ee-service-portal.web.app CNAME . +eln3.vercel.app CNAME . +enormous-orchid-howler.glitch.me CNAME . +espaceparticulier.life CNAME . +ets3qe9ooms8t6i8.pages.dev CNAME . +excelorgo.com CNAME . +falabellacom.dominiquepg.com CNAME . +fdesq4.pages.dev CNAME . +fdsfjiwe.com CNAME . +fdsjfkweow.com CNAME . +fekoulamevebouna.freewebhostmost.com CNAME . +felomane390.wixsite.com CNAME . +ferngos.de CNAME . +fieg.84yr483rhfwieujro348ur84.workers.dev CNAME . +figinstenatecom.pages.dev CNAME . +finansfaizsizbasvurum.online CNAME . +forested-mirage-samba.glitch.me CNAME . +formtools.com CNAME . +fortradesetup.hamidamnaie.workers.dev CNAME . +free-5436781.webadorsite.com CNAME . +frogsrus.wixsite.com CNAME . +fshraha.pages.dev CNAME . +fukshumx.world CNAME . +gazruinv.web.app CNAME . +geaoolsv.pink CNAME . +geminiwallete.godaddysites.com CNAME . +ghjhyu.wixsite.com CNAME . +gimennlouin.gitbook.io CNAME . +goldenrod-rowan-submarine.glitch.me CNAME . +gorgeoushome67.wixsite.com CNAME . +group11-vvip-hot-girls-combi.viplch.online CNAME . +gruppeflorian.com CNAME . +hanisfir.shop CNAME . +hedayatfreedom.hedayatkhakpour.workers.dev CNAME . +hello-world-morning.freekite.workers.dev CNAME . +hello-world-muddy-cloud-f45b.mfoster0425.workers.dev CNAME . +helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com CNAME . +heluapla.shop CNAME . +hemanlau1.pages.dev CNAME . +hezhouruan.552008598.workers.dev CNAME . +hgcdhbxnf.weebly.com CNAME . +hjrhd.top CNAME . +hk04-123.pages.dev CNAME . +hkmqo.top CNAME . +home-100317.weeblysite.com CNAME . +home-102207.weeblysite.com CNAME . +home-107257.weeblysite.com CNAME . +homelogin7t6sdfcgvhb.weebly.com CNAME . +htaflytz.baby CNAME . +htaflytz.black CNAME . +httap.l-teiegram.com CNAME . +httpsbellsouthnet-102649sitecom.weeblysite.com CNAME . +hup6r.com CNAME . +hy.fuckgwf.eu.org CNAME . +hypophysecto.fun CNAME . +hzuayvvl.red CNAME . +id2.xbenihime.us.kg CNAME . +ikergalindez.github.io CNAME . +info-delivery-bg.com CNAME . +info-trackingcs.cc CNAME . +info-trackingiax.cc CNAME . +informed.deliveryhbo.top CNAME . +informed.deliverytcw.top CNAME . +informed.deliveryxs.top CNAME . +infringement-service.com CNAME . +instagram-clone-in.vercel.app CNAME . +interbenefitprestaciones.referidosweb.click CNAME . +iouwerty.weebly.com CNAME . +isnworldwide88.com CNAME . +jaydeep8806.github.io CNAME . +jeanandpeterwilkin.wixsite.com CNAME . +jetconstructionsgroup.com.au CNAME . +joeandvelma.wixsite.com CNAME . +journey-x-pro.com CNAME . +jsdfchkdsds.weebly.com CNAME . +jshattkee.weebly.com CNAME . +juliusmasih27.github.io CNAME . +jung-sohn.de CNAME . +katiebllair.wixstudio.com CNAME . +katiebllair.wixstudio.io CNAME . +kdlmo.top CNAME . +kenzmail0.wixsite.com CNAME . +ketura2010.github.io CNAME . +keucroilluxibrou-2718.vercel.app CNAME . +kuconlogin-ui.godaddysites.com CNAME . +latam-onipojes.vercel.app CNAME . +layanan-bntuan-resmi-dna.prbu2.my.id CNAME . +ledger-com-updatefirmware.aparecidovisentin.com.br CNAME . +levappoprauqueu-4688.vercel.app CNAME . +leyoixoimmecou-5619.vercel.app CNAME . +linkbokepviralindo009.vipp.blog CNAME . +liveairdclazmersn.pages.dev CNAME . +lo6-cas-projects-64947843.vercel.app CNAME . +maatamicklogginns.gitbook.io CNAME . +madebybmr.in CNAME . +madhu821.github.io CNAME . +mailupdate87.weebly.com CNAME . +maine619.github.io CNAME . +mainnetverify.pages.dev CNAME . +mazulyta.pages.dev CNAME . +megrebeikenneu-2106.vercel.app CNAME . +mendhfjpl.weebly.com CNAME . +metacareer.com-case37169314276.com CNAME . +metagalaxy.pages.dev CNAME . +metamacksiologus.godaddysites.com CNAME . +metemrsblogin.gitbook.io CNAME . +meyetamaskiwalt.gitbook.io CNAME . +mianfeijiedian.lawcpacpv.workers.dev CNAME . +milanharvestfestival.com CNAME . +mirobitsgt.github.io CNAME . +mocp90.pages.dev CNAME . +mostafa2.mehdi84888.workers.dev CNAME . +movie-firebase.vercel.app CNAME . +mubki.hp.peraichi.com CNAME . +my-site-104564-105934.weeblysite.com CNAME . +myaccountsignup.net CNAME . +navy-nose-4544.typedream.app CNAME . +net-flix-front-end.netlify.app CNAME . +netzero-webmail-105996.weeblysite.com CNAME . +new-currently-1-23-24.weeblysite.com CNAME . +newattupdatemailboxkidlyverifynow.weebly.com CNAME . +nfty-proj5.vercel.app CNAME . +nnbsscnaceesngsetr.com CNAME . +occinamete.cfd CNAME . +odovsccs.weebly.com CNAME . +officalourtime.weebly.com CNAME . +office36503.com CNAME . +ohscorgza.github.io CNAME . +okm.znt.temporary.site CNAME . +oliver752.github.io CNAME . +online-e-commerce10.com CNAME . +online-e-commerce11.com CNAME . +online-e-commerce12.com CNAME . +online-e-commerce5.com CNAME . +online-e-commerce7.com CNAME . +online-e-commerce9.com CNAME . +orange234.wixsite.com CNAME . +orgmail.weebly.com CNAME . +ourtime.datings-information.workers.dev CNAME . +p.updateinfocl.top CNAME . +p.updateinfocs.top CNAME . +p.updateinfoga.top CNAME . +p.updateinfojq.top CNAME . +p.updateinfolw.top CNAME . +p.updateinfoor.top CNAME . +p.updateinfooy.top CNAME . +p.updateinfoqv.top CNAME . +p.updateinfove.top CNAME . +p.updateinfovt.top CNAME . +p.updateinfowu.top CNAME . +p.updateinfoxb.top CNAME . +p.usertracktxz.top CNAME . +pages-108-tg-cfzz-ip.pages.dev CNAME . +pages.tempisite.com CNAME . +pageverifycenter.com CNAME . +patjimmy323.wixsite.com CNAME . +paypalloginin-usa.blogspot.com CNAME . +paypalloginin-usa.blogspot.hr CNAME . +pcmag.anycubic.vip CNAME . +port01-acf.pages.dev CNAME . +portal.chiaveggies.com CNAME . +pruhuffopraussou-5681.vercel.app CNAME . +pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev CNAME . +pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev CNAME . +pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev CNAME . +pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev CNAME . +pub-2801359d2be54bfd8701132626efeb73.r2.dev CNAME . +pub-3096005ebeae423182ccd89665564d8a.r2.dev CNAME . +pub-46a5f86348ae4aceb3591d126020999f.r2.dev CNAME . +pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev CNAME . +pub-51f896deb233450089fc1a520e6ed957.r2.dev CNAME . +pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev CNAME . +pub-682ad3b65d944376b919745aae3c56d4.r2.dev CNAME . +pub-722720be67154192a1102b2cf085d306.r2.dev CNAME . +pub-7d056bfeb6b04852801553620fe62c0a.r2.dev CNAME . +pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev CNAME . +pub-873fc6a3edb941c6a17f50911dfca518.r2.dev CNAME . +pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev CNAME . +pub-aab4be29317b4ec296517a557db12622.r2.dev CNAME . +pub-ba5a046c69974217b0431bca4ba43740.r2.dev CNAME . +pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev CNAME . +pub-c59cf4e950b142949df8861e60b3689d.r2.dev CNAME . +pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev CNAME . +pub-e5855431d98545b38408f52af50ab8a1.r2.dev CNAME . +pub-ff0271d87324424a9aec83337e844a54.r2.dev CNAME . +puertaselectricasprincipal.netlify.app CNAME . +qaffixledger.com CNAME . +qbstdfda.com CNAME . +qpownthenewyhadvanceweb.weebly.com CNAME . +raj-tiwarii.github.io CNAME . +restrict-policy-nonadherence.vercel.app CNAME . +reviewboss.github.io CNAME . +rfgxg.top CNAME . +riaayaoman.com CNAME . +roadmap.binarydesignhub.com CNAME . +robinhooldloegins.gitbook.io CNAME . +rouzhda03.kambizmedia.workers.dev CNAME . +rsjxzl.com CNAME . +rtyuiuytgf.weebly.com CNAME . +rubinhuud____llginnh.godaddysites.com CNAME . +rudra-choudhary.github.io CNAME . +s.team-s22.com CNAME . +sadekk.com CNAME . +sajsa.icu CNAME . +salarahmad786.github.io CNAME . +santanderpod.fsthosting.com CNAME . +satinnaaoabbs.weebly.com CNAME . +satyarthi.uk CNAME . +scarce-army-wide.on-fleek.app CNAME . +sdfvgbcvb668.weebly.com CNAME . +sea.6e2efhxz.eu.org CNAME . +secrbnsuppotyu9.weebly.com CNAME . +secure-ledger-m-auth.webflow.io CNAME . +server.2rk3.com CNAME . +server.pxs7.com CNAME . +setshinobi.vip CNAME . +sextelegramxxx.pages.dev CNAME . +shareorder711.weebly.com CNAME . +shaw-101342.weeblysite.com CNAME . +shaw-103098.weeblysite.com CNAME . +shaw-106054.weeblysite.com CNAME . +shaw-106665.weeblysite.com CNAME . +shawsyncmailservercommunicationworkspace.weebly.com CNAME . +sherman-relate-rev-baskets.trycloudflare.com CNAME . +shobhit245.github.io CNAME . +shopifysite.cn CNAME . +shoptkoo.com CNAME . +sign-in-att-108611.weebly.com CNAME . +sign-in-att-108611.weeblysite.com CNAME . +simxtrackredirecttszz.pages.dev CNAME . +sjhsjjs82.weebly.com CNAME . +skill-meta.com CNAME . +sky-107842.weeblysite.com CNAME . +smithjamessv328.wixsite.com CNAME . +socx.ly CNAME . +sparq.eu CNAME . +spicyhotcoolsoup.s3.us-east-005.backblazeb2.com CNAME . +spotifyl.vip CNAME . +ssfgsfg.wixsite.com CNAME . +sss.k999955.workers.dev CNAME . +stonemartin1001.wixsite.com CNAME . +stringroll.com CNAME . +sukienffvip.doiqua-garena.io.vn CNAME . +supportsecurity981.tempisite.com CNAME . +talktalkserver897.weebly.com CNAME . +tareq088.github.io CNAME . +tbsl.by-on28.my CNAME . +tcaconnect.ac-page.com CNAME . +tejlksdoisd.com CNAME . +telegcm.me CNAME . +telegramjessica.pages.dev CNAME . +telegrampx.com CNAME . +telegramsexgroups.pages.dev CNAME . +telezelm-ivee.icu CNAME . +telgramsignal4.sg-host.com CNAME . +telstra-102379.weeblysite.com CNAME . +telstra-104033.weeblysite.com CNAME . +telstra-104394.square.site CNAME . +telstra-106968.weeblysite.com CNAME . +test1.workersdev40050.workers.dev CNAME . +tg-logrom.com CNAME . +tktk.tktsk.shop CNAME . +tokecn.im CNAME . +tokeni-1601.vercel.app CNAME . +towrewds.com CNAME . +tpwalllet.com CNAME . +trustwallet-zendesk.com CNAME . +tuviaje10.com CNAME . +tvjbqiyv.guru CNAME . +twcht.twimobie.cc CNAME . +twimobie.cc CNAME . +uedy.pages.dev CNAME . +ultsyncingsolana.pages.dev CNAME . +upheldlog8.godaddysites.com CNAME . +upholdloginorofficialsigin9.godaddysites.com CNAME . +upholld-lligon.godaddysites.com CNAME . +usol.shop CNAME . +usps.com-cgkzkukp.vip CNAME . +usps.com-trackaxd.top CNAME . +usps.com-trackbrs.top CNAME . +usps.com-trackdht.top CNAME . +usps.com-trackgee.top CNAME . +usps.com-trackhsk.top CNAME . +usps.com-trackivo.top CNAME . +usps.com-trackjjx.top CNAME . +usps.com-trackmra.top CNAME . +usps.com-trackmvz.top CNAME . +usps.com-trackuqg.top CNAME . +usps.com-trackvgb.top CNAME . +usps.com-trackwbv.top CNAME . +usps.com-trackyqb.top CNAME . +uspsdana.com CNAME . +uspsdant.com CNAME . +uspsservicetrack.blogspot.co.id CNAME . +uzomadj.shop CNAME . +vedi.154-203-197-141.cprapid.com CNAME . +vgmrm.top CNAME . +vkkvdkdcmm.weebly.com CNAME . +vl1.spaceysen.cn CNAME . +vobroffexagru-4404.vercel.app CNAME . +vrvtn.top CNAME . +w1.5114559.workers.dev CNAME . +waassistance.com CNAME . +wallet-diagnostic.com CNAME . +walletsecured.pages.dev CNAME . +web-lupqrbm0k-uniswap.vercel.app CNAME . +web.tlgrm.app CNAME . +webmailserv3038z.wixsite.com CNAME . +wk.xzte.eu.org CNAME . +wodjrvrisixc.wixsite.com CNAME . +worker-dark-queen-529e.servers5555599.workers.dev CNAME . +worker-hidden-frost-ba39.yoveli7450.workers.dev CNAME . +worker-site.aopages.workers.dev CNAME . +wsa.osmqone.org.cn CNAME . +wwwwwwsasasasasmmmsszz.vercel.app CNAME . +x.tovip.eu.org CNAME . +xhjxkj.cn CNAME . +xixiajiaju.com CNAME . +yahoomailquthorization.weebly.com CNAME . +yungtee3.wixsite.com CNAME . +zagbasamothega.dnsget.org CNAME . +ziraat-kampanyasi-besbintl.xyz CNAME . +zxl.cbbnbbc.nyc.mn CNAME . +zzpov.top CNAME . diff --git a/phishing-filter-rpz.conf.br b/phishing-filter-rpz.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..7f03f61d25138d5a01f16a4e347716273e98450e GIT binary patch literal 5649 zcmV+s7VhccAnhTdm=Ay=WSIL{Gd}wJyPSGcfJKrzvmvG*3MiBo!6scRrZ?3wM zp`s~iX+w4?LMj?csP?@t?cCRzAg>7$QMwc*;)X%`UzcoOvVGA@vQ4l}vbE77dY2G$ z#Za{N%0w?I>Z+q0T4s{83Rwmu0maKiMzGWHW6eq!vufBgLVv+ofK)}LO( z%fbEn^_1c-e|#@{yRse#BG=U z`1vKQ);ELbFSXAlKYo7o2etn6stF{8&#V9TYYA=b{It;QzCPF7N?soLo!VJO{}dY3 z`n&w`P)7P47tLhXe(OVcsA*7U2 zv)800V=ti@dub-8-!1IN>+k>N)tta>ZTjQKkWT#g986dYq-NluEg!Ex`TIZmyFYu; zA6yNCmV>0$ZZ`?7gjSscis$&;)3bSVl~J)_Q1R7?iw5hh^ry=mp26RBR!U1DW(rrJ z4=@{No@a0A88SB>(EGk`YW>y)06-680;B#G^m{+I;&Gp1l}I~~Y%L0{=!IzFot8vw zrp)_b@k#91wkIt(*p;lw4M+oXSGwK)y`h+7h>bZRsj!CB3q7$|j1-On{5v)SB_zB~ zPWN0IKA^>v=#|TcrD`;Yu!l~A9ec@%Ug0~~7#SZF@e9+CX`kCRSXbCZ=OK$x#pp&WN>D=ieAIyY{GS#QP}OU}?2SEUPW|#B&CaR)UX6%rpTv zO*FVQGO$6+k2oDO$ zW-U~`z#WK*QlH^>HJ=IA%JL^Q_QITdzm%aDL9b=uI8h86u*(Y_j>e zPWia6&uzb!bV_U|NO|=|EIgQltA{_&{o(QRL>14YDDTX1CH{Qw@0N|R+j=A^7oDzf zHIci}&=}J8H19UE0+8>MtKBwy7mapb;#;P*e#=r3Z_{?yc{JzNbm#ow$>{GVv-mk1 zvFk1sZ_)~I8+^umWd4?Ctm*k&=cjy5buG{FjpDE$du;dext^6+2f=)7NHr?UpVf`; z<+eo~=sze7q$KopT-PV?Wq&907~MZ+CBF1^97nOq@o?pn!_m&GbBOB$b_scWTKVMgahm-ZaoA+VDmw$xWaIY?8BOqMj{prfeE2ZO%l5_kv)Oe*CPYfXL z2vZEIP-&Xz)-_|B#dL2^r=~&TX-$iFLM1^HLUT}mRw}iF?BR3kM$3P_f*b$uEWs^E z=F1)Ly=I^XBnunT(i7otxtoH0@B5C<i+PEJ)6kev*qV2wx%lG$wU0JLCrPaG?0$Q=uwvZN~ z)uzgPBvvp!vcVCdts`H#m0iM3rl~mpT>>Gmejv078I)ctc}_` zCtnLjEH|x+y-$ltk{Z6vaEbLqDU?Zrcb*(2e{VVn#g*o>m{rDhvYrltO;XN+rZij` zLKRf<)|07Qy;|!FDTt0V_y%&poshP2AJ39T6~$Sefh&YWT4{8~V+8JAb39Gnj3*{m zb%jPQkY{MF>wMxA6iOUAPBpvcg7g@*eQof~h7=NRF&JuiLIG$S7!2eHEsR_88!ELi zEa-4z3O2_mrFv;Azt}+0dQVRTq96hOF5-gh8r63%tpSh&7fnQS3ABnt_4$3D^vr1O zrnQ1c*z++krsC4esM)R&9Hhf^m?t7NnPxIfQbQNP44X7hXSj)D(mdz7BJY!%S&ba)C{IN4ad-CJ9--Lt@D zONP*QBf~TeG$-mK;zn(z1AQBmK_i#&R02Xm8EdOD-DTV3Kw6YyVIt5*4#}CIyfuMolRD7AJ&n^ir(KFjM7vC2QJ91sS&t){9tslK z@0tbxiVP6nbH*ep#lV!y>MKu8a(q3RqIKZcV$5YR3Su5G$MYk6Y(mdSt4#QGJbHsC@34L(-@3f3{v9ri zQAd6I?ZSKoO@dqQ5q3Or#T5l8R;gWRU^JYkoDuxTyhB1UGx=xoSkjU+WV_oJ1YGDO z?;T~gMm>t1s-~)&iSfyzOw0_VP_TXSo5XLIho0%vn^f>7;st`#13mqYJ8gfv5D4&VH>f2qj8z&VI^*{fJBe{g5u%fpfYR zqv)QO^}XIbmy;}E$CP630Zql_Y#in(K=e%?{!5s(sF~Y{A^?$OakA zP4Ov9?#D2Y^9%=Bb0eM&S|>im1ekNL(XNe-Yf;s4ppUr(5HV+Ag%qj}#k`_}8(RA< zba|(n^lgRBwZm^~0H|Y`G)9zoNpQ^2tqAKDN$<|xkYJgL(EqSd zF}Q+$56QV8tswMLs2k)*cU}FWga-=yfnRmqF>2tF(wA+O(Z)(oHOAg zSLg@|dThEnZ z(q8Gt%^Wr?3q*)L*#rEp49REWS>MY|%q)cjlFMv6Tg?jR+g<~F?^l%_9p#;7HT{E4 zbOM^a(thh5I5*KZD=7-B+~dk%2Sj%aKY37Pr2_+to>E*UOm0fAhLt*T0hk8~&9Fy( zhTJbK?e1n;s7YRccXaz{3Rd56yFCj{6VokWeIq1D&ZT=7t`N822-)L}&66otNefiF zQRvTYkP(tQG48;qPwpk*O};iKBNT>^$8~en)kpvDxAc3X0Yv44Xp zxf4DPM#}Q7+nfZ?5J?YHat9+c*hx;|$ZxF7)ChO$|1HF%)*+FCbq~ZPphq#C)BUDl zsMF}Tmy7jC&~0375y#&EyS_GZgu9ac1mY563~B>-M`&od}^g8{yfp)HHoqV%Ee00uuZi zZL37fS&oy`?v)*?HOOGMn3pA_RP`C~>`!2BvlkjtK&7=$d}w;;F{DzHPZlNk_9@l| zKe~|;Hk+C2g7mq=)8pMB_&1D8L4#q#l&}*%FkNcznB3~$hi3*?h!igw0t7)-PCJTm z(6bmMA2oU91tNU2s$+v4l^o8HV_tgg*0{o@x|iD0E|f`a$D5&2HD~%y2DWK-njIySUJ>SU#O}yGXM`snu@>3YkMnDkiuRE* zc5C0~fTr#a4QwK9A=W<+3CHM3{_DbS5AkGgC+t7goB#F>`+f^9q{TSkKF)HOE>?bn z^a}dK?NX22l5Vq>`)RQ|EELjhy9vxHFerLt0|Dz#A+a{rXV(BHE=!mKtw-r=_g>s=-gQc4)W|QZW`f z=Hap38R&pr4*w!^DvK60idu- zyZVKGc%i2LHp*i!Yx$W1mPs&bU z<;+2$9NcJ_2gj8VBY>X$w!%J*!dndjotfoeH4LLyY#s*ZEvP}}!Vc2_AdT^pn4~rn zOf#P+<&-g2fIfy6z(|997Q<*HT0UzvjG)x$%)mA0VV_|@0h8M5c^)MnM#H2Sj0I^x ziczwB;nr%@5~M?vIBH|$G+8uk<_r={CZ(hp+&n3%jF=>wyyD;$12e%8UZnSokAs^=!KLI9 zWYkmIl{%XLSh{s@nixgS^TIybs?6sdIp=<6~-b-a&+VU5E3rYxj64+=Km0%l}v2V%=+=>MeINm5sSltCpuC>5h`{ldLfTj`v zZh%M_^_n_^+u@)lBq%p+T;x34(={?7tvN>*GXfyoh0oKL+@I9}6Lf>!gojDae=bw% z`}?eO{Fiq3(C@ZbYn9UL(6@K@|Nh_q`+qU6jZ<7#aScm%1&Cd9cdMexX&{*4%fL=5 zS0rny;Bediz300E2_x7F5elq3xN*|u1Ld_*a#)V+sILvHVp2nC)d{^PfDFdy@J&@{ zH1MY52j%6H8=MsT20laDrm37QHK(u3xZ+gB0OkDnp%$Bg1@7z z4@31!^-FE^TIuEqmx6-g&_RiKd=)V;Hk3mfqyUanjHs8?w}8p}GaS_A@aaGnV6lKB z%EqT$5Elv@0EQ*Bd!B|h61Y9VPa@%&r`hCqwi*=tuxa`h&D2QEO>*KB-Fx7&X2GdT z1xr2|rA`yR<5pb`)y0)WT@kLKCUf?DL3yFCtdHE~4sQ7>3EXtAw1YK} zE@ETOD_!K0$ATi0yEfXcuxAqx2;}}hXGdp& zR(otiKiGi^<_Jmflz#Z_6&dp~DK|zx)|}1=DHkK29w1gm%I3@&@89T1jA6+s?Otk* z-K6z;B%7GnWqY>19ivuv3LMJQz!yzt9EF-vg}Su~T@Zz?brTxSEcE^U3f>DudOkw? zXAycXM(AbE4EHBLbyCIXPK-G0CW6UWn#2C&z~O4?Pu{`3#o;D6(RoUhp37eL*8tCL zJKg5&zE20n83(HN-0H5FG!ga8M$7}oFD#`KDH+eZ^eksf&-ceQP&EuvDT1-(0;n}y zN>~E>Ar2YKT!1BM?a6EkqW>myd+=}bLPKIdKE>>8BRz$B!BJ^g9F}cyDSM2h7FHHa zOwTl4>$TDE(@<}3iz~Z#IZLSFYx81LP~wFw6EEef5XEPtv$Rsxw^Zf^Be{t)GN3MV zYWo-vGrjYPF^qCH5c6VfdLg$MKkXqa&|LRVPJ86Ch=6>3i&uEi_kFKQBCl0pKL!-)RCi*4~6z5(6=-o1&?n+xtY`4CdM@;V%MPfJ6z@Ai9OF;HQ@fVPPjpf1$~ rTdfG6TO%8=m0N}yh{0+?YLPhp?VfL>)|h0BrRlbGKNWeN=g0#Du6OT} literal 0 HcmV?d00001 diff --git a/phishing-filter-rpz.conf.gz b/phishing-filter-rpz.conf.gz new file mode 100644 index 0000000000000000000000000000000000000000..3ccbb39e858edee240816961f07e478ff132c221 GIT binary patch literal 5854 zcmV<479r^$iwFP!000021Dsk*kK{OVzW1+4z&_Z3rI9G=)qC;UyMPU>#|zK+vNt{@ zrYKQK>XFi~cTic~m8xb|FIQv9AIUs3usN&W`%Ki@}Xh5LF*FPv4{#66_HeW684wzZ9;E< zL+`&RCIHH7+(G`sRW@gL$G|ec6L(TX9mkZcx=QmqwVy)1+v!>a}FW+`1{u7x9 zC1B;tKmPvvUoKhlI;!+(QVonP8>vrOt!Q<*1enm_lgQ0ATG;>T|;mhYlE&kLMobxc+j z@8o2tu4~ESMZHgq#2fs?Ouo0kPrSBD3+X*@-}ZMAV`d&E7xju+D@(w{Mum-_XL#+y1lw(#Qy`huLV7W9)sJKo!pba*_iYdzW7Be;9&9^l zESU$j5gXc;aTG*Hi&2_P3RW^2IL%w6oSR{jf*rJo6n_q7GFlaZ~B&48P+*ZiPW zfvL~!R7IY?Gyqvd`}rbVd}ifMEzcoBey&#Iy#7qh2@4U-#GxMq4X>n{AyR|ih@`AO zGq;h}nD0|eiqG~H{`AYmY5s|l8rb2({Ifmr5sVW6f%*FtpHJ8{t%C3#Xu_LfaBlO|My`e67>ydHh`2DmLffR=25GWCCn=iJ zT-2CHIm%^(8DUXX2oz-nVKU*I^0JJQB$^(JW_-o$Y72 z*7{@9x~}IYB0DRT&~ojD`MQsb*?NTUZC-SUP-<LA~Ol>9TTK$9|X!6{}IY zSn4i1K0If+H>(mex9+$n%WW}D(dFa1KvER>$_8fkb-_EoOEdLrGb~t43&Hs3RvV<~ zi1Hon`*uV6w(DFkqs=9!<2s=Iw%t2JDeKyCz_=-fRlQl|tDrGNK=*7CU|$h@T~OY$ zNnC9qSl{R?9$I&|jT2&{Q_p9l>C#QbjL?V%THJ4+PxP?L+8*au@=8doyaBmUTwJ%67sUWy*ar_tL^ba+6C*++xU2Otxa= z*j;;i9jUsbTShyGemG_{BWlgAw>f8c9fony7$I?=L?K?9q%tCUY)R;JQQ_&+l$}Fb zOm$XmKeXl5hXc|MjpSK?j!;cl$B8@sb+K!oXeiar%OEgdKB2x=@kT`T%ExQ(V5>$l zFw%+G&cl<^Os$yvx$gz%MnyOWVjEhZW3%Jac4ETRnSBAT$BNDGjYo3KikFCgC=}Ie zl&8~GwjrpaGteG@P4@=aP(6%(;V}cM^5m&i&etCB?C*e)ChinT+x8*x@Q{0 zvILb$$^ilyk8moohzdj^RA)%!1Sf*$9uc!7S%sai?QH@w0c=f%AdwMIrl6i+n|T^q zXkoY5ok=~EPZ$#CJ>&u=qX!|34rfO|dG1>bNe<-&%&ZR5MJ7QbsW7gyS8}x)qE5?~ zFjN%?DJE@Xh2X&Q?6FNkQ>;5c@c-s|XiSRf9nsWasc1z+y`*7q-S(=qP#> zuuN>E$#?V2n-4{<8Tbq*jVi5T`2;`ASSySht-r1?F&zMcW8vQARt$uTVLq@4p}Y#3 zx7#>@_hE$Zi#*MBhEaw|Z#gQ;;9|Zhl*y-JAY^q?hg5h>Bru{qFKUE?9`W3c>{j^d zhKUy{Q)52VJlwG8aeTmARSHK5GQAK0SLRvAb8SxqjaB=x0mpR^U`}AWKz;W5ew>(s zl2ikv20^WXDV;~33DitEZv#Qh=cVn$Eg%uZZGg}a|6r>JF+KZ3P_k8JRi5*i5YZc~ zN3H2S4X3ARgZzyKM;`Y-ll#jFqJPxTLl)W)F&NvM*+s^(R&f}91#FHR?Jua}{vEi4 z8wrC@1tQI64Fxzb1oK{o`N6Z!%Wm3hyUoEFHmVoH0Le`qH>uQ^?zuE=j0RY?hDX+{z;7Ta z^~d#HV9OhbcLB%CpK6c4q0y|F$25(WMU8O$rl?U?JD>EZ@>iT1EPil!W9Jcy4LD4Y zK~Kh7GAIXVe1?}+Z~_4CeFrBje*3d)NjI9=2L0?Wr%iM?BI=DD{C$+~-}&kPv;*X< zEjs8yBympTUK)QzonVx|>O3+?*@{CZ16pJy%#;G}2iEIJZ_HDCE9SzV=-ksL99G!$Ag;lLkVr6?+R?08k(2IZBc$udDD38^&9DA7m&4wpZKoQ+3dG ziGRQd)irI`-^^JVg2UghWa-Omw>K4plAo!RDF0MN8^D}$Djb)rSy~!g&qSo&rah*F zZh=-`kv%m}WQ=t*3BW)5;b!=FM)C0O3}ooXJrXK#?Wg7u@6|--u{dYrb_4Rnx@MKJ zm}59qPm>EcqSJeFk7&s31EBpW;LwwWVhqGKL=MQhTY!;hbc}6guoJ%q)A|sotT+5O6&Qq zfIQC;D$`(r(#_z919YNUy-vrPOb~%)P@}nmC}2oK&H~RzbeI6Hp%!<&ia5}?(b5^k z{T8eDW3B~nggq+9$IUk6#NNN&f=T$zAYd2e;7F*qQoufSU0_%PrQr-jbcS-V3NB2G z&8WLkeGf=BM|qLfK{ene6pD*+0dnTC#UxNhL0%sLM@{pjw+L_@hjM)HA^Qx0)S*og zL7Mc@cm=p~5g;ipD;#9@J@H!#=MhGM-5*?t%k)6}=tg@RtKqq^ohy_E-0q|0v7uG4 zn)L7b!tX?|>i`MhsFy>}k3HFENG~B`*h69wQ~*AM1qihikRh~UG4NJi$Kb0>4+T2| z*FUN}zl|a*)1uB&jLPB%RmcP69-Jl!dw(OT3~VeUke4A1nxeOk9>E{ne6bzIT<7WP z6jT9%CxyBy!9CT}WMxo>jZ2WD^h%SVeLOEp_+KsL{PY0zfuU-0%@p#FVIvefffWOH zBa*-o6D?O2uBtFa>fuQFZ%2TuU~_{GnrWxvc8o`1iGq6bJi9IOn|Qn$7TCXr)!EAj zr+)kPHV@VOd^|RPmknguqQN*3;T+?5+C~Aq5}3*JTs#+%THPZkRvznWeM z$V<`n_EMzRmm*_di?)}d+wxMhh}WX&rD&aBithBI2>9|r+^75bYfz7C?lh^Qsfn1} z_ehNauXx&pD-GN>R!kus8PB>G4!o>w_?a0xe>>F-r*-wDsi zdeX#X*w{?f`CC=~GBHUb!enT5kDEq-ak2=Y7$4H#XyOHih-6i4(Rpm>lV&MRaFRl9B3R(6CYYr~0*wOa6s8>NQ}VJx z6(@uhSh9>%S&b8d6JF6I<-u`KN`)X8aSWr#L{u5gv#g*sVOgCdB-p3&-@vFjq9Vss z@~TYIG(!a{pj@J57V48Fb&(`F5FH{g%F+rk#;dw0{1@SP6&wc_B$ri@;R^Zy>{A#t zl=v^n1^ZB*W<^@?q++n`tg35FL_w0Aa!77C)F)3R%mlb1$}*fMNmWahk{l(X z5WLRIP@f{NSS3qH=im^56BxFrSix~2N?K*X^%NB%JflUP5G8q%!NegZ1`*yUyn2+t^iklR zlf<_qA`uvR#IZjVa1d@6WN-z}opbUy%ZrF-aX^8!vnXRlnkE;X1oWDu8FS6y7ap;I zMsR)x-v{KP1z;hZHqFw4I-iHfX&mDb7>tDj0LBZ_A`S@*PGH50Yfe!FAg*{luVEC0 z5y=S8(<`==r%^;=hrb~r0Nr+=UlPDb-DN%GHBMP4dVCOoqxnTft;6v_m1YIA3*e8t zc$&gKfZqhlPz07}OJOLHeKmmJ9bNriH0 z9c59@r4{{TO~A!XdBk3mAgm{#wZNEiVca0|x88X-2ECOK9qR-)#Sa(hkz!mcMt~<< z($gAr805zZbEInK)#f--FJnC}x^!l0N|szBa_6-D>1UlfYjf{ zG0~m$o(gRcsX(jS_R!QI{_X`B3KUb43T*q9x-wnL$Xy4<aK0G4S7mkY6^a#8N%M&&fAuW(r8)5v9`d3B zIyxj}70)FdHmx-FBXds&Q{vt`Q`38cK z7q9Bcu6fqH+cMPiJUigbCLsloC~hVb5mAEUp1@mA&BJZKZYbh9Q|uZlEi02 z)H39TFT4z42*)_QB>?7K+3L0K=is0YCWF=i_~OrmV_mf{+lin>Rf1Nv4x`xRsg=0n z=zFblu$px%>@?*^8T*m&fB$h*Lfzj zb7)>nMI}Ai@E*o!K&h3Qu3_o~>q_La-~H54urcz17iQOhL%I?=H`Pp&rdC%_504Y2 zJtK123Sk{tfxheuZq&HN zBS=$+Pim?t2iF${1NpXA<4LASpmZ*WgMfntYtoE>?;ukC)0lLniQ z_s-#SpAq-@_qEWBBWWv3s4r7j-t}HRac+eT^lX!j>ZOZ(ReIG?ynrFtCbDS}Z(qgi zKck}HyE1+^3RKA{#s3+SWZ$Ka2(J3_aXUO}1lJCnZU{~dnkt1|O4O}xef+0dyS%GK z%k#mnd#h!rJ;McEXh(~uIv5_{b4)?$siBX0 znf!8;yM24+mGLrY!D3i zN60OKSCdW|HA?o6NgeaLt}exJG7d|#w`f#%^~$=J?b?p*-8!-U_HM^Gne9rt-Ako9 z>1CBZ=`A@w>8-G}-+Svxob)!$eA3%Xa@ISoC%xmNJn02IJL!GW>7;jg{GQ8DpSK5#?Ya#FB0+gj33}Vk6 zy)W#`9B(fGu-A?EhopVbdH{6l2}`%cO zIZ1@#Id{){DX}p#Dic+E olq>LB-C3gXbp}MEbf7f%hb8y>pC?$?yRZ+3KXt|JTcte!0Q4+MaR2}S literal 0 HcmV?d00001 diff --git a/phishing-filter-snort2.rules b/phishing-filter-snort2.rules new file mode 100644 index 000000000..fad9d2d8b --- /dev/null +++ b/phishing-filter-snort2.rules @@ -0,0 +1,475 @@ +# Title: Phishing URL Snort2 Ruleset +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1nvest.bigbantbaz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000001; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"25116414.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000002; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"365365news.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000003; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"365f09.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000004; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"750115.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000005; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"823pages.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000006; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"95564339.awi.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000007; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"999fc.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000008; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a.yyyy.cf"; content:"Host"; http_header; classtype:attempted-recon; sid:200000009; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaaa.whilefish.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000010; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts-microsoft365.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000011; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts.0ffice365.support"; content:"Host"; http_header; classtype:attempted-recon; sid:200000012; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aidanochka-tabys.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000013; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airbnb-clone-sahinur.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000014; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akbarinewv2.morteza638n.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000015; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alaindemeuron.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000016; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alexa81o.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000017; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alienv2ray.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000018; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allegr0llokalne753724pl.art"; content:"Host"; http_header; classtype:attempted-recon; sid:200000019; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allhrteam.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000020; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon-clone-by-sudip.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000021; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ammuvicm.work"; content:"Host"; http_header; classtype:attempted-recon; sid:200000022; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amyr.iran-cyber-net.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000023; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antaidossiersuivamendimpayeerf33.zynekcctv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000024; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anuragrauniyar.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000025; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-voilation-policy-issues.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000026; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apple-id.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000027; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apri.154-203-197-141.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000028; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arvestcreditcard.embarkdigitalonboarding.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000029; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asdfjeiod.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000030; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ashleyproberts.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000031; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"astounding-trifle-b88a2b.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000032; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101397.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000033; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102641.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000034; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-107756-104508.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000035; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108102.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000036; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108651.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000037; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-101246.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000038; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-105533.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000039; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-mail-109459.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000040; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-servicce-mail.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000041; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-sign-in-107078.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000042; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-yahoo-mail-105061.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000043; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-101415.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000044; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attinc-101356.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000045; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailonlineaccountupdate.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000046; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnet-100294.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000047; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attonlineservicesa.wixstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000048; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attonlineservicesa.wixstudio.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000049; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attweadminservices.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000050; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"auth-sharepoint-asr.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000051; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avertisystems.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000052; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000053; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b35ccc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000054; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b35lll.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000055; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b35www.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000056; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000057; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000058; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000059; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000060; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000061; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000062; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000063; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000064; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbf-alpha.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000065; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet365t3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000066; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet938y.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000067; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet958c.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000068; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bhngfd3.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000069; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackdasblacks.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000070; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blsckdagsever.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000071; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bridge-9wdpjmsoa.pancake.run"; content:"Host"; http_header; classtype:attempted-recon; sid:200000072; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brubreumummeddoi-4514.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000073; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bscusdty.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000074; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bsozvycr.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000075; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-102368.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000076; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-106861.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000077; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btjfh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000078; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bussinessaccounthelppage.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000079; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bwfujmww.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000080; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bx.sfdsb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000081; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c.cting365k.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000082; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000083; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"can-post.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000084; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"celery.sa.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000085; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cen4-six.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000086; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf-worker-pages-proxy.1352562939.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000087; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf.13084493.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000088; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cf.iwoai.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000089; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cfcf-8.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000090; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cfr-reed-taxi-wayne.trycloudflare.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000091; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chain-trt.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000092; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chainsolapprove.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000093; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chat-wa.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000094; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"check282.tempisite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000095; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chore.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000096; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciftcininbankasiziraatbankasi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000097; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claudiorojas.cl"; content:"Host"; http_header; classtype:attempted-recon; sid:200000098; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clivenicoll44.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000099; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cloudflare-workers-pages-vless-a2j.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000100; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"codt.digitasianetwork.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000101; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbase-com-18690.subttrepimop1005.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000102; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasewallet-verification.198-46-89-184.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000103; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"company0rder943.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000104; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"completar-la-verificacion.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000105; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conductibili.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200000106; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correosprepago.bnext.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200000107; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"crenadenuddoi-2258.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000108; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cryptorectification.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000109; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently5267.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000110; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently70.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000111; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt909.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000112; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d.afirkz56924.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000113; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dio.azrealonce.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000114; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ditgong.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000115; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doc-online-1881.on.fleek.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000116; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docsignauthorizationrequest.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000117; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docusign.com.bestfinancebroker.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000118; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duang-5dh.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000119; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duvhkeq.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000120; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"easyaccesscommagebn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000121; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebay8787.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000122; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ee-account-home.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000123; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ee-service-help.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000124; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ee-service-portal.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000125; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eln3.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000126; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enormous-orchid-howler.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000127; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"espaceparticulier.life"; content:"Host"; http_header; classtype:attempted-recon; sid:200000128; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ets3qe9ooms8t6i8.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000129; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"excelorgo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000130; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"falabellacom.dominiquepg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000131; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdesq4.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000132; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdsfjiwe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000133; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fdsjfkweow.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000134; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fekoulamevebouna.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000135; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"felomane390.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000136; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ferngos.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000137; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fieg.84yr483rhfwieujro348ur84.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000138; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"figinstenatecom.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000139; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finansfaizsizbasvurum.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000140; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"forested-mirage-samba.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000141; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formtools.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000142; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fortradesetup.hamidamnaie.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000143; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-5436781.webadorsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000144; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"frogsrus.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000145; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fshraha.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000146; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fukshumx.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200000147; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gazruinv.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000148; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geaoolsv.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000149; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geminiwallete.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000150; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghjhyu.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000151; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gimennlouin.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000152; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goldenrod-rowan-submarine.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000153; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gorgeoushome67.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000154; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"group11-vvip-hot-girls-combi.viplch.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000155; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruppeflorian.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000156; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hanisfir.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000157; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hedayatfreedom.hedayatkhakpour.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000158; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hello-world-morning.freekite.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000159; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hello-world-muddy-cloud-f45b.mfoster0425.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000160; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000161; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heluapla.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000162; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hemanlau1.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000163; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hezhouruan.552008598.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000164; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgcdhbxnf.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000165; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjrhd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000166; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hk04-123.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000167; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hkmqo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000168; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-100317.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000169; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-102207.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000170; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-107257.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000171; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homelogin7t6sdfcgvhb.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000172; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htaflytz.baby"; content:"Host"; http_header; classtype:attempted-recon; sid:200000173; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htaflytz.black"; content:"Host"; http_header; classtype:attempted-recon; sid:200000174; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httap.l-teiegram.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000175; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"httpsbellsouthnet-102649sitecom.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000176; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hup6r.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000177; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hy.fuckgwf.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000178; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hypophysecto.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200000179; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hzuayvvl.red"; content:"Host"; http_header; classtype:attempted-recon; sid:200000180; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"id2.xbenihime.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000181; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ikergalindez.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000182; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-delivery-bg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000183; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-trackingcs.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000184; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info-trackingiax.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000185; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliveryhbo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000186; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliverytcw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000187; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliveryxs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000188; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"infringement-service.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000189; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram-clone-in.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000190; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interbenefitprestaciones.referidosweb.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000191; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iouwerty.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000192; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"isnworldwide88.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000193; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jaydeep8806.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000194; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jeanandpeterwilkin.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000195; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jetconstructionsgroup.com.au"; content:"Host"; http_header; classtype:attempted-recon; sid:200000196; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"joeandvelma.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000197; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"journey-x-pro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000198; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jsdfchkdsds.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000199; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jshattkee.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000200; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juliusmasih27.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000201; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jung-sohn.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000202; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"katiebllair.wixstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000203; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"katiebllair.wixstudio.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000204; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdlmo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000205; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kenzmail0.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000206; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ketura2010.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000207; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"keucroilluxibrou-2718.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000208; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kuconlogin-ui.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000209; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"latam-onipojes.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000210; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"layanan-bntuan-resmi-dna.prbu2.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000211; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledger-com-updatefirmware.aparecidovisentin.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000212; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"levappoprauqueu-4688.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000213; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leyoixoimmecou-5619.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000214; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linkbokepviralindo009.vipp.blog"; content:"Host"; http_header; classtype:attempted-recon; sid:200000215; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"liveairdclazmersn.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000216; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lo6-cas-projects-64947843.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000217; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maatamicklogginns.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000218; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"madebybmr.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200000219; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"madhu821.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000220; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailupdate87.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000221; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maine619.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000222; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mainnetverify.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000223; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mazulyta.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000224; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"megrebeikenneu-2106.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000225; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mendhfjpl.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000226; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metacareer.com-case37169314276.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000227; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metagalaxy.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000228; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamacksiologus.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000229; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metemrsblogin.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000230; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meyetamaskiwalt.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000231; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mianfeijiedian.lawcpacpv.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000232; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"milanharvestfestival.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000233; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mirobitsgt.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000234; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mocp90.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000235; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mostafa2.mehdi84888.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000236; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"movie-firebase.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000237; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mubki.hp.peraichi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000238; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"my-site-104564-105934.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000239; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myaccountsignup.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000240; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navy-nose-4544.typedream.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000241; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"net-flix-front-end.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000242; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netzero-webmail-105996.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000243; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"new-currently-1-23-24.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000244; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"newattupdatemailboxkidlyverifynow.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000245; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfty-proj5.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000246; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nnbsscnaceesngsetr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000247; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"occinamete.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000248; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"odovsccs.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000249; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"officalourtime.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000250; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office36503.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000251; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ohscorgza.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000252; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"okm.znt.temporary.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000253; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oliver752.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000254; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-e-commerce10.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000255; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-e-commerce11.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000256; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-e-commerce12.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000257; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-e-commerce5.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000258; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-e-commerce7.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000259; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-e-commerce9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000260; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orange234.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000261; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orgmail.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000262; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ourtime.datings-information.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000263; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfocl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000264; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfocs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000265; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfoga.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000266; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfojq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000267; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfolw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000268; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfoor.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000269; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfooy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000270; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfoqv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000271; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfove.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000272; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfovt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000273; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfowu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000274; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.updateinfoxb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000275; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.usertracktxz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000276; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pages-108-tg-cfzz-ip.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000277; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pages.tempisite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000278; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pageverifycenter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000279; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"patjimmy323.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000280; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paypalloginin-usa.blogspot.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000281; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"paypalloginin-usa.blogspot.hr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000282; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pcmag.anycubic.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000283; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"port01-acf.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000284; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portal.chiaveggies.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000285; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pruhuffopraussou-5681.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000286; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000287; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000288; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000289; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000290; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-2801359d2be54bfd8701132626efeb73.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000291; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-3096005ebeae423182ccd89665564d8a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000292; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-46a5f86348ae4aceb3591d126020999f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000293; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000294; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-51f896deb233450089fc1a520e6ed957.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000295; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000296; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000297; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-722720be67154192a1102b2cf085d306.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000298; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7d056bfeb6b04852801553620fe62c0a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000299; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000300; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-873fc6a3edb941c6a17f50911dfca518.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000301; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000302; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-aab4be29317b4ec296517a557db12622.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000303; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-ba5a046c69974217b0431bca4ba43740.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000304; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000305; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c59cf4e950b142949df8861e60b3689d.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000306; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000307; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e5855431d98545b38408f52af50ab8a1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000308; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-ff0271d87324424a9aec83337e844a54.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000309; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"puertaselectricasprincipal.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000310; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qaffixledger.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000311; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qbstdfda.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000312; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qpownthenewyhadvanceweb.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000313; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raj-tiwarii.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000314; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"restrict-policy-nonadherence.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000315; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reviewboss.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000316; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rfgxg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000317; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"riaayaoman.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000318; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roadmap.binarydesignhub.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000319; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"robinhooldloegins.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000320; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rouzhda03.kambizmedia.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000321; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rsjxzl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000322; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtyuiuytgf.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000323; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rubinhuud____llginnh.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000324; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rudra-choudhary.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000325; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.team-s22.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000326; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sadekk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000327; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sajsa.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000328; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"salarahmad786.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000329; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santanderpod.fsthosting.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000330; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satinnaaoabbs.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000331; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"satyarthi.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200000332; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scarce-army-wide.on-fleek.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000333; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sdfvgbcvb668.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000334; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sea.6e2efhxz.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000335; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secrbnsuppotyu9.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000336; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure-ledger-m-auth.webflow.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000337; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.2rk3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000338; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.pxs7.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000339; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"setshinobi.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000340; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sextelegramxxx.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000341; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shareorder711.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000342; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-101342.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000343; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-103098.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000344; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-106054.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000345; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-106665.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000346; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shawsyncmailservercommunicationworkspace.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000347; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sherman-relate-rev-baskets.trycloudflare.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000348; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shobhit245.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000349; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopifysite.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000350; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shoptkoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000351; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-in-att-108611.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000352; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sign-in-att-108611.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000353; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"simxtrackredirecttszz.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000354; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjhsjjs82.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000355; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skill-meta.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000356; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sky-107842.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000357; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smithjamessv328.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000358; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"socx.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000359; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sparq.eu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000360; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spicyhotcoolsoup.s3.us-east-005.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000361; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spotifyl.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000362; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssfgsfg.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000363; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sss.k999955.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000364; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stonemartin1001.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000365; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stringroll.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000366; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sukienffvip.doiqua-garena.io.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000367; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supportsecurity981.tempisite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000368; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talktalkserver897.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000369; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tareq088.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000370; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tbsl.by-on28.my"; content:"Host"; http_header; classtype:attempted-recon; sid:200000371; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcaconnect.ac-page.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000372; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tejlksdoisd.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000373; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegcm.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000374; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegramjessica.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000375; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrampx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000376; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegramsexgroups.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000377; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telezelm-ivee.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000378; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telgramsignal4.sg-host.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000379; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-102379.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000380; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-104033.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000381; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-104394.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000382; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-106968.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000383; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"test1.workersdev40050.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000384; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tg-logrom.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000385; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tktk.tktsk.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000386; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tokecn.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200000387; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tokeni-1601.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000388; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"towrewds.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000389; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpwalllet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000390; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trustwallet-zendesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000391; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuviaje10.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000392; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tvjbqiyv.guru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000393; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twcht.twimobie.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000394; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"twimobie.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000395; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uedy.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000396; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ultsyncingsolana.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000397; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upheldlog8.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000398; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upholdloginorofficialsigin9.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000399; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"upholld-lligon.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000400; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usol.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000401; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-cgkzkukp.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000402; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackaxd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000403; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackbrs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000404; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackdht.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000405; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackgee.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000406; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackhsk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000407; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackivo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000408; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackjjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000409; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmra.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000410; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmvz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000411; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackuqg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000412; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackvgb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000413; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackwbv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000414; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackyqb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000415; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsdana.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000416; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsdant.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000417; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsservicetrack.blogspot.co.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000418; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uzomadj.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000419; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vedi.154-203-197-141.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000420; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vgmrm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000421; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vkkvdkdcmm.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000422; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vl1.spaceysen.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000423; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vobroffexagru-4404.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000424; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vrvtn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000425; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"w1.5114559.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000426; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"waassistance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000427; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wallet-diagnostic.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000428; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletsecured.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000429; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-lupqrbm0k-uniswap.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000430; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web.tlgrm.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000431; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmailserv3038z.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000432; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wk.xzte.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000433; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wodjrvrisixc.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000434; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"worker-dark-queen-529e.servers5555599.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000435; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"worker-hidden-frost-ba39.yoveli7450.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000436; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"worker-site.aopages.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000437; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wsa.osmqone.org.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000438; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwwwwsasasasasmmmsszz.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000439; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"x.tovip.eu.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000440; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xhjxkj.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000441; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xixiajiaju.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000442; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoomailquthorization.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000443; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yungtee3.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000444; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zagbasamothega.dnsget.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000445; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ziraat-kampanyasi-besbintl.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000446; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zxl.cbbnbbc.nyc.mn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000447; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zzpov.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000448; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3961f442eqd80b4e3c28f75c4ba682dd68f9.html"; http_uri; nocase; content:"datagivers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000449; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/uebj3h3j"; http_uri; nocase; content:"flow.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000450; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq"; http_uri; nocase; content:"gateway.ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000451; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/medoeu"; http_uri; nocase; content:"hm.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000452; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000453; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/46wjpyr"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000454; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/910428"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000455; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cdmd94193ab"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000456; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/n3yi7p6"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000457; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/vre1p3j"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000458; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/p8w69"; http_uri; nocase; content:"s.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000459; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/107519/c90488/4a1f04e6-1517-4254-abda-f0aee8fe0ab9"; http_uri; nocase; content:"safebank.onl"; content:"Host"; http_header; classtype:attempted-recon; sid:200000460; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cert/loks/mir"; http_uri; nocase; content:"scearmcommnymnlty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000461; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/cuce/rit/pil"; http_uri; nocase; content:"scearmcommnymnlty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000462; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qinmot/truklop/poli"; http_uri; nocase; content:"scearmcommnymnlty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000463; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/trawbe/nunty/loki"; http_uri; nocase; content:"scearmcommnymnlty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000464; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xul/lex/ponu"; http_uri; nocase; content:"scearmcommnymnlty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000465; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/so/e1p6lravu/"; http_uri; nocase; content:"shoutout.wix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000466; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/ghghdgfdgfc/home/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000467; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tlly"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000468; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/s/att-support/6ca3iebztzztx2gi"; http_uri; nocase; content:"workflowy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000469; rev:1;) diff --git a/phishing-filter-snort2.rules.br b/phishing-filter-snort2.rules.br new file mode 100644 index 0000000000000000000000000000000000000000..47cdc37fb246d10f0de7ee5f71a27663aa7e65e3 GIT binary patch literal 7808 zcmV-`9)ID1n$`~h^8cFs$N#)1qw`XLBT>BlLP|gO+Q3#R5iEk1!t=GPEJTF_6(UGb z0E)uhEHm2fX_@XFMQoSsw4Cjhw@^$XK+xG<8Dp4(3IS^EIRXXv*GCoaTt=SDSX8iJ z9!m~$4;AcV1qBEC81r+u(tb<&l?@^y>;ufkuYHXzZg)Sv{$&ky4QcsmSn_iIJ>}B) z*T40M728k0_Vu5~d!PCrUkldzK^P~4{*Ph!!P$>t_}@SM+Sgxxj!>}v_+nok?yuke zFdJXw({LW^MScbOgH1qI2cxbb~_M#Zlk{nM{~ zrBpZcI~e`iKh9A<{n}S#nARU(X2|}ixt;&_zn0L}{{E`aTtlA=ZY3`de4FMp`WMi^ ziRE{>?S|UyeK{7kZ*pz#p;X`7XBMH>#!sUk z>&T};PYSx6e*UV#|44AnH~&LqKYtZGf3Tl_$0Dh~6=Pa5Nu9F;D`!qOk|gE z!xi{450e>KB>@@Lz?fPdSQS&l#p-Bhr9bk)<7p07O;?$e(o%?t!WHNP3kU3Y3dJgFfbi8BBIsKT1rAZY;o+|R|WY@pl*8j=l9vyqt~LMwV9+IXiG zZf49l^K_W!;P9o`rjqai%c+6~uMG*Y0cl|GO1EVPR?stqVv{8<=7gle8d5Lx#Nseg zIF1KcNx!mLC?Vl>a=Pcz@BuAMqE{{(maLdtnWBOS&K;KQ*h^0I3ZIW7C834YTrT1V z49m2H#)gp1K|2zufa&A~?u{1LGILpVL|n=cW8NSp9F-WkJR*fPFz#fR@mk7_g`^se zG9?Kg1Yy%im}Jx)Bleb(q`(>m zWiM@B!@$%Y7}25ikG2{Clbm+ho88Ys3o$~RYIk){<(kZc> zAZ0){d>9K4_TcK_&vU1SKthPp{3ni6!3yO zvEOaCM1p*sTn;^< z(h2YzyvKZG{*q^`>3Lu0ySz_zEzj|Z;&5+wZ1?gGPS%VqfzCs)Zx>RH%JFCQ<7>HH zQ3uX%6c$nv`Z})b9r&`pl6|c1S7gqXz`68w97nOq@$luH!_m&GbBOB$ZV7pOTKwAzK0A60dhxPF^V;XOx`dr=dn*C6%3t zuOwL|5VU%uVSr7VEotIHt7!|iNthBk_v+COz9{2>H3Vu+%j`uHLt35lHje2k5B106 zN?p7Ou!n2Mfqm;umI=%h6+aw1GWvuP{DNe<{PEgr26{kpupuoy8HSd#%IdaY-}}C! z_c;)$n9O82b`*r9x?X*|z3$`F5 z@u6Px3Dz)n&|p6hwNZEH#R*mt7K~VKS{^!YUbdqE)k-i76&@?KBwUwG~nj zJ!$X>zdW!ia;L#qb3uC4+Mt~>rI!eEb0LK!admm9;Rywx{eqMT z0y{E{s$1tM`302*3AUg$q*ypH1(#!#(mfRIlpkHoZxtJKqxv{F#n+ldfWKC`dssFM zoREE^{^pLZ0Yu_tZPL*)y|A&%DQ;DfG_7B)89fcOcH3IPBkcKL!=P-%%o$uxxo^>k zq+!RRY%)Y@VkW|j^!P~2q{j*!#z+mtW0|Db-ABu$$c$O86tO`e5u(t(PEu(kEmJ8g z1YV1YDz$;mRg7ra`Rc=A-N<#8IX9O~t<W-6XV-0HmYp-H#oGE%kdL;oE@g>=HAJdIT8Q#%!KAiQ zW}))^TsM4MLt8ns6Als$^l5xvD!j31}+!N5bAYN$Kuw%bSF%YdHUNP^GP)tL8JzAzPHaBBQOHM!~Jiw0h zX#p2%N?U=krE^$9stpq~%z}to=fX~yBJ@sEX9!OXkA-^n z()V^Xv`ks-v^f{7Ur|!+p}>Nq!fs(RS6gwhh|Ia{E$1k+;8-T9=3M&G*4Zkye$W;6 z;9*Y?_HApcBxdqy7b8jvJsS4b9t%E~M_NY6=8~6My6847QxFT)T-O3Ctbnyu3%kVJ zx4QQIlX%z=y(w5nBDBC$dPwJf25t4grVGLvwkBt5MOvo*wQIrsoHq!$6w)Po@ZPtZ zl&pug@?Qa4*4KLXwTQNoU#o~E?3hx_JtVq>W^>-;@@Sdv*DG3b^q5Naq~r?{som~f zq!P8+qOGjgAxk)I!Q5+22UCY#))E9Od3h!GgE4ZR;UH^nWC1R zRt79tmeP*{=a@@?DpT63fkkD76zUvG&{oZBenk&AwC&pyectIWMQmGPJ901E{@O}) zWqsNml8u=W>2Phf&t|YCxx$PDK5=^Y{w6L4Ivbg#vUHzwZCD1$n}utuw`D5g?QnPF z;J>8pZ)HDp%faULAk;JY)?L?mQDO!P`w_!@!*Qh8+G=b?WyRRxh!C`u$=Vh|wL^-~ zSuvBgdRI@g;9tlF`@%IXy+XxTMd>o!Qj zxJWi&N1C$j?;Igu4g2REn>P%Cb$yAJ30f6q@sRTYZFQ}R;N!>@yo{_5>Zvt0UH$Bq zbG7SOZPl&PVQnzSyFJu`y)8j4FsgVGPPCF_X>ia;8U|cSZ#!w3sFnGhL2VL{bzwj6 zJIf~5a{6$lmY%%C6;|U*KXeOsZMChs!FtoVyKT8-SWICJJJMe1wsdH#YL!f3!?HjO$>Y;;P+F#Lb!JF& zCWA!rvv1PU8U)qXSU9(Yq zY3>4k#FkHez%|TDNXsyAN=G45)-JRY)7oHTzUVV{&4TM`Z6&PAIi@NG-7`MQ`!i0t zE39-pK%2qmTH{-Y9xp8uvWiy7{le1jVp45yRj8?cOi-@i(HL{E3R3C?w?{mT8T6Kn zwsKaBFN6fikM5~uSBP5}*Z?h)wYtp<+aR8XwPvreiVqa}E378bGD7kv#vLLG?8qf@ zF9~n*(V&%L4OoNOB^j)B^VQd9ZPl%!^{Okhwqd6&X}OBkxnDhoUiTNDRz9wEX}NY) zEM7e=q~3ut46PcKE3op-6Cd{iLt3sc6|oJ|vqOk( zs2s}&5^KZO3-EyrD-zn#ASn^8?avqW%nz++)t*MR` zp}|ga3P*lnjV#)prV;MakA8vJ)H)fEm6&CT%;giF@qsyHr z%_h^pN_H30X7h%}8A^ScU3nNTQ3%IDZOqF9t)eTP2%&fv;n}g&)Le*`3sx<}tcimj zu5_>$x>kvnlN^l{3zM>8yhFAorGndHUY3wj^;bj7g{qQa2aoo)d!Zp20(YWSYd4&2 zDrzfHWl9k8OkBN;!YnPnKW&GQFgGG9df;+qDPhxe7d2!#TCP(StsR~o?*`_8m8`IE zDQGclm=bov*`RYB+TO)%$K==fb;Q&ZR&z8qm?TzX3X@e$78E1XlVFmM+C01?En6VM zCu!w121&*p+*U)5dFi!S7M3%=W5d1FEq`IoHfgzhRkh#w)_*4sgfmXNZ;yTAgPP5z;zDw{pPkLQ)lN#jO%*4<*~s>e9Axw3WCD)Slfj z4QpX-<*baJS671>INfpe!AN6F5(2A9uY3k1b0}z`;zo|PDp%cP?{*7xJ?Mc2f?LB$ zTScqsev|i{jl3;-S`s#>NenuNmWx{*x!>cfo`og#0lW&ZhqjtlPnY1lNy-(8R8rC} zvn9SD?CFWNf>y@g%;|FsA2R(3%_5lms1F^>C6AY|Jy^tlyr2yR%fz3{*!JWX2}ti`(#hvW&x)mg`WJ+idwP;q0u$lVIMZNLl+gwbiEDdC;;#V;f6cY)G%I8r9X!QI`t0 z!j=W#*4XlT!#!e4yx=z2k_+GyHM!9?TrJr0KH+BAaw6cIx-_^2wp<-pW7ZJvB0v!tA8Ct}uK zVc&1TMd_cmN>mF6+y}(QV#c@Gq=LVghSVdstG1$4*VQyOtmOfglO%43g+jVrw_&E7 zXt^@gfsb6;z(}p;HLkXoqPMBBach7RmnAg8)mENr@hE-m^X$BBQmdCTy9`5HnX2Ea z9Nm&Z8lh*jmd#G;*?|P(I9E82o`W#7@a2hjv{P@y1ha!27|Z|?rI|oFrUzyRl*+mp zU_;L|`q6OX0i2ez6JW$72atm|c3?g(@lHGfXBH78_ws3#GY@ElRYGVxffLg(K+sn1 z%7osBn}G>6d2UfjJ9{$@j0vu}#u@D>&^DNGPBBb+7*seMA*_(NV1_&A&7`$bT6zO7 z=jBTcYBpL(11Q0v6>4IhaqZaIqiLE0ub?-Q)-$1*_JeWK2xq2A0%{nP^=g_VyprBX zvDr-8qvb+KH4J8&9RtM&)aWNQ!mH?wv@*`jBOBy^66Ih$)5d8pHICK@fLGHuX~V$_ ztCgRm6r;8in?|VsP&lRi^2R&T8;zWge6XlTrX-slO#h~FeJl*IArR|JX z+d&$YWlAZfgyzGHn!9`???m5Ylr!Mu#6h8Ceze03o+}|n06oq3dtNaN^hRbBv(q5Z z+etE~fsL~oCdT~iKrv${UPf;Oh5<-xXCsW%)_|G#WRzFdIstkHn9~=5l@|FV*k~m> zK54~9P-^s+am_irg5Jo2f~>?+!F-Yo&=3 z+F{}YA_iW?i*aglv&2aamPtOz$U!;suQZPRmC6yIM4rW#yW;K8{z~D8E=eg=;59G}#xRhMN1n7(qVnib) zC>dxcPQ=pSP==jdf`d9Eq_R9f(F)zM^Soi6!$)9C#tv9op)nSfx2?_39t;7?dCVhU zsjZmsy4R^Jwd=xOebEX5u~aJXA}w4{Lh!TTSizVUtSRcDZSLMuE9C@!#e&KCE~ORv zVflorHp}K(BMhvj8T0a4YFyI_b+D+E0B}Rz`gRK@?zDQ&Qlu;{u#%KPpc*;O>*wjnD6P=_TBzuXP4k`Guy*$;iqLA# zbiE+y-NurgKyNF((7t;aSrKi8zw-IWZVTmQ6LAFD*rF-Nr;gB04BCfS&m-0lUzRw~-cdClqy*X#vaCpol2!>ce$1H~{I zkR=V&gOV^SJk(mjtJ$n~az4KE%*gih+W)zb%&)b1$i~1bEbXNosj%$5cDlO=4N1Y1 z{C@(eW1YkkTA}lmP<73A4UJ1x+N$m8e09x7m{Xb>qz7%)y^JZE(YBngw1RT>Hp?k9 zm6o6V2SIVm2wFR9tM@glVgL9s9hI5eZ&a(#vq`9}_E*g6Ypt(WHGC0L_L?8%;HHor zTcvhw^}eE5x0|qGG#ka*Ua})*kR9TJcGXjGo($7qaIDa5Hi+Bzc?rB-X6iB@ ztq=l>QiFo;!I(fRLPuz}Mrv=86E}3`2H`qOB5Gsx*AXt@<3Q zw*{@B6%iM=kB634$bXeph644%T7&CLBCSvXE3IP7@mW5YwJEBKpP?kwt40srksZ&a zB_y1PO`~8(s)jLwq)b>6L`myH)(Kdk6%t_E?`E|Xn2$y4#tB*>1a=k6SSW|t`=%8- zU{}5KOH6Y5%lFj6@T-M-n$Ae)3X@AcrZ!e|y8WSLav0Q5lnQHzNn1$FOUe5U){r1= zYa4A_tJ@HN9V^T!5-o4&5)H9|ceKJZ1)}FA%fp(sT3*Mse3eia@7_dPv974J8N+_qq@;9viB^bfB||%3_8sn%F1>8aYb&4CA=>5E zM%xwkYy%Gbk5-6e39|#M!mEzH2hg-a=W5zxYuXg8kd~Swq=Ip6Wvw>*v7!q~8yDj| zPFoqPSwGfnmsv=;bV4td0b&hHNRy#}Ct?^qi7_lW*@jkXS2d*995>r(r7~63>k$p& zLEN%ETi=daqkCvMaEoM3cPxR==<8{v+SE1N`(jIlT;hvg8{`UK7DUK3zN~eFe8iV< zX2=b`yj~y3Cp_5;;B+=%%lSag@TI>O$T_~8i-la^%VkfU_`$0f_)YglD-~_kn~ZpQTUuPoZV6mQ>BhNTVi4wWOG7Iq zoI-PL^z$^-<)M|DP04m;|0-t*HGEv$Q1+B(y%vavvXKLJdLE+qgwzYmxTKcaAlP*Yb*5>vb(3HA@M{aRKU6U9hF1 z%D(0EpI(s-W>Y&kpax>G+K^hDICxsA^VBV#Po&P;WUZs=c649Mu#Pn4d5&BGNL!7j z59V7;n$1#je0wukiNbL+kIG34+Hmi+nWz7kL&dxKxV?m*zfyKk@qNvCXt0EBW+@3V z>%;@`-O;|pDqa>dA1y1$7GNxGb)e4o9gewvANZqR1Q1W#Q+a~s8?Ggl$Cn#od?oQ3 z+f#(9MdkJ3s-(!bGuHGr@_83%c)@)vcO-a>rIkukr+@G0v&_SFHJA_UPTS1WO4%vN zu~ASggcaNoQeUs*E{~IfM?+eKBnzz+vzmTSZ13!^$yTt6y(Q;&KS?$Tum*$G{C7&? z4&$Luup_tYEXa<$o2&q9xE+VN^z>AZT18r0X{}#C-)tBao4(yNNMpVwuz8TE2~%t& zk}FBTdLZ)vh-StCtVL4*X0(ttnp3o_wt8J(oNtGveaF1j?>%HF&QTpg*+W$JJ>7eX zt)Ns}1+Tr+Z`U1um(aeC5RC`R`G4p;q&>IqR{9q6@qOeNYzQmZ7M8$e@jLa@?#1`l zYC%}ZUg@XD?}(r8Bd2}`tN7y7{Eh6;vB25CALrNHTkdTqk`%+iYW_5x0k7|6T~@!$ zewp3(ns>Bd=JqK+g!57Y?8v0Wt%B=nuQ2oyA37H^!5Sv@`4U S_TkIg!Bn3zpNE*l?O+oh_e$yj literal 0 HcmV?d00001 diff --git a/phishing-filter-snort2.rules.gz b/phishing-filter-snort2.rules.gz new file mode 100644 index 0000000000000000000000000000000000000000..36bc7ddc4711b3ccd19478cf7a68f8dacd5b5029 GIT binary patch literal 8258 zcmV-IAiduoiwFP!000021KgcmkK;IYhVSz$jG4XI1x6a{Tj~J<1jrzBvDpn~XMrF= zFrcU-i55R(en^&oeJEG;V3XVh#}{V{-ECKuEm=>Khwq`t^L~5zMR*BcF8?+QHw!&o z{`&JDFMrX-`uy^9kl?`o!?%~et^@Nhe7WS;yiBq@xz@j2uV3=)%k}yn@%KMIR$;+? zxn!4t9hcvS*Xu8%g?j+ak3YoM{A3iYY>MZay$Bie`cQbEFOhPu>RutdimW?fBx4WfBn;szg(C;F3CS$e)r?Q|MKI{fBL6CzJB%$6w-$PawZ4@Ut2I=69Li;sMfLOg+=SXV27|^_#zW!B58dukW6L z4PfIhC3DUnD|}(zgIeRKNi4*-{BUt%_>x~gzOo-K7Pc?h4}YLSBd@ZoF0(S_9Em|r zjzLjZ@sEbxoedocLqQS4cITX3{-o^AqbplrzzVCfORQa&OP=;#rMU+F#z3FD~`AIB31MRui! zf^!qJcZm|*8fQiy2hVf|=;eVIC$fwznDjc1F}XOYxUjATZs%TpCQ3p`m}v^w35 zUBDvBu#BD}Ws(U!fP!F6BqAQ?IS_+vO^^sYSeu#jb9P1;Boqxn6!FDdZrOpIuw(=! zs+2Im7lQIN%6K+e7PL5+#g-*GLCw0Zz+|!+A(6|M6o=(B$$ z-ik4X*}iRA-s8*tf}qg#KFO|G(KVm5^~lYoAW9^!h6JA zNY8U2QK^VhX=77)Pdllp5~-`~4Gp9ri9<0V&-j{`^?O=LOBqX56~%k7bd<4lW!1d} zOL--U#ev-f=kVf#zNnzgXhIQ_PJ})O=4;cwr@7FSvj>}v`7Oj;>-XrmlBBYYmwygN zWmdfh3Q2J*G=Jql)qBS1lBBjh`;XC5X!u;h^s!L`Km3x^xf)KXd(FG@JxzwB+WlxQ zAEPxm_L_Y1VGsrpO#Al*2J4PTNmB6c@fwxTU%{ZqmWrU>4Sr7C9FynO2<;Q*@Ye%Y z1Ql;&;DtL}yeh;^NfkYX+h=_RT{$FGUX4k~8Bf|8@}#I4AFspE4^5L?uZaS9@`>Nd zu&Q(sc1dHClEULHU#RFQ;J&Ch=ZNj6q=-ODiHM-0h+yA$LZMxuO-O)h=bD@6zLn46F&eM-NpB_ijg{rwD7I87PPypUyn5!(=W);F{V6NC zt+pD6e%*EcydRIn^gUnZRhQ*d>s@?O9OCCnqryg7u2^*x5gt7VR^GO}Qt`MqTLV{< zyp?)(4?8)4qxWhEx$L*a*CEf>T=(_k{;q~tU&&JBvns3Hm%L!Z!tRY(O@1pk>Gboy zZ+Cm&s(pH{4_U1I&e!Fb?r&*`bw(8-ADHOxJf?QC;`wtPn%i`6TdgqOq3D^`MZK^4 zei!+qZn}T=b$AcLoGQZ6hPi2)Vkw(-uy-R?zwIGsa(*&C3DZ2ic{DaQ)XG%j$lPYw zdk_{>5zep{vdnXMc&On$2nnVM{g^Ph z&J2C_p(dCxz`32-7kDW{T~mb66)ocIT-}glP_>8?2sJ^uKI>^53heELH9^%a8D9qG zUXLzyGgjHGhM;zq?qm@YjW}Llw~dCN5Vm5NAnEpDy(t%^*~&C$3#2w^Bq#)>tqr|} zpn_5`3`Qhnm6hlMqai3*9S?5s2VUj9hM?qh=DEczF%>)@K_DnKUyIL+`aLVUnwln% zx_#3su7;on^|x_Gzg6B46r#bob6JJ^T%a_ATuS{sTR@~B4oxHf_%{3d6qUJ+VW>6$OjEsY=H5;IJoPr_|ANvd5TBVMlAf16Pd7G!_RSDclv5ufJolT6FE82>Uj-VhF zqvt{k-7~!~C!WGG=0CqdY#antsAT76D{F4drCcI$AgDg2*gy+zq%2GP(oh{iE&7|* z`b_5BXEwJEv~`fYw$-Z%m~_!#cN;V$GX~h znO#|6-|EW<+K`<{V#{GRk?gnT!_Ve}JQJA_bSR5YhQPh(g%s(Cw7e)I=ugItwP4(8 zPxDZd_8J~O1&73gpzgJx<0b0wT5FZ(Rg2$U2&!OvtUhLovB&&22;s$6f*Lr)UZcG{ zs=RK{2OEN3X1@VxuJ|}Ix;Wx>b=M9b2|YbKq-+#+c~*6om-q^wppV&E%Z5EIoYlxV zya7o`5Q(1*VommppjFvmc=B=kCT4eSmd2rWlmJVFg2bez$mFcucozCGRyvh0+`%{p=VISb5l4@h&k!^)gPt92(>8ef@iKx2W&p|OviM{+>MYyY;|(hWjmsjB z&oYC_xlaI@M@gB-X-3T?G7)-O6{IfE1sFjmGSJ2<6I@~}pT!Wv#~wd;I!WRAoGL&9 zLr^?%!aBLjhcoRDywuXWtgxk36V0J_d^hD?g ziwTk`*r1Q83QI=|5KlEn2Tw1RIUr%6r&}lXv_a?%_Z|a5FR%&NIl69mI~6m6&R-LpbAlh6K_H#Xz=q*f z*9}p25VZc9=G%M({1Jqp-Pa@(Xe~_)8tEi_Z_I*am6s9p{F;m$KwA?p$LvfeF7%4o zn80DDECemRCSxZs!JVrd&h_i)y@#F{ovaCKmL=OJ)?_w5nS_<@+@#oxH2zG+7K1qf zK+pngvSD2z9>@xYxLk^$6WGkOaHFt@%cTf9dBu0JgZVSJ9gIppzg=dwtR`6eyq};= z*9=mc|vWl^00Hvg%VcMigMLW&VaO;RL<5&P8~f zIS|8nIUCq9_Pn0)r4O&7zUh#a_d3*WoT_4EDO0Ny;}Mfbyl73(Un^n@Y?TZ#S`)O$ znn5uwS;(-bmJv$m zS8qa+kwhZRBy{6zH;jDR<{o`~CFpE5dp63$KhvJ|2NH#XFon|*4+#T7<>@_JQ<-=W zFj=M$dqzbO#_G=P0L}zIYk2uv)n#{{>Rh4smcU9-o`$tX+}%#l*J?h}G4N&D#}q

2s&E{J(^^Iv#hf{k{)q~9YLe27YuKs@Qml+4$ERCBj{H3 zKTrtvz++L7WMLHy>DPWT_lR>}1dXfy4-n6HL?8`)APp}4A8cSDCkMm8#@MowQa98b{0d>%IXG8Gd-;FpmrBBYF7MJ zyaX++Zs6l{=j~bBKR$V_>U~wkWB~~ZJ@I-ov9SyrNX6dJNE(7Xg4J*&kJEn^kpw-} zdOL4N&dcBihd}x3Tr$-=SH!1#3h@kZoddhSeq{5pl%n5o+Euf!@35j2VDko?#wSW(n z#fX1JA4D30FaozmNEsfYkGV;bHyOIYR8G)fY6X%%9TP~`+sZLu4f)v|C85R$TP@dGhIQz{9E5f3AjidPeos?Ium zEc8^Z6ng2+0_!I1Yb}krUc0j{z?$}P*h1n`5#+K#OnruUflme2Y2>X!IYF~3Y3hVC zcg`-};$dAunORH=A<{n0C%3XKGzqX=OR zZJuGLi3IJb&e?+x0oS6t%jN{_sUi;zrxL+#8aYW68vM)8{lFe<33^m1_6+jy3>^hM zjjCX>(1TbYwvdp-?7l`<90Wb86zE|dZ>z+Qq%}bpo^fX3!xi+DsZcao-4$7xH#H)f zh9sJaN%p`Gt1U?wit)t>6NP$kZ<>-N=vNhg0Lr@lHCc_Gyb!dmQgFN)i(Ag}v>qP` zLA@%N9zom$3}>lC$#%XnzHaC>hH`>tR!T^wXJ)t4r#k)>8yUAnc zHw5jil;LZ4#U6nPT3MZ5UTkD}s$d>OTefZchVVg9!J17#JXcJ0qIgA5a0ohFsn9PX zo!4{)%LJbVVl*YFT#w{DYLZ>csxIS0)fMGCDrV#ajjh!2X>jhue|LATTW;z|7=4v_ z0WbmqV$H+MDqR5CfM`kB#!o+zJDEB2W0F7Rb5@;BC+S=oo4theNr>9hcI@S5A`T0J zKC2DxXR*0p3f^*F=2O((z>3$G5R_TvS~KHfpGErCEf!|exsBv1vWQq}idbI8yCNMu zug$-Em7)7cuR_pnwV6ku4)4<+ma||*-4yj_x?F;ms{|*V(f8e)+;*gU-mG5E?-l&b zJy)w^9&9A9H~xY$60jSZ^Yx>DsD6K?~Im=MKyJL9txdEWo=~OxRsS#KQhgSZ1VxR0O?LyINr? z(;HKVv?`YtLP9|>m^vRTR)89@M_YnksthAPAU9jMn`yF`kKYnhQ|Bj99~D#VZCQ05@C= zz!mGN^p}RWGIcqqj08(s2UK>z$@UD7P4X*xg8B88P!Z01H9HewW6^y zqLFRWbaDXI3{?fFj0mc(-i$=Wns(5&G%c5-7JbE7Q+IV|QZLmvxQrM{Mol$zRn;14 z!0@_ZqEvSbliUCRt0|(PV)k@u_uW=c1l8jn5rYlPuSvL)Dt4a)`V$jx=>5LxQ9+y!|l2O+R zCB~kmjAYWtR;6au3Ds%dnO=$pxj&+rvpZ3PZe-W$A-$144f<^8c?)0~)h1N9jA-WU zzOMValBVlf%h^x^V^u9{HCCe4P1WHtqM5UMUA3J|QK(B(64B;#glf>E5FImJC7VtR8kZ5xoNbulx{|z0Nt^35qfKF{;%%Db zib0GLxj&+rvrQ}7Hg!Qd4Q9NRX>hB=*w&B&0Hjfl;WDC`v&S)S+tev0)tuKH1~5uA zDMA{-IkX&?5yhOH-X;XIq+@!kAne|5%I>hBSAS{)|X9PRU4u7!5_h40 zRqsHru$R(q;7@IGrPh3H;4v8pGD$RM=N7#p% zkI^>-bzweSpD#S8KtoUy=Hq$Tp5)z4x~h{Puvg`fF&R&_&D40xFJEH zmqCL9uS@}cJ&T9crgU2|F2>yOR=o(?zJea_lT>%vbproVp_e{`fwD8T8RzG#G)L+D zgv5ei?lj8FEgbvq()?|}Zyp^*B!@S}_szFrE#QcA;v(~*(P9We=~poRZhTq$TZ7m> z1XT|EGxUfY2*y$q^WmMeXpfFJ1f^cVJfm66aQbvEO#T|NF(pZHEiC~(Y zot$l~d5gW$N>K8ZVC;7M(aUT&7zmoZGKP3_4)4MssP)RbU<$hx>9le|#_j`ImZ0G4 z|5CvnnF+eSf?c2Q8m8W8o6ac4@OoiS2MKz=!gUVUYY;X58}wtv=elF zh1;2Wk6wIeLQK&171k8KuCSUA?oBPwiW zCqb)M2%)?U>7#A&w`UVndxhvWvx1LyV^zgI&_)PG(dg5`y;~5strPTnh2xg~_c*4m zv((Oh9Z*c*%?71)aPgPE&u#peHTNIKCdMx z0gLI9`KpA#UPC4*0gEy$r92C_rD@!XGsqfDh4(&dw8`refJg^-ZcgpqVZ_nD2Df?`4qk^NjYO+zoQssK`vaC`F^IvOpo%N{Bg72C#NuT(Z31FZ4}#jQc-$>q4XY3-5X_tRtNgO(y_^n@ zG><2!&WaB;$1*ZDCkTOpAkm?zO0&`Xnt(I@sYA3?{}vBdmXQ+k2m7TC}i#R)2{ zj(s+{{NyA)R5*^H!YVO&m*kx6=DZt6t1K+Rraum!f;7;CwCG}4?Bur3aNz{KRY&St z@TTmXpq1(f`@0DgYP!8{$8AU3G0F-0r~X6Z{n!pXHCi!jPS7;3+N2^-ZgF#eQ^;6ZAIS7goMY2A;ueSXIwBL1ok3$$U%6JYn)j!Fk28H+6A> zs;0ZY#|^Q&pcgnFtZW(MZ9AZE0_Fr2O%F&XX44_EQx>n|>j>8QnW>|b84)vY)-8y>Ku4=4o9O<7zXmnmgXJPM2=g`Xvyo2n5n z^pZ53puXvGE1$2#0MW_A3Hq8IPG9}q+hCvS1MPwn1d?M{p~2sZufv$FXzRh0-xXLw zn?HsRgfoIVryrzdt97E3zCXl5LNk=7yPL)K`~y$2ae|JgADrG-7P#-Ug3pCurVUWK zuztDCGA#u@Z-n2t|1q6Mo)0`qHW&OkjtfE4$}n1PtW=Kyj{^Q5rU?t zr+r$urq2T}o)GjqoiIC>)BM+w{>9tZTg8IDwoFj-bROFjjcM>xEJ4B33nrOHlGVl8 zOi=1AOeP}sp!Cw}%X)xV++f|)yMtg0X@ay{T*~M9Lc&5XoW7n*sifSbRONQ6a>W{9 z=;hJZYj=p7e+c@SF3r%fF%666ON&Z!)2LdEeXF>HPSjd=VjRjjuFKCu9Nzx(ADdGU z%pZ=UA;M(yd>OG5rk7nWhmqH2Zmz$k^>+Q{X(0|Mf)1#Q-N$f|Fy6eeu-xUb`IqhL zo0)z3O8XO*<+?T3KE8a@2H(2*Rkway>f3z@+t;rFPY}%m&N9CWR<&48&@y#djdpLv z!!KaXYl-x{JSV7}`fy9cZGrSM`h|Co>wfxQQ}RZ7*ff@og%cE6T?Ur#%>K!o=%xCL z(yJag8yb**GAw#o|FSiw?f33a21RcsaJhTK_TS|;bWj8*47+%A!>=&~wC&LZwOSWe z^(`ANYN)sn7Y=N!xakVkvcBMT%L|Yiim?J?#AqszzoQAGk+9uLw=FnS3A(y2D!t9i z;%?!x+TVnUpbYpmi>tSD-Ij>BNJ`M&by0^h7jNTbx65A#j^M=L%WkWSm*|h%;`Yn# z7W>!nBbfZ7hlezm?bza(FWtY89>M9r^H?s6d8TH!9e*7-g7bsmE-A`&i--Gh`3hQ~} z96b^ug42d@$xinl+P6!mps_~2;_DTk_4J#OA#a_^?*X%8`@_WI-~8bMjMVx800Kwu A1poj5 literal 0 HcmV?d00001 diff --git a/phishing-filter-snort3.rules b/phishing-filter-snort3.rules new file mode 100644 index 000000000..460f8a9db --- /dev/null +++ b/phishing-filter-snort3.rules @@ -0,0 +1,475 @@ +# Title: Phishing URL Snort3 Ruleset +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1nvest.bigbantbaz.top",nocase; classtype:attempted-recon; sid:200000001; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"25116414.cc",nocase; classtype:attempted-recon; sid:200000002; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365365news.com",nocase; classtype:attempted-recon; sid:200000003; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365f09.com",nocase; classtype:attempted-recon; sid:200000004; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"750115.cc",nocase; classtype:attempted-recon; sid:200000005; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"823pages.pages.dev",nocase; classtype:attempted-recon; sid:200000006; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"95564339.awi.za.com",nocase; classtype:attempted-recon; sid:200000007; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"999fc.vip",nocase; classtype:attempted-recon; sid:200000008; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.yyyy.cf",nocase; classtype:attempted-recon; sid:200000009; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaaa.whilefish.xyz",nocase; classtype:attempted-recon; sid:200000010; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts-microsoft365.weebly.com",nocase; classtype:attempted-recon; sid:200000011; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.0ffice365.support",nocase; classtype:attempted-recon; sid:200000012; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aidanochka-tabys.kz",nocase; classtype:attempted-recon; sid:200000013; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airbnb-clone-sahinur.vercel.app",nocase; classtype:attempted-recon; sid:200000014; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akbarinewv2.morteza638n.workers.dev",nocase; classtype:attempted-recon; sid:200000015; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alaindemeuron.wixsite.com",nocase; classtype:attempted-recon; sid:200000016; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alexa81o.github.io",nocase; classtype:attempted-recon; sid:200000017; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alienv2ray.pages.dev",nocase; classtype:attempted-recon; sid:200000018; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allegr0llokalne753724pl.art",nocase; classtype:attempted-recon; sid:200000019; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allhrteam.com",nocase; classtype:attempted-recon; sid:200000020; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-clone-by-sudip.netlify.app",nocase; classtype:attempted-recon; sid:200000021; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ammuvicm.work",nocase; classtype:attempted-recon; sid:200000022; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amyr.iran-cyber-net.workers.dev",nocase; classtype:attempted-recon; sid:200000023; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"antaidossiersuivamendimpayeerf33.zynekcctv.com",nocase; classtype:attempted-recon; sid:200000024; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anuragrauniyar.github.io",nocase; classtype:attempted-recon; sid:200000025; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appeal-voilation-policy-issues.github.io",nocase; classtype:attempted-recon; sid:200000026; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apple-id.cc",nocase; classtype:attempted-recon; sid:200000027; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apri.154-203-197-141.cprapid.com",nocase; classtype:attempted-recon; sid:200000028; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arvestcreditcard.embarkdigitalonboarding.com",nocase; classtype:attempted-recon; sid:200000029; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asdfjeiod.com",nocase; classtype:attempted-recon; sid:200000030; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ashleyproberts.wixsite.com",nocase; classtype:attempted-recon; sid:200000031; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"astounding-trifle-b88a2b.netlify.app",nocase; classtype:attempted-recon; sid:200000032; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-101397.weeblysite.com",nocase; classtype:attempted-recon; sid:200000033; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-102641.weeblysite.com",nocase; classtype:attempted-recon; sid:200000034; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-107756-104508.square.site",nocase; classtype:attempted-recon; sid:200000035; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-108102.weeblysite.com",nocase; classtype:attempted-recon; sid:200000036; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-108651.square.site",nocase; classtype:attempted-recon; sid:200000037; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-mail-101246.weeblysite.com",nocase; classtype:attempted-recon; sid:200000038; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-mail-105533.weeblysite.com",nocase; classtype:attempted-recon; sid:200000039; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-mail-109459.weeblysite.com",nocase; classtype:attempted-recon; sid:200000040; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-servicce-mail.weebly.com",nocase; classtype:attempted-recon; sid:200000041; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-sign-in-107078.weeblysite.com",nocase; classtype:attempted-recon; sid:200000042; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-yahoo-mail-105061.weeblysite.com",nocase; classtype:attempted-recon; sid:200000043; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-101415.weeblysite.com",nocase; classtype:attempted-recon; sid:200000044; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attinc-101356.weeblysite.com",nocase; classtype:attempted-recon; sid:200000045; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailonlineaccountupdate.weebly.com",nocase; classtype:attempted-recon; sid:200000046; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attnet-100294.weeblysite.com",nocase; classtype:attempted-recon; sid:200000047; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attonlineservicesa.wixstudio.com",nocase; classtype:attempted-recon; sid:200000048; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attonlineservicesa.wixstudio.io",nocase; classtype:attempted-recon; sid:200000049; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attweadminservices.weebly.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-sharepoint-asr.vercel.app",nocase; classtype:attempted-recon; sid:200000051; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avertisystems.com",nocase; classtype:attempted-recon; sid:200000052; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev",nocase; classtype:attempted-recon; sid:200000053; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b35ccc.com",nocase; classtype:attempted-recon; sid:200000054; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b35lll.com",nocase; classtype:attempted-recon; sid:200000055; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b35www.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz",nocase; classtype:attempted-recon; sid:200000057; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz",nocase; classtype:attempted-recon; sid:200000058; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000059; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz",nocase; classtype:attempted-recon; sid:200000060; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000061; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000062; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000063; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000064; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbf-alpha.vercel.app",nocase; classtype:attempted-recon; sid:200000065; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet365t3.com",nocase; classtype:attempted-recon; sid:200000066; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet938y.com",nocase; classtype:attempted-recon; sid:200000067; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet958c.com",nocase; classtype:attempted-recon; sid:200000068; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhngfd3.pages.dev",nocase; classtype:attempted-recon; sid:200000069; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blackdasblacks.shop",nocase; classtype:attempted-recon; sid:200000070; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blsckdagsever.pages.dev",nocase; classtype:attempted-recon; sid:200000071; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bridge-9wdpjmsoa.pancake.run",nocase; classtype:attempted-recon; sid:200000072; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brubreumummeddoi-4514.vercel.app",nocase; classtype:attempted-recon; sid:200000073; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bscusdty.top",nocase; classtype:attempted-recon; sid:200000074; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsozvycr.icu",nocase; classtype:attempted-recon; sid:200000075; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-102368.weeblysite.com",nocase; classtype:attempted-recon; sid:200000076; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-106861.weeblysite.com",nocase; classtype:attempted-recon; sid:200000077; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btjfh.weebly.com",nocase; classtype:attempted-recon; sid:200000078; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bussinessaccounthelppage.click",nocase; classtype:attempted-recon; sid:200000079; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwfujmww.icu",nocase; classtype:attempted-recon; sid:200000080; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bx.sfdsb.icu",nocase; classtype:attempted-recon; sid:200000081; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.cting365k.cc",nocase; classtype:attempted-recon; sid:200000082; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev",nocase; classtype:attempted-recon; sid:200000083; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"can-post.cyou",nocase; classtype:attempted-recon; sid:200000084; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"celery.sa.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cen4-six.vercel.app",nocase; classtype:attempted-recon; sid:200000086; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cf-worker-pages-proxy.1352562939.workers.dev",nocase; classtype:attempted-recon; sid:200000087; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cf.13084493.workers.dev",nocase; classtype:attempted-recon; sid:200000088; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cf.iwoai.cc",nocase; classtype:attempted-recon; sid:200000089; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfcf-8.pages.dev",nocase; classtype:attempted-recon; sid:200000090; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfr-reed-taxi-wayne.trycloudflare.com",nocase; classtype:attempted-recon; sid:200000091; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chain-trt.online",nocase; classtype:attempted-recon; sid:200000092; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chainsolapprove.pages.dev",nocase; classtype:attempted-recon; sid:200000093; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat-wa.xyz",nocase; classtype:attempted-recon; sid:200000094; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check282.tempisite.com",nocase; classtype:attempted-recon; sid:200000095; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chore.pink",nocase; classtype:attempted-recon; sid:200000096; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ciftcininbankasiziraatbankasi.com",nocase; classtype:attempted-recon; sid:200000097; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claudiorojas.cl",nocase; classtype:attempted-recon; sid:200000098; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clivenicoll44.wixsite.com",nocase; classtype:attempted-recon; sid:200000099; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudflare-workers-pages-vless-a2j.pages.dev",nocase; classtype:attempted-recon; sid:200000100; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codt.digitasianetwork.workers.dev",nocase; classtype:attempted-recon; sid:200000101; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbase-com-18690.subttrepimop1005.workers.dev",nocase; classtype:attempted-recon; sid:200000102; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbasewallet-verification.198-46-89-184.cprapid.com",nocase; classtype:attempted-recon; sid:200000103; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"company0rder943.weebly.com",nocase; classtype:attempted-recon; sid:200000104; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"completar-la-verificacion.vercel.app",nocase; classtype:attempted-recon; sid:200000105; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conductibili.fun",nocase; classtype:attempted-recon; sid:200000106; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correosprepago.bnext.es",nocase; classtype:attempted-recon; sid:200000107; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crenadenuddoi-2258.vercel.app",nocase; classtype:attempted-recon; sid:200000108; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptorectification.com",nocase; classtype:attempted-recon; sid:200000109; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently5267.weebly.com",nocase; classtype:attempted-recon; sid:200000110; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently70.weebly.com",nocase; classtype:attempted-recon; sid:200000111; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt909.weebly.com",nocase; classtype:attempted-recon; sid:200000112; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.afirkz56924.workers.dev",nocase; classtype:attempted-recon; sid:200000113; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dio.azrealonce.workers.dev",nocase; classtype:attempted-recon; sid:200000114; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ditgong.com",nocase; classtype:attempted-recon; sid:200000115; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doc-online-1881.on.fleek.co",nocase; classtype:attempted-recon; sid:200000116; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsignauthorizationrequest.vercel.app",nocase; classtype:attempted-recon; sid:200000117; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docusign.com.bestfinancebroker.com",nocase; classtype:attempted-recon; sid:200000118; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duang-5dh.pages.dev",nocase; classtype:attempted-recon; sid:200000119; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duvhkeq.pages.dev",nocase; classtype:attempted-recon; sid:200000120; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"easyaccesscommagebn.com",nocase; classtype:attempted-recon; sid:200000121; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebay8787.shop",nocase; classtype:attempted-recon; sid:200000122; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ee-account-home.web.app",nocase; classtype:attempted-recon; sid:200000123; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ee-service-help.web.app",nocase; classtype:attempted-recon; sid:200000124; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ee-service-portal.web.app",nocase; classtype:attempted-recon; sid:200000125; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eln3.vercel.app",nocase; classtype:attempted-recon; sid:200000126; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enormous-orchid-howler.glitch.me",nocase; classtype:attempted-recon; sid:200000127; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"espaceparticulier.life",nocase; classtype:attempted-recon; sid:200000128; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ets3qe9ooms8t6i8.pages.dev",nocase; classtype:attempted-recon; sid:200000129; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelorgo.com",nocase; classtype:attempted-recon; sid:200000130; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falabellacom.dominiquepg.com",nocase; classtype:attempted-recon; sid:200000131; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdesq4.pages.dev",nocase; classtype:attempted-recon; sid:200000132; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsfjiwe.com",nocase; classtype:attempted-recon; sid:200000133; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsjfkweow.com",nocase; classtype:attempted-recon; sid:200000134; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fekoulamevebouna.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000135; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"felomane390.wixsite.com",nocase; classtype:attempted-recon; sid:200000136; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ferngos.de",nocase; classtype:attempted-recon; sid:200000137; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fieg.84yr483rhfwieujro348ur84.workers.dev",nocase; classtype:attempted-recon; sid:200000138; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"figinstenatecom.pages.dev",nocase; classtype:attempted-recon; sid:200000139; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finansfaizsizbasvurum.online",nocase; classtype:attempted-recon; sid:200000140; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forested-mirage-samba.glitch.me",nocase; classtype:attempted-recon; sid:200000141; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formtools.com",nocase; classtype:attempted-recon; sid:200000142; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fortradesetup.hamidamnaie.workers.dev",nocase; classtype:attempted-recon; sid:200000143; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-5436781.webadorsite.com",nocase; classtype:attempted-recon; sid:200000144; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frogsrus.wixsite.com",nocase; classtype:attempted-recon; sid:200000145; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fshraha.pages.dev",nocase; classtype:attempted-recon; sid:200000146; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fukshumx.world",nocase; classtype:attempted-recon; sid:200000147; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gazruinv.web.app",nocase; classtype:attempted-recon; sid:200000148; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geaoolsv.pink",nocase; classtype:attempted-recon; sid:200000149; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geminiwallete.godaddysites.com",nocase; classtype:attempted-recon; sid:200000150; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjhyu.wixsite.com",nocase; classtype:attempted-recon; sid:200000151; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gimennlouin.gitbook.io",nocase; classtype:attempted-recon; sid:200000152; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goldenrod-rowan-submarine.glitch.me",nocase; classtype:attempted-recon; sid:200000153; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gorgeoushome67.wixsite.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"group11-vvip-hot-girls-combi.viplch.online",nocase; classtype:attempted-recon; sid:200000155; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gruppeflorian.com",nocase; classtype:attempted-recon; sid:200000156; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hanisfir.shop",nocase; classtype:attempted-recon; sid:200000157; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hedayatfreedom.hedayatkhakpour.workers.dev",nocase; classtype:attempted-recon; sid:200000158; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hello-world-morning.freekite.workers.dev",nocase; classtype:attempted-recon; sid:200000159; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hello-world-muddy-cloud-f45b.mfoster0425.workers.dev",nocase; classtype:attempted-recon; sid:200000160; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com",nocase; classtype:attempted-recon; sid:200000161; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heluapla.shop",nocase; classtype:attempted-recon; sid:200000162; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hemanlau1.pages.dev",nocase; classtype:attempted-recon; sid:200000163; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hezhouruan.552008598.workers.dev",nocase; classtype:attempted-recon; sid:200000164; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgcdhbxnf.weebly.com",nocase; classtype:attempted-recon; sid:200000165; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjrhd.top",nocase; classtype:attempted-recon; sid:200000166; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hk04-123.pages.dev",nocase; classtype:attempted-recon; sid:200000167; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hkmqo.top",nocase; classtype:attempted-recon; sid:200000168; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-100317.weeblysite.com",nocase; classtype:attempted-recon; sid:200000169; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-102207.weeblysite.com",nocase; classtype:attempted-recon; sid:200000170; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-107257.weeblysite.com",nocase; classtype:attempted-recon; sid:200000171; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homelogin7t6sdfcgvhb.weebly.com",nocase; classtype:attempted-recon; sid:200000172; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htaflytz.baby",nocase; classtype:attempted-recon; sid:200000173; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htaflytz.black",nocase; classtype:attempted-recon; sid:200000174; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httap.l-teiegram.com",nocase; classtype:attempted-recon; sid:200000175; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httpsbellsouthnet-102649sitecom.weeblysite.com",nocase; classtype:attempted-recon; sid:200000176; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hup6r.com",nocase; classtype:attempted-recon; sid:200000177; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hy.fuckgwf.eu.org",nocase; classtype:attempted-recon; sid:200000178; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hypophysecto.fun",nocase; classtype:attempted-recon; sid:200000179; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hzuayvvl.red",nocase; classtype:attempted-recon; sid:200000180; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id2.xbenihime.us.kg",nocase; classtype:attempted-recon; sid:200000181; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikergalindez.github.io",nocase; classtype:attempted-recon; sid:200000182; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-delivery-bg.com",nocase; classtype:attempted-recon; sid:200000183; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-trackingcs.cc",nocase; classtype:attempted-recon; sid:200000184; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-trackingiax.cc",nocase; classtype:attempted-recon; sid:200000185; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliveryhbo.top",nocase; classtype:attempted-recon; sid:200000186; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliverytcw.top",nocase; classtype:attempted-recon; sid:200000187; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliveryxs.top",nocase; classtype:attempted-recon; sid:200000188; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infringement-service.com",nocase; classtype:attempted-recon; sid:200000189; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagram-clone-in.vercel.app",nocase; classtype:attempted-recon; sid:200000190; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbenefitprestaciones.referidosweb.click",nocase; classtype:attempted-recon; sid:200000191; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iouwerty.weebly.com",nocase; classtype:attempted-recon; sid:200000192; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isnworldwide88.com",nocase; classtype:attempted-recon; sid:200000193; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jaydeep8806.github.io",nocase; classtype:attempted-recon; sid:200000194; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jeanandpeterwilkin.wixsite.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jetconstructionsgroup.com.au",nocase; classtype:attempted-recon; sid:200000196; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joeandvelma.wixsite.com",nocase; classtype:attempted-recon; sid:200000197; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"journey-x-pro.com",nocase; classtype:attempted-recon; sid:200000198; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jsdfchkdsds.weebly.com",nocase; classtype:attempted-recon; sid:200000199; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jshattkee.weebly.com",nocase; classtype:attempted-recon; sid:200000200; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juliusmasih27.github.io",nocase; classtype:attempted-recon; sid:200000201; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jung-sohn.de",nocase; classtype:attempted-recon; sid:200000202; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katiebllair.wixstudio.com",nocase; classtype:attempted-recon; sid:200000203; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katiebllair.wixstudio.io",nocase; classtype:attempted-recon; sid:200000204; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdlmo.top",nocase; classtype:attempted-recon; sid:200000205; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kenzmail0.wixsite.com",nocase; classtype:attempted-recon; sid:200000206; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ketura2010.github.io",nocase; classtype:attempted-recon; sid:200000207; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keucroilluxibrou-2718.vercel.app",nocase; classtype:attempted-recon; sid:200000208; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuconlogin-ui.godaddysites.com",nocase; classtype:attempted-recon; sid:200000209; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"latam-onipojes.vercel.app",nocase; classtype:attempted-recon; sid:200000210; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"layanan-bntuan-resmi-dna.prbu2.my.id",nocase; classtype:attempted-recon; sid:200000211; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledger-com-updatefirmware.aparecidovisentin.com.br",nocase; classtype:attempted-recon; sid:200000212; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"levappoprauqueu-4688.vercel.app",nocase; classtype:attempted-recon; sid:200000213; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leyoixoimmecou-5619.vercel.app",nocase; classtype:attempted-recon; sid:200000214; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkbokepviralindo009.vipp.blog",nocase; classtype:attempted-recon; sid:200000215; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liveairdclazmersn.pages.dev",nocase; classtype:attempted-recon; sid:200000216; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lo6-cas-projects-64947843.vercel.app",nocase; classtype:attempted-recon; sid:200000217; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maatamicklogginns.gitbook.io",nocase; classtype:attempted-recon; sid:200000218; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madebybmr.in",nocase; classtype:attempted-recon; sid:200000219; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madhu821.github.io",nocase; classtype:attempted-recon; sid:200000220; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailupdate87.weebly.com",nocase; classtype:attempted-recon; sid:200000221; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maine619.github.io",nocase; classtype:attempted-recon; sid:200000222; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainnetverify.pages.dev",nocase; classtype:attempted-recon; sid:200000223; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mazulyta.pages.dev",nocase; classtype:attempted-recon; sid:200000224; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"megrebeikenneu-2106.vercel.app",nocase; classtype:attempted-recon; sid:200000225; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mendhfjpl.weebly.com",nocase; classtype:attempted-recon; sid:200000226; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metacareer.com-case37169314276.com",nocase; classtype:attempted-recon; sid:200000227; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metagalaxy.pages.dev",nocase; classtype:attempted-recon; sid:200000228; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamacksiologus.godaddysites.com",nocase; classtype:attempted-recon; sid:200000229; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metemrsblogin.gitbook.io",nocase; classtype:attempted-recon; sid:200000230; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meyetamaskiwalt.gitbook.io",nocase; classtype:attempted-recon; sid:200000231; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mianfeijiedian.lawcpacpv.workers.dev",nocase; classtype:attempted-recon; sid:200000232; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milanharvestfestival.com",nocase; classtype:attempted-recon; sid:200000233; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mirobitsgt.github.io",nocase; classtype:attempted-recon; sid:200000234; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mocp90.pages.dev",nocase; classtype:attempted-recon; sid:200000235; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mostafa2.mehdi84888.workers.dev",nocase; classtype:attempted-recon; sid:200000236; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"movie-firebase.vercel.app",nocase; classtype:attempted-recon; sid:200000237; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mubki.hp.peraichi.com",nocase; classtype:attempted-recon; sid:200000238; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-site-104564-105934.weeblysite.com",nocase; classtype:attempted-recon; sid:200000239; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myaccountsignup.net",nocase; classtype:attempted-recon; sid:200000240; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navy-nose-4544.typedream.app",nocase; classtype:attempted-recon; sid:200000241; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"net-flix-front-end.netlify.app",nocase; classtype:attempted-recon; sid:200000242; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netzero-webmail-105996.weeblysite.com",nocase; classtype:attempted-recon; sid:200000243; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"new-currently-1-23-24.weeblysite.com",nocase; classtype:attempted-recon; sid:200000244; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newattupdatemailboxkidlyverifynow.weebly.com",nocase; classtype:attempted-recon; sid:200000245; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfty-proj5.vercel.app",nocase; classtype:attempted-recon; sid:200000246; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nnbsscnaceesngsetr.com",nocase; classtype:attempted-recon; sid:200000247; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"occinamete.cfd",nocase; classtype:attempted-recon; sid:200000248; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odovsccs.weebly.com",nocase; classtype:attempted-recon; sid:200000249; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officalourtime.weebly.com",nocase; classtype:attempted-recon; sid:200000250; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office36503.com",nocase; classtype:attempted-recon; sid:200000251; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohscorgza.github.io",nocase; classtype:attempted-recon; sid:200000252; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okm.znt.temporary.site",nocase; classtype:attempted-recon; sid:200000253; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oliver752.github.io",nocase; classtype:attempted-recon; sid:200000254; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-e-commerce10.com",nocase; classtype:attempted-recon; sid:200000255; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-e-commerce11.com",nocase; classtype:attempted-recon; sid:200000256; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-e-commerce12.com",nocase; classtype:attempted-recon; sid:200000257; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-e-commerce5.com",nocase; classtype:attempted-recon; sid:200000258; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-e-commerce7.com",nocase; classtype:attempted-recon; sid:200000259; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-e-commerce9.com",nocase; classtype:attempted-recon; sid:200000260; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange234.wixsite.com",nocase; classtype:attempted-recon; sid:200000261; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orgmail.weebly.com",nocase; classtype:attempted-recon; sid:200000262; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ourtime.datings-information.workers.dev",nocase; classtype:attempted-recon; sid:200000263; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfocl.top",nocase; classtype:attempted-recon; sid:200000264; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfocs.top",nocase; classtype:attempted-recon; sid:200000265; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfoga.top",nocase; classtype:attempted-recon; sid:200000266; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfojq.top",nocase; classtype:attempted-recon; sid:200000267; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfolw.top",nocase; classtype:attempted-recon; sid:200000268; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfoor.top",nocase; classtype:attempted-recon; sid:200000269; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfooy.top",nocase; classtype:attempted-recon; sid:200000270; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfoqv.top",nocase; classtype:attempted-recon; sid:200000271; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfove.top",nocase; classtype:attempted-recon; sid:200000272; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfovt.top",nocase; classtype:attempted-recon; sid:200000273; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfowu.top",nocase; classtype:attempted-recon; sid:200000274; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.updateinfoxb.top",nocase; classtype:attempted-recon; sid:200000275; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.usertracktxz.top",nocase; classtype:attempted-recon; sid:200000276; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-108-tg-cfzz-ip.pages.dev",nocase; classtype:attempted-recon; sid:200000277; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages.tempisite.com",nocase; classtype:attempted-recon; sid:200000278; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageverifycenter.com",nocase; classtype:attempted-recon; sid:200000279; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patjimmy323.wixsite.com",nocase; classtype:attempted-recon; sid:200000280; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypalloginin-usa.blogspot.com",nocase; classtype:attempted-recon; sid:200000281; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypalloginin-usa.blogspot.hr",nocase; classtype:attempted-recon; sid:200000282; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pcmag.anycubic.vip",nocase; classtype:attempted-recon; sid:200000283; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"port01-acf.pages.dev",nocase; classtype:attempted-recon; sid:200000284; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal.chiaveggies.com",nocase; classtype:attempted-recon; sid:200000285; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pruhuffopraussou-5681.vercel.app",nocase; classtype:attempted-recon; sid:200000286; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev",nocase; classtype:attempted-recon; sid:200000287; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev",nocase; classtype:attempted-recon; sid:200000288; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev",nocase; classtype:attempted-recon; sid:200000289; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev",nocase; classtype:attempted-recon; sid:200000290; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-2801359d2be54bfd8701132626efeb73.r2.dev",nocase; classtype:attempted-recon; sid:200000291; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-3096005ebeae423182ccd89665564d8a.r2.dev",nocase; classtype:attempted-recon; sid:200000292; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-46a5f86348ae4aceb3591d126020999f.r2.dev",nocase; classtype:attempted-recon; sid:200000293; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev",nocase; classtype:attempted-recon; sid:200000294; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-51f896deb233450089fc1a520e6ed957.r2.dev",nocase; classtype:attempted-recon; sid:200000295; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev",nocase; classtype:attempted-recon; sid:200000296; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev",nocase; classtype:attempted-recon; sid:200000297; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-722720be67154192a1102b2cf085d306.r2.dev",nocase; classtype:attempted-recon; sid:200000298; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7d056bfeb6b04852801553620fe62c0a.r2.dev",nocase; classtype:attempted-recon; sid:200000299; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev",nocase; classtype:attempted-recon; sid:200000300; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-873fc6a3edb941c6a17f50911dfca518.r2.dev",nocase; classtype:attempted-recon; sid:200000301; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev",nocase; classtype:attempted-recon; sid:200000302; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-aab4be29317b4ec296517a557db12622.r2.dev",nocase; classtype:attempted-recon; sid:200000303; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-ba5a046c69974217b0431bca4ba43740.r2.dev",nocase; classtype:attempted-recon; sid:200000304; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev",nocase; classtype:attempted-recon; sid:200000305; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c59cf4e950b142949df8861e60b3689d.r2.dev",nocase; classtype:attempted-recon; sid:200000306; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev",nocase; classtype:attempted-recon; sid:200000307; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e5855431d98545b38408f52af50ab8a1.r2.dev",nocase; classtype:attempted-recon; sid:200000308; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-ff0271d87324424a9aec83337e844a54.r2.dev",nocase; classtype:attempted-recon; sid:200000309; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puertaselectricasprincipal.netlify.app",nocase; classtype:attempted-recon; sid:200000310; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qaffixledger.com",nocase; classtype:attempted-recon; sid:200000311; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbstdfda.com",nocase; classtype:attempted-recon; sid:200000312; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qpownthenewyhadvanceweb.weebly.com",nocase; classtype:attempted-recon; sid:200000313; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raj-tiwarii.github.io",nocase; classtype:attempted-recon; sid:200000314; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restrict-policy-nonadherence.vercel.app",nocase; classtype:attempted-recon; sid:200000315; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reviewboss.github.io",nocase; classtype:attempted-recon; sid:200000316; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfgxg.top",nocase; classtype:attempted-recon; sid:200000317; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riaayaoman.com",nocase; classtype:attempted-recon; sid:200000318; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roadmap.binarydesignhub.com",nocase; classtype:attempted-recon; sid:200000319; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robinhooldloegins.gitbook.io",nocase; classtype:attempted-recon; sid:200000320; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rouzhda03.kambizmedia.workers.dev",nocase; classtype:attempted-recon; sid:200000321; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rsjxzl.com",nocase; classtype:attempted-recon; sid:200000322; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtyuiuytgf.weebly.com",nocase; classtype:attempted-recon; sid:200000323; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rubinhuud____llginnh.godaddysites.com",nocase; classtype:attempted-recon; sid:200000324; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rudra-choudhary.github.io",nocase; classtype:attempted-recon; sid:200000325; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.team-s22.com",nocase; classtype:attempted-recon; sid:200000326; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sadekk.com",nocase; classtype:attempted-recon; sid:200000327; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sajsa.icu",nocase; classtype:attempted-recon; sid:200000328; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salarahmad786.github.io",nocase; classtype:attempted-recon; sid:200000329; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santanderpod.fsthosting.com",nocase; classtype:attempted-recon; sid:200000330; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satinnaaoabbs.weebly.com",nocase; classtype:attempted-recon; sid:200000331; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satyarthi.uk",nocase; classtype:attempted-recon; sid:200000332; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scarce-army-wide.on-fleek.app",nocase; classtype:attempted-recon; sid:200000333; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdfvgbcvb668.weebly.com",nocase; classtype:attempted-recon; sid:200000334; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sea.6e2efhxz.eu.org",nocase; classtype:attempted-recon; sid:200000335; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secrbnsuppotyu9.weebly.com",nocase; classtype:attempted-recon; sid:200000336; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-ledger-m-auth.webflow.io",nocase; classtype:attempted-recon; sid:200000337; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.2rk3.com",nocase; classtype:attempted-recon; sid:200000338; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.pxs7.com",nocase; classtype:attempted-recon; sid:200000339; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setshinobi.vip",nocase; classtype:attempted-recon; sid:200000340; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sextelegramxxx.pages.dev",nocase; classtype:attempted-recon; sid:200000341; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shareorder711.weebly.com",nocase; classtype:attempted-recon; sid:200000342; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-101342.weeblysite.com",nocase; classtype:attempted-recon; sid:200000343; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-103098.weeblysite.com",nocase; classtype:attempted-recon; sid:200000344; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-106054.weeblysite.com",nocase; classtype:attempted-recon; sid:200000345; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-106665.weeblysite.com",nocase; classtype:attempted-recon; sid:200000346; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shawsyncmailservercommunicationworkspace.weebly.com",nocase; classtype:attempted-recon; sid:200000347; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sherman-relate-rev-baskets.trycloudflare.com",nocase; classtype:attempted-recon; sid:200000348; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shobhit245.github.io",nocase; classtype:attempted-recon; sid:200000349; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopifysite.cn",nocase; classtype:attempted-recon; sid:200000350; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoptkoo.com",nocase; classtype:attempted-recon; sid:200000351; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-att-108611.weebly.com",nocase; classtype:attempted-recon; sid:200000352; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-att-108611.weeblysite.com",nocase; classtype:attempted-recon; sid:200000353; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simxtrackredirecttszz.pages.dev",nocase; classtype:attempted-recon; sid:200000354; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sjhsjjs82.weebly.com",nocase; classtype:attempted-recon; sid:200000355; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skill-meta.com",nocase; classtype:attempted-recon; sid:200000356; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sky-107842.weeblysite.com",nocase; classtype:attempted-recon; sid:200000357; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smithjamessv328.wixsite.com",nocase; classtype:attempted-recon; sid:200000358; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"socx.ly",nocase; classtype:attempted-recon; sid:200000359; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparq.eu",nocase; classtype:attempted-recon; sid:200000360; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spicyhotcoolsoup.s3.us-east-005.backblazeb2.com",nocase; classtype:attempted-recon; sid:200000361; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spotifyl.vip",nocase; classtype:attempted-recon; sid:200000362; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssfgsfg.wixsite.com",nocase; classtype:attempted-recon; sid:200000363; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sss.k999955.workers.dev",nocase; classtype:attempted-recon; sid:200000364; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stonemartin1001.wixsite.com",nocase; classtype:attempted-recon; sid:200000365; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stringroll.com",nocase; classtype:attempted-recon; sid:200000366; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sukienffvip.doiqua-garena.io.vn",nocase; classtype:attempted-recon; sid:200000367; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supportsecurity981.tempisite.com",nocase; classtype:attempted-recon; sid:200000368; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talktalkserver897.weebly.com",nocase; classtype:attempted-recon; sid:200000369; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tareq088.github.io",nocase; classtype:attempted-recon; sid:200000370; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tbsl.by-on28.my",nocase; classtype:attempted-recon; sid:200000371; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcaconnect.ac-page.com",nocase; classtype:attempted-recon; sid:200000372; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tejlksdoisd.com",nocase; classtype:attempted-recon; sid:200000373; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegcm.me",nocase; classtype:attempted-recon; sid:200000374; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegramjessica.pages.dev",nocase; classtype:attempted-recon; sid:200000375; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrampx.com",nocase; classtype:attempted-recon; sid:200000376; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegramsexgroups.pages.dev",nocase; classtype:attempted-recon; sid:200000377; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telezelm-ivee.icu",nocase; classtype:attempted-recon; sid:200000378; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telgramsignal4.sg-host.com",nocase; classtype:attempted-recon; sid:200000379; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-102379.weeblysite.com",nocase; classtype:attempted-recon; sid:200000380; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-104033.weeblysite.com",nocase; classtype:attempted-recon; sid:200000381; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-104394.square.site",nocase; classtype:attempted-recon; sid:200000382; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-106968.weeblysite.com",nocase; classtype:attempted-recon; sid:200000383; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test1.workersdev40050.workers.dev",nocase; classtype:attempted-recon; sid:200000384; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tg-logrom.com",nocase; classtype:attempted-recon; sid:200000385; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tktk.tktsk.shop",nocase; classtype:attempted-recon; sid:200000386; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokecn.im",nocase; classtype:attempted-recon; sid:200000387; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokeni-1601.vercel.app",nocase; classtype:attempted-recon; sid:200000388; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"towrewds.com",nocase; classtype:attempted-recon; sid:200000389; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tpwalllet.com",nocase; classtype:attempted-recon; sid:200000390; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trustwallet-zendesk.com",nocase; classtype:attempted-recon; sid:200000391; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuviaje10.com",nocase; classtype:attempted-recon; sid:200000392; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tvjbqiyv.guru",nocase; classtype:attempted-recon; sid:200000393; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twcht.twimobie.cc",nocase; classtype:attempted-recon; sid:200000394; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twimobie.cc",nocase; classtype:attempted-recon; sid:200000395; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uedy.pages.dev",nocase; classtype:attempted-recon; sid:200000396; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ultsyncingsolana.pages.dev",nocase; classtype:attempted-recon; sid:200000397; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upheldlog8.godaddysites.com",nocase; classtype:attempted-recon; sid:200000398; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upholdloginorofficialsigin9.godaddysites.com",nocase; classtype:attempted-recon; sid:200000399; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upholld-lligon.godaddysites.com",nocase; classtype:attempted-recon; sid:200000400; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usol.shop",nocase; classtype:attempted-recon; sid:200000401; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-cgkzkukp.vip",nocase; classtype:attempted-recon; sid:200000402; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackaxd.top",nocase; classtype:attempted-recon; sid:200000403; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackbrs.top",nocase; classtype:attempted-recon; sid:200000404; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackdht.top",nocase; classtype:attempted-recon; sid:200000405; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackgee.top",nocase; classtype:attempted-recon; sid:200000406; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackhsk.top",nocase; classtype:attempted-recon; sid:200000407; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackivo.top",nocase; classtype:attempted-recon; sid:200000408; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackjjx.top",nocase; classtype:attempted-recon; sid:200000409; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmra.top",nocase; classtype:attempted-recon; sid:200000410; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmvz.top",nocase; classtype:attempted-recon; sid:200000411; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackuqg.top",nocase; classtype:attempted-recon; sid:200000412; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackvgb.top",nocase; classtype:attempted-recon; sid:200000413; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackwbv.top",nocase; classtype:attempted-recon; sid:200000414; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackyqb.top",nocase; classtype:attempted-recon; sid:200000415; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsdana.com",nocase; classtype:attempted-recon; sid:200000416; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsdant.com",nocase; classtype:attempted-recon; sid:200000417; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsservicetrack.blogspot.co.id",nocase; classtype:attempted-recon; sid:200000418; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uzomadj.shop",nocase; classtype:attempted-recon; sid:200000419; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vedi.154-203-197-141.cprapid.com",nocase; classtype:attempted-recon; sid:200000420; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vgmrm.top",nocase; classtype:attempted-recon; sid:200000421; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkkvdkdcmm.weebly.com",nocase; classtype:attempted-recon; sid:200000422; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vl1.spaceysen.cn",nocase; classtype:attempted-recon; sid:200000423; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vobroffexagru-4404.vercel.app",nocase; classtype:attempted-recon; sid:200000424; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vrvtn.top",nocase; classtype:attempted-recon; sid:200000425; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w1.5114559.workers.dev",nocase; classtype:attempted-recon; sid:200000426; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waassistance.com",nocase; classtype:attempted-recon; sid:200000427; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-diagnostic.com",nocase; classtype:attempted-recon; sid:200000428; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsecured.pages.dev",nocase; classtype:attempted-recon; sid:200000429; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-lupqrbm0k-uniswap.vercel.app",nocase; classtype:attempted-recon; sid:200000430; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.tlgrm.app",nocase; classtype:attempted-recon; sid:200000431; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailserv3038z.wixsite.com",nocase; classtype:attempted-recon; sid:200000432; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wk.xzte.eu.org",nocase; classtype:attempted-recon; sid:200000433; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wodjrvrisixc.wixsite.com",nocase; classtype:attempted-recon; sid:200000434; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"worker-dark-queen-529e.servers5555599.workers.dev",nocase; classtype:attempted-recon; sid:200000435; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"worker-hidden-frost-ba39.yoveli7450.workers.dev",nocase; classtype:attempted-recon; sid:200000436; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"worker-site.aopages.workers.dev",nocase; classtype:attempted-recon; sid:200000437; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wsa.osmqone.org.cn",nocase; classtype:attempted-recon; sid:200000438; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwwwwsasasasasmmmsszz.vercel.app",nocase; classtype:attempted-recon; sid:200000439; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"x.tovip.eu.org",nocase; classtype:attempted-recon; sid:200000440; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xhjxkj.cn",nocase; classtype:attempted-recon; sid:200000441; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xixiajiaju.com",nocase; classtype:attempted-recon; sid:200000442; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoomailquthorization.weebly.com",nocase; classtype:attempted-recon; sid:200000443; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yungtee3.wixsite.com",nocase; classtype:attempted-recon; sid:200000444; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zagbasamothega.dnsget.org",nocase; classtype:attempted-recon; sid:200000445; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ziraat-kampanyasi-besbintl.xyz",nocase; classtype:attempted-recon; sid:200000446; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zxl.cbbnbbc.nyc.mn",nocase; classtype:attempted-recon; sid:200000447; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zzpov.top",nocase; classtype:attempted-recon; sid:200000448; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"datagivers.com",nocase; http_uri; content:"/3961f442eqd80b4e3c28f75c4ba682dd68f9.html",nocase; classtype:attempted-recon; sid:200000449; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/uebj3h3j",nocase; classtype:attempted-recon; sid:200000450; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gateway.ipfs.io",nocase; http_uri; content:"/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq",nocase; classtype:attempted-recon; sid:200000451; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hm.ru",nocase; http_uri; content:"/medoeu",nocase; classtype:attempted-recon; sid:200000452; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq",nocase; classtype:attempted-recon; sid:200000453; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/46wjpyr",nocase; classtype:attempted-recon; sid:200000454; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/910428",nocase; classtype:attempted-recon; sid:200000455; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/cdmd94193ab",nocase; classtype:attempted-recon; sid:200000456; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/n3yi7p6",nocase; classtype:attempted-recon; sid:200000457; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/vre1p3j",nocase; classtype:attempted-recon; sid:200000458; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/p8w69",nocase; classtype:attempted-recon; sid:200000459; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safebank.onl",nocase; http_uri; content:"/107519/c90488/4a1f04e6-1517-4254-abda-f0aee8fe0ab9",nocase; classtype:attempted-recon; sid:200000460; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scearmcommnymnlty.com",nocase; http_uri; content:"/cert/loks/mir",nocase; classtype:attempted-recon; sid:200000461; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scearmcommnymnlty.com",nocase; http_uri; content:"/cuce/rit/pil",nocase; classtype:attempted-recon; sid:200000462; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scearmcommnymnlty.com",nocase; http_uri; content:"/qinmot/truklop/poli",nocase; classtype:attempted-recon; sid:200000463; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scearmcommnymnlty.com",nocase; http_uri; content:"/trawbe/nunty/loki",nocase; classtype:attempted-recon; sid:200000464; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scearmcommnymnlty.com",nocase; http_uri; content:"/xul/lex/ponu",nocase; classtype:attempted-recon; sid:200000465; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoutout.wix.com",nocase; http_uri; content:"/so/e1p6lravu/",nocase; classtype:attempted-recon; sid:200000466; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ghghdgfdgfc/home/",nocase; classtype:attempted-recon; sid:200000467; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/tlly",nocase; classtype:attempted-recon; sid:200000468; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"workflowy.com",nocase; http_uri; content:"/s/att-support/6ca3iebztzztx2gi",nocase; classtype:attempted-recon; sid:200000469; rev:1;) diff --git a/phishing-filter-snort3.rules.br b/phishing-filter-snort3.rules.br new file mode 100644 index 0000000000000000000000000000000000000000..d511c7f44dc663c3c940f3cc61d45f52dee07c72 GIT binary patch literal 7739 zcmV-B9>n2+l4cAds!2TnijZOMW6k>Ke}6Ztc`4vX6wZAi=Kl*Ql@`G!Xe&JbzcP&n z1?GgHzyOpJ)KF$>mL}Bxze=5ytSr^;oD(VbNm^O$UCOq}j{ncv$|_}*n8Zq1tAbQn z)_rE+oB?#NnpI*JYca!Vz#qKuqd5kQjgFya=UjS_Du#7XGF<=56aS{EAZ-~!ZuOVG z#x3r(etiAI8tNL-@>Q|q)BJPFrSY$S>JclppML4Sa>UmotSU;miZuX!xQ8k4(!eS9PTzMVh)(wC+({RWj^YB?AG^h;kIL$&_+Y7F|R>U8bj{#rs? z`}@^Ga}|BAyOq2=@ZD&34}Ss;8u|90VrA%W@>9Nk`7i$dZ~yfF{oSAb%NL~ki~Qc# zFaPO({L7#I)8GB!-#qY~etoaYk6-*&=YHK+>V{wI%VR^=(EsAk@9y_D-sZ~%8zvJUC@()E~lTrYVbdl zraJpSoc{b(@cco4{tcY*z9_Y|8rd^zkncZ*(MNFYFzA)VPeGhJ4 zQW)$702tz9DRXk5!{>euuAn1IR%n@+{>seHaIWNVA=-HNJFcNrz{X*m=iqSdTc&2$ z7!0-Gq5gUXZ$KK@yAE4-h{3VJ4aFu)T+9hcg*BvJh7*g!IKXktF$6aDn}re*UMCy& zTpB*0xK6{B%Z4Snbp@5EL4+#fud-t=ISp6%yo-6|fuV4#h#$~255sPq4Ot|P2`LJg zPFCPH^4vl7;aEH3QpOnb1~K6z`NYH#2hi>yMz(M*xiiN5B4@A>`*wJ8((5;~H>ur+ zgR*1bG0gYM8H}QN-}@QduFB0y!@)4!?lOb|iMZQhAqiXh891$qiMl%&fUOyV_;10j+#hnRm~ApyO&lk8?& zf`TYS9gzf|jl{w1j4ybUFi`99pg=Gz8AyL2uiNFS5~9SVJgE&idVL> zm6eZl;_lJFSj|OSYs;3Cbeyy3-^Tp`(za9!iyi;b>Mm7KwB8*6Nx? zVR%|e+OkL{T)IPu`z57JC?GA~l1j-rkik+KA&pDKh~>!q+nooetpXLN2)b_wOCljD z{=SZrZgnIK+SP5jw_D6nQHKbQi(KAkOG*WmAOfd`j(> z5QQ+ISu)g-8PWPAIeD$lOATsRVIVa6)_urZL@l7<961tUoUB~v3S64n>ff9pN7Q>; zi5qX}rslx;M$Iv!fl4TePQEtk%@b_pUxDSnI*L_$@ZIKwd%z7@<{!GLkT zw$xwGaprqx;(4QAY8so; zvvBo##17~C%!}IOah)L|%F88}pX(Hl|IE4V*OE?w?F1nJqw)J#Sg;3^4||^b&Eors zGM-0~v$w~U*z>+WTejA1>yd<5RJsE8`U~ywL#d3eK@3j5?WQn@*U9AW8or7`w=eM} z(po=dsff32yYDR8b8D(IcCcjC=iO1bMvbSv{*a?5|`W ztNIa!VN-N2eVwL>Z(=%pdFODn^Xd%Z`hZ(Po}QLJQxTHMEaw^OnE@~yo1!ZoUewoa zUxy7J_U3lOz50+Xhj8)NyGtjol#VkB#_-cnAut4Lb|$qzZ4EhbDB~_bcmIwze&A4u z9-HBMDBUG$lBM`kI}D8kt!bG(cQ@ux7Luw)Uh`0|hjplsZB!369BVsPcJU$MEpNPoqe^!P*7yG8(a%%;Yx09_s-Dl@N4jq zO(XS$E9Z%z$caS;gc;6If*8@u(xO-A<9K1|ul3!St>M$Id5579I;a>DRGD*!o`g-` zK>4VJFkCJWjmX25A*g!{gAvVcCVG(F9cC2hixpB3J!$X>oy z6%p$-7aWdKBMxIc+$7A+g%lEb=&hlKClr8ohxrzTF`*neNe?Rd1$CI1m4`zk&%%i* zxE!Mp)kQgs-LRad`bKP}E`pOHb~pssOP!xE=s4oC?AuTuduI(mM{CQB<)Hkfq03sN zR*_WUnC-MO<50V8t>6*%e9&=}^3pH_7s=0q8X+;BQUf)b2t~9ZR10~+!(7zJLHDgAgtVIL|E#vQ z z<=|Ic7OZR2xWu7I7_??abD&_zH$T7}%JxWQn6Rki;8s<2@~(!bAndy5P&5vK-nS+5 zEpbr#)XRK!B#ZDJ2-TVnISq3}+)id?15r?10jknrJ(ut#QaV&ew`xm<IBbg~nXxH6SVj4M?E!nDehgG_Z5k=7Ru}^Bid*gxc0AGMo?r-cS-sFcwY>YF znii5nB3&`>kdT|P44i{9o;J)_(vp>e**V69c`o2GXmJ;zd0FQxV1Jd&h3-Y?SIR+n z`l@qSLaGfDG)$r_>2nMNl{GXK>I~tj;jvK9Ui$7A$U&J-t8*@4wHrOzLxCl7SD$tZ z=D8eXr(-_nvbUTgotQJIfC}(kE#Si}=U+dD753m^PY}ujcY4MGS6kJW3ZbxCk z=d$3SNZMTTQcDkBz(E;JlQh@0zzWJ;4))TU%zdkC-#-UFuLaqcQYK8?7{o`%jT0NIp|0ewydx9?%GWb3es0w!j37$ z+(U{>HDH_bw&0*Vq@QWY(PJvvlaen;q;|W9GPPvp$w4!E_A=SMVD7b)M)@4s>KZWw zK3&QEpp=|vILMkCSwe}`c{sEogm^!qTL(bope4=xrS#*#Ipz|e_)`vc(y?D5g*t~a zk%L{daYYX|G`swApZDRelx-_)NA6{~Lk{Xt{VPq%#Q3X_pAe$+1cObDSQ8YTjR(#gnONTT_$zTuNGkUMX z5K7hJ{AxdGzLHoDs%F&dtE`@A#z8-)YTZUbDC4^k#-zb-`#Y}~46Rf0j%qwon?qxA zP{5{d+M+Tx%E8(6)8bA{l2B<+lJaV5s`}Y2=W6qBIcS^NyEd5P-JZdMy{+NlQq)?r z?;Jvz-{2S`X&7)Ro-uGx$fo*DLA?x1J7(pLf40VyFn^gk^KCQ3z)%`|KUA>%u0HRedAuSFamO4tA&-FNrs%YkS{~#o)L!Q^R&@SO*Uq*MiUW>K@}fbq)&FOjXGJ!qV=;4sv{{ zg__Q>#r_H&wKj=@E011qd&EQQQPuq9z-uqZtjH-F)tH;pm{?eb7O*uLTV`+}_tEYw3yrxcJ91N71cN?^THbw}=vjh$X!@Lug zncnU PmO+#By4jCYx`4b!tjh}}b-!A9lOhOHN1BONn1j>)JQs=JayjQtaA$(^u? zLN7U(_H5ndbn>~cq=)Vh9E^QAr6M%gNlxL&FRUv~j`wPWyY;lOB{sDVi4?4RAU?rx z6x-Rb-$U?5Vo>ctzhI$qdtSNhol%D z<~SHQGjn(FXm7ihAtYl!j7GF}&1m&l4rHcky?6z6yEI*#gWd1mAtWrVEUhLGrg}=) z#)`1yrYr~JW~OR~r^ma2Nf<&i6fOlVh7D7~P8c0ksU*i;+ICESonJ@HAuyD7VuLUU zDRTnylJ$I|%5W;!q)a54G_nOEe6kA?ZB*{=;I1bOs4TI`c0;CzkE1>UQpRNd(JHQ=hze5fN*u2IbBBa%&*V0rcjPGS~ zz&3Me4<*~s>eA|jav(Pov}bpiF^87}uc;WJ(+*}}!;Y&DT4=3zDGa5X<})CfL&1^z zY*h;7pl(j~z1uAe>oFWyAhtRXV z*>Iya$-&rsw*==+Qm#mZ6k;$Sa$gYk{YwtOrt0^$XO7`RCKod-g2{U?>M5;@45`x0Kz9PL!=@fJ3Jw&3G^bgEw|Uxx|g zAad5z-0t%X?UDtz98}I@@RV$=E`dX=X{p%CyBu`RhU{EO(1z~q;O3L&a=;@C<9x`pX9_t%aYk zj27I;!OryNIM+4Cedpj{NX$OwviNS!!MK>Eda5@sy&aYGTK8NBuyrh24p!!lV`#T4 z`#SDorwcjgn5`x)d?k`9`~pNug@3(?CKWzjL|TQ<1<7c^Z#hy+D*XE-qAL7}NK6ag zh`0)Wbt0j{e=LYpSaFQH=-t*nPr^{r?lnyzI%?7u;^yZe;kb%L4iKhii8UX?I2a03 z+2ozo^QPWv{++`pZS58I{pO6f#N{AkHXU#u5HB26eScRf^jjNvJ#zaj2PE^(n%CL2 zJYXenfW(JL@&5kW97o@R-8 zM9r<_Tv-E-n{k9B2Yyqfxr6DEa%nuXD21K9o<>SJQ%vEEcH)vFsdO+OjT%Rp&PPZy z4C7QY=e#ybNvVX_B4PUULV=vM;z9!oaA>(S)KjMLF?}&+P9$7&i?E(@MU@}56Pi11 zi~v+HO6#RDLL@?Si=?wQ%A;kR3ptM3%#MO&BP#SpP9l+-ca+pl&l4TRhyulEJyqH% zFBDEz^L>;=Y2Hzqf#+69Z-n5JvWA*TNC4zcD!=WLOqyFJ#wIpeR1=kg8U~b(%rZBR zT6#Vzk!T$}`B5r6rv_z5p=FVJiIiNW5zVNWt1FNgy_}X#gA;~zyn}7=?1mm`N~tH$?=e)`74f_#{TL zh&10QIVl0cBMO|9wL)u$b~J26M3G2+94C#N1sXY8Dwq+*&&m@;QH_=>ZM;a7-WDke zKU$%b^ulYC^2g4jkW_hX^lXJPrFlhaDFvtAXep%ST8w&@3}!ik)j&m}70&a84s(dt z6K6s&0S3@%&iRB|2#_Li7+sE~LExYdl;EJoU&2<8P!7&Py~Z2nIecKDrVq4paOUaQ zzin-P_FxPK(;FW7N^Ql2*S!W|LXD7P=Xzfb4m8c10x#0S1to-jHO}BvYD}XmN^oud z&v}({0>5IxaYa54AzS)r0oTHB!mjIOI;Na5tEV)0chmj8(>^3~%^sv=sgM%YX zBQN#!dDvSV99^2O((WGm-4-t1^QVRlldFW8>FYBOq%9H7yyss3pgy=&>u=kw|2z`-G-dYaQZ4nh5zD9!BTz>C)F3fC;x zx1eAgoGI#?wxoPC8b)YI)hGpx)S@aSNtD*=ogDYaE3CGCEZ=INnv(9XuXF0!=I>>xK<6R)#s@O%fTW|TYatd^{Sd} zj$(ZFZi|h843%Zx91f+#-h_^muFT6pAl32p(gE=rRXsV=APNqSA&qa%?lZ*O4h*BX z9#Gx`_D4BLqg&H=4DMcYb2-PF`!Q5L^hywFBjYFsXFa2j@Sr^lDhGp9!9WHc<~tr^ zl7l{)v|8t-&P$FU2Wd3NYOTX&j4{&nRSu3D)lo_F!n`&-I*xRGVMxWlm5`Q_qp-li znWG!r+P8pdp3iU$K8JS)vOvKEL&(F~7L)@(>WAb?pUg>IXt&XnHRcSiwALVQ-+D)u zx~0t!k7xNlr`;dyP+y&%2s~sMW22oAaabElv(HY1TJ< z#jW}rs<(%OE8>WY+kGhK;5gFKslx=lu-4$lx#!?i(voGJKR(+UjWVZJ@#EfCyXtBp znRL$cDRL4{#7itOCe<3o6_p2JNf5WbzK!> zRDL)(m-LQz{o+Q1i0H(_HT&FEWkMU^5Uy(zyK19{BDOt@OpK!(4^3cbjeA>2%uC7p z7YwZoZ(G}jwzays*zOFj-^aM+4P6?-S|OP%sir{qqPBVw%fS}Cq~)um_4i%0wFAsBHd|N7$Q1SiRn52roATlWxf2|wS zq~eD&Gieq7_4+Uw6@4$@C_1X}=fgx*{Qh2;n2LWcmWiwQmpz$;x^TbO6NyydTkNKr zLyn=!n1yd7lYEEz^_JE$rlnz@XgLI9GXDL^JNQ?#RSu}+|ICR#l93z&EE)N^>}Aj0 z`aR_{5 z^k+F++Jz{j(st27QYxejUJZx9M&9HCs5R6EbT^+Na7+g2)5g1ffF;oh*WX#iqUG_r z+T+h4aR`v)Y;~a}u^;bZ_i-aVg?hn}*~vkZRD&W!-{MksYe1+n}~<9k&td*gGgp@=nWQD`BnQ&AuI=C z(zn=)Hup?N=8|h87PuMid}0ifxH^?Xa3_6x^_IE=a*1ZmK8#7HuQ24gzjNw!E=zMn z4)kRC`f9bp9$7;j$8 zjA~?qDCuN2)Icm&8&ZpbTjCJh$;teD;^3@J*193xZrF1_ib;cio+Fgb2b6!af{Y%k%r|8BmyQFIo9;oIxc3gnLId6G_8P?~wK^lWaNTBA#a!br2!RWOz!euQouMd+YMYf%>ruWjKpnBZ85B(;NxQqt7qtDba4uQZFXj_nDz_2m~q`#Gs zcfO7Ttn4%4CDX(vT}7Nkd^E(gD} z^}?DXS{m)4FJ+zt8PDu*U`7jR8*+;F9{;7|B&qp!W)xa~3!w8TP!THWL?Fr-Qjl$?fVGv z0i5aG-XZO|eYeuLn2+zl#?3AUaITkW1ul!=VAT?ApD zHmlV>tGyZQe*B<=I>=)R=>=CncerAcU%Z^ zTw?qpl=uvDx$kU?Kywa(RaIwO)sd;A-K|&ZchsUi$m~S^Rt|VT`?Tk2AGTz2XEO3} BCNcm3 literal 0 HcmV?d00001 diff --git a/phishing-filter-snort3.rules.gz b/phishing-filter-snort3.rules.gz new file mode 100644 index 0000000000000000000000000000000000000000..d42908051e08f3e17d29dc76070670c6662ce4ee GIT binary patch literal 8135 zcmV;&A2{G2iwFP!000021Js>ekF+>;$M5qgN;7-0D=kd%4n0z&NEvA_CYxw>R*G`7 zGH?JF#-{uNMSc1lSNA+pcCX4r%1LYH>FTb6_7B^~|AXy6-(P;^R=~&QKPGM_F2~DX zfBE_H7pb((F26Vd2JAn5fBEa$GYkF4CB3G3l%&zM{PlYMNRyB2^}q1_pB^jMU_LI% zrDw3#@F!zcpFAnvWlT81YZDHty8&!@|VQG(-az7W5D6 zS82X}#-o4c9Y_;$@b}{LP&~2H7j>DLRB$0hpb%kO^r&tHG~<#4lnR`KfccVw+UDe`eWcA`pcw@{qfQ%X+heL?-IFzv2n}C zmPy;PXKdB_-5;guuz2`6!HluT3Lnf`SXMl1qydlq@nU%YkzPN)k{>S`wvXh;Km6Yl zrA3mId6LIn_cljLh$AZt{7=Ged{cTGC8LEhT$><_oDfD;T$7{-X;%dyiaO1F;56~) zzddYkR-uU}LxF$rw;sd|pZg`ubp+tdS@jh_@ zgCE@=$MapBy(q$L<{e3EPfsm=B~3_Pk3Rno8p35j?rXQ zf_F#6jd3`Lg+rFKAO%Fc54eStlF}Hf=5bQwQF_gyq^Y7LPvUOXZ1rpb-HVjo(Eg5i zr=jPzW4e!FL0Lcd9NQqnA+A;UOMeqT1eBBjG5v4@u7av8BPBr0B;Z)J!condGnq+7 zN_iNoob+uivYHPVI@-EsX?sRmWuyd&wNY|SvZngF3l&^#89A!7#F%)JDkn!(RYi&4 z^5R;@=I)q=*q`ZbvVt60ja7EGzDjyjWs#h!sEQcU!np7;BhAaRwN=wZD+}-AgkTXXAfPOoRBgsHET$zNRuim%W_{Da7;$rY%@?m;~o%tB#l| z`K-3jkpK*PC7{;zTm`|^|6kzVzZ;hm6DB*py>R&(+=;$ckkTd2PLY{V^skCb8!>Zc zj=dnIOpwEJa~Ldd(89=qk`if?wtyz@qarPaDDPMo)g`1+RqWqdzoMddC5F5+ z`!iqIcHh)k&c(WKTmTe%Cp-1rxBS^Z24$Chlv@sVV|o6+a3yMbS7Jd0J(jkEPuC*Oln;ug0i^-d+MwG_)?m(E?}rZA*&< zkGkm+x@8o%Tu$bpM+0!QcIjOz+HJO_OVc%#ZTYyLZxH2`;Faj6B`;E&cNyzvcCXZ` z(p$a>BcJzuyX*T_?BjENh-~fd-8vuR{bYkE6MC1S>lttF9ZF$Qbm?>ItJ`>Vx>#Yj zL)J1WvvObe{m#>Ixykm~mhS9jNae{z&gxJEPjhl&{Sg-?Q7@6WW$0x^jH9T75}%TkteWIF^jY{) zp9dy|>t*%KQWo6e#c>-C~Ldv4F z$x2A~3@9r5+Ocm9XBt*yjrVwM}?ojVHOG+971s&)kHbG_; zbwP?m=8@r#6Ed}?q#wE=`rHr~y^^J9)#`D?Nmisqi9M}3vt6#PNP!|1_KLj8PBGQA znE0+34+-@RDGqFgb$GhoTuH%bEFzZEvImcLc1Vb=K02XXKM21pJs<`)q(sKVxQwi} z@#jjZw_#FhFh&Uso|MaWM$3nZj$P_g_g zp8Bfs6HT6l-_lJ;*`j(ZtU;zD!M;^v=c_UJu0TS{F%@6*uCu)5g2%(#(~Jozztm1? z4a%(A+h?n|mGH1Jn75fo=@ShS-<9q)ZeWvM=QY-pcEh=Peecys(NW37WRUEcJ zX~j{bWpyG5lJZvl231|pASD!$u*A)^IfF$>cl0qExSpRy*`)ayHATu-)$hk+PYvFo zsDo2jIVmhVsvxhWgp_q^ue#{-_8=Ih88LC3dj=HL=koC0*DMM9&=xZ5MG^xc~HMAk&j+BuqGJS1_ zkNn!KV5XcVlYbxp6TwuJGzAEmofu?EIirG9dQr|qN_P|Qu{-Tpq<9qm0b20_Z^Kbi z5MWl;!OFDdof90n1RvfCPm5=b?Cv|^YHdY$^dof&2Zy81l3AL3*lmh;8jO+Z+ zd7bHL*g3eHR#{#V$Q&S|d8s9cx-5O79;XPX<OqxwBJg}2;E*;!#Cbv9% zM-u(pD3tWY$e!A9xrN^UBIQjw0`rl33t2s!ka8j&!RP0n3*jIhRnPkVwRbsaSR!Rb zI!?FgaAzVLDf`ipFCe8**opizsamDx_ib0qp%Vz9qL=WC z7Nwc{4nTio}SuzK+5~mPi*_b^WGP913h3X zZdo_C?qyCA_ep*)U1^4~$Oaa(W%bWnL%|#pfk^p%BD!O%U_lXxlx61x3zLGmBs|R| z<-Iw@#jzd%R7OktFeswQr-4QV7GRoVX_+_vM1I!$WUwG5BivdB?SvrZvpF5{;JSI-hZtO}^!PRnDHU<7YMl;) z2dI!u%cQI|r>A4bwuxB7+Y@l4tTlO`#*Y>xpZEf?Gx7X(DVod+F0#9tnkHa z<;cs;fVsE9D2a@l!b_qS-;SFkX z8F{LJHb+T8%)MAb68Dsp*X0cIxiBuyYz<9G8D7p{on{!Ht|x+9MGDAuT5%!VgSV*V zqO?j*7+$8N3@>MgFJBYSk>h8#LZqa8F9ow~iIn84x*<+@g^@D86zuSsQ`Ac9@S6s+ z@Tiw8UUlozcsXL;zYR!9O9<#k&@V@BxAx4!!1c2GCzr4l|Lu6MHg52v{L3Ovzm1!c z!rib*s#P<0ci^JDtj`1&QYM)K4#gjeFAJ8_MMar3XV56A5C6>dR?V<(T)*by)b-l< zeIRSxVmN)9tsup=0ZPRli~d|d8yUP@F(qZ5DO4F@;eDom!-Gsz=1pGJd3L5zQc@}l z^Fto*W^92tqDvFLXD%gWnz`Ux?a?ke=JIWjh8D==>NE+L#-!{redh8xNY^Kv#Zyvt znaCu;k5u7RloG>{U|-LPIKl%tDbLJ>J)Jl#JAp$DT39z5u22*? zbNUtsDgR8QgGHP6bpz*w*dt}7xxn$NG&6gP4toZRl&;`R4#005dcU<^u)SMZw{9o) z9HykqH5V?JoS5FcXFvYWHzq=Q7%8L8g=^JvYepNc2T9p&E~;CbYj|`gWv%J`LD|64 zc!85>vi#g`qm-1<=5l;JbiqHB#jP=Blkf77^4FAXJ0htJM0t_tu`hhDfh{3@i#$Xing4fnXS*dS%B9gO(og}#tC@B9P>E160ORZG2O_Iyy4LD> zd&EDdva+kPIx@1{qVRyQQS_nrD%E-B{!h5-b)Y`A3 z*TH2K5~dttr8Fy~{&OjZ!w<|+c{#1J4=<%ZbN^t<8+J%rug-RN!7OK{eWDU`eyKER zSw*r~Fa-@ed1>AFf&4x(DkZ1AE#+qoWjb8zz`e`#BMu{BiWBy`Vy3ORRN%GyO1r}AlZAsS6{N{3MP2bCjD;LNpTcbUGgwebFn=i0 z!J6C-9x4rH;`w=^Cv|csWdWfI2@tMkS>B`}XL{kNte6|TH<-VZM$@`q58pLwezPG9 zt^PC6ro#(GQF$^qxxiS)A1-%cWLj!?7zb5=ur5?}0dmN%$x(SS6HuD)IvIHAaWr|; z%TcK^H@8pwFnkv$d;eX*%j*-98c-=Sw_Ow!<)j_75cMEwJ4m3wWz#S{bgBWuOV?yw zmmMf=o_S>dh}FuWG`2)dcSx+YEAv^w6k z9m(aak#Ul$Z>x%Fp+VDz)Vz^W@xE;tYpLSd<=G(Pq%E+4w}kS@2~vw#xV5UAHmPI! zKDQo1C42 zpowG=Hs855se%w&J?NITuy9xs8bbdMQkeD82>m+%_(D~ zZK^@Hjm*yp*zyo(l7pnNAepAM>O?hwYGNen0NQ@YEKgEl%R{^)gKU9lC3;%Nuj+1K zRbSUC_FY)bb2+i)A>eiFs0cA|!f7iw@IKyLOfey1sBec{PHcGyKv1D$eyKY_wTuk{ zt2iQlLu5oDkbj zK{<~xx9Vdg(mIEbZ06d0XqY5~St5%H_nChjgu}ssxQ4F%|n^ zeIFasin18&dCv!teSc!hLz;2M;w`CSB}q}6{OdVW{V4mQN$zD@KP&rJ~ zenzo|2*qY+Bh#Ar71X4ijs=(hl!u^lnZ^S#`YEjUCkhQyEOEp58Z&0}5LBj8X8_({ z7g)3E1x&fZSx^gXr7$bFx6;Xyk*>2Gt{xRvB$}+9)ok@>&d6j5Dru>+`)5*6k@5zM zFrOs}xlSzCAgJ`E&R<`j9PbuEr7d;gy_@|V#^FSMKqW18d%Bm&z8o3{);HW5O za4;>PI^LeRS9(-TYk)PryjfKaKBSl9&&s*tP$@}$THm<>SP*DhX-YcU`-( zaW|4xP8=W0_VQg83##~_Lwd6nCS!R6K_waW`W5u7M+eL6^~zr2Ku`%reeBk0>*DKO zU7x7vP^m>D)U&9oIv&+I-6lch6a9rns-B<4qWG}diqW%J3?WwAva?t%GA#dIWpe)f zG*n5>w68{f9XV;t)o&p6nYsj3u$Z)4zPobH5On&FUZ%<_o zRKn5!lPtH^N97*%W_f+x6HY4=k2M7U`Q%4nR31`)o&5Fcd2{AcM3p>lW}b_*O;#2P zs0=H1AB!O=j4I8+7sSiJhLS-5C zo00Fy25If=?Y@_#}CHNOvOQ^8uh`hdI1;AT31zls;p2&hT!5`ot?9$8KLrx`u%3~It;No zD3vw$9f~pb&sT{3+46C?ABajm`h6tj!uLUr3GbfQr#xc>m5MaLd`tiRj4JW|#P;I^ zm6SBZ%kN%so>8u%ayadwGLi-f@#{5ye+jZk{n?zW4V9HN=xe-( zV$J7O77IbeGV4(;<)RN`P;3|umTT&Y50`N<t4_txOL+53`_3751j(TAJe}(jlW*O_AK9Csq)n@`?ugbo!~XmS>?7 zhlcG5^E~UU5QIt%8r<$fg3+P)=v8T-wWtY|1~lvs1J}H5EeR^oXLwx2-Mk;=xVyuB z2vjQ1@RU<1!_zEQm>6s1VH#BJ{s|6Dt^TgnJHN|~%DK7EAx)1=dk5MX))Rw0s1%#~ zHtD1d82RZ1&Zv}{k?X5N7|m+kcSCOjvp4at{dv$H8|bWxc{Zb6&$3Ze9?d=8YB}8n zipr9?`|Vp4g&c36+kV?JW;9S#KFt3i`c55$m&%abP*mp2--(3tSws{qk(xpl5kpHf zYMn*Yq9vMQ*C>amLrY{HHj9X(CAwZ;SwuZrqQ&KGMNI1oFVW+ZMO33D+V5i)5#G%3 z7)2Hl-pue6k1Qg*nc;oUD*=3f3LE??`K&Wb(jrR zR`}Qj)HSQiib^Q?(8`oGqeWAZqVBt*rgbSd2b;;6d`3}8B_HGBmYkXml|1rsyFJuR z$z{o(PD@dFBp-8KewUcPymOenL6I69&qSC`6udPGr4 zB;$LEdEf3%EY+>pSL2_sov7$gnIzMO2w@&$R>&c#agqF`bs-hupA*a5C@P)g^H#n- zkt54ZNKyGCpH^Mn!x?X0@>KayR8XmDEflz0ao@FG3)b|y{8G4+A9^+&JvB3xqH<3DV*OsFV1HV(Gi<1`hlkSogW0DGJd81UzhrXP`G9Nx8m?Fm4 zqn;w}e?A$z7FRNn>rqxzM#>R_e!{yn+u(l_TKp4n`lgG3;pVh~`62ezeN5Zj^yK1K z%DrKpuPeEB;o}JNj@jwcFt^Ul?J@iHe)vpb$~n_g{(a5FKb@aND|^^DMp5Z6ab5?g zHVf0j!K!}qjLQB%RH+u#)4C@h4)eBuAn!`vrrX-X ztlb~T`f$45G8%ML?#|yP)%+9X#-D9}m=V`rW`h>6-b%a9|CzO}I#%}=*;kbF3x#^9 zsBVjz)m=dwMhg%MilG9n`JgKhhffSHU#QgJmL&3D-^)6O_rFJa84vj~+nc{E=5S+$ zOCXv7ze{~_CR{dixXXgeIeMJ^Zq~(yOK|&bw%a9bG=BILkU#qr1P4!{FYCUBce)3T zp8)!2pMcjsUuOM^g})x|w&3!fPIeFRGmUNjJGQr%*wDALgU5b3%#BKt`d#-qT074A z-?<+~KQH4nPHG(Dr@Tyd(Z^2!s_DgU{*;6Jm-~D^EHkI5l&a}TYZ{gMf85gkl6J26 hC78Xm5{S{_6F#5tYR2Og+}~o~e*-o6uf5ZZ0RTmb?o0px literal 0 HcmV?d00001 diff --git a/phishing-filter-splunk.csv b/phishing-filter-splunk.csv new file mode 100644 index 000000000..3dfaa668c --- /dev/null +++ b/phishing-filter-splunk.csv @@ -0,0 +1,476 @@ +# Title: Phishing URL Splunk Lookup +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +"host","path","message","updated" +"1nvest.bigbantbaz.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"25116414.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"365365news.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"365f09.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"750115.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"823pages.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"95564339.awi.za.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"999fc.vip","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"a.yyyy.cf","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"aaaa.whilefish.xyz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"accounts-microsoft365.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"accounts.0ffice365.support","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"aidanochka-tabys.kz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"airbnb-clone-sahinur.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"akbarinewv2.morteza638n.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"alaindemeuron.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"alexa81o.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"alienv2ray.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"allegr0llokalne753724pl.art","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"allhrteam.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"amazon-clone-by-sudip.netlify.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ammuvicm.work","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"amyr.iran-cyber-net.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"antaidossiersuivamendimpayeerf33.zynekcctv.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"anuragrauniyar.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"appeal-voilation-policy-issues.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"apple-id.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"apri.154-203-197-141.cprapid.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"arvestcreditcard.embarkdigitalonboarding.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"asdfjeiod.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ashleyproberts.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"astounding-trifle-b88a2b.netlify.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-101397.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-102641.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-107756-104508.square.site","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-108102.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-108651.square.site","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-mail-101246.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-mail-105533.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-mail-109459.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-servicce-mail.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-sign-in-107078.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"att-yahoo-mail-105061.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attcom-101415.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attinc-101356.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attmailonlineaccountupdate.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attnet-100294.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attonlineservicesa.wixstudio.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attonlineservicesa.wixstudio.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"attweadminservices.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"auth-sharepoint-asr.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"avertisystems.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"b35ccc.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"b35lll.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"b35www.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bbf-alpha.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bet365t3.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bet938y.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bet958c.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bhngfd3.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"blackdasblacks.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"blsckdagsever.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bridge-9wdpjmsoa.pancake.run","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"brubreumummeddoi-4514.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bscusdty.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bsozvycr.icu","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bt-102368.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bt-106861.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"btjfh.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bussinessaccounthelppage.click","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bwfujmww.icu","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"bx.sfdsb.icu","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"c.cting365k.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"can-post.cyou","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"celery.sa.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cen4-six.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cf-worker-pages-proxy.1352562939.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cf.13084493.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cf.iwoai.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cfcf-8.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cfr-reed-taxi-wayne.trycloudflare.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"chain-trt.online","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"chainsolapprove.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"chat-wa.xyz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"check282.tempisite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"chore.pink","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ciftcininbankasiziraatbankasi.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"claudiorojas.cl","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"clivenicoll44.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cloudflare-workers-pages-vless-a2j.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"codt.digitasianetwork.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"coinbase-com-18690.subttrepimop1005.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"coinbasewallet-verification.198-46-89-184.cprapid.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"company0rder943.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"completar-la-verificacion.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"conductibili.fun","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"correosprepago.bnext.es","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"crenadenuddoi-2258.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"cryptorectification.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"currently5267.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"currently70.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"currentlyatt909.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"d.afirkz56924.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"dio.azrealonce.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ditgong.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"doc-online-1881.on.fleek.co","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"docsignauthorizationrequest.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"docusign.com.bestfinancebroker.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"duang-5dh.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"duvhkeq.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"easyaccesscommagebn.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ebay8787.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ee-account-home.web.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ee-service-help.web.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ee-service-portal.web.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"eln3.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"enormous-orchid-howler.glitch.me","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"espaceparticulier.life","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ets3qe9ooms8t6i8.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"excelorgo.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"falabellacom.dominiquepg.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fdesq4.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fdsfjiwe.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fdsjfkweow.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fekoulamevebouna.freewebhostmost.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"felomane390.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ferngos.de","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fieg.84yr483rhfwieujro348ur84.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"figinstenatecom.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"finansfaizsizbasvurum.online","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"forested-mirage-samba.glitch.me","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"formtools.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fortradesetup.hamidamnaie.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"free-5436781.webadorsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"frogsrus.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fshraha.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"fukshumx.world","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"gazruinv.web.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"geaoolsv.pink","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"geminiwallete.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ghjhyu.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"gimennlouin.gitbook.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"goldenrod-rowan-submarine.glitch.me","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"gorgeoushome67.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"group11-vvip-hot-girls-combi.viplch.online","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"gruppeflorian.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hanisfir.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hedayatfreedom.hedayatkhakpour.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hello-world-morning.freekite.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hello-world-muddy-cloud-f45b.mfoster0425.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"heluapla.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hemanlau1.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hezhouruan.552008598.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hgcdhbxnf.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hjrhd.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hk04-123.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hkmqo.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"home-100317.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"home-102207.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"home-107257.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"homelogin7t6sdfcgvhb.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"htaflytz.baby","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"htaflytz.black","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"httap.l-teiegram.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"httpsbellsouthnet-102649sitecom.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hup6r.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hy.fuckgwf.eu.org","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hypophysecto.fun","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hzuayvvl.red","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"id2.xbenihime.us.kg","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ikergalindez.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"info-delivery-bg.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"info-trackingcs.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"info-trackingiax.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"informed.deliveryhbo.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"informed.deliverytcw.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"informed.deliveryxs.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"infringement-service.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"instagram-clone-in.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"interbenefitprestaciones.referidosweb.click","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"iouwerty.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"isnworldwide88.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"jaydeep8806.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"jeanandpeterwilkin.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"jetconstructionsgroup.com.au","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"joeandvelma.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"journey-x-pro.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"jsdfchkdsds.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"jshattkee.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"juliusmasih27.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"jung-sohn.de","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"katiebllair.wixstudio.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"katiebllair.wixstudio.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"kdlmo.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"kenzmail0.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ketura2010.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"keucroilluxibrou-2718.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"kuconlogin-ui.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"latam-onipojes.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"layanan-bntuan-resmi-dna.prbu2.my.id","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ledger-com-updatefirmware.aparecidovisentin.com.br","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"levappoprauqueu-4688.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"leyoixoimmecou-5619.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"linkbokepviralindo009.vipp.blog","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"liveairdclazmersn.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"lo6-cas-projects-64947843.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"maatamicklogginns.gitbook.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"madebybmr.in","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"madhu821.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mailupdate87.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"maine619.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mainnetverify.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mazulyta.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"megrebeikenneu-2106.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mendhfjpl.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"metacareer.com-case37169314276.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"metagalaxy.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"metamacksiologus.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"metemrsblogin.gitbook.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"meyetamaskiwalt.gitbook.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mianfeijiedian.lawcpacpv.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"milanharvestfestival.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mirobitsgt.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mocp90.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mostafa2.mehdi84888.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"movie-firebase.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"mubki.hp.peraichi.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"my-site-104564-105934.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"myaccountsignup.net","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"navy-nose-4544.typedream.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"net-flix-front-end.netlify.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"netzero-webmail-105996.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"new-currently-1-23-24.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"newattupdatemailboxkidlyverifynow.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"nfty-proj5.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"nnbsscnaceesngsetr.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"occinamete.cfd","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"odovsccs.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"officalourtime.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"office36503.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ohscorgza.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"okm.znt.temporary.site","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"oliver752.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"online-e-commerce10.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"online-e-commerce11.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"online-e-commerce12.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"online-e-commerce5.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"online-e-commerce7.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"online-e-commerce9.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"orange234.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"orgmail.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ourtime.datings-information.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfocl.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfocs.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfoga.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfojq.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfolw.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfoor.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfooy.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfoqv.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfove.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfovt.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfowu.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.updateinfoxb.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"p.usertracktxz.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pages-108-tg-cfzz-ip.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pages.tempisite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pageverifycenter.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"patjimmy323.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"paypalloginin-usa.blogspot.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"paypalloginin-usa.blogspot.hr","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pcmag.anycubic.vip","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"port01-acf.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"portal.chiaveggies.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pruhuffopraussou-5681.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-2801359d2be54bfd8701132626efeb73.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-3096005ebeae423182ccd89665564d8a.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-46a5f86348ae4aceb3591d126020999f.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-51f896deb233450089fc1a520e6ed957.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-682ad3b65d944376b919745aae3c56d4.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-722720be67154192a1102b2cf085d306.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-7d056bfeb6b04852801553620fe62c0a.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-873fc6a3edb941c6a17f50911dfca518.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-aab4be29317b4ec296517a557db12622.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-ba5a046c69974217b0431bca4ba43740.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-c59cf4e950b142949df8861e60b3689d.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-e5855431d98545b38408f52af50ab8a1.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"pub-ff0271d87324424a9aec83337e844a54.r2.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"puertaselectricasprincipal.netlify.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"qaffixledger.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"qbstdfda.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"qpownthenewyhadvanceweb.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"raj-tiwarii.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"restrict-policy-nonadherence.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"reviewboss.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rfgxg.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"riaayaoman.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"roadmap.binarydesignhub.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"robinhooldloegins.gitbook.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rouzhda03.kambizmedia.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rsjxzl.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rtyuiuytgf.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rubinhuud____llginnh.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rudra-choudhary.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"s.team-s22.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sadekk.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sajsa.icu","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"salarahmad786.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"santanderpod.fsthosting.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"satinnaaoabbs.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"satyarthi.uk","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"scarce-army-wide.on-fleek.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sdfvgbcvb668.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sea.6e2efhxz.eu.org","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"secrbnsuppotyu9.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"secure-ledger-m-auth.webflow.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"server.2rk3.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"server.pxs7.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"setshinobi.vip","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sextelegramxxx.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shareorder711.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shaw-101342.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shaw-103098.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shaw-106054.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shaw-106665.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shawsyncmailservercommunicationworkspace.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sherman-relate-rev-baskets.trycloudflare.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shobhit245.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shopifysite.cn","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shoptkoo.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sign-in-att-108611.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sign-in-att-108611.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"simxtrackredirecttszz.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sjhsjjs82.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"skill-meta.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sky-107842.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"smithjamessv328.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"socx.ly","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sparq.eu","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"spicyhotcoolsoup.s3.us-east-005.backblazeb2.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"spotifyl.vip","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ssfgsfg.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sss.k999955.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"stonemartin1001.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"stringroll.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sukienffvip.doiqua-garena.io.vn","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"supportsecurity981.tempisite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"talktalkserver897.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tareq088.github.io","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tbsl.by-on28.my","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tcaconnect.ac-page.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tejlksdoisd.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telegcm.me","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telegramjessica.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telegrampx.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telegramsexgroups.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telezelm-ivee.icu","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telgramsignal4.sg-host.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telstra-102379.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telstra-104033.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telstra-104394.square.site","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"telstra-106968.weeblysite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"test1.workersdev40050.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tg-logrom.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tktk.tktsk.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tokecn.im","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tokeni-1601.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"towrewds.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tpwalllet.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"trustwallet-zendesk.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tuviaje10.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"tvjbqiyv.guru","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"twcht.twimobie.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"twimobie.cc","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"uedy.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ultsyncingsolana.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"upheldlog8.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"upholdloginorofficialsigin9.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"upholld-lligon.godaddysites.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usol.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-cgkzkukp.vip","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackaxd.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackbrs.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackdht.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackgee.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackhsk.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackivo.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackjjx.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackmra.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackmvz.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackuqg.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackvgb.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackwbv.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"usps.com-trackyqb.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"uspsdana.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"uspsdant.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"uspsservicetrack.blogspot.co.id","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"uzomadj.shop","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"vedi.154-203-197-141.cprapid.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"vgmrm.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"vkkvdkdcmm.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"vl1.spaceysen.cn","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"vobroffexagru-4404.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"vrvtn.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"w1.5114559.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"waassistance.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"wallet-diagnostic.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"walletsecured.pages.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"web-lupqrbm0k-uniswap.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"web.tlgrm.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"webmailserv3038z.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"wk.xzte.eu.org","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"wodjrvrisixc.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"worker-dark-queen-529e.servers5555599.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"worker-hidden-frost-ba39.yoveli7450.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"worker-site.aopages.workers.dev","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"wsa.osmqone.org.cn","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"wwwwwwsasasasasmmmsszz.vercel.app","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"x.tovip.eu.org","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"xhjxkj.cn","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"xixiajiaju.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"yahoomailquthorization.weebly.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"yungtee3.wixsite.com","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"zagbasamothega.dnsget.org","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ziraat-kampanyasi-besbintl.xyz","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"zxl.cbbnbbc.nyc.mn","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"zzpov.top","","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"datagivers.com","/3961f442eqd80b4e3c28f75c4ba682dd68f9.html","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"flow.page","/uebj3h3j","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"gateway.ipfs.io","/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"hm.ru","/medoeu","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"ipfs.io","/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rebrand.ly","/46wjpyr","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rebrand.ly","/910428","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rebrand.ly","/cdmd94193ab","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rebrand.ly","/n3yi7p6","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"rebrand.ly","/vre1p3j","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"s.id","/p8w69","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"safebank.onl","/107519/c90488/4a1f04e6-1517-4254-abda-f0aee8fe0ab9","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"scearmcommnymnlty.com","/cert/loks/mir","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"scearmcommnymnlty.com","/cuce/rit/pil","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"scearmcommnymnlty.com","/qinmot/truklop/poli","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"scearmcommnymnlty.com","/trawbe/nunty/loki","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"scearmcommnymnlty.com","/xul/lex/ponu","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"shoutout.wix.com","/so/e1p6lravu/","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"sites.google.com","/view/ghghdgfdgfc/home/","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"urlz.fr","/tlly","phishing-filter phishing website detected","2024-12-06T00:21:00Z" +"workflowy.com","/s/att-support/6ca3iebztzztx2gi","phishing-filter phishing website detected","2024-12-06T00:21:00Z" diff --git a/phishing-filter-splunk.csv.br b/phishing-filter-splunk.csv.br new file mode 100644 index 0000000000000000000000000000000000000000..3add87df7a8516a989359d65a80922b574ced301 GIT binary patch literal 6166 zcmV+x80qK2!4`o0t=0G6zBa2HRlny4R}m23x_dW|2RJAxgUO(&{@1kf;MJjnE+Z3Y zPWN|9Qzz{>Xm+mZq>GZ{Zq_(n4A3DVW@u}jGfdEBK#k!mqlO=Tvo>q9hRtC^K|#TV z^BAghOLs3sg|M}zB*I#`OU$FlEHGWyRzy6fU{L5Vkv34@|pZ)mtmEw*A zR{Z^IYwf6p3#)GdboN~oAzV<9?BV?T*rDWSr+)nUYN&2Eg6XegbMnWpud-0q-@kG} z{VBaa`?s&vx2@x=d^2`F&)rL2ANbChb^4dkAji-D@pH?y{rv6c0Xg;ax1X7L^5<_q z)BTI=&mTX>bYg8(`&C0~8Xns6@$000eELv6by^m9MANp!GTC4D0Ge~~juK`%rd?z~Qk zwdvrTH~5e=pCAvFw_xxXDLaq``mS`(t8v8_ois5aCnOa%pL(Gu7K4GpQGkBRuA%sZ z*U4zirQri|Qi)!<>;P1?DhOZ)*AcOooap60{|j{BFA4YoHD=m7aPb*^&^)G-6}TIn z$$FIsnKFcscL)h*G0lu0fkKI`L)gj?1t{0IB0M>j)eH1ZYPbHdA+;!Yci%6@*iUa_ z@kGJg5AQ;Kfke!$v5R(10j$z`!E@plIVb|Wb6t^)R}<9+u?*VpZ-2{6r8YOBI7cXk&o0I7furB zkYr_)sV65i@tD#}Q zTJbI*(Mkc+P0XdOk#QKOWgd}$B}q}Sm`Ogud(N|vWE{8{6rGM{^bLv9G4%xeV5gE| zOhg^Qhhr|5aR~`2+l81Wuy)~Mfk|kzRl`EZ8@SU;%dd&}RG7sMvr3ZU!A%Ym+dniua!q`NQsy7c+@HbwA|o`f+bjZRG>gn*W~{W$Q8!0iP+26yeL zznJL|`3p@D+hEtX7*;2UUrd|(^ zaK6vH%3U1S=>wv;OfvboPX5@B%Pn4OIytrzIEO!DWnLdlJnVVyHw*74h;SZ7IIE8< zvFCk%_N=wpwIxA%32X`-J#GQ>U|m6Y>^ArxS7E2@SgLL*^8f{rssW~@A5vywLZruOow@!W53t; zX(`!Q@cM0hszDg`Y<7OFw<+R4_r^&>N|U^f>w0^(##hphmi=uh*_FP{^E~Z*K5Ths zf3)-J48rz+S$&?LmOpdhf{84ggL-CwrOXWv%j+xZ*P;D~y(hh6tk!2efxo8Ly9>jw zl#VlS#_-cnB2?NDF(q6NS7>B`Gip<_>Md-`q;9-|gfif@Ev?Q@EL9~att`~9i%O-v zDEN=myVmOl2X6nzl;Z7*WV!6|iZug0AQ{+^mYxU=d0iLmvB!wkW>2^nc_H^tHNDz) zOH-pn*ZiEfDb$<(tQa&RC#gUYVJg*3(>dKCl7Lid*8b`-zP@FFl4R`#N!53lIoN+{Ti{IC{LJFcK4L+V+a3`d#+^ZhR z0*e@@JYBqjPo$MbIW|DZ-&}LJG8fpLm|5Q0ppgsaQ%b3=W{OeONwa*%CB9O~4&{{>0=>4uNy=+Ew)@Y2c>yoSk}( z))8Q@BKlaijmkSuRS)`&fK6PMOF&hTu-=DVC6|HLu3Ia3_?VAz7zFL?QtEg~Bif=p zkB*BXToSdAQE>@#qB0t|p;#;npN4}(=8Av~3JH+JBL=SbeO6Akn|7T~aG`DrbnQwF z=eb@13iX<)*1{D+vC_DpU;>M&&#$awOepvprrbx%1x+hxILEu_Mg84-;TBBJ1u7-N zcOLFM2dyo`@*01Zg7am6gj^VJRY*Qm!&6X0grmV*No~z~Cy&`|$PlXEkWs0T=0sgU z+^NZQNM20Bs3sTxR05^E&aSp9SKDklP0Fi`YWyeW1bX2?29+EPT8Fd}VYiOhZ?>P? zj&JN_?V)WZN|U2ij6u3h3J_|z)vRWo-YG=F+Q^CV3^9>miq0HSb)rDRJAtJ^3eL*IaIGhy1(a(HnTpS*&lKF9CA4x|hFj3z4la zw_lhq)cfF`dw_^1#-%BMT6C2cYP+O7^4V|*hA-p@38!V4Keil}wB`c}vW-ZWGOo<5X-CwwtmnJqPGwe_^~e4yEYMglCzS-xTV47a`vGs zd99@@Mf=Xxt-uBaw%zx-_4vtr9>Jmx)(TJQKAq!|az!YS2A$l)V#R(?GjJ|Ix@HU3 z%IbiMzW3JcwcWjxbge#ON+EZj>@QT%FqktLQhyqzk}WCuf<$W9F$B3KY<3Q>>nrA7 zN9M$XfXlH@EV&=!NY2wAWXp}%zh{+kSZHsiDJqz)(N+-;19YGZxptCT zhGpPP?7)SGfr{Q1^iGhv07&EfeG_U&{+3-L>+nHFndV7E;HzhhY;xHvHFF?`Hg{ZLykTR^Qfe?v3HZx#7!vao~7L50yKyu zCx7G@*2I(n?$&=4Av(1Vi4?5S6Pth@MR!KyP5n?k3*JHVqP?lT3)Ie+=qvK`DI8GH zc$-gOF*UD_V@e_4|4ulLd=%*Kj-7C+3dfKa@Xr2|eT-;wCqj-3sr`J~b>8tfeVLz} z$iwhj`{ST4NKv-Fb|UyTOMPtv9hK6T?AM&#+S(}RvN@Ka)b_(%8#rJz;%2?#N{Pvo3-op3d_fBsyhf@Q zb-jDK9rVBg-faF{+~lv7=e$C4k6+d zi{Dq6<3aL}4Hx`}c(S*TV6t8r%Y-dvz!T&`?WaxTvPgI`;YF-Qf=WihCc-$uIW*^K zl)j5}{_Ng{dz2zB<*O@hl56)E+Bi{32b`32ttNp%tZA*-%DI(|@d^4yA=J1Dr~k6e zXElbKrY|?bI)vOy#0E?% zw)@(sNm-U=u@*5JhpfLo4UX1jhBX=*_Iaa|Ph}dIQgJ0n=Q-%o}*VPhff?nAw2m)q&MVLs8Mb z#38e{&vR0)GJ4uLDAHD9-188B%-%ItK))-5U(Yslj5MU@@U@qZ@t)Y!+btY$9}t*h zBwL$RkZ1fS>X92MCR^E}$V6Bvq}z1uBSVovu;+%6fN>>MTN{VTY#vTrSI+`nJWAiX zbHcb;tx_^}YJ`JAN7rQFYLX7M9-ZOR8Q`D{V*=f58BB^6mVXEFx+dc^>VXdriBl{2dnfj+O)n48#N+uX8GNa=LS@h7Skm4 z0%lr<0d6wo1%HHFEYm2sc2>>9I8ID5i4OHVoxb@rEOHnGY6RqL8Wl6fszu6Ra{R1H z>o4LGgi~_j3Xp?AJ&9$sBa;Ig0?pyw{v>V3NsiJE%5XIqwJaP^!XUI2U>t{!6r)p% zw5ZuMaWM?g~X2uOl*lCcbPq2fK+M$+u;7U~47!+cX zY;Y)w0|`Hw;!&Hz0? zZ(W;p77&+5zMM;MCA{t}iZ^NYqwzFjt-y;ke?jqHPCzyaPZV!jEX4CuPGC1I=)nzb z7NcW_Tc>la39`qnpOu5sDjwhl7d1e~^}RFL2nW?ZLAisgC(*%C=yYkHww!|v86C*L zDb9Rq$^F?Z3=`cUYX8K0$9r(7)Ys?HlL=pGclZ5ntF?4d`Y|}acl&?;_kaHvf^Mdv zn-*4Q>9zndTkdufRDxA7;_!I~BB_jRUaDYm-_go>RdAvobrk{>*do|jSu15V`p7tGamw{rCK#4aoLVJwnM7(pt^h_U8 ztvgq3PAy|<0A){1AyA17-S&A5n-?mYqEozh3)|h7By5>pkXSnuk+?A>H%a!mkguvx zU#jlkd_F936$();(n8)mj)kV$;EL|a zk~2ui*gOr30;}a9IEa-}Kwa--bS`vdAf=IcPj0wryrz7P0+xjeOSHmzy8sPI!INBd zVy4!h7!g;utT*2n7rph?mJjcalsO5tptfgI%``f38loDpzTXrju+m)l_>q%O%OX^) zYxQ}W$l$%U`g&ExvTS|#ArSKnB-GjM)yGuT=r+-}ZM8G*)pKG>VD6Ke&4-2?r(X^z zZ;Jig_U7JlGaenu)W54vv{!;q8wu2*oT0fC;6Xi8^3jo-cXt?Tc(A&)y7g#=uvWS+ z%d!YpbZQwrdR;;mj>9mfBWo^6IF%fk_?y+fdrZ!q{-8GdcL%aU6b@IY&-Cn9^b%6k z0N#tf-HRG^bm|6S|ExzC{M2G{8MFok--A-nLz=FE>YL=m6pby=>1JT*NF^BZ29zt2 zgs-qyn|-yooe8*_=pQwm(s=HLwR&TFno?nQeDY(VK&<$2?P6lx{bSFoJH(%etgEVF zNB~71@m1iou4HrIzH-ylRv;cJ%XxvTC^6;3>Lji{$(t6woQtd8n93!5>vqH1#;$i| zbB_;$7`o!{w3URsmK@(BsO@d1ZEtmV@fx0%cQlFmh_y_f=)=KD%pPd@Dh63`LD3Gc z;hX|C21iRzV#)dF!DO-SH1fW}HzYHrXldt5zx{pEwU@RxZZ5Mm+Abfn_UK3u4zIY5 z)&oJ=Lt{OW9gcN5KWV$NhTGNj$(`kIl#fY)?5NbpYlNZ8a4VHx9*PLhx zsyQ^XRjQ9bfU)|Ba z;6%GpE_co~miQEL=f0nIwjg)lA>~}BT3AcOoQl=mn}$g}VhCSdJN-Nj^@gJG%Jx;x;;a9deOFa!fmkRzSW~DkCNA?!!;f?Obfm9iNVjD8hnI&}uOezSXSCh(4hRm{ z-}~_HX>Ex1?ZeIktA+|Ow+&aIHq{l|QPu0AsK^ehMTj1#o@lJvrxq5D(NCUFphoMY zwV~-YG?pTZp6AFDlywUYR?kr>Kj@G7o)$Se&KbU~8Z^hrFy&@pxCW`1wNkm|I`X*l zJE2rRsg)!80qCe-(>A@(KXZkK7u*YEQexih``hXFaM?;*IZ!HY=6f>4$%ol+Fq+E?BGK1n!&5>vh}( zz2}y3;7n~XXKb_!AD0O<3E!pZ_VXd1oj41QM`c>AQ*mBRt_zN{OB5*1mWlkS*8>oj}xx53iB zL*DCm^o3q5cZ1)>x9`J;?UUX<#oWGI>3hh>x3L~F)y`Jn()gWvYImkWzeLBUhwp%& z?<1$KQ@h?sM7&O;%P}(fze3eyz%1i{gLj|Nrx~N{jB-ukuU4`Sowx z_59ah@wuVq=fBf4|78|jVI)$M_pAH$mtRJr3@qnn`DFohfW>T(%A@^d{qD^7XKMYM zdLp#?W8c1heEvF+IY}%N z=#dAQKmYX4cunY4Tb5l@HaX|fFzc?RzZwr0m=F_oDDF`qZ*5VQZOpOvRUO3A<)5Dd z_h``fw(Xj_zUOer{0&hValhXOp6@cAU_pM;pPUcz5a~~TOj6+x*4pcQ$AjkFY}&hQ zk=z<*22aA4ABaqyQThCXP+klJDUv|NZR={Rk4HiZ(1uSlWTa$Hm(LOTBrVe{g=c19C25eo$`@h|zM-poogc=|XyYy`P$0Fy1vhJmf_#N`aVK5j z3;NRJ-&46Y$ZGEenm1a7ov??{x{K68K;|siv{+3gA zW^NO5%{6)@hcm9EF3Yw{zFeXi5%sjWv_L~R8QP3`o<{byCv{<*lZ3p<9TwC=E-Rdf zcBt$8eQKOJ_j}ywA+-Ucg-y#7Y>H*Et_UjIja1+zNy2K#Z#y&T+(wHe2|1 zSgp*JQO!6JXdRI)sU4ZU=`hNTNM&b|WqEJx` zke0&j)^_yLv_+r0=SC4$9@}NyDcnb8p&v zN-_>DSzwMAy(CV1ARz1#xT2HX#wI`K80!lrkOo zWwfH0;XB0oBv2BG1F3o%Qc>NTghToa=Of+d;4)^O99i?PBNWp^^8P>&i_|{|C7GMe zPnnxYIj=@)pMgsgpAx2*?sOiPxJfQnvKH@+$l9tMvW5fC`VOnC?tl-45KP=|Sy5yQ z;+v2B(QNCI&(h904OvMaH9TN-%Q=rbzPeRP#fChNBQ7Kivqgz&IA*;)-s^78rD|SN z+szd)X6>z(2V3M`EmGh(*EfHxi}sz&exJ`uJ>RNT`)b=ku=UW@`+2@* z!x*2ZRX5Gp=|g_^N)WA_G|(KgOB6OsXdZjjF7)ifcF31eJsLf^mmMAA$^0U=O0j+R z-Bwj=rCIlSre)OCD?TkvTlt39AZB>p%xbDfvn!|H&treu=iVOUdwr>T;aeIs>x9y6<6Ke)q*WIxm$5U40^3d$fx-D^+2D?qS+pV6P+bZnS z$kp%1R)Lz{z(;9rZ*N{VON?wyI}G4<1Btsd;VK&USlDA_@>M-+Hk0-zGs$X@NBwwi zEpHC3*IhMLg)fgCChHO#GEnOTDXbgAkpA{{T$PIcUiW8o%(jngpe8*IqE3)bWeWH# zz+JB{cT>bN9#bx0lVT%zNYQsI#faJc5bI-cwA5D69A?bzrXv#Bn8j_`mIZ|{GHcqh zNh08mZ%+6#Y9*C9^WI5o=8|vmK(FLX-6e}SF9KbkF3M#7F-$33eYQCl!WQ=(@J*=J zAow{~l1J3E$FMyX@-L%K>nnGIa4ae)=|PIMM^fE$%rrEwi|SUCfFFyLsue?ukc2}><~yJB(?nz)DzsLzpYl|qH_ zA^Q}BvP;=#t2M7PFKhCLI+~e#l5!Crh(ggf&Am>AFAoDUs`w7Xsy=~9ZC7OHGpHUZ#M1~eQCF?gNzmv6=``xigxPnPU1|5eyBE3JnD=BRM~(buy7VupuIPB3Rf_Yppk*i6#PCs z9)_2~@)|8R^0b&#G9My_KipW0#;rDNY&AL4`0_crc=#4I2-MpZTUAxtCt;60S5MlL zIP|-aMV;%7xTL*0+p4=I5vCsmZbedf@cv%hQ;-lj4ARc;w!2qN5{(jSL-4j3c873G zM8c0I@}3i6c=mChNZa)#xl;L{5GhQaaVSI?E8o`wxHhg+%#vWa5xFhU3w+8M z5gDWgniFOXO-WqtZ9wf?F(ojaW~iCg6!a5kHQ1$ShmY9JphA~g?Zl9nsS7L}MX z3x!uTMLj8E#{sP#O_3GsoOo zI2t8TTO%@S4$zs~*m4~oOQ3Q_@^_Hj!{C*N{6h+ES+lKWneDq=$^G=%D6MiKX~<+a zqN!*^krno6w{^vVoH+?`!=nkbbc3{U!=niWoZy4*Bo8tF{y0xCuV%AJ^mI7JZL&)d zWs9*ooQDbY=P>=r32wCHvnxHG4Nc4PWg!0yZP8S1D&i{#hf-K_L@3M}h|>)C%(koO zo{O@1c3bC$v8@NlVOhi37gDBir3cjptAg0lLyo9|txRCDCVWpMf*UQPwylbyZ|{AY z85+5m*h>#7GKkZ|P9o~=m}xG;uT$)+n&#zc;&zsld)VJ!m&uM@eUqrFA~lIy)g~pO z48<%r-#Ibxai3TcdGs)-)4y{D>`Z_fcH~8b^|0nD^GNZdjeN5Cy09dqN1WOG^f`x8 zb&3^I_xjcnmpiIeAqPkyo=$r=!PA)B@e~-r(GKm0OG#j7U-C zFNRu95!IG_!eDunDp+`XvMYzJC@rZBP6=_}Saq`I(7pp*{=^M(n5-NHYiuO*Ed_E9@7I ziyYj)X%#kk^{YuP07tI;N(=@Qb_1V&7GNa%;LlhUJ@r1NSo+n@IR*z zkuS4QOI+hPqke~z;Au)sGy2U!Rg^^nA(?UG)<~tcmt>?{vg%eQ*`PIVq{ptHE!$+e zbg}|Z7T9RHng>BA7>I&1X#R|8ztIcX;6-LaL%v$JRrzw}GM<~RP>g7=otvMV1qNxC za8D!+iGFf2_`7uE(#Y?vI5r~bo!Dkp3)^$UEo-_yiC`!^jeHroEEGv@S=*KOBxIzX znVE6jrM+SkQxx}**Ip?OH)BLPJCf=WT)}%m>vV$DlQLb#;W~ZsphsOsk$7|KnxtzPX?)KV4@$WFG{TvCDZ#qI~eY2IJ;X?)FJYNYDeyheQ!d zoeB=V0$=weHJU{#(9`F7y@CG89pYYnvPf%~^ltPi^poN1y+|Rk#(5ZkTr`}7?3=z% zQzBc)B@6d>ld7V{okT%xY?k@7<||r|e2ROJYdN#<^pYy!_`j#RAouImb0{ zM5jlGK5h}qa4t0jyO{GKUa)B>m~@;c$)uTZ@i-{6SuYn%Mj>2nUc|jY#!QYIJH8=- ztuynIzqP-P6B`TRE`XSKdz!0~a%-y;UH=?tx=xiYVFi^%T($C*3SV-~KXx(D;VNp<`VY`98T1Ir zpdZg<(CSDAZEQN|Ga2-APX@hXI%uB^`q+{|zgTQ&hxXcd;$LyU#_4lSMp^WkA2U9@ z-`$b@G3>2~4DKItS0fyLWRS?MVSE~Qb_0Lq%of)>^P1xa{6<%+q4bCRfu!$s*v?%ilBAf zSXMNB-3`cCIq;?%I5g1ns%mk#i3;jIw^dx;5zVqLS}%H6b;s_&>w8f^5}JLu z0sk&4hHb+J(cg-)tgEi-kY@Q-r=VFE_pT^fWC++)b=g;(i~inq;fv%%pJbd(2kp>z zb<-0~;K*pur6{YesEY61pN*f{G$k0b1(Q?_hPWnSHVE zV1Hw~R@X&!qCgTtl0R*MGRkq~=J?u8H#Ceiyro?gWj>p(1Xj_eW<4QQi$YTLEvW%` zHPpyD2G6!E+cKxTX^WZ^eF;U8m$V$lysKH2H&J-9ylyCpVuLEMtG&3^b=8#l$eVJA zqZ7J%=wKlDf;A@vYiT|LD^V4-08KwedC#t`#-V|VGuo2^KNam*=Y3Hyv@vxNMc+bK zph2N@?5d75w1ciMdz{LeQdIa&6rBJ-3FT#96)h!vDEp=^TBz%mQB+1{8G|Q<8gkMM zO^+f{BIBH(MMcw10Y!)8ad}m9O`};3GeHi7NqP+ z&&IB63f|V4SWXEVFNU_O?@?HDQlrxE`fj9A=9AZ5UE>roT&%bO!o{0+ zV_gCY4B#p*V(=Wtylipb(^e%RC4nCJ&{e1sct;4-5%ev3q+q$k?-?jKJ3? z;Ox5JK8Q*yU^6$|qqjxyU<^M5|4?mX^jb9IbWTA}PmBP#z{Asool^~LgI7w00&_9$ zBkMn%!2|L@>a*68NzFZYOpK%%qxXAekXPvn8x{BFlV_qFvm3jdci0>m$>A!1%fbCb?J$3ZQR6 zf`NGh)^;%}m8@^Ks~9&g&C=02kFyoJt*Z6$Fa@B2(kS@@$lwCwW|8jU3ft@eXoC_k z+m-kNv{b9)i_96)Dp@uj6CDoP{OP9=c4#=H4KMjPpLgh@X3Gad)zd2;^;sY1@rT{; z-?YSFZxbEvZv$nK?pd{Gs1EB z(*{v{*zL9`qAZvhK2K*)60PU%4~r`AyT~k>ye6?(pz|7&g}v0^^DVxD;1fo6^#j4} z_i7K`Xqdx$FS71exd98oh22NtXp;1GR@!4 z#J}ySBgy*z;u3x(i|u@3e&ZW9jHCB8|=1B52w z<}|REgqu55J2LD(!;TZ)ac0umbnWq~6K`OYHbUrecS+pRtmqB!jODB5QZEPzTlYS3bHIPUGzPMEhIMTuRF7#@xXm& z1e^WK;dO=|3nYs!*#qlhBR%@f<(7zp^PtC8Ncnkq-*rTi)K1A98oV7@pqhlI7irta z+I#%Xh2&NBf8bK}I9#Zi(KQKL?(sK^rjOUU)p6^JU$cu#mEhJSk79=1lt_(|5f;kO zt!_>6Kf8v7cXfK@gG$8~l%f)e&xMN-Epz%~_=klJ6}Xp243|8xA~3skKYiqGt{Asr z5B1%C2v|awFu7x)Z*d*zw3~o>_cP2cbsw>5DtJf`!5B1m&SIbs?9%yTCtri3C8!ui ze}B!~hc~A#USJJ*JR#IcC~cksMgh|LZXA7NrjjL6ib<=8d~j;Qs@UDW>=!j-TJLpV zUqLv{AtWa; zoT9@VP6ZwAPm$I|LF&4X;v|0ntQFSzB+;M~`QvUe0h96>Lqi1W-`o!tVfT*TOyvH0 z8@lCdvMXUf@QSfud}6MXli5O3{SB#CdDY!fLJ*%dJ#VBLIA`di*=emR(l2e=l7QFYM;&H*O zwbvf+e>MY;Ve7A5O^)+8we2@d6j#co-OMLQnX(giL1*+92EZjNY%fq3Sdma}sZdU) z=XHl;bINp}R8cyl>Kf85+zPtymk#TkFmNz=)TrOHpsebfVkD&GZ`S3M@Mq%$bG3wO!0Gr0u2j56`wj7C{$oaATn!f>54tOJ zi>6%pZ158^7j9D)RV}T%O;uY{>-jEgqhz@r(yDi$4nJG^91v$4XZlGf3DH^O-}aV< zQv-^9Q*biUe3sW`Vvz2OoRnP*$^+Y2Pl~<*8iTy5F44Z47^Dxwi&rQ?vS0T+dv%|t z50&3PatdnoEk-@*B5&)W&xSrHU6&Ck#+>jbDe9t4NQr(oPzK4E1LxhybD*J~W8h#m zpTw%JO-c7_FtdRhmr1?aY!fCnuYKT|5iWZP8JX2vD73JdGy5v_EAxeVkvTd8AIdYe zD|h(;jm_`eWhVKFucr23`Lw&k+i!b*xmcZ{fHl& $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1nvest.bigbantbaz.top"; classtype:attempted-recon; sid:200000001; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"25116414.cc"; classtype:attempted-recon; sid:200000002; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"365365news.com"; classtype:attempted-recon; sid:200000003; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"365f09.com"; classtype:attempted-recon; sid:200000004; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"750115.cc"; classtype:attempted-recon; sid:200000005; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"823pages.pages.dev"; classtype:attempted-recon; sid:200000006; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"95564339.awi.za.com"; classtype:attempted-recon; sid:200000007; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"999fc.vip"; classtype:attempted-recon; sid:200000008; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a.yyyy.cf"; classtype:attempted-recon; sid:200000009; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaaa.whilefish.xyz"; classtype:attempted-recon; sid:200000010; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accounts-microsoft365.weebly.com"; classtype:attempted-recon; sid:200000011; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accounts.0ffice365.support"; classtype:attempted-recon; sid:200000012; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aidanochka-tabys.kz"; classtype:attempted-recon; sid:200000013; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"airbnb-clone-sahinur.vercel.app"; classtype:attempted-recon; sid:200000014; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akbarinewv2.morteza638n.workers.dev"; classtype:attempted-recon; sid:200000015; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alaindemeuron.wixsite.com"; classtype:attempted-recon; sid:200000016; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alexa81o.github.io"; classtype:attempted-recon; sid:200000017; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alienv2ray.pages.dev"; classtype:attempted-recon; sid:200000018; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allegr0llokalne753724pl.art"; classtype:attempted-recon; sid:200000019; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allhrteam.com"; classtype:attempted-recon; sid:200000020; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon-clone-by-sudip.netlify.app"; classtype:attempted-recon; sid:200000021; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ammuvicm.work"; classtype:attempted-recon; sid:200000022; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amyr.iran-cyber-net.workers.dev"; classtype:attempted-recon; sid:200000023; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"antaidossiersuivamendimpayeerf33.zynekcctv.com"; classtype:attempted-recon; sid:200000024; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anuragrauniyar.github.io"; classtype:attempted-recon; sid:200000025; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appeal-voilation-policy-issues.github.io"; classtype:attempted-recon; sid:200000026; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apple-id.cc"; classtype:attempted-recon; sid:200000027; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apri.154-203-197-141.cprapid.com"; classtype:attempted-recon; sid:200000028; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arvestcreditcard.embarkdigitalonboarding.com"; classtype:attempted-recon; sid:200000029; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asdfjeiod.com"; classtype:attempted-recon; sid:200000030; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashleyproberts.wixsite.com"; classtype:attempted-recon; sid:200000031; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"astounding-trifle-b88a2b.netlify.app"; classtype:attempted-recon; sid:200000032; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-101397.weeblysite.com"; classtype:attempted-recon; sid:200000033; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-102641.weeblysite.com"; classtype:attempted-recon; sid:200000034; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-107756-104508.square.site"; classtype:attempted-recon; sid:200000035; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-108102.weeblysite.com"; classtype:attempted-recon; sid:200000036; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-108651.square.site"; classtype:attempted-recon; sid:200000037; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-mail-101246.weeblysite.com"; classtype:attempted-recon; sid:200000038; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-mail-105533.weeblysite.com"; classtype:attempted-recon; sid:200000039; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-mail-109459.weeblysite.com"; classtype:attempted-recon; sid:200000040; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-servicce-mail.weebly.com"; classtype:attempted-recon; sid:200000041; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-sign-in-107078.weeblysite.com"; classtype:attempted-recon; sid:200000042; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-yahoo-mail-105061.weeblysite.com"; classtype:attempted-recon; sid:200000043; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-101415.weeblysite.com"; classtype:attempted-recon; sid:200000044; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attinc-101356.weeblysite.com"; classtype:attempted-recon; sid:200000045; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailonlineaccountupdate.weebly.com"; classtype:attempted-recon; sid:200000046; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attnet-100294.weeblysite.com"; classtype:attempted-recon; sid:200000047; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attonlineservicesa.wixstudio.com"; classtype:attempted-recon; sid:200000048; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attonlineservicesa.wixstudio.io"; classtype:attempted-recon; sid:200000049; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attweadminservices.weebly.com"; classtype:attempted-recon; sid:200000050; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-sharepoint-asr.vercel.app"; classtype:attempted-recon; sid:200000051; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avertisystems.com"; classtype:attempted-recon; sid:200000052; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev"; classtype:attempted-recon; sid:200000053; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b35ccc.com"; classtype:attempted-recon; sid:200000054; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b35lll.com"; classtype:attempted-recon; sid:200000055; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b35www.com"; classtype:attempted-recon; sid:200000056; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz"; classtype:attempted-recon; sid:200000057; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz"; classtype:attempted-recon; sid:200000058; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link"; classtype:attempted-recon; sid:200000059; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz"; classtype:attempted-recon; sid:200000060; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link"; classtype:attempted-recon; sid:200000061; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link"; classtype:attempted-recon; sid:200000062; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link"; classtype:attempted-recon; sid:200000063; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link"; classtype:attempted-recon; sid:200000064; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbf-alpha.vercel.app"; classtype:attempted-recon; sid:200000065; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet365t3.com"; classtype:attempted-recon; sid:200000066; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet938y.com"; classtype:attempted-recon; sid:200000067; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet958c.com"; classtype:attempted-recon; sid:200000068; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhngfd3.pages.dev"; classtype:attempted-recon; sid:200000069; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blackdasblacks.shop"; classtype:attempted-recon; sid:200000070; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blsckdagsever.pages.dev"; classtype:attempted-recon; sid:200000071; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bridge-9wdpjmsoa.pancake.run"; classtype:attempted-recon; sid:200000072; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brubreumummeddoi-4514.vercel.app"; classtype:attempted-recon; sid:200000073; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bscusdty.top"; classtype:attempted-recon; sid:200000074; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsozvycr.icu"; classtype:attempted-recon; sid:200000075; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-102368.weeblysite.com"; classtype:attempted-recon; sid:200000076; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-106861.weeblysite.com"; classtype:attempted-recon; sid:200000077; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btjfh.weebly.com"; classtype:attempted-recon; sid:200000078; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bussinessaccounthelppage.click"; classtype:attempted-recon; sid:200000079; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bwfujmww.icu"; classtype:attempted-recon; sid:200000080; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bx.sfdsb.icu"; classtype:attempted-recon; sid:200000081; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c.cting365k.cc"; classtype:attempted-recon; sid:200000082; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev"; classtype:attempted-recon; sid:200000083; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"can-post.cyou"; classtype:attempted-recon; sid:200000084; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"celery.sa.com"; classtype:attempted-recon; sid:200000085; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cen4-six.vercel.app"; classtype:attempted-recon; sid:200000086; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cf-worker-pages-proxy.1352562939.workers.dev"; classtype:attempted-recon; sid:200000087; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cf.13084493.workers.dev"; classtype:attempted-recon; sid:200000088; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cf.iwoai.cc"; classtype:attempted-recon; sid:200000089; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfcf-8.pages.dev"; classtype:attempted-recon; sid:200000090; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfr-reed-taxi-wayne.trycloudflare.com"; classtype:attempted-recon; sid:200000091; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chain-trt.online"; classtype:attempted-recon; sid:200000092; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chainsolapprove.pages.dev"; classtype:attempted-recon; sid:200000093; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chat-wa.xyz"; classtype:attempted-recon; sid:200000094; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"check282.tempisite.com"; classtype:attempted-recon; sid:200000095; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chore.pink"; classtype:attempted-recon; sid:200000096; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciftcininbankasiziraatbankasi.com"; classtype:attempted-recon; sid:200000097; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claudiorojas.cl"; classtype:attempted-recon; sid:200000098; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clivenicoll44.wixsite.com"; classtype:attempted-recon; sid:200000099; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloudflare-workers-pages-vless-a2j.pages.dev"; classtype:attempted-recon; sid:200000100; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"codt.digitasianetwork.workers.dev"; classtype:attempted-recon; sid:200000101; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinbase-com-18690.subttrepimop1005.workers.dev"; classtype:attempted-recon; sid:200000102; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinbasewallet-verification.198-46-89-184.cprapid.com"; classtype:attempted-recon; sid:200000103; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"company0rder943.weebly.com"; classtype:attempted-recon; sid:200000104; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"completar-la-verificacion.vercel.app"; classtype:attempted-recon; sid:200000105; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"conductibili.fun"; classtype:attempted-recon; sid:200000106; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correosprepago.bnext.es"; classtype:attempted-recon; sid:200000107; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crenadenuddoi-2258.vercel.app"; classtype:attempted-recon; sid:200000108; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptorectification.com"; classtype:attempted-recon; sid:200000109; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently5267.weebly.com"; classtype:attempted-recon; sid:200000110; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently70.weebly.com"; classtype:attempted-recon; sid:200000111; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt909.weebly.com"; classtype:attempted-recon; sid:200000112; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d.afirkz56924.workers.dev"; classtype:attempted-recon; sid:200000113; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dio.azrealonce.workers.dev"; classtype:attempted-recon; sid:200000114; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ditgong.com"; classtype:attempted-recon; sid:200000115; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doc-online-1881.on.fleek.co"; classtype:attempted-recon; sid:200000116; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docsignauthorizationrequest.vercel.app"; classtype:attempted-recon; sid:200000117; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docusign.com.bestfinancebroker.com"; classtype:attempted-recon; sid:200000118; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duang-5dh.pages.dev"; classtype:attempted-recon; sid:200000119; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duvhkeq.pages.dev"; classtype:attempted-recon; sid:200000120; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"easyaccesscommagebn.com"; classtype:attempted-recon; sid:200000121; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebay8787.shop"; classtype:attempted-recon; sid:200000122; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ee-account-home.web.app"; classtype:attempted-recon; sid:200000123; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ee-service-help.web.app"; classtype:attempted-recon; sid:200000124; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ee-service-portal.web.app"; classtype:attempted-recon; sid:200000125; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eln3.vercel.app"; classtype:attempted-recon; sid:200000126; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enormous-orchid-howler.glitch.me"; classtype:attempted-recon; sid:200000127; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espaceparticulier.life"; classtype:attempted-recon; sid:200000128; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ets3qe9ooms8t6i8.pages.dev"; classtype:attempted-recon; sid:200000129; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"excelorgo.com"; classtype:attempted-recon; sid:200000130; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falabellacom.dominiquepg.com"; classtype:attempted-recon; sid:200000131; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdesq4.pages.dev"; classtype:attempted-recon; sid:200000132; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdsfjiwe.com"; classtype:attempted-recon; sid:200000133; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdsjfkweow.com"; classtype:attempted-recon; sid:200000134; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fekoulamevebouna.freewebhostmost.com"; classtype:attempted-recon; sid:200000135; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"felomane390.wixsite.com"; classtype:attempted-recon; sid:200000136; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ferngos.de"; classtype:attempted-recon; sid:200000137; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fieg.84yr483rhfwieujro348ur84.workers.dev"; classtype:attempted-recon; sid:200000138; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"figinstenatecom.pages.dev"; classtype:attempted-recon; sid:200000139; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finansfaizsizbasvurum.online"; classtype:attempted-recon; sid:200000140; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forested-mirage-samba.glitch.me"; classtype:attempted-recon; sid:200000141; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formtools.com"; classtype:attempted-recon; sid:200000142; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fortradesetup.hamidamnaie.workers.dev"; classtype:attempted-recon; sid:200000143; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-5436781.webadorsite.com"; classtype:attempted-recon; sid:200000144; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frogsrus.wixsite.com"; classtype:attempted-recon; sid:200000145; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fshraha.pages.dev"; classtype:attempted-recon; sid:200000146; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fukshumx.world"; classtype:attempted-recon; sid:200000147; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gazruinv.web.app"; classtype:attempted-recon; sid:200000148; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geaoolsv.pink"; classtype:attempted-recon; sid:200000149; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geminiwallete.godaddysites.com"; classtype:attempted-recon; sid:200000150; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghjhyu.wixsite.com"; classtype:attempted-recon; sid:200000151; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gimennlouin.gitbook.io"; classtype:attempted-recon; sid:200000152; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goldenrod-rowan-submarine.glitch.me"; classtype:attempted-recon; sid:200000153; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gorgeoushome67.wixsite.com"; classtype:attempted-recon; sid:200000154; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"group11-vvip-hot-girls-combi.viplch.online"; classtype:attempted-recon; sid:200000155; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruppeflorian.com"; classtype:attempted-recon; sid:200000156; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hanisfir.shop"; classtype:attempted-recon; sid:200000157; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hedayatfreedom.hedayatkhakpour.workers.dev"; classtype:attempted-recon; sid:200000158; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hello-world-morning.freekite.workers.dev"; classtype:attempted-recon; sid:200000159; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hello-world-muddy-cloud-f45b.mfoster0425.workers.dev"; classtype:attempted-recon; sid:200000160; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com"; classtype:attempted-recon; sid:200000161; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heluapla.shop"; classtype:attempted-recon; sid:200000162; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hemanlau1.pages.dev"; classtype:attempted-recon; sid:200000163; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hezhouruan.552008598.workers.dev"; classtype:attempted-recon; sid:200000164; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgcdhbxnf.weebly.com"; classtype:attempted-recon; sid:200000165; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjrhd.top"; classtype:attempted-recon; sid:200000166; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hk04-123.pages.dev"; classtype:attempted-recon; sid:200000167; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkmqo.top"; classtype:attempted-recon; sid:200000168; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-100317.weeblysite.com"; classtype:attempted-recon; sid:200000169; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-102207.weeblysite.com"; classtype:attempted-recon; sid:200000170; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-107257.weeblysite.com"; classtype:attempted-recon; sid:200000171; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homelogin7t6sdfcgvhb.weebly.com"; classtype:attempted-recon; sid:200000172; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htaflytz.baby"; classtype:attempted-recon; sid:200000173; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htaflytz.black"; classtype:attempted-recon; sid:200000174; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"httap.l-teiegram.com"; classtype:attempted-recon; sid:200000175; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"httpsbellsouthnet-102649sitecom.weeblysite.com"; classtype:attempted-recon; sid:200000176; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hup6r.com"; classtype:attempted-recon; sid:200000177; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hy.fuckgwf.eu.org"; classtype:attempted-recon; sid:200000178; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hypophysecto.fun"; classtype:attempted-recon; sid:200000179; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzuayvvl.red"; classtype:attempted-recon; sid:200000180; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id2.xbenihime.us.kg"; classtype:attempted-recon; sid:200000181; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikergalindez.github.io"; classtype:attempted-recon; sid:200000182; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-delivery-bg.com"; classtype:attempted-recon; sid:200000183; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-trackingcs.cc"; classtype:attempted-recon; sid:200000184; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-trackingiax.cc"; classtype:attempted-recon; sid:200000185; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliveryhbo.top"; classtype:attempted-recon; sid:200000186; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliverytcw.top"; classtype:attempted-recon; sid:200000187; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliveryxs.top"; classtype:attempted-recon; sid:200000188; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infringement-service.com"; classtype:attempted-recon; sid:200000189; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instagram-clone-in.vercel.app"; classtype:attempted-recon; sid:200000190; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbenefitprestaciones.referidosweb.click"; classtype:attempted-recon; sid:200000191; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iouwerty.weebly.com"; classtype:attempted-recon; sid:200000192; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isnworldwide88.com"; classtype:attempted-recon; sid:200000193; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jaydeep8806.github.io"; classtype:attempted-recon; sid:200000194; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jeanandpeterwilkin.wixsite.com"; classtype:attempted-recon; sid:200000195; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jetconstructionsgroup.com.au"; classtype:attempted-recon; sid:200000196; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"joeandvelma.wixsite.com"; classtype:attempted-recon; sid:200000197; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"journey-x-pro.com"; classtype:attempted-recon; sid:200000198; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsdfchkdsds.weebly.com"; classtype:attempted-recon; sid:200000199; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jshattkee.weebly.com"; classtype:attempted-recon; sid:200000200; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juliusmasih27.github.io"; classtype:attempted-recon; sid:200000201; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jung-sohn.de"; classtype:attempted-recon; sid:200000202; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"katiebllair.wixstudio.com"; classtype:attempted-recon; sid:200000203; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"katiebllair.wixstudio.io"; classtype:attempted-recon; sid:200000204; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdlmo.top"; classtype:attempted-recon; sid:200000205; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kenzmail0.wixsite.com"; classtype:attempted-recon; sid:200000206; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ketura2010.github.io"; classtype:attempted-recon; sid:200000207; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keucroilluxibrou-2718.vercel.app"; classtype:attempted-recon; sid:200000208; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kuconlogin-ui.godaddysites.com"; classtype:attempted-recon; sid:200000209; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"latam-onipojes.vercel.app"; classtype:attempted-recon; sid:200000210; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"layanan-bntuan-resmi-dna.prbu2.my.id"; classtype:attempted-recon; sid:200000211; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledger-com-updatefirmware.aparecidovisentin.com.br"; classtype:attempted-recon; sid:200000212; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"levappoprauqueu-4688.vercel.app"; classtype:attempted-recon; sid:200000213; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leyoixoimmecou-5619.vercel.app"; classtype:attempted-recon; sid:200000214; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"linkbokepviralindo009.vipp.blog"; classtype:attempted-recon; sid:200000215; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liveairdclazmersn.pages.dev"; classtype:attempted-recon; sid:200000216; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lo6-cas-projects-64947843.vercel.app"; classtype:attempted-recon; sid:200000217; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maatamicklogginns.gitbook.io"; classtype:attempted-recon; sid:200000218; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madebybmr.in"; classtype:attempted-recon; sid:200000219; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madhu821.github.io"; classtype:attempted-recon; sid:200000220; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailupdate87.weebly.com"; classtype:attempted-recon; sid:200000221; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maine619.github.io"; classtype:attempted-recon; sid:200000222; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mainnetverify.pages.dev"; classtype:attempted-recon; sid:200000223; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mazulyta.pages.dev"; classtype:attempted-recon; sid:200000224; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"megrebeikenneu-2106.vercel.app"; classtype:attempted-recon; sid:200000225; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mendhfjpl.weebly.com"; classtype:attempted-recon; sid:200000226; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metacareer.com-case37169314276.com"; classtype:attempted-recon; sid:200000227; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metagalaxy.pages.dev"; classtype:attempted-recon; sid:200000228; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamacksiologus.godaddysites.com"; classtype:attempted-recon; sid:200000229; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metemrsblogin.gitbook.io"; classtype:attempted-recon; sid:200000230; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meyetamaskiwalt.gitbook.io"; classtype:attempted-recon; sid:200000231; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mianfeijiedian.lawcpacpv.workers.dev"; classtype:attempted-recon; sid:200000232; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"milanharvestfestival.com"; classtype:attempted-recon; sid:200000233; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mirobitsgt.github.io"; classtype:attempted-recon; sid:200000234; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mocp90.pages.dev"; classtype:attempted-recon; sid:200000235; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mostafa2.mehdi84888.workers.dev"; classtype:attempted-recon; sid:200000236; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"movie-firebase.vercel.app"; classtype:attempted-recon; sid:200000237; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mubki.hp.peraichi.com"; classtype:attempted-recon; sid:200000238; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-site-104564-105934.weeblysite.com"; classtype:attempted-recon; sid:200000239; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myaccountsignup.net"; classtype:attempted-recon; sid:200000240; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navy-nose-4544.typedream.app"; classtype:attempted-recon; sid:200000241; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"net-flix-front-end.netlify.app"; classtype:attempted-recon; sid:200000242; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netzero-webmail-105996.weeblysite.com"; classtype:attempted-recon; sid:200000243; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"new-currently-1-23-24.weeblysite.com"; classtype:attempted-recon; sid:200000244; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newattupdatemailboxkidlyverifynow.weebly.com"; classtype:attempted-recon; sid:200000245; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfty-proj5.vercel.app"; classtype:attempted-recon; sid:200000246; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnbsscnaceesngsetr.com"; classtype:attempted-recon; sid:200000247; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"occinamete.cfd"; classtype:attempted-recon; sid:200000248; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odovsccs.weebly.com"; classtype:attempted-recon; sid:200000249; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officalourtime.weebly.com"; classtype:attempted-recon; sid:200000250; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office36503.com"; classtype:attempted-recon; sid:200000251; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ohscorgza.github.io"; classtype:attempted-recon; sid:200000252; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okm.znt.temporary.site"; classtype:attempted-recon; sid:200000253; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oliver752.github.io"; classtype:attempted-recon; sid:200000254; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-e-commerce10.com"; classtype:attempted-recon; sid:200000255; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-e-commerce11.com"; classtype:attempted-recon; sid:200000256; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-e-commerce12.com"; classtype:attempted-recon; sid:200000257; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-e-commerce5.com"; classtype:attempted-recon; sid:200000258; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-e-commerce7.com"; classtype:attempted-recon; sid:200000259; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-e-commerce9.com"; classtype:attempted-recon; sid:200000260; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orange234.wixsite.com"; classtype:attempted-recon; sid:200000261; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orgmail.weebly.com"; classtype:attempted-recon; sid:200000262; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ourtime.datings-information.workers.dev"; classtype:attempted-recon; sid:200000263; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfocl.top"; classtype:attempted-recon; sid:200000264; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfocs.top"; classtype:attempted-recon; sid:200000265; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfoga.top"; classtype:attempted-recon; sid:200000266; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfojq.top"; classtype:attempted-recon; sid:200000267; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfolw.top"; classtype:attempted-recon; sid:200000268; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfoor.top"; classtype:attempted-recon; sid:200000269; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfooy.top"; classtype:attempted-recon; sid:200000270; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfoqv.top"; classtype:attempted-recon; sid:200000271; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfove.top"; classtype:attempted-recon; sid:200000272; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfovt.top"; classtype:attempted-recon; sid:200000273; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfowu.top"; classtype:attempted-recon; sid:200000274; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.updateinfoxb.top"; classtype:attempted-recon; sid:200000275; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.usertracktxz.top"; classtype:attempted-recon; sid:200000276; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages-108-tg-cfzz-ip.pages.dev"; classtype:attempted-recon; sid:200000277; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages.tempisite.com"; classtype:attempted-recon; sid:200000278; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageverifycenter.com"; classtype:attempted-recon; sid:200000279; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"patjimmy323.wixsite.com"; classtype:attempted-recon; sid:200000280; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paypalloginin-usa.blogspot.com"; classtype:attempted-recon; sid:200000281; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paypalloginin-usa.blogspot.hr"; classtype:attempted-recon; sid:200000282; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcmag.anycubic.vip"; classtype:attempted-recon; sid:200000283; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"port01-acf.pages.dev"; classtype:attempted-recon; sid:200000284; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal.chiaveggies.com"; classtype:attempted-recon; sid:200000285; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pruhuffopraussou-5681.vercel.app"; classtype:attempted-recon; sid:200000286; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev"; classtype:attempted-recon; sid:200000287; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev"; classtype:attempted-recon; sid:200000288; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev"; classtype:attempted-recon; sid:200000289; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev"; classtype:attempted-recon; sid:200000290; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-2801359d2be54bfd8701132626efeb73.r2.dev"; classtype:attempted-recon; sid:200000291; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-3096005ebeae423182ccd89665564d8a.r2.dev"; classtype:attempted-recon; sid:200000292; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-46a5f86348ae4aceb3591d126020999f.r2.dev"; classtype:attempted-recon; sid:200000293; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev"; classtype:attempted-recon; sid:200000294; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-51f896deb233450089fc1a520e6ed957.r2.dev"; classtype:attempted-recon; sid:200000295; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev"; classtype:attempted-recon; sid:200000296; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev"; classtype:attempted-recon; sid:200000297; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-722720be67154192a1102b2cf085d306.r2.dev"; classtype:attempted-recon; sid:200000298; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7d056bfeb6b04852801553620fe62c0a.r2.dev"; classtype:attempted-recon; sid:200000299; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev"; classtype:attempted-recon; sid:200000300; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-873fc6a3edb941c6a17f50911dfca518.r2.dev"; classtype:attempted-recon; sid:200000301; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev"; classtype:attempted-recon; sid:200000302; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-aab4be29317b4ec296517a557db12622.r2.dev"; classtype:attempted-recon; sid:200000303; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-ba5a046c69974217b0431bca4ba43740.r2.dev"; classtype:attempted-recon; sid:200000304; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev"; classtype:attempted-recon; sid:200000305; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c59cf4e950b142949df8861e60b3689d.r2.dev"; classtype:attempted-recon; sid:200000306; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev"; classtype:attempted-recon; sid:200000307; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e5855431d98545b38408f52af50ab8a1.r2.dev"; classtype:attempted-recon; sid:200000308; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-ff0271d87324424a9aec83337e844a54.r2.dev"; classtype:attempted-recon; sid:200000309; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puertaselectricasprincipal.netlify.app"; classtype:attempted-recon; sid:200000310; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qaffixledger.com"; classtype:attempted-recon; sid:200000311; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbstdfda.com"; classtype:attempted-recon; sid:200000312; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpownthenewyhadvanceweb.weebly.com"; classtype:attempted-recon; sid:200000313; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raj-tiwarii.github.io"; classtype:attempted-recon; sid:200000314; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"restrict-policy-nonadherence.vercel.app"; classtype:attempted-recon; sid:200000315; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reviewboss.github.io"; classtype:attempted-recon; sid:200000316; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfgxg.top"; classtype:attempted-recon; sid:200000317; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riaayaoman.com"; classtype:attempted-recon; sid:200000318; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roadmap.binarydesignhub.com"; classtype:attempted-recon; sid:200000319; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"robinhooldloegins.gitbook.io"; classtype:attempted-recon; sid:200000320; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rouzhda03.kambizmedia.workers.dev"; classtype:attempted-recon; sid:200000321; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rsjxzl.com"; classtype:attempted-recon; sid:200000322; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtyuiuytgf.weebly.com"; classtype:attempted-recon; sid:200000323; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rubinhuud____llginnh.godaddysites.com"; classtype:attempted-recon; sid:200000324; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rudra-choudhary.github.io"; classtype:attempted-recon; sid:200000325; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.team-s22.com"; classtype:attempted-recon; sid:200000326; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sadekk.com"; classtype:attempted-recon; sid:200000327; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sajsa.icu"; classtype:attempted-recon; sid:200000328; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salarahmad786.github.io"; classtype:attempted-recon; sid:200000329; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santanderpod.fsthosting.com"; classtype:attempted-recon; sid:200000330; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"satinnaaoabbs.weebly.com"; classtype:attempted-recon; sid:200000331; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"satyarthi.uk"; classtype:attempted-recon; sid:200000332; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scarce-army-wide.on-fleek.app"; classtype:attempted-recon; sid:200000333; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdfvgbcvb668.weebly.com"; classtype:attempted-recon; sid:200000334; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sea.6e2efhxz.eu.org"; classtype:attempted-recon; sid:200000335; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secrbnsuppotyu9.weebly.com"; classtype:attempted-recon; sid:200000336; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-ledger-m-auth.webflow.io"; classtype:attempted-recon; sid:200000337; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.2rk3.com"; classtype:attempted-recon; sid:200000338; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.pxs7.com"; classtype:attempted-recon; sid:200000339; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"setshinobi.vip"; classtype:attempted-recon; sid:200000340; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sextelegramxxx.pages.dev"; classtype:attempted-recon; sid:200000341; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shareorder711.weebly.com"; classtype:attempted-recon; sid:200000342; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-101342.weeblysite.com"; classtype:attempted-recon; sid:200000343; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-103098.weeblysite.com"; classtype:attempted-recon; sid:200000344; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-106054.weeblysite.com"; classtype:attempted-recon; sid:200000345; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-106665.weeblysite.com"; classtype:attempted-recon; sid:200000346; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shawsyncmailservercommunicationworkspace.weebly.com"; classtype:attempted-recon; sid:200000347; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sherman-relate-rev-baskets.trycloudflare.com"; classtype:attempted-recon; sid:200000348; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shobhit245.github.io"; classtype:attempted-recon; sid:200000349; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopifysite.cn"; classtype:attempted-recon; sid:200000350; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shoptkoo.com"; classtype:attempted-recon; sid:200000351; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sign-in-att-108611.weebly.com"; classtype:attempted-recon; sid:200000352; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sign-in-att-108611.weeblysite.com"; classtype:attempted-recon; sid:200000353; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simxtrackredirecttszz.pages.dev"; classtype:attempted-recon; sid:200000354; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjhsjjs82.weebly.com"; classtype:attempted-recon; sid:200000355; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skill-meta.com"; classtype:attempted-recon; sid:200000356; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sky-107842.weeblysite.com"; classtype:attempted-recon; sid:200000357; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smithjamessv328.wixsite.com"; classtype:attempted-recon; sid:200000358; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"socx.ly"; classtype:attempted-recon; sid:200000359; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparq.eu"; classtype:attempted-recon; sid:200000360; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spicyhotcoolsoup.s3.us-east-005.backblazeb2.com"; classtype:attempted-recon; sid:200000361; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spotifyl.vip"; classtype:attempted-recon; sid:200000362; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssfgsfg.wixsite.com"; classtype:attempted-recon; sid:200000363; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sss.k999955.workers.dev"; classtype:attempted-recon; sid:200000364; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stonemartin1001.wixsite.com"; classtype:attempted-recon; sid:200000365; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stringroll.com"; classtype:attempted-recon; sid:200000366; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sukienffvip.doiqua-garena.io.vn"; classtype:attempted-recon; sid:200000367; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supportsecurity981.tempisite.com"; classtype:attempted-recon; sid:200000368; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talktalkserver897.weebly.com"; classtype:attempted-recon; sid:200000369; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tareq088.github.io"; classtype:attempted-recon; sid:200000370; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbsl.by-on28.my"; classtype:attempted-recon; sid:200000371; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcaconnect.ac-page.com"; classtype:attempted-recon; sid:200000372; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tejlksdoisd.com"; classtype:attempted-recon; sid:200000373; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegcm.me"; classtype:attempted-recon; sid:200000374; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegramjessica.pages.dev"; classtype:attempted-recon; sid:200000375; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrampx.com"; classtype:attempted-recon; sid:200000376; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegramsexgroups.pages.dev"; classtype:attempted-recon; sid:200000377; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telezelm-ivee.icu"; classtype:attempted-recon; sid:200000378; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telgramsignal4.sg-host.com"; classtype:attempted-recon; sid:200000379; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-102379.weeblysite.com"; classtype:attempted-recon; sid:200000380; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-104033.weeblysite.com"; classtype:attempted-recon; sid:200000381; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-104394.square.site"; classtype:attempted-recon; sid:200000382; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-106968.weeblysite.com"; classtype:attempted-recon; sid:200000383; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"test1.workersdev40050.workers.dev"; classtype:attempted-recon; sid:200000384; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tg-logrom.com"; classtype:attempted-recon; sid:200000385; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tktk.tktsk.shop"; classtype:attempted-recon; sid:200000386; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tokecn.im"; classtype:attempted-recon; sid:200000387; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tokeni-1601.vercel.app"; classtype:attempted-recon; sid:200000388; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"towrewds.com"; classtype:attempted-recon; sid:200000389; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpwalllet.com"; classtype:attempted-recon; sid:200000390; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trustwallet-zendesk.com"; classtype:attempted-recon; sid:200000391; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuviaje10.com"; classtype:attempted-recon; sid:200000392; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvjbqiyv.guru"; classtype:attempted-recon; sid:200000393; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twcht.twimobie.cc"; classtype:attempted-recon; sid:200000394; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twimobie.cc"; classtype:attempted-recon; sid:200000395; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uedy.pages.dev"; classtype:attempted-recon; sid:200000396; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ultsyncingsolana.pages.dev"; classtype:attempted-recon; sid:200000397; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upheldlog8.godaddysites.com"; classtype:attempted-recon; sid:200000398; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upholdloginorofficialsigin9.godaddysites.com"; classtype:attempted-recon; sid:200000399; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upholld-lligon.godaddysites.com"; classtype:attempted-recon; sid:200000400; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usol.shop"; classtype:attempted-recon; sid:200000401; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-cgkzkukp.vip"; classtype:attempted-recon; sid:200000402; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackaxd.top"; classtype:attempted-recon; sid:200000403; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackbrs.top"; classtype:attempted-recon; sid:200000404; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackdht.top"; classtype:attempted-recon; sid:200000405; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackgee.top"; classtype:attempted-recon; sid:200000406; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackhsk.top"; classtype:attempted-recon; sid:200000407; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackivo.top"; classtype:attempted-recon; sid:200000408; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackjjx.top"; classtype:attempted-recon; sid:200000409; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmra.top"; classtype:attempted-recon; sid:200000410; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmvz.top"; classtype:attempted-recon; sid:200000411; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackuqg.top"; classtype:attempted-recon; sid:200000412; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackvgb.top"; classtype:attempted-recon; sid:200000413; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackwbv.top"; classtype:attempted-recon; sid:200000414; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackyqb.top"; classtype:attempted-recon; sid:200000415; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsdana.com"; classtype:attempted-recon; sid:200000416; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsdant.com"; classtype:attempted-recon; sid:200000417; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsservicetrack.blogspot.co.id"; classtype:attempted-recon; sid:200000418; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzomadj.shop"; classtype:attempted-recon; sid:200000419; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vedi.154-203-197-141.cprapid.com"; classtype:attempted-recon; sid:200000420; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgmrm.top"; classtype:attempted-recon; sid:200000421; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkkvdkdcmm.weebly.com"; classtype:attempted-recon; sid:200000422; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vl1.spaceysen.cn"; classtype:attempted-recon; sid:200000423; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vobroffexagru-4404.vercel.app"; classtype:attempted-recon; sid:200000424; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrvtn.top"; classtype:attempted-recon; sid:200000425; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w1.5114559.workers.dev"; classtype:attempted-recon; sid:200000426; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waassistance.com"; classtype:attempted-recon; sid:200000427; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet-diagnostic.com"; classtype:attempted-recon; sid:200000428; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletsecured.pages.dev"; classtype:attempted-recon; sid:200000429; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-lupqrbm0k-uniswap.vercel.app"; classtype:attempted-recon; sid:200000430; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web.tlgrm.app"; classtype:attempted-recon; sid:200000431; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmailserv3038z.wixsite.com"; classtype:attempted-recon; sid:200000432; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wk.xzte.eu.org"; classtype:attempted-recon; sid:200000433; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wodjrvrisixc.wixsite.com"; classtype:attempted-recon; sid:200000434; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"worker-dark-queen-529e.servers5555599.workers.dev"; classtype:attempted-recon; sid:200000435; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"worker-hidden-frost-ba39.yoveli7450.workers.dev"; classtype:attempted-recon; sid:200000436; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"worker-site.aopages.workers.dev"; classtype:attempted-recon; sid:200000437; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsa.osmqone.org.cn"; classtype:attempted-recon; sid:200000438; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwwwwwsasasasasmmmsszz.vercel.app"; classtype:attempted-recon; sid:200000439; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"x.tovip.eu.org"; classtype:attempted-recon; sid:200000440; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhjxkj.cn"; classtype:attempted-recon; sid:200000441; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xixiajiaju.com"; classtype:attempted-recon; sid:200000442; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoomailquthorization.weebly.com"; classtype:attempted-recon; sid:200000443; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yungtee3.wixsite.com"; classtype:attempted-recon; sid:200000444; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zagbasamothega.dnsget.org"; classtype:attempted-recon; sid:200000445; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ziraat-kampanyasi-besbintl.xyz"; classtype:attempted-recon; sid:200000446; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxl.cbbnbbc.nyc.mn"; classtype:attempted-recon; sid:200000447; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzpov.top"; classtype:attempted-recon; sid:200000448; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3961f442eqd80b4e3c28f75c4ba682dd68f9.html"; endswith; nocase; http.host; content:"datagivers.com"; classtype:attempted-recon; sid:200000449; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uebj3h3j"; endswith; nocase; http.host; content:"flow.page"; classtype:attempted-recon; sid:200000450; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq"; endswith; nocase; http.host; content:"gateway.ipfs.io"; classtype:attempted-recon; sid:200000451; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/medoeu"; endswith; nocase; http.host; content:"hm.ru"; classtype:attempted-recon; sid:200000452; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreialvbunrzi62kehrnrzdryalljn3j7tzr35sr5ohz25rnl2kvlsnq"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200000453; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/46wjpyr"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000454; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/910428"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000455; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cdmd94193ab"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000456; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/n3yi7p6"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000457; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vre1p3j"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000458; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p8w69"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200000459; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/107519/c90488/4a1f04e6-1517-4254-abda-f0aee8fe0ab9"; endswith; nocase; http.host; content:"safebank.onl"; classtype:attempted-recon; sid:200000460; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cert/loks/mir"; endswith; nocase; http.host; content:"scearmcommnymnlty.com"; classtype:attempted-recon; sid:200000461; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cuce/rit/pil"; endswith; nocase; http.host; content:"scearmcommnymnlty.com"; classtype:attempted-recon; sid:200000462; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qinmot/truklop/poli"; endswith; nocase; http.host; content:"scearmcommnymnlty.com"; classtype:attempted-recon; sid:200000463; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/trawbe/nunty/loki"; endswith; nocase; http.host; content:"scearmcommnymnlty.com"; classtype:attempted-recon; sid:200000464; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xul/lex/ponu"; endswith; nocase; http.host; content:"scearmcommnymnlty.com"; classtype:attempted-recon; sid:200000465; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/so/e1p6lravu/"; endswith; nocase; http.host; content:"shoutout.wix.com"; classtype:attempted-recon; sid:200000466; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ghghdgfdgfc/home/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000467; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tlly"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000468; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s/att-support/6ca3iebztzztx2gi"; endswith; nocase; http.host; content:"workflowy.com"; classtype:attempted-recon; sid:200000469; rev:1;) diff --git a/phishing-filter-suricata.rules.br b/phishing-filter-suricata.rules.br new file mode 100644 index 0000000000000000000000000000000000000000..f1174fee2c76ea1cfffeacd942dcd4fc950e89aa GIT binary patch literal 7782 zcmV-s9+}~R%9;)Ua=&K(&;R^RM*F1zTcUW*%ju_hR{^EcBG?3Nh3EfQrE()f9}^^K zfP9PwwpkDJ5Gwtu>an_~y>x4Qj=H=~dzJQXuj}((UQ?5`6jWlB{VV9}q?Kh|VNL)I z`eK#6%_>YV18DrKfAW z)v)B-`!Br&2MxadbB|cD{qkF1|LyqmC;rFRs`c9-jFUnC*J1d<*^goP-@p9U*WZ4Q zP_X{^VqYHauiyWRHoxX^h|MN<|G_W6^(FLz0~Y-8wYGMwiE~S65v&FuwnMz2Ao)jb zejop)X&H?&2&_L-Mzp!OQ|B_$i>$m^m-~aV*fBm<={jXn;?l1CZU%&mg|MS28?SKBa zzxyzt9oL)Xy%=Fcymd-abnVS@gTm+8i@UTpC5@7|z( z;WA92N)mP}ITBu3_#5n2hY0s-TXg+8bS3Y>>Y zU}OpFMl~>|d^57b#BdQ$?5p%!1$jILN7ksrNhvLbm?&I?J39h0k9p81yk~JR;%;49m12A*YZ9 zhaTZ{z;yBgcVa!z%siL1h)Wq_%p1gnqY@*RN2CzXQBN8et)+NUZtV^;A8>ewC#M+h zA@(M<`*2vcDKCckK8Kkz%i;e@6iCF~77Iz(;`1%tFxTPPjSO&Y*xv))*yB5}uraPtq%>{SkYEI9^P#LQzPCt^1H~?Zc=+s_YwECJe_Hw!i7^ z#KVCws{zyAR?@PAn}n8WL<`5M;&ihqKHooTMj;tC>g#ju?%c z2n}u?ytjTF$uN)|@o|fL$$so~3uPN^UVfo%E@oD+&br+rjXK*Ao29GQBX>C8XI}KCj_V8&QC%*%{9LDe{AbQ>zm{}LY$r$wa)aN;!h=1y zdie9)Zyw)IRPj8Dn!P=)#Gm*5*|N26TaP5=qSF;{$X{q_pYLQY)Dtee?T!@4*U8oH z8or7~w=eM}(^@}esff32yYD>Ob8EVDe(+@V=k39Qu7{7E5V!79@g|)BzrlOVN9Hei z#+sh@b-v5{RM+wxpC}IZcE@%vZx?dSup{F<1p9U&)ui#0<*pZn_U&nD2n;Z{c-Z>oYygG-tKH!#+$EW4bSft`At9gccW&pXs zj?9XOm-V&V*I~nlzlGg!uRdfeAY9`0?#jt4rQ?i}bNn>a2xf`Y&ctYkcy1b6C#?I} zFfhL+p3oWeSdQND80y8Q9lYX*8iaLyt+asFLfd2yMbWYVo&8o7ydb9!FRBYhE{FLXQcy zNw0M?_OMpx*jh0jk@9Pq6Qr`)j|hz%9&XfQ=toXJ4(z$P7Mn)U}Wnq1Dzv zFU*ENe;s1rB%+H-Tfcg=Ci_HsYb>r)H)%WLFtkRDsTp{In~gTmZgNFi}mJQ8YnLIG$$Ah^((M+_oS#x5nlpi&{J zp$&W=PE5h&7^O5L0zIYK)>A4;mStFv{gVTwWCHvZv7MjUFyPkg8?_&FLk+;nBA#i1 zX1p9Dm&3rcB57Xw*1+g#ptal93Lat42O9>Z6?BgNWnA<%jqn21IAxO|QWG-~W~BWs zXh!jo&=xs86pv++Vv`Ltqx>)mcud3wg+%Zc7dYXvE@;LEl5m_Qb2XV0ovU3yv&R$1 zez=+Ilqzm5nOa`2f+$w$nMXXNU;>Y+*EYGLIadanafJL4uG~k<1zn2-K3T#WZ84Jy5L2mWgks|vqL6|X&=0xX+xP1s|fLg;?(=rAmrn!VCQjhphbFVFN zqcmB_md~zh!}$C@Ww=e~bK`+_Wmwh+W&@`?q=hKI7JDg88Dh8Z=eprrZl!5M3|Do` z_&jlW=k(6drsb6;3vmuD+-5Xm+Zbr(Za^eeY6pZa-8A783)Yn;3E4z6lsQ6Dn^;(S zdI>{qm@~vDvqIr9iR6pYtRLS#rd;;iE6K&J!IL##5er=+OMF3eM>Q~yi24+8)iI1X zw|Wd%XbiLP%m#Jds(9m+^IlEU!6amuC)oFK7;{++Jwh|OkMRtBYZyhyr#xZi6)Ozy zjz?}?X~GYyXOHzQeYw))9uCgF&aZIcjarC&(QDpv%-5M&;@ib7_XspcPz?d545z8fqXxGbWFj8B1DnkS26s9`VmWz=axl7imOU=PO`;l`N#` z#cX9zn#g0}9F~x3!vqbZbm^Fld4efkt<5?^cxreo)U%hq*PDlC3?2vOT(AmuU=IZr zPWqyE3t2X$Nj#jJbJ<(Y(NuGonM6A0(m9?#2^CvE=n8xAuqOyx7nNr0Fe#h|5G92k z4ZBrp!RK;>X0U%Qd8wrnH9|9{4!h^N7FZ#gQ<|0IL37{g+V{^&o>TNfBad))fv5D4 z&eCS3c{e5tLOhn;***xGv25&LaDT+rz#oEi$sWA7$|D$+D^0Uu{j$E+yNBRPQ)?_* z!j37$+(Y70FU#h<9ibV&#&@*j=rNV-Ny!%^QoG%|Q6imOSDHTK%EcX6F!#Fs*wlR$ z_y5ci-(Jc6V2qq+ILMkCSwe}mX^^Wn&@&v-tyx#4={CH$lztpI$6Nwb7*U#a!@(6& zsBu~VX7AGb-PjUlI^+mIyBfDwNQhjp2@fFy3UId zGf>!%80H&}BMeoV%fi7GV}~PxQ<{!qx3hbP6rr;M52bk}zRZfxntSPxs8ZZo+cr!l zG+>r+d~trYpES1dic&#BG1)h0JVlQQq;S41-`@ z>40X$5s3m;hx0*c{)oh_(#RDyL)5ibpN~yfKfC2zZA_*#i-e!n26MdILoL`_W_SU^ z5+ihnmhfVOgGSOY;8OaA2F=JL%#ZhLrQxUtzi}@Cwz!tl-)!m~JuAT-vqp*i&_!P6 z5w&#Fxw~z-W{REWvd9f>;JG6o>s`^cY>r21+6W)5Plx+FBQ03fKxwxG1<&cnVhU^6 zk@iYAzpXTTgqOpHWq}xy$EQPU(2Pama7c3|Jy9?4CbqSU(xecP=)KN!=jE#LbZEv5 z@kGIk3-CE&D;z01dg{}2Ty2?)(j*a2E`ArAyV}8s96$9yZ7?k%E&aUjHB=W2*`X&) zYJ)6j(p%5$gRxAdsUmt4LzDEBe{_^T+87K?vC>ZbZv~%g{ZTo-H)uu};dsdX!qV>I zHl;t(P*Y6;3$NhO7{QSReEovkBOb;KIt8yZZN&TwAwlv(XQ=)PaSPophGz5;@AJYo z7KTBsQ)uKbh(fiZ9Tqg!o)7752+ zb%oY8?06V7XNx%g)nn*&zZAUkF>ZtA91(84dRj=$Yiha=%?TjR1{<`1Hbw}gZ)MP& zz=l8^dK7&L@2=z!WB&wO zawmLbWDd|A2e&~`3x0P3#P#{DvE*TsQ(j= zBOe9&yJII(o8VDt0*GZk;+?}MhkZwvJ5icVN??{aQ%IZ58y;sUH4paZVR$+ej)U5m zmjkpy9iIrHco*T>vD8%YADR_$5z6MP-q7W1-% zl&TE`Xif;>r5!xl+wO&iBr^4cs@HBf%M2+^1!3~Naq=f~!)pf3_Xl5arw zZtYi^M8ea1DA|TqmzK6yno7dzJ-cHX;yR^iBMd{vp8}YH(;ZhIj5Nlq>dYE`&u2g~ zhk_O=ChnDHlc>MF+bz)bpa&KRZVh*(nIk6qP5zQ-#3!eTmV^yz5}m$><|Go=?e{ni zr(sEbxMMPsE6pA8%G#%5ypnW!8wKx8BuWQ1d|`>PnfyH z=S$cgESX$r$9=IH)1;v}?nro%-Wi-agb^+X4+xcJlsKI5f;Qv{<0l?w^Jfb_-X*++ zr+gKBDa|x7O>?`qT4t`2LrSwvEO9B>T3rH%SkqFmmAlfc6EoSlkf6M$B4vG4h)!)-AIkI6DZwX5J6=W?zV+DCT7?Ghm zv;%_`9NWQ!m7A32govl=Ab&3U(Fe_`9!^9q%ShCqIp0GsR}xRv!oEuEI>p`M65kr7 zGzY}KgO)@YE#&87vr(m4AD$@q3RZlD4laPN(ZSane?$l4g>TToT=*xf+^w{Gg6rV> z#AoQ>iToTZ*zg59cy)Y<4t^}PLRztyPA;&09>=T^b<(z`*grf$e(gY8& zyz;$qhUOFxM)J6ZLp<9lf_LZ%?zdOi_gipLwxl%U!`uP)0kJ8Eu~jp!V1uB%dgS&} zn*8DEDj}z}9GE%0=XO{qq}z2H=HUaHGeGQmxTP=h1Tzh8DgyV2>JU zyi71V$brEOAW@nLq+@zuc0j4Do55|+kViinZajd~a&`iYnB)L*@Wu|z`w#31pMf)r z2$FkwT1Mvqjj&1xZ6|PI8U}Dm(@GfESh*RPP?P5tm9(=r zq=!MdYY^NL%mp*tId3MdmD181U~_!?QiGa}7SaGpaA<{^m}gvDuPk<&W``}%c%}7B zXr}#OoHW9jX_9~%24%gPCJAhb#;e$DChgI3A*31xGtG{H;sa{*lNy1o(0H{n&dehl z?gBMmSKS?P@Z6`L3QURcFO8d11dqm?MIUo68QIAYX zHgRBV;Fi02Fv^QT1KZ%sjebzt&SuD>i~sqqmG}&Ven^cr7Rxq;`6mM#IH|!h$tOAa8NSsF^9-EDZ?>m0xt_GIA}IM9Nq!^Z_)q=gGg2E05{~l z&whP37!eayH7(iLby$nh0R?$7FB5Ojmx zhG+Ks#G8{s3u=z)N_~AEi^b4_lEd}V?jHKxmY%~wi^r(+b^U?8`(JoN0$8zHrKLTUEMp3b%X63NM?f);ce{c8Ke_5_f@TDy$Uf^5S}71|A@ zt%3GUWM+=<#zApNpzJrff=8MY87G!lX^Ya#8egFL`CP0!tsaNIpl4^6@FfD($Z=jj zPgmNY1;55zMOSQ^7s2w|-KWJ4t#R1(f`lJ@!A_vJm0oE7Cb6hpX@ZS-iasl(yli5* zlN+h8z~fU#=n4Jyw{7IUY|99(G=au$H~ln>J%B9u^Z7Kcgcjr((Zm2nlWJP{$XI}` zG;PMTu5ite)8!#KwBX7}6tFg8m<+kZ+UP+^bcNN?T48H!)jK(>q;cfF=du1Dcp$RR zX%5kd!Q?|j=n*NFy}uuyE#TzhE2r{U?kX1j*Qr7E>k`hJhP<|E7@ zLN@83G>e82y0o_C{DKzf&5T)Zg5aKoG~YW5#dRPX2P)00F|A?$*n}IF$@VR~)#u6d zD9y3qetoU=^{R%i06M?oH=D3eNZ%Ihh(F%AbU z=rwGr*?nldrDdLA&jIC4u^*LY(Ae#M!r<;TH(TFCqI-VWulfZ_7 zEqi7K8(Rr!DS5umpaqvkL#llXnCAHm2lY9;JCFqmCZHkHvqVB^VvS^~fuqgLr$A`; zWSAZ2Fbj>X266ium(J#HrmiPJ3&IVD8x(vG#yDuI(4Ym)Mz0!$)i10yxE@tO3$~4({5c*U z-;J(?PAh&oubg>ZH|YuxA@^2sqG!j6z;wWQC$T`W{(A3qFZSkF7a^;~_0I zM@WUHO4CPd^ER;4?l_XvymEB>OJfQd@vT z7ya5=fI=4+#1^2@#kFoNU_=+gnOlHC7hkVW3z*Qoy}&yGHlTy&(*hW}*xySF;OOGH z*cKqr#mk;8KqAlkz09!{`o0WGEV~_YrbS-ChCLz~PGRJ?pU_hdsnNVZOYQ_4`;&L@ zuOb$u$r4WdiT<50fR=;_)t$>;_7GfYVgyg0+jjcRyM1pk11&icre|c-TvJ(h#bmPv zTGAs-&TKarcpN{lluo1^W-}IA(jruNmb0Z*8(G2qi&4dxRBAdjp(P!{gD!wtLv7@B zg25T|D0Wn7=YS8eBun`jI@!SuV!O&2`z_$mk|1F@ztED{k9V>Au#uiZz2FGYm1apW z#FQ1bxRhOHYKETS$;!nb%wyC5T2dw0d2RIbG_;iuEx8fS3Rm{8a+XlT$1QK2?{T7K zj(8{=dAGUlMiifrw(K8O_30Iuk~T_HCnS1_-!8AW1Y|C`Hex|c^v);7Fv?aX(2`Ff z(Mq&#?1P*Fkk*Jpcqa-~@nJogEo0IvYA9_1^|r4YT_6z1@}_hbQzmq;p2sbK%z)6x+8 zVF)eB6qdsW77G>j+*VwG`cxNe;hN63cm`ZkvcXJ$dJSqI7OM@Z#fhJVmV65J^?V|A z)+TEmO}C?a2#-9X#OFD3r3fv#5Z=3&aQNMPi%GLtN{(-D1}jlGZst)rX+azAy*Bgo z|D)sYz|SvCzFwiNKfh9TP*H<39vUnmCny+5B2Q{`rlWm{RlKxh{s~cWsEmTN}3)my|^*Ziy92b0(38jp* zQ%b^#CsWX9V%zBceQ(GL|Lr=z`$@7%fK?K*#(&-)9{6FFy z(w^IQD}9Uk_&#zBdP5f2?H0gg@jLa@?p5>cp*3WQcNL!=zaxIWkDU4rS;0>=e|d-cf6j$&>iqClz$aBgQQz$pv&| sQ!nwMb5RYl!MJ|Ekx?-xOf7wD2O^+-+VivzUqX0Op~n2A=xEJT2|&u{VeyFdNq-@pF-&tHFiBl37l{`u{9U;p#hufP2HUw;1f=I<9X zzW?xlzR}xnuitj)4flp(V1arA|M2B)5Ndx1<69H{AYgwSv|9d71qW%rJljndu#;k6 z-l&q+zx)2fzkU7nhtI!F%Gm$$mrQQ{Txrk8o=Dr1M{3pTkEMbbV~-WyiM6n-zU@SV z|Jau|!`XX&`S{7cylL3pvoC)@hC8patS+-MrSx^QIaahqUHN|!c60jh>wpWyfQL&L z2DZcswy7>zRt0%-g%xX?7iWwx>Bnyd+v}iftf0H9s>`D2QnK^(LBia+L5sTU2AXa> zARM(=v6A%gKPeqv$J(LA>VMLG;sS<~VBL?$%b>FhTF{g#C#^{qPPH;>us%ekJ3udv zp#Gd?*iDdLhQTxL6TflmsXYm7YO|5ts}uYa@bi$zTDemB-HS zXLDi0UX2$!+)10M^m7t{tJgs{ctQKmZMh~#1X0iM(l{Yt)E6PtOoW7{Dw@1p{a6jxBf_sV|+~|Siy%QD8A)*N!_xzjnm~B&|b%jm&YxK zPPr!jvL8L@#9!^GSf1nMbkce!s1iCnQ`y+#8ZM^`8UrygF)uN zOa2TSuE15;uqG;}E%35FW0jMqcPCc!!4G_W+mgJGBEJP*GH7j* zU9zHUK4)^nU7)~?J+J+^AB(-jjlF5A+CP-lrA^Jv5e@0t?Cba|-1u96`J=CWjU0Pj zWpNk1!3=yMT%03bUe?i9zWojiP*pz9jWs~`9T=c1t1i|6%>F#kGZd6r6%8LV0pyZCxqlTM2}{iU z@AQ5p1()!-tm9)vchrE0nG5=a*SofT)m@%Nj%L$#G5;OTka8+E|gqWxmP8D8O=+Rnk4&%XvZ7-G_NPatbv0V_F1~?W8KuTNzKUuXR)Kyu?Wh&g#a30do2HOTEXl+^5xav|GoQ)4|>>%MUTQ0-Jw_1L%a z!R~{y%Rb7j1iO*4{73B7BDdF=^M1{%NB(#mw_MyFq7vJxtAX|FF7wCjxX-HZ={&8n zEXP{z{L@~{f5p_Z(AO7WRUKku9X)VTUbnnjd=pn)16@XOE#+kHdNcq>Zx`lr(QmV@ zU7oMG?CbmOA8@Yvg56$pTFNT7B`pY>$*obV%CF@njC|bo?WS*AwU3YWE{c`j=sF+c zE!Mf}47sr=BfP&+pVEkm=8uUr*YTjbT4A_B(Gw|)dSCbb#`AHx%Kp*UF4|Z*a$^nJ zO-<7jbJ?s+-xOc%w!55&=|SkoRr9dw-e~W9m8yn;m`#yrV-?7aHNnbCb6xuD+VgvU zEBe`IO^mC)Abc;bH&@YemvY@indfk~P(!q_@KWi1NQhV`5|c^Scu6&!n*wbSM62r> zG2E_b!{&+V1~b~K4NHb=yp(p5W-17s88OdClbR`@kV=D>UkY=g_O#oN z)e+ab!All3XCoxt&erQCuNnDF#)^5OX>`D zhS?*iW>SNfmKpWfd>)i?>RyM7mySIbxE6KvDwn244ZUvTSGF{Gd78ZrQ_L;Q1}|B2 z#+^g6s~z2mnL6Hwg+FJ$fUcuq~V=hn24alXS#@Fv1#Vzo^_*5bYnIY$lIDB(kzRvW~)eSsLe_1+$| zext)n+9sfL-sb5Ejt5V~ba>g@r2GiBhTQS)@RBw@Sjr`rJ&`jp{J}LL_VY#91;@+O z1Ua`&XmuqfrQ&tOco~}D8%R!-5M>!vLZrjX*S@io&veCn<|~^3V-k{I!-HCO!OP_o zv*}0eAj63Sdm1GsVaf1na!_@Se+H80*3!1_E~#<7wHj8wsMTNHD$XJ~c8lz1VNsiG zp!sl0?{Fp4tZS39PTJ0!s*I_@J_4$zZ_iq6pXtcx26P@>YX~j|HbrUntkDYv9dpDtTd^r($_uYt2y@#s!z}_cUda$3<{*@UG2XKm54;cK@py$opeIM$ zv`x^ym<+E_2te|=oHm)%au!DGgNAgx0wEsxXDO)UTuB^`y!;N3pR$HTgkwj`=Rn9J zhPvQY`~a!+qMS*TrW0qroA3Vnr=vI(;{AzUHvwAq24*D`R-!GZ&Ywf4f)4?}(K0r$ zrno_;)M8p&^EQUWpe1f__nlnnF{sF6hF9uiAcFKD1UYjQrWP)_&(zkiOdYS-$H2hc z$_Nj~E9@~aGhF!&VOO|74EH+BJE%PjFj}HEz^t4g3vAGPicZo&1Nc_Y!;=yN_!3#BV+1T2!fsWhM$3!u_3KEkg zgE;IX?MZ*Uj<>*%_f&{^9WY*YW-VD$kyzj`YO;j+b%hxAYR(12Mmal4chMxHx7J~MIq~X8Oh-C6I*!5ynwr^EQOtDsUmcqJpIha<JMsSv=_Z}pl_yVaj>HNB1<5iB}Gw6{BE*U(|o3NAXL+-)iRgmCvPzi&x zJf%L8K5VB8UO|W_Y^yyv^UYBcP&hrqs|xYIKyz{rLS11-truYFZ(ct2Ve>6`1tR_* zbW8Uz=*@Qn{cggLw}_Ez-w-VR)o+{B!$$QEFLZyVGyOboo=Qk~RH00~G7;QAYR}zZ z;C4N?Ks<|ug7MUK0L_^)=i1RAt+x!XSOiyY_uu!3nQFtU7r~8ut|HhugSHI=jh4<` z$-w~Dw!PF5>>aOU#1)7nlCA#ydgsFPx~TPoc%>t*VEuDr^;sX-KY6Yvd{!7E?sfQR z3EowC2VfhBg~VO>1}}1_B^=59R6PsBjF#D5&zncn%nUP8F|ET3eDc6%fC$(*UZseu z6Wp1F7(V4qcwEcz>O)+eZ`G(t25j5U@rpmp#B%S~f^hvD#_g$&6XxW__k}&g%h9s8 znTaK6Dk{gT;V^@IEQE`w@*_E3A%_{P)5H(OmzV*(!3*0_t+){G&U??vlf21dgdB3b zLJqU@PoK+v633%AbLM#U90ajsNtEQPx_ZzN7ay;ngCNJ5nJ2xp&Oc}{3s0CN>8g8| zr^}IY_PQC+@;Cu(1pQR`aw{Vi2CkR=)TR?0;jY0 zdC!xiiKu^&;}wHg2!sCU7oBqXI@}I1+{v|h7Lf?ym4P^O-Vf^2#%P-5cx50watUW- zkGR}9X3!GsQ>*ic2x)k=AQtj);;=A*`=)N(mzyP zQAY0L&hZLJEXSv$<*C@~)>MLh88u$r2uZdhk;*_)R%MxIfb0{dCL&+S3F`^D<{@w2+Sy4#UOFT5!e>lh!eCzkw(6~db|v92-% zwSqDxtWz-2mtAnQ9?&UeSIBEUwHn{wu7o#l!fAI6N`*uBHCnId#?dO6-R`4Z4jr+; z8#wV|H?-poEh9#2^4uvX=cgweSiiv=HQ_Ex{aj<6*_;ResPpT+502K#xmWdrp0`IX zH(KZR6B$vNyz_L)UWGJew>SSBa#BX#eGYkBM&5r6IWGej9|PW(fe#-8J`{oD&4Wl| z_d1z2FUcM_Mus=$Avw0Z0&&Egzl=uigDKLL7zGU)CTpwHiB(ETSs&$lvY@d?n*mq8C70sSa~#+&%?N9gZs z88rC>=&LD%Za)G#mO+1nBfITo&>!K*?y?LTvm*=X{pPaC@%}7>#_P!PM#qXYqKZ?c z#^?~ti~b~h-KYsr>j<27gy&vscJw55mEmGGuLZ1C7% zejVe;b!q~<>JNm?#WDfN2MTa{zZePL{D(~~FxBaus9jo>OHjNIjn}+69~)AE8V`(V zc=I1Jc0QlUb}eOq=X^qAEkl*ooP1V#X6m>7U5(lzOS8pdVn8cNj=sMY9oFIu4i zRL4d|LC}FUz#1)NLv(rD7%;2R5@`&uRNOLIi;N(K+&OTpi~XKkrFR8L_;Va zbSn*Ka@3-42%&A)b|&>EJuOy)U{-@RL)SFiNCSqol!#U-Erzb+yklCFw~ZFF8mt38 zijFdo)Bt5~3EV3^h5 zWK8#kHnOFZ@um^Os0i@3F`dx^?~B#onAPaGP-5&!@*F0ODotuColu=-o#~~Z<^2X~ zFWQL~G?g9K17oyLLn|42#sLgfJc&}Q25K+bw{71x(sVuHj0`Oh(zLQwV-!L$9~oOW$9nyys`+!tyuD!3A$SZWm9Frs_ejG)_OM|*&77)#p* zZBTnr(bG|NK#i6IBk3#BkGvTO(P=)*i6~YBwHF0J(&SajQBc7;DL@SA-shT2nWk{v zSgZzWFA5-;G|57eUNWQ72+2tgocCHLL)x~*YM}O_5;!!hQ{9jT);3AfFiNCK%>~kc z%bH>}7;ZH>-ggX`HpzV@zag0rX}Z!3$&MORt_Er^s`#KrW(M9!!qO~b(4!C?FsEKT8cn!yi4G9L}&X&NU6G0O6O1GN`5TyUPc3Y`WL#$_5<8Zq(~ z(l85YgdxRhp!TBUnD?XUWII~MS_T6cC1^5VMlc4P6{~^Ri>7xA!OZE$d#fO9-mc1S zFdwNBLh)vMe8V`}`%kn*$pbWsH^<{!hNwpkWw>a~elj2R_@D|_!Zh^I|S3~RRyaT^T&JGm&FApD_E4#l+x00I{VBIGc%wP;=>=G-(6(h4 z8?A2(pv~n{2HWF>JqM_*+TUjtcv)xga9Tk3qC0XA4|vJf2&*=JbGjZw%zvC-xTuZe zjoJvg?#Bw?K*}RE87bbNjfDOHA5XU4FYn``^=UzYSEd5LJgS@3rgm#J&c%^gkj@F?C19fLwGoJ3x+U&LS)BDtTy_r#7u3_Icmu4u#p-bK&hTpxZ zer1C%73}ep6p;B`IVfsC5I|0-tdfI z?$OL<^03_R_ws|46mM`wIDt3LC!gLEa-=iI8<~;NZxv}sLO2)@LGk8f{DP;=AP&Pb zQ2TluqLJ% zqDlX`RuaM`*?>Cwhnn54$2pA?Wpdzkd?zPQHnxl(Sh2$!rjf8WJO1ho*0+K2CTL{f zcyX?%S>uh*$omBKegsS)gQf7OHYM%x4yV|YFfOnC6- zYlQPDoXAD{aM*!f+IC zv_^31UeAyBN%1q8!l{5`G zcHQyXwdm99csG}Acg35d5%x>^#&JxYS*@M@-l3Ynn-yy7>g)Tf5qLv2UXRp$d_7{e z@i7Q;tcEki8?g~#zT|&@R%XS}ADN@!4cmyR!GAYG99VV48@3T;m}~i{+?pmT%lob! zZ_-9okiK5i53fO0dF`dBedA5rh~}K`?bN#mT}Djt63=E*OZt}gVHs*z56jtvU=z)y$N_|yExSd`|vG(_-^P9Zx<7Y zU0jId_wrjB;8@e}=FoB+-T;m`RkKSY{Ze+#@fx~IywvHJaH;b)k@t!5Iy!eTYOQU- z)$K8}uC~gV8As~k;LXd3?&i%+mmQ+V8;B9N8_e@;%4{m$$cyOr5Hqrg)zhrngt9~B zc;hYNezkBmq$%UY>&dQX`E4K9dfNT_vroJc74fD{v5q&pIBApdRPQt6^;}12(K@c( z=*NLYB)nM?`yBI8g!Ed$&9EL>FvS}kv2Q1nOL5${bGF;T|Ebphc%DmcjEoV37vtx~qA8+NpXY0XvgRT;Oy&HYnTS(iWkW_ZI9(hF4czI}VSG?!{$ zZMea9q%+5xkdQ+u<2)swR>VsX^ZqV6NgFDjM+zD+yfF#4OMQPP+Oj(N3~w&N&FQnh zdK>Ir9lO>HFM2jCl?H#QzIS8RinoKQe@^uWoRv+8iO@$}DstWH5N|6V-}5hj~wfn^=! zfK|fX$TL0B^VZqD~Oa4IXuV!GfxK3{lp@pQK%kcCWh7?+J8T>i18P zGDHy&|6eVxxTR67lCti0-X8vKWxSCdR$Wk_ogoUF_>(vT$}q){2v+=VbU&L&Jpl zVnD`*nXV$7^c8D4t3Ya~#s-WLqiH}ECHk_yDlz%MZaHWw|#AHwttsqXdQU; zaFgb1-PicYx8>ia7+PC?-{-H{+*9*f_rFUlv_3t!uVl5l*~4}JdS9)R+hh974@Am@ zLhIMB*4)0P({$3)m_F6l$t|Wpu~)g1$+>ARdwkTPHSuwN+41-E+5P;iNB_PoXzhFW s$`Pf%@?gF?1=Je(jL&Dhx6}K*d)`cw-&kQs^#_Ch-})kTLR!-S08PY#TL1t6 literal 0 HcmV?d00001 diff --git a/phishing-filter-unbound.conf b/phishing-filter-unbound.conf new file mode 100644 index 000000000..b3cd45d15 --- /dev/null +++ b/phishing-filter-unbound.conf @@ -0,0 +1,454 @@ +# Title: Phishing Domains Unbound Blocklist +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +local-zone: "1nvest.bigbantbaz.top" always_nxdomain +local-zone: "25116414.cc" always_nxdomain +local-zone: "365365news.com" always_nxdomain +local-zone: "365f09.com" always_nxdomain +local-zone: "750115.cc" always_nxdomain +local-zone: "823pages.pages.dev" always_nxdomain +local-zone: "95564339.awi.za.com" always_nxdomain +local-zone: "999fc.vip" always_nxdomain +local-zone: "a.yyyy.cf" always_nxdomain +local-zone: "aaaa.whilefish.xyz" always_nxdomain +local-zone: "accounts-microsoft365.weebly.com" always_nxdomain +local-zone: "accounts.0ffice365.support" always_nxdomain +local-zone: "aidanochka-tabys.kz" always_nxdomain +local-zone: "airbnb-clone-sahinur.vercel.app" always_nxdomain +local-zone: "akbarinewv2.morteza638n.workers.dev" always_nxdomain +local-zone: "alaindemeuron.wixsite.com" always_nxdomain +local-zone: "alexa81o.github.io" always_nxdomain +local-zone: "alienv2ray.pages.dev" always_nxdomain +local-zone: "allegr0llokalne753724pl.art" always_nxdomain +local-zone: "allhrteam.com" always_nxdomain +local-zone: "amazon-clone-by-sudip.netlify.app" always_nxdomain +local-zone: "ammuvicm.work" always_nxdomain +local-zone: "amyr.iran-cyber-net.workers.dev" always_nxdomain +local-zone: "antaidossiersuivamendimpayeerf33.zynekcctv.com" always_nxdomain +local-zone: "anuragrauniyar.github.io" always_nxdomain +local-zone: "appeal-voilation-policy-issues.github.io" always_nxdomain +local-zone: "apple-id.cc" always_nxdomain +local-zone: "apri.154-203-197-141.cprapid.com" always_nxdomain +local-zone: "arvestcreditcard.embarkdigitalonboarding.com" always_nxdomain +local-zone: "asdfjeiod.com" always_nxdomain +local-zone: "ashleyproberts.wixsite.com" always_nxdomain +local-zone: "astounding-trifle-b88a2b.netlify.app" always_nxdomain +local-zone: "att-101397.weeblysite.com" always_nxdomain +local-zone: "att-102641.weeblysite.com" always_nxdomain +local-zone: "att-107756-104508.square.site" always_nxdomain +local-zone: "att-108102.weeblysite.com" always_nxdomain +local-zone: "att-108651.square.site" always_nxdomain +local-zone: "att-mail-101246.weeblysite.com" always_nxdomain +local-zone: "att-mail-105533.weeblysite.com" always_nxdomain +local-zone: "att-mail-109459.weeblysite.com" always_nxdomain +local-zone: "att-servicce-mail.weebly.com" always_nxdomain +local-zone: "att-sign-in-107078.weeblysite.com" always_nxdomain +local-zone: "att-yahoo-mail-105061.weeblysite.com" always_nxdomain +local-zone: "attcom-101415.weeblysite.com" always_nxdomain +local-zone: "attinc-101356.weeblysite.com" always_nxdomain +local-zone: "attmailonlineaccountupdate.weebly.com" always_nxdomain +local-zone: "attnet-100294.weeblysite.com" always_nxdomain +local-zone: "attonlineservicesa.wixstudio.com" always_nxdomain +local-zone: "attonlineservicesa.wixstudio.io" always_nxdomain +local-zone: "attweadminservices.weebly.com" always_nxdomain +local-zone: "auth-sharepoint-asr.vercel.app" always_nxdomain +local-zone: "avertisystems.com" always_nxdomain +local-zone: "b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev" always_nxdomain +local-zone: "b35ccc.com" always_nxdomain +local-zone: "b35lll.com" always_nxdomain +local-zone: "b35www.com" always_nxdomain +local-zone: "bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz" always_nxdomain +local-zone: "bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz" always_nxdomain +local-zone: "bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link" always_nxdomain +local-zone: "bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz" always_nxdomain +local-zone: "bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link" always_nxdomain +local-zone: "bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link" always_nxdomain +local-zone: "bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link" always_nxdomain +local-zone: "bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link" always_nxdomain +local-zone: "bbf-alpha.vercel.app" always_nxdomain +local-zone: "bet365t3.com" always_nxdomain +local-zone: "bet938y.com" always_nxdomain +local-zone: "bet958c.com" always_nxdomain +local-zone: "bhngfd3.pages.dev" always_nxdomain +local-zone: "blackdasblacks.shop" always_nxdomain +local-zone: "blsckdagsever.pages.dev" always_nxdomain +local-zone: "bridge-9wdpjmsoa.pancake.run" always_nxdomain +local-zone: "brubreumummeddoi-4514.vercel.app" always_nxdomain +local-zone: "bscusdty.top" always_nxdomain +local-zone: "bsozvycr.icu" always_nxdomain +local-zone: "bt-102368.weeblysite.com" always_nxdomain +local-zone: "bt-106861.weeblysite.com" always_nxdomain +local-zone: "btjfh.weebly.com" always_nxdomain +local-zone: "bussinessaccounthelppage.click" always_nxdomain +local-zone: "bwfujmww.icu" always_nxdomain +local-zone: "bx.sfdsb.icu" always_nxdomain +local-zone: "c.cting365k.cc" always_nxdomain +local-zone: "c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev" always_nxdomain +local-zone: "can-post.cyou" always_nxdomain +local-zone: "celery.sa.com" always_nxdomain +local-zone: "cen4-six.vercel.app" always_nxdomain +local-zone: "cf-worker-pages-proxy.1352562939.workers.dev" always_nxdomain +local-zone: "cf.13084493.workers.dev" always_nxdomain +local-zone: "cf.iwoai.cc" always_nxdomain +local-zone: "cfcf-8.pages.dev" always_nxdomain +local-zone: "cfr-reed-taxi-wayne.trycloudflare.com" always_nxdomain +local-zone: "chain-trt.online" always_nxdomain +local-zone: "chainsolapprove.pages.dev" always_nxdomain +local-zone: "chat-wa.xyz" always_nxdomain +local-zone: "check282.tempisite.com" always_nxdomain +local-zone: "chore.pink" always_nxdomain +local-zone: "ciftcininbankasiziraatbankasi.com" always_nxdomain +local-zone: "claudiorojas.cl" always_nxdomain +local-zone: "clivenicoll44.wixsite.com" always_nxdomain +local-zone: "cloudflare-workers-pages-vless-a2j.pages.dev" always_nxdomain +local-zone: "codt.digitasianetwork.workers.dev" always_nxdomain +local-zone: "coinbase-com-18690.subttrepimop1005.workers.dev" always_nxdomain +local-zone: "coinbasewallet-verification.198-46-89-184.cprapid.com" always_nxdomain +local-zone: "company0rder943.weebly.com" always_nxdomain +local-zone: "completar-la-verificacion.vercel.app" always_nxdomain +local-zone: "conductibili.fun" always_nxdomain +local-zone: "correosprepago.bnext.es" always_nxdomain +local-zone: "crenadenuddoi-2258.vercel.app" always_nxdomain +local-zone: "cryptorectification.com" always_nxdomain +local-zone: "currently5267.weebly.com" always_nxdomain +local-zone: "currently70.weebly.com" always_nxdomain +local-zone: "currentlyatt909.weebly.com" always_nxdomain +local-zone: "d.afirkz56924.workers.dev" always_nxdomain +local-zone: "dio.azrealonce.workers.dev" always_nxdomain +local-zone: "ditgong.com" always_nxdomain +local-zone: "doc-online-1881.on.fleek.co" always_nxdomain +local-zone: "docsignauthorizationrequest.vercel.app" always_nxdomain +local-zone: "docusign.com.bestfinancebroker.com" always_nxdomain +local-zone: "duang-5dh.pages.dev" always_nxdomain +local-zone: "duvhkeq.pages.dev" always_nxdomain +local-zone: "easyaccesscommagebn.com" always_nxdomain +local-zone: "ebay8787.shop" always_nxdomain +local-zone: "ee-account-home.web.app" always_nxdomain +local-zone: "ee-service-help.web.app" always_nxdomain +local-zone: "ee-service-portal.web.app" always_nxdomain +local-zone: "eln3.vercel.app" always_nxdomain +local-zone: "enormous-orchid-howler.glitch.me" always_nxdomain +local-zone: "espaceparticulier.life" always_nxdomain +local-zone: "ets3qe9ooms8t6i8.pages.dev" always_nxdomain +local-zone: "excelorgo.com" always_nxdomain +local-zone: "falabellacom.dominiquepg.com" always_nxdomain +local-zone: "fdesq4.pages.dev" always_nxdomain +local-zone: "fdsfjiwe.com" always_nxdomain +local-zone: "fdsjfkweow.com" always_nxdomain +local-zone: "fekoulamevebouna.freewebhostmost.com" always_nxdomain +local-zone: "felomane390.wixsite.com" always_nxdomain +local-zone: "ferngos.de" always_nxdomain +local-zone: "fieg.84yr483rhfwieujro348ur84.workers.dev" always_nxdomain +local-zone: "figinstenatecom.pages.dev" always_nxdomain +local-zone: "finansfaizsizbasvurum.online" always_nxdomain +local-zone: "forested-mirage-samba.glitch.me" always_nxdomain +local-zone: "formtools.com" always_nxdomain +local-zone: "fortradesetup.hamidamnaie.workers.dev" always_nxdomain +local-zone: "free-5436781.webadorsite.com" always_nxdomain +local-zone: "frogsrus.wixsite.com" always_nxdomain +local-zone: "fshraha.pages.dev" always_nxdomain +local-zone: "fukshumx.world" always_nxdomain +local-zone: "gazruinv.web.app" always_nxdomain +local-zone: "geaoolsv.pink" always_nxdomain +local-zone: "geminiwallete.godaddysites.com" always_nxdomain +local-zone: "ghjhyu.wixsite.com" always_nxdomain +local-zone: "gimennlouin.gitbook.io" always_nxdomain +local-zone: "goldenrod-rowan-submarine.glitch.me" always_nxdomain +local-zone: "gorgeoushome67.wixsite.com" always_nxdomain +local-zone: "group11-vvip-hot-girls-combi.viplch.online" always_nxdomain +local-zone: "gruppeflorian.com" always_nxdomain +local-zone: "hanisfir.shop" always_nxdomain +local-zone: "hedayatfreedom.hedayatkhakpour.workers.dev" always_nxdomain +local-zone: "hello-world-morning.freekite.workers.dev" always_nxdomain +local-zone: "hello-world-muddy-cloud-f45b.mfoster0425.workers.dev" always_nxdomain +local-zone: "helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com" always_nxdomain +local-zone: "heluapla.shop" always_nxdomain +local-zone: "hemanlau1.pages.dev" always_nxdomain +local-zone: "hezhouruan.552008598.workers.dev" always_nxdomain +local-zone: "hgcdhbxnf.weebly.com" always_nxdomain +local-zone: "hjrhd.top" always_nxdomain +local-zone: "hk04-123.pages.dev" always_nxdomain +local-zone: "hkmqo.top" always_nxdomain +local-zone: "home-100317.weeblysite.com" always_nxdomain +local-zone: "home-102207.weeblysite.com" always_nxdomain +local-zone: "home-107257.weeblysite.com" always_nxdomain +local-zone: "homelogin7t6sdfcgvhb.weebly.com" always_nxdomain +local-zone: "htaflytz.baby" always_nxdomain +local-zone: "htaflytz.black" always_nxdomain +local-zone: "httap.l-teiegram.com" always_nxdomain +local-zone: "httpsbellsouthnet-102649sitecom.weeblysite.com" always_nxdomain +local-zone: "hup6r.com" always_nxdomain +local-zone: "hy.fuckgwf.eu.org" always_nxdomain +local-zone: "hypophysecto.fun" always_nxdomain +local-zone: "hzuayvvl.red" always_nxdomain +local-zone: "id2.xbenihime.us.kg" always_nxdomain +local-zone: "ikergalindez.github.io" always_nxdomain +local-zone: "info-delivery-bg.com" always_nxdomain +local-zone: "info-trackingcs.cc" always_nxdomain +local-zone: "info-trackingiax.cc" always_nxdomain +local-zone: "informed.deliveryhbo.top" always_nxdomain +local-zone: "informed.deliverytcw.top" always_nxdomain +local-zone: "informed.deliveryxs.top" always_nxdomain +local-zone: "infringement-service.com" always_nxdomain +local-zone: "instagram-clone-in.vercel.app" always_nxdomain +local-zone: "interbenefitprestaciones.referidosweb.click" always_nxdomain +local-zone: "iouwerty.weebly.com" always_nxdomain +local-zone: "isnworldwide88.com" always_nxdomain +local-zone: "jaydeep8806.github.io" always_nxdomain +local-zone: "jeanandpeterwilkin.wixsite.com" always_nxdomain +local-zone: "jetconstructionsgroup.com.au" always_nxdomain +local-zone: "joeandvelma.wixsite.com" always_nxdomain +local-zone: "journey-x-pro.com" always_nxdomain +local-zone: "jsdfchkdsds.weebly.com" always_nxdomain +local-zone: "jshattkee.weebly.com" always_nxdomain +local-zone: "juliusmasih27.github.io" always_nxdomain +local-zone: "jung-sohn.de" always_nxdomain +local-zone: "katiebllair.wixstudio.com" always_nxdomain +local-zone: "katiebllair.wixstudio.io" always_nxdomain +local-zone: "kdlmo.top" always_nxdomain +local-zone: "kenzmail0.wixsite.com" always_nxdomain +local-zone: "ketura2010.github.io" always_nxdomain +local-zone: "keucroilluxibrou-2718.vercel.app" always_nxdomain +local-zone: "kuconlogin-ui.godaddysites.com" always_nxdomain +local-zone: "latam-onipojes.vercel.app" always_nxdomain +local-zone: "layanan-bntuan-resmi-dna.prbu2.my.id" always_nxdomain +local-zone: "ledger-com-updatefirmware.aparecidovisentin.com.br" always_nxdomain +local-zone: "levappoprauqueu-4688.vercel.app" always_nxdomain +local-zone: "leyoixoimmecou-5619.vercel.app" always_nxdomain +local-zone: "linkbokepviralindo009.vipp.blog" always_nxdomain +local-zone: "liveairdclazmersn.pages.dev" always_nxdomain +local-zone: "lo6-cas-projects-64947843.vercel.app" always_nxdomain +local-zone: "maatamicklogginns.gitbook.io" always_nxdomain +local-zone: "madebybmr.in" always_nxdomain +local-zone: "madhu821.github.io" always_nxdomain +local-zone: "mailupdate87.weebly.com" always_nxdomain +local-zone: "maine619.github.io" always_nxdomain +local-zone: "mainnetverify.pages.dev" always_nxdomain +local-zone: "mazulyta.pages.dev" always_nxdomain +local-zone: "megrebeikenneu-2106.vercel.app" always_nxdomain +local-zone: "mendhfjpl.weebly.com" always_nxdomain +local-zone: "metacareer.com-case37169314276.com" always_nxdomain +local-zone: "metagalaxy.pages.dev" always_nxdomain +local-zone: "metamacksiologus.godaddysites.com" always_nxdomain +local-zone: "metemrsblogin.gitbook.io" always_nxdomain +local-zone: "meyetamaskiwalt.gitbook.io" always_nxdomain +local-zone: "mianfeijiedian.lawcpacpv.workers.dev" always_nxdomain +local-zone: "milanharvestfestival.com" always_nxdomain +local-zone: "mirobitsgt.github.io" always_nxdomain +local-zone: "mocp90.pages.dev" always_nxdomain +local-zone: "mostafa2.mehdi84888.workers.dev" always_nxdomain +local-zone: "movie-firebase.vercel.app" always_nxdomain +local-zone: "mubki.hp.peraichi.com" always_nxdomain +local-zone: "my-site-104564-105934.weeblysite.com" always_nxdomain +local-zone: "myaccountsignup.net" always_nxdomain +local-zone: "navy-nose-4544.typedream.app" always_nxdomain +local-zone: "net-flix-front-end.netlify.app" always_nxdomain +local-zone: "netzero-webmail-105996.weeblysite.com" always_nxdomain +local-zone: "new-currently-1-23-24.weeblysite.com" always_nxdomain +local-zone: "newattupdatemailboxkidlyverifynow.weebly.com" always_nxdomain +local-zone: "nfty-proj5.vercel.app" always_nxdomain +local-zone: "nnbsscnaceesngsetr.com" always_nxdomain +local-zone: "occinamete.cfd" always_nxdomain +local-zone: "odovsccs.weebly.com" always_nxdomain +local-zone: "officalourtime.weebly.com" always_nxdomain +local-zone: "office36503.com" always_nxdomain +local-zone: "ohscorgza.github.io" always_nxdomain +local-zone: "okm.znt.temporary.site" always_nxdomain +local-zone: "oliver752.github.io" always_nxdomain +local-zone: "online-e-commerce10.com" always_nxdomain +local-zone: "online-e-commerce11.com" always_nxdomain +local-zone: "online-e-commerce12.com" always_nxdomain +local-zone: "online-e-commerce5.com" always_nxdomain +local-zone: "online-e-commerce7.com" always_nxdomain +local-zone: "online-e-commerce9.com" always_nxdomain +local-zone: "orange234.wixsite.com" always_nxdomain +local-zone: "orgmail.weebly.com" always_nxdomain +local-zone: "ourtime.datings-information.workers.dev" always_nxdomain +local-zone: "p.updateinfocl.top" always_nxdomain +local-zone: "p.updateinfocs.top" always_nxdomain +local-zone: "p.updateinfoga.top" always_nxdomain +local-zone: "p.updateinfojq.top" always_nxdomain +local-zone: "p.updateinfolw.top" always_nxdomain +local-zone: "p.updateinfoor.top" always_nxdomain +local-zone: "p.updateinfooy.top" always_nxdomain +local-zone: "p.updateinfoqv.top" always_nxdomain +local-zone: "p.updateinfove.top" always_nxdomain +local-zone: "p.updateinfovt.top" always_nxdomain +local-zone: "p.updateinfowu.top" always_nxdomain +local-zone: "p.updateinfoxb.top" always_nxdomain +local-zone: "p.usertracktxz.top" always_nxdomain +local-zone: "pages-108-tg-cfzz-ip.pages.dev" always_nxdomain +local-zone: "pages.tempisite.com" always_nxdomain +local-zone: "pageverifycenter.com" always_nxdomain +local-zone: "patjimmy323.wixsite.com" always_nxdomain +local-zone: "paypalloginin-usa.blogspot.com" always_nxdomain +local-zone: "paypalloginin-usa.blogspot.hr" always_nxdomain +local-zone: "pcmag.anycubic.vip" always_nxdomain +local-zone: "port01-acf.pages.dev" always_nxdomain +local-zone: "portal.chiaveggies.com" always_nxdomain +local-zone: "pruhuffopraussou-5681.vercel.app" always_nxdomain +local-zone: "pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev" always_nxdomain +local-zone: "pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev" always_nxdomain +local-zone: "pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev" always_nxdomain +local-zone: "pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev" always_nxdomain +local-zone: "pub-2801359d2be54bfd8701132626efeb73.r2.dev" always_nxdomain +local-zone: "pub-3096005ebeae423182ccd89665564d8a.r2.dev" always_nxdomain +local-zone: "pub-46a5f86348ae4aceb3591d126020999f.r2.dev" always_nxdomain +local-zone: "pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev" always_nxdomain +local-zone: "pub-51f896deb233450089fc1a520e6ed957.r2.dev" always_nxdomain +local-zone: "pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev" always_nxdomain +local-zone: "pub-682ad3b65d944376b919745aae3c56d4.r2.dev" always_nxdomain +local-zone: "pub-722720be67154192a1102b2cf085d306.r2.dev" always_nxdomain +local-zone: "pub-7d056bfeb6b04852801553620fe62c0a.r2.dev" always_nxdomain +local-zone: "pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev" always_nxdomain +local-zone: "pub-873fc6a3edb941c6a17f50911dfca518.r2.dev" always_nxdomain +local-zone: "pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev" always_nxdomain +local-zone: "pub-aab4be29317b4ec296517a557db12622.r2.dev" always_nxdomain +local-zone: "pub-ba5a046c69974217b0431bca4ba43740.r2.dev" always_nxdomain +local-zone: "pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev" always_nxdomain +local-zone: "pub-c59cf4e950b142949df8861e60b3689d.r2.dev" always_nxdomain +local-zone: "pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev" always_nxdomain +local-zone: "pub-e5855431d98545b38408f52af50ab8a1.r2.dev" always_nxdomain +local-zone: "pub-ff0271d87324424a9aec83337e844a54.r2.dev" always_nxdomain +local-zone: "puertaselectricasprincipal.netlify.app" always_nxdomain +local-zone: "qaffixledger.com" always_nxdomain +local-zone: "qbstdfda.com" always_nxdomain +local-zone: "qpownthenewyhadvanceweb.weebly.com" always_nxdomain +local-zone: "raj-tiwarii.github.io" always_nxdomain +local-zone: "restrict-policy-nonadherence.vercel.app" always_nxdomain +local-zone: "reviewboss.github.io" always_nxdomain +local-zone: "rfgxg.top" always_nxdomain +local-zone: "riaayaoman.com" always_nxdomain +local-zone: "roadmap.binarydesignhub.com" always_nxdomain +local-zone: "robinhooldloegins.gitbook.io" always_nxdomain +local-zone: "rouzhda03.kambizmedia.workers.dev" always_nxdomain +local-zone: "rsjxzl.com" always_nxdomain +local-zone: "rtyuiuytgf.weebly.com" always_nxdomain +local-zone: "rubinhuud____llginnh.godaddysites.com" always_nxdomain +local-zone: "rudra-choudhary.github.io" always_nxdomain +local-zone: "s.team-s22.com" always_nxdomain +local-zone: "sadekk.com" always_nxdomain +local-zone: "sajsa.icu" always_nxdomain +local-zone: "salarahmad786.github.io" always_nxdomain +local-zone: "santanderpod.fsthosting.com" always_nxdomain +local-zone: "satinnaaoabbs.weebly.com" always_nxdomain +local-zone: "satyarthi.uk" always_nxdomain +local-zone: "scarce-army-wide.on-fleek.app" always_nxdomain +local-zone: "sdfvgbcvb668.weebly.com" always_nxdomain +local-zone: "sea.6e2efhxz.eu.org" always_nxdomain +local-zone: "secrbnsuppotyu9.weebly.com" always_nxdomain +local-zone: "secure-ledger-m-auth.webflow.io" always_nxdomain +local-zone: "server.2rk3.com" always_nxdomain +local-zone: "server.pxs7.com" always_nxdomain +local-zone: "setshinobi.vip" always_nxdomain +local-zone: "sextelegramxxx.pages.dev" always_nxdomain +local-zone: "shareorder711.weebly.com" always_nxdomain +local-zone: "shaw-101342.weeblysite.com" always_nxdomain +local-zone: "shaw-103098.weeblysite.com" always_nxdomain +local-zone: "shaw-106054.weeblysite.com" always_nxdomain +local-zone: "shaw-106665.weeblysite.com" always_nxdomain +local-zone: "shawsyncmailservercommunicationworkspace.weebly.com" always_nxdomain +local-zone: "sherman-relate-rev-baskets.trycloudflare.com" always_nxdomain +local-zone: "shobhit245.github.io" always_nxdomain +local-zone: "shopifysite.cn" always_nxdomain +local-zone: "shoptkoo.com" always_nxdomain +local-zone: "sign-in-att-108611.weebly.com" always_nxdomain +local-zone: "sign-in-att-108611.weeblysite.com" always_nxdomain +local-zone: "simxtrackredirecttszz.pages.dev" always_nxdomain +local-zone: "sjhsjjs82.weebly.com" always_nxdomain +local-zone: "skill-meta.com" always_nxdomain +local-zone: "sky-107842.weeblysite.com" always_nxdomain +local-zone: "smithjamessv328.wixsite.com" always_nxdomain +local-zone: "socx.ly" always_nxdomain +local-zone: "sparq.eu" always_nxdomain +local-zone: "spicyhotcoolsoup.s3.us-east-005.backblazeb2.com" always_nxdomain +local-zone: "spotifyl.vip" always_nxdomain +local-zone: "ssfgsfg.wixsite.com" always_nxdomain +local-zone: "sss.k999955.workers.dev" always_nxdomain +local-zone: "stonemartin1001.wixsite.com" always_nxdomain +local-zone: "stringroll.com" always_nxdomain +local-zone: "sukienffvip.doiqua-garena.io.vn" always_nxdomain +local-zone: "supportsecurity981.tempisite.com" always_nxdomain +local-zone: "talktalkserver897.weebly.com" always_nxdomain +local-zone: "tareq088.github.io" always_nxdomain +local-zone: "tbsl.by-on28.my" always_nxdomain +local-zone: "tcaconnect.ac-page.com" always_nxdomain +local-zone: "tejlksdoisd.com" always_nxdomain +local-zone: "telegcm.me" always_nxdomain +local-zone: "telegramjessica.pages.dev" always_nxdomain +local-zone: "telegrampx.com" always_nxdomain +local-zone: "telegramsexgroups.pages.dev" always_nxdomain +local-zone: "telezelm-ivee.icu" always_nxdomain +local-zone: "telgramsignal4.sg-host.com" always_nxdomain +local-zone: "telstra-102379.weeblysite.com" always_nxdomain +local-zone: "telstra-104033.weeblysite.com" always_nxdomain +local-zone: "telstra-104394.square.site" always_nxdomain +local-zone: "telstra-106968.weeblysite.com" always_nxdomain +local-zone: "test1.workersdev40050.workers.dev" always_nxdomain +local-zone: "tg-logrom.com" always_nxdomain +local-zone: "tktk.tktsk.shop" always_nxdomain +local-zone: "tokecn.im" always_nxdomain +local-zone: "tokeni-1601.vercel.app" always_nxdomain +local-zone: "towrewds.com" always_nxdomain +local-zone: "tpwalllet.com" always_nxdomain +local-zone: "trustwallet-zendesk.com" always_nxdomain +local-zone: "tuviaje10.com" always_nxdomain +local-zone: "tvjbqiyv.guru" always_nxdomain +local-zone: "twcht.twimobie.cc" always_nxdomain +local-zone: "twimobie.cc" always_nxdomain +local-zone: "uedy.pages.dev" always_nxdomain +local-zone: "ultsyncingsolana.pages.dev" always_nxdomain +local-zone: "upheldlog8.godaddysites.com" always_nxdomain +local-zone: "upholdloginorofficialsigin9.godaddysites.com" always_nxdomain +local-zone: "upholld-lligon.godaddysites.com" always_nxdomain +local-zone: "usol.shop" always_nxdomain +local-zone: "usps.com-cgkzkukp.vip" always_nxdomain +local-zone: "usps.com-trackaxd.top" always_nxdomain +local-zone: "usps.com-trackbrs.top" always_nxdomain +local-zone: "usps.com-trackdht.top" always_nxdomain +local-zone: "usps.com-trackgee.top" always_nxdomain +local-zone: "usps.com-trackhsk.top" always_nxdomain +local-zone: "usps.com-trackivo.top" always_nxdomain +local-zone: "usps.com-trackjjx.top" always_nxdomain +local-zone: "usps.com-trackmra.top" always_nxdomain +local-zone: "usps.com-trackmvz.top" always_nxdomain +local-zone: "usps.com-trackuqg.top" always_nxdomain +local-zone: "usps.com-trackvgb.top" always_nxdomain +local-zone: "usps.com-trackwbv.top" always_nxdomain +local-zone: "usps.com-trackyqb.top" always_nxdomain +local-zone: "uspsdana.com" always_nxdomain +local-zone: "uspsdant.com" always_nxdomain +local-zone: "uspsservicetrack.blogspot.co.id" always_nxdomain +local-zone: "uzomadj.shop" always_nxdomain +local-zone: "vedi.154-203-197-141.cprapid.com" always_nxdomain +local-zone: "vgmrm.top" always_nxdomain +local-zone: "vkkvdkdcmm.weebly.com" always_nxdomain +local-zone: "vl1.spaceysen.cn" always_nxdomain +local-zone: "vobroffexagru-4404.vercel.app" always_nxdomain +local-zone: "vrvtn.top" always_nxdomain +local-zone: "w1.5114559.workers.dev" always_nxdomain +local-zone: "waassistance.com" always_nxdomain +local-zone: "wallet-diagnostic.com" always_nxdomain +local-zone: "walletsecured.pages.dev" always_nxdomain +local-zone: "web-lupqrbm0k-uniswap.vercel.app" always_nxdomain +local-zone: "web.tlgrm.app" always_nxdomain +local-zone: "webmailserv3038z.wixsite.com" always_nxdomain +local-zone: "wk.xzte.eu.org" always_nxdomain +local-zone: "wodjrvrisixc.wixsite.com" always_nxdomain +local-zone: "worker-dark-queen-529e.servers5555599.workers.dev" always_nxdomain +local-zone: "worker-hidden-frost-ba39.yoveli7450.workers.dev" always_nxdomain +local-zone: "worker-site.aopages.workers.dev" always_nxdomain +local-zone: "wsa.osmqone.org.cn" always_nxdomain +local-zone: "wwwwwwsasasasasmmmsszz.vercel.app" always_nxdomain +local-zone: "x.tovip.eu.org" always_nxdomain +local-zone: "xhjxkj.cn" always_nxdomain +local-zone: "xixiajiaju.com" always_nxdomain +local-zone: "yahoomailquthorization.weebly.com" always_nxdomain +local-zone: "yungtee3.wixsite.com" always_nxdomain +local-zone: "zagbasamothega.dnsget.org" always_nxdomain +local-zone: "ziraat-kampanyasi-besbintl.xyz" always_nxdomain +local-zone: "zxl.cbbnbbc.nyc.mn" always_nxdomain +local-zone: "zzpov.top" always_nxdomain diff --git a/phishing-filter-unbound.conf.br b/phishing-filter-unbound.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..9724b4a499c5d271e67a4ee6e8a95f3ffd0c9041 GIT binary patch literal 5646 zcmV+p7V+uvcpU>E$DI8`{coywDZnX7{PkTQ;{b!QBDe(8|4l6q-aB+KFX#viAb~Ly zi-NKTSXlit(!Lw5$#|V2rApVToNDi0|C4H^N~u<=6(j{|Ql*!8H@(6_^8#qqFpI6( zie2Dl5vQg!;#&q8g=yaXqn~4oTkZGH->;#rAuT_(?bV-uNkzAQ+Dd;6wf*{|pMNV{`Fgsk&!|D^Dz8o+c_Ikf88+`@jBKLR))$PH5KN=Z;&+%L{*lq5br4p#kQtUsz_OMt{cdpFbSaiM3G^ z76YjncxlVWAO7U&;8XuE-MBstTveDHMD&6N|-2;Xva0ycsAV;dL^)=hE;6#dV@rE*q8#b|8Wc(u5s*$%$U!9!}6` zS{CsJJ!aa^!i5Y}ntiP*3Q?08y!pbCNJ!Nb z^Dyb;2}Lqr{D=qDLaw)Ye@=E3qXa)cBpWf8H3nC@=r*Qwx_}jjK%TIvB|ETLWPv76 z>(0Rn!@#TBx(hi9un{}hq(u-*a*}W$-xs#3&aR|dHcti(MX(y zBa%r^gau2qLPod(>j&qInqa5pWA*d=@i&b5Muj178cCG<^Gj{LA+du-40J#ENa2f=)8NHt2!-qlT?<*`K`=)cGfq{P*AT-P_SW&b4e8r45G z=N?ywtP=TNG7xN9_pE4+mKxGaH4*8^Epho*_WFQ z_v%769Kyvv-!84VQaa8k7{j}v!p$+BFopz;O57mv7rOB-D+RWh>nHTZmfA|Qro}r> z^bkglZ${42LWOy*V_wNEZU-Wahwv@)YgWHAX+!`(=4u$~a* z7U@v+MUIm1hmKq_so2bCl3j(?(~%Eah?zsC4OfOxIoWvYiSGE{)%rpTq9YCNKrVO^ z(pH{*M6*anVR5>2g^)-qjjmDAAWyD29;S9gCuTR-6&kr_R2t=+U%@CbW8#$k{#vWpq`h(=^A zHATl+6QPKn$*2WS$Pk~DXebWLEcj3kz$Zj(P)LOAY_WpIm)qs!x^2fQ9*+9y);Rv- zZmx&p>@Jxanb1fSE95}I1P)W5q34J(ssDs6&(U&0+mMaL4(~-ADph3 zK_X~v9_Dv-ISM|M?Uia~q8$R&y$#-i$>n76JbGI)Z*ix~mJF%WNk*+lniKUAaicav z1BV9)cQ2RlRvHn{MO0hGyDr-v6XcdriKQV9r8`a^x|E?b9nwOiTZbBXTtC+hzc3&# zrczhi=3TBnv}v0Kqk%_HdRj~0h)9-b77>*LS%O4g7m+!~k*w?lLxNZ-5{U0H#l)-D z!<37szmF%m*flt^<||^MOB9BNqWko193cKRcx&J`6*(P(6gVhSxwnd+GbS)AqS&Ao(5HLxDxE8qaQ^=@XBk zW4D|m3lsEtIt4tg)>!KYU11Ln_5@+3fZF#HDY%+6C7Oi+m&;8yU-D8*7cj}>>snxi zs_^%%u6@4?6(%}>QY`S69@06Y*$V=$hd$The8HYhmx2RGm+ZhfiXB~5QZ4IeeLAKl zEn&x$V(uZyG>L;v^-n0uXrU@avm&mUWIKgN-q zXE?~38`0Kcbs5f0P{fEK+O_)-ue${w=wmJcCfUn*g%qj}#lND12U?roGdx>sE6oza~$+e#+`Nf%du$%4vf5sHxX&|K`Zg%R44H415%o8^D(UV}srklSHLZ zRZ~;ddAppe!FFE*AD{M84N5WLfeVd$t$c%nM$$0gQuJ+zq8}{ah^8c!u)0i%85vh! zMWSZxey9?bKU5>QXSqDZ?qwPWQ_&+I>r>ITOsZFDeLFno8EL_3at#WO(c54OYuJ(Y zO1J#@!-i#nsHPRnt6*~|B%g^^`p6G4t78IYDxrq7l>vF`TMPm2+u^dKqqz&cn!b8^ zP~DroBDm`nl#_{WwMnSqF-ZJNaQrO^gtVzRFp^;&M0k=HfmCxErQdn@1R_>)WvP0yZRKkTp|n*lo!n z#(oD=awlvWnWqP~ZgZNZVw-+M(;L@15Q zSt{a_!=1yvqs^U2HO>*N6w+q$hQ}Gota*JNhIcm{2Q{p~UF+sV2*ue5?~bLWMQ2aU zidc{qs_TQcRieZ!CN21Ne1~SBqF}d}mnEcBX-}{gDbPG-FEpg!*{of&v135rqfH|y z&D)1JhP5XuDK8~#auq=e;w9SQ?eS>#2x(RIHm#}9rL{xJ_Gl3;t*vI1?J*DaVdZ_> zC=D3hadklpt;uR)Jhq?sP*4ggs>6(TA&rD+aC0RzeRZ6*3yog0 zj`OVcB)o_;vb1C*j1wlJ=|WRWhP*5>`QCzy&qx?k%GY4yCEuPIC?MHXraL85t4&}L zYg#HcV%nFj4GG4Hv8eS9Kq{BdYVFFH-k-Al5OXhGY7TA6w1>m)Dk07kMVewUIHd zKNDjvi&cf$LaEvDVkNu=sxBdDgkL;p?}r$|+DHnW3e?J~Y@b2(L!x0MU_I`swn*`I z4RGSJge86NQTp1wC&@dtQq>yi@m%@nh73Y;<? z8Tn`iF^u2=1PVQau%jAAGoX;h`q&!QN+6v9Bo@W85V35Yi ztwrKP<>>XS92&;Cki)Rmkhdd9HlRW`%V}#|N@}b9G!9}wfnqRjRN5*h6i!BS*cz5* z;J8uJ%|h@=nR%QiApwwEsay#g*TmSw27_uEr5I-h<2W$GtRJ*=d{C#4af4LGqfurM zS~fA2Ny!x(JSt{eXXDb+YOrEvAW@8NGJ^-lB_~a(dR@u&pUcEv4Y2o3#|ua4iPy zB?B)9FdD|~D|$b$X>@wxOb8}m2DF;LNP}7kke6Lp8r&<=BPCd<&ZR_g25$2O@59X! z$4;&Ve@$)9I|yzc`7-=Dl<<01KSUta6GL^Vroe}^a6t)yo&;Iq?hA@mjA$&Zp26*KP!kfA$3>Fi+Xn|d$%M4#99_() zjwpyd`H3a>cXcpuy1{P3>tRXMQ|eMb_sfkeS7}cV{b`E^4KKZH{k^;Y`@jGDzZm5P zfv)`CiKV*&#ICu!m9ZhDnt=ky6?Re?yXIcO;kE@H^;5xoO-U6Z6j*m~la@oX>ON&s za#)V+sIN`iR)FIVR%v~?5z&>kpl4YY5;eHMyE;w6j`Vf;>-6R`n6_R8WUoNq&$LYfqn(J7jx7B5UM3F;@U3QE=vltvZgy zv~_$|Hl7}Vxb(+eC)T`xEo41O9Dsc{bV!s9?Du^WZp4`aancsoG>(XKR=7N0XegKg zJokK<^>$E$6gn#>+V=Y?2#!0zkzWO@W+EwMrnhB*hzE(?FX2n|WWlN>&Hu+`L2 zL3Pb$4UGvo${bqr5j+NlO#oxJE$8eQ9$ZYPH{#mTS-}gbCnxMTZ>e3J5hm2?`*wg* zeb)NW<>=p{?E|v#KX&n#q(`&Gx4837OvkOe8E0z zZf-bPRc!KAPJ1N|BN;K3B+A3-BfMzl+Psh4f`8(8CRz1M^-I~^TIuG~H880XO&oAi zkEV%@!!V}Fnj#*!3q=Ebt-b|J-k;&1E{AUivVa|AIvO%Pdn0x2N2V(2LVIRC@;AX< zD14`*SX6pemAJw*DEJ+;o}y-Iq~;+xF-`ZDcvG|BPSplWKG6B9IDX<*T@KYjq>Q-O z-MYb?J|+5Kt-)$-n6Qx?caC}r>=kcC!Qg6AJKp!SB%FxLP^V!`46H9@h=SIItcF`x zpS{`&_^Z%xnooj{R16--PCmuOXW=yMq>o6|>|o z{#oI+wT-r|)y+hr*p@f6iH1F_odV%g3!72v|VA(CZPJapwKaObQ(`~k8K$Vve<-jgfzJD zet26>H0DJU&R##(4DE%Ki}HaRAXZDq;OFSd8y$%;EIGw6a?P>9JG~xJ7EA21y<6Xo zRl+@OTj#xiw&$yF|1SETi_!NoXC%)z zE#~??y1S6zt!Ren2g%PVQe>n?b>98WJGf8Re9lgEo^8{f%U<>u1)bY=y3N^rUz~bp z94Yxd=2J1zv-X+IV5lg(VJV#mF?a+^dzQ1Mr?OommE$O+bivej0n{35W4dFDZcMQI zU4SKV2!pY3l+P86n}KGd3k`|=_!hGd8|f+33l7AA03m}Gm$HX9nJiiHf$NtLli}Lv z{WjzgD(%YdQ_d1u67zH-3@SViw}2lxc|^eQFZg5i3fuTvU9qmOJ)PfJ78`&nCGSPWFyb6ar%>QY^>;edMc oa>xcAp(+bC5QEi()S~0D>3Z)-tue_MOVeZNj>(tvzDJ%60Vq%4G5`Po literal 0 HcmV?d00001 diff --git a/phishing-filter-unbound.conf.gz b/phishing-filter-unbound.conf.gz new file mode 100644 index 0000000000000000000000000000000000000000..498ae75a1abbb18ecdc76daf3cf872a859a3191f GIT binary patch literal 5866 zcmVlVlDtT=<}X?Hv&esD+5h1G|NCo^7TnK|{DYI@ zCu_;F6>Fi~ITG$AA(Lnldy0n2Fkng+xf@!Twmjg!=l7 z=>L=qwEGVDH}wg{N&efcmIX1*0{R>l@c;UObB*iQT+*`my$|LHBFepkBK8_ldDZPKyy|pSuPbgQDP-p(pIE1iU)7fl$}m@ zV<)gNhf5TG#bJik8pO$$lOAGJq~Jxm+@xPVCe0;4g5C;Cj%dRpO2J?=rOZT>hPE!- zqFPWd*XN+rh}s}?%uZ&4KYg75JrcKaxuhDrlH!OtgLz&z$>vk(mtzl`N=tCLgMv+P zl{;spJsOyCPU84gZe#|{<-Cvsz>2a=--m{YF~7xZ8x4&NmaJMH#Ks@vvH*VCj8w!+ z)Z1b(4j+khZpA~rF^z&m^6PL#7Aw=du96}vle}+}yvkFySh584^)_vY`OQ#mdkAWhV=Zd7nA*5D~)9J%3F&W9`=(ww(appt0Uk%Hba zNbi$8%ges~ig>Y0pSS{Z*mrPkTQ~SmRcBr5o-5|$VWx0nB1`t#htkuwB%OfBXgg3 z?{^@4M$-QUzp>}lkBJ-6p%x>xPl&t2MsTE;?rv)q%LZaRE)5sYoJKV zhA@$FPI=oVS(eNIZ#J+;wJviyNjs$|o{~NyWzw={jK#=O)=H_kf&0G43?yQ*AVGNVEQR1iw7ZA-b+S#HHFISf3Sg~Ns?5Lt*B?_;b9wK^PnD;9^K0h z4&b1E=4+woHu+{PilxxBc|E_gsdFth&Q)Fbij{;<AF&xa+3y3F_Saj;L*_VBP%3_!wn!ahXerq9N z*RgHea;n;e+ozF>-}bd2YJ3wmNYlQ(d9@ZdU7K16;xswxV2d1&C~LR2I~EhCAKNEAZh=gSy(1>cw55jnE%qJqk( z2f@qef`=-?CQjV>uS?x{*>s@F1q8YR>Lh+0EBOFPzw_lWJ3R1(XhtST?W!-KE48rB z>pTPJMkZCAS2qsCvDI;ZMD$arGw%(3B9&~t8hR4fvbo7_PFU03Wi-@3#2BAa>52s# zrgHa1Lqs5yizB)qY*>Vc9B^P=o-^?0mjO#XtSJST4p?{ zawroD1xbp&ETAS;2D}bgy3Dd2?D`m=9?KQ1YDIjSW+W7n&Zq1!m%@Vrd!#O=5ye1P zNPu7Q2FgV8S&%2EGbLEUy^a(KXi+z~mrQV=hSb}GDYJ5+LJ1Y2&k?`E!qlgq{4{2`GYZvi%?9zJj>Myc5qX=9z^0-r zQly-VjC5c&8rJ zpp3sOIzlrm%Bj6N>Y{0HDD)Ss&AtJ`BDc@_cpy)Sz{>GmH+@mvu)$DqledM?D`apB z=m!(kSLB8zpWzg3xyv!MV&wvWso7j3Lw6?>?Z(RYd0^+GIn1QdhmMo1VU{3iN)alg zMmh-88r*7({43EzQu8r7%) z%^aFUG(vTV`f9Nxfz{ndg-1$6#p0AMJ(m&Nniio4^Y=&4ko5EBw#YDA~V)(;gLK^1@bbqfe{(-e6rw(DHMLIp~MUu z&lCh$J(#fdtAP@Rw5twVb)_A}E@6FGQ&!z-yF1ZSAeGS0V@C22jw@R8Ap|)=>m0{91?DeYktZ{fwIMuHohgYndqmIP7!}jL#IfFDs&(MkB^}8uIhi$)cd|q{ z`J}GOrtLx%N(nbM_Asp(oL%ocToP`yWF+y&uug7V=U3Q};unJlOp~kBTVymFfCN2n zF+6;L;N_n*5YoYL!ueUP#~jlzKE`9cp`}62pf!?esl)S3YRq)qbRUdD(q#=#tl6=e zMcO-`kLIIIZ@~Bm7_dYB2|OxZUTfAR&y#JF3x;{04ALqWC^(hj5{AOnqg-dO>#~5r zK#bf!V&Rc!>5x^$B-jx+LDClN9sfK1`Z$ebTFh#1cucs&W0KP#li64up52C7r=YBF zPJ>+eNX{}U5mimoSzr_fn^i@9Z_0&Xxgt3-Xe@WFz`at!Cc2&tpp@s;vsoJ_hPo6a zC0I~MaiFWj=o-{Y7DeK8ji~`k&pg`EM|h8T3`peCx-PP;tNZTG&IiUv`qCnvkB<*K z@`x_rIA!5tT6_<6oaU#AnHb$HJliYtn~%xAfJKpg57-vvw(CxT=xom zD&|>%H0uu5AMv3p(c!{zof_(1IU6ubIcPZJ#)g0sg6Xh6&&USWq;B&51{mu|Y9?4VEc`>pG+EY%`e#8lV}?ug z257>ZDe|6?_3CKCsZ5g~?GN$dft0}|$Y-jyt8Vn_W)e&QBRtB9Hl$sA-8mBu^q{j% zrM@0Iu3eEwJ4NujPqXN5^!39x5KivKG8(Di`AjALa`;T%D^k_?X2y&p6(}I1!qw2h zbIf7!Cj^?0;<4PgdpQH9a&)549(phlDBHa0%e*SuCUOGge&lsSDF~Uv-4SWfl#pQF z3`K~C**bcLvKvMS$GNbZLX*bd07{|-$cF?TS`LcrY$0sfZq%N$R78)T*SrP(ksFD* z#y3lAsPt~|@pfw1(r58!VUWuSf`J%DF1xDh?v&Is2Hx=I6Phd<&J9Cd=_J!}Nf)q0 zvN7f{^?W43K+fCSO%-nW_T|kBuk-Qiof$dk^?ZHe0-?!vB-%Jgs=BIDe=NXlcw^&w zkD+c9O1=_d4f1q!%^SDlapW7UNsv|ly3^eEH*Xhf*puI%L?(Gslu1$Do&qW0XLJp6 zQ1hB3SI1`*)Mk$lG+OxM%szFznP^R&W127krw0c84^F^6+R`WmsFzeDBULKWXZ)!zZN-vPzE0EuUVrF&7{xjTcFaPN(ZU)G6!E75V1 z&pyNFRf+iMzNDX?AJ9xiltF(0xSN21+yp$HHvwwD2{869;J68RZZ`oN+y(fXfPK9Q zc+oh31ADgO{43@~<pr&_|Br#ktD<*dGZ|8%54KVn^WJl~_L1cYVIp4dpEpI2(2)(W zNQ|QMi(SW6h_f7b?yRW0Jf0*hD^0ShD;oin=7Lp?V5A})D~cLK%L`I=sV!op$C>gn zr&*Qd$cae>Ro9b>TWUQoDAW}dylb;OFN>yV0JYba@iUcK-(*>hr7D4{ zDD$phjCXz0gxBzScSEMCA+_k5vg&Xqqx5l-Nw(<)E(5L6k8*mSJn zRRb;U${TuWx`ObMHZ||7s%-K2^S-TWLZDohj zOTija0{`Dqj&{pc6!t`V)T-5|*%Jg6MQH&)pMHbw+`ao_kKt~oGo6`}AdnA|kc8EF ziod1Lwn*wU<){~mG(hg4N>K?g)>e-yFIfduoz=KS1!E}AWdLUau$+mkexy&9izchf zB7H(pJUK%~&ocT*3<^l{vMFmMeul#(Ich9acnpv!@+4%WvUrv`xWJ({YZIkSY`uh3E@;u9-2GLXxWK2=zITU2M zL+b~uP@-`L9Z35!a&9D^<^fTGH=q-_f5PE}gZ0g<<1MF@puAst^F=@C@E<+!)u-0_ z8$GheVPJ@y+`vdl_9gv2BJPFz>CQ0g8F(*@@Hx!n^WTV7ij8SY@9SXNZtn;-sF45% z_!LIU4rt&LykaJ2^uD?9F{W={pIc1C>9tl|Y2i~5>7hxZm$T=PJmL{1CeO)-C<9zP zV~72uL?Vql7P%a*3&@@^i(l8W@W1e-l)p3RLu0*W;Rd3n*9-4`P=iWhZ~em**^Cl0 zu)xJQk^l#^x$jHYEGRJ0Pk<&M{SMmt)+sX==B0VuTIVxuX-z+@_w#1}4U7fEvJmY6 z<9Zn{ch~l|0hGrG%ydNlB0ko0^vVCfmr%>wwPVf7%3rmQl*tK*OOc7TM}Lu&5@SVU z*nIUsLT;@?9@Q*HMBjVHDe|QXK0&lqdLxic7+=3A?UMxUdUxm}c18Ijq6bm^5n`DX`JW+{Wf6{OkGb*D zw-4cbsBf9SWk+7mUKI!-yC%$Z-GeJ|0zXzX#O#P<4lZ-Fy=J|1SzgdJOs`*PYJ65d z6M)^QDd`nI-CKSd-URW{f8kPTB&Yp~EBWq8zADVw^Q1HX(A#0KRTePeQ7RSrOH2~* z;j<~LU?G{1qytRC+VzoD0Rbkfn>|){Ih4q@=8bCg77PuuUc1I;!TY2p`-m4C39v5m zWs+Cou!0jkWy;i0F(dmaiY~KlhwqSeqX9V9_$orup{>Ku$rljKX_BNN&vQNr&uCIV z7Q2j6%x#MckGYob1)>go4J68JyxvOUr>)<0Oi6dtRT>oAbf8B6{n21m9grsBaFXw& zs>m9~F{@&BM0!T1o$k2MHPGmJMxl+Ni9Y=X?&l;1Tnp}^cSmF!%BmO-hhh$1K);>)=m;o{Xh9Rc=`&477`6 zw+`$rk2UTVb1MN`)4SMhazgW2+^2riAs4~v*-ndc-h}k`uv)=PS1ik`7d|A=RiREZ zVqU=n^tiRT5)ULO>#H2=KN?E$NGaLrIT#z4OkwuLzU(LetQ*g98D9ho;TO(j{J~DC z)A=_JGd389_bwQx6CxO=N6`tzk*f~I8HPO=XEG3uv!1~?%exE4SvwYtv#~W8=Xg_} z!@bN?MCAf?M9^>9$2FJVZ;!IDagpkp#FInezEb_F#P9lzyJK*_Xq{+ub=V9!Ts|W z$IAZrt0JZ*d*=i7jyPb!Uq5SWM`z4gLW^LKIB17>K|xZ^?CU6&_;1($_WKXJTGtt* z|G0&&`|bB1icssXA6y_PeBSzRewNVIo}U()jrO_iR`T+|3qS4jZ=nI+zt?Yn_`{e^ ztc{wm7)Z^)Lt8%n#AVA%_Tjfb{DH}FRALm=+9VTKk}KI-a5UEEcKtA?c$(xejxr-v zGmgl%N`KnM;R&%nXDOB7e5P;(`arHPInT4V^b93_X`uIg-_-hqWdJ}=HUfR~;q-ey zx8ez!GL^6;U_n#Jm82Jld$VC zB;ptJm?^Q?gbWcvz;v<#cf+*&DY<{EGQ^lShzTdjCnkG!#h0-UbUv*zoeMsX=hL)_|q2oLCtZip;KgGr zN;X(pC7<@%a!;8z7-=Q=h{R|O%(UUq*2p-Fe4hGL;fxV*@t6|h8%~o{WE_MXG#y!F z`cVLQseW0zr>eD*V^;bOAyz>M6H0_$0#b6mIJ1y*%Xv3i?fi_3CBd61EQy4Kq5CsT zI%5>GT8g|WgF^eYHt)}mU=*W-ogI?h6fThkcSIl%nJF1wIcrE0Hr68;*eo(9856W= zSb>J0y4GFD@T{(Cw05DqCSAD7YV@`e(M3A_j57k2rFWiKS`b^~srd`@@iJLt}m(4VTv1x4I0MF~$^-ThH=4 zf!_)SjQ-kEe?P~W@12S7D%Hkj89z#yc(}|SPPPY!%f_d69eZjj&~W%lecZ?|tYKHo z{EXZSTdzm#aDL9bs7)T%86u**Y_j>ePVu;}&uzb!bP8-I2(kSV3k&98@?p<&e^~rH zQO5Hq(mQipi9MhDyJchSwjN1{MWrij!Q6$0#*ntBS+_YO1MxnY+-<{mQE2xizC~K= zw=5O$Hf?vEMRRUVb;b^sjQW0xjGt$McHM$l(@Q%>-q$??C)eAqx#1gp)Y-% zripK2I$ZhWaJ2L44C4BLT|%ComcLUGlF2N+hk9n%PK#GOoT%^Jyblw;?8D85dvzfj z4&mbOPnT9)DII4NjN!MT!c8-t%%ynxA~h)I**8w~bz+;jzLQEw-JN_`)8ZYMm2h&R zIjBF=N@rLMkePLZ<-gQ|Czs=)1h*iWFL%86nt>jWENnjn|0}*l* zmG@e0uddyK{-jOK&w1NIgYB<4JU5psjd0~FJ)YEJ+S{)zR5!g=rkt+h0tVj$QWQEx z&A<14`TpLotE67Pw0c)f+EiI;TSyC6a+9}y5X%QP4WlDmSx3Z(oET(4*vuJ95Cb~N zZ=?AzTv+;h{WNBzOe_ACS`hy{)JE-{%i$d(mYdcoOehwUAT@kj>pJU+P^%CEX)JP- z{JrVOC6kKHd=`1*YCRqKpoN$@m}|H)1iaMXttXluzpV9z6hucFd;_`QPDoq1PqZmV zA&ObU!7GGBT4{91Wv6dlbG#P6<(zm_k1I5C0oO#Gg3dIfnyb4EM`&;GYx^35K*oJyWCtfMkY_8YQRbMhS zilS{PR8Li;Y~ugJ9I1l~Y@bz^||y z98{*7Ls2bBPGDNR6eWZXX(7_By~q#O&vnBO0H|My5>vH#S5p@^Z66p7+(hoaAeI_#6p*->$@-A zIjwkAr?0}}#EGUJ0~V?(&4+4`R{00#ocF4m3hX~Hel5mamg!W+gCh6J2$v=bO8m;7 zjtBMl;2qYFIKWPLSN%I&xL@G<_S=Q|N*xEc+#~FG;*vHLs4{rKg=WpQ?Sn9LpRi)y zAt9d!mTmG_(vr)Uf0twd7plcwgyv=SSHS)*nG4;E?y8YKEFsl~2^yk?qvAm12dsJs zPYsWOdiK)yu@W@@n9EDQI+{0M`5S`fVsbJ&vWEhTGSR_qfE;i=sLCzpIPC<}Os2r% zSq;|uL08y=gFQiD5P)zqk%Fs9i+p1maJk(3=SyB{>B=O3d|eByfFpC?>e}~jLGBY> zDwuh$yWp1o)sSC5r(g5F9~$CmdMZy)Y{Rvr^0;zCjPJzXQ+o=RwaC0aOqLYcHo+?L z$-mC0^pMVOsV)d8EPjd>bV1T5W9a~-OLpL#5X?rmPs{pV?~aqGCG40|%snK%Auevj zx(A!h`(i5Dk&-V+q;|8bhdG+PX=z_D_sXzf6yrJcdzRdfaU|y%4zlJ(3|?}TDyRwC z^&LgK(k8A_7WhCPa|ysj&+`f?R3D0YMF%%DDq8OHPX9^YR@h8`Tto*Jj7%oPkS2yS z?Dg_iqqW{o@6O#C=Ywf?#0zQY?sIKe2Ek+=0}l%ogDYqtldMqEQd6IWx>0;oSJf|) zd!Vo%3eZdM*a$gy7&{yh{MaEy=wmO?R(#gTGIdB)O0%#tIqMRKvRJp8Z}K9B>-sLM zoAasbHdw!S=CAJSwtw<&lig|QuN_^+o~Gs<^>oeU<0L`~Wo!^MF^Q(eI89Ae=k0Q? z1_AvV_;|O6no&6tVUEstot6d%jih0~r5G{LYzJc>T0M!9QfErcrM>iyyX=+wp-KY1 zsog$jxjeR6N=B>2RNCqy_opUl<&tUxO*EVMp34-Lf@@4a)-2 zRAk{XQFMjmGjZ{aSp@4(`Y z4g-?tRiHk&V%?1NZj`bV<|ooQt3@L|u3)FM$&7}T`WJwW35E`~)*_UU`-P?5B>KM_ z%d}7v`vaE%Tdj|(zTr0aSE2QwC?NNZkRUm4hT5(Ww_r=$=8escuhanr0Jo*kpJSF0 zk~=Z(kX^srOTwFcRUK>q=;ywyo2#xqhV`y1w6-C_#HPp4>kc)nY^r*oo)%K`nk2zE zZqNdn7$FqH0tX=DAeA>4cWT!+OpjfJPdqhk*m?oCAdaFRls4?P%l1Eox?YWeMg%+ zk!qZw#|vpQdBfujg)Ls2hv8ih$3cBk7glET6)99HKvmzEWcJX?nZIvi7 zi%E+~9o+%laS3*dd09eARRRR(m_X(>d!Zqv)v$KWMhXG)BKWqX6&dY2goIe)%EU+s zoBoE!Cm@s^o*wT85Cri7iaaZuRs3zJ*@`!ILn;;Z5xT>+_p=xIehjcVqj zV3XRTrUfE=ORi&sT{-W6$T2Uyb_rZXR^3Y_3qBED+wsnp)@?>$sX;~rNFKvGpc9|N zig4Kj>~YF>x7b63v>N;+mnn7$)ljmBSvgB<$6B&I<^dH-UWYbz!03*v3tDI`YNA(H zJMp2Q_K>R~_j@;6pzA>oED-D(?&(d?jCOpggdMuMGZ$Cwx7UpkmehSk@<6~vZ#

zINPz;1y**@ML9OAlbq40F~zEZKqFaYJD{qu$ZtsGL$Um zIhiEOgy<$w9WL((vLA)MgrDXo9N7U#;yTQT$V6Y=N_f6-FrDPQ>*ls ziXQ*1k8a2yG*=#t8NC(CTM(cvV-o%37;sGsE69JLZpg?-Gl*dX49OW6AuR?KcMDDa<0q_me0cgH?sD~ zN|4zxgHjmp^fZhkXNoEGXeNI7?0lHjFi12AC>S3#v)1WZDR11eoIc`r5(=c(iVF=W zz@p)D9^J^)zy?oUuG?>9+{o3a+@P({-0FE2fC>g_oZRL|yrUewo|QwxI2Uplwg&Nb z1jz->iKV2r+E3#k1{5d;<3^>eazf!`G>0vrGy}(tl5Q4)Ps+^WJP8Sa+)CvN znphKK6B`VwX_R7|8I0q=46}aF((yrE-op)28IMMpL1@{Oag&lOHh5IbHhEHMX*F0e zGmt1oH<`hMW0La;K+XP$Nu?+5tpbkD%wn_(#>vZJ9!KXb$dN9S3iJpdjPaUlp^OGS zvsp_gjjDg_Gg(C_# z7@?GO!s&Td#t%Y{%IR5q!?vW6T1vr3H)|=R;aUvZO9oyJU^I-|r}Tbc)9CcXnGj6C z3}`if@d33EAa9prY4A5R^^{kcTB`!4HFQKmYaTf?*=5Y{A-^Inc-OXa0IT$E^62HTA zs8^S>;CR^I;9*4xwt0N_PdR~Gv7l|8W7Hu*E!CJ@Yke#F<-14)rV;>duwk3G z(C@YwBWUU6>EFBizyJHc|BF%OVSSx@N0#mi5WD8?)|o+J+)Y8H!MzTBsW}DW54KM# z6XWZs;Beb+s7Hq&uy~yWUgI#yaemo(5L&+kjD8TP$SB8&2qpyq!4aYdU`}#-2twJhD+c zT?kYmL%)6>gH29FTTBWGs;=FA&Zx`wfrj|q~10J1&#c>za5zZkx%X;^k`_KQVmND7|hdKiwNx;w_CuGy@iF(Es5*P4&u zOI58@;_b^~%P4n9@3p?)RkPdnEyPH)v;|V-+d@17O?$>3 z+8Q-mQ$0D;liX*o*?wuf|Jmh$@}U;)e)S0UUUQ2YmaC1+R5|UH#J9@C%Mx7!#)$Bs z8Ew2Dxdng6uIO9!OZ7|P^jhf_Np4L#DPW8*37W2M9ELGBx!FJ={Ft5knfewmd4Gn3 zx*R?o$O0~uE;M9%(kTgXMAqeFX!oo~-2+4s!*|jF%hI#q;R0w-@H1$=kImFb%}sJ* zn(nQ1L$eSpt%4;V?Chrj-*Kxhhw75uA})4!mXWxkFK?_hSW|`sSo-*8oKs-0__cvr zteGr*-d#yJ5d{RTVax`6C+mxX)`hIjY?s~`wH5HmPj#Ay0hcd^n6%*+M|>91aKk>z zS92^tcf;C7vc2@KCNT_hAmgBIAu%r{@1IlLwzko>wYoXZ;OX*QZK7dMP*WgU7#`_+ zPRmy*?nF%54&SX35wSh1bkRRrdCr7qUpFwNuLn^;*E}Wde49_WPrCHd&{KEWwb6Ek zJ)3}@5j;swIyxJc+G88-K*w86j*v)~_9ME!`j{6jYa9JoGpG?#E~c!>L1y+jo(3wYvaInnPN!Kx86f!Eug*%Y}x-ete4A zhmG_U>IFwNK*2Lsi%Z!PB~iR4K5+fWDfL|&{XPw+RI$6VdzZ6>8oo9M#F9*wEK$gk zCbuAx%}8YsTICmuGcHL6WbqQP4mZ_!8sIa%^NBG`VgwU+$6~cX#w0H|%>E*m=DL4!LhP{UOu4>fE8Oe*zE?4wqoIJgfV5Wt&z`>P z`@6mKpTckW26zW}ca&oUIoxgZ3Gv|RCjQ+$Ee+AiG~j{7K!yDru|XH0F4YBFAxWr~ mMmC5!no_8N7_26w7K6j~{rN^}jY-B>nr=(?dR2O!BeO5n`<*=i literal 0 HcmV?d00001 diff --git a/phishing-filter-vivaldi.txt.gz b/phishing-filter-vivaldi.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..e50b14a15aa482344068d0578dd0efc08f2b1196 GIT binary patch literal 6176 zcmV+*7~kg~iwFP!000021GHL8kLx;e-se~JAX!X+NJpaHcNru=7PAPFnJlv7qbSj$ zNSV~bGUmspX#3n;TbBDyfHcnOwpGOUw@o$`d`w)c?QF`VB_EH03&U&!)}^J|I3dbE%r}Y%OpIRR$&UXZET0E36Dp7*P0KvZW6pp3I4cYMXJGZArx%G# zn%AdQk)&zyVx%TnaH5azzXdG6l{Q6D=2_OnbXD<{zFKUWM)G)3Pot&rhCeZvPY>}Y zUOS~h1}|N<>ywmoJDbTzgW}G5D<_;myaF)2z4rN2H%_F)g$Rm%9!Kk@CoLtYvApYP zgnr(9+&_1y95XE9+8T&F#TA)dyZ|nyj_LS3ot{yr(8~*n2kZr|w9IM~uh#Y8b{?ae zDkETk*;!Ol7q2GR%|XM3)~SsjfuiiQRDoHDqucvMp;|-h60L1dwSlV0Dw2;l@D~?o z-QjTQuJQ73>YZAP}m_w z*D{L_!%lx~=Y>3hvU`KR)3A-sqBk+Tk3z>!82-U&!7Ua~@K{pRVquDhpH_6`(ix%Os0UB|_41IaI4 zQTBu~=3JGjl?`ekgA&m8Sv9TWV5U;VYLq^fx{q!jUP|u6u*|t%ulYci^J3ewFUEDj zA`QjL4Y${I$*bn&-dEa7z>$NpU6D>vkskeAR_sMpsC|#?_GPdAszM zG2VBh$@8`}t9lp~E3g>jqkplARYuYLw2)%p6P#QLd}#G4H=Vz@)&p#88pKRATl%S- z2^ooD<>mbCaBqfrH{=DGa-LDq({p7s~wCY_osoKMy4+0oUtBv2<}OiQMG2L^IY(J zHD+9NP6%8kDB+V;CL^lHjvnko1_9$u*)HH=YO;EJ_qeF{Td6ax6xn;6#5Co-p#JvP z$G&?;)lB;!#>l}D9$0Wnv=B9`7*B&oFOJl3+C%JS^Q<>B2lFrw0|;SNloyEB4<_#U z?8UUbf_&!fb;00>6`!A;-%4{ zMaZ>TlC0q7Q+J*az1)8fWb60tY>Ibi$5aGbYkm-jkZdSV2eiF4TBuaX8~k zM&L?Lmw-UVDkUE<*|nTv51St zFpnrX9n9GZ46GZ5_lhF+39S!T(T2%*h;AUQE}I0YD4QmXPc_&PQB(0<(>0K}DZ&6$ z$YyW+B~F_<%FC#3&}M!_KkzFiqb+d)T$5)98#`#Bed;1jf9-^aP7Xre8ZqOJWlF19 zJ|{VDodfGf7fxMl%na6m82pop149Lv`IZC;De9ws+%`@aB-quj(|#TLjNO?@Zv`o< zqv`$BsgmzB5K1;lbD$++DiOt9i?Sj4(UKudrY(k^yTQgESyQGm&k3AGov<7-PHI_U zjbyZ}i4bKio4A{Xr`Qb;mtGwNg2>^pCpEQp&m8e%bl=Jt7m>&<)wFGBc8^-qZR6!fp`R4LEbDdlj%qM5Fyq;Zs zxJ@M{Z-ea4Agc{-c|Yk8;9gR7#X5v}c$wWiys48?b5&|+kE7YR^bPOutAw{X2`7VUrr-htFg8@D%=SH>-r?zd>wGtt{={J*JMEA z`2#7Yg(rd&A}pNIW$C9w-iH<;$?wprNb#MPwwP$Esq{kfcInvBciHeF*z+4f!# z`1!MBqGPP139taT{RPJD$}ZGBZxQ6&4=72QH({h9<$oCWJeE5^(`^WKdEc%whB?Mv z`z##o*lix6s(nSo-F2qhvS=ivPdQQv5?>f{ln!%Bj48N(GN~|zTB^e}(e?fHgfh}b z0s_%-Tf}zt{3ge;!F$|{+`q8MC#j;BH)4lD6#wj?W4lP(=}dh6R_Eg1s9=7?42@rZ z!mj;X{1mQuhR21JI^rhEVA4RZf>hHO3h#}`;MQ?~@FCnUg|e|bu~2qi!A;vic>aIX zG3CuI^{q-kUBC8tqMHC1>pCglul@-rq7yM@ynA}i2 zeM%4~izdYadZ34+8BXpSMv92bPpAtl-bSvumL5zB&YpH&yYws0*ysw^=*WP<3U@oZId~snpw}4-=>e1{bKnUuqLZib=&Ex7 zOt}~*_alMeWXP(tY_c>bRryXEs~o)?jT+@cIG9%!J7({?~*7@TLfy>qlcu-#1h zKCpr5NDBe81a(p%0(91NkI_FZ(6_5AQJTMyH%*YVz%Lu!fe8$bH|t z0kJTZ6n86hLe+U)AHvK5cV~Dh36~RHf3%1*>s8#1@d%D8-tA6Shb;;&zTM%MdANga zvQJmL!}jxy8`YZm_MXUZ#fC0hWUPlMFY-K|wh<7sBW8OUS3qe}t4oBu6u|(7+R+;e z`1lGA*#oejx8zOp=~mmo8vT0C7o`!&B9edB$69sYm7xb_FTE0ayYDfBjQ@T78#!&a zv{D@S-WcXRHc0X`{(H=>f= zwVLfbM`U}Y?<3UqLwq&U?MUA`8g5Ho-o~&uj8_%pz`*@n@^%zH1m|G6d>z70CH-E7 ze5+D?t5JQcv3pexeSol)WQX?)=*tf;h5TG5j4*`1KDtBY`!V;y<{smFKn7K=Us1}F z)PIt;^po^-{v_4wC#iKGrQ0XzdHEz=;G=Z4flT%Sd(6o26OGk~~SVZqgj`x}iBw%LE@nUN9W~ zL9^G$$g*zGMP*#)>Q}Swnf&BndrgR)@E- z8bKHoIg_HUk~GaoNlK)vtjZ3WWl2*eNr8xsLQb-@CY+19Da-ICuBeZC%S&3wy3Fz# zn_&TB*mWvWQYIt`Z|NR2Vb=G&zNmCIu5%b@PK}MJjPfh=)m*I6vM9j6f@cx?Sr8!MhB&b4B%}eVJ|RW=NTYRRS82&H3BjCQIaPa&U=V;{Rnp; z?p6Z09+7XYmc-8_f`~F)Zd^Bl=oVGe&rneqvsKIEEH5IK#Xdn|kwqCT(liNJ;*&>` zX4F!R1uUXIiEyV-+$abcNr4a-bvw<{g4o8!;xvwNI25N3jR#JrpB8ZlxC(&t8d$0o zg^xTRH}xZoqA-FCSe`y`wOJZP5MS#go;wKKIkHlTU``FP?(-Tgw+#uu00G_dX6;8) z`yxuyf}UbpUW1rT01txPwE{XBKd!kKy9O!}8b>2tl68HJ>yT?86rwI)y(pQRVU?EB z40m;yS_*U8;oc3h2M~)y|5)qikXTA5$%5hA_hv2taTfJYw0AFhB;pK7KyIT(k|BSZ ziBOiHa9NZ~c|-)V23W!PFHdtPfOasr1QESlDKq@&llAc}h60rkoN~d8YtlkYr5Lx0 z0z&r|I#O?)A*eRAC{?p;Cmt&GI@aT=OPeD?j;1f;NdLhP=jOVjy5-$+q!OIG5+kh) zE4Z9D<<`_2(mBb#pPJkQM};Q{uYj_)JwHX83w>+6U0&cn;~?|$3{7zAMG)XtW{DG^ zxpJZ~jvOEqoWcjj(t_bm{eCqxh=C4~XbLz;s5(FpV7YizCQ+fMOb&v&h0?~MeG$R0 z465$|1Q255YbdjV)JVU_uiI#q1FEJ25^1=(9>&o+?;wtYvZ|b+kRd4j+Vx!TZ}4(7 zAs!d4^1537h4`2=PuAKSYW}-S2Cq-Vmse(d#XdiEDpmXUj$ zE%<`|dxdB*l_Z}?@?WsyX<8Y$2@6?KA$C7IYZS{R>GyOX+zOesk$jZQ`P_zfj){~p zF6Z6Zf6xdfO>k%^+sC<;y=Yj}^IW7&l9zaUaKB3y&G_!rT9)M+X76F_!o+nwgTOX~ z3g$iBKf24Y_(&n7On;Y3{5bjxsU(Siky2})8*cobAhY;m|B3N3)@+Z7u?~wNO*S{# z90?r$nh->&7N_$*)KOJ}RJ9JH*s`%JG2r?7?s0!C(X9{{Esh$$hMet6tAvMVP{Jil zqxU8GN&fgrXtA%EP4IFe>u%Xes>v@hadKL1n?+xC!(9qd^1T_)oN``Sl@%=u{N|qV z)_(W7sZ`UbG_-ZKtvPqh4ehyPHQwR$Uhg_wga$gM)bt2b8^Ki~U+{GQdNhE1x!>Mx zHQ@PP37wnx598lb59II;1En1kVY!C|aM+NIoZf(T0N0(LwxKFY{8~GP2%$yRl*QHn z1*JvLIuqH|2fiOzThhk=DaAS6Lyc|C`l7&|xm47z5u6fC_#~>XJALcuJH2r?TeV&@ zq}0}X2PEjN`FU@?G_yG!G`{QQr|I>6(L`~Vtd8h$^}4SW(mCX!?@=RN$enkP_@Qam z;QMh*ik^$m_T}9nQ0B)XHmEOXD6X~qM`&0s8^sc|t-JqI*&Emx@0@yK>RrNafz*eSe1x4L!lKh>UsX0&Ko-n(^oeAw5Hxq-1DZ!KoYW_p5`dN6TYoSkP{ zj!J)Gqc?_-Or7we9;X_bi+g50HRM&VlUt7Rdy(h7(ypHC4o_xwh>Ea09vQXxuSTxT zNoVeN1&7|Ew&PGSgZ#_%7H6Z_P7n~03%Ot8*T9vDWXyiA$Em}4U5fr*RPxO&q^J3} z$sMu#r*$6Hpx#ctvfbLT9gY_CKY{&_g5?z6^esT7x)-38z85GNyBDZXMQ#P^N!$xG z&2lf$N%%!z+U^C$S9vdh0Qg>DCeyvZ`nqg^8WlaN#QV9vdj5&l*_-_H;`tC#Fm6bV zX>(Gb31Q3MW>QaOC%a>xr?#DFOY^R?oM00V+#O4glgyD0d9;Sc|jZZ?cEx9+mx<1?L_1#RRc5oj#Awe~whih^vN*T`7! z#9@X<*p5F`Y(ANN9^aL#no_J-NSrSO{Ey6C#l(31jO?e^r|RA%5bs&M5jEWI%|4a4 zr)$*-EhP+w7t{|o^ALYkJG(pkDFzE{h8ij*&^%MmzpuFhiQWn=@lU9uUH8#?Ny0K@u7q7 yG%crvJ>Lja?GUC&-D`eK4BHk&xrFqDT=MgRa=N&Xf9 literal 0 HcmV?d00001 diff --git a/phishing-filter.tpl b/phishing-filter.tpl new file mode 100644 index 000000000..9725052f6 --- /dev/null +++ b/phishing-filter.tpl @@ -0,0 +1,457 @@ +msFilterList +# Title: Phishing Hosts Blocklist (IE) +# Updated: 2024-12-06T00:21:00Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +: Expires=1 +# +-d 1nvest.bigbantbaz.top +-d 25116414.cc +-d 365365news.com +-d 365f09.com +-d 750115.cc +-d 823pages.pages.dev +-d 95564339.awi.za.com +-d 999fc.vip +-d a.yyyy.cf +-d aaaa.whilefish.xyz +-d accounts-microsoft365.weebly.com +-d accounts.0ffice365.support +-d aidanochka-tabys.kz +-d airbnb-clone-sahinur.vercel.app +-d akbarinewv2.morteza638n.workers.dev +-d alaindemeuron.wixsite.com +-d alexa81o.github.io +-d alienv2ray.pages.dev +-d allegr0llokalne753724pl.art +-d allhrteam.com +-d amazon-clone-by-sudip.netlify.app +-d ammuvicm.work +-d amyr.iran-cyber-net.workers.dev +-d antaidossiersuivamendimpayeerf33.zynekcctv.com +-d anuragrauniyar.github.io +-d appeal-voilation-policy-issues.github.io +-d apple-id.cc +-d apri.154-203-197-141.cprapid.com +-d arvestcreditcard.embarkdigitalonboarding.com +-d asdfjeiod.com +-d ashleyproberts.wixsite.com +-d astounding-trifle-b88a2b.netlify.app +-d att-101397.weeblysite.com +-d att-102641.weeblysite.com +-d att-107756-104508.square.site +-d att-108102.weeblysite.com +-d att-108651.square.site +-d att-mail-101246.weeblysite.com +-d att-mail-105533.weeblysite.com +-d att-mail-109459.weeblysite.com +-d att-servicce-mail.weebly.com +-d att-sign-in-107078.weeblysite.com +-d att-yahoo-mail-105061.weeblysite.com +-d attcom-101415.weeblysite.com +-d attinc-101356.weeblysite.com +-d attmailonlineaccountupdate.weebly.com +-d attnet-100294.weeblysite.com +-d attonlineservicesa.wixstudio.com +-d attonlineservicesa.wixstudio.io +-d attweadminservices.weebly.com +-d auth-sharepoint-asr.vercel.app +-d avertisystems.com +-d b1b5e94d-525f-4cac-86e2-36acf0ddbd77-00-meezcgcj4upm.kirk.replit.dev +-d b35ccc.com +-d b35lll.com +-d b35www.com +-d bafkreielfwknujzpvoym24xh56k2abbrr73iwbmiv2midegk37twpmnt6i.ipfs.flk-ipfs.xyz +-d bafkreif4cswz4mavqvog6k5pwvilee5wcncozwv4zdxfotmwgnv4etva44.ipfs.flk-ipfs.xyz +-d bafkreig2ibp25z2zzyq2lqzl5lvpr5fdbpwn2zqyxkobbckhpn44g6nwi4.ipfs.dweb.link +-d bafybeia4jv25mctejr6ecmglj4nhsxrgseeybtmdu2lbvkt6u22p2nb6xq.ipfs.flk-ipfs.xyz +-d bafybeiachm452t4c3adkaq7opo2j4vlsnzqwvqrqv5wgzpxl3pcqcpkygq.ipfs.dweb.link +-d bafybeicdaibqcinsl5c2zhd7jgycr5pefqe3bann36wpwwqi2gmjnbzb6u.ipfs.dweb.link +-d bafybeifruh7773k47pdrqoiptvwu2alhzacgio7ztox7r4525o5ffasvoa.ipfs.dweb.link +-d bafybeihepd4sjmbjpbix2q3bkemsdiob3aiw3jqu5c4wnnpvl422exte6e.ipfs.dweb.link +-d bbf-alpha.vercel.app +-d bet365t3.com +-d bet938y.com +-d bet958c.com +-d bhngfd3.pages.dev +-d blackdasblacks.shop +-d blsckdagsever.pages.dev +-d bridge-9wdpjmsoa.pancake.run +-d brubreumummeddoi-4514.vercel.app +-d bscusdty.top +-d bsozvycr.icu +-d bt-102368.weeblysite.com +-d bt-106861.weeblysite.com +-d btjfh.weebly.com +-d bussinessaccounthelppage.click +-d bwfujmww.icu +-d bx.sfdsb.icu +-d c.cting365k.cc +-d c302701d-36cd-41e3-be2a-2932e5a40ed5-00-300werujhqt2b.worf.replit.dev +-d can-post.cyou +-d celery.sa.com +-d cen4-six.vercel.app +-d cf-worker-pages-proxy.1352562939.workers.dev +-d cf.13084493.workers.dev +-d cf.iwoai.cc +-d cfcf-8.pages.dev +-d cfr-reed-taxi-wayne.trycloudflare.com +-d chain-trt.online +-d chainsolapprove.pages.dev +-d chat-wa.xyz +-d check282.tempisite.com +-d chore.pink +-d ciftcininbankasiziraatbankasi.com +-d claudiorojas.cl +-d clivenicoll44.wixsite.com +-d cloudflare-workers-pages-vless-a2j.pages.dev +-d codt.digitasianetwork.workers.dev +-d coinbase-com-18690.subttrepimop1005.workers.dev +-d coinbasewallet-verification.198-46-89-184.cprapid.com +-d company0rder943.weebly.com +-d completar-la-verificacion.vercel.app +-d conductibili.fun +-d correosprepago.bnext.es +-d crenadenuddoi-2258.vercel.app +-d cryptorectification.com +-d currently5267.weebly.com +-d currently70.weebly.com +-d currentlyatt909.weebly.com +-d d.afirkz56924.workers.dev +-d dio.azrealonce.workers.dev +-d ditgong.com +-d doc-online-1881.on.fleek.co +-d docsignauthorizationrequest.vercel.app +-d docusign.com.bestfinancebroker.com +-d duang-5dh.pages.dev +-d duvhkeq.pages.dev +-d easyaccesscommagebn.com +-d ebay8787.shop +-d ee-account-home.web.app +-d ee-service-help.web.app +-d ee-service-portal.web.app +-d eln3.vercel.app +-d enormous-orchid-howler.glitch.me +-d espaceparticulier.life +-d ets3qe9ooms8t6i8.pages.dev +-d excelorgo.com +-d falabellacom.dominiquepg.com +-d fdesq4.pages.dev +-d fdsfjiwe.com +-d fdsjfkweow.com +-d fekoulamevebouna.freewebhostmost.com +-d felomane390.wixsite.com +-d ferngos.de +-d fieg.84yr483rhfwieujro348ur84.workers.dev +-d figinstenatecom.pages.dev +-d finansfaizsizbasvurum.online +-d forested-mirage-samba.glitch.me +-d formtools.com +-d fortradesetup.hamidamnaie.workers.dev +-d free-5436781.webadorsite.com +-d frogsrus.wixsite.com +-d fshraha.pages.dev +-d fukshumx.world +-d gazruinv.web.app +-d geaoolsv.pink +-d geminiwallete.godaddysites.com +-d ghjhyu.wixsite.com +-d gimennlouin.gitbook.io +-d goldenrod-rowan-submarine.glitch.me +-d gorgeoushome67.wixsite.com +-d group11-vvip-hot-girls-combi.viplch.online +-d gruppeflorian.com +-d hanisfir.shop +-d hedayatfreedom.hedayatkhakpour.workers.dev +-d hello-world-morning.freekite.workers.dev +-d hello-world-muddy-cloud-f45b.mfoster0425.workers.dev +-d helpcaseidrecoverfeedbackbusines.d14q6u6sfg53fa.amplifyapp.com +-d heluapla.shop +-d hemanlau1.pages.dev +-d hezhouruan.552008598.workers.dev +-d hgcdhbxnf.weebly.com +-d hjrhd.top +-d hk04-123.pages.dev +-d hkmqo.top +-d home-100317.weeblysite.com +-d home-102207.weeblysite.com +-d home-107257.weeblysite.com +-d homelogin7t6sdfcgvhb.weebly.com +-d htaflytz.baby +-d htaflytz.black +-d httap.l-teiegram.com +-d httpsbellsouthnet-102649sitecom.weeblysite.com +-d hup6r.com +-d hy.fuckgwf.eu.org +-d hypophysecto.fun +-d hzuayvvl.red +-d id2.xbenihime.us.kg +-d ikergalindez.github.io +-d info-delivery-bg.com +-d info-trackingcs.cc +-d info-trackingiax.cc +-d informed.deliveryhbo.top +-d informed.deliverytcw.top +-d informed.deliveryxs.top +-d infringement-service.com +-d instagram-clone-in.vercel.app +-d interbenefitprestaciones.referidosweb.click +-d iouwerty.weebly.com +-d isnworldwide88.com +-d jaydeep8806.github.io +-d jeanandpeterwilkin.wixsite.com +-d jetconstructionsgroup.com.au +-d joeandvelma.wixsite.com +-d journey-x-pro.com +-d jsdfchkdsds.weebly.com +-d jshattkee.weebly.com +-d juliusmasih27.github.io +-d jung-sohn.de +-d katiebllair.wixstudio.com +-d katiebllair.wixstudio.io +-d kdlmo.top +-d kenzmail0.wixsite.com +-d ketura2010.github.io +-d keucroilluxibrou-2718.vercel.app +-d kuconlogin-ui.godaddysites.com +-d latam-onipojes.vercel.app +-d layanan-bntuan-resmi-dna.prbu2.my.id +-d ledger-com-updatefirmware.aparecidovisentin.com.br +-d levappoprauqueu-4688.vercel.app +-d leyoixoimmecou-5619.vercel.app +-d linkbokepviralindo009.vipp.blog +-d liveairdclazmersn.pages.dev +-d lo6-cas-projects-64947843.vercel.app +-d maatamicklogginns.gitbook.io +-d madebybmr.in +-d madhu821.github.io +-d mailupdate87.weebly.com +-d maine619.github.io +-d mainnetverify.pages.dev +-d mazulyta.pages.dev +-d megrebeikenneu-2106.vercel.app +-d mendhfjpl.weebly.com +-d metacareer.com-case37169314276.com +-d metagalaxy.pages.dev +-d metamacksiologus.godaddysites.com +-d metemrsblogin.gitbook.io +-d meyetamaskiwalt.gitbook.io +-d mianfeijiedian.lawcpacpv.workers.dev +-d milanharvestfestival.com +-d mirobitsgt.github.io +-d mocp90.pages.dev +-d mostafa2.mehdi84888.workers.dev +-d movie-firebase.vercel.app +-d mubki.hp.peraichi.com +-d my-site-104564-105934.weeblysite.com +-d myaccountsignup.net +-d navy-nose-4544.typedream.app +-d net-flix-front-end.netlify.app +-d netzero-webmail-105996.weeblysite.com +-d new-currently-1-23-24.weeblysite.com +-d newattupdatemailboxkidlyverifynow.weebly.com +-d nfty-proj5.vercel.app +-d nnbsscnaceesngsetr.com +-d occinamete.cfd +-d odovsccs.weebly.com +-d officalourtime.weebly.com +-d office36503.com +-d ohscorgza.github.io +-d okm.znt.temporary.site +-d oliver752.github.io +-d online-e-commerce10.com +-d online-e-commerce11.com +-d online-e-commerce12.com +-d online-e-commerce5.com +-d online-e-commerce7.com +-d online-e-commerce9.com +-d orange234.wixsite.com +-d orgmail.weebly.com +-d ourtime.datings-information.workers.dev +-d p.updateinfocl.top +-d p.updateinfocs.top +-d p.updateinfoga.top +-d p.updateinfojq.top +-d p.updateinfolw.top +-d p.updateinfoor.top +-d p.updateinfooy.top +-d p.updateinfoqv.top +-d p.updateinfove.top +-d p.updateinfovt.top +-d p.updateinfowu.top +-d p.updateinfoxb.top +-d p.usertracktxz.top +-d pages-108-tg-cfzz-ip.pages.dev +-d pages.tempisite.com +-d pageverifycenter.com +-d patjimmy323.wixsite.com +-d paypalloginin-usa.blogspot.com +-d paypalloginin-usa.blogspot.hr +-d pcmag.anycubic.vip +-d port01-acf.pages.dev +-d portal.chiaveggies.com +-d pruhuffopraussou-5681.vercel.app +-d pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev +-d pub-131b0401afaa4e489a4c1601b0e45bcf.r2.dev +-d pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev +-d pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev +-d pub-2801359d2be54bfd8701132626efeb73.r2.dev +-d pub-3096005ebeae423182ccd89665564d8a.r2.dev +-d pub-46a5f86348ae4aceb3591d126020999f.r2.dev +-d pub-4bd13616d08c483c8994ae6a05bd5994.r2.dev +-d pub-51f896deb233450089fc1a520e6ed957.r2.dev +-d pub-658c8f71040e4e40bd168c6d46e7b83a.r2.dev +-d pub-682ad3b65d944376b919745aae3c56d4.r2.dev +-d pub-722720be67154192a1102b2cf085d306.r2.dev +-d pub-7d056bfeb6b04852801553620fe62c0a.r2.dev +-d pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev +-d pub-873fc6a3edb941c6a17f50911dfca518.r2.dev +-d pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev +-d pub-aab4be29317b4ec296517a557db12622.r2.dev +-d pub-ba5a046c69974217b0431bca4ba43740.r2.dev +-d pub-ba65764a4dee4e76bb488ceb0920eee0.r2.dev +-d pub-c59cf4e950b142949df8861e60b3689d.r2.dev +-d pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev +-d pub-e5855431d98545b38408f52af50ab8a1.r2.dev +-d pub-ff0271d87324424a9aec83337e844a54.r2.dev +-d puertaselectricasprincipal.netlify.app +-d qaffixledger.com +-d qbstdfda.com +-d qpownthenewyhadvanceweb.weebly.com +-d raj-tiwarii.github.io +-d restrict-policy-nonadherence.vercel.app +-d reviewboss.github.io +-d rfgxg.top +-d riaayaoman.com +-d roadmap.binarydesignhub.com +-d robinhooldloegins.gitbook.io +-d rouzhda03.kambizmedia.workers.dev +-d rsjxzl.com +-d rtyuiuytgf.weebly.com +-d rubinhuud____llginnh.godaddysites.com +-d rudra-choudhary.github.io +-d s.team-s22.com +-d sadekk.com +-d sajsa.icu +-d salarahmad786.github.io +-d santanderpod.fsthosting.com +-d satinnaaoabbs.weebly.com +-d satyarthi.uk +-d scarce-army-wide.on-fleek.app +-d sdfvgbcvb668.weebly.com +-d sea.6e2efhxz.eu.org +-d secrbnsuppotyu9.weebly.com +-d secure-ledger-m-auth.webflow.io +-d server.2rk3.com +-d server.pxs7.com +-d setshinobi.vip +-d sextelegramxxx.pages.dev +-d shareorder711.weebly.com +-d shaw-101342.weeblysite.com +-d shaw-103098.weeblysite.com +-d shaw-106054.weeblysite.com +-d shaw-106665.weeblysite.com +-d shawsyncmailservercommunicationworkspace.weebly.com +-d sherman-relate-rev-baskets.trycloudflare.com +-d shobhit245.github.io +-d shopifysite.cn +-d shoptkoo.com +-d sign-in-att-108611.weebly.com +-d sign-in-att-108611.weeblysite.com +-d simxtrackredirecttszz.pages.dev +-d sjhsjjs82.weebly.com +-d skill-meta.com +-d sky-107842.weeblysite.com +-d smithjamessv328.wixsite.com +-d socx.ly +-d sparq.eu +-d spicyhotcoolsoup.s3.us-east-005.backblazeb2.com +-d spotifyl.vip +-d ssfgsfg.wixsite.com +-d sss.k999955.workers.dev +-d stonemartin1001.wixsite.com +-d stringroll.com +-d sukienffvip.doiqua-garena.io.vn +-d supportsecurity981.tempisite.com +-d talktalkserver897.weebly.com +-d tareq088.github.io +-d tbsl.by-on28.my +-d tcaconnect.ac-page.com +-d tejlksdoisd.com +-d telegcm.me +-d telegramjessica.pages.dev +-d telegrampx.com +-d telegramsexgroups.pages.dev +-d telezelm-ivee.icu +-d telgramsignal4.sg-host.com +-d telstra-102379.weeblysite.com +-d telstra-104033.weeblysite.com +-d telstra-104394.square.site +-d telstra-106968.weeblysite.com +-d test1.workersdev40050.workers.dev +-d tg-logrom.com +-d tktk.tktsk.shop +-d tokecn.im +-d tokeni-1601.vercel.app +-d towrewds.com +-d tpwalllet.com +-d trustwallet-zendesk.com +-d tuviaje10.com +-d tvjbqiyv.guru +-d twcht.twimobie.cc +-d twimobie.cc +-d uedy.pages.dev +-d ultsyncingsolana.pages.dev +-d upheldlog8.godaddysites.com +-d upholdloginorofficialsigin9.godaddysites.com +-d upholld-lligon.godaddysites.com +-d usol.shop +-d usps.com-cgkzkukp.vip +-d usps.com-trackaxd.top +-d usps.com-trackbrs.top +-d usps.com-trackdht.top +-d usps.com-trackgee.top +-d usps.com-trackhsk.top +-d usps.com-trackivo.top +-d usps.com-trackjjx.top +-d usps.com-trackmra.top +-d usps.com-trackmvz.top +-d usps.com-trackuqg.top +-d usps.com-trackvgb.top +-d usps.com-trackwbv.top +-d usps.com-trackyqb.top +-d uspsdana.com +-d uspsdant.com +-d uspsservicetrack.blogspot.co.id +-d uzomadj.shop +-d vedi.154-203-197-141.cprapid.com +-d vgmrm.top +-d vkkvdkdcmm.weebly.com +-d vl1.spaceysen.cn +-d vobroffexagru-4404.vercel.app +-d vrvtn.top +-d w1.5114559.workers.dev +-d waassistance.com +-d wallet-diagnostic.com +-d walletsecured.pages.dev +-d web-lupqrbm0k-uniswap.vercel.app +-d web.tlgrm.app +-d webmailserv3038z.wixsite.com +-d wk.xzte.eu.org +-d wodjrvrisixc.wixsite.com +-d worker-dark-queen-529e.servers5555599.workers.dev +-d worker-hidden-frost-ba39.yoveli7450.workers.dev +-d worker-site.aopages.workers.dev +-d wsa.osmqone.org.cn +-d wwwwwwsasasasasmmmsszz.vercel.app +-d x.tovip.eu.org +-d xhjxkj.cn +-d xixiajiaju.com +-d yahoomailquthorization.weebly.com +-d yungtee3.wixsite.com +-d zagbasamothega.dnsget.org +-d ziraat-kampanyasi-besbintl.xyz +-d zxl.cbbnbbc.nyc.mn +-d zzpov.top diff --git a/phishing-filter.tpl.br b/phishing-filter.tpl.br new file mode 100644 index 0000000000000000000000000000000000000000..8318794ca8fa20c72430847f47ebae2aaba0fba6 GIT binary patch literal 5509 zcmV;06?*F7D5N2xm=Ay=WSIMBZT~#~^E(-xR{>86#TT=P{IP(AvL)Pv_4lSWsuW6w zil(Ha4q0?wLh7mM{NDe6=l)t3zS7+8#a&0mnO(`Av8?nj%f6I!MEOV}FL}w52{Bg; zMQfHUIt|s9wD@tYGB$a*U&#DZyNN+B}n6Z)7^#Ao@{c|50mcRA2{qk!+CmQ$a zfB5r{o3EQs>(5{2+Uk$Eyh8A`{rvV{{n_vQ@@qf;b~L8jKl~YI-vt>N8K!?7hCgKE z9}dHR|MF`;e|8_fVEx0N@yEjR^V_Y)e%wik>B&6x00-I}u;L&7Y^@!`(y{s$K(lj7 zgm6JYf^qB*4xDJ(%3pr%M{#ZJ3c|nES1W$`wIA8g>mUAb1wrAn@b`aK-?m<#;hVYK z&-lIM^@TrRPLlp9H0Xi&FMmkzC;OA}mtXsZ*q`6fRF+C|$HHi!=1} zEf)iQp68*)B@6-pJ$eWXHjCcRdrObB6sbhNfG&9fK1q5Z>hRRd;Oum8&KrE9QiM;2 zw{VfIId&io^i%0x`DgP*CrwPq2}y;`r(WoZ#bBUtp!nr>4aFzCPDW!c4PThJO7zNQ z$3m?E0WSK|CSor+(aYabtbUXPyg`kb_FdHH91kAT$qGD-Q~##h_f>`v@(v;4EcwjD z5h##jhOm_psJ4)a@a9BFk$y<+)*qK{8VTM#kIoqT=}p9)BzFHP)E7v^JQ@p0*y#H4 zQUh;utsYD5{)C9h`gp*DSRCi{eG=}*v=bfwQZKL;=*d4&NbYbP2!Wj02W=WAhgTXP zgI^Ax2}ryZFuc^)`=O&0gbkdG%S=WwQgfVBo!UGvl17mCKIn5L{?{$wbCj&HwAziy+Hz0VT_&w~7m#SBfN5TrwnoNb@%b=DF-n+IeKLE(CDCw4W-zKe$Skl9%tb=x z9>%~HQ5mU-kZ)iG*}3PfTc6>m$Xl&lXh5)QDK1uT8<|7daZnl)sH!S`VrhQfRCV^x zr$;Su5tc|M9T5f$Q4=!4CopcXR@-?d!$2b9YgY3S{fKn;W&ewWjGs#cOYuTfEkE3T!6`arINI%HeaKp9?{=MIl)ehJ)SVJLe;_k2ph3@Ao>t z<$KC&eUCfv!+g!LKkN5;L1-*^{WU(-APsvrJAc;46nUWgBG-@-pRVJ&zMie|lk}^n z{;?o*rEl{*^Ign`E#K^qc3z!9*j_NJ&-2^zJr^OF%+fiiXNIf)#SITD>L=>Yq5aLi zT<;jG^;vW97yo>_G~!C>ID=pe?}igz8QKveTQ)X?MtdRAxR5>owuP%FX$Psq+r^ev zXZf6r)~I2j{wyjrsY%wcb+h&VPC{1dvlMSvB+F%wPplc}0m;CQwDbhii(MD&vB!wk zW>1711@hyo>D9K!KP>&e>7*|{Da_yfr1WPi-9BzpF{bXdDyeYQhj=Mz zAWEaY1l~`)T>r%D!eIPOtFu+7J)fbb`Lyy$?(_CHV)(%3VYGx##u70iCmI8(pH`$ z7Vz4cB{qx{b{Uun+!& z**0p2t*jnAJvoPYM%1WCCiZ_PH7x_JUAI>7@G&3bFvw#3GMIO2#9Qqm9T!E!MASk? zB}_%?ZF(At#j*%K7yzOoV1q&eRD7(FiB~~Rwwrd6wo&Q^Ha)w|Sgt1#VUVL8E-6iV=#W+-?Ivk%Y(KXhzZnpdA(0K;&B9jEAvRB0`lU&T^E!pxFu+TNQ z@evxe0X>i5I37nuv-RMy&^QR@cBxhV#UBMzc5A^=ls&ebXB zza5X>bKxx3uc+uToUQKTFNCY8AGcqauhb5>=N=&9iTh3npb?v*3-y+3i;9}TdJQ>3 zLcR=Y#OAQ1HMfg*LH4*(C7vP_FPpnO_D{)Ns9uzKwsn5>sWwc|kTeMaAT)ouI`D7x zuZDW|(xaZ$T`rMayCu;VSY7@GQ9}pd_9`PS=U_xbgfmiL51KBwe$Wk~w-6Kfp#iM0 z6DjyKtBLnc8f-52?p?`iE#0+r=jv8q18VGjuUn6ILn7GJ$64Vm-KSH?^c4Z!C8yFC zD|R%|ibY7*Y{A;;UnR-qx_!2%bqt6| zSaJpDno+(_(|SA8$Ej{_YT%+^!5QBK8yF6822%${L` z>jx@>KH`t@i(hh5 zwP6_qlVyt!0~Nh37<**_PPU85JE3+I->Fa4t&%&S5RcG7|D8(cwPWaT1aK1}1?Z!M z7#qIZtk^mvD&@*TW4S1dJgvrV`c6*yXSYw;tW~LR`w$+LS-iPzkKYV-N{%?|Fz_*? zK_QefHYl2z#Hg~LbDOGlW<58J@T3MVJnf~Ca!Ddsnm;k$y}iK|FNH#j#$FV&BGxWW2zUkL{^wTAueiZEuI?JOeE_R^NrU zjNTfP-+V;cE8UCR{f=dY5G1Vg2D>soxlGpERzE~*Xv||V^q8r(XYJd89`5^WiD+qM ziB0#SJYQKe*N%6+gGCKolVKBG6@IuG&=KJncC70yBz723x-Np70%^^RGO*Gm8;B}` zDpUOnPd@hxOM67X@HGuZSOJMEm7{;)S=DHw)G%?=`9VmK>|#yp%ZJ@ZVh{RYTb|IW zasmK@LVxx-BP4rbh){e|?j_+vZbw4R0NHi5?Y7$b==D=KXl+N#^Q{NpYlP}IHj_}& z(@JXI(%krK?9e>w5WttP(s}@p%0_k@q6C;brZ?IppNMTcwq9UWQi4iP?$}MqK7@XI zU2-RE9u3yi-c3&9_t2#Kxu#128bp$lKk^4_6?%ZDw>}losdY%CV2z&G1oSAnGa4W2 z#}f~WXIk+KNPG@=e1oNv*QanmLE~*ceZ|zg;W$uA7N2k&`6$qL8*56$q-f~HfKT>! z_A#Q#oyciipgQ@q>%8M}`Z9Ev=V5p^{c+GGEppe56Tug20=yARO`6mZ@*HT zkAlq;WXlx-+!&eIAckHZyw4%8y^0)e2B*hTyGL%u7!jXpMBS~Ux(%X@hvd+IJX({( zYk-qqUp+$x)686K*n<2}Zq3wX2n2l0?*LF<8-1bW`r!bLnjwld4FsauL*7g)qQk(4VE zA%&o47ZkRbnP}c1MN=;Lo0xQ)5=_?ip(kv1?_qMG#_#)DmT4s6MOLU!0vQS8go&^* zXvjRIIz{Ju_clD^wo%I0ShJFA&y=et+wIL$(zTid2C=5KViWbYY>ZDZf-GvB^>u0U zS&ccSlN-iQLddtV6du!Wy0~@R_j0$JoBYjf?Z}eOM$D(!`Ez96Wvt*IT z>Kefj9xIj@hiv4#&*6B^*v#bpIh#*f(D=V=#*v~!<+7TASQ8S0L$neVga970i4Z+# z=R>f#2@KDAVsJINxnZ4cbhNxQ?#zB#` z664;N_~TeZJmerD>>_iBa7L=$yta>z@!^bjr**({oSu@eXre`W1u1xI>ycZi$X4!O z)I?Y*q{npaP5*$JxEe+R#ucBSDUW3~4=1jxKh!&q(zouMe2>&By)R0QKi1JT8HD1K zL#;<=#N-SJP=+yyZng}#qJ?GnU)VJn`KSjmjNkwS3blYR<1~zVKq0kpQ35*KSute+ z%p{!Qp!gyN5Q9~E7;O&E!A6Y;f?4s{i*7*0wd8!#3mCo(16;VWTLx&cOrsRqSv3#i z$l1gubf{;(y>mV+(=bTX2q+jI6*I=FWtzAbyR<5YPb4OgPEA}WKmi6dm&<5JHVtgx zWk~NnlC~qC#>o!K2*r(B76CZHAhnh5ti(&o(Wzy!s2S%%4uk8GGb2bg;DmOOvkUAb zl~HaU2Qi>PF=#tZ%1l;FIBUhh1ynJxTu;(2LhyOg%ec%!0w6bXvIPq4%-GBZjnh0z zF)j?oabTJmHz;ZOFm1132RUhndeVbXvMczK~>TyFk)dKQH*xhg9FPX z=QF^xxEzA2X70=c9Ial&XeJnECx>Mmtur9UaT8QfBY@D_DXzq%6{v+RN?NJ4;V@kS z2cU&Uw(xP*0u5UxInE&EZ1u<{#$4bvNEpOqre&E08)rQTK57F(gW$6mq6Bl2^CUo6 zM1k|9wNT2S9u_trqI)YwF2)I5Kth3;!ANew+WfES`#?^y$uS6*NQQ$+G zzo2+8`(fQYT)b&CnaL?9up1Tx)ACrhrH-h2`0gbdwwzc`emqA5CY+nTqhFA+1Q7bJ^k5sB#q zP-7sPvMLHJ7VDd_vh$eeeYxYVGjBw~feg|TU;S=KO=|)1zHh0G+!SPPHk`+?SjGky z7blcpG{n{9!=kS4G)SRjnxt8uWK>a7Nzh!Wl z8B}|&Pj$83{-bn(YKAV+_IjWDOJ%~v$<(_{>(q1d@1$^n>Wvv z8#S9(#LZSY?Uj&-IkD^_NPdR^FY2i~@yN})CyYMV)veX7nVPlIot9r;!tqFyCd~8Z z<1mb|c|$jWyRG`ZqrQ7g&Yk|CHv4Y}vVz$*O?{?k7ZN%t&awyL+q0-q!v?A~{3K&; zmui7yu0w-@-$AKYX}SigACePOG`8ZZW`H@agCU>nZaxh^VXrp(YP~Z7R};-KY@)jQ zV6EN&IV`}=$DM$qK&*HpqSMq!i{6hc@h9Q|)Myx@fo=ExgP?UKoAIyzV%1iFpAu?b zssim^41B}tts!3oqp|99_tV0E$u_KQ92WieEyXa%VVG35m4v*O9Aj4QZKrK-bvMD_ zIsCIGQ6D|@}G#Uvc{GwYG&Bi^ucqNXg)GTmZHD+uc}VKIqI#S`TZ|2Dq{I3^;>WRjxeQJSN_v-H*sL?uUZD@K7jpZDC H-y=^u@_y3z literal 0 HcmV?d00001 diff --git a/phishing-filter.tpl.gz b/phishing-filter.tpl.gz new file mode 100644 index 0000000000000000000000000000000000000000..688446795e77d135b8a87a1ca2771e881d610261 GIT binary patch literal 5706 zcmV-Q7PaXgiwFP!000021D#q;uj@E+-OsOhz-%T!q}I2k2C@k}nEAju}1fM1em zQKC#zlI35YL&^5NmVG;e+JZvreJMufP23U;hr>{%hpK3I6-9BucU%PJ*cT&nWsmiGPox{|5c9 z*HIc_fBzN#;$;2xmuc(&t2W{?iGi)2$G_-ajHJPAt#hOO{kPv5OipOXbpKmV)Iy91 z>P@)c#=AWCZ;bvo$;4p)KZF0Q_Mu?%A9^y(i>XI3Y~B3$zyAeZ?R4iQ9czVBozcyW z{Ps{x_)o+UO2Fm!$725>{?niT6!2g1FbnHKDjP}$N69U8dh~=OkK-bXvyd_WnHD+z z3}UfsBf?_4IS*Od+Tzqy!wYnA6kmZnum78%~iV`NoTH4A6C%}T-* zKOw8P5B!8nE0w7IVz29MYh_GNgR?;|nbB6)4w8h65LB%Xo{v6ZRM*g-?_j5K)W&U8 z$;qHu+mQfjS#8+ujHRIi4Vcn{2rPl(CKJvAI#(eXckwz(jD!~EB<#UW+(?m@L%3+u z3G-YjQA7@0^kOm^M0vH+iKlEzTuB-0@V;+S@2ye{b7IK)sx+dMXiTJ(?uZ)1DNj#H zHbS8LQj}^T2I-&NdvepmeGzmG?8N054#Fu}ug_)l{WMF~Z*uPqs|lqc7`Rel0`z}d z)8L>tZLLJ(Bxll#fy;g*s}QD6)9|(qqGQa>Pf?&h(ik!gawX=l+;J2{1+$ilI0=DA z4MSf8Y3+o?ANwj1NPagiG8!4ic@`v58pPEph_g6kqama3a-Z6Gt7b-U90+1~D0*yM z$0ZmOsD^4Z`h)T4Z+U$dQhzb9trF{KG_(OTI&PtLFfY#_a7NaUj+P}!=$oFM3*snF ztJB>+Uzlvf1ZV6=;^~wZ_$SMwGPIWoULy3JzB-g(@Z;#R$m37LdLoq76 zIkxo=dsJCo{m{b-0~2Fn>v}w%o-Ugqkb_@kbSi&fvXWNor#MmZgR1bGUr-k3pXqX7 z+dkw!EZ9$=2Ze)ucN}{Jc$XUc3r0~=WuF=CO!lPT@@D=N3VDFNa5; zqa2fK1KVO-M=b{z5c}q)@ad#otrPvzU(=Z8qRM!XCwU!YjIf|AL=vP0VRghg<)>2+ zML{pbjWz6?O=BN+(sUsvQqnyf0Zntp*pq9TE2X}DEz9!!B6Vkk6slgjVLIQ&S+9MP zUE93q5<;mlr&KPqmvhofE}AYqxn=AJSIAI~wGC_41=}xo*MDbNXUs0QtS9qj)=kmn z<1!;ihIYx^uuT*gwuJ90VcQ77kYR(7~umib~XbG|gU@v731UD(*I z&E;qD7$=fm7|cuMEV;G(bZ%B=@=??mkpcw_X|asUa*;{Xp9gxQ#q=|`+Dz@~bV|GI zG;(v%a&+@DB}BD1!WyYhH>a;B1Mzd6*EO-TCO>m)#mF;z?&*1?@|s*y+QEWxHfT!Z zlAbS9&a!0~##v=aBCbvp;uAMo2Skl6Ih+eBJXUb&(?Er*(sKR&nU`Ot-40F7)7N-R z6=5AGcKg?cw%ySZRn|9ShcV+}gps@vLACJl+*_=EBm*Oz2+cI?^obfV^;6#q&b17( z9H{FcxMh>&Zhe3=YV~c#riGGC+xHeq(&CdJ-DpMm(RWgJuG@oqp%Y>}9F)ELLg2~K zFDPV)(7Sq4k8fxYF1LZIyL-%LX_TCzn8VpH9%Qjd11b^{BvqP- zoMe&Ux%WM36fMF`=l0?dO@Tn_gY#j;Lj?d&?t0f z1uC0(t$aX!NZSG_0z|lQ4-3yWs}&?SdKL%HEpcG@@DM=ztV_xygr^_n_pN2E#x&#o zL@-%99CZRBlR*p_1BIKOHDJtyDQGY%=}wH)9y1vMJeKc|}r0C>*ZS1aSw+;-yf+9-%! z;m=@}7~F$GpE?zktmUaZJ$<?M0;0*_vwfdrIod94Qa_?B~xeH zslWP36!$F+4&)?<`MZHNf_PEqr^9cA-{jpRim=g~aK459=W?3%+^*A6hDIWwP_yz6PYg=WCZ5GmU_yFlB^`2aA>r(!ygs&uc36Ve2MOYZ4L!8d^F@+l{4HTM`0bQ)#`2`C3Jml@JM`babyft;E-}Q=Bp&O)m**zvl^jiPvMgytGoo> zaeRqpFQZxdPPSpl+c=T!0}yi%a27H2BN zaqqUF5_{7S z(Yvu{ZXxxA3;>zV>-I}KY{zhsT$JUb^-NYS#8{S5@v6zQAn^ZugzqzpRM61T5uJqt zZnMsK#)J zh(6gKP`FJ_2k|EW8>`#l9v3@cB@9&rUhl1>^qIIb>bUBkyWff7<||!qLAXOeGbD-P z=v9nPOw4Gh)O3}AUQ>{q;v-n?Ca7^cyTK$s#u-H%tV0iS)MvE54p(s1*r|XH4n7Py zlkH`|0VPI5rzGsxP;O^Q3FOdb%L(?{90EY^uT8)Re>2$8EG_I)-a(_;N6nZ=1N2XT zI};Lt@+iL&tCm+Sk$eO41$hxy#~z5N6u5Jo0TukQ)e$f>V$}%Oqno|UETDdl1nSnq z^A4|GROuo>IPm6jhQqJ{oKJQtvm+$ziB}a40@y;KgFQsx9^iwnv`5-M+`rqYOybvF z^IN>@s63_!APvH=@Hk+ASKKn3!|g*)ZWEmB0h07^uYw9VGK_;jJ3m5712^?5uN zetV=-4Ewc%c&`+Zp5mfP<19H9-+RGBlIu|#wD-R3A~iGwhx*Cf&`I>h(#awwAk+<29hE%MPKNCmj=~U$B;qN=8hDj#HwQ)LE9X`E zsbJl&k9#uYTGMt*^f@e9Bez%SSI0o_bKCh3UwUXBWI2Hi`TYbFuz~@aE zASXc|wfn02RC^!95%uVLNqX!I6;PkC|}uxHj=VWjtqg1df9@kWY&CM7?T@*gRu zA1TiZV5|WUAxYn=L|FTWE1-w^u%mz$HrV0EUhFs=f-&4T-gjZ@5zSs&?Wfj;d}=*k zKDDalQ>!)~Th~vmm-$ocEIzinPp!-Jsr5>~wE}!?h|gW0_w;+kEsn~-H36${w?K}s zerEr8D-inT{roWDG1^zVJ0l#fDUyN1R*qyHkx_cj>f^m7TLiSDc7H>Ub_>ZP>q!%m zVPzAQ&uf2QF^S@Uu=*hSUP*y(BeOtE{BrZ7ncAtYx7cp&7P*mZzaI8+qCu3EX;BMG zi;D=20y!VVJ9IzsQ<;>U z5LRS0OG%klSwymkmo$p`k$VzTAxM_+47}?|lqt>Aw4fDXX%$7}*uC_3mK9H^$TM2= z@)X5!niNR^=uA)Pp?extMHJ`r-{7IDF&l0m1etg4KNf`RTks7_*Can6~{;*NFE<;hLkZ(kgwTwN1c>THGr^Lo$m0{q^Ao4o+9Wx2rz9s)Rj?P^4pEw9S(1^82v(-pB~fM>$zN>-eindB0j(PZdpjckWfGq4h;%Ll0sp#ZClA+j zq1N%5KX0Tiqh9~Ae{jKGRUYs9K63M+sPobS}U%!@HN*1 zZboK!YdHbp=}1o{G9cjRV-Pp?e7!wkG7|hrPOEE4)QH7wE|CIVsr&V3Oh)I+dej@K0-Ds|IBSGj!PAwLzWL+aLgI5!@5!KJeErzG7S}pym7Wgz>l4iRsd> zQCrh^wWqHp=N}R3y+FIST%Ax`jqQ59zDDfrU5fS>YNt3piqw*2dxw*KdbD(>B8rti zQ;R6i{(xE(`43dP4$Q;QeSsdmPQ(3j&0Fer(efs)03!882?Z>Me`feU+d&t?pJJSL6oF@Z<#3hU(PQ@@(DU&)bA>cpWfHmA{qZt6!m(ui z{VL{hNYB_O*!rs}Jc#4#8iYP0)V3_yZLR zCfnPT)2D}mUmddO<6FaT9e}KluNl9nMfLIR3j&6VA0~lyWU#a7Xd=j)kfRv=yfAQ` z>q7ixyXWLDEr69AOoKl90IV@ixCTdMkzP?8#pDtG-4*}?(Y~@f5ii(WP?opV;6|=)aztNyO#o+?$%A+_&DiL!sgM) z^?6bCN}$GmCh*pMCNx5PCbZa!j|4gE&xG^&`kBxh@&jSMeI`to<}(49;4@*N^Jl_( zc^Sd|mOoX$eY@}9_xqe}==XH~UU;8wK#KhQ+^`w3<^OtpJvY7SA2Q5cH}j6OzCU=t zS;gTNc2_HgdtjV3^;RaXq%l*FWzq2=+-znyJXkMrn8$IJ=WnmK7DC|itn*O&G2i{v z0h>01$8qeHu;V5EdOCoY0yT{nL;I);fEerooct=1hw=_yu>aQZKpJV3mbYWfS-S9g z!{-;0TQonL*&u*i*<0`Z)fy+J3oeroLy#vGT;LX0Z0>)m_x10CTFE&E)CTJXc1f#n z)w56%sdDtgkZo$BcP$*d05ogcUl38fUX#&%9WopxiErFJk8uMVr9`j@TDtz=2T;m|<$@3QN;!>En%ya-A)W%d z_fgTB^xF-lwh7*xF{fpSjiFUjYfcRZ85tSWKM%w2Z2Wx~{`2+QufO{qp#^Izk2I)z=FU3T3b7&plt~)f?-|R4)KD5gu2AfK@3gneEs%I zNloes)IT1Vj@NI$^_~A;5{w*}%_Rzh? zbYgAPgvCH=1|Hh-@nUiul^6xJ_QjRtN{$883Q4*j=3gz79L7>9Mw&W#B!SEAh)f{jrT%`7Gv7NC-&LxOd3+yBnRvL&9!|Cg zhs(yNb{%_aD$sEFN`2hO187`YePVu;}&uzb! zbP8-I2yyjEEG(FV$%j49{bBL*L>bScNbk&XCH8#o@0N|R+j=A+7L~4WRqQS_G={W2 zU3i-j0f_g>K?$w2CIE0J8KV4dJrF5K8FoxfT3a@nIiT^1`JU3{HOswfsEdPlRLirQF1h*iWFL%86nt>jW zENnZ&xyltVu_LouUt#YL?b3RIIwq;Cv z`&Atnrq`-U)T*rTV!=SXLY?RGm$`g@@7L9&{Y$HN)g<^?YFkJPS8_9nLt^>BreSo1 zE9;0DkrRUq2%9-W31UDewS+$(h6_u7ub;+@MW4#Qatj7{yR}h!=l-%7vD~yeS{@dY zAT@m1(_uYv3KYWdpH7aFzc(GZWKyx2&n`nVt*0X&v=B4TONT2%=*ru@^+XTffm&Zk zL3E_SH;@bNgtV3W@OvzpJfyFDg^)-qjcR6+xMa=oEMDh2u~OR#ja)E)F?ukVW;8~9 zJPee@uDKwM7kyqf_+~>2DQv2Q8lF%9S_0WXi4n~UN`6D7Hhu;TC#GO?j6%2%4!SAh z)Oyd(K&OTPdy|^Xu2FxbvjzxETv*34WqL(oD*xG9%>%97v{vv4dp^ctklV1!X`HK( zu<9q$an?jAqGvK{;Yrb$$YUrD%PhF~LiURyHYg-Qm1kQ)O1kCbx@{*Bo29;|*Qr+~ zay=7HW69KnV~r`+mo1pUVe0enL5xX#47S`y%LQ#C9O>Y_;01N#Et#4Klr!f)4G(po zwRxD|gF6a7l_;YDwnPNCPDZUqniKUAaiccpgI@&3 z-^?XEoxsR%uG+e4xNLh_sFTqUm&VWJNPE%J(g$`(3z2RWn6-)wGt_~nzX&j8*sVY55$+e)Y5~XdcLj&Rv_Hkx4QQITluDB)? zj(8yr-F>bN%OIHCu=KD{F}Q-Tn~ZJA3s~$8b))#GuBu-o_dsDk;?}l1(z9!0>~KU_ z`wl5WABS6C@mW~I(jiePvE*Lltf}x=tXs`DdF`5B-(__kl(udIHYWITnRVMgxxgiP z$G(SwkD)Vt8!g5L>4{0i3xiHgRp;$;u7dS6OrtPD!=iYLg%*S@)Y}WERA35edJ@kE83QgIB5i*+c0YW2Kln z08F4sh(GKRa=);&dl>al(>wuiI;M59_J$j6ey!Gn;*|Z3kRUk(eK}W%TL9du-q-+R zrD_Ps{W&P~*E=I5cVgUO!=l_v!kc`3Uy=%SBKHcU_^i4KX87kD=EcYFODs zZBb7Psd-I?rCA%afF?!=1%;S^+`^Dwn~VEE8XKku4RJABmJM4kup7wP@L#%NwpAezJPI3xIeq-HOi*R%QXo*R!Lm~z19*9dok77Eb z`%Qy;#oZH1@n#8HgKKI5V7+4s2Nbly=yH~gp{iNf*lb><~DnwAtk(h?V6240wYJ5F}3z=Q#*u& zy%CF>DPi-$1!&k~ho{H8LGoXSOF@HS!<4WSHV%qvPfTw0?<2O_i46`!4N1`TO(LI0 zHSP}S7GXw?Gqq*4DW!> z9D7H&>;d*T?NGrUBBT`pmUjY?R<%&_joED-D(?)gnRj>s-o0`Y8h=HjXS-v3~RC3Rq)y><>ZA}LoS zLJC0_TH~(Z`OqHNpR|wROLlG55=;(-))Kazf8)r724`(`p4D>+FA^246B!BPgo%O) zXdo)oS7!2e3ohPLSC#T5GG_Aao*Pq1=4?MDQ>#s25o=m1Hp6Ji)`kSK5SUu;UfJcd zTKlkik}CpFLCn3F;M|XbnI=APKV`jyv?Z4Z`q!Sfoj$3F_*yQY&j9_nlBrkKBw27G zyrD$R_R`14A!+wxw`aT^YzE}R?U>G;(Uv(6#&rn2=CbJ9<+dS~+IS@tnuy54xQ!pQ z4+m&_=aN@FrCDeYDzIN}4V60XucMm-d*U=3bgyzbl zF{8Iac?$xxWlW-<90RUtVfmbh-H?%wW)Q;&9zdYbGYC7XVKf5@X{-+)^5iDXv;(k8 zc*{ZaSqvZsr_C_Bv_FE41`z~v;_0vS18Qz0=gQ1r`8*7;Gi}ugVRp=*6vjI}4dcj} zVhTN)iEn$)hgl7SM1z2W@li8tot~9463^{)+D9c6NUs$a8c={m!{t1>k*R?V24wMc zSjLT9jmiz$3eByaX91{Skj6=O3$a-_dOa(LhH)yU(zfjGyo$EvYC&Q z5op=0_-HH$1AlIJq~Tf&+Disr4q!BlZV$a5*fcslaV7*4Faui6-`0v+2#}{PEDdhPM7{(I z6%8hG2n8STK71K(Tu{nBrZ(ptcxXqyj1k#{*S*4fKoWD(o?|WWCM{f0LZG7{!;LG! zHXD9%$_d{z$VK1Jp zIITHH7c(l>1cq^&CHH4_FmSrTZo&iP5nnQ;zP}HD=v~^~L%-Xiz2K$iQQW)xzyJHc z|BI2ApU%q7`j+kr5WD8?Rz}0I1BJ=JPAX#%x>azvZU5@;3dWpZ6(ST^cW{$d@d0At zmmHQOJL+rGNy?A~R%w3y1dzcPo@uWtv>QrW1MSg@vu6Ehgb%`e=8bqhxI_NTfKv6E!!e{{T~lRpD3+a$T%! zJP!I@bA0Q>8hj|4HE;Y?t%m?=c{}Xi@0S#!$sAEx)zdf@LSNxR14I;z9)2WznDrx4 zgA|fVNu%D$@?xYiz`P}TGE2btLfy7Y8FehX^!q^(8j^x1x$iyGtH!JVbMfNdKq}3VsHy52l$K zskuo`Ow;{-H4E5H4J>&fu{VJ4xK)=!b$+Rci{16!@)WA`##)2b0mw(^IKJ_01@?+x zmDjXt@G;M4nuHT^snQ$92w=(T83nBiSq&s@yIETSdw9fYc7&LZ7|=$}t(wmQ#^m^# zkDATwxrVikUEB7stQZD4bai=KNX$#gdz|vEZM1EzZYplPVC=L_H0=LrDG+{Fpj4N) ze3htM=6O4;7Kw92O#wb6EkJ)3|E zSmFPwj!uK3_1Kmgkn3u4gw&C|A8^)wVqP>cGW)US<7P;?2+2l(SS?O7GDldq=tzuV z$tg@n&9S-kUJvh5VwdgN`gY8^_HSH5;_%h-yX;b?R4KPMsRdDLt(#Ohv()?jmD~%o zbUsr3vq+tbk-E$|$NdSL#F;Nih%w~85#4jwR6Cnn?OZqHlOD`Yh8mSydAtjK*b^+8H zE>u2hKj~CRxd2PzQl_*=2!Al88^M3gg@(j_e2UqJjr0`i1xF!(+03=Ll-)-rx6AT@ z>u0&{d2RIjG~`p7a%J}}X9+cYZCI=VBcOAIfYJ+yWHZuLnOFH^T60B7EP^=)E!&y3 zc?S4Q?|fnmlUQwN9LzNixyE9c>sO$;?w_2rT$Zj-t{;gCkH)_5mH0Ya1I9Cu9$H1q zcYS}ick~9|@D1<|@a`L;DdAzN55Pbe2Lri#S{kDMqU3?aK!yGC^Gg??F4YBFZUpC| zlMT=x4WR~Nu$qus1kUX5^NrLRlZ>%6-Ing@^*l$O5V1e};p!gng8h{;G5#HX_^d`R z1jCQhgAvFr(|(dx7*Luyr?j7M$gllRAja1p{=hmyD^~t=G;hB0_dz)OMaKmrPAm+0kX} z-v6guVg=9b@J-No{|I%xkGmWk#5@jy>4$H^y4}rUoH>{PgGu}j)1lt;XTkAkyp2>E z+|QveHG68{5yb>1?$6+7940x=KXx93);|J9KL}K0l;cDMlY)S8K>PrR+T#EwrIbY| zI}2<}_nu-KZoh#ai>3XZv!ptZ-TwZHo)|Ce2t)B*@Rklc!i!lr?3vAM9Qp!O z2t-K&ii-L1K7zX4&{h2=V#4>`eiu?wDwRrQo=ou%KmJ)dCI0&HzglTqIW#~1<$wRv zkN>7L>y)(a>mPpn%gBin{I4HLlw?7i1X1zNQS?_5{}o05iuV8U7^M;RuOIObPSzj) zdD{B_sExQ!VqoikL7)Grdohv*)3nZw_OHvO!K{RaO!t?bsD&62)KWQNF5^p(*E>f4 zlVoDB|B=D}sP>^?@_+PXm={xzV%WO*@&EM)c(v1umvpQZN_9pzPjdOzNci80Bb0zk zJj}wnkjjRV!BO%IogTlEJdTSj&O*k%(jv$2AQtO6`qw(Dw#RE8#c}TYlu7D!VZ;6Z zT+Clpo)=k~Rv}qr_$1qas;X)h&T{-B;fkM-)n5cZ;nGSaYQKQT`urk{>1l8_=p{4S z>e^w_a1ny4b>s8hA&lx8+VHJ*8b@v17m=I{nzbDXu)@`b9r#H@2O2P?2N75T1xzNK z1$3uEGD4V+5+kv~ISG3(5l>R2i(X7dqeVWfbYd4qi3cfT9lq2q zHAqqnb7IJPPzX^?TRw_(@o@dzy2eoKxB`A}eNiPO2`;n|dm^w|v=Q@avF*oni zLp`K1WE$j3%yC)cD2NJXEfsMR5{??ixCYYN35z^+R3ebvn+6$;4C6ctk|+)0>KepZ z9J0}n(YO2QjJH5$1c$8>!$Z+yJ321Gk3a=fgXnE`>uh;_6H>p1+E$5mG#aahHJoWFj7uh$@of?kLxYuGKD#y;$%=|W7Qq}z@wO>@TB&M(cCQs0lu zvh0tf?u?K^)k`-_x92$PwNJ7~n-^U|C^hDq%7ylFPI}2j)1_CpjQ!vW8OpJ?VXeAg zd+^@&#jVbmU7lG_=KHLhqRYo+hEo>#!Um?F%bY#=qt>opnqkg_n@N`anOl=cIwtuu zc|O;BqV7+Xt9dke&FQ!d$@9KGI!!6-+HuITrWh9a;>H(2L+n`RS;3u2lHKMc@0k-f zQwY{K>Xr?yeVE1yu~OIbDN%IpTrnldm<+Ud+&>GpabsQ8`PVEx+EHm6?1L^OoY?KJ4Q&f}L6!A1Y#{g_`x?m`5mXBwZ@tA5M=~(d ziO@^~8YgPR)K7gcIM*`BasZU0fR;^`yLCe_)avJq-3TR{zUb!6)8fs;Z4E{F?$xNf z)$P$0&@FVG8oU<1{4J{+<%O0H4N z;Sv}RvRI@66$uHFDosRAvPkgUdx$iO7Gb7adv^$0i01XtMKI!nFK`=MHKq_sm^HLJ z$O1ad;MgBW)v!9)0YR`SJ3z>MtRb9ok{6h{I>7~2qa`Y{tV(~U%S98pEu#j@^00NR zHh~d>19d%Qun-`M(3uq&X5zK-;ck}5=1ILS4%;bvJtDB> zANwyJFuDM{C;@Uez!k<-8DvFJR$!E!P!#^*u&j~c!c=%IAK)4vD?F=SKUY^*Pb#&MjaQZ3qCc^}7 zgHvms6xWk*-woI3BN+j@imGE14@r%P`OJ$d$xfQ{F`Yb(@TifA-00b0rt#! zdoUJ0&21;{2Z|teg-3y1VN4G)-Ss6XS<7pA-TkEy!OQIgEz-`=J8CZm=r7n3cz^VX z?vo;-ezm9}JuXBH+Vpy|fi|p_9PAhPlCV)eZw!0!CG1ETOaMTKO-O4DB18?cv*}$_ zTKBdDtT=iC@c?senjL`ENSr7VP~tVkHGr0cHphJ@YA)cLN})7ylrq-)>tI`Gl*%VVx&4_1`|NhW%p{NBW99%4eKN zXbvhxd+)SXJ7mP0GdNII0Q`n60b(QlK;+qe{aS-OON(piV-+P_n_r7Va&OIaPJn9L z8q$)Z&{JpIsegFJihngYDw7=MpSIBm;-#8*kJ<>oSGyAuVWTH$COX&@74+H+KL7ONIxp5AJHjWf!4^J(I?HL;*RV@rqAbaOA2c$!c*)@@5%x?C zi74<9P=*H?A&;|rF%`CM^0X!)fdfa*icQ*ACDcSlMZQ-BgGX?S4_n=eXNx7l1%-K@ zL{XVnV@`si8Pn`!xmp4u+*b+IFkYrFog_eN}z&&SgEEp2`^B}w$BrfZUa zY*HF$?dl5T_pF&)dXmeLTCMIGQbO0mn@5y*bz}@x;E)hC=2b!2s%qZtSPf6U=Z{F{ zD?g<_$-fIQjm7S@+ZDl&b7#vxmct==vQbUXobnt3Lg!?j%p}0NJlFSf{9^8@+qm00d0K2)I^X zT=HII$HG!ifUdydhb@$L*v`m;e6%b#(v7TKh_NiA;-ICQAaJdGgwrvLRM5f68{C8g zQnAi>tb&KlJ8V&yOkX#R!F(2~C+9&p3WHdKhsV7;#hY2%am!En{tdalbDcO9AZ`eI zlkEZT+T?nabV7W$x*dE_>3|e4LJ|0ya|Pma3&wX`_4_7vVtD#W$T?(n2ndEGQ5+p6 z?Zm{4mP$LfU0puF!g6jM}ULy`ySK`dz=__}Ty-AiI{?2?6!Qs|0onZqV9bkFl#qV5TeWkwy;wrJc$oK5U2IwOtYA z3Dtr=2)~k3*8z@b!{5iUa8I5S+}SZu_i$tasXXjrfW{J}s3(cVz}xyZo~n6006xPO z?C8@kTcp>xsM0t~uEozT@Jr-znjXa7XXa8v0dQb%CW9WLHQTt4>HNTja801|O@`PTzwfHNVXs;aU7O9SDp5(B%y6eN| z;I{N$8{%sjzBaD6$aT$=W7j=#+p_82OAhzAv3;Y*f1oFy>G@~!^)q?D0E4UurAd0O zA7FLA*V@1Jg1tfTwZR^p_w@K^vtzjLpKoVs3l1leeIqsGjdZ)ek<{`=(&nACzLD

`qev^PZHh|+E`*q`9UWubJa81DK=QEJw;iT_R=h}~_?Uv1i$0jeL zyCIOQDUj=NM@F)aNMyVN^KsFVEq2&ZyMM2_HD4n`ULKNRWfPVA?WIquqZm1PeUx&~ zwBb(3ED%aw?sGI#JJt0T0Il6398$Q$p&KU}M94*pT2LC-EGue8GE%Z6$whtT2}#S) zB>Nob8>caivM7e{Bbms`iexM}g&U%nB<68aL`mc?k57FmkJBP9cvLc| zkCj!G5mAsRryNc+JNC`v8Z#o6Cuy4H$cL($#RQp=CAF77FP+0k(1Db z)yU3xiV%P7%cH!YP-TIwE_1K$JWq=xszs5o^InuWD+$ZMFc(?OuQaL&Pq1}YLW-(B z@hz`u%?gqt+pMw}Pw}tIj$@43x*t{e;_N62zQC6^`f~pb>h%#6-Or8>`FpJK8i~L$-Btxc< z3Fwz1%)>0A3R@?{sV~bbR%fEhBMQt@WfiZ>vWP_y(X=Qle(Wn^k@1LTFhUL+M98Hz z!aj_ttje06rd z(r00ZxMRpIa6o59%0mqG`5R_+-}m=}9sq3x-~~J3BqM;J7OL&>Zr{|+quIQ+kpww| zFSqS;X~KJ?;uKiHAhq)d>Gc`Pm&bEMtF_`v3tv<_f<>e;&z2M5gO2o60>%S0p2DKB zx5snGhR7=?IjycaRW8ir`A-x7zxYwg8tXt9JVjS1Gi~- zT}gP`+UnY8`2--D&wP<23;dbkek`(Z`{5$XwwkumC0Ty7gjSC@y1Nv^_UbylmjS-N zwD|rE2WdGPOlmAY}->*3Pd>++)Ywhi3%jCqilS&0X#e2Q3z5-W%*nl33 zxB=o@JEuu`0#8=6N2t~>D9qepXn26rXtiU$TI|a&HU*>$1hFpgmswjO6X`gj?alzk z2(_r)ZfxD)_dEj}Oo#AZ<>xY~b$UQ51L!=&Q52uYIA6vx`t@~$ojNIoy2cbC*YZA* zpdtRI3i}ey*o*!1u~FDD7TP9gzb{A71htXvF8uoTvCyy9EPDUa=+FuXdHRIuS5r~F zU$Mjay7+rrA#w&2iB8)L%n!J2^j^Ako$EsU&vtux+v!fQA(Z|0G|0eX-D8w;dNE?* zyNh?Dzp+r_wO}(@_qs=YBJ~z_cj|7MCAod4j&8ouyIkk6nGE!|uomgeB73+x;ft@w z=SlEm^<+}cyBVL;X+?(PCQf53e7I}M_dtZUEfgY7X|pBBk|^tMo2ox_RyzOaul_XMvzxkcJ8?g$oBJS-y~2N{Qe!_*dFwt<8zDYWTd4M(DrfzHdb>S7 zPU3{DP!T3SP!~FXpsx2{eYxMcU6tF5`}y)JkZ&W7Iis(IPESA|e%n<) z!z=&oSB`Vjn|_;d?z)+Gob~ZJ=GPdvXc%A)zr%m%La!Os2mFH|@&U2va-7=k>h;A1wA zY;*rp{kF(`L@PN*@7iEph}mfsu6h7^{`CuD(H$T(HJ4|_ZQo?56yHzYM{mRBK?1!!3b)A;{kOpS+U&4)x0-U2!BcWPG`L5NT{on z(D%k6UFCHw-Wz5k;_;{Auoiw9%cZEk38WVO3nqWPeF1LE>x|vcnIYrs3RgoSqo&QKe;f0#KObhVeJRyHdDJWi(xO@ fXVW{HycCS2QqZS+KHVc}_7(g;sEvhFe=-07aw*J= literal 0 HcmV?d00001